@camstack/server 1.2.687 → 1.2.689

package/dist/manual-boot.js

@@ -62,6 +62,8 @@ const addon_pages_service_1 = require("./core/addon-pages/addon-pages.service");
 const addon_widgets_service_1 = require("./core/addon-widgets/addon-widgets.service");
 const agent_registry_service_1 = require("./core/agent/agent-registry.service");
 const cluster_node_history_store_1 = require("./core/agent/cluster-node-history-store");
+const forgotten_node_revoker_1 = require("./core/agent/forgotten-node-revoker");
+const node_removal_hooks_1 = require("./core/agent/node-removal-hooks");
 const auth_service_1 = require("./core/auth/auth.service");
 const capability_service_1 = require("./core/capability/capability.service");
 const config_service_1 = require("./core/config/config.service");
@@ -163,6 +165,11 @@ async function bootManual(opts) {
     // Same post-construction reason: the cluster-node lifecycle (forget, catalog
     // removal) must leave a per-node line, and `console.log` is not a log store.
     agentRegistryService.setLogger(loggingService.createLogger('ClusterNodes'));
+    // Forgetting a node revokes its mesh certificates, so an old box that is powered on again
+    // is refused instead of walking back in (D857).
+    agentRegistryService.setNodeCertificateRevoker((0, forgotten_node_revoker_1.createForgottenNodeRevoker)({
+        logger: loggingService.createLogger('ClusterNodes'),
+    }));
     // A1: durable, routing-blind offline-node history — the `cluster-agent`
     // records kind, bound by the addon registry once the records provider is up
     // (unavailable until then, D902). Wired post-construction so the service's
@@ -170,6 +177,33 @@ async function bootManual(opts) {
     const clusterNodeHistoryStore = new cluster_node_history_store_1.ClusterNodeHistoryStore(loggingService.createLogger('cluster-node-history'));
     agentRegistryService.setClusterNodeHistoryStore(clusterNodeHistoryStore);
     addonRegistryService.setClusterNodeHistoryStore(clusterNodeHistoryStore);
+    // A forgotten node leaves no node-scoped data behind (#265): a tombstone is
+    // recorded, then every `node-removal-hook` implementer is told; the hub-owned
+    // per-node singleton overrides are cleared in the same step.
+    const nodeRemovalLogger = loggingService.createLogger('node-removal');
+    const nodeTombstoneStore = new node_removal_hooks_1.NodeTombstoneStore(nodeRemovalLogger);
+    addonRegistryService.setNodeTombstoneStore(nodeTombstoneStore);
+    const nodeRemovalDispatcher = new node_removal_hooks_1.NodeRemovalDispatcher({
+        hooks: (0, node_removal_hooks_1.registryNodeRemovalHooks)(addonRegistryService.getCapabilityRegistry()),
+        store: nodeTombstoneStore,
+        logger: nodeRemovalLogger,
+    });
+    agentRegistryService.setNodeRemovalCleanup(async (nodeId, removedAt) => {
+        const overrides = await (0, node_removal_hooks_1.clearSingletonNodeOverrides)(nodeId, addonRegistryService.getCapabilityRegistry(), configService);
+        if (overrides > 0) {
+            nodeRemovalLogger.info('cleared per-node singleton overrides of a forgotten node', {
+                tags: { nodeId },
+                meta: { overrides },
+            });
+        }
+        await nodeRemovalDispatcher.nodeForgotten(nodeId, removedAt);
+    });
+    // An implementer that was down at forget time is told once the addons are up.
+    eventBusService.subscribe({ category: types_1.EventCategory.SystemAddonsReady }, () => {
+        void nodeRemovalDispatcher.redrive().catch((err) => nodeRemovalLogger.warn('node removal re-drive failed', {
+            meta: { error: err instanceof Error ? err.message : String(err) },
+        }));
+    });
     // ---- Layer 4: need AddonRegistry ---------------------------------------
     // AddonWidgetsService — needs AddonRegistryService for the bundled-addon
     // dist sub-folder lookup (see service docstring).
@@ -210,7 +244,10 @@ async function bootManual(opts) {
             return (installed ?? (await addonPackageService.packPackage(name, version))).buffer;
         },
         deploy: async (nodeId, packageName, bundle) => {
-            await moleculerService.broker.call('$agent.deploy', { addonId: packageName, source: (0, addon_upload_1.buildHubHttpSource)(bundle, await resolveClusterBaseUrl()) }, { nodeID: nodeId, timeout: agent_registry_service_1.AGENT_BACKFILL_RPC_TIMEOUT_MS });
+            await moleculerService.broker.call('$agent.deploy', {
+                addonId: packageName,
+                source: (0, addon_upload_1.buildHubHttpSource)(bundle, await resolveClusterBaseUrl()),
+            }, { nodeID: nodeId, timeout: agent_registry_service_1.AGENT_BACKFILL_RPC_TIMEOUT_MS });
         },
         reload: async (nodeId) => {
             await moleculerService.broker.call('$agent.reload', {}, { nodeID: nodeId, timeout: agent_registry_service_1.AGENT_BACKFILL_RPC_TIMEOUT_MS });
@@ -281,7 +318,10 @@ async function bootManual(opts) {
                     expected: check.expected,
                     running: check.running,
                     failed: [...check.failed],
-                    refused: check.refused.map((r) => ({ runnerId: r.runnerId, reason: r.reason })),
+                    refused: check.refused.map((r) => ({
+                        runnerId: r.runnerId,
+                        reason: r.reason,
+                    })),
                     missing: [...check.missing],
                 },
             });
@@ -325,8 +365,7 @@ async function bootManual(opts) {
     // downloads this process makes anyway.
     const registryReachability = new registry_reachability_js_1.RegistryReachabilityTracker({
         logger: updateCheckLogger,
-        getAlerts: () => addonRegistryService.getCapabilityRegistry().getSingleton('alerts') ??
-            undefined,
+        getAlerts: () => addonRegistryService.getCapabilityRegistry().getSingleton('alerts') ?? undefined,
     });
     addonPackageService.setNpmReachabilityObserver({
         reached: () => registryReachability.reached('npm'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.687",
+  "version": "1.2.689",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -49,20 +49,20 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.515",
-    "@camstack/addon-agent-ui": "1.2.290",
+    "@camstack/addon-admin-ui": "1.2.517",
+    "@camstack/addon-agent-ui": "1.2.292",
     "@camstack/addon-auth": "1.2.170",
-    "@camstack/addon-benchmark": "1.2.289",
+    "@camstack/addon-benchmark": "1.2.291",
     "@camstack/addon-decoder-nodeav": "1.2.144",
     "@camstack/addon-notifiers": "1.2.623",
     "@camstack/addon-pipeline": "1.2.634",
-    "@camstack/addon-pipeline-orchestrator": "1.2.638",
-    "@camstack/addon-post-analysis": "1.2.650",
+    "@camstack/addon-pipeline-orchestrator": "1.2.639",
+    "@camstack/addon-post-analysis": "1.2.651",
     "@camstack/develop": "0.1.39",
     "@camstack/sdk": "1.2.154",
-    "@camstack/system": "1.2.516",
-    "@camstack/types": "1.2.442",
-    "@camstack/ui-library": "1.2.348",
+    "@camstack/system": "1.2.518",
+    "@camstack/types": "1.2.444",
+    "@camstack/ui-library": "1.2.350",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/cors": "^11.2.0",