@camstack/types 1.2.441 → 1.2.443

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-BpwNJ1Su.js");
+const require_sleep = require("./sleep-E7qAQwTE.js");
 const require_event_category = require("./event-category-E17zaHjN.js");
-const require_composition = require("./composition-DCmtFE-X.js");
+const require_composition = require("./composition-C0dlyG9U.js");
 const require_node_color = require("./node-color.js");
 const require_err_msg = require("./err-msg-COHgq7Mb.js");
 const require_enums = require("./enums.js");
@@ -43463,6 +43463,64 @@ var embeddingEncoderCapability = {
 	}
 };
 //#endregion
+//#region src/capabilities/node-removal-hook.cap.ts
+/**
+* `node-removal-hook` — the reliable way an addon learns a cluster node was
+* FORGOTTEN, so it can remove or re-point what it keeps for that node. The
+* node-scoped twin of `device-removal-hook` (D865); same shape, same rules.
+*
+* ## Why not "the node is absent"
+*
+* A node missing from topology is offline, restarting or not yet re-registered —
+* it is not forgotten. Deleting node-scoped data from absence destroys a live
+* node's configuration on any failed or partial read (D49). So the hook is
+* driven by a TOMBSTONE the hub records when the operator forgets a node
+* (`AgentRegistryService.forgetClusterNode`); nothing else produces one.
+*
+* ## The pieces
+*
+* 1. The hub records a tombstone `{ nodeId, removedAt, pending }` before it calls
+*    anyone. `pending` is the set of implementers that have not yet acknowledged.
+* 2. The hub calls `onNodeRemoved` on EVERY provider of this collection, one by
+*    one, with bounded retries, logged; an acknowledgement removes the
+*    implementer from `pending`.
+* 3. The hub re-drives still-pending tombstones at boot, so an implementer that
+*    was down at forget time is told when it is back.
+*
+* ## Contract for an implementer
+*
+* - **Idempotent.** Called again by a retry and by the boot re-drive. A node with
+*   nothing left answers zero counts.
+* - **One key per store** in `counts`, rows changed per store, so the log line
+*   can say where the data was.
+* - **Re-point or remove, never guess.** A row that merely MENTIONS the node as
+*   a preference is re-pointed to "unset"; a row that only means something on
+*   that node (a runtime bound to it) is removed.
+* - A provider that cannot tell is allowed to throw; the caller retries it.
+*/
+/** What a hook is told about the removal. */
+var NodeRemovedInputSchema = zod.z.object({
+	nodeId: zod.z.string().min(1),
+	/** Epoch ms the node was forgotten (the tombstone's `removedAt`). */
+	removedAt: zod.z.number()
+});
+/** Rows changed (removed or re-pointed), per store this implementer owns. */
+var NodeRemovedResultSchema = zod.z.object({ counts: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative()) });
+var nodeRemovalHookCapability = {
+	name: "node-removal-hook",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: { 
+	/** Remove or re-point everything this addon keeps for the forgotten node. Idempotent. */
+onNodeRemoved: require_sleep.method(NodeRemovedInputSchema, NodeRemovedResultSchema, {
+		kind: "mutation",
+		auth: "admin"
+	}) },
+	/** In-process only — enumerated through `addons.listCapabilityProviders`. */
+	mount: { kind: "skip" }
+};
+//#endregion
 //#region src/capabilities/device-removal-hook.cap.ts
 /**
 * `device-removal-hook` — the reliable way an addon learns a device was DELETED,
@@ -59120,8 +59178,7 @@ var pipelineOrchestratorCapability = {
 		* replaced the four flat orchestrator lists (`enabledNodes`,
 		* `enabledDecoderNodes`, `enabledAudioNodes`, `remoteSourcingNodes`).
 		* Each flag is optional in the patch: omit a flag to leave it unchanged,
-		* pass `null` to reset it to the node default (`hub` → capable, every
-		* other node → not). Detection/audio eligibility is derived from these
+		* pass `null` to reset it to the default (ON for every node). Detection/audio eligibility is derived from these
 		* flags across the cluster; changing them re-derives the enabled sets
 		* and reconciles dispatch immediately. There is NO separate decode flag:
 		* decode is always co-located with its frame consumer, so decode
@@ -92880,6 +92937,13 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"nodeRemovalHook.onNodeRemoved": {
+		capName: "node-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"nodes.clusterAddonStatus": {
 		capName: "nodes",
 		capScope: "system",
@@ -98115,6 +98179,7 @@ var KNOWN_CAP_NAMES = [
 	"network-link",
 	"network-quality",
 	"node-certificates",
+	"node-removal-hook",
 	"nodes",
 	"notification-output",
 	"notification-rules",
@@ -98348,6 +98413,7 @@ var SYSTEM_CAP_NAMES = [
 	"network-access",
 	"network-quality",
 	"node-certificates",
+	"node-removal-hook",
 	"nodes",
 	"notification-output",
 	"notification-rules",
@@ -102224,6 +102290,7 @@ var SYSTEM_CAP_VOCABULARY = {
 	"device-manager": system("the device registry itself — rename, move and remove are administration"),
 	"device-provider": system(INTERNAL),
 	"device-removal-hook": system(INTERNAL),
+	"node-removal-hook": system(INTERNAL),
 	"device-state": system("the runtime-state mirror every trigger already reads through"),
 	"display-palette": system("the cluster display palette — one colour table for every client, not a device action"),
 	"embedding-encoder": system(ML),
@@ -104216,6 +104283,7 @@ var CAPABILITY_NAMES = {
 	networkLink: "network-link",
 	networkQuality: "network-quality",
 	nodeCertificates: "node-certificates",
+	nodeRemovalHook: "node-removal-hook",
 	nodes: "nodes",
 	notificationOutput: "notification-output",
 	notificationRules: "notification-rules",
@@ -104754,6 +104822,10 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "nodeCertificates",
 		name: "node-certificates"
 	},
+	{
+		key: "nodeRemovalHook",
+		name: "node-removal-hook"
+	},
 	{
 		key: "nodes",
 		name: "nodes"
@@ -105180,6 +105252,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	networkLinkCapability,
 	networkQualityCapability,
 	nodeCertificatesCapability,
+	nodeRemovalHookCapability,
 	nodesCapability,
 	notificationOutputCapability,
 	notificationRulesCapability,
@@ -119078,6 +119151,7 @@ var OAUTH_LANDING_REASONS = [
 	"unknown_broker",
 	"not_configured",
 	"exchange_failed",
+	"no_authorization_code",
 	"no_refresh_token",
 	"unavailable",
 	"unknown"
@@ -119305,6 +119379,83 @@ function filterForwardedCookies(cookieHeader) {
 	return cookieHeader.split(";").map((part) => part.trim()).filter((part) => part.length > 0 && !part.toLowerCase().startsWith("camstack_")).join("; ");
 }
 //#endregion
+//#region src/vendor-login-proxy/flow-trace.ts
+/** A short stable label for the attempt: enough to group lines, useless as a capability. */
+function attemptLabel(attemptId) {
+	let hash = 2166136261;
+	for (let i = 0; i < attemptId.length; i += 1) hash = Math.imul(hash ^ attemptId.charCodeAt(i), 16777619) >>> 0;
+	return hash.toString(16).padStart(8, "0");
+}
+/** Distinct parameter names of a `?a=1&b=2` string (or of a urlencoded body), in order. */
+function paramNames(query) {
+	const names = [];
+	const raw = query.startsWith("?") ? query.slice(1) : query;
+	for (const pair of raw.split("&")) {
+		if (pair.length === 0) continue;
+		const eq = pair.indexOf("=");
+		const rawName = eq === -1 ? pair : pair.slice(0, eq);
+		let name;
+		try {
+			name = decodeURIComponent(rawName.replace(/\+/g, " "));
+		} catch {
+			name = rawName;
+		}
+		if (!names.includes(name)) names.push(name);
+	}
+	return names;
+}
+function hasOa2(names) {
+	return names.some((name) => name.startsWith("openid.oa2.") || name === "openid.ns.oa2");
+}
+function cookieNamesOf(setCookies) {
+	return setCookies.map((c) => c.split(";")[0]?.split("=")[0]?.trim() ?? "");
+}
+function mediaType(contentType) {
+	return (contentType ?? "none").split(";")[0]?.trim().toLowerCase() || "none";
+}
+/** Host and path of a Location (no query), or 'unparsable'. */
+function locationShape(location, base) {
+	try {
+		const url = new URL(location, base);
+		return {
+			target: `${url.host}${url.pathname}`,
+			names: paramNames(url.search)
+		};
+	} catch {
+		return {
+			target: "unparsable",
+			names: []
+		};
+	}
+}
+/** The `meta` of one trace line. Values: never. */
+function flowTraceMeta(input) {
+	const queryNames = paramNames(input.requestSearch);
+	const formNames = input.formBody === null ? null : paramNames(input.formBody);
+	const meta = {
+		session: attemptLabel(input.attemptId),
+		method: input.method,
+		upstream: `${input.upstreamHost}${input.upstreamPath}`,
+		queryNames: queryNames.join(",") || "none",
+		oa2InQuery: hasOa2(queryNames),
+		status: input.status,
+		setCookieNames: cookieNamesOf(input.setCookies).join(",") || "none",
+		cookiesSent: (input.cookieHeader ?? "").split(";").filter((p) => p.trim().length > 0).length
+	};
+	if (formNames !== null) {
+		meta["contentType"] = mediaType(input.contentType);
+		meta["formNames"] = formNames.join(",") || "none";
+		meta["oa2InForm"] = hasOa2(formNames);
+	}
+	if (input.location !== null) {
+		const loc = locationShape(input.location, `http://${input.upstreamHost}/`);
+		meta["location"] = loc.target;
+		meta["locationQueryNames"] = loc.names.join(",") || "none";
+		meta["oa2InLocation"] = hasOa2(loc.names);
+	}
+	return meta;
+}
+//#endregion
 //#region src/vendor-login-proxy/login-proxy.ts
 var MAX_REQUEST_BODY_BYTES = 2 * 1024 * 1024;
 var MAX_TEXT_BODY_BYTES = 4 * 1024 * 1024;
@@ -119410,6 +119561,8 @@ var VendorLoginProxy = class {
 	#now;
 	#fetch;
 	#attempts = /* @__PURE__ */ new Map();
+	/** Trace lines written per attempt (bounded by FLOW_TRACE_MAX_LINES). */
+	#traced = /* @__PURE__ */ new Map();
 	constructor(options) {
 		this.#addonId = options.addonId;
 		this.#logger = options.logger;
@@ -119436,6 +119589,7 @@ var VendorLoginProxy = class {
 	}
 	close(attemptId) {
 		this.#attempts.delete(attemptId);
+		this.#traced.delete(attemptId);
 	}
 	isOpen(attemptId) {
 		const attempt = this.#attempts.get(attemptId);
@@ -119482,7 +119636,7 @@ var VendorLoginProxy = class {
 		const forwardedPrefix = (firstHeader(req.headers["x-forwarded-prefix"]) ?? "").replace(/\/+$/, "");
 		const attempt = this.#attempts.get(parsed.attemptId);
 		if (attempt === void 0 || this.#now() > attempt.expiresAtMs) {
-			if (attempt !== void 0) this.#attempts.delete(parsed.attemptId);
+			if (attempt !== void 0) this.close(parsed.attemptId);
 			this.#logger.info("vendor login proxy: attempt refused", { meta: {
 				addonId: this.#addonId,
 				reason: attempt === void 0 ? "missing" : "expired"
@@ -119507,13 +119661,17 @@ var VendorLoginProxy = class {
 		}
 		const method = (req.method ?? "GET").toUpperCase();
 		let body;
+		let formBodyRaw = null;
 		if (method !== "GET" && method !== "HEAD") {
 			const read = await readRequestBody(req);
 			if (read === "too-large") {
 				sendPlain(res, 413, "Request too large");
 				return;
 			}
-			body = isFormEncoded(req.headers["content-type"]) ? Buffer.from(rewriteFormBody(read.toString("utf8"), route), "utf8") : read;
+			if (isFormEncoded(req.headers["content-type"])) {
+				formBodyRaw = read.toString("utf8");
+				body = Buffer.from(rewriteFormBody(formBodyRaw, route), "utf8");
+			} else body = read;
 		}
 		const headers = this.#requestHeaders(req, route, upstream);
 		const upstreamRes = await this.#fetch(target, {
@@ -119538,6 +119696,19 @@ var VendorLoginProxy = class {
 			sentNames: cookieNames(headers["cookie"]),
 			vendorSets: setCookies.map(setCookieShape).join(" | ")
 		} });
+		this.#trace(parsed.attemptId, {
+			attemptId: parsed.attemptId,
+			method,
+			upstreamHost: upstream.host,
+			upstreamPath: target.pathname,
+			requestSearch: target.search,
+			formBody: formBodyRaw,
+			contentType: firstHeader(req.headers["content-type"]),
+			status: upstreamRes.status,
+			location,
+			setCookies,
+			cookieHeader: headers["cookie"]
+		});
 		const settled = await attempt.evaluate({
 			status: upstreamRes.status,
 			url: target.toString(),
@@ -119546,7 +119717,7 @@ var VendorLoginProxy = class {
 			bodyText: text
 		});
 		if (settled.kind === "done") {
-			this.#attempts.delete(parsed.attemptId);
+			this.close(parsed.attemptId);
 			this.#logger.info("vendor login proxy: sign-in finished", { meta: {
 				addonId: this.#addonId,
 				status: settled.landing.status
@@ -119570,6 +119741,16 @@ var VendorLoginProxy = class {
 		res.writeHead(upstreamRes.status, out);
 		await this.#pipeBody(upstreamRes, res);
 	}
+	/** One names-only line per proxied request, at most FLOW_TRACE_MAX_LINES per attempt. */
+	#trace(attemptId, input) {
+		const written = this.#traced.get(attemptId) ?? 0;
+		if (written >= 200) return;
+		this.#traced.set(attemptId, written + 1);
+		this.#logger.info("vendor login proxy: flow", { meta: {
+			addonId: this.#addonId,
+			...flowTraceMeta(input)
+		} });
+	}
 	#requestHeaders(req, route, upstream) {
 		const headers = {};
 		for (const [name, value] of Object.entries(req.headers)) {
@@ -122125,6 +122306,8 @@ exports.NodeDirectoryEntrySchema = NodeDirectoryEntrySchema;
 exports.NodeDirectorySchema = NodeDirectorySchema;
 exports.NodeHttpsStateSchema = NodeHttpsStateSchema;
 exports.NodeRecommendationSchema = NodeRecommendationSchema;
+exports.NodeRemovedInputSchema = NodeRemovedInputSchema;
+exports.NodeRemovedResultSchema = NodeRemovedResultSchema;
 exports.NotificationActionIconSchema = NotificationActionIconSchema;
 exports.NotificationActionSchema = NotificationActionSchema;
 exports.NotificationFormatSchema = NotificationFormatSchema;
@@ -122346,6 +122529,7 @@ exports.RESERVED_BINDING_NAMES = require_composition.RESERVED_BINDING_NAMES;
 exports.RESERVED_COLLECTION_SOURCES = RESERVED_COLLECTION_SOURCES;
 exports.RESET_PERIODS = require_composition.RESET_PERIODS;
 exports.RESTORED_CAP_NAMES = RESTORED_CAP_NAMES;
+exports.RESTREAM_INPUT_PROBE = require_composition.RESTREAM_INPUT_PROBE;
 exports.RETRAIN_REVIEW_ADJUSTED_IOU = RETRAIN_REVIEW_ADJUSTED_IOU;
 exports.RETRAIN_REVIEW_MATCH_IOU = RETRAIN_REVIEW_MATCH_IOU;
 exports.RETRAIN_REVIEW_STATUSES = RETRAIN_REVIEW_STATUSES;
@@ -123558,6 +123742,7 @@ exports.nodeBenchmarkRefusals = nodeBenchmarkRefusals;
 exports.nodeCertificatesCapability = nodeCertificatesCapability;
 exports.nodePickerItems = nodePickerItems;
 exports.nodePin = require_sleep.nodePin;
+exports.nodeRemovalHookCapability = nodeRemovalHookCapability;
 exports.nodesCapability = nodesCapability;
 exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
 exports.normalizeAudioLabel = normalizeAudioLabel;