@cross-deck/node 1.6.0 → 1.7.0

package/CHANGELOG.md

@@ -4,6 +4,41 @@ All notable changes to `@cross-deck/node` will be documented here. The
 format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.7.0] — 2026-06-11
+
+**PARK on version-rejection — events are held, never dropped.** A third
+event-queue outcome for the day the server stops accepting an outdated event
+format. Purely additive; no public API change.
+
+**Added:**
+
+- **PARK (HTTP `426` / `sdk_version_unsupported`).** A version-rejection is now
+  recognised as its own outcome — distinct from retry (transient) and drop
+  (invalid): the data is good, only the wire dialect is stale. The queue
+  **holds** the events (folded to the buffer front, FIFO-capped at 1000),
+  **hushes** (stops flushing a known-too-old payload), **signals** once (one
+  `console.warn` + a typed `sdk.parked` debug event), and delivers on restart
+  after you upgrade. Node's queue is in-memory, so a process restart *before*
+  upgrade clears the held events — an opt-in disk-backed queue is on the
+  roadmap; the messaging says exactly this, never more.
+- **`sdk_version_unsupported`** added to the error-codes catalogue with
+  remediation, and `version_error` to `CrossdeckErrorType`. `CrossdeckError`
+  carries `minVersion` / `surface` from the 426 body. New `onParked` callback.
+
+**Fixed (no public API change):**
+
+- The empty-input contract is now codified cross-SDK as
+  `invalid-input-rejected-natively`: `track("")` / `aliasIdentity` with a
+  missing `userId` reject at the call site by throwing a typed `CrossdeckError`
+  (`missing_event_name` / `missing_user_id`) and never reach the wire — the
+  Node/JS idiom of the invariant *"invalid input never crashes the app."* No
+  behaviour change; the guarantee is now documented and bundled.
+- Standalone-build fix: the `contract-failed` schema-lock test now reads the
+  bundled contract (`_contracts-bundled.ts`) instead of the monorepo
+  `contracts/` path, so the published-mirror release build no longer fails.
+
+See https://cross-deck.com/docs/sdk-event-durability/ for the durability contract.
+
 ## [1.6.0] — 2026-06-10
 
 Event Envelope v1 conformance — server-enforced contract (spec

package/dist/auto-events/index.d.mts

@@ -1,4 +1,4 @@
-import { w as CrossdeckServer } from '../crossdeck-server-C1Ue0rv4.mjs';
+import { w as CrossdeckServer } from '../crossdeck-server-DYawt4eT.mjs';
 import 'node:events';
 
 /**

package/dist/auto-events/index.d.ts

@@ -1,4 +1,4 @@
-import { w as CrossdeckServer } from '../crossdeck-server-C1Ue0rv4.js';
+import { w as CrossdeckServer } from '../crossdeck-server-DYawt4eT.js';
 import 'node:events';
 
 /**

package/dist/{crossdeck-server-C1Ue0rv4.d.mts → crossdeck-server-DYawt4eT.d.mts}

@@ -1,6 +1,6 @@
 import { EventEmitter } from 'node:events';
 
-type CrossdeckErrorType = "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "internal_error" | "network_error" | "configuration_error";
+type CrossdeckErrorType = "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "version_error" | "internal_error" | "network_error" | "configuration_error";
 interface CrossdeckErrorPayload {
     type: CrossdeckErrorType;
     /**
@@ -19,6 +19,14 @@ interface CrossdeckErrorPayload {
     requestId?: string;
     status?: number;
     retryAfterMs?: number;
+    /**
+     * Required SDK version floor — populated only on a `426 Upgrade Required`
+     * / `sdk_version_unsupported` response, so the queue's PARK message names
+     * the exact version to update to.
+     */
+    minVersion?: string;
+    /** SDK surface the rejection applies to (web/node/swift/…), on a 426. */
+    surface?: string;
 }
 declare class CrossdeckError extends Error {
     readonly type: CrossdeckErrorType;
@@ -26,6 +34,8 @@ declare class CrossdeckError extends Error {
     readonly requestId?: string;
     readonly status?: number;
     readonly retryAfterMs?: number;
+    readonly minVersion?: string;
+    readonly surface?: string;
     constructor(payload: CrossdeckErrorPayload);
     /**
      * JSON representation suitable for structured loggers. Without this,

package/dist/{crossdeck-server-C1Ue0rv4.d.ts → crossdeck-server-DYawt4eT.d.ts}

@@ -1,6 +1,6 @@
 import { EventEmitter } from 'node:events';
 
-type CrossdeckErrorType = "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "internal_error" | "network_error" | "configuration_error";
+type CrossdeckErrorType = "authentication_error" | "permission_error" | "invalid_request_error" | "rate_limit_error" | "version_error" | "internal_error" | "network_error" | "configuration_error";
 interface CrossdeckErrorPayload {
     type: CrossdeckErrorType;
     /**
@@ -19,6 +19,14 @@ interface CrossdeckErrorPayload {
     requestId?: string;
     status?: number;
     retryAfterMs?: number;
+    /**
+     * Required SDK version floor — populated only on a `426 Upgrade Required`
+     * / `sdk_version_unsupported` response, so the queue's PARK message names
+     * the exact version to update to.
+     */
+    minVersion?: string;
+    /** SDK surface the rejection applies to (web/node/swift/…), on a 426. */
+    surface?: string;
 }
 declare class CrossdeckError extends Error {
     readonly type: CrossdeckErrorType;
@@ -26,6 +34,8 @@ declare class CrossdeckError extends Error {
     readonly requestId?: string;
     readonly status?: number;
     readonly retryAfterMs?: number;
+    readonly minVersion?: string;
+    readonly surface?: string;
     constructor(payload: CrossdeckErrorPayload);
     /**
      * JSON representation suitable for structured loggers. Without this,

package/dist/index.cjs

@@ -66,6 +66,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
   requestId;
   status;
   retryAfterMs;
+  minVersion;
+  surface;
   constructor(payload) {
     super(payload.message);
     this.name = "CrossdeckError";
@@ -74,6 +76,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
     this.requestId = payload.requestId;
     this.status = payload.status;
     this.retryAfterMs = payload.retryAfterMs;
+    this.minVersion = payload.minVersion;
+    this.surface = payload.surface;
     Object.setPrototypeOf(this, _CrossdeckError.prototype);
   }
   /**
@@ -95,6 +99,8 @@ var CrossdeckError = class _CrossdeckError extends Error {
       requestId: this.requestId,
       status: this.status,
       retryAfterMs: this.retryAfterMs,
+      minVersion: this.minVersion,
+      surface: this.surface,
       stack: this.stack
     };
   }
@@ -185,7 +191,10 @@ async function crossdeckErrorFromResponse(res) {
       message: envelope.message ?? `HTTP ${res.status}`,
       requestId: envelope.request_id ?? requestId,
       status: res.status,
-      retryAfterMs
+      retryAfterMs,
+      // PARK metadata, present only on a 426 / sdk_version_unsupported body.
+      minVersion: typeof envelope.minVersion === "string" ? envelope.minVersion : void 0,
+      surface: typeof envelope.surface === "string" ? envelope.surface : void 0
     });
   }
   return makeCrossdeckError({
@@ -378,7 +387,7 @@ function byteLength(s) {
 var https = __toESM(require("https"));
 
 // src/_version.ts
-var SDK_VERSION = "1.6.0";
+var SDK_VERSION = "1.7.0";
 var SDK_NAME = "@cross-deck/node";
 
 // src/_diagnostic-telemetry.ts
@@ -398,7 +407,12 @@ var DIAGNOSTIC_TELEMETRY_ALLOWED_KEYS = /* @__PURE__ */ new Set([
   "run_id",
   "test_file",
   "test_name",
-  "device_class"
+  "device_class",
+  // verification_phase — categorical `boot` / `hot_path` bucket set by the
+  // runtime contract verifier layer. Declared in the shared diagnostics
+  // contract (contracts/diagnostics/contract-failed-payload-schema-lock.json)
+  // and carried by web/swift; node had drifted by omitting it.
+  "verification_phase"
 ]);
 function filterDiagnosticPayload(payload) {
   const filtered = {};
@@ -891,6 +905,16 @@ var EventQueue = class {
   cancelTimer = null;
   firstFlushFired = false;
   nextRetryAt = null;
+  /**
+   * PARK state (HTTP 426 / `sdk_version_unsupported`). Once parked, the
+   * queue stops flushing — retrying a known-too-old payload only wastes
+   * bandwidth and drips pointless rejects into the server logs until the
+   * process restarts on an upgraded SDK. In-memory: a fresh process starts
+   * unparked, retries once, and either delivers (upgraded) or re-parks.
+   */
+  parked = false;
+  /** One developer-facing console warning per process — never per-event spam. */
+  parkWarned = false;
   retry;
   /**
    * Stable Idempotency-Key for the current in-flight batch. Minted
@@ -943,6 +967,7 @@ var EventQueue = class {
    * this one settles. Strict ordering preserved.
    */
   async flush() {
+    if (this.parked) return null;
     let batch;
     let batchId;
     if (this.pendingBatch !== null && this.pendingBatchId !== null) {
@@ -990,6 +1015,28 @@ var EventQueue = class {
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       this.lastError = message;
+      if (isVersionRejected(err)) {
+        this.parked = true;
+        this.buffer = [...batch, ...this.buffer];
+        if (this.buffer.length > HARD_BUFFER_CAP) {
+          const overflow = this.buffer.length - HARD_BUFFER_CAP;
+          this.buffer.splice(0, overflow);
+          this.dropped += overflow;
+        }
+        this.pendingBatch = null;
+        this.pendingBatchId = null;
+        this.inFlight -= batch.length;
+        this.cfg.onBufferChange?.(this.buffer.length);
+        const minVersion = versionRejectionFloor(err);
+        if (!this.parkWarned) {
+          this.parkWarned = true;
+          console.warn(
+            `[Crossdeck] SDK outdated \u2014 the server is no longer accepting this version's event format. Events are PARKED in memory (held, not lost across this process) and will deliver once you update @cross-deck/node${minVersion ? ` to >= ${minVersion}` : ""} and restart. A restart before upgrade clears them \u2014 configure a disk queue for cross-restart durability.`
+          );
+        }
+        this.cfg.onParked?.({ minVersion, surface: versionRejectionSurface(err) });
+        return null;
+      }
       if (isPermanent4xx(err)) {
         const droppedCount = batch.length;
         this.pendingBatch = null;
@@ -1088,8 +1135,22 @@ function isPermanent4xx(err) {
   if (typeof status !== "number" || !Number.isFinite(status)) return false;
   if (status < 400 || status >= 500) return false;
   if (status === 408 || status === 429) return false;
+  if (status === 426) return false;
   return true;
 }
+function isVersionRejected(err) {
+  if (!err || typeof err !== "object") return false;
+  if (err.status === 426) return true;
+  return err.code === "sdk_version_unsupported";
+}
+function versionRejectionFloor(err) {
+  const v = err?.minVersion;
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
+function versionRejectionSurface(err) {
+  const v = err?.surface;
+  return typeof v === "string" && v.length > 0 ? v : void 0;
+}
 function defaultScheduler(fn, ms) {
   const id = setTimeout(fn, ms);
   if (typeof id.unref === "function") {
@@ -2793,6 +2854,13 @@ var CrossdeckServer = class extends import_node_events.EventEmitter {
           error: info.lastError
         });
       },
+      onParked: (info) => {
+        this.debug.emit(
+          "sdk.parked",
+          `[crossdeck] SDK parked \u2014 server no longer accepts this version's event format. Events held (paused, not lost); update @cross-deck/node${info.minVersion ? ` to >= ${info.minVersion}` : ""} and restart to resume.`,
+          { ...info }
+        );
+      },
       onFirstFlushSuccess: () => {
         this.debug.emit("sdk.first_event_sent", "First batch landed.");
       }
@@ -4367,6 +4435,13 @@ var _CROSSDECK_ERROR_CODES = Object.freeze([
     description: "A field is present but the value failed validation.",
     resolution: "Read error.message for the field + reason. SDK-managed call sites should never emit this \u2014 file a bug if you do.",
     retryable: false
+  },
+  {
+    code: "sdk_version_unsupported",
+    type: "version_error",
+    description: "HTTP 426 \u2014 your installed SDK sends an event format the server no longer accepts. The data is good; only the wire dialect is too old. The SDK PARKS automatically: events are held in memory and deliver once you upgrade and restart.",
+    resolution: "Update @cross-deck/node to at least the version in error.minVersion and restart \u2014 the held queue backfills. See https://cross-deck.com/docs/sdk-event-durability/.",
+    retryable: false
   }
 ]);
 function isCrossdeckErrorCode(code) {