@equinor/fusion-framework-vite-plugin-spa 5.2.0 → 5.2.2

package/README.md

@@ -401,7 +401,7 @@ FUSION_SPA_MSAL_TENANT_ID=my-tenant-id
 FUSION_SPA_MSAL_CLIENT_ID=my-client-id
 FUSION_SPA_MSAL_REDIRECT_URI=https://my-app.com/auth-callback
 FUSION_SPA_MSAL_REQUIRES_AUTH=true
-# Set to skip Entra ID and sign in a mock user instead — for CI/Playwright runs
+# Set to skip Entra ID and sign in a mock user instead — use together with a mock server (see below)
 FUSION_SPA_MSAL_MOCK=true
 # Optional: standalone mock-server origin used for session-scoped token acquisition
 FUSION_SPA_MSAL_MOCK_SERVER_URL=http://localhost:4010
@@ -421,15 +421,30 @@ FUSION_SPA_SERVICE_WORKER_RESOURCES=[{"url":"/app-proxy","rewrite":"/@fusion-api
 
 ## Running Against a Mock Client (CI / Playwright)
 
+Run CI and Playwright suites against the standalone mock server, so both authentication and
+service discovery stay local:
+
+```sh
+ffc mock-server ./mocks --port 4010
+ffc app dev --mock http://localhost:4010
+```
+
 Setting `FUSION_SPA_MSAL_MOCK=true` swaps the real MSAL client for
 `@equinor/fusion-framework-module-msal/mock`, which signs in a default mock user with no
-Entra ID redirects, popups, or network calls. This is the recommended way to run the dev
-server headlessly in GitHub Actions or a Playwright suite.
+Entra ID redirects or popups. Mock tokens are unsigned, so real Fusion services reject them.
+`ffc app dev` and `ffc app serve` therefore also send service discovery to the mock server
+whenever mock auth is on — `FUSION_SPA_MSAL_MOCK_SERVER_URL`, or `http://localhost:4010` when
+only `FUSION_SPA_MSAL_MOCK` is set.
 
 ```sh
 FUSION_SPA_MSAL_MOCK=true
 ```
 
+> [!IMPORTANT]
+> A direct Vite setup must point `FUSION_SPA_SERVICE_DISCOVERY_URL` (or the dev server's
+> service discovery URL) at the mock server too. Otherwise every page load sends a mock token
+> to real service discovery and fails with `401`.
+
 By default the mock signs in a generic `Test User`. To select and switch users at runtime, start
 the standalone mock server with the browser origin explicitly allowed, then point the app at it:
 

package/dist/{create-legacy-browser-delegate-B4z_676L.js → create-legacy-browser-delegate-4GII-R4B.js}

@@ -1124,22 +1124,11 @@ function globalErrorHandler(ex) {
  * SPDX-License-Identifier: Apache-2.0
  */
 // this is autogenerated file, see scripts/version-update.js
-const VERSION$1 = '2.11.0';
+const VERSION$1 = '2.12.0';
 
 /*
  * Copyright The OpenTelemetry Authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      https://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
+ * SPDX-License-Identifier: Apache-2.0
  */
 //----------------------------------------------------------------------------------------------------------
 // DO NOT EDIT, this is an Auto-generated file from scripts/semconv/templates/registry/stable/attributes.ts.j2
@@ -1163,6 +1152,12 @@ const VERSION$1 = '2.11.0';
  * When `error.type` is set to a type (e.g., an exception type), its
  * canonical class name identifying the type within the artifact **SHOULD** be used.
  *
+ * If the recorded error type is a wrapper that is not meaningful for
+ * failure classification, instrumentation **MAY** use the type of the inner
+ * error instead. For example, in Go, errors created with `fmt.Errorf`
+ * using `%w` **MAY** be unwrapped when the wrapper type does not help
+ * classify the failure.
+ *
  * Instrumentations **SHOULD** document the list of errors they report.
  *
  * The cardinality of `error.type` within one instrumentation library **SHOULD** be low.
@@ -1178,7 +1173,7 @@ const VERSION$1 = '2.11.0';
  *   - Use a domain-specific attribute
  *   - Set `error.type` to capture all errors, regardless of whether they are defined within the domain-specific set or not.
  */
-const ATTR_ERROR_TYPE$2 = 'error.type';
+const ATTR_ERROR_TYPE$1 = 'error.type';
 /**
  * The exception message.
  *
@@ -1189,20 +1184,26 @@ const ATTR_ERROR_TYPE$2 = 'error.type';
  *
  * > This attribute may contain sensitive information.
  */
-const ATTR_EXCEPTION_MESSAGE$1 = 'exception.message';
+const ATTR_EXCEPTION_MESSAGE = 'exception.message';
 /**
  * A stacktrace as a string in the natural representation for the language runtime. The representation is to be determined and documented by each language SIG.
  *
  * @example "Exception in thread "main" java.lang.RuntimeException: Test exception\\n at com.example.GenerateTrace.methodB(GenerateTrace.java:13)\\n at com.example.GenerateTrace.methodA(GenerateTrace.java:9)\\n at com.example.GenerateTrace.main(GenerateTrace.java:5)\\n"
  */
-const ATTR_EXCEPTION_STACKTRACE$1 = 'exception.stacktrace';
+const ATTR_EXCEPTION_STACKTRACE = 'exception.stacktrace';
 /**
  * The type of the exception (its fully-qualified class name, if applicable). The dynamic type of the exception should be preferred over the static type in languages that support it.
  *
  * @example java.net.ConnectException
  * @example OSError
+ *
+ * @note If the recorded exception type is a wrapper that is not meaningful for
+ * failure classification, instrumentation **MAY** use the type of the inner
+ * exception instead. For example, in Go, errors created with `fmt.Errorf`
+ * using `%w` **MAY** be unwrapped when the wrapper type does not help
+ * classify the failure.
  */
-const ATTR_EXCEPTION_TYPE$1 = 'exception.type';
+const ATTR_EXCEPTION_TYPE = 'exception.type';
 /**
  * HTTP request method.
  *
@@ -1268,10 +1269,19 @@ const ATTR_SERVER_ADDRESS$1 = 'server.address';
  * @note When observed from the client side, and when communicating through an intermediary, `server.port` **SHOULD** represent the server port behind any intermediaries, for example proxies, if it's available.
  */
 const ATTR_SERVER_PORT$1 = 'server.port';
+/**
+ * Logical name of the service.
+ *
+ * @example shoppingcart
+ *
+ * @note **MUST** be the same for all instances of horizontally scaled services. If the value was not specified, SDKs **MUST** fallback to `unknown_service:` concatenated with the process executable name, e.g. `unknown_service:bash`. If the process executable name is not available, the value **MUST** be set to `unknown_service`.
+ * The process executable name is the name of the process executable, the same value as described by the [`process.executable.name`](process.md) resource attribute.
+ */
+const ATTR_SERVICE_NAME = 'service.name';
 /**
  * The language of the telemetry SDK.
  */
-const ATTR_TELEMETRY_SDK_LANGUAGE$1 = 'telemetry.sdk.language';
+const ATTR_TELEMETRY_SDK_LANGUAGE = 'telemetry.sdk.language';
 /**
  * Enum value "webjs" for attribute {@link ATTR_TELEMETRY_SDK_LANGUAGE}.
  */
@@ -1288,13 +1298,13 @@ const TELEMETRY_SDK_LANGUAGE_VALUE_WEBJS = "webjs";
  * The identifier `opentelemetry` is reserved and **MUST NOT** be used in this case.
  * All custom identifiers **SHOULD** be stable across different versions of an implementation.
  */
-const ATTR_TELEMETRY_SDK_NAME$1 = 'telemetry.sdk.name';
+const ATTR_TELEMETRY_SDK_NAME = 'telemetry.sdk.name';
 /**
  * The version string of the telemetry SDK.
  *
  * @example 1.2.3
  */
-const ATTR_TELEMETRY_SDK_VERSION$1 = 'telemetry.sdk.version';
+const ATTR_TELEMETRY_SDK_VERSION = 'telemetry.sdk.version';
 /**
  * Absolute URL describing a network resource according to [RFC3986](https://www.rfc-editor.org/rfc/rfc3986)
  *
@@ -1315,8 +1325,9 @@ const ATTR_TELEMETRY_SDK_VERSION$1 = 'telemetry.sdk.version';
  * Query string values for the following keys **SHOULD** be redacted by default and replaced by the
  * value `REDACTED`:
  *
- *   - [`AWSAccessKeyId`](https://docs.aws.amazon.com/AmazonS3/latest/userguide/RESTAuthentication.html#RESTAuthenticationQueryStringAuth)
- *   - [`Signature`](https://docs.aws.amazon.com/AmazonS3/latest/userguide/RESTAuthentication.html#RESTAuthenticationQueryStringAuth)
+ *   - [`X-Amz-Signature`](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv-authentication-methods.html)
+ *   - [`X-Amz-Credential`](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv-authentication-methods.html)
+ *   - [`X-Amz-Security-Token`](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv-authentication-methods.html)
  *   - [`sig`](https://learn.microsoft.com/azure/storage/common/storage-sas-overview#sas-token)
  *   - [`X-Goog-Signature`](https://cloud.google.com/storage/docs/access-control/signed-urls)
  *
@@ -1369,10 +1380,10 @@ const ATTR_PROCESS_RUNTIME_NAME = 'process.runtime.name';
  */
 /** Constants describing the SDK in use */
 const SDK_INFO = {
-    [ATTR_TELEMETRY_SDK_NAME$1]: 'opentelemetry',
+    [ATTR_TELEMETRY_SDK_NAME]: 'opentelemetry',
     [ATTR_PROCESS_RUNTIME_NAME]: 'browser',
-    [ATTR_TELEMETRY_SDK_LANGUAGE$1]: TELEMETRY_SDK_LANGUAGE_VALUE_WEBJS,
-    [ATTR_TELEMETRY_SDK_VERSION$1]: VERSION$1,
+    [ATTR_TELEMETRY_SDK_LANGUAGE]: TELEMETRY_SDK_LANGUAGE_VALUE_WEBJS,
+    [ATTR_TELEMETRY_SDK_VERSION]: VERSION$1,
 };
 
 /*
@@ -1961,14 +1972,14 @@ const ATTR_SERVER_PORT = 'server.port';
  *   - Use a domain-specific attribute
  *   - Set `error.type` to capture all errors, regardless of whether they are defined within the domain-specific set or not.
  */
-const ATTR_ERROR_TYPE$1 = 'error.type';
+const ATTR_ERROR_TYPE = 'error.type';
 
 /*
  * Copyright The OpenTelemetry Authors
  * SPDX-License-Identifier: Apache-2.0
  */
 // this is autogenerated file, see scripts/version-update.js
-const VERSION = '0.222.0';
+const VERSION = '0.223.0';
 
 /*
  * Copyright The OpenTelemetry Authors
@@ -2056,7 +2067,7 @@ class ExporterMetrics {
             const exportedAttrs = error
                 ? {
                     ...this.standardAttrs,
-                    [ATTR_ERROR_TYPE$1]: error instanceof Error ? error.name : 'export_failed',
+                    [ATTR_ERROR_TYPE]: error instanceof Error ? error.name : 'export_failed',
                 }
                 : this.standardAttrs;
             this.exported.add(numItems, exportedAttrs);
@@ -2088,117 +2099,6 @@ function createNoopLogger() {
     return NOOP_LOGGER;
 }
 
-/*
- * Copyright The OpenTelemetry Authors
- * SPDX-License-Identifier: Apache-2.0
- */
-//----------------------------------------------------------------------------------------------------------
-// DO NOT EDIT, this is an Auto-generated file from scripts/semconv/templates/registry/stable/attributes.ts.j2
-//----------------------------------------------------------------------------------------------------------
-/**
- * ASP.NET Core exception middleware handling result.
- *
- * @example handled
- * @example unhandled
- */
-/**
- * Describes a class of error the operation ended with.
- *
- * @example timeout
- * @example java.net.UnknownHostException
- * @example server_certificate_invalid
- * @example 500
- *
- * @note The `error.type` **SHOULD** be predictable, and **SHOULD** have low cardinality.
- *
- * When `error.type` is set to a type (e.g., an exception type), its
- * canonical class name identifying the type within the artifact **SHOULD** be used.
- *
- * If the recorded error type is a wrapper that is not meaningful for
- * failure classification, instrumentation **MAY** use the type of the inner
- * error instead. For example, in Go, errors created with `fmt.Errorf`
- * using `%w` **MAY** be unwrapped when the wrapper type does not help
- * classify the failure.
- *
- * Instrumentations **SHOULD** document the list of errors they report.
- *
- * The cardinality of `error.type` within one instrumentation library **SHOULD** be low.
- * Telemetry consumers that aggregate data from multiple instrumentation libraries and applications
- * should be prepared for `error.type` to have high cardinality at query time when no
- * additional filters are applied.
- *
- * If the operation has completed successfully, instrumentations **SHOULD NOT** set `error.type`.
- *
- * If a specific domain defines its own set of error identifiers (such as HTTP or RPC status codes),
- * it's **RECOMMENDED** to:
- *
- *   - Use a domain-specific attribute
- *   - Set `error.type` to capture all errors, regardless of whether they are defined within the domain-specific set or not.
- */
-const ATTR_ERROR_TYPE = 'error.type';
-/**
- * The exception message.
- *
- * @example Division by zero
- * @example Can't convert 'int' object to str implicitly
- *
- * @note > [!WARNING]
- *
- * > This attribute may contain sensitive information.
- */
-const ATTR_EXCEPTION_MESSAGE = 'exception.message';
-/**
- * A stacktrace as a string in the natural representation for the language runtime. The representation is to be determined and documented by each language SIG.
- *
- * @example "Exception in thread "main" java.lang.RuntimeException: Test exception\\n at com.example.GenerateTrace.methodB(GenerateTrace.java:13)\\n at com.example.GenerateTrace.methodA(GenerateTrace.java:9)\\n at com.example.GenerateTrace.main(GenerateTrace.java:5)\\n"
- */
-const ATTR_EXCEPTION_STACKTRACE = 'exception.stacktrace';
-/**
- * The type of the exception (its fully-qualified class name, if applicable). The dynamic type of the exception should be preferred over the static type in languages that support it.
- *
- * @example java.net.ConnectException
- * @example OSError
- *
- * @note If the recorded exception type is a wrapper that is not meaningful for
- * failure classification, instrumentation **MAY** use the type of the inner
- * exception instead. For example, in Go, errors created with `fmt.Errorf`
- * using `%w` **MAY** be unwrapped when the wrapper type does not help
- * classify the failure.
- */
-const ATTR_EXCEPTION_TYPE = 'exception.type';
-/**
- * Logical name of the service.
- *
- * @example shoppingcart
- *
- * @note **MUST** be the same for all instances of horizontally scaled services. If the value was not specified, SDKs **MUST** fallback to `unknown_service:` concatenated with the process executable name, e.g. `unknown_service:bash`. If the process executable name is not available, the value **MUST** be set to `unknown_service`.
- * The process executable name is the name of the process executable, the same value as described by the [`process.executable.name`](process.md) resource attribute.
- */
-const ATTR_SERVICE_NAME = 'service.name';
-/**
- * The language of the telemetry SDK.
- */
-const ATTR_TELEMETRY_SDK_LANGUAGE = 'telemetry.sdk.language';
-/**
- * The name of the telemetry SDK as defined above.
- *
- * @example opentelemetry
- *
- * @note The OpenTelemetry SDK **MUST** set the `telemetry.sdk.name` attribute to `opentelemetry`.
- * If another SDK, like a fork or a vendor-provided implementation, is used, this SDK **MUST** set the
- * `telemetry.sdk.name` attribute to the fully-qualified class or module name of this SDK's main entry point
- * or another suitable identifier depending on the language.
- * The identifier `opentelemetry` is reserved and **MUST NOT** be used in this case.
- * All custom identifiers **SHOULD** be stable across different versions of an implementation.
- */
-const ATTR_TELEMETRY_SDK_NAME = 'telemetry.sdk.name';
-/**
- * The version string of the telemetry SDK.
- *
- * @example 1.2.3
- */
-const ATTR_TELEMETRY_SDK_VERSION = 'telemetry.sdk.version';
-
 /*
  * Copyright The OpenTelemetry Authors
  * SPDX-License-Identifier: Apache-2.0
@@ -2858,5 +2758,5 @@ function createLegacyOtlpBrowserExportDelegate(config, serializer, metricsCompon
     return createOtlpFetchExportDelegate(options, serializer, createLegacyOtlpBrowserExporterMetrics(metricsComponentType, exporterMetricsHelper, options.url, config.selfObsMeterProvider));
 }
 
-export { toAnyValue as $, ATTR_EXCEPTION_TYPE as A, BindOnceFuture as B, ContextAPI as C, DiagAPI as D, createNoopMeter as E, suppressTracing as F, ExportResultCode as G, defaultResource as H, INVALID_SPAN_CONTEXT as I, JSON_ENCODER as J, isValidTraceId as K, hrTimeToNanoseconds as L, timeInputToHrTime as M, NOOP_METER as N, OTLPExporterBase as O, ATTR_URL_FULL as P, ATTR_USER_AGENT_ORIGINAL as Q, ROOT_CONTEXT as R, ATTR_HTTP_RESPONSE_STATUS_CODE$1 as S, TraceFlags as T, ATTR_SERVER_ADDRESS$1 as U, ATTR_SERVER_PORT$1 as V, ATTR_ERROR_TYPE$2 as W, ATTR_HTTP_REQUEST_METHOD as X, ATTR_HTTP_REQUEST_METHOD_ORIGINAL as Y, ProxyTracerProvider as Z, resourceFromAttributes as _, isSpanContextValid as a, ATTR_EXCEPTION_MESSAGE$1 as a0, ATTR_EXCEPTION_TYPE$1 as a1, ATTR_EXCEPTION_STACKTRACE$1 as a2, createNoopLogger as a3, NoopLogger as b, createContextKey as c, diag as d, NOOP_LOGGER as e, createInstrumentationScope as f, getGlobal as g, createResource as h, isTracingSuppressed as i, toAttributes as j, createLegacyOtlpBrowserExportDelegate as k, isTimeInput as l, hrTimeDuration as m, hrTime as n, otperformance as o, millisToHrTime as p, isTimeInputHrTime as q, registerGlobal as r, addHrTimes as s, trace as t, unregisterGlobal as u, ATTR_EXCEPTION_MESSAGE as v, ATTR_EXCEPTION_STACKTRACE as w, context as x, globalErrorHandler as y, ATTR_ERROR_TYPE as z };
-//# sourceMappingURL=create-legacy-browser-delegate-B4z_676L.js.map
+export { createNoopLogger as $, ATTR_EXCEPTION_TYPE as A, BindOnceFuture as B, ContextAPI as C, DiagAPI as D, createNoopMeter as E, suppressTracing as F, ExportResultCode as G, defaultResource as H, INVALID_SPAN_CONTEXT as I, JSON_ENCODER as J, isValidTraceId as K, ATTR_URL_FULL as L, ATTR_USER_AGENT_ORIGINAL as M, NOOP_METER as N, OTLPExporterBase as O, hrTimeToNanoseconds as P, timeInputToHrTime as Q, ROOT_CONTEXT as R, ATTR_HTTP_RESPONSE_STATUS_CODE$1 as S, TraceFlags as T, ATTR_SERVER_ADDRESS$1 as U, ATTR_SERVER_PORT$1 as V, ATTR_HTTP_REQUEST_METHOD as W, ATTR_HTTP_REQUEST_METHOD_ORIGINAL as X, ProxyTracerProvider as Y, resourceFromAttributes as Z, toAnyValue as _, isSpanContextValid as a, NoopLogger as b, createContextKey as c, diag as d, NOOP_LOGGER as e, createInstrumentationScope as f, getGlobal as g, createResource as h, isTracingSuppressed as i, toAttributes as j, createLegacyOtlpBrowserExportDelegate as k, isTimeInput as l, hrTimeDuration as m, hrTime as n, otperformance as o, millisToHrTime as p, isTimeInputHrTime as q, registerGlobal as r, addHrTimes as s, trace as t, unregisterGlobal as u, ATTR_EXCEPTION_MESSAGE as v, ATTR_EXCEPTION_STACKTRACE as w, context as x, globalErrorHandler as y, ATTR_ERROR_TYPE$1 as z };
+//# sourceMappingURL=create-legacy-browser-delegate-4GII-R4B.js.map