@harperfast/harper 5.2.9 → 5.3.0-alpha.1

package/dist/utility/logging/logRotator.js

@@ -43,6 +43,7 @@ const util_1 = require("util");
 const stream_1 = require("stream");
 const pipe = (0, util_1.promisify)(stream_1.pipeline);
 const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
 const envMgr = __importStar(require("../environment/environmentManager.js"));
 envMgr.initSync();
 const harper_logger_ts_1 = __importDefault(require("./harper_logger.js"));
@@ -94,70 +95,80 @@ function logRotator({ logger, maxSize, interval, retention, enabled, path: rotat
     let lastRotationTime = Date.now();
     harper_logger_ts_1.default.trace('Log rotate enabled, maxSize:', maxSize, 'interval:', interval);
     const setIntervalId = setInterval(async () => {
-        // A missing/relocated active log file only invalidates the rotation checks below — retention cleanup
-        // must still run. So skip the individual check on ENOENT rather than returning from the whole tick.
-        if (maxBytes) {
-            let fileStats;
-            try {
-                fileStats = await fs_1.promises.stat(logger.path);
-            }
-            catch (err) {
-                // If the log file doesn't exist, skip the size-based rotation check
-                if (err.code !== 'ENOENT')
-                    throw err;
-            }
-            if (fileStats && fileStats.size >= maxBytes) {
+        // The tick is async but setInterval doesn't await it, so any error that escapes this callback
+        // becomes an unhandled rejection rather than surfacing anywhere useful — and since it isn't
+        // caught, it also skips the retention cleanup below. Contain everything here and report via
+        // the logger instead, so one bad tick (e.g. an unexpected fs error) never kills rotation for
+        // the rest of the process's life.
+        try {
+            // A missing/relocated active log file only invalidates the rotation checks below — retention cleanup
+            // must still run. So skip the individual check on ENOENT rather than returning from the whole tick.
+            if (maxBytes) {
+                let fileStats;
                 try {
-                    lastRotatedLogPath = await moveLogFile(logger.path, rotatedLogDir, logger);
+                    fileStats = await fs_1.promises.stat(logger.path);
                 }
                 catch (err) {
-                    // If the log file doesn't exist, skip rotation
+                    // If the log file doesn't exist, skip the size-based rotation check
                     if (err.code !== 'ENOENT')
                         throw err;
                 }
+                if (fileStats && fileStats.size >= maxBytes) {
+                    try {
+                        lastRotatedLogPath = await moveLogFile(logger.path, rotatedLogDir, logger);
+                    }
+                    catch (err) {
+                        // If the log file doesn't exist, skip rotation
+                        if (err.code !== 'ENOENT')
+                            throw err;
+                    }
+                }
             }
-        }
-        if (maxInterval) {
-            const minSinceLastRotate = Date.now() - lastRotationTime;
-            if (minSinceLastRotate >= maxInterval) {
+            if (maxInterval) {
+                const minSinceLastRotate = Date.now() - lastRotationTime;
+                if (minSinceLastRotate >= maxInterval) {
+                    try {
+                        lastRotatedLogPath = await moveLogFile(logger.path, rotatedLogDir, logger);
+                        lastRotationTime = Date.now();
+                    }
+                    catch (err) {
+                        // If the log file doesn't exist, skip rotation
+                        if (err.code !== 'ENOENT')
+                            throw err;
+                    }
+                }
+            }
+            if (retention || reclamationPriority) {
+                // remove old logs after retention time
+                // adjust retention time if there is a reclamation priority in place
+                const retentionMs = (0, common_utils_ts_1.convertToMS)(retention ?? '1M') / (1 + reclamationPriority);
+                reclamationPriority = 0; // reset it after use
+                let files;
                 try {
-                    lastRotatedLogPath = await moveLogFile(logger.path, rotatedLogDir, logger);
-                    lastRotationTime = Date.now();
+                    files = await fs_1.promises.readdir(rotatedLogDir);
                 }
                 catch (err) {
-                    // If the log file doesn't exist, skip rotation
+                    // The rotated log dir may not exist yet (nothing rotated so far); nothing to clean up
                     if (err.code !== 'ENOENT')
-                        throw err;
+                        harper_logger_ts_1.default.error('Error reading rotated log directory', rotatedLogDir, err);
+                    files = [];
                 }
-            }
-        }
-        if (retention || reclamationPriority) {
-            // remove old logs after retention time
-            // adjust retention time if there is a reclamation priority in place
-            const retentionMs = (0, common_utils_ts_1.convertToMS)(retention ?? '1M') / (1 + reclamationPriority);
-            reclamationPriority = 0; // reset it after use
-            let files;
-            try {
-                files = await fs_1.promises.readdir(rotatedLogDir);
-            }
-            catch (err) {
-                // The rotated log dir may not exist yet (nothing rotated so far); nothing to clean up
-                if (err.code !== 'ENOENT')
-                    harper_logger_ts_1.default.error('Error reading rotated log directory', rotatedLogDir, err);
-                files = [];
-            }
-            for (const file of files) {
-                try {
-                    const fileStats = await fs_1.promises.stat(path.join(rotatedLogDir, file));
-                    if (Date.now() - fileStats.mtimeMs > retentionMs) {
-                        await fs_1.promises.unlink(path.join(rotatedLogDir, file));
+                for (const file of files) {
+                    try {
+                        const fileStats = await fs_1.promises.stat(path.join(rotatedLogDir, file));
+                        if (Date.now() - fileStats.mtimeMs > retentionMs) {
+                            await fs_1.promises.unlink(path.join(rotatedLogDir, file));
+                        }
+                    }
+                    catch (err) {
+                        harper_logger_ts_1.default.error('Error trying to remove log', file, err);
                     }
-                }
-                catch (err) {
-                    harper_logger_ts_1.default.error('Error trying to remove log', file, err);
                 }
             }
         }
+        catch (err) {
+            harper_logger_ts_1.default.error('Error during log rotation audit tick for', logger.path, err);
+        }
     }, auditInterval ?? LOG_AUDIT_INTERVAL).unref();
     return {
         end() {
@@ -168,9 +179,25 @@ function logRotator({ logger, maxSize, interval, retention, enabled, path: rotat
         },
     };
 }
+// Monotonically increasing across every rotation in this process, regardless of which logger/source
+// triggered it — combined with the pid, this guarantees two archive names can never collide even if
+// two rotations for two different sources race concurrently within the same audit-interval tick.
+let rotationSequence = 0;
 async function moveLogFile(logPath, rotatedLogPath, logger) {
     const compress = envMgr.get(hdbTerms_ts_1.CONFIG_PARAMS.LOGGING_ROTATION_COMPRESS);
-    let fullRotateLogPath = path.join(rotatedLogPath, `HDB-${new Date(Date.now()).toISOString().replaceAll(':', '-')}.log`);
+    // Name the archive after its source log (hdb, external, a component name, ...), not a fixed
+    // "HDB" literal — external/component loggers can now inherit rotation from the main logger
+    // (#1877) and default to the same rotated directory as it, so distinct sources rotating in
+    // the same audit tick must not collide on the same timestamp-only filename. A basename alone
+    // is not enough either: two distinct source paths can share a basename (e.g. `/logs/a/hdb.log`
+    // and `/logs/b/hdb.log`), so a hash of the full resolved source path plus a pid+sequence suffix
+    // give every archive a name POSIX rename() can never clobber, even under a same-millisecond race.
+    const sourceName = path.basename(logPath, path.extname(logPath)) || 'HDB';
+    // sha256, not sha1: this only needs a stable identifier, not cryptographic strength, but a FIPS-mode
+    // OpenSSL provider disables sha1 and throws synchronously, which would crash every rotation tick.
+    const sourceId = (0, crypto_1.createHash)('sha256').update(path.resolve(logPath)).digest('hex').slice(0, 8);
+    const uniqueSuffix = `${process.pid}-${rotationSequence++}`;
+    let fullRotateLogPath = path.join(rotatedLogPath, `${sourceName}-${sourceId}-${new Date(Date.now()).toISOString().replaceAll(':', '-')}-${uniqueSuffix}.log`);
     // Move log file to rotated log path first (if we crash
     // during compression, we don't want to restart the compression with a new file)
     await fs_1.promises.rename(logPath, fullRotateLogPath);

package/dist/utility/logging/logRotator.js.map

@@ -1 +1 @@
-{"version":3,"file":"logRotator.js","sourceRoot":"","sources":["../../../utility/logging/logRotator.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBJ,gCAAU;AAlBnB,2BAAwF;AACxF,+BAAkC;AAClC,+BAAiC;AACjC,mCAAkC;AAClC,MAAM,IAAI,GAAG,IAAA,gBAAS,EAAC,iBAAQ,CAAC,CAAC;AACjC,2CAA6B;AAC7B,6EAA+D;AAC/D,MAAM,CAAC,QAAQ,EAAE,CAAC;AAClB,0EAA2C;AAC3C,gDAA+C;AAC/C,wDAAiD;AACjD,8EAA0E;AAE1E,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,sBAAsB,GAC3B,8IAA8I,CAAC;AAIhJ;;;;;GAKG;AACH,SAAS,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAO;IAC7G,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO;IAC9B,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAA,4CAAoB,EACnB,MAAM,CAAC,IAAI,EACX,CAAC,QAAQ,EAAE,EAAE;QACZ,mBAAmB,GAAG,QAAQ,CAAC;IAChC,CAAC,EACD,IAAI,CACJ,CAAC;IAEF,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IACD,IAAA,cAAS,EAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,kCAAkC;IAClC,IAAI,QAAQ,CAAC;IACb,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,GAAG,UAAU,CAAC;aAC1C,IAAI,IAAI,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC;;YAC5C,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,gCAAgC;IAChC,IAAI,WAAW,CAAC;IAChB,IAAI,QAAQ,EAAE,CAAC;QACd,WAAW,GAAG,IAAA,6BAAW,EAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,kBAAkB,CAAC;IACvB,8BAA8B;IAC9B,IAAI,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,0BAAS,CAAC,KAAK,CAAC,8BAA8B,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,qGAAqG;QACrG,oGAAoG;QACpG,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,SAAS,CAAC;YACd,IAAI,CAAC;gBACJ,SAAS,GAAG,MAAM,aAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,oEAAoE;gBACpE,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YACtC,CAAC;YAED,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC7C,IAAI,CAAC;oBACJ,kBAAkB,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC5E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,+CAA+C;oBAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,GAAG,CAAC;gBACtC,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YACjB,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;YACzD,IAAI,kBAAkB,IAAI,WAAW,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACJ,kBAAkB,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;oBAC3E,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC/B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,+CAA+C;oBAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,GAAG,CAAC;gBACtC,CAAC;YACF,CAAC;QACF,CAAC;QACD,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;YACtC,uCAAuC;YACvC,oEAAoE;YACpE,MAAM,WAAW,GAAG,IAAA,6BAAW,EAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC;YAC/E,mBAAmB,GAAG,CAAC,CAAC,CAAC,qBAAqB;YAC9C,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBACJ,KAAK,GAAG,MAAM,aAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,sFAAsF;gBACtF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,0BAAS,CAAC,KAAK,CAAC,qCAAqC,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;gBACtG,KAAK,GAAG,EAAE,CAAC;YACZ,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBACJ,MAAM,SAAS,GAAG,MAAM,aAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;oBACpE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;wBAClD,MAAM,aAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;oBACrD,CAAC;gBACF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,0BAAS,CAAC,KAAK,CAAC,4BAA4B,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC,EAAE,aAAa,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO;QACN,GAAG;YACF,aAAa,CAAC,aAAa,CAAC,CAAC;QAC9B,CAAC;QACD,qBAAqB;YACpB,OAAO,kBAAkB,CAAC;QAC3B,CAAC;KACD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,cAAsB,EAAE,MAAY;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,2BAAa,CAAC,yBAAyB,CAAC,CAAC;IACrE,IAAI,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAChC,cAAc,EACd,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CACpE,CAAC;IACF,uDAAuD;IACvD,gFAAgF;IAChF,MAAM,aAAM,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAChD,gGAAgG;IAChG,qGAAqG;IACrG,wGAAwG;IACxG,mGAAmG;IACnG,kGAAkG;IAClG,CAAC,MAAM,EAAE,YAAY,IAAI,0BAAS,CAAC,YAAY,CAAC,EAAE,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,GAAG,iBAAiB,CAAC;QAC5B,iBAAiB,IAAI,KAAK,CAAC;QAC3B,MAAM,IAAI,CAAC,IAAA,qBAAgB,EAAC,OAAO,CAAC,EAAE,IAAA,iBAAU,GAAE,EAAE,IAAA,sBAAiB,EAAC,iBAAiB,CAAC,CAAC,CAAC;QAC1F,MAAM,aAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,gIAAgI;IAChI,0BAAS,CAAC,MAAM,CAAC,qCAAqC,iBAAiB,EAAE,CAAC,CAAC;IAC3E,OAAO,iBAAiB,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"logRotator.js","sourceRoot":"","sources":["../../../utility/logging/logRotator.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBJ,gCAAU;AAnBnB,2BAAwF;AACxF,+BAAkC;AAClC,+BAAiC;AACjC,mCAAkC;AAClC,MAAM,IAAI,GAAG,IAAA,gBAAS,EAAC,iBAAQ,CAAC,CAAC;AACjC,2CAA6B;AAC7B,mCAAoC;AACpC,6EAA+D;AAC/D,MAAM,CAAC,QAAQ,EAAE,CAAC;AAClB,0EAA2C;AAC3C,gDAA+C;AAC/C,wDAAiD;AACjD,8EAA0E;AAE1E,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,sBAAsB,GAC3B,8IAA8I,CAAC;AAIhJ;;;;;GAKG;AACH,SAAS,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAO;IAC7G,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO;IAC9B,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAA,4CAAoB,EACnB,MAAM,CAAC,IAAI,EACX,CAAC,QAAQ,EAAE,EAAE;QACZ,mBAAmB,GAAG,QAAQ,CAAC;IAChC,CAAC,EACD,IAAI,CACJ,CAAC;IAEF,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IACjE,CAAC;IACD,IAAA,cAAS,EAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,kCAAkC;IAClC,IAAI,QAAQ,CAAC;IACb,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,GAAG,UAAU,CAAC;aAC1C,IAAI,IAAI,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC;;YAC5C,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,gCAAgC;IAChC,IAAI,WAAW,CAAC;IAChB,IAAI,QAAQ,EAAE,CAAC;QACd,WAAW,GAAG,IAAA,6BAAW,EAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,kBAAkB,CAAC;IACvB,8BAA8B;IAC9B,IAAI,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,0BAAS,CAAC,KAAK,CAAC,8BAA8B,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChF,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,8FAA8F;QAC9F,4FAA4F;QAC5F,4FAA4F;QAC5F,6FAA6F;QAC7F,kCAAkC;QAClC,IAAI,CAAC;YACJ,qGAAqG;YACrG,oGAAoG;YACpG,IAAI,QAAQ,EAAE,CAAC;gBACd,IAAI,SAAS,CAAC;gBACd,IAAI,CAAC;oBACJ,SAAS,GAAG,MAAM,aAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC5C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,oEAAoE;oBACpE,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,GAAG,CAAC;gBACtC,CAAC;gBAED,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;oBAC7C,IAAI,CAAC;wBACJ,kBAAkB,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;oBAC5E,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,+CAA+C;wBAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;4BAAE,MAAM,GAAG,CAAC;oBACtC,CAAC;gBACF,CAAC;YACF,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBACjB,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;gBACzD,IAAI,kBAAkB,IAAI,WAAW,EAAE,CAAC;oBACvC,IAAI,CAAC;wBACJ,kBAAkB,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;wBAC3E,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC/B,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,+CAA+C;wBAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;4BAAE,MAAM,GAAG,CAAC;oBACtC,CAAC;gBACF,CAAC;YACF,CAAC;YACD,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;gBACtC,uCAAuC;gBACvC,oEAAoE;gBACpE,MAAM,WAAW,GAAG,IAAA,6BAAW,EAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC;gBAC/E,mBAAmB,GAAG,CAAC,CAAC,CAAC,qBAAqB;gBAC9C,IAAI,KAAK,CAAC;gBACV,IAAI,CAAC;oBACJ,KAAK,GAAG,MAAM,aAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC7C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,sFAAsF;oBACtF,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,0BAAS,CAAC,KAAK,CAAC,qCAAqC,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;oBACtG,KAAK,GAAG,EAAE,CAAC;gBACZ,CAAC;gBACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBAC1B,IAAI,CAAC;wBACJ,MAAM,SAAS,GAAG,MAAM,aAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;wBACpE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,GAAG,WAAW,EAAE,CAAC;4BAClD,MAAM,aAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;wBACrD,CAAC;oBACF,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,0BAAS,CAAC,KAAK,CAAC,4BAA4B,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;oBAC1D,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,0BAAS,CAAC,KAAK,CAAC,0CAA0C,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;IACF,CAAC,EAAE,aAAa,IAAI,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO;QACN,GAAG;YACF,aAAa,CAAC,aAAa,CAAC,CAAC;QAC9B,CAAC;QACD,qBAAqB;YACpB,OAAO,kBAAkB,CAAC;QAC3B,CAAC;KACD,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,oGAAoG;AACpG,iGAAiG;AACjG,IAAI,gBAAgB,GAAG,CAAC,CAAC;AAEzB,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,cAAsB,EAAE,MAAY;IAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,2BAAa,CAAC,yBAAyB,CAAC,CAAC;IACrE,4FAA4F;IAC5F,2FAA2F;IAC3F,2FAA2F;IAC3F,6FAA6F;IAC7F,+FAA+F;IAC/F,gGAAgG;IAChG,kGAAkG;IAClG,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC;IAC1E,qGAAqG;IACrG,kGAAkG;IAClG,MAAM,QAAQ,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,gBAAgB,EAAE,EAAE,CAAC;IAC5D,IAAI,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAChC,cAAc,EACd,GAAG,UAAU,IAAI,QAAQ,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,YAAY,MAAM,CAC1G,CAAC;IACF,uDAAuD;IACvD,gFAAgF;IAChF,MAAM,aAAM,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAChD,gGAAgG;IAChG,qGAAqG;IACrG,wGAAwG;IACxG,mGAAmG;IACnG,kGAAkG;IAClG,CAAC,MAAM,EAAE,YAAY,IAAI,0BAAS,CAAC,YAAY,CAAC,EAAE,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,GAAG,iBAAiB,CAAC;QAC5B,iBAAiB,IAAI,KAAK,CAAC;QAC3B,MAAM,IAAI,CAAC,IAAA,qBAAgB,EAAC,OAAO,CAAC,EAAE,IAAA,iBAAU,GAAE,EAAE,IAAA,sBAAiB,EAAC,iBAAiB,CAAC,CAAC,CAAC;QAC1F,MAAM,aAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,gIAAgI;IAChI,0BAAS,CAAC,MAAM,CAAC,qCAAqC,iBAAiB,EAAE,CAAC,CAAC;IAC3E,OAAO,iBAAiB,CAAC;AAC1B,CAAC"}

package/dist/utility/nodeIdentity.d.ts

@@ -0,0 +1,9 @@
+/**
+ * A node's identity — node.hostname, and the replication.hostname / certificate it falls back to —
+ * must be a bare hostname or IP literal, not a URL: it becomes the certificate common name and the
+ * host replication advertises and dials, so a scheme/port/path/non-string corrupts both (harper#2218,
+ * where "ws://http://host:9926:9925" resolves to host "http"). Returns a reason clause when `value`
+ * is not a bare host, else undefined. An empty string is "unset" (a caller's cue to fall back), not a
+ * violation.
+ */
+export declare function bareHostViolation(value: unknown): string | undefined;

package/dist/utility/nodeIdentity.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bareHostViolation = bareHostViolation;
+const node_net_1 = require("node:net");
+/**
+ * A node's identity — node.hostname, and the replication.hostname / certificate it falls back to —
+ * must be a bare hostname or IP literal, not a URL: it becomes the certificate common name and the
+ * host replication advertises and dials, so a scheme/port/path/non-string corrupts both (harper#2218,
+ * where "ws://http://host:9926:9925" resolves to host "http"). Returns a reason clause when `value`
+ * is not a bare host, else undefined. An empty string is "unset" (a caller's cue to fall back), not a
+ * violation.
+ */
+function bareHostViolation(value) {
+    if (typeof value !== 'string')
+        return `must be a string, but is a ${value === null ? 'null' : typeof value}`;
+    if (value === '')
+        return undefined;
+    // The identity is stored unbracketed (bracketing belongs to URL construction). Reject a bracketed
+    // form so it is never cached — otherwise net.isIP fails on it and the certificate SAN is mistyped
+    // as DNS rather than IP, and the same node's identity string would differ by source.
+    if (value.includes('[') || value.includes(']'))
+        return 'must be an unbracketed IPv6 literal (e.g. "::1", not "[::1]")';
+    // A zone id ("fe80::1%eth0") passes net.isIP but has no valid URL authority, so exclude it here.
+    if ((0, node_net_1.isIP)(value) && !value.includes('%'))
+        return undefined; // a bare IPv4/IPv6 literal is a valid identity
+    if (value.includes('://'))
+        return 'must not include a URL scheme';
+    let url;
+    try {
+        // Parse under a special scheme so the host grammar matches the ws:// replication URLs that
+        // consume this value — a host this accepts is one the consumer accepts (a non-special scheme is
+        // more lenient and would pass e.g. "node%20" or "0x7f.1"). A port or path makes url.hostname
+        // differ from the input and is caught by the round-trip check below.
+        url = new URL(`https://${value}`);
+    }
+    catch {
+        return 'is not a valid hostname';
+    }
+    // Report the port before the round-trip check: the parser strips a default port for the scheme it
+    // was given (":443" under https), which would otherwise surface as a vaguer "is not a bare hostname".
+    if (url.port || (url.hostname && value.slice(url.hostname.length).startsWith(':'))) {
+        return 'must not include a port';
+    }
+    if (url.username || url.password)
+        return 'must not include credentials';
+    if (url.search)
+        return 'must not include a query string';
+    if (url.hash)
+        return 'must not include a fragment';
+    if (url.pathname && url.pathname !== '/')
+        return 'must not include a path';
+    // The host must survive parsing unchanged (compared case-insensitively, since URL lowercases it);
+    // anything that does not round-trip carried extra syntax and is not a bare host.
+    if (url.hostname.toLowerCase() !== value.toLowerCase())
+        return 'is not a bare hostname';
+    return undefined;
+}
+//# sourceMappingURL=nodeIdentity.js.map

package/dist/utility/nodeIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodeIdentity.js","sourceRoot":"","sources":["../../utility/nodeIdentity.ts"],"names":[],"mappings":";;AAUA,8CAkCC;AA5CD,uCAAgC;AAEhC;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,8BAA8B,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC;IAC7G,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACnC,kGAAkG;IAClG,kGAAkG;IAClG,qFAAqF;IACrF,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC7C,OAAO,+DAA+D,CAAC;IACxE,iGAAiG;IACjG,IAAI,IAAA,eAAI,EAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,+CAA+C;IAC1G,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,+BAA+B,CAAC;IAClE,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACJ,2FAA2F;QAC3F,gGAAgG;QAChG,6FAA6F;QAC7F,qEAAqE;QACrE,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,yBAAyB,CAAC;IAClC,CAAC;IACD,kGAAkG;IAClG,sGAAsG;IACtG,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,yBAAyB,CAAC;IAClC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,8BAA8B,CAAC;IACxE,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,iCAAiC,CAAC;IACzD,IAAI,GAAG,CAAC,IAAI;QAAE,OAAO,6BAA6B,CAAC;IACnD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;QAAE,OAAO,yBAAyB,CAAC;IAC3E,kGAAkG;IAClG,iFAAiF;IACjF,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAAE,OAAO,wBAAwB,CAAC;IACxF,OAAO,SAAS,CAAC;AAClB,CAAC"}

package/dist/utility/npmUtilities.js

@@ -57,14 +57,15 @@ async function installModules(req) {
     const deprecationWarning = 'install_node_modules is deprecated. Dependencies are automatically installed on' +
         ' deploy, and install_node_modules can lead to inconsistent behavior';
     harper_logger_ts_1.default.warn(deprecationWarning, req.projects);
-    const validation = modulesValidator(req);
+    const { error: validation, value: validatedRequest } = modulesValidator(req);
     if (validation) {
         throw (0, hdbError_ts_1.handleHDBError)(validation, validation.message, HTTP_STATUS_CODES.BAD_REQUEST);
     }
-    let { projects, dryRun } = req;
+    const { projects, dry_run: dryRun } = validatedRequest;
     const componentsRootDirPath = (0, configUtils_ts_1.getConfigPath)(hdbTerms_ts_1.CONFIG_PARAMS.COMPONENTSROOT);
     const responseObject = {};
-    const args = ['install', '--force', '--omit=dev', '--json'];
+    // `allowInstallScripts` is true because this operation has always run a project's install lifecycle
+    const args = [...(0, Application_ts_1.packageManagerInstallArguments)('npm', true, true), '--json'];
     if (dryRun)
         args.push('--dry-run');
     for (const project of projects) {
@@ -114,15 +115,16 @@ function parseNPMStdErr(stderr) {
     }
 }
 /**
- * Validator for both installModules & auditModules
+ * Validator for installModules
  * @param {Object} req
- * @returns {*}
  */
 function modulesValidator(req) {
+    // `dryRun` was the only spelling that worked before dry_run was honored; keep it accepted, but
+    // reject a request that carries both rather than picking a winner
     const funcSchema = joi_1.default.object({
         projects: joi_1.default.array().min(1).items(joi_1.default.string()).required(),
         dry_run: joi_1.default.boolean().default(false),
-    });
-    return validator.validateBySchema(req, funcSchema);
+    }).rename('dryRun', 'dry_run', { ignoreUndefined: true });
+    return validator.validateAndConvertBySchema(req, funcSchema);
 }
 //# sourceMappingURL=npmUtilities.js.map

package/dist/utility/npmUtilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"npmUtilities.js","sourceRoot":"","sources":["../../utility/npmUtilities.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBb,wCAuDC;AA5ED,8CAAsB;AACtB,2CAA6B;AAE7B,sDAAiE;AAEjE,MAAM,EAAE,iBAAiB,EAAE,GAAG,uBAAS,CAAC;AAExC,8EAAgE;AAChE,kFAAsD;AAEtD,+CAA8C;AAC9C,6DAAyD;AACzD,iEAAmE;AACnE,2FAAyF;AACzF,yEAAqE;AAErE;;;;GAIG;AACI,KAAK,UAAU,cAAc,CAAC,GAAQ;IAC5C,MAAM,kBAAkB,GACvB,iFAAiF;QACjF,qEAAqE,CAAC;IACvE,0BAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,IAAA,4BAAc,EAAC,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAE/B,MAAM,qBAAqB,GAAG,IAAA,8BAAa,EAAC,2BAAa,CAAC,cAAc,CAAC,CAAC;IAE1E,MAAM,cAAc,GAAQ,EAAE,CAAC;IAE/B,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAChE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC;YACJ,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,0DAA4B,EAC1D,WAAW,EACX,GAAG,EAAE,CAAC,IAAA,oCAAmB,EAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAC5D,EAAE,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,IAAA,kCAAe,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CACzF,CAAC;YACF,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC;gBACJ,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC;YAC7C,CAAC;YAED,IAAI,CAAC;gBACJ,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC;YAC5C,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACP,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC;YACnD,CAAC;YACD,SAAS;QACV,CAAC;IACF,CAAC;IAED,0BAAY,CAAC,IAAI,CAAC,yCAAyC,cAAc,EAAE,CAAC,CAAC;IAC7E,cAAc,CAAC,OAAO,GAAG,kBAAkB,CAAC;IAC5C,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACrC,qHAAqH;IACrH,IAAI,iBAAiB,GAAG,YAAY,CAAC;IACrC,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACP,OAAO,MAAM,CAAC;IACf,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAQ;IACjC,MAAM,UAAU,GAAG,aAAG,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,aAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAG,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC3D,OAAO,EAAE,aAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACrC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC,gBAAgB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"npmUtilities.js","sourceRoot":"","sources":["../../utility/npmUtilities.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBb,wCAwDC;AA7ED,8CAAsB;AACtB,2CAA6B;AAE7B,sDAAiE;AAEjE,MAAM,EAAE,iBAAiB,EAAE,GAAG,uBAAS,CAAC;AAExC,8EAAgE;AAChE,kFAAsD;AAEtD,+CAA8C;AAC9C,6DAAyD;AACzD,iEAAmG;AACnG,2FAAyF;AACzF,yEAAqE;AAErE;;;;GAIG;AACI,KAAK,UAAU,cAAc,CAAC,GAAQ;IAC5C,MAAM,kBAAkB,GACvB,iFAAiF;QACjF,qEAAqE,CAAC;IACvE,0BAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,UAAU,EAAE,CAAC;QAChB,MAAM,IAAA,4BAAc,EAAC,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC;IAEvD,MAAM,qBAAqB,GAAG,IAAA,8BAAa,EAAC,2BAAa,CAAC,cAAc,CAAC,CAAC;IAE1E,MAAM,cAAc,GAAQ,EAAE,CAAC;IAE/B,oGAAoG;IACpG,MAAM,IAAI,GAAG,CAAC,GAAG,IAAA,+CAA8B,EAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAChE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC;YACJ,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,0DAA4B,EAC1D,WAAW,EACX,GAAG,EAAE,CAAC,IAAA,oCAAmB,EAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAC5D,EAAE,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,IAAA,kCAAe,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CACzF,CAAC;YACF,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClD,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAElD,IAAI,CAAC;gBACJ,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC;YAC7C,CAAC;YAED,IAAI,CAAC;gBACJ,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC;YAC5C,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACP,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC;YACnD,CAAC;YACD,SAAS;QACV,CAAC;IACF,CAAC;IAED,0BAAY,CAAC,IAAI,CAAC,yCAAyC,cAAc,EAAE,CAAC,CAAC;IAC7E,cAAc,CAAC,OAAO,GAAG,kBAAkB,CAAC;IAC5C,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACrC,qHAAqH;IACrH,IAAI,iBAAiB,GAAG,YAAY,CAAC;IACrC,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACP,OAAO,MAAM,CAAC;IACf,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAQ;IACjC,+FAA+F;IAC/F,kEAAkE;IAClE,MAAM,UAAU,GAAG,aAAG,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,aAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAG,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC3D,OAAO,EAAE,aAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACrC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1D,OAAO,SAAS,CAAC,0BAA0B,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AAC9D,CAAC"}

package/dist/utility/operationPermissions.d.ts

@@ -22,7 +22,7 @@ export declare const OPERATION_PERMISSION_GROUPS: {
      * and bulk load. Does NOT include schema DDL (create_attribute), user/role management,
      * or admin reads (get_configuration, logs). Add those explicitly when needed.
      */
-    readonly standard_user: readonly ["search", "search_by_conditions", "search_by_hash", "search_by_id", "search_by_value", "sql", "describe_all", "describe_schema", "describe_database", "describe_table", "user_info", "get_job", "get_analytics", "list_metrics", "describe_metric", "insert", "update", "upsert", "delete", "csv_data_load", "csv_file_load", "csv_url_load", "import_from_s3"];
+    readonly standard_user: readonly ["search", "search_by_conditions", "search_by_hash", "search_by_id", "search_by_value", "sql", "describe_all", "describe_schema", "describe_database", "describe_table", "user_info", "get_job", "get_analytics", "list_metrics", "describe_metric", "insert", "update", "upsert", "put", "delete", "csv_data_load", "csv_file_load", "csv_url_load", "import_from_s3"];
     /**
      * Drive the built-in agent (#626): send prompts, read/list sessions, and approve/cancel
      * runs. Grants a scoped, non-super_user "delegation" role access to the agent without full
@@ -42,6 +42,8 @@ export declare function registerGrantableOperation(name: string): void;
  * primarily for tests that register throwaway ops and must not leak them into the global set.
  */
 export declare function unregisterGrantableOperation(name: string): void;
+export declare function registerWorkerGrantableOperation(name: string): void;
+export declare function unregisterWorkerGrantableOperation(name: string): void;
 /**
  * Validates that every entry in an operations array is a known operation name or group name.
  * Returns the first invalid entry, or null if all entries are valid.

package/dist/utility/operationPermissions.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.OPERATION_PERMISSION_GROUPS = void 0;
 exports.registerGrantableOperation = registerGrantableOperation;
 exports.unregisterGrantableOperation = unregisterGrantableOperation;
+exports.registerWorkerGrantableOperation = registerWorkerGrantableOperation;
+exports.unregisterWorkerGrantableOperation = unregisterWorkerGrantableOperation;
 exports.validateOperations = validateOperations;
 exports.expandOperationsPerms = expandOperationsPerms;
 const hdbTerms_ts_1 = require("./hdbTerms.js");
@@ -75,6 +77,7 @@ exports.OPERATION_PERMISSION_GROUPS = {
         hdbTerms_ts_1.OPERATIONS_ENUM.INSERT,
         hdbTerms_ts_1.OPERATIONS_ENUM.UPDATE,
         hdbTerms_ts_1.OPERATIONS_ENUM.UPSERT,
+        hdbTerms_ts_1.OPERATIONS_ENUM.PUT,
         hdbTerms_ts_1.OPERATIONS_ENUM.DELETE,
         // Bulk load
         hdbTerms_ts_1.OPERATIONS_ENUM.CSV_DATA_LOAD,
@@ -102,6 +105,11 @@ const validGroups = new Set(Object.keys(exports.OPERATION_PERMISSION_GROUPS));
 // permission) whose names may fall outside OPERATIONS_ENUM. Tracked so they're grantable in a
 // role's `operations` allowlist (add_role/alter_role/impersonation validate against this set too).
 const dynamicallyRegisteredOps = new Set();
+// The same, for ops registered on a WORKER and mirrored here by the OPERATION_REGISTERED bridge.
+// Deliberately a separate set: the two threads can register the same name independently (a hot
+// deploy can add a `startOnMainThread` component while the worker offering that name is retiring),
+// so worker-lifecycle cleanup must not be able to revoke a mark this thread made itself.
+const workerRegisteredOps = new Set();
 /**
  * Mark a dynamically-registered operation name as a valid target for role `operations` grants.
  * Called by registerOperationPermission so a component op declaring a permission can actually be
@@ -117,13 +125,20 @@ function registerGrantableOperation(name) {
 function unregisterGrantableOperation(name) {
     dynamicallyRegisteredOps.delete(name);
 }
+function registerWorkerGrantableOperation(name) {
+    workerRegisteredOps.add(name);
+}
+function unregisterWorkerGrantableOperation(name) {
+    workerRegisteredOps.delete(name);
+}
 /**
  * Validates that every entry in an operations array is a known operation name or group name.
  * Returns the first invalid entry, or null if all entries are valid.
  */
 function validateOperations(operations) {
     for (const op of operations) {
-        if (typeof op !== 'string' || (!validOps.has(op) && !validGroups.has(op) && !dynamicallyRegisteredOps.has(op))) {
+        if (typeof op !== 'string' ||
+            (!validOps.has(op) && !validGroups.has(op) && !dynamicallyRegisteredOps.has(op) && !workerRegisteredOps.has(op))) {
             return String(op);
         }
     }

package/dist/utility/operationPermissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"operationPermissions.js","sourceRoot":"","sources":["../../utility/operationPermissions.ts"],"names":[],"mappings":";;;AAyGA,gEAEC;AAMD,oEAEC;AAMD,gDAOC;AAMD,sDAWC;AAjJD,+CAAgD;AAEhD;;;GAGG;AACU,QAAA,2BAA2B,GAAG;IAC1C;;;;;OAKG;IACH,SAAS,EAAE;QACV,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;KAC/B;IACD;;;;;OAKG;IACH,UAAU,EAAE;QACX,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,QAAQ;QACxB,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,kBAAkB;KAClC;IACD;;;;OAIG;IACH,aAAa,EAAE;QACd,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,YAAY;QACZ,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,cAAc;KAC9B;IACD;;;;;OAKG;IACH,KAAK,EAAE;QACN,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,gBAAgB;QAChC,6BAAe,CAAC,oBAAoB;KACpC;CACQ,CAAC;AAEX,MAAM,QAAQ,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,6BAAe,CAAC,CAAC,CAAC;AACtE,MAAM,WAAW,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,mCAA2B,CAAC,CAAC,CAAC;AACnF,yFAAyF;AACzF,8FAA8F;AAC9F,mGAAmG;AACnG,MAAM,wBAAwB,GAAgB,IAAI,GAAG,EAAE,CAAC;AAExD;;;;GAIG;AACH,SAAgB,0BAA0B,CAAC,IAAY;IACtD,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAgB,4BAA4B,CAAC,IAAY;IACxD,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,UAA8B;IAChE,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAChH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,UAA6B;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,mCAA2B,CAAC,IAAgD,CAAC,CAAC;QAC5F,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,MAAM,EAAE,IAAI,KAAK;gBAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC"}
+{"version":3,"file":"operationPermissions.js","sourceRoot":"","sources":["../../utility/operationPermissions.ts"],"names":[],"mappings":";;;AA+GA,gEAEC;AAMD,oEAEC;AAED,4EAEC;AAED,gFAEC;AAMD,gDAUC;AAMD,sDAWC;AAlKD,+CAAgD;AAEhD;;;GAGG;AACU,QAAA,2BAA2B,GAAG;IAC1C;;;;;OAKG;IACH,SAAS,EAAE;QACV,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;KAC/B;IACD;;;;;OAKG;IACH,UAAU,EAAE;QACX,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,QAAQ;QACxB,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,kBAAkB;KAClC;IACD;;;;OAIG;IACH,aAAa,EAAE;QACd,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,oBAAoB;QACpC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,cAAc;QAC9B,6BAAe,CAAC,SAAS;QACzB,6BAAe,CAAC,OAAO;QACvB,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,eAAe;QAC/B,oBAAoB;QACpB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,MAAM;QACtB,6BAAe,CAAC,GAAG;QACnB,6BAAe,CAAC,MAAM;QACtB,YAAY;QACZ,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,aAAa;QAC7B,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,cAAc;KAC9B;IACD;;;;;OAKG;IACH,KAAK,EAAE;QACN,6BAAe,CAAC,YAAY;QAC5B,6BAAe,CAAC,iBAAiB;QACjC,6BAAe,CAAC,mBAAmB;QACnC,6BAAe,CAAC,gBAAgB;QAChC,6BAAe,CAAC,oBAAoB;KACpC;CACQ,CAAC;AAEX,MAAM,QAAQ,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,6BAAe,CAAC,CAAC,CAAC;AACtE,MAAM,WAAW,GAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,mCAA2B,CAAC,CAAC,CAAC;AACnF,yFAAyF;AACzF,8FAA8F;AAC9F,mGAAmG;AACnG,MAAM,wBAAwB,GAAgB,IAAI,GAAG,EAAE,CAAC;AACxD,iGAAiG;AACjG,+FAA+F;AAC/F,mGAAmG;AACnG,yFAAyF;AACzF,MAAM,mBAAmB,GAAgB,IAAI,GAAG,EAAE,CAAC;AAEnD;;;;GAIG;AACH,SAAgB,0BAA0B,CAAC,IAAY;IACtD,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAgB,4BAA4B,CAAC,IAAY;IACxD,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAgB,gCAAgC,CAAC,IAAY;IAC5D,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,SAAgB,kCAAkC,CAAC,IAAY;IAC9D,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,UAA8B;IAChE,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC7B,IACC,OAAO,EAAE,KAAK,QAAQ;YACtB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAC/G,CAAC;YACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,UAA6B;IAClE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,mCAA2B,CAAC,IAAgD,CAAC,CAAC;QAC5F,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,MAAM,EAAE,IAAI,KAAK;gBAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACP,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC"}

package/dist/utility/operation_authorization.d.ts

@@ -1,3 +1,4 @@
+import PermissionResponseObject from '../security/data_objects/PermissionResponseObject.ts';
 /**
  * Register an authorization entry for a dynamically-registered operation (via
  * server.registerOperation), so it flows through verifyPerms and the role `operations`
@@ -15,14 +16,14 @@ export declare function registerOperationPermission(apiName: string, { requiresS
  * register throwaway ops and must not leak them into the process-global registries.
  */
 export declare function unregisterOperationPermission(apiName: string): void;
+export declare function verifyPermsAST(ast: any, userObject: any, operation: any, apiOperation?: "sql"): any;
 /**
- * Verifies permissions and restrictions for a SQL operation based on the user's assigned role.
- * @param ast - The SQL statement in Syntax Tree form.
- * @param userObject - The user and role specification
- * @param operation - The operation specified in the call.
- * @returns {null | PermissionResponseObject} - null if permissions match, errors returned in the PermissionResponseObject
+ * Gate 1 of the role `operations` allowlist, callable from every authorization path. The SQL path
+ * (chooseOperation → checkASTPermissions) never reaches verifyPerms, so it must call this
+ * directly — otherwise an allowlisted role could reach unlisted operations through `sql`.
+ * Returns null when allowed (or no allowlist present), a PermissionResponseObject denial otherwise.
  */
-export declare function verifyPermsAST(ast: any, userObject: any, operation: any): any;
+export declare function verifyOperationsAllowlist(requestJson: any, operationFunctionName: string): PermissionResponseObject;
 /**
  * Verifies permissions and restrictions for the NoSQL operation based on the user's assigned role.
  *
@@ -30,7 +31,9 @@ export declare function verifyPermsAST(ast: any, userObject: any, operation: any
  * @param operation - The name of the operation specified in the request.
  * @returns { null | PermissionResponseObject } - null if permissions match, errors are consolidated into PermissionResponseObj.
  */
-export declare function verifyPerms(requestJson: any, operation: any, _options?: any): any;
+export declare function verifyPerms(requestJson: any, operation: any, options?: {
+    apiOperation?: string;
+}): any;
 /**
  * Checks if the user's role has the required permissions for the operation specified.
  * @param userObject - the hdb_user specified in the request body