@naylence/advanced-security 0.3.7-test.114 → 0.3.7-test.115

package/dist/cjs/naylence/fame/stickiness/aft-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aft-helper.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/stickiness/aft-helper.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG9C,OAAO,EAAE,eAAe,EAA+B,MAAM,iBAAiB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,MAAM,GAAG,SAAS,CAAC,qCAAqC,CAAC,CAAC;AAQhE,MAAM,OAAO,SAAS;IAKpB,YAAmB,OAIlB;QACC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACrC,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAC5B,QAAsB,EACtB,UAAoC,EAAE;QAEtC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;QAExC,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACvB,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,WAAW,GAAmB;YAClC,GAAG,EAAE,IAAI,CAAC,OAAO;YACjB,MAAM;YACN,KAAK;YACL,SAAS,EAAE,SAAS,IAAI,IAAI;SAC7B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAExD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;YACrB,CAAC;YAED,IAAI,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,GAA0C,CAAC;YACvE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC5C,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,OAGnB,CAAC;YACJ,CAAC;YAEA,OAAmC,CAAC,GAAG,GAAG,QAAQ,CAAC;YAEpD,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBACpC,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,OAAO,EAAE,MAAM;gBACf,KAAK;gBACL,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;aAC1C,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBACpC,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEM,qBAAqB,CAC1B,QAAsB,EACtB,UAAmD,EAAE;QAErD,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IAEM,qBAAqB,CAC1B,QAAsB,EACtB,UAAmD,EAAE;QAErD,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IAEM,wBAAwB,CAC7B,QAAsB,EACtB,UAAmD,EAAE;QAErD,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;CACF;AAMD,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,EAAE,OAAO,EAAE,SAAS,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAG,cAAc,CAAC,eAAe,CAAC"}

package/dist/cjs/naylence/fame/stickiness/aft-load-balancer-stickiness-manager-factory.js

@@ -0,0 +1,65 @@
+import { LOAD_BALANCER_STICKINESS_MANAGER_FACTORY_BASE_TYPE, LoadBalancerStickinessManagerFactory, } from "@naylence/runtime";
+import { AFTLoadBalancerStickinessManager } from "./aft-load-balancer-stickiness-manager.js";
+import { createAftVerifier } from "./aft-verifier.js";
+import { StickinessMode, normalizeStickinessMode } from "./stickiness-mode.js";
+export const FACTORY_META = {
+    base: LOAD_BALANCER_STICKINESS_MANAGER_FACTORY_BASE_TYPE,
+    key: "AFTLoadBalancerStickinessManager",
+};
+const DEFAULT_VALUES = {
+    enabled: true,
+    clientEcho: false,
+    defaultTtlSec: 30,
+    cacheMax: 100000,
+    securityLevel: StickinessMode.SIGNED_OPTIONAL,
+    maxTtlSec: 7200,
+};
+function toBoolean(value, fallback) {
+    return typeof value === "boolean" ? value : fallback;
+}
+function toNumber(value, fallback) {
+    if (typeof value === "number" && Number.isFinite(value)) {
+        return value;
+    }
+    return fallback;
+}
+function normalizeConfig(config) {
+    const record = (config ?? {});
+    const normalizedSecurity = record.securityLevel
+        ? normalizeStickinessMode(record.securityLevel)
+        : DEFAULT_VALUES.securityLevel;
+    return {
+        ...record,
+        type: "AFTLoadBalancerStickinessManager",
+        enabled: toBoolean(record.enabled, DEFAULT_VALUES.enabled),
+        clientEcho: toBoolean(record.clientEcho, DEFAULT_VALUES.clientEcho),
+        defaultTtlSec: toNumber(record.defaultTtlSec, DEFAULT_VALUES.defaultTtlSec),
+        cacheMax: toNumber(record.cacheMax, DEFAULT_VALUES.cacheMax),
+        securityLevel: normalizedSecurity,
+        maxTtlSec: toNumber(record.maxTtlSec, DEFAULT_VALUES.maxTtlSec),
+    };
+}
+export class AFTLoadBalancerStickinessManagerFactory extends LoadBalancerStickinessManagerFactory {
+    constructor() {
+        super(...arguments);
+        this.type = "AFTLoadBalancerStickinessManager";
+        this.isDefault = false;
+    }
+    async create(config, keyProvider, verifier) {
+        const resolvedConfig = normalizeConfig(config);
+        let effectiveVerifier = verifier ?? null;
+        if (!effectiveVerifier && keyProvider) {
+            effectiveVerifier = createAftVerifier({
+                securityLevel: resolvedConfig.securityLevel ?? DEFAULT_VALUES.securityLevel,
+                keyProvider,
+                defaultTtlSec: resolvedConfig.defaultTtlSec ?? DEFAULT_VALUES.defaultTtlSec,
+            });
+        }
+        if (!effectiveVerifier) {
+            throw new Error("AFTLoadBalancerStickinessManagerFactory requires an AFT verifier or key provider");
+        }
+        return new AFTLoadBalancerStickinessManager(resolvedConfig, effectiveVerifier);
+    }
+}
+export default AFTLoadBalancerStickinessManagerFactory;
+//# sourceMappingURL=aft-load-balancer-stickiness-manager-factory.js.map

package/dist/cjs/naylence/fame/stickiness/aft-load-balancer-stickiness-manager-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aft-load-balancer-stickiness-manager-factory.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/stickiness/aft-load-balancer-stickiness-manager-factory.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kDAAkD,EAClD,oCAAoC,GAErC,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,gCAAgC,EAAE,MAAM,2CAA2C,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAa/E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,kDAAkD;IACxD,GAAG,EAAE,kCAAkC;CAC/B,CAAC;AAEX,MAAM,cAAc,GAAG;IACrB,OAAO,EAAE,IAAI;IACb,UAAU,EAAE,KAAK;IACjB,aAAa,EAAE,EAAE;IACjB,QAAQ,EAAE,MAAO;IACjB,aAAa,EAAE,cAAc,CAAC,eAAe;IAC7C,SAAS,EAAE,IAAI;CACP,CAAC;AAEX,SAAS,SAAS,CAAC,KAAc,EAAE,QAAiB;IAClD,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,QAAgB;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CACtB,MAGQ;IAER,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IAEzD,MAAM,kBAAkB,GAAG,MAAM,CAAC,aAAa;QAC7C,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,aAAwC,CAAC;QAC1E,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC;IAEjC,OAAO;QACL,GAAG,MAAM;QACT,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAC1D,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC;QACnE,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,aAAa,CAAC;QAC3E,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;QAC5D,aAAa,EAAE,kBAAkB;QACjC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;KACtB,CAAC;AAC9C,CAAC;AAED,MAAM,OAAO,uCAAwC,SAAQ,oCAA4E;IAAzI;;QACkB,SAAI,GAAG,kCAAkC,CAAC;QAC1C,cAAS,GAAG,KAAK,CAAC;IAkCpC,CAAC;IAhCQ,KAAK,CAAC,MAAM,CACjB,MAGQ,EACR,WAAgC,EAChC,QAA6B;QAE7B,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAE/C,IAAI,iBAAiB,GAAG,QAAQ,IAAI,IAAI,CAAC;QACzC,IAAI,CAAC,iBAAiB,IAAI,WAAW,EAAE,CAAC;YACtC,iBAAiB,GAAG,iBAAiB,CAAC;gBACpC,aAAa,EACX,cAAc,CAAC,aAAa,IAAI,cAAc,CAAC,aAAa;gBAC9D,WAAW;gBACX,aAAa,EACX,cAAc,CAAC,aAAa,IAAI,cAAc,CAAC,aAAa;aAC/D,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,gCAAgC,CACzC,cAAc,EACd,iBAAiB,CAClB,CAAC;IACJ,CAAC;CACF;AAED,eAAe,uCAAuC,CAAC"}

package/dist/cjs/naylence/fame/stickiness/aft-load-balancer-stickiness-manager.js

@@ -0,0 +1,447 @@
+import { DeliveryOriginType } from "@naylence/core";
+import { BaseNodeEventListener } from "@naylence/runtime";
+import { getLogger } from "@naylence/runtime";
+import { StickinessMode } from "./stickiness-mode.js";
+const logger = getLogger("naylence.fame.stickiness.aft_load_balancer_stickiness_manager");
+class AFTAssociation {
+    constructor(params) {
+        this.replicaId = params.replicaId;
+        this.token = params.token;
+        this.sid = params.sid;
+        this.exp = params.exp;
+        this.trustLevel = params.trustLevel;
+        this.scope = params.scope ?? null;
+        this.clientSid = params.clientSid ?? null;
+        this.createdAt = params.createdAt ?? Math.floor(Date.now() / 1000);
+    }
+    isExpired(referenceTime = Math.floor(Date.now() / 1000)) {
+        return referenceTime >= this.exp;
+    }
+    isLowTrust() {
+        return this.trustLevel === "low-trust";
+    }
+}
+export class AFTLoadBalancerStickinessManager extends BaseNodeEventListener {
+    get cacheMax() {
+        return this.config.cacheMax ?? 100000;
+    }
+    get defaultTtlSec() {
+        return this.config.defaultTtlSec ?? 30;
+    }
+    constructor(config, verifier) {
+        super();
+        this.aftAssociations = new Map();
+        this.sidCache = new Map();
+        this.metrics = {
+            cacheHits: 0,
+            cacheMisses: 0,
+            verifyFailures: 0,
+            associationsCreated: 0,
+            associationsExpired: 0,
+        };
+        this.config = config;
+        this.verifier = verifier;
+        logger.debug("stickiness_manager_initialized", {
+            enabled: this.config.enabled,
+            security_level: this.config.securityLevel,
+            verifier_type: verifier.constructor.name,
+            default_ttl: this.defaultTtlSec,
+            cache_max: this.cacheMax,
+            client_echo: this.config.clientEcho,
+        });
+    }
+    get hasStickiness() {
+        return Boolean(this.config.enabled);
+    }
+    getSidCache() {
+        return this.sidCache;
+    }
+    negotiate(stickiness) {
+        if (!stickiness) {
+            if (this.config.enabled) {
+                logger.debug("stickiness_negotiated_no_offer_attr_fallback");
+                return { enabled: true, mode: "attr", version: 1 };
+            }
+            return null;
+        }
+        const version = stickiness.version ?? 1;
+        if (!this.config.enabled) {
+            logger.debug("stickiness_negotiation_disabled_by_config");
+            return { enabled: false, version };
+        }
+        const childModes = new Set();
+        if (Array.isArray(stickiness.supportedModes) &&
+            stickiness.supportedModes.length > 0) {
+            for (const mode of stickiness.supportedModes) {
+                childModes.add(mode);
+            }
+        }
+        else if (stickiness.mode) {
+            childModes.add(stickiness.mode);
+        }
+        if (childModes.has("aft") && this.verifier) {
+            const ttl = this.defaultTtlSec;
+            const policy = {
+                enabled: true,
+                mode: "aft",
+                ttlSec: ttl,
+                version,
+            };
+            logger.debug("stickiness_negotiated", { mode: policy.mode, ttl });
+            return policy;
+        }
+        if (childModes.has("attr")) {
+            const policy = { enabled: true, mode: "attr", version };
+            logger.debug("stickiness_negotiated", { mode: policy.mode });
+            return policy;
+        }
+        logger.debug("stickiness_negotiation_no_common_mode");
+        return { enabled: false, version };
+    }
+    async handleOutboundEnvelope(envelope, replicaId) {
+        if (!this.config.enabled) {
+            logger.debug("stickiness_disabled", { envelope_id: envelope.id });
+            return null;
+        }
+        const aftToken = extractAftInstruction(envelope);
+        if (!aftToken) {
+            logger.debug("no_aft_instruction", {
+                envelope_id: envelope.id,
+                has_meta: Boolean(envelope.meta),
+            });
+            return null;
+        }
+        if (typeof aftToken !== "string") {
+            logger.warning("invalid_aft_instruction", {
+                envelope_id: envelope.id,
+                replica_id: replicaId,
+                reason: "set.aft value is not a string",
+            });
+            return null;
+        }
+        const verification = await this.verifier.verify(aftToken, envelope.sid ?? undefined);
+        if (!verification.valid) {
+            this.metrics.verifyFailures += 1;
+            logger.warning("aft_verification_failed", {
+                envelope_id: envelope.id,
+                replica_id: replicaId,
+                error: verification.error,
+            });
+            return null;
+        }
+        this.storeAssociation(aftToken, {
+            replicaId,
+            token: aftToken,
+            sid: verification.sid ?? "",
+            exp: verification.exp ?? Math.floor(Date.now() / 1000) + this.defaultTtlSec,
+            trustLevel: verification.trustLevel,
+            scope: verification.scope ?? null,
+            clientSid: verification.clientSid ?? null,
+        });
+        if (verification.clientSid) {
+            this.sidCache.set(verification.clientSid, replicaId);
+            logger.debug("sid_cache_updated", {
+                envelope_id: envelope.id,
+                client_sid: verification.clientSid,
+                replica_id: replicaId,
+            });
+        }
+        this.metrics.associationsCreated += 1;
+        logger.debug("aft_association_created", {
+            envelope_id: envelope.id,
+            replica_id: replicaId,
+            sid: verification.sid,
+            exp: verification.exp,
+            trust_level: verification.trustLevel,
+            scope: verification.scope,
+        });
+        return this.config.clientEcho ? aftToken : null;
+    }
+    getStickyReplicaSegment(envelope, segments) {
+        if (!this.config.enabled) {
+            logger.debug("stickiness_disabled", { envelope_id: envelope.id });
+            return null;
+        }
+        if (envelope.aft) {
+            const replicaId = this.routeByAft(envelope.aft, envelope);
+            if (replicaId) {
+                this.metrics.cacheHits += 1;
+                logger.debug("aft_routed_envelope", {
+                    envelope_id: envelope.id,
+                    replica_id: replicaId,
+                    routing_type: "aft_direct",
+                });
+                return replicaId;
+            }
+        }
+        if (envelope.sid) {
+            const cachedReplica = this.sidCache.get(envelope.sid);
+            if (cachedReplica) {
+                if (this.config.securityLevel === StickinessMode.SID_ONLY) {
+                    this.metrics.cacheHits += 1;
+                    logger.debug("sid_cache_routed_envelope", {
+                        envelope_id: envelope.id,
+                        replica_id: cachedReplica,
+                        sid: envelope.sid,
+                        routing_type: "sid_only",
+                    });
+                    return cachedReplica;
+                }
+                for (const [token, association] of this.aftAssociations.entries()) {
+                    if (association.replicaId === cachedReplica &&
+                        !association.isExpired()) {
+                        envelope.aft = token;
+                        this.metrics.cacheHits += 1;
+                        logger.debug("sid_cache_routed_envelope", {
+                            envelope_id: envelope.id,
+                            replica_id: cachedReplica,
+                            sid: envelope.sid,
+                            routing_type: "sid_cache_with_aft",
+                        });
+                        return cachedReplica;
+                    }
+                }
+                this.metrics.cacheHits += 1;
+                logger.debug("sid_cache_routed_envelope", {
+                    envelope_id: envelope.id,
+                    replica_id: cachedReplica,
+                    sid: envelope.sid,
+                    routing_type: "sid_cache_direct",
+                });
+                return cachedReplica;
+            }
+            logger.debug("no_cached_replica_for_sid", {
+                envelope_id: envelope.id,
+                sid: envelope.sid,
+            });
+        }
+        if (envelope.sid && Array.isArray(segments) && segments.length > 0) {
+            const index = computeDeterministicIndex(envelope.sid, segments.length);
+            const chosen = segments[index];
+            this.metrics.cacheHits += 1;
+            logger.debug("sid_based_deterministic_choice", {
+                envelope_id: envelope.id,
+                sid: envelope.sid,
+                chosen,
+                routing_type: "sid_deterministic",
+            });
+            return chosen;
+        }
+        this.metrics.cacheMisses += 1;
+        logger.debug("no_stickiness_routing", {
+            envelope_id: envelope.id,
+            has_aft: Boolean(envelope.aft),
+            has_sid: Boolean(envelope.sid),
+        });
+        return null;
+    }
+    cleanupExpiredAssociations() {
+        const now = Math.floor(Date.now() / 1000);
+        const expiredTokens = [];
+        for (const [token, association] of this.aftAssociations.entries()) {
+            if (association.isExpired(now)) {
+                expiredTokens.push(token);
+            }
+        }
+        for (const token of expiredTokens) {
+            this.removeAssociation(token);
+        }
+        if (expiredTokens.length > 0) {
+            this.metrics.associationsExpired += expiredTokens.length;
+            logger.debug("cleaned_expired_associations", {
+                count: expiredTokens.length,
+            });
+        }
+    }
+    replicaLeft(replicaId) {
+        const tokensToRemove = [];
+        for (const [token, association] of this.aftAssociations.entries()) {
+            if (association.replicaId === replicaId) {
+                tokensToRemove.push(token);
+            }
+        }
+        for (const token of tokensToRemove) {
+            this.removeAssociation(token);
+        }
+        if (tokensToRemove.length > 0) {
+            logger.debug("removed_associations_for_departed_replica", {
+                replica_id: replicaId,
+                count: tokensToRemove.length,
+            });
+        }
+    }
+    handleReplicaLeft(replicaId) {
+        this.replicaLeft(replicaId);
+        logger.debug("stickiness_replica_cleanup", { replica_id: replicaId });
+    }
+    getMetrics() {
+        return {
+            ...this.metrics,
+            cacheSize: this.aftAssociations.size,
+            sidCacheSize: this.sidCache.size,
+        };
+    }
+    getAssociations() {
+        const result = {};
+        for (const [token, association] of this.aftAssociations.entries()) {
+            result[token] = {
+                replica_id: association.replicaId,
+                sid: association.sid,
+                client_sid: association.clientSid,
+                exp: association.exp,
+                trust_level: association.trustLevel,
+                scope: association.scope,
+                created_at: association.createdAt,
+                expired: association.isExpired(),
+            };
+        }
+        return result;
+    }
+    getStickinessMetrics() {
+        return this.getMetrics();
+    }
+    logMetrics() {
+        const hits = this.metrics.cacheHits;
+        const misses = this.metrics.cacheMisses;
+        const total = hits + misses;
+        const hitRate = total > 0 ? Math.round((hits / total) * 10000) / 100 : 0;
+        logger.info("stickiness_metrics_report", {
+            enabled: this.config.enabled,
+            security_level: this.config.securityLevel,
+            cache_hits: hits,
+            cache_misses: misses,
+            verify_failures: this.metrics.verifyFailures,
+            associations_created: this.metrics.associationsCreated,
+            associations_expired: this.metrics.associationsExpired,
+            active_associations: this.aftAssociations.size,
+            sid_cache_entries: this.sidCache.size,
+            hit_rate: hitRate,
+        });
+    }
+    async onDeliver(_node, envelope, context) {
+        logger.debug("stickiness_manager_on_deliver", {
+            envelope_id: envelope.id,
+            origin_type: context?.originType ?? "unknown",
+            from_system_id: context?.fromSystemId ?? null,
+        });
+        if (context?.originType === DeliveryOriginType.DOWNSTREAM) {
+            const sourceRoute = context.fromSystemId;
+            if (sourceRoute) {
+                logger.debug("processing_downstream_envelope", {
+                    envelope_id: envelope.id,
+                    source_route: sourceRoute,
+                });
+                if (this.config.securityLevel === StickinessMode.SID_ONLY &&
+                    envelope.sid &&
+                    !this.sidCache.has(envelope.sid)) {
+                    this.sidCache.set(envelope.sid, sourceRoute);
+                    logger.debug("sid_only_association_recorded", {
+                        envelope_id: envelope.id,
+                        sid: envelope.sid,
+                        replica_id: sourceRoute,
+                    });
+                }
+                const hadInstruction = Boolean(extractAftInstruction(envelope));
+                const token = await this.handleOutboundEnvelope(envelope, sourceRoute);
+                if (hadInstruction) {
+                    logger.debug("processed_aft_setter_instruction", {
+                        envelope_id: envelope.id,
+                        source_route: sourceRoute,
+                        client_echo: Boolean(token),
+                    });
+                }
+                else {
+                    logger.debug("no_aft_setter_instruction", {
+                        envelope_id: envelope.id,
+                        source_route: sourceRoute,
+                    });
+                }
+            }
+            else {
+                logger.debug("downstream_envelope_without_source_route", {
+                    envelope_id: envelope.id,
+                });
+            }
+        }
+        else {
+            logger.debug("envelope_not_from_downstream", {
+                envelope_id: envelope.id,
+            });
+        }
+        return envelope;
+    }
+    storeAssociation(token, data) {
+        if (this.aftAssociations.has(token)) {
+            this.aftAssociations.delete(token);
+        }
+        const association = new AFTAssociation(data);
+        this.aftAssociations.set(token, association);
+        while (this.aftAssociations.size > this.cacheMax) {
+            const oldest = this.aftAssociations.keys().next();
+            if (oldest.done) {
+                break;
+            }
+            const oldestToken = oldest.value;
+            this.removeAssociation(oldestToken);
+        }
+    }
+    removeAssociation(token) {
+        this.aftAssociations.delete(token);
+        for (const [sid, cachedToken] of this.sidCache.entries()) {
+            if (cachedToken === token) {
+                this.sidCache.delete(sid);
+            }
+        }
+    }
+    routeByAft(token, envelope) {
+        const association = this.aftAssociations.get(token);
+        if (!association) {
+            return null;
+        }
+        if (association.isExpired()) {
+            this.metrics.associationsExpired += 1;
+            this.removeAssociation(token);
+            return null;
+        }
+        if (this.verifier.securityLevel === StickinessMode.STRICT &&
+            association.isLowTrust()) {
+            logger.warning("rejecting_low_trust_association", {
+                envelope_id: envelope.id,
+                replica_id: association.replicaId,
+                reason: "strict mode rejects low-trust associations",
+            });
+            return null;
+        }
+        this.aftAssociations.delete(token);
+        this.aftAssociations.set(token, association);
+        return association.replicaId;
+    }
+}
+function extractAftInstruction(envelope) {
+    if (!envelope.meta) {
+        return null;
+    }
+    const meta = envelope.meta;
+    const nested = meta.set;
+    if (nested && typeof nested === "object" && !Array.isArray(nested)) {
+        const aftValue = nested.aft;
+        if (aftValue !== undefined) {
+            return aftValue;
+        }
+    }
+    if (meta["set.aft"] !== undefined) {
+        return meta["set.aft"];
+    }
+    return null;
+}
+function computeDeterministicIndex(key, modulo) {
+    if (modulo <= 0) {
+        return 0;
+    }
+    let hash = 0;
+    for (let i = 0; i < key.length; i += 1) {
+        hash = (hash * 31 + key.charCodeAt(i)) >>> 0;
+    }
+    return hash % modulo;
+}
+//# sourceMappingURL=aft-load-balancer-stickiness-manager.js.map

package/dist/cjs/naylence/fame/stickiness/aft-load-balancer-stickiness-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aft-load-balancer-stickiness-manager.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/stickiness/aft-load-balancer-stickiness-manager.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAM9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,MAAM,GAAG,SAAS,CACtB,+DAA+D,CAChE,CAAC;AAUF,MAAM,cAAc;IAUlB,YAAmB,MASlB;QACC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC;IAEM,SAAS,CACd,gBAAwB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAErD,OAAO,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC;IACnC,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,UAAU,KAAK,WAAW,CAAC;IACzC,CAAC;CACF;AAED,MAAM,OAAO,gCACX,SAAQ,qBAAqB;IAgB7B,IAAY,QAAQ;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAO,CAAC;IACzC,CAAC;IAED,IAAY,aAAa;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,YACE,MAA8C,EAC9C,QAAqB;QAErB,KAAK,EAAE,CAAC;QAtBO,oBAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;QACpD,aAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QACrC,YAAO,GAAY;YAClC,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,CAAC;YACd,cAAc,EAAE,CAAC;YACjB,mBAAmB,EAAE,CAAC;YACtB,mBAAmB,EAAE,CAAC;SACvB,CAAC;QAeA,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;YAC7C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACzC,aAAa,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI;YACxC,WAAW,EAAE,IAAI,CAAC,aAAa;YAC/B,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;SACpC,CAAC,CAAC;IACL,CAAC;IAED,IAAW,aAAa;QACtB,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAEM,WAAW;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEM,SAAS,CAAC,UAA8B;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACrD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;QAExC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC1D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,IACE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;YACxC,UAAU,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EACpC,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;gBAC7C,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;aAAM,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAC3B,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC;YAC/B,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,GAAG;gBACX,OAAO;aACR,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAe,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACpE,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACrC,CAAC;IAEM,KAAK,CAAC,sBAAsB,CACjC,QAAsB,EACtB,SAAiB;QAEjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBACjC,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;aACjC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE;gBACxC,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,+BAA+B;aACxC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAC7C,QAAQ,EACR,QAAQ,CAAC,GAAG,IAAI,SAAS,CAC1B,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE;gBACxC,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,YAAY,CAAC,KAAK;aAC1B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;YAC9B,SAAS;YACT,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,YAAY,CAAC,GAAG,IAAI,EAAE;YAC3B,GAAG,EACD,YAAY,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa;YACxE,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,KAAK,EAAE,YAAY,CAAC,KAAK,IAAI,IAAI;YACjC,SAAS,EAAE,YAAY,CAAC,SAAS,IAAI,IAAI;SAC1C,CAAC,CAAC;QAEH,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;gBAChC,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,UAAU,EAAE,YAAY,CAAC,SAAS;gBAClC,UAAU,EAAE,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAEtC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;YACtC,WAAW,EAAE,QAAQ,CAAC,EAAE;YACxB,UAAU,EAAE,SAAS;YACrB,GAAG,EAAE,YAAY,CAAC,GAAG;YACrB,GAAG,EAAE,YAAY,CAAC,GAAG;YACrB,WAAW,EAAE,YAAY,CAAC,UAAU;YACpC,KAAK,EAAE,YAAY,CAAC,KAAK;SAC1B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAEM,uBAAuB,CAC5B,QAAsB,EACtB,QAAmC;QAEnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC1D,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;gBAC5B,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAClC,WAAW,EAAE,QAAQ,CAAC,EAAE;oBACxB,UAAU,EAAE,SAAS;oBACrB,YAAY,EAAE,YAAY;iBAC3B,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACtD,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;oBAC1D,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;oBAC5B,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;wBACxC,WAAW,EAAE,QAAQ,CAAC,EAAE;wBACxB,UAAU,EAAE,aAAa;wBACzB,GAAG,EAAE,QAAQ,CAAC,GAAG;wBACjB,YAAY,EAAE,UAAU;qBACzB,CAAC,CAAC;oBACH,OAAO,aAAa,CAAC;gBACvB,CAAC;gBAED,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;oBAClE,IACE,WAAW,CAAC,SAAS,KAAK,aAAa;wBACvC,CAAC,WAAW,CAAC,SAAS,EAAE,EACxB,CAAC;wBACD,QAAQ,CAAC,GAAG,GAAG,KAAK,CAAC;wBACrB,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;wBAC5B,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;4BACxC,WAAW,EAAE,QAAQ,CAAC,EAAE;4BACxB,UAAU,EAAE,aAAa;4BACzB,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,YAAY,EAAE,oBAAoB;yBACnC,CAAC,CAAC;wBACH,OAAO,aAAa,CAAC;oBACvB,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;gBAC5B,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;oBACxC,WAAW,EAAE,QAAQ,CAAC,EAAE;oBACxB,UAAU,EAAE,aAAa;oBACzB,GAAG,EAAE,QAAQ,CAAC,GAAG;oBACjB,YAAY,EAAE,kBAAkB;iBACjC,CAAC,CAAC;gBACH,OAAO,aAAa,CAAC;YACvB,CAAC;YAED,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBACxC,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,yBAAyB,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;gBAC7C,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,MAAM;gBACN,YAAY,EAAE,mBAAmB;aAClC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;YACpC,WAAW,EAAE,QAAQ,CAAC,EAAE;YACxB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC9B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;SAC/B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,0BAA0B;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAa,EAAE,CAAC;QAEnC,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YAClE,IAAI,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,aAAa,CAAC,MAAM,CAAC;YACzD,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,KAAK,EAAE,aAAa,CAAC,MAAM;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,WAAW,CAAC,SAAiB;QAClC,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YAClE,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACxC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;YACnC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBACxD,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,cAAc,CAAC,MAAM;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEM,iBAAiB,CAAC,SAAiB;QACxC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;IAEM,UAAU;QACf,OAAO;YACL,GAAG,IAAI,CAAC,OAAO;YACf,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI;YACpC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;SACjC,CAAC;IACJ,CAAC;IAEM,eAAe;QACpB,MAAM,MAAM,GAA4C,EAAE,CAAC;QAC3D,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,GAAG;gBACd,UAAU,EAAE,WAAW,CAAC,SAAS;gBACjC,GAAG,EAAE,WAAW,CAAC,GAAG;gBACpB,UAAU,EAAE,WAAW,CAAC,SAAS;gBACjC,GAAG,EAAE,WAAW,CAAC,GAAG;gBACpB,WAAW,EAAE,WAAW,CAAC,UAAU;gBACnC,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,UAAU,EAAE,WAAW,CAAC,SAAS;gBACjC,OAAO,EAAE,WAAW,CAAC,SAAS,EAAE;aACjC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,oBAAoB;QACzB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAEM,UAAU;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC;QAC5B,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzE,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YACvC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACzC,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,MAAM;YACpB,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;YAC5C,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;YACtD,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB;YACtD,mBAAmB,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI;YAC9C,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACrC,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,KAAe,EACf,QAAsB,EACtB,OAA6B;QAE7B,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;YAC5C,WAAW,EAAE,QAAQ,CAAC,EAAE;YACxB,WAAW,EAAE,OAAO,EAAE,UAAU,IAAI,SAAS;YAC7C,cAAc,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI;SAC9C,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,UAAU,KAAK,kBAAkB,CAAC,UAAU,EAAE,CAAC;YAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;YAEzC,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;oBAC7C,WAAW,EAAE,QAAQ,CAAC,EAAE;oBACxB,YAAY,EAAE,WAAW;iBAC1B,CAAC,CAAC;gBAEH,IACE,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,cAAc,CAAC,QAAQ;oBACrD,QAAQ,CAAC,GAAG;oBACZ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAChC,CAAC;oBACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;oBAC7C,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE;wBAC5C,WAAW,EAAE,QAAQ,CAAC,EAAE;wBACxB,GAAG,EAAE,QAAQ,CAAC,GAAG;wBACjB,UAAU,EAAE,WAAW;qBACxB,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,cAAc,GAAG,OAAO,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBAEvE,IAAI,cAAc,EAAE,CAAC;oBACnB,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE;wBAC/C,WAAW,EAAE,QAAQ,CAAC,EAAE;wBACxB,YAAY,EAAE,WAAW;wBACzB,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC;qBAC5B,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;wBACxC,WAAW,EAAE,QAAQ,CAAC,EAAE;wBACxB,YAAY,EAAE,WAAW;qBAC1B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACvD,WAAW,EAAE,QAAQ,CAAC,EAAE;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC3C,WAAW,EAAE,QAAQ,CAAC,EAAE;aACzB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,gBAAgB,CACtB,KAAa,EACb,IAQC;QAED,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAE7C,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM;YACR,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;YACjC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,KAAa;QACrC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,KAAa,EAAE,QAAsB;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IACE,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,cAAc,CAAC,MAAM;YACrD,WAAW,CAAC,UAAU,EAAE,EACxB,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE;gBAChD,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,UAAU,EAAE,WAAW,CAAC,SAAS;gBACjC,MAAM,EAAE,4CAA4C;aACrD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC7C,OAAO,WAAW,CAAC,SAAS,CAAC;IAC/B,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,QAAsB;IACnD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA+B,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;IAExB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAI,MAAkC,CAAC,GAAG,CAAC;QACzD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW,EAAE,MAAc;IAC5D,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,IAAI,GAAG,MAAM,CAAC;AACvB,CAAC"}

package/dist/cjs/naylence/fame/stickiness/aft-model.js

@@ -0,0 +1,54 @@
+export function isSignedAft(payload) {
+    return payload.header.alg !== "none";
+}
+export function sanitizeStickinessScope(scope) {
+    if (!scope) {
+        return undefined;
+    }
+    const normalized = scope.trim().toLowerCase();
+    if (!normalized) {
+        return undefined;
+    }
+    if (normalized === "node" || normalized === "flow" || normalized === "sess") {
+        return normalized;
+    }
+    return undefined;
+}
+export function serializeAftHeader(header) {
+    return JSON.stringify({
+        alg: header.alg,
+        kid: header.kid,
+    });
+}
+export function serializeAftClaims(claims) {
+    const payload = {
+        sid: claims.sid,
+        exp: claims.exp,
+    };
+    if (typeof claims.scp === "string" && claims.scp.length > 0) {
+        payload.scp = claims.scp;
+    }
+    if (typeof claims.client_sid === "string" && claims.client_sid.length > 0) {
+        payload.client_sid = claims.client_sid;
+    }
+    return JSON.stringify(payload);
+}
+export function createAftPayload(options) {
+    const { sid, ttlSeconds, kid, algorithm, scope = null, clientSid = null, now = () => Math.floor(Date.now() / 1000), } = options;
+    const exp = now() + Math.max(0, Math.floor(ttlSeconds));
+    const sanitizedScope = sanitizeStickinessScope(scope);
+    const header = { alg: algorithm, kid };
+    const claims = {
+        sid,
+        exp,
+        ...(sanitizedScope ? { scp: sanitizedScope } : {}),
+        ...(typeof clientSid === "string" && clientSid.length > 0
+            ? { client_sid: clientSid }
+            : {}),
+    };
+    return { header, claims };
+}
+export function describeSecurityLevel(mode) {
+    return mode;
+}
+//# sourceMappingURL=aft-model.js.map

package/dist/cjs/naylence/fame/stickiness/aft-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aft-model.js","sourceRoot":"","sources":["../../../../../src/naylence/fame/stickiness/aft-model.ts"],"names":[],"mappings":"AAmBA,MAAM,UAAU,WAAW,CACzB,OAA2C;IAE3C,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAqB;IAErB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC5E,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAiB;IAClD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAiB;IAClD,MAAM,OAAO,GAA4B;QACvC,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC;IAEF,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACzC,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAYD,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,EACJ,GAAG,EACH,UAAU,EACV,GAAG,EACH,SAAS,EACT,KAAK,GAAG,IAAI,EACZ,SAAS,GAAG,IAAI,EAChB,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAC1C,GAAG,OAAO,CAAC;IAEZ,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAExD,MAAM,cAAc,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,MAAM,GAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAClD,MAAM,MAAM,GAAc;QACxB,GAAG;QACH,GAAG;QACH,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YACvD,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE;YAC3B,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAoB;IACxD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cjs/naylence/fame/stickiness/aft-replica-stickiness-manager-factory.js

@@ -0,0 +1,50 @@
+import { REPLICA_STICKINESS_MANAGER_FACTORY_BASE_TYPE, ReplicaStickinessManagerFactory, } from "@naylence/runtime";
+import { AFTReplicaStickinessManager } from "./aft-replica-stickiness-manager.js";
+import { StickinessMode, normalizeStickinessMode } from "./stickiness-mode.js";
+export const FACTORY_META = {
+    base: REPLICA_STICKINESS_MANAGER_FACTORY_BASE_TYPE,
+    key: "AFTReplicaStickinessManager",
+};
+const DEFAULT_VALUES = {
+    securityLevel: StickinessMode.SIGNED_OPTIONAL,
+    maxTtlSec: 7200,
+};
+function normalizeConfig(config) {
+    const record = (config ?? {});
+    const normalizedSecurity = record.securityLevel
+        ? normalizeStickinessMode(record.securityLevel)
+        : DEFAULT_VALUES.securityLevel;
+    const securityLevel = normalizedSecurity ?? DEFAULT_VALUES.securityLevel;
+    const maxTtlSecValue = typeof record.maxTtlSec === "number" && Number.isFinite(record.maxTtlSec)
+        ? Math.max(0, Math.floor(record.maxTtlSec))
+        : DEFAULT_VALUES.maxTtlSec;
+    return {
+        ...record,
+        type: "AFTReplicaStickinessManager",
+        securityLevel,
+        maxTtlSec: maxTtlSecValue,
+    };
+}
+export class AFTReplicaStickinessManagerFactory extends ReplicaStickinessManagerFactory {
+    constructor() {
+        super(...arguments);
+        this.type = FACTORY_META.key;
+        this.isDefault = true;
+    }
+    async create(config, dependencies) {
+        const resolvedConfig = normalizeConfig(config);
+        const helper = dependencies?.aftHelper ?? null;
+        const securityLevel = normalizeStickinessMode(resolvedConfig.securityLevel ?? DEFAULT_VALUES.securityLevel) ?? DEFAULT_VALUES.securityLevel;
+        const maxTtlSec = typeof resolvedConfig.maxTtlSec === "number" &&
+            Number.isFinite(resolvedConfig.maxTtlSec)
+            ? Math.max(0, Math.floor(resolvedConfig.maxTtlSec))
+            : DEFAULT_VALUES.maxTtlSec;
+        return new AFTReplicaStickinessManager({
+            securityLevel,
+            maxTtlSec,
+            aftHelper: helper,
+        });
+    }
+}
+export default AFTReplicaStickinessManagerFactory;
+//# sourceMappingURL=aft-replica-stickiness-manager-factory.js.map