@oondemand/oon-core-back 0.7.9 → 0.7.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oondemand/oon-core-back",
-  "version": "0.7.9",
+  "version": "0.7.11",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/oondemand/oon-platform.git",

package/src/api/activation.routes.js

@@ -637,18 +637,51 @@ router.post(
       });
     }
 
-    const preview = await activationProviderPost(
-      req,
-      PATHS.validar,
-      providerPayload(req, codigoAtivacao),
-    );
+    const payload = providerPayload(req, codigoAtivacao, { nomeInstancia, metadata: {} });
+    const crypto = require("node:crypto");
+    const { fingerprint: _fingerprint, coreVersion: _coreVersion, appVersion: _appVersion, ...semanticPayload } = payload;
+    const payloadHash = crypto.createHash("sha256").update(JSON.stringify({ payload: semanticPayload, parametrosGlobais, parametrosAplicacao,
+      configurationVersion: config.configurationVersion })).digest("hex");
+    const requestedKey = req.headers["idempotency-key"];
+    if (requestedKey && (typeof requestedKey !== "string" || requestedKey.length < 8 || requestedKey.length > 120))
+      throw new GenericError("Chave de ativação inválida.", { statusCode: 422, code: "IDEMPOTENCY_KEY_REQUIRED" });
+    if (instance.activationRequest && (instance.activationRequest.payloadHash !== payloadHash
+      || requestedKey && requestedKey !== instance.activationRequest.key))
+      throw new GenericError("Retome a mesma intenção de ativação.", { statusCode: 409, code: "IDEMPOTENCY_CONFLICT" });
+    const preview = instance.activationRequest ? { data: {} } : await activationProviderPost(
+      req, PATHS.validar, providerPayload(req, codigoAtivacao));
     assertApp(preview.data);
 
-    const activated = await activationProviderPost(
-      req,
-      PATHS.ativar,
-      providerPayload(req, codigoAtivacao, { nomeInstancia, metadata: {} }),
-    );
+    // Persist identity before the provider can consume the activation code.
+    // A lost reply retries that command, including after process restart.
+    // Keep runtime-generated fields across replica/container replacement. The
+    // activation code itself is supplied again by the caller, never stored here.
+    const { codigoAtivacao: _code, ...providerContext } = payload;
+    const intent = instance.activationRequest || { key: requestedKey || crypto.randomUUID(), payloadHash, providerContext };
+    const Instance = require("../core/models/InstanciaEcossistema");
+    await Instance.updateOne({ _id: instance._id, activationRequest: null }, { $set: { activationRequest: intent } });
+    const saved = await Instance.findById(instance._id).select("+activationRequest").lean();
+    if (!saved || saved.activationRequest?.payloadHash !== payloadHash || requestedKey && saved.activationRequest.key !== requestedKey)
+      throw new GenericError("Outra intenção de ativação está pendente.", { statusCode: 409, code: "IDEMPOTENCY_CONFLICT" });
+    instance.activationRequest = saved.activationRequest;
+
+    let activated;
+    try {
+      activated = await activationProviderPost(req, PATHS.ativar,
+        { ...instance.activationRequest.providerContext, codigoAtivacao },
+        { "Idempotency-Key": instance.activationRequest.key });
+    } catch (error) {
+      // Only an explicit, durable provider outcome can release the local intent.
+      // Timeouts, generic 4xx/5xx and a used/revoked credential remain uncertain.
+      if (error.code === "ACTIVATION_NOT_COMMITTED"
+        && error.details?.operationId === instance.activationRequest.key
+        && error.details?.activationOutcome === "not_committed") {
+        await Instance.updateOne({ _id: instance._id, "activationRequest.key": instance.activationRequest.key,
+          "activationRequest.payloadHash": payloadHash, deploymentId: null, instanceId: null },
+        { $unset: { activationRequest: 1 } });
+      }
+      throw error;
+    }
     assertApp(activated.data);
 
     const token = activated.data?.credencial?.token || activated.data?.deploymentCredential?.token;
@@ -688,6 +721,7 @@ router.post(
       parametrosGlobais,
       parametrosAplicacao,
       configurationVersion: config.configurationVersion,
+      publicationIdentity: activated.data.publicationIdentity,
       ativadaEm: new Date(),
       ultimoErro: undefined,
     });
@@ -724,8 +758,11 @@ async function complete(req, instance, config) {
       {
         configurationVersion: config.configurationVersion,
         parametros: instance.parametrosGlobais,
+        ...(instance.publicationIdentity ? { publicationIdentity: instance.publicationIdentity } : {}),
       },
-      instanceHeaders(instance),
+      { ...instanceHeaders(instance), ...(instance.publicationIdentity ? {
+        "Idempotency-Key": `configuration:${instance.publicationIdentity.releaseId}:${config.configurationVersion}`,
+      } : {}) },
     );
 
     instance.status = "ativa";

package/src/core/models/InstanciaEcossistema.js

@@ -30,6 +30,8 @@ const schema = new mongoose.Schema(
     credentialAuthTag: { type: String, select: false },
     credentialVersion: Number,
     configurationVersion: Number,
+    publicationIdentity: { type: mongoose.Schema.Types.Mixed },
+    activationRequest: { type: mongoose.Schema.Types.Mixed, select: false },
     parametrosGlobais: { type: mongoose.Schema.Types.Mixed, default: {} },
     parametrosAplicacao: { type: mongoose.Schema.Types.Mixed, default: {} },
     tenant: { type: mongoose.Schema.Types.Mixed, default: {} },
@@ -54,6 +56,7 @@ const schema = new mongoose.Schema(
         delete ret.credentialEncrypted;
         delete ret.credentialIv;
         delete ret.credentialAuthTag;
+        delete ret.activationRequest;
         return ret;
       },
     },

package/src/core/utils/instanceActivation.js

@@ -127,9 +127,14 @@ function deploymentBootstrap() {
   }
   const tenancyModel =
     ctx.config.tenancyModel || ctx.config.ecosystem?.tenancyModel;
-  if (tenancyModel !== "none") {
+  const shared = tenancyModel === "multi_tenant"
+    && (ctx.config.deploymentMode || ctx.config.ecosystem?.deploymentMode) === "shared"
+    && (ctx.config.availability || ctx.config.ecosystem?.availability) === "common"
+    && (ctx.config.accessMode || ctx.config.ecosystem?.accessMode) === "tenant_members"
+    && (ctx.config.authorizationMode || ctx.config.ecosystem?.authorizationMode) === "rbac";
+  if (tenancyModel !== "none" && !shared) {
     throw new GenericError(
-      "Bootstrap direto de deployment é permitido somente para Apps globais.",
+      "Bootstrap direto exige App global ou comum multi-tenant/shared.",
       { statusCode: 500, code: "DEPLOYMENT_BOOTSTRAP_TENANCY_INVALID" },
     );
   }
@@ -249,6 +254,8 @@ function clearInstanceIdentity(instance) {
   instance.credentialEncrypted = undefined;
   instance.credentialIv = undefined;
   instance.credentialAuthTag = undefined;
+  instance.publicationIdentity = undefined;
+  instance.activationRequest = undefined;
 }
 
 async function ensureInstance() {
@@ -273,7 +280,7 @@ async function ensureInstance() {
   }
 
   let instance = await Instancia.findOne().select(
-    "+credentialEncrypted +credentialIv +credentialAuthTag",
+    "+credentialEncrypted +credentialIv +credentialAuthTag +activationRequest",
   );
 
   if (!instance) {