@oxy.so/core 1.0.1 → 1.1.0

package/dist/cjs/OxyServices.errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OxyAuthenticationTimeoutError = exports.ServiceAssetMetadataError = exports.AssetUrlResolutionError = exports.OxyAuthenticationError = void 0;
+exports.OxyAuthenticationTimeoutError = exports.ServiceLinkedDownloadUrlError = exports.ServiceAssetMetadataError = exports.AssetUrlResolutionError = exports.OxyAuthenticationError = void 0;
 /**
  * Custom error types for better error handling
  */
@@ -86,6 +86,33 @@ class ServiceAssetMetadataError extends Error {
     }
 }
 exports.ServiceAssetMetadataError = ServiceAssetMetadataError;
+/**
+ * A chunk of `POST /assets/service/linked-url` failed, so the SDK cannot say
+ * whether those ids have URLs.
+ *
+ * Its own class rather than a reuse of {@link ServiceAssetMetadataError}, and
+ * deliberately WITHOUT that one's `{ partial: true }` escape hatch, because the
+ * two mistakes cost different things. Reading a failed metadata lookup as
+ * "absent" embedded a media item with no hash. Reading a failed DOWNLOAD mint as
+ * "absent" tells a buyer who paid that the file they own is not there — and
+ * "not there" is already this route's answer for "not yours", so a best-effort
+ * mode would make a throttled request indistinguishable from a refusal. There is
+ * no download path that legitimately wants that, so there is no option to ask
+ * for it.
+ */
+class ServiceLinkedDownloadUrlError extends Error {
+    constructor(unresolvedIds, statuses, cause) {
+        const uniqueStatuses = Array.from(new Set(statuses)).sort((a, b) => a - b);
+        const statusSuffix = uniqueStatuses.length > 0 ? ` — status ${uniqueStatuses.join(', ')}` : '';
+        super(`Could not mint download URLs for ${unresolvedIds.length} id(s)${statusSuffix}. Treat this as unknown, never as "the caller holds no right".`);
+        this.code = 'SERVICE_LINKED_DOWNLOAD_URL_UNRESOLVED';
+        this.name = 'ServiceLinkedDownloadUrlError';
+        this.unresolvedIds = unresolvedIds;
+        this.statuses = uniqueStatuses;
+        this.cause = cause;
+    }
+}
+exports.ServiceLinkedDownloadUrlError = ServiceLinkedDownloadUrlError;
 class OxyAuthenticationTimeoutError extends OxyAuthenticationError {
     constructor(operationName, timeoutMs) {
         super(`Authentication timeout (${timeoutMs}ms): ${operationName} requires user authentication. Please ensure the user is logged in before calling this method.`, 'AUTH_TIMEOUT', 408);

package/dist/cjs/i18n/locales/en-US.json

@@ -2127,6 +2127,18 @@
             "title": "Permissions requested",
             "basic": "Sign you in and read your basic profile"
         },
+        "resource": {
+            "title": "Oxy app and protected resource"
+        },
+        "writeActions": {
+            "title": "Actions this connection can perform"
+        },
+        "effects": {
+            "write": "Write",
+            "external": "External",
+            "financial": "Financial",
+            "security": "Security"
+        },
         "scopes": {
             "openid": "Confirm your identity",
             "profile": "Read your basic profile",
@@ -2147,7 +2159,8 @@
             "federationWrite": "Act across federated services"
         },
         "account": {
-            "title": "Signing in as"
+            "title": "Signing in as",
+            "id": "Account ID: {{id}}"
         },
         "links": {
             "website": "Website",

package/dist/cjs/i18n/locales/es-ES.json

@@ -2127,6 +2127,18 @@
             "title": "Permisos solicitados",
             "basic": "Iniciar sesión y leer tu perfil básico"
         },
+        "resource": {
+            "title": "App de Oxy y recurso protegido"
+        },
+        "writeActions": {
+            "title": "Acciones que puede realizar esta conexión"
+        },
+        "effects": {
+            "write": "Escritura",
+            "external": "Externa",
+            "financial": "Financiera",
+            "security": "Seguridad"
+        },
         "scopes": {
             "openid": "Confirmar tu identidad",
             "profile": "Leer tu perfil básico",
@@ -2147,7 +2159,8 @@
             "federationWrite": "Actuar en servicios federados"
         },
         "account": {
-            "title": "Iniciando sesión como"
+            "title": "Iniciando sesión como",
+            "id": "ID de cuenta: {{id}}"
         },
         "links": {
             "website": "Sitio web",

package/dist/cjs/i18n/locales/locales/en-US.json

@@ -2127,6 +2127,18 @@
       "title": "Permissions requested",
       "basic": "Sign you in and read your basic profile"
     },
+    "resource": {
+      "title": "Oxy app and protected resource"
+    },
+    "writeActions": {
+      "title": "Actions this connection can perform"
+    },
+    "effects": {
+      "write": "Write",
+      "external": "External",
+      "financial": "Financial",
+      "security": "Security"
+    },
     "scopes": {
       "openid": "Confirm your identity",
       "profile": "Read your basic profile",
@@ -2147,7 +2159,8 @@
       "federationWrite": "Act across federated services"
     },
     "account": {
-      "title": "Signing in as"
+      "title": "Signing in as",
+      "id": "Account ID: {{id}}"
     },
     "links": {
       "website": "Website",

package/dist/cjs/i18n/locales/locales/es-ES.json

@@ -2127,6 +2127,18 @@
       "title": "Permisos solicitados",
       "basic": "Iniciar sesión y leer tu perfil básico"
     },
+    "resource": {
+      "title": "App de Oxy y recurso protegido"
+    },
+    "writeActions": {
+      "title": "Acciones que puede realizar esta conexión"
+    },
+    "effects": {
+      "write": "Escritura",
+      "external": "Externa",
+      "financial": "Financiera",
+      "security": "Seguridad"
+    },
     "scopes": {
       "openid": "Confirmar tu identidad",
       "profile": "Leer tu perfil básico",
@@ -2147,7 +2159,8 @@
       "federationWrite": "Actuar en servicios federados"
     },
     "account": {
-      "title": "Iniciando sesión como"
+      "title": "Iniciando sesión como",
+      "id": "ID de cuenta: {{id}}"
     },
     "links": {
       "website": "Sitio web",

package/dist/cjs/mixins/OxyServices.agency.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OxyServicesAgencyMixin = OxyServicesAgencyMixin;
+const mixinHelpers_1 = require("./mixinHelpers");
+function query(path, key, value) {
+    return `${path}?${key}=${encodeURIComponent(value)}`;
+}
+function OxyServicesAgencyMixin(Base) {
+    return class extends Base {
+        async listAvailableCapabilityCatalogs(accountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/catalogs/available', 'accountId', accountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.MEDIUM });
+                return response.catalogs;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async listDelegationGrants(ownerAccountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/grants', 'ownerAccountId', ownerAccountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.grants;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async createDelegationGrant(input) {
+            try {
+                const response = await this.makeRequest('POST', '/capabilities/grants', input, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/grants?ownerAccountId=${encodeURIComponent(input.ownerAccountId)}`);
+                return response.grant;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async revokeDelegationGrant(grantId, ownerAccountId) {
+            try {
+                await this.makeRequest('DELETE', `/capabilities/grants/${encodeURIComponent(grantId)}`, undefined, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/grants?ownerAccountId=${encodeURIComponent(ownerAccountId)}`);
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async updateDelegationGrant(grantId, ownerAccountId, input) {
+            try {
+                const response = await this.makeRequest('PUT', `/capabilities/grants/${encodeURIComponent(grantId)}`, input, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/grants?ownerAccountId=${encodeURIComponent(ownerAccountId)}`);
+                return response.grant;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async listAccountCapabilityPolicies(accountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/account-policies', 'accountId', accountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.policies;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async putAccountCapabilityPolicy(appId, input) {
+            try {
+                const response = await this.makeRequest('PUT', `/capabilities/account-policies/${encodeURIComponent(appId)}`, input, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/account-policies?accountId=${encodeURIComponent(input.accountId)}`);
+                return response.policy;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async deleteAccountCapabilityPolicy(appId, accountId) {
+            try {
+                await this.makeRequest('DELETE', `/capabilities/account-policies/${encodeURIComponent(appId)}?accountId=${encodeURIComponent(accountId)}`, undefined, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/account-policies?accountId=${encodeURIComponent(accountId)}`);
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async listCapabilityExecutionAuthorizations(ownerAccountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/execution-authorizations', 'ownerAccountId', ownerAccountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.authorizations;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async revokeCapabilityExecutionAuthorization(authorizationId, ownerAccountId) {
+            try {
+                await this.makeRequest('DELETE', `/capabilities/execution-authorizations/${encodeURIComponent(authorizationId)}`, undefined, { cache: false });
+                this.clearCacheEntry(`GET:/capabilities/execution-authorizations?ownerAccountId=${encodeURIComponent(ownerAccountId)}`);
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        async listCapabilityAuditEvents(accountId) {
+            try {
+                const response = await this.makeRequest('GET', query('/capabilities/audit', 'accountId', accountId), undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.events;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+    };
+}

package/dist/cjs/mixins/OxyServices.assets.js

@@ -19,6 +19,13 @@ const SERVICE_ASSET_METADATA_CHUNK_SIZE = 100;
  * {@link SERVICE_ASSET_METADATA_CHUNK_SIZE} for the forward id lookup.
  */
 const SERVICE_ASSET_METADATA_BY_SHA_CHUNK_SIZE = 100;
+/**
+ * Maximum number of ids sent per `POST /assets/service/linked-url` request.
+ * Matches that route's own cap, which is a QUARTER of the metadata routes' —
+ * see `MAX_ASSETS_LINKED_URL` in the API for why minting download credentials is
+ * budgeted more tightly than projecting rows.
+ */
+const SERVICE_LINKED_DOWNLOAD_URL_CHUNK_SIZE = 25;
 /**
  * Lowercase hex SHA-256 digest matcher (exactly 64 hex chars). The reverse
  * lookup drops non-conforming hashes client-side so a single malformed value
@@ -361,6 +368,89 @@ function OxyServicesAssetsMixin(Base) {
             }
             return settled.flat();
         }
+        /**
+         * Mint short-lived direct download URLs for files the calling application's
+         * own users attached to it, via `POST /assets/service/linked-url`.
+         *
+         * This is the ONLY path in this SDK by which a service token reaches file
+         * BYTES. {@link getServiceAssetMetadataByIds} is metadata-only, and every
+         * other download helper here — {@link getFileDownloadUrl},
+         * {@link getFileDownloadUrlAsync}, {@link getBatchFileAccess} — resolves a URL
+         * for the CURRENT USER through `makeRequest`, which is a different question: a
+         * relying service holds no user session, and the buyer whose entitlement it is
+         * enforcing is not a viewer Oxy knows anything about.
+         *
+         * **Service-token auth (required), plus the `files:linked:read` scope**, which
+         * is NOT implied by `files:read`. The calling client must be service-configured
+         * (`configureServiceAuth(apiKey, apiSecret)`); a user-session request is
+         * rejected by the route's service-auth guard.
+         *
+         * **What the server will and will not give you.** A URL comes back only for a
+         * file whose OWN OWNER linked it to this application (`file_links.created_by =
+         * files.owner_user_id`). Every other id is omitted: unknown, deleted,
+         * system-owned, linked by somebody else, or not linked here at all. So the
+         * result is routinely shorter than the input and must be mapped by `id`.
+         *
+         * ABSENCE IS A REFUSAL, NOT A FACT ABOUT THE FILE, and the caller is the only
+         * party that can tell the difference. The route deliberately cannot — it
+         * answers identically for "no such file" and "not yours" so it leaks nothing —
+         * which means a service must decide what to tell its user from its OWN
+         * entitlement record, never from this response. Do not surface "file not
+         * found" on the strength of an omission.
+         *
+         * FAILURE IS NOT ABSENCE EITHER, and here it cannot be opted out of: a failed
+         * chunk throws {@link ServiceLinkedDownloadUrlError} carrying its ids, with no
+         * `{ partial: true }` mode. Swallowing a 429 would tell a user who paid for a
+         * file that it is not there. An empty input resolves to `[]` with no network
+         * call.
+         *
+         * Never cached at the SDK layer, and that is a stronger statement than the
+         * sibling methods' "low hit rate": each entry is a live credential for the
+         * bytes, so caching one keeps it usable after the service has decided the
+         * caller's entitlement ended.
+         */
+        async getServiceLinkedDownloadUrls(ids) {
+            const uniqueIds = Array.from(new Set(ids.filter((id) => typeof id === 'string' && id.trim().length > 0)));
+            if (uniqueIds.length === 0) {
+                return [];
+            }
+            const chunks = [];
+            for (let i = 0; i < uniqueIds.length; i += SERVICE_LINKED_DOWNLOAD_URL_CHUNK_SIZE) {
+                chunks.push(uniqueIds.slice(i, i + SERVICE_LINKED_DOWNLOAD_URL_CHUNK_SIZE));
+            }
+            // Chunks stay independent so one failure never cancels work already in
+            // flight; the failures are collected and re-raised together below, exactly
+            // as in the metadata sibling.
+            const unresolvedIds = [];
+            const statuses = [];
+            let firstError;
+            const settled = await Promise.all(chunks.map(async (chunk) => {
+                try {
+                    const entries = await this.makeServiceRequest('POST', '/assets/service/linked-url', { ids: chunk });
+                    return Array.isArray(entries) ? entries : [];
+                }
+                catch (error) {
+                    const status = (0, errorUtils_1.extractErrorStatus)(error);
+                    // `chunkSize` and `status`, never the ids and never a `url`: a minted
+                    // URL in a log line is a credential in a log line.
+                    logger_1.logger.warn('getServiceLinkedDownloadUrls: chunk failed', {
+                        method: 'getServiceLinkedDownloadUrls',
+                        chunkSize: chunk.length,
+                        status,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    unresolvedIds.push(...chunk);
+                    if (typeof status === 'number')
+                        statuses.push(status);
+                    firstError ?? (firstError = error);
+                    return [];
+                }
+            }));
+            if (unresolvedIds.length > 0) {
+                throw new OxyServices_errors_1.ServiceLinkedDownloadUrlError(unresolvedIds, statuses, firstError);
+            }
+            return settled.flat();
+        }
         /**
          * Reverse content-address lookup: resolve many content `sha256` digests to
          * the servable Oxy asset holding each, in one round-trip per chunk via

package/dist/cjs/mixins/OxyServices.connectedApps.js

@@ -4,9 +4,6 @@ exports.OxyServicesConnectedAppsMixin = OxyServicesConnectedAppsMixin;
 const mixinHelpers_1 = require("./mixinHelpers");
 function OxyServicesConnectedAppsMixin(Base) {
     return class extends Base {
-        constructor(...args) {
-            super(...args);
-        }
         /**
          * Resolve an OAuth client identifier to the owning application's PUBLIC
          * identity. No authentication required — the API returns only sanitized,
@@ -74,5 +71,25 @@ function OxyServicesConnectedAppsMixin(Base) {
                 throw this.handleError(error);
             }
         }
+        /** List resource-bound external MCP connections for the active Oxy account. */
+        async listConnectedMcpClients() {
+            try {
+                const response = await this.makeRequest('GET', '/auth/mcp/oauth/grants', undefined, { cache: true, cacheTTL: mixinHelpers_1.CACHE_TIMES.SHORT });
+                return response.grants;
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
+        /** Revoke one external MCP connection and every token in its family. */
+        async revokeConnectedMcpClient(grantId) {
+            try {
+                await this.makeRequest('DELETE', `/auth/mcp/oauth/grants/${encodeURIComponent(grantId)}`, undefined, { cache: false });
+                this.clearCacheEntry('GET:/auth/mcp/oauth/grants');
+            }
+            catch (error) {
+                throw this.handleError(error);
+            }
+        }
     };
 }

package/dist/cjs/mixins/OxyServices.utility.js

@@ -4,12 +4,10 @@ exports.OxyServicesUtilityMixin = OxyServicesUtilityMixin;
 /**
  * Utility Methods Mixin
  *
- * Provides utility methods including link metadata fetching
- * and Express.js authentication middleware
+ * Provides utility methods including Express.js authentication middleware.
  */
 const jwt_decode_1 = require("jwt-decode");
 const protocol_1 = require("@oxy.so/protocol");
-const apiUtils_1 = require("../utils/apiUtils");
 const logger_1 = require("../logger");
 const oxyServiceEnvironment_1 = require("../utils/oxyServiceEnvironment");
 /**
@@ -138,24 +136,6 @@ function OxyServicesUtilityMixin(Base) {
                 return null;
             }
         }
-        /**
-         * Fetch link metadata
-         */
-        async fetchLinkMetadata(url) {
-            try {
-                const path = (0, apiUtils_1.buildUrl)('/links/preview', { url, wait: 1 });
-                const preview = await this.makeRequest('GET', path, undefined, { cache: false });
-                return {
-                    url: preview.url,
-                    title: preview.title?.trim() || preview.url.replace(/^https?:\/\//, '').replace(/\/$/, ''),
-                    description: preview.description?.trim() || 'Link',
-                    image: preview.image,
-                };
-            }
-            catch (error) {
-                throw this.handleError(error);
-            }
-        }
         /**
          * Express.js authentication middleware
          *

package/dist/cjs/mixins/index.js

@@ -20,6 +20,7 @@ const OxyServices_reputation_1 = require("./OxyServices.reputation");
 const OxyServices_assets_1 = require("./OxyServices.assets");
 const OxyServices_accounts_1 = require("./OxyServices.accounts");
 const OxyServices_connectedApps_1 = require("./OxyServices.connectedApps");
+const OxyServices_agency_1 = require("./OxyServices.agency");
 const OxyServices_store_1 = require("./OxyServices.store");
 const OxyServices_location_1 = require("./OxyServices.location");
 const OxyServices_analytics_1 = require("./OxyServices.analytics");
@@ -34,7 +35,6 @@ const OxyServices_appData_1 = require("./OxyServices.appData");
 const OxyServices_civic_1 = require("./OxyServices.civic");
 const OxyServices_chains_1 = require("./OxyServices.chains");
 const OxyServices_nodes_1 = require("./OxyServices.nodes");
-const OxyServices_links_1 = require("./OxyServices.links");
 const OxyServices_followGraph_1 = require("./OxyServices.followGraph");
 const OxyServices_inference_1 = require("./OxyServices.inference");
 const OxyServices_deviceBoot_1 = require("./OxyServices.deviceBoot");
@@ -73,6 +73,8 @@ const MIXIN_PIPELINE = [
     // OAuth-consent surface (public app identity + connected-app grants). Kept
     // separate from account ownership.
     OxyServices_connectedApps_1.OxyServicesConnectedAppsMixin,
+    // Oxy-owned delegated authority for Alia and digital-agent accounts.
+    OxyServices_agency_1.OxyServicesAgencyMixin,
     // The app store: the public storefront, the reviews on it, and the listing a
     // publisher edits. A module OVER the platform — turn it off and OAuth still
     // works — so it is its own surface rather than more of `accounts`.
@@ -95,9 +97,6 @@ const MIXIN_PIPELINE = [
     // User nodes / decentralization (Fase 5): register/read/revoke/manage the
     // caller's personal data node + ingest hint.
     OxyServices_nodes_1.OxyServicesNodesMixin,
-    // Link previews / unfurls: SDK-owned link-metadata resolution via oxy-api,
-    // so apps stop scraping link metadata locally.
-    OxyServices_links_1.OxyServicesLinksMixin,
     // The user-owned follow graph (#809). One relationship per user and target,
     // shared across applications, with per-application context on top.
     OxyServices_followGraph_1.OxyServicesFollowGraphMixin,

package/dist/cjs/server/index.js

@@ -16,7 +16,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isOfficialWebOrigin = exports.registrableApex = exports.OXY_IDENTITY_CACHE_PREFIXES = exports.oxyUserByIdCacheKey = exports.evictOxyIdentityCache = exports.publishOxyUserInvalidation = exports.createOxyUserInvalidationHandler = exports.verifySecret = exports.verifyCapabilityTicket = exports.readCapabilityAuthorization = exports.issueCapabilityTicket = exports.inputSatisfiesCapabilityLimits = exports.createCapabilityTicketMiddleware = exports.CapabilityTicketError = exports.OXY_CSP_BASELINE = exports.inlineScriptCspHash = exports.formatOxyCspPolicy = exports.extractInlineScripts = exports.cspSourcesFor = exports.createOxySecurityHeaders = exports.buildOxyPagesHeaders = exports.buildOxyCspDirectives = exports.createOxyCors = exports.UPSTREAM_HEADERS_TIMEOUT_MS = exports.MAX_URL_LENGTH = exports.MAX_REDIRECTS = exports.DEFAULT_USER_AGENT = exports.BLOCKED_HOSTNAMES = exports.ALLOWED_PROTOCOLS = exports.ALLOWED_PORTS = exports.UpstreamError = exports.SsrfRejection = exports.safeFetch = exports.isBlockedIp = exports.assertSafePublicUrl = exports.createOxyRateLimit = exports.OXY_SERVICE_ENVIRONMENTS = exports.requireOxyAuth = exports.isOxyAuthenticated = exports.getRequiredOxyUserId = exports.getRequiredOxyBillingPrincipal = exports.getOxyUserId = exports.getOxyRequestAttribution = exports.getOxyDelegatedUserId = exports.getOxyBillingPrincipal = exports.createOxyAuthMiddleware = exports.createOptionalOxyAuth = void 0;
+exports.withoutNodeHttpObservation = exports.observeNodeHttp = exports.createEcosystemTraffic = exports.isOfficialWebOrigin = exports.registrableApex = exports.OXY_IDENTITY_CACHE_PREFIXES = exports.oxyUserByIdCacheKey = exports.evictOxyIdentityCache = exports.publishOxyUserInvalidation = exports.createOxyUserInvalidationHandler = exports.verifySecret = exports.verifyCapabilityTicket = exports.readCapabilityAuthorization = exports.issueCapabilityTicket = exports.inputSatisfiesCapabilityLimits = exports.createCapabilityTicketMiddleware = exports.CapabilityTicketError = exports.OXY_CSP_BASELINE = exports.inlineScriptCspHash = exports.formatOxyCspPolicy = exports.extractInlineScripts = exports.cspSourcesFor = exports.createOxySecurityHeaders = exports.buildOxyPagesHeaders = exports.buildOxyCspDirectives = exports.createOxyCors = exports.UPSTREAM_HEADERS_TIMEOUT_MS = exports.MAX_URL_LENGTH = exports.MAX_REDIRECTS = exports.DEFAULT_USER_AGENT = exports.BLOCKED_HOSTNAMES = exports.ALLOWED_PROTOCOLS = exports.ALLOWED_PORTS = exports.UpstreamError = exports.SsrfRejection = exports.safeFetch = exports.isBlockedIp = exports.assertSafePublicUrl = exports.createOxyRateLimit = exports.OXY_SERVICE_ENVIRONMENTS = exports.requireOxyAuth = exports.isOxyAuthenticated = exports.getRequiredOxyUserId = exports.getRequiredOxyBillingPrincipal = exports.getOxyUserId = exports.getOxyRequestAttribution = exports.getOxyDelegatedUserId = exports.getOxyBillingPrincipal = exports.createOxyAuthMiddleware = exports.createOptionalOxyAuth = void 0;
 var auth_1 = require("./auth");
 Object.defineProperty(exports, "createOptionalOxyAuth", { enumerable: true, get: function () { return auth_1.createOptionalOxyAuth; } });
 Object.defineProperty(exports, "createOxyAuthMiddleware", { enumerable: true, get: function () { return auth_1.createOxyAuthMiddleware; } });
@@ -95,3 +95,8 @@ var registrableApex_1 = require("../utils/registrableApex");
 Object.defineProperty(exports, "registrableApex", { enumerable: true, get: function () { return registrableApex_1.registrableApex; } });
 var officialOrigins_1 = require("../utils/officialOrigins");
 Object.defineProperty(exports, "isOfficialWebOrigin", { enumerable: true, get: function () { return officialOrigins_1.isOfficialWebOrigin; } });
+var traffic_1 = require("./traffic");
+Object.defineProperty(exports, "createEcosystemTraffic", { enumerable: true, get: function () { return traffic_1.createEcosystemTraffic; } });
+var trafficNodeHttp_1 = require("./trafficNodeHttp");
+Object.defineProperty(exports, "observeNodeHttp", { enumerable: true, get: function () { return trafficNodeHttp_1.observeNodeHttp; } });
+Object.defineProperty(exports, "withoutNodeHttpObservation", { enumerable: true, get: function () { return trafficNodeHttp_1.withoutNodeHttpObservation; } });

package/dist/cjs/server/traffic.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createEcosystemTraffic = createEcosystemTraffic;
+const trafficNodeHttp_1 = require("./trafficNodeHttp");
+const socket_1 = require("@oxy.so/telemetry/socket");
+const node_crypto_1 = require("node:crypto");
+const OxyServices_1 = require("../OxyServices");
+const collector_1 = require("@oxy.so/telemetry/collector");
+/** Install once per service process, before registering HTTP routes. */
+function createEcosystemTraffic(options) {
+    const region = options.region ?? process.env.AWS_REGION ?? 'unknown';
+    const baseURL = options.baseURL ?? process.env.OXY_API_URL ?? 'https://api.oxy.so';
+    const activityKey = process.env.OXY_ACTIVITY_API_KEY;
+    const activitySecret = process.env.OXY_ACTIVITY_API_SECRET;
+    if (!options.credential && Boolean(activityKey) !== Boolean(activitySecret)) {
+        throw new Error('Ecosystem activity requires a complete OXY_ACTIVITY_API_KEY and OXY_ACTIVITY_API_SECRET pair');
+    }
+    const apiKey = activityKey || process.env.OXY_SERVICE_API_KEY;
+    const apiSecret = activitySecret || process.env.OXY_SERVICE_API_SECRET;
+    if (!options.credential && (!apiKey || !apiSecret))
+        throw new Error('Ecosystem activity requires OXY_SERVICE_API_KEY and OXY_SERVICE_API_SECRET');
+    const oxy = new OxyServices_1.OxyServices({ baseURL });
+    if (apiKey && apiSecret)
+        oxy.configureServiceAuth(apiKey, apiSecret);
+    const credential = options.credential ?? (() => oxy.getServiceToken());
+    const fetcher = globalThis.fetch.bind(globalThis);
+    const instanceId = (0, node_crypto_1.randomUUID)();
+    const location = options.location ?? (0, collector_1.infrastructureLocation)(region);
+    if (!location)
+        throw new Error('Ecosystem activity requires a known infrastructure region or explicit location');
+    const post = async (path, data) => {
+        const token = await credential();
+        const response = await fetcher(new URL(path, baseURL), {
+            method: 'POST', headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${token}` },
+            body: JSON.stringify(data), signal: AbortSignal.timeout(4000),
+        });
+        if (!response.ok)
+            throw new Error('Activity collection failed');
+    };
+    const collector = (0, collector_1.createTrafficCollector)(events => post('/internal/activity', events));
+    let stopped = false;
+    let heartbeatWork = Promise.resolve();
+    let heartbeatPending = false;
+    const reportError = options.onError ?? (() => console.warn('Ecosystem activity publisher unavailable'));
+    const heartbeat = (removed = false) => {
+        if (!removed && (stopped || heartbeatPending))
+            return heartbeatWork;
+        heartbeatPending = true;
+        heartbeatWork = heartbeatWork.then(() => post('/internal/activity/infrastructure', { instanceId, service: options.service, region, ...location, status: options.ready?.() ? 'online' : 'unknown', removed })).catch(reportError).finally(() => { heartbeatPending = false; });
+        return heartbeatWork;
+    };
+    const flush = () => collector.flush().catch(reportError);
+    const cleanups = new Set();
+    const sockets = new WeakMap();
+    let fetchInstalled = false;
+    const wrapFetch = (fetcher) => {
+        const wrapped = (0, collector_1.instrumentTrafficFetch)(fetcher, collector, options.service, region, options.resolveEndpoint ?? collector_1.resolveOxyServiceEndpoint);
+        return Object.assign((...args) => (0, trafficNodeHttp_1.withoutNodeHttpObservation)(() => wrapped(...args)), fetcher);
+    };
+    const observeHttp = (0, collector_1.trafficMiddleware)(collector, options.service, region);
+    const timer = setInterval(() => { void flush(); }, 2000);
+    timer.unref?.();
+    void heartbeat();
+    const heartbeatTimer = setInterval(() => { void heartbeat(); }, 10000);
+    heartbeatTimer.unref?.();
+    return {
+        record: flow => collector.record({ ...flow, service: options.service, region }),
+        middleware: observeHttp,
+        observeHttp,
+        wrapFetch,
+        installFetch() {
+            if (fetchInstalled || stopped)
+                return;
+            fetchInstalled = true;
+            const original = globalThis.fetch;
+            const wrapped = wrapFetch(original);
+            globalThis.fetch = wrapped;
+            cleanups.add(() => { if (globalThis.fetch === wrapped)
+                globalThis.fetch = original; });
+            cleanups.add((0, trafficNodeHttp_1.observeNodeHttp)(collector, options.service, region, options.resolveEndpoint ?? collector_1.resolveOxyServiceEndpoint));
+        },
+        observeWebSocket(socket, socketOptions) {
+            const existing = sockets.get(socket);
+            if (existing)
+                return existing;
+            const unobserve = (0, socket_1.observeTrafficWebSocket)(socket, collector, options.service, region, socketOptions);
+            const cleanup = () => { unobserve(); socket.off('close', cleanup); cleanups.delete(cleanup); sockets.delete(socket); };
+            sockets.set(socket, cleanup);
+            socket.once('close', cleanup);
+            cleanups.add(cleanup);
+            return cleanup;
+        },
+        observeSocket(socket, socketOptions) {
+            const existing = sockets.get(socket);
+            if (existing)
+                return existing;
+            const unobserve = (0, socket_1.observeTrafficSocket)(socket, collector, options.service, region, socketOptions);
+            const cleanup = () => { unobserve(); socket.off('disconnect', cleanup); cleanups.delete(cleanup); sockets.delete(socket); };
+            sockets.set(socket, cleanup);
+            socket.once('disconnect', cleanup);
+            cleanups.add(cleanup);
+            return cleanup;
+        },
+        async stop() { if (stopped)
+            return; stopped = true; cleanups.forEach(cleanup => cleanup()); cleanups.clear(); clearInterval(timer); clearInterval(heartbeatTimer); await flush(); await heartbeat(true); },
+    };
+}