@teamvibe/poller 0.2.4 → 0.2.5

package/dist/auth-provider.d.ts

@@ -14,5 +14,10 @@ export declare function getCredentials(): AuthCredentials;
 export declare function getAuthConfig(): AuthConfig;
 export declare function getPollerId(): string | null;
 export declare function isTokenMode(): boolean;
+/**
+ * Force an immediate credential refresh. Used when SQS returns ExpiredTokenException.
+ * Throws if refresh fails (caller should handle).
+ */
+export declare function forceRefresh(): Promise<void>;
 export declare function stopRefresh(): void;
 export {};

package/dist/auth-provider.js

@@ -6,6 +6,9 @@ let currentConfig = null;
 let currentPollerId = null;
 let refreshTimer = null;
 let heartbeatTimer = null;
+// Stored for on-demand refresh
+let storedApiUrl = null;
+let storedToken = null;
 const REFRESH_INTERVAL_MS = 50 * 60 * 1000; // 50 minutes (before 1hr expiry)
 const HEARTBEAT_INTERVAL_MS = 60 * 1000; // 1 minute
 async function sendHeartbeat(apiUrl, token, version) {
@@ -44,6 +47,8 @@ async function fetchCredentials(apiUrl, token) {
 }
 export async function initAuth(apiUrl, token) {
     logger.info('Authenticating with TeamVibe API...');
+    storedApiUrl = apiUrl;
+    storedToken = token;
     const auth = await fetchCredentials(apiUrl, token);
     currentCredentials = auth.credentials;
     currentConfig = auth.config;
@@ -87,6 +92,20 @@ export function getPollerId() {
 export function isTokenMode() {
     return currentCredentials !== null;
 }
+/**
+ * Force an immediate credential refresh. Used when SQS returns ExpiredTokenException.
+ * Throws if refresh fails (caller should handle).
+ */
+export async function forceRefresh() {
+    if (!storedApiUrl || !storedToken) {
+        throw new Error('Cannot force refresh: auth not initialized (no stored API URL/token)');
+    }
+    logger.info('Force-refreshing credentials (token expired)...');
+    const auth = await fetchCredentials(storedApiUrl, storedToken);
+    currentCredentials = auth.credentials;
+    currentConfig = auth.config;
+    logger.info('Credentials force-refreshed successfully');
+}
 export function stopRefresh() {
     if (refreshTimer) {
         clearInterval(refreshTimer);

package/dist/config.js

@@ -44,7 +44,7 @@ const configSchema = z.object({
         .transform((v) => v.toLowerCase() === 'true'),
     BRAIN_UPDATE_COOLDOWN_MS: z.coerce.number().default(300000), // 5 minutes
     // Brain heartbeat & maintenance (cron-based)
-    HEARTBEAT_CRON: z.string().default('*/5 * * * *'), // Every 5 minutes
+    HEARTBEAT_CRON: z.string().default('0 */6 * * *'), // Every 6 hours
     MAINTENANCE_CRON: z.string().default('30 3 * * *'), // Daily at 03:30 UTC
     MAINTENANCE_ENABLED: z.string().default('true').transform((v) => v.toLowerCase() === 'true'),
     // Auto-update settings

package/dist/poller.js

@@ -338,10 +338,34 @@ function deduplicateMessages(messages) {
     }
     return { unique, duplicates };
 }
+// Circuit breaker for consecutive auth/infrastructure failures
+const AUTH_CIRCUIT_BREAKER_THRESHOLD = 3;
+const AUTH_CIRCUIT_BREAKER_MAX_BACKOFF_MS = 60_000;
+let consecutiveAuthFailures = 0;
+function isAuthError(error) {
+    if (!(error instanceof Error))
+        return false;
+    const name = error.name ?? '';
+    const code = error.Code ?? '';
+    const message = error.message ?? '';
+    return (name === 'ExpiredTokenException' ||
+        code === 'ExpiredToken' ||
+        code === 'InvalidClientTokenId' ||
+        code === 'UnrecognizedClientException' ||
+        message.includes('security token') ||
+        message.includes('Auth failed'));
+}
 async function pollLoop() {
     logger.info('Poll loop started');
     while (!shuttingDown) {
         try {
+            // Circuit breaker: if too many consecutive auth failures, back off
+            if (consecutiveAuthFailures >= AUTH_CIRCUIT_BREAKER_THRESHOLD) {
+                const backoffMs = Math.min(5_000 * Math.pow(2, consecutiveAuthFailures - AUTH_CIRCUIT_BREAKER_THRESHOLD), AUTH_CIRCUIT_BREAKER_MAX_BACKOFF_MS);
+                logger.warn(`[CircuitBreaker] Auth degraded (${consecutiveAuthFailures} consecutive failures), ` +
+                    `backing off ${backoffMs}ms before retry...`);
+                await sleep(backoffMs);
+            }
             if (isAtCapacity()) {
                 logger.debug(`At capacity (${getActiveProcessCount()}/${config.MAX_CONCURRENT_SESSIONS}), waiting...`);
                 await sleep(1000);
@@ -351,6 +375,11 @@ async function pollLoop() {
             logger.debug(`Polling for up to ${availableSlots} messages...`);
             const messages = await pollMessages(availableSlots);
             consecutiveNetFailures = 0; // Successful poll — reset circuit breaker
+            // Successful poll — reset circuit breaker
+            if (consecutiveAuthFailures > 0) {
+                logger.info(`[CircuitBreaker] Auth recovered after ${consecutiveAuthFailures} failure(s)`);
+                consecutiveAuthFailures = 0;
+            }
             if (messages.length === 0) {
                 continue;
             }
@@ -384,7 +413,13 @@ async function pollLoop() {
             Promise.all(processPromises);
         }
         catch (error) {
-            if (isNetworkError(error)) {
+            if (isAuthError(error)) {
+                consecutiveAuthFailures++;
+                logger.error(`[CircuitBreaker] Auth failure #${consecutiveAuthFailures}: ${error instanceof Error ? error.message : error}`);
+                emitEvent('poller.auth_failure', '', { consecutiveFailures: consecutiveAuthFailures });
+                await sleep(5000);
+            }
+            else if (isNetworkError(error)) {
                 consecutiveNetFailures++;
                 logger.error(`Network error in poll loop (${consecutiveNetFailures}/${config.MAX_CONSECUTIVE_NET_FAILURES}):`, error);
                 if (consecutiveNetFailures === config.MAX_CONSECUTIVE_NET_FAILURES) {
@@ -408,7 +443,8 @@ async function pollLoop() {
                 await sleep(backoffMs);
             }
             else {
-                // Non-network errors don't affect the circuit breaker counter
+                // Non-network, non-auth errors — reset auth circuit breaker (infra is reachable)
+                consecutiveAuthFailures = 0;
                 logger.error('Error in poll loop:', error);
                 await sleep(5000);
             }

package/dist/sqs-poller.js

@@ -1,8 +1,15 @@
 import { SQSClient, ReceiveMessageCommand, DeleteMessageCommand, ChangeMessageVisibilityCommand, SendMessageCommand, } from '@aws-sdk/client-sqs';
 import { config } from './config.js';
 import { logger } from './logger.js';
-import { isTokenMode, getCredentials, getAuthConfig } from './auth-provider.js';
+import { isTokenMode, getCredentials, getAuthConfig, forceRefresh } from './auth-provider.js';
 import { emitError } from './event-queue.js';
+function isExpiredTokenError(error) {
+    if (!(error instanceof Error))
+        return false;
+    const name = error.name ?? '';
+    const code = error.Code ?? '';
+    return name === 'ExpiredTokenException' || code === 'ExpiredToken';
+}
 function createSqsClient() {
     if (isTokenMode()) {
         const creds = getCredentials();
@@ -42,6 +49,24 @@ export async function pollMessages(maxMessages = 10) {
         return response.Messages.map((msg) => parseMessage(msg)).filter((m) => m !== null);
     }
     catch (error) {
+        // Expired AWS STS token — force-refresh credentials and retry once
+        if (isTokenMode() && isExpiredTokenError(error)) {
+            logger.warn('SQS poll failed with ExpiredToken, attempting credential refresh...');
+            await forceRefresh(); // throws if refresh itself fails
+            // Retry poll with fresh credentials
+            const retryResponse = await createSqsClient().send(new ReceiveMessageCommand({
+                QueueUrl: getQueueUrl(),
+                MaxNumberOfMessages: Math.min(maxMessages, 10),
+                WaitTimeSeconds: config.POLL_WAIT_TIME_SECONDS,
+                VisibilityTimeout: config.VISIBILITY_TIMEOUT_SECONDS,
+                MessageAttributeNames: ['All'],
+            }));
+            if (!retryResponse.Messages || retryResponse.Messages.length === 0) {
+                return [];
+            }
+            logger.info(`Received ${retryResponse.Messages.length} message(s) after credential refresh`);
+            return retryResponse.Messages.map((msg) => parseMessage(msg)).filter((m) => m !== null);
+        }
         logger.error('Error polling SQS:', error);
         emitError('sqs', `Error polling SQS: ${error instanceof Error ? error.message : String(error)}`);
         throw error;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@teamvibe/poller",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "type": "module",
   "main": "./dist/index.js",
   "bin": {