@camstack/core 0.1.14 → 0.1.16

package/dist/addon/addon-api-factory.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Factory for creating tRPC clients for addons.
+ *
+ * In-process only: `createDirectCaller()` uses tRPC's `createCallerFactory`
+ * to call procedures directly (zero network overhead) and wraps the raw
+ * caller in a proxy so it matches `CreateTRPCClient<AppRouter>` shape —
+ * addons use `context.api.namespace.method.query(input)` identically to
+ * the cross-process path.
+ *
+ * Cross-process calls (forked workers, remote agents) ride the Moleculer
+ * broker via `brokerTransportLink` in the kernel — not this factory.
+ */
+export interface DirectCallerOptions {
+    /** The tRPC router instance (from buildAppRouter) */
+    readonly router: unknown;
+    /** Context for the caller (user identity, etc.) */
+    readonly context: {
+        readonly user: {
+            readonly id: string;
+            readonly username: string;
+            readonly role: string;
+        };
+    };
+}
+export declare class AddonApiFactory {
+    /**
+     * Create a direct caller -- calls tRPC procedures directly in-process.
+     * Zero network overhead. Used for in-process addons and dev mode.
+     *
+     * Returns `AddonApi` — the same tRPC client surface that broker-routed
+     * callers get. Callers treat it uniformly as `context.api` regardless
+     * of the underlying transport.
+     */
+    createDirectCaller(options: DirectCallerOptions): Promise<import('@camstack/types').AddonApi>;
+}
+//# sourceMappingURL=addon-api-factory.d.ts.map

package/dist/addon/addon-api-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-api-factory.d.ts","sourceRoot":"","sources":["../../src/addon/addon-api-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,mBAAmB;IAClC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;CAC/G;AAoDD,qBAAa,eAAe;IAC1B;;;;;;;OAOG;IACG,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,iBAAiB,EAAE,QAAQ,CAAC;CASpG"}

package/dist/addon-routes/addon-route-registry.d.ts

@@ -0,0 +1,38 @@
+import { IAddonHttpRoute, IAddonRouteProvider } from '@camstack/types';
+interface RouteMatch {
+    readonly route: IAddonHttpRoute;
+    readonly addonId: string;
+    readonly params: Record<string, string>;
+}
+/**
+ * Registry for dynamic HTTP routes registered by addons.
+ * Framework-agnostic — the server HTTP layer queries this registry to dispatch requests.
+ */
+export declare class AddonRouteRegistry {
+    private readonly routes;
+    /**
+     * Register all routes from an addon's route provider.
+     */
+    registerRoutes(addonId: string, provider: IAddonRouteProvider): void;
+    /**
+     * Unregister all routes for an addon.
+     */
+    unregisterRoutes(addonId: string): void;
+    /**
+     * Match an incoming request method + path to a registered route.
+     * Supports simple path parameters (e.g., /items/:id).
+     */
+    matchRoute(method: string, path: string): RouteMatch | null;
+    /**
+     * List all registered routes across all addons.
+     */
+    listRoutes(): ReadonlyArray<{
+        addonId: string;
+        method: string;
+        path: string;
+        access: string;
+        description?: string;
+    }>;
+}
+export {};
+//# sourceMappingURL=addon-route-registry.d.ts.map

package/dist/addon-routes/addon-route-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-route-registry.d.ts","sourceRoot":"","sources":["../../src/addon-routes/addon-route-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAE3E,UAAU,UAAU;IAClB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACxC;AASD;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAE9D;;OAEG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAapE;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIvC;;;OAGG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAqB3D;;OAEG;IACH,UAAU,IAAI,aAAa,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAerH"}

package/dist/auth/api-key-manager.d.ts

@@ -0,0 +1,27 @@
+import { AuthManager } from './auth-manager.js';
+import { ApiKeyRecord, UserRole, SettingsStoreClient } from '@camstack/types';
+export type { ApiKeyRecord };
+interface CreateApiKeyInput {
+    label: string;
+    role: UserRole;
+    allowedProviders?: string[] | '*';
+    allowedDevices?: Record<string, string[] | '*'>;
+}
+export interface ApiKeyStorageAccess {
+    getStore(): SettingsStoreClient;
+}
+export declare class ApiKeyManager {
+    private readonly storageAccess;
+    private readonly auth;
+    constructor(storageAccess: ApiKeyStorageAccess, auth: AuthManager);
+    private get store();
+    create(input: CreateApiKeyInput): Promise<{
+        record: ApiKeyRecord;
+        token: string;
+    }>;
+    validateToken(token: string): Promise<ApiKeyRecord | null>;
+    listAll(): Promise<Omit<ApiKeyRecord, 'tokenHash'>[]>;
+    revoke(id: string): Promise<void>;
+    findById(id: string): Promise<ApiKeyRecord | null>;
+}
+//# sourceMappingURL=api-key-manager.d.ts.map

package/dist/auth/api-key-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-manager.d.ts","sourceRoot":"","sources":["../../src/auth/api-key-manager.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAGlF,YAAY,EAAE,YAAY,EAAE,CAAA;AAE5B,UAAU,iBAAiB;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,QAAQ,CAAA;IACd,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,CAAA;CAChD;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,IAAI,mBAAmB,CAAA;CAChC;AAMD,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI;gBADJ,aAAa,EAAE,mBAAmB,EAClC,IAAI,EAAE,WAAW;IAGpC,OAAO,KAAK,KAAK,GAEhB;IAEK,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAkBlF,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAa1D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;IASrD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;CAKzD"}

package/dist/auth/auth-manager.d.ts

@@ -0,0 +1,47 @@
+import { ScopedToken, UserRole, TokenPayload, IScopedLogger } from '@camstack/types';
+import { ScopedTokenManager } from './scoped-token-manager.js';
+export type { UserRole, TokenPayload };
+export type AuthConfigReader = {
+    get<T>(path: string): T;
+    update(section: string, data: Record<string, unknown>): void;
+};
+export declare class AuthManager {
+    private readonly config;
+    private readonly jwtSecret;
+    private scopedTokenManager;
+    private readonly logger;
+    constructor(config: AuthConfigReader, logger?: IScopedLogger);
+    signToken(payload: Omit<TokenPayload, 'iat' | 'exp'>): string;
+    verifyToken(token: string): TokenPayload;
+    hashPassword(password: string): Promise<string>;
+    comparePassword(password: string, hash: string): Promise<boolean>;
+    generateApiKey(): {
+        token: string;
+        hash: string;
+        prefix: string;
+    };
+    validateApiKey(token: string, storedHash: string): boolean;
+    /**
+     * Create a service token for agent/worker authentication.
+     * Used when forking workers or when agents register.
+     */
+    createServiceToken(opts: {
+        readonly agentId: string;
+        readonly role?: string;
+        readonly expiresIn?: string;
+    }): string;
+    /**
+     * Set the scoped token manager for the auth chain.
+     */
+    setScopedTokenManager(manager: ScopedTokenManager): void;
+    /**
+     * Validate a scoped token string.
+     * Returns the token record if valid, null otherwise.
+     */
+    validateScopedToken(rawToken: string): Promise<ScopedToken | null>;
+    /**
+     * Check whether a scoped token grants access to a given addon/route/capability.
+     */
+    matchesScopedTokenScope(token: ScopedToken, addonId?: string, routePath?: string, capability?: string): boolean;
+}
+//# sourceMappingURL=auth-manager.d.ts.map

package/dist/auth/auth-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-manager.d.ts","sourceRoot":"","sources":["../../src/auth/auth-manager.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACzF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAYnE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;AAEtC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAAA;IACvB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAC7D,CAAA;AAED,qBAAa,WAAW;IAKV,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,kBAAkB,CAAkC;IAC5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;gBAET,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAE,aAA0B;IAczF,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,MAAM;IAI7D,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY;IAIlC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvE,cAAc,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAOjE,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAK1D;;;OAGG;IACH,kBAAkB,CAAC,IAAI,EAAE;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAC5B,GAAG,MAAM;IAcV;;OAEG;IACH,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;IAIxD;;;OAGG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAOxE;;OAEG;IACH,uBAAuB,CACrB,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO;CAMX"}

package/dist/auth/parse-record.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Wrap a Zod schema parse with an actionable error message. The
+ * settings-store regression that broke local-auth in May 2026 surfaced
+ * as an opaque Zod error listing every required field as `undefined`
+ * — confusing because the data IS in the DB, just exposed through the
+ * wrong shape by `queryDeclared`. This helper makes the failure mode
+ * obvious: it explicitly mentions the kind, the offending value's top-
+ * level keys, and a hint about the most common cause.
+ *
+ * `schema` is typed loosely (any with a `parse` method) to avoid the
+ * generic ZodTypeAny variance error across Zod major versions when this
+ * helper is reused by callers that import schemas from `@camstack/types`.
+ */
+interface ZodLikeSchema<T> {
+    parse(data: unknown): T;
+}
+export declare function parseRecord<T>(kind: string, schema: ZodLikeSchema<T>, data: unknown): T;
+export {};
+//# sourceMappingURL=parse-record.d.ts.map

package/dist/auth/parse-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-record.d.ts","sourceRoot":"","sources":["../../src/auth/parse-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,UAAU,aAAa,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAA;CACxB;AAED,wBAAgB,WAAW,CAAC,CAAC,EAC3B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,IAAI,EAAE,OAAO,GACZ,CAAC,CAsBH"}

package/dist/auth/scoped-token-manager.d.ts

@@ -0,0 +1,18 @@
+import { ScopedToken, TokenScope, SettingsStoreClient } from '@camstack/types';
+/**
+ * Manages scoped API tokens with restricted addon/route/capability access.
+ */
+export declare class ScopedTokenManager {
+    private readonly store;
+    constructor(store: SettingsStoreClient);
+    create(userId: string, name: string, scopes: TokenScope[], expiresAt?: number): Promise<{
+        token: string;
+        record: ScopedToken;
+    }>;
+    validate(rawToken: string): Promise<ScopedToken | null>;
+    matchesScope(token: ScopedToken, addonId?: string, routePath?: string, capability?: string): boolean;
+    revoke(tokenId: string): Promise<void>;
+    listForUser(userId: string): Promise<ScopedToken[]>;
+    updateLastUsed(tokenId: string): Promise<void>;
+}
+//# sourceMappingURL=scoped-token-manager.d.ts.map

package/dist/auth/scoped-token-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-token-manager.d.ts","sourceRoot":"","sources":["../../src/auth/scoped-token-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAUnF;;GAEG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,mBAAmB;IAEjD,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,EAAE,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,CAAC;IAsB5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAY7D,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO;IAW9F,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAKnD,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMrD"}

package/dist/auth/user-manager.d.ts

@@ -0,0 +1,34 @@
+import { AuthManager } from './auth-manager.js';
+import { UserRecord, UserRole, SettingsStoreClient } from '@camstack/types';
+export type { UserRecord };
+interface CreateUserInput {
+    username: string;
+    password: string;
+    role: UserRole;
+    allowedProviders?: string[] | '*';
+    allowedDevices?: Record<string, string[] | '*'>;
+}
+type UpdatableUserFields = Partial<Pick<UserRecord, 'role' | 'allowedProviders' | 'allowedDevices'>>;
+export interface UserStorageAccess {
+    getStore(): SettingsStoreClient;
+}
+export interface UserConfigReader {
+    get<T>(path: string): T;
+}
+export declare class UserManager {
+    private readonly storageAccess;
+    private readonly auth;
+    private readonly config;
+    constructor(storageAccess: UserStorageAccess, auth: AuthManager, config: UserConfigReader);
+    private get store();
+    create(input: CreateUserInput): Promise<UserRecord>;
+    findByUsername(username: string): Promise<UserRecord | null>;
+    findById(id: string): Promise<UserRecord | null>;
+    validateCredentials(username: string, password: string): Promise<UserRecord | null>;
+    listAll(): Promise<Omit<UserRecord, 'passwordHash'>[]>;
+    update(id: string, data: UpdatableUserFields): Promise<void>;
+    delete(id: string): Promise<void>;
+    resetPassword(id: string, newPassword: string): Promise<void>;
+    ensureAdminExists(): Promise<void>;
+}
+//# sourceMappingURL=user-manager.d.ts.map

package/dist/auth/user-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-manager.d.ts","sourceRoot":"","sources":["../../src/auth/user-manager.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAGhF,YAAY,EAAE,UAAU,EAAE,CAAA;AAE1B,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,QAAQ,CAAA;IACd,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,CAAA;CAChD;AAED,KAAK,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,gBAAgB,CAAC,CAAC,CAAA;AAIpG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,IAAI,mBAAmB,CAAA;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAAA;CACxB;AAMD,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,aAAa,EAAE,iBAAiB,EAChC,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,gBAAgB;IAG3C,OAAO,KAAK,KAAK,GAEhB;IAEK,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAqBnD,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAM5D,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAMhD,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAOnF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;IAStD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7D,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;CAkBzC"}

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.d.ts

@@ -0,0 +1,54 @@
+import { BaseAddon, ProviderRegistration } from '@camstack/types';
+export declare class AddonPagesAggregatorAddon extends BaseAddon {
+    readonly id = "addon-pages-aggregator";
+    private resolvedPaths;
+    /**
+     * Last successful `listPages()` snapshot per source. Used as the
+     * "stale-but-valid" fallback when a source transiently fails — drops
+     * happen often enough during boot (Moleculer service-discovery
+     * window) that swallowing the error and returning empty leaves the
+     * sidebar with nothing for several seconds. Keeping the previous
+     * good entry means a flake is invisible to the operator.
+     */
+    private readonly lastGood;
+    /** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */
+    private readonly retryTimers;
+    constructor();
+    protected onInitialize(): Promise<ProviderRegistration[]>;
+    protected onShutdown(): Promise<void>;
+    private aggregate;
+    /**
+     * Schedule background re-call of `listPages()` on a source that just
+     * failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful
+     * call updates the cache and emits `AddonPageReady` so the admin UI
+     * invalidates its query. Stops on first success or after the schedule
+     * is exhausted.
+     */
+    private scheduleRetry;
+    private retrySource;
+    /**
+     * Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back
+     * to `Date.now()` when the bundle path can't be stat'd (remote addon
+     * with no local file, addon not yet on disk, etc.) — the browser
+     * just gets a fresh URL on each call instead of cache-friendly mtime.
+     */
+    private makeBundleUrl;
+    /**
+     * Resolve the local filesystem path for an addon's bundle. Mirrors
+     * `AddonPagesService.resolveBundle` (server-side), but without the
+     * existence / traversal checks — those still live on the server's
+     * static file route. We only need a stat-able path here for the
+     * `mtime` cache-buster.
+     */
+    private resolveBundlePath;
+    /**
+     * Read `server.dataPath` from the cluster yml-backed sections (same
+     * source the server uses at boot), then derive the addons directory
+     * from it. Falls back to `camstack-data/addons` when no settings API
+     * is available — agents and isolated tests don't see this addon, so
+     * the fallback is purely defensive.
+     */
+    private resolvePaths;
+}
+export default AddonPagesAggregatorAddon;
+//# sourceMappingURL=addon-pages-aggregator.addon.d.ts.map

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-pages-aggregator.addon.d.ts","sourceRoot":"","sources":["../../../src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts"],"names":[],"mappings":"AAyBA,OAAO,EACL,SAAS,EAOT,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAA;AAqBxB,qBAAa,yBAA0B,SAAQ,SAAS;IACtD,QAAQ,CAAC,EAAE,4BAA2B;IAEtC,OAAO,CAAC,aAAa,CAA6B;IAElD;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8C;IAEvE,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;;cAIhD,YAAY,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;cAW/C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAQ7B,SAAS;IAmDvB;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;YAYP,WAAW;IAkCzB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAWrB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAczB;;;;;;OAMG;YACW,YAAY;CAgB3B;AAED,eAAe,yBAAyB,CAAA"}

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -0,0 +1,226 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+const require_chunk = require("../../chunk-C13QxCFV.js");
+let node_fs = require("node:fs");
+node_fs = require_chunk.__toESM(node_fs);
+let node_path = require("node:path");
+node_path = require_chunk.__toESM(node_path);
+let node_crypto = require("node:crypto");
+let _camstack_types = require("@camstack/types");
+//#region src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts
+/**
+* Addon Pages Aggregator — hub-local builtin that owns the singleton
+* `addon-pages` cap.
+*
+* Walks every registered `addon-pages-source` (collection) provider and
+* emits an enriched `AddonPageInfo[]` list with versioned `bundleUrl`s
+* pointing at `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. The
+* filesystem `mtime` cache-buster lets the browser pick up addon
+* rebuilds without manual reload — same scheme the original
+* hand-written `AddonPagesService.listPages` used before this split.
+*
+* The static file endpoint (`/api/addon-pages/:addonId/*`) is still
+* served by `AddonPagesService.resolveBundle()` on the server side; this
+* addon only owns the listing surface.
+*
+* Why a builtin rather than a cap-providers helper:
+*   - The aggregator is conceptually the "addon-pages provider" — addons
+*     own caps, not the server. Living in `@camstack/core/builtins` keeps
+*     the surface symmetrical with `system-config`, `local-auth`, etc.
+*   - Lets the aggregator subscribe to source readiness without piping a
+*     CapabilityRegistry handle through `RouterServices`.
+*/
+/**
+* Backoff schedule (ms) used to retry sources that failed during a
+* `listPages()` round-trip — typically because the cap was just
+* registered (provider connected via Moleculer) but the worker-side
+* action registration hadn't propagated yet, so `Service '...listPages'
+* is not found on '<node>'` raced ahead of the call.
+*
+* We schedule one retry per entry; if every retry fails we stop
+* (the next aggregate() run will pick the source up again). On
+* success we re-emit `AddonPageReady` so admin-ui invalidates its
+* `addonPages.listPages` query and the sidebar populates without a
+* page reload.
+*/
+var RETRY_BACKOFF_MS = [
+	500,
+	1500,
+	4e3
+];
+var AddonPagesAggregatorAddon = class extends _camstack_types.BaseAddon {
+	id = "addon-pages-aggregator";
+	resolvedPaths = null;
+	/**
+	* Last successful `listPages()` snapshot per source. Used as the
+	* "stale-but-valid" fallback when a source transiently fails — drops
+	* happen often enough during boot (Moleculer service-discovery
+	* window) that swallowing the error and returning empty leaves the
+	* sidebar with nothing for several seconds. Keeping the previous
+	* good entry means a flake is invisible to the operator.
+	*/
+	lastGood = /* @__PURE__ */ new Map();
+	/** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */
+	retryTimers = /* @__PURE__ */ new Map();
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		this.resolvedPaths = await this.resolvePaths();
+		const provider = { listPages: async () => this.aggregate() };
+		this.ctx.logger.info("Initialized — aggregating addon-pages-source providers");
+		return [{
+			capability: _camstack_types.addonPagesCapability,
+			provider
+		}];
+	}
+	async onShutdown() {
+		for (const t of this.retryTimers.values()) clearTimeout(t);
+		this.retryTimers.clear();
+		this.lastGood.clear();
+	}
+	async aggregate() {
+		const sources = this.capabilities?.getCollection("addon-pages-source") ?? [];
+		const out = [];
+		const seenIds = /* @__PURE__ */ new Set();
+		for (const source of sources) {
+			seenIds.add(source.id);
+			try {
+				const enriched = (await Promise.resolve(source.listPages())).map((page) => ({
+					addonId: source.id,
+					page,
+					bundleUrl: this.makeBundleUrl(source.id, page.bundle)
+				}));
+				for (const item of enriched) out.push(item);
+				this.lastGood.set(source.id, enriched);
+			} catch (err) {
+				const message = (0, _camstack_types.errMsg)(err);
+				this.ctx.logger.warn("addon-pages-source provider failed", { meta: {
+					sourceId: source.id,
+					error: message
+				} });
+				const cached = this.lastGood.get(source.id);
+				if (cached !== void 0) {
+					for (const item of cached) out.push(item);
+					this.ctx.logger.info("addon-pages-source falling back to cached snapshot", { meta: {
+						sourceId: source.id,
+						cachedPages: cached.length
+					} });
+				}
+				this.scheduleRetry(source.id);
+			}
+		}
+		for (const cachedId of this.lastGood.keys()) if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId);
+		return out;
+	}
+	/**
+	* Schedule background re-call of `listPages()` on a source that just
+	* failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful
+	* call updates the cache and emits `AddonPageReady` so the admin UI
+	* invalidates its query. Stops on first success or after the schedule
+	* is exhausted.
+	*/
+	scheduleRetry(sourceId, attempt = 0) {
+		if (attempt >= RETRY_BACKOFF_MS.length) return;
+		if (this.retryTimers.has(sourceId)) return;
+		const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1];
+		const timer = setTimeout(() => {
+			this.retryTimers.delete(sourceId);
+			this.retrySource(sourceId, attempt);
+		}, delayMs);
+		this.retryTimers.set(sourceId, timer);
+	}
+	async retrySource(sourceId, attempt) {
+		const source = (this.capabilities?.getCollection("addon-pages-source") ?? []).find((s) => s.id === sourceId);
+		if (!source) return;
+		try {
+			const enriched = (await Promise.resolve(source.listPages())).map((page) => ({
+				addonId: source.id,
+				page,
+				bundleUrl: this.makeBundleUrl(source.id, page.bundle)
+			}));
+			this.lastGood.set(source.id, enriched);
+			this.ctx.logger.info("addon-pages-source recovered after retry", { meta: {
+				sourceId,
+				attempt: attempt + 1,
+				pages: enriched.length
+			} });
+			this.ctx.eventBus.emit({
+				id: (0, node_crypto.randomUUID)(),
+				timestamp: /* @__PURE__ */ new Date(),
+				source: {
+					type: "addon",
+					id: this.id
+				},
+				category: _camstack_types.EventCategory.AddonPageReady,
+				data: {
+					addonId: sourceId,
+					recovered: true
+				}
+			});
+		} catch (err) {
+			this.ctx.logger.debug("addon-pages-source retry failed", { meta: {
+				sourceId,
+				attempt: attempt + 1,
+				error: (0, _camstack_types.errMsg)(err)
+			} });
+			this.scheduleRetry(sourceId, attempt + 1);
+		}
+	}
+	/**
+	* Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back
+	* to `Date.now()` when the bundle path can't be stat'd (remote addon
+	* with no local file, addon not yet on disk, etc.) — the browser
+	* just gets a fresh URL on each call instead of cache-friendly mtime.
+	*/
+	makeBundleUrl(addonId, bundle) {
+		const bundlePath = this.resolveBundlePath(addonId, bundle);
+		let mtime = Date.now();
+		if (bundlePath !== null) try {
+			mtime = node_fs.statSync(bundlePath).mtimeMs;
+		} catch {}
+		return `/api/addon-pages/${addonId}/${bundle}?v=${Math.floor(mtime)}`;
+	}
+	/**
+	* Resolve the local filesystem path for an addon's bundle. Mirrors
+	* `AddonPagesService.resolveBundle` (server-side), but without the
+	* existence / traversal checks — those still live on the server's
+	* static file route. We only need a stat-able path here for the
+	* `mtime` cache-buster.
+	*/
+	resolveBundlePath(addonId, bundle) {
+		const paths = this.resolvedPaths;
+		if (!paths) return null;
+		const addonDistPath = node_path.join(paths.addonsDir, "@camstack", `addon-${addonId}`, "dist");
+		const resolvedBase = node_path.resolve(addonDistPath);
+		const resolvedFile = node_path.resolve(addonDistPath, bundle);
+		if (!resolvedFile.startsWith(resolvedBase + node_path.sep) && resolvedFile !== resolvedBase) return null;
+		return resolvedFile;
+	}
+	/**
+	* Read `server.dataPath` from the cluster yml-backed sections (same
+	* source the server uses at boot), then derive the addons directory
+	* from it. Falls back to `camstack-data/addons` when no settings API
+	* is available — agents and isolated tests don't see this addon, so
+	* the fallback is purely defensive.
+	*/
+	async resolvePaths() {
+		const fallback = { addonsDir: node_path.resolve("camstack-data", "addons") };
+		if (!this.ctx.settings) return fallback;
+		try {
+			const server = await this.ctx.settings.getSection("server");
+			const dataPath = typeof server["dataPath"] === "string" && server["dataPath"] ? server["dataPath"] : "camstack-data";
+			return { addonsDir: node_path.resolve(dataPath, "addons") };
+		} catch (err) {
+			this.ctx.logger.debug("Failed to read server.dataPath — falling back", { meta: { error: (0, _camstack_types.errMsg)(err) } });
+			return fallback;
+		}
+	}
+};
+//#endregion
+exports.AddonPagesAggregatorAddon = AddonPagesAggregatorAddon;
+exports.default = AddonPagesAggregatorAddon;
+
+//# sourceMappingURL=addon-pages-aggregator.addon.js.map

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-pages-aggregator.addon.js","names":[],"sources":["../../../src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts"],"sourcesContent":["/**\n * Addon Pages Aggregator — hub-local builtin that owns the singleton\n * `addon-pages` cap.\n *\n * Walks every registered `addon-pages-source` (collection) provider and\n * emits an enriched `AddonPageInfo[]` list with versioned `bundleUrl`s\n * pointing at `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. The\n * filesystem `mtime` cache-buster lets the browser pick up addon\n * rebuilds without manual reload — same scheme the original\n * hand-written `AddonPagesService.listPages` used before this split.\n *\n * The static file endpoint (`/api/addon-pages/:addonId/*`) is still\n * served by `AddonPagesService.resolveBundle()` on the server side; this\n * addon only owns the listing surface.\n *\n * Why a builtin rather than a cap-providers helper:\n *   - The aggregator is conceptually the \"addon-pages provider\" — addons\n *     own caps, not the server. Living in `@camstack/core/builtins` keeps\n *     the surface symmetrical with `system-config`, `local-auth`, etc.\n *   - Lets the aggregator subscribe to source readiness without piping a\n *     CapabilityRegistry handle through `RouterServices`.\n */\nimport * as path from 'node:path'\nimport * as fs from 'node:fs'\nimport { randomUUID } from 'node:crypto'\nimport {\n  BaseAddon,\n  EventCategory,\n  addonPagesCapability,\n  errMsg,\n  type AddonPageInfo,\n  type IAddonPageProvider,\n  type IAddonPagesAggregatorProvider,\n  type ProviderRegistration,\n} from '@camstack/types'\n\ninterface ResolvedPaths {\n  readonly addonsDir: string\n}\n\n/**\n * Backoff schedule (ms) used to retry sources that failed during a\n * `listPages()` round-trip — typically because the cap was just\n * registered (provider connected via Moleculer) but the worker-side\n * action registration hadn't propagated yet, so `Service '...listPages'\n * is not found on '<node>'` raced ahead of the call.\n *\n * We schedule one retry per entry; if every retry fails we stop\n * (the next aggregate() run will pick the source up again). On\n * success we re-emit `AddonPageReady` so admin-ui invalidates its\n * `addonPages.listPages` query and the sidebar populates without a\n * page reload.\n */\nconst RETRY_BACKOFF_MS: readonly number[] = [500, 1500, 4000]\n\nexport class AddonPagesAggregatorAddon extends BaseAddon {\n  readonly id = 'addon-pages-aggregator'\n\n  private resolvedPaths: ResolvedPaths | null = null\n\n  /**\n   * Last successful `listPages()` snapshot per source. Used as the\n   * \"stale-but-valid\" fallback when a source transiently fails — drops\n   * happen often enough during boot (Moleculer service-discovery\n   * window) that swallowing the error and returning empty leaves the\n   * sidebar with nothing for several seconds. Keeping the previous\n   * good entry means a flake is invisible to the operator.\n   */\n  private readonly lastGood = new Map<string, readonly AddonPageInfo[]>()\n\n  /** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */\n  private readonly retryTimers = new Map<string, NodeJS.Timeout>()\n\n  constructor() { super({}) }\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    this.resolvedPaths = await this.resolvePaths()\n\n    const provider: IAddonPagesAggregatorProvider = {\n      listPages: async (): Promise<readonly AddonPageInfo[]> => this.aggregate(),\n    }\n\n    this.ctx.logger.info('Initialized — aggregating addon-pages-source providers')\n    return [{ capability: addonPagesCapability, provider }]\n  }\n\n  protected async onShutdown(): Promise<void> {\n    for (const t of this.retryTimers.values()) clearTimeout(t)\n    this.retryTimers.clear()\n    this.lastGood.clear()\n  }\n\n  // ── Aggregation ───────────────────────────────────────────────────\n\n  private async aggregate(): Promise<readonly AddonPageInfo[]> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const out: AddonPageInfo[] = []\n    const seenIds = new Set<string>()\n\n    for (const source of sources) {\n      seenIds.add(source.id)\n      try {\n        // listPages() may be async for remote Moleculer providers.\n        const pages = await Promise.resolve(source.listPages())\n        const enriched: AddonPageInfo[] = pages.map((page) => ({\n          addonId: source.id,\n          page,\n          bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n        }))\n        for (const item of enriched) out.push(item)\n        // Cache successful snapshot — used as fallback on next failure.\n        this.lastGood.set(source.id, enriched)\n      } catch (err: unknown) {\n        const message = errMsg(err)\n        this.ctx.logger.warn('addon-pages-source provider failed', {\n          meta: { sourceId: source.id, error: message },\n        })\n        // Fall back to the last-good snapshot for this source so a\n        // transient Moleculer service-discovery race (cap registered\n        // but action not yet callable) doesn't blank the sidebar.\n        const cached = this.lastGood.get(source.id)\n        if (cached !== undefined) {\n          for (const item of cached) out.push(item)\n          this.ctx.logger.info('addon-pages-source falling back to cached snapshot', {\n            meta: { sourceId: source.id, cachedPages: cached.length },\n          })\n        }\n        // Schedule a background retry. On success we re-emit\n        // `AddonPageReady` so admin-ui's queryClient invalidates and\n        // any newly-loaded pages show up without a manual reload.\n        this.scheduleRetry(source.id)\n      }\n    }\n\n    // Drop cache entries for sources that have disappeared from the\n    // registry — keeps the fallback aligned with the live collection.\n    for (const cachedId of this.lastGood.keys()) {\n      if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId)\n    }\n\n    return out\n  }\n\n  // ── Retry on transient Moleculer race ─────────────────────────────\n\n  /**\n   * Schedule background re-call of `listPages()` on a source that just\n   * failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful\n   * call updates the cache and emits `AddonPageReady` so the admin UI\n   * invalidates its query. Stops on first success or after the schedule\n   * is exhausted.\n   */\n  private scheduleRetry(sourceId: string, attempt = 0): void {\n    if (attempt >= RETRY_BACKOFF_MS.length) return\n    if (this.retryTimers.has(sourceId)) return // already pending\n\n    const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1]!\n    const timer = setTimeout(() => {\n      this.retryTimers.delete(sourceId)\n      void this.retrySource(sourceId, attempt)\n    }, delayMs)\n    this.retryTimers.set(sourceId, timer)\n  }\n\n  private async retrySource(sourceId: string, attempt: number): Promise<void> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const source = sources.find((s) => s.id === sourceId)\n    if (!source) return // provider went away; nothing to retry\n\n    try {\n      const pages = await Promise.resolve(source.listPages())\n      const enriched: AddonPageInfo[] = pages.map((page) => ({\n        addonId: source.id,\n        page,\n        bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n      }))\n      this.lastGood.set(source.id, enriched)\n      this.ctx.logger.info('addon-pages-source recovered after retry', {\n        meta: { sourceId, attempt: attempt + 1, pages: enriched.length },\n      })\n      // Re-emit AddonPageReady so admin-ui invalidates and refetches.\n      this.ctx.eventBus.emit({\n        id: randomUUID(),\n        timestamp: new Date(),\n        source: { type: 'addon', id: this.id },\n        category: EventCategory.AddonPageReady,\n        data: { addonId: sourceId, recovered: true },\n      })\n    } catch (err: unknown) {\n      this.ctx.logger.debug('addon-pages-source retry failed', {\n        meta: { sourceId, attempt: attempt + 1, error: errMsg(err) },\n      })\n      this.scheduleRetry(sourceId, attempt + 1)\n    }\n  }\n\n  // ── Bundle URL stamping ──────────────────────────────────────────\n\n  /**\n   * Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back\n   * to `Date.now()` when the bundle path can't be stat'd (remote addon\n   * with no local file, addon not yet on disk, etc.) — the browser\n   * just gets a fresh URL on each call instead of cache-friendly mtime.\n   */\n  private makeBundleUrl(addonId: string, bundle: string): string {\n    const bundlePath = this.resolveBundlePath(addonId, bundle)\n    let mtime = Date.now()\n    if (bundlePath !== null) {\n      try { mtime = fs.statSync(bundlePath).mtimeMs }\n      catch { /* remote addon — no local file */ }\n    }\n    const v = Math.floor(mtime)\n    return `/api/addon-pages/${addonId}/${bundle}?v=${v}`\n  }\n\n  /**\n   * Resolve the local filesystem path for an addon's bundle. Mirrors\n   * `AddonPagesService.resolveBundle` (server-side), but without the\n   * existence / traversal checks — those still live on the server's\n   * static file route. We only need a stat-able path here for the\n   * `mtime` cache-buster.\n   */\n  private resolveBundlePath(addonId: string, bundle: string): string | null {\n    const paths = this.resolvedPaths\n    if (!paths) return null\n    const addonDistPath = path.join(paths.addonsDir, '@camstack', `addon-${addonId}`, 'dist')\n    const resolvedBase = path.resolve(addonDistPath)\n    const resolvedFile = path.resolve(addonDistPath, bundle)\n    if (!resolvedFile.startsWith(resolvedBase + path.sep) && resolvedFile !== resolvedBase) {\n      return null\n    }\n    return resolvedFile\n  }\n\n  // ── Path resolution ──────────────────────────────────────────────\n\n  /**\n   * Read `server.dataPath` from the cluster yml-backed sections (same\n   * source the server uses at boot), then derive the addons directory\n   * from it. Falls back to `camstack-data/addons` when no settings API\n   * is available — agents and isolated tests don't see this addon, so\n   * the fallback is purely defensive.\n   */\n  private async resolvePaths(): Promise<ResolvedPaths> {\n    const fallback: ResolvedPaths = { addonsDir: path.resolve('camstack-data', 'addons') }\n    if (!this.ctx.settings) return fallback\n    try {\n      const server = await this.ctx.settings.getSection('server')\n      const dataPath = typeof server['dataPath'] === 'string' && server['dataPath']\n        ? server['dataPath']\n        : 'camstack-data'\n      return { addonsDir: path.resolve(dataPath, 'addons') }\n    } catch (err: unknown) {\n      this.ctx.logger.debug('Failed to read server.dataPath — falling back', {\n        meta: { error: errMsg(err) },\n      })\n      return fallback\n    }\n  }\n}\n\nexport default AddonPagesAggregatorAddon\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,IAAM,mBAAsC;CAAC;CAAK;CAAM;CAAK;AAE7D,IAAa,4BAAb,cAA+C,gBAAA,UAAU;CACvD,KAAc;CAEd,gBAA8C;;;;;;;;;CAU9C,2BAA4B,IAAI,KAAuC;;CAGvE,8BAA+B,IAAI,KAA6B;CAEhE,cAAc;EAAE,MAAM,EAAE,CAAC;;CAEzB,MAAgB,eAAgD;EAC9D,KAAK,gBAAgB,MAAM,KAAK,cAAc;EAE9C,MAAM,WAA0C,EAC9C,WAAW,YAA+C,KAAK,WAAW,EAC3E;EAED,KAAK,IAAI,OAAO,KAAK,yDAAyD;EAC9E,OAAO,CAAC;GAAE,YAAY,gBAAA;GAAsB;GAAU,CAAC;;CAGzD,MAAgB,aAA4B;EAC1C,KAAK,MAAM,KAAK,KAAK,YAAY,QAAQ,EAAE,aAAa,EAAE;EAC1D,KAAK,YAAY,OAAO;EACxB,KAAK,SAAS,OAAO;;CAKvB,MAAc,YAA+C;EAC3D,MAAM,UAAU,KAAK,cAAc,cAAkC,qBAAqB,IAAI,EAAE;EAChG,MAAM,MAAuB,EAAE;EAC/B,MAAM,0BAAU,IAAI,KAAa;EAEjC,KAAK,MAAM,UAAU,SAAS;GAC5B,QAAQ,IAAI,OAAO,GAAG;GACtB,IAAI;IAGF,MAAM,YAA4B,MADd,QAAQ,QAAQ,OAAO,WAAW,CAAC,EACf,KAAK,UAAU;KACrD,SAAS,OAAO;KAChB;KACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,OAAO;KACtD,EAAE;IACH,KAAK,MAAM,QAAQ,UAAU,IAAI,KAAK,KAAK;IAE3C,KAAK,SAAS,IAAI,OAAO,IAAI,SAAS;YAC/B,KAAc;IACrB,MAAM,WAAA,GAAA,gBAAA,QAAiB,IAAI;IAC3B,KAAK,IAAI,OAAO,KAAK,sCAAsC,EACzD,MAAM;KAAE,UAAU,OAAO;KAAI,OAAO;KAAS,EAC9C,CAAC;IAIF,MAAM,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG;IAC3C,IAAI,WAAW,KAAA,GAAW;KACxB,KAAK,MAAM,QAAQ,QAAQ,IAAI,KAAK,KAAK;KACzC,KAAK,IAAI,OAAO,KAAK,sDAAsD,EACzE,MAAM;MAAE,UAAU,OAAO;MAAI,aAAa,OAAO;MAAQ,EAC1D,CAAC;;IAKJ,KAAK,cAAc,OAAO,GAAG;;;EAMjC,KAAK,MAAM,YAAY,KAAK,SAAS,MAAM,EACzC,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,KAAK,SAAS,OAAO,SAAS;EAG5D,OAAO;;;;;;;;;CAYT,cAAsB,UAAkB,UAAU,GAAS;EACzD,IAAI,WAAW,iBAAiB,QAAQ;EACxC,IAAI,KAAK,YAAY,IAAI,SAAS,EAAE;EAEpC,MAAM,UAAU,iBAAiB,YAAY,iBAAiB,iBAAiB,SAAS;EACxF,MAAM,QAAQ,iBAAiB;GAC7B,KAAK,YAAY,OAAO,SAAS;GACjC,KAAU,YAAY,UAAU,QAAQ;KACvC,QAAQ;EACX,KAAK,YAAY,IAAI,UAAU,MAAM;;CAGvC,MAAc,YAAY,UAAkB,SAAgC;EAE1E,MAAM,UADU,KAAK,cAAc,cAAkC,qBAAqB,IAAI,EAAE,EACzE,MAAM,MAAM,EAAE,OAAO,SAAS;EACrD,IAAI,CAAC,QAAQ;EAEb,IAAI;GAEF,MAAM,YAA4B,MADd,QAAQ,QAAQ,OAAO,WAAW,CAAC,EACf,KAAK,UAAU;IACrD,SAAS,OAAO;IAChB;IACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,OAAO;IACtD,EAAE;GACH,KAAK,SAAS,IAAI,OAAO,IAAI,SAAS;GACtC,KAAK,IAAI,OAAO,KAAK,4CAA4C,EAC/D,MAAM;IAAE;IAAU,SAAS,UAAU;IAAG,OAAO,SAAS;IAAQ,EACjE,CAAC;GAEF,KAAK,IAAI,SAAS,KAAK;IACrB,KAAA,GAAA,YAAA,aAAgB;IAChB,2BAAW,IAAI,MAAM;IACrB,QAAQ;KAAE,MAAM;KAAS,IAAI,KAAK;KAAI;IACtC,UAAU,gBAAA,cAAc;IACxB,MAAM;KAAE,SAAS;KAAU,WAAW;KAAM;IAC7C,CAAC;WACK,KAAc;GACrB,KAAK,IAAI,OAAO,MAAM,mCAAmC,EACvD,MAAM;IAAE;IAAU,SAAS,UAAU;IAAG,QAAA,GAAA,gBAAA,QAAc,IAAI;IAAE,EAC7D,CAAC;GACF,KAAK,cAAc,UAAU,UAAU,EAAE;;;;;;;;;CAY7C,cAAsB,SAAiB,QAAwB;EAC7D,MAAM,aAAa,KAAK,kBAAkB,SAAS,OAAO;EAC1D,IAAI,QAAQ,KAAK,KAAK;EACtB,IAAI,eAAe,MACjB,IAAI;GAAE,QAAQ,QAAG,SAAS,WAAW,CAAC;UAChC;EAGR,OAAO,oBAAoB,QAAQ,GAAG,OAAO,KADnC,KAAK,MAAM,MAC6B;;;;;;;;;CAUpD,kBAA0B,SAAiB,QAA+B;EACxE,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,gBAAgB,UAAK,KAAK,MAAM,WAAW,aAAa,SAAS,WAAW,OAAO;EACzF,MAAM,eAAe,UAAK,QAAQ,cAAc;EAChD,MAAM,eAAe,UAAK,QAAQ,eAAe,OAAO;EACxD,IAAI,CAAC,aAAa,WAAW,eAAe,UAAK,IAAI,IAAI,iBAAiB,cACxE,OAAO;EAET,OAAO;;;;;;;;;CAYT,MAAc,eAAuC;EACnD,MAAM,WAA0B,EAAE,WAAW,UAAK,QAAQ,iBAAiB,SAAS,EAAE;EACtF,IAAI,CAAC,KAAK,IAAI,UAAU,OAAO;EAC/B,IAAI;GACF,MAAM,SAAS,MAAM,KAAK,IAAI,SAAS,WAAW,SAAS;GAC3D,MAAM,WAAW,OAAO,OAAO,gBAAgB,YAAY,OAAO,cAC9D,OAAO,cACP;GACJ,OAAO,EAAE,WAAW,UAAK,QAAQ,UAAU,SAAS,EAAE;WAC/C,KAAc;GACrB,KAAK,IAAI,OAAO,MAAM,iDAAiD,EACrE,MAAM,EAAE,QAAA,GAAA,gBAAA,QAAc,IAAI,EAAE,EAC7B,CAAC;GACF,OAAO"}