@camstack/core 0.1.14 → 0.1.16

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -0,0 +1,218 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { randomUUID } from "node:crypto";
+import { BaseAddon, EventCategory, addonPagesCapability, errMsg } from "@camstack/types";
+//#region src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts
+/**
+* Addon Pages Aggregator — hub-local builtin that owns the singleton
+* `addon-pages` cap.
+*
+* Walks every registered `addon-pages-source` (collection) provider and
+* emits an enriched `AddonPageInfo[]` list with versioned `bundleUrl`s
+* pointing at `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. The
+* filesystem `mtime` cache-buster lets the browser pick up addon
+* rebuilds without manual reload — same scheme the original
+* hand-written `AddonPagesService.listPages` used before this split.
+*
+* The static file endpoint (`/api/addon-pages/:addonId/*`) is still
+* served by `AddonPagesService.resolveBundle()` on the server side; this
+* addon only owns the listing surface.
+*
+* Why a builtin rather than a cap-providers helper:
+*   - The aggregator is conceptually the "addon-pages provider" — addons
+*     own caps, not the server. Living in `@camstack/core/builtins` keeps
+*     the surface symmetrical with `system-config`, `local-auth`, etc.
+*   - Lets the aggregator subscribe to source readiness without piping a
+*     CapabilityRegistry handle through `RouterServices`.
+*/
+/**
+* Backoff schedule (ms) used to retry sources that failed during a
+* `listPages()` round-trip — typically because the cap was just
+* registered (provider connected via Moleculer) but the worker-side
+* action registration hadn't propagated yet, so `Service '...listPages'
+* is not found on '<node>'` raced ahead of the call.
+*
+* We schedule one retry per entry; if every retry fails we stop
+* (the next aggregate() run will pick the source up again). On
+* success we re-emit `AddonPageReady` so admin-ui invalidates its
+* `addonPages.listPages` query and the sidebar populates without a
+* page reload.
+*/
+var RETRY_BACKOFF_MS = [
+	500,
+	1500,
+	4e3
+];
+var AddonPagesAggregatorAddon = class extends BaseAddon {
+	id = "addon-pages-aggregator";
+	resolvedPaths = null;
+	/**
+	* Last successful `listPages()` snapshot per source. Used as the
+	* "stale-but-valid" fallback when a source transiently fails — drops
+	* happen often enough during boot (Moleculer service-discovery
+	* window) that swallowing the error and returning empty leaves the
+	* sidebar with nothing for several seconds. Keeping the previous
+	* good entry means a flake is invisible to the operator.
+	*/
+	lastGood = /* @__PURE__ */ new Map();
+	/** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */
+	retryTimers = /* @__PURE__ */ new Map();
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		this.resolvedPaths = await this.resolvePaths();
+		const provider = { listPages: async () => this.aggregate() };
+		this.ctx.logger.info("Initialized — aggregating addon-pages-source providers");
+		return [{
+			capability: addonPagesCapability,
+			provider
+		}];
+	}
+	async onShutdown() {
+		for (const t of this.retryTimers.values()) clearTimeout(t);
+		this.retryTimers.clear();
+		this.lastGood.clear();
+	}
+	async aggregate() {
+		const sources = this.capabilities?.getCollection("addon-pages-source") ?? [];
+		const out = [];
+		const seenIds = /* @__PURE__ */ new Set();
+		for (const source of sources) {
+			seenIds.add(source.id);
+			try {
+				const enriched = (await Promise.resolve(source.listPages())).map((page) => ({
+					addonId: source.id,
+					page,
+					bundleUrl: this.makeBundleUrl(source.id, page.bundle)
+				}));
+				for (const item of enriched) out.push(item);
+				this.lastGood.set(source.id, enriched);
+			} catch (err) {
+				const message = errMsg(err);
+				this.ctx.logger.warn("addon-pages-source provider failed", { meta: {
+					sourceId: source.id,
+					error: message
+				} });
+				const cached = this.lastGood.get(source.id);
+				if (cached !== void 0) {
+					for (const item of cached) out.push(item);
+					this.ctx.logger.info("addon-pages-source falling back to cached snapshot", { meta: {
+						sourceId: source.id,
+						cachedPages: cached.length
+					} });
+				}
+				this.scheduleRetry(source.id);
+			}
+		}
+		for (const cachedId of this.lastGood.keys()) if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId);
+		return out;
+	}
+	/**
+	* Schedule background re-call of `listPages()` on a source that just
+	* failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful
+	* call updates the cache and emits `AddonPageReady` so the admin UI
+	* invalidates its query. Stops on first success or after the schedule
+	* is exhausted.
+	*/
+	scheduleRetry(sourceId, attempt = 0) {
+		if (attempt >= RETRY_BACKOFF_MS.length) return;
+		if (this.retryTimers.has(sourceId)) return;
+		const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1];
+		const timer = setTimeout(() => {
+			this.retryTimers.delete(sourceId);
+			this.retrySource(sourceId, attempt);
+		}, delayMs);
+		this.retryTimers.set(sourceId, timer);
+	}
+	async retrySource(sourceId, attempt) {
+		const source = (this.capabilities?.getCollection("addon-pages-source") ?? []).find((s) => s.id === sourceId);
+		if (!source) return;
+		try {
+			const enriched = (await Promise.resolve(source.listPages())).map((page) => ({
+				addonId: source.id,
+				page,
+				bundleUrl: this.makeBundleUrl(source.id, page.bundle)
+			}));
+			this.lastGood.set(source.id, enriched);
+			this.ctx.logger.info("addon-pages-source recovered after retry", { meta: {
+				sourceId,
+				attempt: attempt + 1,
+				pages: enriched.length
+			} });
+			this.ctx.eventBus.emit({
+				id: randomUUID(),
+				timestamp: /* @__PURE__ */ new Date(),
+				source: {
+					type: "addon",
+					id: this.id
+				},
+				category: EventCategory.AddonPageReady,
+				data: {
+					addonId: sourceId,
+					recovered: true
+				}
+			});
+		} catch (err) {
+			this.ctx.logger.debug("addon-pages-source retry failed", { meta: {
+				sourceId,
+				attempt: attempt + 1,
+				error: errMsg(err)
+			} });
+			this.scheduleRetry(sourceId, attempt + 1);
+		}
+	}
+	/**
+	* Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back
+	* to `Date.now()` when the bundle path can't be stat'd (remote addon
+	* with no local file, addon not yet on disk, etc.) — the browser
+	* just gets a fresh URL on each call instead of cache-friendly mtime.
+	*/
+	makeBundleUrl(addonId, bundle) {
+		const bundlePath = this.resolveBundlePath(addonId, bundle);
+		let mtime = Date.now();
+		if (bundlePath !== null) try {
+			mtime = fs.statSync(bundlePath).mtimeMs;
+		} catch {}
+		return `/api/addon-pages/${addonId}/${bundle}?v=${Math.floor(mtime)}`;
+	}
+	/**
+	* Resolve the local filesystem path for an addon's bundle. Mirrors
+	* `AddonPagesService.resolveBundle` (server-side), but without the
+	* existence / traversal checks — those still live on the server's
+	* static file route. We only need a stat-able path here for the
+	* `mtime` cache-buster.
+	*/
+	resolveBundlePath(addonId, bundle) {
+		const paths = this.resolvedPaths;
+		if (!paths) return null;
+		const addonDistPath = path.join(paths.addonsDir, "@camstack", `addon-${addonId}`, "dist");
+		const resolvedBase = path.resolve(addonDistPath);
+		const resolvedFile = path.resolve(addonDistPath, bundle);
+		if (!resolvedFile.startsWith(resolvedBase + path.sep) && resolvedFile !== resolvedBase) return null;
+		return resolvedFile;
+	}
+	/**
+	* Read `server.dataPath` from the cluster yml-backed sections (same
+	* source the server uses at boot), then derive the addons directory
+	* from it. Falls back to `camstack-data/addons` when no settings API
+	* is available — agents and isolated tests don't see this addon, so
+	* the fallback is purely defensive.
+	*/
+	async resolvePaths() {
+		const fallback = { addonsDir: path.resolve("camstack-data", "addons") };
+		if (!this.ctx.settings) return fallback;
+		try {
+			const server = await this.ctx.settings.getSection("server");
+			const dataPath = typeof server["dataPath"] === "string" && server["dataPath"] ? server["dataPath"] : "camstack-data";
+			return { addonsDir: path.resolve(dataPath, "addons") };
+		} catch (err) {
+			this.ctx.logger.debug("Failed to read server.dataPath — falling back", { meta: { error: errMsg(err) } });
+			return fallback;
+		}
+	}
+};
+//#endregion
+export { AddonPagesAggregatorAddon, AddonPagesAggregatorAddon as default };
+
+//# sourceMappingURL=addon-pages-aggregator.addon.mjs.map

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-pages-aggregator.addon.mjs","names":[],"sources":["../../../src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts"],"sourcesContent":["/**\n * Addon Pages Aggregator — hub-local builtin that owns the singleton\n * `addon-pages` cap.\n *\n * Walks every registered `addon-pages-source` (collection) provider and\n * emits an enriched `AddonPageInfo[]` list with versioned `bundleUrl`s\n * pointing at `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. The\n * filesystem `mtime` cache-buster lets the browser pick up addon\n * rebuilds without manual reload — same scheme the original\n * hand-written `AddonPagesService.listPages` used before this split.\n *\n * The static file endpoint (`/api/addon-pages/:addonId/*`) is still\n * served by `AddonPagesService.resolveBundle()` on the server side; this\n * addon only owns the listing surface.\n *\n * Why a builtin rather than a cap-providers helper:\n *   - The aggregator is conceptually the \"addon-pages provider\" — addons\n *     own caps, not the server. Living in `@camstack/core/builtins` keeps\n *     the surface symmetrical with `system-config`, `local-auth`, etc.\n *   - Lets the aggregator subscribe to source readiness without piping a\n *     CapabilityRegistry handle through `RouterServices`.\n */\nimport * as path from 'node:path'\nimport * as fs from 'node:fs'\nimport { randomUUID } from 'node:crypto'\nimport {\n  BaseAddon,\n  EventCategory,\n  addonPagesCapability,\n  errMsg,\n  type AddonPageInfo,\n  type IAddonPageProvider,\n  type IAddonPagesAggregatorProvider,\n  type ProviderRegistration,\n} from '@camstack/types'\n\ninterface ResolvedPaths {\n  readonly addonsDir: string\n}\n\n/**\n * Backoff schedule (ms) used to retry sources that failed during a\n * `listPages()` round-trip — typically because the cap was just\n * registered (provider connected via Moleculer) but the worker-side\n * action registration hadn't propagated yet, so `Service '...listPages'\n * is not found on '<node>'` raced ahead of the call.\n *\n * We schedule one retry per entry; if every retry fails we stop\n * (the next aggregate() run will pick the source up again). On\n * success we re-emit `AddonPageReady` so admin-ui invalidates its\n * `addonPages.listPages` query and the sidebar populates without a\n * page reload.\n */\nconst RETRY_BACKOFF_MS: readonly number[] = [500, 1500, 4000]\n\nexport class AddonPagesAggregatorAddon extends BaseAddon {\n  readonly id = 'addon-pages-aggregator'\n\n  private resolvedPaths: ResolvedPaths | null = null\n\n  /**\n   * Last successful `listPages()` snapshot per source. Used as the\n   * \"stale-but-valid\" fallback when a source transiently fails — drops\n   * happen often enough during boot (Moleculer service-discovery\n   * window) that swallowing the error and returning empty leaves the\n   * sidebar with nothing for several seconds. Keeping the previous\n   * good entry means a flake is invisible to the operator.\n   */\n  private readonly lastGood = new Map<string, readonly AddonPageInfo[]>()\n\n  /** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */\n  private readonly retryTimers = new Map<string, NodeJS.Timeout>()\n\n  constructor() { super({}) }\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    this.resolvedPaths = await this.resolvePaths()\n\n    const provider: IAddonPagesAggregatorProvider = {\n      listPages: async (): Promise<readonly AddonPageInfo[]> => this.aggregate(),\n    }\n\n    this.ctx.logger.info('Initialized — aggregating addon-pages-source providers')\n    return [{ capability: addonPagesCapability, provider }]\n  }\n\n  protected async onShutdown(): Promise<void> {\n    for (const t of this.retryTimers.values()) clearTimeout(t)\n    this.retryTimers.clear()\n    this.lastGood.clear()\n  }\n\n  // ── Aggregation ───────────────────────────────────────────────────\n\n  private async aggregate(): Promise<readonly AddonPageInfo[]> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const out: AddonPageInfo[] = []\n    const seenIds = new Set<string>()\n\n    for (const source of sources) {\n      seenIds.add(source.id)\n      try {\n        // listPages() may be async for remote Moleculer providers.\n        const pages = await Promise.resolve(source.listPages())\n        const enriched: AddonPageInfo[] = pages.map((page) => ({\n          addonId: source.id,\n          page,\n          bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n        }))\n        for (const item of enriched) out.push(item)\n        // Cache successful snapshot — used as fallback on next failure.\n        this.lastGood.set(source.id, enriched)\n      } catch (err: unknown) {\n        const message = errMsg(err)\n        this.ctx.logger.warn('addon-pages-source provider failed', {\n          meta: { sourceId: source.id, error: message },\n        })\n        // Fall back to the last-good snapshot for this source so a\n        // transient Moleculer service-discovery race (cap registered\n        // but action not yet callable) doesn't blank the sidebar.\n        const cached = this.lastGood.get(source.id)\n        if (cached !== undefined) {\n          for (const item of cached) out.push(item)\n          this.ctx.logger.info('addon-pages-source falling back to cached snapshot', {\n            meta: { sourceId: source.id, cachedPages: cached.length },\n          })\n        }\n        // Schedule a background retry. On success we re-emit\n        // `AddonPageReady` so admin-ui's queryClient invalidates and\n        // any newly-loaded pages show up without a manual reload.\n        this.scheduleRetry(source.id)\n      }\n    }\n\n    // Drop cache entries for sources that have disappeared from the\n    // registry — keeps the fallback aligned with the live collection.\n    for (const cachedId of this.lastGood.keys()) {\n      if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId)\n    }\n\n    return out\n  }\n\n  // ── Retry on transient Moleculer race ─────────────────────────────\n\n  /**\n   * Schedule background re-call of `listPages()` on a source that just\n   * failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful\n   * call updates the cache and emits `AddonPageReady` so the admin UI\n   * invalidates its query. Stops on first success or after the schedule\n   * is exhausted.\n   */\n  private scheduleRetry(sourceId: string, attempt = 0): void {\n    if (attempt >= RETRY_BACKOFF_MS.length) return\n    if (this.retryTimers.has(sourceId)) return // already pending\n\n    const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1]!\n    const timer = setTimeout(() => {\n      this.retryTimers.delete(sourceId)\n      void this.retrySource(sourceId, attempt)\n    }, delayMs)\n    this.retryTimers.set(sourceId, timer)\n  }\n\n  private async retrySource(sourceId: string, attempt: number): Promise<void> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const source = sources.find((s) => s.id === sourceId)\n    if (!source) return // provider went away; nothing to retry\n\n    try {\n      const pages = await Promise.resolve(source.listPages())\n      const enriched: AddonPageInfo[] = pages.map((page) => ({\n        addonId: source.id,\n        page,\n        bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n      }))\n      this.lastGood.set(source.id, enriched)\n      this.ctx.logger.info('addon-pages-source recovered after retry', {\n        meta: { sourceId, attempt: attempt + 1, pages: enriched.length },\n      })\n      // Re-emit AddonPageReady so admin-ui invalidates and refetches.\n      this.ctx.eventBus.emit({\n        id: randomUUID(),\n        timestamp: new Date(),\n        source: { type: 'addon', id: this.id },\n        category: EventCategory.AddonPageReady,\n        data: { addonId: sourceId, recovered: true },\n      })\n    } catch (err: unknown) {\n      this.ctx.logger.debug('addon-pages-source retry failed', {\n        meta: { sourceId, attempt: attempt + 1, error: errMsg(err) },\n      })\n      this.scheduleRetry(sourceId, attempt + 1)\n    }\n  }\n\n  // ── Bundle URL stamping ──────────────────────────────────────────\n\n  /**\n   * Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back\n   * to `Date.now()` when the bundle path can't be stat'd (remote addon\n   * with no local file, addon not yet on disk, etc.) — the browser\n   * just gets a fresh URL on each call instead of cache-friendly mtime.\n   */\n  private makeBundleUrl(addonId: string, bundle: string): string {\n    const bundlePath = this.resolveBundlePath(addonId, bundle)\n    let mtime = Date.now()\n    if (bundlePath !== null) {\n      try { mtime = fs.statSync(bundlePath).mtimeMs }\n      catch { /* remote addon — no local file */ }\n    }\n    const v = Math.floor(mtime)\n    return `/api/addon-pages/${addonId}/${bundle}?v=${v}`\n  }\n\n  /**\n   * Resolve the local filesystem path for an addon's bundle. Mirrors\n   * `AddonPagesService.resolveBundle` (server-side), but without the\n   * existence / traversal checks — those still live on the server's\n   * static file route. We only need a stat-able path here for the\n   * `mtime` cache-buster.\n   */\n  private resolveBundlePath(addonId: string, bundle: string): string | null {\n    const paths = this.resolvedPaths\n    if (!paths) return null\n    const addonDistPath = path.join(paths.addonsDir, '@camstack', `addon-${addonId}`, 'dist')\n    const resolvedBase = path.resolve(addonDistPath)\n    const resolvedFile = path.resolve(addonDistPath, bundle)\n    if (!resolvedFile.startsWith(resolvedBase + path.sep) && resolvedFile !== resolvedBase) {\n      return null\n    }\n    return resolvedFile\n  }\n\n  // ── Path resolution ──────────────────────────────────────────────\n\n  /**\n   * Read `server.dataPath` from the cluster yml-backed sections (same\n   * source the server uses at boot), then derive the addons directory\n   * from it. Falls back to `camstack-data/addons` when no settings API\n   * is available — agents and isolated tests don't see this addon, so\n   * the fallback is purely defensive.\n   */\n  private async resolvePaths(): Promise<ResolvedPaths> {\n    const fallback: ResolvedPaths = { addonsDir: path.resolve('camstack-data', 'addons') }\n    if (!this.ctx.settings) return fallback\n    try {\n      const server = await this.ctx.settings.getSection('server')\n      const dataPath = typeof server['dataPath'] === 'string' && server['dataPath']\n        ? server['dataPath']\n        : 'camstack-data'\n      return { addonsDir: path.resolve(dataPath, 'addons') }\n    } catch (err: unknown) {\n      this.ctx.logger.debug('Failed to read server.dataPath — falling back', {\n        meta: { error: errMsg(err) },\n      })\n      return fallback\n    }\n  }\n}\n\nexport default AddonPagesAggregatorAddon\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,IAAM,mBAAsC;CAAC;CAAK;CAAM;CAAK;AAE7D,IAAa,4BAAb,cAA+C,UAAU;CACvD,KAAc;CAEd,gBAA8C;;;;;;;;;CAU9C,2BAA4B,IAAI,KAAuC;;CAGvE,8BAA+B,IAAI,KAA6B;CAEhE,cAAc;EAAE,MAAM,EAAE,CAAC;;CAEzB,MAAgB,eAAgD;EAC9D,KAAK,gBAAgB,MAAM,KAAK,cAAc;EAE9C,MAAM,WAA0C,EAC9C,WAAW,YAA+C,KAAK,WAAW,EAC3E;EAED,KAAK,IAAI,OAAO,KAAK,yDAAyD;EAC9E,OAAO,CAAC;GAAE,YAAY;GAAsB;GAAU,CAAC;;CAGzD,MAAgB,aAA4B;EAC1C,KAAK,MAAM,KAAK,KAAK,YAAY,QAAQ,EAAE,aAAa,EAAE;EAC1D,KAAK,YAAY,OAAO;EACxB,KAAK,SAAS,OAAO;;CAKvB,MAAc,YAA+C;EAC3D,MAAM,UAAU,KAAK,cAAc,cAAkC,qBAAqB,IAAI,EAAE;EAChG,MAAM,MAAuB,EAAE;EAC/B,MAAM,0BAAU,IAAI,KAAa;EAEjC,KAAK,MAAM,UAAU,SAAS;GAC5B,QAAQ,IAAI,OAAO,GAAG;GACtB,IAAI;IAGF,MAAM,YAA4B,MADd,QAAQ,QAAQ,OAAO,WAAW,CAAC,EACf,KAAK,UAAU;KACrD,SAAS,OAAO;KAChB;KACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,OAAO;KACtD,EAAE;IACH,KAAK,MAAM,QAAQ,UAAU,IAAI,KAAK,KAAK;IAE3C,KAAK,SAAS,IAAI,OAAO,IAAI,SAAS;YAC/B,KAAc;IACrB,MAAM,UAAU,OAAO,IAAI;IAC3B,KAAK,IAAI,OAAO,KAAK,sCAAsC,EACzD,MAAM;KAAE,UAAU,OAAO;KAAI,OAAO;KAAS,EAC9C,CAAC;IAIF,MAAM,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG;IAC3C,IAAI,WAAW,KAAA,GAAW;KACxB,KAAK,MAAM,QAAQ,QAAQ,IAAI,KAAK,KAAK;KACzC,KAAK,IAAI,OAAO,KAAK,sDAAsD,EACzE,MAAM;MAAE,UAAU,OAAO;MAAI,aAAa,OAAO;MAAQ,EAC1D,CAAC;;IAKJ,KAAK,cAAc,OAAO,GAAG;;;EAMjC,KAAK,MAAM,YAAY,KAAK,SAAS,MAAM,EACzC,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,KAAK,SAAS,OAAO,SAAS;EAG5D,OAAO;;;;;;;;;CAYT,cAAsB,UAAkB,UAAU,GAAS;EACzD,IAAI,WAAW,iBAAiB,QAAQ;EACxC,IAAI,KAAK,YAAY,IAAI,SAAS,EAAE;EAEpC,MAAM,UAAU,iBAAiB,YAAY,iBAAiB,iBAAiB,SAAS;EACxF,MAAM,QAAQ,iBAAiB;GAC7B,KAAK,YAAY,OAAO,SAAS;GACjC,KAAU,YAAY,UAAU,QAAQ;KACvC,QAAQ;EACX,KAAK,YAAY,IAAI,UAAU,MAAM;;CAGvC,MAAc,YAAY,UAAkB,SAAgC;EAE1E,MAAM,UADU,KAAK,cAAc,cAAkC,qBAAqB,IAAI,EAAE,EACzE,MAAM,MAAM,EAAE,OAAO,SAAS;EACrD,IAAI,CAAC,QAAQ;EAEb,IAAI;GAEF,MAAM,YAA4B,MADd,QAAQ,QAAQ,OAAO,WAAW,CAAC,EACf,KAAK,UAAU;IACrD,SAAS,OAAO;IAChB;IACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,OAAO;IACtD,EAAE;GACH,KAAK,SAAS,IAAI,OAAO,IAAI,SAAS;GACtC,KAAK,IAAI,OAAO,KAAK,4CAA4C,EAC/D,MAAM;IAAE;IAAU,SAAS,UAAU;IAAG,OAAO,SAAS;IAAQ,EACjE,CAAC;GAEF,KAAK,IAAI,SAAS,KAAK;IACrB,IAAI,YAAY;IAChB,2BAAW,IAAI,MAAM;IACrB,QAAQ;KAAE,MAAM;KAAS,IAAI,KAAK;KAAI;IACtC,UAAU,cAAc;IACxB,MAAM;KAAE,SAAS;KAAU,WAAW;KAAM;IAC7C,CAAC;WACK,KAAc;GACrB,KAAK,IAAI,OAAO,MAAM,mCAAmC,EACvD,MAAM;IAAE;IAAU,SAAS,UAAU;IAAG,OAAO,OAAO,IAAI;IAAE,EAC7D,CAAC;GACF,KAAK,cAAc,UAAU,UAAU,EAAE;;;;;;;;;CAY7C,cAAsB,SAAiB,QAAwB;EAC7D,MAAM,aAAa,KAAK,kBAAkB,SAAS,OAAO;EAC1D,IAAI,QAAQ,KAAK,KAAK;EACtB,IAAI,eAAe,MACjB,IAAI;GAAE,QAAQ,GAAG,SAAS,WAAW,CAAC;UAChC;EAGR,OAAO,oBAAoB,QAAQ,GAAG,OAAO,KADnC,KAAK,MAAM,MAC6B;;;;;;;;;CAUpD,kBAA0B,SAAiB,QAA+B;EACxE,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,gBAAgB,KAAK,KAAK,MAAM,WAAW,aAAa,SAAS,WAAW,OAAO;EACzF,MAAM,eAAe,KAAK,QAAQ,cAAc;EAChD,MAAM,eAAe,KAAK,QAAQ,eAAe,OAAO;EACxD,IAAI,CAAC,aAAa,WAAW,eAAe,KAAK,IAAI,IAAI,iBAAiB,cACxE,OAAO;EAET,OAAO;;;;;;;;;CAYT,MAAc,eAAuC;EACnD,MAAM,WAA0B,EAAE,WAAW,KAAK,QAAQ,iBAAiB,SAAS,EAAE;EACtF,IAAI,CAAC,KAAK,IAAI,UAAU,OAAO;EAC/B,IAAI;GACF,MAAM,SAAS,MAAM,KAAK,IAAI,SAAS,WAAW,SAAS;GAC3D,MAAM,WAAW,OAAO,OAAO,gBAAgB,YAAY,OAAO,cAC9D,OAAO,cACP;GACJ,OAAO,EAAE,WAAW,KAAK,QAAQ,UAAU,SAAS,EAAE;WAC/C,KAAc;GACrB,KAAK,IAAI,OAAO,MAAM,iDAAiD,EACrE,MAAM,EAAE,OAAO,OAAO,IAAI,EAAE,EAC7B,CAAC;GACF,OAAO"}

package/dist/builtins/addon-pages-aggregator/index.d.ts

@@ -0,0 +1,2 @@
+export { AddonPagesAggregatorAddon, default } from './addon-pages-aggregator.addon.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/builtins/addon-pages-aggregator/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/builtins/addon-pages-aggregator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAA"}

package/dist/builtins/addon-pages-aggregator/index.js

@@ -0,0 +1,7 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+const require_builtins_addon_pages_aggregator_addon_pages_aggregator_addon = require("./addon-pages-aggregator.addon.js");
+exports.AddonPagesAggregatorAddon = require_builtins_addon_pages_aggregator_addon_pages_aggregator_addon.AddonPagesAggregatorAddon;
+exports.default = require_builtins_addon_pages_aggregator_addon_pages_aggregator_addon.AddonPagesAggregatorAddon;

package/dist/builtins/addon-pages-aggregator/index.mjs

@@ -0,0 +1,2 @@
+import { AddonPagesAggregatorAddon } from "./addon-pages-aggregator.addon.mjs";
+export { AddonPagesAggregatorAddon, AddonPagesAggregatorAddon as default };

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.d.ts

@@ -0,0 +1,33 @@
+import { BaseAddon, ProviderRegistration } from '@camstack/types';
+export declare class AddonWidgetsAggregatorAddon extends BaseAddon {
+    readonly id = "addon-widgets-aggregator";
+    private resolvedPaths;
+    /**
+     * Last successful `listWidgets()` snapshot per source. Used as the
+     * "stale-but-valid" fallback when a source transiently fails — drops
+     * happen often enough during boot (Moleculer service-discovery
+     * window) that swallowing the error and returning empty would leave
+     * the dashboard with nothing for several seconds. Keeping the
+     * previous good entry means a flake is invisible to the operator.
+     */
+    private readonly lastGood;
+    /** In-flight retry guards keyed by sourceAddonId. Avoids double-scheduling. */
+    private readonly retryTimers;
+    constructor();
+    protected onInitialize(): Promise<ProviderRegistration[]>;
+    protected onShutdown(): Promise<void>;
+    private aggregate;
+    private scheduleRetry;
+    private retrySource;
+    /**
+     * Build `/api/addon-widgets/<addonId>/<bundle>?v=<mtime>`. Falls back
+     * to `Date.now()` when the bundle path can't be stat'd (remote addon
+     * with no local file, addon not yet on disk, etc.) — the browser
+     * just gets a fresh URL on each call instead of cache-friendly mtime.
+     */
+    private makeBundleUrl;
+    private resolveBundlePath;
+    private resolvePaths;
+}
+export default AddonWidgetsAggregatorAddon;
+//# sourceMappingURL=addon-widgets-aggregator.addon.d.ts.map

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-widgets-aggregator.addon.d.ts","sourceRoot":"","sources":["../../../src/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,SAAS,EAMT,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAA;AA4BxB,qBAAa,2BAA4B,SAAQ,SAAS;IACxD,QAAQ,CAAC,EAAE,8BAA6B;IAExC,OAAO,CAAC,aAAa,CAA6B;IAElD;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+C;IAExE,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;;cAIhD,YAAY,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;cAW/C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAQ7B,SAAS;IAsDvB,OAAO,CAAC,aAAa;YAYP,WAAW;IAmCzB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAWrB,OAAO,CAAC,iBAAiB;YAcX,YAAY;CAgB3B;AAED,eAAe,2BAA2B,CAAA"}

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -0,0 +1,202 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+const require_chunk = require("../../chunk-C13QxCFV.js");
+let node_fs = require("node:fs");
+node_fs = require_chunk.__toESM(node_fs);
+let node_path = require("node:path");
+node_path = require_chunk.__toESM(node_path);
+let node_crypto = require("node:crypto");
+let _camstack_types = require("@camstack/types");
+//#region src/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.ts
+/**
+* Addon Widgets Aggregator — hub-local builtin that owns the singleton
+* `addon-widgets` cap.
+*
+* Mirrors `addon-pages-aggregator` exactly: walks every registered
+* `addon-widgets-source` (collection) provider and emits an enriched
+* widget metadata list with versioned `bundleUrl`s pointing at
+* `/api/addon-widgets/<addonId>/<bundle>?v=<mtime>`. The filesystem
+* `mtime` cache-buster lets the browser pick up addon rebuilds without
+* manual reload.
+*
+* The static file endpoint (`/api/addon-widgets/:addonId/*`) is served
+* by `AddonWidgetsService.resolveBundle()` on the server side; this
+* addon only owns the listing surface.
+*
+* Why a builtin: same reasoning as `addon-pages-aggregator`. The
+* aggregator is the de-facto "addon-widgets provider" — addons own caps,
+* not the server. Living in `@camstack/core/builtins` keeps the surface
+* symmetrical with `system-config`, `local-auth`, etc.
+*/
+/**
+* Backoff schedule (ms) used to retry sources that failed during a
+* `listWidgets()` round-trip — typically because the cap was just
+* registered (provider connected via Moleculer) but the worker-side
+* action registration hadn't propagated yet, so `Service '...listWidgets'
+* is not found on '<node>'` raced ahead of the call.
+*
+* On success we re-emit `AddonWidgetReady` so admin-ui invalidates its
+* `addonWidgets.listWidgets` query and the registry populates without a
+* page reload.
+*/
+var RETRY_BACKOFF_MS = [
+	500,
+	1500,
+	4e3
+];
+var AddonWidgetsAggregatorAddon = class extends _camstack_types.BaseAddon {
+	id = "addon-widgets-aggregator";
+	resolvedPaths = null;
+	/**
+	* Last successful `listWidgets()` snapshot per source. Used as the
+	* "stale-but-valid" fallback when a source transiently fails — drops
+	* happen often enough during boot (Moleculer service-discovery
+	* window) that swallowing the error and returning empty would leave
+	* the dashboard with nothing for several seconds. Keeping the
+	* previous good entry means a flake is invisible to the operator.
+	*/
+	lastGood = /* @__PURE__ */ new Map();
+	/** In-flight retry guards keyed by sourceAddonId. Avoids double-scheduling. */
+	retryTimers = /* @__PURE__ */ new Map();
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		this.resolvedPaths = await this.resolvePaths();
+		const provider = { listWidgets: async () => this.aggregate() };
+		this.ctx.logger.info("Initialized — aggregating addon-widgets-source providers");
+		return [{
+			capability: _camstack_types.addonWidgetsCapability,
+			provider
+		}];
+	}
+	async onShutdown() {
+		for (const t of this.retryTimers.values()) clearTimeout(t);
+		this.retryTimers.clear();
+		this.lastGood.clear();
+	}
+	async aggregate() {
+		const entries = this.capabilities?.getCollectionEntries("addon-widgets-source") ?? [];
+		const out = [];
+		const seenIds = /* @__PURE__ */ new Set();
+		for (const [addonId, source] of entries) {
+			seenIds.add(addonId);
+			try {
+				const enriched = (await Promise.resolve(source.listWidgets())).map((w) => ({
+					...w,
+					addonId,
+					bundleUrl: this.makeBundleUrl(addonId, w.bundle)
+				}));
+				for (const item of enriched) out.push(item);
+				this.lastGood.set(addonId, enriched);
+			} catch (err) {
+				const message = (0, _camstack_types.errMsg)(err);
+				this.ctx.logger.warn("addon-widgets-source provider failed", { meta: {
+					sourceId: addonId,
+					error: message
+				} });
+				const cached = this.lastGood.get(addonId);
+				if (cached !== void 0) {
+					for (const item of cached) out.push(item);
+					this.ctx.logger.info("addon-widgets-source falling back to cached snapshot", { meta: {
+						sourceId: addonId,
+						cachedWidgets: cached.length
+					} });
+				}
+				this.scheduleRetry(addonId);
+			}
+		}
+		for (const cachedId of this.lastGood.keys()) if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId);
+		return out;
+	}
+	scheduleRetry(sourceId, attempt = 0) {
+		if (attempt >= RETRY_BACKOFF_MS.length) return;
+		if (this.retryTimers.has(sourceId)) return;
+		const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1];
+		const timer = setTimeout(() => {
+			this.retryTimers.delete(sourceId);
+			this.retrySource(sourceId, attempt);
+		}, delayMs);
+		this.retryTimers.set(sourceId, timer);
+	}
+	async retrySource(sourceId, attempt) {
+		const found = (this.capabilities?.getCollectionEntries("addon-widgets-source") ?? []).find(([id]) => id === sourceId);
+		if (!found) return;
+		const [addonId, source] = found;
+		try {
+			const enriched = (await Promise.resolve(source.listWidgets())).map((w) => ({
+				...w,
+				addonId,
+				bundleUrl: this.makeBundleUrl(addonId, w.bundle)
+			}));
+			this.lastGood.set(addonId, enriched);
+			this.ctx.logger.info("addon-widgets-source recovered after retry", { meta: {
+				sourceId: addonId,
+				attempt: attempt + 1,
+				widgets: enriched.length
+			} });
+			this.ctx.eventBus.emit({
+				id: (0, node_crypto.randomUUID)(),
+				timestamp: /* @__PURE__ */ new Date(),
+				source: {
+					type: "addon",
+					id: this.id
+				},
+				category: _camstack_types.EventCategory.AddonWidgetReady,
+				data: {
+					addonId,
+					recovered: true
+				}
+			});
+		} catch (err) {
+			this.ctx.logger.debug("addon-widgets-source retry failed", { meta: {
+				sourceId,
+				attempt: attempt + 1,
+				error: (0, _camstack_types.errMsg)(err)
+			} });
+			this.scheduleRetry(sourceId, attempt + 1);
+		}
+	}
+	/**
+	* Build `/api/addon-widgets/<addonId>/<bundle>?v=<mtime>`. Falls back
+	* to `Date.now()` when the bundle path can't be stat'd (remote addon
+	* with no local file, addon not yet on disk, etc.) — the browser
+	* just gets a fresh URL on each call instead of cache-friendly mtime.
+	*/
+	makeBundleUrl(addonId, bundle) {
+		const bundlePath = this.resolveBundlePath(addonId, bundle);
+		let mtime = Date.now();
+		if (bundlePath !== null) try {
+			mtime = node_fs.statSync(bundlePath).mtimeMs;
+		} catch {}
+		return `/api/addon-widgets/${addonId}/${bundle}?v=${Math.floor(mtime)}`;
+	}
+	resolveBundlePath(addonId, bundle) {
+		const paths = this.resolvedPaths;
+		if (!paths) return null;
+		const addonDistPath = node_path.join(paths.addonsDir, "@camstack", `addon-${addonId}`, "dist");
+		const resolvedBase = node_path.resolve(addonDistPath);
+		const resolvedFile = node_path.resolve(addonDistPath, bundle);
+		if (!resolvedFile.startsWith(resolvedBase + node_path.sep) && resolvedFile !== resolvedBase) return null;
+		return resolvedFile;
+	}
+	async resolvePaths() {
+		const fallback = { addonsDir: node_path.resolve("camstack-data", "addons") };
+		if (!this.ctx.settings) return fallback;
+		try {
+			const server = await this.ctx.settings.getSection("server");
+			const dataPath = typeof server["dataPath"] === "string" && server["dataPath"] ? server["dataPath"] : "camstack-data";
+			return { addonsDir: node_path.resolve(dataPath, "addons") };
+		} catch (err) {
+			this.ctx.logger.debug("Failed to read server.dataPath — falling back", { meta: { error: (0, _camstack_types.errMsg)(err) } });
+			return fallback;
+		}
+	}
+};
+//#endregion
+exports.AddonWidgetsAggregatorAddon = AddonWidgetsAggregatorAddon;
+exports.default = AddonWidgetsAggregatorAddon;
+
+//# sourceMappingURL=addon-widgets-aggregator.addon.js.map

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-widgets-aggregator.addon.js","names":[],"sources":["../../../src/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.ts"],"sourcesContent":["/**\n * Addon Widgets Aggregator — hub-local builtin that owns the singleton\n * `addon-widgets` cap.\n *\n * Mirrors `addon-pages-aggregator` exactly: walks every registered\n * `addon-widgets-source` (collection) provider and emits an enriched\n * widget metadata list with versioned `bundleUrl`s pointing at\n * `/api/addon-widgets/<addonId>/<bundle>?v=<mtime>`. The filesystem\n * `mtime` cache-buster lets the browser pick up addon rebuilds without\n * manual reload.\n *\n * The static file endpoint (`/api/addon-widgets/:addonId/*`) is served\n * by `AddonWidgetsService.resolveBundle()` on the server side; this\n * addon only owns the listing surface.\n *\n * Why a builtin: same reasoning as `addon-pages-aggregator`. The\n * aggregator is the de-facto \"addon-widgets provider\" — addons own caps,\n * not the server. Living in `@camstack/core/builtins` keeps the surface\n * symmetrical with `system-config`, `local-auth`, etc.\n */\nimport * as path from 'node:path'\nimport * as fs from 'node:fs'\nimport { randomUUID } from 'node:crypto'\nimport {\n  BaseAddon,\n  EventCategory,\n  addonWidgetsCapability,\n  errMsg,\n  type IAddonWidgetsAggregatorProvider,\n  type IAddonWidgetsSourceProvider,\n  type ProviderRegistration,\n} from '@camstack/types'\n\ninterface ResolvedPaths {\n  readonly addonsDir: string\n}\n\n/**\n * Inferred from the cap definition — equivalent to:\n * `z.infer<typeof EnrichedWidgetMetadataSchema>` but reuses the\n * provider's return type so the aggregator stays in lockstep with the\n * cap if its shape evolves.\n */\ntype EnrichedWidget = Awaited<ReturnType<IAddonWidgetsAggregatorProvider['listWidgets']>>[number]\ntype RawWidget = Awaited<ReturnType<IAddonWidgetsSourceProvider['listWidgets']>>[number]\n\n/**\n * Backoff schedule (ms) used to retry sources that failed during a\n * `listWidgets()` round-trip — typically because the cap was just\n * registered (provider connected via Moleculer) but the worker-side\n * action registration hadn't propagated yet, so `Service '...listWidgets'\n * is not found on '<node>'` raced ahead of the call.\n *\n * On success we re-emit `AddonWidgetReady` so admin-ui invalidates its\n * `addonWidgets.listWidgets` query and the registry populates without a\n * page reload.\n */\nconst RETRY_BACKOFF_MS: readonly number[] = [500, 1500, 4000]\n\nexport class AddonWidgetsAggregatorAddon extends BaseAddon {\n  readonly id = 'addon-widgets-aggregator'\n\n  private resolvedPaths: ResolvedPaths | null = null\n\n  /**\n   * Last successful `listWidgets()` snapshot per source. Used as the\n   * \"stale-but-valid\" fallback when a source transiently fails — drops\n   * happen often enough during boot (Moleculer service-discovery\n   * window) that swallowing the error and returning empty would leave\n   * the dashboard with nothing for several seconds. Keeping the\n   * previous good entry means a flake is invisible to the operator.\n   */\n  private readonly lastGood = new Map<string, readonly EnrichedWidget[]>()\n\n  /** In-flight retry guards keyed by sourceAddonId. Avoids double-scheduling. */\n  private readonly retryTimers = new Map<string, NodeJS.Timeout>()\n\n  constructor() { super({}) }\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    this.resolvedPaths = await this.resolvePaths()\n\n    const provider: IAddonWidgetsAggregatorProvider = {\n      listWidgets: async (): Promise<readonly EnrichedWidget[]> => this.aggregate(),\n    }\n\n    this.ctx.logger.info('Initialized — aggregating addon-widgets-source providers')\n    return [{ capability: addonWidgetsCapability, provider }]\n  }\n\n  protected async onShutdown(): Promise<void> {\n    for (const t of this.retryTimers.values()) clearTimeout(t)\n    this.retryTimers.clear()\n    this.lastGood.clear()\n  }\n\n  // ── Aggregation ───────────────────────────────────────────────────\n\n  private async aggregate(): Promise<readonly EnrichedWidget[]> {\n    // `getCollectionEntries` returns `[addonId, provider]` tuples — the\n    // raw `addon-widgets-source` cap doesn't carry an `id` on the\n    // provider (unlike the legacy `IAddonPageProvider`), so we lean on\n    // the registry to attribute each contribution back to its addon.\n    const entries = this.capabilities?.getCollectionEntries<IAddonWidgetsSourceProvider>('addon-widgets-source') ?? []\n    const out: EnrichedWidget[] = []\n    const seenIds = new Set<string>()\n\n    for (const [addonId, source] of entries) {\n      seenIds.add(addonId)\n      try {\n        const widgets = await Promise.resolve(source.listWidgets())\n        const enriched: EnrichedWidget[] = widgets.map((w: RawWidget) => ({\n          ...w,\n          addonId,\n          bundleUrl: this.makeBundleUrl(addonId, w.bundle),\n        }))\n        for (const item of enriched) out.push(item)\n        // Cache successful snapshot — used as fallback on next failure.\n        this.lastGood.set(addonId, enriched)\n      } catch (err: unknown) {\n        const message = errMsg(err)\n        this.ctx.logger.warn('addon-widgets-source provider failed', {\n          meta: { sourceId: addonId, error: message },\n        })\n        // Fall back to the last-good snapshot for this source so a\n        // transient Moleculer service-discovery race doesn't blank\n        // the dashboard.\n        const cached = this.lastGood.get(addonId)\n        if (cached !== undefined) {\n          for (const item of cached) out.push(item)\n          this.ctx.logger.info('addon-widgets-source falling back to cached snapshot', {\n            meta: { sourceId: addonId, cachedWidgets: cached.length },\n          })\n        }\n        // Schedule a background retry. On success we re-emit\n        // `AddonWidgetReady` so admin-ui's queryClient invalidates and\n        // any newly-loaded widgets show up without a manual reload.\n        this.scheduleRetry(addonId)\n      }\n    }\n\n    // Drop cache entries for sources that have disappeared from the\n    // registry — keeps the fallback aligned with the live collection.\n    for (const cachedId of this.lastGood.keys()) {\n      if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId)\n    }\n\n    return out\n  }\n\n  // ── Retry on transient Moleculer race ─────────────────────────────\n\n  private scheduleRetry(sourceId: string, attempt = 0): void {\n    if (attempt >= RETRY_BACKOFF_MS.length) return\n    if (this.retryTimers.has(sourceId)) return // already pending\n\n    const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1]!\n    const timer = setTimeout(() => {\n      this.retryTimers.delete(sourceId)\n      void this.retrySource(sourceId, attempt)\n    }, delayMs)\n    this.retryTimers.set(sourceId, timer)\n  }\n\n  private async retrySource(sourceId: string, attempt: number): Promise<void> {\n    const entries = this.capabilities?.getCollectionEntries<IAddonWidgetsSourceProvider>('addon-widgets-source') ?? []\n    const found = entries.find(([id]) => id === sourceId)\n    if (!found) return // provider went away; nothing to retry\n    const [addonId, source] = found\n\n    try {\n      const widgets = await Promise.resolve(source.listWidgets())\n      const enriched: EnrichedWidget[] = widgets.map((w: RawWidget) => ({\n        ...w,\n        addonId,\n        bundleUrl: this.makeBundleUrl(addonId, w.bundle),\n      }))\n      this.lastGood.set(addonId, enriched)\n      this.ctx.logger.info('addon-widgets-source recovered after retry', {\n        meta: { sourceId: addonId, attempt: attempt + 1, widgets: enriched.length },\n      })\n      // Re-emit AddonWidgetReady so admin-ui invalidates and refetches.\n      this.ctx.eventBus.emit({\n        id: randomUUID(),\n        timestamp: new Date(),\n        source: { type: 'addon', id: this.id },\n        category: EventCategory.AddonWidgetReady,\n        data: { addonId, recovered: true },\n      })\n    } catch (err: unknown) {\n      this.ctx.logger.debug('addon-widgets-source retry failed', {\n        meta: { sourceId, attempt: attempt + 1, error: errMsg(err) },\n      })\n      this.scheduleRetry(sourceId, attempt + 1)\n    }\n  }\n\n  // ── Bundle URL stamping ──────────────────────────────────────────\n\n  /**\n   * Build `/api/addon-widgets/<addonId>/<bundle>?v=<mtime>`. Falls back\n   * to `Date.now()` when the bundle path can't be stat'd (remote addon\n   * with no local file, addon not yet on disk, etc.) — the browser\n   * just gets a fresh URL on each call instead of cache-friendly mtime.\n   */\n  private makeBundleUrl(addonId: string, bundle: string): string {\n    const bundlePath = this.resolveBundlePath(addonId, bundle)\n    let mtime = Date.now()\n    if (bundlePath !== null) {\n      try { mtime = fs.statSync(bundlePath).mtimeMs }\n      catch { /* remote addon — no local file */ }\n    }\n    const v = Math.floor(mtime)\n    return `/api/addon-widgets/${addonId}/${bundle}?v=${v}`\n  }\n\n  private resolveBundlePath(addonId: string, bundle: string): string | null {\n    const paths = this.resolvedPaths\n    if (!paths) return null\n    const addonDistPath = path.join(paths.addonsDir, '@camstack', `addon-${addonId}`, 'dist')\n    const resolvedBase = path.resolve(addonDistPath)\n    const resolvedFile = path.resolve(addonDistPath, bundle)\n    if (!resolvedFile.startsWith(resolvedBase + path.sep) && resolvedFile !== resolvedBase) {\n      return null\n    }\n    return resolvedFile\n  }\n\n  // ── Path resolution ──────────────────────────────────────────────\n\n  private async resolvePaths(): Promise<ResolvedPaths> {\n    const fallback: ResolvedPaths = { addonsDir: path.resolve('camstack-data', 'addons') }\n    if (!this.ctx.settings) return fallback\n    try {\n      const server = await this.ctx.settings.getSection('server')\n      const dataPath = typeof server['dataPath'] === 'string' && server['dataPath']\n        ? server['dataPath']\n        : 'camstack-data'\n      return { addonsDir: path.resolve(dataPath, 'addons') }\n    } catch (err: unknown) {\n      this.ctx.logger.debug('Failed to read server.dataPath — falling back', {\n        meta: { error: errMsg(err) },\n      })\n      return fallback\n    }\n  }\n}\n\nexport default AddonWidgetsAggregatorAddon\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,IAAM,mBAAsC;CAAC;CAAK;CAAM;CAAK;AAE7D,IAAa,8BAAb,cAAiD,gBAAA,UAAU;CACzD,KAAc;CAEd,gBAA8C;;;;;;;;;CAU9C,2BAA4B,IAAI,KAAwC;;CAGxE,8BAA+B,IAAI,KAA6B;CAEhE,cAAc;EAAE,MAAM,EAAE,CAAC;;CAEzB,MAAgB,eAAgD;EAC9D,KAAK,gBAAgB,MAAM,KAAK,cAAc;EAE9C,MAAM,WAA4C,EAChD,aAAa,YAAgD,KAAK,WAAW,EAC9E;EAED,KAAK,IAAI,OAAO,KAAK,2DAA2D;EAChF,OAAO,CAAC;GAAE,YAAY,gBAAA;GAAwB;GAAU,CAAC;;CAG3D,MAAgB,aAA4B;EAC1C,KAAK,MAAM,KAAK,KAAK,YAAY,QAAQ,EAAE,aAAa,EAAE;EAC1D,KAAK,YAAY,OAAO;EACxB,KAAK,SAAS,OAAO;;CAKvB,MAAc,YAAgD;EAK5D,MAAM,UAAU,KAAK,cAAc,qBAAkD,uBAAuB,IAAI,EAAE;EAClH,MAAM,MAAwB,EAAE;EAChC,MAAM,0BAAU,IAAI,KAAa;EAEjC,KAAK,MAAM,CAAC,SAAS,WAAW,SAAS;GACvC,QAAQ,IAAI,QAAQ;GACpB,IAAI;IAEF,MAAM,YAA6B,MADb,QAAQ,QAAQ,OAAO,aAAa,CAAC,EAChB,KAAK,OAAkB;KAChE,GAAG;KACH;KACA,WAAW,KAAK,cAAc,SAAS,EAAE,OAAO;KACjD,EAAE;IACH,KAAK,MAAM,QAAQ,UAAU,IAAI,KAAK,KAAK;IAE3C,KAAK,SAAS,IAAI,SAAS,SAAS;YAC7B,KAAc;IACrB,MAAM,WAAA,GAAA,gBAAA,QAAiB,IAAI;IAC3B,KAAK,IAAI,OAAO,KAAK,wCAAwC,EAC3D,MAAM;KAAE,UAAU;KAAS,OAAO;KAAS,EAC5C,CAAC;IAIF,MAAM,SAAS,KAAK,SAAS,IAAI,QAAQ;IACzC,IAAI,WAAW,KAAA,GAAW;KACxB,KAAK,MAAM,QAAQ,QAAQ,IAAI,KAAK,KAAK;KACzC,KAAK,IAAI,OAAO,KAAK,wDAAwD,EAC3E,MAAM;MAAE,UAAU;MAAS,eAAe,OAAO;MAAQ,EAC1D,CAAC;;IAKJ,KAAK,cAAc,QAAQ;;;EAM/B,KAAK,MAAM,YAAY,KAAK,SAAS,MAAM,EACzC,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,KAAK,SAAS,OAAO,SAAS;EAG5D,OAAO;;CAKT,cAAsB,UAAkB,UAAU,GAAS;EACzD,IAAI,WAAW,iBAAiB,QAAQ;EACxC,IAAI,KAAK,YAAY,IAAI,SAAS,EAAE;EAEpC,MAAM,UAAU,iBAAiB,YAAY,iBAAiB,iBAAiB,SAAS;EACxF,MAAM,QAAQ,iBAAiB;GAC7B,KAAK,YAAY,OAAO,SAAS;GACjC,KAAU,YAAY,UAAU,QAAQ;KACvC,QAAQ;EACX,KAAK,YAAY,IAAI,UAAU,MAAM;;CAGvC,MAAc,YAAY,UAAkB,SAAgC;EAE1E,MAAM,SADU,KAAK,cAAc,qBAAkD,uBAAuB,IAAI,EAAE,EAC5F,MAAM,CAAC,QAAQ,OAAO,SAAS;EACrD,IAAI,CAAC,OAAO;EACZ,MAAM,CAAC,SAAS,UAAU;EAE1B,IAAI;GAEF,MAAM,YAA6B,MADb,QAAQ,QAAQ,OAAO,aAAa,CAAC,EAChB,KAAK,OAAkB;IAChE,GAAG;IACH;IACA,WAAW,KAAK,cAAc,SAAS,EAAE,OAAO;IACjD,EAAE;GACH,KAAK,SAAS,IAAI,SAAS,SAAS;GACpC,KAAK,IAAI,OAAO,KAAK,8CAA8C,EACjE,MAAM;IAAE,UAAU;IAAS,SAAS,UAAU;IAAG,SAAS,SAAS;IAAQ,EAC5E,CAAC;GAEF,KAAK,IAAI,SAAS,KAAK;IACrB,KAAA,GAAA,YAAA,aAAgB;IAChB,2BAAW,IAAI,MAAM;IACrB,QAAQ;KAAE,MAAM;KAAS,IAAI,KAAK;KAAI;IACtC,UAAU,gBAAA,cAAc;IACxB,MAAM;KAAE;KAAS,WAAW;KAAM;IACnC,CAAC;WACK,KAAc;GACrB,KAAK,IAAI,OAAO,MAAM,qCAAqC,EACzD,MAAM;IAAE;IAAU,SAAS,UAAU;IAAG,QAAA,GAAA,gBAAA,QAAc,IAAI;IAAE,EAC7D,CAAC;GACF,KAAK,cAAc,UAAU,UAAU,EAAE;;;;;;;;;CAY7C,cAAsB,SAAiB,QAAwB;EAC7D,MAAM,aAAa,KAAK,kBAAkB,SAAS,OAAO;EAC1D,IAAI,QAAQ,KAAK,KAAK;EACtB,IAAI,eAAe,MACjB,IAAI;GAAE,QAAQ,QAAG,SAAS,WAAW,CAAC;UAChC;EAGR,OAAO,sBAAsB,QAAQ,GAAG,OAAO,KADrC,KAAK,MAAM,MAC+B;;CAGtD,kBAA0B,SAAiB,QAA+B;EACxE,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,gBAAgB,UAAK,KAAK,MAAM,WAAW,aAAa,SAAS,WAAW,OAAO;EACzF,MAAM,eAAe,UAAK,QAAQ,cAAc;EAChD,MAAM,eAAe,UAAK,QAAQ,eAAe,OAAO;EACxD,IAAI,CAAC,aAAa,WAAW,eAAe,UAAK,IAAI,IAAI,iBAAiB,cACxE,OAAO;EAET,OAAO;;CAKT,MAAc,eAAuC;EACnD,MAAM,WAA0B,EAAE,WAAW,UAAK,QAAQ,iBAAiB,SAAS,EAAE;EACtF,IAAI,CAAC,KAAK,IAAI,UAAU,OAAO;EAC/B,IAAI;GACF,MAAM,SAAS,MAAM,KAAK,IAAI,SAAS,WAAW,SAAS;GAC3D,MAAM,WAAW,OAAO,OAAO,gBAAgB,YAAY,OAAO,cAC9D,OAAO,cACP;GACJ,OAAO,EAAE,WAAW,UAAK,QAAQ,UAAU,SAAS,EAAE;WAC/C,KAAc;GACrB,KAAK,IAAI,OAAO,MAAM,iDAAiD,EACrE,MAAM,EAAE,QAAA,GAAA,gBAAA,QAAc,IAAI,EAAE,EAC7B,CAAC;GACF,OAAO"}