@camstack/core 0.1.15 → 0.1.16

package/dist/addon/addon-api-factory.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Factory for creating tRPC clients for addons.
+ *
+ * In-process only: `createDirectCaller()` uses tRPC's `createCallerFactory`
+ * to call procedures directly (zero network overhead) and wraps the raw
+ * caller in a proxy so it matches `CreateTRPCClient<AppRouter>` shape —
+ * addons use `context.api.namespace.method.query(input)` identically to
+ * the cross-process path.
+ *
+ * Cross-process calls (forked workers, remote agents) ride the Moleculer
+ * broker via `brokerTransportLink` in the kernel — not this factory.
+ */
+export interface DirectCallerOptions {
+    /** The tRPC router instance (from buildAppRouter) */
+    readonly router: unknown;
+    /** Context for the caller (user identity, etc.) */
+    readonly context: {
+        readonly user: {
+            readonly id: string;
+            readonly username: string;
+            readonly role: string;
+        };
+    };
+}
+export declare class AddonApiFactory {
+    /**
+     * Create a direct caller -- calls tRPC procedures directly in-process.
+     * Zero network overhead. Used for in-process addons and dev mode.
+     *
+     * Returns `AddonApi` — the same tRPC client surface that broker-routed
+     * callers get. Callers treat it uniformly as `context.api` regardless
+     * of the underlying transport.
+     */
+    createDirectCaller(options: DirectCallerOptions): Promise<import('@camstack/types').AddonApi>;
+}
+//# sourceMappingURL=addon-api-factory.d.ts.map

package/dist/addon/addon-api-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-api-factory.d.ts","sourceRoot":"","sources":["../../src/addon/addon-api-factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,mBAAmB;IAClC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;CAC/G;AAoDD,qBAAa,eAAe;IAC1B;;;;;;;OAOG;IACG,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,iBAAiB,EAAE,QAAQ,CAAC;CASpG"}

package/dist/addon-routes/addon-route-registry.d.ts

@@ -0,0 +1,38 @@
+import { IAddonHttpRoute, IAddonRouteProvider } from '@camstack/types';
+interface RouteMatch {
+    readonly route: IAddonHttpRoute;
+    readonly addonId: string;
+    readonly params: Record<string, string>;
+}
+/**
+ * Registry for dynamic HTTP routes registered by addons.
+ * Framework-agnostic — the server HTTP layer queries this registry to dispatch requests.
+ */
+export declare class AddonRouteRegistry {
+    private readonly routes;
+    /**
+     * Register all routes from an addon's route provider.
+     */
+    registerRoutes(addonId: string, provider: IAddonRouteProvider): void;
+    /**
+     * Unregister all routes for an addon.
+     */
+    unregisterRoutes(addonId: string): void;
+    /**
+     * Match an incoming request method + path to a registered route.
+     * Supports simple path parameters (e.g., /items/:id).
+     */
+    matchRoute(method: string, path: string): RouteMatch | null;
+    /**
+     * List all registered routes across all addons.
+     */
+    listRoutes(): ReadonlyArray<{
+        addonId: string;
+        method: string;
+        path: string;
+        access: string;
+        description?: string;
+    }>;
+}
+export {};
+//# sourceMappingURL=addon-route-registry.d.ts.map

package/dist/addon-routes/addon-route-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-route-registry.d.ts","sourceRoot":"","sources":["../../src/addon-routes/addon-route-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAE3E,UAAU,UAAU;IAClB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACxC;AASD;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAE9D;;OAEG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAapE;;OAEG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIvC;;;OAGG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAqB3D;;OAEG;IACH,UAAU,IAAI,aAAa,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAerH"}

package/dist/auth/api-key-manager.d.ts

@@ -0,0 +1,27 @@
+import { AuthManager } from './auth-manager.js';
+import { ApiKeyRecord, UserRole, SettingsStoreClient } from '@camstack/types';
+export type { ApiKeyRecord };
+interface CreateApiKeyInput {
+    label: string;
+    role: UserRole;
+    allowedProviders?: string[] | '*';
+    allowedDevices?: Record<string, string[] | '*'>;
+}
+export interface ApiKeyStorageAccess {
+    getStore(): SettingsStoreClient;
+}
+export declare class ApiKeyManager {
+    private readonly storageAccess;
+    private readonly auth;
+    constructor(storageAccess: ApiKeyStorageAccess, auth: AuthManager);
+    private get store();
+    create(input: CreateApiKeyInput): Promise<{
+        record: ApiKeyRecord;
+        token: string;
+    }>;
+    validateToken(token: string): Promise<ApiKeyRecord | null>;
+    listAll(): Promise<Omit<ApiKeyRecord, 'tokenHash'>[]>;
+    revoke(id: string): Promise<void>;
+    findById(id: string): Promise<ApiKeyRecord | null>;
+}
+//# sourceMappingURL=api-key-manager.d.ts.map

package/dist/auth/api-key-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-manager.d.ts","sourceRoot":"","sources":["../../src/auth/api-key-manager.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAGlF,YAAY,EAAE,YAAY,EAAE,CAAA;AAE5B,UAAU,iBAAiB;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,QAAQ,CAAA;IACd,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,CAAA;CAChD;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,IAAI,mBAAmB,CAAA;CAChC;AAMD,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI;gBADJ,aAAa,EAAE,mBAAmB,EAClC,IAAI,EAAE,WAAW;IAGpC,OAAO,KAAK,KAAK,GAEhB;IAEK,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAkBlF,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAa1D,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;IASrD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;CAKzD"}

package/dist/auth/auth-manager.d.ts

@@ -0,0 +1,47 @@
+import { ScopedToken, UserRole, TokenPayload, IScopedLogger } from '@camstack/types';
+import { ScopedTokenManager } from './scoped-token-manager.js';
+export type { UserRole, TokenPayload };
+export type AuthConfigReader = {
+    get<T>(path: string): T;
+    update(section: string, data: Record<string, unknown>): void;
+};
+export declare class AuthManager {
+    private readonly config;
+    private readonly jwtSecret;
+    private scopedTokenManager;
+    private readonly logger;
+    constructor(config: AuthConfigReader, logger?: IScopedLogger);
+    signToken(payload: Omit<TokenPayload, 'iat' | 'exp'>): string;
+    verifyToken(token: string): TokenPayload;
+    hashPassword(password: string): Promise<string>;
+    comparePassword(password: string, hash: string): Promise<boolean>;
+    generateApiKey(): {
+        token: string;
+        hash: string;
+        prefix: string;
+    };
+    validateApiKey(token: string, storedHash: string): boolean;
+    /**
+     * Create a service token for agent/worker authentication.
+     * Used when forking workers or when agents register.
+     */
+    createServiceToken(opts: {
+        readonly agentId: string;
+        readonly role?: string;
+        readonly expiresIn?: string;
+    }): string;
+    /**
+     * Set the scoped token manager for the auth chain.
+     */
+    setScopedTokenManager(manager: ScopedTokenManager): void;
+    /**
+     * Validate a scoped token string.
+     * Returns the token record if valid, null otherwise.
+     */
+    validateScopedToken(rawToken: string): Promise<ScopedToken | null>;
+    /**
+     * Check whether a scoped token grants access to a given addon/route/capability.
+     */
+    matchesScopedTokenScope(token: ScopedToken, addonId?: string, routePath?: string, capability?: string): boolean;
+}
+//# sourceMappingURL=auth-manager.d.ts.map

package/dist/auth/auth-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-manager.d.ts","sourceRoot":"","sources":["../../src/auth/auth-manager.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACzF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAYnE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;AAEtC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAAA;IACvB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAC7D,CAAA;AAED,qBAAa,WAAW;IAKV,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,kBAAkB,CAAkC;IAC5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;gBAET,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAE,aAA0B;IAczF,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,MAAM;IAI7D,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY;IAIlC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI/C,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvE,cAAc,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAOjE,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAK1D;;;OAGG;IACH,kBAAkB,CAAC,IAAI,EAAE;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAC5B,GAAG,MAAM;IAcV;;OAEG;IACH,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;IAIxD;;;OAGG;IACG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAOxE;;OAEG;IACH,uBAAuB,CACrB,KAAK,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO;CAMX"}

package/dist/auth/parse-record.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Wrap a Zod schema parse with an actionable error message. The
+ * settings-store regression that broke local-auth in May 2026 surfaced
+ * as an opaque Zod error listing every required field as `undefined`
+ * — confusing because the data IS in the DB, just exposed through the
+ * wrong shape by `queryDeclared`. This helper makes the failure mode
+ * obvious: it explicitly mentions the kind, the offending value's top-
+ * level keys, and a hint about the most common cause.
+ *
+ * `schema` is typed loosely (any with a `parse` method) to avoid the
+ * generic ZodTypeAny variance error across Zod major versions when this
+ * helper is reused by callers that import schemas from `@camstack/types`.
+ */
+interface ZodLikeSchema<T> {
+    parse(data: unknown): T;
+}
+export declare function parseRecord<T>(kind: string, schema: ZodLikeSchema<T>, data: unknown): T;
+export {};
+//# sourceMappingURL=parse-record.d.ts.map

package/dist/auth/parse-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-record.d.ts","sourceRoot":"","sources":["../../src/auth/parse-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,UAAU,aAAa,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAA;CACxB;AAED,wBAAgB,WAAW,CAAC,CAAC,EAC3B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,IAAI,EAAE,OAAO,GACZ,CAAC,CAsBH"}

package/dist/auth/scoped-token-manager.d.ts

@@ -0,0 +1,18 @@
+import { ScopedToken, TokenScope, SettingsStoreClient } from '@camstack/types';
+/**
+ * Manages scoped API tokens with restricted addon/route/capability access.
+ */
+export declare class ScopedTokenManager {
+    private readonly store;
+    constructor(store: SettingsStoreClient);
+    create(userId: string, name: string, scopes: TokenScope[], expiresAt?: number): Promise<{
+        token: string;
+        record: ScopedToken;
+    }>;
+    validate(rawToken: string): Promise<ScopedToken | null>;
+    matchesScope(token: ScopedToken, addonId?: string, routePath?: string, capability?: string): boolean;
+    revoke(tokenId: string): Promise<void>;
+    listForUser(userId: string): Promise<ScopedToken[]>;
+    updateLastUsed(tokenId: string): Promise<void>;
+}
+//# sourceMappingURL=scoped-token-manager.d.ts.map

package/dist/auth/scoped-token-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-token-manager.d.ts","sourceRoot":"","sources":["../../src/auth/scoped-token-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAUnF;;GAEG;AACH,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,mBAAmB;IAEjD,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,EAAE,EACpB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,CAAC;IAsB5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAY7D,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO;IAW9F,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAKnD,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMrD"}

package/dist/auth/user-manager.d.ts

@@ -0,0 +1,34 @@
+import { AuthManager } from './auth-manager.js';
+import { UserRecord, UserRole, SettingsStoreClient } from '@camstack/types';
+export type { UserRecord };
+interface CreateUserInput {
+    username: string;
+    password: string;
+    role: UserRole;
+    allowedProviders?: string[] | '*';
+    allowedDevices?: Record<string, string[] | '*'>;
+}
+type UpdatableUserFields = Partial<Pick<UserRecord, 'role' | 'allowedProviders' | 'allowedDevices'>>;
+export interface UserStorageAccess {
+    getStore(): SettingsStoreClient;
+}
+export interface UserConfigReader {
+    get<T>(path: string): T;
+}
+export declare class UserManager {
+    private readonly storageAccess;
+    private readonly auth;
+    private readonly config;
+    constructor(storageAccess: UserStorageAccess, auth: AuthManager, config: UserConfigReader);
+    private get store();
+    create(input: CreateUserInput): Promise<UserRecord>;
+    findByUsername(username: string): Promise<UserRecord | null>;
+    findById(id: string): Promise<UserRecord | null>;
+    validateCredentials(username: string, password: string): Promise<UserRecord | null>;
+    listAll(): Promise<Omit<UserRecord, 'passwordHash'>[]>;
+    update(id: string, data: UpdatableUserFields): Promise<void>;
+    delete(id: string): Promise<void>;
+    resetPassword(id: string, newPassword: string): Promise<void>;
+    ensureAdminExists(): Promise<void>;
+}
+//# sourceMappingURL=user-manager.d.ts.map

package/dist/auth/user-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-manager.d.ts","sourceRoot":"","sources":["../../src/auth/user-manager.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAGhF,YAAY,EAAE,UAAU,EAAE,CAAA;AAE1B,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,QAAQ,CAAA;IACd,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,CAAA;CAChD;AAED,KAAK,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,kBAAkB,GAAG,gBAAgB,CAAC,CAAC,CAAA;AAIpG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,IAAI,mBAAmB,CAAA;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,CAAA;CACxB;AAMD,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,aAAa,EAAE,iBAAiB,EAChC,IAAI,EAAE,WAAW,EACjB,MAAM,EAAE,gBAAgB;IAG3C,OAAO,KAAK,KAAK,GAEhB;IAEK,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAqBnD,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAM5D,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAMhD,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAOnF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;IAStD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7D,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;CAkBzC"}

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.d.ts

@@ -0,0 +1,54 @@
+import { BaseAddon, ProviderRegistration } from '@camstack/types';
+export declare class AddonPagesAggregatorAddon extends BaseAddon {
+    readonly id = "addon-pages-aggregator";
+    private resolvedPaths;
+    /**
+     * Last successful `listPages()` snapshot per source. Used as the
+     * "stale-but-valid" fallback when a source transiently fails — drops
+     * happen often enough during boot (Moleculer service-discovery
+     * window) that swallowing the error and returning empty leaves the
+     * sidebar with nothing for several seconds. Keeping the previous
+     * good entry means a flake is invisible to the operator.
+     */
+    private readonly lastGood;
+    /** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */
+    private readonly retryTimers;
+    constructor();
+    protected onInitialize(): Promise<ProviderRegistration[]>;
+    protected onShutdown(): Promise<void>;
+    private aggregate;
+    /**
+     * Schedule background re-call of `listPages()` on a source that just
+     * failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful
+     * call updates the cache and emits `AddonPageReady` so the admin UI
+     * invalidates its query. Stops on first success or after the schedule
+     * is exhausted.
+     */
+    private scheduleRetry;
+    private retrySource;
+    /**
+     * Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back
+     * to `Date.now()` when the bundle path can't be stat'd (remote addon
+     * with no local file, addon not yet on disk, etc.) — the browser
+     * just gets a fresh URL on each call instead of cache-friendly mtime.
+     */
+    private makeBundleUrl;
+    /**
+     * Resolve the local filesystem path for an addon's bundle. Mirrors
+     * `AddonPagesService.resolveBundle` (server-side), but without the
+     * existence / traversal checks — those still live on the server's
+     * static file route. We only need a stat-able path here for the
+     * `mtime` cache-buster.
+     */
+    private resolveBundlePath;
+    /**
+     * Read `server.dataPath` from the cluster yml-backed sections (same
+     * source the server uses at boot), then derive the addons directory
+     * from it. Falls back to `camstack-data/addons` when no settings API
+     * is available — agents and isolated tests don't see this addon, so
+     * the fallback is purely defensive.
+     */
+    private resolvePaths;
+}
+export default AddonPagesAggregatorAddon;
+//# sourceMappingURL=addon-pages-aggregator.addon.d.ts.map

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-pages-aggregator.addon.d.ts","sourceRoot":"","sources":["../../../src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts"],"names":[],"mappings":"AAyBA,OAAO,EACL,SAAS,EAOT,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAA;AAqBxB,qBAAa,yBAA0B,SAAQ,SAAS;IACtD,QAAQ,CAAC,EAAE,4BAA2B;IAEtC,OAAO,CAAC,aAAa,CAA6B;IAElD;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8C;IAEvE,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;;cAIhD,YAAY,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;cAW/C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAQ7B,SAAS;IAmDvB;;;;;;OAMG;IACH,OAAO,CAAC,aAAa;YAYP,WAAW;IAkCzB;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAWrB;;;;;;OAMG;IACH,OAAO,CAAC,iBAAiB;IAczB;;;;;;OAMG;YACW,YAAY;CAgB3B;AAED,eAAe,yBAAyB,CAAA"}