@camstack/core 0.1.15 → 0.1.16

package/dist/storage/fs-storage-backend.d.ts

@@ -0,0 +1,41 @@
+export interface IStorageBackend {
+    /** Backend type identifier */
+    readonly type: string;
+    /** Base path of this backend */
+    readonly basePath: string;
+    /** Resolve a subpath to an absolute path */
+    resolve(subpath: string): string;
+    /**
+     * Check whether the backend is usable: either the base directory
+     * already exists and is writable, OR we can create it on first
+     * write (i.e. the nearest existing ancestor is writable).
+     */
+    isAvailable(): boolean;
+    /** No-op for lazy backends. Kept for API compatibility. */
+    initialize(): Promise<void>;
+}
+/**
+ * Filesystem storage backend — lazy by design.
+ *
+ * `initialize()` does NOT create the base directory eagerly. Instead,
+ * consumers that write via `FilesystemStorageProvider` (and other write
+ * helpers in storage-manager.ts) run `fs.mkdir(dirname(filePath), { recursive: true })`
+ * right before every `writeFile`, so the directory tree appears on demand.
+ *
+ * The previous behaviour eagerly mkdir'd every location declared in
+ * `StorageLocationManager.initializeDefaults()` — six directories (`db`,
+ * `media`, `recordings`, `models`, `cache`, `logs`) got created at boot
+ * even if the installation had no cameras, no recording addon, no
+ * analytics addon, etc. That meant every fresh install looked like it
+ * was producing data when it had nothing to write. Laziness fixes that:
+ * a directory only exists once an addon decides to put a file there.
+ */
+export declare class FsStorageBackend implements IStorageBackend {
+    readonly type = "local";
+    readonly basePath: string;
+    constructor(basePath: string);
+    resolve(subpath: string): string;
+    isAvailable(): boolean;
+    initialize(): Promise<void>;
+}
+//# sourceMappingURL=fs-storage-backend.d.ts.map

package/dist/storage/fs-storage-backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-storage-backend.d.ts","sourceRoot":"","sources":["../../src/storage/fs-storage-backend.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,gCAAgC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,4CAA4C;IAC5C,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IAChC;;;;OAIG;IACH,WAAW,IAAI,OAAO,CAAA;IACtB,2DAA2D;IAC3D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5B;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,gBAAiB,YAAW,eAAe;IACtD,QAAQ,CAAC,IAAI,WAAU;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;gBAEb,QAAQ,EAAE,MAAM;IAI5B,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAKhC,WAAW,IAAI,OAAO;IAwBhB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAIlC"}

package/dist/storage/storage-location-manager.d.ts

@@ -0,0 +1,24 @@
+import { IStorageBackend } from './fs-storage-backend.js';
+export type StorageLocationName = 'data' | 'media' | 'recordings' | 'models' | 'cache' | 'logs';
+export declare class StorageLocationManager {
+    private readonly backends;
+    private readonly dataPath;
+    constructor(dataPath: string);
+    /** Initialize all locations with default paths */
+    initializeDefaults(): Promise<void>;
+    /** Override a specific location's backend path */
+    setLocationPath(name: StorageLocationName, basePath: string): Promise<void>;
+    /** Get the backend for a location */
+    getBackend(name: StorageLocationName): IStorageBackend;
+    /** Resolve a path within a location */
+    resolve(location: StorageLocationName, subpath: string): string;
+    /** Check if all locations are available */
+    getStatus(): Array<{
+        name: StorageLocationName;
+        available: boolean;
+        path: string;
+    }>;
+    /** All location names */
+    getLocationNames(): StorageLocationName[];
+}
+//# sourceMappingURL=storage-location-manager.d.ts.map

package/dist/storage/storage-location-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-location-manager.d.ts","sourceRoot":"","sources":["../../src/storage/storage-location-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAEhF,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAA;AAE/F,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuD;IAChF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;gBAErB,QAAQ,EAAE,MAAM;IAI5B,kDAAkD;IAC5C,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiBzC,kDAAkD;IAC5C,eAAe,CAAC,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjF,qCAAqC;IACrC,UAAU,CAAC,IAAI,EAAE,mBAAmB,GAAG,eAAe;IAMtD,uCAAuC;IACvC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM;IAI/D,2CAA2C;IAC3C,SAAS,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,mBAAmB,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAQnF,yBAAyB;IACzB,gBAAgB,IAAI,mBAAmB,EAAE;CAG1C"}

package/dist/storage/storage-manager.d.ts

@@ -0,0 +1,77 @@
+import { StorageLocationManager, StorageLocationName } from './storage-location-manager.js';
+import { IStorageProvider as INewStorageProvider, ISettingsBackend } from '@camstack/types';
+export interface IStorageProvider {
+    initialize(): Promise<void>;
+    shutdown(): Promise<void>;
+    getLocation(name: StorageLocationName): IStorageLocation;
+    export?(locationName: StorageLocationName): Promise<Buffer>;
+    import?(locationName: StorageLocationName, data: Buffer): Promise<void>;
+}
+export interface QueryFilter {
+    where?: Record<string, unknown>;
+    whereIn?: Record<string, unknown[]>;
+    whereBetween?: Record<string, [unknown, unknown]>;
+    orderBy?: {
+        field: string;
+        direction: 'asc' | 'desc';
+    };
+    limit?: number;
+    offset?: number;
+}
+export interface StorageRecord {
+    collection: string;
+    id: string;
+    data: Record<string, unknown>;
+}
+export interface IStructuredStorage {
+    query(collection: string, filter?: QueryFilter): Promise<readonly StorageRecord[]>;
+    insert(record: StorageRecord): Promise<StorageRecord>;
+    update(collection: string, id: string, data: Record<string, unknown>): Promise<StorageRecord>;
+    delete(collection: string, id: string): Promise<void>;
+    count(collection: string, filter?: QueryFilter): Promise<number>;
+}
+export interface IFileStorage {
+    readFile(path: string): Promise<Buffer>;
+    writeFile(path: string, data: Buffer): Promise<void>;
+    deleteFile(path: string): Promise<void>;
+    listFiles(prefix?: string): Promise<readonly string[]>;
+    getFileUrl(path: string): Promise<string>;
+    exists(path: string): Promise<boolean>;
+}
+export interface IStorageLocation {
+    structured?: IStructuredStorage;
+    files?: IFileStorage;
+}
+/**
+ * StorageManager — bridge between legacy code (getLocation/getLocationPath)
+ * and the new capability-based storage system.
+ *
+ * Legacy consumers call getLocation('addon', namespace) to get structured + file storage.
+ * This manager builds the response from:
+ *   - SettingsBackend (for structured queries) — provided by sqlite-settings addon
+ *   - LocationManager (for file paths) — set during Phase 2 boot
+ */
+export declare class StorageManager {
+    private legacyProvider;
+    private locationManager;
+    private newStorageProvider;
+    private settingsBackend;
+    /** @deprecated Set by legacy capability consumer — use setNewStorageProvider instead */
+    setProvider(provider: IStorageProvider | INewStorageProvider): void;
+    setNewStorageProvider(provider: INewStorageProvider): void;
+    setSettingsBackend(backend: ISettingsBackend): void;
+    getSettingsBackend(): ISettingsBackend;
+    getProvider(): IStorageProvider;
+    setLocationManager(manager: StorageLocationManager): void;
+    getLocationManager(): StorageLocationManager;
+    initializeLocations(dataPath: string): Promise<void>;
+    getLocationPath(name: StorageLocationName): string;
+    /**
+     * Get a storage location with optional namespace scoping.
+     * Builds IStorageLocation from settingsBackend (structured) + locationManager (files).
+     */
+    getLocation(name: StorageLocationName | string, namespace?: string): IStorageLocation;
+    private createLegacyShim;
+    private createNamespacedLocation;
+}
+//# sourceMappingURL=storage-manager.d.ts.map

package/dist/storage/storage-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-manager.d.ts","sourceRoot":"","sources":["../../src/storage/storage-manager.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AAChG,OAAO,KAAK,EACV,gBAAgB,IAAI,mBAAmB,EACvC,gBAAgB,EACjB,MAAM,iBAAiB,CAAA;AAGxB,MAAM,WAAW,gBAAgB;IAC/B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,WAAW,CAAC,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CAAA;IACxD,MAAM,CAAC,CAAC,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3D,MAAM,CAAC,CAAC,YAAY,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxE;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IACjD,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,CAAA;IACtD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAA;IAClF,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC7F,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrD,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACjE;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;IACtD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACzC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,kBAAkB,CAAA;IAC/B,KAAK,CAAC,EAAE,YAAY,CAAA;CACrB;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,cAAc,CAAgC;IACtD,OAAO,CAAC,eAAe,CAAsC;IAC7D,OAAO,CAAC,kBAAkB,CAAmC;IAC7D,OAAO,CAAC,eAAe,CAAgC;IAEvD,wFAAwF;IACxF,WAAW,CAAC,QAAQ,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,IAAI;IASnE,qBAAqB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAI1D,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,GAAG,IAAI;IAInD,kBAAkB,IAAI,gBAAgB;IAOtC,WAAW,IAAI,gBAAgB;IAS/B,kBAAkB,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI;IAIzD,kBAAkB,IAAI,sBAAsB;IAOtC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW1D,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM;IAIlD;;;OAGG;IACH,WAAW,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,gBAAgB;IAgFrF,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,wBAAwB;CAgCjC"}

package/dist/tls/cert-manager.d.ts

@@ -0,0 +1,27 @@
+export interface TlsCertPair {
+    readonly cert: Buffer;
+    readonly key: Buffer;
+}
+export interface EnsureTlsResult {
+    readonly certPath: string;
+    readonly keyPath: string;
+    readonly generated: boolean;
+}
+export interface CertOptions {
+    /** Common Name for the cert (default: 'camstack.local') */
+    readonly commonName?: string;
+    /** Validity in days (default: 825 — max for browsers) */
+    readonly validDays?: number;
+    /** Additional SANs (DNS names or IPs) */
+    readonly extraSans?: readonly string[];
+}
+/**
+ * Ensure a self-signed TLS certificate exists in the given directory.
+ * Generates one if missing. Returns paths to cert and key files.
+ */
+export declare function ensureTlsCert(dataDir: string, options?: CertOptions): Promise<EnsureTlsResult>;
+/**
+ * Load TLS cert+key from files. Returns Buffers suitable for Node.js TLS options.
+ */
+export declare function loadTlsCert(certPath: string, keyPath: string): TlsCertPair;
+//# sourceMappingURL=cert-manager.d.ts.map

package/dist/tls/cert-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cert-manager.d.ts","sourceRoot":"","sources":["../../src/tls/cert-manager.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,yCAAyC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACvC;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,eAAe,CAAC,CA4E1B;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,CAK1E"}

package/dist/tls/index.d.ts

@@ -0,0 +1,2 @@
+export { ensureTlsCert, loadTlsCert, type TlsCertPair, type EnsureTlsResult, type CertOptions } from './cert-manager.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tls/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tls/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/core",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",
@@ -34,8 +34,7 @@
         "entry": "./dist/builtins/sqlite-storage/filesystem-storage.addon.js",
         "capabilities": [
           {
-            "name": "storage",
-            "mode": "collection"
+            "name": "storage-provider"
           }
         ]
       },
@@ -45,8 +44,7 @@
         "entry": "./dist/builtins/sqlite-storage/sqlite-settings.addon.js",
         "capabilities": [
           {
-            "name": "settings-store",
-            "mode": "singleton"
+            "name": "settings-store"
           }
         ]
       },
@@ -56,8 +54,7 @@
         "entry": "./dist/builtins/winston-logging/index.js",
         "capabilities": [
           {
-            "name": "log-destination",
-            "mode": "collection"
+            "name": "log-destination"
           }
         ]
       },
@@ -67,30 +64,45 @@
         "entry": "./dist/builtins/console-logging/index.js",
         "capabilities": [
           {
-            "name": "log-destination",
-            "mode": "collection"
+            "name": "log-destination"
           }
         ]
       },
       {
         "id": "hub-forwarder",
         "name": "Hub Log Forwarder",
+        "description": "Agent-only log destination — forwards every log entry to the hub via the cluster broker. Never runs on the hub itself (the hub already owns the log-receiver, registering hub-forwarder there would create a write→ingest→write feedback loop).",
         "entry": "./dist/builtins/hub-forwarder/index.js",
+        "execution": {
+          "placement": "agent-only"
+        },
         "capabilities": [
           {
-            "name": "log-destination",
-            "mode": "collection"
+            "name": "log-destination"
           }
         ]
       },
       {
-        "id": "local-backup",
-        "name": "Local Backup",
-        "entry": "./dist/builtins/local-backup/index.js",
+        "id": "backup-orchestrator",
+        "name": "Backup Orchestrator",
+        "description": "System singleton that owns the schedule, builds the archive once, and fans it out to every enabled `backup-destination` provider (local, S3, rsync, …).",
+        "entry": "./dist/builtins/backup-orchestrator/index.js",
+        "protected": true,
         "capabilities": [
           {
-            "name": "backup",
-            "mode": "collection"
+            "name": "backup"
+          }
+        ]
+      },
+      {
+        "id": "storage-orchestrator",
+        "name": "Storage Orchestrator",
+        "description": "Hub-only singleton that owns the consumer-facing `storage` cap. Holds the `locationId → StorageLocation` map (Task 6 will persist to SQLite), resolves `StorageLocationRef` to concrete locations, and dispatches every call to the matching `storage-provider` collection registrant (`filesystem-storage` today; future SFTP / S3 / WebDAV addons plug in alongside).",
+        "entry": "./dist/builtins/storage-orchestrator/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "storage"
           }
         ]
       },
@@ -100,8 +112,7 @@
         "entry": "./dist/builtins/native-metrics/native-metrics.addon.js",
         "capabilities": [
           {
-            "name": "metrics-provider",
-            "mode": "singleton"
+            "name": "metrics-provider"
           }
         ]
       },
@@ -111,8 +122,7 @@
         "entry": "./dist/builtins/snapshot/index.js",
         "capabilities": [
           {
-            "name": "snapshot",
-            "mode": "singleton"
+            "name": "snapshot"
           }
         ]
       },
@@ -122,8 +132,7 @@
         "entry": "./dist/builtins/alerts/index.js",
         "capabilities": [
           {
-            "name": "alerts",
-            "mode": "collection"
+            "name": "alerts"
           }
         ]
       },
@@ -187,6 +196,87 @@
             "name": "user-management"
           }
         ]
+      },
+      {
+        "id": "platform-probe",
+        "name": "Platform Probe (Native)",
+        "description": "Probes hardware and inference runtimes on the local node. Registers the `platform-probe` capability consumed by every inference addon on this node.",
+        "entry": "./dist/builtins/platform-probe/index.js",
+        "protected": true,
+        "execution": {
+          "placement": "any-node"
+        },
+        "capabilities": [
+          {
+            "name": "platform-probe"
+          }
+        ]
+      },
+      {
+        "id": "local-network",
+        "name": "Local Network",
+        "description": "Enumerates the hub's network interfaces, classifies them (LAN / Wi-Fi / Docker / VPN / loopback), and ranks connection-endpoints for SDK clients. Hub-only — agents are not directly addressable.",
+        "entry": "./dist/builtins/local-network/index.js",
+        "protected": true,
+        "execution": {
+          "placement": "hub-only"
+        },
+        "capabilities": [
+          {
+            "name": "local-network"
+          }
+        ]
+      },
+      {
+        "id": "auth-orchestrator",
+        "name": "Authentication Orchestrator",
+        "description": "Hub-only singleton facade over the auth-provider collection. Surfaces a unified provider list to the admin UI's Authentication page and the login screen's provider picker.",
+        "entry": "./dist/builtins/auth-orchestrator/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "authentication"
+          }
+        ]
+      },
+      {
+        "id": "mesh-orchestrator",
+        "name": "Mesh Orchestrator",
+        "description": "Hub-only singleton facade over the mesh-network collection. Aggregates Tailscale / Headscale / ZeroTier providers for the admin UI's Mesh Networks page.",
+        "entry": "./dist/builtins/mesh-orchestrator/index.js",
+        "protected": true,
+        "execution": {
+          "placement": "hub-only"
+        },
+        "capabilities": [
+          {
+            "name": "mesh-orchestrator"
+          }
+        ]
+      },
+      {
+        "id": "remote-access-orchestrator",
+        "name": "Remote Access Orchestrator",
+        "description": "Hub-only singleton facade over the network-access collection (Cloudflare Tunnel, ngrok, …). Surfaces a unified provider list to the admin UI's Remote Access page.",
+        "entry": "./dist/builtins/remote-access-orchestrator/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "remote-access"
+          }
+        ]
+      },
+      {
+        "id": "turn-orchestrator",
+        "name": "TURN Orchestrator",
+        "description": "Hub-only singleton facade over the turn-provider collection. Aggregates ICE servers from all enabled TURN providers; consumed by the WebRTC layer at session creation.",
+        "entry": "./dist/builtins/turn-orchestrator/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "turn-orchestrator"
+          }
+        ]
       }
     ]
   },
@@ -194,7 +284,7 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsup",
+    "build": "vite build",
     "dev": "tsup --watch",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
@@ -205,7 +295,10 @@
     "@camstack/kernel": "*",
     "bcryptjs": "^2.4.3",
     "better-sqlite3": "^12.8.0",
+    "croner": "^10.0.1",
     "jsonwebtoken": "^9.0.0",
+    "systeminformation": "^5.0.0",
+    "tar": "^6.2.1",
     "winston": "^3.19.0",
     "winston-daily-rotate-file": "^5.0.0"
   },
@@ -218,8 +311,11 @@
     "@types/bcryptjs": "^2.4.6",
     "@types/better-sqlite3": "^7.6.13",
     "@types/jsonwebtoken": "^9.0.0",
+    "@types/tar": "^6.1.13",
     "tsup": "^8.0.0",
     "typescript": "~5.9.0",
+    "vite": "^8.0.11",
+    "vite-plugin-dts": "^5.0.0",
     "vitest": "^3.0.0"
   }
 }

package/dist/builtins/addon-pages-aggregator/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/builtins/addon-pages-aggregator/index.ts","../../../src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts"],"sourcesContent":["export { AddonPagesAggregatorAddon, default } from './addon-pages-aggregator.addon.js'\n","/**\n * Addon Pages Aggregator — hub-local builtin that owns the singleton\n * `addon-pages` cap.\n *\n * Walks every registered `addon-pages-source` (collection) provider and\n * emits an enriched `AddonPageInfo[]` list with versioned `bundleUrl`s\n * pointing at `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. The\n * filesystem `mtime` cache-buster lets the browser pick up addon\n * rebuilds without manual reload — same scheme the original\n * hand-written `AddonPagesService.listPages` used before this split.\n *\n * The static file endpoint (`/api/addon-pages/:addonId/*`) is still\n * served by `AddonPagesService.resolveBundle()` on the server side; this\n * addon only owns the listing surface.\n *\n * Why a builtin rather than a cap-providers helper:\n *   - The aggregator is conceptually the \"addon-pages provider\" — addons\n *     own caps, not the server. Living in `@camstack/core/builtins` keeps\n *     the surface symmetrical with `system-config`, `local-auth`, etc.\n *   - Lets the aggregator subscribe to source readiness without piping a\n *     CapabilityRegistry handle through `RouterServices`.\n */\nimport * as path from 'node:path'\nimport * as fs from 'node:fs'\nimport { randomUUID } from 'node:crypto'\nimport {\n  BaseAddon,\n  EventCategory,\n  addonPagesCapability,\n  errMsg,\n  type AddonPageInfo,\n  type IAddonPageProvider,\n  type IAddonPagesAggregatorProvider,\n  type ProviderRegistration,\n} from '@camstack/types'\n\ninterface ResolvedPaths {\n  readonly addonsDir: string\n}\n\n/**\n * Backoff schedule (ms) used to retry sources that failed during a\n * `listPages()` round-trip — typically because the cap was just\n * registered (provider connected via Moleculer) but the worker-side\n * action registration hadn't propagated yet, so `Service '...listPages'\n * is not found on '<node>'` raced ahead of the call.\n *\n * We schedule one retry per entry; if every retry fails we stop\n * (the next aggregate() run will pick the source up again). On\n * success we re-emit `AddonPageReady` so admin-ui invalidates its\n * `addonPages.listPages` query and the sidebar populates without a\n * page reload.\n */\nconst RETRY_BACKOFF_MS: readonly number[] = [500, 1500, 4000]\n\nexport class AddonPagesAggregatorAddon extends BaseAddon {\n  readonly id = 'addon-pages-aggregator'\n\n  private resolvedPaths: ResolvedPaths | null = null\n\n  /**\n   * Last successful `listPages()` snapshot per source. Used as the\n   * \"stale-but-valid\" fallback when a source transiently fails — drops\n   * happen often enough during boot (Moleculer service-discovery\n   * window) that swallowing the error and returning empty leaves the\n   * sidebar with nothing for several seconds. Keeping the previous\n   * good entry means a flake is invisible to the operator.\n   */\n  private readonly lastGood = new Map<string, readonly AddonPageInfo[]>()\n\n  /** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */\n  private readonly retryTimers = new Map<string, NodeJS.Timeout>()\n\n  constructor() { super({}) }\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    this.resolvedPaths = await this.resolvePaths()\n\n    const provider: IAddonPagesAggregatorProvider = {\n      listPages: async (): Promise<readonly AddonPageInfo[]> => this.aggregate(),\n    }\n\n    this.ctx.logger.info('Initialized — aggregating addon-pages-source providers')\n    return [{ capability: addonPagesCapability, provider }]\n  }\n\n  protected async onShutdown(): Promise<void> {\n    for (const t of this.retryTimers.values()) clearTimeout(t)\n    this.retryTimers.clear()\n    this.lastGood.clear()\n  }\n\n  // ── Aggregation ───────────────────────────────────────────────────\n\n  private async aggregate(): Promise<readonly AddonPageInfo[]> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const out: AddonPageInfo[] = []\n    const seenIds = new Set<string>()\n\n    for (const source of sources) {\n      seenIds.add(source.id)\n      try {\n        // listPages() may be async for remote Moleculer providers.\n        const pages = await Promise.resolve(source.listPages())\n        const enriched: AddonPageInfo[] = pages.map((page) => ({\n          addonId: source.id,\n          page,\n          bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n        }))\n        for (const item of enriched) out.push(item)\n        // Cache successful snapshot — used as fallback on next failure.\n        this.lastGood.set(source.id, enriched)\n      } catch (err: unknown) {\n        const message = errMsg(err)\n        this.ctx.logger.warn('addon-pages-source provider failed', {\n          meta: { sourceId: source.id, error: message },\n        })\n        // Fall back to the last-good snapshot for this source so a\n        // transient Moleculer service-discovery race (cap registered\n        // but action not yet callable) doesn't blank the sidebar.\n        const cached = this.lastGood.get(source.id)\n        if (cached !== undefined) {\n          for (const item of cached) out.push(item)\n          this.ctx.logger.info('addon-pages-source falling back to cached snapshot', {\n            meta: { sourceId: source.id, cachedPages: cached.length },\n          })\n        }\n        // Schedule a background retry. On success we re-emit\n        // `AddonPageReady` so admin-ui's queryClient invalidates and\n        // any newly-loaded pages show up without a manual reload.\n        this.scheduleRetry(source.id)\n      }\n    }\n\n    // Drop cache entries for sources that have disappeared from the\n    // registry — keeps the fallback aligned with the live collection.\n    for (const cachedId of this.lastGood.keys()) {\n      if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId)\n    }\n\n    return out\n  }\n\n  // ── Retry on transient Moleculer race ─────────────────────────────\n\n  /**\n   * Schedule background re-call of `listPages()` on a source that just\n   * failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful\n   * call updates the cache and emits `AddonPageReady` so the admin UI\n   * invalidates its query. Stops on first success or after the schedule\n   * is exhausted.\n   */\n  private scheduleRetry(sourceId: string, attempt = 0): void {\n    if (attempt >= RETRY_BACKOFF_MS.length) return\n    if (this.retryTimers.has(sourceId)) return // already pending\n\n    const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1]!\n    const timer = setTimeout(() => {\n      this.retryTimers.delete(sourceId)\n      void this.retrySource(sourceId, attempt)\n    }, delayMs)\n    this.retryTimers.set(sourceId, timer)\n  }\n\n  private async retrySource(sourceId: string, attempt: number): Promise<void> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const source = sources.find((s) => s.id === sourceId)\n    if (!source) return // provider went away; nothing to retry\n\n    try {\n      const pages = await Promise.resolve(source.listPages())\n      const enriched: AddonPageInfo[] = pages.map((page) => ({\n        addonId: source.id,\n        page,\n        bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n      }))\n      this.lastGood.set(source.id, enriched)\n      this.ctx.logger.info('addon-pages-source recovered after retry', {\n        meta: { sourceId, attempt: attempt + 1, pages: enriched.length },\n      })\n      // Re-emit AddonPageReady so admin-ui invalidates and refetches.\n      this.ctx.eventBus.emit({\n        id: randomUUID(),\n        timestamp: new Date(),\n        source: { type: 'addon', id: this.id },\n        category: EventCategory.AddonPageReady,\n        data: { addonId: sourceId, recovered: true },\n      })\n    } catch (err: unknown) {\n      this.ctx.logger.debug('addon-pages-source retry failed', {\n        meta: { sourceId, attempt: attempt + 1, error: errMsg(err) },\n      })\n      this.scheduleRetry(sourceId, attempt + 1)\n    }\n  }\n\n  // ── Bundle URL stamping ──────────────────────────────────────────\n\n  /**\n   * Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back\n   * to `Date.now()` when the bundle path can't be stat'd (remote addon\n   * with no local file, addon not yet on disk, etc.) — the browser\n   * just gets a fresh URL on each call instead of cache-friendly mtime.\n   */\n  private makeBundleUrl(addonId: string, bundle: string): string {\n    const bundlePath = this.resolveBundlePath(addonId, bundle)\n    let mtime = Date.now()\n    if (bundlePath !== null) {\n      try { mtime = fs.statSync(bundlePath).mtimeMs }\n      catch { /* remote addon — no local file */ }\n    }\n    const v = Math.floor(mtime)\n    return `/api/addon-pages/${addonId}/${bundle}?v=${v}`\n  }\n\n  /**\n   * Resolve the local filesystem path for an addon's bundle. Mirrors\n   * `AddonPagesService.resolveBundle` (server-side), but without the\n   * existence / traversal checks — those still live on the server's\n   * static file route. We only need a stat-able path here for the\n   * `mtime` cache-buster.\n   */\n  private resolveBundlePath(addonId: string, bundle: string): string | null {\n    const paths = this.resolvedPaths\n    if (!paths) return null\n    const addonDistPath = path.join(paths.addonsDir, '@camstack', `addon-${addonId}`, 'dist')\n    const resolvedBase = path.resolve(addonDistPath)\n    const resolvedFile = path.resolve(addonDistPath, bundle)\n    if (!resolvedFile.startsWith(resolvedBase + path.sep) && resolvedFile !== resolvedBase) {\n      return null\n    }\n    return resolvedFile\n  }\n\n  // ── Path resolution ──────────────────────────────────────────────\n\n  /**\n   * Read `server.dataPath` from the cluster yml-backed sections (same\n   * source the server uses at boot), then derive the addons directory\n   * from it. Falls back to `camstack-data/addons` when no settings API\n   * is available — agents and isolated tests don't see this addon, so\n   * the fallback is purely defensive.\n   */\n  private async resolvePaths(): Promise<ResolvedPaths> {\n    const fallback: ResolvedPaths = { addonsDir: path.resolve('camstack-data', 'addons') }\n    if (!this.ctx.settings) return fallback\n    try {\n      const server = await this.ctx.settings.getSection('server')\n      const dataPath = typeof server['dataPath'] === 'string' && server['dataPath']\n        ? server['dataPath']\n        : 'camstack-data'\n      return { addonsDir: path.resolve(dataPath, 'addons') }\n    } catch (err: unknown) {\n      this.ctx.logger.debug('Failed to read server.dataPath — falling back', {\n        meta: { error: errMsg(err) },\n      })\n      return fallback\n    }\n  }\n}\n\nexport default AddonPagesAggregatorAddon\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACsBA,WAAsB;AACtB,SAAoB;AACpB,yBAA2B;AAC3B,mBASO;AAmBP,IAAM,mBAAsC,CAAC,KAAK,MAAM,GAAI;AAErD,IAAM,4BAAN,cAAwC,uBAAU;AAAA,EAC9C,KAAK;AAAA,EAEN,gBAAsC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAU7B,WAAW,oBAAI,IAAsC;AAAA;AAAA,EAGrD,cAAc,oBAAI,IAA4B;AAAA,EAE/D,cAAc;AAAE,UAAM,CAAC,CAAC;AAAA,EAAE;AAAA,EAE1B,MAAgB,eAAgD;AAC9D,SAAK,gBAAgB,MAAM,KAAK,aAAa;AAE7C,UAAM,WAA0C;AAAA,MAC9C,WAAW,YAA+C,KAAK,UAAU;AAAA,IAC3E;AAEA,SAAK,IAAI,OAAO,KAAK,6DAAwD;AAC7E,WAAO,CAAC,EAAE,YAAY,mCAAsB,SAAS,CAAC;AAAA,EACxD;AAAA,EAEA,MAAgB,aAA4B;AAC1C,eAAW,KAAK,KAAK,YAAY,OAAO,EAAG,cAAa,CAAC;AACzD,SAAK,YAAY,MAAM;AACvB,SAAK,SAAS,MAAM;AAAA,EACtB;AAAA;AAAA,EAIA,MAAc,YAA+C;AAC3D,UAAM,UAAU,KAAK,cAAc,cAAkC,oBAAoB,KAAK,CAAC;AAC/F,UAAM,MAAuB,CAAC;AAC9B,UAAM,UAAU,oBAAI,IAAY;AAEhC,eAAW,UAAU,SAAS;AAC5B,cAAQ,IAAI,OAAO,EAAE;AACrB,UAAI;AAEF,cAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO,UAAU,CAAC;AACtD,cAAM,WAA4B,MAAM,IAAI,CAAC,UAAU;AAAA,UACrD,SAAS,OAAO;AAAA,UAChB;AAAA,UACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,MAAM;AAAA,QACtD,EAAE;AACF,mBAAW,QAAQ,SAAU,KAAI,KAAK,IAAI;AAE1C,aAAK,SAAS,IAAI,OAAO,IAAI,QAAQ;AAAA,MACvC,SAAS,KAAc;AACrB,cAAM,cAAU,qBAAO,GAAG;AAC1B,aAAK,IAAI,OAAO,KAAK,sCAAsC;AAAA,UACzD,MAAM,EAAE,UAAU,OAAO,IAAI,OAAO,QAAQ;AAAA,QAC9C,CAAC;AAID,cAAM,SAAS,KAAK,SAAS,IAAI,OAAO,EAAE;AAC1C,YAAI,WAAW,QAAW;AACxB,qBAAW,QAAQ,OAAQ,KAAI,KAAK,IAAI;AACxC,eAAK,IAAI,OAAO,KAAK,sDAAsD;AAAA,YACzE,MAAM,EAAE,UAAU,OAAO,IAAI,aAAa,OAAO,OAAO;AAAA,UAC1D,CAAC;AAAA,QACH;AAIA,aAAK,cAAc,OAAO,EAAE;AAAA,MAC9B;AAAA,IACF;AAIA,eAAW,YAAY,KAAK,SAAS,KAAK,GAAG;AAC3C,UAAI,CAAC,QAAQ,IAAI,QAAQ,EAAG,MAAK,SAAS,OAAO,QAAQ;AAAA,IAC3D;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,cAAc,UAAkB,UAAU,GAAS;AACzD,QAAI,WAAW,iBAAiB,OAAQ;AACxC,QAAI,KAAK,YAAY,IAAI,QAAQ,EAAG;AAEpC,UAAM,UAAU,iBAAiB,OAAO,KAAK,iBAAiB,iBAAiB,SAAS,CAAC;AACzF,UAAM,QAAQ,WAAW,MAAM;AAC7B,WAAK,YAAY,OAAO,QAAQ;AAChC,WAAK,KAAK,YAAY,UAAU,OAAO;AAAA,IACzC,GAAG,OAAO;AACV,SAAK,YAAY,IAAI,UAAU,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,YAAY,UAAkB,SAAgC;AAC1E,UAAM,UAAU,KAAK,cAAc,cAAkC,oBAAoB,KAAK,CAAC;AAC/F,UAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ;AACpD,QAAI,CAAC,OAAQ;AAEb,QAAI;AACF,YAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO,UAAU,CAAC;AACtD,YAAM,WAA4B,MAAM,IAAI,CAAC,UAAU;AAAA,QACrD,SAAS,OAAO;AAAA,QAChB;AAAA,QACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,MAAM;AAAA,MACtD,EAAE;AACF,WAAK,SAAS,IAAI,OAAO,IAAI,QAAQ;AACrC,WAAK,IAAI,OAAO,KAAK,4CAA4C;AAAA,QAC/D,MAAM,EAAE,UAAU,SAAS,UAAU,GAAG,OAAO,SAAS,OAAO;AAAA,MACjE,CAAC;AAED,WAAK,IAAI,SAAS,KAAK;AAAA,QACrB,QAAI,+BAAW;AAAA,QACf,WAAW,oBAAI,KAAK;AAAA,QACpB,QAAQ,EAAE,MAAM,SAAS,IAAI,KAAK,GAAG;AAAA,QACrC,UAAU,2BAAc;AAAA,QACxB,MAAM,EAAE,SAAS,UAAU,WAAW,KAAK;AAAA,MAC7C,CAAC;AAAA,IACH,SAAS,KAAc;AACrB,WAAK,IAAI,OAAO,MAAM,mCAAmC;AAAA,QACvD,MAAM,EAAE,UAAU,SAAS,UAAU,GAAG,WAAO,qBAAO,GAAG,EAAE;AAAA,MAC7D,CAAC;AACD,WAAK,cAAc,UAAU,UAAU,CAAC;AAAA,IAC1C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,cAAc,SAAiB,QAAwB;AAC7D,UAAM,aAAa,KAAK,kBAAkB,SAAS,MAAM;AACzD,QAAI,QAAQ,KAAK,IAAI;AACrB,QAAI,eAAe,MAAM;AACvB,UAAI;AAAE,gBAAW,YAAS,UAAU,EAAE;AAAA,MAAQ,QACxC;AAAA,MAAqC;AAAA,IAC7C;AACA,UAAM,IAAI,KAAK,MAAM,KAAK;AAC1B,WAAO,oBAAoB,OAAO,IAAI,MAAM,MAAM,CAAC;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,kBAAkB,SAAiB,QAA+B;AACxE,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,gBAAqB,UAAK,MAAM,WAAW,aAAa,SAAS,OAAO,IAAI,MAAM;AACxF,UAAM,eAAoB,aAAQ,aAAa;AAC/C,UAAM,eAAoB,aAAQ,eAAe,MAAM;AACvD,QAAI,CAAC,aAAa,WAAW,eAAoB,QAAG,KAAK,iBAAiB,cAAc;AACtF,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAc,eAAuC;AACnD,UAAM,WAA0B,EAAE,WAAgB,aAAQ,iBAAiB,QAAQ,EAAE;AACrF,QAAI,CAAC,KAAK,IAAI,SAAU,QAAO;AAC/B,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,IAAI,SAAS,WAAW,QAAQ;AAC1D,YAAM,WAAW,OAAO,OAAO,UAAU,MAAM,YAAY,OAAO,UAAU,IACxE,OAAO,UAAU,IACjB;AACJ,aAAO,EAAE,WAAgB,aAAQ,UAAU,QAAQ,EAAE;AAAA,IACvD,SAAS,KAAc;AACrB,WAAK,IAAI,OAAO,MAAM,sDAAiD;AAAA,QACrE,MAAM,EAAE,WAAO,qBAAO,GAAG,EAAE;AAAA,MAC7B,CAAC;AACD,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,uCAAQ;","names":[]}

package/dist/builtins/addon-pages-aggregator/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/builtins/addon-widgets-aggregator/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/builtins/addon-widgets-aggregator/index.ts","../../../src/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.ts"],"sourcesContent":["export { AddonWidgetsAggregatorAddon, default } from './addon-widgets-aggregator.addon.js'\n","/**\n * Addon Widgets Aggregator — hub-local builtin that owns the singleton\n * `addon-widgets` cap.\n *\n * Mirrors `addon-pages-aggregator` exactly: walks every registered\n * `addon-widgets-source` (collection) provider and emits an enriched\n * widget metadata list with versioned `bundleUrl`s pointing at\n * `/api/addon-widgets/<addonId>/<bundle>?v=<mtime>`. The filesystem\n * `mtime` cache-buster lets the browser pick up addon rebuilds without\n * manual reload.\n *\n * The static file endpoint (`/api/addon-widgets/:addonId/*`) is served\n * by `AddonWidgetsService.resolveBundle()` on the server side; this\n * addon only owns the listing surface.\n *\n * Why a builtin: same reasoning as `addon-pages-aggregator`. The\n * aggregator is the de-facto \"addon-widgets provider\" — addons own caps,\n * not the server. Living in `@camstack/core/builtins` keeps the surface\n * symmetrical with `system-config`, `local-auth`, etc.\n */\nimport * as path from 'node:path'\nimport * as fs from 'node:fs'\nimport { randomUUID } from 'node:crypto'\nimport {\n  BaseAddon,\n  EventCategory,\n  addonWidgetsCapability,\n  errMsg,\n  type IAddonWidgetsAggregatorProvider,\n  type IAddonWidgetsSourceProvider,\n  type ProviderRegistration,\n} from '@camstack/types'\n\ninterface ResolvedPaths {\n  readonly addonsDir: string\n}\n\n/**\n * Inferred from the cap definition — equivalent to:\n * `z.infer<typeof EnrichedWidgetMetadataSchema>` but reuses the\n * provider's return type so the aggregator stays in lockstep with the\n * cap if its shape evolves.\n */\ntype EnrichedWidget = Awaited<ReturnType<IAddonWidgetsAggregatorProvider['listWidgets']>>[number]\ntype RawWidget = Awaited<ReturnType<IAddonWidgetsSourceProvider['listWidgets']>>[number]\n\n/**\n * Backoff schedule (ms) used to retry sources that failed during a\n * `listWidgets()` round-trip — typically because the cap was just\n * registered (provider connected via Moleculer) but the worker-side\n * action registration hadn't propagated yet, so `Service '...listWidgets'\n * is not found on '<node>'` raced ahead of the call.\n *\n * On success we re-emit `AddonWidgetReady` so admin-ui invalidates its\n * `addonWidgets.listWidgets` query and the registry populates without a\n * page reload.\n */\nconst RETRY_BACKOFF_MS: readonly number[] = [500, 1500, 4000]\n\nexport class AddonWidgetsAggregatorAddon extends BaseAddon {\n  readonly id = 'addon-widgets-aggregator'\n\n  private resolvedPaths: ResolvedPaths | null = null\n\n  /**\n   * Last successful `listWidgets()` snapshot per source. Used as the\n   * \"stale-but-valid\" fallback when a source transiently fails — drops\n   * happen often enough during boot (Moleculer service-discovery\n   * window) that swallowing the error and returning empty would leave\n   * the dashboard with nothing for several seconds. Keeping the\n   * previous good entry means a flake is invisible to the operator.\n   */\n  private readonly lastGood = new Map<string, readonly EnrichedWidget[]>()\n\n  /** In-flight retry guards keyed by sourceAddonId. Avoids double-scheduling. */\n  private readonly retryTimers = new Map<string, NodeJS.Timeout>()\n\n  constructor() { super({}) }\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    this.resolvedPaths = await this.resolvePaths()\n\n    const provider: IAddonWidgetsAggregatorProvider = {\n      listWidgets: async (): Promise<readonly EnrichedWidget[]> => this.aggregate(),\n    }\n\n    this.ctx.logger.info('Initialized — aggregating addon-widgets-source providers')\n    return [{ capability: addonWidgetsCapability, provider }]\n  }\n\n  protected async onShutdown(): Promise<void> {\n    for (const t of this.retryTimers.values()) clearTimeout(t)\n    this.retryTimers.clear()\n    this.lastGood.clear()\n  }\n\n  // ── Aggregation ───────────────────────────────────────────────────\n\n  private async aggregate(): Promise<readonly EnrichedWidget[]> {\n    // `getCollectionEntries` returns `[addonId, provider]` tuples — the\n    // raw `addon-widgets-source` cap doesn't carry an `id` on the\n    // provider (unlike the legacy `IAddonPageProvider`), so we lean on\n    // the registry to attribute each contribution back to its addon.\n    const entries = this.capabilities?.getCollectionEntries<IAddonWidgetsSourceProvider>('addon-widgets-source') ?? []\n    const out: EnrichedWidget[] = []\n    const seenIds = new Set<string>()\n\n    for (const [addonId, source] of entries) {\n      seenIds.add(addonId)\n      try {\n        const widgets = await Promise.resolve(source.listWidgets())\n        const enriched: EnrichedWidget[] = widgets.map((w: RawWidget) => ({\n          ...w,\n          addonId,\n          bundleUrl: this.makeBundleUrl(addonId, w.bundle),\n        }))\n        for (const item of enriched) out.push(item)\n        // Cache successful snapshot — used as fallback on next failure.\n        this.lastGood.set(addonId, enriched)\n      } catch (err: unknown) {\n        const message = errMsg(err)\n        this.ctx.logger.warn('addon-widgets-source provider failed', {\n          meta: { sourceId: addonId, error: message },\n        })\n        // Fall back to the last-good snapshot for this source so a\n        // transient Moleculer service-discovery race doesn't blank\n        // the dashboard.\n        const cached = this.lastGood.get(addonId)\n        if (cached !== undefined) {\n          for (const item of cached) out.push(item)\n          this.ctx.logger.info('addon-widgets-source falling back to cached snapshot', {\n            meta: { sourceId: addonId, cachedWidgets: cached.length },\n          })\n        }\n        // Schedule a background retry. On success we re-emit\n        // `AddonWidgetReady` so admin-ui's queryClient invalidates and\n        // any newly-loaded widgets show up without a manual reload.\n        this.scheduleRetry(addonId)\n      }\n    }\n\n    // Drop cache entries for sources that have disappeared from the\n    // registry — keeps the fallback aligned with the live collection.\n    for (const cachedId of this.lastGood.keys()) {\n      if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId)\n    }\n\n    return out\n  }\n\n  // ── Retry on transient Moleculer race ─────────────────────────────\n\n  private scheduleRetry(sourceId: string, attempt = 0): void {\n    if (attempt >= RETRY_BACKOFF_MS.length) return\n    if (this.retryTimers.has(sourceId)) return // already pending\n\n    const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1]!\n    const timer = setTimeout(() => {\n      this.retryTimers.delete(sourceId)\n      void this.retrySource(sourceId, attempt)\n    }, delayMs)\n    this.retryTimers.set(sourceId, timer)\n  }\n\n  private async retrySource(sourceId: string, attempt: number): Promise<void> {\n    const entries = this.capabilities?.getCollectionEntries<IAddonWidgetsSourceProvider>('addon-widgets-source') ?? []\n    const found = entries.find(([id]) => id === sourceId)\n    if (!found) return // provider went away; nothing to retry\n    const [addonId, source] = found\n\n    try {\n      const widgets = await Promise.resolve(source.listWidgets())\n      const enriched: EnrichedWidget[] = widgets.map((w: RawWidget) => ({\n        ...w,\n        addonId,\n        bundleUrl: this.makeBundleUrl(addonId, w.bundle),\n      }))\n      this.lastGood.set(addonId, enriched)\n      this.ctx.logger.info('addon-widgets-source recovered after retry', {\n        meta: { sourceId: addonId, attempt: attempt + 1, widgets: enriched.length },\n      })\n      // Re-emit AddonWidgetReady so admin-ui invalidates and refetches.\n      this.ctx.eventBus.emit({\n        id: randomUUID(),\n        timestamp: new Date(),\n        source: { type: 'addon', id: this.id },\n        category: EventCategory.AddonWidgetReady,\n        data: { addonId, recovered: true },\n      })\n    } catch (err: unknown) {\n      this.ctx.logger.debug('addon-widgets-source retry failed', {\n        meta: { sourceId, attempt: attempt + 1, error: errMsg(err) },\n      })\n      this.scheduleRetry(sourceId, attempt + 1)\n    }\n  }\n\n  // ── Bundle URL stamping ──────────────────────────────────────────\n\n  /**\n   * Build `/api/addon-widgets/<addonId>/<bundle>?v=<mtime>`. Falls back\n   * to `Date.now()` when the bundle path can't be stat'd (remote addon\n   * with no local file, addon not yet on disk, etc.) — the browser\n   * just gets a fresh URL on each call instead of cache-friendly mtime.\n   */\n  private makeBundleUrl(addonId: string, bundle: string): string {\n    const bundlePath = this.resolveBundlePath(addonId, bundle)\n    let mtime = Date.now()\n    if (bundlePath !== null) {\n      try { mtime = fs.statSync(bundlePath).mtimeMs }\n      catch { /* remote addon — no local file */ }\n    }\n    const v = Math.floor(mtime)\n    return `/api/addon-widgets/${addonId}/${bundle}?v=${v}`\n  }\n\n  private resolveBundlePath(addonId: string, bundle: string): string | null {\n    const paths = this.resolvedPaths\n    if (!paths) return null\n    const addonDistPath = path.join(paths.addonsDir, '@camstack', `addon-${addonId}`, 'dist')\n    const resolvedBase = path.resolve(addonDistPath)\n    const resolvedFile = path.resolve(addonDistPath, bundle)\n    if (!resolvedFile.startsWith(resolvedBase + path.sep) && resolvedFile !== resolvedBase) {\n      return null\n    }\n    return resolvedFile\n  }\n\n  // ── Path resolution ──────────────────────────────────────────────\n\n  private async resolvePaths(): Promise<ResolvedPaths> {\n    const fallback: ResolvedPaths = { addonsDir: path.resolve('camstack-data', 'addons') }\n    if (!this.ctx.settings) return fallback\n    try {\n      const server = await this.ctx.settings.getSection('server')\n      const dataPath = typeof server['dataPath'] === 'string' && server['dataPath']\n        ? server['dataPath']\n        : 'camstack-data'\n      return { addonsDir: path.resolve(dataPath, 'addons') }\n    } catch (err: unknown) {\n      this.ctx.logger.debug('Failed to read server.dataPath — falling back', {\n        meta: { error: errMsg(err) },\n      })\n      return fallback\n    }\n  }\n}\n\nexport default AddonWidgetsAggregatorAddon\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACoBA,WAAsB;AACtB,SAAoB;AACpB,yBAA2B;AAC3B,mBAQO;AA0BP,IAAM,mBAAsC,CAAC,KAAK,MAAM,GAAI;AAErD,IAAM,8BAAN,cAA0C,uBAAU;AAAA,EAChD,KAAK;AAAA,EAEN,gBAAsC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAU7B,WAAW,oBAAI,IAAuC;AAAA;AAAA,EAGtD,cAAc,oBAAI,IAA4B;AAAA,EAE/D,cAAc;AAAE,UAAM,CAAC,CAAC;AAAA,EAAE;AAAA,EAE1B,MAAgB,eAAgD;AAC9D,SAAK,gBAAgB,MAAM,KAAK,aAAa;AAE7C,UAAM,WAA4C;AAAA,MAChD,aAAa,YAAgD,KAAK,UAAU;AAAA,IAC9E;AAEA,SAAK,IAAI,OAAO,KAAK,+DAA0D;AAC/E,WAAO,CAAC,EAAE,YAAY,qCAAwB,SAAS,CAAC;AAAA,EAC1D;AAAA,EAEA,MAAgB,aAA4B;AAC1C,eAAW,KAAK,KAAK,YAAY,OAAO,EAAG,cAAa,CAAC;AACzD,SAAK,YAAY,MAAM;AACvB,SAAK,SAAS,MAAM;AAAA,EACtB;AAAA;AAAA,EAIA,MAAc,YAAgD;AAK5D,UAAM,UAAU,KAAK,cAAc,qBAAkD,sBAAsB,KAAK,CAAC;AACjH,UAAM,MAAwB,CAAC;AAC/B,UAAM,UAAU,oBAAI,IAAY;AAEhC,eAAW,CAAC,SAAS,MAAM,KAAK,SAAS;AACvC,cAAQ,IAAI,OAAO;AACnB,UAAI;AACF,cAAM,UAAU,MAAM,QAAQ,QAAQ,OAAO,YAAY,CAAC;AAC1D,cAAM,WAA6B,QAAQ,IAAI,CAAC,OAAkB;AAAA,UAChE,GAAG;AAAA,UACH;AAAA,UACA,WAAW,KAAK,cAAc,SAAS,EAAE,MAAM;AAAA,QACjD,EAAE;AACF,mBAAW,QAAQ,SAAU,KAAI,KAAK,IAAI;AAE1C,aAAK,SAAS,IAAI,SAAS,QAAQ;AAAA,MACrC,SAAS,KAAc;AACrB,cAAM,cAAU,qBAAO,GAAG;AAC1B,aAAK,IAAI,OAAO,KAAK,wCAAwC;AAAA,UAC3D,MAAM,EAAE,UAAU,SAAS,OAAO,QAAQ;AAAA,QAC5C,CAAC;AAID,cAAM,SAAS,KAAK,SAAS,IAAI,OAAO;AACxC,YAAI,WAAW,QAAW;AACxB,qBAAW,QAAQ,OAAQ,KAAI,KAAK,IAAI;AACxC,eAAK,IAAI,OAAO,KAAK,wDAAwD;AAAA,YAC3E,MAAM,EAAE,UAAU,SAAS,eAAe,OAAO,OAAO;AAAA,UAC1D,CAAC;AAAA,QACH;AAIA,aAAK,cAAc,OAAO;AAAA,MAC5B;AAAA,IACF;AAIA,eAAW,YAAY,KAAK,SAAS,KAAK,GAAG;AAC3C,UAAI,CAAC,QAAQ,IAAI,QAAQ,EAAG,MAAK,SAAS,OAAO,QAAQ;AAAA,IAC3D;AAEA,WAAO;AAAA,EACT;AAAA;AAAA,EAIQ,cAAc,UAAkB,UAAU,GAAS;AACzD,QAAI,WAAW,iBAAiB,OAAQ;AACxC,QAAI,KAAK,YAAY,IAAI,QAAQ,EAAG;AAEpC,UAAM,UAAU,iBAAiB,OAAO,KAAK,iBAAiB,iBAAiB,SAAS,CAAC;AACzF,UAAM,QAAQ,WAAW,MAAM;AAC7B,WAAK,YAAY,OAAO,QAAQ;AAChC,WAAK,KAAK,YAAY,UAAU,OAAO;AAAA,IACzC,GAAG,OAAO;AACV,SAAK,YAAY,IAAI,UAAU,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,YAAY,UAAkB,SAAgC;AAC1E,UAAM,UAAU,KAAK,cAAc,qBAAkD,sBAAsB,KAAK,CAAC;AACjH,UAAM,QAAQ,QAAQ,KAAK,CAAC,CAAC,EAAE,MAAM,OAAO,QAAQ;AACpD,QAAI,CAAC,MAAO;AACZ,UAAM,CAAC,SAAS,MAAM,IAAI;AAE1B,QAAI;AACF,YAAM,UAAU,MAAM,QAAQ,QAAQ,OAAO,YAAY,CAAC;AAC1D,YAAM,WAA6B,QAAQ,IAAI,CAAC,OAAkB;AAAA,QAChE,GAAG;AAAA,QACH;AAAA,QACA,WAAW,KAAK,cAAc,SAAS,EAAE,MAAM;AAAA,MACjD,EAAE;AACF,WAAK,SAAS,IAAI,SAAS,QAAQ;AACnC,WAAK,IAAI,OAAO,KAAK,8CAA8C;AAAA,QACjE,MAAM,EAAE,UAAU,SAAS,SAAS,UAAU,GAAG,SAAS,SAAS,OAAO;AAAA,MAC5E,CAAC;AAED,WAAK,IAAI,SAAS,KAAK;AAAA,QACrB,QAAI,+BAAW;AAAA,QACf,WAAW,oBAAI,KAAK;AAAA,QACpB,QAAQ,EAAE,MAAM,SAAS,IAAI,KAAK,GAAG;AAAA,QACrC,UAAU,2BAAc;AAAA,QACxB,MAAM,EAAE,SAAS,WAAW,KAAK;AAAA,MACnC,CAAC;AAAA,IACH,SAAS,KAAc;AACrB,WAAK,IAAI,OAAO,MAAM,qCAAqC;AAAA,QACzD,MAAM,EAAE,UAAU,SAAS,UAAU,GAAG,WAAO,qBAAO,GAAG,EAAE;AAAA,MAC7D,CAAC;AACD,WAAK,cAAc,UAAU,UAAU,CAAC;AAAA,IAC1C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,cAAc,SAAiB,QAAwB;AAC7D,UAAM,aAAa,KAAK,kBAAkB,SAAS,MAAM;AACzD,QAAI,QAAQ,KAAK,IAAI;AACrB,QAAI,eAAe,MAAM;AACvB,UAAI;AAAE,gBAAW,YAAS,UAAU,EAAE;AAAA,MAAQ,QACxC;AAAA,MAAqC;AAAA,IAC7C;AACA,UAAM,IAAI,KAAK,MAAM,KAAK;AAC1B,WAAO,sBAAsB,OAAO,IAAI,MAAM,MAAM,CAAC;AAAA,EACvD;AAAA,EAEQ,kBAAkB,SAAiB,QAA+B;AACxE,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,gBAAqB,UAAK,MAAM,WAAW,aAAa,SAAS,OAAO,IAAI,MAAM;AACxF,UAAM,eAAoB,aAAQ,aAAa;AAC/C,UAAM,eAAoB,aAAQ,eAAe,MAAM;AACvD,QAAI,CAAC,aAAa,WAAW,eAAoB,QAAG,KAAK,iBAAiB,cAAc;AACtF,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,MAAc,eAAuC;AACnD,UAAM,WAA0B,EAAE,WAAgB,aAAQ,iBAAiB,QAAQ,EAAE;AACrF,QAAI,CAAC,KAAK,IAAI,SAAU,QAAO;AAC/B,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,IAAI,SAAS,WAAW,QAAQ;AAC1D,YAAM,WAAW,OAAO,OAAO,UAAU,MAAM,YAAY,OAAO,UAAU,IACxE,OAAO,UAAU,IACjB;AACJ,aAAO,EAAE,WAAgB,aAAQ,UAAU,QAAQ,EAAE;AAAA,IACvD,SAAS,KAAc;AACrB,WAAK,IAAI,OAAO,MAAM,sDAAiD;AAAA,QACrE,MAAM,EAAE,WAAO,qBAAO,GAAG,EAAE;AAAA,MAC7B,CAAC;AACD,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,yCAAQ;","names":[]}

package/dist/builtins/addon-widgets-aggregator/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/builtins/alerts/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/builtins/alerts/index.ts","../../../src/builtins/alerts/alerts.addon.ts"],"sourcesContent":["export { AlertCenterAddon } from './alerts.addon.js'\n","import {\n  EventCategory,\n  type KnownEventCategory,\n  type SystemEvent,\n  type ProviderRegistration,\n} from '@camstack/types'\nimport type { Alert, AlertSeverity, AlertStatus } from '@camstack/types'\nimport { BaseAddon, AlertSchema, alertsCapability, createEvent , errMsg } from '@camstack/types'\n\n// ── Category → severity mapping ─────────────────────────────────────\n\ninterface CategoryMapping {\n  readonly severity: AlertSeverity\n  readonly titleTemplate: string\n}\n\nconst CATEGORY_MAPPINGS: Readonly<Record<string, CategoryMapping>> = {\n  // ── Critical — always surface ──────────────────────────────────────\n  'addon.crashed':                { severity: 'error',   titleTemplate: 'Addon crashed' },\n  'addon.error':                  { severity: 'error',   titleTemplate: 'Addon error' },\n  'process.crashed':              { severity: 'error',   titleTemplate: 'Process crashed' },\n  'recording.error':              { severity: 'error',   titleTemplate: 'Recording error' },\n  'recording.storage.critical':   { severity: 'warning', titleTemplate: 'Storage critical' },\n  'notification.failed':          { severity: 'error',   titleTemplate: 'Notification failed' },\n\n  // ── Cluster — agent connect/disconnect ─────────────────────────────\n  'agent.online':                 { severity: 'info',    titleTemplate: 'Agent connected' },\n  'agent.offline':                { severity: 'warning', titleTemplate: 'Agent disconnected' },\n\n  // ── System lifecycle ──────────────────────────────────────────────\n  'system.boot':                  { severity: 'info',    titleTemplate: 'System boot' },\n  'system.restarting':            { severity: 'warning', titleTemplate: 'System restarting' },\n\n  // ── Device lifecycle (add/remove only, not settings tweaks) ───────\n  'device.registered':            { severity: 'info',    titleTemplate: 'Device registered' },\n  'device.unregistered':          { severity: 'warning', titleTemplate: 'Device unregistered' },\n\n  // ── Package management ────────────────────────────────────────────\n  'addon.installed':              { severity: 'info',    titleTemplate: 'Addon installed' },\n  'addon.updated':                { severity: 'info',    titleTemplate: 'Addon updated' },\n  'addon.uninstalled':            { severity: 'info',    titleTemplate: 'Addon uninstalled' },\n\n  // ── Backup (rare, important) ──────────────────────────────────────\n  'backup.completed':             { severity: 'info',    titleTemplate: 'Backup completed' },\n  'backup.restored':              { severity: 'info',    titleTemplate: 'Backup restored' },\n\n  // ── Model downloads (in-progress merging path) ────────────────────\n  'model.download.progress':      { severity: 'info',    titleTemplate: 'Model download' },\n}\n\nconst TRACKED_CATEGORIES = Object.keys(CATEGORY_MAPPINGS)\n\n/**\n * `[ALERT-CENTER-EVENTS]` — rate limiting. Events that fire thousands of\n * times a minute (flaky cam reconnecting, chatty integration, …) would\n * flood the alert feed and push genuinely important alerts off the\n * visible page. We collapse bursts into a single throttled summary per\n * `(category, source.id)` tuple: the first N events within the window\n * still surface as individual alerts, but once the source crosses the\n * threshold we stop emitting alerts for it and wait out the window.\n *\n * A standalone category-count map is cleared on every window rollover.\n * Keep the threshold generous enough that legitimate bursts of ~a few\n * per minute still get through, but strict enough that a reconnect loop\n * firing every second gets muted.\n */\nconst RATE_LIMIT_WINDOW_MS = 60_000\nconst RATE_LIMIT_MAX_PER_SOURCE = 5\n\n/** Parse a raw settings record into a validated Alert. */\nfunction parseAlert(record: { id: string; data: Record<string, unknown> }): Alert {\n  return AlertSchema.parse({ id: record.id, ...record.data })\n}\n\n// ── Alert Center Addon ─────────────────────────────────────────────\n\ninterface AlertCenterConfig {\n  readonly maxAlerts: number\n  readonly retentionDays: number\n}\n\nconst DEFAULT_CONFIG: AlertCenterConfig = {\n  maxAlerts: 500,\n  retentionDays: 30,\n}\n\nconst ALERTS_COLLECTION = 'alerts'\nconst EVENT_SOURCE = { type: 'addon', id: 'alert-center' } as const\n\n/**\n * Alert Center addon — core builtin that persists alerts in a\n * structured SQLite table and serves them to the admin UI.\n *\n * Registers as an `alerts` collection provider and subscribes to\n * important EventBus categories to create/update alerts automatically.\n */\nexport class AlertCenterAddon extends BaseAddon<AlertCenterConfig> {\n  private unsubscribers: readonly (() => void)[] = []\n\n  constructor() {\n    super({ ...DEFAULT_CONFIG })\n  }\n\n  /**\n   * Per `(category, source.id)` counter used to rate-limit chatty\n   * events. Entries are pruned lazily when they age out of\n   * `RATE_LIMIT_WINDOW_MS`; see `shouldSuppressByRate()` below.\n   */\n  private readonly rateLimitCounters = new Map<string, { firstAt: number; count: number; suppressedLogged: boolean }>()\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    const alertsProvider = {\n      emit: (alert: Alert) => this.emitAlert(alert),\n      update: (input: { alertId: string; patch: Partial<Alert> }) =>\n        this.updateAlert(input.alertId, input.patch),\n      list: (filter?: { unreadOnly?: boolean; limit?: number }) =>\n        this.listAlerts(filter),\n      getUnreadCount: () => this.getUnreadCount(),\n      markRead: (input: { alertId: string }) => this.markRead(input.alertId),\n      markAllRead: () => this.markAllRead(),\n      dismiss: (input: { alertId: string }) => this.dismiss(input.alertId),\n    }\n\n    const unsubs: (() => void)[] = []\n    for (const category of TRACKED_CATEGORIES) {\n      const unsub = this.ctx.eventBus.subscribe(\n        { category: category as KnownEventCategory },\n        (event: SystemEvent) => { void this.handleEvent(category, event) },\n      )\n      unsubs.push(unsub)\n    }\n    this.unsubscribers = unsubs\n\n    this.ctx.logger.info('Initialized', { meta: { trackedCategoriesCount: TRACKED_CATEGORIES.length } })\n    return [{ capability: alertsCapability, provider: alertsProvider }]\n  }\n\n  protected async onShutdown(): Promise<void> {\n    for (const unsub of this.unsubscribers) {\n      unsub()\n    }\n    this.unsubscribers = []\n  }\n\n  protected globalSettingsSchema() {\n    return this.schema({\n      sections: [{\n        id: 'alerts',\n        title: 'Alert Center',\n        description: 'Configure alert storage and retention.',\n        columns: 1,\n        fields: [\n          this.field({\n            type: 'number', key: 'maxAlerts', label: 'Maximum stored alerts',\n            description: 'Oldest read alerts are deleted when this limit is exceeded.',\n            min: 50, max: 5000, step: 50, default: 500,\n          }),\n          this.field({\n            type: 'number', key: 'retentionDays', label: 'Alert retention (days)',\n            description: 'Alerts older than this are automatically removed.',\n            min: 1, max: 365, step: 1, default: 30,\n          }),\n        ],\n      }],\n    })\n  }\n\n  // ── Public methods (called by the tRPC router) ────────────────────\n\n  async listAlerts(filter?: { unreadOnly?: boolean; limit?: number }): Promise<readonly Alert[]> {\n    const backend = this.ctx.api.settingsStore\n    if (!backend) return []\n\n    const whereClause: Record<string, unknown> = {}\n    if (filter?.unreadOnly) {\n      whereClause.read = false\n    }\n\n    const records = await backend.query.query({ collection: ALERTS_COLLECTION, filter: {\n      where: Object.keys(whereClause).length > 0 ? whereClause : undefined,\n      orderBy: { field: 'updatedAt', direction: 'desc' },\n      limit: filter?.limit ?? 100,\n    } })\n\n    return records.map(parseAlert)\n  }\n\n  async getUnreadCount(): Promise<number> {\n    const backend = this.ctx.api.settingsStore\n    if (!backend) return 0\n\n    return backend.count.query({ collection: ALERTS_COLLECTION, filter: { where: { read: false } } })\n  }\n\n  async markRead(alertId: string): Promise<void> {\n    await this.mergeUpdate(alertId, { read: true, updatedAt: Date.now() })\n  }\n\n  async markAllRead(): Promise<void> {\n    const backend = this.ctx.api.settingsStore\n    if (!backend) return\n\n    const unread = await backend.query.query({ collection: ALERTS_COLLECTION, filter: { where: { read: false } } })\n    const now = Date.now()\n    for (const record of unread) {\n      await this.mergeUpdate(record.id, { read: true, updatedAt: now })\n    }\n  }\n\n  async dismiss(alertId: string): Promise<void> {\n    await this.mergeUpdate(alertId, {\n      status: 'dismissed' satisfies AlertStatus,\n      read: true,\n      updatedAt: Date.now(),\n    })\n  }\n\n  // ── Private: event handling ──────────────────────────────────────\n\n  private async handleEvent(category: string, event: SystemEvent): Promise<void> {\n    try {\n      if (category === 'model.download.progress') {\n        // Model download progress has its own in-progress merging path\n        // that intentionally overwrites a single alert per model, so\n        // rate limiting does not apply here — the merger itself is the\n        // collapse mechanism.\n        await this.handleModelDownload(event)\n        return\n      }\n\n      const mapping = CATEGORY_MAPPINGS[category]\n      if (!mapping) return\n\n      if (this.shouldSuppressByRate(category, event)) return\n\n      const message = this.buildMessage(category, event.data)\n      const alert: Alert = {\n        id: crypto.randomUUID(),\n        category,\n        severity: mapping.severity,\n        title: mapping.titleTemplate,\n        message,\n        status: 'active',\n        read: false,\n        createdAt: Date.now(),\n        updatedAt: Date.now(),\n        source: event.source ? { type: event.source.type, id: String(event.source.id) } : undefined,\n        metadata: event.data,\n      }\n\n      await this.emitAlert(alert)\n    } catch (err) {\n      this.ctx.logger?.warn(\n        'Failed to handle event',\n        { meta: { category, error: errMsg(err) } },\n      )\n    }\n  }\n\n  private async handleModelDownload(event: SystemEvent): Promise<void> {\n    const data = event.data\n    const modelId = (data.modelId as string | undefined) ?? 'unknown'\n    const progress = (data.progress as number | undefined) ?? 0\n    const stableId = `model-download:${modelId}`\n\n    const backend = this.ctx.api.settingsStore\n    if (!backend) return\n\n    // Check if an in-progress alert already exists for this model\n    const existing = await backend.query.query({ collection: ALERTS_COLLECTION, filter: {\n      where: { id: stableId },\n    } })\n\n    if (existing.length > 0) {\n      // Update existing alert (read-merge-write)\n      const now = Date.now()\n      if (progress >= 100) {\n        await this.mergeUpdate(stableId, {\n          status: 'completed' satisfies AlertStatus,\n          progress: 100,\n          message: `Model \"${modelId}\" download completed`,\n          updatedAt: now,\n        })\n        this.emitAlertUpdatedEvent(stableId, { status: 'completed', progress: 100 })\n      } else if (progress < 0) {\n        await this.mergeUpdate(stableId, {\n          status: 'failed' satisfies AlertStatus,\n          message: `Model \"${modelId}\" download failed`,\n          updatedAt: now,\n        })\n        this.emitAlertUpdatedEvent(stableId, { status: 'failed' })\n      } else {\n        await this.mergeUpdate(stableId, {\n          progress,\n          message: `Downloading model \"${modelId}\" — ${String(Math.round(progress))}%`,\n          updatedAt: now,\n        })\n        this.emitAlertUpdatedEvent(stableId, { progress })\n      }\n    } else {\n      // Create new in-progress alert\n      const alert: Alert = {\n        id: stableId,\n        category: EventCategory.ModelDownloadProgress,\n        severity: 'info',\n        title: 'Model download',\n        message: `Downloading model \"${modelId}\" — ${String(Math.round(progress))}%`,\n        status: 'in-progress',\n        progress,\n        read: false,\n        createdAt: Date.now(),\n        updatedAt: Date.now(),\n        source: event.source ? { type: event.source.type, id: String(event.source.id) } : undefined,\n        metadata: { modelId },\n      }\n\n      await this.persistAlert(alert)\n      this.emitAlertCreatedEvent(alert)\n    }\n  }\n\n  /**\n   * `[ALERT-CENTER-EVENTS]` — rate limit a `(category, source.id)`\n   * tuple. Returns `true` when the caller should DROP this event\n   * without persisting an alert, and `false` when the alert should\n   * proceed normally.\n   *\n   * Heuristic: the first `RATE_LIMIT_MAX_PER_SOURCE` events within a\n   * `RATE_LIMIT_WINDOW_MS` window go through. Once the threshold is\n   * crossed, subsequent events are suppressed until the window rolls\n   * over. When the threshold is first crossed, the suppression is\n   * logged once so operators know why they're not seeing the follow-\n   * up alerts; after the window rolls over the next event is\n   * un-suppressed and starts a new window.\n   */\n  private shouldSuppressByRate(category: string, event: SystemEvent): boolean {\n    const sourceId = event.source?.id ?? 'unknown'\n    const key = `${category}::${sourceId}`\n    const now = Date.now()\n    const entry = this.rateLimitCounters.get(key)\n\n    if (!entry || now - entry.firstAt > RATE_LIMIT_WINDOW_MS) {\n      // First event of a new window — always allow, start the counter.\n      this.rateLimitCounters.set(key, { firstAt: now, count: 1, suppressedLogged: false })\n      return false\n    }\n\n    entry.count += 1\n    if (entry.count <= RATE_LIMIT_MAX_PER_SOURCE) return false\n\n    // Over threshold — suppress the rest of this window.\n    if (!entry.suppressedLogged) {\n      entry.suppressedLogged = true\n      this.ctx.logger?.info(\n        'rate-limiting suppressing remainder of window',\n        { meta: { category, sourceId, maxPerSource: RATE_LIMIT_MAX_PER_SOURCE, windowSeconds: RATE_LIMIT_WINDOW_MS / 1000 } },\n      )\n    }\n    return true\n  }\n\n  private buildMessage(category: string, data: Record<string, unknown>): string {\n    const addonId = data.addonId as string | undefined\n    const deviceId = data.deviceId as string | undefined\n    const error = data.error as string | undefined\n    const processId = data.processId as string | undefined\n\n    switch (category) {\n      case 'addon.crashed':\n        return `Addon \"${addonId ?? 'unknown'}\" crashed${error ? `: ${error}` : ''}`\n      case 'addon.error':\n        return `Addon \"${addonId ?? 'unknown'}\" error${error ? `: ${error}` : ''}`\n      case 'addon.installed':\n        return `Addon \"${addonId ?? 'unknown'}\" installed`\n      case 'addon.updated': {\n        const from = data.fromVersion as string | undefined\n        const to = data.toVersion as string | undefined\n        return `Addon \"${addonId ?? 'unknown'}\" updated${from && to ? ` from ${from} to ${to}` : ''}`\n      }\n      case 'addon.uninstalled':\n        return `Addon \"${addonId ?? 'unknown'}\" uninstalled`\n      case 'device.registered':\n        return `Device \"${data.name as string | undefined ?? deviceId ?? 'unknown'}\" registered`\n      case 'device.unregistered':\n        return `Device \"${deviceId ?? 'unknown'}\" unregistered`\n      case 'agent.online':\n        return `Agent \"${data.agentId as string | undefined ?? data.nodeId as string | undefined ?? 'unknown'}\" connected`\n      case 'agent.offline':\n        return `Agent \"${data.agentId as string | undefined ?? data.nodeId as string | undefined ?? 'unknown'}\" disconnected${data.reason ? `: ${String(data.reason)}` : ''}`\n      case 'backup.completed':\n        return `Backup completed${data.targetId ? ` (${String(data.targetId)})` : ''}`\n      case 'backup.restored':\n        return `Backup restored${data.source ? ` from ${String(data.source)}` : ''}`\n      case 'notification.failed':\n        return `Notification failed${error ? `: ${error}` : ''}`\n      case 'system.restarting':\n        return `System restarting${data.reason ? ` — ${String(data.reason)}` : ''}`\n      case 'recording.error':\n        return `Recording error on device \"${deviceId ?? 'unknown'}\"${error ? `: ${error}` : ''}`\n      case 'recording.storage.critical':\n        return `Storage critical for device \"${deviceId ?? 'unknown'}\"`\n      case 'system.boot':\n        return `System booted in \"${data.mode as string | undefined ?? 'unknown'}\" mode`\n      case 'process.crashed':\n        return `Process \"${processId ?? 'unknown'}\" crashed`\n      default:\n        return `Event: ${category}`\n    }\n  }\n\n  // ── Private: persistence ─────────────────────────────────────────\n\n  private async emitAlert(alert: Alert): Promise<void> {\n    await this.persistAlert(alert)\n    this.emitAlertCreatedEvent(alert)\n    await this.enforceMaxAlerts()\n    await this.enforceRetention()\n  }\n\n  private async updateAlert(alertId: string, patch: Partial<Alert>): Promise<void> {\n    await this.mergeUpdate(alertId, { ...patch, updatedAt: Date.now() })\n    this.emitAlertUpdatedEvent(alertId, patch)\n  }\n\n  /**\n   * Read-merge-write: SettingsBackend.update() replaces the entire `data` blob,\n   * so we must read the existing record, merge the patch, and write back.\n   */\n  private async mergeUpdate(id: string, patch: Record<string, unknown>): Promise<void> {\n    const backend = this.ctx.api.settingsStore\n    if (!backend) return\n\n    const raw = await backend.get.query({ collection: ALERTS_COLLECTION, key: id })\n    if (raw === null || raw === undefined || typeof raw !== 'object') return\n    const existing: Record<string, unknown> = Object.fromEntries(Object.entries(raw))\n    await backend.set.mutate({ collection: ALERTS_COLLECTION, key: id, value: { ...existing, ...patch } })\n  }\n\n  private async persistAlert(alert: Alert): Promise<void> {\n    const backend = this.ctx.api.settingsStore\n    if (!backend) return\n\n    // Serialize alert to a plain Record for SQLite JSON storage\n    const data: Record<string, unknown> = {\n      id: alert.id,\n      category: alert.category,\n      severity: alert.severity,\n      title: alert.title,\n      message: alert.message,\n      status: alert.status,\n      read: alert.read,\n      createdAt: alert.createdAt,\n      updatedAt: alert.updatedAt,\n      ...(alert.progress !== undefined ? { progress: alert.progress } : {}),\n      ...(alert.source ? { source: alert.source } : {}),\n      ...(alert.metadata ? { metadata: alert.metadata } : {}),\n    }\n    await backend.set.mutate({ collection: ALERTS_COLLECTION, key: alert.id, value: data })\n  }\n\n  private emitAlertCreatedEvent(alert: Alert): void {\n    this.ctx.eventBus?.emit(createEvent('alert.created', EVENT_SOURCE, {\n      id: alert.id,\n      category: alert.category,\n      severity: alert.severity,\n      title: alert.title,\n      status: alert.status,\n    }))\n  }\n\n  private emitAlertUpdatedEvent(alertId: string, patch: Partial<Alert>): void {\n    const patchRecord: Record<string, unknown> = {}\n    for (const [key, value] of Object.entries(patch)) {\n      patchRecord[key] = value\n    }\n    this.ctx.eventBus?.emit(createEvent('alert.updated', EVENT_SOURCE, {\n      alertId,\n      patch: patchRecord,\n    }))\n  }\n\n  private async enforceMaxAlerts(): Promise<void> {\n    const backend = this.ctx.api.settingsStore\n    if (!backend) return\n\n    const total = await backend.count.query({ collection: ALERTS_COLLECTION })\n    if (total <= this.config.maxAlerts) return\n\n    // Delete oldest read alerts\n    const excess = total - this.config.maxAlerts\n    const oldest = await backend.query.query({ collection: ALERTS_COLLECTION, filter: {\n      where: { read: true },\n      orderBy: { field: 'createdAt', direction: 'asc' },\n      limit: excess,\n    } })\n\n    for (const record of oldest) {\n      await backend.delete.mutate({ collection: ALERTS_COLLECTION, key: record.id })\n    }\n  }\n\n  private async enforceRetention(): Promise<void> {\n    const backend = this.ctx.api.settingsStore\n    if (!backend) return\n\n    const cutoff = Date.now() - this.config.retentionDays * 24 * 60 * 60 * 1000\n    const expired = await backend.query.query({ collection: ALERTS_COLLECTION, filter: {\n      where: { read: true },\n      orderBy: { field: 'createdAt', direction: 'asc' },\n    } })\n\n    for (const record of expired) {\n      if (Number(record.data['createdAt'] ?? 0) < cutoff) {\n        await backend.delete.mutate({ collection: ALERTS_COLLECTION, key: record.id })\n      }\n    }\n  }\n}\n\nexport default AlertCenterAddon\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,mBAKO;AAEP,IAAAA,gBAA+E;AAS/E,IAAM,oBAA+D;AAAA;AAAA,EAEnE,iBAAgC,EAAE,UAAU,SAAW,eAAe,gBAAgB;AAAA,EACtF,eAAgC,EAAE,UAAU,SAAW,eAAe,cAAc;AAAA,EACpF,mBAAgC,EAAE,UAAU,SAAW,eAAe,kBAAkB;AAAA,EACxF,mBAAgC,EAAE,UAAU,SAAW,eAAe,kBAAkB;AAAA,EACxF,8BAAgC,EAAE,UAAU,WAAW,eAAe,mBAAmB;AAAA,EACzF,uBAAgC,EAAE,UAAU,SAAW,eAAe,sBAAsB;AAAA;AAAA,EAG5F,gBAAgC,EAAE,UAAU,QAAW,eAAe,kBAAkB;AAAA,EACxF,iBAAgC,EAAE,UAAU,WAAW,eAAe,qBAAqB;AAAA;AAAA,EAG3F,eAAgC,EAAE,UAAU,QAAW,eAAe,cAAc;AAAA,EACpF,qBAAgC,EAAE,UAAU,WAAW,eAAe,oBAAoB;AAAA;AAAA,EAG1F,qBAAgC,EAAE,UAAU,QAAW,eAAe,oBAAoB;AAAA,EAC1F,uBAAgC,EAAE,UAAU,WAAW,eAAe,sBAAsB;AAAA;AAAA,EAG5F,mBAAgC,EAAE,UAAU,QAAW,eAAe,kBAAkB;AAAA,EACxF,iBAAgC,EAAE,UAAU,QAAW,eAAe,gBAAgB;AAAA,EACtF,qBAAgC,EAAE,UAAU,QAAW,eAAe,oBAAoB;AAAA;AAAA,EAG1F,oBAAgC,EAAE,UAAU,QAAW,eAAe,mBAAmB;AAAA,EACzF,mBAAgC,EAAE,UAAU,QAAW,eAAe,kBAAkB;AAAA;AAAA,EAGxF,2BAAgC,EAAE,UAAU,QAAW,eAAe,iBAAiB;AACzF;AAEA,IAAM,qBAAqB,OAAO,KAAK,iBAAiB;AAgBxD,IAAM,uBAAuB;AAC7B,IAAM,4BAA4B;AAGlC,SAAS,WAAW,QAA8D;AAChF,SAAO,0BAAY,MAAM,EAAE,IAAI,OAAO,IAAI,GAAG,OAAO,KAAK,CAAC;AAC5D;AASA,IAAM,iBAAoC;AAAA,EACxC,WAAW;AAAA,EACX,eAAe;AACjB;AAEA,IAAM,oBAAoB;AAC1B,IAAM,eAAe,EAAE,MAAM,SAAS,IAAI,eAAe;AASlD,IAAM,mBAAN,cAA+B,wBAA6B;AAAA,EACzD,gBAAyC,CAAC;AAAA,EAElD,cAAc;AACZ,UAAM,EAAE,GAAG,eAAe,CAAC;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOiB,oBAAoB,oBAAI,IAA2E;AAAA,EAEpH,MAAgB,eAAgD;AAC9D,UAAM,iBAAiB;AAAA,MACrB,MAAM,CAAC,UAAiB,KAAK,UAAU,KAAK;AAAA,MAC5C,QAAQ,CAAC,UACP,KAAK,YAAY,MAAM,SAAS,MAAM,KAAK;AAAA,MAC7C,MAAM,CAAC,WACL,KAAK,WAAW,MAAM;AAAA,MACxB,gBAAgB,MAAM,KAAK,eAAe;AAAA,MAC1C,UAAU,CAAC,UAA+B,KAAK,SAAS,MAAM,OAAO;AAAA,MACrE,aAAa,MAAM,KAAK,YAAY;AAAA,MACpC,SAAS,CAAC,UAA+B,KAAK,QAAQ,MAAM,OAAO;AAAA,IACrE;AAEA,UAAM,SAAyB,CAAC;AAChC,eAAW,YAAY,oBAAoB;AACzC,YAAM,QAAQ,KAAK,IAAI,SAAS;AAAA,QAC9B,EAAE,SAAyC;AAAA,QAC3C,CAAC,UAAuB;AAAE,eAAK,KAAK,YAAY,UAAU,KAAK;AAAA,QAAE;AAAA,MACnE;AACA,aAAO,KAAK,KAAK;AAAA,IACnB;AACA,SAAK,gBAAgB;AAErB,SAAK,IAAI,OAAO,KAAK,eAAe,EAAE,MAAM,EAAE,wBAAwB,mBAAmB,OAAO,EAAE,CAAC;AACnG,WAAO,CAAC,EAAE,YAAY,gCAAkB,UAAU,eAAe,CAAC;AAAA,EACpE;AAAA,EAEA,MAAgB,aAA4B;AAC1C,eAAW,SAAS,KAAK,eAAe;AACtC,YAAM;AAAA,IACR;AACA,SAAK,gBAAgB,CAAC;AAAA,EACxB;AAAA,EAEU,uBAAuB;AAC/B,WAAO,KAAK,OAAO;AAAA,MACjB,UAAU,CAAC;AAAA,QACT,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,aAAa;AAAA,QACb,SAAS;AAAA,QACT,QAAQ;AAAA,UACN,KAAK,MAAM;AAAA,YACT,MAAM;AAAA,YAAU,KAAK;AAAA,YAAa,OAAO;AAAA,YACzC,aAAa;AAAA,YACb,KAAK;AAAA,YAAI,KAAK;AAAA,YAAM,MAAM;AAAA,YAAI,SAAS;AAAA,UACzC,CAAC;AAAA,UACD,KAAK,MAAM;AAAA,YACT,MAAM;AAAA,YAAU,KAAK;AAAA,YAAiB,OAAO;AAAA,YAC7C,aAAa;AAAA,YACb,KAAK;AAAA,YAAG,KAAK;AAAA,YAAK,MAAM;AAAA,YAAG,SAAS;AAAA,UACtC,CAAC;AAAA,QACH;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA,EAIA,MAAM,WAAW,QAA8E;AAC7F,UAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,QAAI,CAAC,QAAS,QAAO,CAAC;AAEtB,UAAM,cAAuC,CAAC;AAC9C,QAAI,QAAQ,YAAY;AACtB,kBAAY,OAAO;AAAA,IACrB;AAEA,UAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,EAAE,YAAY,mBAAmB,QAAQ;AAAA,MACjF,OAAO,OAAO,KAAK,WAAW,EAAE,SAAS,IAAI,cAAc;AAAA,MAC3D,SAAS,EAAE,OAAO,aAAa,WAAW,OAAO;AAAA,MACjD,OAAO,QAAQ,SAAS;AAAA,IAC1B,EAAE,CAAC;AAEH,WAAO,QAAQ,IAAI,UAAU;AAAA,EAC/B;AAAA,EAEA,MAAM,iBAAkC;AACtC,UAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,QAAI,CAAC,QAAS,QAAO;AAErB,WAAO,QAAQ,MAAM,MAAM,EAAE,YAAY,mBAAmB,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,EAAE,EAAE,CAAC;AAAA,EAClG;AAAA,EAEA,MAAM,SAAS,SAAgC;AAC7C,UAAM,KAAK,YAAY,SAAS,EAAE,MAAM,MAAM,WAAW,KAAK,IAAI,EAAE,CAAC;AAAA,EACvE;AAAA,EAEA,MAAM,cAA6B;AACjC,UAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,QAAI,CAAC,QAAS;AAEd,UAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,EAAE,YAAY,mBAAmB,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,EAAE,EAAE,CAAC;AAC9G,UAAM,MAAM,KAAK,IAAI;AACrB,eAAW,UAAU,QAAQ;AAC3B,YAAM,KAAK,YAAY,OAAO,IAAI,EAAE,MAAM,MAAM,WAAW,IAAI,CAAC;AAAA,IAClE;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,SAAgC;AAC5C,UAAM,KAAK,YAAY,SAAS;AAAA,MAC9B,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,WAAW,KAAK,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AAAA;AAAA,EAIA,MAAc,YAAY,UAAkB,OAAmC;AAC7E,QAAI;AACF,UAAI,aAAa,2BAA2B;AAK1C,cAAM,KAAK,oBAAoB,KAAK;AACpC;AAAA,MACF;AAEA,YAAM,UAAU,kBAAkB,QAAQ;AAC1C,UAAI,CAAC,QAAS;AAEd,UAAI,KAAK,qBAAqB,UAAU,KAAK,EAAG;AAEhD,YAAM,UAAU,KAAK,aAAa,UAAU,MAAM,IAAI;AACtD,YAAM,QAAe;AAAA,QACnB,IAAI,OAAO,WAAW;AAAA,QACtB;AAAA,QACA,UAAU,QAAQ;AAAA,QAClB,OAAO,QAAQ;AAAA,QACf;AAAA,QACA,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,WAAW,KAAK,IAAI;AAAA,QACpB,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ,MAAM,SAAS,EAAE,MAAM,MAAM,OAAO,MAAM,IAAI,OAAO,MAAM,OAAO,EAAE,EAAE,IAAI;AAAA,QAClF,UAAU,MAAM;AAAA,MAClB;AAEA,YAAM,KAAK,UAAU,KAAK;AAAA,IAC5B,SAAS,KAAK;AACZ,WAAK,IAAI,QAAQ;AAAA,QACf;AAAA,QACA,EAAE,MAAM,EAAE,UAAU,WAAO,sBAAO,GAAG,EAAE,EAAE;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,oBAAoB,OAAmC;AACnE,UAAM,OAAO,MAAM;AACnB,UAAM,UAAW,KAAK,WAAkC;AACxD,UAAM,WAAY,KAAK,YAAmC;AAC1D,UAAM,WAAW,kBAAkB,OAAO;AAE1C,UAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,QAAI,CAAC,QAAS;AAGd,UAAM,WAAW,MAAM,QAAQ,MAAM,MAAM,EAAE,YAAY,mBAAmB,QAAQ;AAAA,MAClF,OAAO,EAAE,IAAI,SAAS;AAAA,IACxB,EAAE,CAAC;AAEH,QAAI,SAAS,SAAS,GAAG;AAEvB,YAAM,MAAM,KAAK,IAAI;AACrB,UAAI,YAAY,KAAK;AACnB,cAAM,KAAK,YAAY,UAAU;AAAA,UAC/B,QAAQ;AAAA,UACR,UAAU;AAAA,UACV,SAAS,UAAU,OAAO;AAAA,UAC1B,WAAW;AAAA,QACb,CAAC;AACD,aAAK,sBAAsB,UAAU,EAAE,QAAQ,aAAa,UAAU,IAAI,CAAC;AAAA,MAC7E,WAAW,WAAW,GAAG;AACvB,cAAM,KAAK,YAAY,UAAU;AAAA,UAC/B,QAAQ;AAAA,UACR,SAAS,UAAU,OAAO;AAAA,UAC1B,WAAW;AAAA,QACb,CAAC;AACD,aAAK,sBAAsB,UAAU,EAAE,QAAQ,SAAS,CAAC;AAAA,MAC3D,OAAO;AACL,cAAM,KAAK,YAAY,UAAU;AAAA,UAC/B;AAAA,UACA,SAAS,sBAAsB,OAAO,YAAO,OAAO,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,UACzE,WAAW;AAAA,QACb,CAAC;AACD,aAAK,sBAAsB,UAAU,EAAE,SAAS,CAAC;AAAA,MACnD;AAAA,IACF,OAAO;AAEL,YAAM,QAAe;AAAA,QACnB,IAAI;AAAA,QACJ,UAAU,2BAAc;AAAA,QACxB,UAAU;AAAA,QACV,OAAO;AAAA,QACP,SAAS,sBAAsB,OAAO,YAAO,OAAO,KAAK,MAAM,QAAQ,CAAC,CAAC;AAAA,QACzE,QAAQ;AAAA,QACR;AAAA,QACA,MAAM;AAAA,QACN,WAAW,KAAK,IAAI;AAAA,QACpB,WAAW,KAAK,IAAI;AAAA,QACpB,QAAQ,MAAM,SAAS,EAAE,MAAM,MAAM,OAAO,MAAM,IAAI,OAAO,MAAM,OAAO,EAAE,EAAE,IAAI;AAAA,QAClF,UAAU,EAAE,QAAQ;AAAA,MACtB;AAEA,YAAM,KAAK,aAAa,KAAK;AAC7B,WAAK,sBAAsB,KAAK;AAAA,IAClC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,qBAAqB,UAAkB,OAA6B;AAC1E,UAAM,WAAW,MAAM,QAAQ,MAAM;AACrC,UAAM,MAAM,GAAG,QAAQ,KAAK,QAAQ;AACpC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,QAAQ,KAAK,kBAAkB,IAAI,GAAG;AAE5C,QAAI,CAAC,SAAS,MAAM,MAAM,UAAU,sBAAsB;AAExD,WAAK,kBAAkB,IAAI,KAAK,EAAE,SAAS,KAAK,OAAO,GAAG,kBAAkB,MAAM,CAAC;AACnF,aAAO;AAAA,IACT;AAEA,UAAM,SAAS;AACf,QAAI,MAAM,SAAS,0BAA2B,QAAO;AAGrD,QAAI,CAAC,MAAM,kBAAkB;AAC3B,YAAM,mBAAmB;AACzB,WAAK,IAAI,QAAQ;AAAA,QACf;AAAA,QACA,EAAE,MAAM,EAAE,UAAU,UAAU,cAAc,2BAA2B,eAAe,uBAAuB,IAAK,EAAE;AAAA,MACtH;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa,UAAkB,MAAuC;AAC5E,UAAM,UAAU,KAAK;AACrB,UAAM,WAAW,KAAK;AACtB,UAAM,QAAQ,KAAK;AACnB,UAAM,YAAY,KAAK;AAEvB,YAAQ,UAAU;AAAA,MAChB,KAAK;AACH,eAAO,UAAU,WAAW,SAAS,YAAY,QAAQ,KAAK,KAAK,KAAK,EAAE;AAAA,MAC5E,KAAK;AACH,eAAO,UAAU,WAAW,SAAS,UAAU,QAAQ,KAAK,KAAK,KAAK,EAAE;AAAA,MAC1E,KAAK;AACH,eAAO,UAAU,WAAW,SAAS;AAAA,MACvC,KAAK,iBAAiB;AACpB,cAAM,OAAO,KAAK;AAClB,cAAM,KAAK,KAAK;AAChB,eAAO,UAAU,WAAW,SAAS,YAAY,QAAQ,KAAK,SAAS,IAAI,OAAO,EAAE,KAAK,EAAE;AAAA,MAC7F;AAAA,MACA,KAAK;AACH,eAAO,UAAU,WAAW,SAAS;AAAA,MACvC,KAAK;AACH,eAAO,WAAW,KAAK,QAA8B,YAAY,SAAS;AAAA,MAC5E,KAAK;AACH,eAAO,WAAW,YAAY,SAAS;AAAA,MACzC,KAAK;AACH,eAAO,UAAU,KAAK,WAAiC,KAAK,UAAgC,SAAS;AAAA,MACvG,KAAK;AACH,eAAO,UAAU,KAAK,WAAiC,KAAK,UAAgC,SAAS,iBAAiB,KAAK,SAAS,KAAK,OAAO,KAAK,MAAM,CAAC,KAAK,EAAE;AAAA,MACrK,KAAK;AACH,eAAO,mBAAmB,KAAK,WAAW,KAAK,OAAO,KAAK,QAAQ,CAAC,MAAM,EAAE;AAAA,MAC9E,KAAK;AACH,eAAO,kBAAkB,KAAK,SAAS,SAAS,OAAO,KAAK,MAAM,CAAC,KAAK,EAAE;AAAA,MAC5E,KAAK;AACH,eAAO,sBAAsB,QAAQ,KAAK,KAAK,KAAK,EAAE;AAAA,MACxD,KAAK;AACH,eAAO,oBAAoB,KAAK,SAAS,WAAM,OAAO,KAAK,MAAM,CAAC,KAAK,EAAE;AAAA,MAC3E,KAAK;AACH,eAAO,8BAA8B,YAAY,SAAS,IAAI,QAAQ,KAAK,KAAK,KAAK,EAAE;AAAA,MACzF,KAAK;AACH,eAAO,gCAAgC,YAAY,SAAS;AAAA,MAC9D,KAAK;AACH,eAAO,qBAAqB,KAAK,QAA8B,SAAS;AAAA,MAC1E,KAAK;AACH,eAAO,YAAY,aAAa,SAAS;AAAA,MAC3C;AACE,eAAO,UAAU,QAAQ;AAAA,IAC7B;AAAA,EACF;AAAA;AAAA,EAIA,MAAc,UAAU,OAA6B;AACnD,UAAM,KAAK,aAAa,KAAK;AAC7B,SAAK,sBAAsB,KAAK;AAChC,UAAM,KAAK,iBAAiB;AAC5B,UAAM,KAAK,iBAAiB;AAAA,EAC9B;AAAA,EAEA,MAAc,YAAY,SAAiB,OAAsC;AAC/E,UAAM,KAAK,YAAY,SAAS,EAAE,GAAG,OAAO,WAAW,KAAK,IAAI,EAAE,CAAC;AACnE,SAAK,sBAAsB,SAAS,KAAK;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,YAAY,IAAY,OAA+C;AACnF,UAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,QAAI,CAAC,QAAS;AAEd,UAAM,MAAM,MAAM,QAAQ,IAAI,MAAM,EAAE,YAAY,mBAAmB,KAAK,GAAG,CAAC;AAC9E,QAAI,QAAQ,QAAQ,QAAQ,UAAa,OAAO,QAAQ,SAAU;AAClE,UAAM,WAAoC,OAAO,YAAY,OAAO,QAAQ,GAAG,CAAC;AAChF,UAAM,QAAQ,IAAI,OAAO,EAAE,YAAY,mBAAmB,KAAK,IAAI,OAAO,EAAE,GAAG,UAAU,GAAG,MAAM,EAAE,CAAC;AAAA,EACvG;AAAA,EAEA,MAAc,aAAa,OAA6B;AACtD,UAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,QAAI,CAAC,QAAS;AAGd,UAAM,OAAgC;AAAA,MACpC,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,OAAO,MAAM;AAAA,MACb,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,WAAW,MAAM;AAAA,MACjB,WAAW,MAAM;AAAA,MACjB,GAAI,MAAM,aAAa,SAAY,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,MACnE,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,MAC/C,GAAI,MAAM,WAAW,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,IACvD;AACA,UAAM,QAAQ,IAAI,OAAO,EAAE,YAAY,mBAAmB,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC;AAAA,EACxF;AAAA,EAEQ,sBAAsB,OAAoB;AAChD,SAAK,IAAI,UAAU,SAAK,2BAAY,iBAAiB,cAAc;AAAA,MACjE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,UAAU,MAAM;AAAA,MAChB,OAAO,MAAM;AAAA,MACb,QAAQ,MAAM;AAAA,IAChB,CAAC,CAAC;AAAA,EACJ;AAAA,EAEQ,sBAAsB,SAAiB,OAA6B;AAC1E,UAAM,cAAuC,CAAC;AAC9C,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,kBAAY,GAAG,IAAI;AAAA,IACrB;AACA,SAAK,IAAI,UAAU,SAAK,2BAAY,iBAAiB,cAAc;AAAA,MACjE;AAAA,MACA,OAAO;AAAA,IACT,CAAC,CAAC;AAAA,EACJ;AAAA,EAEA,MAAc,mBAAkC;AAC9C,UAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,QAAI,CAAC,QAAS;AAEd,UAAM,QAAQ,MAAM,QAAQ,MAAM,MAAM,EAAE,YAAY,kBAAkB,CAAC;AACzE,QAAI,SAAS,KAAK,OAAO,UAAW;AAGpC,UAAM,SAAS,QAAQ,KAAK,OAAO;AACnC,UAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,EAAE,YAAY,mBAAmB,QAAQ;AAAA,MAChF,OAAO,EAAE,MAAM,KAAK;AAAA,MACpB,SAAS,EAAE,OAAO,aAAa,WAAW,MAAM;AAAA,MAChD,OAAO;AAAA,IACT,EAAE,CAAC;AAEH,eAAW,UAAU,QAAQ;AAC3B,YAAM,QAAQ,OAAO,OAAO,EAAE,YAAY,mBAAmB,KAAK,OAAO,GAAG,CAAC;AAAA,IAC/E;AAAA,EACF;AAAA,EAEA,MAAc,mBAAkC;AAC9C,UAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,QAAI,CAAC,QAAS;AAEd,UAAM,SAAS,KAAK,IAAI,IAAI,KAAK,OAAO,gBAAgB,KAAK,KAAK,KAAK;AACvE,UAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,EAAE,YAAY,mBAAmB,QAAQ;AAAA,MACjF,OAAO,EAAE,MAAM,KAAK;AAAA,MACpB,SAAS,EAAE,OAAO,aAAa,WAAW,MAAM;AAAA,IAClD,EAAE,CAAC;AAEH,eAAW,UAAU,SAAS;AAC5B,UAAI,OAAO,OAAO,KAAK,WAAW,KAAK,CAAC,IAAI,QAAQ;AAClD,cAAM,QAAQ,OAAO,OAAO,EAAE,YAAY,mBAAmB,KAAK,OAAO,GAAG,CAAC;AAAA,MAC/E;AAAA,IACF;AAAA,EACF;AACF;","names":["import_types"]}

package/dist/builtins/alerts/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}