@camstack/core 0.1.15 → 0.1.17

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -1,220 +1,226 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts
-var addon_pages_aggregator_addon_exports = {};
-__export(addon_pages_aggregator_addon_exports, {
-  AddonPagesAggregatorAddon: () => AddonPagesAggregatorAddon,
-  default: () => addon_pages_aggregator_addon_default
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
 });
-module.exports = __toCommonJS(addon_pages_aggregator_addon_exports);
-var path = __toESM(require("path"));
-var fs = __toESM(require("fs"));
-var import_node_crypto = require("crypto");
-var import_types = require("@camstack/types");
-var RETRY_BACKOFF_MS = [500, 1500, 4e3];
-var AddonPagesAggregatorAddon = class extends import_types.BaseAddon {
-  id = "addon-pages-aggregator";
-  resolvedPaths = null;
-  /**
-   * Last successful `listPages()` snapshot per source. Used as the
-   * "stale-but-valid" fallback when a source transiently fails — drops
-   * happen often enough during boot (Moleculer service-discovery
-   * window) that swallowing the error and returning empty leaves the
-   * sidebar with nothing for several seconds. Keeping the previous
-   * good entry means a flake is invisible to the operator.
-   */
-  lastGood = /* @__PURE__ */ new Map();
-  /** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */
-  retryTimers = /* @__PURE__ */ new Map();
-  constructor() {
-    super({});
-  }
-  async onInitialize() {
-    this.resolvedPaths = await this.resolvePaths();
-    const provider = {
-      listPages: async () => this.aggregate()
-    };
-    this.ctx.logger.info("Initialized \u2014 aggregating addon-pages-source providers");
-    return [{ capability: import_types.addonPagesCapability, provider }];
-  }
-  async onShutdown() {
-    for (const t of this.retryTimers.values()) clearTimeout(t);
-    this.retryTimers.clear();
-    this.lastGood.clear();
-  }
-  // ── Aggregation ───────────────────────────────────────────────────
-  async aggregate() {
-    const sources = this.capabilities?.getCollection("addon-pages-source") ?? [];
-    const out = [];
-    const seenIds = /* @__PURE__ */ new Set();
-    for (const source of sources) {
-      seenIds.add(source.id);
-      try {
-        const pages = await Promise.resolve(source.listPages());
-        const enriched = pages.map((page) => ({
-          addonId: source.id,
-          page,
-          bundleUrl: this.makeBundleUrl(source.id, page.bundle)
-        }));
-        for (const item of enriched) out.push(item);
-        this.lastGood.set(source.id, enriched);
-      } catch (err) {
-        const message = (0, import_types.errMsg)(err);
-        this.ctx.logger.warn("addon-pages-source provider failed", {
-          meta: { sourceId: source.id, error: message }
-        });
-        const cached = this.lastGood.get(source.id);
-        if (cached !== void 0) {
-          for (const item of cached) out.push(item);
-          this.ctx.logger.info("addon-pages-source falling back to cached snapshot", {
-            meta: { sourceId: source.id, cachedPages: cached.length }
-          });
-        }
-        this.scheduleRetry(source.id);
-      }
-    }
-    for (const cachedId of this.lastGood.keys()) {
-      if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId);
-    }
-    return out;
-  }
-  // ── Retry on transient Moleculer race ─────────────────────────────
-  /**
-   * Schedule background re-call of `listPages()` on a source that just
-   * failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful
-   * call updates the cache and emits `AddonPageReady` so the admin UI
-   * invalidates its query. Stops on first success or after the schedule
-   * is exhausted.
-   */
-  scheduleRetry(sourceId, attempt = 0) {
-    if (attempt >= RETRY_BACKOFF_MS.length) return;
-    if (this.retryTimers.has(sourceId)) return;
-    const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1];
-    const timer = setTimeout(() => {
-      this.retryTimers.delete(sourceId);
-      void this.retrySource(sourceId, attempt);
-    }, delayMs);
-    this.retryTimers.set(sourceId, timer);
-  }
-  async retrySource(sourceId, attempt) {
-    const sources = this.capabilities?.getCollection("addon-pages-source") ?? [];
-    const source = sources.find((s) => s.id === sourceId);
-    if (!source) return;
-    try {
-      const pages = await Promise.resolve(source.listPages());
-      const enriched = pages.map((page) => ({
-        addonId: source.id,
-        page,
-        bundleUrl: this.makeBundleUrl(source.id, page.bundle)
-      }));
-      this.lastGood.set(source.id, enriched);
-      this.ctx.logger.info("addon-pages-source recovered after retry", {
-        meta: { sourceId, attempt: attempt + 1, pages: enriched.length }
-      });
-      this.ctx.eventBus.emit({
-        id: (0, import_node_crypto.randomUUID)(),
-        timestamp: /* @__PURE__ */ new Date(),
-        source: { type: "addon", id: this.id },
-        category: import_types.EventCategory.AddonPageReady,
-        data: { addonId: sourceId, recovered: true }
-      });
-    } catch (err) {
-      this.ctx.logger.debug("addon-pages-source retry failed", {
-        meta: { sourceId, attempt: attempt + 1, error: (0, import_types.errMsg)(err) }
-      });
-      this.scheduleRetry(sourceId, attempt + 1);
-    }
-  }
-  // ── Bundle URL stamping ──────────────────────────────────────────
-  /**
-   * Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back
-   * to `Date.now()` when the bundle path can't be stat'd (remote addon
-   * with no local file, addon not yet on disk, etc.) — the browser
-   * just gets a fresh URL on each call instead of cache-friendly mtime.
-   */
-  makeBundleUrl(addonId, bundle) {
-    const bundlePath = this.resolveBundlePath(addonId, bundle);
-    let mtime = Date.now();
-    if (bundlePath !== null) {
-      try {
-        mtime = fs.statSync(bundlePath).mtimeMs;
-      } catch {
-      }
-    }
-    const v = Math.floor(mtime);
-    return `/api/addon-pages/${addonId}/${bundle}?v=${v}`;
-  }
-  /**
-   * Resolve the local filesystem path for an addon's bundle. Mirrors
-   * `AddonPagesService.resolveBundle` (server-side), but without the
-   * existence / traversal checks — those still live on the server's
-   * static file route. We only need a stat-able path here for the
-   * `mtime` cache-buster.
-   */
-  resolveBundlePath(addonId, bundle) {
-    const paths = this.resolvedPaths;
-    if (!paths) return null;
-    const addonDistPath = path.join(paths.addonsDir, "@camstack", `addon-${addonId}`, "dist");
-    const resolvedBase = path.resolve(addonDistPath);
-    const resolvedFile = path.resolve(addonDistPath, bundle);
-    if (!resolvedFile.startsWith(resolvedBase + path.sep) && resolvedFile !== resolvedBase) {
-      return null;
-    }
-    return resolvedFile;
-  }
-  // ── Path resolution ──────────────────────────────────────────────
-  /**
-   * Read `server.dataPath` from the cluster yml-backed sections (same
-   * source the server uses at boot), then derive the addons directory
-   * from it. Falls back to `camstack-data/addons` when no settings API
-   * is available — agents and isolated tests don't see this addon, so
-   * the fallback is purely defensive.
-   */
-  async resolvePaths() {
-    const fallback = { addonsDir: path.resolve("camstack-data", "addons") };
-    if (!this.ctx.settings) return fallback;
-    try {
-      const server = await this.ctx.settings.getSection("server");
-      const dataPath = typeof server["dataPath"] === "string" && server["dataPath"] ? server["dataPath"] : "camstack-data";
-      return { addonsDir: path.resolve(dataPath, "addons") };
-    } catch (err) {
-      this.ctx.logger.debug("Failed to read server.dataPath \u2014 falling back", {
-        meta: { error: (0, import_types.errMsg)(err) }
-      });
-      return fallback;
-    }
-  }
+const require_chunk = require("../../chunk-C13QxCFV.js");
+let node_fs = require("node:fs");
+node_fs = require_chunk.__toESM(node_fs);
+let node_path = require("node:path");
+node_path = require_chunk.__toESM(node_path);
+let node_crypto = require("node:crypto");
+let _camstack_types = require("@camstack/types");
+//#region src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts
+/**
+* Addon Pages Aggregator — hub-local builtin that owns the singleton
+* `addon-pages` cap.
+*
+* Walks every registered `addon-pages-source` (collection) provider and
+* emits an enriched `AddonPageInfo[]` list with versioned `bundleUrl`s
+* pointing at `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. The
+* filesystem `mtime` cache-buster lets the browser pick up addon
+* rebuilds without manual reload — same scheme the original
+* hand-written `AddonPagesService.listPages` used before this split.
+*
+* The static file endpoint (`/api/addon-pages/:addonId/*`) is still
+* served by `AddonPagesService.resolveBundle()` on the server side; this
+* addon only owns the listing surface.
+*
+* Why a builtin rather than a cap-providers helper:
+*   - The aggregator is conceptually the "addon-pages provider" — addons
+*     own caps, not the server. Living in `@camstack/core/builtins` keeps
+*     the surface symmetrical with `system-config`, `local-auth`, etc.
+*   - Lets the aggregator subscribe to source readiness without piping a
+*     CapabilityRegistry handle through `RouterServices`.
+*/
+/**
+* Backoff schedule (ms) used to retry sources that failed during a
+* `listPages()` round-trip — typically because the cap was just
+* registered (provider connected via Moleculer) but the worker-side
+* action registration hadn't propagated yet, so `Service '...listPages'
+* is not found on '<node>'` raced ahead of the call.
+*
+* We schedule one retry per entry; if every retry fails we stop
+* (the next aggregate() run will pick the source up again). On
+* success we re-emit `AddonPageReady` so admin-ui invalidates its
+* `addonPages.listPages` query and the sidebar populates without a
+* page reload.
+*/
+var RETRY_BACKOFF_MS = [
+	500,
+	1500,
+	4e3
+];
+var AddonPagesAggregatorAddon = class extends _camstack_types.BaseAddon {
+	id = "addon-pages-aggregator";
+	resolvedPaths = null;
+	/**
+	* Last successful `listPages()` snapshot per source. Used as the
+	* "stale-but-valid" fallback when a source transiently fails — drops
+	* happen often enough during boot (Moleculer service-discovery
+	* window) that swallowing the error and returning empty leaves the
+	* sidebar with nothing for several seconds. Keeping the previous
+	* good entry means a flake is invisible to the operator.
+	*/
+	lastGood = /* @__PURE__ */ new Map();
+	/** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */
+	retryTimers = /* @__PURE__ */ new Map();
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		this.resolvedPaths = await this.resolvePaths();
+		const provider = { listPages: async () => this.aggregate() };
+		this.ctx.logger.info("Initialized — aggregating addon-pages-source providers");
+		return [{
+			capability: _camstack_types.addonPagesCapability,
+			provider
+		}];
+	}
+	async onShutdown() {
+		for (const t of this.retryTimers.values()) clearTimeout(t);
+		this.retryTimers.clear();
+		this.lastGood.clear();
+	}
+	async aggregate() {
+		const sources = this.capabilities?.getCollection("addon-pages-source") ?? [];
+		const out = [];
+		const seenIds = /* @__PURE__ */ new Set();
+		for (const source of sources) {
+			seenIds.add(source.id);
+			try {
+				const enriched = (await Promise.resolve(source.listPages())).map((page) => ({
+					addonId: source.id,
+					page,
+					bundleUrl: this.makeBundleUrl(source.id, page.bundle)
+				}));
+				for (const item of enriched) out.push(item);
+				this.lastGood.set(source.id, enriched);
+			} catch (err) {
+				const message = (0, _camstack_types.errMsg)(err);
+				this.ctx.logger.warn("addon-pages-source provider failed", { meta: {
+					sourceId: source.id,
+					error: message
+				} });
+				const cached = this.lastGood.get(source.id);
+				if (cached !== void 0) {
+					for (const item of cached) out.push(item);
+					this.ctx.logger.info("addon-pages-source falling back to cached snapshot", { meta: {
+						sourceId: source.id,
+						cachedPages: cached.length
+					} });
+				}
+				this.scheduleRetry(source.id);
+			}
+		}
+		for (const cachedId of this.lastGood.keys()) if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId);
+		return out;
+	}
+	/**
+	* Schedule background re-call of `listPages()` on a source that just
+	* failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful
+	* call updates the cache and emits `AddonPageReady` so the admin UI
+	* invalidates its query. Stops on first success or after the schedule
+	* is exhausted.
+	*/
+	scheduleRetry(sourceId, attempt = 0) {
+		if (attempt >= RETRY_BACKOFF_MS.length) return;
+		if (this.retryTimers.has(sourceId)) return;
+		const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1];
+		const timer = setTimeout(() => {
+			this.retryTimers.delete(sourceId);
+			this.retrySource(sourceId, attempt);
+		}, delayMs);
+		this.retryTimers.set(sourceId, timer);
+	}
+	async retrySource(sourceId, attempt) {
+		const source = (this.capabilities?.getCollection("addon-pages-source") ?? []).find((s) => s.id === sourceId);
+		if (!source) return;
+		try {
+			const enriched = (await Promise.resolve(source.listPages())).map((page) => ({
+				addonId: source.id,
+				page,
+				bundleUrl: this.makeBundleUrl(source.id, page.bundle)
+			}));
+			this.lastGood.set(source.id, enriched);
+			this.ctx.logger.info("addon-pages-source recovered after retry", { meta: {
+				sourceId,
+				attempt: attempt + 1,
+				pages: enriched.length
+			} });
+			this.ctx.eventBus.emit({
+				id: (0, node_crypto.randomUUID)(),
+				timestamp: /* @__PURE__ */ new Date(),
+				source: {
+					type: "addon",
+					id: this.id
+				},
+				category: _camstack_types.EventCategory.AddonPageReady,
+				data: {
+					addonId: sourceId,
+					recovered: true
+				}
+			});
+		} catch (err) {
+			this.ctx.logger.debug("addon-pages-source retry failed", { meta: {
+				sourceId,
+				attempt: attempt + 1,
+				error: (0, _camstack_types.errMsg)(err)
+			} });
+			this.scheduleRetry(sourceId, attempt + 1);
+		}
+	}
+	/**
+	* Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back
+	* to `Date.now()` when the bundle path can't be stat'd (remote addon
+	* with no local file, addon not yet on disk, etc.) — the browser
+	* just gets a fresh URL on each call instead of cache-friendly mtime.
+	*/
+	makeBundleUrl(addonId, bundle) {
+		const bundlePath = this.resolveBundlePath(addonId, bundle);
+		let mtime = Date.now();
+		if (bundlePath !== null) try {
+			mtime = node_fs.statSync(bundlePath).mtimeMs;
+		} catch {}
+		return `/api/addon-pages/${addonId}/${bundle}?v=${Math.floor(mtime)}`;
+	}
+	/**
+	* Resolve the local filesystem path for an addon's bundle. Mirrors
+	* `AddonPagesService.resolveBundle` (server-side), but without the
+	* existence / traversal checks — those still live on the server's
+	* static file route. We only need a stat-able path here for the
+	* `mtime` cache-buster.
+	*/
+	resolveBundlePath(addonId, bundle) {
+		const paths = this.resolvedPaths;
+		if (!paths) return null;
+		const addonDistPath = node_path.join(paths.addonsDir, "@camstack", `addon-${addonId}`, "dist");
+		const resolvedBase = node_path.resolve(addonDistPath);
+		const resolvedFile = node_path.resolve(addonDistPath, bundle);
+		if (!resolvedFile.startsWith(resolvedBase + node_path.sep) && resolvedFile !== resolvedBase) return null;
+		return resolvedFile;
+	}
+	/**
+	* Read `server.dataPath` from the cluster yml-backed sections (same
+	* source the server uses at boot), then derive the addons directory
+	* from it. Falls back to `camstack-data/addons` when no settings API
+	* is available — agents and isolated tests don't see this addon, so
+	* the fallback is purely defensive.
+	*/
+	async resolvePaths() {
+		const fallback = { addonsDir: node_path.resolve("camstack-data", "addons") };
+		if (!this.ctx.settings) return fallback;
+		try {
+			const server = await this.ctx.settings.getSection("server");
+			const dataPath = typeof server["dataPath"] === "string" && server["dataPath"] ? server["dataPath"] : "camstack-data";
+			return { addonsDir: node_path.resolve(dataPath, "addons") };
+		} catch (err) {
+			this.ctx.logger.debug("Failed to read server.dataPath — falling back", { meta: { error: (0, _camstack_types.errMsg)(err) } });
+			return fallback;
+		}
+	}
 };
-var addon_pages_aggregator_addon_default = AddonPagesAggregatorAddon;
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  AddonPagesAggregatorAddon
-});
+//#endregion
+exports.AddonPagesAggregatorAddon = AddonPagesAggregatorAddon;
+exports.default = AddonPagesAggregatorAddon;
+
 //# sourceMappingURL=addon-pages-aggregator.addon.js.map

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts"],"sourcesContent":["/**\n * Addon Pages Aggregator — hub-local builtin that owns the singleton\n * `addon-pages` cap.\n *\n * Walks every registered `addon-pages-source` (collection) provider and\n * emits an enriched `AddonPageInfo[]` list with versioned `bundleUrl`s\n * pointing at `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. The\n * filesystem `mtime` cache-buster lets the browser pick up addon\n * rebuilds without manual reload — same scheme the original\n * hand-written `AddonPagesService.listPages` used before this split.\n *\n * The static file endpoint (`/api/addon-pages/:addonId/*`) is still\n * served by `AddonPagesService.resolveBundle()` on the server side; this\n * addon only owns the listing surface.\n *\n * Why a builtin rather than a cap-providers helper:\n *   - The aggregator is conceptually the \"addon-pages provider\" — addons\n *     own caps, not the server. Living in `@camstack/core/builtins` keeps\n *     the surface symmetrical with `system-config`, `local-auth`, etc.\n *   - Lets the aggregator subscribe to source readiness without piping a\n *     CapabilityRegistry handle through `RouterServices`.\n */\nimport * as path from 'node:path'\nimport * as fs from 'node:fs'\nimport { randomUUID } from 'node:crypto'\nimport {\n  BaseAddon,\n  EventCategory,\n  addonPagesCapability,\n  errMsg,\n  type AddonPageInfo,\n  type IAddonPageProvider,\n  type IAddonPagesAggregatorProvider,\n  type ProviderRegistration,\n} from '@camstack/types'\n\ninterface ResolvedPaths {\n  readonly addonsDir: string\n}\n\n/**\n * Backoff schedule (ms) used to retry sources that failed during a\n * `listPages()` round-trip — typically because the cap was just\n * registered (provider connected via Moleculer) but the worker-side\n * action registration hadn't propagated yet, so `Service '...listPages'\n * is not found on '<node>'` raced ahead of the call.\n *\n * We schedule one retry per entry; if every retry fails we stop\n * (the next aggregate() run will pick the source up again). On\n * success we re-emit `AddonPageReady` so admin-ui invalidates its\n * `addonPages.listPages` query and the sidebar populates without a\n * page reload.\n */\nconst RETRY_BACKOFF_MS: readonly number[] = [500, 1500, 4000]\n\nexport class AddonPagesAggregatorAddon extends BaseAddon {\n  readonly id = 'addon-pages-aggregator'\n\n  private resolvedPaths: ResolvedPaths | null = null\n\n  /**\n   * Last successful `listPages()` snapshot per source. Used as the\n   * \"stale-but-valid\" fallback when a source transiently fails — drops\n   * happen often enough during boot (Moleculer service-discovery\n   * window) that swallowing the error and returning empty leaves the\n   * sidebar with nothing for several seconds. Keeping the previous\n   * good entry means a flake is invisible to the operator.\n   */\n  private readonly lastGood = new Map<string, readonly AddonPageInfo[]>()\n\n  /** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */\n  private readonly retryTimers = new Map<string, NodeJS.Timeout>()\n\n  constructor() { super({}) }\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    this.resolvedPaths = await this.resolvePaths()\n\n    const provider: IAddonPagesAggregatorProvider = {\n      listPages: async (): Promise<readonly AddonPageInfo[]> => this.aggregate(),\n    }\n\n    this.ctx.logger.info('Initialized — aggregating addon-pages-source providers')\n    return [{ capability: addonPagesCapability, provider }]\n  }\n\n  protected async onShutdown(): Promise<void> {\n    for (const t of this.retryTimers.values()) clearTimeout(t)\n    this.retryTimers.clear()\n    this.lastGood.clear()\n  }\n\n  // ── Aggregation ───────────────────────────────────────────────────\n\n  private async aggregate(): Promise<readonly AddonPageInfo[]> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const out: AddonPageInfo[] = []\n    const seenIds = new Set<string>()\n\n    for (const source of sources) {\n      seenIds.add(source.id)\n      try {\n        // listPages() may be async for remote Moleculer providers.\n        const pages = await Promise.resolve(source.listPages())\n        const enriched: AddonPageInfo[] = pages.map((page) => ({\n          addonId: source.id,\n          page,\n          bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n        }))\n        for (const item of enriched) out.push(item)\n        // Cache successful snapshot — used as fallback on next failure.\n        this.lastGood.set(source.id, enriched)\n      } catch (err: unknown) {\n        const message = errMsg(err)\n        this.ctx.logger.warn('addon-pages-source provider failed', {\n          meta: { sourceId: source.id, error: message },\n        })\n        // Fall back to the last-good snapshot for this source so a\n        // transient Moleculer service-discovery race (cap registered\n        // but action not yet callable) doesn't blank the sidebar.\n        const cached = this.lastGood.get(source.id)\n        if (cached !== undefined) {\n          for (const item of cached) out.push(item)\n          this.ctx.logger.info('addon-pages-source falling back to cached snapshot', {\n            meta: { sourceId: source.id, cachedPages: cached.length },\n          })\n        }\n        // Schedule a background retry. On success we re-emit\n        // `AddonPageReady` so admin-ui's queryClient invalidates and\n        // any newly-loaded pages show up without a manual reload.\n        this.scheduleRetry(source.id)\n      }\n    }\n\n    // Drop cache entries for sources that have disappeared from the\n    // registry — keeps the fallback aligned with the live collection.\n    for (const cachedId of this.lastGood.keys()) {\n      if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId)\n    }\n\n    return out\n  }\n\n  // ── Retry on transient Moleculer race ─────────────────────────────\n\n  /**\n   * Schedule background re-call of `listPages()` on a source that just\n   * failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful\n   * call updates the cache and emits `AddonPageReady` so the admin UI\n   * invalidates its query. Stops on first success or after the schedule\n   * is exhausted.\n   */\n  private scheduleRetry(sourceId: string, attempt = 0): void {\n    if (attempt >= RETRY_BACKOFF_MS.length) return\n    if (this.retryTimers.has(sourceId)) return // already pending\n\n    const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1]!\n    const timer = setTimeout(() => {\n      this.retryTimers.delete(sourceId)\n      void this.retrySource(sourceId, attempt)\n    }, delayMs)\n    this.retryTimers.set(sourceId, timer)\n  }\n\n  private async retrySource(sourceId: string, attempt: number): Promise<void> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const source = sources.find((s) => s.id === sourceId)\n    if (!source) return // provider went away; nothing to retry\n\n    try {\n      const pages = await Promise.resolve(source.listPages())\n      const enriched: AddonPageInfo[] = pages.map((page) => ({\n        addonId: source.id,\n        page,\n        bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n      }))\n      this.lastGood.set(source.id, enriched)\n      this.ctx.logger.info('addon-pages-source recovered after retry', {\n        meta: { sourceId, attempt: attempt + 1, pages: enriched.length },\n      })\n      // Re-emit AddonPageReady so admin-ui invalidates and refetches.\n      this.ctx.eventBus.emit({\n        id: randomUUID(),\n        timestamp: new Date(),\n        source: { type: 'addon', id: this.id },\n        category: EventCategory.AddonPageReady,\n        data: { addonId: sourceId, recovered: true },\n      })\n    } catch (err: unknown) {\n      this.ctx.logger.debug('addon-pages-source retry failed', {\n        meta: { sourceId, attempt: attempt + 1, error: errMsg(err) },\n      })\n      this.scheduleRetry(sourceId, attempt + 1)\n    }\n  }\n\n  // ── Bundle URL stamping ──────────────────────────────────────────\n\n  /**\n   * Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back\n   * to `Date.now()` when the bundle path can't be stat'd (remote addon\n   * with no local file, addon not yet on disk, etc.) — the browser\n   * just gets a fresh URL on each call instead of cache-friendly mtime.\n   */\n  private makeBundleUrl(addonId: string, bundle: string): string {\n    const bundlePath = this.resolveBundlePath(addonId, bundle)\n    let mtime = Date.now()\n    if (bundlePath !== null) {\n      try { mtime = fs.statSync(bundlePath).mtimeMs }\n      catch { /* remote addon — no local file */ }\n    }\n    const v = Math.floor(mtime)\n    return `/api/addon-pages/${addonId}/${bundle}?v=${v}`\n  }\n\n  /**\n   * Resolve the local filesystem path for an addon's bundle. Mirrors\n   * `AddonPagesService.resolveBundle` (server-side), but without the\n   * existence / traversal checks — those still live on the server's\n   * static file route. We only need a stat-able path here for the\n   * `mtime` cache-buster.\n   */\n  private resolveBundlePath(addonId: string, bundle: string): string | null {\n    const paths = this.resolvedPaths\n    if (!paths) return null\n    const addonDistPath = path.join(paths.addonsDir, '@camstack', `addon-${addonId}`, 'dist')\n    const resolvedBase = path.resolve(addonDistPath)\n    const resolvedFile = path.resolve(addonDistPath, bundle)\n    if (!resolvedFile.startsWith(resolvedBase + path.sep) && resolvedFile !== resolvedBase) {\n      return null\n    }\n    return resolvedFile\n  }\n\n  // ── Path resolution ──────────────────────────────────────────────\n\n  /**\n   * Read `server.dataPath` from the cluster yml-backed sections (same\n   * source the server uses at boot), then derive the addons directory\n   * from it. Falls back to `camstack-data/addons` when no settings API\n   * is available — agents and isolated tests don't see this addon, so\n   * the fallback is purely defensive.\n   */\n  private async resolvePaths(): Promise<ResolvedPaths> {\n    const fallback: ResolvedPaths = { addonsDir: path.resolve('camstack-data', 'addons') }\n    if (!this.ctx.settings) return fallback\n    try {\n      const server = await this.ctx.settings.getSection('server')\n      const dataPath = typeof server['dataPath'] === 'string' && server['dataPath']\n        ? server['dataPath']\n        : 'camstack-data'\n      return { addonsDir: path.resolve(dataPath, 'addons') }\n    } catch (err: unknown) {\n      this.ctx.logger.debug('Failed to read server.dataPath — falling back', {\n        meta: { error: errMsg(err) },\n      })\n      return fallback\n    }\n  }\n}\n\nexport default AddonPagesAggregatorAddon\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBA,WAAsB;AACtB,SAAoB;AACpB,yBAA2B;AAC3B,mBASO;AAmBP,IAAM,mBAAsC,CAAC,KAAK,MAAM,GAAI;AAErD,IAAM,4BAAN,cAAwC,uBAAU;AAAA,EAC9C,KAAK;AAAA,EAEN,gBAAsC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAU7B,WAAW,oBAAI,IAAsC;AAAA;AAAA,EAGrD,cAAc,oBAAI,IAA4B;AAAA,EAE/D,cAAc;AAAE,UAAM,CAAC,CAAC;AAAA,EAAE;AAAA,EAE1B,MAAgB,eAAgD;AAC9D,SAAK,gBAAgB,MAAM,KAAK,aAAa;AAE7C,UAAM,WAA0C;AAAA,MAC9C,WAAW,YAA+C,KAAK,UAAU;AAAA,IAC3E;AAEA,SAAK,IAAI,OAAO,KAAK,6DAAwD;AAC7E,WAAO,CAAC,EAAE,YAAY,mCAAsB,SAAS,CAAC;AAAA,EACxD;AAAA,EAEA,MAAgB,aAA4B;AAC1C,eAAW,KAAK,KAAK,YAAY,OAAO,EAAG,cAAa,CAAC;AACzD,SAAK,YAAY,MAAM;AACvB,SAAK,SAAS,MAAM;AAAA,EACtB;AAAA;AAAA,EAIA,MAAc,YAA+C;AAC3D,UAAM,UAAU,KAAK,cAAc,cAAkC,oBAAoB,KAAK,CAAC;AAC/F,UAAM,MAAuB,CAAC;AAC9B,UAAM,UAAU,oBAAI,IAAY;AAEhC,eAAW,UAAU,SAAS;AAC5B,cAAQ,IAAI,OAAO,EAAE;AACrB,UAAI;AAEF,cAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO,UAAU,CAAC;AACtD,cAAM,WAA4B,MAAM,IAAI,CAAC,UAAU;AAAA,UACrD,SAAS,OAAO;AAAA,UAChB;AAAA,UACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,MAAM;AAAA,QACtD,EAAE;AACF,mBAAW,QAAQ,SAAU,KAAI,KAAK,IAAI;AAE1C,aAAK,SAAS,IAAI,OAAO,IAAI,QAAQ;AAAA,MACvC,SAAS,KAAc;AACrB,cAAM,cAAU,qBAAO,GAAG;AAC1B,aAAK,IAAI,OAAO,KAAK,sCAAsC;AAAA,UACzD,MAAM,EAAE,UAAU,OAAO,IAAI,OAAO,QAAQ;AAAA,QAC9C,CAAC;AAID,cAAM,SAAS,KAAK,SAAS,IAAI,OAAO,EAAE;AAC1C,YAAI,WAAW,QAAW;AACxB,qBAAW,QAAQ,OAAQ,KAAI,KAAK,IAAI;AACxC,eAAK,IAAI,OAAO,KAAK,sDAAsD;AAAA,YACzE,MAAM,EAAE,UAAU,OAAO,IAAI,aAAa,OAAO,OAAO;AAAA,UAC1D,CAAC;AAAA,QACH;AAIA,aAAK,cAAc,OAAO,EAAE;AAAA,MAC9B;AAAA,IACF;AAIA,eAAW,YAAY,KAAK,SAAS,KAAK,GAAG;AAC3C,UAAI,CAAC,QAAQ,IAAI,QAAQ,EAAG,MAAK,SAAS,OAAO,QAAQ;AAAA,IAC3D;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWQ,cAAc,UAAkB,UAAU,GAAS;AACzD,QAAI,WAAW,iBAAiB,OAAQ;AACxC,QAAI,KAAK,YAAY,IAAI,QAAQ,EAAG;AAEpC,UAAM,UAAU,iBAAiB,OAAO,KAAK,iBAAiB,iBAAiB,SAAS,CAAC;AACzF,UAAM,QAAQ,WAAW,MAAM;AAC7B,WAAK,YAAY,OAAO,QAAQ;AAChC,WAAK,KAAK,YAAY,UAAU,OAAO;AAAA,IACzC,GAAG,OAAO;AACV,SAAK,YAAY,IAAI,UAAU,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,YAAY,UAAkB,SAAgC;AAC1E,UAAM,UAAU,KAAK,cAAc,cAAkC,oBAAoB,KAAK,CAAC;AAC/F,UAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ;AACpD,QAAI,CAAC,OAAQ;AAEb,QAAI;AACF,YAAM,QAAQ,MAAM,QAAQ,QAAQ,OAAO,UAAU,CAAC;AACtD,YAAM,WAA4B,MAAM,IAAI,CAAC,UAAU;AAAA,QACrD,SAAS,OAAO;AAAA,QAChB;AAAA,QACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,MAAM;AAAA,MACtD,EAAE;AACF,WAAK,SAAS,IAAI,OAAO,IAAI,QAAQ;AACrC,WAAK,IAAI,OAAO,KAAK,4CAA4C;AAAA,QAC/D,MAAM,EAAE,UAAU,SAAS,UAAU,GAAG,OAAO,SAAS,OAAO;AAAA,MACjE,CAAC;AAED,WAAK,IAAI,SAAS,KAAK;AAAA,QACrB,QAAI,+BAAW;AAAA,QACf,WAAW,oBAAI,KAAK;AAAA,QACpB,QAAQ,EAAE,MAAM,SAAS,IAAI,KAAK,GAAG;AAAA,QACrC,UAAU,2BAAc;AAAA,QACxB,MAAM,EAAE,SAAS,UAAU,WAAW,KAAK;AAAA,MAC7C,CAAC;AAAA,IACH,SAAS,KAAc;AACrB,WAAK,IAAI,OAAO,MAAM,mCAAmC;AAAA,QACvD,MAAM,EAAE,UAAU,SAAS,UAAU,GAAG,WAAO,qBAAO,GAAG,EAAE;AAAA,MAC7D,CAAC;AACD,WAAK,cAAc,UAAU,UAAU,CAAC;AAAA,IAC1C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,cAAc,SAAiB,QAAwB;AAC7D,UAAM,aAAa,KAAK,kBAAkB,SAAS,MAAM;AACzD,QAAI,QAAQ,KAAK,IAAI;AACrB,QAAI,eAAe,MAAM;AACvB,UAAI;AAAE,gBAAW,YAAS,UAAU,EAAE;AAAA,MAAQ,QACxC;AAAA,MAAqC;AAAA,IAC7C;AACA,UAAM,IAAI,KAAK,MAAM,KAAK;AAC1B,WAAO,oBAAoB,OAAO,IAAI,MAAM,MAAM,CAAC;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,kBAAkB,SAAiB,QAA+B;AACxE,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,gBAAqB,UAAK,MAAM,WAAW,aAAa,SAAS,OAAO,IAAI,MAAM;AACxF,UAAM,eAAoB,aAAQ,aAAa;AAC/C,UAAM,eAAoB,aAAQ,eAAe,MAAM;AACvD,QAAI,CAAC,aAAa,WAAW,eAAoB,QAAG,KAAK,iBAAiB,cAAc;AACtF,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAc,eAAuC;AACnD,UAAM,WAA0B,EAAE,WAAgB,aAAQ,iBAAiB,QAAQ,EAAE;AACrF,QAAI,CAAC,KAAK,IAAI,SAAU,QAAO;AAC/B,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,IAAI,SAAS,WAAW,QAAQ;AAC1D,YAAM,WAAW,OAAO,OAAO,UAAU,MAAM,YAAY,OAAO,UAAU,IACxE,OAAO,UAAU,IACjB;AACJ,aAAO,EAAE,WAAgB,aAAQ,UAAU,QAAQ,EAAE;AAAA,IACvD,SAAS,KAAc;AACrB,WAAK,IAAI,OAAO,MAAM,sDAAiD;AAAA,QACrE,MAAM,EAAE,WAAO,qBAAO,GAAG,EAAE;AAAA,MAC7B,CAAC;AACD,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,uCAAQ;","names":[]}
+{"version":3,"file":"addon-pages-aggregator.addon.js","names":[],"sources":["../../../src/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.ts"],"sourcesContent":["/**\n * Addon Pages Aggregator — hub-local builtin that owns the singleton\n * `addon-pages` cap.\n *\n * Walks every registered `addon-pages-source` (collection) provider and\n * emits an enriched `AddonPageInfo[]` list with versioned `bundleUrl`s\n * pointing at `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. The\n * filesystem `mtime` cache-buster lets the browser pick up addon\n * rebuilds without manual reload — same scheme the original\n * hand-written `AddonPagesService.listPages` used before this split.\n *\n * The static file endpoint (`/api/addon-pages/:addonId/*`) is still\n * served by `AddonPagesService.resolveBundle()` on the server side; this\n * addon only owns the listing surface.\n *\n * Why a builtin rather than a cap-providers helper:\n *   - The aggregator is conceptually the \"addon-pages provider\" — addons\n *     own caps, not the server. Living in `@camstack/core/builtins` keeps\n *     the surface symmetrical with `system-config`, `local-auth`, etc.\n *   - Lets the aggregator subscribe to source readiness without piping a\n *     CapabilityRegistry handle through `RouterServices`.\n */\nimport * as path from 'node:path'\nimport * as fs from 'node:fs'\nimport { randomUUID } from 'node:crypto'\nimport {\n  BaseAddon,\n  EventCategory,\n  addonPagesCapability,\n  errMsg,\n  type AddonPageInfo,\n  type IAddonPageProvider,\n  type IAddonPagesAggregatorProvider,\n  type ProviderRegistration,\n} from '@camstack/types'\n\ninterface ResolvedPaths {\n  readonly addonsDir: string\n}\n\n/**\n * Backoff schedule (ms) used to retry sources that failed during a\n * `listPages()` round-trip — typically because the cap was just\n * registered (provider connected via Moleculer) but the worker-side\n * action registration hadn't propagated yet, so `Service '...listPages'\n * is not found on '<node>'` raced ahead of the call.\n *\n * We schedule one retry per entry; if every retry fails we stop\n * (the next aggregate() run will pick the source up again). On\n * success we re-emit `AddonPageReady` so admin-ui invalidates its\n * `addonPages.listPages` query and the sidebar populates without a\n * page reload.\n */\nconst RETRY_BACKOFF_MS: readonly number[] = [500, 1500, 4000]\n\nexport class AddonPagesAggregatorAddon extends BaseAddon {\n  readonly id = 'addon-pages-aggregator'\n\n  private resolvedPaths: ResolvedPaths | null = null\n\n  /**\n   * Last successful `listPages()` snapshot per source. Used as the\n   * \"stale-but-valid\" fallback when a source transiently fails — drops\n   * happen often enough during boot (Moleculer service-discovery\n   * window) that swallowing the error and returning empty leaves the\n   * sidebar with nothing for several seconds. Keeping the previous\n   * good entry means a flake is invisible to the operator.\n   */\n  private readonly lastGood = new Map<string, readonly AddonPageInfo[]>()\n\n  /** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */\n  private readonly retryTimers = new Map<string, NodeJS.Timeout>()\n\n  constructor() { super({}) }\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    this.resolvedPaths = await this.resolvePaths()\n\n    const provider: IAddonPagesAggregatorProvider = {\n      listPages: async (): Promise<readonly AddonPageInfo[]> => this.aggregate(),\n    }\n\n    this.ctx.logger.info('Initialized — aggregating addon-pages-source providers')\n    return [{ capability: addonPagesCapability, provider }]\n  }\n\n  protected async onShutdown(): Promise<void> {\n    for (const t of this.retryTimers.values()) clearTimeout(t)\n    this.retryTimers.clear()\n    this.lastGood.clear()\n  }\n\n  // ── Aggregation ───────────────────────────────────────────────────\n\n  private async aggregate(): Promise<readonly AddonPageInfo[]> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const out: AddonPageInfo[] = []\n    const seenIds = new Set<string>()\n\n    for (const source of sources) {\n      seenIds.add(source.id)\n      try {\n        // listPages() may be async for remote Moleculer providers.\n        const pages = await Promise.resolve(source.listPages())\n        const enriched: AddonPageInfo[] = pages.map((page) => ({\n          addonId: source.id,\n          page,\n          bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n        }))\n        for (const item of enriched) out.push(item)\n        // Cache successful snapshot — used as fallback on next failure.\n        this.lastGood.set(source.id, enriched)\n      } catch (err: unknown) {\n        const message = errMsg(err)\n        this.ctx.logger.warn('addon-pages-source provider failed', {\n          meta: { sourceId: source.id, error: message },\n        })\n        // Fall back to the last-good snapshot for this source so a\n        // transient Moleculer service-discovery race (cap registered\n        // but action not yet callable) doesn't blank the sidebar.\n        const cached = this.lastGood.get(source.id)\n        if (cached !== undefined) {\n          for (const item of cached) out.push(item)\n          this.ctx.logger.info('addon-pages-source falling back to cached snapshot', {\n            meta: { sourceId: source.id, cachedPages: cached.length },\n          })\n        }\n        // Schedule a background retry. On success we re-emit\n        // `AddonPageReady` so admin-ui's queryClient invalidates and\n        // any newly-loaded pages show up without a manual reload.\n        this.scheduleRetry(source.id)\n      }\n    }\n\n    // Drop cache entries for sources that have disappeared from the\n    // registry — keeps the fallback aligned with the live collection.\n    for (const cachedId of this.lastGood.keys()) {\n      if (!seenIds.has(cachedId)) this.lastGood.delete(cachedId)\n    }\n\n    return out\n  }\n\n  // ── Retry on transient Moleculer race ─────────────────────────────\n\n  /**\n   * Schedule background re-call of `listPages()` on a source that just\n   * failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful\n   * call updates the cache and emits `AddonPageReady` so the admin UI\n   * invalidates its query. Stops on first success or after the schedule\n   * is exhausted.\n   */\n  private scheduleRetry(sourceId: string, attempt = 0): void {\n    if (attempt >= RETRY_BACKOFF_MS.length) return\n    if (this.retryTimers.has(sourceId)) return // already pending\n\n    const delayMs = RETRY_BACKOFF_MS[attempt] ?? RETRY_BACKOFF_MS[RETRY_BACKOFF_MS.length - 1]!\n    const timer = setTimeout(() => {\n      this.retryTimers.delete(sourceId)\n      void this.retrySource(sourceId, attempt)\n    }, delayMs)\n    this.retryTimers.set(sourceId, timer)\n  }\n\n  private async retrySource(sourceId: string, attempt: number): Promise<void> {\n    const sources = this.capabilities?.getCollection<IAddonPageProvider>('addon-pages-source') ?? []\n    const source = sources.find((s) => s.id === sourceId)\n    if (!source) return // provider went away; nothing to retry\n\n    try {\n      const pages = await Promise.resolve(source.listPages())\n      const enriched: AddonPageInfo[] = pages.map((page) => ({\n        addonId: source.id,\n        page,\n        bundleUrl: this.makeBundleUrl(source.id, page.bundle),\n      }))\n      this.lastGood.set(source.id, enriched)\n      this.ctx.logger.info('addon-pages-source recovered after retry', {\n        meta: { sourceId, attempt: attempt + 1, pages: enriched.length },\n      })\n      // Re-emit AddonPageReady so admin-ui invalidates and refetches.\n      this.ctx.eventBus.emit({\n        id: randomUUID(),\n        timestamp: new Date(),\n        source: { type: 'addon', id: this.id },\n        category: EventCategory.AddonPageReady,\n        data: { addonId: sourceId, recovered: true },\n      })\n    } catch (err: unknown) {\n      this.ctx.logger.debug('addon-pages-source retry failed', {\n        meta: { sourceId, attempt: attempt + 1, error: errMsg(err) },\n      })\n      this.scheduleRetry(sourceId, attempt + 1)\n    }\n  }\n\n  // ── Bundle URL stamping ──────────────────────────────────────────\n\n  /**\n   * Build `/api/addon-pages/<addonId>/<bundle>?v=<mtime>`. Falls back\n   * to `Date.now()` when the bundle path can't be stat'd (remote addon\n   * with no local file, addon not yet on disk, etc.) — the browser\n   * just gets a fresh URL on each call instead of cache-friendly mtime.\n   */\n  private makeBundleUrl(addonId: string, bundle: string): string {\n    const bundlePath = this.resolveBundlePath(addonId, bundle)\n    let mtime = Date.now()\n    if (bundlePath !== null) {\n      try { mtime = fs.statSync(bundlePath).mtimeMs }\n      catch { /* remote addon — no local file */ }\n    }\n    const v = Math.floor(mtime)\n    return `/api/addon-pages/${addonId}/${bundle}?v=${v}`\n  }\n\n  /**\n   * Resolve the local filesystem path for an addon's bundle. Mirrors\n   * `AddonPagesService.resolveBundle` (server-side), but without the\n   * existence / traversal checks — those still live on the server's\n   * static file route. We only need a stat-able path here for the\n   * `mtime` cache-buster.\n   */\n  private resolveBundlePath(addonId: string, bundle: string): string | null {\n    const paths = this.resolvedPaths\n    if (!paths) return null\n    const addonDistPath = path.join(paths.addonsDir, '@camstack', `addon-${addonId}`, 'dist')\n    const resolvedBase = path.resolve(addonDistPath)\n    const resolvedFile = path.resolve(addonDistPath, bundle)\n    if (!resolvedFile.startsWith(resolvedBase + path.sep) && resolvedFile !== resolvedBase) {\n      return null\n    }\n    return resolvedFile\n  }\n\n  // ── Path resolution ──────────────────────────────────────────────\n\n  /**\n   * Read `server.dataPath` from the cluster yml-backed sections (same\n   * source the server uses at boot), then derive the addons directory\n   * from it. Falls back to `camstack-data/addons` when no settings API\n   * is available — agents and isolated tests don't see this addon, so\n   * the fallback is purely defensive.\n   */\n  private async resolvePaths(): Promise<ResolvedPaths> {\n    const fallback: ResolvedPaths = { addonsDir: path.resolve('camstack-data', 'addons') }\n    if (!this.ctx.settings) return fallback\n    try {\n      const server = await this.ctx.settings.getSection('server')\n      const dataPath = typeof server['dataPath'] === 'string' && server['dataPath']\n        ? server['dataPath']\n        : 'camstack-data'\n      return { addonsDir: path.resolve(dataPath, 'addons') }\n    } catch (err: unknown) {\n      this.ctx.logger.debug('Failed to read server.dataPath — falling back', {\n        meta: { error: errMsg(err) },\n      })\n      return fallback\n    }\n  }\n}\n\nexport default AddonPagesAggregatorAddon\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,IAAM,mBAAsC;CAAC;CAAK;CAAM;CAAK;AAE7D,IAAa,4BAAb,cAA+C,gBAAA,UAAU;CACvD,KAAc;CAEd,gBAA8C;;;;;;;;;CAU9C,2BAA4B,IAAI,KAAuC;;CAGvE,8BAA+B,IAAI,KAA6B;CAEhE,cAAc;EAAE,MAAM,EAAE,CAAC;;CAEzB,MAAgB,eAAgD;EAC9D,KAAK,gBAAgB,MAAM,KAAK,cAAc;EAE9C,MAAM,WAA0C,EAC9C,WAAW,YAA+C,KAAK,WAAW,EAC3E;EAED,KAAK,IAAI,OAAO,KAAK,yDAAyD;EAC9E,OAAO,CAAC;GAAE,YAAY,gBAAA;GAAsB;GAAU,CAAC;;CAGzD,MAAgB,aAA4B;EAC1C,KAAK,MAAM,KAAK,KAAK,YAAY,QAAQ,EAAE,aAAa,EAAE;EAC1D,KAAK,YAAY,OAAO;EACxB,KAAK,SAAS,OAAO;;CAKvB,MAAc,YAA+C;EAC3D,MAAM,UAAU,KAAK,cAAc,cAAkC,qBAAqB,IAAI,EAAE;EAChG,MAAM,MAAuB,EAAE;EAC/B,MAAM,0BAAU,IAAI,KAAa;EAEjC,KAAK,MAAM,UAAU,SAAS;GAC5B,QAAQ,IAAI,OAAO,GAAG;GACtB,IAAI;IAGF,MAAM,YAA4B,MADd,QAAQ,QAAQ,OAAO,WAAW,CAAC,EACf,KAAK,UAAU;KACrD,SAAS,OAAO;KAChB;KACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,OAAO;KACtD,EAAE;IACH,KAAK,MAAM,QAAQ,UAAU,IAAI,KAAK,KAAK;IAE3C,KAAK,SAAS,IAAI,OAAO,IAAI,SAAS;YAC/B,KAAc;IACrB,MAAM,WAAA,GAAA,gBAAA,QAAiB,IAAI;IAC3B,KAAK,IAAI,OAAO,KAAK,sCAAsC,EACzD,MAAM;KAAE,UAAU,OAAO;KAAI,OAAO;KAAS,EAC9C,CAAC;IAIF,MAAM,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG;IAC3C,IAAI,WAAW,KAAA,GAAW;KACxB,KAAK,MAAM,QAAQ,QAAQ,IAAI,KAAK,KAAK;KACzC,KAAK,IAAI,OAAO,KAAK,sDAAsD,EACzE,MAAM;MAAE,UAAU,OAAO;MAAI,aAAa,OAAO;MAAQ,EAC1D,CAAC;;IAKJ,KAAK,cAAc,OAAO,GAAG;;;EAMjC,KAAK,MAAM,YAAY,KAAK,SAAS,MAAM,EACzC,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,KAAK,SAAS,OAAO,SAAS;EAG5D,OAAO;;;;;;;;;CAYT,cAAsB,UAAkB,UAAU,GAAS;EACzD,IAAI,WAAW,iBAAiB,QAAQ;EACxC,IAAI,KAAK,YAAY,IAAI,SAAS,EAAE;EAEpC,MAAM,UAAU,iBAAiB,YAAY,iBAAiB,iBAAiB,SAAS;EACxF,MAAM,QAAQ,iBAAiB;GAC7B,KAAK,YAAY,OAAO,SAAS;GACjC,KAAU,YAAY,UAAU,QAAQ;KACvC,QAAQ;EACX,KAAK,YAAY,IAAI,UAAU,MAAM;;CAGvC,MAAc,YAAY,UAAkB,SAAgC;EAE1E,MAAM,UADU,KAAK,cAAc,cAAkC,qBAAqB,IAAI,EAAE,EACzE,MAAM,MAAM,EAAE,OAAO,SAAS;EACrD,IAAI,CAAC,QAAQ;EAEb,IAAI;GAEF,MAAM,YAA4B,MADd,QAAQ,QAAQ,OAAO,WAAW,CAAC,EACf,KAAK,UAAU;IACrD,SAAS,OAAO;IAChB;IACA,WAAW,KAAK,cAAc,OAAO,IAAI,KAAK,OAAO;IACtD,EAAE;GACH,KAAK,SAAS,IAAI,OAAO,IAAI,SAAS;GACtC,KAAK,IAAI,OAAO,KAAK,4CAA4C,EAC/D,MAAM;IAAE;IAAU,SAAS,UAAU;IAAG,OAAO,SAAS;IAAQ,EACjE,CAAC;GAEF,KAAK,IAAI,SAAS,KAAK;IACrB,KAAA,GAAA,YAAA,aAAgB;IAChB,2BAAW,IAAI,MAAM;IACrB,QAAQ;KAAE,MAAM;KAAS,IAAI,KAAK;KAAI;IACtC,UAAU,gBAAA,cAAc;IACxB,MAAM;KAAE,SAAS;KAAU,WAAW;KAAM;IAC7C,CAAC;WACK,KAAc;GACrB,KAAK,IAAI,OAAO,MAAM,mCAAmC,EACvD,MAAM;IAAE;IAAU,SAAS,UAAU;IAAG,QAAA,GAAA,gBAAA,QAAc,IAAI;IAAE,EAC7D,CAAC;GACF,KAAK,cAAc,UAAU,UAAU,EAAE;;;;;;;;;CAY7C,cAAsB,SAAiB,QAAwB;EAC7D,MAAM,aAAa,KAAK,kBAAkB,SAAS,OAAO;EAC1D,IAAI,QAAQ,KAAK,KAAK;EACtB,IAAI,eAAe,MACjB,IAAI;GAAE,QAAQ,QAAG,SAAS,WAAW,CAAC;UAChC;EAGR,OAAO,oBAAoB,QAAQ,GAAG,OAAO,KADnC,KAAK,MAAM,MAC6B;;;;;;;;;CAUpD,kBAA0B,SAAiB,QAA+B;EACxE,MAAM,QAAQ,KAAK;EACnB,IAAI,CAAC,OAAO,OAAO;EACnB,MAAM,gBAAgB,UAAK,KAAK,MAAM,WAAW,aAAa,SAAS,WAAW,OAAO;EACzF,MAAM,eAAe,UAAK,QAAQ,cAAc;EAChD,MAAM,eAAe,UAAK,QAAQ,eAAe,OAAO;EACxD,IAAI,CAAC,aAAa,WAAW,eAAe,UAAK,IAAI,IAAI,iBAAiB,cACxE,OAAO;EAET,OAAO;;;;;;;;;CAYT,MAAc,eAAuC;EACnD,MAAM,WAA0B,EAAE,WAAW,UAAK,QAAQ,iBAAiB,SAAS,EAAE;EACtF,IAAI,CAAC,KAAK,IAAI,UAAU,OAAO;EAC/B,IAAI;GACF,MAAM,SAAS,MAAM,KAAK,IAAI,SAAS,WAAW,SAAS;GAC3D,MAAM,WAAW,OAAO,OAAO,gBAAgB,YAAY,OAAO,cAC9D,OAAO,cACP;GACJ,OAAO,EAAE,WAAW,UAAK,QAAQ,UAAU,SAAS,EAAE;WAC/C,KAAc;GACrB,KAAK,IAAI,OAAO,MAAM,iDAAiD,EACrE,MAAM,EAAE,QAAA,GAAA,gBAAA,QAAc,IAAI,EAAE,EAC7B,CAAC;GACF,OAAO"}