@camstack/core 0.1.15 → 0.1.17

package/dist/builtins/alerts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/builtins/alerts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/builtins/alerts/index.js

@@ -1,443 +1,3 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/builtins/alerts/index.ts
-var alerts_exports = {};
-__export(alerts_exports, {
-  AlertCenterAddon: () => AlertCenterAddon
-});
-module.exports = __toCommonJS(alerts_exports);
-
-// src/builtins/alerts/alerts.addon.ts
-var import_types = require("@camstack/types");
-var import_types2 = require("@camstack/types");
-var CATEGORY_MAPPINGS = {
-  // ── Critical — always surface ──────────────────────────────────────
-  "addon.crashed": { severity: "error", titleTemplate: "Addon crashed" },
-  "addon.error": { severity: "error", titleTemplate: "Addon error" },
-  "process.crashed": { severity: "error", titleTemplate: "Process crashed" },
-  "recording.error": { severity: "error", titleTemplate: "Recording error" },
-  "recording.storage.critical": { severity: "warning", titleTemplate: "Storage critical" },
-  "notification.failed": { severity: "error", titleTemplate: "Notification failed" },
-  // ── Cluster — agent connect/disconnect ─────────────────────────────
-  "agent.online": { severity: "info", titleTemplate: "Agent connected" },
-  "agent.offline": { severity: "warning", titleTemplate: "Agent disconnected" },
-  // ── System lifecycle ──────────────────────────────────────────────
-  "system.boot": { severity: "info", titleTemplate: "System boot" },
-  "system.restarting": { severity: "warning", titleTemplate: "System restarting" },
-  // ── Device lifecycle (add/remove only, not settings tweaks) ───────
-  "device.registered": { severity: "info", titleTemplate: "Device registered" },
-  "device.unregistered": { severity: "warning", titleTemplate: "Device unregistered" },
-  // ── Package management ────────────────────────────────────────────
-  "addon.installed": { severity: "info", titleTemplate: "Addon installed" },
-  "addon.updated": { severity: "info", titleTemplate: "Addon updated" },
-  "addon.uninstalled": { severity: "info", titleTemplate: "Addon uninstalled" },
-  // ── Backup (rare, important) ──────────────────────────────────────
-  "backup.completed": { severity: "info", titleTemplate: "Backup completed" },
-  "backup.restored": { severity: "info", titleTemplate: "Backup restored" },
-  // ── Model downloads (in-progress merging path) ────────────────────
-  "model.download.progress": { severity: "info", titleTemplate: "Model download" }
-};
-var TRACKED_CATEGORIES = Object.keys(CATEGORY_MAPPINGS);
-var RATE_LIMIT_WINDOW_MS = 6e4;
-var RATE_LIMIT_MAX_PER_SOURCE = 5;
-function parseAlert(record) {
-  return import_types2.AlertSchema.parse({ id: record.id, ...record.data });
-}
-var DEFAULT_CONFIG = {
-  maxAlerts: 500,
-  retentionDays: 30
-};
-var ALERTS_COLLECTION = "alerts";
-var EVENT_SOURCE = { type: "addon", id: "alert-center" };
-var AlertCenterAddon = class extends import_types2.BaseAddon {
-  unsubscribers = [];
-  constructor() {
-    super({ ...DEFAULT_CONFIG });
-  }
-  /**
-   * Per `(category, source.id)` counter used to rate-limit chatty
-   * events. Entries are pruned lazily when they age out of
-   * `RATE_LIMIT_WINDOW_MS`; see `shouldSuppressByRate()` below.
-   */
-  rateLimitCounters = /* @__PURE__ */ new Map();
-  async onInitialize() {
-    const alertsProvider = {
-      emit: (alert) => this.emitAlert(alert),
-      update: (input) => this.updateAlert(input.alertId, input.patch),
-      list: (filter) => this.listAlerts(filter),
-      getUnreadCount: () => this.getUnreadCount(),
-      markRead: (input) => this.markRead(input.alertId),
-      markAllRead: () => this.markAllRead(),
-      dismiss: (input) => this.dismiss(input.alertId)
-    };
-    const unsubs = [];
-    for (const category of TRACKED_CATEGORIES) {
-      const unsub = this.ctx.eventBus.subscribe(
-        { category },
-        (event) => {
-          void this.handleEvent(category, event);
-        }
-      );
-      unsubs.push(unsub);
-    }
-    this.unsubscribers = unsubs;
-    this.ctx.logger.info("Initialized", { meta: { trackedCategoriesCount: TRACKED_CATEGORIES.length } });
-    return [{ capability: import_types2.alertsCapability, provider: alertsProvider }];
-  }
-  async onShutdown() {
-    for (const unsub of this.unsubscribers) {
-      unsub();
-    }
-    this.unsubscribers = [];
-  }
-  globalSettingsSchema() {
-    return this.schema({
-      sections: [{
-        id: "alerts",
-        title: "Alert Center",
-        description: "Configure alert storage and retention.",
-        columns: 1,
-        fields: [
-          this.field({
-            type: "number",
-            key: "maxAlerts",
-            label: "Maximum stored alerts",
-            description: "Oldest read alerts are deleted when this limit is exceeded.",
-            min: 50,
-            max: 5e3,
-            step: 50,
-            default: 500
-          }),
-          this.field({
-            type: "number",
-            key: "retentionDays",
-            label: "Alert retention (days)",
-            description: "Alerts older than this are automatically removed.",
-            min: 1,
-            max: 365,
-            step: 1,
-            default: 30
-          })
-        ]
-      }]
-    });
-  }
-  // ── Public methods (called by the tRPC router) ────────────────────
-  async listAlerts(filter) {
-    const backend = this.ctx.api.settingsStore;
-    if (!backend) return [];
-    const whereClause = {};
-    if (filter?.unreadOnly) {
-      whereClause.read = false;
-    }
-    const records = await backend.query.query({ collection: ALERTS_COLLECTION, filter: {
-      where: Object.keys(whereClause).length > 0 ? whereClause : void 0,
-      orderBy: { field: "updatedAt", direction: "desc" },
-      limit: filter?.limit ?? 100
-    } });
-    return records.map(parseAlert);
-  }
-  async getUnreadCount() {
-    const backend = this.ctx.api.settingsStore;
-    if (!backend) return 0;
-    return backend.count.query({ collection: ALERTS_COLLECTION, filter: { where: { read: false } } });
-  }
-  async markRead(alertId) {
-    await this.mergeUpdate(alertId, { read: true, updatedAt: Date.now() });
-  }
-  async markAllRead() {
-    const backend = this.ctx.api.settingsStore;
-    if (!backend) return;
-    const unread = await backend.query.query({ collection: ALERTS_COLLECTION, filter: { where: { read: false } } });
-    const now = Date.now();
-    for (const record of unread) {
-      await this.mergeUpdate(record.id, { read: true, updatedAt: now });
-    }
-  }
-  async dismiss(alertId) {
-    await this.mergeUpdate(alertId, {
-      status: "dismissed",
-      read: true,
-      updatedAt: Date.now()
-    });
-  }
-  // ── Private: event handling ──────────────────────────────────────
-  async handleEvent(category, event) {
-    try {
-      if (category === "model.download.progress") {
-        await this.handleModelDownload(event);
-        return;
-      }
-      const mapping = CATEGORY_MAPPINGS[category];
-      if (!mapping) return;
-      if (this.shouldSuppressByRate(category, event)) return;
-      const message = this.buildMessage(category, event.data);
-      const alert = {
-        id: crypto.randomUUID(),
-        category,
-        severity: mapping.severity,
-        title: mapping.titleTemplate,
-        message,
-        status: "active",
-        read: false,
-        createdAt: Date.now(),
-        updatedAt: Date.now(),
-        source: event.source ? { type: event.source.type, id: String(event.source.id) } : void 0,
-        metadata: event.data
-      };
-      await this.emitAlert(alert);
-    } catch (err) {
-      this.ctx.logger?.warn(
-        "Failed to handle event",
-        { meta: { category, error: (0, import_types2.errMsg)(err) } }
-      );
-    }
-  }
-  async handleModelDownload(event) {
-    const data = event.data;
-    const modelId = data.modelId ?? "unknown";
-    const progress = data.progress ?? 0;
-    const stableId = `model-download:${modelId}`;
-    const backend = this.ctx.api.settingsStore;
-    if (!backend) return;
-    const existing = await backend.query.query({ collection: ALERTS_COLLECTION, filter: {
-      where: { id: stableId }
-    } });
-    if (existing.length > 0) {
-      const now = Date.now();
-      if (progress >= 100) {
-        await this.mergeUpdate(stableId, {
-          status: "completed",
-          progress: 100,
-          message: `Model "${modelId}" download completed`,
-          updatedAt: now
-        });
-        this.emitAlertUpdatedEvent(stableId, { status: "completed", progress: 100 });
-      } else if (progress < 0) {
-        await this.mergeUpdate(stableId, {
-          status: "failed",
-          message: `Model "${modelId}" download failed`,
-          updatedAt: now
-        });
-        this.emitAlertUpdatedEvent(stableId, { status: "failed" });
-      } else {
-        await this.mergeUpdate(stableId, {
-          progress,
-          message: `Downloading model "${modelId}" \u2014 ${String(Math.round(progress))}%`,
-          updatedAt: now
-        });
-        this.emitAlertUpdatedEvent(stableId, { progress });
-      }
-    } else {
-      const alert = {
-        id: stableId,
-        category: import_types.EventCategory.ModelDownloadProgress,
-        severity: "info",
-        title: "Model download",
-        message: `Downloading model "${modelId}" \u2014 ${String(Math.round(progress))}%`,
-        status: "in-progress",
-        progress,
-        read: false,
-        createdAt: Date.now(),
-        updatedAt: Date.now(),
-        source: event.source ? { type: event.source.type, id: String(event.source.id) } : void 0,
-        metadata: { modelId }
-      };
-      await this.persistAlert(alert);
-      this.emitAlertCreatedEvent(alert);
-    }
-  }
-  /**
-   * `[ALERT-CENTER-EVENTS]` — rate limit a `(category, source.id)`
-   * tuple. Returns `true` when the caller should DROP this event
-   * without persisting an alert, and `false` when the alert should
-   * proceed normally.
-   *
-   * Heuristic: the first `RATE_LIMIT_MAX_PER_SOURCE` events within a
-   * `RATE_LIMIT_WINDOW_MS` window go through. Once the threshold is
-   * crossed, subsequent events are suppressed until the window rolls
-   * over. When the threshold is first crossed, the suppression is
-   * logged once so operators know why they're not seeing the follow-
-   * up alerts; after the window rolls over the next event is
-   * un-suppressed and starts a new window.
-   */
-  shouldSuppressByRate(category, event) {
-    const sourceId = event.source?.id ?? "unknown";
-    const key = `${category}::${sourceId}`;
-    const now = Date.now();
-    const entry = this.rateLimitCounters.get(key);
-    if (!entry || now - entry.firstAt > RATE_LIMIT_WINDOW_MS) {
-      this.rateLimitCounters.set(key, { firstAt: now, count: 1, suppressedLogged: false });
-      return false;
-    }
-    entry.count += 1;
-    if (entry.count <= RATE_LIMIT_MAX_PER_SOURCE) return false;
-    if (!entry.suppressedLogged) {
-      entry.suppressedLogged = true;
-      this.ctx.logger?.info(
-        "rate-limiting suppressing remainder of window",
-        { meta: { category, sourceId, maxPerSource: RATE_LIMIT_MAX_PER_SOURCE, windowSeconds: RATE_LIMIT_WINDOW_MS / 1e3 } }
-      );
-    }
-    return true;
-  }
-  buildMessage(category, data) {
-    const addonId = data.addonId;
-    const deviceId = data.deviceId;
-    const error = data.error;
-    const processId = data.processId;
-    switch (category) {
-      case "addon.crashed":
-        return `Addon "${addonId ?? "unknown"}" crashed${error ? `: ${error}` : ""}`;
-      case "addon.error":
-        return `Addon "${addonId ?? "unknown"}" error${error ? `: ${error}` : ""}`;
-      case "addon.installed":
-        return `Addon "${addonId ?? "unknown"}" installed`;
-      case "addon.updated": {
-        const from = data.fromVersion;
-        const to = data.toVersion;
-        return `Addon "${addonId ?? "unknown"}" updated${from && to ? ` from ${from} to ${to}` : ""}`;
-      }
-      case "addon.uninstalled":
-        return `Addon "${addonId ?? "unknown"}" uninstalled`;
-      case "device.registered":
-        return `Device "${data.name ?? deviceId ?? "unknown"}" registered`;
-      case "device.unregistered":
-        return `Device "${deviceId ?? "unknown"}" unregistered`;
-      case "agent.online":
-        return `Agent "${data.agentId ?? data.nodeId ?? "unknown"}" connected`;
-      case "agent.offline":
-        return `Agent "${data.agentId ?? data.nodeId ?? "unknown"}" disconnected${data.reason ? `: ${String(data.reason)}` : ""}`;
-      case "backup.completed":
-        return `Backup completed${data.targetId ? ` (${String(data.targetId)})` : ""}`;
-      case "backup.restored":
-        return `Backup restored${data.source ? ` from ${String(data.source)}` : ""}`;
-      case "notification.failed":
-        return `Notification failed${error ? `: ${error}` : ""}`;
-      case "system.restarting":
-        return `System restarting${data.reason ? ` \u2014 ${String(data.reason)}` : ""}`;
-      case "recording.error":
-        return `Recording error on device "${deviceId ?? "unknown"}"${error ? `: ${error}` : ""}`;
-      case "recording.storage.critical":
-        return `Storage critical for device "${deviceId ?? "unknown"}"`;
-      case "system.boot":
-        return `System booted in "${data.mode ?? "unknown"}" mode`;
-      case "process.crashed":
-        return `Process "${processId ?? "unknown"}" crashed`;
-      default:
-        return `Event: ${category}`;
-    }
-  }
-  // ── Private: persistence ─────────────────────────────────────────
-  async emitAlert(alert) {
-    await this.persistAlert(alert);
-    this.emitAlertCreatedEvent(alert);
-    await this.enforceMaxAlerts();
-    await this.enforceRetention();
-  }
-  async updateAlert(alertId, patch) {
-    await this.mergeUpdate(alertId, { ...patch, updatedAt: Date.now() });
-    this.emitAlertUpdatedEvent(alertId, patch);
-  }
-  /**
-   * Read-merge-write: SettingsBackend.update() replaces the entire `data` blob,
-   * so we must read the existing record, merge the patch, and write back.
-   */
-  async mergeUpdate(id, patch) {
-    const backend = this.ctx.api.settingsStore;
-    if (!backend) return;
-    const raw = await backend.get.query({ collection: ALERTS_COLLECTION, key: id });
-    if (raw === null || raw === void 0 || typeof raw !== "object") return;
-    const existing = Object.fromEntries(Object.entries(raw));
-    await backend.set.mutate({ collection: ALERTS_COLLECTION, key: id, value: { ...existing, ...patch } });
-  }
-  async persistAlert(alert) {
-    const backend = this.ctx.api.settingsStore;
-    if (!backend) return;
-    const data = {
-      id: alert.id,
-      category: alert.category,
-      severity: alert.severity,
-      title: alert.title,
-      message: alert.message,
-      status: alert.status,
-      read: alert.read,
-      createdAt: alert.createdAt,
-      updatedAt: alert.updatedAt,
-      ...alert.progress !== void 0 ? { progress: alert.progress } : {},
-      ...alert.source ? { source: alert.source } : {},
-      ...alert.metadata ? { metadata: alert.metadata } : {}
-    };
-    await backend.set.mutate({ collection: ALERTS_COLLECTION, key: alert.id, value: data });
-  }
-  emitAlertCreatedEvent(alert) {
-    this.ctx.eventBus?.emit((0, import_types2.createEvent)("alert.created", EVENT_SOURCE, {
-      id: alert.id,
-      category: alert.category,
-      severity: alert.severity,
-      title: alert.title,
-      status: alert.status
-    }));
-  }
-  emitAlertUpdatedEvent(alertId, patch) {
-    const patchRecord = {};
-    for (const [key, value] of Object.entries(patch)) {
-      patchRecord[key] = value;
-    }
-    this.ctx.eventBus?.emit((0, import_types2.createEvent)("alert.updated", EVENT_SOURCE, {
-      alertId,
-      patch: patchRecord
-    }));
-  }
-  async enforceMaxAlerts() {
-    const backend = this.ctx.api.settingsStore;
-    if (!backend) return;
-    const total = await backend.count.query({ collection: ALERTS_COLLECTION });
-    if (total <= this.config.maxAlerts) return;
-    const excess = total - this.config.maxAlerts;
-    const oldest = await backend.query.query({ collection: ALERTS_COLLECTION, filter: {
-      where: { read: true },
-      orderBy: { field: "createdAt", direction: "asc" },
-      limit: excess
-    } });
-    for (const record of oldest) {
-      await backend.delete.mutate({ collection: ALERTS_COLLECTION, key: record.id });
-    }
-  }
-  async enforceRetention() {
-    const backend = this.ctx.api.settingsStore;
-    if (!backend) return;
-    const cutoff = Date.now() - this.config.retentionDays * 24 * 60 * 60 * 1e3;
-    const expired = await backend.query.query({ collection: ALERTS_COLLECTION, filter: {
-      where: { read: true },
-      orderBy: { field: "createdAt", direction: "asc" }
-    } });
-    for (const record of expired) {
-      if (Number(record.data["createdAt"] ?? 0) < cutoff) {
-        await backend.delete.mutate({ collection: ALERTS_COLLECTION, key: record.id });
-      }
-    }
-  }
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  AlertCenterAddon
-});
-//# sourceMappingURL=index.js.map
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_builtins_alerts_alerts_addon = require("./alerts.addon.js");
+exports.AlertCenterAddon = require_builtins_alerts_alerts_addon.AlertCenterAddon;

package/dist/builtins/alerts/index.mjs

@@ -1,8 +1,2 @@
-import "../../chunk-2CIYKDRN.mjs";
-import {
-  AlertCenterAddon
-} from "../../chunk-4OOHFJHT.mjs";
-export {
-  AlertCenterAddon
-};
-//# sourceMappingURL=index.mjs.map
+import { AlertCenterAddon } from "./alerts.addon.mjs";
+export { AlertCenterAddon };

package/dist/builtins/auth-orchestrator/auth-orchestrator.addon.d.ts

@@ -0,0 +1,8 @@
+import { BaseAddon, ProviderRegistration } from '@camstack/types';
+export declare class AuthOrchestratorAddon extends BaseAddon<Record<string, never>> {
+    constructor();
+    protected onInitialize(): Promise<ProviderRegistration[]>;
+    private listProviders;
+}
+export default AuthOrchestratorAddon;
+//# sourceMappingURL=auth-orchestrator.addon.d.ts.map

package/dist/builtins/auth-orchestrator/auth-orchestrator.addon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-orchestrator.addon.d.ts","sourceRoot":"","sources":["../../../src/builtins/auth-orchestrator/auth-orchestrator.addon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,SAAS,EAIT,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAA;AAYxB,qBAAa,qBAAsB,SAAQ,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;;cAKzD,YAAY,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAgBjD,aAAa;CAa5B;AAED,eAAe,qBAAqB,CAAA"}

package/dist/builtins/auth-orchestrator/auth-orchestrator.addon.js

@@ -0,0 +1,56 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+require("../../chunk-C13QxCFV.js");
+let _camstack_types = require("@camstack/types");
+//#region src/builtins/auth-orchestrator/auth-orchestrator.addon.ts
+/**
+* Authentication orchestrator — singleton facade over the
+* `auth-provider` collection. Mirrors the backup-orchestrator pattern:
+* UI consumers go through this builtin, which walks the
+* `auth-provider` collection registered by `local-auth` and any
+* additional `auth-*` addons (OIDC, SAML, LDAP, …) and returns a
+* curated view.
+*
+* The actual login flow still goes through `auth-provider`
+* collection methods (validateCredentials / getLoginUrl / …); this
+* cap exists so the admin UI's "Authentication" page and the login
+* screen's provider picker have ONE place to query instead of
+* walking the collection themselves.
+*/
+var AuthOrchestratorAddon = class extends _camstack_types.BaseAddon {
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		const provider = {
+			listProviders: async () => this.listProviders(),
+			setProviderEnabled: async () => {
+				return { success: true };
+			}
+		};
+		this.ctx.logger.info("Authentication orchestrator initialized");
+		return [{
+			capability: _camstack_types.authenticationCapability,
+			provider
+		}];
+	}
+	async listProviders() {
+		return (this.capabilities?.getCollectionEntries("auth-provider") ?? []).map(([addonId, raw]) => ({
+			addonId: raw?.addonId ?? addonId,
+			displayName: raw?.displayName ?? addonId,
+			kind: raw?.kind ?? (addonId === "local-auth" ? "local" : "other"),
+			...raw?.icon !== void 0 ? { icon: raw.icon } : {},
+			hasRedirectFlow: raw?.hasRedirectFlow ?? false,
+			hasCredentialFlow: raw?.hasCredentialFlow ?? addonId === "local-auth",
+			...raw?.status !== void 0 ? { status: raw.status } : {},
+			enabled: true
+		}));
+	}
+};
+//#endregion
+exports.AuthOrchestratorAddon = AuthOrchestratorAddon;
+exports.default = AuthOrchestratorAddon;
+
+//# sourceMappingURL=auth-orchestrator.addon.js.map

package/dist/builtins/auth-orchestrator/auth-orchestrator.addon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-orchestrator.addon.js","names":[],"sources":["../../../src/builtins/auth-orchestrator/auth-orchestrator.addon.ts"],"sourcesContent":["/**\n * Authentication orchestrator — singleton facade over the\n * `auth-provider` collection. Mirrors the backup-orchestrator pattern:\n * UI consumers go through this builtin, which walks the\n * `auth-provider` collection registered by `local-auth` and any\n * additional `auth-*` addons (OIDC, SAML, LDAP, …) and returns a\n * curated view.\n *\n * The actual login flow still goes through `auth-provider`\n * collection methods (validateCredentials / getLoginUrl / …); this\n * cap exists so the admin UI's \"Authentication\" page and the login\n * screen's provider picker have ONE place to query instead of\n * walking the collection themselves.\n */\nimport {\n  BaseAddon,\n  authenticationCapability,\n  type AuthProviderInfo,\n  type IAuthenticationProvider,\n  type ProviderRegistration,\n} from '@camstack/types'\n\ninterface AuthProviderRegistrationLike {\n  readonly addonId?: string\n  readonly displayName?: string\n  readonly kind?: AuthProviderInfo['kind']\n  readonly icon?: string\n  readonly hasRedirectFlow?: boolean\n  readonly hasCredentialFlow?: boolean\n  readonly status?: string\n}\n\nexport class AuthOrchestratorAddon extends BaseAddon<Record<string, never>> {\n  constructor() {\n    super({})\n  }\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    const provider: IAuthenticationProvider = {\n      listProviders: async () => this.listProviders(),\n      setProviderEnabled: async () => {\n        // Persistence is per-addon today — operators toggle enabled\n        // via the provider addon's own settings panel. The orchestrator\n        // exposes the affordance for forward-compat (UI may move the\n        // enabled toggle into the Authentication page later) but\n        // currently no-ops the persistence side.\n        return { success: true as const }\n      },\n    }\n    this.ctx.logger.info('Authentication orchestrator initialized')\n    return [{ capability: authenticationCapability, provider }]\n  }\n\n  private async listProviders(): Promise<readonly AuthProviderInfo[]> {\n    const entries = this.capabilities?.getCollectionEntries<AuthProviderRegistrationLike>('auth-provider') ?? []\n    return entries.map(([addonId, raw]) => ({\n      addonId: raw?.addonId ?? addonId,\n      displayName: raw?.displayName ?? addonId,\n      kind: raw?.kind ?? (addonId === 'local-auth' ? ('local' as const) : ('other' as const)),\n      ...(raw?.icon !== undefined ? { icon: raw.icon } : {}),\n      hasRedirectFlow: raw?.hasRedirectFlow ?? false,\n      hasCredentialFlow: raw?.hasCredentialFlow ?? (addonId === 'local-auth'),\n      ...(raw?.status !== undefined ? { status: raw.status } : {}),\n      enabled: true,\n    }))\n  }\n}\n\nexport default AuthOrchestratorAddon\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAgCA,IAAa,wBAAb,cAA2C,gBAAA,UAAiC;CAC1E,cAAc;EACZ,MAAM,EAAE,CAAC;;CAGX,MAAgB,eAAgD;EAC9D,MAAM,WAAoC;GACxC,eAAe,YAAY,KAAK,eAAe;GAC/C,oBAAoB,YAAY;IAM9B,OAAO,EAAE,SAAS,MAAe;;GAEpC;EACD,KAAK,IAAI,OAAO,KAAK,0CAA0C;EAC/D,OAAO,CAAC;GAAE,YAAY,gBAAA;GAA0B;GAAU,CAAC;;CAG7D,MAAc,gBAAsD;EAElE,QADgB,KAAK,cAAc,qBAAmD,gBAAgB,IAAI,EAAE,EAC7F,KAAK,CAAC,SAAS,UAAU;GACtC,SAAS,KAAK,WAAW;GACzB,aAAa,KAAK,eAAe;GACjC,MAAM,KAAK,SAAS,YAAY,eAAgB,UAAqB;GACrE,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,IAAI,MAAM,GAAG,EAAE;GACrD,iBAAiB,KAAK,mBAAmB;GACzC,mBAAmB,KAAK,qBAAsB,YAAY;GAC1D,GAAI,KAAK,WAAW,KAAA,IAAY,EAAE,QAAQ,IAAI,QAAQ,GAAG,EAAE;GAC3D,SAAS;GACV,EAAE"}

package/dist/builtins/auth-orchestrator/auth-orchestrator.addon.mjs

@@ -0,0 +1,50 @@
+import { BaseAddon, authenticationCapability } from "@camstack/types";
+//#region src/builtins/auth-orchestrator/auth-orchestrator.addon.ts
+/**
+* Authentication orchestrator — singleton facade over the
+* `auth-provider` collection. Mirrors the backup-orchestrator pattern:
+* UI consumers go through this builtin, which walks the
+* `auth-provider` collection registered by `local-auth` and any
+* additional `auth-*` addons (OIDC, SAML, LDAP, …) and returns a
+* curated view.
+*
+* The actual login flow still goes through `auth-provider`
+* collection methods (validateCredentials / getLoginUrl / …); this
+* cap exists so the admin UI's "Authentication" page and the login
+* screen's provider picker have ONE place to query instead of
+* walking the collection themselves.
+*/
+var AuthOrchestratorAddon = class extends BaseAddon {
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		const provider = {
+			listProviders: async () => this.listProviders(),
+			setProviderEnabled: async () => {
+				return { success: true };
+			}
+		};
+		this.ctx.logger.info("Authentication orchestrator initialized");
+		return [{
+			capability: authenticationCapability,
+			provider
+		}];
+	}
+	async listProviders() {
+		return (this.capabilities?.getCollectionEntries("auth-provider") ?? []).map(([addonId, raw]) => ({
+			addonId: raw?.addonId ?? addonId,
+			displayName: raw?.displayName ?? addonId,
+			kind: raw?.kind ?? (addonId === "local-auth" ? "local" : "other"),
+			...raw?.icon !== void 0 ? { icon: raw.icon } : {},
+			hasRedirectFlow: raw?.hasRedirectFlow ?? false,
+			hasCredentialFlow: raw?.hasCredentialFlow ?? addonId === "local-auth",
+			...raw?.status !== void 0 ? { status: raw.status } : {},
+			enabled: true
+		}));
+	}
+};
+//#endregion
+export { AuthOrchestratorAddon, AuthOrchestratorAddon as default };
+
+//# sourceMappingURL=auth-orchestrator.addon.mjs.map

package/dist/builtins/auth-orchestrator/auth-orchestrator.addon.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-orchestrator.addon.mjs","names":[],"sources":["../../../src/builtins/auth-orchestrator/auth-orchestrator.addon.ts"],"sourcesContent":["/**\n * Authentication orchestrator — singleton facade over the\n * `auth-provider` collection. Mirrors the backup-orchestrator pattern:\n * UI consumers go through this builtin, which walks the\n * `auth-provider` collection registered by `local-auth` and any\n * additional `auth-*` addons (OIDC, SAML, LDAP, …) and returns a\n * curated view.\n *\n * The actual login flow still goes through `auth-provider`\n * collection methods (validateCredentials / getLoginUrl / …); this\n * cap exists so the admin UI's \"Authentication\" page and the login\n * screen's provider picker have ONE place to query instead of\n * walking the collection themselves.\n */\nimport {\n  BaseAddon,\n  authenticationCapability,\n  type AuthProviderInfo,\n  type IAuthenticationProvider,\n  type ProviderRegistration,\n} from '@camstack/types'\n\ninterface AuthProviderRegistrationLike {\n  readonly addonId?: string\n  readonly displayName?: string\n  readonly kind?: AuthProviderInfo['kind']\n  readonly icon?: string\n  readonly hasRedirectFlow?: boolean\n  readonly hasCredentialFlow?: boolean\n  readonly status?: string\n}\n\nexport class AuthOrchestratorAddon extends BaseAddon<Record<string, never>> {\n  constructor() {\n    super({})\n  }\n\n  protected async onInitialize(): Promise<ProviderRegistration[]> {\n    const provider: IAuthenticationProvider = {\n      listProviders: async () => this.listProviders(),\n      setProviderEnabled: async () => {\n        // Persistence is per-addon today — operators toggle enabled\n        // via the provider addon's own settings panel. The orchestrator\n        // exposes the affordance for forward-compat (UI may move the\n        // enabled toggle into the Authentication page later) but\n        // currently no-ops the persistence side.\n        return { success: true as const }\n      },\n    }\n    this.ctx.logger.info('Authentication orchestrator initialized')\n    return [{ capability: authenticationCapability, provider }]\n  }\n\n  private async listProviders(): Promise<readonly AuthProviderInfo[]> {\n    const entries = this.capabilities?.getCollectionEntries<AuthProviderRegistrationLike>('auth-provider') ?? []\n    return entries.map(([addonId, raw]) => ({\n      addonId: raw?.addonId ?? addonId,\n      displayName: raw?.displayName ?? addonId,\n      kind: raw?.kind ?? (addonId === 'local-auth' ? ('local' as const) : ('other' as const)),\n      ...(raw?.icon !== undefined ? { icon: raw.icon } : {}),\n      hasRedirectFlow: raw?.hasRedirectFlow ?? false,\n      hasCredentialFlow: raw?.hasCredentialFlow ?? (addonId === 'local-auth'),\n      ...(raw?.status !== undefined ? { status: raw.status } : {}),\n      enabled: true,\n    }))\n  }\n}\n\nexport default AuthOrchestratorAddon\n"],"mappings":";;;;;;;;;;;;;;;;AAgCA,IAAa,wBAAb,cAA2C,UAAiC;CAC1E,cAAc;EACZ,MAAM,EAAE,CAAC;;CAGX,MAAgB,eAAgD;EAC9D,MAAM,WAAoC;GACxC,eAAe,YAAY,KAAK,eAAe;GAC/C,oBAAoB,YAAY;IAM9B,OAAO,EAAE,SAAS,MAAe;;GAEpC;EACD,KAAK,IAAI,OAAO,KAAK,0CAA0C;EAC/D,OAAO,CAAC;GAAE,YAAY;GAA0B;GAAU,CAAC;;CAG7D,MAAc,gBAAsD;EAElE,QADgB,KAAK,cAAc,qBAAmD,gBAAgB,IAAI,EAAE,EAC7F,KAAK,CAAC,SAAS,UAAU;GACtC,SAAS,KAAK,WAAW;GACzB,aAAa,KAAK,eAAe;GACjC,MAAM,KAAK,SAAS,YAAY,eAAgB,UAAqB;GACrE,GAAI,KAAK,SAAS,KAAA,IAAY,EAAE,MAAM,IAAI,MAAM,GAAG,EAAE;GACrD,iBAAiB,KAAK,mBAAmB;GACzC,mBAAmB,KAAK,qBAAsB,YAAY;GAC1D,GAAI,KAAK,WAAW,KAAA,IAAY,EAAE,QAAQ,IAAI,QAAQ,GAAG,EAAE;GAC3D,SAAS;GACV,EAAE"}

package/dist/builtins/auth-orchestrator/index.d.ts

@@ -0,0 +1,2 @@
+export { AuthOrchestratorAddon, default } from './auth-orchestrator.addon.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/builtins/auth-orchestrator/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/builtins/auth-orchestrator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAA"}

package/dist/builtins/auth-orchestrator/index.js

@@ -0,0 +1,7 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+const require_builtins_auth_orchestrator_auth_orchestrator_addon = require("./auth-orchestrator.addon.js");
+exports.AuthOrchestratorAddon = require_builtins_auth_orchestrator_auth_orchestrator_addon.AuthOrchestratorAddon;
+exports.default = require_builtins_auth_orchestrator_auth_orchestrator_addon.AuthOrchestratorAddon;

package/dist/builtins/auth-orchestrator/index.mjs

@@ -0,0 +1,2 @@
+import { AuthOrchestratorAddon } from "./auth-orchestrator.addon.mjs";
+export { AuthOrchestratorAddon, AuthOrchestratorAddon as default };