@camstack/server 0.1.7 → 0.2.0

package/src/__tests__/streaming-scale.test.ts

@@ -12,12 +12,17 @@ import type { IScopedLogger } from '@camstack/types'
 const FRIGATE = process.env.FRIGATE_HOST ?? ''
 
 const mockLogger: IScopedLogger = {
-  debug: () => {}, info: () => {}, warn: console.warn, error: console.error,
+  debug: () => {},
+  info: () => {},
+  warn: console.warn,
+  error: console.error,
   child: () => mockLogger,
 }
 const mockLoggingService = { createLogger: () => mockLogger }
 
-function wait(ms: number) { return new Promise(r => setTimeout(r, ms)) }
+function wait(ms: number) {
+  return new Promise((r) => setTimeout(r, ms))
+}
 
 /**
  * Poll-based replacement for the removed `IStreamBroker.onDecodedFrame`
@@ -49,27 +54,29 @@ async function discoverSubStreams(): Promise<Array<{ name: string; url: string }
   return new Promise((resolve, reject) => {
     const req = http.get(`http://${FRIGATE}:5000/api/config`, (res) => {
       let data = ''
-      res.on('data', (chunk: Buffer) => { data += chunk })
+      res.on('data', (chunk: Buffer) => {
+        data += chunk
+      })
       res.on('end', () => {
         try {
-          // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment -- 
+          // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment --
           const config = JSON.parse(data)
-          // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access -- 
+          // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access --
           const cameras = config.cameras || {}
           const streams: Array<{ name: string; url: string }> = []
-          // eslint-disable-next-line @typescript-eslint/no-explicit-any -- 
+          // eslint-disable-next-line @typescript-eslint/no-explicit-any --
           for (const [name, cam] of Object.entries(cameras) as [string, any][]) {
-            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access -- 
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access --
             if (!cam.enabled && cam.enabled !== undefined) continue
-            // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access -- 
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access --
             const inputs = cam?.ffmpeg?.inputs || []
             for (const inp of inputs) {
-              // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+              // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
               if (inp.roles?.includes('detect') && inp.path) {
                 let streamName: string
-                // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+                // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
                 if (inp.path.includes('8554/')) {
-                  // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+                  // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
                   streamName = inp.path.split('8554/').pop()!
                 } else {
                   streamName = `${name}_sub`
@@ -79,11 +86,16 @@ async function discoverSubStreams(): Promise<Array<{ name: string; url: string }
             }
           }
           resolve(streams)
-        } catch (e) { reject(e) }
+        } catch (e) {
+          reject(e)
+        }
       })
     })
     req.on('error', reject)
-    req.setTimeout(5000, () => { req.destroy(); reject(new Error('Timeout')) })
+    req.setTimeout(5000, () => {
+      req.destroy()
+      reject(new Error('Timeout'))
+    })
   })
 }
 
@@ -92,7 +104,7 @@ describe.skipIf(!FRIGATE)('Streaming Scale Test (requires Frigate)', () => {
   const manager = new StreamBrokerManager([new FfmpegDecoderProvider()], mockLogger)
 
   afterAll(async () => {
-    // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
     await manager.destroyAll()
     // Wait for ffmpeg processes to exit
     await wait(2000)
@@ -106,11 +118,13 @@ describe.skipIf(!FRIGATE)('Streaming Scale Test (requires Frigate)', () => {
     const workingStreams: typeof realStreams = []
     for (const s of realStreams.slice(0, 5)) {
       try {
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
         const broker = await manager.createBroker(`probe-${s.name}`, {
-          type: 'rtsp', url: s.url, videoCodec: 'h264',
+          type: 'rtsp',
+          url: s.url,
+          videoCodec: 'h264',
         })
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
         await (broker as any).start({ type: 'rtsp', url: s.url, videoCodec: 'h264' })
         const ok = await new Promise<boolean>((resolve) => {
           const timeout = setTimeout(() => resolve(false), 5000)
@@ -119,17 +133,25 @@ describe.skipIf(!FRIGATE)('Streaming Scale Test (requires Frigate)', () => {
             clearTimeout(timeout)
             void unsub?.()
             resolve(true)
-          }).then((fn) => { unsub = fn }).catch(() => resolve(false))
+          })
+            .then((fn) => {
+              unsub = fn
+            })
+            .catch(() => resolve(false))
         })
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
         await broker.stop()
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
         await manager.destroyBroker(`probe-${s.name}`)
         if (ok) workingStreams.push(s)
-      } catch { /* skip */ }
+      } catch {
+        /* skip */
+      }
     }
 
-    console.log(`\nDiscovered ${realStreams.length} sub-streams, ${workingStreams.length} responding`)
+    console.log(
+      `\nDiscovered ${realStreams.length} sub-streams, ${workingStreams.length} responding`,
+    )
     if (workingStreams.length === 0) {
       console.log('  No working sub-streams, skipping')
       return
@@ -148,7 +170,6 @@ describe.skipIf(!FRIGATE)('Streaming Scale Test (requires Frigate)', () => {
     const scaleLevels = [5, 10, 20, 30]
 
     for (const targetCount of scaleLevels) {
-
       console.log(`\n=== Scale: ${targetCount} sub-streams @ 2fps ===`)
 
       const memBefore = process.memoryUsage()
@@ -169,11 +190,13 @@ describe.skipIf(!FRIGATE)('Streaming Scale Test (requires Frigate)', () => {
         perCamera[s.name] = { frames: 0, totalBytes: 0 }
 
         try {
-          // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+          // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
           const broker = await manager.createBroker(brokerId, {
-            type: 'rtsp', url: s.url, videoCodec: 'h264',
+            type: 'rtsp',
+            url: s.url,
+            videoCodec: 'h264',
           })
-          // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+          // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
           await (broker as any).start({ type: 'rtsp', url: s.url, videoCodec: 'h264' })
 
           // Wait for first frame with tight timeout
@@ -187,7 +210,11 @@ describe.skipIf(!FRIGATE)('Streaming Scale Test (requires Frigate)', () => {
               clearTimeout(timeout)
               void unsub?.()
               resolve()
-            }).then((fn) => { unsub = fn }).catch(() => resolve())
+            })
+              .then((fn) => {
+                unsub = fn
+              })
+              .catch(() => resolve())
           })
 
           // Subscribe for motion analysis
@@ -204,7 +231,9 @@ describe.skipIf(!FRIGATE)('Streaming Scale Test (requires Frigate)', () => {
       await Promise.all(connectPromises)
 
       const connectTime = Date.now() - startTime
-      console.log(`  Connected ${targetCount - connectFailures}/${targetCount} in ${(connectTime / 1000).toFixed(1)}s`)
+      console.log(
+        `  Connected ${targetCount - connectFailures}/${targetCount} in ${(connectTime / 1000).toFixed(1)}s`,
+      )
 
       // Run for 5 seconds of actual streaming
       const measureStart = Date.now()
@@ -232,7 +261,10 @@ describe.skipIf(!FRIGATE)('Streaming Scale Test (requires Frigate)', () => {
         if (data.frames < 3) starvingCameras++ // less than 3 frames in 5s = starving
       }
 
-      const cpuPct = ((cpuMeasure.user + cpuMeasure.system) / (measureDuration * 1_000_000) * 100).toFixed(1)
+      const cpuPct = (
+        ((cpuMeasure.user + cpuMeasure.system) / (measureDuration * 1_000_000)) *
+        100
+      ).toFixed(1)
       const rssMB = (memAfter.rss / 1024 / 1024).toFixed(0)
       const heapMB = (memAfter.heapUsed / 1024 / 1024).toFixed(0)
       const combinedFps = (totalFrames / measureDuration).toFixed(1)
@@ -249,26 +281,28 @@ describe.skipIf(!FRIGATE)('Streaming Scale Test (requires Frigate)', () => {
 
       // Per-camera breakdown
       console.log(`  ---`)
-      const sorted = Object.entries(perCamera).sort((a, b) => b[1].frames - a[1].frames)
+      const sorted = Object.entries(perCamera).toSorted((a, b) => b[1].frames - a[1].frames)
       for (const [name, data] of sorted) {
         const fps = (data.frames / measureDuration).toFixed(1)
         const avgKB = data.frames > 0 ? (data.totalBytes / data.frames / 1024).toFixed(0) : '-'
         const status = data.frames >= 3 ? '✓' : data.frames > 0 ? '⚠' : '✗'
-        console.log(`  ${status} ${name.padEnd(35)} ${fps.padStart(4)} fps  ${avgKB.padStart(5)} KB/f  (${data.frames} frames)`)
+        console.log(
+          `  ${status} ${name.padEnd(35)} ${fps.padStart(4)} fps  ${avgKB.padStart(5)} KB/f  (${data.frames} frames)`,
+        )
       }
 
       // Cleanup for next scale level
       for (const id of brokerIds) {
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
         const b = manager.getBroker(id)
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
         if (b) await b.stop()
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access -- 
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access --
         await manager.destroyBroker(id)
       }
       brokerIds.length = 0
       unsubs.length = 0
-      Object.keys(perCamera).forEach(k => delete perCamera[k])
+      Object.keys(perCamera).forEach((k) => delete perCamera[k])
 
       // Expect at least 80% of cameras producing
       expect(activeCameras).toBeGreaterThanOrEqual(Math.floor(targetCount * 0.8))

package/src/__tests__/uds-addon-call-wiring.spec.ts

@@ -227,7 +227,12 @@ describe('F3 — forked-addon routes + custom actions over UDS (backend wiring)'
       target: 'routes',
     })
     expect(rawRoutes).toEqual([
-      { method: 'GET', path: '/:providerId/start', access: 'public', description: 'Begin OIDC redirect login flow' },
+      {
+        method: 'GET',
+        path: '/:providerId/start',
+        access: 'public',
+        description: 'Begin OIDC redirect login flow',
+      },
       { method: 'GET', path: '/:providerId/callback', access: 'public' },
     ])
     // Coarse reachability gate the route-mount fallback uses: the child is

package/src/agent-status-page.ts

@@ -43,9 +43,10 @@ export function renderAgentStatusPage(data: AgentStatusData): string {
   const memUsedMB = data.memoryTotalMB - data.memoryFreeMB
   const memPercent = Math.round((memUsedMB / data.memoryTotalMB) * 100)
 
-  const taskTypesList = data.taskTypes.length > 0
-    ? data.taskTypes.map((t) => `<li>${escapeHtml(t)}</li>`).join('')
-    : '<li class="muted">No task handlers registered</li>'
+  const taskTypesList =
+    data.taskTypes.length > 0
+      ? data.taskTypes.map((t) => `<li>${escapeHtml(t)}</li>`).join('')
+      : '<li class="muted">No task handlers registered</li>'
 
   return `<!DOCTYPE html>
 <html lang="en">

package/src/api/__tests__/addons-custom.spec.ts

@@ -42,12 +42,18 @@ describe('api.addons.custom', () => {
     registry = new CustomActionRegistry()
     registry.registerAddon('benchmark', catalog, async (action, input) => {
       switch (action) {
-        case 'ping': return 'pong'
-        case 'echo': return { msg: (input as { msg: string }).msg }
-        case 'adminOnly': return 'ok'
-        case 'open': return 'open'
-        case 'badOutput': return 'WRONG' // will fail output validation
-        default: throw new Error(`unknown action ${action}`)
+        case 'ping':
+          return 'pong'
+        case 'echo':
+          return { msg: (input as { msg: string }).msg }
+        case 'adminOnly':
+          return 'ok'
+        case 'open':
+          return 'open'
+        case 'badOutput':
+          return 'WRONG' // will fail output validation
+        default:
+          throw new Error(`unknown action ${action}`)
       }
     })
     router = buildRouter(registry)
@@ -61,7 +67,11 @@ describe('api.addons.custom', () => {
 
   it('round-trips structured input through the action schema', async () => {
     const caller = router.createCaller(makeCtx('admin'))
-    const result = await caller.custom({ addonId: 'benchmark', action: 'echo', input: { msg: 'hi' } })
+    const result = await caller.custom({
+      addonId: 'benchmark',
+      action: 'echo',
+      input: { msg: 'hi' },
+    })
     expect(result).toEqual({ msg: 'hi' })
   })
 
@@ -92,7 +102,11 @@ describe('api.addons.custom', () => {
 
   it('enforces per-action auth: admin-only action allows admin', async () => {
     const caller = router.createCaller(makeCtx('admin'))
-    const result = await caller.custom({ addonId: 'benchmark', action: 'adminOnly', input: undefined })
+    const result = await caller.custom({
+      addonId: 'benchmark',
+      action: 'adminOnly',
+      input: undefined,
+    })
     expect(result).toBe('ok')
   })
 

package/src/api/__tests__/capabilities.router.test.ts

@@ -1,4 +1,3 @@
- 
 // server/backend/src/api/__tests__/capabilities.router.test.ts
 import { describe, it, expect, vi, beforeEach } from 'vitest'
 import { CapabilityRegistry } from '@camstack/kernel'
@@ -24,7 +23,12 @@ describe('capabilities tRPC router logic', () => {
 
   it('listCapabilities returns all declared capabilities', () => {
     registry.declareCapability({ name: 'storage', scope: 'system', mode: 'singleton', methods: {} })
-    registry.declareCapability({ name: 'log-destination', scope: 'system', mode: 'collection', methods: {} })
+    registry.declareCapability({
+      name: 'log-destination',
+      scope: 'system',
+      mode: 'collection',
+      methods: {},
+    })
 
     const list = registry.listCapabilities()
     expect(list).toHaveLength(2)
@@ -33,15 +37,20 @@ describe('capabilities tRPC router logic', () => {
   })
 
   it('setActiveSingleton throws for unknown capability', async () => {
-    await expect(
-      registry.setActiveSingleton('nonexistent', 'some-addon', true),
-    ).rejects.toThrow(/[Uu]nknown/)
+    await expect(registry.setActiveSingleton('nonexistent', 'some-addon', true)).rejects.toThrow(
+      /[Uu]nknown/,
+    )
   })
 
   it('setActiveSingleton throws for collection capability', async () => {
-    registry.declareCapability({ name: 'log-destination', scope: 'system', mode: 'collection', methods: {} })
-    await expect(
-      registry.setActiveSingleton('log-destination', 'winston', true),
-    ).rejects.toThrow(/singleton/)
+    registry.declareCapability({
+      name: 'log-destination',
+      scope: 'system',
+      mode: 'collection',
+      methods: {},
+    })
+    await expect(registry.setActiveSingleton('log-destination', 'winston', true)).rejects.toThrow(
+      /singleton/,
+    )
   })
 })

package/src/api/addon-upload.ts

@@ -72,7 +72,7 @@ interface AgentDeployResponse {
 }
 
 function isTarball(filename: string): boolean {
-  return TARBALL_EXTENSIONS.some(ext => filename.endsWith(ext))
+  return TARBALL_EXTENSIONS.some((ext) => filename.endsWith(ext))
 }
 
 /**
@@ -162,7 +162,9 @@ export async function registerAddonUploadRoute(
       }
     }
     if (!authOk) {
-      return reply.status(403).send({ error: `Forbidden: ${authReason ?? 'admin or upload-scoped token required'}` })
+      return reply
+        .status(403)
+        .send({ error: `Forbidden: ${authReason ?? 'admin or upload-scoped token required'}` })
     }
 
     const data = await request.file()
@@ -178,12 +180,20 @@ export async function registerAddonUploadRoute(
     // because the multipart plugin types it as `unknown`.
     const nodeIdField = data.fields['nodeId']
     const addonIdField = data.fields['addonId']
-    const nodeId = typeof nodeIdField === 'object' && nodeIdField !== null && 'value' in nodeIdField && typeof nodeIdField.value === 'string'
-      ? nodeIdField.value
-      : null
-    const addonIdHint = typeof addonIdField === 'object' && addonIdField !== null && 'value' in addonIdField && typeof addonIdField.value === 'string'
-      ? addonIdField.value
-      : null
+    const nodeId =
+      typeof nodeIdField === 'object' &&
+      nodeIdField !== null &&
+      'value' in nodeIdField &&
+      typeof nodeIdField.value === 'string'
+        ? nodeIdField.value
+        : null
+    const addonIdHint =
+      typeof addonIdField === 'object' &&
+      addonIdField !== null &&
+      'value' in addonIdField &&
+      typeof addonIdField.value === 'string'
+        ? addonIdField.value
+        : null
 
     const buffer = await data.toBuffer()
 
@@ -192,7 +202,9 @@ export async function registerAddonUploadRoute(
     // agent path would otherwise fail mid-extraction with no clean rollback.
     const manifest = validateTarball(buffer, data.filename)
     if (!manifest) {
-      return reply.status(400).send({ error: 'Tarball missing or malformed package/package.json (name + version required)' })
+      return reply.status(400).send({
+        error: 'Tarball missing or malformed package/package.json (name + version required)',
+      })
     }
 
     // Branch by deployment target. `nodeId === 'hub'` (or absent) installs on
@@ -200,7 +212,16 @@ export async function registerAddonUploadRoute(
     // the package's addons (i.e. anything not marked hub-only). Any other
     // explicit `nodeId` value routes only to that agent via `$agent.deploy`.
     if (!nodeId || nodeId === 'hub') {
-      return installToHub(reply, addonBridge, addonRegistry, addonPackageService, moleculer, logger, data.filename, buffer)
+      return installToHub(
+        reply,
+        addonBridge,
+        addonRegistry,
+        addonPackageService,
+        moleculer,
+        logger,
+        data.filename,
+        buffer,
+      )
     }
     const agentAddonId = addonIdHint ?? manifest.name
     return deployToAgent(reply, moleculer, nodeId, agentAddonId, buffer)
@@ -231,7 +252,8 @@ function packageHasAgentDeployable(addonsDir: string, packageName: string): bool
     const pkgPath = path.join(addonsDir, packageName, 'package.json')
     const parsed: unknown = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'))
     if (parsed === null || typeof parsed !== 'object') return false
-    const camstack = (parsed as { camstack?: { addons?: readonly CamstackAddonDeclLike[] } }).camstack
+    const camstack = (parsed as { camstack?: { addons?: readonly CamstackAddonDeclLike[] } })
+      .camstack
     const addons = camstack?.addons ?? []
     return addons.some((a) => {
       const placement = a.execution?.placement ?? 'hub-only'
@@ -250,7 +272,11 @@ interface AgentDeployResult {
 }
 
 interface MoleculerBrokerLike {
-  call(action: string, params: Record<string, unknown>, options: { nodeID: string; timeout: number }): Promise<unknown>
+  call(
+    action: string,
+    params: Record<string, unknown>,
+    options: { nodeID: string; timeout: number },
+  ): Promise<unknown>
   registry?: {
     getNodeList?: (opts: { onlyAvailable: boolean }) => readonly { id: string }[]
   }
@@ -306,7 +332,7 @@ async function propagateToAgents(
         reloadRaw !== null &&
         typeof reloadRaw === 'object' &&
         'loaded' in (reloadRaw as Record<string, unknown>)
-          ? ((reloadRaw as { loaded: readonly string[] }).loaded)
+          ? (reloadRaw as { loaded: readonly string[] }).loaded
           : []
       results.push({ nodeId, success: true, loaded: reloaded })
     } catch (err: unknown) {
@@ -418,7 +444,10 @@ async function installToHub(
     for (const id of preInstallAddonIds) {
       void addonRegistry.restartAddon(id).then((r) => {
         if (!r.success) {
-          logger.warn('background restart failed', { tags: { addonId: id }, meta: { error: r.error ?? 'unknown' } })
+          logger.warn('background restart failed', {
+            tags: { addonId: id },
+            meta: { error: r.error ?? 'unknown' },
+          })
         } else {
           logger.info('background restart OK', { tags: { addonId: id } })
         }
@@ -426,7 +455,9 @@ async function installToHub(
     }
     if (propagatable) {
       void propagateToAgents(moleculer, logger, result.name, buffer).then((agentResults) => {
-        logger.info('propagation done', { meta: { packageName: result.name, agents: agentResults } })
+        logger.info('propagation done', {
+          meta: { packageName: result.name, agents: agentResults },
+        })
       })
     }
 

package/src/api/addons-custom.router.ts

@@ -42,11 +42,13 @@ export interface AddonsCustomDeps {
 export function createAddonsCustomProcedures(deps: AddonsCustomDeps) {
   return {
     custom: protectedProcedure
-      .input(z.object({
-        addonId: z.string().min(1),
-        action: z.string().min(1),
-        input: z.unknown(),
-      }))
+      .input(
+        z.object({
+          addonId: z.string().min(1),
+          action: z.string().min(1),
+          input: z.unknown(),
+        }),
+      )
       .output(z.unknown())
       .mutation(async ({ input, ctx }) => {
         const registry = deps.getCustomActionRegistry()
@@ -66,7 +68,6 @@ export function createAddonsCustomProcedures(deps: AddonsCustomDeps) {
         // Validate input against the action's declared Zod schema.
         const parsedInput = entry.spec.input.parse(input.input)
 
-
         // Dispatch through the addon handler.
         const result = await entry.handler(parsedInput)
 

package/src/api/auth-whoami.ts

@@ -78,7 +78,9 @@ export async function registerAuthWhoamiRoute(
       }
       const record = await userMgmt.validateScopedToken({ token })
       if (!record) {
-        return reply.status(401).send({ ok: false, error: 'Token not recognised (revoked, expired, or never issued)' })
+        return reply
+          .status(401)
+          .send({ ok: false, error: 'Token not recognised (revoked, expired, or never issued)' })
       }
       const ok: WhoamiOk = {
         ok: true,

package/src/api/bridge-addons.router.ts

@@ -45,7 +45,9 @@ export function createBridgeAddonsRouter(
         }
         await installer.install(input.packageName, input.version)
         await bridge.reloadPackages()
-        const result = addonRegistry ? await addonRegistry.loadNewAddons() : { loaded: [], failed: [] }
+        const result = addonRegistry
+          ? await addonRegistry.loadNewAddons()
+          : { loaded: [], failed: [] }
         toastService?.broadcast({
           title: 'Addon Installed',
           message: `${input.packageName} installed successfully${result.loaded.length ? ` (${result.loaded.join(', ')})` : ''}`,