npm - @camstack/server - Versions diffs - 1.0.0 → 1.0.1 - Mend

@camstack/server 1.0.0 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (234) hide show

package/{src/agent-status-page.ts → dist/agent-status-page.js} +30 -45
package/dist/api/addon-upload.js +441 -0
package/dist/api/addons-custom.router.js +91 -0
package/dist/api/auth-whoami.js +55 -0
package/dist/api/bridge-addons.router.js +109 -0
package/dist/api/capabilities.router.js +229 -0
package/dist/api/core/addon-settings.router.js +117 -0
package/dist/api/core/agents.router.js +73 -0
package/dist/api/core/auth.router.js +286 -0
package/dist/api/core/bulk-update-coordinator.js +229 -0
package/dist/api/core/cap-providers.js +1124 -0
package/dist/api/core/capabilities.router.js +138 -0
package/dist/api/core/collection-preference.js +17 -0
package/dist/api/core/event-bus-proxy.router.js +45 -0
package/dist/api/core/hwaccel.router.js +91 -0
package/dist/api/core/live-events.router.js +61 -0
package/dist/api/core/logs.router.js +172 -0
package/dist/api/core/notifications.router.js +67 -0
package/dist/api/core/repl.router.js +35 -0
package/dist/api/core/settings-backend.router.js +121 -0
package/dist/api/core/stream-probe.router.js +58 -0
package/dist/api/core/system-events.router.js +100 -0
package/dist/api/health/health.routes.js +68 -0
package/{src/api/oauth2/consent-page.ts → dist/api/oauth2/consent-page.js} +11 -20
package/dist/api/oauth2/oauth2-routes.js +219 -0
package/dist/api/trpc/cap-mount-helpers.js +194 -0
package/dist/api/trpc/cap-route-error-formatter.js +133 -0
package/dist/api/trpc/client-ip.js +147 -0
package/dist/api/trpc/core-cap-bridge.js +115 -0
package/dist/api/trpc/generated-cap-mounts.js +388 -0
package/dist/api/trpc/generated-cap-routers.js +7635 -0
package/dist/api/trpc/scope-access.js +93 -0
package/dist/api/trpc/trpc.context.js +184 -0
package/dist/api/trpc/trpc.middleware.js +139 -0
package/dist/api/trpc/trpc.router.js +188 -0
package/dist/auth/session-cookie.js +47 -0
package/dist/boot/boot-config.js +241 -0
package/dist/boot/integration-id-backfill.js +76 -0
package/dist/boot/post-boot.service.js +85 -0
package/dist/core/addon/addon-call-gateway.js +99 -0
package/dist/core/addon/addon-package.service.js +1560 -0
package/dist/core/addon/addon-registry.service.js +2739 -0
package/{src/core/addon/addon-row-manifest.ts → dist/core/addon/addon-row-manifest.js} +5 -5
package/dist/core/addon/addon-search.service.js +62 -0
package/dist/core/addon/addon-settings-provider.js +102 -0
package/dist/core/addon/addon.tokens.js +5 -0
package/dist/core/addon-bridge/addon-bridge.service.js +145 -0
package/dist/core/addon-pages/addon-pages.service.js +107 -0
package/dist/core/addon-widgets/addon-widgets.service.js +120 -0
package/dist/core/agent/agent-registry.service.js +477 -0
package/dist/core/auth/auth.service.js +10 -0
package/dist/core/capability/capability.service.js +58 -0
package/dist/core/config/config.schema.js +7 -0
package/dist/core/config/config.service.js +10 -0
package/dist/core/events/event-bus.service.js +83 -0
package/dist/core/feature/feature.service.js +10 -0
package/dist/core/lifecycle/lifecycle-state-machine.js +6 -0
package/dist/core/logging/log-ring-buffer.js +6 -0
package/dist/core/logging/logging.service.js +130 -0
package/dist/core/logging/scoped-logger.js +6 -0
package/dist/core/moleculer/cap-call-fn.js +50 -0
package/dist/core/moleculer/cap-route-authority.js +122 -0
package/dist/core/moleculer/moleculer.service.js +898 -0
package/dist/core/network/network-quality.service.js +7 -0
package/dist/core/notification/notification-wrapper.service.js +33 -0
package/dist/core/notification/toast-wrapper.service.js +25 -0
package/dist/core/provider/provider.tokens.js +4 -0
package/dist/core/repl/repl-engine.service.js +140 -0
package/dist/core/storage/fs-storage-backend.js +6 -0
package/dist/core/storage/storage-location-manager.js +6 -0
package/dist/core/storage/storage.service.js +7 -0
package/dist/core/streaming/stream-probe.service.js +209 -0
package/dist/core/topology/topology-emitter.service.js +106 -0
package/dist/launcher.js +325 -0
package/dist/main.js +1098 -0
package/dist/manual-boot.js +227 -0
package/package.json +5 -1
package/src/__tests__/addon-install-e2e.test.ts +0 -74
package/src/__tests__/addon-pages-e2e.test.ts +0 -200
package/src/__tests__/addon-route-session.test.ts +0 -17
package/src/__tests__/addon-settings-router.spec.ts +0 -67
package/src/__tests__/addon-upload.spec.ts +0 -475
package/src/__tests__/agent-registry.spec.ts +0 -179
package/src/__tests__/agent-status-page.spec.ts +0 -82
package/src/__tests__/auth-session-cookie.test.ts +0 -48
package/src/__tests__/bulk-update-coordinator.spec.ts +0 -303
package/src/__tests__/cap-ownership-authority.spec.ts +0 -431
package/src/__tests__/cap-providers/cap-providers-location-import.spec.ts +0 -206
package/src/__tests__/cap-providers/cap-usage-graph.spec.ts +0 -37
package/src/__tests__/cap-providers/compute-topology-categories.spec.ts +0 -110
package/src/__tests__/cap-providers/integrations-delete-cascade.spec.ts +0 -292
package/src/__tests__/cap-providers-bulk-update.spec.ts +0 -408
package/src/__tests__/cap-route-adapter.spec.ts +0 -302
package/src/__tests__/cap-routers/_meta.spec.ts +0 -199
package/src/__tests__/cap-routers/addon-settings.router.spec.ts +0 -115
package/src/__tests__/cap-routers/broker-routing.router.spec.ts +0 -177
package/src/__tests__/cap-routers/cap-route-error-formatter.spec.ts +0 -125
package/src/__tests__/cap-routers/capabilities-node.spec.ts +0 -68
package/src/__tests__/cap-routers/device-link-overlay.spec.ts +0 -137
package/src/__tests__/cap-routers/device-manager-aggregate.router.spec.ts +0 -194
package/src/__tests__/cap-routers/harness.ts +0 -163
package/src/__tests__/cap-routers/metrics-provider.router.spec.ts +0 -133
package/src/__tests__/cap-routers/null-provider-guard.spec.ts +0 -64
package/src/__tests__/cap-routers/pipeline-executor.router.spec.ts +0 -159
package/src/__tests__/cap-routers/settings-store.router.spec.ts +0 -291
package/src/__tests__/capability-e2e.test.ts +0 -384
package/src/__tests__/cli-e2e.test.ts +0 -150
package/src/__tests__/core-cap-bridge.spec.ts +0 -91
package/src/__tests__/dev-bootstrap-shm-ring.spec.ts +0 -40
package/src/__tests__/device-settings-contribution-dispatch.spec.ts +0 -280
package/src/__tests__/embedded-deps-e2e.test.ts +0 -125
package/src/__tests__/event-bus-proxy-router.spec.ts +0 -75
package/src/__tests__/fixtures/mock-analysis-addon-a.ts +0 -37
package/src/__tests__/fixtures/mock-analysis-addon-b.ts +0 -37
package/src/__tests__/fixtures/mock-log-addon.ts +0 -37
package/src/__tests__/fixtures/mock-storage-addon.ts +0 -40
package/src/__tests__/framework-allowlist.spec.ts +0 -96
package/src/__tests__/framework-installer-defer-restart.spec.ts +0 -165
package/src/__tests__/https-e2e.test.ts +0 -124
package/src/__tests__/lifecycle-e2e.test.ts +0 -189
package/src/__tests__/live-events-subscription.spec.ts +0 -149
package/src/__tests__/moleculer/uds-readiness.spec.ts +0 -150
package/src/__tests__/moleculer/uds-topology.spec.ts +0 -418
package/src/__tests__/moleculer/uds-unowned-call.spec.ts +0 -383
package/src/__tests__/moleculer-register-node-idempotency.spec.ts +0 -273
package/src/__tests__/native-cap-route.spec.ts +0 -427
package/src/__tests__/oauth2-account-linking.spec.ts +0 -867
package/src/__tests__/post-boot-restart.spec.ts +0 -161
package/src/__tests__/singleton-contention.test.ts +0 -499
package/src/__tests__/streaming-diagnostic.test.ts +0 -615
package/src/__tests__/streaming-scale.test.ts +0 -314
package/src/__tests__/uds-addon-call-wiring.spec.ts +0 -242
package/src/__tests__/uds-log-ingest.spec.ts +0 -183
package/src/api/__tests__/addons-custom.spec.ts +0 -148
package/src/api/__tests__/capabilities.router.test.ts +0 -56
package/src/api/addon-upload.ts +0 -529
package/src/api/addons-custom.router.ts +0 -101
package/src/api/auth-whoami.ts +0 -101
package/src/api/bridge-addons.router.ts +0 -122
package/src/api/capabilities.router.ts +0 -265
package/src/api/core/__tests__/auth-router-totp.spec.ts +0 -297
package/src/api/core/__tests__/integration-markers.spec.ts +0 -10
package/src/api/core/addon-settings.router.ts +0 -127
package/src/api/core/agents.router.ts +0 -86
package/src/api/core/auth.router.ts +0 -322
package/src/api/core/bulk-update-coordinator.ts +0 -305
package/src/api/core/cap-providers.ts +0 -1339
package/src/api/core/capabilities.router.ts +0 -149
package/src/api/core/collection-preference.ts +0 -40
package/src/api/core/event-bus-proxy.router.ts +0 -45
package/src/api/core/hwaccel.router.ts +0 -108
package/src/api/core/live-events.router.ts +0 -67
package/src/api/core/logs.router.ts +0 -195
package/src/api/core/notifications.router.ts +0 -66
package/src/api/core/repl.router.ts +0 -39
package/src/api/core/settings-backend.router.ts +0 -140
package/src/api/core/stream-probe.router.ts +0 -57
package/src/api/core/system-events.router.ts +0 -125
package/src/api/health/health.routes.ts +0 -117
package/src/api/oauth2/__tests__/oauth2-routes.spec.ts +0 -62
package/src/api/oauth2/oauth2-routes.ts +0 -281
package/src/api/trpc/__tests__/client-ip.spec.ts +0 -146
package/src/api/trpc/__tests__/scope-access-device.spec.ts +0 -268
package/src/api/trpc/__tests__/scope-access.spec.ts +0 -102
package/src/api/trpc/__tests__/webrtc-session-ua-enrich.spec.ts +0 -136
package/src/api/trpc/cap-mount-helpers.ts +0 -245
package/src/api/trpc/cap-route-error-formatter.ts +0 -171
package/src/api/trpc/client-ip.ts +0 -147
package/src/api/trpc/core-cap-bridge.ts +0 -154
package/src/api/trpc/generated-cap-mounts.ts +0 -1240
package/src/api/trpc/generated-cap-routers.ts +0 -11523
package/src/api/trpc/scope-access.ts +0 -110
package/src/api/trpc/trpc.context.ts +0 -258
package/src/api/trpc/trpc.middleware.ts +0 -146
package/src/api/trpc/trpc.router.ts +0 -389
package/src/auth/session-cookie.ts +0 -54
package/src/boot/__tests__/integration-id-backfill.spec.ts +0 -131
package/src/boot/boot-config.ts +0 -259
package/src/boot/integration-id-backfill.ts +0 -109
package/src/boot/post-boot.service.ts +0 -105
package/src/core/addon/__tests__/addon-registry-capability.test.ts +0 -62
package/src/core/addon/__tests__/addon-row-manifest.spec.ts +0 -62
package/src/core/addon/addon-call-gateway.ts +0 -171
package/src/core/addon/addon-package.service.ts +0 -1787
package/src/core/addon/addon-registry.service.ts +0 -3130
package/src/core/addon/addon-search.service.ts +0 -91
package/src/core/addon/addon-settings-provider.ts +0 -220
package/src/core/addon/addon.tokens.ts +0 -2
package/src/core/addon-bridge/addon-bridge.service.ts +0 -130
package/src/core/addon-pages/addon-pages.service.spec.ts +0 -117
package/src/core/addon-pages/addon-pages.service.ts +0 -82
package/src/core/addon-widgets/addon-widgets.service.ts +0 -95
package/src/core/agent/agent-registry.service.ts +0 -529
package/src/core/auth/auth.service.spec.ts +0 -86
package/src/core/auth/auth.service.ts +0 -8
package/src/core/capability/capability.service.ts +0 -66
package/src/core/config/config.schema.ts +0 -3
package/src/core/config/config.service.spec.ts +0 -175
package/src/core/config/config.service.ts +0 -7
package/src/core/events/event-bus.service.spec.ts +0 -235
package/src/core/events/event-bus.service.ts +0 -89
package/src/core/feature/feature.service.spec.ts +0 -99
package/src/core/feature/feature.service.ts +0 -8
package/src/core/lifecycle/lifecycle-state-machine.spec.ts +0 -166
package/src/core/lifecycle/lifecycle-state-machine.ts +0 -3
package/src/core/logging/log-ring-buffer.ts +0 -3
package/src/core/logging/logging.service.spec.ts +0 -287
package/src/core/logging/logging.service.ts +0 -143
package/src/core/logging/scoped-logger.ts +0 -3
package/src/core/moleculer/cap-call-fn.spec.ts +0 -173
package/src/core/moleculer/cap-call-fn.ts +0 -107
package/src/core/moleculer/cap-route-authority.ts +0 -194
package/src/core/moleculer/moleculer.service.ts +0 -1072
package/src/core/network/network-quality.service.spec.ts +0 -53
package/src/core/network/network-quality.service.ts +0 -5
package/src/core/notification/notification-wrapper.service.ts +0 -34
package/src/core/notification/toast-wrapper.service.ts +0 -27
package/src/core/provider/provider.tokens.ts +0 -1
package/src/core/repl/repl-engine.service.spec.ts +0 -444
package/src/core/repl/repl-engine.service.ts +0 -155
package/src/core/storage/fs-storage-backend.spec.ts +0 -70
package/src/core/storage/fs-storage-backend.ts +0 -3
package/src/core/storage/storage-location-manager.spec.ts +0 -130
package/src/core/storage/storage-location-manager.ts +0 -3
package/src/core/storage/storage.service.spec.ts +0 -73
package/src/core/storage/storage.service.ts +0 -3
package/src/core/streaming/stream-probe.service.ts +0 -221
package/src/core/topology/topology-emitter.service.ts +0 -105
package/src/launcher.ts +0 -314
package/src/main.ts +0 -1245
package/src/manual-boot.ts +0 -301
package/tsconfig.build.json +0 -8
package/tsconfig.json +0 -33
package/vitest.config.ts +0 -26

package/src/__tests__/agent-status-page.spec.ts DELETED Viewed

@@ -1,82 +0,0 @@
-import { describe, it, expect } from 'vitest'
-import { renderAgentStatusPage, type AgentStatusData } from '../agent-status-page'
-const makeStatusData = (overrides: Partial<AgentStatusData> = {}): AgentStatusData => ({
-  agentId: 'agent-abc12345',
-  agentName: 'test-agent',
-  hubUrl: 'ws://localhost:4443/agent',
-  connected: true,
-  activeTaskCount: 3,
-  taskTypes: ['pipeline.decode', 'pipeline.detect'],
-  platform: 'darwin',
-  arch: 'arm64',
-  cpuCores: 8,
-  memoryTotalMB: 16384,
-  memoryFreeMB: 8192,
-  uptime: 3661,
-  ...overrides,
-})
-describe('renderAgentStatusPage', () => {
-  it('renders valid HTML', () => {
-    const html = renderAgentStatusPage(makeStatusData())
-    expect(html).toContain('<!DOCTYPE html>')
-    expect(html).toContain('</html>')
-  })
-  it('includes agent name and ID', () => {
-    const html = renderAgentStatusPage(makeStatusData())
-    expect(html).toContain('test-agent')
-    expect(html).toContain('agent-abc12345')
-  })
-  it('shows connected status with green dot', () => {
-    const html = renderAgentStatusPage(makeStatusData({ connected: true }))
-    expect(html).toContain('Connected')
-    expect(html).toContain('#22c55e')
-  })
-  it('shows disconnected status with red dot', () => {
-    const html = renderAgentStatusPage(makeStatusData({ connected: false }))
-    expect(html).toContain('Disconnected')
-    expect(html).toContain('#ef4444')
-  })
-  it('displays task types', () => {
-    const html = renderAgentStatusPage(makeStatusData())
-    expect(html).toContain('pipeline.decode')
-    expect(html).toContain('pipeline.detect')
-  })
-  it('shows "no task handlers" when list is empty', () => {
-    const html = renderAgentStatusPage(makeStatusData({ taskTypes: [] }))
-    expect(html).toContain('No task handlers registered')
-  })
-  it('displays hardware info', () => {
-    const html = renderAgentStatusPage(makeStatusData())
-    expect(html).toContain('darwin')
-    expect(html).toContain('arm64')
-    expect(html).toContain('8')
-  })
-  it('calculates memory usage', () => {
-    const html = renderAgentStatusPage(makeStatusData({ memoryTotalMB: 16384, memoryFreeMB: 4096 }))
-    // 12288 / 16384 = 75%
-    expect(html).toContain('12288')
-    expect(html).toContain('75%')
-  })
-  it('escapes HTML in user-provided strings', () => {
-    const html = renderAgentStatusPage(
-      makeStatusData({ agentName: '<script>alert("xss")</script>' }),
-    )
-    expect(html).not.toContain('<script>')
-    expect(html).toContain('&lt;script&gt;')
-  })
-  it('auto-refreshes every 5 seconds', () => {
-    const html = renderAgentStatusPage(makeStatusData())
-    expect(html).toContain('http-equiv="refresh" content="5"')
-  })
-})

package/src/__tests__/auth-session-cookie.test.ts DELETED Viewed

@@ -1,48 +0,0 @@
-import { describe, it, expect } from 'vitest'
-import {
-  buildSessionCookie,
-  clearSessionCookie,
-  SESSION_COOKIE,
-  isEmbedRedirectTarget,
-} from '../auth/session-cookie.js'
-describe('session cookie', () => {
-  it('buildSessionCookie produces an httpOnly lax cookie carrying the token', () => {
-    const c = buildSessionCookie('jwt-abc', 3600)
-    expect(c.name).toBe(SESSION_COOKIE)
-    expect(c.value).toBe('jwt-abc')
-    expect(c.options.httpOnly).toBe(true)
-    expect(c.options.sameSite).toBe('lax')
-    expect(c.options.secure).toBe(true)
-    expect(c.options.path).toBe('/')
-    expect(c.options.maxAge).toBe(3600)
-  })
-  it('clearSessionCookie expires the cookie', () => {
-    const c = clearSessionCookie()
-    expect(c.name).toBe(SESSION_COOKIE)
-    expect(c.options.maxAge).toBe(0)
-  })
-})
-describe('isEmbedRedirectTarget', () => {
-  it('accepts a stream-broker embed path (with query)', () => {
-    expect(isEmbedRedirectTarget('/addon/stream-broker/embed/?mode=grid')).toBe(true)
-    expect(isEmbedRedirectTarget('/addon/stream-broker/embed/?mode=player&devices=7,8')).toBe(true)
-    expect(isEmbedRedirectTarget('/addon/stream-broker/embed/')).toBe(true)
-  })
-  it('rejects open redirects (absolute / protocol-relative / backslash)', () => {
-    expect(isEmbedRedirectTarget('https://evil.com/addon/stream-broker/embed/')).toBe(false)
-    expect(isEmbedRedirectTarget('//evil.com')).toBe(false)
-    expect(isEmbedRedirectTarget('/\\evil.com')).toBe(false)
-    expect(isEmbedRedirectTarget('http://x/addon/stream-broker/embed/')).toBe(false)
-  })
-  it('rejects non-embed paths and path traversal', () => {
-    expect(isEmbedRedirectTarget('/addon/other/embed/')).toBe(false)
-    expect(isEmbedRedirectTarget('/etc/passwd')).toBe(false)
-    expect(isEmbedRedirectTarget('/addon/stream-broker/embed/../../secret')).toBe(false)
-    expect(isEmbedRedirectTarget('')).toBe(false)
-  })
-})

package/src/__tests__/bulk-update-coordinator.spec.ts DELETED Viewed

@@ -1,303 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import {
-  BulkUpdateCoordinator,
-  type BulkUpdateCoordinatorDeps,
-} from '../api/core/bulk-update-coordinator.js'
-import { EventCategory, type BulkUpdateState } from '@camstack/types'
-interface TestRig {
-  readonly coordinator: BulkUpdateCoordinator
-  readonly events: BulkUpdateState[]
-  readonly updateAddon: ReturnType<typeof vi.fn>
-  readonly updateFrameworkPackage: ReturnType<typeof vi.fn>
-  readonly restartServer: ReturnType<typeof vi.fn>
-  readonly now: () => number
-}
-function makeRig(opts?: { failItems?: ReadonlySet<string> }): TestRig {
-  const events: BulkUpdateState[] = []
-  const fail = opts?.failItems ?? new Set<string>()
-  let clock = 1_000_000
-  const updateAddon = vi.fn(async (input: { name: string; version: string }) => {
-    if (fail.has(input.name)) throw new Error(`mock fail ${input.name}`)
-  })
-  const updateFrameworkPackage = vi.fn(
-    async (input: { packageName: string; version: string; deferRestart: boolean }) => {
-      if (fail.has(input.packageName)) throw new Error(`mock fail fw ${input.packageName}`)
-    },
-  )
-  const restartServer = vi.fn(async () => {
-    // simulates the real restartServer: in a real run the process dies
-  })
-  const deps: BulkUpdateCoordinatorDeps = {
-    eventBus: {
-      emit: (category, payload) => {
-        if (category === EventCategory.AddonsBulkUpdateProgress) {
-          events.push(structuredClone(payload as BulkUpdateState))
-        }
-      },
-    } as unknown as BulkUpdateCoordinatorDeps['eventBus'],
-    updateAddon,
-    updateFrameworkPackage,
-    restartServer,
-    logger: {
-      info: vi.fn(),
-      warn: vi.fn(),
-      error: vi.fn(),
-      debug: vi.fn(),
-    } as unknown as BulkUpdateCoordinatorDeps['logger'],
-    clock: () => clock++,
-  }
-  return {
-    coordinator: new BulkUpdateCoordinator(deps),
-    events,
-    updateAddon,
-    updateFrameworkPackage,
-    restartServer,
-    now: () => clock,
-  }
-}
-describe('BulkUpdateCoordinator', () => {
-  beforeEach(() => {
-    vi.useFakeTimers()
-  })
-  afterEach(() => {
-    vi.useRealTimers()
-  })
-  it('regular-only happy path: processes 3 addons in order, no restart', async () => {
-    const rig = makeRig()
-    const { id } = rig.coordinator.start({
-      nodeId: 'hub',
-      items: [
-        { name: '@camstack/addon-a', version: '1.0.1', isSystem: false },
-        { name: '@camstack/addon-b', version: '2.0.1', isSystem: false },
-        { name: '@camstack/addon-c', version: '3.0.1', isSystem: false },
-      ],
-    })
-    await vi.runAllTimersAsync()
-    const final = rig.coordinator.get(id)!
-    expect(final.completed).toBe(3)
-    expect(final.failed).toBe(0)
-    expect(final.phase).toBe('finalizing')
-    expect(final.items.every((i) => i.status === 'done')).toBe(true)
-    expect(rig.restartServer).not.toHaveBeenCalled()
-    expect(rig.updateAddon).toHaveBeenCalledTimes(3)
-  })
-  it('mixed happy path: regular first, system after, single restart at end', async () => {
-    const rig = makeRig()
-    const { id } = rig.coordinator.start({
-      nodeId: 'hub',
-      items: [
-        { name: '@camstack/addon-a', version: '1.0.1', isSystem: false },
-        { name: '@camstack/types', version: '0.1.40', isSystem: true },
-        { name: '@camstack/addon-b', version: '2.0.1', isSystem: false },
-        { name: '@camstack/kernel', version: '0.1.30', isSystem: true },
-      ],
-    })
-    await vi.runAllTimersAsync()
-    const final = rig.coordinator.get(id)!
-    expect(final.completed).toBe(4)
-    expect(rig.updateAddon).toHaveBeenCalledTimes(2)
-    expect(rig.updateFrameworkPackage).toHaveBeenCalledTimes(2)
-    expect(rig.updateFrameworkPackage).toHaveBeenCalledWith(
-      expect.objectContaining({ deferRestart: true }),
-    )
-    expect(rig.restartServer).toHaveBeenCalledOnce()
-    // Verify ordering via event sequence: regular items reach 'updating' before any system item
-    const updatingNames = rig.events.map((s) => s.current).filter((n): n is string => n !== null)
-    const firstSystemIdx = updatingNames.findIndex(
-      (n) => n === '@camstack/types' || n === '@camstack/kernel',
-    )
-    const lastRegularIdx = updatingNames.findLastIndex(
-      (n) => n === '@camstack/addon-a' || n === '@camstack/addon-b',
-    )
-    expect(firstSystemIdx).toBeGreaterThan(lastRegularIdx)
-  })
-  it('failure isolation: failed item does not block others', async () => {
-    const rig = makeRig({ failItems: new Set(['@camstack/addon-b']) })
-    const { id } = rig.coordinator.start({
-      nodeId: 'hub',
-      items: [
-        { name: '@camstack/addon-a', version: '1.0.1', isSystem: false },
-        { name: '@camstack/addon-b', version: '2.0.1', isSystem: false },
-        { name: '@camstack/addon-c', version: '3.0.1', isSystem: false },
-      ],
-    })
-    await vi.runAllTimersAsync()
-    const final = rig.coordinator.get(id)!
-    expect(final.failed).toBe(1)
-    expect(final.items.find((i) => i.name === '@camstack/addon-b')?.status).toBe('failed')
-    expect(final.items.find((i) => i.name === '@camstack/addon-b')?.error).toContain('mock fail')
-    expect(final.items.find((i) => i.name === '@camstack/addon-a')?.status).toBe('done')
-    expect(final.items.find((i) => i.name === '@camstack/addon-c')?.status).toBe('done')
-  })
-  it('cancel pre-restart: loop exits, no restart, queued items remain queued', async () => {
-    const rig = makeRig()
-    rig.updateAddon.mockImplementation(async () => {
-      // Slow enough that cancel fires before item 2
-      await new Promise<void>((resolve) => {
-        setTimeout(resolve, 50)
-      })
-    })
-    const { id } = rig.coordinator.start({
-      nodeId: 'hub',
-      items: [
-        { name: '@camstack/addon-a', version: '1.0.1', isSystem: false },
-        { name: '@camstack/addon-b', version: '2.0.1', isSystem: false },
-        { name: '@camstack/addon-c', version: '3.0.1', isSystem: false },
-      ],
-    })
-    // Advance time so item 1 starts updating
-    await vi.advanceTimersByTimeAsync(10)
-    const cancel = rig.coordinator.cancel(id)
-    expect(cancel.cancelled).toBe(true)
-    await vi.runAllTimersAsync()
-    const final = rig.coordinator.get(id)!
-    expect(final.cancelled).toBe(true)
-    expect(rig.restartServer).not.toHaveBeenCalled()
-    // At least one item should still be queued (we cancelled before item 2 ran)
-    expect(final.items.filter((i) => i.status === 'queued').length).toBeGreaterThanOrEqual(1)
-  })
-  it('cancel ignored during restarting phase', async () => {
-    const rig = makeRig()
-    rig.restartServer.mockImplementation(async () => {
-      // Hang briefly so we can attempt cancel during restart
-      await new Promise<void>((resolve) => {
-        setTimeout(resolve, 50)
-      })
-    })
-    const { id } = rig.coordinator.start({
-      nodeId: 'hub',
-      items: [{ name: '@camstack/types', version: '0.1.40', isSystem: true }],
-    })
-    // Let it reach restarting
-    await vi.advanceTimersByTimeAsync(10)
-    const state = rig.coordinator.get(id)
-    if (state?.phase === 'restarting') {
-      const cancel = rig.coordinator.cancel(id)
-      expect(cancel.cancelled).toBe(false)
-    }
-    await vi.runAllTimersAsync()
-  })
-  it('restart failure: pending-restart items get promoted to done with caveat error', async () => {
-    const rig = makeRig()
-    rig.restartServer.mockRejectedValueOnce(new Error('restart crashed'))
-    const { id } = rig.coordinator.start({
-      nodeId: 'hub',
-      items: [{ name: '@camstack/types', version: '0.1.40', isSystem: true }],
-    })
-    await vi.runAllTimersAsync()
-    const final = rig.coordinator.get(id)!
-    const typesItem = final.items.find((i) => i.name === '@camstack/types')!
-    expect(typesItem.status).toBe('done')
-    expect(typesItem.error).toContain('Restart failed')
-  })
-  it('concurrent start for same nodeId is rejected', () => {
-    const rig = makeRig()
-    rig.coordinator.start({
-      nodeId: 'hub',
-      items: [{ name: '@camstack/addon-a', version: '1.0.1', isSystem: false }],
-    })
-    expect(() =>
-      rig.coordinator.start({
-        nodeId: 'hub',
-        items: [{ name: '@camstack/addon-b', version: '2.0.1', isSystem: false }],
-      }),
-    ).toThrow(/already in progress/i)
-  })
-  it('auto-cleanup: state purged 5 min after completedAt', async () => {
-    const rig = makeRig()
-    const { id } = rig.coordinator.start({
-      nodeId: 'hub',
-      items: [{ name: '@camstack/addon-a', version: '1.0.1', isSystem: false }],
-    })
-    await vi.runAllTimersAsync()
-    expect(rig.coordinator.get(id)).not.toBeNull()
-    await vi.advanceTimersByTimeAsync(5 * 60 * 1000 + 100)
-    expect(rig.coordinator.get(id)).toBeNull()
-  })
-  it('list excludes stale states after cleanup window (lazy cleanup symmetry)', async () => {
-    const rig = makeRig()
-    const { id } = rig.coordinator.start({
-      nodeId: 'hub',
-      items: [{ name: '@camstack/addon-a', version: '1.0.1', isSystem: false }],
-    })
-    await vi.runAllTimersAsync()
-    // Right after completion: both get() and list() see the state
-    expect(rig.coordinator.get(id)).not.toBeNull()
-    expect(rig.coordinator.list()).toHaveLength(1)
-    // After cleanup window: both should agree that the state is gone
-    await vi.advanceTimersByTimeAsync(5 * 60 * 1000 + 100)
-    expect(rig.coordinator.get(id)).toBeNull()
-    expect(rig.coordinator.list()).toHaveLength(0)
-    expect(rig.coordinator.list('hub')).toHaveLength(0)
-  })
-  it('list filters by nodeId', () => {
-    const rig = makeRig()
-    rig.coordinator.start({
-      nodeId: 'hub',
-      items: [{ name: '@camstack/addon-a', version: '1.0.1', isSystem: false }],
-    })
-    expect(rig.coordinator.list('hub')).toHaveLength(1)
-    expect(rig.coordinator.list('agent-1')).toHaveLength(0)
-    expect(rig.coordinator.list()).toHaveLength(1)
-  })
-  it('emits AddonsBulkUpdateProgress event on every status transition', async () => {
-    const rig = makeRig()
-    rig.coordinator.start({
-      nodeId: 'hub',
-      items: [
-        { name: '@camstack/addon-a', version: '1.0.1', isSystem: false },
-        { name: '@camstack/addon-b', version: '2.0.1', isSystem: false },
-      ],
-    })
-    await vi.runAllTimersAsync()
-    // At minimum: phase transition + 2 items × 2 transitions (updating → done)
-    expect(rig.events.length).toBeGreaterThanOrEqual(5)
-    // Every payload must be a complete BulkUpdateState (not a partial diff)
-    for (const evt of rig.events) {
-      expect(evt.id).toBeDefined()
-      expect(evt.nodeId).toBe('hub')
-      expect(Array.isArray(evt.items)).toBe(true)
-    }
-  })
-})