@camstack/server 1.1.40 → 1.1.42

package/dist/api/trpc/cap-router-runtime.js

@@ -25,7 +25,6 @@ exports.createCapRouterPrimitives = createCapRouterPrimitives;
 exports.createCapRouterServices = createCapRouterServices;
 exports.buildRuntimeCapRouters = buildRuntimeCapRouters;
 const system_1 = require("@camstack/system");
-const types_1 = require("@camstack/types");
 const server_1 = require("@trpc/server");
 const cap_mount_helpers_js_1 = require("./cap-mount-helpers.js");
 const trpc_middleware_js_1 = require("./trpc.middleware.js");
@@ -38,7 +37,7 @@ const trpc_middleware_js_1 = require("./trpc.middleware.js");
 exports.COLLECTION_ARRAY_METHODS = computeArrayMethods();
 function computeArrayMethods() {
     const out = new Map();
-    for (const def of types_1.ALL_CAPABILITY_DEFINITIONS) {
+    for (const def of system_1.ALL_CAPABILITY_DEFINITIONS) {
         if (def.mode !== 'collection')
             continue;
         const names = [];
@@ -46,7 +45,7 @@ function computeArrayMethods() {
             const m = schema;
             if (m.kind === 'subscription')
                 continue;
-            if ((0, types_1.isArrayOutputSchema)(m.output))
+            if ((0, system_1.isArrayOutputSchema)(m.output))
                 names.push(name);
         }
         if (names.length > 0)

package/dist/api/trpc/generated-cap-routers.js

@@ -5006,6 +5006,15 @@ function createCapRouter_pipelineExecutor(getProvider, createRemoteProxy) {
             // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
             return p.setVideoPipelineSteps(methodInput);
         }),
+        resetToDefault: trpc_middleware_js_1.adminProcedure
+            .input(types_76.pipelineExecutorCapability.methods.resetToDefault.input.loose())
+            .output(types_76.pipelineExecutorCapability.methods.resetToDefault.output)
+            .mutation(async ({ input, ctx }) => {
+            const { nodeId, ...methodInput } = input;
+            const p = resolveProvider('pipeline-executor', nodeId, () => getProvider(ctx), createRemoteProxy);
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
+            return p.resetToDefault(methodInput);
+        }),
         getSchema: trpc_middleware_js_1.protectedProcedure
             .input(zod_1.z.object({ nodeId: zod_1.z.string().optional() }).optional())
             .output(types_76.pipelineExecutorCapability.methods.getSchema.output)

package/dist/api/trpc/scope-access.js

@@ -24,7 +24,7 @@ exports.checkScopeAccess = checkScopeAccess;
  *      method's required `access` flavour.
  *   4. No matching scope → FORBIDDEN with a human-readable reason.
  */
-const types_1 = require("@camstack/types");
+const system_1 = require("@camstack/system");
 /**
  * Pull `deviceId` off a tRPC request input. Device-scope cap methods
  * uniformly take `{deviceId: number, ...}` per the DeviceProxy contract,
@@ -51,7 +51,7 @@ function effectiveDeviceIds(deviceId, getAncestors) {
     return [...out];
 }
 function checkScopeAccess(scopes, path, input, getDeviceAncestors) {
-    const meta = types_1.METHOD_ACCESS_MAP[path];
+    const meta = system_1.METHOD_ACCESS_MAP[path];
     if (!meta) {
         return { ok: false, reason: `Unknown method '${path}' — codegen drift` };
     }

package/dist/api/trpc/trpc.middleware.js

@@ -8,7 +8,7 @@ exports.iterableSubscription = iterableSubscription;
 exports.iterableInterval = iterableInterval;
 const server_1 = require("@trpc/server");
 const superjson_1 = __importDefault(require("superjson"));
-const types_1 = require("@camstack/types");
+const system_1 = require("@camstack/system");
 const scope_access_js_1 = require("./scope-access.js");
 const cap_route_error_formatter_js_1 = require("./cap-route-error-formatter.js");
 const t = server_1.initTRPC.context().create({
@@ -102,7 +102,7 @@ exports.protectedProcedure = t.procedure.use(async ({ ctx, next, path, getRawInp
     // Hand-written core route — no cap entry. Authentication has already
     // passed; defer further gating to any explicit `adminProcedure`
     // chained on top of this one.
-    if (!(path in types_1.METHOD_ACCESS_MAP)) {
+    if (!(path in system_1.METHOD_ACCESS_MAP)) {
         return next({ ctx: { ...ctx, user: ctx.user } });
     }
     // Device-scope caps may be gated by a `device:N` scope. Resolve the

package/dist/core/addon/addon-package.service.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AddonPackageService = exports.SYSTEM_PACKAGE = void 0;
+exports.AddonPackageService = exports.FRAMEWORK_PACKAGES = exports.SYSTEM_PACKAGE = void 0;
 exports.isFrameworkPackage = isFrameworkPackage;
 exports.extractTgzStripped = extractTgzStripped;
 exports.sweepStaleFrameworkBackups = sweepStaleFrameworkBackups;
@@ -49,14 +49,41 @@ const types_1 = require("@camstack/types");
 const system_1 = require("@camstack/system");
 const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
 /**
- * The single host-provided framework package. As of 2026-06-22 the framework is
- * one bundle: @camstack/system (kernel + core; types/sdk inlined at runtime,
- * shm-ring is a private native dep). There is no multi-entry allowlist.
+ * The primary host-provided framework package (kernel + core). Kept as a named
+ * export because `lifecycle-job-runner` + several tests reference it directly.
  */
 exports.SYSTEM_PACKAGE = '@camstack/system';
-/** Returns true only for the single host-provided framework package. */
+/**
+ * Host-provided framework packages that a `camstack deploy` mirrors into the
+ * running hub's live closure via `syncFrameworkDist` (hub-main node_modules +
+ * addon-runner overlay) instead of the normal addon-install path, then bounces
+ * the server — delivering the new code with NO image rebuild.
+ *
+ * `@camstack/types` is included so a CAPABILITY change ships live via
+ * `camstack deploy packages/types`: the hub-main reads `ALL_CAPABILITY_DEFINITIONS`
+ * + `METHOD_ACCESS_MAP` and the runtime cap-router builder reads the cap defs
+ * from this single closure copy, so mirroring types' `dist/` refreshes the
+ * ENTIRE cap surface (new caps, new methods, AND the per-method auth map)
+ * without an image. `@camstack/sdk` rides along as a pure-JS lockstep companion.
+ * `@camstack/shm-ring` is deliberately EXCLUDED: it ships a native `.node`
+ * prebuild the dist-only mirror cannot rebuild — it must go through the
+ * native-aware install path, not this JS-dist swap.
+ *
+ * Membership is by package NAME, independent of the `camstack.system` manifest
+ * flag (`@camstack/types` declares `system: false` yet is a framework package
+ * here) — that flag drives Admin-UI grouping; this gate drives live-sync routing.
+ */
+exports.FRAMEWORK_PACKAGES = [
+    exports.SYSTEM_PACKAGE,
+    '@camstack/types',
+    '@camstack/sdk',
+];
+/**
+ * Returns true for a host-provided framework package whose `dist/` is mirrored
+ * into the live closure by `syncFrameworkDist` (not installed as a normal addon).
+ */
 function isFrameworkPackage(packageName) {
-    return packageName === exports.SYSTEM_PACKAGE;
+    return exports.FRAMEWORK_PACKAGES.includes(packageName);
 }
 // ---------------------------------------------------------------------------
 // Typed JSON helpers

package/dist/core/addon/addon-registry.service.js

@@ -50,8 +50,8 @@ const fs = __importStar(require("node:fs"));
 const node_url_1 = require("node:url");
 const addon_settings_provider_js_1 = require("./addon-settings-provider.js");
 const addon_call_gateway_js_1 = require("./addon-call-gateway.js");
+const system_5 = require("@camstack/system");
 const types_2 = require("@camstack/types");
-const types_3 = require("@camstack/types");
 /**
  * Type predicate: true when an `ISettingsBackend` also satisfies the
  * sync `ISettingsStore` contract (system/addon/device key-value ops)
@@ -355,7 +355,7 @@ class AddonRegistryService {
         // Register the addon-settings singleton provider — replaces the
         // former `$addonHost` Moleculer service. The provider resolves
         // addonId → local addon instance (hub) or remote Moleculer call.
-        this.capabilityRegistry.declareCapability(types_2.addonSettingsCapability);
+        this.capabilityRegistry.declareCapability(system_5.addonSettingsCapability);
         // The SINGLE router for addon-level calls (routes / custom / settings).
         // It classifies in-process | hub-local-child (UDS) | remote-agent
         // (Moleculer) in ONE place — `resolveNode` reports only the BASE node
@@ -2592,7 +2592,7 @@ class AddonRegistryService {
         let chain = this.disposerChains.get(addonId);
         if (chain == null) {
             const log = this.loggingService.createLogger().withTags({ addonId });
-            chain = new types_3.DisposerChain({
+            chain = new types_2.DisposerChain({
                 onError: (err, index) => {
                     log.error(`Disposer #${index} threw during teardown`, {
                         meta: { error: (0, types_1.errMsg)(err) },

package/dist/core/moleculer/moleculer.service.js

@@ -717,7 +717,7 @@ class MoleculerService {
                 },
             });
             const proxy = { id: addonId, nodeId };
-            for (const methodName of Object.keys((0, types_1.expandCapMethods)(capDef))) {
+            for (const methodName of Object.keys((0, system_1.expandCapMethods)(capDef))) {
                 proxy[methodName] = (methodParams) => callFn(methodName, methodParams);
             }
             registry.registerProvider(capName, registryKey, proxy);

package/dist/main.js

@@ -57,7 +57,10 @@ const auth_service_1 = require("./core/auth/auth.service");
 // `npx tsx scripts/generate-capability-router-types.ts`. The previous
 // hand-curated list silently dropped caps (zones, zone-rules,
 // zone-analytics, audio-metrics — see git for the regression).
-const types_1 = require("@camstack/types");
+// Sourced from `@camstack/system` (not `@camstack/types`) so the hub's
+// capability surface refreshes on `camstack deploy packages/system` with no new
+// server image. `@camstack/types` is never deployed to the hub.
+const system_1 = require("@camstack/system");
 const stream_probe_service_1 = require("./core/streaming/stream-probe.service");
 const feature_service_1 = require("./core/feature/feature.service");
 const agent_registry_service_1 = require("./core/agent/agent-registry.service");
@@ -79,7 +82,7 @@ const auth_whoami_1 = require("./api/auth-whoami");
 const session_cookie_js_1 = require("./auth/session-cookie.js");
 const health_routes_1 = require("./api/health/health.routes");
 const oauth2_routes_js_1 = require("./api/oauth2/oauth2-routes.js");
-const system_1 = require("@camstack/system");
+const system_2 = require("@camstack/system");
 const boot_config_1 = require("./boot/boot-config");
 const manual_boot_1 = require("./manual-boot");
 const post_boot_service_1 = require("./boot/post-boot.service");
@@ -238,8 +241,8 @@ async function bootstrap() {
     // If registration fails, start in degraded mode: serve a health warning endpoint.
     // Instantiate new core services
     const loggingService = app.get(logging_service_1.LoggingService);
-    const addonRouteRegistry = new system_1.AddonRouteRegistry();
-    const dataPlaneRegistry = new system_1.DataPlaneRegistry();
+    const addonRouteRegistry = new system_2.AddonRouteRegistry();
+    const dataPlaneRegistry = new system_2.DataPlaneRegistry();
     // Use Fastify-managed notification/toast wrappers (globally provided by NotificationModule)
     const { NotificationServiceWrapper } = await Promise.resolve().then(() => __importStar(require('./core/notification/notification-wrapper.service')));
     const { ToastServiceWrapper } = await Promise.resolve().then(() => __importStar(require('./core/notification/toast-wrapper.service')));
@@ -260,7 +263,7 @@ async function bootstrap() {
     // from forked workers / agents) find their definition during
     // onModuleInit. The list comes from the codegen — see the import
     // comment above for the rationale.
-    for (const capDef of types_1.ALL_CAPABILITY_DEFINITIONS) {
+    for (const capDef of system_1.ALL_CAPABILITY_DEFINITIONS) {
         capabilityRegistry.declareCapability(capDef);
     }
     // Hub-internal `sso-bridge` provider — gives auth-provider addons
@@ -730,7 +733,7 @@ async function bootstrap() {
                 const upstreamPath = `/${subPath}${queryString}`;
                 // Take over the socket — `proxyToUpstream` drives the raw response.
                 reply.hijack();
-                (0, system_1.proxyToUpstream)({
+                (0, system_2.proxyToUpstream)({
                     baseUrl: dpMatch.endpoint.baseUrl,
                     secret: dpMatch.endpoint.secret,
                     upstreamPath,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.1.40",
+  "version": "1.1.42",
   "private": false,
   "files": [
     "dist",