@camstack/server 1.2.575 → 1.2.577

package/dist/api/core/cap-providers.js

@@ -1532,7 +1532,7 @@ function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, agentReg
         listInstallations: async (input) => (0, addon_uninstall_js_1.listInstallations)(uninstallSeam, input.packageName),
         reloadPackages: async () => ps.reloadPackages(),
         searchAvailable: async (input) => {
-            const results = await ps.searchNpm(input?.query);
+            const results = await ps.searchNpm(input?.query, input?.capability);
             const installedIds = new Set(ps.listInstalled().map((p) => p.name));
             return results.map((r) => ({
                 ...r,

package/dist/core/addon/addon-package.service.js

@@ -192,6 +192,7 @@ class AddonPackageService {
     cachedUpdates = null;
     searchCache = null;
     versionCache = new Map();
+    capabilityCache = new Map();
     updateAvailability;
     // -- Auto-update state ----------------------------------------------------
     autoUpdateConfig = {
@@ -217,6 +218,8 @@ class AddonPackageService {
     static UPDATE_CACHE_TTL_MS = 10 * 60 * 1000; // 10 minutes
     static SEARCH_CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes
     static VERSION_CACHE_TTL_MS = 10 * 60 * 1000; // 10 minutes
+    static CAPABILITY_CACHE_TTL_MS = 10 * 60 * 1000; // 10 minutes
+    static CAPABILITY_LOOKUP_CONCURRENCY = 6;
     static NPM_REGISTRY = 'https://registry.npmjs.org';
     static REGISTRY_TIMEOUT_MS = 10_000;
     constructor(loggingService, eventBusService, configService, addonRegistry, notificationService, toastService, 
@@ -777,8 +780,15 @@ class AddonPackageService {
     // =========================================================================
     // npm search
     // =========================================================================
-    /** Search npm for camstack addon packages, optionally filtered by query */
-    async searchNpm(query) {
+    /**
+     * Search npm for camstack addon packages, optionally filtered by query and
+     * by a capability the package must declare. The capabilities come from each
+     * package's own `/latest` manifest (`camstack.addons[].capabilities`) — the
+     * single source of truth (D4), no hand-kept keywords. A package whose
+     * manifest could not be read carries `capabilities: null` and is excluded
+     * from a capability-filtered result (unknown is not a match).
+     */
+    async searchNpm(query, capability) {
         const npmResults = await this.fetchSearchFromNpm();
         let filtered = npmResults;
         if (query) {
@@ -787,7 +797,14 @@ class AddonPackageService {
                 r.description?.toLowerCase().includes(q) ||
                 r.keywords?.some((k) => k.toLowerCase().includes(q)));
         }
-        return filtered.map((r) => ({
+        const capabilitiesByName = await this.lookupCapabilities(filtered.map((r) => r.name));
+        const failed = filtered.filter((r) => capabilitiesByName.get(r.name) === null).length;
+        if (failed > 0) {
+            this.logger.warn('npm capability lookup failed for some packages', {
+                meta: { failed, total: filtered.length, capability: capability ?? null },
+            });
+        }
+        const withCapabilities = filtered.map((r) => ({
             name: r.name,
             version: r.version,
             description: r.description ?? '',
@@ -796,7 +813,73 @@ class AddonPackageService {
             author: r.publisher?.username ?? '',
             installed: false, // caller will enrich
             installedVersion: undefined,
+            capabilities: capabilitiesByName.get(r.name) ?? null,
         }));
+        if (capability === undefined)
+            return withCapabilities;
+        return withCapabilities.filter((r) => r.capabilities?.includes(capability) === true);
+    }
+    /**
+     * Declared capabilities per package, through a bounded worker pool and the
+     * 10-minute cache. `null` = the lookup failed (not cached, so the next
+     * search retries).
+     */
+    async lookupCapabilities(names) {
+        const result = new Map();
+        const now = Date.now();
+        const pending = [];
+        for (const name of names) {
+            const cached = this.capabilityCache.get(name);
+            if (cached !== undefined && cached.expiresAt > now)
+                result.set(name, cached.capabilities);
+            else
+                pending.push(name);
+        }
+        let next = 0;
+        const worker = async () => {
+            while (next < pending.length) {
+                const name = pending[next++];
+                if (name === undefined)
+                    return;
+                const capabilities = await this.fetchPackageCapabilities(name);
+                result.set(name, capabilities);
+                if (capabilities !== null) {
+                    this.capabilityCache.set(name, {
+                        capabilities,
+                        expiresAt: Date.now() + AddonPackageService.CAPABILITY_CACHE_TTL_MS,
+                    });
+                }
+            }
+        };
+        const poolSize = Math.min(AddonPackageService.CAPABILITY_LOOKUP_CONCURRENCY, pending.length);
+        await Promise.all(Array.from({ length: poolSize }, worker));
+        return result;
+    }
+    /** Read `camstack.addons[].capabilities` from a package's `/latest`; null on any failure. */
+    async fetchPackageCapabilities(packageName) {
+        try {
+            const url = `${this.resolveRegistryBase()}/${packageName.replace('/', '%2F')}/latest`;
+            const response = await fetch(url, {
+                signal: AbortSignal.timeout(AddonPackageService.REGISTRY_TIMEOUT_MS),
+            });
+            if (!response.ok)
+                return null;
+            const data = await fetchJsonObject(response);
+            const addons = asRecord(data['camstack'])['addons'];
+            const names = new Set();
+            for (const addon of Array.isArray(addons) ? addons : []) {
+                const caps = asRecord(addon)['capabilities'];
+                for (const cap of Array.isArray(caps) ? caps : []) {
+                    const name = typeof cap === 'string' ? cap : asString(asRecord(cap)['name']);
+                    if (name)
+                        names.add(name);
+                }
+            }
+            return [...names];
+        }
+        catch {
+            return null;
+        }
     }
     // =========================================================================
     // Package versions

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.575",
+  "version": "1.2.577",
   "license": "MIT",
   "private": false,
   "files": [
@@ -38,18 +38,18 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.425",
+    "@camstack/addon-admin-ui": "1.2.426",
     "@camstack/addon-agent-ui": "1.2.233",
     "@camstack/addon-auth": "1.2.145",
     "@camstack/addon-decoder-nodeav": "1.2.123",
     "@camstack/addon-notifiers": "1.2.134",
     "@camstack/addon-pipeline": "1.2.369",
-    "@camstack/addon-pipeline-orchestrator": "1.2.321",
+    "@camstack/addon-pipeline-orchestrator": "1.2.322",
     "@camstack/addon-post-analysis": "1.2.369",
     "@camstack/develop": "0.1.10",
     "@camstack/sdk": "1.2.131",
-    "@camstack/system": "1.2.434",
-    "@camstack/types": "1.2.370",
+    "@camstack/system": "1.2.435",
+    "@camstack/types": "1.2.371",
     "@camstack/ui-library": "1.2.289",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",