@camstack/server 1.2.592 → 1.2.594

package/dist/api/trpc/cap-mount-helpers.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Small helpers for wiring capability routers to the `CapabilityRegistry`
  * in `trpc.router.ts`. These functions don't generate code — they just
@@ -16,20 +15,16 @@
  * provider responsible for a given `streamId`) are NOT covered here —
  * they have app-specific routing logic that belongs in the mount.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.requireSingleton = requireSingleton;
-exports.requireDeviceScoped = requireDeviceScoped;
-exports.concatCollection = concatCollection;
-const server_1 = require("@trpc/server");
+import { TRPCError } from '@trpc/server';
 /**
  * Fetch the currently active singleton provider for a capability.
  * Returns null if no provider is registered; the downstream codegen'd
  * router surfaces this as `PRECONDITION_FAILED` to the caller.
  */
-function requireSingleton(registry, capName) {
+export function requireSingleton(registry, capName) {
     return registry?.getSingleton(capName) ?? null;
 }
-function requireDeviceScoped(registry, capName) {
+export function requireDeviceScoped(registry, capName) {
     if (!registry)
         return null;
     // The Proxy is the singleton stand-in. Each property access returns
@@ -43,7 +38,7 @@ function requireDeviceScoped(registry, capName) {
             return async (input) => {
                 const deviceId = input?.deviceId;
                 if (typeof deviceId !== 'number') {
-                    throw new server_1.TRPCError({
+                    throw new TRPCError({
                         code: 'BAD_REQUEST',
                         message: `${String(capName)}.${prop}: input must carry numeric "deviceId"`,
                     });
@@ -66,14 +61,14 @@ function requireDeviceScoped(registry, capName) {
                     // cap with no provider at all still answered. Wiring was deleted on
                     // 2026-08-08 — a composed device's caps are native to it, so there
                     // is nothing to conjure and the honest answer is the error.
-                    throw new server_1.TRPCError({
+                    throw new TRPCError({
                         code: 'PRECONDITION_FAILED',
                         message: `Capability "${String(capName)}" not registered for device ${deviceId}`,
                     });
                 }
                 const fn = provider[prop];
                 if (typeof fn !== 'function') {
-                    throw new server_1.TRPCError({
+                    throw new TRPCError({
                         code: 'NOT_IMPLEMENTED',
                         message: `Capability "${String(capName)}" provider for device ${deviceId} does not implement "${prop}"`,
                     });
@@ -93,7 +88,7 @@ function requireDeviceScoped(registry, capName) {
  * and concatenates their array results. Useful for contribution-style
  * caps where each provider adds to a shared pool.
  */
-function concatCollection(providers, method) {
+export function concatCollection(providers, method) {
     const wrapper = async (...args) => {
         const results = await Promise.all(providers.map(async (p) => {
             const member = Reflect.get(p, method);

package/dist/api/trpc/cap-route-error-formatter.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.formatTrpcError = formatTrpcError;
 /**
  * tRPC error formatter that serializes CapRouteError diagnostic fields
  * across the server→client boundary.
@@ -16,8 +13,8 @@ exports.formatTrpcError = formatTrpcError;
  *
  * The formatter is EXPORTED for unit testing (no side-effects, pure function).
  */
-const system_1 = require("@camstack/system");
-const types_1 = require("@camstack/types");
+import { CapRouteError, getCatalogRegistry, SERVER_NAMESPACE } from '@camstack/system';
+import { DEFAULT_CATALOG_LANG, interpolate, readErrorI18n, } from '@camstack/types';
 // ---------------------------------------------------------------------------
 // Type guards
 // ---------------------------------------------------------------------------
@@ -57,7 +54,7 @@ function extractCapRouteError(err) {
     for (let depth = 0; depth < 8; depth++) {
         if (current === null || current === undefined)
             return null;
-        if (current instanceof system_1.CapRouteError) {
+        if (current instanceof CapRouteError) {
             return current;
         }
         // Duck-type fallback: err.name + err.reason field present
@@ -84,7 +81,7 @@ function extractCapRouteError(err) {
                 const rawCapName = Reflect.get(current, 'capName');
                 const capName = typeof rawCapName === 'string' ? rawCapName : '(unknown)';
                 // Build a minimal object with the same shape — enough for the formatter.
-                const synthetic = Object.assign(new system_1.CapRouteError(capName, undefined, {
+                const synthetic = Object.assign(new CapRouteError(capName, undefined, {
                     reason,
                     rejected,
                     ...(typeof nodeId === 'string' ? { nodeId } : {}),
@@ -110,7 +107,7 @@ function extractCapRouteError(err) {
  * when the thrown error (or any error in its `.cause` chain) is a CapRouteError.
  * Returns the shape unchanged for all other errors.
  */
-function formatTrpcError(opts) {
+export function formatTrpcError(opts) {
     return withErrorI18n(opts, withCapRouteData(opts));
 }
 /**
@@ -120,16 +117,16 @@ function formatTrpcError(opts) {
  * unknown code and English all pass through with the original message.
  */
 function withErrorI18n(opts, shape) {
-    const coded = (0, types_1.readErrorI18n)(opts.error);
+    const coded = readErrorI18n(opts.error);
     if (coded === null)
         return shape;
-    const lang = opts.ctx?.lang ?? types_1.DEFAULT_CATALOG_LANG;
-    const text = lang === types_1.DEFAULT_CATALOG_LANG
+    const lang = opts.ctx?.lang ?? DEFAULT_CATALOG_LANG;
+    const text = lang === DEFAULT_CATALOG_LANG
         ? undefined
-        : (0, system_1.getCatalogRegistry)().lookup(lang, system_1.SERVER_NAMESPACE, coded.code);
+        : getCatalogRegistry().lookup(lang, SERVER_NAMESPACE, coded.code);
     return {
         ...shape,
-        ...(text !== undefined ? { message: (0, types_1.interpolate)(text, coded.params) } : {}),
+        ...(text !== undefined ? { message: interpolate(text, coded.params) } : {}),
         data: { ...shape.data, i18n: coded },
     };
 }

package/dist/api/trpc/cap-router-runtime.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Server-side glue for the runtime cap-router builder (BIG PLAN 2).
  *
@@ -19,43 +18,33 @@
  * supplies `server-provided` provider factories (incl. webrtc-session) via the
  * `serverProviders` map — no hand-written cap-router override remains.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.COLLECTION_ARRAY_METHODS = void 0;
-exports.aggregateCollectionCall = aggregateCollectionCall;
-exports.devicePinOf = devicePinOf;
-exports.pinnedDeviceCollectionCall = pinnedDeviceCollectionCall;
-exports.addonPinOf = addonPinOf;
-exports.pinnedCollectionCall = pinnedCollectionCall;
-exports.createCapRouterPrimitives = createCapRouterPrimitives;
-exports.createCapRouterServices = createCapRouterServices;
-exports.buildRuntimeCapRouters = buildRuntimeCapRouters;
-const system_1 = require("@camstack/system");
-const types_1 = require("@camstack/types");
-const server_1 = require("@trpc/server");
-const cap_mount_helpers_js_1 = require("./cap-mount-helpers.js");
-const device_collection_dispatch_js_1 = require("./device-collection-dispatch.js");
-const trpc_middleware_js_1 = require("./trpc.middleware.js");
+import { ALL_CAPABILITY_DEFINITIONS, buildCapRouters, isArrayOutputSchema, } from '@camstack/system';
+import { PROVIDER_PIN_FIELD, resolveCapMount, } from '@camstack/types';
+import { TRPCError } from '@trpc/server';
+import { requireDeviceScoped } from './cap-mount-helpers.js';
+import { requireDeviceCollection } from './device-collection-dispatch.js';
+import { adminProcedure, iterableSubscription, protectedProcedure, publicProcedure, trpcRouter, } from './trpc.middleware.js';
 /**
  * Pre-computed set of capName → array-output method names for collection
  * caps, derived once from the cap defs at module init. Mirrors
  * `generate-cap-mounts.ts` `isArrayOutputSchema` so the runtime collection
  * resolver fans the SAME methods the codegen used to.
  */
-exports.COLLECTION_ARRAY_METHODS = computeArrayMethods();
+export const COLLECTION_ARRAY_METHODS = computeArrayMethods();
 function computeArrayMethods() {
     const out = new Map();
-    for (const def of system_1.ALL_CAPABILITY_DEFINITIONS) {
+    for (const def of ALL_CAPABILITY_DEFINITIONS) {
         // The effective MOUNT, never `mode`: a device-scoped wrapper collection
         // (`videoclips`, D554) fans over ONE DEVICE's sources through the
         // per-device dispatcher, and must never be fanned globally here.
-        if ((0, types_1.resolveCapMount)(def).kind !== 'collection')
+        if (resolveCapMount(def).kind !== 'collection')
             continue;
         const names = [];
         for (const [name, schema] of Object.entries(def.methods)) {
             const m = schema;
             if (m.kind === 'subscription')
                 continue;
-            if ((0, system_1.isArrayOutputSchema)(m.output))
+            if (isArrayOutputSchema(m.output))
                 names.push(name);
         }
         if (names.length > 0)
@@ -77,7 +66,7 @@ function computeArrayMethods() {
  */
 function isGlobalCollection(reg, capName) {
     const def = reg.getDefinition(capName);
-    return def !== undefined && (0, types_1.resolveCapMount)(def).kind === 'collection';
+    return def !== undefined && resolveCapMount(def).kind === 'collection';
 }
 /**
  * Resolve a collection cap's provider exactly as the codegen-emitted
@@ -103,7 +92,7 @@ function resolveCollectionProvider(reg, capName, addonId) {
     const first = providers[0];
     if (first === undefined)
         return null;
-    const arrayMethods = exports.COLLECTION_ARRAY_METHODS.get(capName);
+    const arrayMethods = COLLECTION_ARRAY_METHODS.get(capName);
     if (!arrayMethods || arrayMethods.length === 0)
         return first;
     const aggregate = { ...first };
@@ -128,12 +117,12 @@ function resolveCollectionProvider(reg, capName, addonId) {
  * `null` on zero providers too: that is the empty-collection fast-path's job
  * (it answers `[]` without routing), not this one's.
  */
-async function aggregateCollectionCall(reg, capName, method, args) {
+export async function aggregateCollectionCall(reg, capName, method, args) {
     if (!reg)
         return null;
     if (!isGlobalCollection(reg, capName))
         return null;
-    if (!exports.COLLECTION_ARRAY_METHODS.get(capName)?.includes(method))
+    if (!COLLECTION_ARRAY_METHODS.get(capName)?.includes(method))
         return null;
     if (reg.getCollectionEntries(capName).length === 0)
         return null;
@@ -157,7 +146,7 @@ function isDeviceCollection(reg, capName) {
     const def = reg.getDefinition(capName);
     if (def === undefined)
         return false;
-    return def.mode === 'collection' && (0, types_1.resolveCapMount)(def).kind === 'device-scoped';
+    return def.mode === 'collection' && resolveCapMount(def).kind === 'device-scoped';
 }
 /**
  * The `{ provider }` a DEVICE-collection call pins to, or `null`.
@@ -184,7 +173,7 @@ function isDeviceCollection(reg, capName) {
  * is required on `listClips` too (D554), and the narrowing happens inside
  * `requireDeviceCollection`, which then decides fan-out vs scalar itself.
  */
-function devicePinOf(reg, capName, args) {
+export function devicePinOf(reg, capName, args) {
     if (!reg)
         return null;
     if (!isDeviceCollection(reg, capName))
@@ -194,7 +183,7 @@ function devicePinOf(reg, capName, args) {
     const rec = args;
     if (typeof rec['deviceId'] !== 'number')
         return null;
-    const pin = rec[types_1.PROVIDER_PIN_FIELD];
+    const pin = rec[PROVIDER_PIN_FIELD];
     return typeof pin === 'string' && pin.length > 0 ? pin : null;
 }
 /**
@@ -210,10 +199,10 @@ function devicePinOf(reg, capName, args) {
  * legitimately answer `null`, which a bare return could not tell from "not
  * handled".
  */
-async function pinnedDeviceCollectionCall(reg, capName, method, args) {
+export async function pinnedDeviceCollectionCall(reg, capName, method, args) {
     if (devicePinOf(reg, capName, args) === null)
         return null;
-    const dispatcher = (0, device_collection_dispatch_js_1.requireDeviceCollection)(reg, capName);
+    const dispatcher = requireDeviceCollection(reg, capName);
     if (dispatcher === null)
         return null;
     const fn = dispatcher[method];
@@ -239,12 +228,12 @@ async function pinnedDeviceCollectionCall(reg, capName, method, args) {
  * (there `addonId` is provider DATA: `addons.getLogs({addonId})` names the addon
  * whose logs you want, it does not name a provider).
  */
-function addonPinOf(reg, capName, method, args) {
+export function addonPinOf(reg, capName, method, args) {
     if (!reg)
         return null;
     if (!isGlobalCollection(reg, capName))
         return null;
-    if (exports.COLLECTION_ARRAY_METHODS.get(capName)?.includes(method) === true)
+    if (COLLECTION_ARRAY_METHODS.get(capName)?.includes(method) === true)
         return null;
     if (args === null || typeof args !== 'object' || Array.isArray(args))
         return null;
@@ -290,7 +279,7 @@ function addonPinOf(reg, capName, method, args) {
  * Returns a `{ value }` box, never the bare result: `getBrokerConfig` answers
  * `null` legitimately, so a bare `null` could not be told from "not handled".
  */
-async function pinnedCollectionCall(reg, capName, method, args) {
+export async function pinnedCollectionCall(reg, capName, method, args) {
     const addonId = addonPinOf(reg, capName, method, args);
     if (addonId === null)
         return null;
@@ -327,11 +316,11 @@ function concatArrayMethod(providers, method) {
     };
 }
 /** Build the `primitives` half of `buildCapRouters(primitives, services)`. */
-function createCapRouterPrimitives() {
+export function createCapRouterPrimitives() {
     const procedures = {
-        public: trpc_middleware_js_1.publicProcedure,
-        protected: trpc_middleware_js_1.protectedProcedure,
-        admin: trpc_middleware_js_1.adminProcedure,
+        public: publicProcedure,
+        protected: protectedProcedure,
+        admin: adminProcedure,
     };
     return {
         // Documented type boundary: the builder hands a record of REAL tRPC
@@ -340,13 +329,13 @@ function createCapRouterPrimitives() {
         // `CreateRouterOptions`; the runtime values satisfy it. Narrow at this
         // single seam so the rest of the builder stays free of `@trpc/server`
         // internal types — mirrors the existing `remoteCapProxy` cast pattern.
-        router: (procs) => (0, trpc_middleware_js_1.trpcRouter)(procs),
+        router: (procs) => trpcRouter(procs),
         procedures,
-        iterableSubscription: trpc_middleware_js_1.iterableSubscription,
+        iterableSubscription,
     };
 }
 /** Build the `services` half of `buildCapRouters(primitives, services)`. */
-function createCapRouterServices(deps) {
+export function createCapRouterServices(deps) {
     const reg = deps.capabilityRegistry;
     const remoteProxy = (capName, nodeId) => deps.moleculer.createCapabilityProxy(capName, nodeId);
     const getLocalProvider = (capName, mountKind, ctx, addonId) => {
@@ -375,9 +364,9 @@ function createCapRouterServices(deps) {
                 // collection twin fans the array methods over the device's sources and
                 // routes the scalar ones by the source inside the id.
                 if (reg?.getMode(capName) === 'collection') {
-                    return (0, device_collection_dispatch_js_1.requireDeviceCollection)(reg, capName, deps.logger);
+                    return requireDeviceCollection(reg, capName, deps.logger);
                 }
-                return (0, cap_mount_helpers_js_1.requireDeviceScoped)(reg, capName);
+                return requireDeviceScoped(reg, capName);
             }
             case 'collection':
                 return resolveCollectionProvider(reg, capName, addonId);
@@ -412,7 +401,7 @@ function createCapRouterServices(deps) {
             tags: { addonId },
             meta: { capability: capName, validAddonIds: [...known] },
         });
-        throw new server_1.TRPCError({
+        throw new TRPCError({
             code: 'BAD_REQUEST',
             message: `Capability "${capName}" has no provider with addonId "${addonId}". ` +
                 `Valid addonId(s): ${known.join(', ')}. ` +
@@ -425,30 +414,30 @@ function createCapRouterServices(deps) {
         rejectUnresolvedAddonPin,
         noProvider: (capName, nodeId) => {
             if (nodeId !== undefined && nodeId !== 'hub') {
-                throw new server_1.TRPCError({
+                throw new TRPCError({
                     code: 'PRECONDITION_FAILED',
                     message: `Capability "${capName}" not available on node "${nodeId}"`,
                 });
             }
-            throw new server_1.TRPCError({
+            throw new TRPCError({
                 code: 'PRECONDITION_FAILED',
                 message: `Capability "${capName}" provider not available`,
             });
         },
         noNodeRouting: (capName) => {
-            throw new server_1.TRPCError({
+            throw new TRPCError({
                 code: 'BAD_REQUEST',
                 message: `Node routing not available for "${capName}"`,
             });
         },
         badRequest: (message) => {
-            throw new server_1.TRPCError({ code: 'BAD_REQUEST', message });
+            throw new TRPCError({ code: 'BAD_REQUEST', message });
         },
         // D-1 caller-identity injection: a `caller: 'required'` method whose
         // context carries no authenticated user fails closed — the builder
         // never fabricates an identity.
         unauthorized: (message) => {
-            throw new server_1.TRPCError({ code: 'UNAUTHORIZED', message });
+            throw new TRPCError({ code: 'UNAUTHORIZED', message });
         },
         // Task 7.5d: a resolved provider that does not implement `method` must
         // fail, not answer `undefined` (200). NOT_IMPLEMENTED mirrors what
@@ -456,7 +445,7 @@ function createCapRouterServices(deps) {
         // child plane — the hub previously answered silently where the child
         // already throws.
         methodNotFound: (capName, method) => {
-            throw new server_1.TRPCError({
+            throw new TRPCError({
                 code: 'NOT_IMPLEMENTED',
                 message: `Capability "${capName}" has no method "${method}"`,
             });
@@ -470,6 +459,6 @@ function createCapRouterServices(deps) {
  * boundary so the AppRouter TYPE stays codegen-derived while the VALUE is
  * built at runtime from `ALL_CAPABILITY_DEFINITIONS`.
  */
-function buildRuntimeCapRouters(deps) {
-    return (0, system_1.buildCapRouters)(createCapRouterPrimitives(), createCapRouterServices(deps));
+export function buildRuntimeCapRouters(deps) {
+    return buildCapRouters(createCapRouterPrimitives(), createCapRouterServices(deps));
 }

package/dist/api/trpc/client-ip.js

@@ -1,14 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extractClientIp = extractClientIp;
-exports.extractCfConnectingIp = extractCfConnectingIp;
-exports.extractPeerIp = extractPeerIp;
-exports.extractUserAgent = extractUserAgent;
-exports.ipClass = ipClass;
-exports.classifyClient = classifyClient;
-exports.classifyClientRequest = classifyClientRequest;
-exports.deriveRelayOnly = deriveRelayOnly;
-exports.isRemoteClientIp = isRemoteClientIp;
 /**
  * Best-effort extraction of the originating client IP from a tRPC
  * request. Order of preference:
@@ -22,7 +11,7 @@ exports.isRemoteClientIp = isRemoteClientIp;
  * calls that carry no HTTP request) — the caller treats `null` as "not
  * remote" so the LAN/direct path stays the safe default.
  */
-function extractClientIp(req) {
+export function extractClientIp(req) {
     if (!req)
         return null;
     // 1. X-Forwarded-For — comma-separated list, client is the FIRST entry.
@@ -58,7 +47,7 @@ function extractClientIp(req) {
  * direct internet client that forges the header still classifies by its own
  * (remote) peer address. Returns `null` when absent.
  */
-function extractCfConnectingIp(req) {
+export function extractCfConnectingIp(req) {
     if (!req)
         return null;
     const raw = req.headers['cf-connecting-ip'];
@@ -74,7 +63,7 @@ function extractCfConnectingIp(req) {
  * loopback/LAN peer (the local `cloudflared` connector). Returns `null` when
  * no socket is present (mesh-originated calls).
  */
-function extractPeerIp(req) {
+export function extractPeerIp(req) {
     if (!req)
         return null;
     const remote = req.socket?.remoteAddress;
@@ -91,7 +80,7 @@ function extractPeerIp(req) {
  * subscriber's broker attribution with the viewer's UA — the SERVER reads
  * it from the request context; any client-supplied value is ignored.
  */
-function extractUserAgent(req) {
+export function extractUserAgent(req) {
     if (!req)
         return null;
     const ua = req.headers['user-agent'];
@@ -118,7 +107,7 @@ function normalizeIp(ip) {
  * Classify a single already-normalised IP literal. Null / unparseable →
  * `'lan'` (the safe default that keeps the low-latency direct path).
  */
-function ipClass(ip) {
+export function ipClass(ip) {
     if (!ip)
         return 'lan';
     if (ip.includes(':')) {
@@ -149,7 +138,7 @@ function ipClass(ip) {
  * header is ignored (a direct internet client could forge it) and we classify
  * by the proxy-resolved `clientIp`.
  */
-function classifyClient(args) {
+export function classifyClient(args) {
     if (args.peerIsLocal && args.cfConnectingIp)
         return ipClass(args.cfConnectingIp);
     return ipClass(args.clientIp);
@@ -160,7 +149,7 @@ function classifyClient(args) {
  * than forcing a policy. Composes `extractClientIp` (proxy-aware), the
  * `CF-Connecting-IP` header, and the immediate socket peer (CF trust gate).
  */
-function classifyClientRequest(req) {
+export function classifyClientRequest(req) {
     if (!req)
         return null;
     const clientIp = extractClientIp(req);
@@ -178,7 +167,7 @@ function classifyClientRequest(req) {
  *                        direct overlay host pair; forcing TURN would be worse).
  *   - `lan`    → false (low-latency direct host/srflx path).
  */
-function deriveRelayOnly(clientClass) {
+export function deriveRelayOnly(clientClass) {
     return clientClass === 'remote';
 }
 /**
@@ -188,7 +177,7 @@ function deriveRelayOnly(clientClass) {
  * (`'vpn'`) is NOT remote (kept on the direct overlay path). Unparseable /
  * null → false (safe LAN default).
  */
-function isRemoteClientIp(ip) {
+export function isRemoteClientIp(ip) {
     return ipClass(ip) === 'remote';
 }
 function isIpv4(ip) {