@camstack/server 1.2.592 → 1.2.594

package/dist/core/auth/share-token.service.js

@@ -1,39 +1,3 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ShareTokenService = exports.ShareTokenRecordSchema = exports.ShareTokenScopeSchema = exports.SHARE_TOKEN_MAX_DEVICES = exports.SHARE_TOKEN_TTL_DEFAULT_SEC = exports.SHARE_TOKEN_TTL_MAX_SEC = exports.SHARE_TOKEN_TTL_MIN_SEC = exports.SHARE_TOKEN_PREFIX = void 0;
 /**
  * ShareTokenService — scoped, TTL'd VIEW tokens for standalone share links
  * (grid rework R6: the embed page opened by a third party authenticates with
@@ -58,9 +22,10 @@ exports.ShareTokenService = exports.ShareTokenRecordSchema = exports.ShareTokenS
  * live in, reached directly instead of over the settings-store cap since
  * this service is hub-resident). Collection: `share_view_tokens`.
  */
-const crypto = __importStar(require("node:crypto"));
-const zod_1 = require("zod");
-const types_1 = require("@camstack/types");
+import * as crypto from 'node:crypto';
+import { z } from 'zod';
+import { SHARE_VIEW_KINDS, userError } from '@camstack/types';
+import { coreAuthRecordKinds } from './record-kinds.js';
 /**
  * @durable class=config owner=core-auth
  *   write="a user mints a share link; and a best-effort lastUsedAt touch on every successful validation"
@@ -91,12 +56,12 @@ const SHARE_TOKENS_INDEXES = [
     { name: 'idx_share_view_tokens_user', columns: ['userId'] },
 ];
 /** Wire prefix — `csv_` = CamStack Share View (cf. `cst_` scoped tokens). */
-exports.SHARE_TOKEN_PREFIX = 'csv_';
+export const SHARE_TOKEN_PREFIX = 'csv_';
 // ── TTL / scope bounds (enforced at mint, re-checked by the router schema) ──
-exports.SHARE_TOKEN_TTL_MIN_SEC = 60;
-exports.SHARE_TOKEN_TTL_MAX_SEC = 30 * 24 * 60 * 60; // 30 days
-exports.SHARE_TOKEN_TTL_DEFAULT_SEC = 7 * 24 * 60 * 60; // 7 days
-exports.SHARE_TOKEN_MAX_DEVICES = 64;
+export const SHARE_TOKEN_TTL_MIN_SEC = 60;
+export const SHARE_TOKEN_TTL_MAX_SEC = 30 * 24 * 60 * 60; // 30 days
+export const SHARE_TOKEN_TTL_DEFAULT_SEC = 7 * 24 * 60 * 60; // 7 days
+export const SHARE_TOKEN_MAX_DEVICES = 64;
 /**
  * What a share token is allowed to see. Keyed on `kind` so future share
  * surfaces (single-camera view, recording clip, …) extend the set without
@@ -115,9 +80,9 @@ exports.SHARE_TOKEN_MAX_DEVICES = 64;
  * Neither kind is a superset of the other — an events link cannot open a
  * WebRTC session, and a grid link cannot read a track.
  */
-exports.ShareTokenScopeSchema = zod_1.z.object({
-    kind: zod_1.z.enum(types_1.SHARE_VIEW_KINDS),
-    deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(exports.SHARE_TOKEN_MAX_DEVICES),
+export const ShareTokenScopeSchema = z.object({
+    kind: z.enum(SHARE_VIEW_KINDS),
+    deviceIds: z.array(z.number().int().nonnegative()).min(1).max(SHARE_TOKEN_MAX_DEVICES),
     /**
      * TALK-BACK, opt-in at mint time. Absent means OFF, and that is the whole
      * point: a share link is handed to third parties, so the difference between
@@ -133,27 +98,50 @@ exports.ShareTokenScopeSchema = zod_1.z.object({
      * It widens WHAT may be called, never WHICH cameras — `deviceIds` still
      * gates every talk call.
      */
-    talk: zod_1.z.boolean().optional(),
+    talk: z.boolean().optional(),
 });
 /** Persisted record — never leaves the server with `tokenHash` attached. */
-exports.ShareTokenRecordSchema = zod_1.z.object({
-    id: zod_1.z.string(),
+export const ShareTokenRecordSchema = z.object({
+    id: z.string(),
     /** The user that minted the share link (owner — may revoke it). */
-    userId: zod_1.z.string(),
-    tokenHash: zod_1.z.string(),
+    userId: z.string(),
+    tokenHash: z.string(),
     /** First 12 chars of the raw token — display/audit label only. */
-    tokenPrefix: zod_1.z.string(),
-    scope: exports.ShareTokenScopeSchema,
-    createdAt: zod_1.z.number(),
+    tokenPrefix: z.string(),
+    scope: ShareTokenScopeSchema,
+    createdAt: z.number(),
     /** Epoch ms — or `null` for a never-expiring token (explicit choice at mint). */
-    expiresAt: zod_1.z.number().nullable(),
-    lastUsedAt: zod_1.z.number().optional(),
+    expiresAt: z.number().nullable(),
+    lastUsedAt: z.number().optional(),
 });
 function parseShareToken(data) {
-    const parsed = exports.ShareTokenRecordSchema.safeParse(data);
+    const parsed = ShareTokenRecordSchema.safeParse(data);
     return parsed.success ? parsed.data : null;
 }
-class ShareTokenService {
+function recordToBody(record) {
+    const { id: _id, ...body } = record;
+    return body;
+}
+function rowToRecord(id, body) {
+    return ShareTokenRecordSchema.safeParse({ id, ...body }).data ?? null;
+}
+async function readAllShareTokenRows(kind, where) {
+    const out = [];
+    let cursor;
+    for (let page = 0; page < 100; page += 1) {
+        const answer = await kind.query({
+            ...(where === undefined ? {} : { where }),
+            limit: 1000,
+            ...(cursor === undefined ? {} : { cursor }),
+        });
+        out.push(...answer.records);
+        if (answer.nextCursor === null)
+            return out;
+        cursor = answer.nextCursor;
+    }
+    throw new Error('share-view-tokens: row count exceeds pagination bound');
+}
+export class ShareTokenService {
     getStore;
     logger;
     /**
@@ -162,9 +150,59 @@ class ShareTokenService {
      * the sqlite builtin registers after this service is constructed).
      */
     collectionDeclared = false;
-    constructor(getStore, logger = null) {
+    resolveKind;
+    constructor(getStore, logger = null, resolveKind = () => null) {
         this.getStore = getStore;
         this.logger = logger;
+        this.resolveKind = resolveKind;
+    }
+    /** Hub wiring after `records.forOwner('core-auth').declare(...)`. */
+    bindShareTokensKind(resolver) {
+        this.resolveKind = resolver;
+        this.collectionDeclared = true;
+    }
+    kind() {
+        return this.resolveKind();
+    }
+    async findById(id) {
+        const kind = this.kind();
+        if (kind !== null) {
+            const row = await kind.get(id);
+            return row === null ? null : rowToRecord(row.id, row.data);
+        }
+        const results = await (await this.store()).query({
+            collection: SHARE_TOKENS_COLLECTION,
+            filter: { where: { id } },
+        });
+        const first = results[0];
+        return first === undefined ? null : parseShareToken(first.data);
+    }
+    async persistRecord(record) {
+        const kind = this.kind();
+        if (kind !== null) {
+            const parsed = coreAuthRecordKinds['share-view-tokens'].schema.safeParse(recordToBody(record));
+            if (!parsed.success)
+                throw new Error(parsed.error.message);
+            await kind.put({
+                id: record.id,
+                expiresAt: record.expiresAt ?? undefined,
+                data: parsed.data,
+            });
+            return;
+        }
+        await (await this.store()).update({
+            collection: SHARE_TOKENS_COLLECTION,
+            id: record.id,
+            data: { ...record },
+        });
+    }
+    async deleteById(id) {
+        const kind = this.kind();
+        if (kind !== null) {
+            await kind.delete(id);
+            return;
+        }
+        await (await this.store()).delete({ collection: SHARE_TOKENS_COLLECTION, key: id });
     }
     /**
      * Resolve the backend AND ensure `share_view_tokens` is declared before
@@ -174,6 +212,13 @@ class ShareTokenService {
      * rows keep working with no migration.
      */
     async store() {
+        if (this.kind() !== null) {
+            const store = this.getStore();
+            if (!store) {
+                throw new Error('Share tokens unavailable — settings backend not ready');
+            }
+            return store;
+        }
         const store = this.getStore();
         if (!store) {
             throw new Error('Share tokens unavailable — settings backend not ready');
@@ -199,16 +244,16 @@ class ShareTokenService {
      * Returns the RAW token exactly once; only its hash is persisted.
      */
     async create(input) {
-        const scope = exports.ShareTokenScopeSchema.parse(input.scope);
-        const ttlSec = input.ttlSec ?? exports.SHARE_TOKEN_TTL_DEFAULT_SEC;
+        const scope = ShareTokenScopeSchema.parse(input.scope);
+        const ttlSec = input.ttlSec ?? SHARE_TOKEN_TTL_DEFAULT_SEC;
         if (ttlSec !== 'never' &&
             (!Number.isInteger(ttlSec) ||
-                ttlSec < exports.SHARE_TOKEN_TTL_MIN_SEC ||
-                ttlSec > exports.SHARE_TOKEN_TTL_MAX_SEC)) {
+                ttlSec < SHARE_TOKEN_TTL_MIN_SEC ||
+                ttlSec > SHARE_TOKEN_TTL_MAX_SEC)) {
             throw new Error(`Share token TTL out of bounds — got ${ttlSec}s, allowed ` +
-                `[${exports.SHARE_TOKEN_TTL_MIN_SEC}s, ${exports.SHARE_TOKEN_TTL_MAX_SEC}s] or 'never'`);
+                `[${SHARE_TOKEN_TTL_MIN_SEC}s, ${SHARE_TOKEN_TTL_MAX_SEC}s] or 'never'`);
         }
-        const rawToken = `${exports.SHARE_TOKEN_PREFIX}${crypto.randomBytes(32).toString('hex')}`;
+        const rawToken = `${SHARE_TOKEN_PREFIX}${crypto.randomBytes(32).toString('hex')}`;
         const now = Date.now();
         const record = {
             id: crypto.randomUUID(),
@@ -219,10 +264,23 @@ class ShareTokenService {
             createdAt: now,
             expiresAt: ttlSec === 'never' ? null : now + ttlSec * 1000,
         };
-        await (await this.store()).insert({
-            collection: SHARE_TOKENS_COLLECTION,
-            record: { id: record.id, data: { ...record } },
-        });
+        const kind = this.kind();
+        if (kind !== null) {
+            const parsed = coreAuthRecordKinds['share-view-tokens'].schema.safeParse(recordToBody(record));
+            if (!parsed.success)
+                throw new Error(parsed.error.message);
+            await kind.put({
+                id: record.id,
+                expiresAt: record.expiresAt ?? undefined,
+                data: parsed.data,
+            });
+        }
+        else {
+            await (await this.store()).insert({
+                collection: SHARE_TOKENS_COLLECTION,
+                record: { id: record.id, data: { ...record } },
+            });
+        }
         this.logger?.info('Share token minted', {
             meta: {
                 id: record.id,
@@ -240,18 +298,25 @@ class ShareTokenService {
      * Never throws on bad input — the auth boundary treats `null` as 401.
      */
     async validate(rawToken) {
-        if (!rawToken.startsWith(exports.SHARE_TOKEN_PREFIX))
+        if (!rawToken.startsWith(SHARE_TOKEN_PREFIX))
             return null;
         const tokenHash = crypto.createHash('sha256').update(rawToken).digest('hex');
-        const results = await (await this.store()).query({
-            collection: SHARE_TOKENS_COLLECTION,
-            filter: { where: { tokenHash } },
-        });
-        const first = results[0];
-        if (!first)
-            return null;
-        const record = parseShareToken(first.data);
-        if (!record)
+        const kind = this.kind();
+        let record = null;
+        if (kind !== null) {
+            const page = await kind.query({ where: { tokenHash }, limit: 1 });
+            const row = page.records[0];
+            record = row === undefined ? null : rowToRecord(row.id, row.data);
+        }
+        else {
+            const results = await (await this.store()).query({
+                collection: SHARE_TOKENS_COLLECTION,
+                filter: { where: { tokenHash } },
+            });
+            const first = results[0];
+            record = first === undefined ? null : parseShareToken(first.data);
+        }
+        if (record === null)
             return null;
         // `expiresAt: null` = never expires (explicit mint-time choice);
         // revocation remains the kill switch for those.
@@ -270,42 +335,30 @@ class ShareTokenService {
      */
     async extend(input) {
         if (!Number.isInteger(input.ttlSec) ||
-            input.ttlSec < exports.SHARE_TOKEN_TTL_MIN_SEC ||
-            input.ttlSec > exports.SHARE_TOKEN_TTL_MAX_SEC) {
+            input.ttlSec < SHARE_TOKEN_TTL_MIN_SEC ||
+            input.ttlSec > SHARE_TOKEN_TTL_MAX_SEC) {
             throw new Error(`Share token TTL out of bounds — got ${input.ttlSec}s, allowed ` +
-                `[${exports.SHARE_TOKEN_TTL_MIN_SEC}s, ${exports.SHARE_TOKEN_TTL_MAX_SEC}s]`);
-        }
-        const results = await (await this.store()).query({
-            collection: SHARE_TOKENS_COLLECTION,
-            filter: { where: { id: input.id } },
-        });
-        const first = results[0];
-        if (!first) {
-            throw (0, types_1.userError)('auth.share-token-not-found', { id: input.id }, `Share token not found: ${input.id}`);
+                `[${SHARE_TOKEN_TTL_MIN_SEC}s, ${SHARE_TOKEN_TTL_MAX_SEC}s]`);
         }
-        const record = parseShareToken(first.data);
-        if (!record) {
-            throw (0, types_1.userError)('auth.share-token-not-found', { id: input.id }, `Share token not found: ${input.id}`);
+        const record = await this.findById(input.id);
+        if (record === null) {
+            throw userError('auth.share-token-not-found', { id: input.id }, `Share token not found: ${input.id}`);
         }
         if (!input.callerIsAdmin && record.userId !== input.callerUserId) {
-            throw (0, types_1.userError)('auth.share-owner-only-extend', undefined, 'Only the token owner or an admin can extend a share token');
+            throw userError('auth.share-owner-only-extend', undefined, 'Only the token owner or an admin can extend a share token');
         }
         if (record.expiresAt === null) {
-            throw (0, types_1.userError)('auth.share-never-expiring-extend', undefined, 'A never-expiring share token cannot be extended');
+            throw userError('auth.share-never-expiring-extend', undefined, 'A never-expiring share token cannot be extended');
         }
         const now = Date.now();
         if (now > record.expiresAt) {
-            throw (0, types_1.userError)('server.share-token-expired', { id: String(input.id) }, `Share token expired: ${input.id}`);
+            throw userError('server.share-token-expired', { id: String(input.id) }, `Share token expired: ${input.id}`);
         }
         const updated = {
             ...record,
             expiresAt: now + input.ttlSec * 1000,
         };
-        await (await this.store()).update({
-            collection: SHARE_TOKENS_COLLECTION,
-            id: record.id,
-            data: { ...updated },
-        });
+        await this.persistRecord(updated);
         this.logger?.info('Share token extended', {
             meta: {
                 id: updated.id,
@@ -321,23 +374,13 @@ class ShareTokenService {
      * permission mismatch so the router surfaces a FORBIDDEN.
      */
     async revoke(input) {
-        const results = await (await this.store()).query({
-            collection: SHARE_TOKENS_COLLECTION,
-            filter: { where: { id: input.id } },
-        });
-        const first = results[0];
-        if (!first)
+        const record = await this.findById(input.id);
+        if (record === null)
             return false;
-        const record = parseShareToken(first.data);
-        if (!record) {
-            // Corrupt record — delete it regardless (it can never validate).
-            await (await this.store()).delete({ collection: SHARE_TOKENS_COLLECTION, key: input.id });
-            return true;
-        }
         if (!input.callerIsAdmin && record.userId !== input.callerUserId) {
-            throw (0, types_1.userError)('auth.share-owner-only-revoke', undefined, 'Only the token owner or an admin can revoke a share token');
+            throw userError('auth.share-owner-only-revoke', undefined, 'Only the token owner or an admin can revoke a share token');
         }
-        await (await this.store()).delete({ collection: SHARE_TOKENS_COLLECTION, key: input.id });
+        await this.deleteById(input.id);
         this.logger?.info('Share token revoked', {
             meta: { id: record.id, byUserId: input.callerUserId },
         });
@@ -345,6 +388,13 @@ class ShareTokenService {
     }
     /** Every share token minted by `userId`, expired ones included. */
     async listForUser(userId) {
+        const kind = this.kind();
+        if (kind !== null) {
+            const rows = await readAllShareTokenRows(kind, { userId });
+            return rows
+                .map((row) => rowToRecord(row.id, row.data))
+                .filter((r) => r !== null);
+        }
         const results = await (await this.store()).query({
             collection: SHARE_TOKENS_COLLECTION,
             filter: { where: { userId } },
@@ -353,6 +403,13 @@ class ShareTokenService {
     }
     /** All share tokens (admin listing). */
     async listAll() {
+        const kind = this.kind();
+        if (kind !== null) {
+            const rows = await readAllShareTokenRows(kind);
+            return rows
+                .map((row) => rowToRecord(row.id, row.data))
+                .filter((r) => r !== null);
+        }
         const results = await (await this.store()).query({
             collection: SHARE_TOKENS_COLLECTION,
             filter: {},
@@ -360,11 +417,6 @@ class ShareTokenService {
         return results.map((r) => parseShareToken(r.data)).filter((r) => r !== null);
     }
     async touchLastUsed(record) {
-        await (await this.store()).update({
-            collection: SHARE_TOKENS_COLLECTION,
-            id: record.id,
-            data: { ...record, lastUsedAt: Date.now() },
-        });
+        await this.persistRecord({ ...record, lastUsedAt: Date.now() });
     }
 }
-exports.ShareTokenService = ShareTokenService;

package/dist/core/capability/capability.service.js

@@ -1,13 +1,10 @@
-"use strict";
 /**
  * CapabilityService — NestJS-injectable wrapper around the CapabilityRegistry.
  *
  * Server services inject this instead of accessing the registry directly.
  * The registry reference is set once during boot by AddonRegistryService.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CapabilityService = void 0;
-class CapabilityService {
+export class CapabilityService {
     registry = null;
     /** Called once during boot by AddonRegistryService to wire the registry */
     setRegistry(registry) {
@@ -55,4 +52,3 @@ class CapabilityService {
         return this.registry?.resolveCollectionForDevice(capability, deviceId) ?? [];
     }
 }
-exports.CapabilityService = CapabilityService;

package/dist/core/config/config.schema.js

@@ -1,7 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RUNTIME_DEFAULTS = exports.bootstrapSchema = void 0;
 // Re-export from @camstack/system
-var system_1 = require("@camstack/system");
-Object.defineProperty(exports, "bootstrapSchema", { enumerable: true, get: function () { return system_1.bootstrapSchema; } });
-Object.defineProperty(exports, "RUNTIME_DEFAULTS", { enumerable: true, get: function () { return system_1.RUNTIME_DEFAULTS; } });
+export { bootstrapSchema, RUNTIME_DEFAULTS } from '@camstack/system';

package/dist/core/config/config.service.js

@@ -1,7 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConfigService = void 0;
-const system_1 = require("@camstack/system");
-class ConfigService extends system_1.ConfigManager {
+import { ConfigManager } from '@camstack/system';
+export class ConfigService extends ConfigManager {
 }
-exports.ConfigService = ConfigService;

package/dist/core/events/event-bus.service.js

@@ -1,7 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EventBusService = void 0;
-const system_1 = require("@camstack/system");
+import { getBrokerEventBus } from '@camstack/system';
 /**
  * Hub-side event bus. Pre-broker boot the service buffers nothing —
  * subscribers / emits are no-ops until `attachBroker` lands the
@@ -19,7 +16,7 @@ const system_1 = require("@camstack/system");
  * `systemEvents.subscribe`, which is enough for the operator to see
  * continuity across page reloads.
  */
-class EventBusService {
+export class EventBusService {
     broker = null;
     inner = null;
     // Used only as a loose ring buffer for the very first events emitted
@@ -41,7 +38,7 @@ class EventBusService {
         // addon runners + remote agents leave `retainRecent` false: their events
         // are one-shot (fire-and-forget), fanned out to local subscribers but never
         // accumulated, so their heap can't grow an unbounded recent[] backlog.
-        const inner = (0, system_1.getBrokerEventBus)(broker, { retainRecent: true });
+        const inner = getBrokerEventBus(broker, { retainRecent: true });
         this.inner = inner;
         // Replay deferred subscriptions onto the real bus.
         for (const sub of this.deferredSubs) {
@@ -85,4 +82,3 @@ class EventBusService {
         return this.inner?.getRecent(filter, limit) ?? [];
     }
 }
-exports.EventBusService = EventBusService;

package/dist/core/feature/feature.service.js

@@ -1,7 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.FeatureService = void 0;
-const system_1 = require("@camstack/system");
-class FeatureService extends system_1.FeatureManager {
+import { FeatureManager } from '@camstack/system';
+export class FeatureService extends FeatureManager {
 }
-exports.FeatureService = FeatureService;

package/dist/core/lifecycle/lifecycle-runner.singleton.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Process-wide singleton holder for the lifecycle job runner.
  *
@@ -8,19 +7,15 @@
  * at boot (from the `AddonPackageService` + event bus, wired in `manual-boot`)
  * and exposes it to every consumer.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.initLifecycleRunner = initLifecycleRunner;
-exports.getLifecycleRunner = getLifecycleRunner;
-exports.__resetLifecycleRunnerForTests = __resetLifecycleRunnerForTests;
-const lifecycle_job_runner_js_1 = require("../../api/core/lifecycle-job-runner.js");
+import { createLifecycleJobRunner, } from '../../api/core/lifecycle-job-runner.js';
 let instance = null;
 /**
  * Build the runner once. Idempotent: a second call returns the already-built
  * instance and ignores the new deps (it does NOT rebuild).
  */
-function initLifecycleRunner(deps) {
+export function initLifecycleRunner(deps) {
     if (instance === null) {
-        instance = (0, lifecycle_job_runner_js_1.createLifecycleJobRunner)(deps);
+        instance = createLifecycleJobRunner(deps);
     }
     return instance;
 }
@@ -28,13 +23,13 @@ function initLifecycleRunner(deps) {
  * Return the process-wide runner. Throws if `initLifecycleRunner` has not been
  * called yet (boot wiring is expected to init it before any consumer runs).
  */
-function getLifecycleRunner() {
+export function getLifecycleRunner() {
     if (instance === null) {
         throw new Error('lifecycle runner not initialized — call initLifecycleRunner(deps) at boot before use');
     }
     return instance;
 }
 /** Test-only: reset the singleton between specs. */
-function __resetLifecycleRunnerForTests() {
+export function __resetLifecycleRunnerForTests() {
     instance = null;
 }

package/dist/core/lifecycle/lifecycle-state-machine.js

@@ -1,6 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LifecycleStateMachine = void 0;
 // Re-export from @camstack/system — LifecycleStateMachine is already a plain class
-var system_1 = require("@camstack/system");
-Object.defineProperty(exports, "LifecycleStateMachine", { enumerable: true, get: function () { return system_1.LifecycleStateMachine; } });
+export { LifecycleStateMachine } from '@camstack/system';

package/dist/core/logging/log-ring-buffer.js

@@ -1,6 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LogRingBuffer = void 0;
 // Re-export from @camstack/system
-var system_1 = require("@camstack/system");
-Object.defineProperty(exports, "LogRingBuffer", { enumerable: true, get: function () { return system_1.LogRingBuffer; } });
+export { LogRingBuffer } from '@camstack/system';

package/dist/core/logging/logging.service.js

@@ -1,8 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LoggingService = void 0;
-const system_1 = require("@camstack/system");
-const types_1 = require("@camstack/types");
+import { LogManager } from '@camstack/system';
+import { EventCategory } from '@camstack/types';
 /** Baseline tags every hub-local logger gets, so console output never
  *  falls back to `?` for the agent slot. Hub-local addons already
  *  re-tag with their addonId; this ensures non-addon scopes (core
@@ -13,7 +10,7 @@ const types_1 = require("@camstack/types");
  *  forked workers via `$hub.log` carry their own `tags.pid` which
  *  wins over this baseline (right-biased merge in `writeFromWorker`). */
 const HUB_BASELINE_TAGS = { agentId: 'hub', nodeId: 'hub', pid: process.pid };
-class LoggingService extends system_1.LogManager {
+export class LoggingService extends LogManager {
     /**
      * Device-name cache consulted by the formatter when a log line
      * carries `tags.deviceId` but no explicit `deviceName`. Populated
@@ -77,7 +74,7 @@ class LoggingService extends system_1.LogManager {
      */
     attachDeviceNameStream(eventBus) {
         const selfLogger = this.createLogger('logging').withTags({ addonId: 'logging' });
-        eventBus.subscribe({ category: types_1.EventCategory.DeviceRegistered }, (event) => {
+        eventBus.subscribe({ category: EventCategory.DeviceRegistered }, (event) => {
             const data = event.data;
             if (data && typeof data.deviceId === 'number') {
                 this.upsertDeviceName(data.deviceId, data.name);
@@ -90,7 +87,7 @@ class LoggingService extends system_1.LogManager {
                 });
             }
         });
-        eventBus.subscribe({ category: types_1.EventCategory.DeviceUnregistered }, (event) => {
+        eventBus.subscribe({ category: EventCategory.DeviceUnregistered }, (event) => {
             const data = event.data;
             if (data && typeof data.deviceId === 'number')
                 this.removeDeviceName(data.deviceId);
@@ -137,4 +134,3 @@ class LoggingService extends system_1.LogManager {
         }
     }
 }
-exports.LoggingService = LoggingService;

package/dist/core/logging/scoped-logger.js

@@ -1,6 +1,2 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ScopedLogger = void 0;
 // Re-export from @camstack/system
-var system_1 = require("@camstack/system");
-Object.defineProperty(exports, "ScopedLogger", { enumerable: true, get: function () { return system_1.ScopedLogger; } });
+export { ScopedLogger } from '@camstack/system';

package/dist/core/moleculer/agent-readiness-pull.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.filterAgentAuthoritativeRecords = filterAgentAuthoritativeRecords;
 const VALID_STATES = new Set(['starting', 'ready', 'down']);
 const VALID_SCOPE_TYPES = new Set(['global', 'node', 'device']);
 /** Structural validation for a record received from a remote node. */
@@ -27,7 +24,7 @@ function isWellFormedRecord(value) {
  * Keep only the records `agentNodeId` is authoritative for, dropping
  * malformed entries. See module doc for why this filter must exist.
  */
-function filterAgentAuthoritativeRecords(records, agentNodeId) {
+export function filterAgentAuthoritativeRecords(records, agentNodeId) {
     if (!Array.isArray(records))
         return [];
     return records.filter((record) => {