@camstack/server 1.2.592 → 1.2.594

package/dist/agent/register-agent-cap-dispatch.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Extracted, testable helper for registering the agent-side cap-dispatch
  * service with a Moleculer broker.
@@ -7,9 +6,7 @@
  * (undefined → no-op; defined → create service) can be exercised in a unit
  * test independently of the full bootstrap lifecycle.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerAgentCapDispatch = registerAgentCapDispatch;
-const agent_cap_dispatch_service_js_1 = require("./agent-cap-dispatch-service.js");
+import { createAgentCapDispatchService } from './agent-cap-dispatch-service.js';
 // ---------------------------------------------------------------------------
 // Exported helper
 // ---------------------------------------------------------------------------
@@ -30,8 +27,8 @@ const agent_cap_dispatch_service_js_1 = require("./agent-cap-dispatch-service.js
  *                           of failing with "no provider".
  * @param logger             Optional scoped logger forwarded to the service.
  */
-function registerAgentCapDispatch(registrar, agentUdsRegistry, inProcessLookup, logger) {
+export function registerAgentCapDispatch(registrar, agentUdsRegistry, inProcessLookup, logger) {
     if (agentUdsRegistry === undefined)
         return;
-    registrar.createService((0, agent_cap_dispatch_service_js_1.createAgentCapDispatchService)(registrar.nodeID, agentUdsRegistry, inProcessLookup, logger));
+    registrar.createService(createAgentCapDispatchService(registrar.nodeID, agentUdsRegistry, inProcessLookup, logger));
 }

package/dist/agent/serial-queue.js

@@ -1,8 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SerialQueueTimeoutError = void 0;
-exports.createSerialQueue = createSerialQueue;
-class SerialQueueTimeoutError extends Error {
+export class SerialQueueTimeoutError extends Error {
     deadlineMs;
     constructor(deadlineMs) {
         super(`the job did not finish within ${deadlineMs} ms and was abandoned`);
@@ -10,13 +6,12 @@ class SerialQueueTimeoutError extends Error {
         this.name = 'SerialQueueTimeoutError';
     }
 }
-exports.SerialQueueTimeoutError = SerialQueueTimeoutError;
 function defaultSetTimer(fn, ms) {
     const timer = setTimeout(fn, ms);
     timer.unref?.();
     return { cancel: () => clearTimeout(timer) };
 }
-function createSerialQueue(job, options = {}) {
+export function createSerialQueue(job, options = {}) {
     let tail = Promise.resolve();
     const setTimer = options.setTimer ?? defaultSetTimer;
     const guarded = () => {

package/dist/agent-status-page.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.renderAgentStatusPage = renderAgentStatusPage;
 function formatUptime(seconds) {
     const days = Math.floor(seconds / 86400);
     const hours = Math.floor((seconds % 86400) / 3600);
@@ -25,7 +22,7 @@ function escapeHtml(str) {
  * No React, no build system. Pure HTML + inline CSS.
  * Designed for local debugging only.
  */
-function renderAgentStatusPage(data) {
+export function renderAgentStatusPage(data) {
     const statusColor = data.connected ? '#22c55e' : '#ef4444';
     const statusText = data.connected ? 'Connected' : 'Disconnected';
     const memUsedMB = data.memoryTotalMB - data.memoryFreeMB;

package/dist/api/addon-upload.js

@@ -1,53 +1,14 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getDeployStageRegistry = getDeployStageRegistry;
-exports.registerDeployBundleRoute = registerDeployBundleRoute;
-exports.buildHubHttpSource = buildHubHttpSource;
-exports.registerAddonUploadRoute = registerAddonUploadRoute;
-const fs = __importStar(require("node:fs"));
-const os = __importStar(require("node:os"));
-const path = __importStar(require("node:path"));
-const addon_package_service_js_1 = require("../core/addon/addon-package.service.js");
-const index_js_1 = require("../server-root/index.js");
-const agent_addon_delivery_js_1 = require("./agent-addon-delivery.js");
-const deploy_stage_registry_js_1 = require("./deploy-stage-registry.js");
-const tarball_manifest_js_1 = require("./tarball-manifest.js");
-const upload_auth_js_1 = require("./upload-auth.js");
-const deployStageRegistry = new deploy_stage_registry_js_1.DeployStageRegistry();
-function getDeployStageRegistry() {
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { isFrameworkPackage } from '../core/addon/addon-package.service.js';
+import { detectWorkspaceRoot } from '../server-root/index.js';
+import { deliverAddonToAgent, } from './agent-addon-delivery.js';
+import { DeployStageRegistry } from './deploy-stage-registry.js';
+import { isTarballFilename, readTarballManifest } from './tarball-manifest.js';
+import { authorizeUploadRequest } from './upload-auth.js';
+const deployStageRegistry = new DeployStageRegistry();
+export function getDeployStageRegistry() {
     return deployStageRegistry;
 }
 /**
@@ -55,7 +16,7 @@ function getDeployStageRegistry() {
  * the per-deploy token minted in `DeployStageRegistry.stage()` and carried to
  * the agent in the `$agent.deploy` `hub-http` source descriptor.
  */
-function registerDeployBundleRoute(fastify) {
+export function registerDeployBundleRoute(fastify) {
     // `compress: false` — never gzip/brotli this route. The body is a large
     // binary tarball (addon bundle / model artifact) the agent pulls with undici
     // + sha256 verification. With global @fastify/compress on, the 1–2MB response
@@ -102,7 +63,7 @@ async function resolveBaseUrlOrReason(resolve) {
         return { ok: false, error: err instanceof Error ? err.message : String(err) };
     }
 }
-function buildHubHttpSource(buffer, hubBaseUrl) {
+export function buildHubHttpSource(buffer, hubBaseUrl) {
     const staged = getDeployStageRegistry().stage(buffer);
     return {
         kind: 'hub-http',
@@ -112,7 +73,7 @@ function buildHubHttpSource(buffer, hubBaseUrl) {
         bytes: staged.bytes,
     };
 }
-async function registerAddonUploadRoute(fastify, addonBridge, authService, moleculer, addonRegistry, addonPackageService, logger, 
+export async function registerAddonUploadRoute(fastify, addonBridge, authService, moleculer, addonRegistry, addonPackageService, logger, 
 /**
  * The base URL agents pull the staged bundle from — the `local-network`
  * cap's cluster address (`hub-cluster-url.ts`), resolved per delivery.
@@ -125,7 +86,7 @@ resolveClusterBaseUrl,
  * not build one; `main.ts` always passes the AgentRegistryService's.
  */
 deliveryLedger) {
-    await fastify.register(Promise.resolve().then(() => __importStar(require('@fastify/multipart'))), {
+    await fastify.register(import('@fastify/multipart'), {
         limits: { fileSize: MAX_UPLOAD_BYTES },
     });
     registerDeployBundleRoute(fastify);
@@ -133,7 +94,7 @@ deliveryLedger) {
         // Auth chain (shared with /api/server-upload): JWT (isAdmin) OR scoped
         // token whose scopes grant `create` access on the `addons` capability.
         // See upload-auth.ts for the full rationale.
-        const auth = await (0, upload_auth_js_1.authorizeUploadRequest)({
+        const auth = await authorizeUploadRequest({
             authHeader: request.headers.authorization,
             authService,
             addonRegistry,
@@ -145,7 +106,7 @@ deliveryLedger) {
         if (!data) {
             return reply.status(400).send({ error: 'No file uploaded' });
         }
-        if (!(0, tarball_manifest_js_1.isTarballFilename)(data.filename)) {
+        if (!isTarballFilename(data.filename)) {
             return reply.status(400).send({ error: 'File must be a .tgz or .tar.gz archive' });
         }
         // Drain the file part FIRST. `data.fields` is the plugin's live `body`
@@ -170,7 +131,7 @@ deliveryLedger) {
         // Gate: reject archives that don't expose a parseable package.json with
         // name + version. The hub installer did this implicitly via npm; the
         // agent path would otherwise fail mid-extraction with no clean rollback.
-        const manifest = (0, tarball_manifest_js_1.readTarballManifest)(buffer, data.filename);
+        const manifest = readTarballManifest(buffer, data.filename);
         if (!manifest) {
             return reply.status(400).send({
                 error: 'Tarball missing or malformed package/package.json (name + version required)',
@@ -256,7 +217,7 @@ async function propagateToAgents(moleculer, logger, packageName, buffer, resolve
         // yet. Wiring it later must also make the agent's npm path evict the addon's
         // declaration ids before `$agent.reload`, otherwise an npm update pins the
         // stale version.
-        results.push(await (0, agent_addon_delivery_js_1.deliverAddonToAgent)({
+        results.push(await deliverAddonToAgent({
             broker,
             logger,
             nodeId,
@@ -319,7 +280,7 @@ async function installToHub(reply, addonBridge, addonRegistry, addonPackageServi
         // settings. The new code is now on disk; a clean server restart reloads it
         // and re-runs boot initialization. The 10s restart grace lets this response
         // flush before the process exits, so the CLI sees a clean confirmation.
-        if ((0, addon_package_service_js_1.isFrameworkPackage)(result.name)) {
+        if (isFrameworkPackage(result.name)) {
             // Framework live-sync is GONE (superseded by the runtime-updatable root
             // package — the hub main + its framework deps now update as ONE
             // `@camstack/server` closure via the `server-management` cap).
@@ -329,7 +290,7 @@ async function installToHub(reply, addonBridge, addonRegistry, addonPackageServi
             // BEFORE uploading — a plain restart loads the new code, no mirror
             // needed. `camstack deploy packages/system` therefore keeps working in
             // dev unchanged.
-            const workspaceRoot = (0, index_js_1.detectWorkspaceRoot)(__dirname);
+            const workspaceRoot = detectWorkspaceRoot(__dirname);
             if (workspaceRoot !== null) {
                 logger.info('framework package deployed (workspace) — scheduling server restart', {
                     meta: { packageName: result.name, packageVersion: result.version, workspaceRoot },
@@ -446,7 +407,7 @@ async function deployToAgent(reply, moleculer, logger, nodeId, addonId, buffer,
     // yet. Wiring it later must also make the agent's npm path evict the addon's
     // declaration ids before `$agent.reload`, otherwise an npm update pins the
     // stale version.
-    const result = await (0, agent_addon_delivery_js_1.deliverAddonToAgent)({
+    const result = await deliverAddonToAgent({
         broker: moleculer.broker,
         logger,
         nodeId,

package/dist/api/agent-addon-delivery.js

@@ -1,8 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AGENT_RELOAD_TIMEOUT_MS = exports.AGENT_DEPLOY_CONTROL_TIMEOUT_MS = void 0;
-exports.isAgentDeployResponse = isAgentDeployResponse;
-exports.deliverAddonToAgent = deliverAddonToAgent;
 /**
  * Delivering an addon bundle to an agent — the single implementation.
  *
@@ -45,13 +40,13 @@ exports.deliverAddonToAgent = deliverAddonToAgent;
  * exactly like a deploy that worked. `agent-deploy-timeout.spec.ts` pins the
  * relationship so they cannot separate again.
  */
-exports.AGENT_DEPLOY_CONTROL_TIMEOUT_MS = 300_000;
+export const AGENT_DEPLOY_CONTROL_TIMEOUT_MS = 300_000;
 /**
  * `$agent.reload` re-forks group runners and re-registers their capabilities —
  * legitimately slow on a node with a Python inference pool.
  */
-exports.AGENT_RELOAD_TIMEOUT_MS = 60_000;
-function isAgentDeployResponse(value) {
+export const AGENT_RELOAD_TIMEOUT_MS = 60_000;
+export function isAgentDeployResponse(value) {
     if (value === null || typeof value !== 'object')
         return false;
     const v = value;
@@ -79,7 +74,7 @@ function readLoaded(value) {
  * Never throws: a per-node failure is returned so one unreachable agent cannot
  * abort a cluster propagation or the hub's own install.
  */
-async function deliverAddonToAgent(args) {
+export async function deliverAddonToAgent(args) {
     const { broker, logger, nodeId, packageName, source } = args;
     // Opened BEFORE the first byte and closed in the `finally` below — the window
     // must cover `$agent.deploy` (which evicts the package's declaration ids) AND
@@ -87,7 +82,7 @@ async function deliverAddonToAgent(args) {
     // happy path.
     const closeWindow = args.deliveryLedger?.begin(nodeId, packageName);
     try {
-        const deployRaw = await broker.call('$agent.deploy', { addonId: packageName, source }, { nodeID: nodeId, timeout: exports.AGENT_DEPLOY_CONTROL_TIMEOUT_MS });
+        const deployRaw = await broker.call('$agent.deploy', { addonId: packageName, source }, { nodeID: nodeId, timeout: AGENT_DEPLOY_CONTROL_TIMEOUT_MS });
         if (!isAgentDeployResponse(deployRaw)) {
             logger.warn('agent deploy: malformed deploy response', {
                 meta: { nodeId, packageName },
@@ -119,7 +114,7 @@ async function deliverAddonToAgent(args) {
         });
         // Reload. Without this the deploy is write-to-disk-only and the node keeps
         // running the previous dist — the whole point of this module.
-        const reloadRaw = await broker.call('$agent.reload', {}, { nodeID: nodeId, timeout: exports.AGENT_RELOAD_TIMEOUT_MS });
+        const reloadRaw = await broker.call('$agent.reload', {}, { nodeID: nodeId, timeout: AGENT_RELOAD_TIMEOUT_MS });
         const loaded = readLoaded(reloadRaw);
         if (loaded.length === 0) {
             // Not fatal — a reload can legitimately find nothing to (re)instantiate

package/dist/api/auth-whoami.js

@@ -1,7 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerAuthWhoamiRoute = registerAuthWhoamiRoute;
-async function registerAuthWhoamiRoute(fastify, authService, addonRegistry) {
+export async function registerAuthWhoamiRoute(fastify, authService, addonRegistry) {
     fastify.get('/api/auth/whoami', async (request, reply) => {
         const authHeader = request.headers.authorization;
         if (!authHeader) {

package/dist/api/backup-download-pump.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * backup-download-pump — a backup archive is streamed at the pace the client
  * READS it, and a client that stops reading is cut, never buffered until
@@ -43,18 +42,15 @@
  * `warn` for a cut client or a failed source. The route previously logged
  * nothing on success and `console.error` on failure.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BACKUP_DOWNLOAD_DRAIN_GRACE_MS = exports.BACKUP_DOWNLOAD_CHUNK_BYTES = void 0;
-exports.pumpDownload = pumpDownload;
 /** Bytes read from the storage cap per round trip; one chunk is the most the response holds. */
-exports.BACKUP_DOWNLOAD_CHUNK_BYTES = 8 * 1024 * 1024;
+export const BACKUP_DOWNLOAD_CHUNK_BYTES = 8 * 1024 * 1024;
 /**
  * How long a `write` may stay unacknowledged by `drain` before the client is
  * cut. A `ServerResponse` signals `drain` once the socket has taken its
  * buffer (16 KiB by default): a client that cannot take 16 KiB in a minute is
  * under 0.3 KB/s — not a slow link, an absent reader.
  */
-exports.BACKUP_DOWNLOAD_DRAIN_GRACE_MS = 60_000;
+export const BACKUP_DOWNLOAD_DRAIN_GRACE_MS = 60_000;
 function waitForDrain(sink, graceMs) {
     return new Promise((resolve) => {
         const settle = (outcome) => {
@@ -78,10 +74,10 @@ function errorOf(err) {
  * next only once the socket has taken the previous. Never throws: every exit
  * is a {@link PumpResult} the caller can log.
  */
-async function pumpDownload(options) {
+export async function pumpDownload(options) {
     const { sizeBytes, read, sink } = options;
-    const chunkBytes = options.chunkBytes ?? exports.BACKUP_DOWNLOAD_CHUNK_BYTES;
-    const graceMs = options.graceMs ?? exports.BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
+    const chunkBytes = options.chunkBytes ?? BACKUP_DOWNLOAD_CHUNK_BYTES;
+    const graceMs = options.graceMs ?? BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
     const now = options.now ?? (() => Date.now());
     const startedAt = now();
     let offset = 0;

package/dist/api/backup-download.js

@@ -1,16 +1,13 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerBackupDownloadRoute = registerBackupDownloadRoute;
-const backup_download_pump_js_1 = require("./backup-download-pump.js");
-const client_ip_js_1 = require("./trpc/client-ip.js");
+import { BACKUP_DOWNLOAD_CHUNK_BYTES, BACKUP_DOWNLOAD_DRAIN_GRACE_MS, pumpDownload, } from './backup-download-pump.js';
+import { extractClientIp } from './trpc/client-ip.js';
 /** Strip what would break the `Content-Disposition` header. Whitespace is fine. */
 function safeAttachmentName(name) {
     return name.replace(/[\r\n"]/g, '_');
 }
-function registerBackupDownloadRoute(fastify, options) {
+export function registerBackupDownloadRoute(fastify, options) {
     const { verifier, capabilities, logger } = options;
-    const chunkBytes = options.chunkBytes ?? backup_download_pump_js_1.BACKUP_DOWNLOAD_CHUNK_BYTES;
-    const graceMs = options.graceMs ?? backup_download_pump_js_1.BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
+    const chunkBytes = options.chunkBytes ?? BACKUP_DOWNLOAD_CHUNK_BYTES;
+    const graceMs = options.graceMs ?? BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
     fastify.get('/api/backup/download/:locationId/:archiveId', async (request, reply) => {
         const authHeader = request.headers.authorization;
         if (!authHeader) {
@@ -60,13 +57,13 @@ function registerBackupDownloadRoute(fastify, options) {
             archiveId,
             filename: archive.filename,
             sizeBytes,
-            ip: (0, client_ip_js_1.extractClientIp)(request.raw) ?? '(unidentified)',
+            ip: extractClientIp(request.raw) ?? '(unidentified)',
             chunkBytes,
             graceMs,
         };
         let result;
         try {
-            result = await (0, backup_download_pump_js_1.pumpDownload)({
+            result = await pumpDownload({
                 sizeBytes,
                 chunkBytes,
                 graceMs,

package/dist/api/core/addon-settings.router.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createAddonSettingsRouter = createAddonSettingsRouter;
 /**
  * `addonSettingsRaw` — admin read of an addon's RAW stored settings.
  *
@@ -56,21 +53,21 @@ exports.createAddonSettingsRouter = createAddonSettingsRouter;
  * merging (defaults → global → per-device). That happens on the consumer side
  * where the addon's `ConfigUISchema` is available.
  */
-const server_1 = require("@trpc/server");
-const system_1 = require("@camstack/system");
-const zod_1 = require("zod");
-const trpc_middleware_js_1 = require("../trpc/trpc.middleware.js");
-const AddonSettingsRecordSchema = zod_1.z.record(zod_1.z.string(), zod_1.z.unknown());
-const AddonIdInputSchema = zod_1.z.object({
-    addonId: zod_1.z.string().min(1),
+import { TRPCError } from '@trpc/server';
+import { isSettingsReadUnavailable } from '@camstack/system';
+import { z } from 'zod';
+import { trpcRouter, adminProcedure } from '../trpc/trpc.middleware.js';
+const AddonSettingsRecordSchema = z.record(z.string(), z.unknown());
+const AddonIdInputSchema = z.object({
+    addonId: z.string().min(1),
 });
 /**
  * `deviceId` stays a STRING on the wire (the shape callers already send) but
  * must be a numeric device id: the per-device rows are keyed by the numeric id.
  */
-const AddonDeviceInputSchema = zod_1.z.object({
-    addonId: zod_1.z.string().min(1),
-    deviceId: zod_1.z.string().regex(/^\d+$/, 'deviceId must be a numeric device id'),
+const AddonDeviceInputSchema = z.object({
+    addonId: z.string().min(1),
+    deviceId: z.string().regex(/^\d+$/, 'deviceId must be a numeric device id'),
 });
 /** A settings read that could not be answered is an error, never `{}`. */
 async function answerOrRefuse(read) {
@@ -78,20 +75,20 @@ async function answerOrRefuse(read) {
         return await read();
     }
     catch (err) {
-        if ((0, system_1.isSettingsReadUnavailable)(err)) {
-            throw new server_1.TRPCError({ code: 'SERVICE_UNAVAILABLE', message: err.message, cause: err });
+        if (isSettingsReadUnavailable(err)) {
+            throw new TRPCError({ code: 'SERVICE_UNAVAILABLE', message: err.message, cause: err });
         }
         throw err;
     }
 }
-function createAddonSettingsRouter(cfg) {
-    return (0, trpc_middleware_js_1.trpcRouter)({
+export function createAddonSettingsRouter(cfg) {
+    return trpcRouter({
         /**
          * The addon-global stored record for the given addon — raw values, no
          * defaults, no device overrides. `{}` only when the store answered with no
          * row for this addon; a failed read is `SERVICE_UNAVAILABLE`.
          */
-        getGlobal: trpc_middleware_js_1.adminProcedure
+        getGlobal: adminProcedure
             .input(AddonIdInputSchema)
             .output(AddonSettingsRecordSchema)
             .query(({ input }) => answerOrRefuse(() => cfg.readAddonGlobalStrict(input.addonId))),
@@ -100,7 +97,7 @@ function createAddonSettingsRouter(cfg) {
          * values. `{}` only when the store answered with none; a failed read is
          * `SERVICE_UNAVAILABLE`.
          */
-        getDeviceOverrides: trpc_middleware_js_1.adminProcedure
+        getDeviceOverrides: adminProcedure
             .input(AddonDeviceInputSchema)
             .output(AddonSettingsRecordSchema)
             .query(({ input }) => answerOrRefuse(() => cfg.readAddonDeviceStrict(input.addonId, Number(input.deviceId)))),