@camstack/server 1.2.593 → 1.2.594

package/dist/core/agent/cluster-node-history-store.js

@@ -1,29 +1,27 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ClusterNodeHistoryStore = void 0;
-const zod_1 = require("zod");
-const types_1 = require("@camstack/types");
-const DescriptorSchema = zod_1.z.object({
-    id: zod_1.z.string(),
-    name: zod_1.z.string(),
-    hostname: zod_1.z.string(),
-    platform: zod_1.z.string(),
-    arch: zod_1.z.string(),
-    cpuModel: zod_1.z.string().nullable(),
-    cpuCores: zod_1.z.number(),
-    memoryMB: zod_1.z.number(),
-    engines: zod_1.z.array(zod_1.z.string()).readonly(),
-    isHub: zod_1.z.boolean(),
-    localIps: zod_1.z.array(zod_1.z.string()).readonly(),
-    addonIds: zod_1.z.array(zod_1.z.string()).readonly(),
-    packages: zod_1.z
-        .array(zod_1.z.object({ name: zod_1.z.string(), version: zod_1.z.string().nullable() }))
+import { ClusterNodeHistoryBodySchema, readAllRows, } from '@camstack/system';
+import { z } from 'zod';
+import { errMsg } from '@camstack/types';
+const DescriptorSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    hostname: z.string(),
+    platform: z.string(),
+    arch: z.string(),
+    cpuModel: z.string().nullable(),
+    cpuCores: z.number(),
+    memoryMB: z.number(),
+    engines: z.array(z.string()).readonly(),
+    isHub: z.boolean(),
+    localIps: z.array(z.string()).readonly(),
+    addonIds: z.array(z.string()).readonly(),
+    packages: z
+        .array(z.object({ name: z.string(), version: z.string().nullable() }))
         .readonly()
         .optional(),
 });
 /** Shape of a `settings-store.query` record's `data` for this collection. */
-const RowDataSchema = zod_1.z.object({
-    lastActive: zod_1.z.number(),
+const RowDataSchema = z.object({
+    lastActive: z.number(),
     descriptor: DescriptorSchema,
 });
 /**
@@ -79,13 +77,19 @@ function samePackages(a, b) {
         return a === b;
     return (a.length === b.length && a.every((p, i) => p.name === b[i]?.name && p.version === b[i]?.version));
 }
-class ClusterNodeHistoryStore {
+export class ClusterNodeHistoryStore {
     resolveSettingsStore;
     logger;
     declared = false;
-    constructor(resolveSettingsStore, logger) {
+    resolveKind;
+    constructor(resolveSettingsStore, logger, resolveKind = () => null) {
         this.resolveSettingsStore = resolveSettingsStore;
         this.logger = logger;
+        this.resolveKind = resolveKind;
+    }
+    /** Hub wiring after `records.forOwner('cluster-agent').declare(...)`. */
+    bindRecordsKind(resolver) {
+        this.resolveKind = resolver;
     }
     /**
      * Idempotently declare the typed collection. Returns the resolved provider
@@ -93,6 +97,8 @@ class ClusterNodeHistoryStore {
      * unreachable) — callers treat null as "skip, best-effort".
      */
     async ensureDeclared() {
+        if (this.resolveKind() !== null)
+            return this.resolveSettingsStore();
         const store = this.resolveSettingsStore();
         if (!store)
             return null;
@@ -112,7 +118,7 @@ class ClusterNodeHistoryStore {
         }
         catch (err) {
             this.logger.warn('declareCollection failed (best-effort)', {
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: errMsg(err) },
             });
             return null;
         }
@@ -143,21 +149,17 @@ class ClusterNodeHistoryStore {
             // Carry the package roster forward. `listNodes()` does not resolve it
             // (only the reconcile does), so writing this descriptor blind would erase
             // the back-fill's intended set on the very next topology poll.
-            const existing = await this.readRow(store, descriptor.id);
+            const existing = await this.readStored(descriptor.id);
             const packages = descriptor.packages ?? existing?.descriptor.packages;
             const next = packages === undefined ? descriptor : { ...descriptor, packages };
             if (existing !== null && !this.worthWriting(existing, next))
                 return;
-            await store.set({
-                collection: COLLECTION,
-                key: descriptor.id,
-                value: { lastActive: Date.now(), descriptor: next },
-            });
+            await this.writeStored(descriptor.id, Date.now(), next);
         }
         catch (err) {
             this.logger.warn('snapshot upsert failed (best-effort)', {
                 tags: { nodeId: descriptor.id },
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: errMsg(err) },
             });
         }
     }
@@ -172,13 +174,48 @@ class ClusterNodeHistoryStore {
         return !descriptorsEqual(existing.descriptor, next);
     }
     /** Read one node's row, validated. `null` when absent or malformed. */
-    async readRow(store, nodeId) {
+    async readStored(nodeId) {
+        const kind = this.resolveKind();
+        if (kind !== null) {
+            const row = await kind.get(nodeId);
+            if (row === null)
+                return null;
+            const parsed = RowDataSchema.safeParse({
+                lastActive: row.at ?? 0,
+                descriptor: row.data.descriptor,
+            });
+            return parsed.success ? parsed.data : null;
+        }
+        const store = this.resolveSettingsStore();
+        if (!store)
+            return null;
+        return this.readRowLegacy(store, nodeId);
+    }
+    async readRowLegacy(store, nodeId) {
         const raw = await store.get({ collection: COLLECTION, key: nodeId });
         if (raw === null || raw === undefined)
             return null;
         const parsed = RowDataSchema.safeParse(raw);
         return parsed.success ? parsed.data : null;
     }
+    async writeStored(nodeId, lastActive, descriptor) {
+        const kind = this.resolveKind();
+        if (kind !== null) {
+            const body = ClusterNodeHistoryBodySchema.safeParse({ descriptor });
+            if (!body.success)
+                return;
+            await kind.put({ id: nodeId, at: lastActive, data: body.data });
+            return;
+        }
+        const store = this.resolveSettingsStore();
+        if (!store)
+            return;
+        await store.set({
+            collection: COLLECTION,
+            key: nodeId,
+            value: { lastActive, descriptor },
+        });
+    }
     /** A placeholder descriptor for a node the topology pass has not seen yet. */
     static placeholderDescriptor(nodeId) {
         return {
@@ -206,12 +243,12 @@ class ClusterNodeHistoryStore {
         if (!store)
             return [];
         try {
-            return (await this.readRow(store, nodeId))?.descriptor.packages ?? [];
+            return (await this.readStored(nodeId))?.descriptor.packages ?? [];
         }
         catch (err) {
             this.logger.warn('getPackages failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: errMsg(err) },
             });
             return [];
         }
@@ -231,7 +268,7 @@ class ClusterNodeHistoryStore {
         if (!store)
             return;
         try {
-            const existing = await this.readRow(store, nodeId);
+            const existing = await this.readStored(nodeId);
             const merged = new Map((existing?.descriptor.packages ?? []).map((p) => [p.name, p]));
             // The node's current declaration wins on version — it is the authority on
             // what it is actually running.
@@ -241,16 +278,12 @@ class ClusterNodeHistoryStore {
                 ...(existing?.descriptor ?? ClusterNodeHistoryStore.placeholderDescriptor(nodeId)),
                 packages: [...merged.values()],
             };
-            await store.set({
-                collection: COLLECTION,
-                key: nodeId,
-                value: { lastActive: existing?.lastActive ?? Date.now(), descriptor },
-            });
+            await this.writeStored(nodeId, existing?.lastActive ?? Date.now(), descriptor);
         }
         catch (err) {
             this.logger.warn('recordPackages failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: errMsg(err) },
             });
         }
     }
@@ -266,7 +299,7 @@ class ClusterNodeHistoryStore {
         if (!store)
             return;
         try {
-            const existing = await this.readRow(store, nodeId);
+            const existing = await this.readStored(nodeId);
             if (existing === null)
                 return;
             const current = existing.descriptor.packages;
@@ -276,13 +309,9 @@ class ClusterNodeHistoryStore {
             const remaining = current.filter((p) => !drop.has(p.name));
             if (remaining.length === current.length)
                 return;
-            await store.set({
-                collection: COLLECTION,
-                key: nodeId,
-                value: {
-                    lastActive: existing.lastActive,
-                    descriptor: { ...existing.descriptor, packages: remaining },
-                },
+            await this.writeStored(nodeId, existing.lastActive, {
+                ...existing.descriptor,
+                packages: remaining,
             });
             this.logger.info('pruned node package record', {
                 tags: { nodeId },
@@ -292,7 +321,7 @@ class ClusterNodeHistoryStore {
         catch (err) {
             this.logger.warn('prunePackages failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: errMsg(err) },
             });
         }
     }
@@ -306,6 +335,18 @@ class ClusterNodeHistoryStore {
         if (!store)
             return;
         try {
+            const existing = await this.readStored(nodeId);
+            if (existing === null)
+                return;
+            const kind = this.resolveKind();
+            if (kind !== null) {
+                await kind.put({
+                    id: nodeId,
+                    at: Date.now(),
+                    data: { descriptor: existing.descriptor },
+                });
+                return;
+            }
             await store.update({
                 collection: COLLECTION,
                 id: nodeId,
@@ -315,7 +356,7 @@ class ClusterNodeHistoryStore {
         catch (err) {
             this.logger.warn('touch failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: errMsg(err) },
             });
         }
     }
@@ -335,8 +376,17 @@ class ClusterNodeHistoryStore {
         if (!store)
             return null;
         try {
-            const rows = await store.query({ collection: COLLECTION });
+            const kind = this.resolveKind();
             const result = [];
+            const rows = kind !== null
+                ? (await readAllRows(kind)).map((row) => ({
+                    id: row.id,
+                    data: { lastActive: row.at ?? 0, descriptor: row.data.descriptor },
+                }))
+                : (await store.query({ collection: COLLECTION })).map((row) => ({
+                    id: row.id,
+                    data: row.data,
+                }));
             for (const row of rows) {
                 const parsed = RowDataSchema.safeParse(row.data);
                 if (!parsed.success) {
@@ -350,7 +400,7 @@ class ClusterNodeHistoryStore {
             return result;
         }
         catch (err) {
-            this.logger.warn('history read failed (best-effort)', { meta: { error: (0, types_1.errMsg)(err) } });
+            this.logger.warn('history read failed (best-effort)', { meta: { error: errMsg(err) } });
             return null;
         }
     }
@@ -370,8 +420,14 @@ class ClusterNodeHistoryStore {
             // Read first: `delete` on this provider is idempotent and cannot tell a
             // removal from a no-op, and "there was nothing to remove" is the answer
             // that stops an operator repeating a working action forever.
-            const existed = (await this.readRow(store, nodeId)) !== null;
-            await store.delete({ collection: COLLECTION, key: nodeId });
+            const existed = (await this.readStored(nodeId)) !== null;
+            const kind = this.resolveKind();
+            if (kind !== null) {
+                await kind.delete(nodeId);
+            }
+            else {
+                await store.delete({ collection: COLLECTION, key: nodeId });
+            }
             if (!existed) {
                 this.logger.info('cluster node had no history row to forget', { tags: { nodeId } });
                 return 'not-found';
@@ -382,10 +438,9 @@ class ClusterNodeHistoryStore {
         catch (err) {
             this.logger.warn('forget failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: (0, types_1.errMsg)(err) },
+                meta: { error: errMsg(err) },
             });
             return 'failed';
         }
     }
 }
-exports.ClusterNodeHistoryStore = ClusterNodeHistoryStore;

package/dist/core/agent/hub-agent-pairing.js

@@ -1,12 +1,9 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HubAgentPairing = void 0;
 /** A browse takes seconds; a list asked within this window reuses the last scan. */
 const SCAN_REUSE_MS = 4_000;
 /** A typed address is remembered this long without being heard again. */
 const ADDRESS_MEMORY_MS = 30 * 60_000;
 const DEFAULT_PORT = 4444;
-class HubAgentPairing {
+export class HubAgentPairing {
     deps;
     scanned = null;
     scanning = null;
@@ -120,4 +117,3 @@ class HubAgentPairing {
         };
     }
 }
-exports.HubAgentPairing = HubAgentPairing;

package/dist/core/agent/node-certificates-client.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createNodeCertificatesClient = createNodeCertificatesClient;
 /**
  * The hub's typed handle on a node's `node-certificates` capability (D856).
  *
@@ -9,8 +6,8 @@ exports.createNodeCertificatesClient = createNodeCertificatesClient;
  * offline, capability not declared by an old agent) or a malformed answer becomes
  * a plain error naming the node - never a cast.
  */
-const types_1 = require("@camstack/types");
-function createNodeCertificatesClient(moleculer, nodeId) {
+import { nodeCertificatesCapability } from '@camstack/types';
+export function createNodeCertificatesClient(moleculer, nodeId) {
     const proxy = moleculer?.createCapabilityProxy('node-certificates', nodeId) ?? null;
     if (proxy === null)
         return null;
@@ -25,7 +22,7 @@ function createNodeCertificatesClient(moleculer, nodeId) {
         }
         return parsed.data;
     };
-    const m = types_1.nodeCertificatesCapability.methods;
+    const m = nodeCertificatesCapability.methods;
     return {
         getCertificates: () => call('getCertificates', m.getCertificates.output, {}),
         prepareMeshRenewal: () => call('prepareMeshRenewal', m.prepareMeshRenewal.output, {}),

package/dist/core/agent/node-directory.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.toNodeDirectory = toNodeDirectory;
 /**
  * The cheap node list (D637): live liveness plus the durable history, merged.
  *
@@ -11,7 +8,7 @@ exports.toNodeDirectory = toNodeDirectory;
  * - `history === null` = unreadable, so the answer is INCOMPLETE and a picker
  *   must not call a missing id removed (D315).
  */
-function toNodeDirectory(live, history) {
+export function toNodeDirectory(live, history) {
     const rows = history ?? [];
     const names = new Map(rows.map((row) => [row.id, row.name]));
     const hubs = new Set(rows.filter((row) => row.isHub).map((row) => row.id));

package/dist/core/app-links/well-known-app-links.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * well-known-app-links — the two files a Universal/App Link needs the DOMAIN
  * to vouch for.
@@ -19,16 +18,13 @@
  * ACCEPTED and produces a valid file that fails auto-verification (the OS
  * shows a disambiguation dialog): same trade-off the Zentik file ships with.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildAppLinkFiles = buildAppLinkFiles;
-exports.parseCertFingerprints = parseCertFingerprints;
 /** Apple team + bundle ids, mirrored from the viewer's app.config.ts. */
 const APPLE_TEAM_ID = 'C3F24V5NS5';
 const BUNDLE_ID = 'com.apocaliss92.camstack';
 const BUNDLE_ID_DEV = 'com.apocaliss92.camstack.dev';
 /** The only path family the app claims on this domain. */
 const VIEWER_COMPONENT = '/viewer/camstack/*';
-function buildAppLinkFiles(androidCertSha256) {
+export function buildAppLinkFiles(androidCertSha256) {
     const appIds = [`${APPLE_TEAM_ID}.${BUNDLE_ID}`, `${APPLE_TEAM_ID}.${BUNDLE_ID_DEV}`];
     return {
         appleAppSiteAssociation: {
@@ -56,7 +52,7 @@ function buildAppLinkFiles(androidCertSha256) {
     };
 }
 /** Parse the comma-separated env form; junk and empties dropped. */
-function parseCertFingerprints(raw) {
+export function parseCertFingerprints(raw) {
     if (raw === undefined)
         return [];
     return raw

package/dist/core/auth/auth.service.js

@@ -1,13 +1,10 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthService = exports.SessionRevokedError = void 0;
-const system_1 = require("@camstack/system");
+import { AuthManager } from '@camstack/system';
 /**
  * A session-grade token whose server-side session is gone (logged out,
  * revoked, expired) or cannot be checked right now. Every caller of
  * `verifyToken` already treats a throw as "not authenticated".
  */
-class SessionRevokedError extends Error {
+export class SessionRevokedError extends Error {
     reason;
     constructor(reason) {
         super(`Session is no longer valid (${reason})`);
@@ -15,14 +12,13 @@ class SessionRevokedError extends Error {
         this.name = 'SessionRevokedError';
     }
 }
-exports.SessionRevokedError = SessionRevokedError;
 /** A v2 session token: string `userId`, boolean `isAdmin`, no `kind` (not a bridge/challenge). */
 function isSessionGrade(payload) {
     return (Reflect.get(payload, 'kind') === undefined &&
         typeof payload.userId === 'string' &&
         typeof payload.isAdmin === 'boolean');
 }
-class AuthService extends system_1.AuthManager {
+export class AuthService extends AuthManager {
     sessionCheck = null;
     /**
      * Wire the login-session check (`hub-sessions.ts`). From then on EVERY
@@ -53,4 +49,3 @@ class AuthService extends system_1.AuthManager {
         return payload;
     }
 }
-exports.AuthService = AuthService;

package/dist/core/auth/handoff-code.service.js

@@ -1,41 +1,4 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HandoffCodeService = exports.HANDOFF_CODE_MAX_PENDING = exports.HANDOFF_CODE_TTL_MS = exports.HANDOFF_CODE_PREFIX = void 0;
-exports.pkceChallenge = pkceChallenge;
-const types_1 = require("@camstack/types");
+import { userError } from '@camstack/types';
 /**
  * HandoffCodeService — one-time login handoff codes for the native-app
  * auth handoff (viewer "Sign in with CamStack").
@@ -59,26 +22,26 @@ const types_1 = require("@camstack/types");
  *     (the browser just re-runs the handoff), and a bounded store +
  *     prune-on-mint keeps the map from growing.
  */
-const crypto = __importStar(require("node:crypto"));
+import * as crypto from 'node:crypto';
 /** Wire prefix — `chc_` = CamStack Handoff Code (cf. `cst_`/`csv_`). */
-exports.HANDOFF_CODE_PREFIX = 'chc_';
-exports.HANDOFF_CODE_TTL_MS = 60_000;
+export const HANDOFF_CODE_PREFIX = 'chc_';
+export const HANDOFF_CODE_TTL_MS = 60_000;
 /** Hard bound on concurrently-pending codes (mint is auth-gated, so this
  *  only guards against a runaway authenticated client). */
-exports.HANDOFF_CODE_MAX_PENDING = 1_000;
+export const HANDOFF_CODE_MAX_PENDING = 1_000;
 /** RFC 7636 S256: `base64url(sha256(verifier))`. */
-function pkceChallenge(verifier) {
+export function pkceChallenge(verifier) {
     return crypto.createHash('sha256').update(verifier).digest('base64url');
 }
 function hashCode(code) {
     return crypto.createHash('sha256').update(code).digest('hex');
 }
-class HandoffCodeService {
+export class HandoffCodeService {
     now;
     ttlMs;
     /** Keyed by SHA-256(raw code). */
     pending = new Map();
-    constructor(now = Date.now, ttlMs = exports.HANDOFF_CODE_TTL_MS) {
+    constructor(now = Date.now, ttlMs = HANDOFF_CODE_TTL_MS) {
         this.now = now;
         this.ttlMs = ttlMs;
     }
@@ -87,10 +50,10 @@ class HandoffCodeService {
      *  legitimate flow never has anywhere near this many in flight). */
     create(userId, options = {}) {
         this.prune();
-        if (this.pending.size >= exports.HANDOFF_CODE_MAX_PENDING) {
-            throw (0, types_1.userError)('server.handoff-busy', undefined, 'Too many pending handoff codes — try again shortly');
+        if (this.pending.size >= HANDOFF_CODE_MAX_PENDING) {
+            throw userError('server.handoff-busy', undefined, 'Too many pending handoff codes — try again shortly');
         }
-        const code = `${exports.HANDOFF_CODE_PREFIX}${crypto.randomBytes(32).toString('hex')}`;
+        const code = `${HANDOFF_CODE_PREFIX}${crypto.randomBytes(32).toString('hex')}`;
         const expiresAt = this.now() + this.ttlMs;
         this.pending.set(hashCode(code), {
             userId,
@@ -144,4 +107,3 @@ class HandoffCodeService {
         }
     }
 }
-exports.HandoffCodeService = HandoffCodeService;

package/dist/core/auth/record-kinds.js

@@ -0,0 +1,35 @@
+/**
+ * Record kinds owned by `core-auth` (hub-resident, phase 6 / §2.8).
+ */
+import { defineRecordKinds, SHARE_VIEW_KINDS } from '@camstack/types';
+import { z } from 'zod';
+const ShareTokenScopeSchema = z.object({
+    kind: z.enum(SHARE_VIEW_KINDS),
+    deviceIds: z.array(z.number().int().nonnegative()).min(1).max(64),
+    talk: z.boolean().optional(),
+});
+export const SHARE_VIEW_TOKENS_LEGACY = 'share_view_tokens';
+const ShareViewTokenBodySchema = z.object({
+    userId: z.string(),
+    tokenHash: z.string(),
+    tokenPrefix: z.string(),
+    scope: ShareTokenScopeSchema,
+    createdAt: z.number(),
+    expiresAt: z.number().nullable(),
+    lastUsedAt: z.number().nullish(),
+});
+export const coreAuthRecordKinds = defineRecordKinds({
+    'share-view-tokens': {
+        schema: ShareViewTokenBodySchema,
+        class: 'config',
+        writeTrigger: 'operator mints a share link; validate touches lastUsedAt',
+        device: 'none',
+        at: 'none',
+        indexes: [
+            { name: 'hash', fields: ['tokenHash'], unique: true },
+            { name: 'user', fields: ['userId'] },
+        ],
+        retention: { none: 'revoke only; expiry enforced at validate' },
+        adoptsFrom: SHARE_VIEW_TOKENS_LEGACY,
+    },
+});