@camstack/server 1.2.594 → 1.2.595

package/dist/core/agent/agent-registry.service.js

@@ -1,12 +1,50 @@
-import { randomUUID } from 'node:crypto';
-import * as os from 'node:os';
-import { callWithServiceDiscovery, getProcessAgentHttpsNames, localSupportedPythonRuntimes, } from '@camstack/system';
-import { EventCategory, resolveAddonPlacement } from '@camstack/types';
-import { BackfillAttemptTracker, computeBackfillPlan, confirmBackfillPlan, executeBackfill, MAX_BACKFILL_ATTEMPTS, triggerMayDeliver, } from './agent-addon-backfill';
-import { AgentDeliveryLedger } from './agent-delivery-ledger';
-import { agentOfflineData, nodeDisplayName } from './agent-liveness-event';
-import { ClusterNodeHistoryMirror } from './cluster-node-history-mirror';
-import { toNodeDirectory } from './node-directory';
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentRegistryService = exports.AGENT_BACKFILL_RPC_TIMEOUT_MS = void 0;
+exports.toNodeLiveness = toNodeLiveness;
+exports.toDescriptor = toDescriptor;
+const node_crypto_1 = require("node:crypto");
+const os = __importStar(require("node:os"));
+const system_1 = require("@camstack/system");
+const types_1 = require("@camstack/types");
+const agent_addon_backfill_1 = require("./agent-addon-backfill");
+const agent_delivery_ledger_1 = require("./agent-delivery-ledger");
+const agent_liveness_event_1 = require("./agent-liveness-event");
+const cluster_node_history_mirror_1 = require("./cluster-node-history-mirror");
+const node_directory_1 = require("./node-directory");
 /** Turn a forget outcome into the sentence the operator reads. */
 function describeForgetOutcome(nodeId, history, registryRemoved, stillListed) {
     const parts = [];
@@ -34,7 +72,7 @@ const AGENT_RECONCILE_RPC_TIMEOUT_MS = 8_000;
  * and a timeout here aborts the call even though the deploy already landed.
  * Matches the `addons.updatePackage` agent path.
  */
-export const AGENT_BACKFILL_RPC_TIMEOUT_MS = 300_000;
+exports.AGENT_BACKFILL_RPC_TIMEOUT_MS = 300_000;
 /**
  * Package name of the system/infrastructure builtins. Addons shipped in
  * `@camstack/system` (filesystem-storage, storage-orchestrator,
@@ -89,7 +127,7 @@ function rosterFromAddons(addons) {
  * Child runner ids (`hub/foo`, `agent/bar`) are processes, not cluster
  * nodes — excluded, same rule as `listNodes()` / `classifyNode`.
  */
-export function toNodeLiveness(nodes) {
+function toNodeLiveness(nodes) {
     return (nodes
         // A Moleculer registry can transiently hold a malformed entry with no id
         // (seen live 2026-07-16 after agent churn): guard it or every consumer of
@@ -103,7 +141,7 @@ export function toNodeLiveness(nodes) {
  * cpuModel `undefined`→`null`, addonIds from the reported `agentAddons`) so an
  * offline row rendered from history is indistinguishable from the live shape.
  */
-export function toDescriptor(entry) {
+function toDescriptor(entry) {
     return {
         id: entry.info.id,
         name: entry.info.name,
@@ -137,7 +175,7 @@ function toSubProcess(p) {
         groupId: p.groupId ?? null,
     };
 }
-export class AgentRegistryService {
+class AgentRegistryService {
     eventBus;
     moleculer;
     capabilityService;
@@ -183,14 +221,14 @@ export class AgentRegistryService {
      * Bounded per-`(node, package)` delivery breaker — see
      * `agent-addon-backfill.ts`. Process-scoped, holds no intent.
      */
-    backfillTracker = new BackfillAttemptTracker();
+    backfillTracker = new agent_addon_backfill_1.BackfillAttemptTracker();
     /**
      * "Is the hub writing addons to this node right now?" — the gate that stops
      * the back-fill reacting to a roster gap the hub itself opened. Public so the
      * delivery path (`deliverAddonToAgent`) can mark its own window; see
      * `agent-delivery-ledger.ts` for why a delivery makes the roster lie.
      */
-    deliveryLedger = new AgentDeliveryLedger();
+    deliveryLedger = new agent_delivery_ledger_1.AgentDeliveryLedger();
     /**
      * Nodes with a reconcile in flight. The pass is triggered from two places
      * (the `registerNode` ack and the hub-boot sweep) and a reconnect can fire
@@ -210,7 +248,7 @@ export class AgentRegistryService {
     /** Wire the durable offline-node history store (A1). */
     setClusterNodeHistoryStore(store) {
         this.historyStore = store;
-        this.historyMirror = new ClusterNodeHistoryMirror(() => store.tryGetAll());
+        this.historyMirror = new cluster_node_history_mirror_1.ClusterNodeHistoryMirror(() => store.tryGetAll());
     }
     /** Wire the scoped logger (boot order — see the field). */
     setLogger(logger) {
@@ -258,10 +296,10 @@ export class AgentRegistryService {
         await this.historyStore?.prunePackages(nodeId, [packageName]);
         for (const addonId of addonIds) {
             this.eventBus.emit({
-                id: randomUUID(),
+                id: (0, node_crypto_1.randomUUID)(),
                 timestamp: new Date(),
                 source: { type: 'core', id: 'agent-registry' },
-                category: EventCategory.AddonUninstalled,
+                category: types_1.EventCategory.AddonUninstalled,
                 data: { addonId, agentId: nodeId, packageName, reason: 'operator uninstall' },
             });
         }
@@ -342,7 +380,7 @@ export class AgentRegistryService {
         this.backfillTracker.forget(nodeId);
         this.deliveryLedger.forget(nodeId);
         // The names the hub certified to this node are free again (a forgotten node cannot hold them).
-        await getProcessAgentHttpsNames()
+        await (0, system_1.getProcessAgentHttpsNames)()
             ?.release(nodeId)
             .catch((err) => this.logger?.warn("forget cluster node: could not release the node's certified names", {
             tags: { nodeId },
@@ -361,10 +399,10 @@ export class AgentRegistryService {
         // `AgentUnregistered` and re-emits immediately.
         if (historyRemoved || registryRemoved) {
             this.eventBus.emit({
-                id: randomUUID(),
+                id: (0, node_crypto_1.randomUUID)(),
                 timestamp: new Date(),
                 source: { type: 'core', id: 'agent-registry' },
-                category: EventCategory.AgentUnregistered,
+                category: types_1.EventCategory.AgentUnregistered,
                 data: { agentId: nodeId },
             });
         }
@@ -439,19 +477,19 @@ export class AgentRegistryService {
                 console.log(`[agent-registry] Agent connected: ${node.id}`);
                 const nodeName = this.knownNodeName(node.id);
                 this.eventBus.emit({
-                    id: randomUUID(),
+                    id: (0, node_crypto_1.randomUUID)(),
                     timestamp: new Date(),
                     source: { type: 'core', id: 'agent-registry' },
-                    category: EventCategory.AgentOnline,
+                    category: types_1.EventCategory.AgentOnline,
                     data: { agentId: node.id, ...(nodeName !== undefined ? { nodeName } : {}) },
                 });
             }
             else {
                 this.eventBus.emit({
-                    id: randomUUID(),
+                    id: (0, node_crypto_1.randomUUID)(),
                     timestamp: new Date(),
                     source: { type: 'core', id: 'agent-registry' },
-                    category: EventCategory.WorkerOnline,
+                    category: types_1.EventCategory.WorkerOnline,
                     data: { workerId: node.id },
                 });
             }
@@ -467,19 +505,19 @@ export class AgentRegistryService {
                 // node was never snapshotted while online.
                 void this.historyStore?.touch(node.id);
                 this.eventBus.emit({
-                    id: randomUUID(),
+                    id: (0, node_crypto_1.randomUUID)(),
                     timestamp: new Date(),
                     source: { type: 'core', id: 'agent-registry' },
-                    category: EventCategory.AgentOffline,
-                    data: agentOfflineData(node.id, unexpected, this.knownNodeName(node.id)),
+                    category: types_1.EventCategory.AgentOffline,
+                    data: (0, agent_liveness_event_1.agentOfflineData)(node.id, unexpected, this.knownNodeName(node.id)),
                 });
             }
             else {
                 this.eventBus.emit({
-                    id: randomUUID(),
+                    id: (0, node_crypto_1.randomUUID)(),
                     timestamp: new Date(),
                     source: { type: 'core', id: 'agent-registry' },
-                    category: EventCategory.WorkerOffline,
+                    category: types_1.EventCategory.WorkerOffline,
                     data: { workerId: node.id },
                 });
             }
@@ -496,19 +534,19 @@ export class AgentRegistryService {
                     continue;
                 if (kind === 'agent') {
                     this.eventBus.emit({
-                        id: randomUUID(),
+                        id: (0, node_crypto_1.randomUUID)(),
                         timestamp: new Date(),
                         source: { type: 'core', id: 'agent-registry' },
-                        category: EventCategory.AgentOnline,
+                        category: types_1.EventCategory.AgentOnline,
                         data: { agentId: id },
                     });
                 }
                 else {
                     this.eventBus.emit({
-                        id: randomUUID(),
+                        id: (0, node_crypto_1.randomUUID)(),
                         timestamp: new Date(),
                         source: { type: 'core', id: 'agent-registry' },
-                        category: EventCategory.WorkerOnline,
+                        category: types_1.EventCategory.WorkerOnline,
                         data: { workerId: id },
                     });
                 }
@@ -520,7 +558,7 @@ export class AgentRegistryService {
     }
     /** The durable history's display name for a node, when it knows a real one. */
     knownNodeName(nodeId) {
-        return nodeDisplayName(nodeId, this.historyMirror?.peek() ?? null);
+        return (0, agent_liveness_event_1.nodeDisplayName)(nodeId, this.historyMirror?.peek() ?? null);
     }
     // ---- Placement reconciliation ----
     /**
@@ -617,7 +655,7 @@ export class AgentRegistryService {
             // waitForServices primitive) and retries once, instead of giving up and
             // leaving the agent unreconciled until the next connect. (No timers/backoff
             // — that's banned for node readiness; this is the sanctioned primitive.)
-            const statusRaw = await callWithServiceDiscovery(broker, '$agent', '$agent.status', {}, {
+            const statusRaw = await (0, system_1.callWithServiceDiscovery)(broker, '$agent', '$agent.status', {}, {
                 nodeID: agentId,
                 timeout: AGENT_RECONCILE_RPC_TIMEOUT_MS,
             });
@@ -642,7 +680,7 @@ export class AgentRegistryService {
                 if (typeof declId !== 'string')
                     continue;
                 const decl = row.declaration ?? row.manifest;
-                hubPlacements.set(declId, resolveAddonPlacement(decl));
+                hubPlacements.set(declId, (0, types_1.resolveAddonPlacement)(decl));
                 const packageName = row.manifest.packageName;
                 if (typeof packageName === 'string' && packageName.length > 0) {
                     hubPackages.add(packageName);
@@ -705,10 +743,10 @@ export class AgentRegistryService {
                             undeployedPackages.add(packageName);
                     }
                     this.eventBus.emit({
-                        id: randomUUID(),
+                        id: (0, node_crypto_1.randomUUID)(),
                         timestamp: new Date(),
                         source: { type: 'core', id: 'agent-registry' },
-                        category: EventCategory.AddonUninstalled,
+                        category: types_1.EventCategory.AddonUninstalled,
                         data: { addonId: addon.id, agentId, reason },
                     });
                 }
@@ -750,7 +788,7 @@ export class AgentRegistryService {
         if (!seam)
             return;
         const recorded = await store.getPackages(agentId);
-        const planned = computeBackfillPlan({
+        const planned = (0, agent_addon_backfill_1.computeBackfillPlan)({
             recorded,
             live,
             bootstrap: AGENT_BOOTSTRAP_PACKAGES,
@@ -770,7 +808,7 @@ export class AgentRegistryService {
         }
         // GATE 1 — the trigger allowlist. A pass that must not install says so and
         // stops; silence here would read as "nothing was missing".
-        if (!triggerMayDeliver(trigger)) {
+        if (!(0, agent_addon_backfill_1.triggerMayDeliver)(trigger)) {
             console.log(`[agent-registry] Back-fill ${agentId}: SKIPPED — trigger "${trigger}" may not deliver ` +
                 `(${planned.targets.length} package(s) would have been installed)`);
             return;
@@ -800,7 +838,7 @@ export class AgentRegistryService {
         const closeWindow = this.deliveryLedger.begin(agentId, plan.targets.map((t) => t.name).join(', ') || 'back-fill');
         let outcome;
         try {
-            outcome = await executeBackfill(seam, agentId, plan, this.backfillTracker);
+            outcome = await (0, agent_addon_backfill_1.executeBackfill)(seam, agentId, plan, this.backfillTracker);
         }
         finally {
             closeWindow();
@@ -811,10 +849,10 @@ export class AgentRegistryService {
                 .join(', ')} — trigger=${trigger}, node reported ${plan.liveCount} package(s) and its ` +
                 `declared roster has ${recorded.length}`);
             this.eventBus.emit({
-                id: randomUUID(),
+                id: (0, node_crypto_1.randomUUID)(),
                 timestamp: new Date(),
                 source: { type: 'core', id: 'agent-registry' },
-                category: EventCategory.AddonInstalled,
+                category: types_1.EventCategory.AddonInstalled,
                 data: {
                     agentId,
                     packages: outcome.delivered.map((d) => `${d.name}@${d.version}`),
@@ -826,7 +864,7 @@ export class AgentRegistryService {
         for (const failure of outcome.failed) {
             console.error(`[agent-registry] Back-fill ${agentId}: FAILED to deliver ${failure.name}@${failure.version} — ${failure.error}` +
                 (failure.retired
-                    ? ` (retired after ${MAX_BACKFILL_ATTEMPTS} attempts; this node is running WITHOUT that package)`
+                    ? ` (retired after ${agent_addon_backfill_1.MAX_BACKFILL_ATTEMPTS} attempts; this node is running WITHOUT that package)`
                     : ''));
         }
         for (const name of outcome.skipped) {
@@ -861,7 +899,7 @@ export class AgentRegistryService {
             console.warn(`[agent-registry] Back-fill ${agentId}: SKIPPED — the confirmation read carried no addon list`);
             return null;
         }
-        const { plan: confirmed, contradicted } = confirmBackfillPlan(plan, rosterFromAddons(secondAddons));
+        const { plan: confirmed, contradicted } = (0, agent_addon_backfill_1.confirmBackfillPlan)(plan, rosterFromAddons(secondAddons));
         if (contradicted.length > 0) {
             console.warn(`[agent-registry] Back-fill ${agentId}: two roster reads DISAGREE — ` +
                 `${contradicted.map((t) => t.name).join(', ')} reported absent then present. ` +
@@ -927,7 +965,7 @@ export class AgentRegistryService {
      */
     async listNodeDirectory() {
         const history = this.historyMirror ? await this.historyMirror.current() : null;
-        return toNodeDirectory(this.listNodeLiveness(), history);
+        return (0, node_directory_1.toNodeDirectory)(this.listNodeLiveness(), history);
     }
     async listNodes() {
         const registry = this.nodeCatalogRegistry();
@@ -1126,7 +1164,7 @@ export class AgentRegistryService {
                 cpuCores: cpus.length,
                 memoryMB: Math.round(os.totalmem() / 1024 / 1024),
                 cpuModel: cpus[0]?.model,
-                pythonRuntimes: localSupportedPythonRuntimes(),
+                pythonRuntimes: (0, system_1.localSupportedPythonRuntimes)(),
             },
             status: {
                 activeCameras: 0,
@@ -1167,11 +1205,12 @@ export class AgentRegistryService {
         const promoted = { ...backup, priority: 'primary' };
         this.assignments.set(primaryKey, promoted);
         this.eventBus.emit({
-            id: randomUUID(),
+            id: (0, node_crypto_1.randomUUID)(),
             timestamp: new Date(),
             source: { type: 'core', id: 'agent-registry' },
-            category: EventCategory.AgentBackupActivated,
+            category: types_1.EventCategory.AgentBackupActivated,
             data: { cameraId, role, agentId: promoted.agentId },
         });
     }
 }
+exports.AgentRegistryService = AgentRegistryService;

package/dist/core/agent/cluster-node-history-mirror.js

@@ -1,6 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClusterNodeHistoryMirror = exports.HISTORY_MIRROR_MAX_AGE_MS = void 0;
 /** Two topology heartbeats: a mirror older than this was not being fed. */
-export const HISTORY_MIRROR_MAX_AGE_MS = 60_000;
-export class ClusterNodeHistoryMirror {
+exports.HISTORY_MIRROR_MAX_AGE_MS = 60_000;
+class ClusterNodeHistoryMirror {
     read;
     now;
     maxAgeMs;
@@ -8,7 +11,7 @@ export class ClusterNodeHistoryMirror {
     inFlight = null;
     /** Bumped by `invalidate()`: a read started before it must not land. */
     generation = 0;
-    constructor(read, now = Date.now, maxAgeMs = HISTORY_MIRROR_MAX_AGE_MS) {
+    constructor(read, now = Date.now, maxAgeMs = exports.HISTORY_MIRROR_MAX_AGE_MS) {
         this.read = read;
         this.now = now;
         this.maxAgeMs = maxAgeMs;
@@ -54,3 +57,4 @@ export class ClusterNodeHistoryMirror {
         this.inFlight = null;
     }
 }
+exports.ClusterNodeHistoryMirror = ClusterNodeHistoryMirror;

package/dist/core/agent/cluster-node-history-store.js

@@ -1,27 +1,30 @@
-import { ClusterNodeHistoryBodySchema, readAllRows, } from '@camstack/system';
-import { z } from 'zod';
-import { errMsg } from '@camstack/types';
-const DescriptorSchema = z.object({
-    id: z.string(),
-    name: z.string(),
-    hostname: z.string(),
-    platform: z.string(),
-    arch: z.string(),
-    cpuModel: z.string().nullable(),
-    cpuCores: z.number(),
-    memoryMB: z.number(),
-    engines: z.array(z.string()).readonly(),
-    isHub: z.boolean(),
-    localIps: z.array(z.string()).readonly(),
-    addonIds: z.array(z.string()).readonly(),
-    packages: z
-        .array(z.object({ name: z.string(), version: z.string().nullable() }))
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClusterNodeHistoryStore = void 0;
+const system_1 = require("@camstack/system");
+const zod_1 = require("zod");
+const types_1 = require("@camstack/types");
+const DescriptorSchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    name: zod_1.z.string(),
+    hostname: zod_1.z.string(),
+    platform: zod_1.z.string(),
+    arch: zod_1.z.string(),
+    cpuModel: zod_1.z.string().nullable(),
+    cpuCores: zod_1.z.number(),
+    memoryMB: zod_1.z.number(),
+    engines: zod_1.z.array(zod_1.z.string()).readonly(),
+    isHub: zod_1.z.boolean(),
+    localIps: zod_1.z.array(zod_1.z.string()).readonly(),
+    addonIds: zod_1.z.array(zod_1.z.string()).readonly(),
+    packages: zod_1.z
+        .array(zod_1.z.object({ name: zod_1.z.string(), version: zod_1.z.string().nullable() }))
         .readonly()
         .optional(),
 });
 /** Shape of a `settings-store.query` record's `data` for this collection. */
-const RowDataSchema = z.object({
-    lastActive: z.number(),
+const RowDataSchema = zod_1.z.object({
+    lastActive: zod_1.z.number(),
     descriptor: DescriptorSchema,
 });
 /**
@@ -77,7 +80,7 @@ function samePackages(a, b) {
         return a === b;
     return (a.length === b.length && a.every((p, i) => p.name === b[i]?.name && p.version === b[i]?.version));
 }
-export class ClusterNodeHistoryStore {
+class ClusterNodeHistoryStore {
     resolveSettingsStore;
     logger;
     declared = false;
@@ -118,7 +121,7 @@ export class ClusterNodeHistoryStore {
         }
         catch (err) {
             this.logger.warn('declareCollection failed (best-effort)', {
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_1.errMsg)(err) },
             });
             return null;
         }
@@ -159,7 +162,7 @@ export class ClusterNodeHistoryStore {
         catch (err) {
             this.logger.warn('snapshot upsert failed (best-effort)', {
                 tags: { nodeId: descriptor.id },
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_1.errMsg)(err) },
             });
         }
     }
@@ -201,7 +204,7 @@ export class ClusterNodeHistoryStore {
     async writeStored(nodeId, lastActive, descriptor) {
         const kind = this.resolveKind();
         if (kind !== null) {
-            const body = ClusterNodeHistoryBodySchema.safeParse({ descriptor });
+            const body = system_1.ClusterNodeHistoryBodySchema.safeParse({ descriptor });
             if (!body.success)
                 return;
             await kind.put({ id: nodeId, at: lastActive, data: body.data });
@@ -248,7 +251,7 @@ export class ClusterNodeHistoryStore {
         catch (err) {
             this.logger.warn('getPackages failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_1.errMsg)(err) },
             });
             return [];
         }
@@ -283,7 +286,7 @@ export class ClusterNodeHistoryStore {
         catch (err) {
             this.logger.warn('recordPackages failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_1.errMsg)(err) },
             });
         }
     }
@@ -321,7 +324,7 @@ export class ClusterNodeHistoryStore {
         catch (err) {
             this.logger.warn('prunePackages failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_1.errMsg)(err) },
             });
         }
     }
@@ -356,7 +359,7 @@ export class ClusterNodeHistoryStore {
         catch (err) {
             this.logger.warn('touch failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_1.errMsg)(err) },
             });
         }
     }
@@ -379,7 +382,7 @@ export class ClusterNodeHistoryStore {
             const kind = this.resolveKind();
             const result = [];
             const rows = kind !== null
-                ? (await readAllRows(kind)).map((row) => ({
+                ? (await (0, system_1.readAllRows)(kind)).map((row) => ({
                     id: row.id,
                     data: { lastActive: row.at ?? 0, descriptor: row.data.descriptor },
                 }))
@@ -400,7 +403,7 @@ export class ClusterNodeHistoryStore {
             return result;
         }
         catch (err) {
-            this.logger.warn('history read failed (best-effort)', { meta: { error: errMsg(err) } });
+            this.logger.warn('history read failed (best-effort)', { meta: { error: (0, types_1.errMsg)(err) } });
             return null;
         }
     }
@@ -438,9 +441,10 @@ export class ClusterNodeHistoryStore {
         catch (err) {
             this.logger.warn('forget failed (best-effort)', {
                 tags: { nodeId },
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_1.errMsg)(err) },
             });
             return 'failed';
         }
     }
 }
+exports.ClusterNodeHistoryStore = ClusterNodeHistoryStore;

package/dist/core/agent/hub-agent-pairing.js

@@ -1,9 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HubAgentPairing = void 0;
 /** A browse takes seconds; a list asked within this window reuses the last scan. */
 const SCAN_REUSE_MS = 4_000;
 /** A typed address is remembered this long without being heard again. */
 const ADDRESS_MEMORY_MS = 30 * 60_000;
 const DEFAULT_PORT = 4444;
-export class HubAgentPairing {
+class HubAgentPairing {
     deps;
     scanned = null;
     scanning = null;
@@ -117,3 +120,4 @@ export class HubAgentPairing {
         };
     }
 }
+exports.HubAgentPairing = HubAgentPairing;

package/dist/core/agent/node-certificates-client.js

@@ -1,3 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createNodeCertificatesClient = createNodeCertificatesClient;
 /**
  * The hub's typed handle on a node's `node-certificates` capability (D856).
  *
@@ -6,8 +9,8 @@
  * offline, capability not declared by an old agent) or a malformed answer becomes
  * a plain error naming the node - never a cast.
  */
-import { nodeCertificatesCapability } from '@camstack/types';
-export function createNodeCertificatesClient(moleculer, nodeId) {
+const types_1 = require("@camstack/types");
+function createNodeCertificatesClient(moleculer, nodeId) {
     const proxy = moleculer?.createCapabilityProxy('node-certificates', nodeId) ?? null;
     if (proxy === null)
         return null;
@@ -22,7 +25,7 @@ export function createNodeCertificatesClient(moleculer, nodeId) {
         }
         return parsed.data;
     };
-    const m = nodeCertificatesCapability.methods;
+    const m = types_1.nodeCertificatesCapability.methods;
     return {
         getCertificates: () => call('getCertificates', m.getCertificates.output, {}),
         prepareMeshRenewal: () => call('prepareMeshRenewal', m.prepareMeshRenewal.output, {}),

package/dist/core/agent/node-directory.js

@@ -1,3 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toNodeDirectory = toNodeDirectory;
 /**
  * The cheap node list (D637): live liveness plus the durable history, merged.
  *
@@ -8,7 +11,7 @@
  * - `history === null` = unreadable, so the answer is INCOMPLETE and a picker
  *   must not call a missing id removed (D315).
  */
-export function toNodeDirectory(live, history) {
+function toNodeDirectory(live, history) {
     const rows = history ?? [];
     const names = new Map(rows.map((row) => [row.id, row.name]));
     const hubs = new Set(rows.filter((row) => row.isHub).map((row) => row.id));

package/dist/core/app-links/well-known-app-links.js

@@ -1,3 +1,4 @@
+"use strict";
 /**
  * well-known-app-links — the two files a Universal/App Link needs the DOMAIN
  * to vouch for.
@@ -18,13 +19,16 @@
  * ACCEPTED and produces a valid file that fails auto-verification (the OS
  * shows a disambiguation dialog): same trade-off the Zentik file ships with.
  */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildAppLinkFiles = buildAppLinkFiles;
+exports.parseCertFingerprints = parseCertFingerprints;
 /** Apple team + bundle ids, mirrored from the viewer's app.config.ts. */
 const APPLE_TEAM_ID = 'C3F24V5NS5';
 const BUNDLE_ID = 'com.apocaliss92.camstack';
 const BUNDLE_ID_DEV = 'com.apocaliss92.camstack.dev';
 /** The only path family the app claims on this domain. */
 const VIEWER_COMPONENT = '/viewer/camstack/*';
-export function buildAppLinkFiles(androidCertSha256) {
+function buildAppLinkFiles(androidCertSha256) {
     const appIds = [`${APPLE_TEAM_ID}.${BUNDLE_ID}`, `${APPLE_TEAM_ID}.${BUNDLE_ID_DEV}`];
     return {
         appleAppSiteAssociation: {
@@ -52,7 +56,7 @@ export function buildAppLinkFiles(androidCertSha256) {
     };
 }
 /** Parse the comma-separated env form; junk and empties dropped. */
-export function parseCertFingerprints(raw) {
+function parseCertFingerprints(raw) {
     if (raw === undefined)
         return [];
     return raw

package/dist/core/auth/auth.service.js

@@ -1,10 +1,13 @@
-import { AuthManager } from '@camstack/system';
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = exports.SessionRevokedError = void 0;
+const system_1 = require("@camstack/system");
 /**
  * A session-grade token whose server-side session is gone (logged out,
  * revoked, expired) or cannot be checked right now. Every caller of
  * `verifyToken` already treats a throw as "not authenticated".
  */
-export class SessionRevokedError extends Error {
+class SessionRevokedError extends Error {
     reason;
     constructor(reason) {
         super(`Session is no longer valid (${reason})`);
@@ -12,13 +15,14 @@ export class SessionRevokedError extends Error {
         this.name = 'SessionRevokedError';
     }
 }
+exports.SessionRevokedError = SessionRevokedError;
 /** A v2 session token: string `userId`, boolean `isAdmin`, no `kind` (not a bridge/challenge). */
 function isSessionGrade(payload) {
     return (Reflect.get(payload, 'kind') === undefined &&
         typeof payload.userId === 'string' &&
         typeof payload.isAdmin === 'boolean');
 }
-export class AuthService extends AuthManager {
+class AuthService extends system_1.AuthManager {
     sessionCheck = null;
     /**
      * Wire the login-session check (`hub-sessions.ts`). From then on EVERY
@@ -49,3 +53,4 @@ export class AuthService extends AuthManager {
         return payload;
     }
 }
+exports.AuthService = AuthService;