@camstack/server 1.2.594 → 1.2.596

package/dist/api/core/cap-providers.js

@@ -1,3 +1,4 @@
+"use strict";
 /* eslint-disable @typescript-eslint/no-unsafe-return, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-member-access -- pre-existing lint debt across this 800-line provider-factory module. The flagged sites delegate into Moleculer/EventBus/IntegrationRegistry surfaces typed as `unknown` to break circular dependencies; runtime contracts are validated by the cap-mount-helper layer above. Tracked separately. */
 /**
  * Capability provider factories for the Phase E core caps —
@@ -23,34 +24,80 @@
  * `server/backend/src/api/core/{system,network-quality,toast,
  * nodes,integrations,addons}.router.ts`.
  */
-import { readIntegrationSettings, writeIntegrationSettings } from './integration-secrets';
-import { randomUUID } from 'node:crypto';
-import * as os from 'node:os';
-import { asBrokerLike, getCapUsageRegistry, getLoggingGate, getProcessNodeMeshTransport, IntegrationRegistry, } from '@camstack/system';
-import { EventCategory, errMsg } from '@camstack/types';
-import { TRPCError } from '@trpc/server';
-import { planDeleteTimeStamps } from '../../boot/integration-id-backfill';
-import { SYSTEM_PACKAGE } from '../../core/addon/addon-package.service.js';
-import { listInstallations, PackageProtectedError, uninstallPackage, } from '../../core/addon/addon-uninstall.js';
-import { getLifecycleRunner } from '../../core/lifecycle/lifecycle-runner.singleton.js';
-import { AGENT_STATUS_TIMEOUT_MS, fetchAgentInstalledPackages, } from '../../core/updates/agent-installed-packages.js';
-import { getHttpRequestCensus } from '../trpc/http-request-census.singleton.js';
-import { writeCollectionToggle } from './capability-preference-writes.js';
-import { buildFailureContributionPlane } from './failure-contributions.js';
-import { buildLoadContributionPlane } from './load-contributions.js';
-import { buildLogChannelPlane, LoggingSettingsService } from './logging-settings.js';
-import { RequestCensusService } from './request-census-settings.js';
-import { ServerNameReader } from './server-name.js';
-import { SiteLocationService } from './site-location.js';
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INTEGRATION_CAP_MARKERS = void 0;
+exports.buildSystemProvider = buildSystemProvider;
+exports.buildSettingsStoreGateway = buildSettingsStoreGateway;
+exports.buildNetworkQualityProvider = buildNetworkQualityProvider;
+exports.buildToastProvider = buildToastProvider;
+exports.computeTopologyPass = computeTopologyPass;
+exports.computeTopology = computeTopology;
+exports.createNodeRootPackageLookup = createNodeRootPackageLookup;
+exports.buildNodesProvider = buildNodesProvider;
+exports.buildIntegrationsProvider = buildIntegrationsProvider;
+exports.dispatchCustomAction = dispatchCustomAction;
+exports.buildAddonsProvider = buildAddonsProvider;
+const integration_secrets_1 = require("./integration-secrets");
+const node_crypto_1 = require("node:crypto");
+const os = __importStar(require("node:os"));
+const system_1 = require("@camstack/system");
+const types_1 = require("@camstack/types");
+const server_1 = require("@trpc/server");
+const integration_id_backfill_1 = require("../../boot/integration-id-backfill");
+const addon_package_service_js_1 = require("../../core/addon/addon-package.service.js");
+const addon_uninstall_js_1 = require("../../core/addon/addon-uninstall.js");
+const lifecycle_runner_singleton_js_1 = require("../../core/lifecycle/lifecycle-runner.singleton.js");
+const agent_installed_packages_js_1 = require("../../core/updates/agent-installed-packages.js");
+const http_request_census_singleton_js_1 = require("../trpc/http-request-census.singleton.js");
+const capability_preference_writes_js_1 = require("./capability-preference-writes.js");
+const failure_contributions_js_1 = require("./failure-contributions.js");
+const load_contributions_js_1 = require("./load-contributions.js");
+const logging_settings_js_1 = require("./logging-settings.js");
+const request_census_settings_js_1 = require("./request-census-settings.js");
+const server_name_js_1 = require("./server-name.js");
+const site_location_js_1 = require("./site-location.js");
 // ── system ──────────────────────────────────────────────────────────
 function getRetention(registry) {
     return (registry?.getSingleton('analysis-data-persistence')?.retention ?? null);
 }
-export function buildSystemProvider(feature, registry, logger, census = getHttpRequestCensus()) {
+function buildSystemProvider(feature, registry, logger, census = (0, http_request_census_singleton_js_1.getHttpRequestCensus)()) {
     const siteLocation = buildSiteLocationService(registry, logger);
     const store = buildSettingsStoreGateway(registry);
-    const serverName = new ServerNameReader({ store, ...(logger !== undefined ? { logger } : {}) });
-    const requestCensus = new RequestCensusService({
+    const serverName = new server_name_js_1.ServerNameReader({ store, ...(logger !== undefined ? { logger } : {}) });
+    const requestCensus = new request_census_settings_js_1.RequestCensusService({
         census,
         store,
         ...(logger !== undefined ? { logger } : {}),
@@ -62,24 +109,24 @@ export function buildSystemProvider(feature, registry, logger, census = getHttpR
     // The channels themselves are DECLARED by the addons that own them and
     // reached through the registry's per-provider proxies — hub-main never keeps
     // a hand-written list, which would rot at the first addon that adds one.
-    const channels = buildLogChannelPlane({ entries: () => registry?.getCollectionEntries('log-channels') ?? [] }, (addonId, phase, error) => {
+    const channels = (0, logging_settings_js_1.buildLogChannelPlane)({ entries: () => registry?.getCollectionEntries('log-channels') ?? [] }, (addonId, phase, error) => {
         logger?.warn('log-channels provider unreachable', { meta: { addonId, phase, error } });
     });
     // Every addon's OWN reported cost, assembled by enumeration. Nothing here
     // knows which pid belongs to which camera — the addon that spawned the child
     // does, and it is the one that says so.
-    const loadContributions = buildLoadContributionPlane({ entries: () => registry?.getCollectionEntries('load-contribution') ?? [] }, (addonId, error) => {
+    const loadContributions = (0, load_contributions_js_1.buildLoadContributionPlane)({ entries: () => registry?.getCollectionEntries('load-contribution') ?? [] }, (addonId, error) => {
         logger?.warn('load-contribution provider unreachable', { meta: { addonId, error } });
     });
     // Every addon's OWN reported losses, per camera, with the denominator
     // attached. Same enumeration, same reason: the addon that owns the failing
     // path is the only thing that knows which camera it lost work for.
-    const failureContributions = buildFailureContributionPlane({ entries: () => registry?.getCollectionEntries('failure-contribution') ?? [] }, (addonId, error) => {
+    const failureContributions = (0, failure_contributions_js_1.buildFailureContributionPlane)({ entries: () => registry?.getCollectionEntries('failure-contribution') ?? [] }, (addonId, error) => {
         logger?.warn('failure-contribution provider unreachable', { meta: { addonId, error } });
     });
-    const loggingSettings = new LoggingSettingsService({
+    const loggingSettings = new logging_settings_js_1.LoggingSettingsService({
         store,
-        gate: getLoggingGate(),
+        gate: (0, system_1.getLoggingGate)(),
         requestCensus,
         channels,
         ...(logger !== undefined ? { logger } : {}),
@@ -134,7 +181,7 @@ export function buildSystemProvider(feature, registry, logger, census = getHttpR
  * invent a location out of a missing dependency.
  */
 function buildSiteLocationService(registry, logger) {
-    return new SiteLocationService({
+    return new site_location_js_1.SiteLocationService({
         store: buildSettingsStoreGateway(registry),
         ...(logger !== undefined ? { logger } : {}),
     });
@@ -150,7 +197,7 @@ function buildSiteLocationService(registry, logger) {
  * every call throws, so a caller cannot mistake a missing dependency for an
  * empty row.
  */
-export function buildSettingsStoreGateway(registry) {
+function buildSettingsStoreGateway(registry) {
     const resolve = () => {
         const provider = registry?.getSingleton('settings-store') ?? null;
         if (provider === null)
@@ -165,7 +212,7 @@ export function buildSettingsStoreGateway(registry) {
     };
 }
 // ── network-quality ─────────────────────────────────────────────────
-export function buildNetworkQualityProvider(nq) {
+function buildNetworkQualityProvider(nq) {
     return {
         getDeviceStats: async (input) => nq.getDeviceStats(input.deviceId),
         getAllStats: async () => nq.getAllStats(),
@@ -188,13 +235,13 @@ export function buildNetworkQualityProvider(nq) {
 // can scope deliveries (broadcast vs. per-user). The cap defines
 // `onToast` as a subscription — the codegen wires it through the
 // `iterableSubscription` adapter and pushes raw `Toast` payloads.
-export function buildToastProvider(toastService, ctx) {
+function buildToastProvider(toastService, ctx) {
     return {
         onToast: (_input, push) => {
             if (!toastService)
                 return () => { };
             const userId = ctx.user?.id ?? 'anonymous';
-            const connectionId = randomUUID();
+            const connectionId = (0, node_crypto_1.randomUUID)();
             const unsubscribe = toastService.subscribe(connectionId, userId, (toast) => push(toast));
             return unsubscribe ?? (() => { });
         },
@@ -202,7 +249,7 @@ export function buildToastProvider(toastService, ctx) {
 }
 /** `{ meshTransport }` for an online agent, `{}` when the hub cannot tell. */
 function meshTransportField(nodeId) {
-    const meshTransport = getProcessNodeMeshTransport(nodeId);
+    const meshTransport = (0, system_1.getProcessNodeMeshTransport)(nodeId);
     return meshTransport === undefined ? {} : { meshTransport };
 }
 function getLocalIps() {
@@ -220,11 +267,11 @@ function getLocalIps() {
     return ips;
 }
 /** {@link computeTopology}, keeping the live entries the projection consumed. */
-export async function computeTopologyPass(agentRegistry, addonRegistry, getNodeRootPackage, isNodeRegistered) {
+async function computeTopologyPass(agentRegistry, addonRegistry, getNodeRootPackage, isNodeRegistered) {
     const [nodes, liveNodes] = await computeTopologyInternal(agentRegistry, addonRegistry, getNodeRootPackage, isNodeRegistered);
     return { nodes, liveNodes };
 }
-export async function computeTopology(agentRegistry, addonRegistry, getNodeRootPackage, isNodeRegistered) {
+async function computeTopology(agentRegistry, addonRegistry, getNodeRootPackage, isNodeRegistered) {
     const [nodes] = await computeTopologyInternal(agentRegistry, addonRegistry, getNodeRootPackage, isNodeRegistered);
     return nodes;
 }
@@ -429,7 +476,7 @@ async function computeTopologyInternal(agentRegistry, addonRegistry, getNodeRoot
  * running `@camstack/server` package (ServerUpdateService), agent rows from
  * the `registerNode`-fed HubNodeRegistry (via MoleculerService).
  */
-export function createNodeRootPackageLookup(moleculer, serverUpdate) {
+function createNodeRootPackageLookup(moleculer, serverUpdate) {
     return (nodeId, isHub) => {
         if (isHub) {
             const running = serverUpdate?.getRunningRootPackage();
@@ -440,8 +487,8 @@ export function createNodeRootPackageLookup(moleculer, serverUpdate) {
         return moleculer.getNodeRootPackage(nodeId);
     };
 }
-export function buildNodesProvider(agentRegistry, moleculer, addonRegistry, getNodeRootPackage, logger) {
-    const broker = asBrokerLike(moleculer.broker);
+function buildNodesProvider(agentRegistry, moleculer, addonRegistry, getNodeRootPackage, logger) {
+    const broker = (0, system_1.asBrokerLike)(moleculer.broker);
     return {
         topology: async () => computeTopology(agentRegistry, addonRegistry, getNodeRootPackage, (nodeId) => moleculer.isNodeRegistered(nodeId)),
         directory: async () => agentRegistry.listNodeDirectory(),
@@ -628,7 +675,7 @@ export function buildNodesProvider(agentRegistry, moleculer, addonRegistry, getN
          * `LocalChildRegistryOptions.capUsageObserver`.
          */
         getCapUsageGraph: async (input) => {
-            const reg = getCapUsageRegistry();
+            const reg = (0, system_1.getCapUsageRegistry)();
             const stats = reg.getStats();
             if (stats.droppedTriples > 0) {
                 // The registry is bounded (it lives on hub-main — D181). If it ever
@@ -746,11 +793,11 @@ async function runConnectionTest(ar, addonId, settings, logger) {
         catch (err) {
             logger.warn('connection test could not run', {
                 tags: { addonId },
-                meta: { phase: 'test', error: errMsg(err) },
+                meta: { phase: 'test', error: (0, types_1.errMsg)(err) },
             });
             return {
                 status: 'inconclusive',
-                error: `Connection test could not run: ${errMsg(err)}`,
+                error: `Connection test could not run: ${(0, types_1.errMsg)(err)}`,
                 testedBy: addonId,
             };
         }
@@ -780,11 +827,11 @@ async function runConnectionTest(ar, addonId, settings, logger) {
         catch (err) {
             logger.warn('broker connection test could not run', {
                 tags: { addonId },
-                meta: { phase: 'test', brokerId, error: errMsg(err) },
+                meta: { phase: 'test', brokerId, error: (0, types_1.errMsg)(err) },
             });
             return {
                 status: 'inconclusive',
-                error: `Broker test could not run: ${errMsg(err)}`,
+                error: `Broker test could not run: ${(0, types_1.errMsg)(err)}`,
                 testedBy: addonId,
             };
         }
@@ -812,8 +859,8 @@ async function runConnectionTest(ar, addonId, settings, logger) {
  * Exported so the integration-markers spec can assert the recognised set
  * without booting the whole provider factory.
  */
-export const INTEGRATION_CAP_MARKERS = new Set(['device-provider', 'device-adoption']);
-export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegistry) {
+exports.INTEGRATION_CAP_MARKERS = new Set(['device-provider', 'device-adoption']);
+function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegistry) {
     const logger = loggingService.createLogger('integrations');
     const withProcessState = (i) => ({
         ...i,
@@ -868,7 +915,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
                     tags: { addonId: input.addonId },
                     meta: { phase: 'create', status: verdict.status, testedBy: verdict.testedBy },
                 });
-                throw new TRPCError({
+                throw new server_1.TRPCError({
                     code: 'BAD_REQUEST',
                     message: verdict.error ?? `Connection test failed for '${input.addonId}'`,
                 });
@@ -887,7 +934,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
             }
             const integration = await reg.createIntegration(payload);
             if (settings !== undefined && Object.keys(settings).length > 0) {
-                await writeIntegrationSettings({
+                await (0, integration_secrets_1.writeIntegrationSettings)({
                     registry: reg,
                     secrets: ownerSecrets(ar, integration.addonId),
                     onOrphaned: (refs) => logger.warn('dropped keychain refs could not be deleted', {
@@ -997,7 +1044,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
             // alarm panel (835) one second before the registry answered "is fixed",
             // and the panel came back with a new id and no state, silently breaking
             // every rule that named it.
-            if (IntegrationRegistry.isFixed(integration)) {
+            if (system_1.IntegrationRegistry.isFixed(integration)) {
                 throw new Error(`integration "${input.id}" is fixed — it belongs to the addon that declared it and cannot be deleted`);
             }
             logger.info('removing', {
@@ -1021,7 +1068,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
                         reg.listIntegrations(),
                         dm.listAll({}),
                     ]);
-                    const stamps = planDeleteTimeStamps(input.id, integrations.map((i) => ({ id: i.id, addonId: i.addonId })), devices.map((d) => ({
+                    const stamps = (0, integration_id_backfill_1.planDeleteTimeStamps)(input.id, integrations.map((i) => ({ id: i.id, addonId: i.addonId })), devices.map((d) => ({
                         id: d.id,
                         addonId: d.addonId,
                         parentDeviceId: d.parentDeviceId,
@@ -1043,7 +1090,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
                 catch (err) {
                     logger.warn('legacy device claim failed (best-effort — continuing)', {
                         tags: { integrationId: input.id },
-                        meta: { phase: 'delete', error: errMsg(err) },
+                        meta: { phase: 'delete', error: (0, types_1.errMsg)(err) },
                     });
                 }
             }
@@ -1058,7 +1105,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
                 catch (err) {
                     logger.warn('device cascade-remove failed (best-effort — continuing)', {
                         tags: { integrationId: input.id },
-                        meta: { phase: 'delete', error: errMsg(err) },
+                        meta: { phase: 'delete', error: (0, types_1.errMsg)(err) },
                     });
                 }
             }
@@ -1073,7 +1120,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
                 id: `integration-deleted-${Date.now()}`,
                 timestamp: new Date(),
                 source: { type: 'integration', id: input.id },
-                category: EventCategory.IntegrationDeleted,
+                category: types_1.EventCategory.IntegrationDeleted,
                 data: {
                     integrationId: input.id,
                     addonId: integration.addonId,
@@ -1096,7 +1143,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
             const caller = Reflect.get(input, 'callerAddonId');
             const forOwner = typeof caller === 'string' &&
                 (caller === integration.addonId || ar.runnerIdFor(integration.addonId) === caller);
-            return readIntegrationSettings({ registry: reg, secrets: forOwner ? ownerSecrets(ar, integration.addonId) : null }, { integrationId: input.id, forOwner });
+            return (0, integration_secrets_1.readIntegrationSettings)({ registry: reg, secrets: forOwner ? ownerSecrets(ar, integration.addonId) : null }, { integrationId: input.id, forOwner });
         },
         setSettings: async (input) => {
             const reg = requireIntegrationRegistry(ar);
@@ -1113,7 +1160,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
                 tags: { integrationId: input.id, addonId: integration.addonId },
                 meta: { phase: 'setSettings', keys: settingsKeys },
             });
-            await writeIntegrationSettings({
+            await (0, integration_secrets_1.writeIntegrationSettings)({
                 registry: reg,
                 secrets: ownerSecrets(ar, integration.addonId),
                 onOrphaned: (refs) => logger.warn('dropped keychain refs could not be deleted', {
@@ -1152,7 +1199,7 @@ export function buildIntegrationsProvider(ar, eb, loggingService, capabilityRegi
             const providerAddons = addons.filter((a) => a.process?.state !== 'failed' &&
                 a.manifest.capabilities?.some((c) => {
                     const name = typeof c === 'string' ? c : c.name;
-                    return typeof name === 'string' && INTEGRATION_CAP_MARKERS.has(name);
+                    return typeof name === 'string' && exports.INTEGRATION_CAP_MARKERS.has(name);
                 }));
             const integrations = await reg.listIntegrations();
             return providerAddons.map((addon) => {
@@ -1247,13 +1294,13 @@ function ensureCustomActionAuth(ctx, level) {
     if (level === 'public')
         return;
     if (!ctx.user) {
-        throw new TRPCError({ code: 'UNAUTHORIZED' });
+        throw new server_1.TRPCError({ code: 'UNAUTHORIZED' });
     }
     if (level === 'protected')
         return;
     if (level === 'admin') {
         if (!ctx.user.isAdmin) {
-            throw new TRPCError({ code: 'FORBIDDEN', message: 'custom action requires admin' });
+            throw new server_1.TRPCError({ code: 'FORBIDDEN', message: 'custom action requires admin' });
         }
         return;
     }
@@ -1310,10 +1357,10 @@ function formatNames(names) {
  *      trusted from input).
  *   5. Validate the addon's output — crash-early on a misbehaving addon.
  */
-export async function dispatchCustomAction(registry, ctx, input) {
+async function dispatchCustomAction(registry, ctx, input) {
     const entry = registry.resolve(input.addonId, input.action);
     if (!entry) {
-        throw new TRPCError({ code: 'NOT_FOUND', message: describeUnresolved(registry, input) });
+        throw new server_1.TRPCError({ code: 'NOT_FOUND', message: describeUnresolved(registry, input) });
     }
     ensureCustomActionAuth(ctx, entry.spec.auth);
     const parsedInput = entry.spec.input.parse(input.input);
@@ -1403,7 +1450,7 @@ function buildUninstallSeam(ar, ps, broker, agentRegistry) {
                 .filter((n) => !n.isHub && !n.id.includes('/'))
                 .map((n) => ({ id: n.id, name: n.name, isOnline: n.isOnline }));
         },
-        agentAddons: async (nodeId) => parseAgentStatusAddons(await broker.call('$agent.status', {}, { nodeID: nodeId, timeout: AGENT_STATUS_TIMEOUT_MS })),
+        agentAddons: async (nodeId) => parseAgentStatusAddons(await broker.call('$agent.status', {}, { nodeID: nodeId, timeout: agent_installed_packages_js_1.AGENT_STATUS_TIMEOUT_MS })),
         agentUndeploy: (nodeId, request) => broker.call('$agent.undeploy', request, {
             nodeID: nodeId,
             timeout: AGENT_UNDEPLOY_TIMEOUT_MS,
@@ -1414,13 +1461,13 @@ function buildUninstallSeam(ar, ps, broker, agentRegistry) {
         },
     };
 }
-export function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, agentRegistry) {
-    const broker = asBrokerLike(moleculer.broker);
+function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, agentRegistry) {
+    const broker = (0, system_1.asBrokerLike)(moleculer.broker);
     const uninstallSeam = buildUninstallSeam(ar, ps, broker, agentRegistry);
-    const frameworkAllowSet = new Set([SYSTEM_PACKAGE]);
+    const frameworkAllowSet = new Set([addon_package_service_js_1.SYSTEM_PACKAGE]);
     // Process-wide runner built once at boot (manual-boot wires its deps from the
     // addon-package service + event bus). `createdBy` travels per `startJob` call.
-    const lifecycleRunner = getLifecycleRunner();
+    const lifecycleRunner = (0, lifecycle_runner_singleton_js_1.getLifecycleRunner)();
     // Who triggered each lifecycle job from this request context.
     const lifecycleCreatedBy = ctx.user?.username ?? ctx.user?.id ?? 'system';
     return {
@@ -1443,7 +1490,7 @@ export function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, a
             }
             // Agent: same roster source as listUpdates — stamp agent versions onto
             // hub manifests so cards show what that node actually runs.
-            const agentPackages = await fetchAgentInstalledPackages(broker, nodeId);
+            const agentPackages = await (0, agent_installed_packages_js_1.fetchAgentInstalledPackages)(broker, nodeId);
             const versionByPackage = new Map();
             for (const pkg of agentPackages) {
                 versionByPackage.set(pkg.name, pkg.version);
@@ -1480,16 +1527,16 @@ export function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, a
         listWorkspacePackages: async () => ps.listWorkspacePackages(),
         uninstallPackage: async (input) => {
             try {
-                return await uninstallPackage(uninstallSeam, input);
+                return await (0, addon_uninstall_js_1.uninstallPackage)(uninstallSeam, input);
             }
             catch (err) {
-                if (err instanceof PackageProtectedError) {
-                    throw new TRPCError({ code: 'FORBIDDEN', message: err.message });
+                if (err instanceof addon_uninstall_js_1.PackageProtectedError) {
+                    throw new server_1.TRPCError({ code: 'FORBIDDEN', message: err.message });
                 }
                 throw err;
             }
         },
-        listInstallations: async (input) => listInstallations(uninstallSeam, input.packageName),
+        listInstallations: async (input) => (0, addon_uninstall_js_1.listInstallations)(uninstallSeam, input.packageName),
         reloadPackages: async () => ps.reloadPackages(),
         searchAvailable: async (input) => {
             const results = await ps.searchNpm(input?.query, input?.capability);
@@ -1503,7 +1550,7 @@ export function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, a
             const nodeId = input.nodeId;
             const updates = nodeId === undefined || isHubNode(nodeId)
                 ? await ps.checkUpdates()
-                : await ps.checkUpdatesForInstalled(await fetchAgentInstalledPackages(broker, nodeId), nodeId);
+                : await ps.checkUpdatesForInstalled(await (0, agent_installed_packages_js_1.fetchAgentInstalledPackages)(broker, nodeId), nodeId);
             return updates.map((u) => ({ ...u, isSystem: frameworkAllowSet.has(u.name) }));
         },
         updatePackage: async (input) => {
@@ -1557,7 +1604,7 @@ export function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, a
             if (nodeId === undefined || isHubNode(nodeId))
                 return ps.checkUpdates(true);
             // Agent rosters carry no hub-side cache — the diff is always live.
-            const installed = await fetchAgentInstalledPackages(broker, nodeId);
+            const installed = await (0, agent_installed_packages_js_1.fetchAgentInstalledPackages)(broker, nodeId);
             return ps.checkUpdatesForInstalled(installed, nodeId);
         },
         restartServer: async () => ps.restartServer(ctx.user?.username ?? ctx.user?.id),
@@ -1565,7 +1612,7 @@ export function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, a
             // Avoid pulling PostBootService through the cap-providers tree —
             // dynamic import keeps the wiring loose and lets us read the
             // static cache without a constructor dependency.
-            const mod = await import('../../boot/post-boot.service.js');
+            const mod = await Promise.resolve().then(() => __importStar(require('../../boot/post-boot.service.js')));
             return mod.PostBootService.getLastRestart();
         },
         listFrameworkPackages: async () => ps.listFrameworkPackages(),
@@ -1587,7 +1634,7 @@ export function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, a
             // Refused (unknown cap, not a collection, unregistered provider) before
             // anything is written; otherwise the new disabled-set is PERSISTED first
             // and applied live only once the write landed (D675 amendment).
-            await writeCollectionToggle(configService, ar.getCapabilityRegistry(), {
+            await (0, capability_preference_writes_js_1.writeCollectionToggle)(configService, ar.getCapabilityRegistry(), {
                 capability: input.capName,
                 addonId: input.addonId,
                 enabled: input.enabled,
@@ -1624,7 +1671,7 @@ export function buildAddonsProvider(ar, ps, ls, moleculer, configService, ctx, a
             // which has a real `$agent.deploy` path.
             const offNode = (input.nodeIds ?? []).filter((id) => !isHubNode(id));
             if (offNode.length > 0) {
-                throw new TRPCError({
+                throw new server_1.TRPCError({
                     code: 'BAD_REQUEST',
                     message: input.kind === 'uninstall'
                         ? `The lifecycle job engine is hub-local; it cannot target ${offNode.join(', ')}. Uninstall from an agent via uninstallPackage({ packageName, nodeId }), or from every node via uninstallPackage({ packageName, everywhere: true }).`

package/dist/api/core/capabilities.router.js

@@ -1,50 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCapabilitiesRouter = createCapabilitiesRouter;
 /**
  * Capability admin router — fixed core API (not a capability).
  *
  * Lets admins inspect the capability registry and set system/device
  * overrides. Wraps `CapabilityRegistry` directly (kernel primitive).
  */
-import { z } from 'zod';
-import { trpcRouter, adminProcedure } from '../trpc/trpc.middleware.js';
-import { writeCollectionEnabledSet, singletonPreferenceKey, writeSingletonPreference, } from './capability-preference-writes.js';
-export function createCapabilitiesRouter(registry, config) {
-    return trpcRouter({
-        listCapabilities: adminProcedure
-            .input(z.void())
+const zod_1 = require("zod");
+const trpc_middleware_js_1 = require("../trpc/trpc.middleware.js");
+const capability_preference_writes_js_1 = require("./capability-preference-writes.js");
+function createCapabilitiesRouter(registry, config) {
+    return (0, trpc_middleware_js_1.trpcRouter)({
+        listCapabilities: trpc_middleware_js_1.adminProcedure
+            .input(zod_1.z.void())
             .query(() => registry?.listCapabilities() ?? []),
-        getCapability: adminProcedure.input(z.object({ name: z.string() })).query(({ input }) => {
+        getCapability: trpc_middleware_js_1.adminProcedure.input(zod_1.z.object({ name: zod_1.z.string() })).query(({ input }) => {
             if (!registry)
                 return null;
             return (registry.listCapabilities().find((c) => c.name === input.name) ?? null);
         }),
-        setActiveSingleton: adminProcedure
-            .input(z.object({
-            capability: z.string(),
-            addonId: z.string(),
-            nodeId: z.string().optional(),
+        setActiveSingleton: trpc_middleware_js_1.adminProcedure
+            .input(zod_1.z.object({
+            capability: zod_1.z.string(),
+            addonId: zod_1.z.string(),
+            nodeId: zod_1.z.string().optional(),
         }))
-            .output(z.void())
+            .output(zod_1.z.void())
             .mutation(async ({ input }) => {
             if (!registry)
                 throw new Error('Capability registry unavailable');
             // Persist FIRST, under the key the boot restorer reads
             // (`capabilities.singleton.<cap>` / `capabilities.singletonNode.<cap>.<node>`),
             // then switch live: a write that fails changes nothing (D675 amendment).
-            await writeSingletonPreference(config, registry, {
+            await (0, capability_preference_writes_js_1.writeSingletonPreference)(config, registry, {
                 capability: input.capability,
                 addonId: input.addonId,
                 ...(input.nodeId !== undefined ? { nodeId: input.nodeId } : {}),
             });
         }),
-        clearSingletonNodeOverride: adminProcedure
-            .input(z.object({ capability: z.string(), nodeId: z.string() }))
-            .output(z.void())
+        clearSingletonNodeOverride: trpc_middleware_js_1.adminProcedure
+            .input(zod_1.z.object({ capability: zod_1.z.string(), nodeId: zod_1.z.string() }))
+            .output(zod_1.z.void())
             .mutation(async ({ input }) => {
             if (!registry)
                 throw new Error('Capability registry unavailable');
             // Persist the cleared state as null FIRST so the boot restorer doesn't
             // re-apply a stale override; only a write that landed clears it live.
-            await config.set(singletonPreferenceKey(input.capability, input.nodeId), null);
+            await config.set((0, capability_preference_writes_js_1.singletonPreferenceKey)(input.capability, input.nodeId), null);
             registry.clearSingletonNodeOverride(input.capability, input.nodeId);
         }),
         /**
@@ -54,39 +57,39 @@ export function createCapabilitiesRouter(registry, config) {
          * re-enabled. Other collections are untouched. Intended as the
          * save endpoint for a bulk multi-select UI.
          */
-        setCollectionEnabledProviders: adminProcedure
-            .input(z.object({
-            capability: z.string(),
-            enabledAddonIds: z.array(z.string()),
+        setCollectionEnabledProviders: trpc_middleware_js_1.adminProcedure
+            .input(zod_1.z.object({
+            capability: zod_1.z.string(),
+            enabledAddonIds: zod_1.z.array(zod_1.z.string()),
         }))
-            .output(z.void())
+            .output(zod_1.z.void())
             .mutation(async ({ input }) => {
             if (!registry)
                 throw new Error('Capability registry unavailable');
             // Persisted under `capabilities.collection.<cap>` BEFORE the live
             // switch. It used to switch live only, so the operator's pick
             // reverted at the next boot (D62's defect, D675 amendment).
-            await writeCollectionEnabledSet(config, registry, input.capability, input.enabledAddonIds);
+            await (0, capability_preference_writes_js_1.writeCollectionEnabledSet)(config, registry, input.capability, input.enabledAddonIds);
         }),
-        setDeviceCapability: adminProcedure
-            .input(z.object({ deviceId: z.string(), capability: z.string(), addonId: z.string() }))
-            .output(z.void())
+        setDeviceCapability: trpc_middleware_js_1.adminProcedure
+            .input(zod_1.z.object({ deviceId: zod_1.z.string(), capability: zod_1.z.string(), addonId: zod_1.z.string() }))
+            .output(zod_1.z.void())
             .mutation(({ input }) => {
             if (!registry)
                 throw new Error('Capability registry unavailable');
             registry.setDeviceOverride(input.deviceId, input.capability, input.addonId);
         }),
-        clearDeviceCapability: adminProcedure
-            .input(z.object({ deviceId: z.string(), capability: z.string() }))
-            .output(z.void())
+        clearDeviceCapability: trpc_middleware_js_1.adminProcedure
+            .input(zod_1.z.object({ deviceId: zod_1.z.string(), capability: zod_1.z.string() }))
+            .output(zod_1.z.void())
             .mutation(({ input }) => {
             if (!registry)
                 throw new Error('Capability registry unavailable');
             registry.clearDeviceOverride(input.deviceId, input.capability);
         }),
-        getDeviceCapabilities: adminProcedure
-            .input(z.object({ deviceId: z.string() }))
-            .output(z.record(z.string(), z.string()))
+        getDeviceCapabilities: trpc_middleware_js_1.adminProcedure
+            .input(zod_1.z.object({ deviceId: zod_1.z.string() }))
+            .output(zod_1.z.record(zod_1.z.string(), zod_1.z.string()))
             .query(({ input }) => {
             if (!registry)
                 return {};