@camstack/server 1.2.594 → 1.2.596

package/dist/api/core/event-bus-proxy.router.js

@@ -1,3 +1,4 @@
+"use strict";
 /**
  * EventBus proxy router — allows forked workers to emit events to, and
  * read the recent-events registry of, the hub's EventBus via tRPC.
@@ -21,10 +22,12 @@
  *
  * Introduced in session 7 (EventBus wiring for forked addons).
  */
-import { z } from 'zod';
-import { adminProcedure, protectedProcedure, trpcRouter } from '../trpc/trpc.middleware.js';
-import { scopedEventVisibility } from '../trpc/principal-visibility.js';
-import { publicRecent } from './public-event-filter.js';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createEventBusProxyRouter = createEventBusProxyRouter;
+const zod_1 = require("zod");
+const trpc_middleware_js_1 = require("../trpc/trpc.middleware.js");
+const principal_visibility_js_1 = require("../trpc/principal-visibility.js");
+const public_event_filter_js_1 = require("./public-event-filter.js");
 /**
  * Upper bound on the `getRecent` limit — kept in step with the hub's
  * `recent[]` ring-buffer size (`MAX_RECENT_EVENTS` in `event-bus-core.ts`).
@@ -32,15 +35,15 @@ import { publicRecent } from './public-event-filter.js';
  * not depend on the event-bus core internals.
  */
 const MAX_RECENT_EVENTS = 1000;
-const SystemEventInputSchema = z.object({
-    id: z.string(),
-    timestamp: z.string(), // ISO 8601 — converted to Date on emit
-    source: z.object({
-        type: z.string(),
-        id: z.string(),
+const SystemEventInputSchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    timestamp: zod_1.z.string(), // ISO 8601 — converted to Date on emit
+    source: zod_1.z.object({
+        type: zod_1.z.string(),
+        id: zod_1.z.string(),
     }),
-    category: z.string(),
-    data: z.record(z.string(), z.unknown()),
+    category: zod_1.z.string(),
+    data: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
 });
 /**
  * `getRecent` input — mirrors `systemEvents.getRecent`'s category/limit
@@ -48,9 +51,9 @@ const SystemEventInputSchema = z.object({
  * can whitelist the categories it cares about server-side; `limit` is
  * capped at the hub's `recent[]` buffer size (`MAX_RECENT_EVENTS`).
  */
-const GetRecentInputSchema = z.object({
-    category: z.union([z.string(), z.array(z.string())]).optional(),
-    limit: z.number().int().min(1).max(MAX_RECENT_EVENTS).optional(),
+const GetRecentInputSchema = zod_1.z.object({
+    category: zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())]).optional(),
+    limit: zod_1.z.number().int().min(1).max(MAX_RECENT_EVENTS).optional(),
 });
 /**
  * Serialized recent event — `timestamp` is an ISO-8601 string so the
@@ -58,18 +61,18 @@ const GetRecentInputSchema = z.object({
  * Callers reconstruct the `Date` on receipt. Mirrors the serialization
  * used by `systemEvents.getRecent`.
  */
-const RecentEventOutputSchema = z.object({
-    id: z.string(),
-    timestamp: z.string(),
-    source: z.object({
-        type: z.string(),
-        id: z.union([z.string(), z.number()]),
-        nodeId: z.string().optional(),
-        addonId: z.string().optional(),
-        deviceId: z.number().optional(),
+const RecentEventOutputSchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    timestamp: zod_1.z.string(),
+    source: zod_1.z.object({
+        type: zod_1.z.string(),
+        id: zod_1.z.union([zod_1.z.string(), zod_1.z.number()]),
+        nodeId: zod_1.z.string().optional(),
+        addonId: zod_1.z.string().optional(),
+        deviceId: zod_1.z.number().optional(),
     }),
-    category: z.string(),
-    data: z.record(z.string(), z.unknown()),
+    category: zod_1.z.string(),
+    data: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
 });
 function serializeRecentEvent(e) {
     return {
@@ -86,17 +89,17 @@ function serializeRecentEvent(e) {
         data: e.data,
     };
 }
-export function createEventBusProxyRouter(eventBus) {
-    return trpcRouter({
+function createEventBusProxyRouter(eventBus) {
+    return (0, trpc_middleware_js_1.trpcRouter)({
         // ADMIN-ONLY. `emit` injects a fully-attributed SystemEvent onto the hub's
         // real EventBus — including a spoofable `source` (a fake `device`/`addon`
         // origin). Forked addons that legitimately emit reach this over the
         // trusted core-cap/UDS mesh, whose context is `createMeshTrpcContext`
         // (`isAdmin: true`), so gating it here withholds the surface from
         // non-admin HTTP/WS principals without blinding a worker.
-        emit: adminProcedure
+        emit: trpc_middleware_js_1.adminProcedure
             .input(SystemEventInputSchema)
-            .output(z.object({ ok: z.literal(true) }))
+            .output(zod_1.z.object({ ok: zod_1.z.literal(true) }))
             .mutation(({ input }) => {
             eventBus.emit({
                 id: input.id,
@@ -107,9 +110,9 @@ export function createEventBusProxyRouter(eventBus) {
             });
             return { ok: true };
         }),
-        getRecent: protectedProcedure
+        getRecent: trpc_middleware_js_1.protectedProcedure
             .input(GetRecentInputSchema)
-            .output(z.array(RecentEventOutputSchema))
+            .output(zod_1.z.array(RecentEventOutputSchema))
             .query(({ input, ctx }) => {
             // This router is on the PUBLIC app router too, not only the worker
             // bridge: the same two projections as `systemEvents.getRecent` apply —
@@ -117,8 +120,8 @@ export function createEventBusProxyRouter(eventBus) {
             // scoped token reads only its devices (F0.5). A worker reaches this over
             // the mesh context (`isAdmin: true`), so it skips only the SCOPE
             // projection — owner-only categories are stripped for every caller.
-            const keep = scopedEventVisibility(ctx.user, ctx.deviceScopeLookup);
-            return publicRecent(eventBus, input.category !== undefined ? { category: input.category } : undefined, input.limit, keep).map(serializeRecentEvent);
+            const keep = (0, principal_visibility_js_1.scopedEventVisibility)(ctx.user, ctx.deviceScopeLookup);
+            return (0, public_event_filter_js_1.publicRecent)(eventBus, input.category !== undefined ? { category: input.category } : undefined, input.limit, keep).map(serializeRecentEvent);
         }),
     });
 }

package/dist/api/core/failure-contributions.js

@@ -1,9 +1,13 @@
-import { errMsg } from '@camstack/types';
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EMPTY_FAILURE_CONTRIBUTION_PLANE = void 0;
+exports.buildFailureContributionPlane = buildFailureContributionPlane;
+const types_1 = require("@camstack/types");
 /** A plane that reaches nothing. The shape of a hub with no addon booted yet. */
-export const EMPTY_FAILURE_CONTRIBUTION_PLANE = {
+exports.EMPTY_FAILURE_CONTRIBUTION_PLANE = {
     contributions: async () => [],
 };
-export function buildFailureContributionPlane(source, onProviderError) {
+function buildFailureContributionPlane(source, onProviderError) {
     return {
         contributions: async () => {
             const out = [];
@@ -14,7 +18,7 @@ export function buildFailureContributionPlane(source, onProviderError) {
                     }
                 }
                 catch (err) {
-                    onProviderError?.(addonId, errMsg(err));
+                    onProviderError?.(addonId, (0, types_1.errMsg)(err));
                 }
             }
             return out;

package/dist/api/core/hwaccel.router.js

@@ -1,3 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createHwAccelRouter = createHwAccelRouter;
 /**
  * Hwaccel router — fixed core API (not a capability).
  *
@@ -12,9 +15,9 @@
  * The tRPC input/output shapes are UNCHANGED for clients (`{prefer}` in,
  * `{preferred, rationale}` out) — no SDK break.
  */
-import { z } from 'zod';
-import { trpcRouter, adminProcedure } from '../trpc/trpc.middleware.js';
-const HwAccelBackendSchema = z.enum([
+const zod_1 = require("zod");
+const trpc_middleware_js_1 = require("../trpc/trpc.middleware.js");
+const HwAccelBackendSchema = zod_1.z.enum([
     'videotoolbox',
     'cuda',
     'nvdec',
@@ -26,17 +29,17 @@ const HwAccelBackendSchema = z.enum([
     'vdpau',
     'drm',
 ]);
-const HwAccelPreferSchema = z
-    .union([HwAccelBackendSchema, z.literal('none')])
+const HwAccelPreferSchema = zod_1.z
+    .union([HwAccelBackendSchema, zod_1.z.literal('none')])
     .nullable()
     .optional();
 // `preferred` is a plain string array (not the decode-backend enum) to match
 // the `platform-probe` cap's own resolution schema: the resolver only ever
 // emits decode backends, but a narrow enum would reject any future addition and
 // force a cast at the cap boundary.
-const HwAccelResolutionSchema = z.object({
-    preferred: z.array(z.string()).readonly(),
-    rationale: z.string(),
+const HwAccelResolutionSchema = zod_1.z.object({
+    preferred: zod_1.z.array(zod_1.z.string()).readonly(),
+    rationale: zod_1.z.string(),
 });
 /**
  * Resolve hwaccel on a specific cluster node through the `platform-probe` cap
@@ -74,11 +77,11 @@ function listAvailableNodeIds(moleculer) {
     const withRegistry = broker;
     return withRegistry.registry.getNodeList({ onlyAvailable: true }).map((n) => n.id);
 }
-export function createHwAccelRouter(capabilityRegistry, moleculer) {
-    return trpcRouter({
+function createHwAccelRouter(capabilityRegistry, moleculer) {
+    return (0, trpc_middleware_js_1.trpcRouter)({
         /** Probe the current hub process via the local `platform-probe` singleton. */
-        resolve: adminProcedure
-            .input(z.object({ prefer: HwAccelPreferSchema }).optional())
+        resolve: trpc_middleware_js_1.adminProcedure
+            .input(zod_1.z.object({ prefer: HwAccelPreferSchema }).optional())
             .output(HwAccelResolutionSchema)
             .query(async ({ input }) => {
             const provider = capabilityRegistry?.getSingleton('platform-probe') ?? null;
@@ -88,16 +91,16 @@ export function createHwAccelRouter(capabilityRegistry, moleculer) {
             return provider.resolveHwAccel({ prefer: input?.prefer ?? null });
         }),
         /** Probe a specific node in the cluster — used by per-agent UI cards. */
-        resolveForNode: adminProcedure
-            .input(z.object({ nodeId: z.string(), prefer: HwAccelPreferSchema }))
+        resolveForNode: trpc_middleware_js_1.adminProcedure
+            .input(zod_1.z.object({ nodeId: zod_1.z.string(), prefer: HwAccelPreferSchema }))
             .output(HwAccelResolutionSchema)
             .query(async ({ input }) => {
             return resolveHwAccelOnNode(moleculer, input.nodeId, input.prefer ?? null);
         }),
         /** List every node currently reachable and the hwaccel each resolves to. */
-        resolveAll: adminProcedure
-            .output(z.array(z.object({
-            nodeId: z.string(),
+        resolveAll: trpc_middleware_js_1.adminProcedure
+            .output(zod_1.z.array(zod_1.z.object({
+            nodeId: zod_1.z.string(),
             resolution: HwAccelResolutionSchema,
         })))
             .query(async () => {

package/dist/api/core/integration-secrets.js

@@ -1,3 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.writeIntegrationSettings = writeIntegrationSettings;
+exports.readIntegrationSettings = readIntegrationSettings;
 /**
  * The integration-settings door of the keychain (D787). An integration's
  * settings (a Wyze password, a PetKit account password) live in the
@@ -13,20 +17,20 @@
  *   resolve to values. READ, by anyone else (the admin form): markers become
  *   their "set" views — the value never leaves the hub.
  */
-import { isSecretMarker, resolveSecretMarkers, secretTreeFromPaths, toSecretFieldView, transformSecretWrite, } from '@camstack/types';
-export async function writeIntegrationSettings(deps, input) {
+const types_1 = require("@camstack/types");
+async function writeIntegrationSettings(deps, input) {
     if (deps.secrets === null) {
         return deps.registry.setIntegrationSettings(input.integrationId, input.settings);
     }
     const stored = (await deps.registry.getIntegrationSettings(input.integrationId)) ?? {};
     const markerKeys = Object.entries(stored)
-        .filter(([, v]) => isSecretMarker(v))
+        .filter(([, v]) => (0, types_1.isSecretMarker)(v))
         .map(([k]) => k);
-    const tree = secretTreeFromPaths([...new Set([...input.secretKeys, ...markerKeys])]);
+    const tree = (0, types_1.secretTreeFromPaths)([...new Set([...input.secretKeys, ...markerKeys])]);
     if (tree.size === 0) {
         return deps.registry.setIntegrationSettings(input.integrationId, input.settings);
     }
-    const result = await transformSecretWrite({
+    const result = await (0, types_1.transformSecretWrite)({
         tree,
         secrets: deps.secrets,
         patch: input.settings,
@@ -41,16 +45,16 @@ export async function writeIntegrationSettings(deps, input) {
     if (orphaned.length > 0)
         deps.onOrphaned?.(orphaned);
 }
-export async function readIntegrationSettings(deps, input) {
+async function readIntegrationSettings(deps, input) {
     const stored = await deps.registry.getIntegrationSettings(input.integrationId);
     if (input.forOwner) {
         if (deps.secrets === null)
             return stored;
-        return (await resolveSecretMarkers(stored, deps.secrets)).value;
+        return (await (0, types_1.resolveSecretMarkers)(stored, deps.secrets)).value;
     }
     const out = {};
     for (const [key, value] of Object.entries(stored)) {
-        out[key] = isSecretMarker(value) ? toSecretFieldView(value) : value;
+        out[key] = (0, types_1.isSecretMarker)(value) ? (0, types_1.toSecretFieldView)(value) : value;
     }
     return out;
 }

package/dist/api/core/lifecycle-job-runner.js

@@ -1,8 +1,44 @@
-import * as path from 'node:path';
-import { randomUUID } from 'node:crypto';
-import { JobJournal, StagingArea, LifecycleJobEngine, } from '@camstack/system';
-import { SYSTEM_PACKAGE } from '../../core/addon/addon-package.service.js';
-import { lifecycleJobsDir } from '../../lifecycle-journal-path.js';
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createLifecycleJobRunner = createLifecycleJobRunner;
+const path = __importStar(require("node:path"));
+const node_crypto_1 = require("node:crypto");
+const system_1 = require("@camstack/system");
+const addon_package_service_js_1 = require("../../core/addon/addon-package.service.js");
+const lifecycle_journal_path_js_1 = require("../../lifecycle-journal-path.js");
 /**
  * Resolve a target's `TaskTarget` discriminant.
  * Explicit `target` field wins; otherwise auto-detected from package name.
@@ -10,7 +46,7 @@ import { lifecycleJobsDir } from '../../lifecycle-journal-path.js';
 function resolveTaskTarget(t) {
     if (t.target !== undefined)
         return t.target;
-    return t.name === SYSTEM_PACKAGE ? 'framework' : 'addon';
+    return t.name === addon_package_service_js_1.SYSTEM_PACKAGE ? 'framework' : 'addon';
 }
 /**
  * Factory that wires `JobJournal` + `StagingArea` + `LifecycleJobEngine`
@@ -19,12 +55,12 @@ function resolveTaskTarget(t) {
  * Each server boot creates a fresh instance (journals persist on disk; the
  * in-memory running-set does not).
  */
-export function createLifecycleJobRunner(deps) {
+function createLifecycleJobRunner(deps) {
     const nowFn = deps.now ?? (() => Date.now());
-    const journalDir = lifecycleJobsDir(deps.dataDir);
+    const journalDir = (0, lifecycle_journal_path_js_1.lifecycleJobsDir)(deps.dataDir);
     const stagingDir = path.join(deps.dataDir, 'lifecycle', 'staging');
-    const journal = new JobJournal(journalDir);
-    const staging = new StagingArea(stagingDir, {
+    const journal = new system_1.JobJournal(journalDir);
+    const staging = new system_1.StagingArea(stagingDir, {
         fetchTarball: deps.fetchTarball,
         extract: deps.extract,
     });
@@ -33,7 +69,7 @@ export function createLifecycleJobRunner(deps) {
     // from a restart that interrupted a job before its per-job cleanup() ran —
     // these otherwise accumulate forever. Sweep them once, here.
     staging.sweepOrphans();
-    const engine = new LifecycleJobEngine({
+    const engine = new system_1.LifecycleJobEngine({
         journal,
         staging,
         applyAddonUpdate: deps.applyAddonUpdate,
@@ -47,7 +83,7 @@ export function createLifecycleJobRunner(deps) {
     const runningJobs = new Set();
     return {
         async startJob(input) {
-            const jobId = randomUUID();
+            const jobId = (0, node_crypto_1.randomUUID)();
             const job = {
                 jobId,
                 kind: input.kind,
@@ -57,7 +93,7 @@ export function createLifecycleJobRunner(deps) {
                 schemaVersion: 1,
                 state: 'running',
                 tasks: input.targets.map((t) => ({
-                    taskId: randomUUID(),
+                    taskId: (0, node_crypto_1.randomUUID)(),
                     nodeId: 'hub',
                     packageName: t.name,
                     fromVersion: null,

package/dist/api/core/live-events.router.js

@@ -1,28 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createLiveEventsRouter = createLiveEventsRouter;
 /**
  * Live events router — fixed core API (not a capability).
  *
  * Higher-level live-subscription API consumed by the admin UI dashboard.
  * Wraps `EventBusService` with per-device permission enforcement.
  */
-import { z } from 'zod';
-import { trpcRouter, protectedProcedure, iterableSubscription } from '../trpc/trpc.middleware.js';
-import { liveEventInShareScope } from '../trpc/share-view-access.js';
-import { scopedEventVisibility } from '../trpc/principal-visibility.js';
-import { isPublicEvent, publicRecent } from './public-event-filter.js';
-import { userError } from '@camstack/types';
+const zod_1 = require("zod");
+const trpc_middleware_js_1 = require("../trpc/trpc.middleware.js");
+const share_view_access_js_1 = require("../trpc/share-view-access.js");
+const principal_visibility_js_1 = require("../trpc/principal-visibility.js");
+const public_event_filter_js_1 = require("./public-event-filter.js");
+const types_1 = require("@camstack/types");
 // The pushed wire shape is `SystemEvent` from @camstack/types — the exact
 // type `EventBusService.subscribe` hands its handlers. It MUST be a type
 // exported from @camstack/types (not a local interface): the AppRouter
 // type expansion (`scripts/generate-api-types.ts`) prints subscription
 // output types by name, and a router-local name is unresolvable from the
 // generated `packages/types/src/generated/addon-api.ts`.
-export function createLiveEventsRouter(eb, ar) {
-    return trpcRouter({
-        recentSystemEvents: protectedProcedure
-            .input(z
+function createLiveEventsRouter(eb, ar) {
+    return (0, trpc_middleware_js_1.trpcRouter)({
+        recentSystemEvents: trpc_middleware_js_1.protectedProcedure
+            .input(zod_1.z
             .object({
-            category: z.string().optional(),
-            limit: z.number().optional(),
+            category: zod_1.z.string().optional(),
+            limit: zod_1.z.number().optional(),
         })
             .optional())
             .query(({ input, ctx }) => {
@@ -33,11 +36,11 @@ export function createLiveEventsRouter(eb, ar) {
             // view. (Share-view tokens cannot reach this method — not allowlisted.)
             // An owner-only category (D224) is not history anyone may read. Both
             // projections run BEFORE the limit (`publicRecent`).
-            const keep = scopedEventVisibility(ctx.user, ctx.deviceScopeLookup);
-            return publicRecent(eb, input?.category ? { category: input.category } : {}, input?.limit ?? 50, keep);
+            const keep = (0, principal_visibility_js_1.scopedEventVisibility)(ctx.user, ctx.deviceScopeLookup);
+            return (0, public_event_filter_js_1.publicRecent)(eb, input?.category ? { category: input.category } : {}, input?.limit ?? 50, keep);
         }),
-        onEvent: protectedProcedure
-            .input(z.object({ category: z.string().optional() }))
+        onEvent: trpc_middleware_js_1.protectedProcedure
+            .input(zod_1.z.object({ category: zod_1.z.string().optional() }))
             .subscription(({ input, ctx }) => {
             // Share-view principals get a device-filtered stream: only events
             // attributable to an in-scope device are pushed (fail closed —
@@ -47,8 +50,8 @@ export function createLiveEventsRouter(eb, ar) {
             // view (F0.5); admins and broad category-view operators are unfiltered.
             const scopedKeep = shareScope
                 ? null
-                : scopedEventVisibility(ctx.user, ctx.deviceScopeLookup);
-            return iterableSubscription((push) => {
+                : (0, principal_visibility_js_1.scopedEventVisibility)(ctx.user, ctx.deviceScopeLookup);
+            return (0, trpc_middleware_js_1.iterableSubscription)((push) => {
                 const filter = {};
                 if (input.category)
                     filter.category = input.category;
@@ -57,49 +60,49 @@ export function createLiveEventsRouter(eb, ar) {
                 if (shareScope) {
                     const allowedDeviceIds = new Set(shareScope.deviceIds);
                     return eb.subscribe(filter, (evt) => {
-                        if (isPublicEvent(evt) && liveEventInShareScope(evt, allowedDeviceIds))
+                        if ((0, public_event_filter_js_1.isPublicEvent)(evt) && (0, share_view_access_js_1.liveEventInShareScope)(evt, allowedDeviceIds))
                             push(evt);
                     });
                 }
                 if (scopedKeep) {
                     return eb.subscribe(filter, (evt) => {
-                        if (isPublicEvent(evt) && scopedKeep(evt))
+                        if ((0, public_event_filter_js_1.isPublicEvent)(evt) && scopedKeep(evt))
                             push(evt);
                     });
                 }
                 return eb.subscribe(filter, (evt) => {
-                    if (isPublicEvent(evt))
+                    if ((0, public_event_filter_js_1.isPublicEvent)(evt))
                         push(evt);
                 });
             });
         }),
-        onDeviceEvent: protectedProcedure
-            .input(z.object({ deviceId: z.number() }))
+        onDeviceEvent: trpc_middleware_js_1.protectedProcedure
+            .input(zod_1.z.object({ deviceId: zod_1.z.number() }))
             .subscription(({ input, ctx }) => {
-            return iterableSubscription((push) => {
+            return (0, trpc_middleware_js_1.iterableSubscription)((push) => {
                 const deviceRegistry = ar.getDeviceRegistry();
                 const device = deviceRegistry.getById(input.deviceId);
                 if (!device)
-                    throw userError('device.not-found', { id: input.deviceId }, `Device id=${input.deviceId} not found`);
+                    throw (0, types_1.userError)('device.not-found', { id: input.deviceId }, `Device id=${input.deviceId} not found`);
                 // Permission check — new IDevice has no providerId; admin bypass only
                 if (!ctx.user.isAdmin) {
                     const ad = ctx.user.permissions?.allowedDevices;
                     if (!ad)
-                        throw userError('auth.access-denied', undefined, 'Access denied');
+                        throw (0, types_1.userError)('auth.access-denied', undefined, 'Access denied');
                     // Find which addon owns this device to determine the provider key
                     const ownerAddonId = deviceRegistry.getAddonId(input.deviceId);
                     if (!ownerAddonId)
-                        throw userError('auth.access-denied', undefined, 'Access denied');
+                        throw (0, types_1.userError)('auth.access-denied', undefined, 'Access denied');
                     const pd = ad[ownerAddonId];
                     // Permission lists are still keyed by stableId — that's the
                     // external admin-facing identifier. Resolve the device's
                     // stableId for the membership check.
                     if (!pd || (pd !== '*' && !pd.includes(device.stableId))) {
-                        throw userError('auth.access-denied', undefined, 'Access denied');
+                        throw (0, types_1.userError)('auth.access-denied', undefined, 'Access denied');
                     }
                 }
                 return eb.subscribe({ source: { type: 'device', id: input.deviceId } }, (evt) => {
-                    if (isPublicEvent(evt))
+                    if ((0, public_event_filter_js_1.isPublicEvent)(evt))
                         push(evt);
                 });
             });

package/dist/api/core/load-contributions.js

@@ -1,9 +1,13 @@
-import { errMsg } from '@camstack/types';
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EMPTY_LOAD_CONTRIBUTION_PLANE = void 0;
+exports.buildLoadContributionPlane = buildLoadContributionPlane;
+const types_1 = require("@camstack/types");
 /** A plane that reaches nothing. The shape of a hub with no addon booted yet. */
-export const EMPTY_LOAD_CONTRIBUTION_PLANE = {
+exports.EMPTY_LOAD_CONTRIBUTION_PLANE = {
     contributions: async () => [],
 };
-export function buildLoadContributionPlane(source, onProviderError) {
+function buildLoadContributionPlane(source, onProviderError) {
     return {
         contributions: async () => {
             const out = [];
@@ -14,7 +18,7 @@ export function buildLoadContributionPlane(source, onProviderError) {
                     }
                 }
                 catch (err) {
-                    onProviderError?.(addonId, errMsg(err));
+                    onProviderError?.(addonId, (0, types_1.errMsg)(err));
                 }
             }
             return out;