@camstack/server 1.2.594 → 1.2.596

package/dist/core/addon/addon-package.service.js

@@ -1,30 +1,69 @@
-import { userError } from '@camstack/types';
-import { execFile } from 'node:child_process';
-import { randomUUID } from 'node:crypto';
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-import { promisify } from 'node:util';
-import { AddonInstaller, detectWorkspacePackagesDir, ensureDir, scheduleSelfRestart, writePendingRestart, } from '@camstack/system';
-import { EventCategory, errMsg } from '@camstack/types';
-import { UpdateAvailabilityEmitter } from '../update-availability-emitter.js';
-import { clampUpdateCheckInterval, DEFAULT_UPDATE_CHECK_INTERVAL_SECONDS, } from '../updates/update-check-scheduler.js';
-import { buildRestartMarker } from '../updates/restart-marker.js';
-import { computeDistBuildId, resolveHubClosurePackageDir } from './package-dir-utils.js';
-const execFileAsync = promisify(execFile);
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddonPackageService = exports.FRAMEWORK_PACKAGES = exports.AUTO_UPDATE_EXCLUDED_PACKAGES = exports.SYSTEM_PACKAGE = void 0;
+exports.isVersionNewer = isVersionNewer;
+exports.isFrameworkPackage = isFrameworkPackage;
+exports.extractTgzStripped = extractTgzStripped;
+const types_1 = require("@camstack/types");
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const node_util_1 = require("node:util");
+const system_1 = require("@camstack/system");
+const types_2 = require("@camstack/types");
+const update_availability_emitter_js_1 = require("../update-availability-emitter.js");
+const update_check_scheduler_js_1 = require("../updates/update-check-scheduler.js");
+const restart_marker_js_1 = require("../updates/restart-marker.js");
+const package_dir_utils_js_1 = require("./package-dir-utils.js");
+const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
 /**
  * The primary host-provided framework package (kernel + core). Kept as a named
  * export because `lifecycle-job-runner` + several tests reference it directly.
  */
-export const SYSTEM_PACKAGE = '@camstack/system';
+exports.SYSTEM_PACKAGE = '@camstack/system';
 /**
  * Packages the npm auto-updater must NEVER touch: the framework/system tier
  * ships exclusively via `applyServerUpdate` (single-copy collapse). Listed
  * explicitly (not via a manifest flag) because the updater runs against
  * `listInstalled()` package names before any manifest is loaded.
  */
-export const AUTO_UPDATE_EXCLUDED_PACKAGES = new Set([
-    SYSTEM_PACKAGE,
+exports.AUTO_UPDATE_EXCLUDED_PACKAGES = new Set([
+    exports.SYSTEM_PACKAGE,
     '@camstack/types',
     '@camstack/kernel',
     '@camstack/core',
@@ -40,7 +79,7 @@ export const AUTO_UPDATE_EXCLUDED_PACKAGES = new Set([
  * 1.2.6); when both carry prereleases they compare lexicographically.
  * Unparseable versions are never "newer" (fail safe: no update).
  */
-export function isVersionNewer(target, current) {
+function isVersionNewer(target, current) {
     const parse = (v) => {
         const m = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/.exec(v.trim());
         if (!m)
@@ -81,8 +120,8 @@ export function isVersionNewer(target, current) {
  * flag (`@camstack/types` declares `system: false` yet is a framework package
  * here) — that flag drives Admin-UI grouping; this gate drives upload routing.
  */
-export const FRAMEWORK_PACKAGES = [
-    SYSTEM_PACKAGE,
+exports.FRAMEWORK_PACKAGES = [
+    exports.SYSTEM_PACKAGE,
     '@camstack/types',
     '@camstack/sdk',
 ];
@@ -90,8 +129,8 @@ export const FRAMEWORK_PACKAGES = [
  * Returns true for a host-provided framework package (special-cased by the
  * addon-upload route — never installed as a normal addon).
  */
-export function isFrameworkPackage(packageName) {
-    return FRAMEWORK_PACKAGES.includes(packageName);
+function isFrameworkPackage(packageName) {
+    return exports.FRAMEWORK_PACKAGES.includes(packageName);
 }
 // ---------------------------------------------------------------------------
 // Typed JSON helpers
@@ -138,7 +177,7 @@ function asRecord(value) {
 // ---------------------------------------------------------------------------
 /** Core packages that live in the server's own node_modules */
 const CORE_MANAGED_PACKAGES = ['@camstack/system', '@camstack/types'];
-export class AddonPackageService {
+class AddonPackageService {
     loggingService;
     eventBusService;
     configService;
@@ -161,7 +200,7 @@ export class AddonPackageService {
         global: {
             channel: 'off',
             intervalSeconds: 21600,
-            updateCheckIntervalSeconds: DEFAULT_UPDATE_CHECK_INTERVAL_SECONDS,
+            updateCheckIntervalSeconds: update_check_scheduler_js_1.DEFAULT_UPDATE_CHECK_INTERVAL_SECONDS,
         },
         overrides: {},
     };
@@ -197,12 +236,12 @@ export class AddonPackageService {
         this.notificationService = notificationService;
         this.toastService = toastService;
         this.logger = this.loggingService.createLogger('AddonPackageService');
-        this.updateAvailability = new UpdateAvailabilityEmitter(this.eventBusService, { type: 'core', id: 'addon-package-service' }, updateAvailabilityStore);
+        this.updateAvailability = new update_availability_emitter_js_1.UpdateAvailabilityEmitter(this.eventBusService, { type: 'core', id: 'addon-package-service' }, updateAvailabilityStore);
         // Initialize installer eagerly (no async needed).
         // Ensures install/uninstall works before full module init completes.
         try {
             const addonsDir = this.resolveAddonsDir();
-            const workspacePackagesDir = detectWorkspacePackagesDir(__dirname);
+            const workspacePackagesDir = (0, system_1.detectWorkspacePackagesDir)(__dirname);
             // `CAMSTACK_NPM_REGISTRY` override exists primarily for the e2e
             // harness — it points the installer at a sandboxed verdaccio so
             // the CLI-vs-npm version-interaction tests don't hit the public
@@ -211,15 +250,15 @@ export class AddonPackageService {
             // AddonInstaller). Both the `npm install` shell-out AND the
             // metadata HTTPS fetch honour this value.
             const registry = process.env['CAMSTACK_NPM_REGISTRY'];
-            this.installer = new AddonInstaller({
+            this.installer = new system_1.AddonInstaller({
                 addonsDir,
                 workspacePackagesDir: workspacePackagesDir ?? undefined,
                 ...(registry ? { registry } : {}),
             });
-            ensureDir(addonsDir);
+            (0, system_1.ensureDir)(addonsDir);
         }
         catch (error) {
-            const msg = errMsg(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.warn('Installer init failed', { meta: { error: msg } });
         }
         // Load auto-update config from disk
@@ -263,7 +302,7 @@ export class AddonPackageService {
         }
         catch (err) {
             this.logger.debug('Non-fatal: failed to write .install-source marker', {
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         }
         this.installer.manifest.upsert(result.name, {
@@ -288,9 +327,9 @@ export class AddonPackageService {
     async rollbackPackage(name) {
         this.requireInstaller();
         if (!this.isAllowedPackage(name)) {
-            throw userError('server.package-not-allowed', { name: String(name) }, `Package "${name}" is not an allowed @camstack/* package`);
+            throw (0, types_1.userError)('server.package-not-allowed', { name: String(name) }, `Package "${name}" is not an allowed @camstack/* package`);
         }
-        if (AUTO_UPDATE_EXCLUDED_PACKAGES.has(name)) {
+        if (exports.AUTO_UPDATE_EXCLUDED_PACKAGES.has(name)) {
             throw new Error(`"${name}" is a framework package — roll it back via serverManagement, not the addon-package path`);
         }
         const previousVersion = this.getInstalledPackageVersion(name);
@@ -319,7 +358,7 @@ export class AddonPackageService {
         }
         catch (reloadError) {
             this.logger.warn('Restart failed after rollback', {
-                meta: { name, error: errMsg(reloadError) },
+                meta: { name, error: (0, types_2.errMsg)(reloadError) },
             });
         }
         // Clear update cache so the UI reflects the new state.
@@ -330,7 +369,7 @@ export class AddonPackageService {
     async uninstall(name) {
         this.requireInstaller();
         if (this.isProtected(name)) {
-            throw userError('server.package-protected', { name: String(name) }, `Cannot uninstall protected package "${name}"`);
+            throw (0, types_1.userError)('server.package-protected', { name: String(name) }, `Cannot uninstall protected package "${name}"`);
         }
         await this.installer.uninstall(name);
         this.logger.info('Uninstalled', { meta: { name } });
@@ -357,7 +396,7 @@ export class AddonPackageService {
             });
         }
         catch (err) {
-            const msg = errMsg(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('npm install failed', { meta: { packageName, error: msg } });
             this.toastService.broadcast({
                 title: 'Install Failed',
@@ -370,7 +409,7 @@ export class AddonPackageService {
             await this.reloadPackages();
         }
         catch (err) {
-            const msg = errMsg(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('reloadPackages failed', { meta: { error: msg } });
         }
         let loaded = [];
@@ -381,7 +420,7 @@ export class AddonPackageService {
             failed = result.failed;
         }
         catch (err) {
-            const msg = errMsg(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('loadNewAddons failed', { meta: { error: msg } });
             failed.push(packageName);
         }
@@ -408,7 +447,7 @@ export class AddonPackageService {
             });
         }
         catch (err) {
-            const msg = errMsg(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('Workspace install failed', { meta: { error: msg } });
             this.toastService.broadcast({ title: 'Install Failed', message: msg, severity: 'warning' });
             throw new Error(`Workspace install failed: ${msg}`, { cause: err });
@@ -418,7 +457,7 @@ export class AddonPackageService {
         }
         catch (err) {
             this.logger.warn('Non-fatal: failed to reload packages after workspace install', {
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         }
         let loaded = [];
@@ -429,7 +468,7 @@ export class AddonPackageService {
             failed = result.failed;
         }
         catch (err) {
-            this.logger.warn('Failed to load new addons after install', { meta: { error: errMsg(err) } });
+            this.logger.warn('Failed to load new addons after install', { meta: { error: (0, types_2.errMsg)(err) } });
             failed.push(packageName);
         }
         this.toastService.broadcast({
@@ -449,7 +488,7 @@ export class AddonPackageService {
      */
     async uninstallAndReload(packageName) {
         if (this.isProtected(packageName)) {
-            throw userError('server.package-required', { packageName: String(packageName) }, `Package ${packageName} is required and cannot be uninstalled`);
+            throw (0, types_1.userError)('server.package-required', { packageName: String(packageName) }, `Package ${packageName} is required and cannot be uninstalled`);
         }
         try {
             this.addonRegistry.emitUninstallEvent(packageName);
@@ -458,19 +497,19 @@ export class AddonPackageService {
             this.logger.info('Uninstall complete', { meta: { packageName } });
         }
         catch (err) {
-            const msg = errMsg(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.error('Uninstall failed', { meta: { packageName, error: msg } });
             this.toastService.broadcast({ title: 'Uninstall Failed', message: msg, severity: 'warning' });
             throw new Error(`Uninstall failed: ${msg}`, { cause: err });
         }
         await this.reloadPackages().catch((err) => {
             this.logger.warn('Non-fatal: failed to reload packages after uninstall', {
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         });
         await this.addonRegistry.loadNewAddons().catch((err) => {
             this.logger.warn('Non-fatal: failed to load new addons after uninstall', {
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         });
         this.toastService.broadcast({
@@ -520,7 +559,7 @@ export class AddonPackageService {
             }
         }
         catch (err) {
-            this.logger.warn('Failed to read workspace directory', { meta: { error: errMsg(err) } });
+            this.logger.warn('Failed to read workspace directory', { meta: { error: (0, types_2.errMsg)(err) } });
         }
         return results;
     }
@@ -551,7 +590,7 @@ export class AddonPackageService {
         const fromRegistry = this.addonRegistry?.isPackageProtected?.(name);
         if (typeof fromRegistry === 'boolean')
             return fromRegistry;
-        return AddonInstaller.REQUIRED_PACKAGES.includes(name);
+        return system_1.AddonInstaller.REQUIRED_PACKAGES.includes(name);
     }
     /**
      * Set of package names with a pending pre-update backup on disk —
@@ -640,7 +679,7 @@ export class AddonPackageService {
             // Never OFFER a framework package as an addon update: clicking it would
             // route to `updatePackage`, which now refuses it anyway. Filtering here
             // keeps the UI honest (no dead "Update" button for @camstack/server).
-            if (AUTO_UPDATE_EXCLUDED_PACKAGES.has(name))
+            if (exports.AUTO_UPDATE_EXCLUDED_PACKAGES.has(name))
                 return;
             const lookup = await this.lookupLatestVersion(name);
             if (!lookup.ok) {
@@ -907,7 +946,7 @@ export class AddonPackageService {
             return result;
         }
         catch (error) {
-            const msg = errMsg(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.warn('Failed to fetch versions', { meta: { name, error: msg } });
             return cached?.versions ?? [];
         }
@@ -946,7 +985,7 @@ export class AddonPackageService {
         }
         catch (err) {
             this.logger.warn('Post-update confirmation failed — backup retained for rollback', {
-                meta: { name, backupDir, error: errMsg(err) },
+                meta: { name, backupDir, error: (0, types_2.errMsg)(err) },
             });
         }
     }
@@ -1023,7 +1062,7 @@ export class AddonPackageService {
             // hub/node_modules/@camstack/ — addons resolve everything from
             // their own inlined deps.
             const addonsDir = this.resolveAddonsDir();
-            const { installPackageFromNpm } = await import('@camstack/system');
+            const { installPackageFromNpm } = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
             const dirName = name.replace(/^@camstack\//, '');
             const targetDir = path.join(addonsDir, dirName);
             const packageSpec = version ? `${name}@${version}` : name;
@@ -1041,7 +1080,7 @@ export class AddonPackageService {
             return { success: true, version: updatedVersion, requiresRestart: true };
         }
         catch (error) {
-            const msg = errMsg(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.error('Failed to update package', { meta: { name, error: msg } });
             return { success: false, version: '', requiresRestart: false, error: msg };
         }
@@ -1099,7 +1138,7 @@ export class AddonPackageService {
             return { success: true, version: updatedVersion, requiresRestart: false };
         }
         catch (error) {
-            const msg = errMsg(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.error('Failed to apply staged addon update', { meta: { name, error: msg } });
             return { success: false, version: '', requiresRestart: false, error: msg };
         }
@@ -1172,25 +1211,25 @@ export class AddonPackageService {
     restartServer(requestedBy, update) {
         this.logger.info('Server restart requested -- initiating graceful shutdown');
         // Both versions, one builder, shared with the agent — see `restart-marker.ts`.
-        const payload = buildRestartMarker({
+        const payload = (0, restart_marker_js_1.buildRestartMarker)({
             requestedAt: Date.now(),
             ...(requestedBy !== undefined ? { requestedBy } : {}),
             ...(update !== undefined ? { update } : {}),
         });
         try {
-            writePendingRestart(this.resolveDataDir(), payload);
+            (0, system_1.writePendingRestart)(this.resolveDataDir(), payload);
         }
         catch (err) {
             // Marker write failure shouldn't block the restart — log + continue.
             this.logger.warn('Failed to write restart marker; restart will proceed without completion toast', {
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         }
         this.eventBusService.emit({
-            id: randomUUID(),
+            id: (0, node_crypto_1.randomUUID)(),
             timestamp: new Date(),
             source: { type: 'core', id: 'addon-package-service' },
-            category: EventCategory.SystemRestarting,
+            category: types_2.EventCategory.SystemRestarting,
             // The node, as `system.restart-completed` names it after the boot
             // (`post-boot.service.ts`): the announcement and the landing of one
             // restart must name the same node, or a stale `node-updating` could not
@@ -1198,7 +1237,7 @@ export class AddonPackageService {
             data: { ...payload, nodeId: process.env['CAMSTACK_NODE_ID'] ?? 'hub' },
         });
         // 10s grace gives in-flight requests time to drain.
-        scheduleSelfRestart({ delayMs: 10_000 });
+        (0, system_1.scheduleSelfRestart)({ delayMs: 10_000 });
     }
     // =========================================================================
     // Framework live-update
@@ -1217,7 +1256,7 @@ export class AddonPackageService {
      */
     async listFrameworkPackages() {
         const registry = process.env['CAMSTACK_NPM_REGISTRY'];
-        const rows = await Promise.all([SYSTEM_PACKAGE].map(async (packageName) => {
+        const rows = await Promise.all([exports.SYSTEM_PACKAGE].map(async (packageName) => {
             const manifest = readResolvedPackageManifest(packageName);
             const currentVersion = manifest !== null && typeof manifest['version'] === 'string'
                 ? manifest['version']
@@ -1228,8 +1267,8 @@ export class AddonPackageService {
             // Content build-id of the code the hub ACTUALLY loaded — resolved from
             // the same closure the running process uses. Surfaces "same semver,
             // new code" (framework packages ship changes without always bumping).
-            const hubPkgDir = resolveHubClosurePackageDir(packageName);
-            const buildId = hubPkgDir !== null ? computeDistBuildId(path.join(hubPkgDir, 'dist')) : null;
+            const hubPkgDir = (0, package_dir_utils_js_1.resolveHubClosurePackageDir)(packageName);
+            const buildId = hubPkgDir !== null ? (0, package_dir_utils_js_1.computeDistBuildId)(path.join(hubPkgDir, 'dist')) : null;
             let latestVersion = null;
             let lookupFailed = false;
             try {
@@ -1246,7 +1285,7 @@ export class AddonPackageService {
             catch (err) {
                 lookupFailed = true;
                 this.logger.debug('listFrameworkPackages: npm view failed', {
-                    meta: { packageName, error: errMsg(err) },
+                    meta: { packageName, error: (0, types_2.errMsg)(err) },
                 });
             }
             // STRICTLY newer, never merely different. The hub runs
@@ -1318,14 +1357,14 @@ export class AddonPackageService {
     /** Re-discover addons from the addons directory (call after install/uninstall) */
     async reloadPackages() {
         try {
-            const kernel = await import('@camstack/system');
+            const kernel = await Promise.resolve().then(() => __importStar(require('@camstack/system')));
             this.loader = new kernel.AddonLoader(this.logger.child('AddonLoader'));
             const addonsDir = this.resolveAddonsDir();
             await this.loader.loadFromDirectory(addonsDir);
             this.logger.info('Reloaded', { meta: { count: this.loader.listAddons().length } });
         }
         catch (error) {
-            const msg = errMsg(error);
+            const msg = (0, types_2.errMsg)(error);
             this.logger.warn('reloadPackages failed', { meta: { error: msg } });
         }
     }
@@ -1359,7 +1398,7 @@ export class AddonPackageService {
         const previousCheckInterval = this.autoUpdateConfig.global.updateCheckIntervalSeconds;
         const nextCheckInterval = updateCheckIntervalSeconds === undefined
             ? previousCheckInterval
-            : clampUpdateCheckInterval(updateCheckIntervalSeconds);
+            : (0, update_check_scheduler_js_1.clampUpdateCheckInterval)(updateCheckIntervalSeconds);
         this.autoUpdateConfig = {
             ...this.autoUpdateConfig,
             global: {
@@ -1413,7 +1452,7 @@ export class AddonPackageService {
         });
         this.autoUpdateTimer = setInterval(() => {
             this.runAutoUpdate().catch((err) => {
-                this.logger.error('Auto-update check failed', { meta: { error: errMsg(err) } });
+                this.logger.error('Auto-update check failed', { meta: { error: (0, types_2.errMsg)(err) } });
             });
         }, intervalMs);
     }
@@ -1443,7 +1482,7 @@ export class AddonPackageService {
                 // skipped a swept framework target; excluding it here also kills the
                 // useless candidate churn that participated in the 2026-07-22 hub
                 // wedge (mass staged swap right after a publish train).
-                if (AUTO_UPDATE_EXCLUDED_PACKAGES.has(pkg.name))
+                if (exports.AUTO_UPDATE_EXCLUDED_PACKAGES.has(pkg.name))
                     continue;
                 // Determine effective channel for this addon
                 const addonId = pkg.name.replace('@camstack/addon-', '').replace('@camstack/', '');
@@ -1491,7 +1530,7 @@ export class AddonPackageService {
             }
             catch (err) {
                 this.logger.warn('Auto-update check failed', {
-                    meta: { name: pkg.name, error: errMsg(err) },
+                    meta: { name: pkg.name, error: (0, types_2.errMsg)(err) },
                 });
             }
         }
@@ -1508,7 +1547,7 @@ export class AddonPackageService {
         // ship via applyServerUpdate). Wrap so a failure is logged, not thrown out
         // of the timer callback.
         try {
-            const { getLifecycleRunner } = await import('../lifecycle/lifecycle-runner.singleton.js');
+            const { getLifecycleRunner } = await Promise.resolve().then(() => __importStar(require('../lifecycle/lifecycle-runner.singleton.js')));
             const runner = getLifecycleRunner();
             const { jobId } = await runner.startJob({ kind: 'update', targets, createdBy: 'system' });
             this.logger.info('Auto-update job started', {
@@ -1516,7 +1555,7 @@ export class AddonPackageService {
             });
         }
         catch (err) {
-            this.logger.error('Auto-update job failed to start', { meta: { error: errMsg(err) } });
+            this.logger.error('Auto-update job failed to start', { meta: { error: (0, types_2.errMsg)(err) } });
         }
     }
     // =========================================================================
@@ -1538,8 +1577,8 @@ export class AddonPackageService {
                             channel: validChannel,
                             intervalSeconds: typeof global['intervalSeconds'] === 'number' ? global['intervalSeconds'] : 3600,
                             updateCheckIntervalSeconds: typeof rawCheckInterval === 'number'
-                                ? clampUpdateCheckInterval(rawCheckInterval)
-                                : DEFAULT_UPDATE_CHECK_INTERVAL_SECONDS,
+                                ? (0, update_check_scheduler_js_1.clampUpdateCheckInterval)(rawCheckInterval)
+                                : update_check_scheduler_js_1.DEFAULT_UPDATE_CHECK_INTERVAL_SECONDS,
                         },
                         overrides: Object.fromEntries(Object.entries(asRecord(raw['overrides'])).map(([k, v]) => {
                             const s = asString(v);
@@ -1552,14 +1591,14 @@ export class AddonPackageService {
         }
         catch (err) {
             this.logger.debug('Corrupt auto-update config, falling back to defaults', {
-                meta: { error: errMsg(err) },
+                meta: { error: (0, types_2.errMsg)(err) },
             });
         }
         return {
             global: {
                 channel: 'off',
                 intervalSeconds: 21600,
-                updateCheckIntervalSeconds: DEFAULT_UPDATE_CHECK_INTERVAL_SECONDS,
+                updateCheckIntervalSeconds: update_check_scheduler_js_1.DEFAULT_UPDATE_CHECK_INTERVAL_SECONDS,
             },
             overrides: {},
         };
@@ -1575,7 +1614,7 @@ export class AddonPackageService {
             fs.writeFileSync(configPath, JSON.stringify(this.autoUpdateConfig, null, 2));
         }
         catch (err) {
-            this.logger.warn('Failed to save auto-update config', { meta: { error: errMsg(err) } });
+            this.logger.warn('Failed to save auto-update config', { meta: { error: (0, types_2.errMsg)(err) } });
         }
     }
     /** Resolve the top-level data directory */
@@ -1670,7 +1709,7 @@ export class AddonPackageService {
                 // The package could not be evaluated at all (unreadable manifest, …).
                 // Counted as a failure for the same reason a registry miss is.
                 failures += 1;
-                const msg = errMsg(error);
+                const msg = (0, types_2.errMsg)(error);
                 this.logger.warn('Failed to check updates for addon', {
                     meta: { pkgJsonPath, error: msg },
                 });
@@ -1723,7 +1762,7 @@ export class AddonPackageService {
             return { ok: true, latestVersion: version || null };
         }
         catch (error) {
-            return { ok: false, error: errMsg(error) };
+            return { ok: false, error: (0, types_2.errMsg)(error) };
         }
     }
     /**
@@ -1796,7 +1835,7 @@ export class AddonPackageService {
             return results;
         }
         catch (err) {
-            this.logger.warn('npm search failed', { meta: { error: errMsg(err) } });
+            this.logger.warn('npm search failed', { meta: { error: (0, types_2.errMsg)(err) } });
             // Stale cache is better than nothing on transient network failure
             return this.searchCache?.results ?? [];
         }
@@ -1832,7 +1871,7 @@ export class AddonPackageService {
         }
         catch (err) {
             this.logger.debug('Installed-version lookup failed', {
-                meta: { packageName, error: errMsg(err) },
+                meta: { packageName, error: (0, types_2.errMsg)(err) },
             });
         }
         this.logger.debug('No readable installed copy — previous version is unknown', {
@@ -1855,7 +1894,7 @@ export class AddonPackageService {
      * host mid-`applyServerUpdate` publish. A refusal, not a silent no-op.
      */
     refuseExcludedFramework(name) {
-        if (!AUTO_UPDATE_EXCLUDED_PACKAGES.has(name))
+        if (!exports.AUTO_UPDATE_EXCLUDED_PACKAGES.has(name))
             return null;
         return {
             success: false,
@@ -1915,7 +1954,7 @@ export class AddonPackageService {
             timestamp: Date.now(),
         })
             .catch((err) => {
-            const msg = errMsg(err);
+            const msg = (0, types_2.errMsg)(err);
             this.logger.debug('Update notification failed', { meta: { error: msg } });
         });
         this.toastService.broadcast({
@@ -1926,6 +1965,7 @@ export class AddonPackageService {
         });
     }
 }
+exports.AddonPackageService = AddonPackageService;
 // ---------------------------------------------------------------------------
 // Tarball extraction helper (exported for regression tests)
 // ---------------------------------------------------------------------------
@@ -1942,9 +1982,9 @@ export class AddonPackageService {
  * `src/core/addon/__tests__/extract-tarball-strip.spec.ts` can test the real
  * implementation without instantiating `AddonPackageService`.
  */
-export async function extractTgzStripped(tgz, destDir) {
+async function extractTgzStripped(tgz, destDir) {
     fs.mkdirSync(destDir, { recursive: true });
-    const tmpFile = path.join(os.tmpdir(), `camstack-tgz-${randomUUID()}.tgz`);
+    const tmpFile = path.join(os.tmpdir(), `camstack-tgz-${(0, node_crypto_1.randomUUID)()}.tgz`);
     try {
         fs.writeFileSync(tmpFile, tgz);
         await execFileAsync('tar', ['--strip-components=1', '-xzf', tmpFile, '-C', destDir], {

package/dist/core/addon/addon-process-view.js

@@ -1,4 +1,8 @@
-export function describeAddonProcess(input) {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NEVER_LOADED_PROCESS = void 0;
+exports.describeAddonProcess = describeAddonProcess;
+function describeAddonProcess(input) {
     if (!input.forked) {
         // Hosted by hub-main itself: its state is hub-main's, which is running if this code is.
         return input.initialized
@@ -21,4 +25,4 @@ export function describeAddonProcess(input) {
  * A package on disk that never loaded: there is no process, and the card must
  * show the diagnostic state distinctly (`scanFailedToLoadPackages`).
  */
-export const NEVER_LOADED_PROCESS = { mode: 'in-process', state: 'failed' };
+exports.NEVER_LOADED_PROCESS = { mode: 'in-process', state: 'failed' };

package/dist/core/addon/addon-realign-plan.js

@@ -1,3 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.planAddonRealignment = planAddonRealignment;
 /** `a` strictly newer than `b`, by numeric segments, missing segments as 0. */
 function isStrictlyNewer(a, b) {
     const pa = a.split('.').map((p) => Number.parseInt(p, 10));
@@ -13,7 +16,7 @@ function isStrictlyNewer(a, b) {
     }
     return false;
 }
-export function planAddonRealignment(candidates) {
+function planAddonRealignment(candidates) {
     return candidates.map((c) => {
         if (c.closureVersion === null) {
             return { pkg: c.pkg, action: 'keep', reason: 'not carried by this closure' };