@camstack/server 1.2.594 → 1.2.596

package/dist/core/auth/handoff-code.service.js

@@ -1,4 +1,41 @@
-import { userError } from '@camstack/types';
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HandoffCodeService = exports.HANDOFF_CODE_MAX_PENDING = exports.HANDOFF_CODE_TTL_MS = exports.HANDOFF_CODE_PREFIX = void 0;
+exports.pkceChallenge = pkceChallenge;
+const types_1 = require("@camstack/types");
 /**
  * HandoffCodeService — one-time login handoff codes for the native-app
  * auth handoff (viewer "Sign in with CamStack").
@@ -22,26 +59,26 @@ import { userError } from '@camstack/types';
  *     (the browser just re-runs the handoff), and a bounded store +
  *     prune-on-mint keeps the map from growing.
  */
-import * as crypto from 'node:crypto';
+const crypto = __importStar(require("node:crypto"));
 /** Wire prefix — `chc_` = CamStack Handoff Code (cf. `cst_`/`csv_`). */
-export const HANDOFF_CODE_PREFIX = 'chc_';
-export const HANDOFF_CODE_TTL_MS = 60_000;
+exports.HANDOFF_CODE_PREFIX = 'chc_';
+exports.HANDOFF_CODE_TTL_MS = 60_000;
 /** Hard bound on concurrently-pending codes (mint is auth-gated, so this
  *  only guards against a runaway authenticated client). */
-export const HANDOFF_CODE_MAX_PENDING = 1_000;
+exports.HANDOFF_CODE_MAX_PENDING = 1_000;
 /** RFC 7636 S256: `base64url(sha256(verifier))`. */
-export function pkceChallenge(verifier) {
+function pkceChallenge(verifier) {
     return crypto.createHash('sha256').update(verifier).digest('base64url');
 }
 function hashCode(code) {
     return crypto.createHash('sha256').update(code).digest('hex');
 }
-export class HandoffCodeService {
+class HandoffCodeService {
     now;
     ttlMs;
     /** Keyed by SHA-256(raw code). */
     pending = new Map();
-    constructor(now = Date.now, ttlMs = HANDOFF_CODE_TTL_MS) {
+    constructor(now = Date.now, ttlMs = exports.HANDOFF_CODE_TTL_MS) {
         this.now = now;
         this.ttlMs = ttlMs;
     }
@@ -50,10 +87,10 @@ export class HandoffCodeService {
      *  legitimate flow never has anywhere near this many in flight). */
     create(userId, options = {}) {
         this.prune();
-        if (this.pending.size >= HANDOFF_CODE_MAX_PENDING) {
-            throw userError('server.handoff-busy', undefined, 'Too many pending handoff codes — try again shortly');
+        if (this.pending.size >= exports.HANDOFF_CODE_MAX_PENDING) {
+            throw (0, types_1.userError)('server.handoff-busy', undefined, 'Too many pending handoff codes — try again shortly');
         }
-        const code = `${HANDOFF_CODE_PREFIX}${crypto.randomBytes(32).toString('hex')}`;
+        const code = `${exports.HANDOFF_CODE_PREFIX}${crypto.randomBytes(32).toString('hex')}`;
         const expiresAt = this.now() + this.ttlMs;
         this.pending.set(hashCode(code), {
             userId,
@@ -107,3 +144,4 @@ export class HandoffCodeService {
         }
     }
 }
+exports.HandoffCodeService = HandoffCodeService;

package/dist/core/auth/record-kinds.js

@@ -1,24 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.coreAuthRecordKinds = exports.SHARE_VIEW_TOKENS_LEGACY = void 0;
 /**
  * Record kinds owned by `core-auth` (hub-resident, phase 6 / §2.8).
  */
-import { defineRecordKinds, SHARE_VIEW_KINDS } from '@camstack/types';
-import { z } from 'zod';
-const ShareTokenScopeSchema = z.object({
-    kind: z.enum(SHARE_VIEW_KINDS),
-    deviceIds: z.array(z.number().int().nonnegative()).min(1).max(64),
-    talk: z.boolean().optional(),
+const types_1 = require("@camstack/types");
+const zod_1 = require("zod");
+const ShareTokenScopeSchema = zod_1.z.object({
+    kind: zod_1.z.enum(types_1.SHARE_VIEW_KINDS),
+    deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(64),
+    talk: zod_1.z.boolean().optional(),
 });
-export const SHARE_VIEW_TOKENS_LEGACY = 'share_view_tokens';
-const ShareViewTokenBodySchema = z.object({
-    userId: z.string(),
-    tokenHash: z.string(),
-    tokenPrefix: z.string(),
+exports.SHARE_VIEW_TOKENS_LEGACY = 'share_view_tokens';
+const ShareViewTokenBodySchema = zod_1.z.object({
+    userId: zod_1.z.string(),
+    tokenHash: zod_1.z.string(),
+    tokenPrefix: zod_1.z.string(),
     scope: ShareTokenScopeSchema,
-    createdAt: z.number(),
-    expiresAt: z.number().nullable(),
-    lastUsedAt: z.number().nullish(),
+    createdAt: zod_1.z.number(),
+    expiresAt: zod_1.z.number().nullable(),
+    lastUsedAt: zod_1.z.number().nullish(),
 });
-export const coreAuthRecordKinds = defineRecordKinds({
+exports.coreAuthRecordKinds = (0, types_1.defineRecordKinds)({
     'share-view-tokens': {
         schema: ShareViewTokenBodySchema,
         class: 'config',
@@ -30,6 +33,6 @@ export const coreAuthRecordKinds = defineRecordKinds({
             { name: 'user', fields: ['userId'] },
         ],
         retention: { none: 'revoke only; expiry enforced at validate' },
-        adoptsFrom: SHARE_VIEW_TOKENS_LEGACY,
+        adoptsFrom: exports.SHARE_VIEW_TOKENS_LEGACY,
     },
 });

package/dist/core/auth/share-token.service.js

@@ -1,3 +1,39 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ShareTokenService = exports.ShareTokenRecordSchema = exports.ShareTokenScopeSchema = exports.SHARE_TOKEN_MAX_DEVICES = exports.SHARE_TOKEN_TTL_DEFAULT_SEC = exports.SHARE_TOKEN_TTL_MAX_SEC = exports.SHARE_TOKEN_TTL_MIN_SEC = exports.SHARE_TOKEN_PREFIX = void 0;
 /**
  * ShareTokenService — scoped, TTL'd VIEW tokens for standalone share links
  * (grid rework R6: the embed page opened by a third party authenticates with
@@ -22,10 +58,10 @@
  * live in, reached directly instead of over the settings-store cap since
  * this service is hub-resident). Collection: `share_view_tokens`.
  */
-import * as crypto from 'node:crypto';
-import { z } from 'zod';
-import { SHARE_VIEW_KINDS, userError } from '@camstack/types';
-import { coreAuthRecordKinds } from './record-kinds.js';
+const crypto = __importStar(require("node:crypto"));
+const zod_1 = require("zod");
+const types_1 = require("@camstack/types");
+const record_kinds_js_1 = require("./record-kinds.js");
 /**
  * @durable class=config owner=core-auth
  *   write="a user mints a share link; and a best-effort lastUsedAt touch on every successful validation"
@@ -56,12 +92,12 @@ const SHARE_TOKENS_INDEXES = [
     { name: 'idx_share_view_tokens_user', columns: ['userId'] },
 ];
 /** Wire prefix — `csv_` = CamStack Share View (cf. `cst_` scoped tokens). */
-export const SHARE_TOKEN_PREFIX = 'csv_';
+exports.SHARE_TOKEN_PREFIX = 'csv_';
 // ── TTL / scope bounds (enforced at mint, re-checked by the router schema) ──
-export const SHARE_TOKEN_TTL_MIN_SEC = 60;
-export const SHARE_TOKEN_TTL_MAX_SEC = 30 * 24 * 60 * 60; // 30 days
-export const SHARE_TOKEN_TTL_DEFAULT_SEC = 7 * 24 * 60 * 60; // 7 days
-export const SHARE_TOKEN_MAX_DEVICES = 64;
+exports.SHARE_TOKEN_TTL_MIN_SEC = 60;
+exports.SHARE_TOKEN_TTL_MAX_SEC = 30 * 24 * 60 * 60; // 30 days
+exports.SHARE_TOKEN_TTL_DEFAULT_SEC = 7 * 24 * 60 * 60; // 7 days
+exports.SHARE_TOKEN_MAX_DEVICES = 64;
 /**
  * What a share token is allowed to see. Keyed on `kind` so future share
  * surfaces (single-camera view, recording clip, …) extend the set without
@@ -80,9 +116,9 @@ export const SHARE_TOKEN_MAX_DEVICES = 64;
  * Neither kind is a superset of the other — an events link cannot open a
  * WebRTC session, and a grid link cannot read a track.
  */
-export const ShareTokenScopeSchema = z.object({
-    kind: z.enum(SHARE_VIEW_KINDS),
-    deviceIds: z.array(z.number().int().nonnegative()).min(1).max(SHARE_TOKEN_MAX_DEVICES),
+exports.ShareTokenScopeSchema = zod_1.z.object({
+    kind: zod_1.z.enum(types_1.SHARE_VIEW_KINDS),
+    deviceIds: zod_1.z.array(zod_1.z.number().int().nonnegative()).min(1).max(exports.SHARE_TOKEN_MAX_DEVICES),
     /**
      * TALK-BACK, opt-in at mint time. Absent means OFF, and that is the whole
      * point: a share link is handed to third parties, so the difference between
@@ -98,24 +134,24 @@ export const ShareTokenScopeSchema = z.object({
      * It widens WHAT may be called, never WHICH cameras — `deviceIds` still
      * gates every talk call.
      */
-    talk: z.boolean().optional(),
+    talk: zod_1.z.boolean().optional(),
 });
 /** Persisted record — never leaves the server with `tokenHash` attached. */
-export const ShareTokenRecordSchema = z.object({
-    id: z.string(),
+exports.ShareTokenRecordSchema = zod_1.z.object({
+    id: zod_1.z.string(),
     /** The user that minted the share link (owner — may revoke it). */
-    userId: z.string(),
-    tokenHash: z.string(),
+    userId: zod_1.z.string(),
+    tokenHash: zod_1.z.string(),
     /** First 12 chars of the raw token — display/audit label only. */
-    tokenPrefix: z.string(),
-    scope: ShareTokenScopeSchema,
-    createdAt: z.number(),
+    tokenPrefix: zod_1.z.string(),
+    scope: exports.ShareTokenScopeSchema,
+    createdAt: zod_1.z.number(),
     /** Epoch ms — or `null` for a never-expiring token (explicit choice at mint). */
-    expiresAt: z.number().nullable(),
-    lastUsedAt: z.number().optional(),
+    expiresAt: zod_1.z.number().nullable(),
+    lastUsedAt: zod_1.z.number().optional(),
 });
 function parseShareToken(data) {
-    const parsed = ShareTokenRecordSchema.safeParse(data);
+    const parsed = exports.ShareTokenRecordSchema.safeParse(data);
     return parsed.success ? parsed.data : null;
 }
 function recordToBody(record) {
@@ -123,7 +159,7 @@ function recordToBody(record) {
     return body;
 }
 function rowToRecord(id, body) {
-    return ShareTokenRecordSchema.safeParse({ id, ...body }).data ?? null;
+    return exports.ShareTokenRecordSchema.safeParse({ id, ...body }).data ?? null;
 }
 async function readAllShareTokenRows(kind, where) {
     const out = [];
@@ -141,7 +177,7 @@ async function readAllShareTokenRows(kind, where) {
     }
     throw new Error('share-view-tokens: row count exceeds pagination bound');
 }
-export class ShareTokenService {
+class ShareTokenService {
     getStore;
     logger;
     /**
@@ -180,7 +216,7 @@ export class ShareTokenService {
     async persistRecord(record) {
         const kind = this.kind();
         if (kind !== null) {
-            const parsed = coreAuthRecordKinds['share-view-tokens'].schema.safeParse(recordToBody(record));
+            const parsed = record_kinds_js_1.coreAuthRecordKinds['share-view-tokens'].schema.safeParse(recordToBody(record));
             if (!parsed.success)
                 throw new Error(parsed.error.message);
             await kind.put({
@@ -244,16 +280,16 @@ export class ShareTokenService {
      * Returns the RAW token exactly once; only its hash is persisted.
      */
     async create(input) {
-        const scope = ShareTokenScopeSchema.parse(input.scope);
-        const ttlSec = input.ttlSec ?? SHARE_TOKEN_TTL_DEFAULT_SEC;
+        const scope = exports.ShareTokenScopeSchema.parse(input.scope);
+        const ttlSec = input.ttlSec ?? exports.SHARE_TOKEN_TTL_DEFAULT_SEC;
         if (ttlSec !== 'never' &&
             (!Number.isInteger(ttlSec) ||
-                ttlSec < SHARE_TOKEN_TTL_MIN_SEC ||
-                ttlSec > SHARE_TOKEN_TTL_MAX_SEC)) {
+                ttlSec < exports.SHARE_TOKEN_TTL_MIN_SEC ||
+                ttlSec > exports.SHARE_TOKEN_TTL_MAX_SEC)) {
             throw new Error(`Share token TTL out of bounds — got ${ttlSec}s, allowed ` +
-                `[${SHARE_TOKEN_TTL_MIN_SEC}s, ${SHARE_TOKEN_TTL_MAX_SEC}s] or 'never'`);
+                `[${exports.SHARE_TOKEN_TTL_MIN_SEC}s, ${exports.SHARE_TOKEN_TTL_MAX_SEC}s] or 'never'`);
         }
-        const rawToken = `${SHARE_TOKEN_PREFIX}${crypto.randomBytes(32).toString('hex')}`;
+        const rawToken = `${exports.SHARE_TOKEN_PREFIX}${crypto.randomBytes(32).toString('hex')}`;
         const now = Date.now();
         const record = {
             id: crypto.randomUUID(),
@@ -266,7 +302,7 @@ export class ShareTokenService {
         };
         const kind = this.kind();
         if (kind !== null) {
-            const parsed = coreAuthRecordKinds['share-view-tokens'].schema.safeParse(recordToBody(record));
+            const parsed = record_kinds_js_1.coreAuthRecordKinds['share-view-tokens'].schema.safeParse(recordToBody(record));
             if (!parsed.success)
                 throw new Error(parsed.error.message);
             await kind.put({
@@ -298,7 +334,7 @@ export class ShareTokenService {
      * Never throws on bad input — the auth boundary treats `null` as 401.
      */
     async validate(rawToken) {
-        if (!rawToken.startsWith(SHARE_TOKEN_PREFIX))
+        if (!rawToken.startsWith(exports.SHARE_TOKEN_PREFIX))
             return null;
         const tokenHash = crypto.createHash('sha256').update(rawToken).digest('hex');
         const kind = this.kind();
@@ -335,24 +371,24 @@ export class ShareTokenService {
      */
     async extend(input) {
         if (!Number.isInteger(input.ttlSec) ||
-            input.ttlSec < SHARE_TOKEN_TTL_MIN_SEC ||
-            input.ttlSec > SHARE_TOKEN_TTL_MAX_SEC) {
+            input.ttlSec < exports.SHARE_TOKEN_TTL_MIN_SEC ||
+            input.ttlSec > exports.SHARE_TOKEN_TTL_MAX_SEC) {
             throw new Error(`Share token TTL out of bounds — got ${input.ttlSec}s, allowed ` +
-                `[${SHARE_TOKEN_TTL_MIN_SEC}s, ${SHARE_TOKEN_TTL_MAX_SEC}s]`);
+                `[${exports.SHARE_TOKEN_TTL_MIN_SEC}s, ${exports.SHARE_TOKEN_TTL_MAX_SEC}s]`);
         }
         const record = await this.findById(input.id);
         if (record === null) {
-            throw userError('auth.share-token-not-found', { id: input.id }, `Share token not found: ${input.id}`);
+            throw (0, types_1.userError)('auth.share-token-not-found', { id: input.id }, `Share token not found: ${input.id}`);
         }
         if (!input.callerIsAdmin && record.userId !== input.callerUserId) {
-            throw userError('auth.share-owner-only-extend', undefined, 'Only the token owner or an admin can extend a share token');
+            throw (0, types_1.userError)('auth.share-owner-only-extend', undefined, 'Only the token owner or an admin can extend a share token');
         }
         if (record.expiresAt === null) {
-            throw userError('auth.share-never-expiring-extend', undefined, 'A never-expiring share token cannot be extended');
+            throw (0, types_1.userError)('auth.share-never-expiring-extend', undefined, 'A never-expiring share token cannot be extended');
         }
         const now = Date.now();
         if (now > record.expiresAt) {
-            throw userError('server.share-token-expired', { id: String(input.id) }, `Share token expired: ${input.id}`);
+            throw (0, types_1.userError)('server.share-token-expired', { id: String(input.id) }, `Share token expired: ${input.id}`);
         }
         const updated = {
             ...record,
@@ -378,7 +414,7 @@ export class ShareTokenService {
         if (record === null)
             return false;
         if (!input.callerIsAdmin && record.userId !== input.callerUserId) {
-            throw userError('auth.share-owner-only-revoke', undefined, 'Only the token owner or an admin can revoke a share token');
+            throw (0, types_1.userError)('auth.share-owner-only-revoke', undefined, 'Only the token owner or an admin can revoke a share token');
         }
         await this.deleteById(input.id);
         this.logger?.info('Share token revoked', {
@@ -420,3 +456,4 @@ export class ShareTokenService {
         await this.persistRecord({ ...record, lastUsedAt: Date.now() });
     }
 }
+exports.ShareTokenService = ShareTokenService;

package/dist/core/capability/capability.service.js

@@ -1,10 +1,13 @@
+"use strict";
 /**
  * CapabilityService — NestJS-injectable wrapper around the CapabilityRegistry.
  *
  * Server services inject this instead of accessing the registry directly.
  * The registry reference is set once during boot by AddonRegistryService.
  */
-export class CapabilityService {
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CapabilityService = void 0;
+class CapabilityService {
     registry = null;
     /** Called once during boot by AddonRegistryService to wire the registry */
     setRegistry(registry) {
@@ -52,3 +55,4 @@ export class CapabilityService {
         return this.registry?.resolveCollectionForDevice(capability, deviceId) ?? [];
     }
 }
+exports.CapabilityService = CapabilityService;

package/dist/core/config/config.schema.js

@@ -1,2 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RUNTIME_DEFAULTS = exports.bootstrapSchema = void 0;
 // Re-export from @camstack/system
-export { bootstrapSchema, RUNTIME_DEFAULTS } from '@camstack/system';
+var system_1 = require("@camstack/system");
+Object.defineProperty(exports, "bootstrapSchema", { enumerable: true, get: function () { return system_1.bootstrapSchema; } });
+Object.defineProperty(exports, "RUNTIME_DEFAULTS", { enumerable: true, get: function () { return system_1.RUNTIME_DEFAULTS; } });

package/dist/core/config/config.service.js

@@ -1,3 +1,7 @@
-import { ConfigManager } from '@camstack/system';
-export class ConfigService extends ConfigManager {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigService = void 0;
+const system_1 = require("@camstack/system");
+class ConfigService extends system_1.ConfigManager {
 }
+exports.ConfigService = ConfigService;

package/dist/core/events/event-bus.service.js

@@ -1,4 +1,7 @@
-import { getBrokerEventBus } from '@camstack/system';
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventBusService = void 0;
+const system_1 = require("@camstack/system");
 /**
  * Hub-side event bus. Pre-broker boot the service buffers nothing —
  * subscribers / emits are no-ops until `attachBroker` lands the
@@ -16,7 +19,7 @@ import { getBrokerEventBus } from '@camstack/system';
  * `systemEvents.subscribe`, which is enough for the operator to see
  * continuity across page reloads.
  */
-export class EventBusService {
+class EventBusService {
     broker = null;
     inner = null;
     // Used only as a loose ring buffer for the very first events emitted
@@ -38,7 +41,7 @@ export class EventBusService {
         // addon runners + remote agents leave `retainRecent` false: their events
         // are one-shot (fire-and-forget), fanned out to local subscribers but never
         // accumulated, so their heap can't grow an unbounded recent[] backlog.
-        const inner = getBrokerEventBus(broker, { retainRecent: true });
+        const inner = (0, system_1.getBrokerEventBus)(broker, { retainRecent: true });
         this.inner = inner;
         // Replay deferred subscriptions onto the real bus.
         for (const sub of this.deferredSubs) {
@@ -82,3 +85,4 @@ export class EventBusService {
         return this.inner?.getRecent(filter, limit) ?? [];
     }
 }
+exports.EventBusService = EventBusService;

package/dist/core/feature/feature.service.js

@@ -1,3 +1,7 @@
-import { FeatureManager } from '@camstack/system';
-export class FeatureService extends FeatureManager {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FeatureService = void 0;
+const system_1 = require("@camstack/system");
+class FeatureService extends system_1.FeatureManager {
 }
+exports.FeatureService = FeatureService;

package/dist/core/lifecycle/lifecycle-runner.singleton.js

@@ -1,3 +1,4 @@
+"use strict";
 /**
  * Process-wide singleton holder for the lifecycle job runner.
  *
@@ -7,15 +8,19 @@
  * at boot (from the `AddonPackageService` + event bus, wired in `manual-boot`)
  * and exposes it to every consumer.
  */
-import { createLifecycleJobRunner, } from '../../api/core/lifecycle-job-runner.js';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.initLifecycleRunner = initLifecycleRunner;
+exports.getLifecycleRunner = getLifecycleRunner;
+exports.__resetLifecycleRunnerForTests = __resetLifecycleRunnerForTests;
+const lifecycle_job_runner_js_1 = require("../../api/core/lifecycle-job-runner.js");
 let instance = null;
 /**
  * Build the runner once. Idempotent: a second call returns the already-built
  * instance and ignores the new deps (it does NOT rebuild).
  */
-export function initLifecycleRunner(deps) {
+function initLifecycleRunner(deps) {
     if (instance === null) {
-        instance = createLifecycleJobRunner(deps);
+        instance = (0, lifecycle_job_runner_js_1.createLifecycleJobRunner)(deps);
     }
     return instance;
 }
@@ -23,13 +28,13 @@ export function initLifecycleRunner(deps) {
  * Return the process-wide runner. Throws if `initLifecycleRunner` has not been
  * called yet (boot wiring is expected to init it before any consumer runs).
  */
-export function getLifecycleRunner() {
+function getLifecycleRunner() {
     if (instance === null) {
         throw new Error('lifecycle runner not initialized — call initLifecycleRunner(deps) at boot before use');
     }
     return instance;
 }
 /** Test-only: reset the singleton between specs. */
-export function __resetLifecycleRunnerForTests() {
+function __resetLifecycleRunnerForTests() {
     instance = null;
 }

package/dist/core/lifecycle/lifecycle-state-machine.js

@@ -1,2 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LifecycleStateMachine = void 0;
 // Re-export from @camstack/system — LifecycleStateMachine is already a plain class
-export { LifecycleStateMachine } from '@camstack/system';
+var system_1 = require("@camstack/system");
+Object.defineProperty(exports, "LifecycleStateMachine", { enumerable: true, get: function () { return system_1.LifecycleStateMachine; } });

package/dist/core/logging/log-ring-buffer.js

@@ -1,2 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LogRingBuffer = void 0;
 // Re-export from @camstack/system
-export { LogRingBuffer } from '@camstack/system';
+var system_1 = require("@camstack/system");
+Object.defineProperty(exports, "LogRingBuffer", { enumerable: true, get: function () { return system_1.LogRingBuffer; } });

package/dist/core/logging/logging.service.js

@@ -1,5 +1,8 @@
-import { LogManager } from '@camstack/system';
-import { EventCategory } from '@camstack/types';
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoggingService = void 0;
+const system_1 = require("@camstack/system");
+const types_1 = require("@camstack/types");
 /** Baseline tags every hub-local logger gets, so console output never
  *  falls back to `?` for the agent slot. Hub-local addons already
  *  re-tag with their addonId; this ensures non-addon scopes (core
@@ -10,7 +13,7 @@ import { EventCategory } from '@camstack/types';
  *  forked workers via `$hub.log` carry their own `tags.pid` which
  *  wins over this baseline (right-biased merge in `writeFromWorker`). */
 const HUB_BASELINE_TAGS = { agentId: 'hub', nodeId: 'hub', pid: process.pid };
-export class LoggingService extends LogManager {
+class LoggingService extends system_1.LogManager {
     /**
      * Device-name cache consulted by the formatter when a log line
      * carries `tags.deviceId` but no explicit `deviceName`. Populated
@@ -74,7 +77,7 @@ export class LoggingService extends LogManager {
      */
     attachDeviceNameStream(eventBus) {
         const selfLogger = this.createLogger('logging').withTags({ addonId: 'logging' });
-        eventBus.subscribe({ category: EventCategory.DeviceRegistered }, (event) => {
+        eventBus.subscribe({ category: types_1.EventCategory.DeviceRegistered }, (event) => {
             const data = event.data;
             if (data && typeof data.deviceId === 'number') {
                 this.upsertDeviceName(data.deviceId, data.name);
@@ -87,7 +90,7 @@ export class LoggingService extends LogManager {
                 });
             }
         });
-        eventBus.subscribe({ category: EventCategory.DeviceUnregistered }, (event) => {
+        eventBus.subscribe({ category: types_1.EventCategory.DeviceUnregistered }, (event) => {
             const data = event.data;
             if (data && typeof data.deviceId === 'number')
                 this.removeDeviceName(data.deviceId);
@@ -134,3 +137,4 @@ export class LoggingService extends LogManager {
         }
     }
 }
+exports.LoggingService = LoggingService;

package/dist/core/logging/scoped-logger.js

@@ -1,2 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopedLogger = void 0;
 // Re-export from @camstack/system
-export { ScopedLogger } from '@camstack/system';
+var system_1 = require("@camstack/system");
+Object.defineProperty(exports, "ScopedLogger", { enumerable: true, get: function () { return system_1.ScopedLogger; } });

package/dist/core/moleculer/agent-readiness-pull.js

@@ -1,3 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.filterAgentAuthoritativeRecords = filterAgentAuthoritativeRecords;
 const VALID_STATES = new Set(['starting', 'ready', 'down']);
 const VALID_SCOPE_TYPES = new Set(['global', 'node', 'device']);
 /** Structural validation for a record received from a remote node. */
@@ -24,7 +27,7 @@ function isWellFormedRecord(value) {
  * Keep only the records `agentNodeId` is authoritative for, dropping
  * malformed entries. See module doc for why this filter must exist.
  */
-export function filterAgentAuthoritativeRecords(records, agentNodeId) {
+function filterAgentAuthoritativeRecords(records, agentNodeId) {
     if (!Array.isArray(records))
         return [];
     return records.filter((record) => {

package/dist/core/moleculer/agent-registration-request.js

@@ -1,3 +1,4 @@
+"use strict";
 /**
  * The hub asks a (re)connected agent for its capability set.
  *
@@ -17,7 +18,10 @@
  * be asked: that is said, with whether the hub holds its registration, so an
  * online-but-capless node is never silent.
  */
-export const AGENT_REQUEST_REGISTRATION_ACTION = '$agent.requestRegistration';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_REQUEST_REGISTRATION_ACTION = void 0;
+exports.requestAgentRegistration = requestAgentRegistration;
+exports.AGENT_REQUEST_REGISTRATION_ACTION = '$agent.requestRegistration';
 function errorType(err) {
     if (typeof err !== 'object' || err === null)
         return null;
@@ -28,9 +32,9 @@ function errorText(err) {
     return err instanceof Error ? err.message : String(err);
 }
 /** Ask `nodeId` to re-send its complete capability manifest. Never throws. */
-export async function requestAgentRegistration(deps, nodeId) {
+async function requestAgentRegistration(deps, nodeId) {
     try {
-        await deps.call(AGENT_REQUEST_REGISTRATION_ACTION, {}, { nodeID: nodeId });
+        await deps.call(exports.AGENT_REQUEST_REGISTRATION_ACTION, {}, { nodeID: nodeId });
         return 'requested';
     }
     catch (err) {