@camstack/server 1.2.594 → 1.2.596

package/dist/agent/register-agent-cap-dispatch.js

@@ -1,3 +1,4 @@
+"use strict";
 /**
  * Extracted, testable helper for registering the agent-side cap-dispatch
  * service with a Moleculer broker.
@@ -6,7 +7,9 @@
  * (undefined → no-op; defined → create service) can be exercised in a unit
  * test independently of the full bootstrap lifecycle.
  */
-import { createAgentCapDispatchService } from './agent-cap-dispatch-service.js';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAgentCapDispatch = registerAgentCapDispatch;
+const agent_cap_dispatch_service_js_1 = require("./agent-cap-dispatch-service.js");
 // ---------------------------------------------------------------------------
 // Exported helper
 // ---------------------------------------------------------------------------
@@ -27,8 +30,8 @@ import { createAgentCapDispatchService } from './agent-cap-dispatch-service.js';
  *                           of failing with "no provider".
  * @param logger             Optional scoped logger forwarded to the service.
  */
-export function registerAgentCapDispatch(registrar, agentUdsRegistry, inProcessLookup, logger) {
+function registerAgentCapDispatch(registrar, agentUdsRegistry, inProcessLookup, logger) {
     if (agentUdsRegistry === undefined)
         return;
-    registrar.createService(createAgentCapDispatchService(registrar.nodeID, agentUdsRegistry, inProcessLookup, logger));
+    registrar.createService((0, agent_cap_dispatch_service_js_1.createAgentCapDispatchService)(registrar.nodeID, agentUdsRegistry, inProcessLookup, logger));
 }

package/dist/agent/serial-queue.js

@@ -1,4 +1,8 @@
-export class SerialQueueTimeoutError extends Error {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SerialQueueTimeoutError = void 0;
+exports.createSerialQueue = createSerialQueue;
+class SerialQueueTimeoutError extends Error {
     deadlineMs;
     constructor(deadlineMs) {
         super(`the job did not finish within ${deadlineMs} ms and was abandoned`);
@@ -6,12 +10,13 @@ export class SerialQueueTimeoutError extends Error {
         this.name = 'SerialQueueTimeoutError';
     }
 }
+exports.SerialQueueTimeoutError = SerialQueueTimeoutError;
 function defaultSetTimer(fn, ms) {
     const timer = setTimeout(fn, ms);
     timer.unref?.();
     return { cancel: () => clearTimeout(timer) };
 }
-export function createSerialQueue(job, options = {}) {
+function createSerialQueue(job, options = {}) {
     let tail = Promise.resolve();
     const setTimer = options.setTimer ?? defaultSetTimer;
     const guarded = () => {

package/dist/agent-status-page.js

@@ -1,3 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderAgentStatusPage = renderAgentStatusPage;
 function formatUptime(seconds) {
     const days = Math.floor(seconds / 86400);
     const hours = Math.floor((seconds % 86400) / 3600);
@@ -22,7 +25,7 @@ function escapeHtml(str) {
  * No React, no build system. Pure HTML + inline CSS.
  * Designed for local debugging only.
  */
-export function renderAgentStatusPage(data) {
+function renderAgentStatusPage(data) {
     const statusColor = data.connected ? '#22c55e' : '#ef4444';
     const statusText = data.connected ? 'Connected' : 'Disconnected';
     const memUsedMB = data.memoryTotalMB - data.memoryFreeMB;

package/dist/api/addon-upload.js

@@ -1,14 +1,53 @@
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-import { isFrameworkPackage } from '../core/addon/addon-package.service.js';
-import { detectWorkspaceRoot } from '../server-root/index.js';
-import { deliverAddonToAgent, } from './agent-addon-delivery.js';
-import { DeployStageRegistry } from './deploy-stage-registry.js';
-import { isTarballFilename, readTarballManifest } from './tarball-manifest.js';
-import { authorizeUploadRequest } from './upload-auth.js';
-const deployStageRegistry = new DeployStageRegistry();
-export function getDeployStageRegistry() {
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDeployStageRegistry = getDeployStageRegistry;
+exports.registerDeployBundleRoute = registerDeployBundleRoute;
+exports.buildHubHttpSource = buildHubHttpSource;
+exports.registerAddonUploadRoute = registerAddonUploadRoute;
+const fs = __importStar(require("node:fs"));
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
+const addon_package_service_js_1 = require("../core/addon/addon-package.service.js");
+const index_js_1 = require("../server-root/index.js");
+const agent_addon_delivery_js_1 = require("./agent-addon-delivery.js");
+const deploy_stage_registry_js_1 = require("./deploy-stage-registry.js");
+const tarball_manifest_js_1 = require("./tarball-manifest.js");
+const upload_auth_js_1 = require("./upload-auth.js");
+const deployStageRegistry = new deploy_stage_registry_js_1.DeployStageRegistry();
+function getDeployStageRegistry() {
     return deployStageRegistry;
 }
 /**
@@ -16,7 +55,7 @@ export function getDeployStageRegistry() {
  * the per-deploy token minted in `DeployStageRegistry.stage()` and carried to
  * the agent in the `$agent.deploy` `hub-http` source descriptor.
  */
-export function registerDeployBundleRoute(fastify) {
+function registerDeployBundleRoute(fastify) {
     // `compress: false` — never gzip/brotli this route. The body is a large
     // binary tarball (addon bundle / model artifact) the agent pulls with undici
     // + sha256 verification. With global @fastify/compress on, the 1–2MB response
@@ -63,7 +102,7 @@ async function resolveBaseUrlOrReason(resolve) {
         return { ok: false, error: err instanceof Error ? err.message : String(err) };
     }
 }
-export function buildHubHttpSource(buffer, hubBaseUrl) {
+function buildHubHttpSource(buffer, hubBaseUrl) {
     const staged = getDeployStageRegistry().stage(buffer);
     return {
         kind: 'hub-http',
@@ -73,7 +112,7 @@ export function buildHubHttpSource(buffer, hubBaseUrl) {
         bytes: staged.bytes,
     };
 }
-export async function registerAddonUploadRoute(fastify, addonBridge, authService, moleculer, addonRegistry, addonPackageService, logger, 
+async function registerAddonUploadRoute(fastify, addonBridge, authService, moleculer, addonRegistry, addonPackageService, logger, 
 /**
  * The base URL agents pull the staged bundle from — the `local-network`
  * cap's cluster address (`hub-cluster-url.ts`), resolved per delivery.
@@ -86,7 +125,7 @@ resolveClusterBaseUrl,
  * not build one; `main.ts` always passes the AgentRegistryService's.
  */
 deliveryLedger) {
-    await fastify.register(import('@fastify/multipart'), {
+    await fastify.register(Promise.resolve().then(() => __importStar(require('@fastify/multipart'))), {
         limits: { fileSize: MAX_UPLOAD_BYTES },
     });
     registerDeployBundleRoute(fastify);
@@ -94,7 +133,7 @@ deliveryLedger) {
         // Auth chain (shared with /api/server-upload): JWT (isAdmin) OR scoped
         // token whose scopes grant `create` access on the `addons` capability.
         // See upload-auth.ts for the full rationale.
-        const auth = await authorizeUploadRequest({
+        const auth = await (0, upload_auth_js_1.authorizeUploadRequest)({
             authHeader: request.headers.authorization,
             authService,
             addonRegistry,
@@ -106,7 +145,7 @@ deliveryLedger) {
         if (!data) {
             return reply.status(400).send({ error: 'No file uploaded' });
         }
-        if (!isTarballFilename(data.filename)) {
+        if (!(0, tarball_manifest_js_1.isTarballFilename)(data.filename)) {
             return reply.status(400).send({ error: 'File must be a .tgz or .tar.gz archive' });
         }
         // Drain the file part FIRST. `data.fields` is the plugin's live `body`
@@ -131,7 +170,7 @@ deliveryLedger) {
         // Gate: reject archives that don't expose a parseable package.json with
         // name + version. The hub installer did this implicitly via npm; the
         // agent path would otherwise fail mid-extraction with no clean rollback.
-        const manifest = readTarballManifest(buffer, data.filename);
+        const manifest = (0, tarball_manifest_js_1.readTarballManifest)(buffer, data.filename);
         if (!manifest) {
             return reply.status(400).send({
                 error: 'Tarball missing or malformed package/package.json (name + version required)',
@@ -217,7 +256,7 @@ async function propagateToAgents(moleculer, logger, packageName, buffer, resolve
         // yet. Wiring it later must also make the agent's npm path evict the addon's
         // declaration ids before `$agent.reload`, otherwise an npm update pins the
         // stale version.
-        results.push(await deliverAddonToAgent({
+        results.push(await (0, agent_addon_delivery_js_1.deliverAddonToAgent)({
             broker,
             logger,
             nodeId,
@@ -280,7 +319,7 @@ async function installToHub(reply, addonBridge, addonRegistry, addonPackageServi
         // settings. The new code is now on disk; a clean server restart reloads it
         // and re-runs boot initialization. The 10s restart grace lets this response
         // flush before the process exits, so the CLI sees a clean confirmation.
-        if (isFrameworkPackage(result.name)) {
+        if ((0, addon_package_service_js_1.isFrameworkPackage)(result.name)) {
             // Framework live-sync is GONE (superseded by the runtime-updatable root
             // package — the hub main + its framework deps now update as ONE
             // `@camstack/server` closure via the `server-management` cap).
@@ -290,7 +329,7 @@ async function installToHub(reply, addonBridge, addonRegistry, addonPackageServi
             // BEFORE uploading — a plain restart loads the new code, no mirror
             // needed. `camstack deploy packages/system` therefore keeps working in
             // dev unchanged.
-            const workspaceRoot = detectWorkspaceRoot(__dirname);
+            const workspaceRoot = (0, index_js_1.detectWorkspaceRoot)(__dirname);
             if (workspaceRoot !== null) {
                 logger.info('framework package deployed (workspace) — scheduling server restart', {
                     meta: { packageName: result.name, packageVersion: result.version, workspaceRoot },
@@ -407,7 +446,7 @@ async function deployToAgent(reply, moleculer, logger, nodeId, addonId, buffer,
     // yet. Wiring it later must also make the agent's npm path evict the addon's
     // declaration ids before `$agent.reload`, otherwise an npm update pins the
     // stale version.
-    const result = await deliverAddonToAgent({
+    const result = await (0, agent_addon_delivery_js_1.deliverAddonToAgent)({
         broker: moleculer.broker,
         logger,
         nodeId,

package/dist/api/agent-addon-delivery.js

@@ -1,3 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_RELOAD_TIMEOUT_MS = exports.AGENT_DEPLOY_CONTROL_TIMEOUT_MS = void 0;
+exports.isAgentDeployResponse = isAgentDeployResponse;
+exports.deliverAddonToAgent = deliverAddonToAgent;
 /**
  * Delivering an addon bundle to an agent — the single implementation.
  *
@@ -40,13 +45,13 @@
  * exactly like a deploy that worked. `agent-deploy-timeout.spec.ts` pins the
  * relationship so they cannot separate again.
  */
-export const AGENT_DEPLOY_CONTROL_TIMEOUT_MS = 300_000;
+exports.AGENT_DEPLOY_CONTROL_TIMEOUT_MS = 300_000;
 /**
  * `$agent.reload` re-forks group runners and re-registers their capabilities —
  * legitimately slow on a node with a Python inference pool.
  */
-export const AGENT_RELOAD_TIMEOUT_MS = 60_000;
-export function isAgentDeployResponse(value) {
+exports.AGENT_RELOAD_TIMEOUT_MS = 60_000;
+function isAgentDeployResponse(value) {
     if (value === null || typeof value !== 'object')
         return false;
     const v = value;
@@ -74,7 +79,7 @@ function readLoaded(value) {
  * Never throws: a per-node failure is returned so one unreachable agent cannot
  * abort a cluster propagation or the hub's own install.
  */
-export async function deliverAddonToAgent(args) {
+async function deliverAddonToAgent(args) {
     const { broker, logger, nodeId, packageName, source } = args;
     // Opened BEFORE the first byte and closed in the `finally` below — the window
     // must cover `$agent.deploy` (which evicts the package's declaration ids) AND
@@ -82,7 +87,7 @@ export async function deliverAddonToAgent(args) {
     // happy path.
     const closeWindow = args.deliveryLedger?.begin(nodeId, packageName);
     try {
-        const deployRaw = await broker.call('$agent.deploy', { addonId: packageName, source }, { nodeID: nodeId, timeout: AGENT_DEPLOY_CONTROL_TIMEOUT_MS });
+        const deployRaw = await broker.call('$agent.deploy', { addonId: packageName, source }, { nodeID: nodeId, timeout: exports.AGENT_DEPLOY_CONTROL_TIMEOUT_MS });
         if (!isAgentDeployResponse(deployRaw)) {
             logger.warn('agent deploy: malformed deploy response', {
                 meta: { nodeId, packageName },
@@ -114,7 +119,7 @@ export async function deliverAddonToAgent(args) {
         });
         // Reload. Without this the deploy is write-to-disk-only and the node keeps
         // running the previous dist — the whole point of this module.
-        const reloadRaw = await broker.call('$agent.reload', {}, { nodeID: nodeId, timeout: AGENT_RELOAD_TIMEOUT_MS });
+        const reloadRaw = await broker.call('$agent.reload', {}, { nodeID: nodeId, timeout: exports.AGENT_RELOAD_TIMEOUT_MS });
         const loaded = readLoaded(reloadRaw);
         if (loaded.length === 0) {
             // Not fatal — a reload can legitimately find nothing to (re)instantiate

package/dist/api/auth-whoami.js

@@ -1,4 +1,7 @@
-export async function registerAuthWhoamiRoute(fastify, authService, addonRegistry) {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAuthWhoamiRoute = registerAuthWhoamiRoute;
+async function registerAuthWhoamiRoute(fastify, authService, addonRegistry) {
     fastify.get('/api/auth/whoami', async (request, reply) => {
         const authHeader = request.headers.authorization;
         if (!authHeader) {

package/dist/api/backup-download-pump.js

@@ -1,3 +1,4 @@
+"use strict";
 /**
  * backup-download-pump — a backup archive is streamed at the pace the client
  * READS it, and a client that stops reading is cut, never buffered until
@@ -42,15 +43,18 @@
  * `warn` for a cut client or a failed source. The route previously logged
  * nothing on success and `console.error` on failure.
  */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BACKUP_DOWNLOAD_DRAIN_GRACE_MS = exports.BACKUP_DOWNLOAD_CHUNK_BYTES = void 0;
+exports.pumpDownload = pumpDownload;
 /** Bytes read from the storage cap per round trip; one chunk is the most the response holds. */
-export const BACKUP_DOWNLOAD_CHUNK_BYTES = 8 * 1024 * 1024;
+exports.BACKUP_DOWNLOAD_CHUNK_BYTES = 8 * 1024 * 1024;
 /**
  * How long a `write` may stay unacknowledged by `drain` before the client is
  * cut. A `ServerResponse` signals `drain` once the socket has taken its
  * buffer (16 KiB by default): a client that cannot take 16 KiB in a minute is
  * under 0.3 KB/s — not a slow link, an absent reader.
  */
-export const BACKUP_DOWNLOAD_DRAIN_GRACE_MS = 60_000;
+exports.BACKUP_DOWNLOAD_DRAIN_GRACE_MS = 60_000;
 function waitForDrain(sink, graceMs) {
     return new Promise((resolve) => {
         const settle = (outcome) => {
@@ -74,10 +78,10 @@ function errorOf(err) {
  * next only once the socket has taken the previous. Never throws: every exit
  * is a {@link PumpResult} the caller can log.
  */
-export async function pumpDownload(options) {
+async function pumpDownload(options) {
     const { sizeBytes, read, sink } = options;
-    const chunkBytes = options.chunkBytes ?? BACKUP_DOWNLOAD_CHUNK_BYTES;
-    const graceMs = options.graceMs ?? BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
+    const chunkBytes = options.chunkBytes ?? exports.BACKUP_DOWNLOAD_CHUNK_BYTES;
+    const graceMs = options.graceMs ?? exports.BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
     const now = options.now ?? (() => Date.now());
     const startedAt = now();
     let offset = 0;

package/dist/api/backup-download.js

@@ -1,13 +1,16 @@
-import { BACKUP_DOWNLOAD_CHUNK_BYTES, BACKUP_DOWNLOAD_DRAIN_GRACE_MS, pumpDownload, } from './backup-download-pump.js';
-import { extractClientIp } from './trpc/client-ip.js';
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerBackupDownloadRoute = registerBackupDownloadRoute;
+const backup_download_pump_js_1 = require("./backup-download-pump.js");
+const client_ip_js_1 = require("./trpc/client-ip.js");
 /** Strip what would break the `Content-Disposition` header. Whitespace is fine. */
 function safeAttachmentName(name) {
     return name.replace(/[\r\n"]/g, '_');
 }
-export function registerBackupDownloadRoute(fastify, options) {
+function registerBackupDownloadRoute(fastify, options) {
     const { verifier, capabilities, logger } = options;
-    const chunkBytes = options.chunkBytes ?? BACKUP_DOWNLOAD_CHUNK_BYTES;
-    const graceMs = options.graceMs ?? BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
+    const chunkBytes = options.chunkBytes ?? backup_download_pump_js_1.BACKUP_DOWNLOAD_CHUNK_BYTES;
+    const graceMs = options.graceMs ?? backup_download_pump_js_1.BACKUP_DOWNLOAD_DRAIN_GRACE_MS;
     fastify.get('/api/backup/download/:locationId/:archiveId', async (request, reply) => {
         const authHeader = request.headers.authorization;
         if (!authHeader) {
@@ -57,13 +60,13 @@ export function registerBackupDownloadRoute(fastify, options) {
             archiveId,
             filename: archive.filename,
             sizeBytes,
-            ip: extractClientIp(request.raw) ?? '(unidentified)',
+            ip: (0, client_ip_js_1.extractClientIp)(request.raw) ?? '(unidentified)',
             chunkBytes,
             graceMs,
         };
         let result;
         try {
-            result = await pumpDownload({
+            result = await (0, backup_download_pump_js_1.pumpDownload)({
                 sizeBytes,
                 chunkBytes,
                 graceMs,

package/dist/api/core/addon-settings.router.js

@@ -1,3 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAddonSettingsRouter = createAddonSettingsRouter;
 /**
  * `addonSettingsRaw` — admin read of an addon's RAW stored settings.
  *
@@ -53,21 +56,21 @@
  * merging (defaults → global → per-device). That happens on the consumer side
  * where the addon's `ConfigUISchema` is available.
  */
-import { TRPCError } from '@trpc/server';
-import { isSettingsReadUnavailable } from '@camstack/system';
-import { z } from 'zod';
-import { trpcRouter, adminProcedure } from '../trpc/trpc.middleware.js';
-const AddonSettingsRecordSchema = z.record(z.string(), z.unknown());
-const AddonIdInputSchema = z.object({
-    addonId: z.string().min(1),
+const server_1 = require("@trpc/server");
+const system_1 = require("@camstack/system");
+const zod_1 = require("zod");
+const trpc_middleware_js_1 = require("../trpc/trpc.middleware.js");
+const AddonSettingsRecordSchema = zod_1.z.record(zod_1.z.string(), zod_1.z.unknown());
+const AddonIdInputSchema = zod_1.z.object({
+    addonId: zod_1.z.string().min(1),
 });
 /**
  * `deviceId` stays a STRING on the wire (the shape callers already send) but
  * must be a numeric device id: the per-device rows are keyed by the numeric id.
  */
-const AddonDeviceInputSchema = z.object({
-    addonId: z.string().min(1),
-    deviceId: z.string().regex(/^\d+$/, 'deviceId must be a numeric device id'),
+const AddonDeviceInputSchema = zod_1.z.object({
+    addonId: zod_1.z.string().min(1),
+    deviceId: zod_1.z.string().regex(/^\d+$/, 'deviceId must be a numeric device id'),
 });
 /** A settings read that could not be answered is an error, never `{}`. */
 async function answerOrRefuse(read) {
@@ -75,20 +78,20 @@ async function answerOrRefuse(read) {
         return await read();
     }
     catch (err) {
-        if (isSettingsReadUnavailable(err)) {
-            throw new TRPCError({ code: 'SERVICE_UNAVAILABLE', message: err.message, cause: err });
+        if ((0, system_1.isSettingsReadUnavailable)(err)) {
+            throw new server_1.TRPCError({ code: 'SERVICE_UNAVAILABLE', message: err.message, cause: err });
         }
         throw err;
     }
 }
-export function createAddonSettingsRouter(cfg) {
-    return trpcRouter({
+function createAddonSettingsRouter(cfg) {
+    return (0, trpc_middleware_js_1.trpcRouter)({
         /**
          * The addon-global stored record for the given addon — raw values, no
          * defaults, no device overrides. `{}` only when the store answered with no
          * row for this addon; a failed read is `SERVICE_UNAVAILABLE`.
          */
-        getGlobal: adminProcedure
+        getGlobal: trpc_middleware_js_1.adminProcedure
             .input(AddonIdInputSchema)
             .output(AddonSettingsRecordSchema)
             .query(({ input }) => answerOrRefuse(() => cfg.readAddonGlobalStrict(input.addonId))),
@@ -97,7 +100,7 @@ export function createAddonSettingsRouter(cfg) {
          * values. `{}` only when the store answered with none; a failed read is
          * `SERVICE_UNAVAILABLE`.
          */
-        getDeviceOverrides: adminProcedure
+        getDeviceOverrides: trpc_middleware_js_1.adminProcedure
             .input(AddonDeviceInputSchema)
             .output(AddonSettingsRecordSchema)
             .query(({ input }) => answerOrRefuse(() => cfg.readAddonDeviceStrict(input.addonId, Number(input.deviceId)))),