@camstack/system 1.0.2

package/dist/tls/cert-manager.d.ts

@@ -0,0 +1,26 @@
+export interface TlsCertPair {
+    readonly cert: Buffer;
+    readonly key: Buffer;
+}
+export interface EnsureTlsResult {
+    readonly certPath: string;
+    readonly keyPath: string;
+    readonly generated: boolean;
+}
+export interface CertOptions {
+    /** Common Name for the cert (default: 'camstack.local') */
+    readonly commonName?: string;
+    /** Validity in days (default: 825 — max for browsers) */
+    readonly validDays?: number;
+    /** Additional SANs (DNS names or IPs) */
+    readonly extraSans?: readonly string[];
+}
+/**
+ * Ensure a self-signed TLS certificate exists in the given directory.
+ * Generates one if missing. Returns paths to cert and key files.
+ */
+export declare function ensureTlsCert(dataDir: string, options?: CertOptions): Promise<EnsureTlsResult>;
+/**
+ * Load TLS cert+key from files. Returns Buffers suitable for Node.js TLS options.
+ */
+export declare function loadTlsCert(certPath: string, keyPath: string): TlsCertPair;

package/dist/tls/index.d.ts

@@ -0,0 +1 @@
+export { ensureTlsCert, loadTlsCert, type TlsCertPair, type EnsureTlsResult, type CertOptions, } from './cert-manager.js';

package/package.json

@@ -0,0 +1,343 @@
+{
+  "name": "@camstack/system",
+  "version": "1.0.2",
+  "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
+  "keywords": [
+    "camstack",
+    "core",
+    "addon",
+    "camera",
+    "nvr"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/camstack/server"
+  },
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "camstack": {
+    "system": true,
+    "displayName": "CamStack Core",
+    "addons": [
+      {
+        "id": "filesystem-storage",
+        "category": "system",
+        "name": "Filesystem Storage",
+        "entry": "./dist/builtins/sqlite-storage/filesystem-storage.addon.js",
+        "capabilities": [
+          {
+            "name": "storage-provider"
+          },
+          {
+            "name": "filesystem-browse"
+          }
+        ],
+        "storageLocations": [
+          {
+            "id": "data",
+            "displayName": "Local Data",
+            "description": "SQLite database and core state.",
+            "cardinality": "single"
+          }
+        ]
+      },
+      {
+        "id": "sqlite-settings",
+        "category": "system",
+        "name": "SQLite Settings",
+        "entry": "./dist/builtins/sqlite-storage/sqlite-settings.addon.js",
+        "capabilities": [
+          {
+            "name": "settings-store"
+          }
+        ],
+        "storageLocations": [
+          {
+            "id": "addons-data",
+            "displayName": "Addons Data",
+            "description": "Per-addon persistent store.",
+            "cardinality": "single"
+          }
+        ]
+      },
+      {
+        "id": "winston-logging",
+        "category": "system",
+        "name": "Winston Logging",
+        "entry": "./dist/builtins/winston-logging/index.js",
+        "capabilities": [
+          {
+            "name": "log-destination"
+          }
+        ],
+        "storageLocations": [
+          {
+            "id": "logs",
+            "displayName": "Logs",
+            "description": "Rotated log files.",
+            "cardinality": "single"
+          }
+        ]
+      },
+      {
+        "id": "console-logging",
+        "category": "system",
+        "name": "Console Logging",
+        "entry": "./dist/builtins/console-logging/index.js",
+        "capabilities": [
+          {
+            "name": "log-destination"
+          }
+        ]
+      },
+      {
+        "id": "hub-forwarder",
+        "category": "system",
+        "name": "Hub Log Forwarder",
+        "description": "Agent-only log destination — forwards every log entry to the hub via the cluster broker. Never runs on the hub itself (the hub already owns the log-receiver, registering hub-forwarder there would create a write→ingest→write feedback loop).",
+        "entry": "./dist/builtins/hub-forwarder/index.js",
+        "execution": {
+          "placement": "agent-only"
+        },
+        "capabilities": [
+          {
+            "name": "log-destination"
+          }
+        ]
+      },
+      {
+        "id": "backup-orchestrator",
+        "category": "system",
+        "name": "Backup Orchestrator",
+        "description": "System singleton that owns the schedule, builds the archive once, and fans it out to every enabled `backup-destination` provider (local, S3, rsync, …). In-process on hub root — aggregator over a cluster collection, no native deps.",
+        "entry": "./dist/builtins/backup-orchestrator/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "backup"
+          }
+        ],
+        "storageLocations": [
+          {
+            "id": "backups",
+            "displayName": "Backups",
+            "description": "Backup archives.",
+            "cardinality": "multi"
+          }
+        ]
+      },
+      {
+        "id": "storage-orchestrator",
+        "category": "system",
+        "name": "Storage Orchestrator",
+        "description": "Hub-only singleton that owns the consumer-facing `storage` cap. Holds the `locationId → StorageLocation` map, resolves `StorageLocationRef` to concrete locations, and dispatches every call to the matching `storage-provider` collection registrant (`filesystem-storage` today; future SFTP / S3 / WebDAV addons plug in alongside).",
+        "entry": "./dist/builtins/storage-orchestrator/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "storage"
+          }
+        ]
+      },
+      {
+        "id": "metrics-native",
+        "category": "system",
+        "name": "Native Metrics",
+        "entry": "./dist/builtins/native-metrics/native-metrics.addon.js",
+        "capabilities": [
+          {
+            "name": "metrics-provider"
+          }
+        ]
+      },
+      {
+        "id": "snapshot",
+        "category": "system",
+        "name": "Snapshot",
+        "entry": "./dist/builtins/snapshot/index.js",
+        "capabilities": [
+          {
+            "name": "snapshot"
+          }
+        ]
+      },
+      {
+        "id": "alert-center",
+        "category": "system",
+        "name": "Alert Center",
+        "entry": "./dist/builtins/alerts/index.js",
+        "capabilities": [
+          {
+            "name": "alerts"
+          }
+        ]
+      },
+      {
+        "id": "system-config",
+        "category": "system",
+        "name": "System Config",
+        "description": "Exposes cluster-wide yml-backed configuration sections (server, auth, ffmpeg, logging, recording, retention) via the three-level settings API. Hub-only.",
+        "entry": "./dist/builtins/system-config/index.js",
+        "protected": true
+      },
+      {
+        "id": "addon-pages-aggregator",
+        "category": "system",
+        "name": "Addon Pages Aggregator",
+        "description": "Hub-only singleton that aggregates `addon-pages-source` (collection) providers and emits the public `addon-pages.listPages` surface with versioned bundleUrls.",
+        "entry": "./dist/builtins/addon-pages-aggregator/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "addon-pages"
+          }
+        ]
+      },
+      {
+        "id": "addon-widgets-aggregator",
+        "category": "system",
+        "name": "Addon Widgets Aggregator",
+        "description": "Hub-only singleton that aggregates `addon-widgets-source` (collection) providers and emits the public `addon-widgets.listWidgets` surface with versioned bundleUrls.",
+        "entry": "./dist/builtins/addon-widgets-aggregator/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "addon-widgets"
+          }
+        ]
+      },
+      {
+        "id": "device-manager",
+        "category": "system",
+        "name": "Device Manager",
+        "description": "Hub-side singleton that unifies device persistence and management. Uses ctx.settings for storage — no direct SQLite access. Replaces device-persistence cap (Phase 2 will delete device-persistence once all consumers are migrated).",
+        "entry": "./dist/builtins/device-manager/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "device-manager"
+          },
+          {
+            "name": "device-state"
+          }
+        ]
+      },
+      {
+        "id": "local-auth",
+        "category": "system",
+        "name": "Local Auth",
+        "description": "Built-in local username/password authentication. Implements the auth-provider capability as the default login path. OIDC and other providers can register alongside via the same capability.",
+        "entry": "./dist/builtins/local-auth/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "auth-provider"
+          },
+          {
+            "name": "user-management"
+          }
+        ]
+      },
+      {
+        "id": "platform-probe",
+        "category": "system",
+        "name": "Platform Probe (Native)",
+        "description": "Probes hardware and inference runtimes on the local node. Registers the `platform-probe` capability consumed by every inference addon on this node.",
+        "entry": "./dist/builtins/platform-probe/index.js",
+        "protected": true,
+        "execution": {
+          "placement": "any-node"
+        },
+        "capabilities": [
+          {
+            "name": "platform-probe"
+          }
+        ]
+      },
+      {
+        "id": "local-network",
+        "category": "system",
+        "name": "Local Network",
+        "description": "Enumerates the hub's network interfaces, classifies them (LAN / Wi-Fi / Docker / VPN / loopback), and ranks connection-endpoints for SDK clients. Hub-only — agents are not directly addressable.",
+        "entry": "./dist/builtins/local-network/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "local-network"
+          }
+        ]
+      },
+      {
+        "id": "remote-access-orchestrator",
+        "category": "system",
+        "name": "Remote Access Orchestrator",
+        "description": "Hub-only singleton facade over the network-access collection (Cloudflare Tunnel, ngrok, …). Surfaces a unified provider list to the admin UI's Remote Access page.",
+        "entry": "./dist/builtins/remote-access-orchestrator/index.js",
+        "protected": true,
+        "capabilities": [
+          {
+            "name": "remote-access"
+          }
+        ]
+      }
+    ]
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "vite build",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "publish": "npm publish --access public"
+  },
+  "dependencies": {
+    "@camstack/types": "*",
+    "@camstack/sdk": "*",
+    "@camstack/shm-ring": "*",
+    "@msgpack/msgpack": "^3.1.3",
+    "@trpc/client": "^11.16.0",
+    "@trpc/server": "^11.16.0",
+    "bcryptjs": "^3.0.3",
+    "better-sqlite3": "^12.8.0",
+    "croner": "^10.0.1",
+    "js-yaml": "^4.1.0",
+    "jsonwebtoken": "^9.0.0",
+    "moleculer": "^0.15.0",
+    "otplib": "12.0.1",
+    "superjson": "^2.2.0",
+    "systeminformation": "^5.0.0",
+    "tar": "6.2.1",
+    "winston": "^3.19.0",
+    "winston-daily-rotate-file": "^5.0.0",
+    "zod": "^4.3.6"
+  },
+  "peerDependencies": {
+    "@camstack/types": "*"
+  },
+  "devDependencies": {
+    "@camstack/types": "*",
+    "@types/bcryptjs": "^2.4.6",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/js-yaml": "^4.0.9",
+    "@types/jsonwebtoken": "^9.0.0",
+    "@types/tar": "^6.1.13",
+    "tsup": "^8.0.0",
+    "typescript": "~6.0.3",
+    "vite": "^8.0.11",
+    "vite-plugin-dts": "^5.0.0",
+    "vitest": "^3.0.0"
+  }
+}