@camstack/system 1.1.43 → 1.1.44

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.d.ts

@@ -43,8 +43,14 @@ export declare class AddonWidgetsAggregatorAddon extends BaseAddon {
      * just gets a fresh URL on each call instead of cache-friendly mtime.
      */
     private makeBundleUrl;
-    /** sha1(content) 12-hex of a bundle entry file, memoised; `Date.now()` when absent. */
-    private bundleVersionTag;
+    /**
+     * sha1 (12-hex) over EVERY file in the bundle's dist dir — content, not
+     * mtime (reproducible builds fix mtime, so mtime never busts). Memoised by
+     * the dir's (name:size:mtime) fingerprint; a redeploy that changes any
+     * file's content changes its size and re-hashes. `Date.now()` when the
+     * bundle has no local file (remote addon).
+     */
+    private bundleDirVersionTag;
     private resolveBundlePath;
     private resolvePaths;
 }

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -198,19 +198,34 @@ var AddonWidgetsAggregatorAddon = class extends require_dist.BaseAddon {
 	*/
 	makeBundleUrl(addonId, bundle) {
 		const bundlePath = this.resolveBundlePath(addonId, bundle);
-		return `/api/addon-widgets/${addonId}/${bundle}?v=${this.bundleVersionTag(bundlePath)}`;
+		return `/api/addon-widgets/${addonId}/v${this.bundleDirVersionTag(bundlePath)}/${bundle}`;
 	}
-	/** sha1(content) 12-hex of a bundle entry file, memoised; `Date.now()` when absent. */
-	bundleVersionTag(bundlePath) {
-		if (bundlePath === null) return String(Math.floor(Date.now()));
+	/**
+	* sha1 (12-hex) over EVERY file in the bundle's dist dir — content, not
+	* mtime (reproducible builds fix mtime, so mtime never busts). Memoised by
+	* the dir's (name:size:mtime) fingerprint; a redeploy that changes any
+	* file's content changes its size and re-hashes. `Date.now()` when the
+	* bundle has no local file (remote addon).
+	*/
+	bundleDirVersionTag(entryPath) {
+		if (entryPath === null) return String(Math.floor(Date.now()));
 		try {
-			const stat = node_fs.statSync(bundlePath);
-			const cacheKey = `${bundlePath}:${stat.size}:${stat.mtimeMs}`;
+			const dir = node_path.dirname(entryPath);
+			const files = node_fs.readdirSync(dir).filter((f) => node_fs.statSync(node_path.join(dir, f)).isFile()).sort();
+			const cacheKey = `${dir}#${files.map((f) => {
+				const s = node_fs.statSync(node_path.join(dir, f));
+				return `${f}:${s.size}:${s.mtimeMs}`;
+			}).join("|")}`;
 			const cached = this.bundleHashCache.get(cacheKey);
 			if (cached !== void 0) return cached;
-			const hash = (0, node_crypto.createHash)("sha1").update(node_fs.readFileSync(bundlePath)).digest("hex").slice(0, 12);
-			this.bundleHashCache.set(cacheKey, hash);
-			return hash;
+			const hash = (0, node_crypto.createHash)("sha1");
+			for (const f of files) {
+				hash.update(f);
+				hash.update(node_fs.readFileSync(node_path.join(dir, f)));
+			}
+			const digest = hash.digest("hex").slice(0, 12);
+			this.bundleHashCache.set(cacheKey, digest);
+			return digest;
 		} catch {
 			return String(Math.floor(Date.now()));
 		}

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -191,19 +191,34 @@ var AddonWidgetsAggregatorAddon = class extends BaseAddon {
 	*/
 	makeBundleUrl(addonId, bundle) {
 		const bundlePath = this.resolveBundlePath(addonId, bundle);
-		return `/api/addon-widgets/${addonId}/${bundle}?v=${this.bundleVersionTag(bundlePath)}`;
+		return `/api/addon-widgets/${addonId}/v${this.bundleDirVersionTag(bundlePath)}/${bundle}`;
 	}
-	/** sha1(content) 12-hex of a bundle entry file, memoised; `Date.now()` when absent. */
-	bundleVersionTag(bundlePath) {
-		if (bundlePath === null) return String(Math.floor(Date.now()));
+	/**
+	* sha1 (12-hex) over EVERY file in the bundle's dist dir — content, not
+	* mtime (reproducible builds fix mtime, so mtime never busts). Memoised by
+	* the dir's (name:size:mtime) fingerprint; a redeploy that changes any
+	* file's content changes its size and re-hashes. `Date.now()` when the
+	* bundle has no local file (remote addon).
+	*/
+	bundleDirVersionTag(entryPath) {
+		if (entryPath === null) return String(Math.floor(Date.now()));
 		try {
-			const stat = fs.statSync(bundlePath);
-			const cacheKey = `${bundlePath}:${stat.size}:${stat.mtimeMs}`;
+			const dir = path$1.dirname(entryPath);
+			const files = fs.readdirSync(dir).filter((f) => fs.statSync(path$1.join(dir, f)).isFile()).sort();
+			const cacheKey = `${dir}#${files.map((f) => {
+				const s = fs.statSync(path$1.join(dir, f));
+				return `${f}:${s.size}:${s.mtimeMs}`;
+			}).join("|")}`;
 			const cached = this.bundleHashCache.get(cacheKey);
 			if (cached !== void 0) return cached;
-			const hash = createHash("sha1").update(fs.readFileSync(bundlePath)).digest("hex").slice(0, 12);
-			this.bundleHashCache.set(cacheKey, hash);
-			return hash;
+			const hash = createHash("sha1");
+			for (const f of files) {
+				hash.update(f);
+				hash.update(fs.readFileSync(path$1.join(dir, f)));
+			}
+			const digest = hash.digest("hex").slice(0, 12);
+			this.bundleHashCache.set(cacheKey, digest);
+			return digest;
 		} catch {
 			return String(Math.floor(Date.now()));
 		}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.1.43",
+  "version": "1.1.44",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",