@camstack/system 1.1.43 → 1.1.45

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.d.ts

@@ -43,8 +43,14 @@ export declare class AddonWidgetsAggregatorAddon extends BaseAddon {
      * just gets a fresh URL on each call instead of cache-friendly mtime.
      */
     private makeBundleUrl;
-    /** sha1(content) 12-hex of a bundle entry file, memoised; `Date.now()` when absent. */
-    private bundleVersionTag;
+    /**
+     * sha1 (12-hex) over EVERY file in the bundle's dist dir — content, not
+     * mtime (reproducible builds fix mtime, so mtime never busts). Memoised by
+     * the dir's (name:size:mtime) fingerprint; a redeploy that changes any
+     * file's content changes its size and re-hashes. `Date.now()` when the
+     * bundle has no local file (remote addon).
+     */
+    private bundleDirVersionTag;
     private resolveBundlePath;
     private resolvePaths;
 }

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -198,19 +198,34 @@ var AddonWidgetsAggregatorAddon = class extends require_dist.BaseAddon {
 	*/
 	makeBundleUrl(addonId, bundle) {
 		const bundlePath = this.resolveBundlePath(addonId, bundle);
-		return `/api/addon-widgets/${addonId}/${bundle}?v=${this.bundleVersionTag(bundlePath)}`;
+		return `/api/addon-widgets/${addonId}/v${this.bundleDirVersionTag(bundlePath)}/${bundle}`;
 	}
-	/** sha1(content) 12-hex of a bundle entry file, memoised; `Date.now()` when absent. */
-	bundleVersionTag(bundlePath) {
-		if (bundlePath === null) return String(Math.floor(Date.now()));
+	/**
+	* sha1 (12-hex) over EVERY file in the bundle's dist dir — content, not
+	* mtime (reproducible builds fix mtime, so mtime never busts). Memoised by
+	* the dir's (name:size:mtime) fingerprint; a redeploy that changes any
+	* file's content changes its size and re-hashes. `Date.now()` when the
+	* bundle has no local file (remote addon).
+	*/
+	bundleDirVersionTag(entryPath) {
+		if (entryPath === null) return String(Math.floor(Date.now()));
 		try {
-			const stat = node_fs.statSync(bundlePath);
-			const cacheKey = `${bundlePath}:${stat.size}:${stat.mtimeMs}`;
+			const dir = node_path.dirname(entryPath);
+			const files = node_fs.readdirSync(dir).filter((f) => node_fs.statSync(node_path.join(dir, f)).isFile()).sort();
+			const cacheKey = `${dir}#${files.map((f) => {
+				const s = node_fs.statSync(node_path.join(dir, f));
+				return `${f}:${s.size}:${s.mtimeMs}`;
+			}).join("|")}`;
 			const cached = this.bundleHashCache.get(cacheKey);
 			if (cached !== void 0) return cached;
-			const hash = (0, node_crypto.createHash)("sha1").update(node_fs.readFileSync(bundlePath)).digest("hex").slice(0, 12);
-			this.bundleHashCache.set(cacheKey, hash);
-			return hash;
+			const hash = (0, node_crypto.createHash)("sha1");
+			for (const f of files) {
+				hash.update(f);
+				hash.update(node_fs.readFileSync(node_path.join(dir, f)));
+			}
+			const digest = hash.digest("hex").slice(0, 12);
+			this.bundleHashCache.set(cacheKey, digest);
+			return digest;
 		} catch {
 			return String(Math.floor(Date.now()));
 		}

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -191,19 +191,34 @@ var AddonWidgetsAggregatorAddon = class extends BaseAddon {
 	*/
 	makeBundleUrl(addonId, bundle) {
 		const bundlePath = this.resolveBundlePath(addonId, bundle);
-		return `/api/addon-widgets/${addonId}/${bundle}?v=${this.bundleVersionTag(bundlePath)}`;
+		return `/api/addon-widgets/${addonId}/v${this.bundleDirVersionTag(bundlePath)}/${bundle}`;
 	}
-	/** sha1(content) 12-hex of a bundle entry file, memoised; `Date.now()` when absent. */
-	bundleVersionTag(bundlePath) {
-		if (bundlePath === null) return String(Math.floor(Date.now()));
+	/**
+	* sha1 (12-hex) over EVERY file in the bundle's dist dir — content, not
+	* mtime (reproducible builds fix mtime, so mtime never busts). Memoised by
+	* the dir's (name:size:mtime) fingerprint; a redeploy that changes any
+	* file's content changes its size and re-hashes. `Date.now()` when the
+	* bundle has no local file (remote addon).
+	*/
+	bundleDirVersionTag(entryPath) {
+		if (entryPath === null) return String(Math.floor(Date.now()));
 		try {
-			const stat = fs.statSync(bundlePath);
-			const cacheKey = `${bundlePath}:${stat.size}:${stat.mtimeMs}`;
+			const dir = path$1.dirname(entryPath);
+			const files = fs.readdirSync(dir).filter((f) => fs.statSync(path$1.join(dir, f)).isFile()).sort();
+			const cacheKey = `${dir}#${files.map((f) => {
+				const s = fs.statSync(path$1.join(dir, f));
+				return `${f}:${s.size}:${s.mtimeMs}`;
+			}).join("|")}`;
 			const cached = this.bundleHashCache.get(cacheKey);
 			if (cached !== void 0) return cached;
-			const hash = createHash("sha1").update(fs.readFileSync(bundlePath)).digest("hex").slice(0, 12);
-			this.bundleHashCache.set(cacheKey, hash);
-			return hash;
+			const hash = createHash("sha1");
+			for (const f of files) {
+				hash.update(f);
+				hash.update(fs.readFileSync(path$1.join(dir, f)));
+			}
+			const digest = hash.digest("hex").slice(0, 12);
+			this.bundleHashCache.set(cacheKey, digest);
+			return digest;
 		} catch {
 			return String(Math.floor(Date.now()));
 		}

package/dist/index.js

@@ -5007,6 +5007,23 @@ var CapabilityRegistry = class CapabilityRegistry {
 * `buildCapRouters(t, services)` contract), keeping the kernel free of any
 * backend coupling (self-sufficiency invariant).
 */
+/**
+* The mount kind a `systemOnly` method resolves through — the cap's
+* SYSTEM/wrapper provider, keyed off the cap's `mode` (singleton or
+* collection), NEVER the per-device native.
+*
+* A `systemOnly` method (declared via the `systemMethod()` factory) belongs
+* to the cap's hub-resident system/wrapper provider — e.g. a device-scoped
+* (`device-native`) cap exposing a batch/metadata call that takes `deviceIds`
+* (an ARRAY) rather than a single `deviceId`. Routing it through the cap's
+* `device-native` mount would push it into `requireDeviceScoped`, whose
+* dispatcher demands a numeric `deviceId` on EVERY method call and rejects a
+* deviceId-less input with `input must carry numeric "deviceId"`. Resolving it
+* as the cap's mode-appropriate system provider instead keeps it reachable.
+*/
+function systemMountKindFor(def) {
+	return def.mode === "collection" ? "collection" : "singleton";
+}
 function methodsFor(def) {
 	const effective = require_dist.expandCapMethods(def);
 	return Object.entries(effective).map(([name, schema]) => {
@@ -5065,11 +5082,13 @@ function requireLocal(capName, getLocal, services) {
 function buildOneCapRouter(def, primitives, services) {
 	const capName = def.name;
 	const mount = require_dist.resolveCapMount(def);
-	const isCollection = mount.kind === "collection";
+	const systemMountKind = systemMountKindFor(def);
 	const nodeIdData = def.nodeIdMode === "data";
 	const procedures = {};
-	const getLocal = (ctx, addonId) => services.getLocalProvider(capName, mount.kind, ctx, addonId);
 	for (const method of methodsFor(def)) {
+		const effectiveMountKind = method.schema.systemOnly === true ? systemMountKind : mount.kind;
+		const isCollection = effectiveMountKind === "collection";
+		const getLocal = (ctx, addonId) => services.getLocalProvider(capName, effectiveMountKind, ctx, addonId);
 		const base = primitives.procedures[require_dist.procedureAuthKey(method.auth)];
 		const inputSchema = method.schema.input;
 		if (method.kind === "subscription") {

package/dist/index.mjs

@@ -4999,6 +4999,23 @@ var CapabilityRegistry = class CapabilityRegistry {
 * `buildCapRouters(t, services)` contract), keeping the kernel free of any
 * backend coupling (self-sufficiency invariant).
 */
+/**
+* The mount kind a `systemOnly` method resolves through — the cap's
+* SYSTEM/wrapper provider, keyed off the cap's `mode` (singleton or
+* collection), NEVER the per-device native.
+*
+* A `systemOnly` method (declared via the `systemMethod()` factory) belongs
+* to the cap's hub-resident system/wrapper provider — e.g. a device-scoped
+* (`device-native`) cap exposing a batch/metadata call that takes `deviceIds`
+* (an ARRAY) rather than a single `deviceId`. Routing it through the cap's
+* `device-native` mount would push it into `requireDeviceScoped`, whose
+* dispatcher demands a numeric `deviceId` on EVERY method call and rejects a
+* deviceId-less input with `input must carry numeric "deviceId"`. Resolving it
+* as the cap's mode-appropriate system provider instead keeps it reachable.
+*/
+function systemMountKindFor(def) {
+	return def.mode === "collection" ? "collection" : "singleton";
+}
 function methodsFor(def) {
 	const effective = expandCapMethods(def);
 	return Object.entries(effective).map(([name, schema]) => {
@@ -5057,11 +5074,13 @@ function requireLocal(capName, getLocal, services) {
 function buildOneCapRouter(def, primitives, services) {
 	const capName = def.name;
 	const mount = resolveCapMount(def);
-	const isCollection = mount.kind === "collection";
+	const systemMountKind = systemMountKindFor(def);
 	const nodeIdData = def.nodeIdMode === "data";
 	const procedures = {};
-	const getLocal = (ctx, addonId) => services.getLocalProvider(capName, mount.kind, ctx, addonId);
 	for (const method of methodsFor(def)) {
+		const effectiveMountKind = method.schema.systemOnly === true ? systemMountKind : mount.kind;
+		const isCollection = effectiveMountKind === "collection";
+		const getLocal = (ctx, addonId) => services.getLocalProvider(capName, effectiveMountKind, ctx, addonId);
 		const base = primitives.procedures[procedureAuthKey(method.auth)];
 		const inputSchema = method.schema.input;
 		if (method.kind === "subscription") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.1.43",
+  "version": "1.1.45",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",