@camstack/system 1.2.390 → 1.2.391

package/dist/addon/addon-api-factory.d.ts

@@ -1,35 +1,35 @@
 /**
- * Factory for creating tRPC clients for addons.
- *
- * In-process only: `createDirectCaller()` uses tRPC's `createCallerFactory`
- * to call procedures directly (zero network overhead) and wraps the raw
- * caller in a proxy so it matches `CreateTRPCClient<AppRouter>` shape —
- * addons use `context.api.namespace.method.query(input)` identically to
- * the cross-process path.
- *
- * Cross-process calls (forked workers, remote agents) ride the Moleculer
- * broker via `brokerTransportLink` in the kernel — not this factory.
- */
+* Factory for creating tRPC clients for addons.
+*
+* In-process only: `createDirectCaller()` uses tRPC's `createCallerFactory`
+* to call procedures directly (zero network overhead) and wraps the raw
+* caller in a proxy so it matches `CreateTRPCClient<AppRouter>` shape —
+* addons use `context.api.namespace.method.query(input)` identically to
+* the cross-process path.
+*
+* Cross-process calls (forked workers, remote agents) ride the Moleculer
+* broker via `brokerTransportLink` in the kernel — not this factory.
+*/
 export interface DirectCallerOptions {
-    /** The tRPC router instance (from buildAppRouter) */
-    readonly router: unknown;
-    /** Context for the caller (user identity, etc.) */
-    readonly context: {
-        readonly user: {
-            readonly id: string;
-            readonly username: string;
-            readonly role: string;
-        };
-    };
+	/** The tRPC router instance (from buildAppRouter) */
+	readonly router: unknown;
+	/** Context for the caller (user identity, etc.) */
+	readonly context: {
+		readonly user: {
+			readonly id: string;
+			readonly username: string;
+			readonly role: string;
+		};
+	};
 }
 export declare class AddonApiFactory {
-    /**
-     * Create a direct caller -- calls tRPC procedures directly in-process.
-     * Zero network overhead. Used for in-process addons and dev mode.
-     *
-     * Returns `AddonApi` — the same tRPC client surface that broker-routed
-     * callers get. Callers treat it uniformly as `context.api` regardless
-     * of the underlying transport.
-     */
-    createDirectCaller(options: DirectCallerOptions): Promise<import('@camstack/types').AddonApi>;
+	/**
+	* Create a direct caller -- calls tRPC procedures directly in-process.
+	* Zero network overhead. Used for in-process addons and dev mode.
+	*
+	* Returns `AddonApi` — the same tRPC client surface that broker-routed
+	* callers get. Callers treat it uniformly as `context.api` regardless
+	* of the underlying transport.
+	*/
+	createDirectCaller(options: DirectCallerOptions): Promise<import("@camstack/types").AddonApi>;
 }

package/dist/addon-routes/addon-route-registry.d.ts

@@ -1,37 +1,37 @@
-import { IAddonHttpRoute, IAddonRouteProvider } from '@camstack/types';
+import type { IAddonHttpRoute, IAddonRouteProvider } from "@camstack/types";
 interface RouteMatch {
-    readonly route: IAddonHttpRoute;
-    readonly addonId: string;
-    readonly params: Record<string, string>;
+	readonly route: IAddonHttpRoute;
+	readonly addonId: string;
+	readonly params: Record<string, string>;
 }
 /**
- * Registry for dynamic HTTP routes registered by addons.
- * Framework-agnostic — the server HTTP layer queries this registry to dispatch requests.
- */
+* Registry for dynamic HTTP routes registered by addons.
+* Framework-agnostic — the server HTTP layer queries this registry to dispatch requests.
+*/
 export declare class AddonRouteRegistry {
-    private readonly routes;
-    /**
-     * Register all routes from an addon's route provider.
-     */
-    registerRoutes(addonId: string, provider: IAddonRouteProvider): void;
-    /**
-     * Unregister all routes for an addon.
-     */
-    unregisterRoutes(addonId: string): void;
-    /**
-     * Match an incoming request method + path to a registered route.
-     * Supports simple path parameters (e.g., /items/:id).
-     */
-    matchRoute(method: string, path: string): RouteMatch | null;
-    /**
-     * List all registered routes across all addons.
-     */
-    listRoutes(): ReadonlyArray<{
-        addonId: string;
-        method: string;
-        path: string;
-        access: string;
-        description?: string;
-    }>;
+	private readonly routes;
+	/**
+	* Register all routes from an addon's route provider.
+	*/
+	registerRoutes(addonId: string, provider: IAddonRouteProvider): void;
+	/**
+	* Unregister all routes for an addon.
+	*/
+	unregisterRoutes(addonId: string): void;
+	/**
+	* Match an incoming request method + path to a registered route.
+	* Supports simple path parameters (e.g., /items/:id).
+	*/
+	matchRoute(method: string, path: string): RouteMatch | null;
+	/**
+	* List all registered routes across all addons.
+	*/
+	listRoutes(): ReadonlyArray<{
+		addonId: string;
+		method: string;
+		path: string;
+		access: string;
+		description?: string;
+	}>;
 }
 export {};

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-nURMuVTX.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-Bnr8brru.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { Ft as installManifestNativeDeps, H as createUdsLoggerWithControl, It as resolveAddonClass, St as validateProviderRegistrations, U as LocalChildClient, _n as startRunnerHeapWatch, _t as getWorkerNativeCapProvider, bt as setWorkerNativeCapsChangeListener, f as installManifestSystemDeps, g as createUdsAddonContext, i as killOwnRunnerGroupAfterParentLoss, in as RUNNER_RSS_BUDGET_ENV, kn as emitHeapDiagnosticReport, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, vt as getWorkerNativeCapSnapshot } from "./child-cap-dispatch-B1gyE35b.mjs";
+import { Ct as setWorkerNativeCapsChangeListener, G as createUdsLoggerWithControl, K as LocalChildClient, Mn as emitHeapDiagnosticReport, Rt as installManifestNativeDeps, Tt as validateProviderRegistrations, bn as startRunnerHeapWatch, bt as getWorkerNativeCapProvider, f as installManifestSystemDeps, g as createUdsAddonContext, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, sn as RUNNER_RSS_BUDGET_ENV, u as startRunnerParentDeathWatchdog, xt as getWorkerNativeCapSnapshot, zt as resolveAddonClass } from "./child-cap-dispatch-mHO_6r0G.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/addon-utils.d.ts

@@ -1,23 +1,23 @@
 /**
- * Lightweight addon-facing utility surface for `@camstack/system`.
- *
- * Importing the root barrel (`@camstack/system`) loads the ENTIRE framework —
- * the kernel (moleculer) + every builtin addon (sqlite-storage, winston-logging,
- * device-manager, …) — ~64MB of V8 heap PER process, even when an addon only
- * needs a model-download or data-plane helper. Node has no runtime tree-shaking
- * and the package is host-provided (loaded as the prebuilt barrel), so every
- * addon that imported one util from the barrel paid the full ~64MB — multiplied
- * across every forked pipeline runner.
- *
- * This subpath re-exports ONLY the addon-facing helpers, each from its DEEP,
- * kernel-free source module, so importing it costs a few MB instead of ~64MB.
- *
- * See memory: camstack_runner_ram_and_build_rootcause.
- */
-export { adoptModelRevisions, downloadFile, ensureModel, isModelDownloaded, resolveFormatRevision, type ModelRevisionAdoption, deleteModelFromDisk, collectModelFiles, getModelFilePath, isModelDownloadHttpError, ModelDownloadHttpError, type DownloadFileOptions, type DownloadRedirectPolicy, } from './download/model-downloader.js';
-export { ModelDownloadService } from './download/model-download-service.js';
-export { createFileDataPlaneHandler } from './http/file-data-plane.js';
-export { parseRangeHeader, contentTypeFor, type ByteRange, } from './http/authenticated-file-server.js';
-export { CustomActionRegistry } from './kernel/custom-action-registry.js';
-export { attributeStall, STALL_REPORT_MS, STALL_TICK_MS, startEventLoopStallMonitor, type StallVerdict, } from './kernel/event-loop-stall-monitor.js';
-export { renderCourtesyJpeg, renderCourtesyOverlayJpeg, courtesyCacheKey, COURTESY_DEFAULT_WIDTH, type CourtesyReason, type CourtesyFrameSpec, } from './builtins/snapshot/snapshot-courtesy.js';
+* Lightweight addon-facing utility surface for `@camstack/system`.
+*
+* Importing the root barrel (`@camstack/system`) loads the ENTIRE framework —
+* the kernel (moleculer) + every builtin addon (sqlite-storage, winston-logging,
+* device-manager, …) — ~64MB of V8 heap PER process, even when an addon only
+* needs a model-download or data-plane helper. Node has no runtime tree-shaking
+* and the package is host-provided (loaded as the prebuilt barrel), so every
+* addon that imported one util from the barrel paid the full ~64MB — multiplied
+* across every forked pipeline runner.
+*
+* This subpath re-exports ONLY the addon-facing helpers, each from its DEEP,
+* kernel-free source module, so importing it costs a few MB instead of ~64MB.
+*
+* See memory: camstack_runner_ram_and_build_rootcause.
+*/
+export { adoptModelRevisions, downloadFile, ensureModel, isModelDownloaded, resolveFormatRevision, type ModelRevisionAdoption, deleteModelFromDisk, collectModelFiles, getModelFilePath, isModelDownloadHttpError, ModelDownloadHttpError, type DownloadFileOptions, type DownloadRedirectPolicy } from "./download/model-downloader.js";
+export { ModelDownloadService } from "./download/model-download-service.js";
+export { createFileDataPlaneHandler } from "./http/file-data-plane.js";
+export { parseRangeHeader, contentTypeFor, type ByteRange } from "./http/authenticated-file-server.js";
+export { CustomActionRegistry } from "./kernel/custom-action-registry.js";
+export { attributeStall, STALL_REPORT_MS, STALL_TICK_MS, startEventLoopStallMonitor, type StallVerdict } from "./kernel/event-loop-stall-monitor.js";
+export { renderCourtesyJpeg, renderCourtesyOverlayJpeg, courtesyCacheKey, COURTESY_DEFAULT_WIDTH, type CourtesyReason, type CourtesyFrameSpec } from "./builtins/snapshot/snapshot-courtesy.js";

package/dist/auth/admin-token-manager.d.ts

@@ -1,75 +1,45 @@
-import { SettingsStoreClient } from '@camstack/types';
+import type { CollectionColumn, SettingsStoreClient } from "@camstack/types";
 /**
- * @durable class=config owner=local-auth
- *   write="an admin creates a token (after re-authentication); `lastUsedAt` is
- *     rewritten at most once a minute while it is used; `revoke` stamps revokedAt"
- *   retention="the daily reap deletes rows expired or revoked more than 30 days ago"
- */
+* @durable class=config owner=local-auth
+*   write="an admin creates a token (after re-authentication); `lastUsedAt` is
+*     rewritten at most once a minute while it is used; `revoke` stamps revokedAt"
+*   retention="the daily reap deletes rows expired or revoked more than 30 days ago"
+*/
 export declare const ADMIN_TOKENS_COLLECTION = "admin_tokens";
-export declare const ADMIN_TOKENS_COLUMNS: ({
-    name: string;
-    type: "TEXT";
-    primaryKey: boolean;
-    notNull: boolean;
-    unique?: undefined;
-} | {
-    name: string;
-    type: "TEXT";
-    notNull: boolean;
-    primaryKey?: undefined;
-    unique?: undefined;
-} | {
-    name: string;
-    type: "TEXT";
-    notNull: boolean;
-    unique: boolean;
-    primaryKey?: undefined;
-} | {
-    name: string;
-    type: "INTEGER";
-    notNull: boolean;
-    primaryKey?: undefined;
-    unique?: undefined;
-} | {
-    name: string;
-    type: "INTEGER";
-    primaryKey?: undefined;
-    notNull?: undefined;
-    unique?: undefined;
-})[];
+export declare const ADMIN_TOKENS_COLUMNS: readonly CollectionColumn[];
 export declare const ADMIN_TOKEN_PREFIX = "csa_";
 export declare const ADMIN_TOKEN_MAX_LIFETIME_MS: number;
 export interface AdminTokenRecord {
-    readonly id: string;
-    readonly createdBy: string;
-    readonly name: string;
-    readonly tokenPrefix: string;
-    readonly createdAt: number;
-    readonly expiresAt: number;
-    readonly lastUsedAt: number | null;
-    readonly revokedAt: number | null;
+	readonly id: string;
+	readonly createdBy: string;
+	readonly name: string;
+	readonly tokenPrefix: string;
+	readonly createdAt: number;
+	readonly expiresAt: number;
+	readonly lastUsedAt: number | null;
+	readonly revokedAt: number | null;
 }
 export declare class AdminTokenManager {
-    private readonly store;
-    private readonly now;
-    constructor(store: SettingsStoreClient, now?: () => number);
-    /** Mint a token for `createdBy`. Refuses an expiry in the past or past 90 days. */
-    create(input: {
-        readonly createdBy: string;
-        readonly name: string;
-        readonly expiresAt: number;
-    }): Promise<{
-        readonly token: string;
-        readonly record: AdminTokenRecord;
-    }>;
-    /** The live record behind `token`, or `null` (unknown, revoked, expired, not a `csa_`). */
-    validate(token: string): Promise<AdminTokenRecord | null>;
-    /** Every token not yet reaped, newest first (no hashes). */
-    list(): Promise<readonly AdminTokenRecord[]>;
-    /** Revoke one token. `false` when unknown or already revoked. */
-    revoke(id: string): Promise<boolean>;
-    /** Revoke every live token `userId` created (the user was deleted). */
-    revokeAllCreatedBy(userId: string): Promise<number>;
-    /** Delete rows expired or revoked more than 30 days ago. */
-    reap(): Promise<number>;
+	private readonly store;
+	private readonly now;
+	constructor(store: SettingsStoreClient, now?: () => number);
+	/** Mint a token for `createdBy`. Refuses an expiry in the past or past 90 days. */
+	create(input: {
+		readonly createdBy: string;
+		readonly name: string;
+		readonly expiresAt: number;
+	}): Promise<{
+		readonly token: string;
+		readonly record: AdminTokenRecord;
+	}>;
+	/** The live record behind `token`, or `null` (unknown, revoked, expired, not a `csa_`). */
+	validate(token: string): Promise<AdminTokenRecord | null>;
+	/** Every token not yet reaped, newest first (no hashes). */
+	list(): Promise<readonly AdminTokenRecord[]>;
+	/** Revoke one token. `false` when unknown or already revoked. */
+	revoke(id: string): Promise<boolean>;
+	/** Revoke every live token `userId` created (the user was deleted). */
+	revokeAllCreatedBy(userId: string): Promise<number>;
+	/** Delete rows expired or revoked more than 30 days ago. */
+	reap(): Promise<number>;
 }

package/dist/auth/api-key-manager.d.ts

@@ -1,13 +1,13 @@
-import { ApiKeyRecord, SettingsStoreClient } from '@camstack/types';
+import type { ApiKeyRecord, SettingsStoreClient } from "@camstack/types";
 export type { ApiKeyRecord };
 export interface ApiKeyStorageAccess {
-    getStore(): SettingsStoreClient;
+	getStore(): SettingsStoreClient;
 }
 export declare class ApiKeyManager {
-    private readonly storageAccess;
-    constructor(storageAccess: ApiKeyStorageAccess);
-    private get store();
-    listAll(): Promise<Omit<ApiKeyRecord, 'tokenHash'>[]>;
-    revoke(id: string): Promise<void>;
-    findById(id: string): Promise<ApiKeyRecord | null>;
+	private readonly storageAccess;
+	constructor(storageAccess: ApiKeyStorageAccess);
+	private get store();
+	listAll(): Promise<Omit<ApiKeyRecord, "tokenHash">[]>;
+	revoke(id: string): Promise<void>;
+	findById(id: string): Promise<ApiKeyRecord | null>;
 }

package/dist/auth/auth-audit-log.d.ts

@@ -1,59 +1,39 @@
-import { IScopedLogger, SettingsStoreClient } from '@camstack/types';
+import type { CollectionColumn, IScopedLogger, SettingsStoreClient } from "@camstack/types";
 /**
- * @durable class=ledger owner=local-auth
- *   write="one row per audited auth event: a second factor skipped from a trusted
- *     network, an admin token created / used / revoked, a bulk revoke of credentials"
- *   retention="the daily reap deletes rows older than 90 days"
- */
+* @durable class=ledger owner=local-auth
+*   write="one row per audited auth event: a second factor skipped from a trusted
+*     network, an admin token created / used / revoked, a bulk revoke of credentials"
+*   retention="the daily reap deletes rows older than 90 days"
+*/
 export declare const AUTH_AUDIT_COLLECTION = "auth_audit";
-export declare const AUTH_AUDIT_COLUMNS: ({
-    name: string;
-    type: "TEXT";
-    primaryKey: boolean;
-    notNull: boolean;
-} | {
-    name: string;
-    type: "INTEGER";
-    notNull: boolean;
-    primaryKey?: undefined;
-} | {
-    name: string;
-    type: "TEXT";
-    notNull: boolean;
-    primaryKey?: undefined;
-} | {
-    name: string;
-    type: "TEXT";
-    primaryKey?: undefined;
-    notNull?: undefined;
-})[];
+export declare const AUTH_AUDIT_COLUMNS: readonly CollectionColumn[];
 export declare const AUTH_AUDIT_ACTIONS: readonly ["second-factor-skipped", "admin-token-created", "admin-token-used", "admin-token-revoked", "credentials-revoked"];
 export type AuthAuditAction = (typeof AUTH_AUDIT_ACTIONS)[number];
 export interface AuthAuditEvent {
-    readonly action: AuthAuditAction;
-    /** The user the event is about (the one signing in; the token's owner). */
-    readonly userId?: string;
-    /** The real client address, when there was a request. */
-    readonly ip?: string;
-    /** Short, non-secret context: the method, the token's name and prefix, the path. */
-    readonly detail?: Readonly<Record<string, string | number | boolean>>;
+	readonly action: AuthAuditAction;
+	/** The user the event is about (the one signing in; the token's owner). */
+	readonly userId?: string;
+	/** The real client address, when there was a request. */
+	readonly ip?: string;
+	/** Short, non-secret context: the method, the token's name and prefix, the path. */
+	readonly detail?: Readonly<Record<string, string | number | boolean>>;
 }
 export interface AuthAuditRecord extends AuthAuditEvent {
-    readonly id: string;
-    readonly at: number;
+	readonly id: string;
+	readonly at: number;
 }
 export declare class AuthAuditLog {
-    private readonly store;
-    private readonly logger;
-    private readonly now;
-    constructor(store: SettingsStoreClient, logger?: IScopedLogger | null, now?: () => number);
-    /** Record `event`. Never throws. */
-    record(event: AuthAuditEvent): Promise<void>;
-    /** Newest first, at most `limit` (≤ 500), optionally one user's. */
-    list(input?: {
-        readonly limit?: number;
-        readonly userId?: string;
-    }): Promise<readonly AuthAuditRecord[]>;
-    /** Delete rows older than 90 days. Returns how many. */
-    reap(): Promise<number>;
+	private readonly store;
+	private readonly logger;
+	private readonly now;
+	constructor(store: SettingsStoreClient, logger?: IScopedLogger | null, now?: () => number);
+	/** Record `event`. Never throws. */
+	record(event: AuthAuditEvent): Promise<void>;
+	/** Newest first, at most `limit` (≤ 500), optionally one user's. */
+	list(input?: {
+		readonly limit?: number;
+		readonly userId?: string;
+	}): Promise<readonly AuthAuditRecord[]>;
+	/** Delete rows older than 90 days. Returns how many. */
+	reap(): Promise<number>;
 }