@camstack/system 1.2.390 → 1.2.391

package/dist/auth/user-management-internal.d.ts

@@ -1,67 +1,82 @@
-import { AdminTokenRecord } from './admin-token-manager.js';
-import { AuthAuditEvent, AuthAuditRecord } from './auth-audit-log.js';
-import { LoginSessionManager } from './login-session-manager.js';
+/**
+* The hub-internal half of `user-management`.
+*
+* Some credential operations must never be reachable over a wire: not tRPC,
+* not the Moleculer mesh, not an addon's `ctx.api`. Putting them on the cap
+* would mount them on all three (an `auth: 'admin'` tier still lets any admin
+* session, and any mesh caller, plant them). So they are not on the cap.
+* `local-auth` attaches them to its in-process provider object under a
+* process-global symbol, and only code running in the hub process that holds
+* that object — the SSO finish, the auth router — can reach them.
+*
+* A symbol does not survive serialization, so the boundary holds by
+* construction: a remote proxy of the provider simply has no such key, and
+* {@link getUserManagementInternal} answers `null` (the caller fails closed).
+*/
+import type { AdminTokenRecord } from "./admin-token-manager.js";
+import type { AuthAuditEvent, AuthAuditRecord } from "./auth-audit-log.js";
+import type { LoginSessionManager } from "./login-session-manager.js";
 /** Process-global, so every bundled copy of this module agrees on the key. */
 export declare const USER_MANAGEMENT_INTERNAL: unique symbol;
 export interface LinkExternalIdentityInput {
-    readonly userId: string;
-    readonly provider: string;
-    readonly subject: string;
-    readonly issuer: string;
-    readonly label?: string;
+	readonly userId: string;
+	readonly provider: string;
+	readonly subject: string;
+	readonly issuer: string;
+	readonly label?: string;
 }
 /** The login-session table, as the hub uses it (`login-session-manager.ts`). */
-export type LoginSessionsInternal = Pick<LoginSessionManager, 'create' | 'refresh' | 'extend' | 'check' | 'legacyCutoff' | 'revoke' | 'revokeAllForUser' | 'listForUser' | 'listActive'>;
+export type LoginSessionsInternal = Pick<LoginSessionManager, "create" | "refresh" | "extend" | "check" | "legacyCutoff" | "revoke" | "revokeAllForUser" | "listForUser" | "listActive">;
 export interface SetPasswordInput {
-    readonly userId: string;
-    readonly newPassword: string;
-    /**
-     * The session the change was made from: it stays signed in, every other
-     * session of the user ends. Absent — every session ends.
-     */
-    readonly keepSessionId?: string;
+	readonly userId: string;
+	readonly newPassword: string;
+	/**
+	* The session the change was made from: it stays signed in, every other
+	* session of the user ends. Absent — every session ends.
+	*/
+	readonly keepSessionId?: string;
 }
 export interface UserManagementInternal {
-    /**
-     * Link `(provider, subject)` to `userId`. Idempotent for the same user;
-     * throws for an identity linked to another user and for a user that does
-     * not exist.
-     */
-    linkExternalIdentity(input: LinkExternalIdentityInput): Promise<{
-        readonly success: true;
-    }>;
-    /** Server-side login sessions: create, refresh, check, revoke, list. */
-    readonly sessions: LoginSessionsInternal;
-    /** Change a password and end the user's other sessions (and pre-session tokens). */
-    setPassword(input: SetPasswordInput): Promise<void>;
-    /** Admin tokens (`csa_`) — the hub router gates creation (admin + re-auth). */
-    readonly adminTokens: AdminTokensInternal;
-    /** The authentication audit trail. */
-    readonly audit: AuthAuditInternal;
+	/**
+	* Link `(provider, subject)` to `userId`. Idempotent for the same user;
+	* throws for an identity linked to another user and for a user that does
+	* not exist.
+	*/
+	linkExternalIdentity(input: LinkExternalIdentityInput): Promise<{
+		readonly success: true;
+	}>;
+	/** Server-side login sessions: create, refresh, check, revoke, list. */
+	readonly sessions: LoginSessionsInternal;
+	/** Change a password and end the user's other sessions (and pre-session tokens). */
+	setPassword(input: SetPasswordInput): Promise<void>;
+	/** Admin tokens (`csa_`) — the hub router gates creation (admin + re-auth). */
+	readonly adminTokens: AdminTokensInternal;
+	/** The authentication audit trail. */
+	readonly audit: AuthAuditInternal;
 }
 export interface AdminTokensInternal {
-    create(input: {
-        readonly createdBy: string;
-        readonly name: string;
-        readonly expiresAt: number;
-    }): Promise<{
-        readonly token: string;
-        readonly record: AdminTokenRecord;
-    }>;
-    /**
-     * The live token behind `token` — `null` when unknown, revoked, expired, or
-     * when its creator no longer exists or is no longer an admin.
-     */
-    validate(token: string): Promise<AdminTokenRecord | null>;
-    list(): Promise<readonly AdminTokenRecord[]>;
-    revoke(id: string): Promise<boolean>;
+	create(input: {
+		readonly createdBy: string;
+		readonly name: string;
+		readonly expiresAt: number;
+	}): Promise<{
+		readonly token: string;
+		readonly record: AdminTokenRecord;
+	}>;
+	/**
+	* The live token behind `token` — `null` when unknown, revoked, expired, or
+	* when its creator no longer exists or is no longer an admin.
+	*/
+	validate(token: string): Promise<AdminTokenRecord | null>;
+	list(): Promise<readonly AdminTokenRecord[]>;
+	revoke(id: string): Promise<boolean>;
 }
 export interface AuthAuditInternal {
-    record(event: AuthAuditEvent): Promise<void>;
-    list(input?: {
-        readonly limit?: number;
-        readonly userId?: string;
-    }): Promise<readonly AuthAuditRecord[]>;
+	record(event: AuthAuditEvent): Promise<void>;
+	list(input?: {
+		readonly limit?: number;
+		readonly userId?: string;
+	}): Promise<readonly AuthAuditRecord[]>;
 }
 /** Attach `internal` to `provider` (returns the same object, now carrying it). */
 export declare function attachUserManagementInternal<T extends object>(provider: T, internal: UserManagementInternal): T;

package/dist/auth/user-manager.d.ts

@@ -1,76 +1,76 @@
-import { SettingsStoreClient, TokenScope, UserRecord } from '@camstack/types';
-import { AuthManager } from './auth-manager.js';
+import type { SettingsStoreClient, TokenScope, UserRecord } from "@camstack/types";
+import type { AuthManager } from "./auth-manager.js";
 export type { UserRecord };
 interface CreateUserInput {
-    username: string;
-    password: string;
-    isAdmin?: boolean;
-    allowedProviders?: string[] | '*';
-    allowedDevices?: Record<string, string[] | '*'>;
-    scopes?: TokenScope[];
+	username: string;
+	password: string;
+	isAdmin?: boolean;
+	allowedProviders?: string[] | "*";
+	allowedDevices?: Record<string, string[] | "*">;
+	scopes?: TokenScope[];
 }
-type UpdatableUserFields = Partial<Pick<UserRecord, 'isAdmin' | 'allowedProviders' | 'allowedDevices' | 'scopes'>>;
+type UpdatableUserFields = Partial<Pick<UserRecord, "isAdmin" | "allowedProviders" | "allowedDevices" | "scopes">>;
 /**
- * The account a fresh hub seeds on its first boot (D797). Not configurable —
- * no env variable, no config.yaml key: the first sign-in with this password
- * forces a change (admin-ui `mustChangePassword`), and an existing user is
- * never overwritten (D728).
- */
+* The account a fresh hub seeds on its first boot (D797). Not configurable —
+* no env variable, no config.yaml key: the first sign-in with this password
+* forces a change (admin-ui `mustChangePassword`), and an existing user is
+* never overwritten (D728).
+*/
 export declare const FIRST_BOOT_ADMIN_USERNAME = "admin";
 export declare const FIRST_BOOT_ADMIN_PASSWORD = "changeme";
 export interface EnsureAdminOptions {
-    /** The operator's explicit, one-shot recovery request. Never a default. */
-    readonly resetPassword?: boolean;
+	/** The operator's explicit, one-shot recovery request. Never a default. */
+	readonly resetPassword?: boolean;
 }
 /** What `ensureAdminExists` did — every branch is named so the caller can log it. */
 export type AdminSeedOutcome = {
-    readonly kind: 'seeded';
-    readonly username: string;
+	readonly kind: "seeded";
+	readonly username: string;
 } | {
-    readonly kind: 'exists';
-    readonly username: string;
+	readonly kind: "exists";
+	readonly username: string;
 } | {
-    readonly kind: 'other-admin-exists';
-    readonly username: string;
+	readonly kind: "other-admin-exists";
+	readonly username: string;
 } | {
-    readonly kind: 'reset';
-    readonly username: string;
+	readonly kind: "reset";
+	readonly username: string;
 };
 export interface UserStorageAccess {
-    getStore(): SettingsStoreClient;
+	getStore(): SettingsStoreClient;
 }
 export declare class UserManager {
-    private readonly storageAccess;
-    private readonly auth;
-    constructor(storageAccess: UserStorageAccess, auth: AuthManager);
-    private get store();
-    create(input: CreateUserInput): Promise<UserRecord>;
-    findByUsername(username: string): Promise<UserRecord | null>;
-    findById(id: string): Promise<UserRecord | null>;
-    validateCredentials(username: string, password: string): Promise<UserRecord | null>;
-    listAll(): Promise<Omit<UserRecord, 'passwordHash'>[]>;
-    update(id: string, data: UpdatableUserFields): Promise<void>;
-    delete(id: string): Promise<void>;
-    resetPassword(id: string, newPassword: string): Promise<void>;
-    /**
-     * Seed {@link FIRST_BOOT_ADMIN_USERNAME} / {@link FIRST_BOOT_ADMIN_PASSWORD}
-     * — on FIRST boot only, i.e. when no admin account exists.
-     *
-     * The seed is never an authority. Once any admin exists, this never writes a
-     * password: the operator's own change in the admin UI is the truth from then
-     * on (D728). This method once compared the stored hash with a configured
-     * password on every boot and rewrote it when they differed, so a password
-     * changed in the UI went back at the next restart.
-     *
-     * `resetPassword: true` is the one explicit exception — the operator's
-     * one-shot recovery request (`RESET_ADMIN_PASSWORD`, see
-     * `admin-account-boot.ts`): the `admin` user's password goes back to
-     * `changeme`, and the next sign-in forces a change again.
-     */
-    ensureAdminExists(options?: EnsureAdminOptions): Promise<AdminSeedOutcome>;
-    /**
-     * Does `username` still sign in with `password`? A hash comparison — the
-     * password is never logged or stored. `false` when the user does not exist.
-     */
-    hasPassword(username: string, password: string): Promise<boolean>;
+	private readonly storageAccess;
+	private readonly auth;
+	constructor(storageAccess: UserStorageAccess, auth: AuthManager);
+	private get store();
+	create(input: CreateUserInput): Promise<UserRecord>;
+	findByUsername(username: string): Promise<UserRecord | null>;
+	findById(id: string): Promise<UserRecord | null>;
+	validateCredentials(username: string, password: string): Promise<UserRecord | null>;
+	listAll(): Promise<Omit<UserRecord, "passwordHash">[]>;
+	update(id: string, data: UpdatableUserFields): Promise<void>;
+	delete(id: string): Promise<void>;
+	resetPassword(id: string, newPassword: string): Promise<void>;
+	/**
+	* Seed {@link FIRST_BOOT_ADMIN_USERNAME} / {@link FIRST_BOOT_ADMIN_PASSWORD}
+	* — on FIRST boot only, i.e. when no admin account exists.
+	*
+	* The seed is never an authority. Once any admin exists, this never writes a
+	* password: the operator's own change in the admin UI is the truth from then
+	* on (D728). This method once compared the stored hash with a configured
+	* password on every boot and rewrote it when they differed, so a password
+	* changed in the UI went back at the next restart.
+	*
+	* `resetPassword: true` is the one explicit exception — the operator's
+	* one-shot recovery request (`RESET_ADMIN_PASSWORD`, see
+	* `admin-account-boot.ts`): the `admin` user's password goes back to
+	* `changeme`, and the next sign-in forces a change again.
+	*/
+	ensureAdminExists(options?: EnsureAdminOptions): Promise<AdminSeedOutcome>;
+	/**
+	* Does `username` still sign in with `password`? A hash comparison — the
+	* password is never logged or stored. `false` when the user does not exist.
+	*/
+	hasPassword(username: string, password: string): Promise<boolean>;
 }

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.d.ts

@@ -1,57 +1,57 @@
-import { BaseAddon, ProviderRegistration } from '@camstack/types';
+import { BaseAddon, type ProviderRegistration } from "@camstack/types";
 export declare class AddonPagesAggregatorAddon extends BaseAddon {
-    readonly id = "addon-pages-aggregator";
-    private resolvedPaths;
-    /** Content-hash cache-buster memo, keyed `path:size:mtime`. */
-    private readonly bundleHashCache;
-    /**
-     * Last successful `listPages()` snapshot per source. Used as the
-     * "stale-but-valid" fallback when a source transiently fails — drops
-     * happen often enough during boot (Moleculer service-discovery
-     * window) that swallowing the error and returning empty leaves the
-     * sidebar with nothing for several seconds. Keeping the previous
-     * good entry means a flake is invisible to the operator.
-     */
-    private readonly lastGood;
-    /** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */
-    private readonly retryTimers;
-    constructor();
-    protected onInitialize(): Promise<ProviderRegistration[]>;
-    protected onShutdown(): Promise<void>;
-    private aggregate;
-    /**
-     * Schedule background re-call of `listPages()` on a source that just
-     * failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful
-     * call updates the cache and emits `AddonPageReady` so the admin UI
-     * invalidates its query. Stops on first success or after the schedule
-     * is exhausted.
-     */
-    private scheduleRetry;
-    private retrySource;
-    /**
-     * Build `/api/addon-pages/<addonId>/<bundle>?v=<contentHash>`. A CONTENT
-     * hash, NOT mtime: reproducible builds stamp a FIXED mtime (observed
-     * 1985-10-26) so an mtime `?v=` never changes across redeploys and a
-     * caching proxy (Cloudflare tunnel) serves a STALE bundle. Hashing the
-     * (small) MF entry file busts the cache exactly when the bundle changes.
-     * Memoised per (path,size,mtime); `Date.now()` when the file is absent.
-     */
-    private makeBundleUrl;
-    /**
-     * Resolve the local filesystem path for an addon's bundle. Mirrors
-     * `AddonPagesService.resolveBundle` (server-side), but without the
-     * existence / traversal checks — those still live on the server's
-     * static file route. We only need a stat-able path here for the
-     * `mtime` cache-buster.
-     */
-    private resolveBundlePath;
-    /**
-     * Read `server.dataPath` from the cluster yml-backed sections (same
-     * source the server uses at boot), then derive the addons directory
-     * from it. Falls back to `camstack-data/addons` when no settings API
-     * is available — agents and isolated tests don't see this addon, so
-     * the fallback is purely defensive.
-     */
-    private resolvePaths;
+	readonly id = "addon-pages-aggregator";
+	private resolvedPaths;
+	/** Content-hash cache-buster memo, keyed `path:size:mtime`. */
+	private readonly bundleHashCache;
+	/**
+	* Last successful `listPages()` snapshot per source. Used as the
+	* "stale-but-valid" fallback when a source transiently fails — drops
+	* happen often enough during boot (Moleculer service-discovery
+	* window) that swallowing the error and returning empty leaves the
+	* sidebar with nothing for several seconds. Keeping the previous
+	* good entry means a flake is invisible to the operator.
+	*/
+	private readonly lastGood;
+	/** In-flight retry guards keyed by sourceId. Avoids double-scheduling. */
+	private readonly retryTimers;
+	constructor();
+	protected onInitialize(): Promise<ProviderRegistration[]>;
+	protected onShutdown(): Promise<void>;
+	private aggregate;
+	/**
+	* Schedule background re-call of `listPages()` on a source that just
+	* failed. Walks `RETRY_BACKOFF_MS` from index 0 — each successful
+	* call updates the cache and emits `AddonPageReady` so the admin UI
+	* invalidates its query. Stops on first success or after the schedule
+	* is exhausted.
+	*/
+	private scheduleRetry;
+	private retrySource;
+	/**
+	* Build `/api/addon-pages/<addonId>/<bundle>?v=<contentHash>`. A CONTENT
+	* hash, NOT mtime: reproducible builds stamp a FIXED mtime (observed
+	* 1985-10-26) so an mtime `?v=` never changes across redeploys and a
+	* caching proxy (Cloudflare tunnel) serves a STALE bundle. Hashing the
+	* (small) MF entry file busts the cache exactly when the bundle changes.
+	* Memoised per (path,size,mtime); `Date.now()` when the file is absent.
+	*/
+	private makeBundleUrl;
+	/**
+	* Resolve the local filesystem path for an addon's bundle. Mirrors
+	* `AddonPagesService.resolveBundle` (server-side), but without the
+	* existence / traversal checks — those still live on the server's
+	* static file route. We only need a stat-able path here for the
+	* `mtime` cache-buster.
+	*/
+	private resolveBundlePath;
+	/**
+	* Read `server.dataPath` from the cluster yml-backed sections (same
+	* source the server uses at boot), then derive the addons directory
+	* from it. Falls back to `camstack-data/addons` when no settings API
+	* is available — agents and isolated tests don't see this addon, so
+	* the fallback is purely defensive.
+	*/
+	private resolvePaths;
 }
 export default AddonPagesAggregatorAddon;

package/dist/builtins/addon-pages-aggregator/dedupe-pages.d.ts

@@ -1,6 +1,24 @@
-import { AddonPageInfo } from '@camstack/types';
 /**
- * Return a new list with duplicate `(addonId, page.id)` entries removed,
- * preserving first-seen order. Pure — never mutates the input.
- */
+* dedupePages — collapse duplicate addon-page entries that arise when the
+* SAME addon is deployed on more than one node.
+*
+* Root cause this guards against: `addon-pages-source` is a COLLECTION cap.
+* When an addon (e.g. `benchmark`) runs on the hub-local child AND a remote
+* agent, each node registers its own collection provider under a distinct
+* registry key (`benchmark` vs `benchmark@dev-agent-0`). The hub's
+* `getCollection('addon-pages-source')` therefore returns multiple providers,
+* every one of which reports the SAME `id` (the addon's own id) and the SAME
+* page declarations. The aggregator's per-source fan-out then pushes the
+* identical page once per node, and the admin-ui sidebar shows the page twice.
+*
+* A page is uniquely identified by `(addonId, page.id)` — an addon's page id
+* is stable across the nodes it runs on, and `page.path` is derived from it.
+* We keep the FIRST occurrence (entry order is the source fan-out order, which
+* preserves the hub-local provider ahead of remote ones).
+*/
+import type { AddonPageInfo } from "@camstack/types";
+/**
+* Return a new list with duplicate `(addonId, page.id)` entries removed,
+* preserving first-seen order. Pure — never mutates the input.
+*/
 export declare function dedupePages(pages: readonly AddonPageInfo[]): readonly AddonPageInfo[];

package/dist/builtins/addon-pages-aggregator/index.d.ts

@@ -1 +1 @@
-export { AddonPagesAggregatorAddon, default } from './addon-pages-aggregator.addon.js';
+export { AddonPagesAggregatorAddon, default } from "./addon-pages-aggregator.addon.js";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.d.ts

@@ -1,57 +1,57 @@
-import { BaseAddon, ProviderRegistration } from '@camstack/types';
+import { BaseAddon, type ProviderRegistration } from "@camstack/types";
 export declare class AddonWidgetsAggregatorAddon extends BaseAddon {
-    readonly id = "addon-widgets-aggregator";
-    private resolvedPaths;
-    /** Content-hash cache-buster memo, keyed `path:size:mtime`. */
-    private readonly bundleHashCache;
-    /**
-     * Last successful `listWidgets()` snapshot per source. Used as the
-     * "stale-but-valid" fallback when a source transiently fails — drops
-     * happen often enough during boot (Moleculer service-discovery
-     * window) that swallowing the error and returning empty would leave
-     * the dashboard with nothing for several seconds. Keeping the
-     * previous good entry means a flake is invisible to the operator.
-     */
-    private readonly lastGood;
-    /** In-flight retry guards keyed by sourceAddonId. Avoids double-scheduling. */
-    private readonly retryTimers;
-    constructor();
-    protected onInitialize(): Promise<ProviderRegistration[]>;
-    protected onShutdown(): Promise<void>;
-    /**
-     * Strip the `@<nodeId>` suffix that the CapabilityBridge appends to
-     * collection-provider registry keys for cross-node addons (see
-     * `moleculer.service.ts` — `registryKey = ${addonId}@${nodeId}`).
-     *
-     * The widget bundle is hub-resident (the same npm package ships to
-     * every node and the hub keeps a copy on disk keyed by the bare
-     * manifest id), so both the static-file URL and the admin-ui widget
-     * namespace must use the bare addon id. Without this, a widget
-     * source running on a remote agent yields a `bundleUrl` like
-     * `/api/addon-widgets/pipeline-analytics@agent-0/pipeline-analytics/remoteEntry.js`
-     * — the embedded `@<node>/<group>` makes the static-file route's
-     * `:addonId` param mismatch the registered provider and 404.
-     */
-    private bareAddonId;
-    private aggregate;
-    private scheduleRetry;
-    private retrySource;
-    /**
-     * Build `/api/addon-widgets/<addonId>/<bundle>?v=<mtime>`. Falls back
-     * to `Date.now()` when the bundle path can't be stat'd (remote addon
-     * with no local file, addon not yet on disk, etc.) — the browser
-     * just gets a fresh URL on each call instead of cache-friendly mtime.
-     */
-    private makeBundleUrl;
-    /**
-     * sha1 (12-hex) over EVERY file in the bundle's dist dir — content, not
-     * mtime (reproducible builds fix mtime, so mtime never busts). Memoised by
-     * the dir's (name:size:mtime) fingerprint; a redeploy that changes any
-     * file's content changes its size and re-hashes. `Date.now()` when the
-     * bundle has no local file (remote addon).
-     */
-    private bundleDirVersionTag;
-    private resolveBundlePath;
-    private resolvePaths;
+	readonly id = "addon-widgets-aggregator";
+	private resolvedPaths;
+	/** Content-hash cache-buster memo, keyed `path:size:mtime`. */
+	private readonly bundleHashCache;
+	/**
+	* Last successful `listWidgets()` snapshot per source. Used as the
+	* "stale-but-valid" fallback when a source transiently fails — drops
+	* happen often enough during boot (Moleculer service-discovery
+	* window) that swallowing the error and returning empty would leave
+	* the dashboard with nothing for several seconds. Keeping the
+	* previous good entry means a flake is invisible to the operator.
+	*/
+	private readonly lastGood;
+	/** In-flight retry guards keyed by sourceAddonId. Avoids double-scheduling. */
+	private readonly retryTimers;
+	constructor();
+	protected onInitialize(): Promise<ProviderRegistration[]>;
+	protected onShutdown(): Promise<void>;
+	/**
+	* Strip the `@<nodeId>` suffix that the CapabilityBridge appends to
+	* collection-provider registry keys for cross-node addons (see
+	* `moleculer.service.ts` — `registryKey = ${addonId}@${nodeId}`).
+	*
+	* The widget bundle is hub-resident (the same npm package ships to
+	* every node and the hub keeps a copy on disk keyed by the bare
+	* manifest id), so both the static-file URL and the admin-ui widget
+	* namespace must use the bare addon id. Without this, a widget
+	* source running on a remote agent yields a `bundleUrl` like
+	* `/api/addon-widgets/pipeline-analytics@agent-0/pipeline-analytics/remoteEntry.js`
+	* — the embedded `@<node>/<group>` makes the static-file route's
+	* `:addonId` param mismatch the registered provider and 404.
+	*/
+	private bareAddonId;
+	private aggregate;
+	private scheduleRetry;
+	private retrySource;
+	/**
+	* Build `/api/addon-widgets/<addonId>/<bundle>?v=<mtime>`. Falls back
+	* to `Date.now()` when the bundle path can't be stat'd (remote addon
+	* with no local file, addon not yet on disk, etc.) — the browser
+	* just gets a fresh URL on each call instead of cache-friendly mtime.
+	*/
+	private makeBundleUrl;
+	/**
+	* sha1 (12-hex) over EVERY file in the bundle's dist dir — content, not
+	* mtime (reproducible builds fix mtime, so mtime never busts). Memoised by
+	* the dir's (name:size:mtime) fingerprint; a redeploy that changes any
+	* file's content changes its size and re-hashes. `Date.now()` when the
+	* bundle has no local file (remote addon).
+	*/
+	private bundleDirVersionTag;
+	private resolveBundlePath;
+	private resolvePaths;
 }
 export default AddonWidgetsAggregatorAddon;

package/dist/builtins/addon-widgets-aggregator/index.d.ts

@@ -1 +1 @@
-export { AddonWidgetsAggregatorAddon, default } from './addon-widgets-aggregator.addon.js';
+export { AddonWidgetsAggregatorAddon, default } from "./addon-widgets-aggregator.addon.js";