@camstack/system 1.2.416 → 1.2.418

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,5 +1,4 @@
-import { $r as secretTreeFromPaths, A as LegacyStorageLocationDefaultSchema, At as evictionPolicyOfLocation, Br as isSecretMarker, Dn as resolveLocationMode, Er as collectSecretConfigKeys, G as StorageMigrationJobSchema, Gr as parseJsonObject, H as StorageCleanupJobSchema, Ln as storageCapability, Lt as gbToBytes, Pn as settingsStoreCapability, Rn as storageMigrationCapability, U as StorageLocationModeSchema, Ut as isLocationEnabled, W as StorageLocationTypeSchema, Xn as withLocationMode, Xr as resolveSecretMarkers, Xt as legacyModeOf, _r as REDACTED_SECRET, ai as EventCategory, an as mayWriteToLocation, cn as modeMayWrite, ii as transformSecretWrite, in as mayReadLocation, pr as BaseAddon } from "../../dist-DwE9yHdk.mjs";
-import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-CDiN1p98.mjs";
+import { $r as transformSecretWrite, $t as mayReadLocation, B as StorageLocationModeSchema, Dt as evictionPolicyOfLocation, Gn as withLocationMode, H as StorageMigrationJobSchema, Ir as isSecretMarker, Jr as secretTreeFromPaths, Kr as resolveSecretMarkers, Kt as legacyModeOf, Mn as storageCapability, Nn as storageMigrationCapability, Pt as gbToBytes, Sn as resolveLocationMode, Sr as collectSecretConfigKeys, V as StorageLocationTypeSchema, Vr as parseJsonObject, cr as BaseAddon, ei as EventCategory, en as mayWriteToLocation, fr as REDACTED_SECRET, k as LegacyStorageLocationDefaultSchema, kn as settingsStoreCapability, rn as modeMayWrite, z as StorageCleanupJobSchema, zt as isLocationEnabled } from "../../dist-DlmdESNT.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";
@@ -1375,6 +1374,83 @@ var SqliteDrainStateStore = class {
 	}
 };
 //#endregion
+//#region src/kernel/transport/hub-cap-forward.ts
+/** The Moleculer service name the hub registers for agent→hub cap forwarding. */
+var HUB_CAP_FWD_SERVICE = "$hub-cap-fwd";
+/** The Moleculer action (service.action) for hub cap forwarding. */
+var HUB_CAP_FWD_ACTION = `${HUB_CAP_FWD_SERVICE}.forward`;
+/**
+* Drop a `caller` the forwarded args carry. `caller` is the USER identity the
+* hub's tRPC router injects for `caller: 'required'` methods
+* (`cap-router-builder.ts`), and providers trust it — `keychainAdmin.reveal`
+* reads `input.caller.userId`. A call that arrives over the mesh has no user
+* session behind it, so whatever `caller` it carries is forged (D802). The
+* args' `callerAddonId` is overwritten or stripped further down by
+* `stampCallerAddonId`; `caller` had no such guard.
+*/
+function stripForwardedCaller(args) {
+	if (args === null || typeof args !== "object" || Array.isArray(args)) return args;
+	if (!Object.prototype.hasOwnProperty.call(args, "caller")) return args;
+	const rest = {};
+	for (const [key, value] of Object.entries(args)) if (key !== "caller") rest[key] = value;
+	return rest;
+}
+/**
+* Narrow Moleculer's loosely-typed `ctx.params` to {@link HubCapForwardParams}
+* without unsafe casts — mirrors `agent-cap-dispatch-service.ts:narrowParams`.
+*/
+function narrowParams(raw) {
+	if (raw === null || typeof raw !== "object") throw new Error("$hub-cap-fwd.forward: invalid params — capName and method are required strings");
+	const capName = Reflect.get(raw, "capName");
+	const method = Reflect.get(raw, "method");
+	if (typeof capName !== "string" || typeof method !== "string") throw new Error("$hub-cap-fwd.forward: invalid params — capName and method are required strings");
+	const deviceId = Reflect.get(raw, "deviceId");
+	const nodeId = Reflect.get(raw, "nodeId");
+	const native = Reflect.get(raw, "native");
+	const callerAddonId = Reflect.get(raw, "callerAddonId");
+	return {
+		capName,
+		method,
+		args: stripForwardedCaller(Reflect.get(raw, "args")),
+		deviceId: typeof deviceId === "number" ? deviceId : void 0,
+		nodeId: typeof nodeId === "string" && nodeId.length > 0 ? nodeId : void 0,
+		native: native === true ? true : void 0,
+		callerAddonId: typeof callerAddonId === "string" && callerAddonId.length > 0 ? callerAddonId : void 0
+	};
+}
+/**
+* Build the `$hub-cap-fwd` Moleculer `ServiceSchema`. The hub registers this on
+* its broker (only the hub registers it → an agent's `broker.call` for
+* `$hub-cap-fwd.forward` discovers it on the hub with no explicit nodeID pin).
+*
+* @param onUnownedCall  The hub's cap routing handler (from
+*                       `createParentUnownedCallHandler`). Reused verbatim so
+*                       forwarded calls route exactly like a hub-local child's.
+*/
+function createHubCapForwardService(onUnownedCall, options = {}) {
+	return {
+		name: HUB_CAP_FWD_SERVICE,
+		actions: { forward: { handler: async (ctx) => {
+			const { capName, method, args, deviceId, nodeId, native, callerAddonId } = narrowParams(ctx.params);
+			const sender = typeof ctx.nodeID === "string" ? ctx.nodeID : null;
+			let caller = callerAddonId;
+			if (caller !== void 0 && options.isCallerOnNode !== void 0 && (sender === null || !options.isCallerOnNode(sender, caller))) {
+				options.onRejectedCaller?.(sender ?? "(unknown node)", caller);
+				caller = void 0;
+			}
+			return onUnownedCall({
+				capName,
+				method,
+				args,
+				...deviceId !== void 0 ? { deviceId } : {},
+				...nodeId !== void 0 ? { nodeId } : {},
+				...native === true ? { native: true } : {},
+				...caller !== void 0 ? { callerAddonId: caller } : {}
+			});
+		} } }
+	};
+}
+//#endregion
 //#region src/builtins/storage-orchestrator/hub-settings-forward.ts
 /**
 * The data door with the HUB behind it — an agent's `settings-store` provider.
@@ -4508,4 +4584,4 @@ function parseOrphanStatus(raw) {
 	};
 }
 //#endregion
-export { StorageOrchestratorAddon, StorageOrchestratorAddon as default, SqliteLocationStore as i, buildStorageLocationRegistry as n, StorageMigrationCoordinator as r, StorageOrchestratorService as t };
+export { StorageOrchestratorAddon, StorageOrchestratorAddon as default, stripForwardedCaller as a, SqliteLocationStore as c, createHubCapForwardService as i, HUB_CAP_FWD_ACTION as n, buildStorageLocationRegistry as o, HUB_CAP_FWD_SERVICE as r, StorageMigrationCoordinator as s, StorageOrchestratorService as t };

package/dist/builtins/system-config/system-config.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DxiDI8hZ.js");
+const require_dist = require("../../dist-DVUg8e1T.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
-const require_constants$8 = require("../../constants-C4jZO_qO.js");
+const require_constants$8 = require("../../constants-Aj0OBqlt.js");
 const require_x509_es = require("../../x509.es-Dzl0BbmG.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,7 +1,7 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Ar as defineCustomActions, Br as isSecretMarker, Fr as hydrateSchema, Hr as makeSecretMarker, ei as secretTreeFromSchema, fr as errMsg, ii as transformSecretWrite, kr as customAction, pr as BaseAddon, zr as isSecretClear } from "../../dist-DwE9yHdk.mjs";
+import { $r as transformSecretWrite, Er as defineCustomActions, Fr as isSecretClear, Ir as isSecretMarker, Rr as makeSecretMarker, Tr as customAction, Yr as secretTreeFromSchema, cr as BaseAddon, jr as hydrateSchema, sr as errMsg } from "../../dist-DlmdESNT.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
-import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-BSBtmzm3.mjs";
+import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-C8T7u1_Z.mjs";
 import { a as KeyUsagesExtension, c as Pkcs10CertificateRequestGenerator, d as X509Certificate$1, f as X509CertificateGenerator, i as KeyUsageFlags, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, s as Pkcs10CertificateRequest, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "../../x509.es-CAjSsrkk.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DxiDI8hZ.js");
+const require_dist = require("../../dist-DVUg8e1T.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { en as logDestinationCapability, pr as BaseAddon } from "../../dist-DwE9yHdk.mjs";
+import { Xt as logDestinationCapability, cr as BaseAddon } from "../../dist-DlmdESNT.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-DEZqZLPT.mjs → composition-sources-0cPw9E0M.mjs}

@@ -1,4 +1,4 @@
-import { ar as compositionSourceKey, fr as errMsg } from "./dist-DwE9yHdk.mjs";
+import { er as compositionSourceKey, sr as errMsg } from "./dist-DlmdESNT.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-DBcOVpGn.js → composition-sources-BVjuMvpb.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DxiDI8hZ.js");
+const require_dist = require("./dist-DVUg8e1T.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-C4jZO_qO.js → constants-Aj0OBqlt.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DxiDI8hZ.js");
+const require_dist = require("./dist-DVUg8e1T.js");
 let node_crypto = require("node:crypto");
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{constants-BSBtmzm3.mjs → constants-C8T7u1_Z.mjs}

@@ -1,4 +1,4 @@
-import { Tr as buildSecretRef } from "./dist-DwE9yHdk.mjs";
+import { xr as buildSecretRef } from "./dist-DlmdESNT.mjs";
 import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{event-loop-stall-monitor-LBZskC1S.mjs → custom-action-registry-BQnbN0DP.mjs}

@@ -1,10 +1,10 @@
-import { P as MODEL_FORMATS, Rt as hfModelUrl, T as HF_REPO } from "./dist-DwE9yHdk.mjs";
 import { createHash } from "node:crypto";
 import * as path$1 from "node:path";
 import path from "node:path";
 import * as fs from "node:fs";
 import { createReadStream, promises } from "node:fs";
 import { promisify } from "node:util";
+import { HF_REPO, MODEL_FORMATS, describeCustomActions, hfModelUrl } from "@camstack/types/addon";
 import { createServer } from "node:http";
 import { brotliCompress, constants as constants$1, gzip } from "node:zlib";
 import { PerformanceObserver } from "node:perf_hooks";
@@ -1378,4 +1378,59 @@ function startEventLoopStallMonitor(logger, reportThresholdMs = STALL_REPORT_MS)
 	};
 }
 //#endregion
-export { resolveFormatRevision as C, isModelDownloaded as S, downloadModel as _, createFileDataPlaneHandler as a, getModelFilePath as b, parseRangeHeader as c, ModelDownloadService as d, ModelDownloadHttpError as f, downloadFile as g, deleteModelFromDisk as h, startEventLoopStallMonitor as i, parseTokenizedUrl as l, collectModelFiles as m, STALL_TICK_MS as n, contentTypeFor as o, adoptModelRevisions as p, attributeStall as r, createAuthenticatedFileServer as s, STALL_REPORT_MS as t, resolveFilePath as u, ensureModel as v, revisionWeightUrl as w, isModelDownloadHttpError as x, fetchJson as y };
+//#region src/kernel/custom-action-registry.ts
+/**
+* CustomActionRegistry — per-process registry of addon custom actions.
+*
+* Populated at boot from each addon's `AddonInitResult.customActions` +
+* `handleCustomAction` handler. Rejects actions declared with scope other
+* than 'system' (today only 'system' is runtime-supported; the descriptor
+* allows future scopes for forward compat).
+*/
+var CustomActionRegistry = class {
+	byAddon = /* @__PURE__ */ new Map();
+	registerAddon(addonId, catalog, handler) {
+		const actions = /* @__PURE__ */ new Map();
+		for (const [name, spec] of Object.entries(catalog)) {
+			const scope = spec.scope ?? { kind: "system" };
+			if (scope.kind !== "system") throw new Error(`custom action '${addonId}.${name}' declared scope '${scope.kind}' — not yet implemented`);
+			actions.set(name, {
+				spec,
+				handler: (input, caller) => handler(name, input, caller)
+			});
+		}
+		this.byAddon.set(addonId, actions);
+	}
+	unregisterAddon(addonId) {
+		this.byAddon.delete(addonId);
+	}
+	resolve(addonId, action) {
+		return this.byAddon.get(addonId)?.get(action) ?? null;
+	}
+	listActions(addonId) {
+		return [...this.byAddon.get(addonId)?.keys() ?? []];
+	}
+	listAddons() {
+		return [...this.byAddon.keys()];
+	}
+	/**
+	* Every registered catalog with its schemas stripped, keyed by addon id —
+	* what a runner puts in its register frame so the hub learns the catalogs
+	* from the process that owns them (D444). `hostedAddonIds` are the addons
+	* this runner hosts: each is present in the result, with an EMPTY catalog
+	* when it registered none, so the parent can say "declares no actions" per
+	* addon instead of guessing from an absent key.
+	*/
+	describeAll(hostedAddonIds) {
+		const out = {};
+		for (const addonId of hostedAddonIds) out[addonId] = {};
+		for (const [addonId, actions] of this.byAddon) {
+			const catalog = {};
+			for (const [name, entry] of actions) catalog[name] = entry.spec;
+			out[addonId] = describeCustomActions(catalog);
+		}
+		return out;
+	}
+};
+//#endregion
+export { isModelDownloaded as C, isModelDownloadHttpError as S, revisionWeightUrl as T, downloadFile as _, startEventLoopStallMonitor as a, fetchJson as b, createAuthenticatedFileServer as c, resolveFilePath as d, ModelDownloadService as f, deleteModelFromDisk as g, collectModelFiles as h, attributeStall as i, parseRangeHeader as l, adoptModelRevisions as m, STALL_REPORT_MS as n, createFileDataPlaneHandler as o, ModelDownloadHttpError as p, STALL_TICK_MS as r, contentTypeFor as s, CustomActionRegistry as t, parseTokenizedUrl as u, downloadModel as v, resolveFormatRevision as w, getModelFilePath as x, ensureModel as y };

package/dist/{event-loop-stall-monitor-E2hFvhDg.js → custom-action-registry-Bf_YnagS.js}

@@ -1,11 +1,11 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DxiDI8hZ.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_util = require("node:util");
+let _camstack_types_addon = require("@camstack/types/addon");
 let node_http = require("node:http");
 let node_zlib = require("node:zlib");
 let node_perf_hooks = require("node:perf_hooks");
@@ -438,7 +438,7 @@ function readRevisionRecord(modelPath) {
 	}
 }
 /** The CamStack model mirror. Every artefact under it has a generated revision. */
-var HOSTED_MODEL_MIRROR_PREFIX = require_dist.hfModelUrl(require_dist.HF_REPO, "");
+var HOSTED_MODEL_MIRROR_PREFIX = (0, _camstack_types_addon.hfModelUrl)(_camstack_types_addon.HF_REPO, "");
 /**
 * The revision a format must be at — the ONE rule every model download path
 * reads (D743, D744). An inline `revision` wins; otherwise a format hosted on
@@ -608,7 +608,7 @@ async function adoptModelRevisions(modelsDir, entries) {
 	};
 }
 function isModelFormat(value) {
-	return require_dist.MODEL_FORMATS.some((f) => f === value);
+	return _camstack_types_addon.MODEL_FORMATS.some((f) => f === value);
 }
 /** Compute the on-disk path for a given model + format, even when not yet downloaded. */
 function getModelFilePath(modelsDir, entry, format) {
@@ -1379,6 +1379,67 @@ function startEventLoopStallMonitor(logger, reportThresholdMs = STALL_REPORT_MS)
 	};
 }
 //#endregion
+//#region src/kernel/custom-action-registry.ts
+/**
+* CustomActionRegistry — per-process registry of addon custom actions.
+*
+* Populated at boot from each addon's `AddonInitResult.customActions` +
+* `handleCustomAction` handler. Rejects actions declared with scope other
+* than 'system' (today only 'system' is runtime-supported; the descriptor
+* allows future scopes for forward compat).
+*/
+var CustomActionRegistry = class {
+	byAddon = /* @__PURE__ */ new Map();
+	registerAddon(addonId, catalog, handler) {
+		const actions = /* @__PURE__ */ new Map();
+		for (const [name, spec] of Object.entries(catalog)) {
+			const scope = spec.scope ?? { kind: "system" };
+			if (scope.kind !== "system") throw new Error(`custom action '${addonId}.${name}' declared scope '${scope.kind}' — not yet implemented`);
+			actions.set(name, {
+				spec,
+				handler: (input, caller) => handler(name, input, caller)
+			});
+		}
+		this.byAddon.set(addonId, actions);
+	}
+	unregisterAddon(addonId) {
+		this.byAddon.delete(addonId);
+	}
+	resolve(addonId, action) {
+		return this.byAddon.get(addonId)?.get(action) ?? null;
+	}
+	listActions(addonId) {
+		return [...this.byAddon.get(addonId)?.keys() ?? []];
+	}
+	listAddons() {
+		return [...this.byAddon.keys()];
+	}
+	/**
+	* Every registered catalog with its schemas stripped, keyed by addon id —
+	* what a runner puts in its register frame so the hub learns the catalogs
+	* from the process that owns them (D444). `hostedAddonIds` are the addons
+	* this runner hosts: each is present in the result, with an EMPTY catalog
+	* when it registered none, so the parent can say "declares no actions" per
+	* addon instead of guessing from an absent key.
+	*/
+	describeAll(hostedAddonIds) {
+		const out = {};
+		for (const addonId of hostedAddonIds) out[addonId] = {};
+		for (const [addonId, actions] of this.byAddon) {
+			const catalog = {};
+			for (const [name, entry] of actions) catalog[name] = entry.spec;
+			out[addonId] = (0, _camstack_types_addon.describeCustomActions)(catalog);
+		}
+		return out;
+	}
+};
+//#endregion
+Object.defineProperty(exports, "CustomActionRegistry", {
+	enumerable: true,
+	get: function() {
+		return CustomActionRegistry;
+	}
+});
 Object.defineProperty(exports, "ModelDownloadHttpError", {
 	enumerable: true,
 	get: function() {