@camstack/system 1.2.62 → 1.2.64

package/dist/{model-download-service-D8B-4ktF.mjs → model-download-service-CTBHzORJ.mjs}

@@ -4,6 +4,8 @@ import * as fs from "node:fs";
 import { createReadStream, promises } from "node:fs";
 import * as path$1 from "node:path";
 import path from "node:path";
+import { promisify } from "node:util";
+import { brotliCompress, constants as constants$1, gzip } from "node:zlib";
 //#region src/http/authenticated-file-server.ts
 /**
 * Authenticated data-plane file-server — a shared host primitive for addons that
@@ -214,6 +216,188 @@ async function handle(opts, cors, req, res) {
 	createReadStream(absPath).pipe(res);
 }
 //#endregion
+//#region src/http/asset-compression.ts
+/**
+* Content-coding for addon-served static assets: `Accept-Encoding` negotiation,
+* an eligibility rule, and a BOUNDED cache of the compressed bytes.
+*
+* ## Why the ADDON owns the encoding
+*
+* The hub's `/addon/:addonId/*` bridge is registered `{ compress: false }`. That
+* is not an oversight — on 2026-07-16 the global `@fastify/compress` was found
+* emitting an EMPTY brotli stream (`content-encoding: br`, `content-length: 0`)
+* for any compressible body over its 1 KiB threshold once the body had crossed
+* the UDS route bridge of a FORKED addon. It silently broke the notifier SVG
+* icons; the deploy-bundle pull route had already dodged the same class with
+* `compress: false`. The resolution then, and the contract now, is that an addon
+* route owns its content-coding END TO END: it negotiates, it compresses, it
+* stamps `content-encoding` + `Vary`, and the hub pipes those bytes through
+* untouched (`proxyToUpstream` replays the upstream headers verbatim).
+*
+* So compression belongs HERE, in the shared file data-plane, and nowhere above
+* it. Anything that re-compresses on top of this reintroduces the empty-brotli
+* bug rather than doubling the ratio.
+*
+* ## Why the bytes are cached, and why the cache is bounded
+*
+* Measured on the stream-broker embed bundle (`index-<hash>.js`, 1,443,142 B):
+* gzip-6 → 360,868 B, brotli-5 → 327,419 B in 27 ms, brotli-11 → 293,677 B in
+* 2,233 ms. Quality 5 is the request-path choice: 77% off the wire for 27 ms
+* paid ONCE. Quality 11 buys another 2.3% for eighty times the CPU, on a path
+* where a real client is waiting.
+*
+* The cache is an LRU bounded by BOTH entry count and total bytes, and it
+* refuses assets over {@link COMPRESSION_MAX_ASSET_BYTES} outright. An unbounded
+* `Map` keyed by URL is how a long-lived process walks into an OOM, and this
+* repo has already spent a session on one.
+*
+* The key carries `mtimeMs` and `size`, so a rebuild that rewrites an asset in
+* place under an UNCHANGED name (an SPA shell, a service worker) can never be
+* served from the previous build's bytes.
+*/
+var brotliAsync = promisify(brotliCompress);
+var gzipAsync = promisify(gzip);
+/** LRU bounds. Both are enforced; whichever binds first evicts. */
+var MAX_CACHE_ENTRIES = 64;
+var MAX_CACHE_BYTES = 32 * 1024 * 1024;
+/** Brotli quality — see the file header for the measured trade. */
+var BROTLI_QUALITY = 5;
+/**
+* Content types worth compressing. An ALLOW-list, not a deny-list: an unknown
+* type (`application/octet-stream`) is assumed to be opaque binary. This is what
+* keeps jpeg/png/webp/mp4/m4s/woff2 out — running brotli over them burns CPU to
+* make the body marginally BIGGER.
+*/
+var COMPRESSIBLE_EXACT = new Set([
+	"application/javascript",
+	"application/ecmascript",
+	"application/json",
+	"application/manifest+json",
+	"application/wasm",
+	"application/xml",
+	"application/xhtml+xml",
+	"application/vnd.apple.mpegurl",
+	"image/svg+xml"
+]);
+/** Is a body of this content type worth compressing at all? */
+function isCompressibleContentType(contentType) {
+	const base = contentType.split(";")[0]?.trim().toLowerCase() ?? "";
+	if (base.length === 0) return false;
+	if (base.startsWith("text/")) return true;
+	if (base.endsWith("+json") || base.endsWith("+xml")) return true;
+	return COMPRESSIBLE_EXACT.has(base);
+}
+/** Parse `Accept-Encoding` into tokens with their q-values (default 1). */
+function parseAcceptEncoding(header) {
+	if (header === void 0 || header.trim().length === 0) return [];
+	const out = [];
+	for (const part of header.split(",")) {
+		const [rawToken, ...params] = part.split(";");
+		const token = rawToken?.trim().toLowerCase() ?? "";
+		if (token.length === 0) continue;
+		let q = 1;
+		for (const param of params) {
+			const [name, value] = param.split("=");
+			if (name?.trim().toLowerCase() !== "q") continue;
+			const parsed = Number(value?.trim());
+			q = Number.isFinite(parsed) ? parsed : 1;
+		}
+		out.push({
+			token,
+			q
+		});
+	}
+	return out;
+}
+function accepts(prefs, token) {
+	const exact = prefs.find((p) => p.token === token);
+	if (exact) return exact.q > 0;
+	const wildcard = prefs.find((p) => p.token === "*");
+	return wildcard !== void 0 && wildcard.q > 0;
+}
+/**
+* Pick a coding for this request: brotli when offered, else gzip, else identity.
+*
+* Returns `null` for identity — including when the header is ABSENT. A client
+* that offers nothing gets the raw bytes; guessing on its behalf is how a
+* non-negotiating consumer (a native fetch, a probe, an OTA puller) ends up with
+* a body it cannot read.
+*/
+function negotiateContentEncoding(acceptEncoding) {
+	const prefs = parseAcceptEncoding(acceptEncoding);
+	if (prefs.length === 0) return null;
+	if (accepts(prefs, "br")) return "br";
+	if (accepts(prefs, "gzip")) return "gzip";
+	return null;
+}
+var cache = /* @__PURE__ */ new Map();
+var inFlight = /* @__PURE__ */ new Map();
+var compressions = 0;
+var hits = 0;
+var cachedBytes = 0;
+function cacheKey(key) {
+	return `${key.encoding}|${String(key.mtimeMs)}|${String(key.size)}|${key.path}`;
+}
+/** Evict least-recently-used entries until both bounds hold. */
+function evictToBounds() {
+	for (const [k, buf] of cache) {
+		if (cache.size <= MAX_CACHE_ENTRIES && cachedBytes <= MAX_CACHE_BYTES) return;
+		cache.delete(k);
+		cachedBytes -= buf.byteLength;
+	}
+}
+async function compressBody(raw, encoding) {
+	if (encoding === "gzip") return await gzipAsync(raw);
+	return await brotliAsync(raw, { params: {
+		[constants$1.BROTLI_PARAM_QUALITY]: BROTLI_QUALITY,
+		[constants$1.BROTLI_PARAM_SIZE_HINT]: raw.byteLength
+	} });
+}
+/**
+* Compressed bytes for one asset, compressing at most once per key.
+*
+* `null` means "send the original" — the asset is too large to buffer, the
+* source could not be read, or compression did not actually shrink it. Every
+* failure degrades to identity, so this can only ever be an optimisation.
+*
+* Concurrent callers for the same key share ONE compression: a cold cache hit by
+* a dozen parallel asset requests must not run zlib a dozen times.
+*/
+async function getCompressedAsset(key, readSource) {
+	if (key.size > 8388608) return null;
+	const id = cacheKey(key);
+	const cached = cache.get(id);
+	if (cached) {
+		cache.delete(id);
+		cache.set(id, cached);
+		hits += 1;
+		return cached;
+	}
+	const pending = inFlight.get(id) ?? (async () => {
+		let raw;
+		try {
+			raw = await readSource();
+		} catch {
+			return null;
+		}
+		const out = await compressBody(raw, key.encoding);
+		compressions += 1;
+		if (out.byteLength >= raw.byteLength) return null;
+		cache.set(id, out);
+		cachedBytes += out.byteLength;
+		evictToBounds();
+		return out;
+	})();
+	inFlight.set(id, pending);
+	try {
+		return await pending;
+	} catch {
+		return null;
+	} finally {
+		inFlight.delete(id);
+	}
+}
+//#endregion
 //#region src/http/file-data-plane.ts
 /**
 * A ready-made data-plane request handler that serves files from a set of roots
@@ -226,6 +410,11 @@ async function handle(opts, cors, req, res) {
 * the hub already authenticated the caller and the data plane is same-origin
 * through the hub's port. Reuses the shared Range/content-type/traversal helpers
 * so there is one implementation across the standalone file-server and this.
+*
+* It also owns its own CONTENT-CODING. The hub bridge is `{ compress: false }`
+* because the global compressor emits an empty brotli stream over the forked-
+* addon route bridge, so nothing above this layer will ever compress an addon
+* body — see `asset-compression.ts` for the incident and the contract.
 */
 /** Build a `(req, res)` handler that serves `getRoots()` files with Range. */
 function createFileDataPlaneHandler(opts) {
@@ -253,11 +442,13 @@ function createFileDataPlaneHandler(opts) {
 		}
 		let absPath = null;
 		let size = 0;
+		let mtimeMs = 0;
 		for (const candidate of resolved.candidates) try {
 			const st = await promises.stat(candidate);
 			if (st.isFile()) {
 				absPath = candidate;
 				size = st.size;
+				mtimeMs = st.mtimeMs;
 				break;
 			}
 		} catch {}
@@ -265,10 +456,13 @@ function createFileDataPlaneHandler(opts) {
 			res.writeHead(404).end();
 			return;
 		}
+		const contentType = contentTypeFor(absPath, opts.contentTypes);
+		const compressible = isCompressibleContentType(contentType);
 		const baseHeaders = {
-			"content-type": contentTypeFor(absPath, opts.contentTypes),
+			"content-type": contentType,
 			"accept-ranges": "bytes",
-			"cache-control": opts.cacheControl?.(rel) ?? "no-cache"
+			"cache-control": opts.cacheControl?.(rel) ?? "no-cache",
+			...compressible ? { vary: "accept-encoding" } : {}
 		};
 		const range = parseRangeHeader(req.headers.range, size);
 		if (range) {
@@ -287,6 +481,30 @@ function createFileDataPlaneHandler(opts) {
 			}).pipe(res);
 			return;
 		}
+		const encoding = compressible ? negotiateContentEncoding(req.headers["accept-encoding"]) : null;
+		if (encoding !== null && size >= 1024) {
+			const filePath = absPath;
+			const body = await getCompressedAsset({
+				path: filePath,
+				mtimeMs,
+				size,
+				encoding
+			}, () => promises.readFile(filePath));
+			if (body !== null) {
+				res.writeHead(200, {
+					...baseHeaders,
+					"content-encoding": encoding,
+					"accept-ranges": "none",
+					"content-length": String(body.byteLength)
+				});
+				if (req.method === "HEAD") {
+					res.end();
+					return;
+				}
+				res.end(body);
+				return;
+			}
+		}
 		res.writeHead(200, {
 			...baseHeaders,
 			"content-length": String(size)

package/dist/{model-download-service-Cpc6SWzV.js → model-download-service-Caj1kaSi.js}

@@ -5,6 +5,8 @@ let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
+let node_util = require("node:util");
+let node_zlib = require("node:zlib");
 //#region src/http/authenticated-file-server.ts
 /**
 * Authenticated data-plane file-server — a shared host primitive for addons that
@@ -215,6 +217,188 @@ async function handle(opts, cors, req, res) {
 	(0, node_fs.createReadStream)(absPath).pipe(res);
 }
 //#endregion
+//#region src/http/asset-compression.ts
+/**
+* Content-coding for addon-served static assets: `Accept-Encoding` negotiation,
+* an eligibility rule, and a BOUNDED cache of the compressed bytes.
+*
+* ## Why the ADDON owns the encoding
+*
+* The hub's `/addon/:addonId/*` bridge is registered `{ compress: false }`. That
+* is not an oversight — on 2026-07-16 the global `@fastify/compress` was found
+* emitting an EMPTY brotli stream (`content-encoding: br`, `content-length: 0`)
+* for any compressible body over its 1 KiB threshold once the body had crossed
+* the UDS route bridge of a FORKED addon. It silently broke the notifier SVG
+* icons; the deploy-bundle pull route had already dodged the same class with
+* `compress: false`. The resolution then, and the contract now, is that an addon
+* route owns its content-coding END TO END: it negotiates, it compresses, it
+* stamps `content-encoding` + `Vary`, and the hub pipes those bytes through
+* untouched (`proxyToUpstream` replays the upstream headers verbatim).
+*
+* So compression belongs HERE, in the shared file data-plane, and nowhere above
+* it. Anything that re-compresses on top of this reintroduces the empty-brotli
+* bug rather than doubling the ratio.
+*
+* ## Why the bytes are cached, and why the cache is bounded
+*
+* Measured on the stream-broker embed bundle (`index-<hash>.js`, 1,443,142 B):
+* gzip-6 → 360,868 B, brotli-5 → 327,419 B in 27 ms, brotli-11 → 293,677 B in
+* 2,233 ms. Quality 5 is the request-path choice: 77% off the wire for 27 ms
+* paid ONCE. Quality 11 buys another 2.3% for eighty times the CPU, on a path
+* where a real client is waiting.
+*
+* The cache is an LRU bounded by BOTH entry count and total bytes, and it
+* refuses assets over {@link COMPRESSION_MAX_ASSET_BYTES} outright. An unbounded
+* `Map` keyed by URL is how a long-lived process walks into an OOM, and this
+* repo has already spent a session on one.
+*
+* The key carries `mtimeMs` and `size`, so a rebuild that rewrites an asset in
+* place under an UNCHANGED name (an SPA shell, a service worker) can never be
+* served from the previous build's bytes.
+*/
+var brotliAsync = (0, node_util.promisify)(node_zlib.brotliCompress);
+var gzipAsync = (0, node_util.promisify)(node_zlib.gzip);
+/** LRU bounds. Both are enforced; whichever binds first evicts. */
+var MAX_CACHE_ENTRIES = 64;
+var MAX_CACHE_BYTES = 32 * 1024 * 1024;
+/** Brotli quality — see the file header for the measured trade. */
+var BROTLI_QUALITY = 5;
+/**
+* Content types worth compressing. An ALLOW-list, not a deny-list: an unknown
+* type (`application/octet-stream`) is assumed to be opaque binary. This is what
+* keeps jpeg/png/webp/mp4/m4s/woff2 out — running brotli over them burns CPU to
+* make the body marginally BIGGER.
+*/
+var COMPRESSIBLE_EXACT = new Set([
+	"application/javascript",
+	"application/ecmascript",
+	"application/json",
+	"application/manifest+json",
+	"application/wasm",
+	"application/xml",
+	"application/xhtml+xml",
+	"application/vnd.apple.mpegurl",
+	"image/svg+xml"
+]);
+/** Is a body of this content type worth compressing at all? */
+function isCompressibleContentType(contentType) {
+	const base = contentType.split(";")[0]?.trim().toLowerCase() ?? "";
+	if (base.length === 0) return false;
+	if (base.startsWith("text/")) return true;
+	if (base.endsWith("+json") || base.endsWith("+xml")) return true;
+	return COMPRESSIBLE_EXACT.has(base);
+}
+/** Parse `Accept-Encoding` into tokens with their q-values (default 1). */
+function parseAcceptEncoding(header) {
+	if (header === void 0 || header.trim().length === 0) return [];
+	const out = [];
+	for (const part of header.split(",")) {
+		const [rawToken, ...params] = part.split(";");
+		const token = rawToken?.trim().toLowerCase() ?? "";
+		if (token.length === 0) continue;
+		let q = 1;
+		for (const param of params) {
+			const [name, value] = param.split("=");
+			if (name?.trim().toLowerCase() !== "q") continue;
+			const parsed = Number(value?.trim());
+			q = Number.isFinite(parsed) ? parsed : 1;
+		}
+		out.push({
+			token,
+			q
+		});
+	}
+	return out;
+}
+function accepts(prefs, token) {
+	const exact = prefs.find((p) => p.token === token);
+	if (exact) return exact.q > 0;
+	const wildcard = prefs.find((p) => p.token === "*");
+	return wildcard !== void 0 && wildcard.q > 0;
+}
+/**
+* Pick a coding for this request: brotli when offered, else gzip, else identity.
+*
+* Returns `null` for identity — including when the header is ABSENT. A client
+* that offers nothing gets the raw bytes; guessing on its behalf is how a
+* non-negotiating consumer (a native fetch, a probe, an OTA puller) ends up with
+* a body it cannot read.
+*/
+function negotiateContentEncoding(acceptEncoding) {
+	const prefs = parseAcceptEncoding(acceptEncoding);
+	if (prefs.length === 0) return null;
+	if (accepts(prefs, "br")) return "br";
+	if (accepts(prefs, "gzip")) return "gzip";
+	return null;
+}
+var cache = /* @__PURE__ */ new Map();
+var inFlight = /* @__PURE__ */ new Map();
+var compressions = 0;
+var hits = 0;
+var cachedBytes = 0;
+function cacheKey(key) {
+	return `${key.encoding}|${String(key.mtimeMs)}|${String(key.size)}|${key.path}`;
+}
+/** Evict least-recently-used entries until both bounds hold. */
+function evictToBounds() {
+	for (const [k, buf] of cache) {
+		if (cache.size <= MAX_CACHE_ENTRIES && cachedBytes <= MAX_CACHE_BYTES) return;
+		cache.delete(k);
+		cachedBytes -= buf.byteLength;
+	}
+}
+async function compressBody(raw, encoding) {
+	if (encoding === "gzip") return await gzipAsync(raw);
+	return await brotliAsync(raw, { params: {
+		[node_zlib.constants.BROTLI_PARAM_QUALITY]: BROTLI_QUALITY,
+		[node_zlib.constants.BROTLI_PARAM_SIZE_HINT]: raw.byteLength
+	} });
+}
+/**
+* Compressed bytes for one asset, compressing at most once per key.
+*
+* `null` means "send the original" — the asset is too large to buffer, the
+* source could not be read, or compression did not actually shrink it. Every
+* failure degrades to identity, so this can only ever be an optimisation.
+*
+* Concurrent callers for the same key share ONE compression: a cold cache hit by
+* a dozen parallel asset requests must not run zlib a dozen times.
+*/
+async function getCompressedAsset(key, readSource) {
+	if (key.size > 8388608) return null;
+	const id = cacheKey(key);
+	const cached = cache.get(id);
+	if (cached) {
+		cache.delete(id);
+		cache.set(id, cached);
+		hits += 1;
+		return cached;
+	}
+	const pending = inFlight.get(id) ?? (async () => {
+		let raw;
+		try {
+			raw = await readSource();
+		} catch {
+			return null;
+		}
+		const out = await compressBody(raw, key.encoding);
+		compressions += 1;
+		if (out.byteLength >= raw.byteLength) return null;
+		cache.set(id, out);
+		cachedBytes += out.byteLength;
+		evictToBounds();
+		return out;
+	})();
+	inFlight.set(id, pending);
+	try {
+		return await pending;
+	} catch {
+		return null;
+	} finally {
+		inFlight.delete(id);
+	}
+}
+//#endregion
 //#region src/http/file-data-plane.ts
 /**
 * A ready-made data-plane request handler that serves files from a set of roots
@@ -227,6 +411,11 @@ async function handle(opts, cors, req, res) {
 * the hub already authenticated the caller and the data plane is same-origin
 * through the hub's port. Reuses the shared Range/content-type/traversal helpers
 * so there is one implementation across the standalone file-server and this.
+*
+* It also owns its own CONTENT-CODING. The hub bridge is `{ compress: false }`
+* because the global compressor emits an empty brotli stream over the forked-
+* addon route bridge, so nothing above this layer will ever compress an addon
+* body — see `asset-compression.ts` for the incident and the contract.
 */
 /** Build a `(req, res)` handler that serves `getRoots()` files with Range. */
 function createFileDataPlaneHandler(opts) {
@@ -254,11 +443,13 @@ function createFileDataPlaneHandler(opts) {
 		}
 		let absPath = null;
 		let size = 0;
+		let mtimeMs = 0;
 		for (const candidate of resolved.candidates) try {
 			const st = await node_fs.promises.stat(candidate);
 			if (st.isFile()) {
 				absPath = candidate;
 				size = st.size;
+				mtimeMs = st.mtimeMs;
 				break;
 			}
 		} catch {}
@@ -266,10 +457,13 @@ function createFileDataPlaneHandler(opts) {
 			res.writeHead(404).end();
 			return;
 		}
+		const contentType = contentTypeFor(absPath, opts.contentTypes);
+		const compressible = isCompressibleContentType(contentType);
 		const baseHeaders = {
-			"content-type": contentTypeFor(absPath, opts.contentTypes),
+			"content-type": contentType,
 			"accept-ranges": "bytes",
-			"cache-control": opts.cacheControl?.(rel) ?? "no-cache"
+			"cache-control": opts.cacheControl?.(rel) ?? "no-cache",
+			...compressible ? { vary: "accept-encoding" } : {}
 		};
 		const range = parseRangeHeader(req.headers.range, size);
 		if (range) {
@@ -288,6 +482,30 @@ function createFileDataPlaneHandler(opts) {
 			}).pipe(res);
 			return;
 		}
+		const encoding = compressible ? negotiateContentEncoding(req.headers["accept-encoding"]) : null;
+		if (encoding !== null && size >= 1024) {
+			const filePath = absPath;
+			const body = await getCompressedAsset({
+				path: filePath,
+				mtimeMs,
+				size,
+				encoding
+			}, () => node_fs.promises.readFile(filePath));
+			if (body !== null) {
+				res.writeHead(200, {
+					...baseHeaders,
+					"content-encoding": encoding,
+					"accept-ranges": "none",
+					"content-length": String(body.byteLength)
+				});
+				if (req.method === "HEAD") {
+					res.end();
+					return;
+				}
+				res.end(body);
+				return;
+			}
+		}
 		res.writeHead(200, {
 			...baseHeaders,
 			"content-length": String(size)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.62",
+  "version": "1.2.64",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",
@@ -267,6 +267,9 @@
           },
           {
             "name": "user-management"
+          },
+          {
+            "name": "oauth-integration"
           }
         ]
       },
@@ -349,6 +352,7 @@
     "bcryptjs": "^3.0.3",
     "better-sqlite3": "^12.8.0",
     "croner": "^10.0.1",
+    "esbuild": "^0.27.7",
     "js-yaml": "^4.1.0",
     "jsonwebtoken": "^9.0.0",
     "moleculer": "^0.15.0",

package/dist/builtins/device-manager/device-link-cycle.d.ts

@@ -1,18 +0,0 @@
-import { DeviceLink } from '@camstack/types';
-/** The slice of a persisted meta row cycle detection needs. Structural subset
- *  of `PersistedDeviceMeta` so tests (and future callers) can pass plain rows. */
-export interface LinkCycleMetaRow {
-    readonly id: number;
-    readonly stableId: string;
-    readonly parentDeviceId: number | null;
-    readonly deviceLinks?: readonly DeviceLink[];
-}
-/** Node key of the dependency graph: `${deviceId}:${cap}`. */
-type NodeKey = string;
-/**
- * Detect whether replacing `editedDeviceId`'s links with `editedLinks` closes
- * a dependency cycle. Returns the cycle as an ordered list of node keys
- * (first node repeated at the end) or null when the set is safe.
- */
-export declare function findDeviceLinkCycle(allMeta: Record<string, LinkCycleMetaRow>, editedDeviceId: number, editedLinks: readonly DeviceLink[]): readonly NodeKey[] | null;
-export {};

package/dist/builtins/device-manager/device-link-overlay.d.ts

@@ -1,33 +0,0 @@
-import { DeviceLink } from '@camstack/types';
-/** A target link with its source already resolved to a live numeric id. */
-export interface ResolvedTargetLink {
-    readonly link: DeviceLink;
-    /** Resolved source device id for scalar sources; `-1` sentinel for a literal
-     *  source AND for an expression source (whose per-binding ids live below). */
-    readonly sourceDeviceId: number;
-    /** Expression links only: binding name → resolved source device id. Literal
-     *  bindings and unresolved bindings are ABSENT from the map. */
-    readonly bindingSourceIds?: Readonly<Record<string, number>>;
-}
-/** A target that depends on a given source slice (for reactive re-emit). */
-export interface DependentLink {
-    readonly targetDeviceId: number;
-    readonly targetCap: string;
-}
-export interface LinkIndexes {
-    /** `${targetDeviceId}:${targetCap}` → the resolved links feeding it. */
-    readonly targets: Map<string, ResolvedTargetLink[]>;
-    /** `${sourceDeviceId}:${sourceCap}` → targets to recompute on a source change. */
-    readonly dependents: Map<string, DependentLink[]>;
-}
-/** One resolved link entry fed to `buildLinkIndexes`. */
-export interface LinkIndexEntry {
-    readonly targetDeviceId: number;
-    readonly link: DeviceLink;
-    /** Resolved scalar source id; `-1` for literal/expression sources. */
-    readonly sourceDeviceId: number;
-    /** Expression links: binding name → resolved source device id. */
-    readonly bindingSourceIds?: Readonly<Record<string, number>>;
-}
-/** Build both lookup maps from resolved link entries. Pure — order-preserving. */
-export declare function buildLinkIndexes(entries: ReadonlyArray<LinkIndexEntry>): LinkIndexes;

package/dist/builtins/device-manager/device-link-resolver.d.ts

@@ -1,44 +0,0 @@
-import { z } from 'zod';
-import { CapabilityStatusItemArray, DeviceLink } from '@camstack/types';
-import { ResolvedTargetLink } from './device-link-overlay.js';
-/** One resolved source reading paired with the link that produced it. The
- *  `sourceValue` is already transformed; `undefined` skips the overlay. */
-export interface ResolvedLinkValue {
-    readonly link: DeviceLink;
-    readonly sourceValue: unknown;
-}
-/**
- * Resolve one link's transformed value. Field sources read via `readField`
- * (the caller supplies the sibling lookup — sync, e.g. the in-hub state
- * mirror); literal sources use their per-device constant and never consult
- * the reader. Returns `undefined` to skip the overlay (unreadable field).
- * Pure. Async source reads (`resolveLinkedStatus`'s provider `getStatus`
- * path) cannot use this helper for field sources — they branch on
- * `source.kind` directly.
- */
-export declare function resolveLinkValue(link: DeviceLink, readField: (cap: string, fieldPath: string) => unknown): unknown;
-/**
- * Sync-channel expression resolution: bindings read from the mirror via
- * `readField(deviceId, cap, fieldPath)` using the pre-resolved per-binding ids
- * on the `ResolvedTargetLink`. A literal binding uses its constant; an absent
- * binding id (dangling source) or a non-primitive read resolves to `null`.
- * Returns `undefined` on parse/eval failure (skip overlay) — silent by design:
- * the mirror path is hot and churn-free; the async channel logs. Compile
- * failures cost one parse ever thanks to the negative LRU compile cache. Pure.
- */
-export declare function resolveExpressionLinkValue(rl: ResolvedTargetLink, readField: (deviceId: number, cap: string, fieldPath: string) => unknown, now: number): unknown;
-/**
- * Overlay transformed source values onto `base` by dot-path, then validate the
- * result against the target cap's `statusSchema`. On validation failure the
- * overlay is discarded and `base` is returned unchanged (a misconfigured link
- * must never corrupt a cap response). Pure — all I/O happens in the caller.
- *
- * Item-array grouping (P2b): when the cap declares `status.itemArray`, links
- * carrying a `target.itemKey` are grouped per key and upserted as items into
- * the array (see `upsertItemArrayLinks`); their `fieldPath` is relative to
- * ONE item ('level', 'status', 'label'). Links WITHOUT an itemKey keep the
- * scalar dot-path behavior unchanged. A link with an itemKey on a cap that
- * declares NO `itemArray` is dropped (its item-relative path must never be
- * scalar-applied to the status root).
- */
-export declare function mergeLinkedStatus(base: Record<string, unknown>, resolved: readonly ResolvedLinkValue[], statusSchema?: z.ZodType, itemArray?: CapabilityStatusItemArray): Record<string, unknown>;