@camstack/system 1.2.83 → 1.2.84

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, v as addonPagesCapability } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, v as addonPagesCapability } from "../../dist-BAwlOEUy.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, b as addonWidgetsCapability, gt as BaseAddon, ht as errMsg } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, b as addonWidgetsCapability, gt as BaseAddon, ht as errMsg } from "../../dist-BAwlOEUy.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent, n as AlertSchema, x as alertsCapability } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent, n as AlertSchema, x as alertsCapability } from "../../dist-BAwlOEUy.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { C as backupCapability, Ht as EventCategory, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { C as backupCapability, Ht as EventCategory, gt as BaseAddon } from "../../dist-BAwlOEUy.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-BAwlOEUy.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { D as coreBlockIdFromAddonId, E as coreBlockAddonId, O as coreBlocksCapability, c as CoreBlockSchema, gt as BaseAddon, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX } from "../../dist-EAvNJD24.mjs";
+import { D as coreBlockIdFromAddonId, E as coreBlockAddonId, O as coreBlocksCapability, c as CoreBlockSchema, gt as BaseAddon, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX } from "../../dist-BAwlOEUy.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, I as enumerateItemArrayFields, L as enumerateSchemaFields, M as deviceStateCapability, N as deviceStatusCapability, Pt as isDeviceConfigCap, Q as normalizeUnit, St as DeviceType, T as buildStreamParamsConfigSchema, Tt as WELL_KNOWN_TAB_MAP, Vt as sleep, a as CAP_NAMES_WITH_STATUS, bt as DeviceFeature, et as parseStreamParamsFormPatch, gt as BaseAddon, ht as errMsg, j as deviceManagerCapability, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, xt as DeviceRole } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, I as enumerateItemArrayFields, L as enumerateSchemaFields, M as deviceStateCapability, N as deviceStatusCapability, Pt as isDeviceConfigCap, Q as normalizeUnit, St as DeviceType, T as buildStreamParamsConfigSchema, Tt as WELL_KNOWN_TAB_MAP, Vt as sleep, a as CAP_NAMES_WITH_STATUS, bt as DeviceFeature, et as parseStreamParamsFormPatch, gt as BaseAddon, ht as errMsg, j as deviceManagerCapability, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, xt as DeviceRole } from "../../dist-BAwlOEUy.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, P as doorbellCapability, St as DeviceType, U as isSameAddonId, gt as BaseAddon, ht as errMsg, kt as createEvent, w as bareAddonId } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, P as doorbellCapability, St as DeviceType, U as isSameAddonId, gt as BaseAddon, ht as errMsg, kt as createEvent, w as bareAddonId } from "../../dist-BAwlOEUy.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-BAwlOEUy.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon, ht as errMsg, kt as createEvent } from "../../dist-BAwlOEUy.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { S as authProviderCapability, _ as UserRecordSchema, ft as userManagementCapability, gt as BaseAddon, m as ScopedTokenSchema, r as ApiKeyRecordSchema } from "../../dist-EAvNJD24.mjs";
+import { S as authProviderCapability, _ as UserRecordSchema, ft as userManagementCapability, gt as BaseAddon, m as ScopedTokenSchema, r as ApiKeyRecordSchema } from "../../dist-BAwlOEUy.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 //#region src/builtins/local-network/local-network.addon.ts

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon, q as localNetworkCapability } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon, q as localNetworkCapability } from "../../dist-BAwlOEUy.mjs";
 import * as os from "node:os";
 //#region src/builtins/local-network/local-network.addon.ts
 /**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { J as logDestinationCapability, gt as BaseAddon } from "../../dist-BAwlOEUy.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, Z as metricsProviderCapability, gt as BaseAddon, kt as createEvent } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, Z as metricsProviderCapability, gt as BaseAddon, kt as createEvent } from "../../dist-BAwlOEUy.mjs";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { F as enumerateInferenceDevices, Ht as EventCategory, at as scoreRuntimes, gt as BaseAddon, ht as errMsg, jt as emitReadiness, tt as platformProbeCapability } from "../../dist-EAvNJD24.mjs";
+import { F as enumerateInferenceDevices, Ht as EventCategory, at as scoreRuntimes, gt as BaseAddon, ht as errMsg, jt as emitReadiness, tt as platformProbeCapability } from "../../dist-BAwlOEUy.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ht as EventCategory, gt as BaseAddon } from "../../dist-EAvNJD24.mjs";
+import { Ht as EventCategory, gt as BaseAddon } from "../../dist-BAwlOEUy.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Ft as nodePin, Ht as EventCategory, St as DeviceType, bt as DeviceFeature, dt as streamQualityLabel, gt as BaseAddon, ht as errMsg, i as BatteryStatusSchema, st as snapshotCapability, w as bareAddonId } from "../../dist-EAvNJD24.mjs";
+import { Ft as nodePin, Ht as EventCategory, St as DeviceType, bt as DeviceFeature, dt as streamQualityLabel, gt as BaseAddon, ht as errMsg, i as BatteryStatusSchema, st as snapshotCapability, w as bareAddonId } from "../../dist-BAwlOEUy.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
@@ -13,9 +13,16 @@ let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 //#region src/builtins/sqlite-storage/path-guard.ts
 /**
-* Allowed-root containment guard for the filesystem-browse cap. Pure +
-* synchronous so it is trivially unit-testable; the provider applies it AFTER
-* resolving the real path (so symlink escapes are also caught upstream).
+* Guards for the filesystem-browse cap. Pure + synchronous so they are
+* trivially unit-testable; the provider applies containment AFTER resolving the
+* real path (so symlink escapes are also caught upstream).
+*
+* The guard is SPLIT (D115): `assertWithinAllowedRoots` contains WRITES
+* (`createDir`) to the operator's allowed roots, while `assertBrowsablePath`
+* lets read-only discovery (`browse`) see the whole filesystem. Confining
+* discovery to the same roots meant the admin UI could not list `/`, so the
+* path picker could not offer — or even reach — the mounts this node's own
+* storage locations live on.
 */
 /** True iff `candidate` is one of, or nested under, an allowed root. */
 function isWithinAllowedRoots(candidate, allowedRoots) {
@@ -25,17 +32,30 @@ function isWithinAllowedRoots(candidate, allowedRoots) {
 		return norm === r || norm.startsWith(r.endsWith(node_path.sep) ? r : r + node_path.sep);
 	});
 }
-/** Throws unless `candidate` is within an allowed root. */
+/** Throws unless `candidate` is within an allowed root. WRITES only. */
 function assertWithinAllowedRoots(candidate, allowedRoots) {
 	if (!isWithinAllowedRoots(candidate, allowedRoots)) throw new Error(`path "${candidate}" is not within an allowed root`);
 }
+/**
+* Throws unless `candidate` is a browsable path. Read-only discovery is
+* deliberately unconfined — the only requirement is an absolute path, so a
+* relative one can never be resolved against whatever the runner's cwd
+* happens to be.
+*/
+function assertBrowsablePath(candidate) {
+	if (!(0, node_path.isAbsolute)(candidate)) throw new Error(`browse path "${candidate}" must be absolute`);
+}
 //#endregion
 //#region src/builtins/sqlite-storage/filesystem-browse-provider.ts
 /**
-* Per-node filesystem-browse provider. Lists/creates directories under
-* operator-configured allowed roots only (sandboxed by `path-guard`). Backs the
-* `filesystem-browse` cap so the admin UI can pick a node + path for a
-* node-local storage location.
+* Per-node filesystem-browse provider. Backs the `filesystem-browse` cap so the
+* admin UI can pick a node + path for a node-local storage location.
+*
+* The two halves are guarded differently (D115): `browse` is read-only
+* discovery and sees the whole filesystem from `/` down, while `createDir`
+* stays contained to the operator's allowed roots. Containing discovery too
+* meant the picker could not list `/`, and therefore could not show the mounts
+* this node's own storage locations already live on.
 */
 var FilesystemBrowseProvider = class {
 	allowedRoots;
@@ -47,8 +67,8 @@ var FilesystemBrowseProvider = class {
 		return [...this.allowedRoots()];
 	}
 	async browse({ path }) {
+		assertBrowsablePath(path);
 		const real = await (0, node_fs_promises.realpath)(path).catch(() => path);
-		assertWithinAllowedRoots(real, await this.resolvedRoots());
 		const entries = (await (0, node_fs_promises.readdir)(real, { withFileTypes: true })).filter((d) => d.isDirectory()).map((d) => ({
 			name: d.name,
 			path: (0, node_path.join)(real, d.name)

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,15 +1,22 @@
-import { gt as BaseAddon, ut as storageProviderCapability, z as filesystemBrowseCapability } from "../../dist-EAvNJD24.mjs";
+import { gt as BaseAddon, ut as storageProviderCapability, z as filesystemBrowseCapability } from "../../dist-BAwlOEUy.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";
-import { basename, dirname, join, resolve, sep } from "node:path";
+import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
 import { homedir } from "node:os";
 import * as fs from "node:fs";
 //#region src/builtins/sqlite-storage/path-guard.ts
 /**
-* Allowed-root containment guard for the filesystem-browse cap. Pure +
-* synchronous so it is trivially unit-testable; the provider applies it AFTER
-* resolving the real path (so symlink escapes are also caught upstream).
+* Guards for the filesystem-browse cap. Pure + synchronous so they are
+* trivially unit-testable; the provider applies containment AFTER resolving the
+* real path (so symlink escapes are also caught upstream).
+*
+* The guard is SPLIT (D115): `assertWithinAllowedRoots` contains WRITES
+* (`createDir`) to the operator's allowed roots, while `assertBrowsablePath`
+* lets read-only discovery (`browse`) see the whole filesystem. Confining
+* discovery to the same roots meant the admin UI could not list `/`, so the
+* path picker could not offer — or even reach — the mounts this node's own
+* storage locations live on.
 */
 /** True iff `candidate` is one of, or nested under, an allowed root. */
 function isWithinAllowedRoots(candidate, allowedRoots) {
@@ -19,17 +26,30 @@ function isWithinAllowedRoots(candidate, allowedRoots) {
 		return norm === r || norm.startsWith(r.endsWith(sep) ? r : r + sep);
 	});
 }
-/** Throws unless `candidate` is within an allowed root. */
+/** Throws unless `candidate` is within an allowed root. WRITES only. */
 function assertWithinAllowedRoots(candidate, allowedRoots) {
 	if (!isWithinAllowedRoots(candidate, allowedRoots)) throw new Error(`path "${candidate}" is not within an allowed root`);
 }
+/**
+* Throws unless `candidate` is a browsable path. Read-only discovery is
+* deliberately unconfined — the only requirement is an absolute path, so a
+* relative one can never be resolved against whatever the runner's cwd
+* happens to be.
+*/
+function assertBrowsablePath(candidate) {
+	if (!isAbsolute(candidate)) throw new Error(`browse path "${candidate}" must be absolute`);
+}
 //#endregion
 //#region src/builtins/sqlite-storage/filesystem-browse-provider.ts
 /**
-* Per-node filesystem-browse provider. Lists/creates directories under
-* operator-configured allowed roots only (sandboxed by `path-guard`). Backs the
-* `filesystem-browse` cap so the admin UI can pick a node + path for a
-* node-local storage location.
+* Per-node filesystem-browse provider. Backs the `filesystem-browse` cap so the
+* admin UI can pick a node + path for a node-local storage location.
+*
+* The two halves are guarded differently (D115): `browse` is read-only
+* discovery and sees the whole filesystem from `/` down, while `createDir`
+* stays contained to the operator's allowed roots. Containing discovery too
+* meant the picker could not list `/`, and therefore could not show the mounts
+* this node's own storage locations already live on.
 */
 var FilesystemBrowseProvider = class {
 	allowedRoots;
@@ -41,8 +61,8 @@ var FilesystemBrowseProvider = class {
 		return [...this.allowedRoots()];
 	}
 	async browse({ path }) {
+		assertBrowsablePath(path);
 		const real = await realpath(path).catch(() => path);
-		assertWithinAllowedRoots(real, await this.resolvedRoots());
 		const entries = (await readdir(real, { withFileTypes: true })).filter((d) => d.isDirectory()).map((d) => ({
 			name: d.name,
 			path: join(real, d.name)

package/dist/builtins/sqlite-storage/path-guard.d.ts

@@ -1,4 +1,11 @@
 /** True iff `candidate` is one of, or nested under, an allowed root. */
 export declare function isWithinAllowedRoots(candidate: string, allowedRoots: readonly string[]): boolean;
-/** Throws unless `candidate` is within an allowed root. */
+/** Throws unless `candidate` is within an allowed root. WRITES only. */
 export declare function assertWithinAllowedRoots(candidate: string, allowedRoots: readonly string[]): void;
+/**
+ * Throws unless `candidate` is a browsable path. Read-only discovery is
+ * deliberately unconfined — the only requirement is an absolute path, so a
+ * relative one can never be resolved against whatever the runner's cwd
+ * happens to be.
+ */
+export declare function assertBrowsablePath(candidate: string): void;

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CqiMPPs0.js");
+const require_dist = require("../../dist-CQy9KjsL.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 let node_module = require("node:module");

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { A as decodeVectorBase64, Et as asJsonObject, Lt as parseJsonUnknown, f as RUNTIME_DEFAULTS, gt as BaseAddon, ht as errMsg, k as dataStoreProviderCapability, mt as vectorStoreCapability, pt as vectorDimFromBase64, w as bareAddonId } from "../../dist-EAvNJD24.mjs";
+import { A as decodeVectorBase64, Et as asJsonObject, Lt as parseJsonUnknown, f as RUNTIME_DEFAULTS, gt as BaseAddon, ht as errMsg, k as dataStoreProviderCapability, mt as vectorStoreCapability, pt as vectorDimFromBase64, w as bareAddonId } from "../../dist-BAwlOEUy.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { statSync } from "node:fs";

package/dist/builtins/storage-orchestrator/index.d.ts

@@ -1,8 +1,7 @@
-export { StorageOrchestratorAddon } from './storage-orchestrator.addon.js';
-export { StorageOrchestratorAddon as default } from './storage-orchestrator.addon.js';
-export { StorageOrchestratorService } from './storage-orchestrator.service.js';
-export { StorageMigrationCoordinator } from './storage-migration-coordinator.js';
+export type { ILocationStore } from './location-store.js';
+export { SqliteLocationStore } from './location-store.js';
 export type { FootageMigrationParticipant, LeaseParticipant, MediaMigrationParticipant, MigrationState, StorageMigrationCoordinatorDeps, StorageMigrationParticipants, } from './storage-migration-coordinator.js';
+export { StorageMigrationCoordinator } from './storage-migration-coordinator.js';
+export { StorageOrchestratorAddon, StorageOrchestratorAddon as default, } from './storage-orchestrator.addon.js';
 export type { ListLocationsFilter, StorageProviderLookup } from './storage-orchestrator.service.js';
-export { SqliteLocationStore } from './location-store.js';
-export type { ILocationStore } from './location-store.js';
+export { StorageOrchestratorService } from './storage-orchestrator.service.js';

package/dist/builtins/storage-orchestrator/index.mjs

@@ -1,2 +1,2 @@
-import { StorageOrchestratorAddon, n as SqliteLocationStore, r as StorageOrchestratorService, t as StorageMigrationCoordinator } from "./storage-orchestrator.addon.mjs";
+import { StorageOrchestratorAddon, n as StorageMigrationCoordinator, r as SqliteLocationStore, t as StorageOrchestratorService } from "./storage-orchestrator.addon.mjs";
 export { SqliteLocationStore, StorageMigrationCoordinator, StorageOrchestratorAddon, StorageOrchestratorAddon as default, StorageOrchestratorService };

package/dist/builtins/storage-orchestrator/provider-discovery.d.ts

@@ -1,4 +1,4 @@
-import { IStorageProviderImpl, IStorageCapProvider } from '@camstack/types';
+import { IStorageCapProvider, IStorageProviderImpl } from '@camstack/types';
 /** One entry of the `storage.listProviders` output array. */
 export type StorageProviderListEntry = Awaited<ReturnType<IStorageCapProvider['listProviders']>>[number];
 /**

package/dist/builtins/storage-orchestrator/storage-migration-coordinator.d.ts

@@ -1,4 +1,4 @@
-import { RelocateJob, StorageMigrationFootageMoveInput, StorageMigrationMediaMoveInput, StorageMigrationInput, StorageMigrationJob, StorageMigrationPlan } from '@camstack/types';
+import { RelocateJob, StorageMigrationFootageMoveInput, StorageMigrationInput, StorageMigrationJob, StorageMigrationMediaMoveInput, StorageMigrationPlan } from '@camstack/types';
 import { StorageOrchestratorService } from './storage-orchestrator.service.js';
 export interface MigrationState {
     get(): Promise<StorageMigrationJob | null>;

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.d.ts

@@ -1,4 +1,4 @@
-import { BaseAddon, ProviderRegistration } from '@camstack/types';
+import { ProviderRegistration, BaseAddon } from '@camstack/types';
 interface StorageOrchestratorConfig extends Record<string, unknown> {
 }
 export declare class StorageOrchestratorAddon extends BaseAddon<StorageOrchestratorConfig> {