@ultrst-armada/kloks 1.2.0 → 1.3.0

package/packages/backend/dist/{chunk-MN54ZIKZ.js → chunk-KX3OTBQ3.js}

@@ -166,7 +166,7 @@ async function getPrimarySrklDeploymentUrl(queryDb) {
   cachedSrklUrl = { url: fallback, expiresAt: Date.now() + 10 * 60 * 1e3 };
   return fallback;
 }
-async function getSrklAccounts(userId, service, queryDb) {
+async function getSrklAccounts(userId, service2, queryDb) {
   const srklUrl = await getPrimarySrklDeploymentUrl(queryDb);
   const accounts = [];
   const seenKeys = /* @__PURE__ */ new Set();
@@ -182,7 +182,7 @@ async function getSrklAccounts(userId, service, queryDb) {
           ...p.loky?.storage_connections || []
         ];
         for (const conn of pool) {
-          if (service && !conn.provider?.toLowerCase().includes(service.toLowerCase())) continue;
+          if (service2 && !conn.provider?.toLowerCase().includes(service2.toLowerCase())) continue;
           const kId = (conn.b2KeyId || conn.keyId || conn.accessKeyId || "").trim();
           const key = kId ? `key:${kId}` : `id:${conn.id}`;
           if (!seenKeys.has(key)) {
@@ -216,7 +216,7 @@ async function getSrklAccounts(userId, service, queryDb) {
       const list = Array.isArray(data.services) ? data.services : [];
       for (const item of list) {
         const sId = String(item.serviceId || item.id || "").toLowerCase();
-        if (service && !sId.includes(service.toLowerCase())) continue;
+        if (service2 && !sId.includes(service2.toLowerCase())) continue;
         const kId = (item.credentials?.keyId || item.credentials?.b2KeyId || "").trim();
         const key = kId ? `key:${kId}` : `id:${item.id}`;
         if (!seenKeys.has(key)) {
@@ -325,6 +325,304 @@ function useSrklServices(options) {
   };
 }
 
+// src/srkl/SrklCryptoClient.ts
+var SALT_LENGTH = 16;
+var IV_LENGTH = 12;
+var TAG_LENGTH = 16;
+var HEADER_LENGTH = SALT_LENGTH + IV_LENGTH + TAG_LENGTH;
+var PBKDF2_ITERATIONS = 1e5;
+function hexToBytes(hex) {
+  const bytes = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < bytes.length; i++) {
+    bytes[i] = parseInt(hex.substring(i * 2, i * 2 + 2), 16);
+  }
+  return bytes;
+}
+async function decryptVaultBufferInBrowser(envelopeBuffer, secretHex) {
+  const rawBytes = envelopeBuffer instanceof Uint8Array ? envelopeBuffer : new Uint8Array(envelopeBuffer);
+  if (rawBytes.length < HEADER_LENGTH) {
+    throw new Error(`Invalid encrypted vault payload: buffer too short (${rawBytes.length} bytes)`);
+  }
+  const salt = rawBytes.slice(0, SALT_LENGTH);
+  const iv = rawBytes.slice(SALT_LENGTH, SALT_LENGTH + IV_LENGTH);
+  const authTag = rawBytes.slice(SALT_LENGTH + IV_LENGTH, HEADER_LENGTH);
+  const ciphertext = rawBytes.slice(HEADER_LENGTH);
+  const ciphertextWithTag = new Uint8Array(ciphertext.length + authTag.length);
+  ciphertextWithTag.set(ciphertext, 0);
+  ciphertextWithTag.set(authTag, ciphertext.length);
+  const cryptoObj = typeof window !== "undefined" ? window.crypto : globalThis.crypto;
+  if (!cryptoObj?.subtle) {
+    throw new Error("Web Crypto API (crypto.subtle) is not available in this environment.");
+  }
+  const rawSecretBytes = new TextEncoder().encode(secretHex);
+  const baseKey = await cryptoObj.subtle.importKey(
+    "raw",
+    rawSecretBytes,
+    "PBKDF2",
+    false,
+    ["deriveKey"]
+  );
+  const aesKey = await cryptoObj.subtle.deriveKey(
+    {
+      name: "PBKDF2",
+      salt,
+      iterations: PBKDF2_ITERATIONS,
+      hash: "SHA-256"
+    },
+    baseKey,
+    { name: "AES-GCM", length: 256 },
+    false,
+    ["decrypt"]
+  );
+  const decryptedBuffer = await cryptoObj.subtle.decrypt(
+    {
+      name: "AES-GCM",
+      iv,
+      tagLength: 128
+    },
+    aesKey,
+    ciphertextWithTag
+  );
+  return new Uint8Array(decryptedBuffer);
+}
+
+// src/srkl/SrklCredentialRegistry.ts
+var SrklCredentialRegistry = class {
+  registry = /* @__PURE__ */ new Map();
+  constructor() {
+  }
+  /**
+   * Populate the in-memory registry directly from an initialized sql.js Database instance.
+   * Performs the set intersection: DB.services ∩ DEPM.supported_services.
+   */
+  populateFromSqlite(db, supportedServices) {
+    this.registry.clear();
+    const normalizedSupported = new Set(supportedServices.map((s) => s.toLowerCase().trim()));
+    try {
+      const res = db.exec("SELECT * FROM srkl_service_accounts");
+      if (!res || !res.length) return;
+      const { columns, values } = res[0];
+      for (const row of values) {
+        const item = {};
+        columns.forEach((col, idx) => {
+          item[col] = row[idx];
+        });
+        const serviceId = (item.service_id || "").toLowerCase().trim();
+        if (normalizedSupported.size > 0 && !normalizedSupported.has(serviceId)) {
+          continue;
+        }
+        let credentials = {};
+        let metadata = {};
+        try {
+          credentials = JSON.parse(item.credentials_json || "{}");
+        } catch {
+        }
+        try {
+          metadata = JSON.parse(item.metadata_json || "{}");
+        } catch {
+        }
+        const entry = {
+          id: item.id,
+          serviceId: item.service_id,
+          name: item.name,
+          credentials,
+          status: item.status,
+          lastSync: item.last_sync,
+          metadata,
+          createdAt: item.created_at,
+          updatedAt: item.updated_at
+        };
+        const existing = this.registry.get(entry.serviceId) || [];
+        existing.push(entry);
+        this.registry.set(entry.serviceId, existing);
+      }
+    } catch (err) {
+      console.warn("[SrklCredentialRegistry] Failed to query srkl_service_accounts table:", err.message);
+    }
+  }
+  /**
+   * Register a service account in volatile memory (for manual entry or synced accounts)
+   */
+  registerServiceAccount(account) {
+    const serviceId = (account.serviceId || "").toLowerCase().trim();
+    if (!serviceId) return;
+    if (!this.registry.has(serviceId)) {
+      this.registry.set(serviceId, []);
+    }
+    const existing = this.registry.get(serviceId);
+    const idx = existing.findIndex((a) => a.id === account.id);
+    if (idx >= 0) {
+      existing[idx] = account;
+    } else {
+      existing.push(account);
+    }
+  }
+  getAccountsForService(serviceId) {
+    return this.registry.get(serviceId.toLowerCase().trim()) || [];
+  }
+  getPrimaryAccount(serviceId) {
+    const list = this.getAccountsForService(serviceId);
+    return list[0] || null;
+  }
+  hasCredentials(serviceId) {
+    const list = this.getAccountsForService(serviceId);
+    return list.length > 0;
+  }
+  listAvailableServices() {
+    return Array.from(this.registry.keys());
+  }
+  toMap() {
+    const obj = {};
+    for (const [sId, accounts] of this.registry.entries()) {
+      obj[sId] = accounts;
+    }
+    return obj;
+  }
+  clear() {
+    this.registry.clear();
+  }
+};
+var globalCredentialRegistry = new SrklCredentialRegistry();
+
+// src/srkl/SrklVaultAccessClient.ts
+var SrklVaultAccessClient = class {
+  constructor(options) {
+    this.options = options;
+  }
+  options;
+  registry = new SrklCredentialRegistry();
+  activeGrant = null;
+  sqlEngine = null;
+  /**
+   * Initialize sql.js engine (WASM).
+   * Consumers can pass pre-loaded initSqlJs or let this load from window or CDN.
+   */
+  async initSqlEngine(customInitSqlJs) {
+    if (this.sqlEngine) return this.sqlEngine;
+    const initFn = customInitSqlJs || typeof window !== "undefined" && window.initSqlJs;
+    if (!initFn) {
+      throw new Error(
+        'sql.js engine not found. Ensure "sql.js" is installed or <script src="sql-wasm.js"> is loaded.'
+      );
+    }
+    this.sqlEngine = await initFn({
+      locateFile: (file) => `/${file}`
+    });
+    return this.sqlEngine;
+  }
+  /**
+   * Full pipeline: Authorize → Presigned URL → Direct Download → Decrypt → SQLite Query → Registry.
+   */
+  async loadCredentials(userSessionToken, workspaceId, customInitSqlJs) {
+    await this.initSqlEngine(customInitSqlJs);
+    const baseUrl = this.options.srklApiBaseUrl.replace(/\/+$/, "");
+    let res;
+    try {
+      res = await fetch(`${baseUrl}/api/ecosystem/vault-access`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "Authorization": `Bearer ${userSessionToken}`,
+          "x-app-id": this.options.appId,
+          ...workspaceId ? { "x-workspace-id": workspaceId } : {}
+        },
+        body: JSON.stringify({
+          appId: this.options.appId,
+          workspaceId,
+          supportedServices: this.options.supportedServices
+        })
+      });
+    } catch (fetchErr) {
+      try {
+        res = await fetch("/api/ecosystem/vault-access", {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json",
+            "Authorization": `Bearer ${userSessionToken}`,
+            "x-app-id": this.options.appId,
+            ...workspaceId ? { "x-workspace-id": workspaceId } : {}
+          },
+          body: JSON.stringify({
+            appId: this.options.appId,
+            workspaceId,
+            supportedServices: this.options.supportedServices
+          })
+        });
+      } catch {
+        throw new Error(`[SrklVaultAccess] Connection to SRKL Engine (${baseUrl}) failed: ${fetchErr.message}`);
+      }
+    }
+    if (!res.ok) {
+      const err = await res.json().catch(() => ({ error: res.statusText }));
+      throw new Error(`[SrklVaultAccess] Failed to authorize vault access: ${err.error || res.statusText}`);
+    }
+    const grant = await res.json();
+    this.activeGrant = grant;
+    const bucketResponse = await fetch(grant.presignedUrl);
+    if (!bucketResponse.ok) {
+      throw new Error(
+        `[SrklVaultAccess] Direct cloud bucket download failed (${bucketResponse.status}): ${bucketResponse.statusText}`
+      );
+    }
+    const encryptedArrayBuffer = await bucketResponse.arrayBuffer();
+    const decryptedSqliteBytes = await decryptVaultBufferInBrowser(
+      encryptedArrayBuffer,
+      grant.keyMaterial.secretHex
+    );
+    const db = new this.sqlEngine.Database(decryptedSqliteBytes);
+    try {
+      this.registry.populateFromSqlite(db, this.options.supportedServices);
+    } finally {
+      db.close();
+    }
+    return this.registry;
+  }
+  getRegistry() {
+    return this.registry;
+  }
+  getActiveGrant() {
+    return this.activeGrant;
+  }
+  clear() {
+    this.registry.clear();
+    this.activeGrant = null;
+  }
+};
+
+// src/srkl/srklSyncBridge.ts
+async function syncSrklAccounts(userId, sessionToken, srklUrl) {
+  const resp = await fetch("/api/srkl/sync", {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${sessionToken}`,
+      "x-user-id": userId
+    },
+    body: JSON.stringify({ srklUrl })
+  });
+  return await resp.json();
+}
+
+// src/srkl/srkl.ts
+var runtime = {
+  VaultAccessClient: SrklVaultAccessClient,
+  CredentialRegistry: SrklCredentialRegistry,
+  decryptVaultBufferInBrowser,
+  hexToBytes
+};
+var deployment = {
+  target: "universal",
+  supportedEngines: ["browser", "worker", "node"],
+  version: "1.0.0"
+};
+var service = {
+  name: "srkl",
+  description: "SRKL Ecosystem Volatile Memory Credential Vault Service",
+  runtime,
+  deployment
+};
+var srklService = service;
+
 export {
   CANONICAL_SRKL_URL,
   SrklClient,
@@ -332,5 +630,12 @@ export {
   getPrimarySrklDeploymentUrl,
   getSrklAccounts,
   srklListBackblazeBuckets,
-  useSrklServices
+  useSrklServices,
+  hexToBytes,
+  decryptVaultBufferInBrowser,
+  SrklCredentialRegistry,
+  globalCredentialRegistry,
+  SrklVaultAccessClient,
+  syncSrklAccounts,
+  srklService
 };

package/packages/backend/dist/chunk-RCCQ7IRM.js

@@ -1,7 +1,7 @@
 // src/control-plane/AuditLogger.ts
 import { promises as fs } from "fs";
 import path from "path";
-import { SkipoBase } from "@kloks/functions";
+import { SkipoBase } from "@ultrst-armada/kloks/functions";
 var AuditLogger = class extends SkipoBase {
   logFile;
   constructor(logFile = ".skipo/audit.jsonl") {
@@ -41,7 +41,7 @@ var AuditLogger = class extends SkipoBase {
 };
 
 // src/control-plane/DatabaseClusterManager.ts
-import { SkipoBase as SkipoBase2 } from "@kloks/functions";
+import { SkipoBase as SkipoBase2 } from "@ultrst-armada/kloks/functions";
 var DatabaseClusterManager = class _DatabaseClusterManager extends SkipoBase2 {
   config;
   health = /* @__PURE__ */ new Map();
@@ -116,7 +116,7 @@ function resolveSystemDatabaseClusterNodes(env = process.env) {
 }
 
 // src/control-plane/ControlPlaneManager.ts
-import { SkipoBase as SkipoBase3 } from "@kloks/functions";
+import { SkipoBase as SkipoBase3 } from "@ultrst-armada/kloks/functions";
 var ControlPlaneManager = class extends SkipoBase3 {
   auth;
   audit;

package/packages/backend/dist/chunk-TWCEVES2.js

@@ -1,5 +1,5 @@
 // src/api/BaseApiRoute.ts
-import { SkipoBase } from "@kloks/functions";
+import { SkipoBase } from "@ultrst-armada/kloks/functions";
 var BaseApiRoute = class extends SkipoBase {
   config;
   constructor(config = {}) {

package/packages/backend/dist/control-plane/index.d.ts

@@ -1,4 +1,4 @@
-import { SkipoBase } from '@kloks/functions';
+import { SkipoBase } from '@ultrst-armada/kloks/functions';
 import { B as BaseAccountProvider } from '../BaseAccountProvider-DduKf5HG.js';
 
 interface ClusterConfig {

package/packages/backend/dist/index.d.ts

@@ -5,16 +5,16 @@ export { B2AuthToken, BackblazeB2Adapter, LocalFSAdapter, S3Adapter, StorageAdap
 export { CloneReplicationResult, ConflictPolicy, SyncEngine, SyncState, WorkspaceCloneSyncEngine, WorkspaceConfig, WorkspaceDescriptor, WorkspaceFS, WorkspaceSecondaryClone, WorkspaceSyncSummary, formatCanonicalWorkspaceFolderName, sanitizeWorkspaceName } from './workspace/index.js';
 export { AuditEvent, AuditLogger, ClusterConfig, ControlPlaneManager, DatabaseClusterManager, HealthStatus, detectDatabaseEngine, getSystemDatabaseUrls, resolveSystemDatabaseClusterNodes } from './control-plane/index.js';
 export { ApiError, ApiResponse, BaseApiRoute, Middleware, RouteConfig, createSSEResponse, withAuth, withCors } from './api/index.js';
-import { SkipoBase } from '@kloks/functions';
+import { SkipoBase } from '@ultrst-armada/kloks/functions';
 export { A as AuthContext, B as BackendExecutor, a as BackendInstance, C as CallbackHandle, b as CapabilityContext, D as Delegation, c as DistributedLock, I as IdempotentRequest, J as Job, d as JobPriority, e as JobState, M as Message, f as MessageType, R as ResolutionStrategy, g as ResourceVersion, h as RoutingStrategy } from './types-BERZJ93O.js';
 export { BackendContract, BackendRegistry, CallbackDefinition, ConcurrencyConflictError, ConcurrencyManager, DomainContract, EventDefinition, HealthMonitor, InProcessExecutor, JobDefinition, JobHandler, JobScheduler, LoadBalancer, LockManager, OperationDefinition, RemoteExecutor, RemoteExecutorOptions, createEmptyContract } from './connectivity/index.js';
 export { B as BackendClient, a as BackendClientOptions, b as BackendResolver, c as BackendResolverOptions, C as CallbackFn, d as CallbackRegistry, D as DomainProxy, E as ErrorHandler, e as EventBus, f as EventHandler, F as FrontendSession, g as FrontendSessionOptions, G as GapHandler, H as HTTPTransport, h as HTTPTransportOptions, I as ITransport, M as MessageHandler, S as SequenceCheckResult, i as SequenceTracker, W as WebSocketTransport, j as WebSocketTransportOptions, k as createBackendClient } from './WebSocketTransport-CxUzUfwl.js';
 export { I as IdempotencyManager } from './IdempotencyManager-B5MjK871.js';
 export { BackendClientInstance, BackendProvider, BackendProviderProps, useBackend, useBackendClient } from './client/index.js';
-export { AdaptedStorageConnection, AppAccountManifest, AppServiceDeclaration, CANONICAL_SRKL_URL, EcosystemAccount, EcosystemAccountsRequest, EcosystemAccountsResponse, EcosystemServiceCategory, SrklClient, SrklClientOptions, SrklEcosystemQueryOptions, SrklEcosystemResponse, SrklServiceAccount, UseSrklServicesOptions, UseSrklServicesResult, createSrklClient, getPrimarySrklDeploymentUrl, getSrklAccounts, srklListBackblazeBuckets, useSrklServices } from './srkl/index.js';
+export { AdaptedStorageConnection, AppAccountManifest, AppServiceDeclaration, CANONICAL_SRKL_URL, CredentialRegistryMap, EcosystemAccount, EcosystemAccountsRequest, EcosystemAccountsResponse, EcosystemServiceCategory, KeyMaterial, ServiceAccountEntry, SrklClient, SrklClientOptions, SrklCredentialRegistry, SrklEcosystemQueryOptions, SrklEcosystemResponse, SrklServiceAccount, SrklVaultAccessClient, SrklVaultAccessResponse, UseSrklServicesOptions, UseSrklServicesResult, VaultAccessClientOptions, createSrklClient, decryptVaultBufferInBrowser, getPrimarySrklDeploymentUrl, getSrklAccounts, globalCredentialRegistry, hexToBytes, srklListBackblazeBuckets, srklService, syncSrklAccounts, useSrklServices } from './srkl/index.js';
 export { BackendCommand, DomainService, ExecutableBackendFacade, ExecutionContext, JobDependencyGraph, NormalizedResult, OperationComponent, ResultFlowBridge, ServiceDispatcher, StateUpdateEvent, WorkerExecutionBoundary, createOperationComponent } from './execution/index.js';
-export { CompositeBackend, EndpointGenerator, GeneratedEndpointSummary, LocalService, RemoteServiceProxy, createBackend, createCompositeService, createLocalService, createRemoteService } from './services/index.js';
-import { AssetDataType as AssetDataType$1, AssetChannelType as AssetChannelType$1, GraphFolderInfo as GraphFolderInfo$1, GraphAssetItem as GraphAssetItem$1, SpaceNode, NodeConnection, DawProject } from '@kloks/state-graph';
+export { CompositeBackend, EndpointGenerator, GeneratedEndpointSummary, LOCAL_STORAGE_GRAPHS_PREFIX, LocalService, NodeGraphPersistenceService, NodeGraphValidationResult, RemoteServiceProxy, SaveGraphOptions, UniversalAppEntity, UniversalGraphEdge, UniversalGraphNode, UniversalNodeGraphDocument, UniversalStorageConnection, createBackend, createCompositeService, createLocalService, createRemoteService, exportGraphAsJsonFile, nodeGraphPersistence, parseGraphJsonFile, validateGraphDocument } from './services/index.js';
+import { AssetDataType as AssetDataType$1, AssetChannelType as AssetChannelType$1, GraphFolderInfo as GraphFolderInfo$1, GraphAssetItem as GraphAssetItem$1, SpaceNode, NodeConnection, DawProject } from '@ultrst-armada/kloks/state-graph';
 export { AuthServiceDefinition, AuthServiceFacade, ControlPlaneServiceDefinition, ControlPlaneServiceFacade, DatabaseServiceDefinition, DatabaseServiceFacade, ExecutionServiceDefinition, ExecutionServiceFacade, GeminiServiceDefinition, GeminiServiceFacade, StorageServiceDefinition, StorageServiceFacade, WorkspaceServiceDefinition, WorkspaceServiceFacade } from './krnl-services.js';
 export { EndpointDescriptor, IService, ProtocolAdapter, ServiceDefinition } from '@ultrst-armada/krnl';
 import 'react';
@@ -1109,7 +1109,44 @@ declare function saveWorkspaceGraph(workspaceIdOrSlug: string, graphIdOrName: st
 declare function deleteWorkspaceGraph(workspaceIdOrSlug: string, graphIdOrName: string): Promise<boolean>;
 
 type ProviderType = 'VERCEL' | 'CLOUDFLARE' | 'AWS' | 'GCP' | 'FASTLY' | 'BACKBLAZE_B2' | 'CLOUDFLARE_R2' | 'SUPABASE' | 'NEON' | 'POSTGRESQL';
+type NodeType = 'ECOSYSTEM' | 'ECOSYSTEM_HUB' | 'SYSTEM_DATABASE' | 'SYSTEM_BUCKET' | 'ADMIN_CREDENTIALS' | 'APP_GRAPH_NODE' | 'APP' | 'APP_NODE' | 'APP_COMPONENT' | 'DEPLOYMENT' | 'WEIGHT_USER' | 'WEIGHT_RESOURCE' | 'WEIGHT_ACCOUNT' | 'WEIGHT_MULTIPLY' | 'WEIGHT_MODIFIER' | 'URL_NODE' | 'VARIANTS';
 type HealthState = 'HEALTHY' | 'DEGRADED' | 'UNHEALTHY';
+interface SystemDbConfig {
+    databaseUrl?: string;
+    provider?: string;
+    dbName?: string;
+    host?: string;
+    port?: number;
+    ssl?: boolean;
+    selectedTable?: string;
+    adminTable?: string;
+    adminEmailColumn?: string;
+    adminPasswordColumn?: string;
+    adminUsernameColumn?: string;
+    bucketTable?: string;
+    connectionStatus?: 'CONNECTED' | 'DISCONNECTED' | 'ERROR' | 'CONNECTING';
+    lastTestedAt?: string;
+    latencyMs?: number;
+    serverVersion?: string;
+    discoveredTables?: string[];
+    updatedAt?: string;
+}
+interface SystemBucketConfig {
+    bucketName?: string;
+    provider?: string;
+    endpoint?: string;
+    region?: string;
+    publicAccess?: boolean;
+    updatedAt?: string;
+}
+interface AdminCredentialsConfig {
+    adminEmail?: string;
+    adminSecretKey?: string;
+    depmJwtSecret?: string;
+    apiKey?: string;
+    lastRotatedAt?: string;
+    rotationHistoryCount?: number;
+}
 type AccountTier = 'hobby' | 'pro' | 'enterprise' | 'free' | 'payg' | 'custom';
 
 interface UnifiedResourceMetricItem<T = number> {
@@ -1371,6 +1408,77 @@ interface DeploymentEntity {
     resourceRate: number;
     createdAt: string;
 }
+interface AggregatedUrlItem {
+    url: string;
+    sourceNodeId: string;
+    sourceNodeName: string;
+    sourceNodeType: NodeType;
+    isDirect: boolean;
+    distance: number;
+}
+interface GraphNode {
+    id: string;
+    type: NodeType;
+    x: number;
+    y: number;
+    appId: string;
+    icon?: string;
+    name?: string;
+    componentName?: string;
+    publicLink?: string;
+    urlValue?: string;
+    urls?: string[];
+    aggregatedUrls?: string[];
+    aggregatedUrlItems?: AggregatedUrlItem[];
+    directUrls?: string[];
+    deploymentId?: string;
+    accountId?: string;
+    bubbleTargetType?: 'DOMAIN' | 'DEPLOYMENT';
+    domainUrl?: string;
+    deploymentUrl?: string;
+    weightModifierType?: 'USAGE' | 'USER_DEFINED' | 'ACCOUNT';
+    weightValue?: number;
+    systemDbData?: SystemDbConfig;
+    systemBucketData?: SystemBucketConfig;
+    adminCredsData?: AdminCredentialsConfig;
+    appData?: AppEntity;
+    evolutionScore?: number;
+    redundancyScore?: number;
+    modularityScore?: number;
+    variantsScore?: number;
+    visibilityScore?: number;
+    evolutionStage?: string;
+    ecosystemData?: {
+        connectedAppsCount?: number;
+        health?: HealthState;
+        status?: string;
+        routingRate?: number;
+        redundancyScore?: number;
+        modularityScore?: number;
+        variantsScore?: number;
+        visibilityScore?: number;
+        evolutionScore?: number;
+    };
+}
+interface GraphEdge {
+    id: string;
+    appId: string;
+    sourceId: string;
+    targetId: string;
+    sourceSocketId?: string;
+    targetSocketId?: string;
+    label?: string;
+}
+interface AppEntity {
+    id: string;
+    name: string;
+    icon: string;
+    description?: string;
+    publicLink: string;
+    folderName?: string;
+    createdAt: string;
+    updatedAt: string;
+}
 
 declare abstract class BaseResourceFetcher {
     abstract readonly provider: ProviderType;
@@ -1480,4 +1588,37 @@ declare class ResourceFetcherRegistry {
     static calculateDetailedScore(account?: AccountEntity, deployment?: DeploymentEntity): ResourceCalculationResult;
 }
 
-export { type AssetChannelType, type AssetDataType, type AssetFolderInfo, type AssetPoolItem, type AssetPoolScope, type B2AuthData, type BackendFacade, BaseDataProvider, BaseResourceFetcher, type CloudflareObservability, type CloudflareProjectItem, CloudflareResourceFetcher, type CloudflareUsageMetrics, type CredentialEntry, type CredentialManifest, type Deployment, type FunctionSet, FunctionalityTable, GRAPHS_ROOT, type IDataProvider, LEGACY_PROJECTS_ROOT, type OrchestrationFn, PROJECTS_ROOT, type ProjectMetadata, type PublicRouteRecord, type QueryFilter, ResourceFetcherRegistry, type Runtime, SAMPLES_GLOBAL_ROOT, SUPPORTED_AUDIO_EXTS, SUPPORTED_MIDI_EXTS, type ServerAudioSampleItem, type ServiceFacade, type ServiceRegistryRecord, type SortOrder, type SrklB2Account, SrklStorageService, type SyncFileResult, type UnifiedQueryResult, type UnifiedResourceMetricItem, type UnifiedResourceMetrics, VercelResourceFetcher, WORKSPACE_ASSETS_ROOT, WORKSPACE_ROOT, type WorkingWorkspaceConfig, type WorkspaceFolderResolution, type WorkspaceStorageConfig, b2DeleteFileVersion, b2DeleteFolder, buildProjectObservability, buildProjectsList, cleanDbUrl, configureStarterProjectTemplate, createAssetSubfolder, createCredential, createGraphAssetFolder, createGraphAssetFolder as createGraphAssetSubfolder, createGraphPackage, createWavBuffer, createWorkspace, createWorkspaceGraph, decryptSecretFromBlob, deleteAssetFromGraph, deleteAssetFromPool, deleteCredential, deleteGlobalSample, deleteGraphPackage, deleteProject, deleteProjectSample, deleteRoute, deleteWorkspace, deleteWorkspaceFile, deleteWorkspaceFolder, deleteWorkspaceGraph, encryptSecretToBlob, ensureAssetPoolDirectories, ensureGlobalSamples, ensureGraphAssetDirectories, ensureProjectAssets, ensureProjectsRoot, ensureWorkspaceStructure, exportEncryptedCredentials, fetchCloudflareData, fetchVercelData, findUserWorkspace, findWorkspaceRecord, formatRelativeCreated, getAllRoutes, getAssetPoolLocationPath, getAssetPoolPublicUrl, getB2BucketId, getCredential, getDefaultWorkingWorkspaceDir, getExecutions, getGatewayConfig, getGraphPackageById, getPrimarySrklDeploymentUrl as getPrimarySrklCoreDeploymentUrl, getProjectById, getPublicRouteByPath, getPublicRoutes, getSrklAccounts as getSrklCoreAccounts, getSrklStatus, getUnifiedDbUrl, getUsers, getWorkingWorkspaceConfig, getWorkingWorkspaceDir, getWorkspaceFolderKey, getWorkspaceFolderPrefix, getWorkspaceGraph, getWorkspaceStorageDetails, getWorkspaces, importEncryptedCredentials, importGraphDependency, initGlobalSamplesDirectory, isB2Workspace, listAllGraphPackages, listAllProjects, listBackblazeBuckets, listCredentials, listGlobalSamples, listProjectSamples, listWorkspaceFiles, listWorkspaceGraphs, loadCredentialManifest, loadWorkspaceData, loginUser, matchGatewayIngress, matchGatewayIngressAsync, queryUnifiedDb, readWorkspaceFile, recordExecution, removeGraphDependency, renameAppInWorkspaceData, resolveDynamicRouteFromDb, resolveWorkspaceConnection, resolveWorkspaceDir, saveAssetToGraph, saveAssetToPool, saveCredentialManifest, saveGlobalSample, saveGraphPackage, saveProject, saveProjectSample, saveWorkspaceData, saveWorkspaceGraph, scanAssetPool, scanGraphAssets, seedDefaultAssets, seedStarterGraphAssets, serverPublicRoutes, setServerPublicRoutes, setWorkingWorkspaceConfig, srklListBackblazeBuckets as srklCoreListBackblazeBuckets, syncWorkspace, syncWorkspaceCreateToBucket, syncWorkspaceDataToBucket, syncWorkspaceDeleteToBucket, updateCredential, updateWorkspace, upsertRoute, validateServiceDefinition, writeWorkspaceFile };
+/**
+ * Calculates the score (0.0 - 1.0) for a weight modifier or source node.
+ * WEIGHT_MULTIPLY itself is not a source score — its inputs are collected by traversal.
+ */
+declare function getWeightModifierScore(node: GraphNode, account?: AccountEntity, accounts?: AccountEntity[], nodes?: GraphNode[], edges?: GraphEdge[], deployments?: DeploymentEntity[]): number;
+/**
+ * Traverses graph to find all terminal weight modifier source nodes reachable from
+ * a deployment node, including traversing through WEIGHT_MULTIPLY aggregator nodes.
+ */
+declare function getConnectedWeightModifiers(deploymentNodeId: string, nodes: GraphNode[], edges: GraphEdge[]): GraphNode[];
+/**
+ * Computes the final combined weight for a deployment node by multiplying all connected
+ * weight modifier/source node scores together (traversing through WEIGHT_MULTIPLY nodes).
+ */
+declare function computeDeploymentFinalWeight(deploymentNodeId: string, nodes: GraphNode[], edges: GraphEdge[], accounts: AccountEntity[], deployments: DeploymentEntity[]): number;
+
+/**
+ * Calculates the score (0.0 - 1.0) for a WEIGHT_RESOURCE node based on real-time account usage metrics.
+ * Dynamically resolves provider-specific fetchers (Vercel, Cloudflare, etc.) using OOP inheritance.
+ * - Active CPU receives the most weight (50% / 0.50) across all services.
+ * - Function Invocations: 15% (0.15).
+ * - Compute Memory / Subrequests: 15% (0.15).
+ * - Edge Requests: 10% (0.10).
+ * - Fast Data Transfer / Bandwidth: 5% (0.05).
+ * - Other compute / network metrics: 5% (0.05).
+ * - Storage category parameters (Functions Storage, Deployment Storage, R2) are strictly EXCLUDED (0%).
+ */
+declare function computeUsageWeightScore(account?: AccountEntity, deployment?: DeploymentEntity): number;
+/**
+ * Traverses from a weight modifier node to find its connected deployment node.
+ */
+declare function getConnectedDeploymentNode(weightNodeId: string, nodes: GraphNode[], edges: GraphEdge[]): GraphNode | undefined;
+
+export { type AssetChannelType, type AssetDataType, type AssetFolderInfo, type AssetPoolItem, type AssetPoolScope, type B2AuthData, type BackendFacade, BaseDataProvider, BaseResourceFetcher, type CloudflareObservability, type CloudflareProjectItem, CloudflareResourceFetcher, type CloudflareUsageMetrics, type CredentialEntry, type CredentialManifest, type Deployment, type FunctionSet, FunctionalityTable, GRAPHS_ROOT, type IDataProvider, LEGACY_PROJECTS_ROOT, type OrchestrationFn, PROJECTS_ROOT, type ProjectMetadata, type PublicRouteRecord, type QueryFilter, ResourceFetcherRegistry, type Runtime, SAMPLES_GLOBAL_ROOT, SUPPORTED_AUDIO_EXTS, SUPPORTED_MIDI_EXTS, type ServerAudioSampleItem, type ServiceFacade, type ServiceRegistryRecord, type SortOrder, type SrklB2Account, SrklStorageService, type SyncFileResult, type UnifiedQueryResult, type UnifiedResourceMetricItem, type UnifiedResourceMetrics, VercelResourceFetcher, WORKSPACE_ASSETS_ROOT, WORKSPACE_ROOT, type WorkingWorkspaceConfig, type WorkspaceFolderResolution, type WorkspaceStorageConfig, b2DeleteFileVersion, b2DeleteFolder, buildProjectObservability, buildProjectsList, cleanDbUrl, computeDeploymentFinalWeight, computeUsageWeightScore, configureStarterProjectTemplate, createAssetSubfolder, createCredential, createGraphAssetFolder, createGraphAssetFolder as createGraphAssetSubfolder, createGraphPackage, createWavBuffer, createWorkspace, createWorkspaceGraph, decryptSecretFromBlob, deleteAssetFromGraph, deleteAssetFromPool, deleteCredential, deleteGlobalSample, deleteGraphPackage, deleteProject, deleteProjectSample, deleteRoute, deleteWorkspace, deleteWorkspaceFile, deleteWorkspaceFolder, deleteWorkspaceGraph, encryptSecretToBlob, ensureAssetPoolDirectories, ensureGlobalSamples, ensureGraphAssetDirectories, ensureProjectAssets, ensureProjectsRoot, ensureWorkspaceStructure, exportEncryptedCredentials, fetchCloudflareData, fetchVercelData, findUserWorkspace, findWorkspaceRecord, formatRelativeCreated, getAllRoutes, getAssetPoolLocationPath, getAssetPoolPublicUrl, getB2BucketId, getConnectedDeploymentNode, getConnectedWeightModifiers, getCredential, getDefaultWorkingWorkspaceDir, getExecutions, getGatewayConfig, getGraphPackageById, getPrimarySrklDeploymentUrl as getPrimarySrklCoreDeploymentUrl, getProjectById, getPublicRouteByPath, getPublicRoutes, getSrklAccounts as getSrklCoreAccounts, getSrklStatus, getUnifiedDbUrl, getUsers, getWeightModifierScore, getWorkingWorkspaceConfig, getWorkingWorkspaceDir, getWorkspaceFolderKey, getWorkspaceFolderPrefix, getWorkspaceGraph, getWorkspaceStorageDetails, getWorkspaces, importEncryptedCredentials, importGraphDependency, initGlobalSamplesDirectory, isB2Workspace, listAllGraphPackages, listAllProjects, listBackblazeBuckets, listCredentials, listGlobalSamples, listProjectSamples, listWorkspaceFiles, listWorkspaceGraphs, loadCredentialManifest, loadWorkspaceData, loginUser, matchGatewayIngress, matchGatewayIngressAsync, queryUnifiedDb, readWorkspaceFile, recordExecution, removeGraphDependency, renameAppInWorkspaceData, resolveDynamicRouteFromDb, resolveWorkspaceConnection, resolveWorkspaceDir, saveAssetToGraph, saveAssetToPool, saveCredentialManifest, saveGlobalSample, saveGraphPackage, saveProject, saveProjectSample, saveWorkspaceData, saveWorkspaceGraph, scanAssetPool, scanGraphAssets, seedDefaultAssets, seedStarterGraphAssets, serverPublicRoutes, setServerPublicRoutes, setWorkingWorkspaceConfig, srklListBackblazeBuckets as srklCoreListBackblazeBuckets, syncWorkspace, syncWorkspaceCreateToBucket, syncWorkspaceDataToBucket, syncWorkspaceDeleteToBucket, updateCredential, updateWorkspace, upsertRoute, validateServiceDefinition, writeWorkspaceFile };