@camstack/addon-ai 0.4.28 → 0.4.30

package/dist/addon.mjs

@@ -1,11 +1,9 @@
 import { createRequire } from "node:module";
-import * as path$1 from "node:path";
+import * as path from "node:path";
 import { createHash, randomUUID } from "node:crypto";
 import { connect, createServer } from "node:net";
-import * as fs from "node:fs";
 import { createReadStream, existsSync, statSync } from "node:fs";
-import { promisify } from "node:util";
-import { brotliCompress, gzip } from "node:zlib";
+import { deleteModelFromDisk, downloadFile, getModelFilePath, isModelDownloaded } from "@camstack/system/addon-utils";
 import * as fsp from "node:fs/promises";
 import { spawn } from "node:child_process";
 //#region \0rolldown/runtime.js
@@ -41,7 +39,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 }) : target, mod));
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 //#endregion
-//#region ../types/dist/event-category-CIa_iT6b.mjs
+//#region ../types/dist/event-category-BZL-fdNj.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -478,7 +476,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["MetricsNodeResourcesSnapshot"] = "metrics.node-resources-snapshot";
 	/**
 	* Periodic per-node process-tree snapshot (camstack-related pids
-	* with ghost / managed / root classification). Emitted ~0.2 Hz by
+	* with root / managed / system classification). Emitted ~0.2 Hz by
 	* the metrics-provider addon. Drives the Cluster → Processes tab
 	* without polling `metricsProvider.listNodeProcesses`.
 	*/
@@ -11358,6 +11356,19 @@ var SettingsRecordSchema = object({
 	data: record(string(), unknown())
 });
 /**
+* One record of a BULK insert — {@link SettingsRecordSchema} with the id made
+* optional.
+*
+* A separate schema rather than loosening the shared one: every other method
+* on this cap addresses a row BY its id, and making that field optional
+* everywhere would turn a forgotten key into a silently generated one on
+* `update` and `delete` as well.
+*/
+var BulkRecordSchema = object({
+	id: string().optional(),
+	data: record(string(), unknown())
+});
+/**
 * Column declaration for a structured (SQL-backed) collection.
 *
 * Logical types — the backend translates each to the matching SQLite
@@ -11414,6 +11425,10 @@ method(object({
 	collection: string(),
 	record: SettingsRecordSchema
 }), _void(), { kind: "mutation" }), method(object({
+	namespace: string().optional(),
+	collection: string(),
+	records: array(BulkRecordSchema).readonly()
+}), object({ inserted: number$1().int() }), { kind: "mutation" }), method(object({
 	namespace: string().optional(),
 	collection: string(),
 	id: string(),
@@ -11522,6 +11537,13 @@ method(_void(), EngineInfoSchema, { auth: "admin" }), method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	namespace: string().optional(),
+	collection: string(),
+	records: array(BulkRecordSchema).readonly()
+}), object({ inserted: number$1().int() }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	namespace: string().optional(),
 	collection: string(),
@@ -13384,6 +13406,68 @@ method(LogEntrySchema, _void(), { kind: "mutation" }), method(object({
 	limit: number$1().optional(),
 	tags: record(string(), string()).optional()
 }), array(LogEntrySchema).readonly());
+var LoadContributionSchema = object({
+	role: _enum([
+		"decode",
+		"transcode",
+		"recording",
+		"streaming",
+		"detection"
+	]),
+	/**
+	* The NUMERIC device id — the same value every log line carries as
+	* `tags.deviceId`. `null` means this cost genuinely belongs to no single
+	* camera (a shared pool), NOT that the contributor forgot to look it up: a
+	* contributor that cannot name its camera must not emit the entry at all,
+	* because an unnamed per-camera entry is indistinguishable from a shared one
+	* and would quietly turn one camera's cost into everybody's.
+	*/
+	deviceId: number$1().int().positive().nullable(),
+	attribution: _enum([
+		"measured",
+		"accounted",
+		"unattributable"
+	]),
+	/**
+	* What ONE entry is, in the contributor's own words — `615/high`,
+	* `617/native`, `cuda:0 shared pool`. Free text because the unit differs per
+	* family and inventing a common one would lose the only information that
+	* makes two entries for the same camera distinguishable.
+	*/
+	unit: string(),
+	/**
+	* The OS process this cost lives in, when there is one. Present so a
+	* consumer can (a) tell two generations of the same unit apart across a
+	* restart, and (b) subtract claimed processes from the node's process
+	* snapshot to see what NOBODY claimed. Absent for an entry that owns no
+	* process of its own.
+	*/
+	pid: number$1().int().positive().optional(),
+	/**
+	* When this generation started. The pid's incarnation marker: a consumer
+	* differencing {@link LoadContributionSchema.shape.cpuSeconds} must drop the
+	* window when this changes, because the counter restarted from zero in a new
+	* process.
+	*/
+	startedAtMs: number$1().optional(),
+	/**
+	* CUMULATIVE CPU seconds this unit has consumed since it started — user +
+	* system, read from the child's own `/proc/<pid>/stat` at the moment the
+	* contribution is asked for.
+	*
+	* Cumulative and not a rate on purpose: a rate needs a window, a window
+	* needs a sampler, and a new per-node sampler is the defect half of
+	* `docs/architecture/load-ledger.md` documents. A counter can be differenced
+	* by whoever already keeps a history; a rate cannot be un-averaged.
+	*
+	* Absent — never zero — on a node with no `/proc`, on a read failure, and on
+	* an entry with no process.
+	*/
+	cpuSeconds: number$1().optional(),
+	/** Resident bytes of this unit's process, same source and same rules. */
+	rssBytes: number$1().optional()
+});
+method(_void(), array(LoadContributionSchema).readonly());
 /**
 * `login-method` — collection cap through which auth addons contribute
 * their pre-auth login surfaces to the login page. This is the SINGLE,
@@ -13587,8 +13671,7 @@ var NodeProcessSchema = object({
 	classification: _enum([
 		"root",
 		"managed",
-		"system",
-		"ghost"
+		"system"
 	]),
 	/** `$process` addon binding when `managed`, else null. */
 	addonId: string().nullable(),
@@ -13596,22 +13679,39 @@ var NodeProcessSchema = object({
 	nodeId: string().nullable(),
 	/** Truncated command line. */
 	command: string(),
+	/**
+	* `ps pcpu` — CPU averaged over the process's WHOLE LIFETIME, not a rate.
+	* On a runner up for days it barely moves. Fine as a column, useless as a
+	* series: use `cpuMainPercent + cpuGcPercent` for anything time-varying.
+	*/
 	cpuPercent: number$1(),
 	memoryRssBytes: number$1(),
+	/**
+	* Instantaneous CPU% of the process's own threads over the last
+	* process-snapshot window, from a `/proc/<pid>/task/*` tick delta.
+	*
+	* `null` = UNKNOWN, never zero: no previous sample yet (first tick after
+	* boot), the pid was recycled, or this node is not Linux.
+	*/
+	cpuMainPercent: number$1().nullable(),
+	/**
+	* Instantaneous CPU% of V8's `V8Worker` platform pool over the same window.
+	*
+	* This is the number that rewrote the 2026-08-27 diagnosis — hub-main 73%,
+	* `stream-broker` 61% (`docs/architecture/load-ledger.md`). A CPU chart that
+	* does not separate it from `cpuMainPercent` shows "busy" where the truth is
+	* "allocating too much".
+	*
+	* Concurrent GC is the dominant tenant of that pool but not the only one
+	* (background compilation runs there too), so it is reported as
+	* "GC / V8 helpers" rather than as pure collection time. `null` has the same
+	* meaning as on `cpuMainPercent`.
+	*/
+	cpuGcPercent: number$1().nullable(),
+	/** Threads seen in the tick scan. `null` under the same conditions. */
+	threadCount: number$1().nullable(),
 	/** Wall-clock uptime (seconds). Parsed from `ps etime`. */
-	uptimeSec: number$1(),
-	/** True when ancestor walk reaches `ppid=1` (reparented to init/launchd). */
-	orphaned: boolean()
-});
-var KillProcessInputSchema = object({
-	pid: number$1(),
-	/** Force = SIGKILL. Default is SIGTERM. */
-	force: boolean().optional()
-});
-var KillProcessResultSchema = object({
-	success: boolean(),
-	reason: string().optional(),
-	signal: _enum(["SIGTERM", "SIGKILL"]).optional()
+	uptimeSec: number$1()
 });
 var DumpHeapSnapshotInputSchema = object({ 
 /** The addon whose runner should dump a heap snapshot. */
@@ -13624,6 +13724,104 @@ var DumpHeapSnapshotResultSchema = object({
 	pid: number$1().optional(),
 	reason: string().optional()
 });
+/**
+* One point of one function's series.
+*
+* The unsuffixed fields are the bucket's **MAXIMUM**, and that choice is the
+* point of the whole surface. The two obvious reductions both lie: a mean per
+* bucket smears a spike away, and taking every Nth sample skips it outright.
+* Either would give us a tool built to find peaks that does not show peaks.
+* `...Min` carries the other end, `samples` says how many raw snapshots folded
+* into the bucket, and a mean stays derivable where it is wanted.
+*
+* An UNREDUCED point is a one-sample bucket: `samples === 1` and each `...Min`
+* equals its unsuffixed twin. Reduced and unreduced are the same shape, so a
+* caller cannot tell which it received — which is what "one reader" means.
+*/
+var LoadPointSchema = object({
+	/** Bucket START, or the snapshot's own timestamp when unreduced. */
+	atMs: number$1(),
+	/** Raw snapshots in this bucket. Never 0 — AN EMPTY BUCKET IS ABSENT. */
+	samples: number$1().int(),
+	/**
+	* `null` = UNKNOWN and it PROPAGATES: a bucket is null unless every process
+	* of every snapshot in it reported a thread split. A partial sum is a
+	* smaller number that looks exactly as real as a complete one.
+	*/
+	cpuMainPercent: number$1().nullable(),
+	cpuMainPercentMin: number$1().nullable(),
+	cpuGcPercent: number$1().nullable(),
+	cpuGcPercentMin: number$1().nullable(),
+	/** Lifetime-average CPU%, summed. Always known — and never a rate. */
+	cpuLifetimePercent: number$1(),
+	cpuLifetimePercentMin: number$1(),
+	memoryRssBytes: number$1(),
+	memoryRssBytesMin: number$1(),
+	processCount: number$1().int(),
+	processCountMin: number$1().int()
+});
+/** One function's series. `key` is an addonId, `__root__` or `__unattributed__`. */
+var LoadFunctionSeriesSchema = object({
+	key: string(),
+	kind: _enum([
+		"addon",
+		"root",
+		"unattributed"
+	]),
+	/** Oldest-first. A missing interval is MISSING — never zero-filled. */
+	points: array(LoadPointSchema).readonly()
+});
+var NodeLoadSeriesSchema = object({
+	nodeId: string(),
+	/** One entry per function seen in the window, heaviest-first. */
+	series: array(LoadFunctionSeriesSchema).readonly(),
+	/**
+	* Width of one returned bucket, in ms. Equals the sampling cadence when no
+	* reduction was needed — so a caller can always say what one point covers
+	* without having to know whether it was reduced.
+	*/
+	bucketMs: number$1(),
+	/** Raw snapshots that went into this answer, across both tiers. */
+	retainedSamples: number$1(),
+	/** Oldest snapshot represented, or `null` when nothing is retained. */
+	oldestAtMs: number$1().nullable(),
+	/** The fixed sampling cadence in force on the cluster, in ms. */
+	cadenceMs: number$1(),
+	/**
+	* Did the DURABLE tier contribute? `false` means the answer is the hot ring
+	* alone — an agent (which holds no table), or a store that refused.
+	* Reported because "the last hour" and "the last six hours" are different
+	* questions and an operator must not have to guess which was answered.
+	*/
+	durable: boolean()
+});
+var GetLoadSeriesInputSchema = object({
+	/**
+	* The node whose series is wanted.
+	*
+	* NOT named `nodeId`: the generated cap router strips a top-level
+	* `nodeId` from every method input and uses it to ROUTE the call to
+	* that node's provider (`generated-cap-routers.ts`). A series target
+	* called `nodeId` would silently become a routing pin and never reach
+	* the provider. The hub holds every node it hears from, so the
+	* ordinary call is unpinned — answered by the hub, for any node.
+	*/
+	forNodeId: string(),
+	/**
+	* EXCLUSIVE lower bound. A caller passes the newest `atMs` it already
+	* holds and receives only what it is missing, so seeding a live chart
+	* from this method cannot double a point already drawn.
+	*/
+	sinceMs: number$1().optional(),
+	/**
+	* Most points the caller wants PER FUNCTION. The window is reduced to fit,
+	* preserving min and max per bucket.
+	*
+	* Absent means NO reduction — legitimate for a short window and a trap for a
+	* long one, which is why a chart passes its own pixel width.
+	*/
+	maxPoints: number$1().int().positive().optional()
+});
 var SystemMetricsSchema = object({
 	cpuPercent: number$1(),
 	memoryPercent: number$1(),
@@ -13634,10 +13832,7 @@ var SystemMetricsSchema = object({
 	gpuPercent: number$1().optional(),
 	gpuMemoryPercent: number$1().optional()
 });
-method(_void(), SystemResourceSnapshotSchema), method(_void(), SystemResourceSnapshotSchema.nullable()), method(_void(), SystemMetricsSchema), method(object({ dirPath: string() }), DiskSpaceInfoSchema), method(_void(), MetricsGpuInfoSchema.nullable()), method(_void(), number$1().nullable()), method(object({ pids: array(number$1()) }), array(PidResourceStatsSchema)), method(_void(), array(AddonInstanceSchema).readonly()), method(object({ addonId: string() }), PidResourceStatsSchema.nullable()), method(_void(), array(NodeProcessSchema).readonly()), method(KillProcessInputSchema, KillProcessResultSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
+method(_void(), SystemResourceSnapshotSchema), method(_void(), SystemResourceSnapshotSchema.nullable()), method(_void(), SystemMetricsSchema), method(object({ dirPath: string() }), DiskSpaceInfoSchema), method(_void(), MetricsGpuInfoSchema.nullable()), method(_void(), number$1().nullable()), method(object({ pids: array(number$1()) }), array(PidResourceStatsSchema)), method(_void(), array(AddonInstanceSchema).readonly()), method(object({ addonId: string() }), PidResourceStatsSchema.nullable()), method(_void(), array(NodeProcessSchema).readonly()), method(GetLoadSeriesInputSchema, NodeLoadSeriesSchema), method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
 	kind: "mutation",
 	auth: "admin"
 });
@@ -26940,6 +27135,15 @@ var LoggingSettingsPatchSchema = object({
 * authority over the whole hierarchy and answers for every layer, so the
 * layer selector needs a name the transport does not already own.
 */
+/**
+* One contribution, plus WHO reported it.
+*
+* The addon and node are added by the hub as it enumerates providers, never by
+* the contributor: an addon reporting its own identity could report somebody
+* else's, and the whole point of this surface is that no claim is made by
+* anyone but its owner.
+*/
+var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: string() });
 var GetLoggingSettingsInputSchema = object({
 	scopeNodeId: string().optional(),
 	/**
@@ -26998,7 +27202,7 @@ method(_void(), FeatureManifestSchema), method(_void(), HealthStatusSchema), met
 }), method(_void(), SiteLocationStatusSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(_void(), RequestCensusStatusSchema, { auth: "admin" }), method(GetLoggingSettingsInputSchema, LoggingSettingsStateSchema, { auth: "admin" }), method(SetLoggingSettingsInputSchema, LoggingSettingsStateSchema, {
+}), method(_void(), RequestCensusStatusSchema, { auth: "admin" }), method(_void(), array(ReportedLoadContributionSchema).readonly(), { auth: "admin" }), method(GetLoggingSettingsInputSchema, LoggingSettingsStateSchema, { auth: "admin" }), method(SetLoggingSettingsInputSchema, LoggingSettingsStateSchema, {
 	kind: "mutation",
 	auth: "admin"
 });
@@ -28614,6 +28818,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"dataStoreProvider.insertMany": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"dataStoreProvider.isEmpty": {
 		capName: "data-store-provider",
 		capScope: "system",
@@ -29928,6 +30138,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"loadContribution.list": {
+		capName: "load-contribution",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.downloadCa": {
 		capName: "local-network",
 		capScope: "system",
@@ -30228,17 +30444,17 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"metricsProvider.getProcessStats": {
+	"metricsProvider.getLoadSeries": {
 		capName: "metrics-provider",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
-	"metricsProvider.killProcess": {
+	"metricsProvider.getProcessStats": {
 		capName: "metrics-provider",
 		capScope: "system",
 		addonId: null,
-		access: "create"
+		access: "view"
 	},
 	"metricsProvider.listAddonInstances": {
 		capName: "metrics-provider",
@@ -32250,6 +32466,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"settingsStore.insertMany": {
+		capName: "settings-store",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"settingsStore.isEmpty": {
 		capName: "settings-store",
 		capScope: "system",
@@ -32862,6 +33084,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"system.getLoadContributions": {
+		capName: "system",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"system.getLoggingSettings": {
 		capName: "system",
 		capScope: "system",
@@ -61021,7 +61249,7 @@ var require_auth_config = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		writeAuthConfig: () => writeAuthConfig
 	});
 	module.exports = __toCommonJS(auth_config_exports);
-	var fs$2 = __toESM(__require("fs"));
+	var fs$1 = __toESM(__require("fs"));
 	var path$2 = __toESM(__require("path"));
 	var import_token_util = require_token_util();
 	function getAuthConfigPath() {
@@ -61032,8 +61260,8 @@ var require_auth_config = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function readAuthConfig() {
 		try {
 			const authPath = getAuthConfigPath();
-			if (!fs$2.existsSync(authPath)) return null;
-			const content = fs$2.readFileSync(authPath, "utf8");
+			if (!fs$1.existsSync(authPath)) return null;
+			const content = fs$1.readFileSync(authPath, "utf8");
 			if (!content) return null;
 			return JSON.parse(content);
 		} catch (error) {
@@ -61043,11 +61271,11 @@ var require_auth_config = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function writeAuthConfig(config) {
 		const authPath = getAuthConfigPath();
 		const authDir = path$2.dirname(authPath);
-		if (!fs$2.existsSync(authDir)) fs$2.mkdirSync(authDir, {
+		if (!fs$1.existsSync(authDir)) fs$1.mkdirSync(authDir, {
 			mode: 504,
 			recursive: true
 		});
-		fs$2.writeFileSync(authPath, JSON.stringify(config, null, 2), { mode: 384 });
+		fs$1.writeFileSync(authPath, JSON.stringify(config, null, 2), { mode: 384 });
 	}
 	function isValidAccessToken(authConfig, expirationBufferMs = 0) {
 		if (!authConfig.token) return false;
@@ -61180,8 +61408,8 @@ var require_token_util = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		saveToken: () => saveToken
 	});
 	module.exports = __toCommonJS(token_util_exports);
-	var path = __toESM(__require("path"));
-	var fs$1 = __toESM(__require("fs"));
+	var path$1 = __toESM(__require("path"));
+	var fs = __toESM(__require("fs"));
 	var import_token_error = require_token_error();
 	var import_token_io = require_token_io();
 	var import_auth_config = require_auth_config();
@@ -61191,7 +61419,7 @@ var require_token_util = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		const vercelFolder = "com.vercel.cli";
 		const dataDir = (0, import_token_io.getUserDataDir)();
 		if (!dataDir) return null;
-		return path.join(dataDir, vercelFolder);
+		return path$1.join(dataDir, vercelFolder);
 	}
 	async function getVercelToken(options) {
 		const authConfig = (0, import_auth_config.readAuthConfig)();
@@ -61239,9 +61467,9 @@ var require_token_util = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function findProjectInfo() {
 		const dir = (0, import_token_io.findRootDir)();
 		if (!dir) throw new import_token_error.VercelOidcTokenError("Unable to find project root directory. Have you linked your project with `vc link?`");
-		const prjPath = path.join(dir, ".vercel", "project.json");
-		if (!fs$1.existsSync(prjPath)) throw new import_token_error.VercelOidcTokenError("project.json not found, have you linked your project with `vc link?`");
-		const prj = JSON.parse(fs$1.readFileSync(prjPath, "utf8"));
+		const prjPath = path$1.join(dir, ".vercel", "project.json");
+		if (!fs.existsSync(prjPath)) throw new import_token_error.VercelOidcTokenError("project.json not found, have you linked your project with `vc link?`");
+		const prj = JSON.parse(fs.readFileSync(prjPath, "utf8"));
 		if (typeof prj.projectId !== "string" && typeof prj.orgId !== "string") throw new TypeError("Expected a string-valued projectId property. Try running `vc link` to re-link your project.");
 		return {
 			projectId: prj.projectId,
@@ -61251,21 +61479,21 @@ var require_token_util = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	function saveToken(token, projectId) {
 		const dir = (0, import_token_io.getUserDataDir)();
 		if (!dir) throw new import_token_error.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");
-		const tokenPath = path.join(dir, "com.vercel.token", `${projectId}.json`);
+		const tokenPath = path$1.join(dir, "com.vercel.token", `${projectId}.json`);
 		const tokenJson = JSON.stringify(token);
-		fs$1.mkdirSync(path.dirname(tokenPath), {
+		fs.mkdirSync(path$1.dirname(tokenPath), {
 			mode: 504,
 			recursive: true
 		});
-		fs$1.writeFileSync(tokenPath, tokenJson);
-		fs$1.chmodSync(tokenPath, 432);
+		fs.writeFileSync(tokenPath, tokenJson);
+		fs.chmodSync(tokenPath, 432);
 	}
 	function loadToken(projectId) {
 		const dir = (0, import_token_io.getUserDataDir)();
 		if (!dir) throw new import_token_error.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");
-		const tokenPath = path.join(dir, "com.vercel.token", `${projectId}.json`);
-		if (!fs$1.existsSync(tokenPath)) return null;
-		const token = JSON.parse(fs$1.readFileSync(tokenPath, "utf8"));
+		const tokenPath = path$1.join(dir, "com.vercel.token", `${projectId}.json`);
+		if (!fs.existsSync(tokenPath)) return null;
+		const token = JSON.parse(fs.readFileSync(tokenPath, "utf8"));
 		assertVercelOidcTokenResponse(token);
 		return token;
 	}
@@ -73269,147 +73497,6 @@ function entryForRef(ref) {
 	};
 }
 //#endregion
-//#region ../system/dist/file-data-plane-BhKdxJgf.mjs
-function isNonEmptyFile(filePath) {
-	return fs.existsSync(filePath) && fs.statSync(filePath).size > 0;
-}
-/**
-* Sibling files of a single-file (non-directory) format — extra files the
-* format needs, fetched from the same remote directory as `url` and stored
-* flat alongside the main file in `modelsDir`. Catalog-declared via
-* `formatEntry.files`, e.g. OpenVINO IR lists its `.bin` weights next to the
-* `.xml`. The downloader stays format-agnostic; the convention lives in the
-* catalog data (like `MLPACKAGE_FILES` for the directory case).
-*/
-function siblingFilesFor(formatEntry) {
-	return formatEntry.isDirectory ? [] : formatEntry.files ?? [];
-}
-/** Build fetch headers, including HF auth token for huggingface.co URLs */
-function buildHeaders(url) {
-	const headers = { "User-Agent": "CamStack/1.0" };
-	const hfToken = process.env["HF_TOKEN"] ?? process.env["HUGGING_FACE_HUB_TOKEN"];
-	if (hfToken && url.includes("huggingface.co")) headers["Authorization"] = `Bearer ${hfToken}`;
-	return headers;
-}
-var DEFAULT_MAX_REDIRECTS = 5;
-function normalizeDownloadOptions(third) {
-	if (typeof third === "function") return { onProgress: third };
-	return third ?? {};
-}
-function isRedirectStatus(status) {
-	return status === 301 || status === 302 || status === 303 || status === 307 || status === 308;
-}
-function resolveRedirectUrl(current, location) {
-	return new URL(location, current);
-}
-async function downloadFile(url, destPath, onProgressOrOptions) {
-	if (fs.existsSync(destPath)) return destPath;
-	const opts = normalizeDownloadOptions(onProgressOrOptions);
-	const fetchImpl = opts.fetchImpl ?? fetch;
-	const maxRedirects = opts.maxRedirects ?? DEFAULT_MAX_REDIRECTS;
-	fs.mkdirSync(path$1.dirname(destPath), { recursive: true });
-	const tmpPath = destPath + ".downloading";
-	try {
-		let current = url;
-		const seen = /* @__PURE__ */ new Set();
-		let response;
-		const manual = opts.redirectPolicy !== void 0;
-		for (let hop = 0; hop <= maxRedirects; hop++) {
-			const parsed = new URL(current);
-			if (opts.redirectPolicy) opts.redirectPolicy(parsed, hop);
-			if (seen.has(parsed.href)) throw new Error(`Redirect loop detected at ${parsed.href}`);
-			seen.add(parsed.href);
-			const controller = opts.timeoutMs !== void 0 ? new AbortController() : void 0;
-			const timer = controller && opts.timeoutMs !== void 0 ? setTimeout(() => controller.abort(), opts.timeoutMs) : void 0;
-			try {
-				response = await fetchImpl(current, {
-					redirect: manual ? "manual" : "follow",
-					headers: buildHeaders(current),
-					...controller ? { signal: controller.signal } : {}
-				});
-			} finally {
-				if (timer) clearTimeout(timer);
-			}
-			if (manual && isRedirectStatus(response.status)) {
-				const location = response.headers.get("location");
-				if (!location) throw new Error(`Redirect ${response.status} missing Location header`);
-				if (hop >= maxRedirects) throw new Error(`Too many redirects (max ${maxRedirects}) downloading ${url}`);
-				current = resolveRedirectUrl(current, location).href;
-				continue;
-			}
-			break;
-		}
-		if (!response) throw new Error(`No response downloading ${url}`);
-		if (manual && isRedirectStatus(response.status)) throw new Error(`Too many redirects (max ${maxRedirects}) downloading ${url}`);
-		if (!response.ok) throw new Error(`HTTP ${response.status} downloading ${url}`);
-		if (!response.body) throw new Error(`No response body from ${url}`);
-		const total = parseInt(response.headers.get("content-length") ?? "0", 10);
-		let downloaded = 0;
-		const fileStream = fs.createWriteStream(tmpPath);
-		const reader = response.body.getReader();
-		try {
-			for (;;) {
-				const { done, value } = await reader.read();
-				if (done || !value) break;
-				downloaded += value.length;
-				if (opts.maxBytes !== void 0 && downloaded > opts.maxBytes) throw new Error(`Downloaded ${downloaded} bytes exceeds the ${opts.maxBytes}-byte limit`);
-				fileStream.write(value);
-				opts.onProgress?.(downloaded, total);
-			}
-		} finally {
-			fileStream.end();
-			await new Promise((resolve, reject) => {
-				fileStream.on("finish", resolve);
-				fileStream.on("error", reject);
-			});
-		}
-		fs.renameSync(tmpPath, destPath);
-		return destPath;
-	} catch (err) {
-		try {
-			fs.unlinkSync(tmpPath);
-		} catch {}
-		throw err;
-	}
-}
-/** Compute the on-disk path for a given model + format, even when not yet downloaded. */
-function getModelFilePath(modelsDir, entry, format) {
-	const formatEntry = entry.formats[format];
-	if (!formatEntry) return null;
-	const filename = formatEntry.url.split("/").pop() ?? `${entry.id}.${format}`;
-	return path$1.join(modelsDir, filename);
-}
-/** True iff the model file (or `Manifest.json` for directory bundles) exists and is non-empty. */
-function isModelDownloaded(modelsDir, entry, format) {
-	const formatEntry = entry.formats[format];
-	if (!formatEntry) return false;
-	const modelPath = getModelFilePath(modelsDir, entry, format);
-	if (!modelPath || !fs.existsSync(modelPath)) return false;
-	if (formatEntry.isDirectory) return fs.existsSync(path$1.join(modelPath, "Manifest.json"));
-	if (fs.statSync(modelPath).size <= 0) return false;
-	return siblingFilesFor(formatEntry).every((f) => isNonEmptyFile(path$1.join(modelsDir, f)));
-}
-/** Remove the on-disk model file/directory. Returns true if something was deleted. */
-function deleteModelFromDisk(modelsDir, entry, format) {
-	const modelPath = getModelFilePath(modelsDir, entry, format);
-	if (!modelPath || !fs.existsSync(modelPath)) return false;
-	const formatEntry = entry.formats[format];
-	if (formatEntry?.isDirectory) fs.rmSync(modelPath, {
-		recursive: true,
-		force: true
-	});
-	else {
-		fs.unlinkSync(modelPath);
-		if (formatEntry) for (const sibling of siblingFilesFor(formatEntry)) {
-			const sibPath = path$1.join(modelsDir, sibling);
-			if (fs.existsSync(sibPath)) fs.unlinkSync(sibPath);
-		}
-	}
-	return true;
-}
-promisify(brotliCompress);
-promisify(gzip);
-//#endregion
 //#region src/runtime/model-ops.ts
 /**
 * Default `RuntimeModelOps` — the ONLY place the reused object-detection model
@@ -73445,14 +73532,14 @@ function planFiles(modelsDir, entry) {
 		const filename = formatEntry.url.split("/").pop() ?? `${entry.id}.${GGUF}`;
 		out.push({
 			url: formatEntry.url,
-			destPath: path$1.join(modelsDir, filename),
+			destPath: path.join(modelsDir, filename),
 			filename,
 			expectedBytes: formatEntry.sizeMB * BYTES_PER_MB
 		});
 	}
 	for (const extra of entry.extraFiles ?? []) out.push({
 		url: extra.url,
-		destPath: path$1.join(modelsDir, extra.filename),
+		destPath: path.join(modelsDir, extra.filename),
 		filename: extra.filename,
 		expectedBytes: extra.sizeMB * BYTES_PER_MB
 	});
@@ -73497,7 +73584,7 @@ function createDefaultModelOps(modelsDir) {
 		delete: async (entry) => {
 			deleteModelFromDisk(modelsDir, entry, GGUF);
 		},
-		extraFilePath: (_entry, filename) => path$1.join(modelsDir, filename)
+		extraFilePath: (_entry, filename) => path.join(modelsDir, filename)
 	};
 }
 //#endregion
@@ -74207,7 +74294,7 @@ function createLlmRuntimeProvider(deps) {
 		deleteModel: async ({ file }) => {
 			const loaded = deps.supervisor.status().modelPath;
 			if (loaded !== void 0 && basename(loaded) === file) throw new Error(`cannot delete ${file}: loaded by the running runtime`);
-			await fsp.rm(path$1.join(deps.modelsDir, file), { force: true });
+			await fsp.rm(path.join(deps.modelsDir, file), { force: true });
 		},
 		listLocalModels: async () => {
 			return (await listGgufFiles(deps.modelsDir)).map((f) => {
@@ -74215,7 +74302,7 @@ function createLlmRuntimeProvider(deps) {
 				return {
 					file: f.file,
 					sizeBytes: f.sizeBytes,
-					path: path$1.join(deps.modelsDir, f.file),
+					path: path.join(deps.modelsDir, f.file),
 					...catalogId !== void 0 ? { catalogId } : {}
 				};
 			});
@@ -74240,7 +74327,7 @@ async function listGgufFiles(dir) {
 	for (const name of names) {
 		if (!name.endsWith(".gguf")) continue;
 		try {
-			const stat = await fsp.stat(path$1.join(dir, name));
+			const stat = await fsp.stat(path.join(dir, name));
 			out.push({
 				file: name,
 				sizeBytes: stat.size
@@ -75574,7 +75661,7 @@ var AiAddon = class extends BaseAddon {
 		this.supervisor = supervisor;
 		const settingsPort = api !== void 0 ? createApiSettingsStorePort(api) : createMemorySettingsStorePort();
 		if (api === void 0) logger.warn("addon-ai: no ctx.api — profiles are in-memory only");
-		const binDir = path$1.join(ctx.nodeDataDir, "bin");
+		const binDir = path.join(ctx.nodeDataDir, "bin");
 		const { ensureLlamaServer } = await import("./ensure-llama-server-D_uzfSep.mjs").then((n) => n.r);
 		const assembly = await assembleAi({
 			nodeId: ownNodeId,