@camstack/kernel 0.1.1

package/dist/index.js

@@ -0,0 +1,1833 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  AddonEngineManager: () => AddonEngineManager,
+  AddonInstaller: () => AddonInstaller,
+  AddonLoader: () => AddonLoader,
+  AddonWorkerHost: () => AddonWorkerHost,
+  CapabilityRegistry: () => CapabilityRegistry,
+  ConfigManager: () => ConfigManager,
+  DEFAULT_DATA_PATH: () => DEFAULT_DATA_PATH,
+  INFRA_CAPABILITIES: () => INFRA_CAPABILITIES,
+  RUNTIME_DEFAULTS: () => RUNTIME_DEFAULTS,
+  WorkerProcessManager: () => WorkerProcessManager,
+  bootstrapSchema: () => bootstrapSchema,
+  copyDirRecursive: () => copyDirRecursive,
+  copyExtraFileDirs: () => copyExtraFileDirs,
+  detectWorkspacePackagesDir: () => detectWorkspacePackagesDir,
+  ensureDir: () => ensureDir,
+  ensureLibraryBuilt: () => ensureLibraryBuilt,
+  installPackageFromNpmSync: () => installPackageFromNpmSync,
+  isInfraCapability: () => isInfraCapability,
+  isSourceNewer: () => isSourceNewer,
+  stripCamstackDeps: () => stripCamstackDeps,
+  symlinkAddonsToNodeModules: () => symlinkAddonsToNodeModules
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/addon-loader.ts
+var fs = __toESM(require("fs"));
+var path = __toESM(require("path"));
+function resolveAddonClass(mod) {
+  let candidate = mod["default"] ?? mod[Object.keys(mod)[0]];
+  if (candidate && typeof candidate === "object" && "default" in candidate) {
+    candidate = candidate["default"];
+  }
+  return typeof candidate === "function" ? candidate : void 0;
+}
+var AddonLoader = class {
+  addons = /* @__PURE__ */ new Map();
+  /** Scan addons directory and load all addon packages.
+   *  Supports scoped layout: addons/@scope/package-name/ */
+  async loadFromDirectory(addonsDir) {
+    if (!fs.existsSync(addonsDir)) return;
+    const entries = fs.readdirSync(addonsDir, { withFileTypes: true });
+    for (const entry of entries) {
+      if (!entry.isDirectory()) continue;
+      if (entry.name.startsWith("@")) {
+        const scopeDir = path.join(addonsDir, entry.name);
+        const scopeEntries = fs.readdirSync(scopeDir, { withFileTypes: true });
+        for (const scopeEntry of scopeEntries) {
+          if (!scopeEntry.isDirectory()) continue;
+          await this.tryLoadAddon(path.join(scopeDir, scopeEntry.name));
+        }
+        continue;
+      }
+      await this.tryLoadAddon(path.join(addonsDir, entry.name));
+    }
+  }
+  async tryLoadAddon(addonDir) {
+    const pkgJsonPath = path.join(addonDir, "package.json");
+    if (!fs.existsSync(pkgJsonPath)) return;
+    try {
+      await this.loadFromAddonDir(addonDir);
+    } catch (err) {
+      console.warn(`Failed to load addon from ${addonDir}: ${err}`);
+    }
+  }
+  /** Load addon from a specific directory (package.json + dist/) */
+  async loadFromAddonDir(addonDir) {
+    const pkgJsonPath = path.join(addonDir, "package.json");
+    const pkgJson = JSON.parse(fs.readFileSync(pkgJsonPath, "utf-8"));
+    const packageName = pkgJson["name"];
+    const packageVersion = pkgJson["version"] ?? "0.0.0";
+    const manifest = pkgJson["camstack"];
+    if (!manifest?.addons?.length) return;
+    for (const declaration of manifest.addons) {
+      const entryFile = declaration.entry.replace(/^\.\//, "").replace(/^src\//, "dist/").replace(/\.ts$/, ".js");
+      let entryPath = path.resolve(addonDir, entryFile);
+      if (!fs.existsSync(entryPath)) {
+        const base = entryPath.replace(/\.(js|cjs|mjs)$/, "");
+        const alternatives = [
+          `${base}.cjs`,
+          `${base}.mjs`,
+          path.resolve(addonDir, "dist", "index.js"),
+          path.resolve(addonDir, "dist", "index.cjs"),
+          path.resolve(addonDir, "dist", "index.mjs"),
+          path.resolve(addonDir, declaration.entry)
+        ];
+        entryPath = alternatives.find((p) => fs.existsSync(p)) ?? entryPath;
+      }
+      if (!fs.existsSync(entryPath)) {
+        throw new Error(`Entry not found: ${entryPath}`);
+      }
+      const mod = await import(entryPath);
+      const AddonClass = resolveAddonClass(mod);
+      if (!AddonClass) {
+        throw new Error(`No addon class in ${entryPath}`);
+      }
+      this.addons.set(declaration.id, {
+        declaration,
+        packageName,
+        packageVersion,
+        addonClass: AddonClass
+      });
+    }
+  }
+  /** Load addon from a direct path (for development/testing) */
+  async loadFromPath(addonId, modulePath, packageName, declaration, packageVersion = "0.0.0") {
+    const mod = await import(modulePath);
+    const AddonClass = resolveAddonClass(mod);
+    if (!AddonClass) {
+      throw new Error(`Module ${modulePath} has no default export`);
+    }
+    this.addons.set(addonId, {
+      declaration: {
+        id: addonId,
+        entry: modulePath,
+        slot: "detector",
+        ...declaration
+      },
+      packageName,
+      packageVersion,
+      addonClass: AddonClass
+    });
+  }
+  /** Get a registered addon by ID */
+  getAddon(addonId) {
+    return this.addons.get(addonId);
+  }
+  /** List all registered addons */
+  listAddons() {
+    return [...this.addons.values()];
+  }
+  /** Check if an addon is registered */
+  hasAddon(addonId) {
+    return this.addons.has(addonId);
+  }
+  /** Create a new instance of an addon (not yet initialized) */
+  createInstance(addonId) {
+    const registered = this.addons.get(addonId);
+    if (!registered) {
+      throw new Error(`Addon "${addonId}" is not registered`);
+    }
+    return new registered.addonClass();
+  }
+};
+
+// src/addon-engine-manager.ts
+var import_node_crypto = require("crypto");
+var AddonEngineManager = class {
+  constructor(loader, baseContext) {
+    this.loader = loader;
+    this.baseContext = baseContext;
+  }
+  engines = /* @__PURE__ */ new Map();
+  /**
+   * Get or create an addon engine for the given effective config.
+   * Cameras with the same addonId + effective config share the same engine.
+   */
+  async getOrCreateEngine(addonId, globalConfig, cameraOverride) {
+    const effectiveConfig = { ...globalConfig, ...cameraOverride };
+    const configKey = `${addonId}:${this.hashConfig(effectiveConfig)}`;
+    const existing = this.engines.get(configKey);
+    if (existing) return existing;
+    const addon = this.loader.createInstance(addonId);
+    await addon.initialize({ ...this.baseContext, addonConfig: effectiveConfig });
+    this.engines.set(configKey, addon);
+    return addon;
+  }
+  /** Get all active engines */
+  getActiveEngines() {
+    return new Map(this.engines);
+  }
+  /** Shutdown a specific engine by its config key */
+  async shutdownEngine(configKey) {
+    const engine = this.engines.get(configKey);
+    if (engine) {
+      await engine.shutdown();
+      this.engines.delete(configKey);
+    }
+  }
+  /** Shutdown all engines */
+  async shutdownAll() {
+    for (const [, engine] of this.engines) {
+      await engine.shutdown();
+    }
+    this.engines.clear();
+  }
+  /** Compute a deterministic config key (visible for tests) */
+  computeConfigKey(addonId, effectiveConfig) {
+    return `${addonId}:${this.hashConfig(effectiveConfig)}`;
+  }
+  hashConfig(config) {
+    const sorted = JSON.stringify(config, Object.keys(config).sort());
+    return (0, import_node_crypto.createHash)("md5").update(sorted).digest("hex").slice(0, 12);
+  }
+};
+
+// src/addon-installer.ts
+var import_node_child_process2 = require("child_process");
+var import_node_util = require("util");
+var fs3 = __toESM(require("fs"));
+var path3 = __toESM(require("path"));
+var os = __toESM(require("os"));
+
+// src/fs-utils.ts
+var import_node_child_process = require("child_process");
+var fs2 = __toESM(require("fs"));
+var path2 = __toESM(require("path"));
+function ensureDir(dirPath) {
+  fs2.mkdirSync(dirPath, { recursive: true });
+}
+function copyDirRecursive(src, dest) {
+  ensureDir(dest);
+  const entries = fs2.readdirSync(src, { withFileTypes: true });
+  for (const entry of entries) {
+    const srcPath = path2.join(src, entry.name);
+    const destPath = path2.join(dest, entry.name);
+    if (entry.isDirectory()) {
+      copyDirRecursive(srcPath, destPath);
+    } else {
+      fs2.copyFileSync(srcPath, destPath);
+    }
+  }
+}
+function stripCamstackDeps(pkg) {
+  const result = { ...pkg };
+  for (const depType of ["dependencies", "peerDependencies", "devDependencies"]) {
+    const deps = result[depType];
+    if (deps) {
+      const filtered = {};
+      for (const [name, version] of Object.entries(deps)) {
+        if (!name.startsWith("@camstack/")) {
+          filtered[name] = version;
+        }
+      }
+      result[depType] = Object.keys(filtered).length > 0 ? filtered : void 0;
+    }
+  }
+  delete result.devDependencies;
+  return result;
+}
+function copyExtraFileDirs(pkgJson, sourceDir, destDir) {
+  const files = pkgJson.files;
+  if (!files) return;
+  for (const fileEntry of files) {
+    if (fileEntry === "dist" || fileEntry.includes("*")) continue;
+    const srcPath = path2.join(sourceDir, fileEntry);
+    if (!fs2.existsSync(srcPath)) continue;
+    const destPath = path2.join(destDir, fileEntry);
+    const stat = fs2.statSync(srcPath);
+    if (stat.isDirectory()) {
+      copyDirRecursive(srcPath, destPath);
+    } else if (stat.isFile()) {
+      ensureDir(path2.dirname(destPath));
+      fs2.copyFileSync(srcPath, destPath);
+    }
+  }
+}
+function symlinkAddonsToNodeModules(addonsDir, nodeModulesDir) {
+  const camstackDir = path2.join(nodeModulesDir, "@camstack");
+  ensureDir(camstackDir);
+  const packagesToLink = ["core"];
+  for (const pkg of packagesToLink) {
+    const addonDir = path2.join(addonsDir, "@camstack", pkg);
+    const linkPath = path2.join(camstackDir, pkg);
+    if (!fs2.existsSync(addonDir)) continue;
+    try {
+      const stat = fs2.lstatSync(linkPath);
+      if (stat.isSymbolicLink() || stat.isDirectory()) {
+        fs2.rmSync(linkPath, { recursive: true, force: true });
+      }
+    } catch {
+    }
+    fs2.symlinkSync(addonDir, linkPath, "dir");
+    console.log(`[symlink] node_modules/@camstack/${pkg} -> ${addonDir}`);
+  }
+}
+function isSourceNewer(packageDir) {
+  const srcDir = path2.join(packageDir, "src");
+  const distDir = path2.join(packageDir, "dist");
+  if (!fs2.existsSync(srcDir) || !fs2.existsSync(distDir)) return true;
+  try {
+    const distMtime = fs2.statSync(distDir).mtimeMs;
+    const entries = fs2.readdirSync(srcDir, { withFileTypes: true, recursive: true });
+    for (const entry of entries) {
+      if (!entry.isFile()) continue;
+      const filePath = path2.join(entry.parentPath ?? entry.path, entry.name);
+      if (fs2.statSync(filePath).mtimeMs > distMtime) return true;
+    }
+    return false;
+  } catch {
+    return true;
+  }
+}
+function ensureLibraryBuilt(packageName, packagesDir) {
+  const dirName = packageName.replace("@camstack/", "");
+  const sourceDir = path2.join(packagesDir, dirName);
+  if (!fs2.existsSync(sourceDir)) return;
+  const distDir = path2.join(sourceDir, "dist");
+  const hasIndex = fs2.existsSync(path2.join(distDir, "index.js")) || fs2.existsSync(path2.join(distDir, "index.mjs"));
+  if (hasIndex) return;
+  console.warn(`[ensureLibraryBuilt] ${packageName} has no dist/ \u2014 run 'npm run build' first`);
+}
+function installPackageFromNpmSync(packageName, targetDir) {
+  const os2 = require("os");
+  const tmpDir = fs2.mkdtempSync(path2.join(os2.tmpdir(), "camstack-install-"));
+  try {
+    const stdout = (0, import_node_child_process.execFileSync)("npm", ["pack", packageName, "--pack-destination", tmpDir], {
+      timeout: 12e4,
+      encoding: "utf-8"
+    });
+    const tgzFilename = stdout.trim().split("\n").pop()?.trim();
+    if (!tgzFilename) throw new Error("npm pack produced no output");
+    const tgzPath = path2.join(tmpDir, tgzFilename);
+    const extractDir = path2.join(tmpDir, "extracted");
+    ensureDir(extractDir);
+    (0, import_node_child_process.execFileSync)("tar", ["-xzf", tgzPath, "-C", extractDir], { timeout: 3e4 });
+    const packageSubDir = path2.join(extractDir, "package");
+    const srcPkgJsonDir = fs2.existsSync(path2.join(packageSubDir, "package.json")) ? packageSubDir : extractDir;
+    fs2.rmSync(targetDir, { recursive: true, force: true });
+    ensureDir(targetDir);
+    fs2.copyFileSync(path2.join(srcPkgJsonDir, "package.json"), path2.join(targetDir, "package.json"));
+    const distSrc = path2.join(srcPkgJsonDir, "dist");
+    if (fs2.existsSync(distSrc)) {
+      copyDirRecursive(distSrc, path2.join(targetDir, "dist"));
+    }
+    try {
+      const npmPkg = JSON.parse(fs2.readFileSync(path2.join(srcPkgJsonDir, "package.json"), "utf-8"));
+      copyExtraFileDirs(npmPkg, srcPkgJsonDir, targetDir);
+    } catch {
+    }
+  } finally {
+    fs2.rmSync(tmpDir, { recursive: true, force: true });
+  }
+}
+
+// src/addon-installer.ts
+var execFileAsync = (0, import_node_util.promisify)(import_node_child_process2.execFile);
+var AddonInstaller = class _AddonInstaller {
+  addonsDir;
+  registry;
+  workspacePackagesDir;
+  constructor(config) {
+    this.addonsDir = config.addonsDir;
+    this.registry = config.registry;
+    this.workspacePackagesDir = config.workspacePackagesDir;
+  }
+  /** Required addon packages that must be installed for the server to function */
+  static REQUIRED_PACKAGES = [
+    "@camstack/core",
+    "@camstack/addon-pipeline",
+    "@camstack/addon-vision",
+    "@camstack/addon-admin-ui",
+    "@camstack/addon-webrtc-adaptive",
+    "@camstack/addon-pipeline-analysis",
+    "@camstack/addon-scene-intelligence",
+    "@camstack/addon-advanced-notifier"
+  ];
+  /** Ensure the addons directory exists */
+  async initialize() {
+    ensureDir(this.addonsDir);
+  }
+  /**
+   * Ensure all required packages are installed in the addons directory.
+   * This replaces the standalone first-boot-installer.ts.
+   */
+  async ensureRequiredPackages() {
+    ensureDir(this.addonsDir);
+    if (this.workspacePackagesDir) {
+      console.log(`[AddonInstaller] Workspace detected: ${this.workspacePackagesDir}`);
+      ensureLibraryBuilt("@camstack/kernel", this.workspacePackagesDir);
+      ensureLibraryBuilt("@camstack/types", this.workspacePackagesDir);
+    }
+    for (const packageName of _AddonInstaller.REQUIRED_PACKAGES) {
+      const addonDir = path3.join(this.addonsDir, packageName);
+      const pkgJsonPath = path3.join(addonDir, "package.json");
+      if (fs3.existsSync(pkgJsonPath)) {
+        if (!this.workspacePackagesDir) {
+          continue;
+        }
+        const srcPkgDir = this.findWorkspacePackage(packageName);
+        if (srcPkgDir && !isSourceNewer(srcPkgDir)) {
+          continue;
+        }
+      }
+      try {
+        if (this.workspacePackagesDir) {
+          const pkgDir = this.findWorkspacePackage(packageName);
+          if (pkgDir) {
+            await this.installFromWorkspace(packageName);
+            continue;
+          }
+        }
+        await this.installFromNpm(packageName);
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (packageName === "@camstack/core") {
+          throw new Error(`Required package ${packageName} failed to install: ${msg}`);
+        }
+        console.error(`[AddonInstaller] Failed to install ${packageName}: ${msg}`);
+      }
+    }
+  }
+  findWorkspacePackage(packageName) {
+    if (!this.workspacePackagesDir) return null;
+    const shortName = packageName.replace("@camstack/", "");
+    for (const dirName of [shortName, `addon-${shortName}`, shortName.replace("addon-", "")]) {
+      const candidate = path3.join(this.workspacePackagesDir, dirName);
+      if (fs3.existsSync(path3.join(candidate, "package.json"))) {
+        try {
+          const pkg = JSON.parse(fs3.readFileSync(path3.join(candidate, "package.json"), "utf-8"));
+          if (pkg.name === packageName) return candidate;
+        } catch {
+        }
+      }
+    }
+    return null;
+  }
+  /** Install addon from a tgz file (uploaded or downloaded) */
+  async installFromTgz(tgzPath) {
+    const tmpDir = fs3.mkdtempSync(path3.join(os.tmpdir(), "camstack-addon-install-"));
+    try {
+      await execFileAsync("tar", ["-xzf", tgzPath, "-C", tmpDir], { timeout: 3e4 });
+      const extractedDir = path3.join(tmpDir, "package");
+      const pkgJsonPath = fs3.existsSync(path3.join(extractedDir, "package.json")) ? path3.join(extractedDir, "package.json") : path3.join(tmpDir, "package.json");
+      if (!fs3.existsSync(pkgJsonPath)) {
+        throw new Error("No package.json found in tgz archive");
+      }
+      const pkgJson = JSON.parse(fs3.readFileSync(pkgJsonPath, "utf-8"));
+      if (!pkgJson.camstack?.addons) {
+        throw new Error(`Package ${pkgJson.name} has no camstack.addons manifest`);
+      }
+      const targetDir = path3.join(this.addonsDir, pkgJson.name);
+      fs3.rmSync(targetDir, { recursive: true, force: true });
+      ensureDir(targetDir);
+      const sourceDir = path3.dirname(pkgJsonPath);
+      fs3.copyFileSync(pkgJsonPath, path3.join(targetDir, "package.json"));
+      const sourceDist = path3.join(sourceDir, "dist");
+      if (fs3.existsSync(sourceDist)) {
+        copyDirRecursive(sourceDist, path3.join(targetDir, "dist"));
+      }
+      copyExtraFileDirs(pkgJson, sourceDir, targetDir);
+      return { name: pkgJson.name, version: pkgJson.version };
+    } finally {
+      fs3.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  }
+  /**
+   * Install addon — prefers workspace if available, falls back to npm.
+   * This ensures dev builds (with vite output, etc.) are used when in workspace mode.
+   */
+  async install(packageName, version) {
+    if (this.workspacePackagesDir) {
+      const workspaceDirName = packageName.replace("@camstack/", "");
+      const sourceDir = path3.join(this.workspacePackagesDir, workspaceDirName);
+      if (fs3.existsSync(path3.join(sourceDir, "package.json"))) {
+        return this.installFromWorkspace(packageName);
+      }
+    }
+    return this.installFromNpm(packageName, version);
+  }
+  /**
+   * Install addon from workspace by copying package.json + dist/ to addons dir.
+   * Does NOT build — expects dist/ to already exist (run `npm run build` separately).
+   */
+  async installFromWorkspace(packageName) {
+    if (!this.workspacePackagesDir) {
+      throw new Error("Workspace packages directory not configured");
+    }
+    const workspaceDirName = packageName.replace("@camstack/", "");
+    const sourceDir = path3.join(this.workspacePackagesDir, workspaceDirName);
+    const sourcePkgJson = path3.join(sourceDir, "package.json");
+    if (!fs3.existsSync(sourcePkgJson)) {
+      throw new Error(`Workspace package not found: ${sourceDir}`);
+    }
+    const distDir = path3.join(sourceDir, "dist");
+    if (!fs3.existsSync(distDir)) {
+      throw new Error(`${packageName} has no dist/ directory \u2014 run 'npm run build' first`);
+    }
+    const targetDir = path3.join(this.addonsDir, packageName);
+    fs3.rmSync(targetDir, { recursive: true, force: true });
+    ensureDir(targetDir);
+    const pkgData = JSON.parse(fs3.readFileSync(sourcePkgJson, "utf-8"));
+    const strippedPkg = stripCamstackDeps(pkgData);
+    fs3.writeFileSync(path3.join(targetDir, "package.json"), JSON.stringify(strippedPkg, null, 2));
+    copyDirRecursive(distDir, path3.join(targetDir, "dist"));
+    copyExtraFileDirs(pkgData, sourceDir, targetDir);
+    try {
+      await execFileAsync("npm", ["install", "--omit=dev", "--ignore-scripts=false"], {
+        cwd: targetDir,
+        timeout: 12e4
+      });
+    } catch {
+    }
+    return { name: pkgData.name, version: pkgData.version };
+  }
+  /** Install addon from npm (download tgz, then extract) */
+  async installFromNpm(packageName, version) {
+    const tmpDir = fs3.mkdtempSync(path3.join(os.tmpdir(), "camstack-addon-npm-"));
+    const packageSpec = version ? `${packageName}@${version}` : packageName;
+    const args = ["pack", packageSpec, "--pack-destination", tmpDir];
+    if (this.registry) {
+      args.push("--registry", this.registry);
+    }
+    try {
+      const { stdout } = await execFileAsync("npm", args, {
+        timeout: 12e4
+      });
+      const tgzFiles = fs3.readdirSync(tmpDir).filter((f) => f.endsWith(".tgz"));
+      if (tgzFiles.length === 0) {
+        throw new Error(`npm pack produced no tgz file for ${packageSpec}. stdout: ${stdout.trim()}`);
+      }
+      const tgzPath = path3.join(tmpDir, tgzFiles[0]);
+      const result = await this.installFromTgz(tgzPath);
+      return result;
+    } finally {
+      fs3.rmSync(tmpDir, { recursive: true, force: true });
+    }
+  }
+  /** Uninstall addon (delete directory) */
+  async uninstall(packageName) {
+    const addonDir = path3.join(this.addonsDir, packageName);
+    if (fs3.existsSync(addonDir)) {
+      fs3.rmSync(addonDir, { recursive: true, force: true });
+      return;
+    }
+    const legacyDir = path3.join(this.addonsDir, packageName.replace(/^@[^/]+\//, ""));
+    if (fs3.existsSync(legacyDir)) {
+      fs3.rmSync(legacyDir, { recursive: true, force: true });
+    }
+  }
+  /** List installed addons (directories with package.json containing camstack.addons) */
+  listInstalled() {
+    if (!fs3.existsSync(this.addonsDir)) return [];
+    return fs3.readdirSync(this.addonsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
+      const pkgPath = path3.join(this.addonsDir, d.name, "package.json");
+      if (!fs3.existsSync(pkgPath)) return null;
+      try {
+        const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8"));
+        if (!pkg.camstack?.addons) return null;
+        return { name: pkg.name, version: pkg.version, dir: path3.join(this.addonsDir, d.name) };
+      } catch {
+        return null;
+      }
+    }).filter((item) => item !== null);
+  }
+  /** Check if an addon is installed */
+  isInstalled(packageName) {
+    if (fs3.existsSync(path3.join(this.addonsDir, packageName, "package.json"))) return true;
+    const legacy = packageName.replace(/^@[^/]+\//, "");
+    return fs3.existsSync(path3.join(this.addonsDir, legacy, "package.json"));
+  }
+  /** Get installed package info */
+  getInstalledPackage(packageName) {
+    let pkgPath = path3.join(this.addonsDir, packageName, "package.json");
+    if (!fs3.existsSync(pkgPath)) {
+      pkgPath = path3.join(this.addonsDir, packageName.replace(/^@[^/]+\//, ""), "package.json");
+    }
+    if (!fs3.existsSync(pkgPath)) return null;
+    try {
+      const pkg = JSON.parse(fs3.readFileSync(pkgPath, "utf-8"));
+      return { name: pkg.name, version: pkg.version, dir: path3.dirname(pkgPath) };
+    } catch {
+      return null;
+    }
+  }
+};
+
+// src/workspace-detect.ts
+var fs4 = __toESM(require("fs"));
+var path4 = __toESM(require("path"));
+function detectWorkspacePackagesDir(startDir) {
+  let current = path4.resolve(startDir);
+  for (let i = 0; i < 6; i++) {
+    current = path4.dirname(current);
+    const packagesDir = path4.join(current, "packages");
+    const rootPkgJson = path4.join(current, "package.json");
+    if (fs4.existsSync(packagesDir) && fs4.existsSync(rootPkgJson)) {
+      try {
+        const rootPkg = JSON.parse(fs4.readFileSync(rootPkgJson, "utf-8"));
+        if (rootPkg.workspaces || rootPkg.name === "camstack-server" || rootPkg.name === "camstack") {
+          return packagesDir;
+        }
+      } catch {
+      }
+    }
+  }
+  return null;
+}
+
+// src/capability-registry.ts
+var CapabilityRegistry = class {
+  constructor(logger, configReader) {
+    this.logger = logger;
+    this.configReader = configReader;
+  }
+  capabilities = /* @__PURE__ */ new Map();
+  /** Per-device singleton overrides: deviceId → (capability → addonId) */
+  deviceOverrides = /* @__PURE__ */ new Map();
+  /** Per-device collection filters: deviceId → (capability → addonIds[]) */
+  deviceCollectionFilters = /* @__PURE__ */ new Map();
+  /**
+   * Declare a capability (typically called when addon manifests are loaded).
+   * Must be called before registerProvider/registerConsumer for that capability.
+   */
+  declareCapability(declaration) {
+    if (this.capabilities.has(declaration.name)) {
+      this.logger.debug(`Capability "${declaration.name}" already declared, skipping`);
+      return;
+    }
+    this.capabilities.set(declaration.name, {
+      declaration,
+      available: /* @__PURE__ */ new Map(),
+      activeAddonId: null,
+      activeProvider: null,
+      activeCollection: [],
+      consumers: /* @__PURE__ */ new Set()
+    });
+    this.logger.debug(`Capability declared: ${declaration.name} (mode=${declaration.mode})`);
+  }
+  /**
+   * Register a capability provider (called by addon loader when addon is enabled).
+   * For singleton: auto-activates if user-preferred or first registered.
+   * For collection: adds to active set and notifies consumers.
+   */
+  registerProvider(capability, addonId, provider) {
+    const state = this.capabilities.get(capability);
+    if (!state) {
+      this.logger.warn(`Cannot register provider for undeclared capability "${capability}"`);
+      return;
+    }
+    state.available.set(addonId, provider);
+    this.logger.info(`Provider registered: ${addonId} \u2192 ${capability}`);
+    if (state.declaration.mode === "singleton") {
+      const userChoice = this.configReader(capability);
+      if (userChoice === addonId) {
+        this.activateSingleton(state, addonId, provider);
+      } else if (userChoice === void 0 && state.activeAddonId === null) {
+        this.activateSingleton(state, addonId, provider);
+      }
+    } else {
+      state.activeCollection.push({ addonId, provider });
+      for (const consumer of state.consumers) {
+        if (consumer.onAdded) {
+          try {
+            consumer.onAdded(provider);
+          } catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            this.logger.error(`Consumer onAdded failed for ${capability}: ${msg}`);
+          }
+        }
+      }
+    }
+  }
+  /**
+   * Unregister a provider (called when addon is disabled/uninstalled).
+   */
+  unregisterProvider(capability, addonId) {
+    const state = this.capabilities.get(capability);
+    if (!state) return;
+    const provider = state.available.get(addonId);
+    state.available.delete(addonId);
+    if (state.declaration.mode === "singleton") {
+      if (state.activeAddonId === addonId) {
+        state.activeAddonId = null;
+        state.activeProvider = null;
+        this.logger.info(`Singleton deactivated: ${capability} (was ${addonId})`);
+      }
+    } else {
+      const idx = state.activeCollection.findIndex((e) => e.addonId === addonId);
+      if (idx !== -1) {
+        state.activeCollection.splice(idx, 1);
+        for (const consumer of state.consumers) {
+          if (consumer.onRemoved && provider !== void 0) {
+            try {
+              consumer.onRemoved(provider);
+            } catch (error) {
+              const msg = error instanceof Error ? error.message : String(error);
+              this.logger.error(`Consumer onRemoved failed for ${capability}: ${msg}`);
+            }
+          }
+        }
+      }
+    }
+  }
+  /**
+   * Register a consumer that wants to be notified when providers change.
+   * If a provider is already active, the consumer is immediately notified.
+   * Returns a disposer function for cleanup.
+   */
+  registerConsumer(registration) {
+    const state = this.capabilities.get(registration.capability);
+    if (!state) {
+      this.logger.debug(`Consumer registered for undeclared capability "${registration.capability}" \u2014 auto-declaring`);
+      this.declareCapability({ name: registration.capability, mode: "singleton" });
+      return this.registerConsumer(registration);
+    }
+    const untypedReg = registration;
+    state.consumers.add(untypedReg);
+    if (state.declaration.mode === "singleton") {
+      if (state.activeProvider !== null && registration.onSet) {
+        try {
+          registration.onSet(state.activeProvider);
+        } catch (error) {
+          const msg = error instanceof Error ? error.message : String(error);
+          this.logger.error(`Consumer onSet (immediate) failed for ${registration.capability}: ${msg}`);
+        }
+      }
+    } else {
+      if (registration.onAdded) {
+        for (const entry of state.activeCollection) {
+          try {
+            registration.onAdded(entry.provider);
+          } catch (error) {
+            const msg = error instanceof Error ? error.message : String(error);
+            this.logger.error(`Consumer onAdded (immediate) failed for ${registration.capability}: ${msg}`);
+          }
+        }
+      }
+    }
+    return () => {
+      state.consumers.delete(untypedReg);
+    };
+  }
+  /**
+   * Get the active singleton provider for a capability.
+   * Returns null if none set.
+   */
+  getSingleton(capability) {
+    const state = this.capabilities.get(capability);
+    if (!state || state.declaration.mode !== "singleton") return null;
+    return state.activeProvider ?? null;
+  }
+  /**
+   * Get all active collection providers for a capability.
+   */
+  getCollection(capability) {
+    const state = this.capabilities.get(capability);
+    if (!state || state.declaration.mode !== "collection") return [];
+    return state.activeCollection.map((e) => e.provider);
+  }
+  /**
+   * Set which addon should be the active singleton for a capability.
+   * Call with `immediate: true` to also swap the runtime provider now
+   * (consumers' onSet will be awaited).
+   */
+  async setActiveSingleton(capability, addonId, immediate = false) {
+    const state = this.capabilities.get(capability);
+    if (!state) {
+      throw new Error(`Unknown capability: ${capability}`);
+    }
+    if (state.declaration.mode !== "singleton") {
+      throw new Error(`Capability "${capability}" is not a singleton`);
+    }
+    const provider = state.available.get(addonId);
+    if (!provider) {
+      throw new Error(`No provider "${addonId}" registered for capability "${capability}"`);
+    }
+    if (immediate) {
+      await this.activateSingletonAsync(state, addonId, provider);
+    }
+    this.logger.info(`Singleton preference set: ${capability} \u2192 ${addonId}`);
+  }
+  /**
+   * Get the mode declared for a capability.
+   */
+  getMode(capability) {
+    return this.capabilities.get(capability)?.declaration.mode;
+  }
+  /**
+   * List all registered capabilities with their providers.
+   */
+  listCapabilities() {
+    const result = [];
+    for (const [name, state] of this.capabilities) {
+      result.push({
+        name,
+        mode: state.declaration.mode,
+        providers: [...state.available.keys()],
+        activeProvider: state.activeAddonId
+      });
+    }
+    return result;
+  }
+  /**
+   * Check if all dependencies for a capability are satisfied (have active providers).
+   */
+  areDependenciesMet(declaration) {
+    if (!declaration.dependsOn?.length) return true;
+    return declaration.dependsOn.every((dep) => {
+      const state = this.capabilities.get(dep);
+      if (!state) return false;
+      if (state.declaration.mode === "singleton") {
+        return state.activeProvider !== null;
+      }
+      return state.activeCollection.length > 0;
+    });
+  }
+  /**
+   * Get the dependency-ordered list of capability names for boot sequencing.
+   * Returns capabilities sorted topologically by dependsOn.
+   * Throws if a cycle is detected.
+   */
+  getBootOrder() {
+    const visited = /* @__PURE__ */ new Set();
+    const visiting = /* @__PURE__ */ new Set();
+    const order = [];
+    const visit = (name) => {
+      if (visited.has(name)) return;
+      if (visiting.has(name)) {
+        throw new Error(`Circular dependency detected involving capability "${name}"`);
+      }
+      visiting.add(name);
+      const state = this.capabilities.get(name);
+      if (state?.declaration.dependsOn) {
+        for (const dep of state.declaration.dependsOn) {
+          visit(dep);
+        }
+      }
+      visiting.delete(name);
+      visited.add(name);
+      order.push(name);
+    };
+    for (const name of this.capabilities.keys()) {
+      visit(name);
+    }
+    return order;
+  }
+  // ---- Per-device overrides ----
+  /**
+   * Set a per-device singleton override. When resolveForDevice is called for
+   * this device + capability, the specified addon's provider is returned
+   * instead of the global singleton.
+   */
+  setDeviceOverride(deviceId, capability, addonId) {
+    const state = this.capabilities.get(capability);
+    if (!state) {
+      this.logger.warn(`Cannot set device override for undeclared capability "${capability}"`);
+      return;
+    }
+    if (!state.available.has(addonId)) {
+      this.logger.warn(`Cannot set device override: addon "${addonId}" not registered for "${capability}"`);
+      return;
+    }
+    let deviceMap = this.deviceOverrides.get(deviceId);
+    if (!deviceMap) {
+      deviceMap = /* @__PURE__ */ new Map();
+      this.deviceOverrides.set(deviceId, deviceMap);
+    }
+    deviceMap.set(capability, addonId);
+    this.logger.info(`Device override set: ${deviceId} \u2192 ${capability} = ${addonId}`);
+  }
+  /**
+   * Clear a per-device singleton override, reverting to the global singleton.
+   */
+  clearDeviceOverride(deviceId, capability) {
+    const deviceMap = this.deviceOverrides.get(deviceId);
+    if (!deviceMap) return;
+    deviceMap.delete(capability);
+    if (deviceMap.size === 0) {
+      this.deviceOverrides.delete(deviceId);
+    }
+    this.logger.info(`Device override cleared: ${deviceId} \u2192 ${capability}`);
+  }
+  /**
+   * Get all per-device singleton overrides for a device.
+   * Returns a Map of capability name to addon ID.
+   */
+  getDeviceOverrides(deviceId) {
+    return new Map(this.deviceOverrides.get(deviceId) ?? []);
+  }
+  /**
+   * Resolve a singleton provider for a specific device.
+   * 1. Check device override — return that addon's provider
+   * 2. Fallback to global singleton
+   */
+  resolveForDevice(capability, deviceId) {
+    const state = this.capabilities.get(capability);
+    if (!state || state.declaration.mode !== "singleton") return null;
+    const deviceMap = this.deviceOverrides.get(deviceId);
+    if (deviceMap) {
+      const overrideAddonId = deviceMap.get(capability);
+      if (overrideAddonId) {
+        const provider = state.available.get(overrideAddonId);
+        if (provider) return provider;
+        this.logger.warn(
+          `Device override for ${deviceId}/${capability} references unregistered addon "${overrideAddonId}" \u2014 falling back to global`
+        );
+      }
+    }
+    return state.activeProvider ?? null;
+  }
+  /**
+   * Set a per-device collection filter. When resolveCollectionForDevice is called
+   * for this device + capability, only providers from the specified addon IDs
+   * are returned instead of the full collection.
+   */
+  setDeviceCollectionFilter(deviceId, capability, addonIds) {
+    const state = this.capabilities.get(capability);
+    if (!state) {
+      this.logger.warn(`Cannot set device collection filter for undeclared capability "${capability}"`);
+      return;
+    }
+    let deviceMap = this.deviceCollectionFilters.get(deviceId);
+    if (!deviceMap) {
+      deviceMap = /* @__PURE__ */ new Map();
+      this.deviceCollectionFilters.set(deviceId, deviceMap);
+    }
+    deviceMap.set(capability, [...addonIds]);
+    this.logger.info(`Device collection filter set: ${deviceId} \u2192 ${capability} = [${addonIds.join(", ")}]`);
+  }
+  /**
+   * Clear a per-device collection filter, reverting to the full collection.
+   */
+  clearDeviceCollectionFilter(deviceId, capability) {
+    const deviceMap = this.deviceCollectionFilters.get(deviceId);
+    if (!deviceMap) return;
+    deviceMap.delete(capability);
+    if (deviceMap.size === 0) {
+      this.deviceCollectionFilters.delete(deviceId);
+    }
+    this.logger.info(`Device collection filter cleared: ${deviceId} \u2192 ${capability}`);
+  }
+  /**
+   * Resolve collection providers for a specific device.
+   * If a filter exists for the device + capability, only those addon's providers are returned.
+   * If no filter exists, the full collection is returned.
+   */
+  resolveCollectionForDevice(capability, deviceId) {
+    const state = this.capabilities.get(capability);
+    if (!state || state.declaration.mode !== "collection") return [];
+    const deviceMap = this.deviceCollectionFilters.get(deviceId);
+    if (deviceMap) {
+      const filterAddonIds = deviceMap.get(capability);
+      if (filterAddonIds) {
+        const filterSet = new Set(filterAddonIds);
+        return state.activeCollection.filter((e) => filterSet.has(e.addonId)).map((e) => e.provider);
+      }
+    }
+    return state.activeCollection.map((e) => e.provider);
+  }
+  /**
+   * Get a specific addon's provider by addon ID, regardless of whether it's the active singleton.
+   * Useful for per-device overrides that need to look up any registered provider.
+   */
+  getProviderByAddonId(capability, addonId) {
+    const state = this.capabilities.get(capability);
+    if (!state) return null;
+    const provider = state.available.get(addonId);
+    return provider ?? null;
+  }
+  activateSingleton(state, addonId, provider) {
+    state.activeAddonId = addonId;
+    state.activeProvider = provider;
+    this.logger.info(`Singleton activated: ${state.declaration.name} \u2192 ${addonId}`);
+    for (const consumer of state.consumers) {
+      if (consumer.onSet) {
+        try {
+          consumer.onSet(provider);
+        } catch (error) {
+          const msg = error instanceof Error ? error.message : String(error);
+          this.logger.error(`Consumer onSet failed for ${state.declaration.name}: ${msg}`);
+        }
+      }
+    }
+  }
+  async activateSingletonAsync(state, addonId, provider) {
+    state.activeAddonId = addonId;
+    state.activeProvider = provider;
+    this.logger.info(`Singleton activated (async): ${state.declaration.name} \u2192 ${addonId}`);
+    for (const consumer of state.consumers) {
+      if (consumer.onSet) {
+        try {
+          await consumer.onSet(provider);
+        } catch (error) {
+          const msg = error instanceof Error ? error.message : String(error);
+          this.logger.error(`Consumer onSet (async) failed for ${state.declaration.name}: ${msg}`);
+        }
+      }
+    }
+  }
+};
+
+// src/infra-capabilities.ts
+var INFRA_CAPABILITIES = [
+  { name: "storage", required: true },
+  { name: "settings-store", required: true },
+  { name: "log-destination", required: false }
+];
+var infraNames = new Set(INFRA_CAPABILITIES.map((c) => c.name));
+function isInfraCapability(name) {
+  return infraNames.has(name);
+}
+
+// src/config-manager.ts
+var fs5 = __toESM(require("fs"));
+var yaml = __toESM(require("js-yaml"));
+
+// src/config-schema.ts
+var import_zod = require("zod");
+var DEFAULT_DATA_PATH = "camstack-data";
+var bootstrapSchema = import_zod.z.object({
+  /** Server mode: 'hub' (full server) or 'agent' (worker node) */
+  mode: import_zod.z.enum(["hub", "agent"]).default("hub"),
+  server: import_zod.z.object({
+    port: import_zod.z.number().default(4443),
+    host: import_zod.z.string().default("0.0.0.0"),
+    dataPath: import_zod.z.string().default(DEFAULT_DATA_PATH)
+  }).default({}),
+  auth: import_zod.z.object({
+    jwtSecret: import_zod.z.string().nullable().default(null),
+    adminUsername: import_zod.z.string().default("admin"),
+    adminPassword: import_zod.z.string().default(process.env.ADMIN_PASSWORD ?? "changeme")
+  }).default({}),
+  /** Hub connection config — only used when mode='agent' */
+  hub: import_zod.z.object({
+    url: import_zod.z.string().default("ws://localhost:4443/agent"),
+    token: import_zod.z.string().default("")
+  }).default({}),
+  /** Agent-specific config — only used when mode='agent' */
+  agent: import_zod.z.object({
+    name: import_zod.z.string().default(""),
+    /** Port for the agent status page (minimal HTML) */
+    statusPort: import_zod.z.number().default(4444)
+  }).default({}),
+  /** TLS configuration */
+  tls: import_zod.z.object({
+    /** Enable HTTPS (default: true) */
+    enabled: import_zod.z.boolean().default(true),
+    /** Path to custom cert file (PEM). If not set, auto-generates self-signed. */
+    certPath: import_zod.z.string().optional(),
+    /** Path to custom key file (PEM). Required if certPath is set. */
+    keyPath: import_zod.z.string().optional()
+  }).default({})
+});
+var RUNTIME_DEFAULTS = {
+  "features.streaming": true,
+  "features.notifications": true,
+  "features.objectDetection": false,
+  "features.remoteAccess": true,
+  "features.agentCluster": false,
+  "features.smartHome": true,
+  "features.recordings": true,
+  "features.backup": true,
+  "features.repl": true,
+  "retention.detectionEventsDays": 30,
+  "retention.audioLevelsDays": 7,
+  "logging.level": "info",
+  "logging.retentionDays": 30,
+  "eventBus.ringBufferSize": 1e4,
+  "storage.provider": "sqlite-storage",
+  "storage.locations": {
+    data: "camstack-data/data",
+    media: "camstack-data/media",
+    recordings: "camstack-data/recordings",
+    cache: "/tmp/camstack-cache",
+    logs: "camstack-data/logs",
+    models: "camstack-data/models"
+  },
+  "providers": [],
+  // Recording
+  "recording.segmentDurationSeconds": 4,
+  "recording.defaultRetentionDays": 30,
+  // Streaming ports are addon-specific (go2rtc owns its defaults)
+  // FFmpeg
+  "ffmpeg.binaryPath": "ffmpeg",
+  "ffmpeg.hwAccel": "auto",
+  "ffmpeg.threadCount": 0,
+  // Detection defaults
+  "detection.defaultMotionFps": 2,
+  "detection.defaultDetectionFps": 5,
+  "detection.defaultCooldownSeconds": 10,
+  "detection.defaultConfidenceThreshold": 0.4,
+  "detection.trackerMaxAgeFrames": 30,
+  "detection.trackerMinHits": 3,
+  "detection.trackerIouThreshold": 0.3,
+  // Backup retention is addon-specific (local-backup owns its default)
+  // Auth (runtime)
+  "auth.tokenExpiry": "24h"
+};
+
+// src/config-manager.ts
+var ENV_VAR_MAP = {
+  CAMSTACK_PORT: "server.port",
+  CAMSTACK_HOST: "server.host",
+  CAMSTACK_DATA: "server.dataPath",
+  CAMSTACK_JWT_SECRET: "auth.jwtSecret",
+  CAMSTACK_ADMIN_USER: "auth.adminUsername",
+  CAMSTACK_ADMIN_PASS: "auth.adminPassword"
+};
+var ConfigManager = class _ConfigManager {
+  constructor(configPath) {
+    this.configPath = configPath;
+    const rawYaml = this.loadYaml();
+    const merged = this.applyEnvOverrides(rawYaml);
+    this.bootstrapConfig = bootstrapSchema.parse(merged);
+    this.warnDefaultCredentials();
+  }
+  // Non-readonly so update() can sync the in-memory view after a write.
+  bootstrapConfig;
+  settingsStore = null;
+  /** Called by main.ts after the SQLite DB is ready (Phase 2). */
+  setSettingsStore(store) {
+    this.settingsStore = store;
+  }
+  /**
+   * Get a config value by dot-notation path.
+   * Priority: bootstrap config -> SQL system_settings -> RUNTIME_DEFAULTS fallback.
+   */
+  get(path5) {
+    const bootstrapValue = this.getFromBootstrap(path5);
+    if (bootstrapValue !== void 0) {
+      return bootstrapValue;
+    }
+    if (this.settingsStore !== null) {
+      const sqlValue = this.settingsStore.getSystem(path5);
+      if (sqlValue !== void 0) {
+        return sqlValue;
+      }
+      const sqlNested = this.getNestedFromSystemSettings(path5);
+      if (sqlNested !== void 0) {
+        return sqlNested;
+      }
+    }
+    if (path5 in RUNTIME_DEFAULTS) {
+      return RUNTIME_DEFAULTS[path5];
+    }
+    const nested = this.getFromRuntimeDefaults(path5);
+    if (nested !== void 0) {
+      return nested;
+    }
+    return void 0;
+  }
+  /**
+   * Write a value to SQL system_settings.
+   * Throws if the settings store is not yet wired.
+   */
+  set(key, value) {
+    if (this.settingsStore === null) {
+      throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
+    }
+    this.settingsStore.setSystem(key, value);
+  }
+  /**
+   * Bulk-read all system_settings keys that belong to a logical section.
+   * A "section" is the first segment of a dot-notation key (e.g. 'features', 'logging').
+   */
+  getSection(section) {
+    if (this.settingsStore !== null) {
+      const nested = this.getNestedFromSystemSettings(section);
+      if (nested !== void 0) return nested;
+    }
+    const bootstrapValue = this.bootstrapConfig[section];
+    if (bootstrapValue !== void 0 && bootstrapValue !== null && typeof bootstrapValue === "object") {
+      return bootstrapValue;
+    }
+    return this.getFromRuntimeDefaults(section) ?? {};
+  }
+  /**
+   * Bulk-write a section of runtime settings to SQL system_settings.
+   * Each entry in `data` is stored as `section.key`.
+   */
+  setSection(section, data) {
+    if (this.settingsStore === null) {
+      throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
+    }
+    for (const [key, value] of Object.entries(data)) {
+      this.settingsStore.setSystem(`${section}.${key}`, value);
+    }
+  }
+  // ---------------------------------------------------------------------------
+  // Addon / Provider / Device scoped config
+  // ---------------------------------------------------------------------------
+  /** Read all config for an addon from addon_settings. */
+  getAddonConfig(addonId) {
+    if (this.settingsStore !== null) {
+      return this.settingsStore.getAllAddon(addonId);
+    }
+    return this.getFromBootstrap(`addons.${addonId}`) ?? {};
+  }
+  /** Write (bulk-replace) config for an addon to addon_settings. */
+  setAddonConfig(addonId, config) {
+    if (this.settingsStore === null) {
+      throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
+    }
+    this.settingsStore.setAllAddon(addonId, config);
+  }
+  /** Read all config for a provider from provider_settings. */
+  getProviderConfig(providerId) {
+    if (this.settingsStore !== null) {
+      return this.settingsStore.getAllProvider(providerId);
+    }
+    return {};
+  }
+  /** Write (upsert) a single key for a provider to provider_settings. */
+  setProviderConfig(providerId, key, value) {
+    if (this.settingsStore === null) {
+      throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
+    }
+    this.settingsStore.setProvider(providerId, key, value);
+  }
+  /** Read all config for a device from device_settings. */
+  getDeviceConfig(deviceId) {
+    if (this.settingsStore !== null) {
+      return this.settingsStore.getAllDevice(deviceId);
+    }
+    return {};
+  }
+  /** Write (upsert) a single key for a device to device_settings. */
+  setDeviceConfig(deviceId, key, value) {
+    if (this.settingsStore === null) {
+      throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
+    }
+    this.settingsStore.setDevice(deviceId, key, value);
+  }
+  /** Get a value from the parsed bootstrap config */
+  getBootstrap(path5) {
+    return this.getFromBootstrap(path5);
+  }
+  /** Features accessor -- reads from SQL when available, falls back to RUNTIME_DEFAULTS */
+  get features() {
+    const g = (key) => this.get(`features.${key}`) ?? RUNTIME_DEFAULTS[`features.${key}`];
+    return {
+      streaming: g("streaming"),
+      notifications: g("notifications"),
+      objectDetection: g("objectDetection"),
+      remoteAccess: g("remoteAccess"),
+      agentCluster: g("agentCluster"),
+      smartHome: g("smartHome"),
+      recordings: g("recordings"),
+      backup: g("backup"),
+      repl: g("repl")
+    };
+  }
+  /**
+   * Returns a merged view of bootstrap config + runtime defaults for backward compat.
+   */
+  get raw() {
+    const features = {
+      streaming: RUNTIME_DEFAULTS["features.streaming"],
+      notifications: RUNTIME_DEFAULTS["features.notifications"],
+      objectDetection: RUNTIME_DEFAULTS["features.objectDetection"],
+      remoteAccess: RUNTIME_DEFAULTS["features.remoteAccess"],
+      agentCluster: RUNTIME_DEFAULTS["features.agentCluster"],
+      smartHome: RUNTIME_DEFAULTS["features.smartHome"],
+      recordings: RUNTIME_DEFAULTS["features.recordings"],
+      backup: RUNTIME_DEFAULTS["features.backup"],
+      repl: RUNTIME_DEFAULTS["features.repl"]
+    };
+    return {
+      ...this.bootstrapConfig,
+      features,
+      storage: RUNTIME_DEFAULTS["storage.locations"] !== void 0 ? {
+        provider: RUNTIME_DEFAULTS["storage.provider"],
+        locations: RUNTIME_DEFAULTS["storage.locations"]
+      } : { provider: "sqlite-storage", locations: {} },
+      logging: {
+        level: RUNTIME_DEFAULTS["logging.level"],
+        retentionDays: RUNTIME_DEFAULTS["logging.retentionDays"]
+      },
+      eventBus: {
+        ringBufferSize: RUNTIME_DEFAULTS["eventBus.ringBufferSize"]
+      },
+      retention: {
+        detectionEventsDays: RUNTIME_DEFAULTS["retention.detectionEventsDays"],
+        audioLevelsDays: RUNTIME_DEFAULTS["retention.audioLevelsDays"]
+      },
+      providers: RUNTIME_DEFAULTS["providers"]
+    };
+  }
+  /** Sections that live in config.yaml. Everything else goes to SQL. */
+  static BOOTSTRAP_SECTIONS = /* @__PURE__ */ new Set(["server", "auth", "mode"]);
+  /**
+   * Atomically update one top-level section of config.yaml and sync in-memory.
+   * Only bootstrap sections (server, auth, mode) are written to YAML.
+   * Runtime settings must use setSection() which writes to SQL.
+   */
+  update(section, data) {
+    if (!_ConfigManager.BOOTSTRAP_SECTIONS.has(section)) {
+      throw new Error(
+        `[ConfigManager] Section "${section}" is a runtime setting \u2014 use setSection() to write to DB, not update() which writes to config.yaml`
+      );
+    }
+    let raw = {};
+    if (fs5.existsSync(this.configPath)) {
+      raw = yaml.load(fs5.readFileSync(this.configPath, "utf-8")) ?? {};
+    }
+    const existing = raw[section] ?? {};
+    raw[section] = { ...existing, ...data };
+    const validation = bootstrapSchema.safeParse(raw);
+    if (!validation.success) {
+      throw new Error(`[ConfigManager] Invalid config update for section "${section}": ${validation.error.message}`);
+    }
+    const tmpPath = `${this.configPath}.tmp`;
+    fs5.writeFileSync(tmpPath, yaml.dump(raw, { lineWidth: 120, indent: 2, quotingType: '"' }), "utf-8");
+    fs5.renameSync(tmpPath, this.configPath);
+    this.bootstrapConfig = validation.data;
+  }
+  /**
+   * Deep-set a value in a nested plain object using a dot-notation path.
+   * Returns a new object (immutable).
+   */
+  setNested(obj, path5, value) {
+    const [head, ...rest] = path5.split(".");
+    if (!head) return obj;
+    if (rest.length === 0) {
+      return { ...obj, [head]: value };
+    }
+    const child = obj[head] ?? {};
+    return { ...obj, [head]: this.setNested(child, rest.join("."), value) };
+  }
+  /**
+   * Apply env var overrides onto the raw YAML object.
+   * Only bootstrap-level env vars are applied.
+   */
+  applyEnvOverrides(raw) {
+    let result = { ...raw };
+    for (const [envKey, configPath] of Object.entries(ENV_VAR_MAP)) {
+      const envValue = process.env[envKey];
+      if (envValue === void 0 || envValue === "") continue;
+      const coerced = configPath === "server.port" ? Number(envValue) : envValue;
+      result = this.setNested(result, configPath, coerced);
+      console.log(`[ConfigManager] Env override applied: ${envKey} \u2192 ${configPath}`);
+    }
+    return result;
+  }
+  loadYaml() {
+    if (!fs5.existsSync(this.configPath)) {
+      console.warn(
+        `[ConfigManager] Config file not found at: ${this.configPath}
+  \u2192 Using built-in defaults. Set CONFIG_PATH env var or create the file.
+  \u2192 Example path from project root: ./server/backend/data/config.yaml`
+      );
+      return {};
+    }
+    const content = fs5.readFileSync(this.configPath, "utf-8");
+    const parsed = yaml.load(content) ?? {};
+    console.log(`[ConfigManager] Loaded config from: ${this.configPath}`);
+    return parsed;
+  }
+  warnDefaultCredentials() {
+    if (this.bootstrapConfig.auth.adminPassword === "changeme") {
+      console.warn(
+        `[ConfigManager] Warning: Using default admin password "changeme". Set auth.adminPassword in your config.yaml or the ADMIN_PASSWORD env var.`
+      );
+    }
+  }
+  getFromBootstrap(path5) {
+    const keys = path5.split(".");
+    let current = this.bootstrapConfig;
+    for (const key of keys) {
+      if (current === null || current === void 0 || typeof current !== "object") {
+        return void 0;
+      }
+      current = current[key];
+    }
+    return current;
+  }
+  getFromRuntimeDefaults(path5) {
+    const prefix = path5 + ".";
+    const result = {};
+    let found = false;
+    for (const [key, value] of Object.entries(RUNTIME_DEFAULTS)) {
+      if (key.startsWith(prefix)) {
+        const subKey = key.slice(prefix.length);
+        result[subKey] = value;
+        found = true;
+      }
+    }
+    return found ? result : void 0;
+  }
+  /**
+   * Perform a prefix-based nested lookup against SQL system_settings.
+   * e.g. path='features' matches keys 'features.streaming', 'features.notifications', etc.
+   * Returns an object keyed by the sub-key, or undefined if nothing is found.
+   */
+  getNestedFromSystemSettings(path5) {
+    if (this.settingsStore === null) return void 0;
+    const all = this.settingsStore.getAllSystem();
+    const prefix = path5 + ".";
+    const result = {};
+    let found = false;
+    for (const [key, value] of Object.entries(all)) {
+      if (key.startsWith(prefix)) {
+        result[key.slice(prefix.length)] = value;
+        found = true;
+      }
+    }
+    return found ? result : void 0;
+  }
+};
+
+// src/worker/addon-worker-host.ts
+var import_node_child_process3 = require("child_process");
+var INFRA_ADDON_IDS = /* @__PURE__ */ new Set([
+  "filesystem-storage",
+  "sqlite-settings",
+  "winston-logging"
+]);
+var AddonWorkerHost = class {
+  workers = /* @__PURE__ */ new Map();
+  options;
+  heartbeatTimer = null;
+  /** Set of addons that failed to fork and fell back to in-process */
+  fallbackInProcess = /* @__PURE__ */ new Set();
+  constructor(options) {
+    this.options = {
+      workerEntryPath: options.workerEntryPath,
+      devMode: options.devMode ?? false,
+      forceInProcess: options.forceInProcess ?? process.env.CAMSTACK_FORCE_INPROCESS === "true",
+      heartbeatIntervalMs: options.heartbeatIntervalMs ?? 5e3,
+      heartbeatTimeoutMs: options.heartbeatTimeoutMs ?? 3e4,
+      maxCrashesInWindow: options.maxCrashesInWindow ?? 3,
+      crashWindowMs: options.crashWindowMs ?? 6e4,
+      shutdownTimeoutMs: options.shutdownTimeoutMs ?? 1e4,
+      onWorkerLog: options.onWorkerLog
+    };
+  }
+  /** Check if an addon is infrastructure (must stay in-process) */
+  isInfraAddon(addonId) {
+    return INFRA_ADDON_IDS.has(addonId);
+  }
+  /** Check if an addon fell back to in-process after fork failure */
+  isFallbackInProcess(addonId) {
+    return this.fallbackInProcess.has(addonId);
+  }
+  /** Mark an addon as fallen back to in-process */
+  markFallbackInProcess(addonId) {
+    this.fallbackInProcess.add(addonId);
+  }
+  /**
+   * Determine if an addon should be forked.
+   * Default: fork everything except infra addons.
+   * Addons can opt out with `inProcess: true` in declaration.
+   * Emergency fallback: CAMSTACK_FORCE_INPROCESS=true disables all forking.
+   */
+  shouldFork(addonId, declaration) {
+    if (this.options.forceInProcess) return false;
+    if (this.options.devMode) return false;
+    if (this.isInfraAddon(addonId)) return false;
+    if (this.fallbackInProcess.has(addonId)) return false;
+    if (declaration?.inProcess === true) return false;
+    if (declaration?.forkable !== true) return false;
+    return true;
+  }
+  /** Fork a worker for an addon */
+  async forkWorker(addonId, addonDir, config, storagePaths, dataDir, locationPaths, workerToken) {
+    if (this.workers.has(addonId)) {
+      throw new Error(`Worker for addon "${addonId}" already exists`);
+    }
+    const workerEnv = {
+      PATH: process.env.PATH ?? "",
+      HOME: process.env.HOME ?? "",
+      NODE_ENV: process.env.NODE_ENV ?? "production",
+      NODE_TLS_REJECT_UNAUTHORIZED: "0",
+      // Accept self-signed cert
+      CAMSTACK_WORKER_HUB_URL: `wss://localhost:${process.env.CAMSTACK_PORT ?? "4443"}/trpc`,
+      CAMSTACK_WORKER_TOKEN: workerToken ?? "",
+      CAMSTACK_ADDON_ID: addonId,
+      CAMSTACK_ADDON_DIR: addonDir,
+      CAMSTACK_ADDON_CONFIG: JSON.stringify(config),
+      CAMSTACK_DATA_DIR: dataDir ?? `camstack-data/addons-data/${addonId}`,
+      CAMSTACK_LOCATION_PATHS: JSON.stringify(locationPaths ?? storagePaths)
+    };
+    const forkOptions = {
+      stdio: ["inherit", "inherit", "inherit", "ipc"],
+      execArgv: [],
+      env: workerEnv
+    };
+    const child = (0, import_node_child_process3.fork)(this.options.workerEntryPath, [], forkOptions);
+    const worker = {
+      addonId,
+      process: child,
+      state: "starting",
+      startedAt: Date.now(),
+      lastHeartbeat: Date.now(),
+      restartCount: 0,
+      crashTimestamps: [],
+      cpuPercent: 0,
+      memoryRss: 0,
+      workerToken
+    };
+    this.workers.set(addonId, worker);
+    child.on("message", (msg) => {
+      if (msg.type === "LOG" && this.options.onWorkerLog) {
+        this.options.onWorkerLog({
+          addonId,
+          level: msg.level,
+          message: msg.message,
+          scope: ["hub", addonId],
+          meta: msg.context
+        });
+      } else if (msg.type === "STATS") {
+        worker.cpuPercent = msg.cpu;
+        worker.memoryRss = msg.memory;
+      }
+    });
+    child.stdout?.on("data", (chunk) => {
+      const lines = chunk.toString().trim();
+      if (!lines) return;
+      if (this.options.onWorkerLog) {
+        this.options.onWorkerLog({
+          addonId,
+          level: "info",
+          message: lines,
+          scope: ["hub", addonId, "__stdout"]
+        });
+      } else {
+        console.log(`[Worker:${addonId}] ${lines}`);
+      }
+    });
+    child.stderr?.on("data", (chunk) => {
+      const lines = chunk.toString().trim();
+      if (!lines) return;
+      if (this.options.onWorkerLog) {
+        this.options.onWorkerLog({
+          addonId,
+          level: "error",
+          message: lines,
+          scope: ["hub", addonId, "__stderr"]
+        });
+      } else {
+        console.error(`[Worker:${addonId}:ERR] ${lines}`);
+      }
+    });
+    child.on("exit", (code) => {
+      this.handleWorkerExit(addonId, code, addonDir, config, storagePaths, dataDir, locationPaths, workerToken);
+    });
+    child.on("error", (err) => {
+      console.error(`[WorkerHost] Worker ${addonId} error:`, err.message);
+    });
+    await new Promise((resolve3, reject) => {
+      const timeout = setTimeout(() => {
+        reject(new Error(`Worker ${addonId} did not become ready within 30s`));
+      }, 3e4);
+      const readyCheck = (msg) => {
+        if (msg.type === "READY") {
+          clearTimeout(timeout);
+          child.off("message", readyCheck);
+          worker.state = "running";
+          resolve3();
+        }
+      };
+      child.on("message", readyCheck);
+    });
+  }
+  /** List all workers with stats */
+  listWorkers() {
+    return [...this.workers.values()].map((w) => ({
+      addonId: w.addonId,
+      pid: w.process.pid ?? 0,
+      state: w.state,
+      cpuPercent: w.cpuPercent,
+      memoryRss: w.memoryRss,
+      uptimeSeconds: Math.round((Date.now() - w.startedAt) / 1e3),
+      restartCount: w.restartCount,
+      subProcesses: []
+    }));
+  }
+  /** Gracefully shutdown a single worker by addon ID */
+  async shutdownWorkerById(addonId) {
+    const worker = this.workers.get(addonId);
+    if (!worker) {
+      throw new Error(`No worker found for addon "${addonId}"`);
+    }
+    await this.shutdownWorker(addonId, worker);
+    this.workers.delete(addonId);
+  }
+  /** Gracefully shutdown all workers */
+  async shutdownAll() {
+    if (this.heartbeatTimer) {
+      clearInterval(this.heartbeatTimer);
+      this.heartbeatTimer = null;
+    }
+    const shutdowns = [...this.workers.entries()].map(
+      ([addonId, worker]) => this.shutdownWorker(addonId, worker)
+    );
+    await Promise.allSettled(shutdowns);
+    this.workers.clear();
+  }
+  /** Start heartbeat monitoring — workers now report heartbeat via tRPC, not IPC PING */
+  startHeartbeatMonitoring() {
+    this.heartbeatTimer = setInterval(() => {
+      const now = Date.now();
+      for (const [addonId, worker] of this.workers) {
+        if (worker.state !== "running") continue;
+        if (now - worker.lastHeartbeat > this.options.heartbeatTimeoutMs) {
+          console.warn(`[WorkerHost] Worker ${addonId} heartbeat timeout \u2014 marking unresponsive`);
+          worker.state = "crashed";
+          worker.process.kill("SIGKILL");
+        }
+      }
+    }, this.options.heartbeatIntervalMs);
+  }
+  /** Update heartbeat timestamp for a worker (called when agent.heartbeat arrives) */
+  updateWorkerHeartbeat(addonId, cpuPercent, memoryRss) {
+    const worker = this.workers.get(addonId);
+    if (!worker) return;
+    worker.lastHeartbeat = Date.now();
+    if (cpuPercent !== void 0) worker.cpuPercent = cpuPercent;
+    if (memoryRss !== void 0) worker.memoryRss = memoryRss;
+  }
+  handleWorkerExit(addonId, code, addonDir, config, storagePaths, dataDir, locationPaths, workerToken) {
+    const worker = this.workers.get(addonId);
+    if (!worker) return;
+    if (worker.state === "stopping") {
+      worker.state = "stopped";
+      return;
+    }
+    worker.state = "crashed";
+    console.error(`[WorkerHost] Worker ${addonId} exited with code ${code}`);
+    const now = Date.now();
+    worker.crashTimestamps.push(now);
+    const recentCrashes = worker.crashTimestamps.filter(
+      (t) => now - t < this.options.crashWindowMs
+    );
+    worker.crashTimestamps = recentCrashes;
+    if (recentCrashes.length >= this.options.maxCrashesInWindow) {
+      console.error(`[WorkerHost] Worker ${addonId} crashed ${recentCrashes.length} times in ${this.options.crashWindowMs}ms \u2014 not restarting`);
+      return;
+    }
+    const backoff = Math.min(2e3 * (worker.restartCount + 1), 3e4);
+    console.log(`[WorkerHost] Restarting worker ${addonId} in ${backoff}ms`);
+    setTimeout(() => {
+      worker.restartCount++;
+      this.workers.delete(addonId);
+      this.forkWorker(addonId, addonDir, config, storagePaths, dataDir, locationPaths, workerToken).catch((err) => {
+        console.error(`[WorkerHost] Failed to restart worker ${addonId}:`, err);
+      });
+    }, backoff);
+  }
+  async shutdownWorker(addonId, worker) {
+    worker.state = "stopping";
+    worker.process.kill("SIGTERM");
+    await new Promise((resolve3) => {
+      const timeout = setTimeout(() => {
+        console.warn(`[WorkerHost] Worker ${addonId} did not exit within ${this.options.shutdownTimeoutMs}ms \u2014 SIGKILL`);
+        worker.process.kill("SIGKILL");
+        resolve3();
+      }, this.options.shutdownTimeoutMs);
+      worker.process.on("exit", () => {
+        clearTimeout(timeout);
+        resolve3();
+      });
+    });
+  }
+};
+
+// src/worker/worker-process-manager.ts
+var import_node_child_process4 = require("child_process");
+var WorkerProcessManager = class {
+  constructor(sendToMain) {
+    this.sendToMain = sendToMain;
+  }
+  processes = /* @__PURE__ */ new Map();
+  async spawn(config) {
+    const child = (0, import_node_child_process4.spawn)(config.command, [...config.args ?? []], {
+      cwd: config.cwd,
+      env: config.env ? { ...process.env, ...config.env } : void 0,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    const managed = new ManagedProcess(child, config, this.sendToMain);
+    this.processes.set(child.pid, managed);
+    this.sendToMain({
+      type: "SUB_PROCESS_SPAWNED",
+      pid: child.pid,
+      name: config.name,
+      command: config.command
+    });
+    child.on("exit", (code) => {
+      this.sendToMain({
+        type: "SUB_PROCESS_EXITED",
+        pid: child.pid,
+        code
+      });
+      if (config.autoRestart && managed.restartCount < (config.maxRestarts ?? 3)) {
+        managed.restartCount++;
+        setTimeout(() => {
+          this.spawn(config).catch(() => {
+          });
+        }, 2e3);
+      }
+    });
+    return managed;
+  }
+  listProcesses() {
+    return [...this.processes.values()].map((p) => p.toInfo());
+  }
+  getWorkerStats() {
+    const mem = process.memoryUsage();
+    const cpu = process.cpuUsage();
+    return {
+      pid: process.pid,
+      cpuPercent: (cpu.user + cpu.system) / 1e6,
+      memoryRss: mem.rss,
+      heapUsed: mem.heapUsed,
+      uptimeSeconds: Math.round(process.uptime()),
+      restartCount: 0,
+      state: "running"
+    };
+  }
+  async killAll() {
+    for (const [, proc] of this.processes) {
+      proc.kill("SIGTERM");
+    }
+    this.processes.clear();
+  }
+};
+var ManagedProcess = class {
+  constructor(child, config, sendToMain) {
+    this.child = child;
+    this.config = config;
+    this.sendToMain = sendToMain;
+    this.pid = child.pid;
+    this.name = config.name;
+    child.on("exit", (code) => {
+      for (const handler of this.exitHandlers) handler(code);
+    });
+    child.on("error", (err) => {
+      for (const handler of this.errorHandlers) handler(err);
+    });
+  }
+  pid;
+  name;
+  restartCount = 0;
+  startedAt = Date.now();
+  exitHandlers = [];
+  errorHandlers = [];
+  getStats() {
+    return {
+      pid: this.pid,
+      cpuPercent: 0,
+      memoryRss: 0,
+      uptimeSeconds: Math.round((Date.now() - this.startedAt) / 1e3),
+      restartCount: this.restartCount,
+      state: this.child.exitCode !== null ? "stopped" : "running"
+    };
+  }
+  write(data) {
+    this.child.stdin?.write(data);
+  }
+  get stdout() {
+    return this.child.stdout;
+  }
+  get stderr() {
+    return this.child.stderr;
+  }
+  kill(signal = "SIGTERM") {
+    this.child.kill(signal);
+  }
+  wait() {
+    if (this.child.exitCode !== null) {
+      return Promise.resolve({ code: this.child.exitCode, signal: null });
+    }
+    return new Promise((resolve3) => {
+      this.child.on("exit", (code, signal) => {
+        resolve3({ code, signal });
+      });
+    });
+  }
+  onExit(handler) {
+    this.exitHandlers.push(handler);
+  }
+  onError(handler) {
+    this.errorHandlers.push(handler);
+  }
+  toInfo() {
+    return {
+      pid: this.pid,
+      name: this.name,
+      command: this.config.command,
+      state: this.child.exitCode !== null ? "stopped" : "running",
+      cpuPercent: 0,
+      memoryRss: 0,
+      uptimeSeconds: Math.round((Date.now() - this.startedAt) / 1e3)
+    };
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AddonEngineManager,
+  AddonInstaller,
+  AddonLoader,
+  AddonWorkerHost,
+  CapabilityRegistry,
+  ConfigManager,
+  DEFAULT_DATA_PATH,
+  INFRA_CAPABILITIES,
+  RUNTIME_DEFAULTS,
+  WorkerProcessManager,
+  bootstrapSchema,
+  copyDirRecursive,
+  copyExtraFileDirs,
+  detectWorkspacePackagesDir,
+  ensureDir,
+  ensureLibraryBuilt,
+  installPackageFromNpmSync,
+  isInfraCapability,
+  isSourceNewer,
+  stripCamstackDeps,
+  symlinkAddonsToNodeModules
+});
+//# sourceMappingURL=index.js.map