@camstack/server 1.2.566 → 1.2.567

package/dist/agent/agent-node-certificates.js

@@ -10,7 +10,8 @@ exports.createAgentNodeCertificates = createAgentNodeCertificates;
  * leaves it) and keeps it in memory only. When the signed leaf arrives it is persisted
  * into `agent.json` (0600) BESIDE the old one (`meshTlsPrevious`) together with the
  * swap's state (`meshSwap`: which leaf, until when), then the agent reconnects through
- * the same `reconnect()` the UI uses, which rebuilds the broker from the file.
+ * the same `reconnect()` the UI uses, which replaces the broker transport from the file
+ * (the broker, its services and its child runners stay).
  *
  * A swap is PENDING from install until the hub confirms. Only while it is pending may
  * the node go back, and only to a previous leaf that is still unexpired:

package/dist/agent/main.js

@@ -213,7 +213,7 @@ async function startAgent(configPath) {
     // The HTTP/HTTPS listener on the agent port (D856); set once it is up.
     let agentHttpListener = null;
     console.log(`[Agent] Mesh transport: ${currentMeshTls !== null ? 'tls' : 'clear'}`);
-    let broker = (0, system_1.createBroker)({
+    const broker = (0, system_1.createBroker)({
         nodeID: config.nodeId,
         mode: 'agent',
         hubAddress: config.hubAddress,
@@ -223,32 +223,40 @@ async function startAgent(configPath) {
     });
     meshJoin.attach(broker);
     /**
-     * Reconnect: stop the current broker, reload config from file,
-     * create a new broker with the updated hub/secret, and restart.
-     * The HTTP server stays alive throughout.
+     * Reconnect: reload the config from file and replace the broker's TRANSPORT (the new hub
+     * address, secret or mesh leaf) IN PLACE. The broker itself is never rebuilt: its services
+     * (`$agent`, `$process`, `$agent-cap-fwd`, the event bus, the addon services), its registries and
+     * the forked child runners all outlive the wire. Rebuilding the broker stopped `$process`, which
+     * SIGTERMed every runner, and left the node capless with no `$agent-cap-fwd` (D856 amendment,
+     * 2026-10-15 incident). The HTTP server stays alive throughout.
      */
     // ONE reconnect at a time (serial-queue.ts): the UI, a mesh leaf swap and its rollback can
-    // all ask for one, and two interleaved stop/rebuild cycles would leave two brokers or none.
+    // all ask for one, and two interleaved disconnect/connect cycles would leave two wires or none.
     const reconnect = (0, serial_queue_js_1.createSerialQueue)(() => reconnectNow(), {
         deadlineMs: RECONNECT_DEADLINE_MS,
         onTimeout: () => {
-            // A broker whose start() never settles must not hold every later reconnect (including
-            // the rollback of a failed leaf swap): tear down what was half-built and move on.
-            consoleLogger.error('Reconnect did not finish in time - destroying the half-built broker', {
+            // A transport whose connect never settles must not hold every later reconnect (including
+            // the rollback of a failed leaf swap): drop the wire and move on. The broker, and the
+            // runners behind it, stay.
+            consoleLogger.error('Reconnect did not finish in time - dropping the half-connected transport', {
                 meta: { deadlineMs: RECONNECT_DEADLINE_MS },
             });
-            void broker.stop().catch(() => undefined);
+            void (0, system_1.disconnectBrokerTransport)(broker).catch(() => undefined);
         },
     });
     // The cycle itself runs through a generation guard: a run the queue abandoned at its deadline
-    // that resumes later builds nothing (agent-reconnect.ts), so two brokers never share a node id.
+    // that resumes later installs nothing (agent-reconnect.ts), so two transports never share a broker.
     let pendingConfig = null;
     const reconnectNow = (0, agent_reconnect_js_1.createReconnectRunner)({
-        current: () => broker,
-        assign: (next) => {
-            broker = next;
+        current: () => (0, system_1.currentBrokerTransporter)(broker),
+        assign: (next) => (0, system_1.installBrokerTransporter)(broker, next),
+        stop: async (target) => {
+            // Only the transport installed right now: a late, abandoned run must not tear down a
+            // newer run's transport.
+            if ((0, system_1.isInstalledTransporter)(broker, target)) {
+                await (0, system_1.disconnectBrokerTransport)(broker);
+            }
         },
-        stop: (target) => target.stop(),
         prepare: () => {
             console.log('[Agent] Reconnecting with updated config...');
             // Reload config from file (UI may have written new hubAddress/secret)
@@ -274,24 +282,21 @@ async function startAgent(configPath) {
             const fresh = pendingConfig;
             if (fresh === null)
                 throw new Error('reconnect: no configuration was prepared');
-            const next = (0, system_1.createBroker)({
+            return (0, system_1.buildTransporter)((0, system_1.createAgentTransport)({
                 nodeID: config.nodeId,
                 mode: 'agent',
                 hubAddress: fresh.hubAddress,
                 logLevel: fresh.logLevel,
-                middlewares: meshJoin.middlewares,
                 ...(currentMeshTls !== null ? { meshTls: currentMeshTls } : {}),
-            });
-            meshJoin.attach(next);
-            return next;
+            }));
         },
-        // The new broker's hub connection runs a join, and its settle re-sends
-        // the manifest (`registration.onJoinSettled`).
-        start: async (next) => {
-            await next.start();
+        // The new wire's hub connection runs a join, and its settle re-sends the manifest
+        // (`registration.onJoinSettled`): the subtree union, every child included (D3).
+        start: async () => {
+            await (0, system_1.connectBrokerTransport)(broker);
             console.log('[Agent] Reconnected successfully');
         },
-        onSuperseded: (stage) => consoleLogger.warn('A superseded reconnect stopped without building a second broker', {
+        onSuperseded: (stage) => consoleLogger.warn('A superseded reconnect stopped without installing a second transport', {
             meta: { stage },
         }),
     });

package/dist/api/core/certificates.router.js

@@ -461,6 +461,7 @@ function createCertificatesRouter(deps) {
                 crl: crl(),
                 peers,
                 registrations,
+                ...(deps.nodeAddonIds !== undefined ? { expectedAddons: deps.nodeAddonIds } : {}),
                 log: deps.log,
                 ...(deps.reconnectTimeoutMs !== undefined
                     ? { reconnectTimeoutMs: deps.reconnectTimeoutMs }

package/dist/api/trpc/trpc.router.js

@@ -310,6 +310,7 @@ function buildCapabilityRouters(services) {
             registry: services.capabilityRegistry,
             agentRegistry: services.agentRegistry,
             nodeClient: (nodeId) => (0, node_certificates_client_js_1.createNodeCertificatesClient)(services.moleculer, nodeId),
+            nodeAddonIds: (nodeId) => services.moleculer.getNodeAddonIds(nodeId),
             hubDataDir: path.resolve(services.configService.get('server.dataPath') ?? 'camstack-data'),
             log: services.loggingService.createLogger('certificates'),
         }),

package/dist/core/moleculer/moleculer.service.js

@@ -929,9 +929,12 @@ class MoleculerService {
         else
             this.nodeOwners.set(params.nodeId, owner);
         this.applyNodeManifest(params, previousManifest, owner, previousOwner);
+        // The leaf this node presents NOW is recorded, and a renewal leaf it no longer presents (it
+        // reverted to its previous one) is set aside at once.
+        this.observePresentedMeshLeaf(params.nodeId);
         // The node's capabilities are routable now: whoever waits for this registration (a mesh
         // leaf renewal confirming the node came back WITH the new leaf) is told, with no polling.
-        (0, system_1.emitProcessNodeRegistered)(params.nodeId);
+        (0, system_1.emitProcessNodeRegistered)(params.nodeId, params.addons.map((addon) => addon.addonId));
         // Notify AgentRegistryService to reconcile placement for bare-ID
         // agent nodes (no '/' = not a hub child worker, not the hub itself).
         // The handshake is the authoritative completeness signal — the full
@@ -1299,6 +1302,34 @@ class MoleculerService {
     isNodeRegistered(nodeId) {
         return this.nodeRegistry.getNodeManifest(nodeId) !== undefined;
     }
+    /**
+     * Record the mesh leaf `nodeId` presents on its live connection (D856). Fire and forget: a
+     * registry that is not up, or a write that fails, must not fail the node's registration.
+     */
+    observePresentedMeshLeaf(nodeId) {
+        const registry = (0, system_1.getProcessMeshCertificateRegistry)();
+        const leaf = (0, system_1.getProcessPeerLeaf)(nodeId);
+        if (registry === null || leaf === undefined)
+            return;
+        registry
+            .recordObserved(nodeId, {
+            cn: nodeId,
+            serial: leaf.serial,
+            fingerprint: leaf.fingerprint,
+            notBefore: leaf.notBefore,
+            notAfter: leaf.notAfter,
+        })
+            .catch((error) => {
+            this.logger.warn('Could not record the mesh leaf the node presents', {
+                tags: { nodeId },
+                meta: { error: error instanceof Error ? error.message : String(error) },
+            });
+        });
+    }
+    /** The addon ids a node's registration holds (its own and its children's); empty when none. */
+    getNodeAddonIds(nodeId) {
+        return (this.nodeRegistry.getNodeManifest(nodeId) ?? []).map((entry) => entry.addonId);
+    }
     /**
      * The root-package identity a node reported in its `registerNode`
      * manifest (runtime-updatable node packages: version visibility), or null

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.566",
+  "version": "1.2.567",
   "license": "MIT",
   "private": false,
   "files": [
@@ -38,7 +38,7 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.420",
+    "@camstack/addon-admin-ui": "1.2.421",
     "@camstack/addon-agent-ui": "1.2.231",
     "@camstack/addon-auth": "1.2.144",
     "@camstack/addon-decoder-nodeav": "1.2.123",
@@ -48,8 +48,8 @@
     "@camstack/addon-post-analysis": "1.2.369",
     "@camstack/develop": "0.1.8",
     "@camstack/sdk": "1.2.131",
-    "@camstack/system": "1.2.430",
-    "@camstack/types": "1.2.366",
+    "@camstack/system": "1.2.431",
+    "@camstack/types": "1.2.367",
     "@camstack/ui-library": "1.2.288",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
@@ -60,7 +60,7 @@
     "@trpc/server": "^11.16.0",
     "fastify": "^5",
     "js-yaml": "^4",
-    "moleculer": "^0.15.0",
+    "moleculer": "0.15.0",
     "node-av": "^6.0.0",
     "node-pty": "^1.0.0",
     "sharp": "^0.35.2",