@camstack/server 1.2.610 → 1.2.612

package/THIRD_PARTY_MODELS.md

@@ -32,6 +32,7 @@ under [Non-commercial models](#non-commercial-models).
 
 - © Ultralytics, AGPL-3.0. Corresponding source: the upstream Ultralytics checkpoint and build-camstack-models.py (with convert_lib.py) published at https://huggingface.co/camstack/camstack-models/tree/main/source. https://github.com/ultralytics/ultralytics
 - Coral Edge TPU models and AIY Vision Birds V1 © Google LLC, Apache-2.0. https://github.com/google-coral/test_data
+- YOLOv9-s EdgeTPU weights © 2025 Dan Brown (fine-tuned to 17 COCO classes, INT8, compiled for the Edge TPU; https://github.com/dbro/frigate-detector-edgetpu-yolo9, repository MIT). Derived from the YOLOv9 code and yolov9-s checkpoint of Chien-Yao Wang, I-Hau Yeh, Hong-Yuan Mark Liao, GPL-3.0 (https://github.com/WongKinYiu/yolov9). Corresponding source: the fine-tuning checkpoint (yolov9-s-relu6-best.pt), the fine-tuning and conversion notebooks and the publisher LICENSE, mirrored at https://huggingface.co/camstack/camstack-models/tree/main/source/yolov9-edgetpu-dbro. https://github.com/dbro/frigate-detector-edgetpu-yolo9
 - © Ultralytics, AGPL-3.0 (Ultralytics YOLOv9 weights). YOLOv9 architecture: Chien-Yao Wang, I-Hau Yeh, Hong-Yuan Mark Liao, GPL-3.0 (https://github.com/WongKinYiu/yolov9). Corresponding source: the upstream Ultralytics checkpoint and build-camstack-models.py (with convert_lib.py) published at https://huggingface.co/camstack/camstack-models/tree/main/source. https://github.com/ultralytics/ultralytics
 - RF-DETR © Roboflow, Apache-2.0. https://github.com/roboflow/rf-detr
 - YuNet weights Copyright (c) 2020 Shiqi Yu, MIT. Training code: ShiqiYu/libfacedetection.train, BSD-3-Clause. https://github.com/opencv/opencv_zoo/tree/main/models/face_detection_yunet
@@ -48,7 +49,7 @@ under [Non-commercial models](#non-commercial-models).
 
 Training data under attribution terms:
 
-- **COCO 2017** (training data of `yolo26n-seg` and 50 more): annotations CC-BY-4.0; images under their Flickr owners' terms. https://cocodataset.org/#termsofuse
+- **COCO 2017** (training data of `yolo26n-seg` and 52 more): annotations CC-BY-4.0; images under their Flickr owners' terms. https://cocodataset.org/#termsofuse
 - **WIDER FACE** (training data of `yunet-2023mar`): research-oriented terms; images CC BY-NC-ND. http://shuoyang1213.me/WIDERFACE/
 - **Open Images V7** (training data of `animal-classifier`): annotations CC-BY-4.0 (Google LLC); images listed as CC-BY-2.0, no warranty. https://storage.googleapis.com/openimages/web/factsfigures_v7.html
 - **DrBimmer/vehicle-classification** (training data of `vehicle-type-v1`): CC-BY-NC-4.0 — treated as binding the trained weights (conservative reading). https://huggingface.co/datasets/DrBimmer/vehicle-classification
@@ -123,6 +124,7 @@ entry kept resolvable for a saved selection but no longer offered.
 | `yolo26n-seg`, `yolo26s-seg`, `yolo26m-seg` | [Ultralytics](https://github.com/ultralytics/ultralytics) | AGPL-3.0 / AGPL-3.0 (`AGPL-3.0.txt`) | COCO 2017: annotations CC-BY-4.0; images under their Flickr owners' terms | exported to ONNX, OpenVINO IR and CoreML | mirror `segmentation/yolo26-seg` |
 | `yolo26n` (default), `yolo26s`, `yolo26m`, `yolo26l`, `yolo26x` (hidden), `yolo26n-fp16` (hidden), `yolo26n-int8`, `yolo26s-fp16` (hidden), `yolo26s-int8`, `yolo26m-fp16` (hidden), `yolo26m-int8`, `yolo26l-fp16` (hidden), `yolo26l-int8`, `yolo26n-320`, `yolo26n-320-int8`, `yolo26n-256`, `yolo26n-256-int8`, `yolo26s-320`, `yolo26s-320-int8`, `yolo26s-256`, `yolo26s-256-int8`, `yolo26m-320`, `yolo26m-320-int8`, `yolo26m-256`, `yolo26m-256-int8`, `yolo26l-320`, `yolo26l-320-int8`, `yolo26l-256`, `yolo26l-256-int8`, `yolo26x-fp16` (hidden), `yolo26x-int8` (hidden) | [Ultralytics](https://github.com/ultralytics/ultralytics) | AGPL-3.0 / AGPL-3.0 (`AGPL-3.0.txt`) | COCO 2017: annotations CC-BY-4.0; images under their Flickr owners' terms | exported to ONNX, OpenVINO IR and CoreML (scripts/build-camstack-models.py); OpenVINO FP16 export; exported to OpenVINO IR, then OpenVINO NNCF INT8 post-training quantisation; re-exported at 320×320 to ONNX, OpenVINO IR and CoreML; re-exported at 320×320 to OpenVINO IR; OpenVINO NNCF INT8 post-training quantisation; re-exported at 256×256 to ONNX, OpenVINO IR and CoreML; re-exported at 256×256 to OpenVINO IR; OpenVINO NNCF INT8 post-training quantisation | mirror `objectDetection/yolo26` |
 | `ssd-mobilenet-v2-coco-edgetpu` (default) | [Google Coral test_data](https://github.com/google-coral/test_data) | Apache-2.0 / Apache-2.0 (`Apache-2.0.txt`) | COCO 2017: annotations CC-BY-4.0; images under their Flickr owners' terms | none | https://github.com/google-coral/test_data |
+| `yolov9s-320-edgetpu`, `yolov9s-512-edgetpu` | [YOLOv9-s EdgeTPU (Dan Brown)](https://github.com/dbro/frigate-detector-edgetpu-yolo9) | GPL-3.0 / GPL-3.0 (`GPL-3.0.txt`) | COCO 2017: annotations CC-BY-4.0; images under their Flickr owners' terms | none: the publisher release files are mirrored byte-identical | mirror `objectDetection/yolov9` |
 | `yolov9t-320`, `yolov9t-320-int8`, `yolov9t-640`, `yolov9t-640-int8`, `yolov9s-320`, `yolov9s-320-int8`, `yolov9s-640`, `yolov9s-640-int8`, `yolov9m-320`, `yolov9m-320-int8`, `yolov9m-640`, `yolov9m-640-int8`, `yolov9c-320`, `yolov9c-320-int8`, `yolov9c-640`, `yolov9c-640-int8` | [Ultralytics](https://github.com/ultralytics/ultralytics) | AGPL-3.0 / AGPL-3.0 (`AGPL-3.0.txt`) | COCO 2017: annotations CC-BY-4.0; images under their Flickr owners' terms | exported at 320×320 to ONNX, OpenVINO IR FP16 and CoreML; exported at 320×320 to OpenVINO IR; OpenVINO NNCF INT8 post-training quantisation; exported at 640×640 to ONNX, OpenVINO IR FP16 and CoreML; exported at 640×640 to OpenVINO IR; OpenVINO NNCF INT8 post-training quantisation | mirror `objectDetection/yolov9` |
 
 ### Package detection

package/dist/api/trpc/generated-cap-routers.js

@@ -11068,15 +11068,6 @@ function createCapRouter_storageAdmin(getProvider, createRemoteProxy) {
             // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
             return p.listTables(methodInput);
         }),
-        dropCollection: trpc_middleware_js_1.adminProcedure
-            .input(types_125.storageAdminCapability.methods.dropCollection.input.loose())
-            .output(types_125.storageAdminCapability.methods.dropCollection.output)
-            .mutation(async ({ input, ctx }) => {
-            const { nodeId, ...methodInput } = input;
-            const p = resolveProvider('storage-admin', nodeId, () => getProvider(ctx), createRemoteProxy);
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unsafe-argument
-            return p.dropCollection(methodInput);
-        }),
         listKinds: trpc_middleware_js_1.adminProcedure
             .input(types_125.storageAdminCapability.methods.listKinds.input.loose())
             .output(types_125.storageAdminCapability.methods.listKinds.output)

package/dist/core/addon/addon-registry.service.js

@@ -248,17 +248,30 @@ function isShareViewKind(value) {
 // new `getAddonSettings / getGlobalSettings / getDeviceSettings`
 // endpoints on the `addon-settings` singleton capability.
 /**
- * Whether the `capability:provider-registered` hook may emit `ready` for a
- * capability. `platform-probe` OWNS its readiness protocol: its provider
- * registers synchronously from `onInitialize` while the REAL probe
- * (hardware + embedded-Python EP scoring) is still running async — the
- * registration-time emit would flip it `ready` prematurely and probe-gated
- * consumers (detection-pipeline engine auto-pick) would read
- * accelerator-blind results. The addon emits `starting`/`ready`/`down`
- * itself (`autoEmitReadiness=false`, ready on probe-done).
+ * Capabilities whose provider OWNS its readiness protocol
+ * (`autoEmitReadiness=false`): it registers before it can answer, and emits
+ * `starting`/`ready`/`down` itself. The registration-time emit would flip
+ * them `ready` early.
+ *
+ * - `platform-probe` registers synchronously from `onInitialize` while the
+ *   REAL probe (hardware + embedded-Python EP scoring) still runs async;
+ *   probe-gated consumers (detection-pipeline engine auto-pick) would read
+ *   accelerator-blind results.
+ * - `device-history` is `ready` when its STORE is open (`onHubReachable`),
+ *   not when it registered; every producer that declares on `ready`
+ *   (metrics-native, pipeline-analytics) declared into a closed store and
+ *   logged a declare failure on each boot.
+ *
+ * Only single-provider caps belong here: the hook is per CAPABILITY, so a cap
+ * other addons also provide (`device-removal-hook`) would lose its ready.
  */
+const SELF_READYING_CAPABILITIES = new Set([
+    'platform-probe',
+    'device-history',
+]);
+/** Whether the `capability:provider-registered` hook may emit `ready` for a capability. */
 function shouldEmitProviderRegisteredReady(capability) {
-    return capability !== 'platform-probe';
+    return !SELF_READYING_CAPABILITIES.has(capability);
 }
 /**
  * Is this capability device-scoped?
@@ -2378,6 +2391,17 @@ class AddonRegistryService {
             // (the running instance) and `entry.initialized` untouched so
             // `restartAddon` still shuts the live instance down cleanly.
             const existing = this.addonEntries.get(registered.declaration.id);
+            // Another PACKAGE claiming a running addon's id (a package since folded
+            // into the framework, still on disk) never relabels it: its declaration's
+            // entry would then be resolved against the owner's dir. Same rule as
+            // `AddonLoader.loadDeclaration` at boot.
+            if (existing && existing.packageName !== registered.packageName) {
+                this.logger.warn('loadNewAddons: skipped a package claiming a running addon id', {
+                    tags: { addonId: registered.declaration.id },
+                    meta: { skippedPackage: registered.packageName, ownerPackage: existing.packageName },
+                });
+                continue;
+            }
             if (existing) {
                 existing.packageVersion = registered.packageVersion;
                 existing.packageName = registered.packageName;
@@ -3376,10 +3400,6 @@ class AddonRegistryService {
     plannedRunnerIds() {
         return [...this.buildAddonGroupPlan([...this.addonEntries.keys()]).keys()];
     }
-    /** The forked addon ids (the ones whose Init the D870 guard gates). */
-    forkedAddonIds() {
-        return [...this.buildAddonGroupPlan([...this.addonEntries.keys()]).values()].flatMap((roster) => roster.map((r) => r.addonId));
-    }
     /**
      * Snapshot of the live runner subprocesses (`$process.list`), reduced to the
      * `{ runnerId, addonIds }` shape the convergence planner needs. Returns `[]`

package/dist/core/agent/cluster-node-history-store.js

@@ -22,27 +22,11 @@ const DescriptorSchema = zod_1.z.object({
         .readonly()
         .optional(),
 });
-/** Shape of a `settings-store.query` record's `data` for this collection. */
+/** A row as the store reads it: `at` as `lastActive`, plus the descriptor. */
 const RowDataSchema = zod_1.z.object({
     lastActive: zod_1.z.number(),
     descriptor: DescriptorSchema,
 });
-/**
- * @durable class=ledger owner=cluster-agent
- *   write="one row per node the hub has ever seen online, GATED BY A READ-BACK.
- *     `snapshot()` runs on every 30 s topology pass but commits only when there is no
- *     existing row, when the descriptor differs field-by-field, or when the stored
- *     `lastActive` has aged past LAST_ACTIVE_HEARTBEAT_MS (5 min) — an unchanged online
- *     node therefore writes 288 times a day instead of 2,880, ~864/day for three rows
- *     (D131). Off that gate: `touch()` on `$node.disconnected` (the offline edge, always
- *     written), `recordPackages` on a node's own declaration (grow-only merge) and
- *     `prunePackages` on an explicit undeploy"
- *   retention="none — nothing ages a row out; the only deletion is the operator's
- *     `forget(nodeId)` behind the inline Forget-node action. Losing the table makes every
- *     node that is not in the live Moleculer window vanish from the topology instead of
- *     rendering OFFLINE, and empties the package roster the addon back-fill converges to."
- */
-const COLLECTION = 'cluster-node-history';
 /**
  * How stale `lastActive` may get on an ONLINE node before an otherwise
  * unchanged snapshot is written anyway. Five minutes turns the 30 s topology
@@ -81,12 +65,9 @@ function samePackages(a, b) {
     return (a.length === b.length && a.every((p, i) => p.name === b[i]?.name && p.version === b[i]?.version));
 }
 class ClusterNodeHistoryStore {
-    resolveSettingsStore;
     logger;
-    declared = false;
     resolveKind;
-    constructor(resolveSettingsStore, logger, resolveKind = () => null) {
-        this.resolveSettingsStore = resolveSettingsStore;
+    constructor(logger, resolveKind = () => null) {
         this.logger = logger;
         this.resolveKind = resolveKind;
     }
@@ -94,38 +75,6 @@ class ClusterNodeHistoryStore {
     bindRecordsKind(resolver) {
         this.resolveKind = resolver;
     }
-    /**
-     * Idempotently declare the typed collection. Returns the resolved provider
-     * or null if the settings-store isn't available yet (early boot / hub
-     * unreachable) — callers treat null as "skip, best-effort".
-     */
-    async ensureDeclared() {
-        if (this.resolveKind() !== null)
-            return this.resolveSettingsStore();
-        const store = this.resolveSettingsStore();
-        if (!store)
-            return null;
-        if (this.declared)
-            return store;
-        try {
-            await store.declareCollection({
-                collection: COLLECTION,
-                columns: [
-                    { name: 'id', type: 'TEXT', primaryKey: true, notNull: true },
-                    { name: 'lastActive', type: 'INTEGER', notNull: true },
-                    { name: 'descriptor', type: 'JSON', notNull: true },
-                ],
-            });
-            this.declared = true;
-            return store;
-        }
-        catch (err) {
-            this.logger.warn('declareCollection failed (best-effort)', {
-                meta: { error: (0, types_1.errMsg)(err) },
-            });
-            return null;
-        }
-    }
     /**
      * Upsert a node's descriptor + addon roster while it is ONLINE, stamping
      * `lastActive = Date.now()`. Called on each `listNodes()` refresh for every
@@ -145,19 +94,19 @@ class ClusterNodeHistoryStore {
      * `$node.disconnected`, and buys 288 writes/day/node instead of 2,880.
      */
     async snapshot(descriptor) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
             return;
         try {
             // Carry the package roster forward. `listNodes()` does not resolve it
             // (only the reconcile does), so writing this descriptor blind would erase
             // the back-fill's intended set on the very next topology poll.
-            const existing = await this.readStored(descriptor.id);
+            const existing = await this.readStored(kind, descriptor.id);
             const packages = descriptor.packages ?? existing?.descriptor.packages;
             const next = packages === undefined ? descriptor : { ...descriptor, packages };
             if (existing !== null && !this.worthWriting(existing, next))
                 return;
-            await this.writeStored(descriptor.id, Date.now(), next);
+            await this.writeStored(kind, descriptor.id, Date.now(), next);
         }
         catch (err) {
             this.logger.warn('snapshot upsert failed (best-effort)', {
@@ -177,47 +126,21 @@ class ClusterNodeHistoryStore {
         return !descriptorsEqual(existing.descriptor, next);
     }
     /** Read one node's row, validated. `null` when absent or malformed. */
-    async readStored(nodeId) {
-        const kind = this.resolveKind();
-        if (kind !== null) {
-            const row = await kind.get(nodeId);
-            if (row === null)
-                return null;
-            const parsed = RowDataSchema.safeParse({
-                lastActive: row.at ?? 0,
-                descriptor: row.data.descriptor,
-            });
-            return parsed.success ? parsed.data : null;
-        }
-        const store = this.resolveSettingsStore();
-        if (!store)
+    async readStored(kind, nodeId) {
+        const row = await kind.get(nodeId);
+        if (row === null)
             return null;
-        return this.readRowLegacy(store, nodeId);
-    }
-    async readRowLegacy(store, nodeId) {
-        const raw = await store.get({ collection: COLLECTION, key: nodeId });
-        if (raw === null || raw === undefined)
-            return null;
-        const parsed = RowDataSchema.safeParse(raw);
+        const parsed = RowDataSchema.safeParse({
+            lastActive: row.at ?? 0,
+            descriptor: row.data.descriptor,
+        });
         return parsed.success ? parsed.data : null;
     }
-    async writeStored(nodeId, lastActive, descriptor) {
-        const kind = this.resolveKind();
-        if (kind !== null) {
-            const body = system_1.ClusterNodeHistoryBodySchema.safeParse({ descriptor });
-            if (!body.success)
-                return;
-            await kind.put({ id: nodeId, at: lastActive, data: body.data });
+    async writeStored(kind, nodeId, lastActive, descriptor) {
+        const body = system_1.ClusterNodeHistoryBodySchema.safeParse({ descriptor });
+        if (!body.success)
             return;
-        }
-        const store = this.resolveSettingsStore();
-        if (!store)
-            return;
-        await store.set({
-            collection: COLLECTION,
-            key: nodeId,
-            value: { lastActive, descriptor },
-        });
+        await kind.put({ id: nodeId, at: lastActive, data: body.data });
     }
     /** A placeholder descriptor for a node the topology pass has not seen yet. */
     static placeholderDescriptor(nodeId) {
@@ -242,11 +165,11 @@ class ClusterNodeHistoryStore {
      * nothing is delivered rather than something guessed.
      */
     async getPackages(nodeId) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
             return [];
         try {
-            return (await this.readStored(nodeId))?.descriptor.packages ?? [];
+            return (await this.readStored(kind, nodeId))?.descriptor.packages ?? [];
         }
         catch (err) {
             this.logger.warn('getPackages failed (best-effort)', {
@@ -267,11 +190,11 @@ class ClusterNodeHistoryStore {
     async recordPackages(nodeId, packages) {
         if (packages.length === 0)
             return;
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
             return;
         try {
-            const existing = await this.readStored(nodeId);
+            const existing = await this.readStored(kind, nodeId);
             const merged = new Map((existing?.descriptor.packages ?? []).map((p) => [p.name, p]));
             // The node's current declaration wins on version — it is the authority on
             // what it is actually running.
@@ -281,7 +204,7 @@ class ClusterNodeHistoryStore {
                 ...(existing?.descriptor ?? ClusterNodeHistoryStore.placeholderDescriptor(nodeId)),
                 packages: [...merged.values()],
             };
-            await this.writeStored(nodeId, existing?.lastActive ?? Date.now(), descriptor);
+            await this.writeStored(kind, nodeId, existing?.lastActive ?? Date.now(), descriptor);
         }
         catch (err) {
             this.logger.warn('recordPackages failed (best-effort)', {
@@ -298,11 +221,11 @@ class ClusterNodeHistoryStore {
     async prunePackages(nodeId, names) {
         if (names.length === 0)
             return;
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
             return;
         try {
-            const existing = await this.readStored(nodeId);
+            const existing = await this.readStored(kind, nodeId);
             if (existing === null)
                 return;
             const current = existing.descriptor.packages;
@@ -312,7 +235,7 @@ class ClusterNodeHistoryStore {
             const remaining = current.filter((p) => !drop.has(p.name));
             if (remaining.length === current.length)
                 return;
-            await this.writeStored(nodeId, existing.lastActive, {
+            await this.writeStored(kind, nodeId, existing.lastActive, {
                 ...existing.descriptor,
                 packages: remaining,
             });
@@ -334,27 +257,14 @@ class ClusterNodeHistoryStore {
      * time. A no-op if the node was never snapshotted (nothing to update).
      */
     async touch(nodeId) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
             return;
         try {
-            const existing = await this.readStored(nodeId);
+            const existing = await this.readStored(kind, nodeId);
             if (existing === null)
                 return;
-            const kind = this.resolveKind();
-            if (kind !== null) {
-                await kind.put({
-                    id: nodeId,
-                    at: Date.now(),
-                    data: { descriptor: existing.descriptor },
-                });
-                return;
-            }
-            await store.update({
-                collection: COLLECTION,
-                id: nodeId,
-                data: { lastActive: Date.now() },
-            });
+            await this.writeStored(kind, nodeId, Date.now(), existing.descriptor);
         }
         catch (err) {
             this.logger.warn('touch failed (best-effort)', {
@@ -369,27 +279,21 @@ class ClusterNodeHistoryStore {
     }
     /**
      * Read the full persisted history, validated, or `null` when the store did
-     * not ANSWER (unavailable, or the query threw). A caller that must not claim
+     * not ANSWER (the kind is not bound yet, or the read threw). A caller that must not claim
      * a node absent from an unanswered read (D315) uses this; `getAll` folds the
      * `null` into `[]` for the callers that only render what exists. Malformed
      * rows are dropped (and logged) — the rest of the answer still stands.
      */
     async tryGetAll() {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
             return null;
         try {
-            const kind = this.resolveKind();
             const result = [];
-            const rows = kind !== null
-                ? (await (0, system_1.readAllRows)(kind)).map((row) => ({
-                    id: row.id,
-                    data: { lastActive: row.at ?? 0, descriptor: row.data.descriptor },
-                }))
-                : (await store.query({ collection: COLLECTION })).map((row) => ({
-                    id: row.id,
-                    data: row.data,
-                }));
+            const rows = (await (0, system_1.readAllRows)(kind)).map((row) => ({
+                id: row.id,
+                data: { lastActive: row.at ?? 0, descriptor: row.data.descriptor },
+            }));
             for (const row of rows) {
                 const parsed = RowDataSchema.safeParse(row.data);
                 if (!parsed.success) {
@@ -416,21 +320,15 @@ class ClusterNodeHistoryStore {
      * 2026-09-01 all three reached the UI as `{"success": true}`.
      */
     async forget(nodeId) {
-        const store = await this.ensureDeclared();
-        if (!store)
+        const kind = this.resolveKind();
+        if (kind === null)
             return 'store-unavailable';
         try {
             // Read first: `delete` on this provider is idempotent and cannot tell a
             // removal from a no-op, and "there was nothing to remove" is the answer
             // that stops an operator repeating a working action forever.
-            const existed = (await this.readStored(nodeId)) !== null;
-            const kind = this.resolveKind();
-            if (kind !== null) {
-                await kind.delete(nodeId);
-            }
-            else {
-                await store.delete({ collection: COLLECTION, key: nodeId });
-            }
+            const existed = (await this.readStored(kind, nodeId)) !== null;
+            await kind.delete(nodeId);
             if (!existed) {
                 this.logger.info('cluster node had no history row to forget', { tags: { nodeId } });
                 return 'not-found';

package/dist/manual-boot.js

@@ -76,7 +76,6 @@ const toast_wrapper_service_1 = require("./core/notification/toast-wrapper.servi
 const repl_engine_service_1 = require("./core/repl/repl-engine.service");
 const server_update_service_1 = require("./core/server-update/server-update.service");
 const runner_boot_check_1 = require("./core/runner-health/runner-boot-check");
-const update_preflight_1 = require("./core/runner-health/update-preflight");
 const storage_service_1 = require("./core/storage/storage.service");
 const stream_probe_service_1 = require("./core/streaming/stream-probe.service");
 const topology_emitter_service_1 = require("./core/topology/topology-emitter.service");
@@ -163,11 +162,11 @@ async function bootManual(opts) {
     // Same post-construction reason: the cluster-node lifecycle (forget, catalog
     // removal) must leave a per-node line, and `console.log` is not a log store.
     agentRegistryService.setLogger(loggingService.createLogger('ClusterNodes'));
-    // A1: durable, routing-blind offline-node history — persisted through the
-    // hub-resident `settings-store` cap (resolved lazily; null until it boots).
-    // Wired post-construction so the service's 3-arg constructor stays intact.
-    const clusterNodeHistoryStore = new cluster_node_history_store_1.ClusterNodeHistoryStore(() => capabilityService.getRegistry()?.getSingleton('settings-store') ??
-        null, loggingService.createLogger('cluster-node-history'));
+    // A1: durable, routing-blind offline-node history — the `cluster-agent`
+    // records kind, bound by the addon registry once the records provider is up
+    // (unavailable until then, D902). Wired post-construction so the service's
+    // 3-arg constructor stays intact.
+    const clusterNodeHistoryStore = new cluster_node_history_store_1.ClusterNodeHistoryStore(loggingService.createLogger('cluster-node-history'));
     agentRegistryService.setClusterNodeHistoryStore(clusterNodeHistoryStore);
     addonRegistryService.setClusterNodeHistoryStore(clusterNodeHistoryStore);
     // ---- Layer 4: need AddonRegistry ---------------------------------------
@@ -287,16 +286,7 @@ async function bootManual(opts) {
             });
         },
     });
-    const settingsStoreOrNull = () => capabilityService.getRegistry()?.getSingleton('settings-store') ?? null;
     const serverUpdateService = new server_update_service_1.ServerUpdateService({
-        updatePreflight: (0, update_preflight_1.buildUpdatePreflight)({
-            logger: loggingService.createLogger('UpdatePreflight'),
-            forkedAddonIds: () => addonRegistryService.forkedAddonIds(),
-            store: () => {
-                const store = settingsStoreOrNull();
-                return store === null ? null : (0, update_preflight_1.legacyGuardClientOf)(store);
-            },
-        }),
         runnerBootCheck: () => hubRunnerBootCheck.current(),
         logger: loggingService.createLogger('ServerUpdate'),
         restartServer: (requestedBy, update) => addonPackageService.restartServer(requestedBy, update),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.610",
+  "version": "1.2.612",
   "license": "MIT",
   "private": false,
   "files": [
@@ -38,19 +38,19 @@
     ]
   },
   "dependencies": {
-    "@camstack/addon-admin-ui": "1.2.445",
-    "@camstack/addon-agent-ui": "1.2.251",
-    "@camstack/addon-auth": "1.2.156",
-    "@camstack/addon-decoder-nodeav": "1.2.131",
-    "@camstack/addon-notifiers": "1.2.609",
-    "@camstack/addon-pipeline": "1.2.609",
-    "@camstack/addon-pipeline-orchestrator": "1.2.611",
-    "@camstack/addon-post-analysis": "1.2.616",
-    "@camstack/develop": "0.1.21",
-    "@camstack/sdk": "1.2.141",
-    "@camstack/system": "1.2.459",
-    "@camstack/types": "1.2.391",
-    "@camstack/ui-library": "1.2.308",
+    "@camstack/addon-admin-ui": "1.2.448",
+    "@camstack/addon-agent-ui": "1.2.254",
+    "@camstack/addon-auth": "1.2.159",
+    "@camstack/addon-decoder-nodeav": "1.2.134",
+    "@camstack/addon-notifiers": "1.2.612",
+    "@camstack/addon-pipeline": "1.2.612",
+    "@camstack/addon-pipeline-orchestrator": "1.2.614",
+    "@camstack/addon-post-analysis": "1.2.619",
+    "@camstack/develop": "0.1.24",
+    "@camstack/sdk": "1.2.144",
+    "@camstack/system": "1.2.462",
+    "@camstack/types": "1.2.394",
+    "@camstack/ui-library": "1.2.311",
     "@fastify/compress": "^9.0.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/cors": "^11.2.0",

package/dist/core/runner-health/update-preflight.js

@@ -1,62 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LEGACY_BLOB_GUARD_SINCE = void 0;
-exports.buildUpdatePreflight = buildUpdatePreflight;
-exports.legacyGuardClientOf = legacyGuardClientOf;
-/**
- * The `applyServerUpdate` pre-flight (D877).
- *
- * Question: would the TARGET version refuse to start any addon on THIS node's
- * live data? Today there is one deterministic Init refusal the framework can
- * pre-check: the D870 legacy-blob guard (`assertLegacyBlobsMigrated`) - an addon
- * whose settings still sit in its per-addon blob tables while the standard store
- * holds none.
- *
- * The store-shape check is deliberately version-independent: the live store is
- * what it is, so the only version question is "does the target contain the
- * guard?" - answered by {@link LEGACY_BLOB_GUARD_SINCE}. The honest limit: it
- * runs inside the version that ships it, so it protects updates FROM this
- * version onwards; an update from an older hub never ran it. And it knows only
- * the refusals listed here - a new deterministic Init refusal has to be added
- * to this module to be pre-checked.
- */
-const system_1 = require("@camstack/system");
-const index_js_1 = require("../../server-root/index.js");
-/** The first server version whose addons run `assertLegacyBlobsMigrated` at Init. */
-exports.LEGACY_BLOB_GUARD_SINCE = '1.2.585';
-function buildUpdatePreflight(deps) {
-    return async (targetVersion) => {
-        if ((0, index_js_1.compareSemver)(targetVersion, exports.LEGACY_BLOB_GUARD_SINCE) < 0)
-            return [];
-        const store = deps.store();
-        if (store === null) {
-            throw new Error('the settings store is not available to pre-check the update');
-        }
-        const blockers = [];
-        for (const addonId of deps.forkedAddonIds()) {
-            try {
-                await (0, system_1.assertLegacyBlobsMigrated)(store, addonId, deps.logger);
-            }
-            catch (err) {
-                // A refusal is the finding; any other error is "could not ask" and the
-                // caller treats a throw as exactly that (it never blocks on it).
-                if (!(err instanceof system_1.UnmigratedSettingsError))
-                    throw err;
-                blockers.push({
-                    addonId,
-                    reason: err.message,
-                    remedy: system_1.UNMIGRATED_SETTINGS_REMEDY,
-                });
-            }
-        }
-        return blockers;
-    };
-}
-/** The three store calls the guard makes, over the hub's `settings-store` provider. */
-function legacyGuardClientOf(store) {
-    return {
-        query: { query: (input) => store.query(input) },
-        get: { query: (input) => store.get(input) },
-        count: { query: (input) => store.count(input) },
-    };
-}