@camstack/server 1.2.681 → 1.2.682

package/CHANGELOG.md

@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.2.682] - 2026-10-28
+
+### Changed
+
+- A freshly paired or re-registered agent node now receives every any-node addon installed on the hub, at the hub version
+- A fresh agent is named after its short host name and architecture, and the hub offers agents its internal address instead of the public endpoint
+
 ## [1.2.681] - 2026-10-28
 
 ### Changed

package/dist/agent/agent-config.js

@@ -33,7 +33,9 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultAgentName = defaultAgentName;
 exports.loadAgentConfig = loadAgentConfig;
+exports.seededAgentName = seededAgentName;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
 const crypto = __importStar(require("node:crypto"));
@@ -95,15 +97,31 @@ function parseMeshTls(value) {
         return undefined;
     return { certPem, keyPem, caCertPem };
 }
+/**
+ * The name an agent without a chosen one carries: the host name up to its first dot (so
+ * `.local` / `.localdomain` and a domain suffix drop out), then the architecture.
+ */
+function defaultAgentName(hostname, arch) {
+    const short = hostname.trim().split('.')[0] ?? '';
+    return `${short.length > 0 ? short : 'agent'}-${arch}`;
+}
+/**
+ * The name before anyone renamed the agent: `CAMSTACK_AGENT_NAME` when set, else the default.
+ * Never the node id - that is an identity, not a label.
+ */
+function seededAgentName() {
+    const fromEnv = process.env.CAMSTACK_AGENT_NAME;
+    return fromEnv !== undefined && fromEnv.trim().length > 0
+        ? fromEnv.trim()
+        : defaultAgentName(os.hostname(), os.arch());
+}
 function loadAgentConfig(configPath, dataDirOverride) {
     const filePath = configPath ?? 'agent.json';
     const dataDir = dataDirOverride ?? process.env.CAMSTACK_DATA ?? './camstack-data';
     const resolvedDataDir = path.resolve(dataDir);
     // Name: config file takes priority over env (allows UI rename to stick).
     // Env is the initial seed, config file is the persisted override.
-    const envName = process.env.CAMSTACK_NODE_ID ??
-        process.env.CAMSTACK_AGENT_NAME ??
-        `${os.hostname()}-${os.arch()}`;
+    const envName = seededAgentName();
     // Environment variable for the hub connection (optional — agent starts
     // without). Pairing material lives only in agent.json.
     const envHubAddress = process.env.CAMSTACK_HUB_ADDRESS || undefined;

package/dist/agent/agent-http.js

@@ -64,6 +64,7 @@ const agent_http_auth_js_1 = require("./agent-http-auth.js");
 const agent_pairing_routes_js_1 = require("./agent-pairing-routes.js");
 const agent_pairing_store_js_1 = require("./agent-pairing-store.js");
 const node_1 = require("@camstack/types/node");
+const agent_config_js_1 = require("./agent-config.js");
 const agent_update_routes_js_1 = require("./agent-update-routes.js");
 const derive_hub_url_js_1 = require("./derive-hub-url.js");
 Object.defineProperty(exports, "pickIpv4", { enumerable: true, get: function () { return derive_hub_url_js_1.pickIpv4; } });
@@ -259,10 +260,10 @@ function deriveHubConnectionState(nodes, hubAddressConfigured, paired) {
  * Read the current effective config from the persisted file.
  * This is the single source of truth -- always reflects what the UI wrote.
  */
-function getEffectiveConfig(configPath, nodeId) {
+function getEffectiveConfig(configPath) {
     const raw = readConfigFile(configPath);
     return {
-        name: typeof raw.name === 'string' ? raw.name : nodeId,
+        name: typeof raw.name === 'string' && raw.name.length > 0 ? raw.name : (0, agent_config_js_1.seededAgentName)(),
         hubAddress: typeof raw.hubAddress === 'string' ? raw.hubAddress : null,
         paired: (0, agent_pairing_store_js_1.isAgentPaired)(configPath),
         hasMeshTls: raw.meshTls !== null && typeof raw.meshTls === 'object',
@@ -387,7 +388,7 @@ async function createAgentHttpServer(getBroker, config) {
     // -- Agent status (enriched with connection state) ------------------
     app.get('/api/agent/status', async () => {
         const broker = getBroker();
-        const eff = getEffectiveConfig(config.configPath, config.nodeId);
+        const eff = getEffectiveConfig(config.configPath);
         const nodes = getRegistryNodes(broker);
         const hubConnected = nodes.some((n) => n.id === 'hub');
         const hubConnectionState = config.getHubConnectionState
@@ -458,7 +459,7 @@ async function createAgentHttpServer(getBroker, config) {
     });
     // -- Unlock info (public; Continue-with-hub needs hub origin while locked) --
     app.get('/api/agent/unlock-info', async () => {
-        const eff = getEffectiveConfig(config.configPath, config.nodeId);
+        const eff = getEffectiveConfig(config.configPath);
         const nodes = getRegistryNodes(getBroker());
         const resolvedHubAddress = resolveHubEndpoint(nodes);
         const hubHttpsOrigin = (eff.hubAddress !== null ? (0, derive_hub_url_js_1.deriveHubUrlFromHubAddress)(eff.hubAddress) : undefined) ??
@@ -539,7 +540,7 @@ async function createAgentHttpServer(getBroker, config) {
     // -- Config read (always from file -- single source of truth) -------
     app.get('/api/agent/config', async () => {
         const persisted = readConfigFile(config.configPath);
-        const eff = getEffectiveConfig(config.configPath, config.nodeId);
+        const eff = getEffectiveConfig(config.configPath);
         return {
             nodeId: config.nodeId,
             name: eff.name,
@@ -608,7 +609,7 @@ async function createAgentHttpServer(getBroker, config) {
     // status poll.
     const hubsFinder = config.hubsFinder ??
         (0, hubs_found_js_1.createHubsFinder)({
-            getConfiguredHubAddress: () => getEffectiveConfig(config.configPath, config.nodeId).hubAddress,
+            getConfiguredHubAddress: () => getEffectiveConfig(config.configPath).hubAddress,
             log: (message) => console.warn(`[Agent] ${message}`),
         });
     app.get('/api/agent/hubs-found', async () => hubsFinder.snapshot());

package/dist/agent/agent-hub-addon-update.js

@@ -79,12 +79,16 @@ function failureOf(result) {
 function createAgentHubAddonControls(deps) {
     const states = new Map();
     const getHubVersions = async () => {
+        if (deps.isPaired !== undefined && !deps.isPaired())
+            return { ok: false, reason: 'unpaired' };
         try {
             const list = await deps.callHub(exports.HUB_ADDON_LIST_ACTION, undefined, HUB_LIST_TIMEOUT_MS);
             return { ok: true, versions: hubVersionsFromList(list) };
         }
         catch (err) {
-            return { ok: false, error: errorMessage(err) };
+            // The transport's own words (a service name) are for the log, not the operator.
+            deps.onProblem?.(`the hub did not answer addons.list: ${errorMessage(err)}`);
+            return { ok: false, reason: 'unanswered' };
         }
     };
     const run = async (packageName, version) => {
@@ -118,7 +122,9 @@ function createAgentHubAddonControls(deps) {
             if (!hub.ok) {
                 return {
                     started: false,
-                    message: `The hub could not be asked which version this node should run: ${hub.error}`,
+                    message: hub.reason === 'unpaired'
+                        ? 'This agent is not paired with a hub, so there is no version to bring it to.'
+                        : 'The hub did not answer, so the version this node should run is unknown.',
                 };
             }
             const hubVersion = hub.versions.get(packageName);

package/dist/agent/agent-update-routes.js

@@ -74,7 +74,7 @@ async function withHubVersions(report, hub) {
     const progress = hub?.progress();
     return {
         ...report,
-        hubVersionsError: versions === null || versions.ok ? null : versions.error,
+        hubVersions: versions === null || versions.ok ? 'known' : versions.reason,
         entries: report.entries.map((entry) => {
             const hubVersion = versions?.ok === true ? (versions.versions.get(entry.packageName) ?? null) : null;
             return {

package/dist/agent/main.js

@@ -879,6 +879,7 @@ async function startAgent(configPath) {
         addons: {
             hub: (0, agent_hub_addon_update_js_1.createAgentHubAddonControls)({
                 nodeId: config.nodeId,
+                isPaired: () => (0, agent_pairing_store_js_1.isAgentPaired)(config.configPath),
                 // The mesh channel the agent already holds; the hub names this caller
                 // `node:<id>` and answers per its remote privilege grant.
                 callHub: (action, params, timeoutMs) => broker.call(action, params, { nodeID: 'hub', timeout: timeoutMs }),

package/dist/api/core/agent-pairing.router.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveAgentHubAddresses = resolveAgentHubAddresses;
 exports.createAgentPairingRouter = createAgentPairingRouter;
 const node_crypto_1 = require("node:crypto");
 /**
@@ -68,6 +69,21 @@ const UnpairResultSchema = zod_1.z.object({
     disconnected: zod_1.z.number().int(),
     next: zod_1.z.string(),
 });
+/**
+ * What an agent is offered: the hub's INTERNAL role for the API URL and the mesh
+ * address alike. The public endpoint is for people outside the LAN; an agent on the
+ * LAN is shown, and keeps, the address it actually dials.
+ */
+function resolveAgentHubAddresses(book) {
+    const internal = book.roles.internal.resolved;
+    if (internal === null) {
+        throw new Error('The hub has no LAN address to give an agent yet - set one on System -> Network');
+    }
+    return {
+        hubUrl: internal,
+        hubMeshAddress: `${new URL(internal).hostname}:${system_1.DEFAULT_HUB_TLS_TCP_PORT}`,
+    };
+}
 function createAgentPairingRouter(deps) {
     const transport = deps.transport ?? (0, agent_pairing_http_js_1.createHttpAgentPairingTransport)();
     const meshCa = deps.meshCa ??
@@ -89,20 +105,9 @@ function createAgentPairingRouter(deps) {
         }
         return provider;
     };
-    /** The address an agent dials (its `internal` role) and the URL the hub serves its API on. */
+    /** The address an agent dials and is shown: the hub's `internal` role. */
     const hubAddresses = deps.hubAddresses ??
-        (async () => {
-            const book = await localNetwork().getAddresses({ scheme: 'https' });
-            const internal = book.roles.internal.resolved;
-            const hubUrl = book.roles.publicEndpoint.resolved ?? internal;
-            if (internal === null || hubUrl === null) {
-                throw new Error('The hub has no LAN address to give an agent yet - set one on System -> Network');
-            }
-            return {
-                hubUrl,
-                hubMeshAddress: `${new URL(internal).hostname}:${system_1.DEFAULT_HUB_TLS_TCP_PORT}`,
-            };
-        });
+        (async () => resolveAgentHubAddresses(await localNetwork().getAddresses({ scheme: 'https' })));
     const pairing = new system_1.HubPairing({
         transport,
         ca: meshCa,

package/dist/core/agent/agent-addon-backfill.js

@@ -53,22 +53,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.BackfillAttemptTracker = exports.MAX_BACKFILL_ATTEMPTS = void 0;
 exports.triggerMayDeliver = triggerMayDeliver;
+exports.freshNodeSkipReason = freshNodeSkipReason;
 exports.computeBackfillPlan = computeBackfillPlan;
 exports.confirmBackfillPlan = confirmBackfillPlan;
 exports.executeBackfill = executeBackfill;
-/**
- * Why a reconcile is running. Named on every back-fill decision, and an
- * allowlist: a future caller has to CHOOSE a trigger, and a trigger that must
- * not deliver bytes is refused here rather than in a comment.
- *
- * `node-registration` covers both a first registration and a rejoin — the
- * distinction is not the discriminator it looks like. The case the back-fill
- * exists for (a node that lost `<dataDir>/addons` and came back with 4 of 14
- * packages) presents as a rejoin, so excluding rejoins would delete the only
- * legitimate purpose. The transient-roster-gap case is excluded by the delivery
- * ledger and the confirmation read instead, which discriminate on FACTS rather
- * than on which callback fired.
- */
 const system_1 = require("@camstack/system");
 /** Triggers permitted to install packages onto a node. */
 const DELIVERING_TRIGGERS = new Set([
@@ -80,11 +68,26 @@ const DELIVERING_TRIGGERS = new Set([
 function triggerMayDeliver(trigger) {
     return DELIVERING_TRIGGERS.has(trigger);
 }
+/**
+ * Why a hub package may not go to a fresh node, or `null` when it may.
+ * A package with a hub-only addon is refused whole: the stale sweep would
+ * undeploy that addon and with it the shared bundle directory.
+ */
+function freshNodeSkipReason(placements) {
+    if (placements.includes('hub-only'))
+        return 'hub-only placement';
+    if (!placements.includes('any-node'))
+        return 'placement does not allow any node';
+    return null;
+}
 /**
  * Decide what a node is missing relative to its own last-declared roster.
  * Pure — no I/O, no clock, no randomness.
  */
 function computeBackfillPlan(input) {
+    if (input.freshNode !== undefined && input.recorded.length === 0) {
+        return computeFreshNodePlan(input, input.freshNode);
+    }
     const liveByName = new Map(input.live.map((p) => [p.name, p.version]));
     const targets = [];
     const retired = [];
@@ -113,7 +116,39 @@ function computeBackfillPlan(input) {
         }
         targets.push({ name: entry.name, version: hubVersion, versionSource: 'hub-installed' });
     }
-    return { targets, retired, notOnHub, liveCount: liveByName.size };
+    return { targets, retired, notOnHub, liveCount: liveByName.size, skipped: [] };
+}
+function computeFreshNodePlan(input, fresh) {
+    const liveByName = new Map(input.live.map((p) => [p.name, p.version]));
+    const targets = [];
+    const retired = [];
+    const skipped = [];
+    for (const [name, placements] of fresh.hubPackagePlacements) {
+        if (input.bootstrap.has(name))
+            continue;
+        if (input.undeployed.has(name))
+            continue;
+        const reason = freshNodeSkipReason(placements);
+        if (reason !== null) {
+            skipped.push({ name, reason });
+            continue;
+        }
+        const hubVersion = input.hubVersions.get(name);
+        if (hubVersion === undefined) {
+            skipped.push({ name, reason: 'hub version unknown' });
+            continue;
+        }
+        const present = liveByName.has(name);
+        const decision = (0, system_1.decideAddonVersionMove)(present ? (liveByName.get(name) ?? null) : null, hubVersion, system_1.ADDON_VERSION_REASON_HUB);
+        if (!decision.move)
+            continue;
+        if (input.retired.has(name)) {
+            retired.push(name);
+            continue;
+        }
+        targets.push({ name, version: hubVersion, versionSource: 'hub-installed' });
+    }
+    return { targets, retired, notOnHub: [], liveCount: liveByName.size, skipped };
 }
 function confirmBackfillPlan(plan, secondRead) {
     const seen = new Map(secondRead.map((p) => [p.name, p.version]));

package/dist/core/agent/agent-registry.service.js

@@ -675,6 +675,7 @@ class AgentRegistryService {
             const hubPlacements = new Map();
             const hubPackages = new Set();
             const hubVersions = new Map();
+            const hubPackagePlacements = new Map();
             for (const row of this.addonRegistry.listAddons()) {
                 const declId = row.manifest.id;
                 if (typeof declId !== 'string')
@@ -684,6 +685,9 @@ class AgentRegistryService {
                 const packageName = row.manifest.packageName;
                 if (typeof packageName === 'string' && packageName.length > 0) {
                     hubPackages.add(packageName);
+                    const siblings = hubPackagePlacements.get(packageName) ?? [];
+                    siblings.push((0, types_1.resolveAddonPlacement)(decl));
+                    hubPackagePlacements.set(packageName, siblings);
                     const packageVersion = row.manifest.packageVersion;
                     if (typeof packageVersion === 'string' && packageVersion.length > 0) {
                         hubVersions.set(packageName, packageVersion);
@@ -754,7 +758,7 @@ class AgentRegistryService {
                     console.error(`[agent-registry] Reconcile ${agentId}: failed to undeploy "${addon.id}":`, err instanceof Error ? err.message : String(err));
                 }
             }
-            await this.backfillAgentAddons(agentId, agentAddons, undeployedPackages, hubVersions, trigger);
+            await this.backfillAgentAddons(agentId, agentAddons, undeployedPackages, hubVersions, hubPackagePlacements, trigger);
         }
         catch (err) {
             console.error(`[agent-registry] Reconcile failed for agent ${agentId}:`, err instanceof Error ? err.message : String(err));
@@ -775,10 +779,13 @@ class AgentRegistryService {
      * Every leg is idempotent: run twice with no change in between and step 3
      * finds nothing to do.
      */
-    async backfillAgentAddons(agentId, agentAddons, undeployedPackages, hubVersions, trigger) {
+    async backfillAgentAddons(agentId, agentAddons, undeployedPackages, hubVersions, hubPackagePlacements, trigger) {
         const store = this.historyStore;
         if (!store)
             return;
+        // Read BEFORE recording: a fresh node is one that never declared a roster
+        // (D962), and the record below would make it look like it had one.
+        const priorRoster = await store.getPackages(agentId);
         const live = rosterFromAddons(agentAddons);
         await store.recordPackages(agentId, live);
         if (undeployedPackages.size > 0) {
@@ -795,7 +802,20 @@ class AgentRegistryService {
             undeployed: undeployedPackages,
             retired: this.backfillTracker.retiredFor(agentId),
             hubVersions,
+            freshNode: priorRoster.length === 0 ? { hubPackagePlacements } : undefined,
         });
+        if (priorRoster.length === 0) {
+            this.logger?.info('back-fill: fresh node (no prior declared roster), plan from the hub any-node set', {
+                tags: { nodeId: agentId },
+                meta: { planned: planned.targets.map((t) => `${t.name}@${t.version}`) },
+            });
+            for (const skip of planned.skipped) {
+                this.logger?.info('back-fill: fresh node not given a hub package', {
+                    tags: { nodeId: agentId },
+                    meta: { package: skip.name, reason: skip.reason },
+                });
+            }
+        }
         // Never a delivery, and said so: an addon the hub no longer installs stays
         // off the node even though the node once declared it (the stale sweep above
         // removes a copy that is still there).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/server",
-  "version": "1.2.681",
+  "version": "1.2.682",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -50,7 +50,7 @@
   },
   "dependencies": {
     "@camstack/addon-admin-ui": "1.2.510",
-    "@camstack/addon-agent-ui": "1.2.288",
+    "@camstack/addon-agent-ui": "1.2.289",
     "@camstack/addon-auth": "1.2.170",
     "@camstack/addon-benchmark": "1.2.288",
     "@camstack/addon-decoder-nodeav": "1.2.144",
@@ -60,7 +60,7 @@
     "@camstack/addon-post-analysis": "1.2.650",
     "@camstack/develop": "0.1.38",
     "@camstack/sdk": "1.2.154",
-    "@camstack/system": "1.2.512",
+    "@camstack/system": "1.2.513",
     "@camstack/types": "1.2.439",
     "@camstack/ui-library": "1.2.346",
     "@fastify/compress": "^9.0.0",