@camstack/system 1.0.6 → 1.0.7

package/dist/index.mjs

@@ -1,5 +1,6 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-ClDGFyf6.mjs";
+import { a as ensureModel, c as isModelDownloaded, d as createAuthenticatedFileServer, f as parseRangeHeader, i as downloadModel, l as createFileDataPlaneHandler, m as resolveFilePath, n as deleteModelFromDisk, o as fetchJson, p as parseTokenizedUrl, r as downloadFile, s as getModelFilePath, t as ModelDownloadService, u as contentTypeFor } from "./model-download-service-C7AjBsX9.mjs";
+import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BkP504Vq.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, t as SqliteSettingsBackend } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
@@ -18,14 +19,15 @@ import { LocalAuthAddon, a as require_safe_buffer, i as AuthManager, n as ApiKey
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { A as createUdsLoggerWithControl, B as createLocalTransport, C as ipcParentLink, D as createUdsEventBus, E as createUdsEventBridge, F as CapRouteError, G as FrameDecoder, H as UdsLocalTransportServer, I as classifyCapRoute, J as buildUdsNativeCapProxy, K as encodeFrame, L as LocalChildClient, M as AGENT_CAP_FWD_SERVICE, N as CapRouteResolver, O as udsChildLogToWorkerEntry, P as callWithServiceDiscovery, Q as mountNativeCapService, R as LocalChildRegistry, S as ipcChildLink, T as createParentUnownedCallHandler, U as SocketChannel, V as UdsLocalTransportClient, W as localEndpointPath, Y as createBrokerDeviceManagerApi, _ as __resetCapUsageRegistryForTests, a as getWorkerDeviceRegistry, at as capBareAction, b as brokerTransportLink, c as setHubConnected, ct as deserializeTypedArrays, d as registerEventBusService, dt as CustomActionRegistry, et as createAddonService, f as AddonDepsManager, ft as CapabilityHandle, g as CapUsageRegistry, h as createHwAccelService, ht as resolveAddonClass, i as createUdsAddonContext, it as capActionSuffix, j as AGENT_CAP_FWD_ACTION, k as createUdsLogger, l as EVENT_TOPIC_PREFIX, lt as serializeTypedArrays, m as resolveHwAccel, mt as installManifestNativeDeps, n as adaptBrokerToCluster, nt as NATIVE_PROVIDER_SERVICE_INFIX, o as getOrInitReadinessRegistry, ot as capServiceName, p as createKernelHwAccel, pt as CapabilityUnavailableError, q as buildNativeCapProxy, r as createAddonContext, rt as capActionName, s as getOrInitReadinessRegistryForClient, st as parseCapAction, t as installManifestPythonDeps, tt as validateProviderRegistrations, u as getBrokerEventBus, ut as DeviceRegistry, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-CXbKrOdk.mjs";
+import { A as createUdsLoggerWithControl, B as createLocalTransport, C as ipcParentLink, D as createUdsEventBus, E as createUdsEventBridge, F as CapRouteError, G as FrameDecoder, H as UdsLocalTransportServer, I as classifyCapRoute, J as buildUdsNativeCapProxy, K as encodeFrame, L as LocalChildClient, M as AGENT_CAP_FWD_SERVICE, N as CapRouteResolver, O as udsChildLogToWorkerEntry, P as callWithServiceDiscovery, Q as mountNativeCapService, R as LocalChildRegistry, S as ipcChildLink, T as createParentUnownedCallHandler, U as SocketChannel, V as UdsLocalTransportClient, W as localEndpointPath, Y as createBrokerDeviceManagerApi, _ as __resetCapUsageRegistryForTests, a as getWorkerDeviceRegistry, at as capBareAction, b as brokerTransportLink, c as setHubConnected, ct as deserializeTypedArrays, d as registerEventBusService, dt as CapabilityHandle, et as createAddonService, f as AddonDepsManager, ft as CapabilityUnavailableError, g as CapUsageRegistry, h as createHwAccelService, i as createUdsAddonContext, it as capActionSuffix, j as AGENT_CAP_FWD_ACTION, k as createUdsLogger, l as EVENT_TOPIC_PREFIX, lt as serializeTypedArrays, m as resolveHwAccel, mt as resolveAddonClass, n as adaptBrokerToCluster, nt as NATIVE_PROVIDER_SERVICE_INFIX, o as getOrInitReadinessRegistry, ot as capServiceName, p as createKernelHwAccel, pt as installManifestNativeDeps, q as buildNativeCapProxy, r as createAddonContext, rt as capActionName, s as getOrInitReadinessRegistryForClient, st as parseCapAction, t as installManifestPythonDeps, tt as validateProviderRegistrations, u as getBrokerEventBus, ut as DeviceRegistry, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-CoJXeb9u.mjs";
+import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { n as require_src, t as require_graceful_fs } from "./graceful-fs-BoR9GuPS.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
-import { createServer, request } from "node:http";
+import { request } from "node:http";
 import * as fs$17 from "node:fs";
-import { accessSync, constants, createReadStream, existsSync, mkdirSync, promises, readFileSync } from "node:fs";
+import { accessSync, constants, existsSync, mkdirSync, readFileSync } from "node:fs";
 import * as path$40 from "node:path";
-import path, { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
+import { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
 import { DATAPLANE_SECRET_HEADER, EventCategory, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, asJsonObject, asNumber, asString, createEvent, emitDownForOwnedCaps, errMsg, lifecycleJobSchema, parseJsonObject, parseJsonUnknown, readinessKey, scopeKey } from "@camstack/types";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import { execFile, execFileSync, spawn } from "node:child_process";
@@ -35,6 +37,7 @@ import * as vm from "node:vm";
 import * as os$17 from "node:os";
 import { lstat, readdir, readlink, realpath } from "node:fs/promises";
 import { z } from "zod";
+import { asJsonObject as asJsonObject$1, parseJsonUnknown as parseJsonUnknown$1 } from "@camstack/types/addon";
 import { lstatSync, readdir as readdir$1, readdirSync, readlinkSync, realpathSync } from "fs";
 import { EventEmitter } from "node:events";
 import Pe from "node:stream";
@@ -73,216 +76,6 @@ var EventBus = class {
 	}
 };
 //#endregion
-//#region src/http/authenticated-file-server.ts
-/**
-* Authenticated data-plane file-server — a shared host primitive for addons that
-* must serve files (media segments, scrub-frame stores, exported clips) directly
-* to browsers/players, node-direct (NOT through the hub tRPC, per the recording
-* design's "no media bytes traverse the hub").
-*
-* It bundles the three things every such server needs so addons don't re-roll
-* them: CORS (the data plane is cross-origin from the admin-ui — a native
-* `<video src>` is exempt but hls.js / WebCodecs fetch via XHR and are blocked
-* without it), HTTP `Range` (seeking / partial fetch), and a SCOPED TOKEN check.
-*
-* The token rides as the FIRST path segment (`<urlPrefix><token>/<relPath>`) so
-* a player resolving a manifest's RELATIVE child URIs carries it on every
-* sub-request automatically — no per-URI rewriting, no cookies/headers a dumb
-* player can't set. The caller supplies `verifyToken(token, relPath)`; the
-* primitive stays auth-scheme-agnostic.
-*
-* Pure helpers (`parseTokenizedUrl`, `resolveFilePath`, `contentTypeFor`,
-* `parseRangeHeader`) are exported for unit testing; `createAuthenticatedFileServer`
-* is the thin `node:http` glue.
-*/
-function corsHeaders(origin) {
-	return {
-		"access-control-allow-origin": origin,
-		"access-control-allow-methods": "GET, HEAD, OPTIONS",
-		"access-control-allow-headers": "range",
-		"access-control-expose-headers": "content-length, content-range, accept-ranges",
-		"access-control-max-age": "86400"
-	};
-}
-/**
-* Split a request URL (`<urlPrefix><token>/<relPath>`) into its token + rel
-* path. Returns null for anything outside the prefix or missing either part.
-* `relPath` is URL-decoded; a decode failure → null.
-*/
-function parseTokenizedUrl(urlPrefix, urlPath) {
-	if (!urlPath.startsWith(urlPrefix)) return null;
-	const after = urlPath.slice(urlPrefix.length);
-	const slash = after.indexOf("/");
-	if (slash <= 0) return null;
-	const token = after.slice(0, slash);
-	let rel;
-	try {
-		rel = decodeURIComponent(after.slice(slash + 1));
-	} catch {
-		return null;
-	}
-	if (rel.length === 0) return null;
-	return {
-		token,
-		rel
-	};
-}
-/**
-* Map a rel path to one candidate absolute path PER root, keeping only roots the
-* path stays within (traversal guard). The handler serves the first candidate
-* that exists. Rejects a path that escapes every root.
-*/
-function resolveFilePath(roots, rel) {
-	if (rel.length === 0) return { error: "forbidden" };
-	const candidates = [];
-	for (const rootDir of roots) {
-		const root = path.resolve(rootDir);
-		const abs = path.resolve(root, rel);
-		if (abs === root || abs.startsWith(root + path.sep)) candidates.push(abs);
-	}
-	if (candidates.length === 0) return { error: "forbidden" };
-	return { candidates };
-}
-var DEFAULT_CONTENT_TYPES = {
-	".m3u8": "application/vnd.apple.mpegurl",
-	".m4s": "video/mp4",
-	".mp4": "video/mp4",
-	".idx": "application/octet-stream",
-	".html": "text/html; charset=utf-8",
-	".js": "application/javascript; charset=utf-8",
-	".mjs": "application/javascript; charset=utf-8",
-	".css": "text/css; charset=utf-8",
-	".json": "application/json; charset=utf-8",
-	".map": "application/json; charset=utf-8",
-	".svg": "image/svg+xml",
-	".png": "image/png",
-	".jpg": "image/jpeg",
-	".jpeg": "image/jpeg",
-	".ico": "image/x-icon",
-	".woff2": "font/woff2",
-	".woff": "font/woff",
-	".ttf": "font/ttf"
-};
-function contentTypeFor(filePath, overrides) {
-	const ext = path.extname(filePath).toLowerCase();
-	return overrides?.[ext] ?? DEFAULT_CONTENT_TYPES[ext] ?? "application/octet-stream";
-}
-/** Parse an HTTP `Range` header against a known size. Null = serve whole file. */
-function parseRangeHeader(header, size) {
-	if (!header) return null;
-	const m = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
-	if (!m) return null;
-	const [, rawStart, rawEnd] = m;
-	if (rawStart === "" && rawEnd === "") return null;
-	let start;
-	let end;
-	if (rawStart === "") {
-		const n = Number(rawEnd);
-		if (n <= 0) return null;
-		start = Math.max(0, size - n);
-		end = size - 1;
-	} else {
-		start = Number(rawStart);
-		end = rawEnd === "" ? size - 1 : Number(rawEnd);
-	}
-	if (!Number.isFinite(start) || !Number.isFinite(end) || start > end || start >= size) return null;
-	return {
-		start,
-		end: Math.min(end, size - 1)
-	};
-}
-/**
-* Start an authenticated file-server. Returns the bound port so the caller can
-* build URLs. `getRoots`/`verifyToken` are invoked per request, so they always
-* reflect the live config.
-*/
-async function createAuthenticatedFileServer(opts) {
-	const cors = corsHeaders(opts.corsOrigin ?? "*");
-	const server = createServer((req, res) => {
-		handle(opts, cors, req, res);
-	});
-	await new Promise((resolve, reject) => {
-		server.once("error", reject);
-		server.listen(opts.port, () => resolve());
-	});
-	const addr = server.address();
-	return {
-		port: typeof addr === "object" && addr ? addr.port : opts.port,
-		close: () => new Promise((resolve) => server.close(() => resolve()))
-	};
-}
-async function handle(opts, cors, req, res) {
-	if (req.method === "OPTIONS") {
-		res.writeHead(204, cors).end();
-		return;
-	}
-	if (req.method !== "GET" && req.method !== "HEAD") {
-		res.writeHead(405, cors).end();
-		return;
-	}
-	const urlPath = (req.url ?? "").split("?")[0] ?? "";
-	const parsed = parseTokenizedUrl(opts.urlPrefix, urlPath);
-	if (!parsed) {
-		res.writeHead(403, cors).end();
-		return;
-	}
-	if (!opts.verifyToken(parsed.token, parsed.rel)) {
-		res.writeHead(401, cors).end();
-		return;
-	}
-	const resolved = resolveFilePath(opts.getRoots(), parsed.rel);
-	if ("error" in resolved) {
-		res.writeHead(403, cors).end();
-		return;
-	}
-	let absPath = null;
-	let size = 0;
-	for (const candidate of resolved.candidates) try {
-		const st = await promises.stat(candidate);
-		if (st.isFile()) {
-			absPath = candidate;
-			size = st.size;
-			break;
-		}
-	} catch {}
-	if (absPath === null) {
-		res.writeHead(404, cors).end();
-		return;
-	}
-	const baseHeaders = {
-		...cors,
-		"content-type": contentTypeFor(absPath, opts.contentTypes),
-		"accept-ranges": "bytes",
-		"cache-control": "no-cache"
-	};
-	const range = parseRangeHeader(req.headers.range, size);
-	if (range) {
-		res.writeHead(206, {
-			...baseHeaders,
-			"content-range": `bytes ${range.start}-${range.end}/${size}`,
-			"content-length": String(range.end - range.start + 1)
-		});
-		if (req.method === "HEAD") {
-			res.end();
-			return;
-		}
-		createReadStream(absPath, {
-			start: range.start,
-			end: range.end
-		}).pipe(res);
-		return;
-	}
-	res.writeHead(200, {
-		...baseHeaders,
-		"content-length": String(size)
-	});
-	if (req.method === "HEAD") {
-		res.end();
-		return;
-	}
-	createReadStream(absPath).pipe(res);
-}
-//#endregion
 //#region src/http/data-plane-registry.ts
 function trimSlashes(s) {
 	return s.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -383,457 +176,6 @@ function proxyToUpstream(opts) {
 	clientReq.pipe(upstream);
 }
 //#endregion
-//#region src/http/file-data-plane.ts
-/**
-* A ready-made data-plane request handler that serves files from a set of roots
-* with HTTP `Range`, for addons whose data-plane is "stream files off disk"
-* (recording playback, scrub-frame stores, exported clips).
-*
-* This is the addon-side handler the addon hands to `ctx.dataPlane.serve({ handler })`.
-* It receives the REAL Node `req`/`res`, resolves the request path against the
-* addon's roots (traversal-guarded), and streams the file. NO token and NO CORS:
-* the hub already authenticated the caller and the data plane is same-origin
-* through the hub's port. Reuses the shared Range/content-type/traversal helpers
-* so there is one implementation across the standalone file-server and this.
-*/
-/** Build a `(req, res)` handler that serves `getRoots()` files with Range. */
-function createFileDataPlaneHandler(opts) {
-	return async (req, res) => {
-		if (req.method !== "GET" && req.method !== "HEAD") {
-			res.writeHead(405).end();
-			return;
-		}
-		const urlPath = (req.url ?? "/").split("?")[0] ?? "/";
-		let rel;
-		try {
-			rel = decodeURIComponent(urlPath.replace(/^\/+/, ""));
-		} catch {
-			res.writeHead(400).end();
-			return;
-		}
-		if (rel.length === 0) {
-			res.writeHead(404).end();
-			return;
-		}
-		const resolved = resolveFilePath(opts.getRoots(), rel);
-		if ("error" in resolved) {
-			res.writeHead(403).end();
-			return;
-		}
-		let absPath = null;
-		let size = 0;
-		for (const candidate of resolved.candidates) try {
-			const st = await promises.stat(candidate);
-			if (st.isFile()) {
-				absPath = candidate;
-				size = st.size;
-				break;
-			}
-		} catch {}
-		if (absPath === null) {
-			res.writeHead(404).end();
-			return;
-		}
-		const baseHeaders = {
-			"content-type": contentTypeFor(absPath, opts.contentTypes),
-			"accept-ranges": "bytes",
-			"cache-control": "no-cache"
-		};
-		const range = parseRangeHeader(req.headers.range, size);
-		if (range) {
-			res.writeHead(206, {
-				...baseHeaders,
-				"content-range": `bytes ${range.start}-${range.end}/${size}`,
-				"content-length": String(range.end - range.start + 1)
-			});
-			if (req.method === "HEAD") {
-				res.end();
-				return;
-			}
-			createReadStream(absPath, {
-				start: range.start,
-				end: range.end
-			}).pipe(res);
-			return;
-		}
-		res.writeHead(200, {
-			...baseHeaders,
-			"content-length": String(size)
-		});
-		if (req.method === "HEAD") {
-			res.end();
-			return;
-		}
-		createReadStream(absPath).pipe(res);
-	};
-}
-//#endregion
-//#region src/download/model-downloader.ts
-/** Build fetch headers, including HF auth token for huggingface.co URLs */
-function buildHeaders(url) {
-	const headers = { "User-Agent": "CamStack/1.0" };
-	const hfToken = process.env["HF_TOKEN"] ?? process.env["HUGGING_FACE_HUB_TOKEN"];
-	if (hfToken && url.includes("huggingface.co")) headers["Authorization"] = `Bearer ${hfToken}`;
-	return headers;
-}
-/**
-* Download a single file from a URL to a destination path.
-* Uses native fetch() (Node 22+) which handles redirects natively.
-* Streams to disk with optional progress callback.
-* Returns the destination path. Skips download if file already exists.
-*/
-async function downloadFile(url, destPath, onProgress) {
-	if (fs$17.existsSync(destPath)) return destPath;
-	fs$17.mkdirSync(path$40.dirname(destPath), { recursive: true });
-	const tmpPath = destPath + ".downloading";
-	try {
-		const response = await fetch(url, {
-			redirect: "follow",
-			headers: buildHeaders(url)
-		});
-		if (!response.ok) throw new Error(`HTTP ${response.status} downloading ${url}`);
-		if (!response.body) throw new Error(`No response body from ${url}`);
-		const total = parseInt(response.headers.get("content-length") ?? "0", 10);
-		let downloaded = 0;
-		const fileStream = fs$17.createWriteStream(tmpPath);
-		const reader = response.body.getReader();
-		try {
-			for (;;) {
-				const { done, value } = await reader.read();
-				if (done || !value) break;
-				fileStream.write(value);
-				downloaded += value.length;
-				onProgress?.(downloaded, total);
-			}
-		} finally {
-			fileStream.end();
-			await new Promise((resolve, reject) => {
-				fileStream.on("finish", resolve);
-				fileStream.on("error", reject);
-			});
-		}
-		fs$17.renameSync(tmpPath, destPath);
-		return destPath;
-	} catch (err) {
-		try {
-			fs$17.unlinkSync(tmpPath);
-		} catch {}
-		throw err;
-	}
-}
-/**
-* Fetch JSON from a URL using native fetch().
-*/
-async function fetchJson(url) {
-	const response = await fetch(url, {
-		redirect: "follow",
-		headers: buildHeaders(url)
-	});
-	if (!response.ok) throw new Error(`HTTP ${response.status} fetching ${url}`);
-	return response.json();
-}
-/**
-* Download a model with fallback URLs and optional SHA256 verification.
-* Legacy API preserved for backward compatibility -- delegates to downloadFile().
-*/
-async function downloadModel(options) {
-	const { url, fallbackUrls = [], destDir, filename, expectedSha256, onProgress } = options;
-	const fname = filename ?? url.split("/").pop() ?? "model.bin";
-	const destPath = path$40.join(destDir, fname);
-	if (fs$17.existsSync(destPath)) return {
-		filePath: destPath,
-		downloadedBytes: 0,
-		fromCache: true
-	};
-	fs$17.mkdirSync(destDir, { recursive: true });
-	const urls = [url, ...fallbackUrls];
-	let lastError = null;
-	for (const tryUrl of urls) try {
-		await downloadFile(tryUrl, destPath, onProgress);
-		if (expectedSha256) {
-			const hash = await computeSha256(destPath);
-			if (hash !== expectedSha256) {
-				fs$17.unlinkSync(destPath);
-				throw new Error(`SHA256 mismatch: expected ${expectedSha256}, got ${hash}`);
-			}
-		}
-		return {
-			filePath: destPath,
-			downloadedBytes: fs$17.statSync(destPath).size,
-			fromCache: false
-		};
-	} catch (e) {
-		lastError = e;
-		if (fs$17.existsSync(destPath)) fs$17.unlinkSync(destPath);
-	}
-	throw lastError ?? /* @__PURE__ */ new Error(`Failed to download model from ${url}`);
-}
-async function computeSha256(filePath) {
-	return new Promise((resolve, reject) => {
-		const hash = createHash("sha256");
-		const stream = fs$17.createReadStream(filePath);
-		stream.on("data", (chunk) => hash.update(chunk));
-		stream.on("end", () => resolve(hash.digest("hex")));
-		stream.on("error", reject);
-	});
-}
-/**
-* Download every file in a HuggingFace directory bundle (e.g.,
-* `.mlpackage` / OpenVINO IR pair) atomically. `knownFiles` lists the
-* relative paths inside the directory; the function fetches each from
-* `${url}/${file}` and renames the staging directory only on full
-* success. Mirrors `ModelDownloadService.downloadDirectory` but
-* exposed as a standalone for catalog-less callers.
-*/
-async function downloadDirectory(url, destDir, knownFiles, onProgress) {
-	const match = url.match(/huggingface\.co\/([^/]+\/[^/]+)\/resolve\/main\/(.+)/);
-	if (!match) throw new Error(`Cannot parse HuggingFace URL: ${url}`);
-	const [, repo, dirPath] = match;
-	const files = (knownFiles ?? []).map((f) => ({
-		relativePath: f,
-		fileUrl: `https://huggingface.co/${repo}/resolve/main/${dirPath}/${f}`
-	}));
-	if (files.length === 0) throw new Error(`Directory bundle requires explicit \`files\` list (got none for ${url})`);
-	const tmpDir = destDir + ".downloading";
-	fs$17.rmSync(tmpDir, {
-		recursive: true,
-		force: true
-	});
-	fs$17.mkdirSync(tmpDir, { recursive: true });
-	let totalDownloaded = 0;
-	try {
-		for (const file of files) {
-			const destPath = path$40.join(tmpDir, file.relativePath);
-			fs$17.mkdirSync(path$40.dirname(destPath), { recursive: true });
-			await downloadFile(file.fileUrl, destPath, (downloaded, _total) => {
-				onProgress?.(totalDownloaded + downloaded, void 0);
-			});
-			totalDownloaded += fs$17.statSync(destPath).size;
-		}
-		fs$17.rmSync(destDir, {
-			recursive: true,
-			force: true
-		});
-		fs$17.renameSync(tmpDir, destDir);
-	} catch (err) {
-		fs$17.rmSync(tmpDir, {
-			recursive: true,
-			force: true
-		});
-		throw err;
-	}
-}
-/**
-* Resolve a `ModelCatalogEntry` against `modelsDir`: download model file
-* (or directory bundle) + extra files (labels JSON, charset dict, …),
-* skip if already on disk. Returns the local model path.
-*/
-async function ensureModel(modelsDir, entry, format, onProgress) {
-	const formatEntry = entry.formats[format];
-	if (!formatEntry) throw new Error(`Model "${entry.id}" has no ${format} format. Available: ${Object.keys(entry.formats).join(", ")}`);
-	if (entry.extraFiles) for (const extra of entry.extraFiles) await downloadFile(extra.url, path$40.join(modelsDir, extra.filename));
-	const filename = formatEntry.url.split("/").pop() ?? `${entry.id}.${format}`;
-	const modelPath = path$40.join(modelsDir, filename);
-	if (fs$17.existsSync(modelPath)) if (formatEntry.isDirectory && !fs$17.existsSync(path$40.join(modelPath, "Manifest.json"))) fs$17.rmSync(modelPath, {
-		recursive: true,
-		force: true
-	});
-	else return modelPath;
-	fs$17.mkdirSync(modelsDir, { recursive: true });
-	if (formatEntry.isDirectory) await downloadDirectory(formatEntry.url, modelPath, formatEntry.files, onProgress);
-	else await downloadFile(formatEntry.url, modelPath, (downloaded, total) => onProgress?.(downloaded, total === 0 ? void 0 : total));
-	return modelPath;
-}
-/** Compute the on-disk path for a given model + format, even when not yet downloaded. */
-function getModelFilePath(modelsDir, entry, format) {
-	const formatEntry = entry.formats[format];
-	if (!formatEntry) return null;
-	const filename = formatEntry.url.split("/").pop() ?? `${entry.id}.${format}`;
-	return path$40.join(modelsDir, filename);
-}
-/** True iff the model file (or `Manifest.json` for directory bundles) exists and is non-empty. */
-function isModelDownloaded(modelsDir, entry, format) {
-	const formatEntry = entry.formats[format];
-	if (!formatEntry) return false;
-	const modelPath = getModelFilePath(modelsDir, entry, format);
-	if (!modelPath || !fs$17.existsSync(modelPath)) return false;
-	if (formatEntry.isDirectory) return fs$17.existsSync(path$40.join(modelPath, "Manifest.json"));
-	return fs$17.statSync(modelPath).size > 0;
-}
-/** Remove the on-disk model file/directory. Returns true if something was deleted. */
-function deleteModelFromDisk(modelsDir, entry, format) {
-	const modelPath = getModelFilePath(modelsDir, entry, format);
-	if (!modelPath || !fs$17.existsSync(modelPath)) return false;
-	if (entry.formats[format]?.isDirectory) fs$17.rmSync(modelPath, {
-		recursive: true,
-		force: true
-	});
-	else fs$17.unlinkSync(modelPath);
-	return true;
-}
-//#endregion
-//#region src/download/model-download-service.ts
-/**
-* Unified model download service.
-*
-* Handles downloading model files and extra files (labels, dicts) from a
-* catalog of ModelCatalogEntry items. Supports single-file models and
-* directory bundles (e.g., .mlpackage for CoreML).
-*
-* Addons use this via `context.models.ensure(modelId, format)`.
-*/
-var ModelDownloadService = class {
-	modelsDir;
-	onProgress;
-	catalog;
-	constructor(modelsDir, catalog, onProgress) {
-		this.modelsDir = modelsDir;
-		this.onProgress = onProgress;
-		const map = /* @__PURE__ */ new Map();
-		for (const entry of catalog) map.set(entry.id, entry);
-		this.catalog = map;
-	}
-	/**
-	* Ensure a model (and its extra files) is downloaded.
-	* Returns the local filesystem path to the model file/directory.
-	*/
-	async ensure(modelId, format) {
-		const entry = this.catalog.get(modelId);
-		if (!entry) throw new Error(`ModelDownloadService: unknown model "${modelId}"`);
-		const selectedFormat = format ?? this.pickDefaultFormat(entry);
-		const formatEntry = entry.formats[selectedFormat];
-		if (!formatEntry) throw new Error(`ModelDownloadService: model "${modelId}" has no ${selectedFormat} format`);
-		await this.ensureExtraFiles(modelId);
-		const modelPath = this.modelFilePath(entry, selectedFormat);
-		if (fs$17.existsSync(modelPath)) if (formatEntry.isDirectory) if (!fs$17.existsSync(path$40.join(modelPath, "Manifest.json"))) fs$17.rmSync(modelPath, {
-			recursive: true,
-			force: true
-		});
-		else return modelPath;
-		else return modelPath;
-		fs$17.mkdirSync(this.modelsDir, { recursive: true });
-		if (formatEntry.isDirectory) await this.downloadDirectory(formatEntry.url, modelPath, formatEntry.files, modelId);
-		else await downloadFile(formatEntry.url, modelPath, this.onProgress ? (downloaded, total) => this.onProgress(modelId, downloaded, total) : void 0);
-		return modelPath;
-	}
-	/**
-	* Ensure extra files for a model are downloaded.
-	* Returns the local paths of all extra files.
-	*/
-	async ensureExtraFiles(modelId) {
-		const entry = this.catalog.get(modelId);
-		if (!entry) throw new Error(`ModelDownloadService: unknown model "${modelId}"`);
-		const extras = entry.extraFiles;
-		if (!extras || extras.length === 0) return [];
-		const paths = [];
-		for (const extra of extras) {
-			const destPath = path$40.join(this.modelsDir, extra.filename);
-			await downloadFile(extra.url, destPath);
-			paths.push(destPath);
-		}
-		return paths;
-	}
-	/** Absolute path to the shared models directory. */
-	getModelsDir() {
-		return this.modelsDir;
-	}
-	/** Check if a model file is already present on disk. */
-	isDownloaded(modelId, format) {
-		const entry = this.catalog.get(modelId);
-		if (!entry) return false;
-		const selectedFormat = format ?? this.pickDefaultFormat(entry);
-		const formatEntry = entry.formats[selectedFormat];
-		if (!formatEntry) return false;
-		const modelPath = this.modelFilePath(entry, selectedFormat);
-		if (!fs$17.existsSync(modelPath)) return false;
-		if (formatEntry.isDirectory) return fs$17.existsSync(path$40.join(modelPath, "Manifest.json"));
-		return fs$17.statSync(modelPath).size > 0;
-	}
-	/** Get the catalog entry for a model by ID. */
-	getEntry(modelId) {
-		return this.catalog.get(modelId);
-	}
-	pickDefaultFormat(entry) {
-		for (const fmt of [
-			"onnx",
-			"coreml",
-			"openvino",
-			"tflite",
-			"pt"
-		]) if (entry.formats[fmt]) return fmt;
-		const first = Object.keys(entry.formats)[0];
-		if (first) return first;
-		throw new Error(`ModelDownloadService: model "${entry.id}" has no formats`);
-	}
-	modelFilePath(entry, format) {
-		const formatEntry = entry.formats[format];
-		if (!formatEntry) throw new Error(`Model ${entry.id} has no ${format} format`);
-		const urlParts = formatEntry.url.split("/");
-		const filename = urlParts[urlParts.length - 1] ?? `${entry.id}.${format}`;
-		return path$40.join(this.modelsDir, filename);
-	}
-	/**
-	* Download a directory bundle (e.g., .mlpackage) from HuggingFace.
-	* ATOMIC: downloads to temp dir, renames only on complete success.
-	*/
-	async downloadDirectory(url, destDir, knownFiles, _modelId) {
-		const match = url.match(/huggingface\.co\/([^/]+\/[^/]+)\/resolve\/main\/(.+)/);
-		if (!match) throw new Error(`Cannot parse HuggingFace URL: ${url}`);
-		const [, repo, dirPath] = match;
-		let filesToDownload;
-		if (knownFiles && knownFiles.length > 0) filesToDownload = knownFiles.map((f) => ({
-			relativePath: f,
-			fileUrl: `https://huggingface.co/${repo}/resolve/main/${dirPath}/${f}`
-		}));
-		else {
-			const hfFiles = await this.listHfFiles(repo, dirPath);
-			if (hfFiles.length === 0) throw new Error(`No files found in HuggingFace directory: ${dirPath}`);
-			filesToDownload = hfFiles.map((f) => ({
-				relativePath: f.path.substring(dirPath.length + 1),
-				fileUrl: `https://huggingface.co/${repo}/resolve/main/${f.path}`
-			}));
-		}
-		const tmpDir = destDir + ".downloading";
-		fs$17.rmSync(tmpDir, {
-			recursive: true,
-			force: true
-		});
-		fs$17.mkdirSync(tmpDir, { recursive: true });
-		try {
-			for (const file of filesToDownload) {
-				const destPath = path$40.join(tmpDir, file.relativePath);
-				fs$17.mkdirSync(path$40.dirname(destPath), { recursive: true });
-				await downloadFile(file.fileUrl, destPath);
-			}
-			fs$17.rmSync(destDir, {
-				recursive: true,
-				force: true
-			});
-			fs$17.renameSync(tmpDir, destDir);
-		} catch (err) {
-			fs$17.rmSync(tmpDir, {
-				recursive: true,
-				force: true
-			});
-			throw err;
-		}
-	}
-	/** Recursively list all files in a HuggingFace directory via API. */
-	async listHfFiles(repo, dirPath) {
-		const entries = await fetchJson(`https://huggingface.co/api/models/${repo}/tree/main/${dirPath}`);
-		const files = [];
-		for (const entry of entries) if (entry.type === "file") files.push({
-			path: entry.path,
-			size: entry.size ?? entry.lfs?.size ?? 0
-		});
-		else if (entry.type === "directory") {
-			const subFiles = await this.listHfFiles(repo, entry.path);
-			files.push(...subFiles);
-		}
-		return files;
-	}
-};
-//#endregion
 //#region src/python/python-env-manager.ts
 var execFileAsync$2 = promisify(execFile);
 var PythonEnvManager = class {
@@ -8025,7 +7367,7 @@ var ConfigManager = class ConfigManager {
 	constructor(configPath) {
 		this.configPath = configPath;
 		const rawYaml = this.loadYaml();
-		const merged = this.applyEnvOverrides(asJsonObject(rawYaml) ?? {});
+		const merged = this.applyEnvOverrides(asJsonObject$1(rawYaml) ?? {});
 		this.bootstrapConfig = bootstrapSchema.parse(merged);
 		this.warnDefaultCredentials();
 		const dataPath = this.bootstrapConfig.server.dataPath ?? "camstack-data";
@@ -8080,9 +7422,9 @@ var ConfigManager = class ConfigManager {
 	*/
 	getSection(section) {
 		const merged = {};
-		const defaults = asJsonObject(this.getFromRuntimeDefaults(section));
+		const defaults = asJsonObject$1(this.getFromRuntimeDefaults(section));
 		if (defaults) Object.assign(merged, defaults);
-		const bootstrapSection = asJsonObject({ ...this.bootstrapConfig }[section]);
+		const bootstrapSection = asJsonObject$1({ ...this.bootstrapConfig }[section]);
 		if (bootstrapSection) Object.assign(merged, bootstrapSection);
 		if (this.settingsStore !== null) {
 			const nested = this.getNestedFromSystemSettings(section);
@@ -8101,7 +7443,7 @@ var ConfigManager = class ConfigManager {
 	/** Read all config for an addon from addon_settings. */
 	getAddonConfig(addonId) {
 		if (this.settingsStore !== null) return this.settingsStore.getAllAddon(addonId);
-		return asJsonObject(this.getFromBootstrap(`addons.${addonId}`)) ?? {};
+		return asJsonObject$1(this.getFromBootstrap(`addons.${addonId}`)) ?? {};
 	}
 	/** Write (bulk-replace) config for an addon to addon_settings. */
 	setAddonConfig(addonId, config) {
@@ -8339,8 +7681,8 @@ var ConfigManager = class ConfigManager {
 	update(section, data) {
 		if (!ConfigManager.BOOTSTRAP_SECTIONS.has(section)) throw new Error(`[ConfigManager] Section "${section}" is a runtime setting — use setSection() to persist via the settings-store, not update() which writes to config.yaml`);
 		let raw = {};
-		if (fs$17.existsSync(this.configPath)) raw = asJsonObject(load$1(fs$17.readFileSync(this.configPath, "utf-8"))) ?? {};
-		const existing = asJsonObject(raw[section]) ?? {};
+		if (fs$17.existsSync(this.configPath)) raw = asJsonObject$1(load$1(fs$17.readFileSync(this.configPath, "utf-8"))) ?? {};
+		const existing = asJsonObject$1(raw[section]) ?? {};
 		raw[section] = {
 			...existing,
 			...data
@@ -8441,13 +7783,13 @@ var ConfigManager = class ConfigManager {
 	loadRuntimeState() {
 		if (!fs$17.existsSync(this.runtimeStatePath)) return EMPTY_RUNTIME_STATE;
 		try {
-			const parsed = asJsonObject(parseJsonUnknown(fs$17.readFileSync(this.runtimeStatePath, "utf-8")));
+			const parsed = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(this.runtimeStatePath, "utf-8")));
 			if (parsed === null) return EMPTY_RUNTIME_STATE;
-			const systemActivation = asJsonObject(parsed.systemActivation) ?? {};
-			const deviceActivationRaw = asJsonObject(parsed.deviceActivation) ?? {};
+			const systemActivation = asJsonObject$1(parsed.systemActivation) ?? {};
+			const deviceActivationRaw = asJsonObject$1(parsed.deviceActivation) ?? {};
 			const deviceActivation = {};
 			for (const [deviceId, entry] of Object.entries(deviceActivationRaw)) {
-				const nested = asJsonObject(entry);
+				const nested = asJsonObject$1(entry);
 				if (nested === null) continue;
 				const bools = {};
 				for (const [k, v] of Object.entries(nested)) if (typeof v === "boolean") bools[k] = v;