@camstack/system 1.0.6 → 1.0.8

package/dist/index.mjs

@@ -1,5 +1,6 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-ClDGFyf6.mjs";
+import { a as ensureModel, c as isModelDownloaded, d as createAuthenticatedFileServer, f as parseRangeHeader, i as downloadModel, l as createFileDataPlaneHandler, m as resolveFilePath, n as deleteModelFromDisk, o as fetchJson, p as parseTokenizedUrl, r as downloadFile, s as getModelFilePath, t as ModelDownloadService, u as contentTypeFor } from "./model-download-service-C7AjBsX9.mjs";
+import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BkP504Vq.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, t as SqliteSettingsBackend } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
@@ -18,23 +19,25 @@ import { LocalAuthAddon, a as require_safe_buffer, i as AuthManager, n as ApiKey
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { A as createUdsLoggerWithControl, B as createLocalTransport, C as ipcParentLink, D as createUdsEventBus, E as createUdsEventBridge, F as CapRouteError, G as FrameDecoder, H as UdsLocalTransportServer, I as classifyCapRoute, J as buildUdsNativeCapProxy, K as encodeFrame, L as LocalChildClient, M as AGENT_CAP_FWD_SERVICE, N as CapRouteResolver, O as udsChildLogToWorkerEntry, P as callWithServiceDiscovery, Q as mountNativeCapService, R as LocalChildRegistry, S as ipcChildLink, T as createParentUnownedCallHandler, U as SocketChannel, V as UdsLocalTransportClient, W as localEndpointPath, Y as createBrokerDeviceManagerApi, _ as __resetCapUsageRegistryForTests, a as getWorkerDeviceRegistry, at as capBareAction, b as brokerTransportLink, c as setHubConnected, ct as deserializeTypedArrays, d as registerEventBusService, dt as CustomActionRegistry, et as createAddonService, f as AddonDepsManager, ft as CapabilityHandle, g as CapUsageRegistry, h as createHwAccelService, ht as resolveAddonClass, i as createUdsAddonContext, it as capActionSuffix, j as AGENT_CAP_FWD_ACTION, k as createUdsLogger, l as EVENT_TOPIC_PREFIX, lt as serializeTypedArrays, m as resolveHwAccel, mt as installManifestNativeDeps, n as adaptBrokerToCluster, nt as NATIVE_PROVIDER_SERVICE_INFIX, o as getOrInitReadinessRegistry, ot as capServiceName, p as createKernelHwAccel, pt as CapabilityUnavailableError, q as buildNativeCapProxy, r as createAddonContext, rt as capActionName, s as getOrInitReadinessRegistryForClient, st as parseCapAction, t as installManifestPythonDeps, tt as validateProviderRegistrations, u as getBrokerEventBus, ut as DeviceRegistry, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-CXbKrOdk.mjs";
+import { A as createUdsLoggerWithControl, B as createLocalTransport, C as ipcParentLink, D as createUdsEventBus, E as createUdsEventBridge, F as CapRouteError, G as FrameDecoder, H as UdsLocalTransportServer, I as classifyCapRoute, J as buildUdsNativeCapProxy, K as encodeFrame, L as LocalChildClient, M as AGENT_CAP_FWD_SERVICE, N as CapRouteResolver, O as udsChildLogToWorkerEntry, P as callWithServiceDiscovery, Q as mountNativeCapService, R as LocalChildRegistry, S as ipcChildLink, T as createParentUnownedCallHandler, U as SocketChannel, V as UdsLocalTransportClient, W as localEndpointPath, Y as createBrokerDeviceManagerApi, _ as __resetCapUsageRegistryForTests, a as getWorkerDeviceRegistry, at as capBareAction, b as brokerTransportLink, c as setHubConnected, ct as deserializeTypedArrays, d as registerEventBusService, dt as CapabilityHandle, et as createAddonService, f as AddonDepsManager, ft as CapabilityUnavailableError, g as CapUsageRegistry, h as createHwAccelService, i as createUdsAddonContext, it as capActionSuffix, j as AGENT_CAP_FWD_ACTION, k as createUdsLogger, l as EVENT_TOPIC_PREFIX, lt as serializeTypedArrays, m as resolveHwAccel, mt as resolveAddonClass, n as adaptBrokerToCluster, nt as NATIVE_PROVIDER_SERVICE_INFIX, o as getOrInitReadinessRegistry, ot as capServiceName, p as createKernelHwAccel, pt as installManifestNativeDeps, q as buildNativeCapProxy, r as createAddonContext, rt as capActionName, s as getOrInitReadinessRegistryForClient, st as parseCapAction, t as installManifestPythonDeps, tt as validateProviderRegistrations, u as getBrokerEventBus, ut as DeviceRegistry, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-BcrTzHH_.mjs";
+import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { n as require_src, t as require_graceful_fs } from "./graceful-fs-BoR9GuPS.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
-import { createServer, request } from "node:http";
+import { request } from "node:http";
 import * as fs$17 from "node:fs";
-import { accessSync, constants, createReadStream, existsSync, mkdirSync, promises, readFileSync } from "node:fs";
+import { accessSync, constants, existsSync, mkdirSync, readFileSync } from "node:fs";
 import * as path$40 from "node:path";
-import path, { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
+import { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
 import { DATAPLANE_SECRET_HEADER, EventCategory, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, asJsonObject, asNumber, asString, createEvent, emitDownForOwnedCaps, errMsg, lifecycleJobSchema, parseJsonObject, parseJsonUnknown, readinessKey, scopeKey } from "@camstack/types";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
-import { execFile, execFileSync, spawn } from "node:child_process";
+import { execFile, spawn } from "node:child_process";
 import * as util$8 from "node:util";
 import { promisify } from "node:util";
 import * as vm from "node:vm";
 import * as os$17 from "node:os";
 import { lstat, readdir, readlink, realpath } from "node:fs/promises";
 import { z } from "zod";
+import { asJsonObject as asJsonObject$1, parseJsonUnknown as parseJsonUnknown$1 } from "@camstack/types/addon";
 import { lstatSync, readdir as readdir$1, readdirSync, readlinkSync, realpathSync } from "fs";
 import { EventEmitter } from "node:events";
 import Pe from "node:stream";
@@ -73,216 +76,6 @@ var EventBus = class {
 	}
 };
 //#endregion
-//#region src/http/authenticated-file-server.ts
-/**
-* Authenticated data-plane file-server — a shared host primitive for addons that
-* must serve files (media segments, scrub-frame stores, exported clips) directly
-* to browsers/players, node-direct (NOT through the hub tRPC, per the recording
-* design's "no media bytes traverse the hub").
-*
-* It bundles the three things every such server needs so addons don't re-roll
-* them: CORS (the data plane is cross-origin from the admin-ui — a native
-* `<video src>` is exempt but hls.js / WebCodecs fetch via XHR and are blocked
-* without it), HTTP `Range` (seeking / partial fetch), and a SCOPED TOKEN check.
-*
-* The token rides as the FIRST path segment (`<urlPrefix><token>/<relPath>`) so
-* a player resolving a manifest's RELATIVE child URIs carries it on every
-* sub-request automatically — no per-URI rewriting, no cookies/headers a dumb
-* player can't set. The caller supplies `verifyToken(token, relPath)`; the
-* primitive stays auth-scheme-agnostic.
-*
-* Pure helpers (`parseTokenizedUrl`, `resolveFilePath`, `contentTypeFor`,
-* `parseRangeHeader`) are exported for unit testing; `createAuthenticatedFileServer`
-* is the thin `node:http` glue.
-*/
-function corsHeaders(origin) {
-	return {
-		"access-control-allow-origin": origin,
-		"access-control-allow-methods": "GET, HEAD, OPTIONS",
-		"access-control-allow-headers": "range",
-		"access-control-expose-headers": "content-length, content-range, accept-ranges",
-		"access-control-max-age": "86400"
-	};
-}
-/**
-* Split a request URL (`<urlPrefix><token>/<relPath>`) into its token + rel
-* path. Returns null for anything outside the prefix or missing either part.
-* `relPath` is URL-decoded; a decode failure → null.
-*/
-function parseTokenizedUrl(urlPrefix, urlPath) {
-	if (!urlPath.startsWith(urlPrefix)) return null;
-	const after = urlPath.slice(urlPrefix.length);
-	const slash = after.indexOf("/");
-	if (slash <= 0) return null;
-	const token = after.slice(0, slash);
-	let rel;
-	try {
-		rel = decodeURIComponent(after.slice(slash + 1));
-	} catch {
-		return null;
-	}
-	if (rel.length === 0) return null;
-	return {
-		token,
-		rel
-	};
-}
-/**
-* Map a rel path to one candidate absolute path PER root, keeping only roots the
-* path stays within (traversal guard). The handler serves the first candidate
-* that exists. Rejects a path that escapes every root.
-*/
-function resolveFilePath(roots, rel) {
-	if (rel.length === 0) return { error: "forbidden" };
-	const candidates = [];
-	for (const rootDir of roots) {
-		const root = path.resolve(rootDir);
-		const abs = path.resolve(root, rel);
-		if (abs === root || abs.startsWith(root + path.sep)) candidates.push(abs);
-	}
-	if (candidates.length === 0) return { error: "forbidden" };
-	return { candidates };
-}
-var DEFAULT_CONTENT_TYPES = {
-	".m3u8": "application/vnd.apple.mpegurl",
-	".m4s": "video/mp4",
-	".mp4": "video/mp4",
-	".idx": "application/octet-stream",
-	".html": "text/html; charset=utf-8",
-	".js": "application/javascript; charset=utf-8",
-	".mjs": "application/javascript; charset=utf-8",
-	".css": "text/css; charset=utf-8",
-	".json": "application/json; charset=utf-8",
-	".map": "application/json; charset=utf-8",
-	".svg": "image/svg+xml",
-	".png": "image/png",
-	".jpg": "image/jpeg",
-	".jpeg": "image/jpeg",
-	".ico": "image/x-icon",
-	".woff2": "font/woff2",
-	".woff": "font/woff",
-	".ttf": "font/ttf"
-};
-function contentTypeFor(filePath, overrides) {
-	const ext = path.extname(filePath).toLowerCase();
-	return overrides?.[ext] ?? DEFAULT_CONTENT_TYPES[ext] ?? "application/octet-stream";
-}
-/** Parse an HTTP `Range` header against a known size. Null = serve whole file. */
-function parseRangeHeader(header, size) {
-	if (!header) return null;
-	const m = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
-	if (!m) return null;
-	const [, rawStart, rawEnd] = m;
-	if (rawStart === "" && rawEnd === "") return null;
-	let start;
-	let end;
-	if (rawStart === "") {
-		const n = Number(rawEnd);
-		if (n <= 0) return null;
-		start = Math.max(0, size - n);
-		end = size - 1;
-	} else {
-		start = Number(rawStart);
-		end = rawEnd === "" ? size - 1 : Number(rawEnd);
-	}
-	if (!Number.isFinite(start) || !Number.isFinite(end) || start > end || start >= size) return null;
-	return {
-		start,
-		end: Math.min(end, size - 1)
-	};
-}
-/**
-* Start an authenticated file-server. Returns the bound port so the caller can
-* build URLs. `getRoots`/`verifyToken` are invoked per request, so they always
-* reflect the live config.
-*/
-async function createAuthenticatedFileServer(opts) {
-	const cors = corsHeaders(opts.corsOrigin ?? "*");
-	const server = createServer((req, res) => {
-		handle(opts, cors, req, res);
-	});
-	await new Promise((resolve, reject) => {
-		server.once("error", reject);
-		server.listen(opts.port, () => resolve());
-	});
-	const addr = server.address();
-	return {
-		port: typeof addr === "object" && addr ? addr.port : opts.port,
-		close: () => new Promise((resolve) => server.close(() => resolve()))
-	};
-}
-async function handle(opts, cors, req, res) {
-	if (req.method === "OPTIONS") {
-		res.writeHead(204, cors).end();
-		return;
-	}
-	if (req.method !== "GET" && req.method !== "HEAD") {
-		res.writeHead(405, cors).end();
-		return;
-	}
-	const urlPath = (req.url ?? "").split("?")[0] ?? "";
-	const parsed = parseTokenizedUrl(opts.urlPrefix, urlPath);
-	if (!parsed) {
-		res.writeHead(403, cors).end();
-		return;
-	}
-	if (!opts.verifyToken(parsed.token, parsed.rel)) {
-		res.writeHead(401, cors).end();
-		return;
-	}
-	const resolved = resolveFilePath(opts.getRoots(), parsed.rel);
-	if ("error" in resolved) {
-		res.writeHead(403, cors).end();
-		return;
-	}
-	let absPath = null;
-	let size = 0;
-	for (const candidate of resolved.candidates) try {
-		const st = await promises.stat(candidate);
-		if (st.isFile()) {
-			absPath = candidate;
-			size = st.size;
-			break;
-		}
-	} catch {}
-	if (absPath === null) {
-		res.writeHead(404, cors).end();
-		return;
-	}
-	const baseHeaders = {
-		...cors,
-		"content-type": contentTypeFor(absPath, opts.contentTypes),
-		"accept-ranges": "bytes",
-		"cache-control": "no-cache"
-	};
-	const range = parseRangeHeader(req.headers.range, size);
-	if (range) {
-		res.writeHead(206, {
-			...baseHeaders,
-			"content-range": `bytes ${range.start}-${range.end}/${size}`,
-			"content-length": String(range.end - range.start + 1)
-		});
-		if (req.method === "HEAD") {
-			res.end();
-			return;
-		}
-		createReadStream(absPath, {
-			start: range.start,
-			end: range.end
-		}).pipe(res);
-		return;
-	}
-	res.writeHead(200, {
-		...baseHeaders,
-		"content-length": String(size)
-	});
-	if (req.method === "HEAD") {
-		res.end();
-		return;
-	}
-	createReadStream(absPath).pipe(res);
-}
-//#endregion
 //#region src/http/data-plane-registry.ts
 function trimSlashes(s) {
 	return s.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -383,459 +176,8 @@ function proxyToUpstream(opts) {
 	clientReq.pipe(upstream);
 }
 //#endregion
-//#region src/http/file-data-plane.ts
-/**
-* A ready-made data-plane request handler that serves files from a set of roots
-* with HTTP `Range`, for addons whose data-plane is "stream files off disk"
-* (recording playback, scrub-frame stores, exported clips).
-*
-* This is the addon-side handler the addon hands to `ctx.dataPlane.serve({ handler })`.
-* It receives the REAL Node `req`/`res`, resolves the request path against the
-* addon's roots (traversal-guarded), and streams the file. NO token and NO CORS:
-* the hub already authenticated the caller and the data plane is same-origin
-* through the hub's port. Reuses the shared Range/content-type/traversal helpers
-* so there is one implementation across the standalone file-server and this.
-*/
-/** Build a `(req, res)` handler that serves `getRoots()` files with Range. */
-function createFileDataPlaneHandler(opts) {
-	return async (req, res) => {
-		if (req.method !== "GET" && req.method !== "HEAD") {
-			res.writeHead(405).end();
-			return;
-		}
-		const urlPath = (req.url ?? "/").split("?")[0] ?? "/";
-		let rel;
-		try {
-			rel = decodeURIComponent(urlPath.replace(/^\/+/, ""));
-		} catch {
-			res.writeHead(400).end();
-			return;
-		}
-		if (rel.length === 0) {
-			res.writeHead(404).end();
-			return;
-		}
-		const resolved = resolveFilePath(opts.getRoots(), rel);
-		if ("error" in resolved) {
-			res.writeHead(403).end();
-			return;
-		}
-		let absPath = null;
-		let size = 0;
-		for (const candidate of resolved.candidates) try {
-			const st = await promises.stat(candidate);
-			if (st.isFile()) {
-				absPath = candidate;
-				size = st.size;
-				break;
-			}
-		} catch {}
-		if (absPath === null) {
-			res.writeHead(404).end();
-			return;
-		}
-		const baseHeaders = {
-			"content-type": contentTypeFor(absPath, opts.contentTypes),
-			"accept-ranges": "bytes",
-			"cache-control": "no-cache"
-		};
-		const range = parseRangeHeader(req.headers.range, size);
-		if (range) {
-			res.writeHead(206, {
-				...baseHeaders,
-				"content-range": `bytes ${range.start}-${range.end}/${size}`,
-				"content-length": String(range.end - range.start + 1)
-			});
-			if (req.method === "HEAD") {
-				res.end();
-				return;
-			}
-			createReadStream(absPath, {
-				start: range.start,
-				end: range.end
-			}).pipe(res);
-			return;
-		}
-		res.writeHead(200, {
-			...baseHeaders,
-			"content-length": String(size)
-		});
-		if (req.method === "HEAD") {
-			res.end();
-			return;
-		}
-		createReadStream(absPath).pipe(res);
-	};
-}
-//#endregion
-//#region src/download/model-downloader.ts
-/** Build fetch headers, including HF auth token for huggingface.co URLs */
-function buildHeaders(url) {
-	const headers = { "User-Agent": "CamStack/1.0" };
-	const hfToken = process.env["HF_TOKEN"] ?? process.env["HUGGING_FACE_HUB_TOKEN"];
-	if (hfToken && url.includes("huggingface.co")) headers["Authorization"] = `Bearer ${hfToken}`;
-	return headers;
-}
-/**
-* Download a single file from a URL to a destination path.
-* Uses native fetch() (Node 22+) which handles redirects natively.
-* Streams to disk with optional progress callback.
-* Returns the destination path. Skips download if file already exists.
-*/
-async function downloadFile(url, destPath, onProgress) {
-	if (fs$17.existsSync(destPath)) return destPath;
-	fs$17.mkdirSync(path$40.dirname(destPath), { recursive: true });
-	const tmpPath = destPath + ".downloading";
-	try {
-		const response = await fetch(url, {
-			redirect: "follow",
-			headers: buildHeaders(url)
-		});
-		if (!response.ok) throw new Error(`HTTP ${response.status} downloading ${url}`);
-		if (!response.body) throw new Error(`No response body from ${url}`);
-		const total = parseInt(response.headers.get("content-length") ?? "0", 10);
-		let downloaded = 0;
-		const fileStream = fs$17.createWriteStream(tmpPath);
-		const reader = response.body.getReader();
-		try {
-			for (;;) {
-				const { done, value } = await reader.read();
-				if (done || !value) break;
-				fileStream.write(value);
-				downloaded += value.length;
-				onProgress?.(downloaded, total);
-			}
-		} finally {
-			fileStream.end();
-			await new Promise((resolve, reject) => {
-				fileStream.on("finish", resolve);
-				fileStream.on("error", reject);
-			});
-		}
-		fs$17.renameSync(tmpPath, destPath);
-		return destPath;
-	} catch (err) {
-		try {
-			fs$17.unlinkSync(tmpPath);
-		} catch {}
-		throw err;
-	}
-}
-/**
-* Fetch JSON from a URL using native fetch().
-*/
-async function fetchJson(url) {
-	const response = await fetch(url, {
-		redirect: "follow",
-		headers: buildHeaders(url)
-	});
-	if (!response.ok) throw new Error(`HTTP ${response.status} fetching ${url}`);
-	return response.json();
-}
-/**
-* Download a model with fallback URLs and optional SHA256 verification.
-* Legacy API preserved for backward compatibility -- delegates to downloadFile().
-*/
-async function downloadModel(options) {
-	const { url, fallbackUrls = [], destDir, filename, expectedSha256, onProgress } = options;
-	const fname = filename ?? url.split("/").pop() ?? "model.bin";
-	const destPath = path$40.join(destDir, fname);
-	if (fs$17.existsSync(destPath)) return {
-		filePath: destPath,
-		downloadedBytes: 0,
-		fromCache: true
-	};
-	fs$17.mkdirSync(destDir, { recursive: true });
-	const urls = [url, ...fallbackUrls];
-	let lastError = null;
-	for (const tryUrl of urls) try {
-		await downloadFile(tryUrl, destPath, onProgress);
-		if (expectedSha256) {
-			const hash = await computeSha256(destPath);
-			if (hash !== expectedSha256) {
-				fs$17.unlinkSync(destPath);
-				throw new Error(`SHA256 mismatch: expected ${expectedSha256}, got ${hash}`);
-			}
-		}
-		return {
-			filePath: destPath,
-			downloadedBytes: fs$17.statSync(destPath).size,
-			fromCache: false
-		};
-	} catch (e) {
-		lastError = e;
-		if (fs$17.existsSync(destPath)) fs$17.unlinkSync(destPath);
-	}
-	throw lastError ?? /* @__PURE__ */ new Error(`Failed to download model from ${url}`);
-}
-async function computeSha256(filePath) {
-	return new Promise((resolve, reject) => {
-		const hash = createHash("sha256");
-		const stream = fs$17.createReadStream(filePath);
-		stream.on("data", (chunk) => hash.update(chunk));
-		stream.on("end", () => resolve(hash.digest("hex")));
-		stream.on("error", reject);
-	});
-}
-/**
-* Download every file in a HuggingFace directory bundle (e.g.,
-* `.mlpackage` / OpenVINO IR pair) atomically. `knownFiles` lists the
-* relative paths inside the directory; the function fetches each from
-* `${url}/${file}` and renames the staging directory only on full
-* success. Mirrors `ModelDownloadService.downloadDirectory` but
-* exposed as a standalone for catalog-less callers.
-*/
-async function downloadDirectory(url, destDir, knownFiles, onProgress) {
-	const match = url.match(/huggingface\.co\/([^/]+\/[^/]+)\/resolve\/main\/(.+)/);
-	if (!match) throw new Error(`Cannot parse HuggingFace URL: ${url}`);
-	const [, repo, dirPath] = match;
-	const files = (knownFiles ?? []).map((f) => ({
-		relativePath: f,
-		fileUrl: `https://huggingface.co/${repo}/resolve/main/${dirPath}/${f}`
-	}));
-	if (files.length === 0) throw new Error(`Directory bundle requires explicit \`files\` list (got none for ${url})`);
-	const tmpDir = destDir + ".downloading";
-	fs$17.rmSync(tmpDir, {
-		recursive: true,
-		force: true
-	});
-	fs$17.mkdirSync(tmpDir, { recursive: true });
-	let totalDownloaded = 0;
-	try {
-		for (const file of files) {
-			const destPath = path$40.join(tmpDir, file.relativePath);
-			fs$17.mkdirSync(path$40.dirname(destPath), { recursive: true });
-			await downloadFile(file.fileUrl, destPath, (downloaded, _total) => {
-				onProgress?.(totalDownloaded + downloaded, void 0);
-			});
-			totalDownloaded += fs$17.statSync(destPath).size;
-		}
-		fs$17.rmSync(destDir, {
-			recursive: true,
-			force: true
-		});
-		fs$17.renameSync(tmpDir, destDir);
-	} catch (err) {
-		fs$17.rmSync(tmpDir, {
-			recursive: true,
-			force: true
-		});
-		throw err;
-	}
-}
-/**
-* Resolve a `ModelCatalogEntry` against `modelsDir`: download model file
-* (or directory bundle) + extra files (labels JSON, charset dict, …),
-* skip if already on disk. Returns the local model path.
-*/
-async function ensureModel(modelsDir, entry, format, onProgress) {
-	const formatEntry = entry.formats[format];
-	if (!formatEntry) throw new Error(`Model "${entry.id}" has no ${format} format. Available: ${Object.keys(entry.formats).join(", ")}`);
-	if (entry.extraFiles) for (const extra of entry.extraFiles) await downloadFile(extra.url, path$40.join(modelsDir, extra.filename));
-	const filename = formatEntry.url.split("/").pop() ?? `${entry.id}.${format}`;
-	const modelPath = path$40.join(modelsDir, filename);
-	if (fs$17.existsSync(modelPath)) if (formatEntry.isDirectory && !fs$17.existsSync(path$40.join(modelPath, "Manifest.json"))) fs$17.rmSync(modelPath, {
-		recursive: true,
-		force: true
-	});
-	else return modelPath;
-	fs$17.mkdirSync(modelsDir, { recursive: true });
-	if (formatEntry.isDirectory) await downloadDirectory(formatEntry.url, modelPath, formatEntry.files, onProgress);
-	else await downloadFile(formatEntry.url, modelPath, (downloaded, total) => onProgress?.(downloaded, total === 0 ? void 0 : total));
-	return modelPath;
-}
-/** Compute the on-disk path for a given model + format, even when not yet downloaded. */
-function getModelFilePath(modelsDir, entry, format) {
-	const formatEntry = entry.formats[format];
-	if (!formatEntry) return null;
-	const filename = formatEntry.url.split("/").pop() ?? `${entry.id}.${format}`;
-	return path$40.join(modelsDir, filename);
-}
-/** True iff the model file (or `Manifest.json` for directory bundles) exists and is non-empty. */
-function isModelDownloaded(modelsDir, entry, format) {
-	const formatEntry = entry.formats[format];
-	if (!formatEntry) return false;
-	const modelPath = getModelFilePath(modelsDir, entry, format);
-	if (!modelPath || !fs$17.existsSync(modelPath)) return false;
-	if (formatEntry.isDirectory) return fs$17.existsSync(path$40.join(modelPath, "Manifest.json"));
-	return fs$17.statSync(modelPath).size > 0;
-}
-/** Remove the on-disk model file/directory. Returns true if something was deleted. */
-function deleteModelFromDisk(modelsDir, entry, format) {
-	const modelPath = getModelFilePath(modelsDir, entry, format);
-	if (!modelPath || !fs$17.existsSync(modelPath)) return false;
-	if (entry.formats[format]?.isDirectory) fs$17.rmSync(modelPath, {
-		recursive: true,
-		force: true
-	});
-	else fs$17.unlinkSync(modelPath);
-	return true;
-}
-//#endregion
-//#region src/download/model-download-service.ts
-/**
-* Unified model download service.
-*
-* Handles downloading model files and extra files (labels, dicts) from a
-* catalog of ModelCatalogEntry items. Supports single-file models and
-* directory bundles (e.g., .mlpackage for CoreML).
-*
-* Addons use this via `context.models.ensure(modelId, format)`.
-*/
-var ModelDownloadService = class {
-	modelsDir;
-	onProgress;
-	catalog;
-	constructor(modelsDir, catalog, onProgress) {
-		this.modelsDir = modelsDir;
-		this.onProgress = onProgress;
-		const map = /* @__PURE__ */ new Map();
-		for (const entry of catalog) map.set(entry.id, entry);
-		this.catalog = map;
-	}
-	/**
-	* Ensure a model (and its extra files) is downloaded.
-	* Returns the local filesystem path to the model file/directory.
-	*/
-	async ensure(modelId, format) {
-		const entry = this.catalog.get(modelId);
-		if (!entry) throw new Error(`ModelDownloadService: unknown model "${modelId}"`);
-		const selectedFormat = format ?? this.pickDefaultFormat(entry);
-		const formatEntry = entry.formats[selectedFormat];
-		if (!formatEntry) throw new Error(`ModelDownloadService: model "${modelId}" has no ${selectedFormat} format`);
-		await this.ensureExtraFiles(modelId);
-		const modelPath = this.modelFilePath(entry, selectedFormat);
-		if (fs$17.existsSync(modelPath)) if (formatEntry.isDirectory) if (!fs$17.existsSync(path$40.join(modelPath, "Manifest.json"))) fs$17.rmSync(modelPath, {
-			recursive: true,
-			force: true
-		});
-		else return modelPath;
-		else return modelPath;
-		fs$17.mkdirSync(this.modelsDir, { recursive: true });
-		if (formatEntry.isDirectory) await this.downloadDirectory(formatEntry.url, modelPath, formatEntry.files, modelId);
-		else await downloadFile(formatEntry.url, modelPath, this.onProgress ? (downloaded, total) => this.onProgress(modelId, downloaded, total) : void 0);
-		return modelPath;
-	}
-	/**
-	* Ensure extra files for a model are downloaded.
-	* Returns the local paths of all extra files.
-	*/
-	async ensureExtraFiles(modelId) {
-		const entry = this.catalog.get(modelId);
-		if (!entry) throw new Error(`ModelDownloadService: unknown model "${modelId}"`);
-		const extras = entry.extraFiles;
-		if (!extras || extras.length === 0) return [];
-		const paths = [];
-		for (const extra of extras) {
-			const destPath = path$40.join(this.modelsDir, extra.filename);
-			await downloadFile(extra.url, destPath);
-			paths.push(destPath);
-		}
-		return paths;
-	}
-	/** Absolute path to the shared models directory. */
-	getModelsDir() {
-		return this.modelsDir;
-	}
-	/** Check if a model file is already present on disk. */
-	isDownloaded(modelId, format) {
-		const entry = this.catalog.get(modelId);
-		if (!entry) return false;
-		const selectedFormat = format ?? this.pickDefaultFormat(entry);
-		const formatEntry = entry.formats[selectedFormat];
-		if (!formatEntry) return false;
-		const modelPath = this.modelFilePath(entry, selectedFormat);
-		if (!fs$17.existsSync(modelPath)) return false;
-		if (formatEntry.isDirectory) return fs$17.existsSync(path$40.join(modelPath, "Manifest.json"));
-		return fs$17.statSync(modelPath).size > 0;
-	}
-	/** Get the catalog entry for a model by ID. */
-	getEntry(modelId) {
-		return this.catalog.get(modelId);
-	}
-	pickDefaultFormat(entry) {
-		for (const fmt of [
-			"onnx",
-			"coreml",
-			"openvino",
-			"tflite",
-			"pt"
-		]) if (entry.formats[fmt]) return fmt;
-		const first = Object.keys(entry.formats)[0];
-		if (first) return first;
-		throw new Error(`ModelDownloadService: model "${entry.id}" has no formats`);
-	}
-	modelFilePath(entry, format) {
-		const formatEntry = entry.formats[format];
-		if (!formatEntry) throw new Error(`Model ${entry.id} has no ${format} format`);
-		const urlParts = formatEntry.url.split("/");
-		const filename = urlParts[urlParts.length - 1] ?? `${entry.id}.${format}`;
-		return path$40.join(this.modelsDir, filename);
-	}
-	/**
-	* Download a directory bundle (e.g., .mlpackage) from HuggingFace.
-	* ATOMIC: downloads to temp dir, renames only on complete success.
-	*/
-	async downloadDirectory(url, destDir, knownFiles, _modelId) {
-		const match = url.match(/huggingface\.co\/([^/]+\/[^/]+)\/resolve\/main\/(.+)/);
-		if (!match) throw new Error(`Cannot parse HuggingFace URL: ${url}`);
-		const [, repo, dirPath] = match;
-		let filesToDownload;
-		if (knownFiles && knownFiles.length > 0) filesToDownload = knownFiles.map((f) => ({
-			relativePath: f,
-			fileUrl: `https://huggingface.co/${repo}/resolve/main/${dirPath}/${f}`
-		}));
-		else {
-			const hfFiles = await this.listHfFiles(repo, dirPath);
-			if (hfFiles.length === 0) throw new Error(`No files found in HuggingFace directory: ${dirPath}`);
-			filesToDownload = hfFiles.map((f) => ({
-				relativePath: f.path.substring(dirPath.length + 1),
-				fileUrl: `https://huggingface.co/${repo}/resolve/main/${f.path}`
-			}));
-		}
-		const tmpDir = destDir + ".downloading";
-		fs$17.rmSync(tmpDir, {
-			recursive: true,
-			force: true
-		});
-		fs$17.mkdirSync(tmpDir, { recursive: true });
-		try {
-			for (const file of filesToDownload) {
-				const destPath = path$40.join(tmpDir, file.relativePath);
-				fs$17.mkdirSync(path$40.dirname(destPath), { recursive: true });
-				await downloadFile(file.fileUrl, destPath);
-			}
-			fs$17.rmSync(destDir, {
-				recursive: true,
-				force: true
-			});
-			fs$17.renameSync(tmpDir, destDir);
-		} catch (err) {
-			fs$17.rmSync(tmpDir, {
-				recursive: true,
-				force: true
-			});
-			throw err;
-		}
-	}
-	/** Recursively list all files in a HuggingFace directory via API. */
-	async listHfFiles(repo, dirPath) {
-		const entries = await fetchJson(`https://huggingface.co/api/models/${repo}/tree/main/${dirPath}`);
-		const files = [];
-		for (const entry of entries) if (entry.type === "file") files.push({
-			path: entry.path,
-			size: entry.size ?? entry.lfs?.size ?? 0
-		});
-		else if (entry.type === "directory") {
-			const subFiles = await this.listHfFiles(repo, entry.path);
-			files.push(...subFiles);
-		}
-		return files;
-	}
-};
-//#endregion
 //#region src/python/python-env-manager.ts
-var execFileAsync$2 = promisify(execFile);
+var execFileAsync$3 = promisify(execFile);
 var PythonEnvManager = class {
 	venvPath;
 	cachedProbe = null;
@@ -845,12 +187,12 @@ var PythonEnvManager = class {
 	async probe() {
 		if (this.cachedProbe) return this.cachedProbe;
 		for (const cmd of ["python3", "python"]) try {
-			const { stdout } = await execFileAsync$2(cmd, ["--version"]);
+			const { stdout } = await execFileAsync$3(cmd, ["--version"]);
 			const version = stdout.trim().replace("Python ", "");
 			const major = parseInt(version.split(".")[0] ?? "0", 10);
 			const minor = parseInt(version.split(".")[1] ?? "0", 10);
 			if (major < 3 || major === 3 && minor < 10) continue;
-			const { stdout: pathOut } = await execFileAsync$2(cmd, ["-c", "import sys; print(sys.executable)"]);
+			const { stdout: pathOut } = await execFileAsync$3(cmd, ["-c", "import sys; print(sys.executable)"]);
 			this.cachedProbe = {
 				available: true,
 				version,
@@ -866,13 +208,13 @@ var PythonEnvManager = class {
 	async ensure(options) {
 		const probe = await this.probe();
 		if (!probe.available || !probe.path) throw new Error("Python 3.10+ is required but not found on this system");
-		if (!fs$17.existsSync(path$40.join(this.venvPath, "bin", "python"))) await execFileAsync$2(probe.path, [
+		if (!fs$17.existsSync(path$40.join(this.venvPath, "bin", "python"))) await execFileAsync$3(probe.path, [
 			"-m",
 			"venv",
 			this.venvPath
 		]);
 		const venvPython = path$40.join(this.venvPath, "bin", "python");
-		if (options.packages.length > 0) await execFileAsync$2(venvPython, [
+		if (options.packages.length > 0) await execFileAsync$3(venvPython, [
 			"-m",
 			"pip",
 			"install",
@@ -2071,12 +1413,11 @@ var StorageManager = class {
 		return namespace ? this.createNamespacedLocation(location, namespace) : location;
 	}
 	createLegacyShim() {
-		const self = this;
 		return {
 			async initialize() {},
 			async shutdown() {},
-			getLocation(name) {
-				return self.getLocation(name);
+			getLocation: (name) => {
+				return this.getLocation(name);
 			}
 		};
 	}
@@ -2352,7 +1693,7 @@ function matchPath(pattern, path) {
 }
 //#endregion
 //#region src/tls/cert-manager.ts
-var execFileAsync$1 = promisify(execFile);
+var execFileAsync$2 = promisify(execFile);
 /**
 * Ensure a self-signed TLS certificate exists in the given directory.
 * Generates one if missing. Returns paths to cert and key files.
@@ -2389,7 +1730,7 @@ async function ensureTlsCert(dataDir, options) {
 	for (const dns of sanDns) sanParts.push(`DNS:${dns}`);
 	for (const ip of sanIps) sanParts.push(`IP:${ip}`);
 	const sanString = sanParts.join(",");
-	await execFileAsync$1("openssl", [
+	await execFileAsync$2("openssl", [
 		"req",
 		"-x509",
 		"-newkey",
@@ -3222,6 +2563,7 @@ var AddonEngineManager = class {
 };
 //#endregion
 //#region src/kernel/fs-utils.ts
+var execFileAsync$1 = promisify(execFile);
 /**
 * Ensure a directory exists (recursive).
 * Single source of truth — replaces scattered mkdirSync calls.
@@ -3230,18 +2572,20 @@ function ensureDir(dirPath) {
 	fs$17.mkdirSync(dirPath, { recursive: true });
 }
 /**
-* Copy a directory recursively.
-* Single source of truth — extracted from addon-installer + first-boot-installer.
+* Copy a directory recursively — ASYNC so it never blocks the event loop.
+*
+* The hub installs addons into `/data/addons`, which on Unraid is a slow
+* shfs/FUSE mount. The former synchronous `fs.copyFileSync`-per-file loop
+* blocked the Node event loop for the whole copy of a large bundle (e.g.
+* `addon-pipeline`), which froze the hub's HTTP listener mid-`camstack deploy`
+* (accept backlog piling up, existing connections stuck in CLOSE_WAIT). Using
+* `fs.promises.cp` keeps the I/O off the event loop. (Node ≥18 stable.)
 */
-function copyDirRecursive(src, dest) {
-	ensureDir(dest);
-	const entries = fs$17.readdirSync(src, { withFileTypes: true });
-	for (const entry of entries) {
-		const srcPath = path$40.join(src, entry.name);
-		const destPath = path$40.join(dest, entry.name);
-		if (entry.isDirectory()) copyDirRecursive(srcPath, destPath);
-		else fs$17.copyFileSync(srcPath, destPath);
-	}
+async function copyDirRecursive(src, dest) {
+	await fs$17.promises.cp(src, dest, {
+		recursive: true,
+		force: true
+	});
 }
 /**
 * Strip @camstack/* dependencies and devDependencies from a package.json object.
@@ -3271,7 +2615,7 @@ function stripCamstackDeps(pkg) {
 * Copies directories (not individual files) from source to destination.
 * Skips "dist" (already handled) and glob patterns.
 */
-function copyExtraFileDirs(pkgJson, sourceDir, destDir) {
+async function copyExtraFileDirs(pkgJson, sourceDir, destDir) {
 	const rawFiles = pkgJson.files;
 	if (!Array.isArray(rawFiles)) return;
 	for (const fileEntry of rawFiles) {
@@ -3280,11 +2624,11 @@ function copyExtraFileDirs(pkgJson, sourceDir, destDir) {
 		const srcPath = path$40.join(sourceDir, fileEntry);
 		if (!fs$17.existsSync(srcPath)) continue;
 		const destPath = path$40.join(destDir, fileEntry);
-		const stat = fs$17.statSync(srcPath);
-		if (stat.isDirectory()) copyDirRecursive(srcPath, destPath);
+		const stat = await fs$17.promises.stat(srcPath);
+		if (stat.isDirectory()) await copyDirRecursive(srcPath, destPath);
 		else if (stat.isFile()) {
 			ensureDir(path$40.dirname(destPath));
-			fs$17.copyFileSync(srcPath, destPath);
+			await fs$17.promises.copyFile(srcPath, destPath);
 		}
 	}
 }
@@ -3329,12 +2673,16 @@ function ensureLibraryBuilt(packageName, packagesDir) {
 /**
 * Install a single npm package into a target directory (package.json + dist/).
 * No validation on camstack.addons -- works for any @camstack/* package.
-* Uses synchronous child_process calls (suitable for first-boot and update paths).
+*
+* ASYNC: uses `execFile`/`fs.promises` throughout so a package install on a
+* live node never blocks the event loop (the `npm pack` + tar extract + copy to
+* the slow shfs/FUSE `/data` would otherwise freeze the HTTP listener). See
+* `copyDirRecursive` for the wedge this prevents.
 */
-function installPackageFromNpmSync(packageName, targetDir) {
-	const tmpDir = fs$17.mkdtempSync(path$40.join(os$17.tmpdir(), "camstack-install-"));
+async function installPackageFromNpm(packageName, targetDir) {
+	const tmpDir = await fs$17.promises.mkdtemp(path$40.join(os$17.tmpdir(), "camstack-install-"));
 	try {
-		const tgzFilename = execFileSync("npm", [
+		const { stdout } = await execFileAsync$1("npm", [
 			"pack",
 			packageName,
 			"--pack-destination",
@@ -3342,12 +2690,13 @@ function installPackageFromNpmSync(packageName, targetDir) {
 		], {
 			timeout: 12e4,
 			encoding: "utf-8"
-		}).trim().split("\n").pop()?.trim();
+		});
+		const tgzFilename = stdout.trim().split("\n").pop()?.trim();
 		if (!tgzFilename) throw new Error("npm pack produced no output");
 		const tgzPath = path$40.join(tmpDir, tgzFilename);
 		const extractDir = path$40.join(tmpDir, "extracted");
 		ensureDir(extractDir);
-		execFileSync("tar", [
+		await execFileAsync$1("tar", [
 			"-xzf",
 			tgzPath,
 			"-C",
@@ -3355,20 +2704,20 @@ function installPackageFromNpmSync(packageName, targetDir) {
 		], { timeout: 3e4 });
 		const packageSubDir = path$40.join(extractDir, "package");
 		const srcPkgJsonDir = fs$17.existsSync(path$40.join(packageSubDir, "package.json")) ? packageSubDir : extractDir;
-		fs$17.rmSync(targetDir, {
+		await fs$17.promises.rm(targetDir, {
 			recursive: true,
 			force: true
 		});
 		ensureDir(targetDir);
-		fs$17.copyFileSync(path$40.join(srcPkgJsonDir, "package.json"), path$40.join(targetDir, "package.json"));
+		await fs$17.promises.copyFile(path$40.join(srcPkgJsonDir, "package.json"), path$40.join(targetDir, "package.json"));
 		const distSrc = path$40.join(srcPkgJsonDir, "dist");
-		if (fs$17.existsSync(distSrc)) copyDirRecursive(distSrc, path$40.join(targetDir, "dist"));
+		if (fs$17.existsSync(distSrc)) await copyDirRecursive(distSrc, path$40.join(targetDir, "dist"));
 		try {
-			const npmPkg = asJsonObject(parseJsonUnknown(fs$17.readFileSync(path$40.join(srcPkgJsonDir, "package.json"), "utf-8")));
-			if (npmPkg) copyExtraFileDirs(npmPkg, srcPkgJsonDir, targetDir);
+			const npmPkg = asJsonObject(parseJsonUnknown(await fs$17.promises.readFile(path$40.join(srcPkgJsonDir, "package.json"), "utf-8")));
+			if (npmPkg) await copyExtraFileDirs(npmPkg, srcPkgJsonDir, targetDir);
 		} catch {}
 	} finally {
-		fs$17.rmSync(tmpDir, {
+		await fs$17.promises.rm(tmpDir, {
 			recursive: true,
 			force: true
 		});
@@ -3818,15 +3167,15 @@ var AddonInstaller = class AddonInstaller {
 		await this.ensureBuilt(packageName, sourceDir, pkgData);
 		const distDir = path$40.join(sourceDir, "dist");
 		if (!fs$17.existsSync(distDir)) throw new Error(`${packageName} has no dist/ after build`);
-		fs$17.rmSync(targetDir, {
+		await fs$17.promises.rm(targetDir, {
 			recursive: true,
 			force: true
 		});
 		ensureDir(targetDir);
-		fs$17.writeFileSync(path$40.join(targetDir, "package.json"), JSON.stringify(stripCamstackDeps(pkgData), null, 2));
-		copyDirRecursive(distDir, path$40.join(targetDir, "dist"));
-		copyExtraFileDirs(pkgData, sourceDir, targetDir);
-		fs$17.writeFileSync(path$40.join(targetDir, ".install-source"), "local");
+		await fs$17.promises.writeFile(path$40.join(targetDir, "package.json"), JSON.stringify(stripCamstackDeps(pkgData), null, 2));
+		await copyDirRecursive(distDir, path$40.join(targetDir, "dist"));
+		await copyExtraFileDirs(pkgData, sourceDir, targetDir);
+		await fs$17.promises.writeFile(path$40.join(targetDir, ".install-source"), "local");
 		const localPkgVersion = asString(pkgData.version, "0.0.0");
 		this.manifest.upsert(packageName, {
 			version: localPkgVersion,
@@ -3946,17 +3295,17 @@ var AddonInstaller = class AddonInstaller {
 			if (!pkgView) throw new Error(`Invalid package.json at ${pkgJsonPath}`);
 			if (!pkgView.camstackAddons) throw new Error(`Package ${pkgView.name} has no camstack.addons manifest`);
 			const targetDir = path$40.join(this.addonsDir, pkgView.name);
-			fs$17.rmSync(targetDir, {
+			await fs$17.promises.rm(targetDir, {
 				recursive: true,
 				force: true
 			});
 			ensureDir(targetDir);
 			const sourceDir = path$40.dirname(pkgJsonPath);
 			const strippedManifest = stripCamstackDeps(pkgView.raw);
-			fs$17.writeFileSync(path$40.join(targetDir, "package.json"), JSON.stringify(strippedManifest, null, 2));
+			await fs$17.promises.writeFile(path$40.join(targetDir, "package.json"), JSON.stringify(strippedManifest, null, 2));
 			const sourceDist = path$40.join(sourceDir, "dist");
-			if (fs$17.existsSync(sourceDist)) copyDirRecursive(sourceDist, path$40.join(targetDir, "dist"));
-			copyExtraFileDirs(pkgView.raw, sourceDir, targetDir);
+			if (fs$17.existsSync(sourceDist)) await copyDirRecursive(sourceDist, path$40.join(targetDir, "dist"));
+			await copyExtraFileDirs(pkgView.raw, sourceDir, targetDir);
 			const strippedRuntimeDeps = strippedManifest["dependencies"];
 			if (strippedRuntimeDeps != null && typeof strippedRuntimeDeps === "object" && Object.keys(strippedRuntimeDeps).length > 0) {
 				this.logger.info(`${pkgView.name} — installing runtime dependencies`, { meta: { targetDir } });
@@ -3980,7 +3329,7 @@ var AddonInstaller = class AddonInstaller {
 			try {
 				await installManifestNativeDeps(targetDir, pkgView.raw, this.logger, this.registry);
 			} catch (nativeErr) {
-				fs$17.rmSync(targetDir, {
+				await fs$17.promises.rm(targetDir, {
 					recursive: true,
 					force: true
 				});
@@ -3995,7 +3344,7 @@ var AddonInstaller = class AddonInstaller {
 				version: pkgView.version
 			};
 		} finally {
-			fs$17.rmSync(tmpDir, {
+			await fs$17.promises.rm(tmpDir, {
 				recursive: true,
 				force: true
 			});
@@ -4763,7 +4112,7 @@ var CapabilityRegistry = class CapabilityRegistry {
 		const bare = this.bareAddonId(addonId);
 		const nodeMap = this.singletonNodeOverrides.get(capabilityName);
 		if (nodeMap) {
-			for (const [nodeId, ov] of [...nodeMap]) if (ov === bare) nodeMap.delete(nodeId);
+			for (const [nodeId, ov] of Array.from(nodeMap)) if (ov === bare) nodeMap.delete(nodeId);
 			if (nodeMap.size === 0) this.singletonNodeOverrides.delete(capabilityName);
 		}
 		this.logger.info("Provider unregistered from capability", {
@@ -8025,7 +7374,7 @@ var ConfigManager = class ConfigManager {
 	constructor(configPath) {
 		this.configPath = configPath;
 		const rawYaml = this.loadYaml();
-		const merged = this.applyEnvOverrides(asJsonObject(rawYaml) ?? {});
+		const merged = this.applyEnvOverrides(asJsonObject$1(rawYaml) ?? {});
 		this.bootstrapConfig = bootstrapSchema.parse(merged);
 		this.warnDefaultCredentials();
 		const dataPath = this.bootstrapConfig.server.dataPath ?? "camstack-data";
@@ -8040,20 +7389,20 @@ var ConfigManager = class ConfigManager {
 	setSettingsStore(store) {
 		this.settingsStore = store;
 	}
-	get(path) {
-		return this.resolveConfigValue(path);
+	get(configPath) {
+		return this.resolveConfigValue(configPath);
 	}
-	resolveConfigValue(path) {
-		const bootstrapValue = this.getFromBootstrap(path);
+	resolveConfigValue(configPath) {
+		const bootstrapValue = this.getFromBootstrap(configPath);
 		if (bootstrapValue !== void 0) return bootstrapValue;
 		if (this.settingsStore !== null) {
-			const storeValue = this.settingsStore.getSystem(path);
+			const storeValue = this.settingsStore.getSystem(configPath);
 			if (storeValue !== void 0) return storeValue;
-			const nested = this.getNestedFromSystemSettings(path);
+			const nested = this.getNestedFromSystemSettings(configPath);
 			if (nested !== null) return nested;
 		}
-		if (path in RUNTIME_DEFAULTS) return RUNTIME_DEFAULTS[path];
-		return this.getFromRuntimeDefaults(path) ?? void 0;
+		if (configPath in RUNTIME_DEFAULTS) return RUNTIME_DEFAULTS[configPath];
+		return this.getFromRuntimeDefaults(configPath) ?? void 0;
 	}
 	/**
 	* Write a value to the settings-store.
@@ -8080,9 +7429,9 @@ var ConfigManager = class ConfigManager {
 	*/
 	getSection(section) {
 		const merged = {};
-		const defaults = asJsonObject(this.getFromRuntimeDefaults(section));
+		const defaults = asJsonObject$1(this.getFromRuntimeDefaults(section));
 		if (defaults) Object.assign(merged, defaults);
-		const bootstrapSection = asJsonObject({ ...this.bootstrapConfig }[section]);
+		const bootstrapSection = asJsonObject$1({ ...this.bootstrapConfig }[section]);
 		if (bootstrapSection) Object.assign(merged, bootstrapSection);
 		if (this.settingsStore !== null) {
 			const nested = this.getNestedFromSystemSettings(section);
@@ -8101,7 +7450,7 @@ var ConfigManager = class ConfigManager {
 	/** Read all config for an addon from addon_settings. */
 	getAddonConfig(addonId) {
 		if (this.settingsStore !== null) return this.settingsStore.getAllAddon(addonId);
-		return asJsonObject(this.getFromBootstrap(`addons.${addonId}`)) ?? {};
+		return asJsonObject$1(this.getFromBootstrap(`addons.${addonId}`)) ?? {};
 	}
 	/** Write (bulk-replace) config for an addon to addon_settings. */
 	setAddonConfig(addonId, config) {
@@ -8269,8 +7618,8 @@ var ConfigManager = class ConfigManager {
 		};
 		this.saveRuntimeState();
 	}
-	getBootstrap(path) {
-		return this.getFromBootstrap(path);
+	getBootstrap(configPath) {
+		return this.getFromBootstrap(configPath);
 	}
 	/** Features accessor -- reads from settings-store when available, falls back to RUNTIME_DEFAULTS */
 	get features() {
@@ -8339,8 +7688,8 @@ var ConfigManager = class ConfigManager {
 	update(section, data) {
 		if (!ConfigManager.BOOTSTRAP_SECTIONS.has(section)) throw new Error(`[ConfigManager] Section "${section}" is a runtime setting — use setSection() to persist via the settings-store, not update() which writes to config.yaml`);
 		let raw = {};
-		if (fs$17.existsSync(this.configPath)) raw = asJsonObject(load$1(fs$17.readFileSync(this.configPath, "utf-8"))) ?? {};
-		const existing = asJsonObject(raw[section]) ?? {};
+		if (fs$17.existsSync(this.configPath)) raw = asJsonObject$1(load$1(fs$17.readFileSync(this.configPath, "utf-8"))) ?? {};
+		const existing = asJsonObject$1(raw[section]) ?? {};
 		raw[section] = {
 			...existing,
 			...data
@@ -8360,8 +7709,8 @@ var ConfigManager = class ConfigManager {
 	* Deep-set a value in a nested plain object using a dot-notation path.
 	* Returns a new object (immutable).
 	*/
-	setNested(obj, path, value) {
-		const [head, ...rest] = path.split(".");
+	setNested(obj, configPath, value) {
+		const [head, ...rest] = configPath.split(".");
 		if (!head) return obj;
 		if (rest.length === 0) return {
 			...obj,
@@ -8401,8 +7750,8 @@ var ConfigManager = class ConfigManager {
 	warnDefaultCredentials() {
 		if (this.bootstrapConfig.auth.adminPassword === "changeme") console.warn("[ConfigManager] Warning: Using default admin password \"changeme\". Set auth.adminPassword in your config.yaml or the CAMSTACK_ADMIN_PASS env var.");
 	}
-	getFromBootstrap(path) {
-		const keys = path.split(".");
+	getFromBootstrap(configPath) {
+		const keys = configPath.split(".");
 		let current = this.bootstrapConfig;
 		for (const key of keys) {
 			if (!isRecord(current)) return void 0;
@@ -8410,8 +7759,8 @@ var ConfigManager = class ConfigManager {
 		}
 		return current;
 	}
-	getFromRuntimeDefaults(path) {
-		const prefix = path + ".";
+	getFromRuntimeDefaults(configPath) {
+		const prefix = configPath + ".";
 		const result = {};
 		let found = false;
 		for (const [key, value] of Object.entries(RUNTIME_DEFAULTS)) if (key.startsWith(prefix)) {
@@ -8426,10 +7775,10 @@ var ConfigManager = class ConfigManager {
 	* e.g. path='features' matches keys 'features.streaming', 'features.notifications', etc.
 	* Returns an object keyed by the sub-key, or undefined if nothing is found.
 	*/
-	getNestedFromSystemSettings(path) {
+	getNestedFromSystemSettings(configPath) {
 		if (this.settingsStore === null) return null;
 		const all = this.settingsStore.getAllSystem();
-		const prefix = path + ".";
+		const prefix = configPath + ".";
 		const result = {};
 		let found = false;
 		for (const [key, value] of Object.entries(all)) if (key.startsWith(prefix)) {
@@ -8441,13 +7790,13 @@ var ConfigManager = class ConfigManager {
 	loadRuntimeState() {
 		if (!fs$17.existsSync(this.runtimeStatePath)) return EMPTY_RUNTIME_STATE;
 		try {
-			const parsed = asJsonObject(parseJsonUnknown(fs$17.readFileSync(this.runtimeStatePath, "utf-8")));
+			const parsed = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(this.runtimeStatePath, "utf-8")));
 			if (parsed === null) return EMPTY_RUNTIME_STATE;
-			const systemActivation = asJsonObject(parsed.systemActivation) ?? {};
-			const deviceActivationRaw = asJsonObject(parsed.deviceActivation) ?? {};
+			const systemActivation = asJsonObject$1(parsed.systemActivation) ?? {};
+			const deviceActivationRaw = asJsonObject$1(parsed.deviceActivation) ?? {};
 			const deviceActivation = {};
 			for (const [deviceId, entry] of Object.entries(deviceActivationRaw)) {
-				const nested = asJsonObject(entry);
+				const nested = asJsonObject$1(entry);
 				if (nested === null) continue;
 				const bools = {};
 				for (const [k, v] of Object.entries(nested)) if (typeof v === "boolean") bools[k] = v;
@@ -91590,7 +90939,7 @@ function createProcessService(parentNodeId, dataDir, deps, parentTcpPort, parent
 						respawned.restartCount = prevRestartCount + 1;
 					});
 					restarted.push(name);
-				} catch (err) {
+				} catch {
 					failed.push(name);
 				}
 				return {
@@ -91985,8 +91334,8 @@ var LifecycleJobEngine = class {
 			} finally {
 				clearTimeout(timer);
 			}
-			if (packages.length === 0) throw new Error("stageFramework returned no packages");
 			const [firstPackage] = packages;
+			if (!firstPackage) throw new Error("stageFramework returned no packages");
 			this.advance(job.jobId, task, "staged", { stagedPath: firstPackage.stagedPath });
 			requestFrameworkSwap({
 				jobId: job.jobId,
@@ -92009,14 +91358,15 @@ var LifecycleJobEngine = class {
 	*/
 	async fetchAddonsBounded(job, addonTasks) {
 		const limit = Math.max(1, this.deps.fetchConcurrency ?? DEFAULT_FETCH_CONCURRENCY);
-		const outcomes = new Array(addonTasks.length);
+		const outcomes = Array.from({ length: addonTasks.length });
 		let nextIndex = 0;
 		const worker = async () => {
 			for (;;) {
 				const index = nextIndex;
 				nextIndex += 1;
-				if (index >= addonTasks.length) return;
-				outcomes[index] = await this.fetchAddonTask(job, addonTasks[index]);
+				const addonTask = addonTasks[index];
+				if (addonTask === void 0) return;
+				outcomes[index] = await this.fetchAddonTask(job, addonTask);
 			}
 		};
 		const workerCount = Math.min(limit, addonTasks.length);
@@ -92142,4 +91492,4 @@ async function stageFrameworkLockstep(input) {
 	return results;
 }
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpmSync, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };