@camstack/system 1.0.8 → 1.1.0

package/dist/addon-utils.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("./chunk-Cek0wNdY.js");
-const require_model_download_service = require("./model-download-service-JtVQtbb6.js");
+const require_model_download_service = require("./model-download-service-1eEOkNeS.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 exports.CustomActionRegistry = require_custom_action_registry.CustomActionRegistry;
 exports.ModelDownloadService = require_model_download_service.ModelDownloadService;

package/dist/addon-utils.mjs

@@ -1,3 +1,3 @@
-import { a as ensureModel, c as isModelDownloaded, l as createFileDataPlaneHandler, n as deleteModelFromDisk, r as downloadFile, t as ModelDownloadService } from "./model-download-service-C7AjBsX9.mjs";
+import { a as ensureModel, c as isModelDownloaded, l as createFileDataPlaneHandler, n as deleteModelFromDisk, r as downloadFile, t as ModelDownloadService } from "./model-download-service-RxAOiYvX.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 export { CustomActionRegistry, ModelDownloadService, createFileDataPlaneHandler, deleteModelFromDisk, downloadFile, ensureModel, isModelDownloaded };

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_model_download_service = require("./model-download-service-JtVQtbb6.js");
+const require_model_download_service = require("./model-download-service-1eEOkNeS.js");
 const require_resource_monitor = require("./resource-monitor-DNNomR-i.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
@@ -3284,6 +3284,66 @@ var AddonInstaller = class AddonInstaller {
 		node_fs.writeFileSync(tgzPath, buf);
 		return tgzPath;
 	}
+	/**
+	* Evict an existing install dir by atomic rename-aside, then best-effort
+	* delete the aside copy.
+	*
+	* Why not a plain `fs.promises.rm(targetDir, {recursive})`: during a
+	* `camstack deploy` the addon's live runner still holds its native
+	* prebuilds (`.node`/`.so`) open. On the hub's shfs/FUSE `/data/addons`,
+	* a recursive rm of a held subdir fails `ENOTEMPTY` mid-walk and leaves
+	* the dir gutted. A rename only touches the dirent (metadata), so it
+	* succeeds with the inodes still open — the old runner keeps its fds on
+	* the moved inodes until it restarts.
+	*
+	* The aside copy is removed best-effort: the held native libs are only
+	* released once the post-install `restartAddon` recycles the runner, so a
+	* failure to delete it now must NOT fail the install. Any residue is swept
+	* on the next deploy.
+	*/
+	async evictInstallDir(targetDir) {
+		if (!node_fs.existsSync(targetDir)) return;
+		const graveyard = node_path.join(this.addonsDir, ".evicting");
+		ensureDir(graveyard);
+		await this.sweepGraveyard(graveyard);
+		const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+		const flatName = node_path.relative(this.addonsDir, targetDir).replace(/[/\\]/g, "-");
+		const asideDir = node_path.join(graveyard, `${flatName}-${ts}`);
+		try {
+			node_fs.renameSync(targetDir, asideDir);
+		} catch (renameErr) {
+			if (renameErr.code === "EXDEV") {
+				await node_fs.promises.rm(targetDir, {
+					recursive: true,
+					force: true
+				});
+				return;
+			}
+			throw renameErr;
+		}
+		await node_fs.promises.rm(asideDir, {
+			recursive: true,
+			force: true
+		}).catch((cleanupErr) => {
+			this.logger.debug("evictInstallDir: aside cleanup deferred (likely held open)", { meta: {
+				asideDir,
+				error: (0, _camstack_types.errMsg)(cleanupErr)
+			} });
+		});
+	}
+	/** Best-effort removal of leftover `.evicting/*` dirs from earlier deploys. */
+	async sweepGraveyard(graveyard) {
+		let entries;
+		try {
+			entries = node_fs.readdirSync(graveyard);
+		} catch {
+			return;
+		}
+		await Promise.all(entries.map((name) => node_fs.promises.rm(node_path.join(graveyard, name), {
+			recursive: true,
+			force: true
+		}).catch(() => void 0)));
+	}
 	/** Install addon from a tgz file (uploaded or downloaded) */
 	async installFromTgz(tgzPath) {
 		const tmpDir = node_fs.mkdtempSync(node_path.join(node_os.tmpdir(), "camstack-addon-install-"));
@@ -3301,10 +3361,7 @@ var AddonInstaller = class AddonInstaller {
 			if (!pkgView) throw new Error(`Invalid package.json at ${pkgJsonPath}`);
 			if (!pkgView.camstackAddons) throw new Error(`Package ${pkgView.name} has no camstack.addons manifest`);
 			const targetDir = node_path.join(this.addonsDir, pkgView.name);
-			await node_fs.promises.rm(targetDir, {
-				recursive: true,
-				force: true
-			});
+			await this.evictInstallDir(targetDir);
 			ensureDir(targetDir);
 			const sourceDir = node_path.dirname(pkgJsonPath);
 			const strippedManifest = stripCamstackDeps(pkgView.raw);
@@ -89904,6 +89961,15 @@ function normalizeHubUrl(raw, defaultPort) {
 	return `${/:\d+$/.test(hostPort) ? hostPort : `${hostPort}:${defaultPort}`}/${nodeId}`;
 }
 //#endregion
+//#region src/kernel/moleculer/addon-deploy-source.ts
+function isAddonDeploySource(v) {
+	if (!v || typeof v !== "object") return false;
+	const o = v;
+	if (o["kind"] === "npm") return typeof o["version"] === "string";
+	if (o["kind"] === "hub-http") return typeof o["url"] === "string" && typeof o["token"] === "string" && typeof o["sha256"] === "string" && typeof o["bytes"] === "number";
+	return false;
+}
+//#endregion
 //#region src/kernel/moleculer/core-cap-service.ts
 /**
 * Default Moleculer service name for the hub core-capability bridge.
@@ -91755,6 +91821,7 @@ Object.defineProperty(exports, "installPythonRequirements", {
 });
 exports.ipcChildLink = require_manifest_python_deps.ipcChildLink;
 exports.ipcParentLink = require_manifest_python_deps.ipcParentLink;
+exports.isAddonDeploySource = isAddonDeploySource;
 exports.isClusterSecretMismatchError = isClusterSecretMismatchError;
 exports.isInfraCapability = isInfraCapability;
 exports.isModelDownloaded = require_model_download_service.isModelDownloaded;

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { a as ensureModel, c as isModelDownloaded, d as createAuthenticatedFileServer, f as parseRangeHeader, i as downloadModel, l as createFileDataPlaneHandler, m as resolveFilePath, n as deleteModelFromDisk, o as fetchJson, p as parseTokenizedUrl, r as downloadFile, s as getModelFilePath, t as ModelDownloadService, u as contentTypeFor } from "./model-download-service-C7AjBsX9.mjs";
+import { a as ensureModel, c as isModelDownloaded, d as createAuthenticatedFileServer, f as parseRangeHeader, i as downloadModel, l as createFileDataPlaneHandler, m as resolveFilePath, n as deleteModelFromDisk, o as fetchJson, p as parseTokenizedUrl, r as downloadFile, s as getModelFilePath, t as ModelDownloadService, u as contentTypeFor } from "./model-download-service-RxAOiYvX.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BkP504Vq.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, t as SqliteSettingsBackend } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
@@ -3278,6 +3278,66 @@ var AddonInstaller = class AddonInstaller {
 		fs$17.writeFileSync(tgzPath, buf);
 		return tgzPath;
 	}
+	/**
+	* Evict an existing install dir by atomic rename-aside, then best-effort
+	* delete the aside copy.
+	*
+	* Why not a plain `fs.promises.rm(targetDir, {recursive})`: during a
+	* `camstack deploy` the addon's live runner still holds its native
+	* prebuilds (`.node`/`.so`) open. On the hub's shfs/FUSE `/data/addons`,
+	* a recursive rm of a held subdir fails `ENOTEMPTY` mid-walk and leaves
+	* the dir gutted. A rename only touches the dirent (metadata), so it
+	* succeeds with the inodes still open — the old runner keeps its fds on
+	* the moved inodes until it restarts.
+	*
+	* The aside copy is removed best-effort: the held native libs are only
+	* released once the post-install `restartAddon` recycles the runner, so a
+	* failure to delete it now must NOT fail the install. Any residue is swept
+	* on the next deploy.
+	*/
+	async evictInstallDir(targetDir) {
+		if (!fs$17.existsSync(targetDir)) return;
+		const graveyard = path$40.join(this.addonsDir, ".evicting");
+		ensureDir(graveyard);
+		await this.sweepGraveyard(graveyard);
+		const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+		const flatName = path$40.relative(this.addonsDir, targetDir).replace(/[/\\]/g, "-");
+		const asideDir = path$40.join(graveyard, `${flatName}-${ts}`);
+		try {
+			fs$17.renameSync(targetDir, asideDir);
+		} catch (renameErr) {
+			if (renameErr.code === "EXDEV") {
+				await fs$17.promises.rm(targetDir, {
+					recursive: true,
+					force: true
+				});
+				return;
+			}
+			throw renameErr;
+		}
+		await fs$17.promises.rm(asideDir, {
+			recursive: true,
+			force: true
+		}).catch((cleanupErr) => {
+			this.logger.debug("evictInstallDir: aside cleanup deferred (likely held open)", { meta: {
+				asideDir,
+				error: errMsg(cleanupErr)
+			} });
+		});
+	}
+	/** Best-effort removal of leftover `.evicting/*` dirs from earlier deploys. */
+	async sweepGraveyard(graveyard) {
+		let entries;
+		try {
+			entries = fs$17.readdirSync(graveyard);
+		} catch {
+			return;
+		}
+		await Promise.all(entries.map((name) => fs$17.promises.rm(path$40.join(graveyard, name), {
+			recursive: true,
+			force: true
+		}).catch(() => void 0)));
+	}
 	/** Install addon from a tgz file (uploaded or downloaded) */
 	async installFromTgz(tgzPath) {
 		const tmpDir = fs$17.mkdtempSync(path$40.join(os$17.tmpdir(), "camstack-addon-install-"));
@@ -3295,10 +3355,7 @@ var AddonInstaller = class AddonInstaller {
 			if (!pkgView) throw new Error(`Invalid package.json at ${pkgJsonPath}`);
 			if (!pkgView.camstackAddons) throw new Error(`Package ${pkgView.name} has no camstack.addons manifest`);
 			const targetDir = path$40.join(this.addonsDir, pkgView.name);
-			await fs$17.promises.rm(targetDir, {
-				recursive: true,
-				force: true
-			});
+			await this.evictInstallDir(targetDir);
 			ensureDir(targetDir);
 			const sourceDir = path$40.dirname(pkgJsonPath);
 			const strippedManifest = stripCamstackDeps(pkgView.raw);
@@ -89898,6 +89955,15 @@ function normalizeHubUrl(raw, defaultPort) {
 	return `${/:\d+$/.test(hostPort) ? hostPort : `${hostPort}:${defaultPort}`}/${nodeId}`;
 }
 //#endregion
+//#region src/kernel/moleculer/addon-deploy-source.ts
+function isAddonDeploySource(v) {
+	if (!v || typeof v !== "object") return false;
+	const o = v;
+	if (o["kind"] === "npm") return typeof o["version"] === "string";
+	if (o["kind"] === "hub-http") return typeof o["url"] === "string" && typeof o["token"] === "string" && typeof o["sha256"] === "string" && typeof o["bytes"] === "number";
+	return false;
+}
+//#endregion
 //#region src/kernel/moleculer/core-cap-service.ts
 /**
 * Default Moleculer service name for the hub core-capability bridge.
@@ -91492,4 +91558,4 @@ async function stageFrameworkLockstep(input) {
 	return results;
 }
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };

package/dist/kernel/addon-installer.d.ts

@@ -167,6 +167,26 @@ export declare class AddonInstaller {
      * the legacy fallback path remains the right answer for those.
      */
     private downloadNpmTarball;
+    /**
+     * Evict an existing install dir by atomic rename-aside, then best-effort
+     * delete the aside copy.
+     *
+     * Why not a plain `fs.promises.rm(targetDir, {recursive})`: during a
+     * `camstack deploy` the addon's live runner still holds its native
+     * prebuilds (`.node`/`.so`) open. On the hub's shfs/FUSE `/data/addons`,
+     * a recursive rm of a held subdir fails `ENOTEMPTY` mid-walk and leaves
+     * the dir gutted. A rename only touches the dirent (metadata), so it
+     * succeeds with the inodes still open — the old runner keeps its fds on
+     * the moved inodes until it restarts.
+     *
+     * The aside copy is removed best-effort: the held native libs are only
+     * released once the post-install `restartAddon` recycles the runner, so a
+     * failure to delete it now must NOT fail the install. Any residue is swept
+     * on the next deploy.
+     */
+    private evictInstallDir;
+    /** Best-effort removal of leftover `.evicting/*` dirs from earlier deploys. */
+    private sweepGraveyard;
     /** Install addon from a tgz file (uploaded or downloaded) */
     installFromTgz(tgzPath: string): Promise<{
         name: string;

package/dist/kernel/index.d.ts

@@ -27,6 +27,7 @@ export { buildStorageLocationRegistry } from './storage-location-registry.js';
 export type { StorageLocationRegistry } from './storage-location-registry.js';
 export { createBroker, deriveAgentListenPort } from './moleculer/broker-factory.js';
 export type { BrokerConfig } from './moleculer/broker-factory.js';
+export { type AddonDeploySource, isAddonDeploySource } from './moleculer/addon-deploy-source.js';
 export { createAddonService, validateProviderRegistrations, } from './moleculer/addon-service-factory.js';
 export { createCoreCapService, CORE_CAP_SERVICE_NAME } from './moleculer/core-cap-service.js';
 export type { CoreCapAction, CoreCapServiceOptions } from './moleculer/core-cap-service.js';

package/dist/kernel/moleculer/addon-deploy-source.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Where an agent should fetch an addon's bytes from for a `$agent.deploy`.
+ * `npm`: the agent runs its own AddonInstaller pull. `hub-http`: the agent
+ * streams the staged tgz from the hub's one-time-token bundle route.
+ */
+export type AddonDeploySource = {
+    readonly kind: 'npm';
+    readonly version: string;
+} | {
+    readonly kind: 'hub-http';
+    readonly url: string;
+    readonly token: string;
+    readonly sha256: string;
+    readonly bytes: number;
+};
+export declare function isAddonDeploySource(v: unknown): v is AddonDeploySource;

package/dist/{model-download-service-JtVQtbb6.js → model-download-service-1eEOkNeS.js}

@@ -301,6 +301,24 @@ function createFileDataPlaneHandler(opts) {
 }
 //#endregion
 //#region src/download/model-downloader.ts
+function isNonEmptyFile(filePath) {
+	return node_fs.existsSync(filePath) && node_fs.statSync(filePath).size > 0;
+}
+/**
+* Sibling files of a single-file (non-directory) format — extra files the
+* format needs, fetched from the same remote directory as `url` and stored
+* flat alongside the main file in `modelsDir`. Catalog-declared via
+* `formatEntry.files`, e.g. OpenVINO IR lists its `.bin` weights next to the
+* `.xml`. The downloader stays format-agnostic; the convention lives in the
+* catalog data (like `MLPACKAGE_FILES` for the directory case).
+*/
+function siblingFilesFor(formatEntry) {
+	return formatEntry.isDirectory ? [] : formatEntry.files ?? [];
+}
+/** Resolve a sibling's remote URL relative to the main file's directory. */
+function siblingUrl(mainUrl, sibling) {
+	return mainUrl.replace(/[^/]+$/, sibling);
+}
 /** Build fetch headers, including HF auth token for huggingface.co URLs */
 function buildHeaders(url) {
 	const headers = { "User-Agent": "CamStack/1.0" };
@@ -466,14 +484,18 @@ async function ensureModel(modelsDir, entry, format, onProgress) {
 	if (entry.extraFiles) for (const extra of entry.extraFiles) await downloadFile(extra.url, node_path.join(modelsDir, extra.filename));
 	const filename = formatEntry.url.split("/").pop() ?? `${entry.id}.${format}`;
 	const modelPath = node_path.join(modelsDir, filename);
+	const siblings = siblingFilesFor(formatEntry);
 	if (node_fs.existsSync(modelPath)) if (formatEntry.isDirectory && !node_fs.existsSync(node_path.join(modelPath, "Manifest.json"))) node_fs.rmSync(modelPath, {
 		recursive: true,
 		force: true
 	});
-	else return modelPath;
+	else if (siblings.some((f) => !isNonEmptyFile(node_path.join(modelsDir, f)))) {} else return modelPath;
 	node_fs.mkdirSync(modelsDir, { recursive: true });
 	if (formatEntry.isDirectory) await downloadDirectory(formatEntry.url, modelPath, formatEntry.files, onProgress);
-	else await downloadFile(formatEntry.url, modelPath, (downloaded, total) => onProgress?.(downloaded, total === 0 ? void 0 : total));
+	else {
+		await downloadFile(formatEntry.url, modelPath, (downloaded, total) => onProgress?.(downloaded, total === 0 ? void 0 : total));
+		for (const sibling of siblings) await downloadFile(siblingUrl(formatEntry.url, sibling), node_path.join(modelsDir, sibling));
+	}
 	return modelPath;
 }
 /** Compute the on-disk path for a given model + format, even when not yet downloaded. */
@@ -490,17 +512,25 @@ function isModelDownloaded(modelsDir, entry, format) {
 	const modelPath = getModelFilePath(modelsDir, entry, format);
 	if (!modelPath || !node_fs.existsSync(modelPath)) return false;
 	if (formatEntry.isDirectory) return node_fs.existsSync(node_path.join(modelPath, "Manifest.json"));
-	return node_fs.statSync(modelPath).size > 0;
+	if (node_fs.statSync(modelPath).size <= 0) return false;
+	return siblingFilesFor(formatEntry).every((f) => isNonEmptyFile(node_path.join(modelsDir, f)));
 }
 /** Remove the on-disk model file/directory. Returns true if something was deleted. */
 function deleteModelFromDisk(modelsDir, entry, format) {
 	const modelPath = getModelFilePath(modelsDir, entry, format);
 	if (!modelPath || !node_fs.existsSync(modelPath)) return false;
-	if (entry.formats[format]?.isDirectory) node_fs.rmSync(modelPath, {
+	const formatEntry = entry.formats[format];
+	if (formatEntry?.isDirectory) node_fs.rmSync(modelPath, {
 		recursive: true,
 		force: true
 	});
-	else node_fs.unlinkSync(modelPath);
+	else {
+		node_fs.unlinkSync(modelPath);
+		if (formatEntry) for (const sibling of siblingFilesFor(formatEntry)) {
+			const sibPath = node_path.join(modelsDir, sibling);
+			if (node_fs.existsSync(sibPath)) node_fs.unlinkSync(sibPath);
+		}
+	}
 	return true;
 }
 //#endregion

package/dist/{model-download-service-C7AjBsX9.mjs → model-download-service-RxAOiYvX.mjs}

@@ -300,6 +300,24 @@ function createFileDataPlaneHandler(opts) {
 }
 //#endregion
 //#region src/download/model-downloader.ts
+function isNonEmptyFile(filePath) {
+	return fs.existsSync(filePath) && fs.statSync(filePath).size > 0;
+}
+/**
+* Sibling files of a single-file (non-directory) format — extra files the
+* format needs, fetched from the same remote directory as `url` and stored
+* flat alongside the main file in `modelsDir`. Catalog-declared via
+* `formatEntry.files`, e.g. OpenVINO IR lists its `.bin` weights next to the
+* `.xml`. The downloader stays format-agnostic; the convention lives in the
+* catalog data (like `MLPACKAGE_FILES` for the directory case).
+*/
+function siblingFilesFor(formatEntry) {
+	return formatEntry.isDirectory ? [] : formatEntry.files ?? [];
+}
+/** Resolve a sibling's remote URL relative to the main file's directory. */
+function siblingUrl(mainUrl, sibling) {
+	return mainUrl.replace(/[^/]+$/, sibling);
+}
 /** Build fetch headers, including HF auth token for huggingface.co URLs */
 function buildHeaders(url) {
 	const headers = { "User-Agent": "CamStack/1.0" };
@@ -465,14 +483,18 @@ async function ensureModel(modelsDir, entry, format, onProgress) {
 	if (entry.extraFiles) for (const extra of entry.extraFiles) await downloadFile(extra.url, path$1.join(modelsDir, extra.filename));
 	const filename = formatEntry.url.split("/").pop() ?? `${entry.id}.${format}`;
 	const modelPath = path$1.join(modelsDir, filename);
+	const siblings = siblingFilesFor(formatEntry);
 	if (fs.existsSync(modelPath)) if (formatEntry.isDirectory && !fs.existsSync(path$1.join(modelPath, "Manifest.json"))) fs.rmSync(modelPath, {
 		recursive: true,
 		force: true
 	});
-	else return modelPath;
+	else if (siblings.some((f) => !isNonEmptyFile(path$1.join(modelsDir, f)))) {} else return modelPath;
 	fs.mkdirSync(modelsDir, { recursive: true });
 	if (formatEntry.isDirectory) await downloadDirectory(formatEntry.url, modelPath, formatEntry.files, onProgress);
-	else await downloadFile(formatEntry.url, modelPath, (downloaded, total) => onProgress?.(downloaded, total === 0 ? void 0 : total));
+	else {
+		await downloadFile(formatEntry.url, modelPath, (downloaded, total) => onProgress?.(downloaded, total === 0 ? void 0 : total));
+		for (const sibling of siblings) await downloadFile(siblingUrl(formatEntry.url, sibling), path$1.join(modelsDir, sibling));
+	}
 	return modelPath;
 }
 /** Compute the on-disk path for a given model + format, even when not yet downloaded. */
@@ -489,17 +511,25 @@ function isModelDownloaded(modelsDir, entry, format) {
 	const modelPath = getModelFilePath(modelsDir, entry, format);
 	if (!modelPath || !fs.existsSync(modelPath)) return false;
 	if (formatEntry.isDirectory) return fs.existsSync(path$1.join(modelPath, "Manifest.json"));
-	return fs.statSync(modelPath).size > 0;
+	if (fs.statSync(modelPath).size <= 0) return false;
+	return siblingFilesFor(formatEntry).every((f) => isNonEmptyFile(path$1.join(modelsDir, f)));
 }
 /** Remove the on-disk model file/directory. Returns true if something was deleted. */
 function deleteModelFromDisk(modelsDir, entry, format) {
 	const modelPath = getModelFilePath(modelsDir, entry, format);
 	if (!modelPath || !fs.existsSync(modelPath)) return false;
-	if (entry.formats[format]?.isDirectory) fs.rmSync(modelPath, {
+	const formatEntry = entry.formats[format];
+	if (formatEntry?.isDirectory) fs.rmSync(modelPath, {
 		recursive: true,
 		force: true
 	});
-	else fs.unlinkSync(modelPath);
+	else {
+		fs.unlinkSync(modelPath);
+		if (formatEntry) for (const sibling of siblingFilesFor(formatEntry)) {
+			const sibPath = path$1.join(modelsDir, sibling);
+			if (fs.existsSync(sibPath)) fs.unlinkSync(sibPath);
+		}
+	}
 	return true;
 }
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.0.8",
+  "version": "1.1.0",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",