@camstack/system 1.0.8 → 1.1.1

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_python_deps = require("./manifest-python-deps-BWURo7dc.js");
+const require_manifest_python_deps = require("./manifest-python-deps-RihGbmpb.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { $ as setWorkerNativeCapsChangeListener, A as createUdsLoggerWithControl, L as LocalChildClient, X as getWorkerNativeCapProvider, Z as getWorkerNativeCapSnapshot, i as createUdsAddonContext, mt as resolveAddonClass, pt as installManifestNativeDeps, t as installManifestPythonDeps, tt as validateProviderRegistrations } from "./manifest-python-deps-BcrTzHH_.mjs";
+import { $ as setWorkerNativeCapsChangeListener, A as createUdsLoggerWithControl, X as getWorkerNativeCapProvider, Z as getWorkerNativeCapSnapshot, i as createUdsAddonContext, j as LocalChildClient, mt as resolveAddonClass, pt as installManifestNativeDeps, t as installManifestPythonDeps, tt as validateProviderRegistrations } from "./manifest-python-deps-8Wvwz-d1.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { register } from "node:module";
 import * as fs from "node:fs";

package/dist/addon-utils.d.ts

@@ -14,7 +14,7 @@
  *
  * See memory: camstack_runner_ram_and_build_rootcause.
  */
-export { downloadFile, ensureModel, isModelDownloaded, deleteModelFromDisk, } from './download/model-downloader.js';
+export { downloadFile, ensureModel, isModelDownloaded, deleteModelFromDisk, collectModelFiles, getModelFilePath, } from './download/model-downloader.js';
 export { ModelDownloadService } from './download/model-download-service.js';
 export { createFileDataPlaneHandler } from './http/file-data-plane.js';
 export { CustomActionRegistry } from './kernel/custom-action-registry.js';

package/dist/addon-utils.js

@@ -1,11 +1,13 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("./chunk-Cek0wNdY.js");
-const require_model_download_service = require("./model-download-service-JtVQtbb6.js");
+const require_model_download_service = require("./model-download-service-D-Umz4-L.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 exports.CustomActionRegistry = require_custom_action_registry.CustomActionRegistry;
 exports.ModelDownloadService = require_model_download_service.ModelDownloadService;
+exports.collectModelFiles = require_model_download_service.collectModelFiles;
 exports.createFileDataPlaneHandler = require_model_download_service.createFileDataPlaneHandler;
 exports.deleteModelFromDisk = require_model_download_service.deleteModelFromDisk;
 exports.downloadFile = require_model_download_service.downloadFile;
 exports.ensureModel = require_model_download_service.ensureModel;
+exports.getModelFilePath = require_model_download_service.getModelFilePath;
 exports.isModelDownloaded = require_model_download_service.isModelDownloaded;

package/dist/addon-utils.mjs

@@ -1,3 +1,3 @@
-import { a as ensureModel, c as isModelDownloaded, l as createFileDataPlaneHandler, n as deleteModelFromDisk, r as downloadFile, t as ModelDownloadService } from "./model-download-service-C7AjBsX9.mjs";
+import { c as getModelFilePath, i as downloadFile, l as isModelDownloaded, n as collectModelFiles, o as ensureModel, r as deleteModelFromDisk, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-C-IHWnXx.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
-export { CustomActionRegistry, ModelDownloadService, createFileDataPlaneHandler, deleteModelFromDisk, downloadFile, ensureModel, isModelDownloaded };
+export { CustomActionRegistry, ModelDownloadService, collectModelFiles, createFileDataPlaneHandler, deleteModelFromDisk, downloadFile, ensureModel, getModelFilePath, isModelDownloaded };

package/dist/download/model-downloader.d.ts

@@ -1,4 +1,28 @@
-import { ModelCatalogEntry, ModelDownloadOptions, ModelDownloadResult, ModelFormat } from '@camstack/types';
+import { ModelCatalogEntry, ModelDownloadOptions, ModelDownloadResult, ModelFormat, ModelFormatEntry } from '@camstack/types';
+export declare function isNonEmptyFile(filePath: string): boolean;
+/**
+ * Sibling files of a single-file (non-directory) format — extra files the
+ * format needs, fetched from the same remote directory as `url` and stored
+ * flat alongside the main file in `modelsDir`. Catalog-declared via
+ * `formatEntry.files`, e.g. OpenVINO IR lists its `.bin` weights next to the
+ * `.xml`. The downloader stays format-agnostic; the convention lives in the
+ * catalog data (like `MLPACKAGE_FILES` for the directory case).
+ */
+export declare function siblingFilesFor(formatEntry: ModelFormatEntry): readonly string[];
+/** Resolve a sibling's remote URL relative to the main file's directory. */
+export declare function siblingUrl(mainUrl: string, sibling: string): string;
+/**
+ * The relative filenames a model format occupies under `modelsDir` — the main
+ * file (URL basename, or `${id}.${format}` fallback), its declared siblings
+ * (e.g. the OpenVINO `.bin` next to the `.xml`), and any `extraFiles`. For a
+ * directory bundle the single entry is the bundle dir itself (tar/extract
+ * recurse into it).
+ *
+ * Used by model distribution (P2): the hub tars exactly these names from its
+ * `modelsDir` and the agent untars them into its own `modelsDir`, so both ends
+ * agree on the on-disk layout without re-deriving it.
+ */
+export declare function collectModelFiles(entry: ModelCatalogEntry, format: ModelFormat): string[];
 /**
  * Download a single file from a URL to a destination path.
  * Uses native fetch() (Node 22+) which handles redirects natively.

package/dist/index.d.ts

@@ -9,7 +9,7 @@ export { proxyToUpstream } from './http/reverse-proxy.js';
 export type { ReverseProxyOptions } from './http/reverse-proxy.js';
 export { createFileDataPlaneHandler } from './http/file-data-plane.js';
 export type { FileDataPlaneOptions } from './http/file-data-plane.js';
-export { downloadModel, downloadFile, fetchJson, ensureModel, getModelFilePath, isModelDownloaded, deleteModelFromDisk, } from './download/model-downloader.js';
+export { downloadModel, downloadFile, fetchJson, ensureModel, getModelFilePath, isModelDownloaded, deleteModelFromDisk, collectModelFiles, } from './download/model-downloader.js';
 export type { DownloadProgressCallback } from './download/model-downloader.js';
 export { ModelDownloadService } from './download/model-download-service.js';
 export { PythonEnvManager } from './python/python-env-manager.js';

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_model_download_service = require("./model-download-service-JtVQtbb6.js");
+const require_model_download_service = require("./model-download-service-D-Umz4-L.js");
 const require_resource_monitor = require("./resource-monitor-DNNomR-i.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
@@ -20,7 +20,7 @@ const require_builtins_local_auth_local_auth_addon = require("./builtins/local-a
 require("./builtins/local-auth/index.js");
 const require_builtins_device_manager_device_manager_addon = require("./builtins/device-manager/device-manager.addon.js");
 require("./builtins/device-manager/index.js");
-const require_manifest_python_deps = require("./manifest-python-deps-BWURo7dc.js");
+const require_manifest_python_deps = require("./manifest-python-deps-RihGbmpb.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 const require_graceful_fs$1 = require("./graceful-fs-lg19SZNz.js");
 let _camstack_types_node = require("@camstack/types/node");
@@ -3284,6 +3284,66 @@ var AddonInstaller = class AddonInstaller {
 		node_fs.writeFileSync(tgzPath, buf);
 		return tgzPath;
 	}
+	/**
+	* Evict an existing install dir by atomic rename-aside, then best-effort
+	* delete the aside copy.
+	*
+	* Why not a plain `fs.promises.rm(targetDir, {recursive})`: during a
+	* `camstack deploy` the addon's live runner still holds its native
+	* prebuilds (`.node`/`.so`) open. On the hub's shfs/FUSE `/data/addons`,
+	* a recursive rm of a held subdir fails `ENOTEMPTY` mid-walk and leaves
+	* the dir gutted. A rename only touches the dirent (metadata), so it
+	* succeeds with the inodes still open — the old runner keeps its fds on
+	* the moved inodes until it restarts.
+	*
+	* The aside copy is removed best-effort: the held native libs are only
+	* released once the post-install `restartAddon` recycles the runner, so a
+	* failure to delete it now must NOT fail the install. Any residue is swept
+	* on the next deploy.
+	*/
+	async evictInstallDir(targetDir) {
+		if (!node_fs.existsSync(targetDir)) return;
+		const graveyard = node_path.join(this.addonsDir, ".evicting");
+		ensureDir(graveyard);
+		await this.sweepGraveyard(graveyard);
+		const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+		const flatName = node_path.relative(this.addonsDir, targetDir).replace(/[/\\]/g, "-");
+		const asideDir = node_path.join(graveyard, `${flatName}-${ts}`);
+		try {
+			node_fs.renameSync(targetDir, asideDir);
+		} catch (renameErr) {
+			if (renameErr.code === "EXDEV") {
+				await node_fs.promises.rm(targetDir, {
+					recursive: true,
+					force: true
+				});
+				return;
+			}
+			throw renameErr;
+		}
+		await node_fs.promises.rm(asideDir, {
+			recursive: true,
+			force: true
+		}).catch((cleanupErr) => {
+			this.logger.debug("evictInstallDir: aside cleanup deferred (likely held open)", { meta: {
+				asideDir,
+				error: (0, _camstack_types.errMsg)(cleanupErr)
+			} });
+		});
+	}
+	/** Best-effort removal of leftover `.evicting/*` dirs from earlier deploys. */
+	async sweepGraveyard(graveyard) {
+		let entries;
+		try {
+			entries = node_fs.readdirSync(graveyard);
+		} catch {
+			return;
+		}
+		await Promise.all(entries.map((name) => node_fs.promises.rm(node_path.join(graveyard, name), {
+			recursive: true,
+			force: true
+		}).catch(() => void 0)));
+	}
 	/** Install addon from a tgz file (uploaded or downloaded) */
 	async installFromTgz(tgzPath) {
 		const tmpDir = node_fs.mkdtempSync(node_path.join(node_os.tmpdir(), "camstack-addon-install-"));
@@ -3301,10 +3361,7 @@ var AddonInstaller = class AddonInstaller {
 			if (!pkgView) throw new Error(`Invalid package.json at ${pkgJsonPath}`);
 			if (!pkgView.camstackAddons) throw new Error(`Package ${pkgView.name} has no camstack.addons manifest`);
 			const targetDir = node_path.join(this.addonsDir, pkgView.name);
-			await node_fs.promises.rm(targetDir, {
-				recursive: true,
-				force: true
-			});
+			await this.evictInstallDir(targetDir);
 			ensureDir(targetDir);
 			const sourceDir = node_path.dirname(pkgJsonPath);
 			const strippedManifest = stripCamstackDeps(pkgView.raw);
@@ -89904,6 +89961,15 @@ function normalizeHubUrl(raw, defaultPort) {
 	return `${/:\d+$/.test(hostPort) ? hostPort : `${hostPort}:${defaultPort}`}/${nodeId}`;
 }
 //#endregion
+//#region src/kernel/moleculer/addon-deploy-source.ts
+function isAddonDeploySource(v) {
+	if (!v || typeof v !== "object") return false;
+	const o = v;
+	if (o["kind"] === "npm") return typeof o["version"] === "string";
+	if (o["kind"] === "hub-http") return typeof o["url"] === "string" && typeof o["token"] === "string" && typeof o["sha256"] === "string" && typeof o["bytes"] === "number";
+	return false;
+}
+//#endregion
 //#region src/kernel/moleculer/core-cap-service.ts
 /**
 * Default Moleculer service name for the hub core-capability bridge.
@@ -91636,6 +91702,7 @@ exports.capServiceName = require_manifest_python_deps.capServiceName;
 exports.classifyCapRoute = require_manifest_python_deps.classifyCapRoute;
 exports.clearPendingRestart = clearPendingRestart;
 exports.clusterSecretMatches = clusterSecretMatches;
+exports.collectModelFiles = require_model_download_service.collectModelFiles;
 exports.contentTypeFor = require_model_download_service.contentTypeFor;
 exports.copyDirRecursive = copyDirRecursive;
 exports.copyExtraFileDirs = copyExtraFileDirs;
@@ -91755,6 +91822,7 @@ Object.defineProperty(exports, "installPythonRequirements", {
 });
 exports.ipcChildLink = require_manifest_python_deps.ipcChildLink;
 exports.ipcParentLink = require_manifest_python_deps.ipcParentLink;
+exports.isAddonDeploySource = isAddonDeploySource;
 exports.isClusterSecretMismatchError = isClusterSecretMismatchError;
 exports.isInfraCapability = isInfraCapability;
 exports.isModelDownloaded = require_model_download_service.isModelDownloaded;

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { a as ensureModel, c as isModelDownloaded, d as createAuthenticatedFileServer, f as parseRangeHeader, i as downloadModel, l as createFileDataPlaneHandler, m as resolveFilePath, n as deleteModelFromDisk, o as fetchJson, p as parseTokenizedUrl, r as downloadFile, s as getModelFilePath, t as ModelDownloadService, u as contentTypeFor } from "./model-download-service-C7AjBsX9.mjs";
+import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-C-IHWnXx.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BkP504Vq.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, t as SqliteSettingsBackend } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
@@ -19,7 +19,7 @@ import { LocalAuthAddon, a as require_safe_buffer, i as AuthManager, n as ApiKey
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { A as createUdsLoggerWithControl, B as createLocalTransport, C as ipcParentLink, D as createUdsEventBus, E as createUdsEventBridge, F as CapRouteError, G as FrameDecoder, H as UdsLocalTransportServer, I as classifyCapRoute, J as buildUdsNativeCapProxy, K as encodeFrame, L as LocalChildClient, M as AGENT_CAP_FWD_SERVICE, N as CapRouteResolver, O as udsChildLogToWorkerEntry, P as callWithServiceDiscovery, Q as mountNativeCapService, R as LocalChildRegistry, S as ipcChildLink, T as createParentUnownedCallHandler, U as SocketChannel, V as UdsLocalTransportClient, W as localEndpointPath, Y as createBrokerDeviceManagerApi, _ as __resetCapUsageRegistryForTests, a as getWorkerDeviceRegistry, at as capBareAction, b as brokerTransportLink, c as setHubConnected, ct as deserializeTypedArrays, d as registerEventBusService, dt as CapabilityHandle, et as createAddonService, f as AddonDepsManager, ft as CapabilityUnavailableError, g as CapUsageRegistry, h as createHwAccelService, i as createUdsAddonContext, it as capActionSuffix, j as AGENT_CAP_FWD_ACTION, k as createUdsLogger, l as EVENT_TOPIC_PREFIX, lt as serializeTypedArrays, m as resolveHwAccel, mt as resolveAddonClass, n as adaptBrokerToCluster, nt as NATIVE_PROVIDER_SERVICE_INFIX, o as getOrInitReadinessRegistry, ot as capServiceName, p as createKernelHwAccel, pt as installManifestNativeDeps, q as buildNativeCapProxy, r as createAddonContext, rt as capActionName, s as getOrInitReadinessRegistryForClient, st as parseCapAction, t as installManifestPythonDeps, tt as validateProviderRegistrations, u as getBrokerEventBus, ut as DeviceRegistry, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-BcrTzHH_.mjs";
+import { A as createUdsLoggerWithControl, B as createLocalTransport, C as ipcParentLink, D as createUdsEventBus, E as createUdsEventBridge, F as AGENT_CAP_FWD_SERVICE, G as FrameDecoder, H as UdsLocalTransportServer, I as CapRouteResolver, J as buildUdsNativeCapProxy, K as encodeFrame, L as CapRouteError, M as LocalChildRegistry, N as UDS_NO_ROUTE_PREFIX, O as udsChildLogToWorkerEntry, P as AGENT_CAP_FWD_ACTION, Q as mountNativeCapService, R as classifyCapRoute, S as ipcChildLink, T as createParentUnownedCallHandler, U as SocketChannel, V as UdsLocalTransportClient, W as localEndpointPath, Y as createBrokerDeviceManagerApi, _ as __resetCapUsageRegistryForTests, a as getWorkerDeviceRegistry, at as capBareAction, b as brokerTransportLink, c as setHubConnected, ct as deserializeTypedArrays, d as registerEventBusService, dt as CapabilityHandle, et as createAddonService, f as AddonDepsManager, ft as CapabilityUnavailableError, g as CapUsageRegistry, h as createHwAccelService, i as createUdsAddonContext, it as capActionSuffix, j as LocalChildClient, k as createUdsLogger, l as EVENT_TOPIC_PREFIX, lt as serializeTypedArrays, m as resolveHwAccel, mt as resolveAddonClass, n as adaptBrokerToCluster, nt as NATIVE_PROVIDER_SERVICE_INFIX, o as getOrInitReadinessRegistry, ot as capServiceName, p as createKernelHwAccel, pt as installManifestNativeDeps, q as buildNativeCapProxy, r as createAddonContext, rt as capActionName, s as getOrInitReadinessRegistryForClient, st as parseCapAction, t as installManifestPythonDeps, tt as validateProviderRegistrations, u as getBrokerEventBus, ut as DeviceRegistry, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as callWithServiceDiscovery } from "./manifest-python-deps-8Wvwz-d1.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { n as require_src, t as require_graceful_fs } from "./graceful-fs-BoR9GuPS.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
@@ -3278,6 +3278,66 @@ var AddonInstaller = class AddonInstaller {
 		fs$17.writeFileSync(tgzPath, buf);
 		return tgzPath;
 	}
+	/**
+	* Evict an existing install dir by atomic rename-aside, then best-effort
+	* delete the aside copy.
+	*
+	* Why not a plain `fs.promises.rm(targetDir, {recursive})`: during a
+	* `camstack deploy` the addon's live runner still holds its native
+	* prebuilds (`.node`/`.so`) open. On the hub's shfs/FUSE `/data/addons`,
+	* a recursive rm of a held subdir fails `ENOTEMPTY` mid-walk and leaves
+	* the dir gutted. A rename only touches the dirent (metadata), so it
+	* succeeds with the inodes still open — the old runner keeps its fds on
+	* the moved inodes until it restarts.
+	*
+	* The aside copy is removed best-effort: the held native libs are only
+	* released once the post-install `restartAddon` recycles the runner, so a
+	* failure to delete it now must NOT fail the install. Any residue is swept
+	* on the next deploy.
+	*/
+	async evictInstallDir(targetDir) {
+		if (!fs$17.existsSync(targetDir)) return;
+		const graveyard = path$40.join(this.addonsDir, ".evicting");
+		ensureDir(graveyard);
+		await this.sweepGraveyard(graveyard);
+		const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+		const flatName = path$40.relative(this.addonsDir, targetDir).replace(/[/\\]/g, "-");
+		const asideDir = path$40.join(graveyard, `${flatName}-${ts}`);
+		try {
+			fs$17.renameSync(targetDir, asideDir);
+		} catch (renameErr) {
+			if (renameErr.code === "EXDEV") {
+				await fs$17.promises.rm(targetDir, {
+					recursive: true,
+					force: true
+				});
+				return;
+			}
+			throw renameErr;
+		}
+		await fs$17.promises.rm(asideDir, {
+			recursive: true,
+			force: true
+		}).catch((cleanupErr) => {
+			this.logger.debug("evictInstallDir: aside cleanup deferred (likely held open)", { meta: {
+				asideDir,
+				error: errMsg(cleanupErr)
+			} });
+		});
+	}
+	/** Best-effort removal of leftover `.evicting/*` dirs from earlier deploys. */
+	async sweepGraveyard(graveyard) {
+		let entries;
+		try {
+			entries = fs$17.readdirSync(graveyard);
+		} catch {
+			return;
+		}
+		await Promise.all(entries.map((name) => fs$17.promises.rm(path$40.join(graveyard, name), {
+			recursive: true,
+			force: true
+		}).catch(() => void 0)));
+	}
 	/** Install addon from a tgz file (uploaded or downloaded) */
 	async installFromTgz(tgzPath) {
 		const tmpDir = fs$17.mkdtempSync(path$40.join(os$17.tmpdir(), "camstack-addon-install-"));
@@ -3295,10 +3355,7 @@ var AddonInstaller = class AddonInstaller {
 			if (!pkgView) throw new Error(`Invalid package.json at ${pkgJsonPath}`);
 			if (!pkgView.camstackAddons) throw new Error(`Package ${pkgView.name} has no camstack.addons manifest`);
 			const targetDir = path$40.join(this.addonsDir, pkgView.name);
-			await fs$17.promises.rm(targetDir, {
-				recursive: true,
-				force: true
-			});
+			await this.evictInstallDir(targetDir);
 			ensureDir(targetDir);
 			const sourceDir = path$40.dirname(pkgJsonPath);
 			const strippedManifest = stripCamstackDeps(pkgView.raw);
@@ -89898,6 +89955,15 @@ function normalizeHubUrl(raw, defaultPort) {
 	return `${/:\d+$/.test(hostPort) ? hostPort : `${hostPort}:${defaultPort}`}/${nodeId}`;
 }
 //#endregion
+//#region src/kernel/moleculer/addon-deploy-source.ts
+function isAddonDeploySource(v) {
+	if (!v || typeof v !== "object") return false;
+	const o = v;
+	if (o["kind"] === "npm") return typeof o["version"] === "string";
+	if (o["kind"] === "hub-http") return typeof o["url"] === "string" && typeof o["token"] === "string" && typeof o["sha256"] === "string" && typeof o["bytes"] === "number";
+	return false;
+}
+//#endregion
 //#region src/kernel/moleculer/core-cap-service.ts
 /**
 * Default Moleculer service name for the hub core-capability bridge.
@@ -91492,4 +91558,4 @@ async function stageFrameworkLockstep(input) {
 	return results;
 }
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };

package/dist/kernel/addon-installer.d.ts

@@ -167,6 +167,26 @@ export declare class AddonInstaller {
      * the legacy fallback path remains the right answer for those.
      */
     private downloadNpmTarball;
+    /**
+     * Evict an existing install dir by atomic rename-aside, then best-effort
+     * delete the aside copy.
+     *
+     * Why not a plain `fs.promises.rm(targetDir, {recursive})`: during a
+     * `camstack deploy` the addon's live runner still holds its native
+     * prebuilds (`.node`/`.so`) open. On the hub's shfs/FUSE `/data/addons`,
+     * a recursive rm of a held subdir fails `ENOTEMPTY` mid-walk and leaves
+     * the dir gutted. A rename only touches the dirent (metadata), so it
+     * succeeds with the inodes still open — the old runner keeps its fds on
+     * the moved inodes until it restarts.
+     *
+     * The aside copy is removed best-effort: the held native libs are only
+     * released once the post-install `restartAddon` recycles the runner, so a
+     * failure to delete it now must NOT fail the install. Any residue is swept
+     * on the next deploy.
+     */
+    private evictInstallDir;
+    /** Best-effort removal of leftover `.evicting/*` dirs from earlier deploys. */
+    private sweepGraveyard;
     /** Install addon from a tgz file (uploaded or downloaded) */
     installFromTgz(tgzPath: string): Promise<{
         name: string;

package/dist/kernel/index.d.ts

@@ -27,6 +27,7 @@ export { buildStorageLocationRegistry } from './storage-location-registry.js';
 export type { StorageLocationRegistry } from './storage-location-registry.js';
 export { createBroker, deriveAgentListenPort } from './moleculer/broker-factory.js';
 export type { BrokerConfig } from './moleculer/broker-factory.js';
+export { type AddonDeploySource, isAddonDeploySource } from './moleculer/addon-deploy-source.js';
 export { createAddonService, validateProviderRegistrations, } from './moleculer/addon-service-factory.js';
 export { createCoreCapService, CORE_CAP_SERVICE_NAME } from './moleculer/core-cap-service.js';
 export type { CoreCapAction, CoreCapServiceOptions } from './moleculer/core-cap-service.js';

package/dist/kernel/moleculer/addon-deploy-source.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Where an agent should fetch an addon's bytes from for a `$agent.deploy`.
+ * `npm`: the agent runs its own AddonInstaller pull. `hub-http`: the agent
+ * streams the staged tgz from the hub's one-time-token bundle route.
+ */
+export type AddonDeploySource = {
+    readonly kind: 'npm';
+    readonly version: string;
+} | {
+    readonly kind: 'hub-http';
+    readonly url: string;
+    readonly token: string;
+    readonly sha256: string;
+    readonly bytes: number;
+};
+export declare function isAddonDeploySource(v: unknown): v is AddonDeploySource;

package/dist/kernel/moleculer/trpc-links.d.ts

@@ -19,6 +19,17 @@ import { LocalChildRegistry, CapCallInput } from '../transport/index.js';
 export interface LocalProviderResolver {
     /** First matching provider (active singleton or first collection member). */
     getByName(capabilityName: string): unknown | null;
+    /**
+     * The node this resolver's providers run on (e.g. `'hub'`, `'hub/model-studio'`,
+     * `'little-unraid/model-studio'`). When set, {@link localProviderLink} defers a
+     * call carrying an explicit `nodePin` to a DIFFERENT node instead of
+     * short-circuiting to a co-located provider — so the pin routes to the
+     * intended node (parent → `onUnownedCall` → CapRouteResolver). Symmetric to
+     * the LocalChildRegistry sibling-skip: an explicit pin must win over a
+     * same-named co-located provider. Omit for legacy/in-process callers that
+     * never pin a cap they themselves host.
+     */
+    localNodeId?: string;
 }
 /**
  * A single tRPC cap call observation. Recorded by `localProviderLink`

package/dist/kernel/transport/cap-route-resolver.d.ts

@@ -105,6 +105,21 @@ export declare const AGENT_CAP_FWD_SERVICE: "$agent-cap-fwd";
 /** The Moleculer action (service.action) for agent cap forwarding. */
 export declare const AGENT_CAP_FWD_ACTION: "$agent-cap-fwd.forward";
 export declare function extractDeviceId(args: unknown): number | undefined;
+/**
+ * Extract an inline `nodeId` string from a cap call's args — the per-call node
+ * pin a forked addon expresses by carrying `nodeId` in the input (the SAME way
+ * device-scoped caps carry `deviceId`, and the way the generated cap-router on
+ * the hub already honours an inline pin). Mirrors {@link extractDeviceId}.
+ *
+ * This is the routing source for hub→remote-node EXECUTION pinning (e.g. the
+ * benchmark addon running a synthetic/decoder workload ON a chosen agent). The
+ * out-of-band `nodePin(op.context)` path does NOT survive the forked addon →
+ * hub UDS link chain, so `onUnownedCall` reads the inline pin instead. Provider
+ * methods that don't declare `nodeId` simply ignore the extra field (they
+ * destructure the fields they need); methods that DO declare it (e.g.
+ * `getEngineProvisioning({nodeId})`) still receive it unchanged.
+ */
+export declare function extractNodeId(args: unknown): string | undefined;
 export declare class CapRouteResolver {
     private readonly hubNodeId;
     private readonly broker;