@camstack/system 1.1.11 → 1.1.12

package/dist/index.mjs

@@ -18,7 +18,7 @@ import { LocalAuthAddon, a as require_ms, c as __esmMin, d as __toCommonJS, f as
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { A as createUdsLoggerWithControl, B as createLocalTransport, C as ipcParentLink, D as createUdsEventBus, E as createUdsEventBridge, F as AGENT_CAP_FWD_SERVICE, G as FrameDecoder, H as UdsLocalTransportServer, I as CapRouteResolver, J as buildUdsNativeCapProxy, K as encodeFrame, L as CapRouteError, M as LocalChildRegistry, N as UDS_NO_ROUTE_PREFIX, O as udsChildLogToWorkerEntry, P as AGENT_CAP_FWD_ACTION, Q as mountNativeCapService, R as classifyCapRoute, S as ipcChildLink, T as createParentUnownedCallHandler, U as SocketChannel, V as UdsLocalTransportClient, W as localEndpointPath, Y as createBrokerDeviceManagerApi, _ as __resetCapUsageRegistryForTests, a as getWorkerDeviceRegistry, at as capBareAction, b as brokerTransportLink, c as setHubConnected, ct as deserializeTypedArrays, d as registerEventBusService, dt as CapabilityHandle, et as createAddonService, f as AddonDepsManager, ft as CapabilityUnavailableError, g as CapUsageRegistry, h as createHwAccelService, i as createUdsAddonContext, it as capActionSuffix, j as LocalChildClient, k as createUdsLogger, l as EVENT_TOPIC_PREFIX, lt as serializeTypedArrays, m as resolveHwAccel, mt as resolveAddonClass, n as adaptBrokerToCluster, nt as NATIVE_PROVIDER_SERVICE_INFIX, o as getOrInitReadinessRegistry, ot as capServiceName, p as createKernelHwAccel, pt as installManifestNativeDeps, q as buildNativeCapProxy, r as createAddonContext, rt as capActionName, s as getOrInitReadinessRegistryForClient, st as parseCapAction, t as installManifestPythonDeps, tt as validateProviderRegistrations, u as getBrokerEventBus, ut as DeviceRegistry, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as callWithServiceDiscovery } from "./manifest-python-deps-1zTy3vXe.mjs";
+import { A as createUdsLoggerWithControl, B as createLocalTransport, C as ipcParentLink, D as createUdsEventBus, E as createUdsEventBridge, F as AGENT_CAP_FWD_SERVICE, G as FrameDecoder, H as UdsLocalTransportServer, I as CapRouteResolver, J as buildUdsNativeCapProxy, K as encodeFrame, L as CapRouteError, M as LocalChildRegistry, N as UDS_NO_ROUTE_PREFIX, O as udsChildLogToWorkerEntry, P as AGENT_CAP_FWD_ACTION, Q as mountNativeCapService, R as classifyCapRoute, S as ipcChildLink, T as createParentUnownedCallHandler, U as SocketChannel, V as UdsLocalTransportClient, W as localEndpointPath, Y as createBrokerDeviceManagerApi, _ as __resetCapUsageRegistryForTests, a as getWorkerDeviceRegistry, at as capBareAction, b as brokerTransportLink, c as setHubConnected, ct as deserializeTypedArrays, d as registerEventBusService, dt as CapabilityHandle, et as createAddonService, f as AddonDepsManager, ft as CapabilityUnavailableError, g as CapUsageRegistry, h as createHwAccelService, i as createUdsAddonContext, it as capActionSuffix, j as LocalChildClient, k as createUdsLogger, l as EVENT_TOPIC_PREFIX, lt as serializeTypedArrays, m as resolveHwAccel, mt as resolveAddonClass, n as adaptBrokerToCluster, nt as NATIVE_PROVIDER_SERVICE_INFIX, o as getOrInitReadinessRegistry, ot as capServiceName, p as createKernelHwAccel, pt as installManifestNativeDeps, q as buildNativeCapProxy, r as createAddonContext, rt as capActionName, s as getOrInitReadinessRegistryForClient, st as parseCapAction, t as installManifestPythonDeps, tt as validateProviderRegistrations, u as getBrokerEventBus, ut as DeviceRegistry, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as callWithServiceDiscovery } from "./manifest-python-deps-BfJEdXhi.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { request } from "node:http";
@@ -26,7 +26,7 @@ import * as fs$17 from "node:fs";
 import { accessSync, constants, existsSync, mkdirSync, readFileSync } from "node:fs";
 import * as path$39 from "node:path";
 import { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
-import { DATAPLANE_SECRET_HEADER, EventCategory, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, asJsonObject, asNumber, asString, createEvent, emitDownForOwnedCaps, errMsg, lifecycleJobSchema, parseJsonObject, parseJsonUnknown, readinessKey, scopeKey } from "@camstack/types";
+import { ALL_CAPABILITY_DEFINITIONS, DATAPLANE_SECRET_HEADER, EventCategory, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, asJsonObject, asNumber, asString, createEvent, emitDownForOwnedCaps, errMsg, expandCapMethods, lifecycleJobSchema, parseJsonObject, parseJsonUnknown, readinessKey, resolveCapMount, scopeKey } from "@camstack/types";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import { execFile, spawn } from "node:child_process";
 import * as util$10 from "node:util";
@@ -4888,6 +4888,219 @@ var CapabilityRegistry = class CapabilityRegistry {
 	}
 };
 //#endregion
+//#region src/kernel/cap-router-builder.ts
+/**
+* Runtime cap-router builder (BIG PLAN 2).
+*
+* Builds the per-capability tRPC routers DYNAMICALLY at hub boot by
+* iterating `ALL_CAPABILITY_DEFINITIONS`, instead of importing the
+* statically codegen'd `createCapRouter_<Cap>` value functions baked into
+* `@camstack/server`. Moving the CONSTRUCTION here means a capability
+* update ships via the framework plugin (`@camstack/types` +
+* `@camstack/system`, live-updated together) WITHOUT a `@camstack/server`
+* image rebuild.
+*
+* Type vs value split:
+*   - The runtime VALUE is built here, generically.
+*   - The static AppRouter TYPE stays codegen'd into `@camstack/types`
+*     (`generated/addon-api.ts`) via the `generated-cap-routers.ts`
+*     per-cap router factory TYPES. The server delegation site assigns
+*     this builder's output to that static type at the single documented
+*     boundary, so the SDK keeps full procedure inference.
+*
+* Behaviour MUST stay byte-identical to the codegen output
+* (`scripts/generate-cap-routers.ts`). The per-method procedure shape is
+* mechanically derived from each `cap.methods.*` (input/output zod schema
+* + kind) + the auto-injected `getStatus` / 3 settings-contribution
+* methods (via `expandCapMethods`). Provider resolution is derived from
+* the declarative `mount` hint (`resolveCapMount`) — the same decision the
+* codegen `generate-cap-mounts.ts` baked in.
+*
+* This module owns NO tRPC primitives of its own: `@camstack/system`
+* cannot import the server's `TrpcContext`-bound procedures. The server
+* passes them in via {@link CapRouterPrimitives} (the `t` half of the
+* `buildCapRouters(t, services)` contract), keeping the kernel free of any
+* backend coupling (self-sufficiency invariant).
+*/
+/** Auth level → procedure key. Mirrors codegen's AUTH_PROCEDURE_MAP. */
+function procedureKeyFor(auth) {
+	if (auth === "public") return "public";
+	if (auth === "admin" || auth === "superAdmin") return "admin";
+	return "protected";
+}
+/** Zod schema is `z.void()` — input carries no data. Mirrors codegen's isVoidInput. */
+function isVoidInput(schema) {
+	const def = schema._def;
+	return schema.constructor?.name === "ZodVoid" || def?.type === "void" || def?.typeName === "ZodVoid";
+}
+/** Zod schema is `z.object()` — supports `.loose()` for nodeId passthrough. Mirrors codegen's isObjectInput. */
+function isObjectInput(schema) {
+	const def = schema._def;
+	return schema.constructor?.name === "ZodObject" || def?.type === "object" || def?.typeName === "ZodObject";
+}
+/**
+* Apply `.loose()` to an object input schema when available (Zod 4) so the
+* router accepts the out-of-band `nodeId` / `addonId` selector keys
+* without stripping them — matching the codegen's `.input(schema.loose())`.
+* Falls back to the schema unchanged when `.loose()` is absent.
+*/
+function looseSchema(schema) {
+	const loose = schema.loose;
+	return typeof loose === "function" ? loose.call(schema) : schema;
+}
+function methodsFor(def) {
+	const effective = expandCapMethods(def);
+	return Object.entries(effective).map(([name, schema]) => {
+		const m = schema;
+		return {
+			name,
+			kind: m.kind ?? "query",
+			auth: m.auth ?? "protected",
+			schema: m,
+			isVoid: isVoidInput(m.input),
+			isObject: isObjectInput(m.input)
+		};
+	});
+}
+/** Strip a set of selector keys from an input object, returning a NEW object. */
+function stripKeys(input, keys) {
+	const src = input ?? {};
+	const rest = {};
+	const picked = {};
+	for (const [k, v] of Object.entries(src)) if (keys.includes(k)) picked[k] = v;
+	else rest[k] = v;
+	return {
+		rest,
+		picked
+	};
+}
+/**
+* Resolve the provider object for a NON-void/object method call, applying
+* the same local-first → remote-proxy routing the codegen's
+* `resolveProvider` does. `nodeId` undefined / `'hub'` resolves the local
+* provider; otherwise it crosses to the named node via the proxy.
+*/
+function resolveProviderForCall(capName, nodeId, getLocal, services) {
+	if (!nodeId || nodeId === "hub") {
+		const local = getLocal();
+		if (local !== null && local !== void 0) return local;
+		const proxy = services.remoteProxy(capName, "hub");
+		if (proxy) return proxy;
+		return services.noProvider(capName);
+	}
+	const proxy = services.remoteProxy(capName, nodeId);
+	if (!proxy) return services.noProvider(capName, nodeId);
+	return proxy;
+}
+/** Require a local provider (singleton-style, no node routing) or raise. */
+function requireLocal(capName, getLocal, services) {
+	const p = getLocal();
+	if (p === null || p === void 0) return services.noProvider(capName);
+	return p;
+}
+/**
+* Build a single capability's router (the runtime equivalent of one
+* codegen'd `createCapRouter_<Cap>`). Each method becomes a typed
+* procedure with the SAME routing branch the codegen emits.
+*/
+function buildOneCapRouter(def, primitives, services) {
+	const capName = def.name;
+	const mount = resolveCapMount(def);
+	const isCollection = mount.kind === "collection";
+	const nodeIdData = def.nodeIdMode === "data";
+	const procedures = {};
+	const getLocal = (ctx, addonId) => services.getLocalProvider(capName, mount.kind, ctx, addonId);
+	for (const method of methodsFor(def)) {
+		const base = primitives.procedures[procedureKeyFor(method.auth)];
+		const inputSchema = method.schema.input;
+		const outputSchema = method.schema.output;
+		if (method.kind === "subscription") {
+			procedures[method.name] = base.input(inputSchema).subscription(({ input, ctx }) => {
+				const provider = requireLocal(capName, () => getLocal(ctx), services);
+				return primitives.iterableSubscription((push) => {
+					const fn = provider[method.name];
+					const unsub = fn?.(input, push);
+					return typeof unsub === "function" ? unsub : () => {};
+				});
+			});
+			continue;
+		}
+		const procKind = method.kind === "mutation" ? "mutation" : "query";
+		if (method.isVoid) {
+			const voidSelector = isCollection ? z.object({
+				nodeId: z.string().optional(),
+				addonId: z.string().optional()
+			}).optional() : z.object({ nodeId: z.string().optional() }).optional();
+			procedures[method.name] = base.input(voidSelector).output(outputSchema)[procKind](({ input, ctx }) => {
+				const sel = input ?? {};
+				return (nodeIdData ? requireLocal(capName, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services) : resolveProviderForCall(capName, sel.nodeId, () => getLocal(ctx, isCollection ? sel.addonId : void 0), services))[method.name]?.();
+			});
+			continue;
+		}
+		if (method.isObject) {
+			const schema = nodeIdData ? inputSchema : looseSchema(inputSchema);
+			procedures[method.name] = base.input(schema).output(outputSchema)[procKind](({ input, ctx }) => {
+				if (nodeIdData) return requireLocal(capName, () => getLocal(ctx), services)[method.name]?.(input);
+				if (isCollection) {
+					const { rest, picked } = stripKeys(input, ["nodeId", "addonId"]);
+					const nodeId = typeof picked.nodeId === "string" ? picked.nodeId : void 0;
+					const addonId = typeof picked.addonId === "string" ? picked.addonId : void 0;
+					return resolveProviderForCall(capName, nodeId, () => getLocal(ctx, addonId), services)[method.name]?.(rest);
+				}
+				const { rest, picked } = stripKeys(input, ["nodeId"]);
+				return resolveProviderForCall(capName, typeof picked.nodeId === "string" ? picked.nodeId : void 0, () => getLocal(ctx), services)[method.name]?.(rest);
+			});
+			continue;
+		}
+		procedures[method.name] = base.input(inputSchema).output(outputSchema)[procKind](({ input, ctx }) => {
+			return requireLocal(capName, () => getLocal(ctx), services)[method.name]?.(input);
+		});
+	}
+	return primitives.router(procedures);
+}
+/** kebab-case → camelCase, matching the codegen router-map key naming. */
+function kebabToCamel(s) {
+	return s.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
+}
+/**
+* Mount kinds the runtime builder constructs. `service-backed` IS built
+* (the server supplies the provider via `getLocalProvider`); `custom` and
+* `skip` are NOT (the server's hand-written override fills the slot for
+* `custom`; `skip` is never mounted). `hub-only` is built but its remote
+* leg is `null` — handled by the server's `remoteProxy` returning null for
+* that cap.
+*/
+function isBuilderMounted(kind) {
+	return kind !== "custom" && kind !== "skip";
+}
+/**
+* Build the runtime cap-router map: `{ <camelCapName>: <router> }` for
+* every capability the builder owns. Caps with `mount.kind` `custom` /
+* `skip` are omitted (the server overrides / never mounts them). The
+* server spreads this BEFORE its hand-written overrides + core routers so
+* override-by-spread precedence is preserved.
+*/
+function buildCapRouters(primitives, services) {
+	const out = {};
+	for (const def of ALL_CAPABILITY_DEFINITIONS) {
+		if (!isBuilderMounted(resolveCapMount(def).kind)) continue;
+		const effective = expandCapMethods(def);
+		if (Object.keys(effective).length === 0) continue;
+		out[kebabToCamel(def.name)] = buildOneCapRouter(def, primitives, services);
+	}
+	return out;
+}
+/** The set of cap camelNames the builder owns (for drift checks / tests). */
+function builderMountedCapNames() {
+	const names = [];
+	for (const def of ALL_CAPABILITY_DEFINITIONS) {
+		if (!isBuilderMounted(resolveCapMount(def).kind)) continue;
+		if (Object.keys(expandCapMethods(def)).length === 0) continue;
+		names.push(kebabToCamel(def.name));
+	}
+	return names;
+}
+//#endregion
 //#region src/kernel/provider-kind-drift.ts
 /**
 * Compare a runtime registration hint against the authoritative cap
@@ -92962,4 +93175,4 @@ async function stageFrameworkLockstep(input) {
 	return results;
 }
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };

package/dist/kernel/cap-router-builder.d.ts

@@ -0,0 +1,78 @@
+import { CapabilityMountKind } from '@camstack/types';
+/**
+ * A tRPC-procedure-like builder. Mirrors the chainable surface the
+ * codegen emits (`procedure.input(...).output(...).query(...)`), kept
+ * structural so the server can pass its real `protectedProcedure` /
+ * `adminProcedure` / `publicProcedure` without this module importing
+ * `@trpc/server` context types.
+ */
+export interface ProcedureBuilder {
+    input(schema: unknown): ProcedureBuilder;
+    output(schema: unknown): ProcedureBuilder;
+    query(resolver: (opts: ProcedureResolverArgs) => unknown): unknown;
+    mutation(resolver: (opts: ProcedureResolverArgs) => unknown): unknown;
+    subscription(resolver: (opts: ProcedureResolverArgs) => unknown): unknown;
+}
+/** Args object tRPC hands a procedure resolver (input + ctx). */
+export interface ProcedureResolverArgs {
+    readonly input: unknown;
+    readonly ctx: unknown;
+}
+/** The `t`-half of `buildCapRouters(t, services)`: tRPC primitives the server owns. */
+export interface CapRouterPrimitives {
+    /** `t.router` — assembles a `Record<methodName, procedure>` into a router. */
+    readonly router: (procedures: Record<string, unknown>) => unknown;
+    /** Map of auth level → base procedure (`public`/`protected`/`admin`). */
+    readonly procedures: Readonly<Record<'public' | 'protected' | 'admin', ProcedureBuilder>>;
+    /**
+     * Wrap a push-based subscription into the async-generator tRPC v11
+     * expects. Identical to the server's `iterableSubscription`.
+     */
+    readonly iterableSubscription: <T>(subscribe: (push: (value: T) => void) => () => void) => AsyncGenerator<T>;
+}
+/** A method the runtime can call on a resolved provider object. */
+type ProviderMethod = (input?: unknown, push?: (value: unknown) => void) => unknown;
+type ResolvedProvider = Readonly<Record<string, ProviderMethod>>;
+/**
+ * Per-cap provider getter. `addonId` is only consulted for collection
+ * caps (selects a specific provider within the local collection); the
+ * server's `services`-backed resolution lives behind this closure so the
+ * builder never touches the registry or backend services directly.
+ */
+export type CapProviderGetter = (ctx: unknown, addonId?: string) => ResolvedProvider | null;
+/** Cross-node proxy factory — Moleculer-bridged provider for a remote node. */
+export type RemoteProxyFactory = (capName: string, nodeId: string) => ResolvedProvider | null;
+/**
+ * Everything the builder needs from the server to resolve a cap's
+ * provider object. The server supplies these closures; the builder owns
+ * the procedure shape + routing decision.
+ */
+export interface CapRouterServices {
+    /**
+     * Resolve the LOCAL provider for a cap given the effective mount kind.
+     * Returns null on miss (the procedure surfaces PRECONDITION_FAILED).
+     * For `service-backed` caps this calls the server-supplied service
+     * provider factory; for `singleton` / `device-native` / `collection`
+     * it goes through the registry.
+     */
+    readonly getLocalProvider: (capName: string, mountKind: CapabilityMountKind, ctx: unknown, addonId?: string) => ResolvedProvider | null;
+    /** Cross-node Moleculer-bridged proxy. */
+    readonly remoteProxy: RemoteProxyFactory;
+    /** Raise the canonical "no provider" tRPC error (server owns TRPCError). */
+    readonly noProvider: (capName: string, nodeId?: string) => never;
+    /** Raise the canonical "node routing unavailable" tRPC error. */
+    readonly noNodeRouting: (capName: string) => never;
+    /** Raise the canonical "bad request: missing field" error. */
+    readonly badRequest: (message: string) => never;
+}
+/**
+ * Build the runtime cap-router map: `{ <camelCapName>: <router> }` for
+ * every capability the builder owns. Caps with `mount.kind` `custom` /
+ * `skip` are omitted (the server overrides / never mounts them). The
+ * server spreads this BEFORE its hand-written overrides + core routers so
+ * override-by-spread precedence is preserved.
+ */
+export declare function buildCapRouters(primitives: CapRouterPrimitives, services: CapRouterServices): Record<string, unknown>;
+/** The set of cap camelNames the builder owns (for drift checks / tests). */
+export declare function builderMountedCapNames(): readonly string[];
+export {};

package/dist/kernel/index.d.ts

@@ -11,6 +11,8 @@ export { RESTART_MARKER_FILE, clearPendingRestart, getRestartMarkerPath, readPen
 export type { PendingRestartMarker, RestartKind, ScheduleSelfRestartOptions, } from './restart-coordinator.js';
 export { CapabilityHandle, CapabilityUnavailableError } from './capability-handle.js';
 export { CapabilityRegistry } from './capability-registry.js';
+export { buildCapRouters, builderMountedCapNames } from './cap-router-builder.js';
+export type { CapRouterPrimitives, CapRouterServices, CapProviderGetter, RemoteProxyFactory, ProcedureBuilder, ProcedureResolverArgs, } from './cap-router-builder.js';
 export { describeProviderKindDrift } from './provider-kind-drift.js';
 export type { ProviderKindHint } from './provider-kind-drift.js';
 export type { CapabilityRouter, CapabilityRouterFactory, ConfigReader, } from './capability-registry.js';

package/dist/{manifest-python-deps-1zTy3vXe.mjs → manifest-python-deps-BfJEdXhi.mjs}

@@ -11,7 +11,7 @@ import { promisify } from "node:util";
 import * as os from "node:os";
 import { tmpdir } from "node:os";
 import { unlink } from "node:fs/promises";
-import { DATAPLANE_SECRET_HEADER as DATAPLANE_SECRET_HEADER$1, DeviceType as DeviceType$1, DisposerChain, EventCategory as EventCategory$1, ReadinessRegistry, asJsonObject as asJsonObject$1, asString as asString$1, createDeviceProxy, deviceOpsCapability, emitReadiness, errMsg as errMsg$1, expandCapMethods, scopeKey, sleep as sleep$1 } from "@camstack/types/addon";
+import { DATAPLANE_SECRET_HEADER as DATAPLANE_SECRET_HEADER$1, DeviceType as DeviceType$1, DisposerChain, EventCategory as EventCategory$1, ReadinessRegistry, asJsonObject as asJsonObject$1, asString as asString$1, createDeviceProxy, deviceOpsCapability, emitReadiness, errMsg as errMsg$1, expandCapMethods as expandCapMethods$1, scopeKey, sleep as sleep$1 } from "@camstack/types/addon";
 import { TRPCClientError, createTRPCClient } from "@trpc/client";
 import { connect, createServer as createServer$1 } from "node:net";
 //#region src/kernel/addon-class-resolver.ts
@@ -925,7 +925,7 @@ var nativeCapReadinessGeneration = typeof crypto !== "undefined" && crypto.rando
 function mountNativeCapService(broker, addonId, cap) {
 	const serviceName = capServiceName(addonId, cap.name, true);
 	if (mountedNativeCapServices.has(serviceName)) return;
-	const expandedMethods = expandCapMethods(cap);
+	const expandedMethods = expandCapMethods$1(cap);
 	if (expandedMethods === void 0 || Object.keys(expandedMethods).length === 0 || typeof broker.createService !== "function") {
 		mountedNativeCapServices.add(serviceName);
 		return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.1.11",
+  "version": "1.1.12",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",