@camstack/system 1.1.14 → 1.1.16

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_python_deps = require("./manifest-python-deps-Cro19O4u.js");
+const require_manifest_python_deps = require("./manifest-python-deps-D-LSp57v.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { $ as setWorkerNativeCapsChangeListener, A as createUdsLoggerWithControl, X as getWorkerNativeCapProvider, Z as getWorkerNativeCapSnapshot, i as createUdsAddonContext, j as LocalChildClient, mt as resolveAddonClass, pt as installManifestNativeDeps, t as installManifestPythonDeps, tt as validateProviderRegistrations } from "./manifest-python-deps-BfJEdXhi.mjs";
+import { $ as getWorkerNativeCapProvider, N as createUdsLoggerWithControl, P as LocalChildClient, _t as resolveAddonClass, et as getWorkerNativeCapSnapshot, gt as installManifestNativeDeps, i as createUdsAddonContext, it as validateProviderRegistrations, nt as setWorkerNativeCapsChangeListener, t as installManifestPythonDeps } from "./manifest-python-deps-D-mT3V97.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { register } from "node:module";
 import * as fs from "node:fs";

package/dist/index.js

@@ -20,7 +20,7 @@ const require_builtins_local_auth_local_auth_addon = require("./builtins/local-a
 require("./builtins/local-auth/index.js");
 const require_builtins_device_manager_device_manager_addon = require("./builtins/device-manager/device-manager.addon.js");
 require("./builtins/device-manager/index.js");
-const require_manifest_python_deps = require("./manifest-python-deps-Cro19O4u.js");
+const require_manifest_python_deps = require("./manifest-python-deps-D-LSp57v.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 let _camstack_types_node = require("@camstack/types/node");
 let node_http = require("node:http");
@@ -92344,32 +92344,48 @@ async function getPidStats$1(pids) {
 	});
 }
 /**
-* Heavy runners (media / ML / native): frame data lives in shared memory (`@camstack/shm-ring`) and
-* native buffers, but these processes still allocate enough on the JS heap that shrinking V8's
-* young generation would add scavenge-GC churn, and a low old-space cap would risk OOM. They keep
-* V8 defaults. Everyone else is a lightweight, mostly-idle control-plane runner (providers, auth,
-* tunnels, storage, smtp, notifier, admin-ui) that over-reserves ~15 MB of young-gen it never uses.
-*
-* Matched by a substring of the addon package dir (e.g. `.../@camstack/addon-pipeline/dist`), so it
-* is robust to the addonId vs package-name distinction.
+* Resolve the declared heap profile for one addon by reading its package.json manifest
+* (`camstack.addons[].execution.heapProfile`). `addonDir` points at the addon's built `dist`, so the
+* manifest is one level up; we also try `addonDir` itself for layouts where it IS the package root.
+* Result is cached per (dir,id) — spawns are infrequent but a runner may re-spawn on crash/restart.
+* Returns `undefined` when the manifest is unreadable or declares no profile → treated as light.
+*/
+var heapProfileCache = /* @__PURE__ */ new Map();
+function readAddonHeapProfile(spec) {
+	const cacheKey = `${spec.addonDir}::${spec.addonId}`;
+	const cached = heapProfileCache.get(cacheKey);
+	if (cached !== void 0 || heapProfileCache.has(cacheKey)) return cached;
+	let profile;
+	for (const manifestPath of [node_path.join(spec.addonDir, "package.json"), node_path.join(node_path.dirname(spec.addonDir), "package.json")]) try {
+		const raw = node_fs.readFileSync(manifestPath, "utf8");
+		const parsed = JSON.parse(raw);
+		profile = extractHeapProfile(parsed, spec.addonId);
+		if (profile !== void 0) break;
+		if (manifestHasAddon(parsed, spec.addonId)) break;
+	} catch {}
+	heapProfileCache.set(cacheKey, profile);
+	return profile;
+}
+function manifestHasAddon(parsed, addonId) {
+	return readManifestAddons(parsed).some((a) => a.id === addonId);
+}
+function extractHeapProfile(parsed, addonId) {
+	const value = readManifestAddons(parsed).find((a) => a.id === addonId)?.execution?.heapProfile;
+	return value === "heavy" || value === "light" ? value : void 0;
+}
+function readManifestAddons(parsed) {
+	if (typeof parsed !== "object" || parsed === null) return [];
+	const camstack = parsed.camstack;
+	if (typeof camstack !== "object" || camstack === null) return [];
+	const addons = camstack.addons;
+	return Array.isArray(addons) ? addons : [];
+}
+/**
+* A runner is heavy if ANY co-located addon declares `heapProfile: 'heavy'` in its manifest.
+* Everything else (the un-annotated default) is a light control-plane runner. No hard-coded names.
 */
-var HEAVY_RUNNER_DIR_MARKERS = [
-	"addon-pipeline",
-	"addon-detection-pipeline",
-	"addon-pipeline-runner",
-	"addon-pipeline-orchestrator",
-	"addon-decoder",
-	"addon-benchmark",
-	"addon-audio-codec",
-	"addon-motion",
-	"addon-embedding",
-	"addon-model-studio",
-	"addon-analytics-suite",
-	"addon-provider-reolink",
-	"addon-provider-matter"
-];
 function isHeavyRunner(addons) {
-	return addons.some((a) => HEAVY_RUNNER_DIR_MARKERS.some((m) => a.addonDir.includes(m)));
+	return addons.some((a) => readAddonHeapProfile(a) === "heavy");
 }
 /**
 * Per-placement V8 heap flags (Block D). LIGHT runners cap their young generation
@@ -93282,6 +93298,8 @@ exports.FsStorageBackend = FsStorageBackend;
 exports.HEALTH_MONITOR_GRACE_PERIOD_MS = HEALTH_MONITOR_GRACE_PERIOD_MS;
 exports.HEALTH_MONITOR_RETRY_INTERVALS_MS = HEALTH_MONITOR_RETRY_INTERVALS_MS;
 exports.HEALTH_MONITOR_TICK_MS = HEALTH_MONITOR_TICK_MS;
+exports.HUB_CAP_FWD_ACTION = require_manifest_python_deps.HUB_CAP_FWD_ACTION;
+exports.HUB_CAP_FWD_SERVICE = require_manifest_python_deps.HUB_CAP_FWD_SERVICE;
 exports.HubForwarderAddon = require_builtins_hub_forwarder_index.HubForwarderAddon$1;
 exports.HubForwarderDestination = require_builtins_hub_forwarder_index.HubForwarderDestination$1;
 exports.HubLogForwarder = HubLogForwarder;
@@ -93389,6 +93407,7 @@ exports.createBroker = createBroker;
 exports.createBrokerDeviceManagerApi = require_manifest_python_deps.createBrokerDeviceManagerApi;
 exports.createCoreCapService = createCoreCapService;
 exports.createFileDataPlaneHandler = require_model_download_service.createFileDataPlaneHandler;
+exports.createHubCapForwardService = require_manifest_python_deps.createHubCapForwardService;
 exports.createHubService = createHubService;
 exports.createHwAccelService = require_manifest_python_deps.createHwAccelService;
 exports.createKernelHwAccel = require_manifest_python_deps.createKernelHwAccel;

package/dist/index.mjs

@@ -18,7 +18,7 @@ import { LocalAuthAddon, a as require_ms, c as __esmMin, d as __toCommonJS, f as
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { A as createUdsLoggerWithControl, B as createLocalTransport, C as ipcParentLink, D as createUdsEventBus, E as createUdsEventBridge, F as AGENT_CAP_FWD_SERVICE, G as FrameDecoder, H as UdsLocalTransportServer, I as CapRouteResolver, J as buildUdsNativeCapProxy, K as encodeFrame, L as CapRouteError, M as LocalChildRegistry, N as UDS_NO_ROUTE_PREFIX, O as udsChildLogToWorkerEntry, P as AGENT_CAP_FWD_ACTION, Q as mountNativeCapService, R as classifyCapRoute, S as ipcChildLink, T as createParentUnownedCallHandler, U as SocketChannel, V as UdsLocalTransportClient, W as localEndpointPath, Y as createBrokerDeviceManagerApi, _ as __resetCapUsageRegistryForTests, a as getWorkerDeviceRegistry, at as capBareAction, b as brokerTransportLink, c as setHubConnected, ct as deserializeTypedArrays, d as registerEventBusService, dt as CapabilityHandle, et as createAddonService, f as AddonDepsManager, ft as CapabilityUnavailableError, g as CapUsageRegistry, h as createHwAccelService, i as createUdsAddonContext, it as capActionSuffix, j as LocalChildClient, k as createUdsLogger, l as EVENT_TOPIC_PREFIX, lt as serializeTypedArrays, m as resolveHwAccel, mt as resolveAddonClass, n as adaptBrokerToCluster, nt as NATIVE_PROVIDER_SERVICE_INFIX, o as getOrInitReadinessRegistry, ot as capServiceName, p as createKernelHwAccel, pt as installManifestNativeDeps, q as buildNativeCapProxy, r as createAddonContext, rt as capActionName, s as getOrInitReadinessRegistryForClient, st as parseCapAction, t as installManifestPythonDeps, tt as validateProviderRegistrations, u as getBrokerEventBus, ut as DeviceRegistry, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as callWithServiceDiscovery } from "./manifest-python-deps-BfJEdXhi.mjs";
+import { A as createUdsEventBus, B as CapRouteError, C as ipcParentLink, D as createHubCapForwardService, E as HUB_CAP_FWD_SERVICE, F as LocalChildRegistry, G as UdsLocalTransportServer, H as callWithServiceDiscovery, I as UDS_NO_ROUTE_PREFIX, J as FrameDecoder, K as SocketChannel, L as AGENT_CAP_FWD_ACTION, M as createUdsLogger, N as createUdsLoggerWithControl, O as createParentUnownedCallHandler, P as LocalChildClient, Q as createBrokerDeviceManagerApi, R as AGENT_CAP_FWD_SERVICE, S as ipcChildLink, T as HUB_CAP_FWD_ACTION, U as createLocalTransport, V as classifyCapRoute, W as UdsLocalTransportClient, X as buildNativeCapProxy, Y as encodeFrame, Z as buildUdsNativeCapProxy, _ as __resetCapUsageRegistryForTests, _t as resolveAddonClass, a as getWorkerDeviceRegistry, at as NATIVE_PROVIDER_SERVICE_INFIX, b as brokerTransportLink, c as setHubConnected, ct as capBareAction, d as registerEventBusService, dt as deserializeTypedArrays, f as AddonDepsManager, ft as serializeTypedArrays, g as CapUsageRegistry, gt as installManifestNativeDeps, h as createHwAccelService, ht as CapabilityUnavailableError, i as createUdsAddonContext, it as validateProviderRegistrations, j as udsChildLogToWorkerEntry, k as createUdsEventBridge, l as EVENT_TOPIC_PREFIX, lt as capServiceName, m as resolveHwAccel, mt as CapabilityHandle, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as capActionName, p as createKernelHwAccel, pt as DeviceRegistry, q as localEndpointPath, r as createAddonContext, rt as createAddonService, s as getOrInitReadinessRegistryForClient, st as capActionSuffix, t as installManifestPythonDeps, tt as mountNativeCapService, u as getBrokerEventBus, ut as parseCapAction, v as getCapUsageRegistry, w as localProviderLink, x as buildLinkChain, y as brokerCallForCap, z as CapRouteResolver } from "./manifest-python-deps-D-mT3V97.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { request } from "node:http";
@@ -92336,32 +92336,48 @@ async function getPidStats$1(pids) {
 	});
 }
 /**
-* Heavy runners (media / ML / native): frame data lives in shared memory (`@camstack/shm-ring`) and
-* native buffers, but these processes still allocate enough on the JS heap that shrinking V8's
-* young generation would add scavenge-GC churn, and a low old-space cap would risk OOM. They keep
-* V8 defaults. Everyone else is a lightweight, mostly-idle control-plane runner (providers, auth,
-* tunnels, storage, smtp, notifier, admin-ui) that over-reserves ~15 MB of young-gen it never uses.
-*
-* Matched by a substring of the addon package dir (e.g. `.../@camstack/addon-pipeline/dist`), so it
-* is robust to the addonId vs package-name distinction.
+* Resolve the declared heap profile for one addon by reading its package.json manifest
+* (`camstack.addons[].execution.heapProfile`). `addonDir` points at the addon's built `dist`, so the
+* manifest is one level up; we also try `addonDir` itself for layouts where it IS the package root.
+* Result is cached per (dir,id) — spawns are infrequent but a runner may re-spawn on crash/restart.
+* Returns `undefined` when the manifest is unreadable or declares no profile → treated as light.
+*/
+var heapProfileCache = /* @__PURE__ */ new Map();
+function readAddonHeapProfile(spec) {
+	const cacheKey = `${spec.addonDir}::${spec.addonId}`;
+	const cached = heapProfileCache.get(cacheKey);
+	if (cached !== void 0 || heapProfileCache.has(cacheKey)) return cached;
+	let profile;
+	for (const manifestPath of [path$39.join(spec.addonDir, "package.json"), path$39.join(path$39.dirname(spec.addonDir), "package.json")]) try {
+		const raw = fs$17.readFileSync(manifestPath, "utf8");
+		const parsed = JSON.parse(raw);
+		profile = extractHeapProfile(parsed, spec.addonId);
+		if (profile !== void 0) break;
+		if (manifestHasAddon(parsed, spec.addonId)) break;
+	} catch {}
+	heapProfileCache.set(cacheKey, profile);
+	return profile;
+}
+function manifestHasAddon(parsed, addonId) {
+	return readManifestAddons(parsed).some((a) => a.id === addonId);
+}
+function extractHeapProfile(parsed, addonId) {
+	const value = readManifestAddons(parsed).find((a) => a.id === addonId)?.execution?.heapProfile;
+	return value === "heavy" || value === "light" ? value : void 0;
+}
+function readManifestAddons(parsed) {
+	if (typeof parsed !== "object" || parsed === null) return [];
+	const camstack = parsed.camstack;
+	if (typeof camstack !== "object" || camstack === null) return [];
+	const addons = camstack.addons;
+	return Array.isArray(addons) ? addons : [];
+}
+/**
+* A runner is heavy if ANY co-located addon declares `heapProfile: 'heavy'` in its manifest.
+* Everything else (the un-annotated default) is a light control-plane runner. No hard-coded names.
 */
-var HEAVY_RUNNER_DIR_MARKERS = [
-	"addon-pipeline",
-	"addon-detection-pipeline",
-	"addon-pipeline-runner",
-	"addon-pipeline-orchestrator",
-	"addon-decoder",
-	"addon-benchmark",
-	"addon-audio-codec",
-	"addon-motion",
-	"addon-embedding",
-	"addon-model-studio",
-	"addon-analytics-suite",
-	"addon-provider-reolink",
-	"addon-provider-matter"
-];
 function isHeavyRunner(addons) {
-	return addons.some((a) => HEAVY_RUNNER_DIR_MARKERS.some((m) => a.addonDir.includes(m)));
+	return addons.some((a) => readAddonHeapProfile(a) === "heavy");
 }
 /**
 * Per-placement V8 heap flags (Block D). LIGHT runners cap their young generation
@@ -93230,4 +93246,4 @@ async function stageFrameworkLockstep(input) {
 	return results;
 }
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createHwAccelService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, stageFrameworkLockstep, stripCamstackDeps, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };

package/dist/kernel/transport/hub-cap-forward.d.ts

@@ -0,0 +1,34 @@
+import { ServiceSchema } from 'moleculer';
+import { CapCallInput } from './child-cap-protocol.js';
+/** The Moleculer service name the hub registers for agent→hub cap forwarding. */
+export declare const HUB_CAP_FWD_SERVICE: "$hub-cap-fwd";
+/** The Moleculer action (service.action) for hub cap forwarding. */
+export declare const HUB_CAP_FWD_ACTION: "$hub-cap-fwd.forward";
+/**
+ * Params envelope an agent sends to `$hub-cap-fwd.forward`. Mirrors
+ * {@link CapCallInput} (the hub's onUnownedCall input): `capName` + `method` are
+ * required; `args` passes through; `deviceId` / `nodeId` are optional routing
+ * hints the hub's resolver honours.
+ */
+export interface HubCapForwardParams {
+    readonly capName: string;
+    readonly method: string;
+    readonly args: unknown;
+    readonly deviceId?: number;
+    readonly nodeId?: string;
+}
+/**
+ * Handler that routes an agent-originated cap call through the hub's own
+ * unowned-call routing. Structurally the hub's `onUnownedCall`.
+ */
+export type HubUnownedCallHandler = (input: CapCallInput) => Promise<unknown>;
+/**
+ * Build the `$hub-cap-fwd` Moleculer `ServiceSchema`. The hub registers this on
+ * its broker (only the hub registers it → an agent's `broker.call` for
+ * `$hub-cap-fwd.forward` discovers it on the hub with no explicit nodeID pin).
+ *
+ * @param onUnownedCall  The hub's cap routing handler (from
+ *                       `createParentUnownedCallHandler`). Reused verbatim so
+ *                       forwarded calls route exactly like a hub-local child's.
+ */
+export declare function createHubCapForwardService(onUnownedCall: HubUnownedCallHandler): ServiceSchema;

package/dist/kernel/transport/index.d.ts

@@ -25,3 +25,5 @@ export { createUdsEventBridge } from './uds-event-bridge.js';
 export type { UdsEventBridgeDeps, ChildEventBroadcaster } from './uds-event-bridge.js';
 export { createParentUnownedCallHandler } from './parent-unowned-call.js';
 export type { ParentUnownedCallDeps, ParentUnownedCallLogger } from './parent-unowned-call.js';
+export { createHubCapForwardService, HUB_CAP_FWD_SERVICE, HUB_CAP_FWD_ACTION, } from './hub-cap-forward.js';
+export type { HubCapForwardParams, HubUnownedCallHandler } from './hub-cap-forward.js';

package/dist/kernel/transport/parent-unowned-call.d.ts

@@ -58,6 +58,20 @@ export interface ParentUnownedCallDeps {
      * deviceId-carrying SYSTEM-cap calls (e.g. `system.info({deviceId})`) fast.
      */
     readonly isDeviceNativeCap?: (capName: string) => boolean;
+    /**
+     * Optional forward-to-hub dispatcher (the AGENT path). When present, a cap
+     * that no agent-LOCAL child owns is forwarded to the hub's `$hub-cap-fwd`
+     * service instead of attempted via raw Moleculer service discovery
+     * (`brokerCallForCap`). This is what makes an agent's forked addon reach a
+     * HUB-hosted cap (`stream-broker`, `settings-store`, …): hub-local addon
+     * runners register NO Moleculer service, so raw discovery for `${cap}.*`
+     * 30s-deadlines. The hub side answers `$hub-cap-fwd.forward` by running the
+     * call through ITS OWN `onUnownedCall` (resolver + broker-fallback), so the
+     * agent inherits the hub's full routing. The hub itself passes this undefined
+     * (it IS the hub) and keeps the `brokerCallForCap` path for its `$`-core
+     * services. See `hub-cap-forward.ts`.
+     */
+    readonly forwardToHub?: (input: CapCallInput) => Promise<unknown>;
     /** Optional logger for the broker-fallback diagnostic line. */
     readonly logger?: ParentUnownedCallLogger;
 }

package/dist/{manifest-python-deps-Cro19O4u.js → manifest-python-deps-D-LSp57v.js}

@@ -4654,8 +4654,24 @@ function createParentUnownedCallHandler(deps) {
 					});
 				}
 				const owner = deps.nodeRegistry.listNativeCapEntriesForDevice(deviceId).find((entry) => entry.capName === input.capName);
-				if (owner !== void 0) return await brokerCallForCap(deps.broker, input.capName, input.method, input.args, { nodeId: owner.nodeId });
+				if (owner !== void 0) {
+					if (deps.forwardToHub !== void 0) return await deps.forwardToHub({
+						capName: input.capName,
+						method: input.method,
+						args: input.args,
+						deviceId,
+						nodeId: owner.nodeId
+					});
+					return await brokerCallForCap(deps.broker, input.capName, input.method, input.args, { nodeId: owner.nodeId });
+				}
 			}
+			if (deps.forwardToHub !== void 0) return await deps.forwardToHub({
+				capName: input.capName,
+				method: input.method,
+				args: input.args,
+				...deviceId !== void 0 ? { deviceId } : {},
+				...nodeId !== void 0 ? { nodeId } : {}
+			});
 			deps.logger?.warn?.("routing child unowned cap call via broker fallback", {
 				capName: input.capName,
 				method: input.method
@@ -4668,6 +4684,55 @@ function createParentUnownedCallHandler(deps) {
 	};
 }
 //#endregion
+//#region src/kernel/transport/hub-cap-forward.ts
+/** The Moleculer service name the hub registers for agent→hub cap forwarding. */
+var HUB_CAP_FWD_SERVICE = "$hub-cap-fwd";
+/** The Moleculer action (service.action) for hub cap forwarding. */
+var HUB_CAP_FWD_ACTION = `${HUB_CAP_FWD_SERVICE}.forward`;
+/**
+* Narrow Moleculer's loosely-typed `ctx.params` to {@link HubCapForwardParams}
+* without unsafe casts — mirrors `agent-cap-dispatch-service.ts:narrowParams`.
+*/
+function narrowParams(raw) {
+	if (raw === null || typeof raw !== "object") throw new Error("$hub-cap-fwd.forward: invalid params — capName and method are required strings");
+	const capName = Reflect.get(raw, "capName");
+	const method = Reflect.get(raw, "method");
+	if (typeof capName !== "string" || typeof method !== "string") throw new Error("$hub-cap-fwd.forward: invalid params — capName and method are required strings");
+	const deviceId = Reflect.get(raw, "deviceId");
+	const nodeId = Reflect.get(raw, "nodeId");
+	return {
+		capName,
+		method,
+		args: Reflect.get(raw, "args"),
+		deviceId: typeof deviceId === "number" ? deviceId : void 0,
+		nodeId: typeof nodeId === "string" && nodeId.length > 0 ? nodeId : void 0
+	};
+}
+/**
+* Build the `$hub-cap-fwd` Moleculer `ServiceSchema`. The hub registers this on
+* its broker (only the hub registers it → an agent's `broker.call` for
+* `$hub-cap-fwd.forward` discovers it on the hub with no explicit nodeID pin).
+*
+* @param onUnownedCall  The hub's cap routing handler (from
+*                       `createParentUnownedCallHandler`). Reused verbatim so
+*                       forwarded calls route exactly like a hub-local child's.
+*/
+function createHubCapForwardService(onUnownedCall) {
+	return {
+		name: HUB_CAP_FWD_SERVICE,
+		actions: { forward: { handler: async (ctx) => {
+			const { capName, method, args, deviceId, nodeId } = narrowParams(ctx.params);
+			return onUnownedCall({
+				capName,
+				method,
+				args,
+				...deviceId !== void 0 ? { deviceId } : {},
+				...nodeId !== void 0 ? { nodeId } : {}
+			});
+		} } }
+	};
+}
+//#endregion
 //#region src/kernel/moleculer/trpc-links.ts
 /** Convert camelCase → kebab-case. */
 function toKebab(name) {
@@ -6653,6 +6718,18 @@ Object.defineProperty(exports, "FrameDecoder", {
 		return FrameDecoder;
 	}
 });
+Object.defineProperty(exports, "HUB_CAP_FWD_ACTION", {
+	enumerable: true,
+	get: function() {
+		return HUB_CAP_FWD_ACTION;
+	}
+});
+Object.defineProperty(exports, "HUB_CAP_FWD_SERVICE", {
+	enumerable: true,
+	get: function() {
+		return HUB_CAP_FWD_SERVICE;
+	}
+});
 Object.defineProperty(exports, "LocalChildClient", {
 	enumerable: true,
 	get: function() {
@@ -6791,6 +6868,12 @@ Object.defineProperty(exports, "createBrokerDeviceManagerApi", {
 		return createBrokerDeviceManagerApi;
 	}
 });
+Object.defineProperty(exports, "createHubCapForwardService", {
+	enumerable: true,
+	get: function() {
+		return createHubCapForwardService;
+	}
+});
 Object.defineProperty(exports, "createHwAccelService", {
 	enumerable: true,
 	get: function() {

package/dist/{manifest-python-deps-BfJEdXhi.mjs → manifest-python-deps-D-mT3V97.mjs}

@@ -4652,8 +4652,24 @@ function createParentUnownedCallHandler(deps) {
 					});
 				}
 				const owner = deps.nodeRegistry.listNativeCapEntriesForDevice(deviceId).find((entry) => entry.capName === input.capName);
-				if (owner !== void 0) return await brokerCallForCap(deps.broker, input.capName, input.method, input.args, { nodeId: owner.nodeId });
+				if (owner !== void 0) {
+					if (deps.forwardToHub !== void 0) return await deps.forwardToHub({
+						capName: input.capName,
+						method: input.method,
+						args: input.args,
+						deviceId,
+						nodeId: owner.nodeId
+					});
+					return await brokerCallForCap(deps.broker, input.capName, input.method, input.args, { nodeId: owner.nodeId });
+				}
 			}
+			if (deps.forwardToHub !== void 0) return await deps.forwardToHub({
+				capName: input.capName,
+				method: input.method,
+				args: input.args,
+				...deviceId !== void 0 ? { deviceId } : {},
+				...nodeId !== void 0 ? { nodeId } : {}
+			});
 			deps.logger?.warn?.("routing child unowned cap call via broker fallback", {
 				capName: input.capName,
 				method: input.method
@@ -4666,6 +4682,55 @@ function createParentUnownedCallHandler(deps) {
 	};
 }
 //#endregion
+//#region src/kernel/transport/hub-cap-forward.ts
+/** The Moleculer service name the hub registers for agent→hub cap forwarding. */
+var HUB_CAP_FWD_SERVICE = "$hub-cap-fwd";
+/** The Moleculer action (service.action) for hub cap forwarding. */
+var HUB_CAP_FWD_ACTION = `${HUB_CAP_FWD_SERVICE}.forward`;
+/**
+* Narrow Moleculer's loosely-typed `ctx.params` to {@link HubCapForwardParams}
+* without unsafe casts — mirrors `agent-cap-dispatch-service.ts:narrowParams`.
+*/
+function narrowParams(raw) {
+	if (raw === null || typeof raw !== "object") throw new Error("$hub-cap-fwd.forward: invalid params — capName and method are required strings");
+	const capName = Reflect.get(raw, "capName");
+	const method = Reflect.get(raw, "method");
+	if (typeof capName !== "string" || typeof method !== "string") throw new Error("$hub-cap-fwd.forward: invalid params — capName and method are required strings");
+	const deviceId = Reflect.get(raw, "deviceId");
+	const nodeId = Reflect.get(raw, "nodeId");
+	return {
+		capName,
+		method,
+		args: Reflect.get(raw, "args"),
+		deviceId: typeof deviceId === "number" ? deviceId : void 0,
+		nodeId: typeof nodeId === "string" && nodeId.length > 0 ? nodeId : void 0
+	};
+}
+/**
+* Build the `$hub-cap-fwd` Moleculer `ServiceSchema`. The hub registers this on
+* its broker (only the hub registers it → an agent's `broker.call` for
+* `$hub-cap-fwd.forward` discovers it on the hub with no explicit nodeID pin).
+*
+* @param onUnownedCall  The hub's cap routing handler (from
+*                       `createParentUnownedCallHandler`). Reused verbatim so
+*                       forwarded calls route exactly like a hub-local child's.
+*/
+function createHubCapForwardService(onUnownedCall) {
+	return {
+		name: HUB_CAP_FWD_SERVICE,
+		actions: { forward: { handler: async (ctx) => {
+			const { capName, method, args, deviceId, nodeId } = narrowParams(ctx.params);
+			return onUnownedCall({
+				capName,
+				method,
+				args,
+				...deviceId !== void 0 ? { deviceId } : {},
+				...nodeId !== void 0 ? { nodeId } : {}
+			});
+		} } }
+	};
+}
+//#endregion
 //#region src/kernel/moleculer/trpc-links.ts
 /** Convert camelCase → kebab-case. */
 function toKebab(name) {
@@ -6585,4 +6650,4 @@ async function installManifestPythonDeps(declaration, addonDir, deps, logger) {
 	await deps.installPythonRequirements(reqAbs);
 }
 //#endregion
-export { setWorkerNativeCapsChangeListener as $, createUdsLoggerWithControl as A, createLocalTransport as B, ipcParentLink as C, createUdsEventBus as D, createUdsEventBridge as E, AGENT_CAP_FWD_SERVICE as F, FrameDecoder as G, UdsLocalTransportServer as H, CapRouteResolver as I, buildUdsNativeCapProxy as J, encodeFrame as K, CapRouteError as L, LocalChildRegistry as M, UDS_NO_ROUTE_PREFIX as N, udsChildLogToWorkerEntry as O, AGENT_CAP_FWD_ACTION as P, mountNativeCapService as Q, classifyCapRoute as R, ipcChildLink as S, createParentUnownedCallHandler as T, SocketChannel as U, UdsLocalTransportClient as V, localEndpointPath as W, getWorkerNativeCapProvider as X, createBrokerDeviceManagerApi as Y, getWorkerNativeCapSnapshot as Z, __resetCapUsageRegistryForTests as _, getWorkerDeviceRegistry as a, capBareAction as at, brokerTransportLink as b, setHubConnected as c, deserializeTypedArrays as ct, registerEventBusService as d, CapabilityHandle as dt, createAddonService as et, AddonDepsManager as f, CapabilityUnavailableError as ft, CapUsageRegistry as g, createHwAccelService as h, createUdsAddonContext as i, capActionSuffix as it, LocalChildClient as j, createUdsLogger as k, EVENT_TOPIC_PREFIX as l, serializeTypedArrays as lt, resolveHwAccel as m, resolveAddonClass as mt, adaptBrokerToCluster as n, NATIVE_PROVIDER_SERVICE_INFIX as nt, getOrInitReadinessRegistry as o, capServiceName as ot, createKernelHwAccel as p, installManifestNativeDeps as pt, buildNativeCapProxy as q, createAddonContext as r, capActionName as rt, getOrInitReadinessRegistryForClient as s, parseCapAction as st, installManifestPythonDeps as t, validateProviderRegistrations as tt, getBrokerEventBus as u, DeviceRegistry as ut, getCapUsageRegistry as v, localProviderLink as w, buildLinkChain as x, brokerCallForCap as y, callWithServiceDiscovery as z };
+export { getWorkerNativeCapProvider as $, createUdsEventBus as A, CapRouteError as B, ipcParentLink as C, createHubCapForwardService as D, HUB_CAP_FWD_SERVICE as E, LocalChildRegistry as F, UdsLocalTransportServer as G, callWithServiceDiscovery as H, UDS_NO_ROUTE_PREFIX as I, FrameDecoder as J, SocketChannel as K, AGENT_CAP_FWD_ACTION as L, createUdsLogger as M, createUdsLoggerWithControl as N, createParentUnownedCallHandler as O, LocalChildClient as P, createBrokerDeviceManagerApi as Q, AGENT_CAP_FWD_SERVICE as R, ipcChildLink as S, HUB_CAP_FWD_ACTION as T, createLocalTransport as U, classifyCapRoute as V, UdsLocalTransportClient as W, buildNativeCapProxy as X, encodeFrame as Y, buildUdsNativeCapProxy as Z, __resetCapUsageRegistryForTests as _, resolveAddonClass as _t, getWorkerDeviceRegistry as a, NATIVE_PROVIDER_SERVICE_INFIX as at, brokerTransportLink as b, setHubConnected as c, capBareAction as ct, registerEventBusService as d, deserializeTypedArrays as dt, getWorkerNativeCapSnapshot as et, AddonDepsManager as f, serializeTypedArrays as ft, CapUsageRegistry as g, installManifestNativeDeps as gt, createHwAccelService as h, CapabilityUnavailableError as ht, createUdsAddonContext as i, validateProviderRegistrations as it, udsChildLogToWorkerEntry as j, createUdsEventBridge as k, EVENT_TOPIC_PREFIX as l, capServiceName as lt, resolveHwAccel as m, CapabilityHandle as mt, adaptBrokerToCluster as n, setWorkerNativeCapsChangeListener as nt, getOrInitReadinessRegistry as o, capActionName as ot, createKernelHwAccel as p, DeviceRegistry as pt, localEndpointPath as q, createAddonContext as r, createAddonService as rt, getOrInitReadinessRegistryForClient as s, capActionSuffix as st, installManifestPythonDeps as t, mountNativeCapService as tt, getBrokerEventBus as u, parseCapAction as ut, getCapUsageRegistry as v, localProviderLink as w, buildLinkChain as x, brokerCallForCap as y, CapRouteResolver as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.1.14",
+  "version": "1.1.16",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",