@camstack/system 1.1.34 → 1.1.36

package/dist/index.mjs

@@ -1,3 +1,4 @@
+import { $ as errMsg$1, A as isVoidInput, Ct as resolveCapMount, F as looseSchema, M as lifecycleJobSchema, O as isArrayOutputSchema, St as readinessKey, V as procedureAuthKey, _t as expandCapMethods, bt as parseJsonObject, ct as ReadinessRegistry, dt as asJsonObject$1, ft as asNumber, ht as emitDownForOwnedCaps, j as kebabToCamel, k as isObjectInput, lt as ReadinessTimeoutError, mt as createEvent, nt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, o as METHOD_ACCESS_MAP, p as addonSettingsCapability, pt as asString$1, rt as DEVICE_STATUS_METHOD, s as RUNTIME_DEFAULTS, st as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tt as DATAPLANE_SECRET_HEADER$1, wt as scopeKey, xt as parseJsonUnknown$1 } from "./dist-C7oOY4iL.mjs";
 import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-C-IHWnXx.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Le3l0qS2.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
@@ -18,15 +19,15 @@ import { LocalAuthAddon, a as require_ms, c as __esmMin, d as __toCommonJS, f as
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-u-AQBQY6.mjs";
+import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-BYIV8-rc.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
+import { z } from "zod";
 import { request } from "node:http";
 import * as fs$17 from "node:fs";
 import { accessSync, constants, existsSync, mkdirSync, readFileSync } from "node:fs";
 import * as path$39 from "node:path";
 import { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
-import { ALL_CAPABILITY_DEFINITIONS, DATAPLANE_SECRET_HEADER, EventCategory, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, asJsonObject, asNumber, asString, createEvent, emitDownForOwnedCaps, errMsg, expandCapMethods, isObjectInput, isVoidInput, kebabToCamel, lifecycleJobSchema, looseSchema, parseJsonObject, parseJsonUnknown, procedureAuthKey, readinessKey, resolveCapMount, scopeKey } from "@camstack/types";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import { execFile, spawn } from "node:child_process";
 import * as util$10 from "node:util";
@@ -34,8 +35,7 @@ import { promisify } from "node:util";
 import * as vm from "node:vm";
 import * as os$18 from "node:os";
 import { lstat, readdir, readlink, realpath } from "node:fs/promises";
-import { z } from "zod";
-import { asJsonObject as asJsonObject$1, parseJsonUnknown as parseJsonUnknown$1 } from "@camstack/types/addon";
+import { asJsonObject, parseJsonUnknown } from "@camstack/types/addon";
 import { EventEmitter } from "node:events";
 import As from "node:stream";
 import { StringDecoder } from "node:string_decoder";
@@ -150,7 +150,7 @@ function proxyToUpstream(opts) {
 	delete headers.host;
 	delete headers.connection;
 	delete headers["content-length"];
-	headers[DATAPLANE_SECRET_HEADER] = secret;
+	headers[DATAPLANE_SECRET_HEADER$1] = secret;
 	const upstream = request({
 		protocol: base.protocol,
 		hostname: base.hostname,
@@ -320,7 +320,7 @@ var PipelineRunner = class {
 			}
 		} catch (error) {
 			const stepMs = performance.now() - stepStart;
-			const message = errMsg(error);
+			const message = errMsg$1(error);
 			results.push({
 				addon: node.addon,
 				slot: "detector",
@@ -1562,7 +1562,7 @@ var NotificationService = class {
 				this.logger.error("Notification target failed", { meta: {
 					addonId: ref.addonId,
 					targetId: ref.targetId,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				} });
 			}
 		}));
@@ -2338,7 +2338,7 @@ var AddonLoader = class {
 	/** Load addon from a specific directory (package.json + dist/) */
 	async loadFromAddonDir(addonDir) {
 		const pkgJsonPath = path$39.join(addonDir, "package.json");
-		const pkgJson = asJsonObject(parseJsonUnknown(fs$17.readFileSync(pkgJsonPath, "utf-8"))) ?? {};
+		const pkgJson = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(pkgJsonPath, "utf-8"))) ?? {};
 		const packageNameRaw = pkgJson["name"];
 		const packageName = typeof packageNameRaw === "string" ? packageNameRaw : "";
 		const packageVersionRaw = pkgJson["version"];
@@ -2704,7 +2704,7 @@ async function installPackageFromNpm(packageName, targetDir) {
 		const distSrc = path$39.join(srcPkgJsonDir, "dist");
 		if (fs$17.existsSync(distSrc)) await copyDirRecursive(distSrc, path$39.join(targetDir, "dist"));
 		try {
-			const npmPkg = asJsonObject(parseJsonUnknown(await fs$17.promises.readFile(path$39.join(srcPkgJsonDir, "package.json"), "utf-8")));
+			const npmPkg = asJsonObject$1(parseJsonUnknown$1(await fs$17.promises.readFile(path$39.join(srcPkgJsonDir, "package.json"), "utf-8")));
 			if (npmPkg) await copyExtraFileDirs(npmPkg, srcPkgJsonDir, targetDir);
 		} catch {}
 	} finally {
@@ -2936,15 +2936,15 @@ function parseInstallSource(value) {
 function readPackageJson(pkgJsonPath) {
 	let raw;
 	try {
-		raw = asJsonObject(parseJsonUnknown(fs$17.readFileSync(pkgJsonPath, "utf-8")));
+		raw = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(pkgJsonPath, "utf-8")));
 	} catch {
 		return null;
 	}
 	if (!raw) return null;
-	const name = asString(raw["name"]);
-	const version = asString(raw["version"]);
+	const name = asString$1(raw["name"]);
+	const version = asString$1(raw["version"]);
 	if (!name || !version) return null;
-	const camstack = asJsonObject(raw["camstack"]);
+	const camstack = asJsonObject$1(raw["camstack"]);
 	const addonsField = camstack ? camstack["addons"] : void 0;
 	return {
 		name,
@@ -3064,7 +3064,7 @@ var AddonInstaller = class AddonInstaller {
 				}
 				await this.installFromNpm(packageName);
 			} catch (err) {
-				const msg = errMsg(err);
+				const msg = errMsg$1(err);
 				if (packageName === "@camstack/system") throw new Error(`Required package ${packageName} failed to install: ${msg}`, { cause: err });
 				this.logger.error(`Failed to install ${packageName}`, { meta: { error: msg } });
 			}
@@ -3117,7 +3117,7 @@ var AddonInstaller = class AddonInstaller {
 		if (this.installSource === "symlink") try {
 			return await this.installSymlink(packageName, sourceDir, pkgView.raw, targetDir);
 		} catch (err) {
-			this.logger.warn(`${packageName} — symlink failed, falling back to copy: ${errMsg(err)}`);
+			this.logger.warn(`${packageName} — symlink failed, falling back to copy: ${errMsg$1(err)}`);
 		}
 		return this.installCopy(packageName, sourceDir, pkgView.raw, targetDir);
 	}
@@ -3145,13 +3145,13 @@ var AddonInstaller = class AddonInstaller {
 		ensureDir(path$39.dirname(targetDir));
 		fs$17.symlinkSync(sourceDir, targetDir, "dir");
 		this.manifest.upsert(packageName, {
-			version: asString(pkgData.version, "0.0.0"),
+			version: asString$1(pkgData.version, "0.0.0"),
 			source: "local"
 		});
 		this.logger.info(`${packageName} — symlinked → ${sourceDir}`);
 		return {
-			name: asString(pkgData.name, packageName),
-			version: asString(pkgData.version, "0.0.0")
+			name: asString$1(pkgData.name, packageName),
+			version: asString$1(pkgData.version, "0.0.0")
 		};
 	}
 	async installCopy(packageName, sourceDir, pkgData, targetDir) {
@@ -3167,7 +3167,7 @@ var AddonInstaller = class AddonInstaller {
 		await copyDirRecursive(distDir, path$39.join(targetDir, "dist"));
 		await copyExtraFileDirs(pkgData, sourceDir, targetDir);
 		await fs$17.promises.writeFile(path$39.join(targetDir, ".install-source"), "local");
-		const localPkgVersion = asString(pkgData.version, "0.0.0");
+		const localPkgVersion = asString$1(pkgData.version, "0.0.0");
 		this.manifest.upsert(packageName, {
 			version: localPkgVersion,
 			source: "local"
@@ -3186,7 +3186,7 @@ var AddonInstaller = class AddonInstaller {
 		try {
 			await installManifestNativeDeps(targetDir, pkgData, this.logger, this.registry);
 		} catch (err) {
-			this.logger.warn(`${packageName} — native deps install failed (continuing)`, { meta: { error: errMsg(err) } });
+			this.logger.warn(`${packageName} — native deps install failed (continuing)`, { meta: { error: errMsg$1(err) } });
 		}
 		this.logger.info(`${packageName} — copied from ${sourceDir}`);
 		return {
@@ -3312,7 +3312,7 @@ var AddonInstaller = class AddonInstaller {
 		}).catch((cleanupErr) => {
 			this.logger.debug("evictInstallDir: aside cleanup deferred (likely held open)", { meta: {
 				asideDir,
-				error: errMsg(cleanupErr)
+				error: errMsg$1(cleanupErr)
 			} });
 		});
 	}
@@ -3375,7 +3375,7 @@ var AddonInstaller = class AddonInstaller {
 			try {
 				await installManifestNativeDeps(pkgDir, pkgView.raw, this.logger, this.registry);
 			} catch (nativeErr) {
-				throw new Error(`${pkgView.name} — native deps install failed: ${errMsg(nativeErr)}`, { cause: nativeErr });
+				throw new Error(`${pkgView.name} — native deps install failed: ${errMsg$1(nativeErr)}`, { cause: nativeErr });
 			}
 			await this.evictInstallDir(targetDir);
 			ensureDir(path$39.dirname(targetDir));
@@ -3434,7 +3434,7 @@ var AddonInstaller = class AddonInstaller {
 				};
 			} else result = await this.installFromNpm(packageName, version);
 		} catch (installErr) {
-			this.logger.error(`${packageName} — install failed, restoring backup`, { meta: { error: errMsg(installErr) } });
+			this.logger.error(`${packageName} — install failed, restoring backup`, { meta: { error: errMsg$1(installErr) } });
 			try {
 				if (fs$17.existsSync(addonDir)) fs$17.rmSync(addonDir, {
 					recursive: true,
@@ -3449,7 +3449,7 @@ var AddonInstaller = class AddonInstaller {
 			} catch (restoreErr) {
 				this.logger.error(`${packageName} — backup restore ALSO failed; manual recovery needed`, { meta: {
 					backupDir,
-					error: errMsg(restoreErr)
+					error: errMsg$1(restoreErr)
 				} });
 			}
 			throw installErr;
@@ -3504,7 +3504,7 @@ var AddonInstaller = class AddonInstaller {
 				} else throw renameErr;
 			}
 		} catch (swapErr) {
-			this.logger.error(`${packageName} — staged swap failed, restoring backup`, { meta: { error: errMsg(swapErr) } });
+			this.logger.error(`${packageName} — staged swap failed, restoring backup`, { meta: { error: errMsg$1(swapErr) } });
 			try {
 				if (fs$17.existsSync(addonDir)) fs$17.rmSync(addonDir, {
 					recursive: true,
@@ -3519,7 +3519,7 @@ var AddonInstaller = class AddonInstaller {
 			} catch (restoreErr) {
 				this.logger.error(`${packageName} — backup restore ALSO failed; manual recovery needed`, { meta: {
 					backupDir,
-					error: errMsg(restoreErr)
+					error: errMsg$1(restoreErr)
 				} });
 			}
 			throw swapErr;
@@ -3663,8 +3663,8 @@ var AddonInstaller = class AddonInstaller {
 		]) {
 			const candidate = path$39.join(this.workspaceDir, dirName);
 			try {
-				const pkg = asJsonObject(parseJsonUnknown(fs$17.readFileSync(path$39.join(candidate, "package.json"), "utf-8")));
-				if (pkg && asString(pkg["name"]) === packageName) return candidate;
+				const pkg = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(path$39.join(candidate, "package.json"), "utf-8")));
+				if (pkg && asString$1(pkg["name"]) === packageName) return candidate;
 			} catch {}
 		}
 		return null;
@@ -3680,7 +3680,7 @@ var AddonInstaller = class AddonInstaller {
 				timeout: 18e4
 			});
 		} catch (err) {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			this.logger.warn(`${packageName} auto-build failed`, { meta: { error: msg } });
 		}
 	}
@@ -3800,7 +3800,7 @@ function readPendingRestart(dataDir) {
 	}
 	let parsed;
 	try {
-		parsed = asJsonObject(parseJsonUnknown(raw));
+		parsed = asJsonObject$1(parseJsonUnknown$1(raw));
 	} catch (err) {
 		console.error("[restart-coordinator] Marker JSON invalid — clearing:", err);
 		clearPendingRestart(dataDir);
@@ -3811,7 +3811,7 @@ function readPendingRestart(dataDir) {
 		clearPendingRestart(dataDir);
 		return null;
 	}
-	const kindRaw = asString(parsed["kind"]);
+	const kindRaw = asString$1(parsed["kind"]);
 	const requestedAt = asNumber(parsed["requestedAt"]);
 	if (!isRestartKind(kindRaw) || requestedAt <= 0) {
 		console.error("[restart-coordinator] Marker missing kind/requestedAt — clearing");
@@ -7608,7 +7608,7 @@ var ConfigManager = class ConfigManager {
 	constructor(configPath) {
 		this.configPath = configPath;
 		const rawYaml = this.loadYaml();
-		const merged = this.applyEnvOverrides(asJsonObject$1(rawYaml) ?? {});
+		const merged = this.applyEnvOverrides(asJsonObject(rawYaml) ?? {});
 		this.bootstrapConfig = bootstrapSchema.parse(merged);
 		this.warnDefaultCredentials();
 		const dataPath = this.bootstrapConfig.server.dataPath ?? "camstack-data";
@@ -7663,9 +7663,9 @@ var ConfigManager = class ConfigManager {
 	*/
 	getSection(section) {
 		const merged = {};
-		const defaults = asJsonObject$1(this.getFromRuntimeDefaults(section));
+		const defaults = asJsonObject(this.getFromRuntimeDefaults(section));
 		if (defaults) Object.assign(merged, defaults);
-		const bootstrapSection = asJsonObject$1({ ...this.bootstrapConfig }[section]);
+		const bootstrapSection = asJsonObject({ ...this.bootstrapConfig }[section]);
 		if (bootstrapSection) Object.assign(merged, bootstrapSection);
 		if (this.settingsStore !== null) {
 			const nested = this.getNestedFromSystemSettings(section);
@@ -7684,7 +7684,7 @@ var ConfigManager = class ConfigManager {
 	/** Read all config for an addon from addon_settings. */
 	getAddonConfig(addonId) {
 		if (this.settingsStore !== null) return this.settingsStore.getAllAddon(addonId);
-		return asJsonObject$1(this.getFromBootstrap(`addons.${addonId}`)) ?? {};
+		return asJsonObject(this.getFromBootstrap(`addons.${addonId}`)) ?? {};
 	}
 	/** Write (bulk-replace) config for an addon to addon_settings. */
 	setAddonConfig(addonId, config) {
@@ -7922,8 +7922,8 @@ var ConfigManager = class ConfigManager {
 	update(section, data) {
 		if (!ConfigManager.BOOTSTRAP_SECTIONS.has(section)) throw new Error(`[ConfigManager] Section "${section}" is a runtime setting — use setSection() to persist via the settings-store, not update() which writes to config.yaml`);
 		let raw = {};
-		if (fs$17.existsSync(this.configPath)) raw = asJsonObject$1(load$1(fs$17.readFileSync(this.configPath, "utf-8"))) ?? {};
-		const existing = asJsonObject$1(raw[section]) ?? {};
+		if (fs$17.existsSync(this.configPath)) raw = asJsonObject(load$1(fs$17.readFileSync(this.configPath, "utf-8"))) ?? {};
+		const existing = asJsonObject(raw[section]) ?? {};
 		raw[section] = {
 			...existing,
 			...data
@@ -8024,13 +8024,13 @@ var ConfigManager = class ConfigManager {
 	loadRuntimeState() {
 		if (!fs$17.existsSync(this.runtimeStatePath)) return EMPTY_RUNTIME_STATE;
 		try {
-			const parsed = asJsonObject$1(parseJsonUnknown$1(fs$17.readFileSync(this.runtimeStatePath, "utf-8")));
+			const parsed = asJsonObject(parseJsonUnknown(fs$17.readFileSync(this.runtimeStatePath, "utf-8")));
 			if (parsed === null) return EMPTY_RUNTIME_STATE;
-			const systemActivation = asJsonObject$1(parsed.systemActivation) ?? {};
-			const deviceActivationRaw = asJsonObject$1(parsed.deviceActivation) ?? {};
+			const systemActivation = asJsonObject(parsed.systemActivation) ?? {};
+			const deviceActivationRaw = asJsonObject(parsed.deviceActivation) ?? {};
 			const deviceActivation = {};
 			for (const [deviceId, entry] of Object.entries(deviceActivationRaw)) {
-				const nested = asJsonObject$1(entry);
+				const nested = asJsonObject(entry);
 				if (nested === null) continue;
 				const bools = {};
 				for (const [k, v] of Object.entries(nested)) if (typeof v === "boolean") bools[k] = v;
@@ -91662,7 +91662,7 @@ var HubLogForwarder = class {
 			tags: mergedTags,
 			...entry.meta !== void 0 ? { meta: entry.meta } : {}
 		}).catch((err) => {
-			console.error(`[HubLogForwarder] $hub.log call failed: ${errMsg(err)}`);
+			console.error(`[HubLogForwarder] $hub.log call failed: ${errMsg$1(err)}`);
 		});
 	}
 	async shutdown() {
@@ -92039,7 +92039,7 @@ var AddonHealthMonitor = class {
 			alertEmitted: false,
 			retrying: false
 		});
-		if (wasAlerting) this.emit(EventCategory.AddonLoadRecovered, {
+		if (wasAlerting) this.emit(EventCategory$1.AddonLoadRecovered, {
 			packageName,
 			addonId: addonId ?? existing?.addonId,
 			retryCount: existing.retryCount
@@ -92057,7 +92057,7 @@ var AddonHealthMonitor = class {
 		const intervalIdx = Math.min(retryCount - 1, this.retryIntervalsMs.length - 1);
 		const nextRetryAt = t + this.retryIntervalsMs[intervalIdx];
 		const errPayload = {
-			message: errMsg(err),
+			message: errMsg$1(err),
 			...err instanceof Error && err.stack ? { stack: err.stack } : {}
 		};
 		const next = {
@@ -92081,7 +92081,7 @@ var AddonHealthMonitor = class {
 			inGrace: this.inGracePeriod(),
 			error: errPayload.message
 		} });
-		this.emit(EventCategory.AddonRetryScheduled, {
+		this.emit(EventCategory$1.AddonRetryScheduled, {
 			packageName,
 			addonId: next.addonId,
 			retryCount,
@@ -92089,7 +92089,7 @@ var AddonHealthMonitor = class {
 		});
 		if (!this.inGracePeriod() && !next.alertEmitted) {
 			next.alertEmitted = true;
-			this.emit(EventCategory.AddonLoadFailed, {
+			this.emit(EventCategory$1.AddonLoadFailed, {
 				packageName,
 				addonId: next.addonId,
 				error: errPayload,
@@ -92177,7 +92177,7 @@ var AddonHealthMonitor = class {
 			this.graceEmittedFor = true;
 			for (const s of this.state.values()) if (s.phase === "failed" && !s.alertEmitted && s.lastError) {
 				s.alertEmitted = true;
-				this.emit(EventCategory.AddonLoadFailed, {
+				this.emit(EventCategory$1.AddonLoadFailed, {
 					packageName: s.packageName,
 					addonId: s.addonId,
 					error: s.lastError,
@@ -92194,7 +92194,7 @@ var AddonHealthMonitor = class {
 		const existing = this.state.get(packageName);
 		if (!existing) return;
 		existing.retrying = true;
-		this.emit(EventCategory.AddonRetryAttempting, {
+		this.emit(EventCategory$1.AddonRetryAttempting, {
 			packageName,
 			addonId: existing.addonId,
 			retryCount: existing.retryCount
@@ -92508,7 +92508,7 @@ function createProcessService(parentNodeId, dataDir, deps, parentTcpPort, parent
 			entry.state = "crashed";
 			capturedBroker?.logger.error(`[${runnerId}] Process exited (code=${code}, signal=${signal})`);
 			const decision = crashSupervisor.recordCrash(runnerId);
-			emitRunnerEvent(EventCategory.ProcessCrashed, runnerId, {
+			emitRunnerEvent(EventCategory$1.ProcessCrashed, runnerId, {
 				processId: runnerId,
 				exitCode: code ?? void 0,
 				signal: signal ?? void 0
@@ -92518,14 +92518,14 @@ function createProcessService(parentNodeId, dataDir, deps, parentTcpPort, parent
 				capturedBroker?.logger.error(`[${runnerId}] Crash circuit-breaker tripped — ${decision.crashesInWindow} crashes in ${CRASH_WINDOW_MS}ms. Not respawning.`);
 				processes.set(runnerId, entry);
 				if (capturedBroker) forceMoleculerDisconnect(capturedBroker, entry.nodeId);
-				for (const addon of entry.runnerAddons) emitRunnerEvent(EventCategory.AddonCrashed, addon.addonId, {
+				for (const addon of entry.runnerAddons) emitRunnerEvent(EventCategory$1.AddonCrashed, addon.addonId, {
 					addonId: addon.addonId,
 					error: `Crash circuit-breaker tripped after ${decision.crashesInWindow} crashes in ${CRASH_WINDOW_MS}ms`
 				});
 				return;
 			}
 			capturedBroker?.logger.warn(`[${runnerId}] Restart scheduled (attempt #${decision.crashesInWindow}, backoff ${decision.backoffMs}ms)...`);
-			emitRunnerEvent(EventCategory.ProcessRestartScheduled, runnerId, {
+			emitRunnerEvent(EventCategory$1.ProcessRestartScheduled, runnerId, {
 				processId: runnerId,
 				delayMs: decision.backoffMs
 			});
@@ -93241,4 +93241,4 @@ async function stageFrameworkLockstep(input) {
 	return results;
 }
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, setNodeEventInterest, stageFrameworkLockstep, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, setNodeEventInterest, stageFrameworkLockstep, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };

package/dist/kernel/moleculer/child-cap-descriptors.d.ts

@@ -0,0 +1,34 @@
+import { ChildCapDescriptor } from '../transport/child-cap-protocol.js';
+/** One hosted addon's contribution to the runner UNION manifest. */
+export interface RunnerManifestEntry {
+    readonly addonId: string;
+    readonly capabilities: readonly string[];
+}
+/** One native-cap snapshot row — a device-scoped cap and the devices it covers. */
+export interface NativeCapSnapshotEntry {
+    readonly capName: string;
+    readonly addonId: string;
+    readonly deviceIds: readonly number[];
+}
+/**
+ * Builds the {@link ChildCapDescriptor} array that the UDS child transport
+ * sends to the parent on registration.
+ *
+ * - Singleton caps come from the runner UNION manifest (all caps registered by
+ *   every addon in this runner). One descriptor per unique (addonId, capName)
+ *   pair, mode `'singleton'` and no `deviceId`. The `addonId` stamp lets the
+ *   parent's manifest builder register each hosted addon's caps under the
+ *   REAL addon id — a GROUPED runner (`execution.group`) hosts several addons,
+ *   and deduplicating by capName alone would collapse two co-located providers
+ *   of the same collection cap (e.g. `network-access` from cloudflare-tunnel
+ *   AND tailscale-ingress) into one descriptor registered under a synthetic
+ *   `addonId = childId` (the group name) — the "@camstack/addon-net-access"
+ *   admin-UI bug.
+ * - Device-scoped caps come from the native-cap snapshot — one descriptor per
+ *   (capName, deviceId) pair, mode `'collection'`, stamped with the owning
+ *   addon's id.
+ *
+ * Pure module — extracted from `addon-runner.ts` (whose `main()` runs at
+ * import time) so it is unit-testable.
+ */
+export declare function buildChildCapDescriptors(manifest: readonly RunnerManifestEntry[], nativeCapSnapshot: readonly NativeCapSnapshotEntry[]): ChildCapDescriptor[];

package/dist/kernel/moleculer/child-cap-dispatch.d.ts

@@ -6,8 +6,16 @@ import { CapCallInput } from '../transport/child-cap-protocol.js';
  * registered".
  */
 export interface ChildCapDispatchDeps {
-    /** Resolve a singleton/system-scoped provider by cap name. */
-    getSingletonProvider(capName: string): object | null | undefined;
+    /**
+     * Resolve a singleton/system-scoped provider by cap name. `addonId` is a
+     * PROVIDER-SELECTION hint for grouped runners where multiple co-located
+     * addons register the SAME cap (e.g. two `network-access` providers in the
+     * `net-access` group): when it matches a hosted addon's provider, return
+     * that one; otherwise fall back to the cap's sole/first provider (an
+     * `addonId` that names no hosted provider is method DATA, not routing —
+     * e.g. `addons.restartAddon({ addonId })`).
+     */
+    getSingletonProvider(capName: string, addonId?: string): object | null | undefined;
     /** Resolve a device-scoped provider by cap name and device id. */
     getDeviceProvider(capName: string, deviceId: number): object | null | undefined;
 }

package/dist/kernel/transport/child-cap-protocol.d.ts

@@ -9,6 +9,16 @@ export interface ChildCapDescriptor {
     readonly mode: 'singleton' | 'collection';
     /** Present for device-scoped caps; absent for singleton/system caps. */
     readonly deviceId?: number;
+    /**
+     * The addon that registered this cap. A GROUPED runner (`execution.group`)
+     * hosts multiple addons in one child, so the parent can no longer assume
+     * `addonId === childId` — this field lets the parent's manifest builder
+     * split the descriptor set into one `RegisteredAddonManifest` entry per
+     * hosted addon (real provider registryKeys, per-addon settings/logs/UI).
+     * OPTIONAL for wire compat: a legacy child omits it and the parent falls
+     * back to the childId (identical to the historical single-addon behaviour).
+     */
+    readonly addonId?: string;
 }
 /** First message a child sends after connecting — its complete cap manifest. */
 export interface RegisterMessage {
@@ -90,6 +100,16 @@ export interface CapCallMessage {
     readonly deviceId?: number;
     /** Optional per-call node pin (out-of-band routing hint; see {@link CapCallOutMessage.nodeId}). */
     readonly nodeId?: string;
+    /**
+     * Out-of-band PROVIDER-selection hint: the addonId of the provider the hub
+     * resolved for this call. Needed for GROUPED runners where two co-located
+     * addons register the SAME collection cap (e.g. `network-access` from both
+     * cloudflare-tunnel and tailscale-ingress) — the hub's collection mount
+     * strips `addonId` from the method args after resolving the provider, so
+     * without this hint the child could only pick one-per-capName. Absent →
+     * the child dispatch falls back to its sole provider for the cap.
+     */
+    readonly addonId?: string;
 }
 /** Parent → child: a system event delivered by the hub for the child to handle locally. */
 export interface ParentEventMessage {