@camstack/system 1.1.35 → 1.1.36

package/dist/{dist-DriXJoVg.js → dist-COIhbSao.js}

@@ -1,5 +1,5 @@
 let zod = require("zod");
-//#region ../types/dist/sleep-Cc14_yxc.mjs
+//#region ../types/dist/sleep-DiQ8xW1M.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -7707,7 +7707,7 @@ var BoundingBoxSchema = zod.z.object({
 	w: zod.z.number(),
 	h: zod.z.number()
 });
-var SpatialDetectionSchema = zod.z.object({
+zod.z.object({
 	class: zod.z.string(),
 	originalClass: zod.z.string(),
 	score: zod.z.number(),
@@ -7912,11 +7912,6 @@ var PipelineSchemaSchema = zod.z.object({
 	selectedEngine: PipelineEngineChoiceSchema,
 	slots: zod.z.array(PipelineSlotSchemaSchema).readonly()
 });
-var DetectorOutputSchema = zod.z.object({
-	detections: zod.z.array(SpatialDetectionSchema).readonly(),
-	inferenceMs: zod.z.number(),
-	modelId: zod.z.string()
-});
 var EngineProvisioningSchema = zod.z.object({
 	runtimeId: zod.z.enum([
 		"onnx",
@@ -8082,23 +8077,23 @@ var pipelineExecutorCapability = {
 			auth: "admin"
 		}),
 		/**
-		* Reset ONE node's detection-pipeline to its factory defaults, forcing
-		* regeneration of the (now hardware-aware) default object-detection
-		* model. `nodeId` is the ROUTING key — the generated cap-router strips
-		* it (default `nodeIdMode: 'routing'`, same as `getSelectedEngine` /
-		* `getDefaultSteps`) and dispatches to that node, so the provider method
-		* runs ON the target node and receives no `nodeId`.
+		* Clear THIS node's executor-side PER-DEVICE settings stores (the
+		* per-camera step overrides the object-detection root reads via
+		* `applyDeviceOverridesToTree`). `nodeId` is the ROUTING key — the
+		* generated cap-router strips it (default `nodeIdMode: 'routing'`) and
+		* dispatches to that node, so the provider method runs ON the target
+		* node and receives no `nodeId`.
 		*
-		* Clears the node's persisted global pipeline seed (`pipelineSteps`) +
-		* legacy engine blob (`pipelineEngine`) and every device's per-camera
-		* step overrides, then re-seeds the hardware-aware default tree. Returns
-		* the regenerated object-detection model id (null when the default tree
-		* has no detector for this node's engine format) so the caller can
-		* verify the reset without a second round-trip.
+		* This is the slimmed executor leg of the orchestrator's
+		* `resetNodePipelineDefaults` flow (which owns the real reset: node
+		* addonDefaults pins + per-camera orchestrator overrides). The legacy
+		* `resetToDefault` — which reset a persisted global step-tree seed
+		* nothing in the live per-camera path read — was removed together with
+		* that seed.
 		*/
-		resetToDefault: method(zod.z.object({ nodeId: zod.z.string() }), zod.z.object({
+		clearDeviceOverrides: method(zod.z.object({ nodeId: zod.z.string() }), zod.z.object({
 			success: zod.z.literal(true),
-			regeneratedModelId: zod.z.string().nullable()
+			clearedDevices: zod.z.number()
 		}), {
 			kind: "mutation",
 			auth: "admin"
@@ -8144,11 +8139,6 @@ var pipelineExecutorCapability = {
 			modelId: zod.z.string(),
 			format: ModelFormatSchema$1
 		}), zod.z.object({ success: zod.z.literal(true) }), { kind: "mutation" }),
-		detect: method(zod.z.object({
-			addonId: zod.z.string(),
-			frame: FrameInputSchema,
-			config: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
-		}), DetectorOutputSchema),
 		/**
 		* Stateless single-frame execution. Callers (runner, benchmark) pass
 		* the complete `engine` + `steps` tree; the executor holds no state
@@ -11041,7 +11031,9 @@ var AddonPageDeclarationSchema$1 = zod.z.object({
 	icon: zod.z.string(),
 	path: zod.z.string(),
 	remoteName: zod.z.string(),
-	bundle: zod.z.string()
+	bundle: zod.z.string(),
+	section: zod.z.string().optional(),
+	sectionLabel: zod.z.string().optional()
 });
 var AddonPageInfoSchema = zod.z.object({
 	addonId: zod.z.string(),
@@ -11086,7 +11078,18 @@ var AddonPageDeclarationSchema = zod.z.object({
 	* the static-file route can compute an mtime-based cache-buster URL
 	* without a separate filesystem stat.
 	*/
-	bundle: zod.z.string()
+	bundle: zod.z.string(),
+	/**
+	* Sidebar section this page docks into. Well-known ids: `'detection'`,
+	* `'cluster'`, `'administration'` — the page renders inside that group.
+	* Any OTHER string creates (or joins) a custom section rendered after
+	* the built-in groups; its label comes from `sectionLabel` (first
+	* declaration wins), falling back to the id. Absent → the legacy
+	* "Addon Pages" group.
+	*/
+	section: zod.z.string().optional(),
+	/** Display label for a CUSTOM `section` id (ignored for well-known ids). */
+	sectionLabel: zod.z.string().optional()
 });
 var addonPagesSourceCapability = {
 	name: "addon-pages-source",
@@ -15034,7 +15037,12 @@ var AgentPipelineSettingsSchema = zod.z.object({
 	detectWeight: zod.z.number().positive().optional(),
 	/** Node is eligible to run the detection pipeline (decode + inference). */
 	detect: zod.z.boolean().optional(),
-	/** Node is eligible to host decoder sessions. */
+	/**
+	* DEPRECATED AND IGNORED. Decode is always co-located with its frame
+	* consumer, so decode eligibility IS detect eligibility. Kept optional in
+	* the schema ONLY so persisted stores written before the removal still
+	* parse — no code reads it and no write path emits it.
+	*/
 	decode: zod.z.boolean().optional(),
 	/** Node is eligible to run audio-analyzer sessions. */
 	audio: zod.z.boolean().optional(),
@@ -15095,25 +15103,6 @@ var PipelineAssignmentSchema = zod.z.object({
 	assignedAt: zod.z.number()
 });
 /**
-* Decoder placement record. Symmetric to `PipelineAssignmentSchema` but for
-* the decoder-node placement domain (`balanceDecoder` decision: manual pin
-* → co-located with pipeline → capacity).
-*/
-var DecoderAssignmentSchema = zod.z.object({
-	deviceId: zod.z.number(),
-	/** Moleculer node id of the decoder provider currently responsible for this camera. */
-	decoderNodeId: zod.z.string(),
-	/** True when the assignment was set manually via `assignDecoder`, false when chosen by the balancer. */
-	pinned: zod.z.boolean(),
-	/** Why this assignment was made — useful for debugging the decoder balancer. */
-	reason: zod.z.enum([
-		"manual",
-		"co-located",
-		"capacity",
-		"hardware-affinity"
-	])
-});
-/**
 * Per-agent load summary surfaced to the load balancer + dashboards.
 * Aggregated from each runner's `getLocalLoad` cap call.
 */
@@ -15400,21 +15389,6 @@ var pipelineOrchestratorCapability = {
 		* present. Defaults to `{ ownerNodeId: 'hub' }`.
 		*/
 		getIngestOwner: method(zod.z.void(), IngestOwnerSchema),
-		/** Pin a device's decoder to a specific node. */
-		assignDecoder: method(zod.z.object({
-			deviceId: zod.z.number(),
-			nodeId: zod.z.string()
-		}), zod.z.void(), {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		/** Clear a device's decoder pin (revert to auto). */
-		unassignDecoder: method(zod.z.object({ deviceId: zod.z.number() }), zod.z.void(), {
-			kind: "mutation",
-			auth: "admin"
-		}),
-		/** Get every camera's decoder placement. */
-		getDecoderAssignments: method(zod.z.void(), zod.z.array(DecoderAssignmentSchema).readonly()),
 		/** Pin a device's audio analysis to a specific cluster node. */
 		assignAudio: method(zod.z.object({
 			deviceId: zod.z.number(),
@@ -15446,23 +15420,6 @@ var pipelineOrchestratorCapability = {
 			pinned: zod.z.boolean(),
 			assignedAt: zod.z.number()
 		}))),
-		/**
-		* Get one camera's decoder placement (computed if not yet pinned).
-		*
-		* ADVISORY today: reports the orchestrator's decoder preference only.
-		* Actual decode placement is broker-owned (local-node pin + frame-plane
-		* co-location guard). Reserved to become the binding source/decoder-owner
-		* control in the stream-LB epic (Phase 2).
-		*
-		* `pipelineNodeId` is the node already chosen to run inference for
-		* this camera. When provided, the balancer prefers co-location with
-		* it; omitted → falls back to the last known assignment in the
-		* `assignments` map and finally to 'hub'.
-		*/
-		getDecoderAssignment: method(zod.z.object({
-			deviceId: zod.z.number(),
-			pipelineNodeId: zod.z.string().optional()
-		}), DecoderAssignmentSchema),
 		/** Read one agent's settings. Null when not yet seeded. */
 		getAgentSettings: method(zod.z.object({ agentNodeId: zod.z.string() }), AgentPipelineSettingsSchema.nullable()),
 		/** Enumerate every agent's settings (hub + remote runners). */
@@ -15532,14 +15489,15 @@ var pipelineOrchestratorCapability = {
 		* `enabledDecoderNodes`, `enabledAudioNodes`, `remoteSourcingNodes`).
 		* Each flag is optional in the patch: omit a flag to leave it unchanged,
 		* pass `null` to reset it to the node default (`hub` → capable, every
-		* other node → not). Detection/decode/audio eligibility is derived from
-		* these flags across the cluster; changing them re-derives the enabled
-		* sets and reconciles dispatch immediately.
+		* other node → not). Detection/audio eligibility is derived from these
+		* flags across the cluster; changing them re-derives the enabled sets
+		* and reconciles dispatch immediately. There is NO separate decode flag:
+		* decode is always co-located with its frame consumer, so decode
+		* eligibility IS detect eligibility.
 		*/
 		setAgentCapabilities: method(zod.z.object({
 			agentNodeId: zod.z.string(),
 			detect: zod.z.boolean().nullable().optional(),
-			decode: zod.z.boolean().nullable().optional(),
 			audio: zod.z.boolean().nullable().optional(),
 			ingest: zod.z.boolean().nullable().optional()
 		}), zod.z.object({ success: zod.z.literal(true) }), {
@@ -15562,6 +15520,34 @@ var pipelineOrchestratorCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Reset one node's pipeline to its hardware-aware defaults — the HONEST
+		* reset (replaces the executor's legacy `resetToDefault`, which cleared a
+		* dead persisted step-tree seed nothing in the live path read):
+		*   (a) strips every `modelId` pin from that node's
+		*       `agentSettings.addonDefaults` (cells revert to Auto — the node
+		*       resolves its own hardware-aware format default at runtime);
+		*   (b) clears per-camera step overrides scoped to that node
+		*       (`stepOverridesByAgent[node]` + the wholesale
+		*       `pipelineByAgent[node]` escape hatch);
+		*   (c) clears the executor-side per-device settings stores on that node
+		*       (`pipelineExecutor.clearDeviceOverrides`);
+		*   (d) hot-reloads every camera assigned to the node.
+		*
+		* Returns the EFFECTIVE post-reset object-detection model for the node
+		* (the executor's pure hardware-aware default) so the UI can report what
+		* will actually run — not a value that never reaches the live path.
+		*/
+		resetNodePipelineDefaults: method(zod.z.object({ agentNodeId: zod.z.string() }), zod.z.object({
+			success: zod.z.literal(true),
+			/** Hardware-aware default detection model now in effect on the node (null when unresolvable). */
+			effectiveModelId: zod.z.string().nullable(),
+			/** Number of cameras whose node-scoped overrides were cleared. */
+			clearedCameraOverrides: zod.z.number()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Read one camera's settings. Null when never touched (inherits agent defaults fully). */
 		getCameraSettings: method(zod.z.object({ deviceId: zod.z.number() }), CameraPipelineSettingsSchema.nullable()),
 		/** Set or clear the 3-state toggle for one (camera, addonId). Pass `enabled: null` to clear and revert to agent default. */
@@ -22750,23 +22736,23 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineExecutor.deleteModel": {
+	"pipelineExecutor.clearDeviceOverrides": {
 		capName: "pipeline-executor",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
-	"pipelineExecutor.deleteTemplate": {
+	"pipelineExecutor.deleteModel": {
 		capName: "pipeline-executor",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
-	"pipelineExecutor.detect": {
+	"pipelineExecutor.deleteTemplate": {
 		capName: "pipeline-executor",
 		capScope: "system",
 		addonId: null,
-		access: "view"
+		access: "delete"
 	},
 	"pipelineExecutor.downloadModel": {
 		capName: "pipeline-executor",
@@ -22912,12 +22898,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineExecutor.resetToDefault": {
-		capName: "pipeline-executor",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"pipelineExecutor.runAudioTest": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -22978,12 +22958,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.assignDecoder": {
-		capName: "pipeline-orchestrator",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"pipelineOrchestrator.assignPipeline": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -23062,18 +23036,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineOrchestrator.getDecoderAssignment": {
-		capName: "pipeline-orchestrator",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"pipelineOrchestrator.getDecoderAssignments": {
-		capName: "pipeline-orchestrator",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"pipelineOrchestrator.getGlobalMetrics": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -23122,6 +23084,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineOrchestrator.resetNodePipelineDefaults": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineOrchestrator.resolvePipeline": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -23194,12 +23162,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.unassignDecoder": {
-		capName: "pipeline-orchestrator",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"pipelineOrchestrator.unassignPipeline": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DriXJoVg.js");
+const require_dist = require("./dist-COIhbSao.js");
 const require_model_download_service = require("./model-download-service-D-Umz4-L.js");
 const require_resource_monitor = require("./resource-monitor-DNNomR-i.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
@@ -21,7 +21,7 @@ const require_builtins_local_auth_local_auth_addon = require("./builtins/local-a
 require("./builtins/local-auth/index.js");
 const require_builtins_device_manager_device_manager_addon = require("./builtins/device-manager/device-manager.addon.js");
 require("./builtins/device-manager/index.js");
-const require_manifest_python_deps = require("./manifest-python-deps-jZA_Qorz.js");
+const require_manifest_python_deps = require("./manifest-python-deps-CZFqI4wp.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 let _camstack_types_node = require("@camstack/types/node");
 let zod = require("zod");

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { $ as errMsg$1, A as isVoidInput, Ct as resolveCapMount, F as looseSchema, M as lifecycleJobSchema, O as isArrayOutputSchema, St as readinessKey, V as procedureAuthKey, _t as expandCapMethods, bt as parseJsonObject, ct as ReadinessRegistry, dt as asJsonObject$1, ft as asNumber, ht as emitDownForOwnedCaps, j as kebabToCamel, k as isObjectInput, lt as ReadinessTimeoutError, mt as createEvent, nt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, o as METHOD_ACCESS_MAP, p as addonSettingsCapability, pt as asString$1, rt as DEVICE_STATUS_METHOD, s as RUNTIME_DEFAULTS, st as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tt as DATAPLANE_SECRET_HEADER$1, wt as scopeKey, xt as parseJsonUnknown$1 } from "./dist-DlGZpWo8.mjs";
+import { $ as errMsg$1, A as isVoidInput, Ct as resolveCapMount, F as looseSchema, M as lifecycleJobSchema, O as isArrayOutputSchema, St as readinessKey, V as procedureAuthKey, _t as expandCapMethods, bt as parseJsonObject, ct as ReadinessRegistry, dt as asJsonObject$1, ft as asNumber, ht as emitDownForOwnedCaps, j as kebabToCamel, k as isObjectInput, lt as ReadinessTimeoutError, mt as createEvent, nt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, o as METHOD_ACCESS_MAP, p as addonSettingsCapability, pt as asString$1, rt as DEVICE_STATUS_METHOD, s as RUNTIME_DEFAULTS, st as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tt as DATAPLANE_SECRET_HEADER$1, wt as scopeKey, xt as parseJsonUnknown$1 } from "./dist-C7oOY4iL.mjs";
 import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-C-IHWnXx.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Le3l0qS2.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
@@ -19,7 +19,7 @@ import { LocalAuthAddon, a as require_ms, c as __esmMin, d as __toCommonJS, f as
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-MUu1e33G.mjs";
+import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-BYIV8-rc.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { z } from "zod";

package/dist/kernel/moleculer/child-cap-descriptors.d.ts

@@ -0,0 +1,34 @@
+import { ChildCapDescriptor } from '../transport/child-cap-protocol.js';
+/** One hosted addon's contribution to the runner UNION manifest. */
+export interface RunnerManifestEntry {
+    readonly addonId: string;
+    readonly capabilities: readonly string[];
+}
+/** One native-cap snapshot row — a device-scoped cap and the devices it covers. */
+export interface NativeCapSnapshotEntry {
+    readonly capName: string;
+    readonly addonId: string;
+    readonly deviceIds: readonly number[];
+}
+/**
+ * Builds the {@link ChildCapDescriptor} array that the UDS child transport
+ * sends to the parent on registration.
+ *
+ * - Singleton caps come from the runner UNION manifest (all caps registered by
+ *   every addon in this runner). One descriptor per unique (addonId, capName)
+ *   pair, mode `'singleton'` and no `deviceId`. The `addonId` stamp lets the
+ *   parent's manifest builder register each hosted addon's caps under the
+ *   REAL addon id — a GROUPED runner (`execution.group`) hosts several addons,
+ *   and deduplicating by capName alone would collapse two co-located providers
+ *   of the same collection cap (e.g. `network-access` from cloudflare-tunnel
+ *   AND tailscale-ingress) into one descriptor registered under a synthetic
+ *   `addonId = childId` (the group name) — the "@camstack/addon-net-access"
+ *   admin-UI bug.
+ * - Device-scoped caps come from the native-cap snapshot — one descriptor per
+ *   (capName, deviceId) pair, mode `'collection'`, stamped with the owning
+ *   addon's id.
+ *
+ * Pure module — extracted from `addon-runner.ts` (whose `main()` runs at
+ * import time) so it is unit-testable.
+ */
+export declare function buildChildCapDescriptors(manifest: readonly RunnerManifestEntry[], nativeCapSnapshot: readonly NativeCapSnapshotEntry[]): ChildCapDescriptor[];

package/dist/kernel/moleculer/child-cap-dispatch.d.ts

@@ -6,8 +6,16 @@ import { CapCallInput } from '../transport/child-cap-protocol.js';
  * registered".
  */
 export interface ChildCapDispatchDeps {
-    /** Resolve a singleton/system-scoped provider by cap name. */
-    getSingletonProvider(capName: string): object | null | undefined;
+    /**
+     * Resolve a singleton/system-scoped provider by cap name. `addonId` is a
+     * PROVIDER-SELECTION hint for grouped runners where multiple co-located
+     * addons register the SAME cap (e.g. two `network-access` providers in the
+     * `net-access` group): when it matches a hosted addon's provider, return
+     * that one; otherwise fall back to the cap's sole/first provider (an
+     * `addonId` that names no hosted provider is method DATA, not routing —
+     * e.g. `addons.restartAddon({ addonId })`).
+     */
+    getSingletonProvider(capName: string, addonId?: string): object | null | undefined;
     /** Resolve a device-scoped provider by cap name and device id. */
     getDeviceProvider(capName: string, deviceId: number): object | null | undefined;
 }

package/dist/kernel/transport/child-cap-protocol.d.ts

@@ -9,6 +9,16 @@ export interface ChildCapDescriptor {
     readonly mode: 'singleton' | 'collection';
     /** Present for device-scoped caps; absent for singleton/system caps. */
     readonly deviceId?: number;
+    /**
+     * The addon that registered this cap. A GROUPED runner (`execution.group`)
+     * hosts multiple addons in one child, so the parent can no longer assume
+     * `addonId === childId` — this field lets the parent's manifest builder
+     * split the descriptor set into one `RegisteredAddonManifest` entry per
+     * hosted addon (real provider registryKeys, per-addon settings/logs/UI).
+     * OPTIONAL for wire compat: a legacy child omits it and the parent falls
+     * back to the childId (identical to the historical single-addon behaviour).
+     */
+    readonly addonId?: string;
 }
 /** First message a child sends after connecting — its complete cap manifest. */
 export interface RegisterMessage {
@@ -90,6 +100,16 @@ export interface CapCallMessage {
     readonly deviceId?: number;
     /** Optional per-call node pin (out-of-band routing hint; see {@link CapCallOutMessage.nodeId}). */
     readonly nodeId?: string;
+    /**
+     * Out-of-band PROVIDER-selection hint: the addonId of the provider the hub
+     * resolved for this call. Needed for GROUPED runners where two co-located
+     * addons register the SAME collection cap (e.g. `network-access` from both
+     * cloudflare-tunnel and tailscale-ingress) — the hub's collection mount
+     * strips `addonId` from the method args after resolving the provider, so
+     * without this hint the child could only pick one-per-capName. Absent →
+     * the child dispatch falls back to its sole provider for the cap.
+     */
+    readonly addonId?: string;
 }
 /** Parent → child: a system event delivered by the hub for the child to handle locally. */
 export interface ParentEventMessage {

package/dist/{manifest-python-deps-MUu1e33G.mjs → manifest-python-deps-BYIV8-rc.mjs}

@@ -1,4 +1,4 @@
-import { H as readNodePin } from "./dist-DlGZpWo8.mjs";
+import { H as readNodePin } from "./dist-C7oOY4iL.mjs";
 import { ensureBinary, ensureFfmpeg, ensurePython, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { createServer } from "node:http";
 import * as fs from "node:fs";
@@ -4192,7 +4192,8 @@ var LocalChildRegistry = class {
 			capName: input.capName,
 			method: input.method,
 			args: input.args,
-			...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {}
+			...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {},
+			...input.addonId !== void 0 ? { addonId: input.addonId } : {}
 		};
 	}
 	listChildren() {
@@ -4890,6 +4891,7 @@ function createParentUnownedCallHandler(deps) {
 	return async (input) => {
 		const deviceId = input.deviceId ?? extractDeviceId(input.args);
 		const nodeId = deps.isDataNodeIdCap?.(input.capName) === true ? void 0 : input.nodeId ?? extractNodeId(input.args);
+		const pinnedToOtherNode = nodeId !== void 0 && nodeId !== deps.broker.nodeID;
 		if (nodeId === void 0) {
 			const empty = deps.resolveEmptyCollection?.(input.capName, input.method);
 			if (empty != null) return empty;
@@ -4906,7 +4908,7 @@ function createParentUnownedCallHandler(deps) {
 		}
 		else deps.logger?.debug?.(`onUnownedCall: resolver not ready, routing ${input.capName}.${input.method} via broker fallback`);
 		try {
-			if (deviceId !== void 0) {
+			if (deviceId !== void 0 && !pinnedToOtherNode) {
 				const localDispatcher = deps.getLocalDispatcher?.() ?? null;
 				if (localDispatcher !== null) {
 					let childId = localDispatcher.resolveChildId(input.capName, deviceId);

package/dist/{manifest-python-deps-jZA_Qorz.js → manifest-python-deps-CZFqI4wp.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DriXJoVg.js");
+const require_dist = require("./dist-COIhbSao.js");
 let _camstack_types_node = require("@camstack/types/node");
 let node_http = require("node:http");
 let node_fs = require("node:fs");
@@ -4194,7 +4194,8 @@ var LocalChildRegistry = class {
 			capName: input.capName,
 			method: input.method,
 			args: input.args,
-			...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {}
+			...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {},
+			...input.addonId !== void 0 ? { addonId: input.addonId } : {}
 		};
 	}
 	listChildren() {
@@ -4892,6 +4893,7 @@ function createParentUnownedCallHandler(deps) {
 	return async (input) => {
 		const deviceId = input.deviceId ?? extractDeviceId(input.args);
 		const nodeId = deps.isDataNodeIdCap?.(input.capName) === true ? void 0 : input.nodeId ?? extractNodeId(input.args);
+		const pinnedToOtherNode = nodeId !== void 0 && nodeId !== deps.broker.nodeID;
 		if (nodeId === void 0) {
 			const empty = deps.resolveEmptyCollection?.(input.capName, input.method);
 			if (empty != null) return empty;
@@ -4908,7 +4910,7 @@ function createParentUnownedCallHandler(deps) {
 		}
 		else deps.logger?.debug?.(`onUnownedCall: resolver not ready, routing ${input.capName}.${input.method} via broker fallback`);
 		try {
-			if (deviceId !== void 0) {
+			if (deviceId !== void 0 && !pinnedToOtherNode) {
 				const localDispatcher = deps.getLocalDispatcher?.() ?? null;
 				if (localDispatcher !== null) {
 					let childId = localDispatcher.resolveChildId(input.capName, deviceId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.1.35",
+  "version": "1.1.36",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",