@camstack/system 1.1.35 → 1.1.37

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DriXJoVg.js");
+const require_dist = require("./dist-fRVWwrkF.js");
 const require_model_download_service = require("./model-download-service-D-Umz4-L.js");
 const require_resource_monitor = require("./resource-monitor-DNNomR-i.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
@@ -21,7 +21,7 @@ const require_builtins_local_auth_local_auth_addon = require("./builtins/local-a
 require("./builtins/local-auth/index.js");
 const require_builtins_device_manager_device_manager_addon = require("./builtins/device-manager/device-manager.addon.js");
 require("./builtins/device-manager/index.js");
-const require_manifest_python_deps = require("./manifest-python-deps-jZA_Qorz.js");
+const require_manifest_python_deps = require("./manifest-python-deps-B6ahe90k.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 let _camstack_types_node = require("@camstack/types/node");
 let zod = require("zod");
@@ -91751,6 +91751,8 @@ var HubNodeRegistry = class {
 	nodes = /* @__PURE__ */ new Map();
 	/** nodeId → its device-scoped native caps (last `registerNode` wins). */
 	nativeCaps = /* @__PURE__ */ new Map();
+	/** nodeId → its root-package identity (last `registerNode` wins). */
+	rootPackages = /* @__PURE__ */ new Map();
 	/**
 	* deviceId → flat native-cap entries for THAT device, across all nodes.
 	* Maintained incrementally on every `registerNode`/`removeNode` so a
@@ -91798,6 +91800,11 @@ var HubNodeRegistry = class {
 			deviceIds: [...n.deviceIds]
 		}));
 		this.nativeCaps.set(params.nodeId, caps);
+		if (params.rootPackage !== void 0) this.rootPackages.set(params.nodeId, {
+			name: params.rootPackage.name,
+			version: params.rootPackage.version
+		});
+		else this.rootPackages.delete(params.nodeId);
 		for (const cap of caps) for (const deviceId of cap.deviceIds) {
 			const entry = {
 				nodeId: params.nodeId,
@@ -91815,6 +91822,11 @@ var HubNodeRegistry = class {
 		this.dropNodeFromDeviceIndex(nodeId);
 		this.nodes.delete(nodeId);
 		this.nativeCaps.delete(nodeId);
+		this.rootPackages.delete(nodeId);
+	}
+	/** The node's root-package identity, or null when it never reported one. */
+	getNodeRootPackage(nodeId) {
+		return this.rootPackages.get(nodeId) ?? null;
 	}
 	/** The node's manifest, or undefined when the node never registered. */
 	getNodeManifest(nodeId) {
@@ -91868,11 +91880,14 @@ var HubNodeRegistry = class {
 //#region src/kernel/moleculer/register-node-client.ts
 /**
 * Build a `RegisterNodeParams` from a node id, its per-addon manifests,
-* optionally its device-scoped native caps, and optionally the SHA-256 hash
-* of the cluster secret. `nativeCaps` is omitted entirely on the first
-* handshake; `clusterSecretHash` is omitted when no secret is configured.
+* optionally its device-scoped native caps, optionally the SHA-256 hash
+* of the cluster secret, and optionally the node's root-package identity
+* (runtime-updatable node packages: version visibility). `nativeCaps` is
+* omitted entirely on the first handshake; `clusterSecretHash` is omitted
+* when no secret is configured; `rootPackage` is omitted by nodes that do
+* not run the root-package model (UDS children).
 */
-function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash) {
+function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash, rootPackage) {
 	return {
 		nodeId,
 		addons: addons.map((a) => ({
@@ -91884,7 +91899,11 @@ function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash) {
 			addonId: n.addonId,
 			deviceIds: [...n.deviceIds]
 		})) },
-		...clusterSecretHash === void 0 ? {} : { clusterSecretHash }
+		...clusterSecretHash === void 0 ? {} : { clusterSecretHash },
+		...rootPackage === void 0 ? {} : { rootPackage: {
+			name: rootPackage.name,
+			version: rootPackage.version
+		} }
 	};
 }
 function delay(ms, signal) {

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { $ as errMsg$1, A as isVoidInput, Ct as resolveCapMount, F as looseSchema, M as lifecycleJobSchema, O as isArrayOutputSchema, St as readinessKey, V as procedureAuthKey, _t as expandCapMethods, bt as parseJsonObject, ct as ReadinessRegistry, dt as asJsonObject$1, ft as asNumber, ht as emitDownForOwnedCaps, j as kebabToCamel, k as isObjectInput, lt as ReadinessTimeoutError, mt as createEvent, nt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, o as METHOD_ACCESS_MAP, p as addonSettingsCapability, pt as asString$1, rt as DEVICE_STATUS_METHOD, s as RUNTIME_DEFAULTS, st as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tt as DATAPLANE_SECRET_HEADER$1, wt as scopeKey, xt as parseJsonUnknown$1 } from "./dist-DlGZpWo8.mjs";
+import { $ as errMsg$1, A as isVoidInput, Ct as resolveCapMount, F as looseSchema, M as lifecycleJobSchema, O as isArrayOutputSchema, St as readinessKey, V as procedureAuthKey, _t as expandCapMethods, bt as parseJsonObject, ct as ReadinessRegistry, dt as asJsonObject$1, ft as asNumber, ht as emitDownForOwnedCaps, j as kebabToCamel, k as isObjectInput, lt as ReadinessTimeoutError, mt as createEvent, nt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, o as METHOD_ACCESS_MAP, p as addonSettingsCapability, pt as asString$1, rt as DEVICE_STATUS_METHOD, s as RUNTIME_DEFAULTS, st as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tt as DATAPLANE_SECRET_HEADER$1, wt as scopeKey, xt as parseJsonUnknown$1 } from "./dist-CU3lb_Ys.mjs";
 import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-C-IHWnXx.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Le3l0qS2.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
@@ -19,7 +19,7 @@ import { LocalAuthAddon, a as require_ms, c as __esmMin, d as __toCommonJS, f as
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-MUu1e33G.mjs";
+import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-4QvOLiBn.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { z } from "zod";
@@ -91743,6 +91743,8 @@ var HubNodeRegistry = class {
 	nodes = /* @__PURE__ */ new Map();
 	/** nodeId → its device-scoped native caps (last `registerNode` wins). */
 	nativeCaps = /* @__PURE__ */ new Map();
+	/** nodeId → its root-package identity (last `registerNode` wins). */
+	rootPackages = /* @__PURE__ */ new Map();
 	/**
 	* deviceId → flat native-cap entries for THAT device, across all nodes.
 	* Maintained incrementally on every `registerNode`/`removeNode` so a
@@ -91790,6 +91792,11 @@ var HubNodeRegistry = class {
 			deviceIds: [...n.deviceIds]
 		}));
 		this.nativeCaps.set(params.nodeId, caps);
+		if (params.rootPackage !== void 0) this.rootPackages.set(params.nodeId, {
+			name: params.rootPackage.name,
+			version: params.rootPackage.version
+		});
+		else this.rootPackages.delete(params.nodeId);
 		for (const cap of caps) for (const deviceId of cap.deviceIds) {
 			const entry = {
 				nodeId: params.nodeId,
@@ -91807,6 +91814,11 @@ var HubNodeRegistry = class {
 		this.dropNodeFromDeviceIndex(nodeId);
 		this.nodes.delete(nodeId);
 		this.nativeCaps.delete(nodeId);
+		this.rootPackages.delete(nodeId);
+	}
+	/** The node's root-package identity, or null when it never reported one. */
+	getNodeRootPackage(nodeId) {
+		return this.rootPackages.get(nodeId) ?? null;
 	}
 	/** The node's manifest, or undefined when the node never registered. */
 	getNodeManifest(nodeId) {
@@ -91860,11 +91872,14 @@ var HubNodeRegistry = class {
 //#region src/kernel/moleculer/register-node-client.ts
 /**
 * Build a `RegisterNodeParams` from a node id, its per-addon manifests,
-* optionally its device-scoped native caps, and optionally the SHA-256 hash
-* of the cluster secret. `nativeCaps` is omitted entirely on the first
-* handshake; `clusterSecretHash` is omitted when no secret is configured.
+* optionally its device-scoped native caps, optionally the SHA-256 hash
+* of the cluster secret, and optionally the node's root-package identity
+* (runtime-updatable node packages: version visibility). `nativeCaps` is
+* omitted entirely on the first handshake; `clusterSecretHash` is omitted
+* when no secret is configured; `rootPackage` is omitted by nodes that do
+* not run the root-package model (UDS children).
 */
-function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash) {
+function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash, rootPackage) {
 	return {
 		nodeId,
 		addons: addons.map((a) => ({
@@ -91876,7 +91891,11 @@ function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash) {
 			addonId: n.addonId,
 			deviceIds: [...n.deviceIds]
 		})) },
-		...clusterSecretHash === void 0 ? {} : { clusterSecretHash }
+		...clusterSecretHash === void 0 ? {} : { clusterSecretHash },
+		...rootPackage === void 0 ? {} : { rootPackage: {
+			name: rootPackage.name,
+			version: rootPackage.version
+		} }
 	};
 }
 function delay(ms, signal) {

package/dist/kernel/index.d.ts

@@ -39,7 +39,7 @@ export { HubLogForwarder } from './moleculer/hub-log-forwarder.js';
 export type { AddonContextOptions } from './moleculer/addon-context-factory.js';
 export { createHubService } from './moleculer/hub-service.js';
 export { HubNodeRegistry } from './moleculer/node-registry.js';
-export type { CallFn, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry, } from './moleculer/node-registry.js';
+export type { CallFn, NodeRootPackageInfo, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry, } from './moleculer/node-registry.js';
 export { callRegisterNodeWithRetry, buildNodeManifest } from './moleculer/register-node-client.js';
 export type { RegisterNodeBroker, CallRegisterNodeOptions, } from './moleculer/register-node-client.js';
 export { hashClusterSecret, clusterSecretMatches, isClusterSecretMismatchError, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, } from './moleculer/cluster-secret.js';

package/dist/kernel/moleculer/child-cap-descriptors.d.ts

@@ -0,0 +1,34 @@
+import { ChildCapDescriptor } from '../transport/child-cap-protocol.js';
+/** One hosted addon's contribution to the runner UNION manifest. */
+export interface RunnerManifestEntry {
+    readonly addonId: string;
+    readonly capabilities: readonly string[];
+}
+/** One native-cap snapshot row — a device-scoped cap and the devices it covers. */
+export interface NativeCapSnapshotEntry {
+    readonly capName: string;
+    readonly addonId: string;
+    readonly deviceIds: readonly number[];
+}
+/**
+ * Builds the {@link ChildCapDescriptor} array that the UDS child transport
+ * sends to the parent on registration.
+ *
+ * - Singleton caps come from the runner UNION manifest (all caps registered by
+ *   every addon in this runner). One descriptor per unique (addonId, capName)
+ *   pair, mode `'singleton'` and no `deviceId`. The `addonId` stamp lets the
+ *   parent's manifest builder register each hosted addon's caps under the
+ *   REAL addon id — a GROUPED runner (`execution.group`) hosts several addons,
+ *   and deduplicating by capName alone would collapse two co-located providers
+ *   of the same collection cap (e.g. `network-access` from cloudflare-tunnel
+ *   AND tailscale-ingress) into one descriptor registered under a synthetic
+ *   `addonId = childId` (the group name) — the "@camstack/addon-net-access"
+ *   admin-UI bug.
+ * - Device-scoped caps come from the native-cap snapshot — one descriptor per
+ *   (capName, deviceId) pair, mode `'collection'`, stamped with the owning
+ *   addon's id.
+ *
+ * Pure module — extracted from `addon-runner.ts` (whose `main()` runs at
+ * import time) so it is unit-testable.
+ */
+export declare function buildChildCapDescriptors(manifest: readonly RunnerManifestEntry[], nativeCapSnapshot: readonly NativeCapSnapshotEntry[]): ChildCapDescriptor[];

package/dist/kernel/moleculer/child-cap-dispatch.d.ts

@@ -6,8 +6,16 @@ import { CapCallInput } from '../transport/child-cap-protocol.js';
  * registered".
  */
 export interface ChildCapDispatchDeps {
-    /** Resolve a singleton/system-scoped provider by cap name. */
-    getSingletonProvider(capName: string): object | null | undefined;
+    /**
+     * Resolve a singleton/system-scoped provider by cap name. `addonId` is a
+     * PROVIDER-SELECTION hint for grouped runners where multiple co-located
+     * addons register the SAME cap (e.g. two `network-access` providers in the
+     * `net-access` group): when it matches a hosted addon's provider, return
+     * that one; otherwise fall back to the cap's sole/first provider (an
+     * `addonId` that names no hosted provider is method DATA, not routing —
+     * e.g. `addons.restartAddon({ addonId })`).
+     */
+    getSingletonProvider(capName: string, addonId?: string): object | null | undefined;
     /** Resolve a device-scoped provider by cap name and device id. */
     getDeviceProvider(capName: string, deviceId: number): object | null | undefined;
 }

package/dist/kernel/moleculer/node-registry.d.ts

@@ -32,6 +32,17 @@ interface RegisteredNativeCap {
     readonly addonId: string;
     readonly deviceIds: readonly number[];
 }
+/**
+ * A node's runtime-updatable ROOT package identity (`@camstack/server` on
+ * the hub, `@camstack/agent` on agents) — carried in the `registerNode`
+ * manifest so the hub knows every node's exact software version (design:
+ * runtime-updatable node packages, "visibility"). Version skew is SEEN in
+ * the UI instead of discovered via a black-hole.
+ */
+interface NodeRootPackageInfo {
+    readonly name: string;
+    readonly version: string;
+}
 /** Payload of the `$hub.registerNode` RPC — a node's COMPLETE manifest. */
 interface RegisterNodeParams {
     readonly nodeId: string;
@@ -50,6 +61,12 @@ interface RegisterNodeParams {
      * receiver; never carries the raw secret. (Cluster-secret registration gate.)
      */
     readonly clusterSecretHash?: string;
+    /**
+     * The node's root-package identity. Optional — absent from UDS child
+     * manifests and pre-phase-2 agents; present on agents running the
+     * runtime-updatable root model.
+     */
+    readonly rootPackage?: NodeRootPackageInfo;
 }
 /** Ack returned by `$hub.registerNode` — presence of `ok` is the signal. */
 interface RegisterNodeResult {
@@ -73,6 +90,8 @@ declare class HubNodeRegistry {
     private readonly nodes;
     /** nodeId → its device-scoped native caps (last `registerNode` wins). */
     private readonly nativeCaps;
+    /** nodeId → its root-package identity (last `registerNode` wins). */
+    private readonly rootPackages;
     /**
      * deviceId → flat native-cap entries for THAT device, across all nodes.
      * Maintained incrementally on every `registerNode`/`removeNode` so a
@@ -99,6 +118,8 @@ declare class HubNodeRegistry {
     registerNode(params: RegisterNodeParams): void;
     /** Drop a node entirely — caps AND native caps — on `$node.disconnected`. */
     removeNode(nodeId: string): void;
+    /** The node's root-package identity, or null when it never reported one. */
+    getNodeRootPackage(nodeId: string): NodeRootPackageInfo | null;
     /** The node's manifest, or undefined when the node never registered. */
     getNodeManifest(nodeId: string): readonly RegisteredAddonManifest[] | undefined;
     /**
@@ -123,4 +144,4 @@ declare class HubNodeRegistry {
     listNodeIds(): readonly string[];
 }
 export { HubNodeRegistry };
-export type { CallFn, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry, };
+export type { CallFn, NodeRootPackageInfo, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry, };

package/dist/kernel/moleculer/register-node-client.d.ts

@@ -1,4 +1,4 @@
-import { RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams } from './node-registry.js';
+import { NodeRootPackageInfo, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams } from './node-registry.js';
 /** Minimal broker surface this client needs. */
 interface RegisterNodeBroker {
     call(action: string, params: unknown, opts?: {
@@ -19,11 +19,14 @@ interface CallRegisterNodeOptions {
 }
 /**
  * Build a `RegisterNodeParams` from a node id, its per-addon manifests,
- * optionally its device-scoped native caps, and optionally the SHA-256 hash
- * of the cluster secret. `nativeCaps` is omitted entirely on the first
- * handshake; `clusterSecretHash` is omitted when no secret is configured.
+ * optionally its device-scoped native caps, optionally the SHA-256 hash
+ * of the cluster secret, and optionally the node's root-package identity
+ * (runtime-updatable node packages: version visibility). `nativeCaps` is
+ * omitted entirely on the first handshake; `clusterSecretHash` is omitted
+ * when no secret is configured; `rootPackage` is omitted by nodes that do
+ * not run the root-package model (UDS children).
  */
-declare function buildNodeManifest(nodeId: string, addons: readonly RegisteredAddonManifest[], nativeCaps?: readonly RegisteredNativeCap[], clusterSecretHash?: string): RegisterNodeParams;
+declare function buildNodeManifest(nodeId: string, addons: readonly RegisteredAddonManifest[], nativeCaps?: readonly RegisteredNativeCap[], clusterSecretHash?: string, rootPackage?: NodeRootPackageInfo): RegisterNodeParams;
 /**
  * Call `<target>.registerNode` and retry until the parent acks. The loop
  * terminates ONLY on a successful ack or an abort — there is no fixed

package/dist/kernel/transport/child-cap-protocol.d.ts

@@ -9,6 +9,16 @@ export interface ChildCapDescriptor {
     readonly mode: 'singleton' | 'collection';
     /** Present for device-scoped caps; absent for singleton/system caps. */
     readonly deviceId?: number;
+    /**
+     * The addon that registered this cap. A GROUPED runner (`execution.group`)
+     * hosts multiple addons in one child, so the parent can no longer assume
+     * `addonId === childId` — this field lets the parent's manifest builder
+     * split the descriptor set into one `RegisteredAddonManifest` entry per
+     * hosted addon (real provider registryKeys, per-addon settings/logs/UI).
+     * OPTIONAL for wire compat: a legacy child omits it and the parent falls
+     * back to the childId (identical to the historical single-addon behaviour).
+     */
+    readonly addonId?: string;
 }
 /** First message a child sends after connecting — its complete cap manifest. */
 export interface RegisterMessage {
@@ -90,6 +100,16 @@ export interface CapCallMessage {
     readonly deviceId?: number;
     /** Optional per-call node pin (out-of-band routing hint; see {@link CapCallOutMessage.nodeId}). */
     readonly nodeId?: string;
+    /**
+     * Out-of-band PROVIDER-selection hint: the addonId of the provider the hub
+     * resolved for this call. Needed for GROUPED runners where two co-located
+     * addons register the SAME collection cap (e.g. `network-access` from both
+     * cloudflare-tunnel and tailscale-ingress) — the hub's collection mount
+     * strips `addonId` from the method args after resolving the provider, so
+     * without this hint the child could only pick one-per-capName. Absent →
+     * the child dispatch falls back to its sole provider for the cap.
+     */
+    readonly addonId?: string;
 }
 /** Parent → child: a system event delivered by the hub for the child to handle locally. */
 export interface ParentEventMessage {

package/dist/{manifest-python-deps-MUu1e33G.mjs → manifest-python-deps-4QvOLiBn.mjs}

@@ -1,4 +1,4 @@
-import { H as readNodePin } from "./dist-DlGZpWo8.mjs";
+import { H as readNodePin } from "./dist-CU3lb_Ys.mjs";
 import { ensureBinary, ensureFfmpeg, ensurePython, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { createServer } from "node:http";
 import * as fs from "node:fs";
@@ -4192,7 +4192,8 @@ var LocalChildRegistry = class {
 			capName: input.capName,
 			method: input.method,
 			args: input.args,
-			...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {}
+			...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {},
+			...input.addonId !== void 0 ? { addonId: input.addonId } : {}
 		};
 	}
 	listChildren() {
@@ -4890,6 +4891,7 @@ function createParentUnownedCallHandler(deps) {
 	return async (input) => {
 		const deviceId = input.deviceId ?? extractDeviceId(input.args);
 		const nodeId = deps.isDataNodeIdCap?.(input.capName) === true ? void 0 : input.nodeId ?? extractNodeId(input.args);
+		const pinnedToOtherNode = nodeId !== void 0 && nodeId !== deps.broker.nodeID;
 		if (nodeId === void 0) {
 			const empty = deps.resolveEmptyCollection?.(input.capName, input.method);
 			if (empty != null) return empty;
@@ -4906,7 +4908,7 @@ function createParentUnownedCallHandler(deps) {
 		}
 		else deps.logger?.debug?.(`onUnownedCall: resolver not ready, routing ${input.capName}.${input.method} via broker fallback`);
 		try {
-			if (deviceId !== void 0) {
+			if (deviceId !== void 0 && !pinnedToOtherNode) {
 				const localDispatcher = deps.getLocalDispatcher?.() ?? null;
 				if (localDispatcher !== null) {
 					let childId = localDispatcher.resolveChildId(input.capName, deviceId);

package/dist/{manifest-python-deps-jZA_Qorz.js → manifest-python-deps-B6ahe90k.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DriXJoVg.js");
+const require_dist = require("./dist-fRVWwrkF.js");
 let _camstack_types_node = require("@camstack/types/node");
 let node_http = require("node:http");
 let node_fs = require("node:fs");
@@ -4194,7 +4194,8 @@ var LocalChildRegistry = class {
 			capName: input.capName,
 			method: input.method,
 			args: input.args,
-			...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {}
+			...input.deviceId !== void 0 ? { deviceId: input.deviceId } : {},
+			...input.addonId !== void 0 ? { addonId: input.addonId } : {}
 		};
 	}
 	listChildren() {
@@ -4892,6 +4893,7 @@ function createParentUnownedCallHandler(deps) {
 	return async (input) => {
 		const deviceId = input.deviceId ?? extractDeviceId(input.args);
 		const nodeId = deps.isDataNodeIdCap?.(input.capName) === true ? void 0 : input.nodeId ?? extractNodeId(input.args);
+		const pinnedToOtherNode = nodeId !== void 0 && nodeId !== deps.broker.nodeID;
 		if (nodeId === void 0) {
 			const empty = deps.resolveEmptyCollection?.(input.capName, input.method);
 			if (empty != null) return empty;
@@ -4908,7 +4910,7 @@ function createParentUnownedCallHandler(deps) {
 		}
 		else deps.logger?.debug?.(`onUnownedCall: resolver not ready, routing ${input.capName}.${input.method} via broker fallback`);
 		try {
-			if (deviceId !== void 0) {
+			if (deviceId !== void 0 && !pinnedToOtherNode) {
 				const localDispatcher = deps.getLocalDispatcher?.() ?? null;
 				if (localDispatcher !== null) {
 					let childId = localDispatcher.resolveChildId(input.capName, deviceId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.1.35",
+  "version": "1.1.37",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",