@camstack/system 1.1.36 → 1.1.37

package/dist/{dist-COIhbSao.js → dist-fRVWwrkF.js}

@@ -1,5 +1,5 @@
 let zod = require("zod");
-//#region ../types/dist/sleep-DiQ8xW1M.mjs
+//#region ../types/dist/sleep-DJaTV2D7.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -721,10 +721,6 @@ function hydrateField(field, values) {
 		};
 	}
 	const rawValue = storedValue !== void 0 ? storedValue : defaultValue !== void 0 ? defaultValue : null;
-	if (field.type === "password") return {
-		...field,
-		value: ""
-	};
 	const value = field.type === "textarea" && field.isJson && rawValue !== null && typeof rawValue === "object" ? JSON.stringify(rawValue, null, 2) : rawValue;
 	return {
 		...field,
@@ -2606,13 +2602,32 @@ function event(data) {
 function isDeviceConfigCap(def) {
 	return def?.deviceConfig !== void 0;
 }
-var StaticDirOutputSchema = zod.z.object({ staticDir: zod.z.string() });
-var VersionOutputSchema = zod.z.object({ version: zod.z.string() });
+var StaticDirOutputSchema$1 = zod.z.object({ staticDir: zod.z.string() });
+var VersionOutputSchema$1 = zod.z.object({ version: zod.z.string() });
 var adminUiCapability = {
 	name: "admin-ui",
 	scope: "system",
 	mode: "singleton",
 	internal: true,
+	methods: {
+		getStaticDir: method(zod.z.void(), StaticDirOutputSchema$1),
+		getVersion: method(zod.z.void(), VersionOutputSchema$1)
+	}
+};
+var StaticDirOutputSchema = zod.z.object({ staticDir: zod.z.string() });
+var VersionOutputSchema = zod.z.object({ version: zod.z.string() });
+/**
+* viewer-ui — serves the CamStack VIEWER web build (the Expo/React-Native
+* universal client's PWA export) from the hub, alongside admin-ui. Mirrors
+* `admin-ui` exactly: a singleton, server-internal cap exposing the static
+* dist directory + build version so `main.ts` can mount the SPA under a
+* dedicated prefix.
+*/
+var viewerUiCapability = {
+	name: "viewer-ui",
+	scope: "system",
+	mode: "singleton",
+	internal: true,
 	methods: {
 		getStaticDir: method(zod.z.void(), StaticDirOutputSchema),
 		getVersion: method(zod.z.void(), VersionOutputSchema)
@@ -11367,6 +11382,17 @@ var WidgetMetadataSchema = zod.z.object({
 		deviceContext: zod.z.boolean().default(false),
 		integrationContext: zod.z.boolean().default(false)
 	}),
+	/**
+	* Loadable BEFORE authentication. The normal widget registry listing
+	* (`addon-widgets.listWidgets`) is auth-gated, so a pre-auth surface
+	* (the login page) cannot discover a widget through it. A widget that
+	* declares `preAuth: true` marks itself as safe to mount on a pre-auth
+	* screen — it is surfaced through the PUBLIC `auth.listLoginMethods`
+	* login-method contribution channel (see `login-method.cap.ts`) rather
+	* than the authenticated registry, and its bundle is served by the
+	* public `/api/addon-widgets/:addonId/*` static route. Defaults false.
+	*/
+	preAuth: zod.z.boolean().optional().default(false),
 	/** Dashboard placement HINTS (operator can override per instance). */
 	defaultSize: WidgetSizeEnum.default("md"),
 	allowedSizes: zod.z.array(WidgetSizeEnum).readonly().default([
@@ -11805,6 +11831,87 @@ var authProviderCapability = {
 	mount: { kind: "skip" }
 };
 /**
+* `login-method` — collection cap through which auth addons contribute
+* their pre-auth login surfaces to the login page. This is the SINGLE,
+* generic mechanism that supersedes the dead `auth.listProviders` reader:
+* every auth addon (OIDC, magic-link, WebAuthn/passkey) registers a
+* `login-method` provider and the PUBLIC `auth.listLoginMethods`
+* procedure aggregates them for the unauthenticated login page.
+*
+* A contribution is a discriminated union on `kind`:
+*
+*  - `redirect` — a declarative button. The login page renders a generic
+*    button that navigates to `startUrl` (an addon-owned HTTP route).
+*    Covers OIDC (`/addon/auth-oidc/<id>/start`) and magic-link with
+*    ZERO shell-side JS. A future SSO addon plugs in the same way — the
+*    login page needs NO change.
+*
+*  - `widget` — a Module-Federation widget the login page mounts (via
+*    `loadRemoteBundle`) for an in-page ceremony. Covers the passkey
+*    login ceremony, which must run `@simplewebauthn/browser` INSIDE the
+*    addon bundle. The referenced widget also declares `preAuth: true` in
+*    its `addon-widgets-source` catalog entry. `auth.listLoginMethods`
+*    stamps a public `bundleUrl` from `addonId` + `bundle`.
+*
+* Every contribution carries a `stage`:
+*  - `primary`        — shown on the first credentials screen (OIDC /
+*                       magic-link buttons; a future usernameless passkey).
+*  - `second-factor`  — shown AFTER the password leg, gated on the
+*                       returned `factors` (passkey-as-2FA today).
+*
+* `mount: skip` — the cap is read server-side by the core auth router
+* (`registry.getCollection('login-method')`), never mounted as its own
+* tRPC router.
+*/
+/** When a login method renders in the two-phase login flow. */
+var LoginStageEnum = zod.z.enum(["primary", "second-factor"]);
+/**
+* A declarative redirect button — the login page navigates to `startUrl`.
+* OIDC and magic-link contribute this; a future SSO addon does too.
+*/
+var RedirectLoginMethodSchema = zod.z.object({
+	kind: zod.z.literal("redirect"),
+	/** Stable id within the login-method set (e.g. `auth-oidc/google`). */
+	id: zod.z.string(),
+	/** Operator-facing button label. */
+	label: zod.z.string(),
+	/** lucide-react icon name. */
+	icon: zod.z.string().optional(),
+	/** Addon-owned HTTP route the button navigates to (GET). */
+	startUrl: zod.z.string(),
+	stage: LoginStageEnum
+});
+/**
+* A Module-Federation widget the login page mounts for an in-page
+* ceremony. `bundle` + `addonId` let `auth.listLoginMethods` stamp a
+* public `bundleUrl`; `remote` is the MF descriptor `loadRemoteBundle`
+* consumes. No `bundleUrl` here — it is server-stamped on the public
+* output so the addon never encodes the static-route scheme.
+*/
+var WidgetLoginMethodSchema = zod.z.object({
+	kind: zod.z.literal("widget"),
+	/** Stable id within the login-method set (e.g. `auth-webauthn/passkey-login`). */
+	id: zod.z.string(),
+	/** Owning addon id — drives the public bundle URL + the MF namespace. */
+	addonId: zod.z.string(),
+	/** Bundle filename inside the addon's dist dir (`remoteEntry.js`). */
+	bundle: zod.z.string(),
+	/** MF remote descriptor — `{ remoteName, exposedModule, componentKey }`. */
+	remote: WidgetRemoteSchema,
+	stage: LoginStageEnum
+});
+/** One login-method contribution — redirect button OR pre-auth widget. */
+var LoginMethodContributionSchema = zod.z.discriminatedUnion("kind", [RedirectLoginMethodSchema, WidgetLoginMethodSchema]);
+var loginMethodCapability = {
+	name: "login-method",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: { getLoginMethods: method(zod.z.void(), zod.z.array(LoginMethodContributionSchema).readonly()) },
+	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+	mount: { kind: "skip" }
+};
+/**
 * Orchestrator-side destination metadata. The orchestrator computes
 * `id = <addonId>:<subId>` from its provider lookup so consumers
 * (admin UI, restore flow) see one canonical key.
@@ -15640,6 +15747,151 @@ var pipelineOrchestratorCapability = {
 	}
 };
 /**
+* server-management — per-NODE singleton capability for a node's ROOT
+* package lifecycle (runtime-updatable node packages, phase 2: hub + docker
+* agents).
+*
+* Each node's root package (`@camstack/server` on the hub, `@camstack/agent`
+* on agents) carries the whole software stack in its npm dep tree, so ONE
+* version describes the node. Updates install into
+* `<dataDir>/server-root/versions/<v>/` and apply on restart via the baked
+* starter (probation boot + auto-rollback to N-1).
+*
+* Providers:
+*   - HUB: `ServerUpdateService` behind the `server-provided` mount
+*     (`buildServerProviders` in trpc.router.ts) — the default target for
+*     unpinned calls.
+*   - AGENT: `AgentUpdateService` registered by the agent bootstrap under
+*     the synthetic `agent-runtime` addonId and declared in the agent's
+*     `$hub.registerNode` manifest.
+*
+* Node routing: singleton caps get the codegen/runtime-builder `nodeId`
+* injection on every method — `input.nodeId` (or `nodePin(nodeId)` from the
+* SDK) routes the call to that node's provider via the standard remote
+* proxy (`createCapabilityProxy` → `$agent-cap-fwd` → the agent's
+* in-process provider lookup). No `nodeId` → the hub's own provider.
+*
+* Spec: docs/superpowers/specs/2026-07-12-runtime-updatable-node-packages-design.md
+*/
+/**
+* Where the running hub's code was loaded from:
+*  - `workspace` — dev checkout (tsx / workspace dist); the starter defers to
+*    plain resolution and runtime updates are refused.
+*  - `baked`     — the immutable image seed closure (no data-dir root active).
+*  - `data-root` — the runtime-updatable `<dataDir>/server-root` closure.
+*/
+var ServerBootModeSchema = zod.z.enum([
+	"workspace",
+	"baked",
+	"data-root"
+]);
+/**
+* Update lifecycle state:
+*  - `idle` / `checking` / `staging` — steady / in-flight registry work.
+*  - `pending-restart` — a version is staged and the node has NOT yet
+*    restarted onto it (still running the OLD version).
+*  - `awaiting-confirmation` — the node HAS restarted onto the staged version
+*    (it is the active probation boot) and is waiting to confirm boot-health.
+*    Apply/rollback are refused in this state and the node must NOT be
+*    manually restarted, or the probation boot auto-rolls-back.
+*/
+var ServerUpdateStateSchema = zod.z.enum([
+	"idle",
+	"checking",
+	"staging",
+	"pending-restart",
+	"awaiting-confirmation"
+]);
+var ServerRollbackInfoSchema = zod.z.object({
+	/** The version that failed (or was manually rolled back). */
+	fromVersion: zod.z.string(),
+	/** The version rolled back to; null = the baked seed. */
+	toVersion: zod.z.string().nullable(),
+	atMs: zod.z.number(),
+	reason: zod.z.string()
+});
+var ServerPackageStatusSchema = zod.z.object({
+	/** Root package name (`@camstack/server` on the hub). */
+	packageName: zod.z.string(),
+	/** Version of the code the running process ACTUALLY loaded. */
+	runningVersion: zod.z.string().nullable(),
+	/** Node.js runtime version the node's process runs on (`process.versions.node`). */
+	nodeRuntimeVersion: zod.z.string().nullable(),
+	/** Active data-dir root version; null when booted from seed/workspace. */
+	activeVersion: zod.z.string().nullable(),
+	/** N-1 version kept for rollback; null when no previous version exists. */
+	previousVersion: zod.z.string().nullable(),
+	/** Version of the immutable baked seed closure (image fallback). */
+	seedVersion: zod.z.string().nullable(),
+	/** Latest registry version from the most recent check (null = never checked). */
+	latestVersion: zod.z.string().nullable(),
+	updateAvailable: zod.z.boolean(),
+	bootMode: ServerBootModeSchema,
+	updateState: ServerUpdateStateSchema,
+	/** Version staged + awaiting its probation boot, when one is pending. */
+	pendingVersion: zod.z.string().nullable(),
+	/** Set when the last freshly-activated version failed its boot health-check. */
+	rolledBack: ServerRollbackInfoSchema.nullable(),
+	/**
+	* True when `server-root/state.json` EXISTS but is unreadable/corrupt — the
+	* hub is running from the baked seed (or workspace) while installed data-dir
+	* versions are being IGNORED. Surfaced as a warning in the UI.
+	*/
+	stateFileCorrupt: zod.z.boolean(),
+	lastCheckedAtMs: zod.z.number().nullable()
+});
+var ServerUpdateCheckResultSchema = zod.z.object({
+	packageName: zod.z.string(),
+	runningVersion: zod.z.string().nullable(),
+	latestVersion: zod.z.string().nullable(),
+	updateAvailable: zod.z.boolean(),
+	checkedAtMs: zod.z.number(),
+	/** Non-null when the registry lookup failed (offline, bad registry, …). */
+	error: zod.z.string().nullable()
+});
+var ServerUpdateActionResultSchema = zod.z.object({
+	accepted: zod.z.boolean(),
+	targetVersion: zod.z.string().nullable(),
+	/** True when a graceful restart was scheduled to apply the change. */
+	restarting: zod.z.boolean(),
+	message: zod.z.string()
+});
+var serverManagementCapability = {
+	name: "server-management",
+	scope: "system",
+	mode: "singleton",
+	methods: {
+		getServerPackageStatus: method(zod.z.void(), ServerPackageStatusSchema, { auth: "admin" }),
+		checkServerUpdate: method(zod.z.void(), ServerUpdateCheckResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		applyServerUpdate: method(zod.z.object({ 
+		/** Explicit target version; omitted = latest from the registry. */
+version: zod.z.string().optional() }), ServerUpdateActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		rollbackServerUpdate: method(zod.z.void(), ServerUpdateActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
+		* Plain process restart of the node's root process — no version change.
+		* The supervisor (docker restart policy / launchd / Electron main)
+		* relaunches and the starter loads the SAME active version. Refused while
+		* a stage is in flight or a version is already staged awaiting restart
+		* (use apply/rollback instead, so the pending version is not skipped).
+		*/
+		restartServer: method(zod.z.void(), ServerUpdateActionResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		})
+	},
+	/** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+	mount: { kind: "server-provided" }
+};
+/**
 * Query filter for settings-store collections.
 */
 var QueryFilterSchema = zod.z.object({
@@ -18505,6 +18757,16 @@ var TopologyCategorySchema = zod.z.object({
 	healthy: zod.z.number(),
 	addons: zod.z.array(TopologyCategoryAddonSchema).readonly()
 });
+/**
+* The node's runtime-updatable ROOT package (`@camstack/server` on the hub,
+* `@camstack/agent` on agents) as reported by its `registerNode` manifest —
+* version visibility for the Server management surface. Nullable: offline
+* rows and pre-phase-2 nodes report none.
+*/
+var TopologyRootPackageSchema = zod.z.object({
+	name: zod.z.string(),
+	version: zod.z.string()
+});
 var TopologyNodeSchema = zod.z.object({
 	id: zod.z.string(),
 	name: zod.z.string(),
@@ -18528,7 +18790,8 @@ var TopologyNodeSchema = zod.z.object({
 		status: zod.z.string()
 	})).readonly(),
 	processes: zod.z.array(TopologyProcessSchema).readonly(),
-	categories: zod.z.array(TopologyCategorySchema).readonly()
+	categories: zod.z.array(TopologyCategorySchema).readonly(),
+	rootPackage: TopologyRootPackageSchema.nullable()
 });
 var CapUsageEdgeSchema = zod.z.object({
 	callerAddonId: zod.z.string(),
@@ -19991,6 +20254,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	localNetworkCapability,
 	lockControlCapability,
 	logDestinationCapability,
+	loginMethodCapability,
 	mediaPlayerCapability,
 	meshNetworkCapability,
 	metricsProviderCapability,
@@ -20026,6 +20290,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	rebootCapability,
 	recordingCapability,
 	scriptRunnerCapability,
+	serverManagementCapability,
 	settingsStoreCapability,
 	smokeCapability,
 	smtpProviderCapability,
@@ -20050,6 +20315,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	valveCapability,
 	vibrationCapability,
 	videoclipsCapability,
+	viewerUiCapability,
 	waterHeaterCapability,
 	weatherCapability,
 	webrtcSessionCapability,
@@ -22106,6 +22372,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"loginMethod.getLoginMethods": {
+		capName: "login-method",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"mediaPlayer.next": {
 		capName: "media-player",
 		capScope: "device",
@@ -23468,6 +23740,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"serverManagement.applyServerUpdate": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"serverManagement.checkServerUpdate": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"serverManagement.getServerPackageStatus": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"serverManagement.restartServer": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"serverManagement.rollbackServerUpdate": {
+		capName: "server-management",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"settingsStore.count": {
 		capName: "settings-store",
 		capScope: "system",
@@ -24332,6 +24634,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"viewerUi.getStaticDir": {
+		capName: "viewer-ui",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"viewerUi.getVersion": {
+		capName: "viewer-ui",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"waterHeater.setAway": {
 		capName: "water-heater",
 		capScope: "device",

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-COIhbSao.js");
+const require_dist = require("./dist-fRVWwrkF.js");
 const require_model_download_service = require("./model-download-service-D-Umz4-L.js");
 const require_resource_monitor = require("./resource-monitor-DNNomR-i.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
@@ -21,7 +21,7 @@ const require_builtins_local_auth_local_auth_addon = require("./builtins/local-a
 require("./builtins/local-auth/index.js");
 const require_builtins_device_manager_device_manager_addon = require("./builtins/device-manager/device-manager.addon.js");
 require("./builtins/device-manager/index.js");
-const require_manifest_python_deps = require("./manifest-python-deps-CZFqI4wp.js");
+const require_manifest_python_deps = require("./manifest-python-deps-B6ahe90k.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 let _camstack_types_node = require("@camstack/types/node");
 let zod = require("zod");
@@ -91751,6 +91751,8 @@ var HubNodeRegistry = class {
 	nodes = /* @__PURE__ */ new Map();
 	/** nodeId → its device-scoped native caps (last `registerNode` wins). */
 	nativeCaps = /* @__PURE__ */ new Map();
+	/** nodeId → its root-package identity (last `registerNode` wins). */
+	rootPackages = /* @__PURE__ */ new Map();
 	/**
 	* deviceId → flat native-cap entries for THAT device, across all nodes.
 	* Maintained incrementally on every `registerNode`/`removeNode` so a
@@ -91798,6 +91800,11 @@ var HubNodeRegistry = class {
 			deviceIds: [...n.deviceIds]
 		}));
 		this.nativeCaps.set(params.nodeId, caps);
+		if (params.rootPackage !== void 0) this.rootPackages.set(params.nodeId, {
+			name: params.rootPackage.name,
+			version: params.rootPackage.version
+		});
+		else this.rootPackages.delete(params.nodeId);
 		for (const cap of caps) for (const deviceId of cap.deviceIds) {
 			const entry = {
 				nodeId: params.nodeId,
@@ -91815,6 +91822,11 @@ var HubNodeRegistry = class {
 		this.dropNodeFromDeviceIndex(nodeId);
 		this.nodes.delete(nodeId);
 		this.nativeCaps.delete(nodeId);
+		this.rootPackages.delete(nodeId);
+	}
+	/** The node's root-package identity, or null when it never reported one. */
+	getNodeRootPackage(nodeId) {
+		return this.rootPackages.get(nodeId) ?? null;
 	}
 	/** The node's manifest, or undefined when the node never registered. */
 	getNodeManifest(nodeId) {
@@ -91868,11 +91880,14 @@ var HubNodeRegistry = class {
 //#region src/kernel/moleculer/register-node-client.ts
 /**
 * Build a `RegisterNodeParams` from a node id, its per-addon manifests,
-* optionally its device-scoped native caps, and optionally the SHA-256 hash
-* of the cluster secret. `nativeCaps` is omitted entirely on the first
-* handshake; `clusterSecretHash` is omitted when no secret is configured.
+* optionally its device-scoped native caps, optionally the SHA-256 hash
+* of the cluster secret, and optionally the node's root-package identity
+* (runtime-updatable node packages: version visibility). `nativeCaps` is
+* omitted entirely on the first handshake; `clusterSecretHash` is omitted
+* when no secret is configured; `rootPackage` is omitted by nodes that do
+* not run the root-package model (UDS children).
 */
-function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash) {
+function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash, rootPackage) {
 	return {
 		nodeId,
 		addons: addons.map((a) => ({
@@ -91884,7 +91899,11 @@ function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash) {
 			addonId: n.addonId,
 			deviceIds: [...n.deviceIds]
 		})) },
-		...clusterSecretHash === void 0 ? {} : { clusterSecretHash }
+		...clusterSecretHash === void 0 ? {} : { clusterSecretHash },
+		...rootPackage === void 0 ? {} : { rootPackage: {
+			name: rootPackage.name,
+			version: rootPackage.version
+		} }
 	};
 }
 function delay(ms, signal) {

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { $ as errMsg$1, A as isVoidInput, Ct as resolveCapMount, F as looseSchema, M as lifecycleJobSchema, O as isArrayOutputSchema, St as readinessKey, V as procedureAuthKey, _t as expandCapMethods, bt as parseJsonObject, ct as ReadinessRegistry, dt as asJsonObject$1, ft as asNumber, ht as emitDownForOwnedCaps, j as kebabToCamel, k as isObjectInput, lt as ReadinessTimeoutError, mt as createEvent, nt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, o as METHOD_ACCESS_MAP, p as addonSettingsCapability, pt as asString$1, rt as DEVICE_STATUS_METHOD, s as RUNTIME_DEFAULTS, st as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tt as DATAPLANE_SECRET_HEADER$1, wt as scopeKey, xt as parseJsonUnknown$1 } from "./dist-C7oOY4iL.mjs";
+import { $ as errMsg$1, A as isVoidInput, Ct as resolveCapMount, F as looseSchema, M as lifecycleJobSchema, O as isArrayOutputSchema, St as readinessKey, V as procedureAuthKey, _t as expandCapMethods, bt as parseJsonObject, ct as ReadinessRegistry, dt as asJsonObject$1, ft as asNumber, ht as emitDownForOwnedCaps, j as kebabToCamel, k as isObjectInput, lt as ReadinessTimeoutError, mt as createEvent, nt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, o as METHOD_ACCESS_MAP, p as addonSettingsCapability, pt as asString$1, rt as DEVICE_STATUS_METHOD, s as RUNTIME_DEFAULTS, st as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, tt as DATAPLANE_SECRET_HEADER$1, wt as scopeKey, xt as parseJsonUnknown$1 } from "./dist-CU3lb_Ys.mjs";
 import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-C-IHWnXx.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Le3l0qS2.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
@@ -19,7 +19,7 @@ import { LocalAuthAddon, a as require_ms, c as __esmMin, d as __toCommonJS, f as
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-BYIV8-rc.mjs";
+import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-4QvOLiBn.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { z } from "zod";
@@ -91743,6 +91743,8 @@ var HubNodeRegistry = class {
 	nodes = /* @__PURE__ */ new Map();
 	/** nodeId → its device-scoped native caps (last `registerNode` wins). */
 	nativeCaps = /* @__PURE__ */ new Map();
+	/** nodeId → its root-package identity (last `registerNode` wins). */
+	rootPackages = /* @__PURE__ */ new Map();
 	/**
 	* deviceId → flat native-cap entries for THAT device, across all nodes.
 	* Maintained incrementally on every `registerNode`/`removeNode` so a
@@ -91790,6 +91792,11 @@ var HubNodeRegistry = class {
 			deviceIds: [...n.deviceIds]
 		}));
 		this.nativeCaps.set(params.nodeId, caps);
+		if (params.rootPackage !== void 0) this.rootPackages.set(params.nodeId, {
+			name: params.rootPackage.name,
+			version: params.rootPackage.version
+		});
+		else this.rootPackages.delete(params.nodeId);
 		for (const cap of caps) for (const deviceId of cap.deviceIds) {
 			const entry = {
 				nodeId: params.nodeId,
@@ -91807,6 +91814,11 @@ var HubNodeRegistry = class {
 		this.dropNodeFromDeviceIndex(nodeId);
 		this.nodes.delete(nodeId);
 		this.nativeCaps.delete(nodeId);
+		this.rootPackages.delete(nodeId);
+	}
+	/** The node's root-package identity, or null when it never reported one. */
+	getNodeRootPackage(nodeId) {
+		return this.rootPackages.get(nodeId) ?? null;
 	}
 	/** The node's manifest, or undefined when the node never registered. */
 	getNodeManifest(nodeId) {
@@ -91860,11 +91872,14 @@ var HubNodeRegistry = class {
 //#region src/kernel/moleculer/register-node-client.ts
 /**
 * Build a `RegisterNodeParams` from a node id, its per-addon manifests,
-* optionally its device-scoped native caps, and optionally the SHA-256 hash
-* of the cluster secret. `nativeCaps` is omitted entirely on the first
-* handshake; `clusterSecretHash` is omitted when no secret is configured.
+* optionally its device-scoped native caps, optionally the SHA-256 hash
+* of the cluster secret, and optionally the node's root-package identity
+* (runtime-updatable node packages: version visibility). `nativeCaps` is
+* omitted entirely on the first handshake; `clusterSecretHash` is omitted
+* when no secret is configured; `rootPackage` is omitted by nodes that do
+* not run the root-package model (UDS children).
 */
-function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash) {
+function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash, rootPackage) {
 	return {
 		nodeId,
 		addons: addons.map((a) => ({
@@ -91876,7 +91891,11 @@ function buildNodeManifest(nodeId, addons, nativeCaps, clusterSecretHash) {
 			addonId: n.addonId,
 			deviceIds: [...n.deviceIds]
 		})) },
-		...clusterSecretHash === void 0 ? {} : { clusterSecretHash }
+		...clusterSecretHash === void 0 ? {} : { clusterSecretHash },
+		...rootPackage === void 0 ? {} : { rootPackage: {
+			name: rootPackage.name,
+			version: rootPackage.version
+		} }
 	};
 }
 function delay(ms, signal) {

package/dist/kernel/index.d.ts

@@ -39,7 +39,7 @@ export { HubLogForwarder } from './moleculer/hub-log-forwarder.js';
 export type { AddonContextOptions } from './moleculer/addon-context-factory.js';
 export { createHubService } from './moleculer/hub-service.js';
 export { HubNodeRegistry } from './moleculer/node-registry.js';
-export type { CallFn, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry, } from './moleculer/node-registry.js';
+export type { CallFn, NodeRootPackageInfo, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry, } from './moleculer/node-registry.js';
 export { callRegisterNodeWithRetry, buildNodeManifest } from './moleculer/register-node-client.js';
 export type { RegisterNodeBroker, CallRegisterNodeOptions, } from './moleculer/register-node-client.js';
 export { hashClusterSecret, clusterSecretMatches, isClusterSecretMismatchError, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, } from './moleculer/cluster-secret.js';

package/dist/kernel/moleculer/node-registry.d.ts

@@ -32,6 +32,17 @@ interface RegisteredNativeCap {
     readonly addonId: string;
     readonly deviceIds: readonly number[];
 }
+/**
+ * A node's runtime-updatable ROOT package identity (`@camstack/server` on
+ * the hub, `@camstack/agent` on agents) — carried in the `registerNode`
+ * manifest so the hub knows every node's exact software version (design:
+ * runtime-updatable node packages, "visibility"). Version skew is SEEN in
+ * the UI instead of discovered via a black-hole.
+ */
+interface NodeRootPackageInfo {
+    readonly name: string;
+    readonly version: string;
+}
 /** Payload of the `$hub.registerNode` RPC — a node's COMPLETE manifest. */
 interface RegisterNodeParams {
     readonly nodeId: string;
@@ -50,6 +61,12 @@ interface RegisterNodeParams {
      * receiver; never carries the raw secret. (Cluster-secret registration gate.)
      */
     readonly clusterSecretHash?: string;
+    /**
+     * The node's root-package identity. Optional — absent from UDS child
+     * manifests and pre-phase-2 agents; present on agents running the
+     * runtime-updatable root model.
+     */
+    readonly rootPackage?: NodeRootPackageInfo;
 }
 /** Ack returned by `$hub.registerNode` — presence of `ok` is the signal. */
 interface RegisterNodeResult {
@@ -73,6 +90,8 @@ declare class HubNodeRegistry {
     private readonly nodes;
     /** nodeId → its device-scoped native caps (last `registerNode` wins). */
     private readonly nativeCaps;
+    /** nodeId → its root-package identity (last `registerNode` wins). */
+    private readonly rootPackages;
     /**
      * deviceId → flat native-cap entries for THAT device, across all nodes.
      * Maintained incrementally on every `registerNode`/`removeNode` so a
@@ -99,6 +118,8 @@ declare class HubNodeRegistry {
     registerNode(params: RegisterNodeParams): void;
     /** Drop a node entirely — caps AND native caps — on `$node.disconnected`. */
     removeNode(nodeId: string): void;
+    /** The node's root-package identity, or null when it never reported one. */
+    getNodeRootPackage(nodeId: string): NodeRootPackageInfo | null;
     /** The node's manifest, or undefined when the node never registered. */
     getNodeManifest(nodeId: string): readonly RegisteredAddonManifest[] | undefined;
     /**
@@ -123,4 +144,4 @@ declare class HubNodeRegistry {
     listNodeIds(): readonly string[];
 }
 export { HubNodeRegistry };
-export type { CallFn, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry, };
+export type { CallFn, NodeRootPackageInfo, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry, };