@camstack/system 1.1.37 → 1.1.39

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_python_deps = require("./manifest-python-deps-B6ahe90k.js");
+const require_manifest_python_deps = require("./manifest-python-deps-BGvIVCm_.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { F as createUdsLoggerWithControl, I as LocalChildClient, i as createUdsAddonContext, it as setWorkerNativeCapsChangeListener, nt as getWorkerNativeCapSnapshot, ot as validateProviderRegistrations, t as installManifestPythonDeps, tt as getWorkerNativeCapProvider, vt as installManifestNativeDeps, yt as resolveAddonClass } from "./manifest-python-deps-4QvOLiBn.mjs";
+import { F as createUdsLoggerWithControl, I as LocalChildClient, i as createUdsAddonContext, it as setWorkerNativeCapsChangeListener, nt as getWorkerNativeCapSnapshot, ot as validateProviderRegistrations, t as installManifestPythonDeps, tt as getWorkerNativeCapProvider, vt as installManifestNativeDeps, yt as resolveAddonClass } from "./manifest-python-deps-BjxBfiFd.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { register } from "node:module";
 import * as fs from "node:fs";

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3021,6 +3021,7 @@ var DEFAULT_BACKUP_LOCATIONS = [
 ];
 /** Path of the manifest file embedded inside every archive. */
 var ARCHIVE_MANIFEST_NAME = ".camstack-backup-manifest.json";
+var DEFAULT_STAT_CACHE_TTL_MS = 6e4;
 /**
 * System-level archive primitives. Construct one per server boot;
 * methods are pure I/O.
@@ -3028,33 +3029,55 @@ var ARCHIVE_MANIFEST_NAME = ".camstack-backup-manifest.json";
 var SystemBackupService = class {
 	dataDir;
 	logger;
-	constructor(dataDir, logger) {
+	statCacheTtlMs;
+	statCache = /* @__PURE__ */ new Map();
+	constructor(dataDir, logger, opts) {
 		this.dataDir = dataDir;
 		this.logger = logger;
+		this.statCacheTtlMs = opts?.statCacheTtlMs ?? DEFAULT_STAT_CACHE_TTL_MS;
 	}
 	/**
 	* Snapshot the current size + file count of each well-known
 	* location. Used by the admin UI to render an opt-in checklist
 	* before triggering a backup, and by `createArchive` to derive the
 	* embedded manifest.
+	*
+	* The walk is async (yields to the event loop per directory) and
+	* per-location results are cached + single-flighted: the service
+	* runs in-process in the hub, and a synchronous walk of the 70k+
+	* file `addons` location blocked the event loop long enough to kill
+	* WS keepalives cluster-wide.
 	*/
 	statLocations(locations = DEFAULT_BACKUP_LOCATIONS) {
-		return locations.map((loc) => {
-			const abs = node_path.isAbsolute(loc) ? loc : node_path.join(this.dataDir, loc);
-			if (!node_fs.existsSync(abs)) return {
-				name: loc,
-				sizeBytes: 0,
-				fileCount: 0,
-				present: false
-			};
-			const walked = walkAbs(abs, abs);
-			return {
-				name: loc,
-				sizeBytes: walked.reduce((acc, e) => acc + e.sizeBytes, 0),
-				fileCount: walked.filter((e) => e.kind === "file").length,
-				present: true
-			};
+		return Promise.all(locations.map((loc) => this.statLocationCached(loc)));
+	}
+	statLocationCached(loc) {
+		const now = Date.now();
+		const hit = this.statCache.get(loc);
+		if (hit && now - hit.at < this.statCacheTtlMs) return hit.value;
+		const value = this.statLocation(loc);
+		this.statCache.set(loc, {
+			at: now,
+			value
 		});
+		value.catch(() => this.statCache.delete(loc));
+		return value;
+	}
+	async statLocation(loc) {
+		const abs = node_path.isAbsolute(loc) ? loc : node_path.join(this.dataDir, loc);
+		if (!node_fs.existsSync(abs)) return {
+			name: loc,
+			sizeBytes: 0,
+			fileCount: 0,
+			present: false
+		};
+		const walked = await walkAbs(abs, abs);
+		return {
+			name: loc,
+			sizeBytes: walked.reduce((acc, e) => acc + e.sizeBytes, 0),
+			fileCount: walked.filter((e) => e.kind === "file").length,
+			present: true
+		};
 	}
 	/**
 	* Create a tar.gz of the given locations. Uses the `tar` npm package
@@ -3082,8 +3105,8 @@ var SystemBackupService = class {
 		const entries = [];
 		for (const loc of present) {
 			const abs = node_path.join(this.dataDir, loc);
-			const stat = node_fs.statSync(abs);
-			if (stat.isDirectory()) for (const e of walkAbs(abs, this.dataDir)) entries.push(e);
+			const stat = await node_fs_promises.stat(abs);
+			if (stat.isDirectory()) for (const e of await walkAbs(abs, this.dataDir)) entries.push(e);
 			else entries.push(toArchiveEntry(abs, this.dataDir, stat));
 		}
 		const manifest = {
@@ -3258,15 +3281,15 @@ var SystemBackupService = class {
 * path. Symlinks are dereferenced (matches the `follow: true` flag we
 * pass to tar.create).
 */
-function walkAbs(absRoot, dataDir) {
+async function walkAbs(absRoot, dataDir) {
 	const out = [];
-	walkRec(absRoot, dataDir, out);
+	await walkRec(absRoot, dataDir, out);
 	return out;
 }
-function walkRec(abs, dataDir, out) {
+async function walkRec(abs, dataDir, out) {
 	let stat;
 	try {
-		stat = node_fs.statSync(abs);
+		stat = await node_fs_promises.stat(abs);
 	} catch {
 		return;
 	}
@@ -3274,11 +3297,11 @@ function walkRec(abs, dataDir, out) {
 	if (stat.isDirectory()) {
 		let children;
 		try {
-			children = node_fs.readdirSync(abs);
+			children = await node_fs_promises.readdir(abs);
 		} catch {
 			return;
 		}
-		for (const child of children) walkRec(node_path.join(abs, child), dataDir, out);
+		for (const child of children) await walkRec(node_path.join(abs, child), dataDir, out);
 	}
 }
 function toArchiveEntry(abs, dataDir, stat) {

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -3006,6 +3006,7 @@ var DEFAULT_BACKUP_LOCATIONS = [
 ];
 /** Path of the manifest file embedded inside every archive. */
 var ARCHIVE_MANIFEST_NAME = ".camstack-backup-manifest.json";
+var DEFAULT_STAT_CACHE_TTL_MS = 6e4;
 /**
 * System-level archive primitives. Construct one per server boot;
 * methods are pure I/O.
@@ -3013,33 +3014,55 @@ var ARCHIVE_MANIFEST_NAME = ".camstack-backup-manifest.json";
 var SystemBackupService = class {
 	dataDir;
 	logger;
-	constructor(dataDir, logger) {
+	statCacheTtlMs;
+	statCache = /* @__PURE__ */ new Map();
+	constructor(dataDir, logger, opts) {
 		this.dataDir = dataDir;
 		this.logger = logger;
+		this.statCacheTtlMs = opts?.statCacheTtlMs ?? DEFAULT_STAT_CACHE_TTL_MS;
 	}
 	/**
 	* Snapshot the current size + file count of each well-known
 	* location. Used by the admin UI to render an opt-in checklist
 	* before triggering a backup, and by `createArchive` to derive the
 	* embedded manifest.
+	*
+	* The walk is async (yields to the event loop per directory) and
+	* per-location results are cached + single-flighted: the service
+	* runs in-process in the hub, and a synchronous walk of the 70k+
+	* file `addons` location blocked the event loop long enough to kill
+	* WS keepalives cluster-wide.
 	*/
 	statLocations(locations = DEFAULT_BACKUP_LOCATIONS) {
-		return locations.map((loc) => {
-			const abs = path$1.isAbsolute(loc) ? loc : path$1.join(this.dataDir, loc);
-			if (!fs.existsSync(abs)) return {
-				name: loc,
-				sizeBytes: 0,
-				fileCount: 0,
-				present: false
-			};
-			const walked = walkAbs(abs, abs);
-			return {
-				name: loc,
-				sizeBytes: walked.reduce((acc, e) => acc + e.sizeBytes, 0),
-				fileCount: walked.filter((e) => e.kind === "file").length,
-				present: true
-			};
+		return Promise.all(locations.map((loc) => this.statLocationCached(loc)));
+	}
+	statLocationCached(loc) {
+		const now = Date.now();
+		const hit = this.statCache.get(loc);
+		if (hit && now - hit.at < this.statCacheTtlMs) return hit.value;
+		const value = this.statLocation(loc);
+		this.statCache.set(loc, {
+			at: now,
+			value
 		});
+		value.catch(() => this.statCache.delete(loc));
+		return value;
+	}
+	async statLocation(loc) {
+		const abs = path$1.isAbsolute(loc) ? loc : path$1.join(this.dataDir, loc);
+		if (!fs.existsSync(abs)) return {
+			name: loc,
+			sizeBytes: 0,
+			fileCount: 0,
+			present: false
+		};
+		const walked = await walkAbs(abs, abs);
+		return {
+			name: loc,
+			sizeBytes: walked.reduce((acc, e) => acc + e.sizeBytes, 0),
+			fileCount: walked.filter((e) => e.kind === "file").length,
+			present: true
+		};
 	}
 	/**
 	* Create a tar.gz of the given locations. Uses the `tar` npm package
@@ -3067,8 +3090,8 @@ var SystemBackupService = class {
 		const entries = [];
 		for (const loc of present) {
 			const abs = path$1.join(this.dataDir, loc);
-			const stat = fs.statSync(abs);
-			if (stat.isDirectory()) for (const e of walkAbs(abs, this.dataDir)) entries.push(e);
+			const stat = await fsp.stat(abs);
+			if (stat.isDirectory()) for (const e of await walkAbs(abs, this.dataDir)) entries.push(e);
 			else entries.push(toArchiveEntry(abs, this.dataDir, stat));
 		}
 		const manifest = {
@@ -3243,15 +3266,15 @@ var SystemBackupService = class {
 * path. Symlinks are dereferenced (matches the `follow: true` flag we
 * pass to tar.create).
 */
-function walkAbs(absRoot, dataDir) {
+async function walkAbs(absRoot, dataDir) {
 	const out = [];
-	walkRec(absRoot, dataDir, out);
+	await walkRec(absRoot, dataDir, out);
 	return out;
 }
-function walkRec(abs, dataDir, out) {
+async function walkRec(abs, dataDir, out) {
 	let stat;
 	try {
-		stat = fs.statSync(abs);
+		stat = await fsp.stat(abs);
 	} catch {
 		return;
 	}
@@ -3259,11 +3282,11 @@ function walkRec(abs, dataDir, out) {
 	if (stat.isDirectory()) {
 		let children;
 		try {
-			children = fs.readdirSync(abs);
+			children = await fsp.readdir(abs);
 		} catch {
 			return;
 		}
-		for (const child of children) walkRec(path$1.join(abs, child), dataDir, out);
+		for (const child of children) await walkRec(path$1.join(abs, child), dataDir, out);
 	}
 }
 function toArchiveEntry(abs, dataDir, stat) {

package/dist/builtins/system-backup/system-backup.service.d.ts

@@ -64,6 +64,14 @@ export interface LocationStat {
     /** False when the location doesn't exist under dataDir. */
     readonly present: boolean;
 }
+export interface SystemBackupServiceOptions {
+    /**
+     * How long a `statLocations` walk result stays fresh. The `addons`
+     * location holds tens of thousands of files; without a cache every
+     * admin-UI visit re-walks it.
+     */
+    readonly statCacheTtlMs?: number;
+}
 /**
  * System-level archive primitives. Construct one per server boot;
  * methods are pure I/O.
@@ -71,14 +79,24 @@ export interface LocationStat {
 export declare class SystemBackupService {
     private readonly dataDir;
     private readonly logger;
-    constructor(dataDir: string, logger: IScopedLogger);
+    private readonly statCacheTtlMs;
+    private readonly statCache;
+    constructor(dataDir: string, logger: IScopedLogger, opts?: SystemBackupServiceOptions);
     /**
      * Snapshot the current size + file count of each well-known
      * location. Used by the admin UI to render an opt-in checklist
      * before triggering a backup, and by `createArchive` to derive the
      * embedded manifest.
+     *
+     * The walk is async (yields to the event loop per directory) and
+     * per-location results are cached + single-flighted: the service
+     * runs in-process in the hub, and a synchronous walk of the 70k+
+     * file `addons` location blocked the event loop long enough to kill
+     * WS keepalives cluster-wide.
      */
-    statLocations(locations?: readonly string[]): readonly LocationStat[];
+    statLocations(locations?: readonly string[]): Promise<readonly LocationStat[]>;
+    private statLocationCached;
+    private statLocation;
     /**
      * Create a tar.gz of the given locations. Uses the `tar` npm package
      * (used by npm itself) instead of shelling out — gives us:

package/dist/index.js

@@ -21,7 +21,7 @@ const require_builtins_local_auth_local_auth_addon = require("./builtins/local-a
 require("./builtins/local-auth/index.js");
 const require_builtins_device_manager_device_manager_addon = require("./builtins/device-manager/device-manager.addon.js");
 require("./builtins/device-manager/index.js");
-const require_manifest_python_deps = require("./manifest-python-deps-B6ahe90k.js");
+const require_manifest_python_deps = require("./manifest-python-deps-BGvIVCm_.js");
 const require_custom_action_registry = require("./custom-action-registry-vLYEFTtv.js");
 let _camstack_types_node = require("@camstack/types/node");
 let zod = require("zod");
@@ -2587,6 +2587,71 @@ async function copyDirRecursive(src, dest) {
 	});
 }
 /**
+* Runtime natives that must stay installable even when an addon forgets to
+* declare them: the mirror of the build preset's `COMMON_NATIVE_DEPS`
+* (tools/build/vite-lib.preset.ts — build tooling, not loadable at runtime).
+* These are the ONLY packages a self-contained dist genuinely `require()`s
+* from node_modules; everything else is already inlined by the bundle.
+*/
+var RUNTIME_NATIVE_KEEP = [
+	"better-sqlite3",
+	"node-av",
+	"onnxruntime-node",
+	"sharp",
+	"ssh2",
+	"werift",
+	"systeminformation"
+];
+/** Read `camstack.runtimeDependencies` (extra non-native deps the dist
+*  requires at runtime — versions come from the manifest's own dep maps). */
+function readRuntimeDependencies(pkg) {
+	const camstack = pkg.camstack;
+	if (camstack === null || typeof camstack !== "object" || Array.isArray(camstack)) return [];
+	const raw = camstack.runtimeDependencies;
+	if (!Array.isArray(raw)) return [];
+	return raw.filter((entry) => typeof entry === "string");
+}
+/**
+* Strip every dependency an addon's self-contained dist has already bundled,
+* keeping ONLY what must resolve from node_modules at runtime:
+*
+*   keep = RUNTIME_NATIVE_KEEP ∪ camstack.runtimeDependencies (minus @camstack/*)
+*
+* Addon dists are fully bundled (vite `externals: 'self-contained'`), yet the
+* blanket `npm install` of the manifest's dependencies re-installed the whole
+* tree the dist already contains — 98% of the deployed addons dir was
+* redundant node_modules (74k files / 1.34 GB on the live hub; it stalled the
+* backup walk and bloated every deploy). Kept PEER deps are folded into
+* `dependencies` so `--omit=peer` installs can't drop them (pipeline's
+* patched `werift`).
+*
+* Escape hatch: `CAMSTACK_INSTALL_FULL_DEPS=1` restores the legacy behaviour
+* (strip only @camstack/*) for debugging a suspected undeclared runtime dep.
+*
+* Returns a new object (immutable).
+*/
+function stripBundledDeps(pkg) {
+	if (process.env.CAMSTACK_INSTALL_FULL_DEPS === "1") return stripCamstackDeps(pkg);
+	const camstack = pkg.camstack;
+	if (camstack !== null && typeof camstack === "object" && !Array.isArray(camstack) && camstack.system === true) return stripCamstackDeps(pkg);
+	const keep = new Set([...RUNTIME_NATIVE_KEEP, ...readRuntimeDependencies(pkg)]);
+	const kept = {};
+	for (const depType of ["dependencies", "peerDependencies"]) {
+		const rawDeps = pkg[depType];
+		if (rawDeps === null || typeof rawDeps !== "object" || Array.isArray(rawDeps)) continue;
+		for (const [name, version] of Object.entries(rawDeps)) {
+			if (name.startsWith("@camstack/")) continue;
+			if (!keep.has(name) || typeof version !== "string") continue;
+			if (!(name in kept)) kept[name] = version;
+		}
+	}
+	const result = { ...pkg };
+	result.dependencies = Object.keys(kept).length > 0 ? kept : void 0;
+	result.peerDependencies = void 0;
+	delete result.devDependencies;
+	return result;
+}
+/**
 * Strip @camstack/* dependencies and devDependencies from a package.json object.
 * Used when installing addons into the addons directory — @camstack packages
 * are provided by the host runtime, not installed per-addon.
@@ -3171,7 +3236,7 @@ var AddonInstaller = class AddonInstaller {
 			force: true
 		});
 		ensureDir(targetDir);
-		await node_fs.promises.writeFile(node_path.join(targetDir, "package.json"), JSON.stringify(stripCamstackDeps(pkgData), null, 2));
+		await node_fs.promises.writeFile(node_path.join(targetDir, "package.json"), JSON.stringify(stripBundledDeps(pkgData), null, 2));
 		await copyDirRecursive(distDir, node_path.join(targetDir, "dist"));
 		await copyExtraFileDirs(pkgData, sourceDir, targetDir);
 		await node_fs.promises.writeFile(node_path.join(targetDir, ".install-source"), "local");
@@ -3180,7 +3245,7 @@ var AddonInstaller = class AddonInstaller {
 			version: localPkgVersion,
 			source: "local"
 		});
-		const strippedDeps = stripCamstackDeps(pkgData);
+		const strippedDeps = stripBundledDeps(pkgData);
 		if (strippedDeps["dependencies"] && typeof strippedDeps["dependencies"] === "object" && Object.keys(strippedDeps["dependencies"]).length > 0) try {
 			await execFileAsync("npm", [
 				"install",
@@ -3358,7 +3423,7 @@ var AddonInstaller = class AddonInstaller {
 			if (!pkgView) throw new Error(`Invalid package.json at ${pkgJsonPath}`);
 			if (!pkgView.camstackAddons) throw new Error(`Package ${pkgView.name} has no camstack.addons manifest`);
 			const targetDir = node_path.join(this.addonsDir, pkgView.name);
-			const strippedManifest = stripCamstackDeps(pkgView.raw);
+			const strippedManifest = stripBundledDeps(pkgView.raw);
 			await node_fs.promises.writeFile(pkgJsonPath, JSON.stringify(strippedManifest, null, 2));
 			const strippedRuntimeDeps = strippedManifest["dependencies"];
 			if (strippedRuntimeDeps != null && typeof strippedRuntimeDeps === "object" && Object.keys(strippedRuntimeDeps).length > 0) {
@@ -92987,6 +93052,30 @@ var StagingArea = class {
 			force: true
 		});
 	}
+	/**
+	* Remove every staged dir under `stagingDir`. Safe — and meant — to run once
+	* at boot: `cleanup(jobId)` only fires when a lifecycle job finishes, so a
+	* restart (or crash) that interrupts a job mid-flight leaves its
+	* `<stagingDir>/<jobId>/` behind forever. At boot no job is in flight, so any
+	* entry present is an orphan. Returns the number of orphan dirs removed.
+	*/
+	sweepOrphans() {
+		let entries;
+		try {
+			entries = node_fs.readdirSync(this.stagingDir);
+		} catch {
+			return 0;
+		}
+		let removed = 0;
+		for (const name of entries) try {
+			node_fs.rmSync(node_path.join(this.stagingDir, name), {
+				recursive: true,
+				force: true
+			});
+			removed += 1;
+		} catch {}
+		return removed;
+	}
 };
 //#endregion
 //#region src/kernel/lifecycle/lifecycle-job-engine.ts

package/dist/index.mjs

@@ -19,7 +19,7 @@ import { LocalAuthAddon, a as require_ms, c as __esmMin, d as __toCommonJS, f as
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
-import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-4QvOLiBn.mjs";
+import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, y as __resetCapUsageRegistryForTests, yt as resolveAddonClass, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-BjxBfiFd.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-BEXwC-oo.mjs";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { z } from "zod";
@@ -2579,6 +2579,71 @@ async function copyDirRecursive(src, dest) {
 	});
 }
 /**
+* Runtime natives that must stay installable even when an addon forgets to
+* declare them: the mirror of the build preset's `COMMON_NATIVE_DEPS`
+* (tools/build/vite-lib.preset.ts — build tooling, not loadable at runtime).
+* These are the ONLY packages a self-contained dist genuinely `require()`s
+* from node_modules; everything else is already inlined by the bundle.
+*/
+var RUNTIME_NATIVE_KEEP = [
+	"better-sqlite3",
+	"node-av",
+	"onnxruntime-node",
+	"sharp",
+	"ssh2",
+	"werift",
+	"systeminformation"
+];
+/** Read `camstack.runtimeDependencies` (extra non-native deps the dist
+*  requires at runtime — versions come from the manifest's own dep maps). */
+function readRuntimeDependencies(pkg) {
+	const camstack = pkg.camstack;
+	if (camstack === null || typeof camstack !== "object" || Array.isArray(camstack)) return [];
+	const raw = camstack.runtimeDependencies;
+	if (!Array.isArray(raw)) return [];
+	return raw.filter((entry) => typeof entry === "string");
+}
+/**
+* Strip every dependency an addon's self-contained dist has already bundled,
+* keeping ONLY what must resolve from node_modules at runtime:
+*
+*   keep = RUNTIME_NATIVE_KEEP ∪ camstack.runtimeDependencies (minus @camstack/*)
+*
+* Addon dists are fully bundled (vite `externals: 'self-contained'`), yet the
+* blanket `npm install` of the manifest's dependencies re-installed the whole
+* tree the dist already contains — 98% of the deployed addons dir was
+* redundant node_modules (74k files / 1.34 GB on the live hub; it stalled the
+* backup walk and bloated every deploy). Kept PEER deps are folded into
+* `dependencies` so `--omit=peer` installs can't drop them (pipeline's
+* patched `werift`).
+*
+* Escape hatch: `CAMSTACK_INSTALL_FULL_DEPS=1` restores the legacy behaviour
+* (strip only @camstack/*) for debugging a suspected undeclared runtime dep.
+*
+* Returns a new object (immutable).
+*/
+function stripBundledDeps(pkg) {
+	if (process.env.CAMSTACK_INSTALL_FULL_DEPS === "1") return stripCamstackDeps(pkg);
+	const camstack = pkg.camstack;
+	if (camstack !== null && typeof camstack === "object" && !Array.isArray(camstack) && camstack.system === true) return stripCamstackDeps(pkg);
+	const keep = new Set([...RUNTIME_NATIVE_KEEP, ...readRuntimeDependencies(pkg)]);
+	const kept = {};
+	for (const depType of ["dependencies", "peerDependencies"]) {
+		const rawDeps = pkg[depType];
+		if (rawDeps === null || typeof rawDeps !== "object" || Array.isArray(rawDeps)) continue;
+		for (const [name, version] of Object.entries(rawDeps)) {
+			if (name.startsWith("@camstack/")) continue;
+			if (!keep.has(name) || typeof version !== "string") continue;
+			if (!(name in kept)) kept[name] = version;
+		}
+	}
+	const result = { ...pkg };
+	result.dependencies = Object.keys(kept).length > 0 ? kept : void 0;
+	result.peerDependencies = void 0;
+	delete result.devDependencies;
+	return result;
+}
+/**
 * Strip @camstack/* dependencies and devDependencies from a package.json object.
 * Used when installing addons into the addons directory — @camstack packages
 * are provided by the host runtime, not installed per-addon.
@@ -3163,7 +3228,7 @@ var AddonInstaller = class AddonInstaller {
 			force: true
 		});
 		ensureDir(targetDir);
-		await fs$17.promises.writeFile(path$39.join(targetDir, "package.json"), JSON.stringify(stripCamstackDeps(pkgData), null, 2));
+		await fs$17.promises.writeFile(path$39.join(targetDir, "package.json"), JSON.stringify(stripBundledDeps(pkgData), null, 2));
 		await copyDirRecursive(distDir, path$39.join(targetDir, "dist"));
 		await copyExtraFileDirs(pkgData, sourceDir, targetDir);
 		await fs$17.promises.writeFile(path$39.join(targetDir, ".install-source"), "local");
@@ -3172,7 +3237,7 @@ var AddonInstaller = class AddonInstaller {
 			version: localPkgVersion,
 			source: "local"
 		});
-		const strippedDeps = stripCamstackDeps(pkgData);
+		const strippedDeps = stripBundledDeps(pkgData);
 		if (strippedDeps["dependencies"] && typeof strippedDeps["dependencies"] === "object" && Object.keys(strippedDeps["dependencies"]).length > 0) try {
 			await execFileAsync("npm", [
 				"install",
@@ -3350,7 +3415,7 @@ var AddonInstaller = class AddonInstaller {
 			if (!pkgView) throw new Error(`Invalid package.json at ${pkgJsonPath}`);
 			if (!pkgView.camstackAddons) throw new Error(`Package ${pkgView.name} has no camstack.addons manifest`);
 			const targetDir = path$39.join(this.addonsDir, pkgView.name);
-			const strippedManifest = stripCamstackDeps(pkgView.raw);
+			const strippedManifest = stripBundledDeps(pkgView.raw);
 			await fs$17.promises.writeFile(pkgJsonPath, JSON.stringify(strippedManifest, null, 2));
 			const strippedRuntimeDeps = strippedManifest["dependencies"];
 			if (strippedRuntimeDeps != null && typeof strippedRuntimeDeps === "object" && Object.keys(strippedRuntimeDeps).length > 0) {
@@ -92979,6 +93044,30 @@ var StagingArea = class {
 			force: true
 		});
 	}
+	/**
+	* Remove every staged dir under `stagingDir`. Safe — and meant — to run once
+	* at boot: `cleanup(jobId)` only fires when a lifecycle job finishes, so a
+	* restart (or crash) that interrupts a job mid-flight leaves its
+	* `<stagingDir>/<jobId>/` behind forever. At boot no job is in flight, so any
+	* entry present is an orphan. Returns the number of orphan dirs removed.
+	*/
+	sweepOrphans() {
+		let entries;
+		try {
+			entries = fs$17.readdirSync(this.stagingDir);
+		} catch {
+			return 0;
+		}
+		let removed = 0;
+		for (const name of entries) try {
+			fs$17.rmSync(path$39.join(this.stagingDir, name), {
+				recursive: true,
+				force: true
+			});
+			removed += 1;
+		} catch {}
+		return removed;
+	}
 };
 //#endregion
 //#region src/kernel/lifecycle/lifecycle-job-engine.ts

package/dist/kernel/fs-utils.d.ts

@@ -14,6 +14,34 @@ export declare function ensureDir(dirPath: string): void;
  * `fs.promises.cp` keeps the I/O off the event loop. (Node ≥18 stable.)
  */
 export declare function copyDirRecursive(src: string, dest: string): Promise<void>;
+/**
+ * Runtime natives that must stay installable even when an addon forgets to
+ * declare them: the mirror of the build preset's `COMMON_NATIVE_DEPS`
+ * (tools/build/vite-lib.preset.ts — build tooling, not loadable at runtime).
+ * These are the ONLY packages a self-contained dist genuinely `require()`s
+ * from node_modules; everything else is already inlined by the bundle.
+ */
+export declare const RUNTIME_NATIVE_KEEP: readonly string[];
+/**
+ * Strip every dependency an addon's self-contained dist has already bundled,
+ * keeping ONLY what must resolve from node_modules at runtime:
+ *
+ *   keep = RUNTIME_NATIVE_KEEP ∪ camstack.runtimeDependencies (minus @camstack/*)
+ *
+ * Addon dists are fully bundled (vite `externals: 'self-contained'`), yet the
+ * blanket `npm install` of the manifest's dependencies re-installed the whole
+ * tree the dist already contains — 98% of the deployed addons dir was
+ * redundant node_modules (74k files / 1.34 GB on the live hub; it stalled the
+ * backup walk and bloated every deploy). Kept PEER deps are folded into
+ * `dependencies` so `--omit=peer` installs can't drop them (pipeline's
+ * patched `werift`).
+ *
+ * Escape hatch: `CAMSTACK_INSTALL_FULL_DEPS=1` restores the legacy behaviour
+ * (strip only @camstack/*) for debugging a suspected undeclared runtime dep.
+ *
+ * Returns a new object (immutable).
+ */
+export declare function stripBundledDeps(pkg: Record<string, unknown>): Record<string, unknown>;
 /**
  * Strip @camstack/* dependencies and devDependencies from a package.json object.
  * Used when installing addons into the addons directory — @camstack packages

package/dist/kernel/lifecycle/staging-area.d.ts

@@ -18,5 +18,13 @@ export declare class StagingArea {
         stagedPath: string;
     }>;
     cleanup(jobId: string): void;
+    /**
+     * Remove every staged dir under `stagingDir`. Safe — and meant — to run once
+     * at boot: `cleanup(jobId)` only fires when a lifecycle job finishes, so a
+     * restart (or crash) that interrupts a job mid-flight leaves its
+     * `<stagingDir>/<jobId>/` behind forever. At boot no job is in flight, so any
+     * entry present is an orphan. Returns the number of orphan dirs removed.
+     */
+    sweepOrphans(): number;
 }
 export {};

package/dist/{manifest-python-deps-B6ahe90k.js → manifest-python-deps-BGvIVCm_.js}

@@ -4529,7 +4529,8 @@ var LocalChildClient = class {
 				capName: msg.capName,
 				method: msg.method,
 				args: msg.args,
-				...msg.deviceId !== void 0 ? { deviceId: msg.deviceId } : {}
+				...msg.deviceId !== void 0 ? { deviceId: msg.deviceId } : {},
+				...msg.addonId !== void 0 ? { addonId: msg.addonId } : {}
 			});
 			if (msg.kind === "addon-call") {
 				if (this.addonCallHandler === null) throw new Error(`LocalChildClient: addon-call for "${msg.addonId}" arrived but no onAddonCall handler is registered`);

package/dist/{manifest-python-deps-4QvOLiBn.mjs → manifest-python-deps-BjxBfiFd.mjs}

@@ -4527,7 +4527,8 @@ var LocalChildClient = class {
 				capName: msg.capName,
 				method: msg.method,
 				args: msg.args,
-				...msg.deviceId !== void 0 ? { deviceId: msg.deviceId } : {}
+				...msg.deviceId !== void 0 ? { deviceId: msg.deviceId } : {},
+				...msg.addonId !== void 0 ? { addonId: msg.addonId } : {}
 			});
 			if (msg.kind === "addon-call") {
 				if (this.addonCallHandler === null) throw new Error(`LocalChildClient: addon-call for "${msg.addonId}" arrived but no onAddonCall handler is registered`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.1.37",
+  "version": "1.1.39",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",