@camstack/system 1.1.51 → 1.1.53

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import { A as isCollectionArrayMethod, Ct as parseJsonUnknown$1, E as extractNestedAddonId, Et as scopeKey, L as looseSchema, M as isVoidInput, N as kebabToCamel, Ot as EventCategory$1, P as lifecycleJobSchema, St as parseJsonObject, Tt as resolveCapMount, V as objectInputDeclaresAddonId, W as procedureAuthKey, _t as emitDownForOwnedCaps, at as DEVICE_SETTINGS_CONTRIBUTION_METHODS, dt as ReadinessTimeoutError, gt as createEvent, ht as asString$1, it as DATAPLANE_SECRET_HEADER$1, j as isObjectInput, k as isArrayOutputSchema, mt as asNumber, nt as errMsg$1, o as METHOD_ACCESS_MAP, ot as DEVICE_STATUS_METHOD, p as addonSettingsCapability, pt as asJsonObject$1, s as RUNTIME_DEFAULTS, t as ALL_CAPABILITY_DEFINITIONS, ut as ReadinessRegistry, wt as readinessKey, yt as expandCapMethods } from "./dist-BWQX9yUj.mjs";
-import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-C-IHWnXx.mjs";
-import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, bt as resolveAddonClass, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, xt as createAddonDataPlaneFacility, y as __resetCapUsageRegistryForTests, yt as runNpm, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-BA6KA9If.mjs";
+import { A as isArrayOutputSchema, Ct as parseJsonObject, D as extractNestedAddonId, Dt as scopeKey, Et as resolveCapMount, F as lifecycleJobSchema, G as procedureAuthKey, H as objectInputDeclaresAddonId, M as isObjectInput, N as isVoidInput, P as kebabToCamel, R as looseSchema, Tt as readinessKey, _t as createEvent, at as DATAPLANE_SECRET_HEADER$1, bt as expandCapMethods, dt as ReadinessRegistry, ft as ReadinessTimeoutError, gt as asString$1, ht as asNumber, j as isCollectionArrayMethod, kt as EventCategory$1, mt as asJsonObject$1, o as METHOD_ACCESS_MAP, ot as DEVICE_SETTINGS_CONTRIBUTION_METHODS, p as addonSettingsCapability, rt as errMsg$1, s as RUNTIME_DEFAULTS, st as DEVICE_STATUS_METHOD, t as ALL_CAPABILITY_DEFINITIONS, vt as emitDownForOwnedCaps, wt as parseJsonUnknown$1 } from "./dist-D7_69kDt.mjs";
+import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-Cp9f4dk6.mjs";
+import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, bt as resolveAddonClass, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, xt as createAddonDataPlaneFacility, y as __resetCapUsageRegistryForTests, yt as runNpm, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-EM2H-jjS.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Le3l0qS2.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, t as SqliteSettingsBackend } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
@@ -92039,16 +92039,32 @@ async function callRegisterNodeWithRetry(broker, params, opts) {
 }
 //#endregion
 //#region src/kernel/moleculer/readiness-service.ts
+/**
+* Service name AGENTS register their own readiness snapshot under.
+*
+* Deliberately NOT `$readiness`: agents call `$readiness.getSnapshot`
+* UNQUALIFIED to reach the hub's authoritative registry, and Moleculer
+* prefers a local service for an unqualified call — an agent registering
+* `$readiness` would shadow the hub and hydrate from itself. The hub
+* pulls `$agent-readiness.getSnapshot` with an explicit `{ nodeID }` on
+* every agent (re)connect + periodically, closing the reverse leg of the
+* D8 snapshot-reconcile (the hub otherwise learns agent readiness only
+* from lossy cross-node event broadcasts).
+*/
+var AGENT_READINESS_SERVICE_NAME = "$agent-readiness";
 function createReadinessService(deps) {
 	return {
-		name: "$readiness",
+		name: deps.name ?? "$readiness",
 		actions: { getSnapshot: { handler() {
 			return deps.getSnapshot();
 		} } }
 	};
 }
-function createReadinessServiceForRegistry(registry) {
-	return createReadinessService({ getSnapshot: () => registry.getSnapshotForTransport() });
+function createReadinessServiceForRegistry(registry, name) {
+	return createReadinessService({
+		getSnapshot: () => registry.getSnapshotForTransport(),
+		...name !== void 0 ? { name } : {}
+	});
 }
 //#endregion
 //#region src/kernel/moleculer/stream-probe-service.ts
@@ -93381,4 +93397,4 @@ async function stageFrameworkLockstep(input) {
 	return results;
 }
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, setNodeEventInterest, stageFrameworkLockstep, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, setNodeEventInterest, stageFrameworkLockstep, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };

package/dist/kernel/index.d.ts

@@ -44,7 +44,7 @@ export { callRegisterNodeWithRetry, buildNodeManifest } from './moleculer/regist
 export type { RegisterNodeBroker, CallRegisterNodeOptions, } from './moleculer/register-node-client.js';
 export { hashClusterSecret, clusterSecretMatches, isClusterSecretMismatchError, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, } from './moleculer/cluster-secret.js';
 export { serializeTypedArrays } from './moleculer/typed-array-serde.js';
-export { createReadinessService, createReadinessServiceForRegistry, } from './moleculer/readiness-service.js';
+export { createReadinessService, createReadinessServiceForRegistry, AGENT_READINESS_SERVICE_NAME, } from './moleculer/readiness-service.js';
 export type { ReadinessServiceDeps } from './moleculer/readiness-service.js';
 export { getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, } from './moleculer/readiness-context.js';
 export type { UdsReadinessClient } from './moleculer/readiness-context.js';

package/dist/kernel/moleculer/readiness-context.d.ts

@@ -45,14 +45,18 @@ declare function getOrInitReadinessRegistry(broker: ServiceBroker, eventBus: IEv
  *     (Phase C) — the registry ingests them through its own event-bus
  *     subscription, exactly as in broker mode.
  *
- * **No `$services.changed` reconcile signal needed:**
- *   The broker-mode `$services.changed` reconcile existed because Moleculer
- *   broadcasts can be dropped during the boot window. Over UDS the parent
- *   reliably forwards every `system.ready-state` delta to each child (via
- *   the event bridge wired in Phase C). Dropped deltas are not a concern;
- *   the initial snapshot + live event bus is sufficient. A new
- *   parent-to-child "topology changed, re-pull" signal is therefore NOT
- *   added — it would be redundant and would complicate the protocol.
+ * **Periodic reconcile (D8):**
+ *   The original design assumed the parent reliably forwards every
+ *   `system.ready-state` delta over UDS, so no reconcile signal beyond
+ *   the (re)connect hydrate was added. The 2026-07-17 incident disproved
+ *   the assumption end-to-end: a delta can be lost across the full
+ *   producer→parent→child path (restart churn, subscription races), and
+ *   a child that saw `starting` then never got `ready` wedged forever.
+ *   The registry therefore ALSO re-pulls the parent snapshot every
+ *   `READINESS_RECONCILE_INTERVAL_MS` while connected — combined with
+ *   `hydrate`'s advance semantics, a lost delta costs one reconcile
+ *   round, never forever. No new parent-to-child protocol message is
+ *   needed (the existing snapshot request is reused).
  *
  * **`awaitReady`/`acquireCapability`/`onReadyState` semantics unchanged.**
  *

package/dist/kernel/moleculer/readiness-service.d.ts

@@ -1,7 +1,22 @@
 import { ServiceSchema } from 'moleculer';
 import { IReadinessRegistry, IReadinessRegistryRecord } from '@camstack/types';
+/**
+ * Service name AGENTS register their own readiness snapshot under.
+ *
+ * Deliberately NOT `$readiness`: agents call `$readiness.getSnapshot`
+ * UNQUALIFIED to reach the hub's authoritative registry, and Moleculer
+ * prefers a local service for an unqualified call — an agent registering
+ * `$readiness` would shadow the hub and hydrate from itself. The hub
+ * pulls `$agent-readiness.getSnapshot` with an explicit `{ nodeID }` on
+ * every agent (re)connect + periodically, closing the reverse leg of the
+ * D8 snapshot-reconcile (the hub otherwise learns agent readiness only
+ * from lossy cross-node event broadcasts).
+ */
+export declare const AGENT_READINESS_SERVICE_NAME = "$agent-readiness";
 export interface ReadinessServiceDeps {
     readonly getSnapshot: () => readonly IReadinessRegistryRecord[];
+    /** Service name override — default `$readiness` (the hub-authoritative instance). */
+    readonly name?: string;
 }
 export declare function createReadinessService(deps: ReadinessServiceDeps): ServiceSchema;
-export declare function createReadinessServiceForRegistry(registry: IReadinessRegistry): ServiceSchema;
+export declare function createReadinessServiceForRegistry(registry: IReadinessRegistry, name?: string): ServiceSchema;

package/dist/{manifest-python-deps-CVcJ9hDX.js → manifest-python-deps-DszE7bYn.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-C3uHEBtP.js");
+const require_dist = require("./dist-BNro5CRu.js");
 let _camstack_types_node = require("@camstack/types/node");
 let node_http = require("node:http");
 let node_fs = require("node:fs");
@@ -6621,6 +6621,20 @@ var brokerReadinessRegistries = /* @__PURE__ */ new WeakMap();
 */
 var clientReadinessRegistries = /* @__PURE__ */ new Map();
 /**
+* Fixed-period authoritative snapshot re-pull (D8 reconcile). Readiness
+* deltas are telemetry — lossy across the UDS/Moleculer hops — and the
+* on-(re)connect hydrate alone cannot repair a delta lost while
+* CONNECTED (2026-07-17: the agent's platform-probe `ready` never
+* reached the detection runner child; the child held `starting` forever
+* and every waiter wedged). With `ReadinessRegistry.hydrate` able to
+* ADVANCE stale records, this periodic re-pull bounds the damage of any
+* lost delta to one reconcile round. Not a retry backoff — a
+* steady-state reconcile against the authority. `unref()`d so the timer
+* never keeps a process alive; registries are process-lifetime, so the
+* interval is never cleared.
+*/
+var READINESS_RECONCILE_INTERVAL_MS = 6e4;
+/**
 * Return the shared ReadinessRegistry for this broker — one per
 * process is enough. Every addon context on the same broker gets the
 * same instance via `ctx.kernel.readinessRegistry`.
@@ -6671,6 +6685,10 @@ function getOrInitReadinessRegistry(broker, eventBus, logger) {
 			}, 200);
 		};
 		bkr.localBus.on("$services.changed", scheduleRehydrate);
+		const reconcileTimer = setInterval(() => {
+			hydrateFromHub();
+		}, READINESS_RECONCILE_INTERVAL_MS);
+		if (typeof reconcileTimer.unref === "function") reconcileTimer.unref();
 	}
 	return registry;
 }
@@ -6689,14 +6707,18 @@ function getOrInitReadinessRegistry(broker, eventBus, logger) {
 *     (Phase C) — the registry ingests them through its own event-bus
 *     subscription, exactly as in broker mode.
 *
-* **No `$services.changed` reconcile signal needed:**
-*   The broker-mode `$services.changed` reconcile existed because Moleculer
-*   broadcasts can be dropped during the boot window. Over UDS the parent
-*   reliably forwards every `system.ready-state` delta to each child (via
-*   the event bridge wired in Phase C). Dropped deltas are not a concern;
-*   the initial snapshot + live event bus is sufficient. A new
-*   parent-to-child "topology changed, re-pull" signal is therefore NOT
-*   added — it would be redundant and would complicate the protocol.
+* **Periodic reconcile (D8):**
+*   The original design assumed the parent reliably forwards every
+*   `system.ready-state` delta over UDS, so no reconcile signal beyond
+*   the (re)connect hydrate was added. The 2026-07-17 incident disproved
+*   the assumption end-to-end: a delta can be lost across the full
+*   producer→parent→child path (restart churn, subscription races), and
+*   a child that saw `starting` then never got `ready` wedged forever.
+*   The registry therefore ALSO re-pulls the parent snapshot every
+*   `READINESS_RECONCILE_INTERVAL_MS` while connected — combined with
+*   `hydrate`'s advance semantics, a lost delta costs one reconcile
+*   round, never forever. No new parent-to-child protocol message is
+*   needed (the existing snapshot request is reused).
 *
 * **`awaitReady`/`acquireCapability`/`onReadyState` semantics unchanged.**
 *
@@ -6727,6 +6749,10 @@ function getOrInitReadinessRegistryForClient(client, eventBus, logger, nodeId) {
 		hydrateFromParent();
 	});
 	if (client.isConnected) hydrateFromParent();
+	const reconcileTimer = setInterval(() => {
+		if (client.isConnected) hydrateFromParent();
+	}, READINESS_RECONCILE_INTERVAL_MS);
+	if (typeof reconcileTimer.unref === "function") reconcileTimer.unref();
 	return registry;
 }
 //#endregion

package/dist/{manifest-python-deps-BA6KA9If.mjs → manifest-python-deps-EM2H-jjS.mjs}

@@ -1,4 +1,4 @@
-import { G as readNodePin } from "./dist-BWQX9yUj.mjs";
+import { K as readNodePin } from "./dist-D7_69kDt.mjs";
 import { ensureBinary, ensureFfmpeg, ensurePython, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { createServer } from "node:http";
 import * as fs from "node:fs";
@@ -6619,6 +6619,20 @@ var brokerReadinessRegistries = /* @__PURE__ */ new WeakMap();
 */
 var clientReadinessRegistries = /* @__PURE__ */ new Map();
 /**
+* Fixed-period authoritative snapshot re-pull (D8 reconcile). Readiness
+* deltas are telemetry — lossy across the UDS/Moleculer hops — and the
+* on-(re)connect hydrate alone cannot repair a delta lost while
+* CONNECTED (2026-07-17: the agent's platform-probe `ready` never
+* reached the detection runner child; the child held `starting` forever
+* and every waiter wedged). With `ReadinessRegistry.hydrate` able to
+* ADVANCE stale records, this periodic re-pull bounds the damage of any
+* lost delta to one reconcile round. Not a retry backoff — a
+* steady-state reconcile against the authority. `unref()`d so the timer
+* never keeps a process alive; registries are process-lifetime, so the
+* interval is never cleared.
+*/
+var READINESS_RECONCILE_INTERVAL_MS = 6e4;
+/**
 * Return the shared ReadinessRegistry for this broker — one per
 * process is enough. Every addon context on the same broker gets the
 * same instance via `ctx.kernel.readinessRegistry`.
@@ -6669,6 +6683,10 @@ function getOrInitReadinessRegistry(broker, eventBus, logger) {
 			}, 200);
 		};
 		bkr.localBus.on("$services.changed", scheduleRehydrate);
+		const reconcileTimer = setInterval(() => {
+			hydrateFromHub();
+		}, READINESS_RECONCILE_INTERVAL_MS);
+		if (typeof reconcileTimer.unref === "function") reconcileTimer.unref();
 	}
 	return registry;
 }
@@ -6687,14 +6705,18 @@ function getOrInitReadinessRegistry(broker, eventBus, logger) {
 *     (Phase C) — the registry ingests them through its own event-bus
 *     subscription, exactly as in broker mode.
 *
-* **No `$services.changed` reconcile signal needed:**
-*   The broker-mode `$services.changed` reconcile existed because Moleculer
-*   broadcasts can be dropped during the boot window. Over UDS the parent
-*   reliably forwards every `system.ready-state` delta to each child (via
-*   the event bridge wired in Phase C). Dropped deltas are not a concern;
-*   the initial snapshot + live event bus is sufficient. A new
-*   parent-to-child "topology changed, re-pull" signal is therefore NOT
-*   added — it would be redundant and would complicate the protocol.
+* **Periodic reconcile (D8):**
+*   The original design assumed the parent reliably forwards every
+*   `system.ready-state` delta over UDS, so no reconcile signal beyond
+*   the (re)connect hydrate was added. The 2026-07-17 incident disproved
+*   the assumption end-to-end: a delta can be lost across the full
+*   producer→parent→child path (restart churn, subscription races), and
+*   a child that saw `starting` then never got `ready` wedged forever.
+*   The registry therefore ALSO re-pulls the parent snapshot every
+*   `READINESS_RECONCILE_INTERVAL_MS` while connected — combined with
+*   `hydrate`'s advance semantics, a lost delta costs one reconcile
+*   round, never forever. No new parent-to-child protocol message is
+*   needed (the existing snapshot request is reused).
 *
 * **`awaitReady`/`acquireCapability`/`onReadyState` semantics unchanged.**
 *
@@ -6725,6 +6747,10 @@ function getOrInitReadinessRegistryForClient(client, eventBus, logger, nodeId) {
 		hydrateFromParent();
 	});
 	if (client.isConnected) hydrateFromParent();
+	const reconcileTimer = setInterval(() => {
+		if (client.isConnected) hydrateFromParent();
+	}, READINESS_RECONCILE_INTERVAL_MS);
+	if (typeof reconcileTimer.unref === "function") reconcileTimer.unref();
 	return registry;
 }
 //#endregion

package/dist/{model-download-service-C-IHWnXx.mjs → model-download-service-Cp9f4dk6.mjs}

@@ -268,7 +268,7 @@ function createFileDataPlaneHandler(opts) {
 		const baseHeaders = {
 			"content-type": contentTypeFor(absPath, opts.contentTypes),
 			"accept-ranges": "bytes",
-			"cache-control": "no-cache"
+			"cache-control": opts.cacheControl?.(rel) ?? "no-cache"
 		};
 		const range = parseRangeHeader(req.headers.range, size);
 		if (range) {

package/dist/{model-download-service-D-Umz4-L.js → model-download-service-hf0ookyy.js}

@@ -269,7 +269,7 @@ function createFileDataPlaneHandler(opts) {
 		const baseHeaders = {
 			"content-type": contentTypeFor(absPath, opts.contentTypes),
 			"accept-ranges": "bytes",
-			"cache-control": "no-cache"
+			"cache-control": opts.cacheControl?.(rel) ?? "no-cache"
 		};
 		const range = parseRangeHeader(req.headers.range, size);
 		if (range) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.1.51",
+  "version": "1.1.53",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",
@@ -152,6 +152,18 @@
           }
         ]
       },
+      {
+        "id": "virtual-doorbell",
+        "category": "system",
+        "name": "Virtual Doorbell",
+        "description": "Wrapper over the `doorbell` cap — turns any binary-ish device (contact sensor, switch, event emitter, flood/gas/CO sensor) into a per-camera doorbell. Operator binds it per camera and picks the source device + trigger in the camera's settings.",
+        "entry": "./dist/builtins/doorbell/index.js",
+        "capabilities": [
+          {
+            "name": "doorbell"
+          }
+        ]
+      },
       {
         "id": "alert-center",
         "category": "system",