@camstack/system 1.1.57 → 1.1.59

package/dist/index.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-Bg795EQF.js");
+const require_dist = require("./dist-pMSHmQgR.js");
 const require_model_download_service = require("./model-download-service-hf0ookyy.js");
-const require_manifest_python_deps = require("./manifest-python-deps-eI3-3FeW.js");
+const require_manifest_python_deps = require("./manifest-python-deps-E9MNTyA6.js");
 const require_resource_monitor = require("./resource-monitor-DNNomR-i.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
@@ -93079,7 +93079,7 @@ var JobJournal = class {
 };
 //#endregion
 //#region src/kernel/lifecycle/staging-area.ts
-function safeSegment$1(name) {
+function safeSegment(name) {
 	return name.replace(/[^a-zA-Z0-9._-]/g, "_");
 }
 var StagingArea = class {
@@ -93090,7 +93090,7 @@ var StagingArea = class {
 		this.deps = deps;
 	}
 	async fetchAndStage(input) {
-		const destDir = node_path.join(this.stagingDir, input.jobId, safeSegment$1(input.name));
+		const destDir = node_path.join(this.stagingDir, input.jobId, safeSegment(input.name));
 		node_fs.rmSync(destDir, {
 			recursive: true,
 			force: true
@@ -93226,50 +93226,22 @@ var LifecycleJobEngine = class {
 		}
 	}
 	/**
-	* Run the framework task: stage lockstep → `staged` → requestFrameworkSwap.
-	* In production the process exits after requestFrameworkSwap and the reboot
-	* finalizes the job, so this returns the current durable job WITHOUT
-	* finalization. Returns null only if the framework deps are not wired (the
-	* task is marked `failed` and the caller finalizes the job).
-	*/
-	async runFrameworkTask(job, task) {
-		const { stageFramework, requestFrameworkSwap } = this.deps;
-		if (stageFramework === void 0 || requestFrameworkSwap === void 0) {
-			this.advance(job.jobId, task, "failed", {
-				error: "framework swap deps not wired",
-				finishedAtMs: this.deps.now()
-			});
-			return null;
-		}
-		try {
-			this.advance(job.jobId, task, "fetching", {
-				startedAtMs: this.deps.now(),
-				attempts: task.attempts + 1
-			});
-			const ac = new AbortController();
-			const timer = setTimeout(() => ac.abort(), this.deps.fetchTimeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS);
-			let packages;
-			try {
-				packages = await stageFramework(task, ac.signal);
-			} finally {
-				clearTimeout(timer);
-			}
-			const [firstPackage] = packages;
-			if (!firstPackage) throw new Error("stageFramework returned no packages");
-			this.advance(job.jobId, task, "staged", { stagedPath: firstPackage.stagedPath });
-			requestFrameworkSwap({
-				jobId: job.jobId,
-				taskId: task.taskId,
-				packages
-			});
-			return this.deps.journal.getJob(job.jobId) ?? job;
-		} catch (err) {
-			this.advance(job.jobId, task, "failed", {
-				error: err instanceof Error ? err.message : String(err),
-				finishedAtMs: this.deps.now()
-			});
-			return null;
-		}
+	* Mark a framework task `skipped`.
+	*
+	* Framework packages (`@camstack/system` + its lockstep companions) are NO
+	* LONGER updated through this engine. The legacy `/data/framework` per-package
+	* swap was removed in the single-copy framework collapse (2026-07-18) — the
+	* running framework is loaded from the active server-root single copy, and
+	* framework/cap updates now ship EXCLUSIVELY via `applyServerUpdate` (the
+	* node-root ServerUpdateService). Any framework task that still reaches this
+	* engine (e.g. an "Update all" bulk job that swept `@camstack/system`) is
+	* skipped, never applied — applying it would swap a dead dir.
+	*/
+	skipFrameworkTask(job, task) {
+		this.advance(job.jobId, task, "skipped", {
+			startedAtMs: task.startedAtMs ?? this.deps.now(),
+			finishedAtMs: this.deps.now()
+		});
 	}
 	/**
 	* Run the addon fetch phase with a bounded-concurrency worker pool. At most
@@ -93297,24 +93269,24 @@ var LifecycleJobEngine = class {
 	* §10 boot reconcile: re-drive every NON-TERMINAL addon task of a job that
 	* was interrupted mid-flight (e.g. a crash) from its on-disk checkpoint.
 	*
-	* Framework tasks are LEFT UNTOUCHED — they are owned by the F2
-	* `resumeFrameworkSwapJob` path (which marks `applied`→`done` on a healthy
-	* reboot). Terminal addon tasks (`done`/`failed`/`skipped`) are skipped.
+	* Framework tasks are NOT applied by this engine (single-copy collapse —
+	* framework updates ship via `applyServerUpdate`). Any stray non-terminal
+	* framework task is marked `skipped` so the interrupted job can finalize
+	* instead of hanging `running` forever. Terminal addon tasks
+	* (`done`/`failed`/`skipped`) are left as-is.
 	*
 	* Apply is idempotent (`applyAddonUpdate` backs up the live dir + restores on
 	* failure), so every non-terminal addon phase collapses to:
 	*   ensure staged (reuse a still-valid `stagedPath` or re-fetch) → apply → done;
 	*   on failure → `failed`.
-	*
-	* The job is finalized (`completed`/`partially-failed`/`failed` + staging
-	* cleanup) ONLY when ALL tasks — including any framework task — are terminal.
-	* If a framework task is still non-terminal the job is LEFT `running` (the
-	* reboot/F2 path finalizes it).
 	*/
 	async reconcileJob(job) {
 		const exists = this.deps.stagedPathExists ?? ((p) => node_fs.existsSync(p));
 		for (const task of job.tasks) {
-			if (task.target === "framework") continue;
+			if (task.target === "framework") {
+				if (!this.isTerminal(task.phase)) this.skipFrameworkTask(job, task);
+				continue;
+			}
 			if (this.isTerminal(task.phase)) continue;
 			await this.reconcileAddonTask(job, task, exists);
 		}
@@ -93336,9 +93308,10 @@ var LifecycleJobEngine = class {
 	}
 	/**
 	* Finalize a reconciled job: `completed` if all addon tasks succeeded,
-	* `failed` if all failed, `partially-failed` if mixed — but ONLY when every
-	* task (including framework) is terminal. If any task is still non-terminal
-	* (a framework task pending its reboot resume), leave the job `running`.
+	* `failed` if all failed, `partially-failed` if mixed. A skipped framework
+	* task counts as neither success nor failure. Defensive: if a task is still
+	* non-terminal (should not happen — reconcile drives every task terminal),
+	* leave the job `running` and do not clean staging.
 	*/
 	finalizeReconciledJob(jobId) {
 		const current = this.deps.journal.getJob(jobId);
@@ -93354,6 +93327,7 @@ var LifecycleJobEngine = class {
 	async runJob(job) {
 		const addonTasks = job.tasks.filter((t) => t.target !== "framework");
 		const frameworkTasks = job.tasks.filter((t) => t.target === "framework");
+		for (const task of frameworkTasks) this.skipFrameworkTask(job, task);
 		let failures = 0;
 		let successes = 0;
 		const fetchOutcomes = await this.fetchAddonsBounded(job, addonTasks);
@@ -93363,11 +93337,6 @@ var LifecycleJobEngine = class {
 			if (await this.applyAddonTask(job, outcome.task, outcome.stagedPath)) successes += 1;
 			else failures += 1;
 		}
-		for (const task of frameworkTasks) {
-			const result = await this.runFrameworkTask(job, task);
-			if (result !== null) return result;
-			failures += 1;
-		}
 		const state = failures === 0 ? "completed" : successes === 0 ? "failed" : "partially-failed";
 		const finalJob = this.deps.journal.setJobState(job.jobId, state);
 		this.deps.staging.cleanup(job.jobId);
@@ -93375,44 +93344,6 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-//#region src/kernel/lifecycle/framework-staging.ts
-var FRAMEWORK_LOCKSTEP = [
-	"@camstack/system",
-	"@camstack/types",
-	"@camstack/sdk",
-	"@camstack/shm-ring"
-];
-function safeSegment(name) {
-	return name.replace(/[^a-zA-Z0-9._-]/g, "_");
-}
-async function stageFrameworkLockstep(input) {
-	const stagingArea = new StagingArea(input.stagingDir, {
-		fetchTarball: input.fetchTarball,
-		extract: input.extract
-	});
-	const results = [];
-	const primary = FRAMEWORK_LOCKSTEP[0];
-	for (const pkg of FRAMEWORK_LOCKSTEP) {
-		const version = pkg === primary ? input.toVersion : await input.resolveVersion(pkg);
-		const { stagedPath } = await stagingArea.fetchAndStage({
-			jobId: input.jobId,
-			name: pkg,
-			version,
-			signal: input.signal
-		});
-		const backupPath = node_path.join(input.stagingDir, input.jobId, ".bak-fw", safeSegment(pkg));
-		const fromVersion = input.currentVersionOf(pkg);
-		results.push({
-			name: pkg,
-			stagedPath,
-			backupPath,
-			toVersion: version,
-			fromVersion
-		});
-	}
-	return results;
-}
-//#endregion
 exports.AGENT_CAP_FWD_ACTION = require_manifest_python_deps.AGENT_CAP_FWD_ACTION;
 exports.AGENT_CAP_FWD_SERVICE = require_manifest_python_deps.AGENT_CAP_FWD_SERVICE;
 exports.AGENT_READINESS_SERVICE_NAME = AGENT_READINESS_SERVICE_NAME;
@@ -93452,7 +93383,6 @@ exports.DeviceStore = require_builtins_sqlite_storage_index.DeviceStore$1;
 exports.EVENT_TOPIC_PREFIX = require_manifest_python_deps.EVENT_TOPIC_PREFIX;
 exports.EngineManagerResolver = EngineManagerResolver;
 exports.EventBus = EventBus;
-exports.FRAMEWORK_LOCKSTEP = FRAMEWORK_LOCKSTEP;
 exports.FeatureManager = FeatureManager;
 exports.FilesystemStorageAddon = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageAddon;
 exports.FilesystemStorageProvider = require_builtins_sqlite_storage_filesystem_storage_addon.FilesystemStorageProvider;
@@ -93690,7 +93620,6 @@ exports.scopesAllowDeviceCap = scopesAllowDeviceCap;
 exports.serializeTypedArrays = require_manifest_python_deps.serializeTypedArrays;
 exports.setHubConnected = require_manifest_python_deps.setHubConnected;
 exports.setNodeEventInterest = require_manifest_python_deps.setNodeEventInterest;
-exports.stageFrameworkLockstep = stageFrameworkLockstep;
 exports.stripCamstackDeps = stripCamstackDeps;
 exports.subscribePassthrough = require_manifest_python_deps.subscribePassthrough;
 exports.udsChildLogToWorkerEntry = require_manifest_python_deps.udsChildLogToWorkerEntry;

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import { A as isArrayOutputSchema, Ct as parseJsonObject, D as extractNestedAddonId, Dt as scopeKey, Et as resolveCapMount, F as lifecycleJobSchema, G as procedureAuthKey, H as objectInputDeclaresAddonId, M as isObjectInput, N as isVoidInput, P as kebabToCamel, R as looseSchema, Tt as readinessKey, _t as createEvent, at as DATAPLANE_SECRET_HEADER$1, bt as expandCapMethods, dt as ReadinessRegistry, ft as ReadinessTimeoutError, gt as asString$1, ht as asNumber, j as isCollectionArrayMethod, kt as EventCategory$1, mt as asJsonObject$1, o as METHOD_ACCESS_MAP, ot as DEVICE_SETTINGS_CONTRIBUTION_METHODS, p as addonSettingsCapability, rt as errMsg$1, s as RUNTIME_DEFAULTS, st as DEVICE_STATUS_METHOD, t as ALL_CAPABILITY_DEFINITIONS, vt as emitDownForOwnedCaps, wt as parseJsonUnknown$1 } from "./dist-JAF9YR1q.mjs";
+import { A as isArrayOutputSchema, Ct as parseJsonObject, D as extractNestedAddonId, Dt as scopeKey, Et as resolveCapMount, F as lifecycleJobSchema, G as procedureAuthKey, H as objectInputDeclaresAddonId, M as isObjectInput, N as isVoidInput, P as kebabToCamel, R as looseSchema, Tt as readinessKey, _t as createEvent, at as DATAPLANE_SECRET_HEADER$1, bt as expandCapMethods, dt as ReadinessRegistry, ft as ReadinessTimeoutError, gt as asString$1, ht as asNumber, j as isCollectionArrayMethod, kt as EventCategory$1, mt as asJsonObject$1, o as METHOD_ACCESS_MAP, ot as DEVICE_SETTINGS_CONTRIBUTION_METHODS, p as addonSettingsCapability, rt as errMsg$1, s as RUNTIME_DEFAULTS, st as DEVICE_STATUS_METHOD, t as ALL_CAPABILITY_DEFINITIONS, vt as emitDownForOwnedCaps, wt as parseJsonUnknown$1 } from "./dist-DNu-dV4C.mjs";
 import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-Cp9f4dk6.mjs";
-import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, bt as resolveAddonClass, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, xt as createAddonDataPlaneFacility, y as __resetCapUsageRegistryForTests, yt as runNpm, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-9wuRyL-k.mjs";
+import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, B as AGENT_CAP_FWD_SERVICE, C as buildLinkChain, D as HUB_CAP_FWD_ACTION, E as localProviderLink, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, N as udsChildLogToWorkerEntry, O as HUB_CAP_FWD_SERVICE, P as createUdsLogger, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerTransportLink, T as ipcParentLink, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as resolveHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as getCapUsageRegistry, bt as resolveAddonClass, c as setHubConnected, ct as capActionName, d as getMoleculerEventStats, dt as capServiceName, et as createBrokerDeviceManagerApi, f as registerEventBusService, ft as parseCapAction, g as createKernelHwAccel, gt as CapabilityHandle, h as AddonDepsManager, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, k as createHubCapForwardService, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as subscribePassthrough, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as setNodeEventInterest, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as getBrokerEventBus, ut as capBareAction, v as CapUsageRegistry, vt as installManifestNativeDeps, w as ipcChildLink, x as brokerCallForCap, xt as createAddonDataPlaneFacility, y as __resetCapUsageRegistryForTests, yt as runNpm, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-Di8m82Nl.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Le3l0qS2.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, t as SqliteSettingsBackend } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
@@ -93071,7 +93071,7 @@ var JobJournal = class {
 };
 //#endregion
 //#region src/kernel/lifecycle/staging-area.ts
-function safeSegment$1(name) {
+function safeSegment(name) {
 	return name.replace(/[^a-zA-Z0-9._-]/g, "_");
 }
 var StagingArea = class {
@@ -93082,7 +93082,7 @@ var StagingArea = class {
 		this.deps = deps;
 	}
 	async fetchAndStage(input) {
-		const destDir = path$39.join(this.stagingDir, input.jobId, safeSegment$1(input.name));
+		const destDir = path$39.join(this.stagingDir, input.jobId, safeSegment(input.name));
 		fs$17.rmSync(destDir, {
 			recursive: true,
 			force: true
@@ -93218,50 +93218,22 @@ var LifecycleJobEngine = class {
 		}
 	}
 	/**
-	* Run the framework task: stage lockstep → `staged` → requestFrameworkSwap.
-	* In production the process exits after requestFrameworkSwap and the reboot
-	* finalizes the job, so this returns the current durable job WITHOUT
-	* finalization. Returns null only if the framework deps are not wired (the
-	* task is marked `failed` and the caller finalizes the job).
-	*/
-	async runFrameworkTask(job, task) {
-		const { stageFramework, requestFrameworkSwap } = this.deps;
-		if (stageFramework === void 0 || requestFrameworkSwap === void 0) {
-			this.advance(job.jobId, task, "failed", {
-				error: "framework swap deps not wired",
-				finishedAtMs: this.deps.now()
-			});
-			return null;
-		}
-		try {
-			this.advance(job.jobId, task, "fetching", {
-				startedAtMs: this.deps.now(),
-				attempts: task.attempts + 1
-			});
-			const ac = new AbortController();
-			const timer = setTimeout(() => ac.abort(), this.deps.fetchTimeoutMs ?? DEFAULT_FETCH_TIMEOUT_MS);
-			let packages;
-			try {
-				packages = await stageFramework(task, ac.signal);
-			} finally {
-				clearTimeout(timer);
-			}
-			const [firstPackage] = packages;
-			if (!firstPackage) throw new Error("stageFramework returned no packages");
-			this.advance(job.jobId, task, "staged", { stagedPath: firstPackage.stagedPath });
-			requestFrameworkSwap({
-				jobId: job.jobId,
-				taskId: task.taskId,
-				packages
-			});
-			return this.deps.journal.getJob(job.jobId) ?? job;
-		} catch (err) {
-			this.advance(job.jobId, task, "failed", {
-				error: err instanceof Error ? err.message : String(err),
-				finishedAtMs: this.deps.now()
-			});
-			return null;
-		}
+	* Mark a framework task `skipped`.
+	*
+	* Framework packages (`@camstack/system` + its lockstep companions) are NO
+	* LONGER updated through this engine. The legacy `/data/framework` per-package
+	* swap was removed in the single-copy framework collapse (2026-07-18) — the
+	* running framework is loaded from the active server-root single copy, and
+	* framework/cap updates now ship EXCLUSIVELY via `applyServerUpdate` (the
+	* node-root ServerUpdateService). Any framework task that still reaches this
+	* engine (e.g. an "Update all" bulk job that swept `@camstack/system`) is
+	* skipped, never applied — applying it would swap a dead dir.
+	*/
+	skipFrameworkTask(job, task) {
+		this.advance(job.jobId, task, "skipped", {
+			startedAtMs: task.startedAtMs ?? this.deps.now(),
+			finishedAtMs: this.deps.now()
+		});
 	}
 	/**
 	* Run the addon fetch phase with a bounded-concurrency worker pool. At most
@@ -93289,24 +93261,24 @@ var LifecycleJobEngine = class {
 	* §10 boot reconcile: re-drive every NON-TERMINAL addon task of a job that
 	* was interrupted mid-flight (e.g. a crash) from its on-disk checkpoint.
 	*
-	* Framework tasks are LEFT UNTOUCHED — they are owned by the F2
-	* `resumeFrameworkSwapJob` path (which marks `applied`→`done` on a healthy
-	* reboot). Terminal addon tasks (`done`/`failed`/`skipped`) are skipped.
+	* Framework tasks are NOT applied by this engine (single-copy collapse —
+	* framework updates ship via `applyServerUpdate`). Any stray non-terminal
+	* framework task is marked `skipped` so the interrupted job can finalize
+	* instead of hanging `running` forever. Terminal addon tasks
+	* (`done`/`failed`/`skipped`) are left as-is.
 	*
 	* Apply is idempotent (`applyAddonUpdate` backs up the live dir + restores on
 	* failure), so every non-terminal addon phase collapses to:
 	*   ensure staged (reuse a still-valid `stagedPath` or re-fetch) → apply → done;
 	*   on failure → `failed`.
-	*
-	* The job is finalized (`completed`/`partially-failed`/`failed` + staging
-	* cleanup) ONLY when ALL tasks — including any framework task — are terminal.
-	* If a framework task is still non-terminal the job is LEFT `running` (the
-	* reboot/F2 path finalizes it).
 	*/
 	async reconcileJob(job) {
 		const exists = this.deps.stagedPathExists ?? ((p) => fs$17.existsSync(p));
 		for (const task of job.tasks) {
-			if (task.target === "framework") continue;
+			if (task.target === "framework") {
+				if (!this.isTerminal(task.phase)) this.skipFrameworkTask(job, task);
+				continue;
+			}
 			if (this.isTerminal(task.phase)) continue;
 			await this.reconcileAddonTask(job, task, exists);
 		}
@@ -93328,9 +93300,10 @@ var LifecycleJobEngine = class {
 	}
 	/**
 	* Finalize a reconciled job: `completed` if all addon tasks succeeded,
-	* `failed` if all failed, `partially-failed` if mixed — but ONLY when every
-	* task (including framework) is terminal. If any task is still non-terminal
-	* (a framework task pending its reboot resume), leave the job `running`.
+	* `failed` if all failed, `partially-failed` if mixed. A skipped framework
+	* task counts as neither success nor failure. Defensive: if a task is still
+	* non-terminal (should not happen — reconcile drives every task terminal),
+	* leave the job `running` and do not clean staging.
 	*/
 	finalizeReconciledJob(jobId) {
 		const current = this.deps.journal.getJob(jobId);
@@ -93346,6 +93319,7 @@ var LifecycleJobEngine = class {
 	async runJob(job) {
 		const addonTasks = job.tasks.filter((t) => t.target !== "framework");
 		const frameworkTasks = job.tasks.filter((t) => t.target === "framework");
+		for (const task of frameworkTasks) this.skipFrameworkTask(job, task);
 		let failures = 0;
 		let successes = 0;
 		const fetchOutcomes = await this.fetchAddonsBounded(job, addonTasks);
@@ -93355,11 +93329,6 @@ var LifecycleJobEngine = class {
 			if (await this.applyAddonTask(job, outcome.task, outcome.stagedPath)) successes += 1;
 			else failures += 1;
 		}
-		for (const task of frameworkTasks) {
-			const result = await this.runFrameworkTask(job, task);
-			if (result !== null) return result;
-			failures += 1;
-		}
 		const state = failures === 0 ? "completed" : successes === 0 ? "failed" : "partially-failed";
 		const finalJob = this.deps.journal.setJobState(job.jobId, state);
 		this.deps.staging.cleanup(job.jobId);
@@ -93367,42 +93336,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-//#region src/kernel/lifecycle/framework-staging.ts
-var FRAMEWORK_LOCKSTEP = [
-	"@camstack/system",
-	"@camstack/types",
-	"@camstack/sdk",
-	"@camstack/shm-ring"
-];
-function safeSegment(name) {
-	return name.replace(/[^a-zA-Z0-9._-]/g, "_");
-}
-async function stageFrameworkLockstep(input) {
-	const stagingArea = new StagingArea(input.stagingDir, {
-		fetchTarball: input.fetchTarball,
-		extract: input.extract
-	});
-	const results = [];
-	const primary = FRAMEWORK_LOCKSTEP[0];
-	for (const pkg of FRAMEWORK_LOCKSTEP) {
-		const version = pkg === primary ? input.toVersion : await input.resolveVersion(pkg);
-		const { stagedPath } = await stagingArea.fetchAndStage({
-			jobId: input.jobId,
-			name: pkg,
-			version,
-			signal: input.signal
-		});
-		const backupPath = path$39.join(input.stagingDir, input.jobId, ".bak-fw", safeSegment(pkg));
-		const fromVersion = input.currentVersionOf(pkg);
-		results.push({
-			name: pkg,
-			stagedPath,
-			backupPath,
-			toVersion: version,
-			fromVersion
-		});
-	}
-	return results;
-}
-//#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FRAMEWORK_LOCKSTEP, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, setNodeEventInterest, stageFrameworkLockstep, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, setNodeEventInterest, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };

package/dist/kernel/index.d.ts

@@ -77,7 +77,5 @@ export type { ReadinessHandler, ReadinessTransition, AwaitReadyOptions, Readines
 export { JobJournal } from './lifecycle/job-journal.js';
 export { StagingArea } from './lifecycle/staging-area.js';
 export { LifecycleJobEngine } from './lifecycle/lifecycle-job-engine.js';
-export type { ApplyAddonUpdateFn, EmitFn, StageFrameworkFn, RequestFrameworkSwapFn, } from './lifecycle/lifecycle-job-engine.js';
+export type { ApplyAddonUpdateFn, EmitFn } from './lifecycle/lifecycle-job-engine.js';
 export type { TarballFetcher, ExtractFn } from './lifecycle/staging-area.js';
-export { stageFrameworkLockstep, FRAMEWORK_LOCKSTEP } from './lifecycle/framework-staging.js';
-export type { StageFrameworkInput } from './lifecycle/framework-staging.js';

package/dist/kernel/lifecycle/lifecycle-job-engine.d.ts

@@ -1,18 +1,12 @@
 import { JobJournal } from './job-journal.js';
 import { StagingArea } from './staging-area.js';
-import { LifecycleJob, LifecycleTask, TaskLogEntry, FrameworkSwapPackage } from '@camstack/types';
+import { LifecycleJob, TaskLogEntry } from '@camstack/types';
 export type ApplyAddonUpdateFn = (input: {
     name: string;
     version: string;
     stagedPath: string;
 }) => Promise<void>;
 export type EmitFn = (kind: 'progress' | 'log', job: LifecycleJob, entry?: TaskLogEntry) => void;
-export type StageFrameworkFn = (task: LifecycleTask, signal: AbortSignal) => Promise<FrameworkSwapPackage[]>;
-export type RequestFrameworkSwapFn = (input: {
-    jobId: string;
-    taskId: string;
-    packages: FrameworkSwapPackage[];
-}) => void;
 interface Deps {
     readonly journal: JobJournal;
     readonly staging: StagingArea;
@@ -21,8 +15,6 @@ interface Deps {
     readonly now: () => number;
     readonly fetchTimeoutMs?: number;
     readonly fetchConcurrency?: number;
-    readonly stageFramework?: StageFrameworkFn;
-    readonly requestFrameworkSwap?: RequestFrameworkSwapFn;
     /**
      * Predicate used by `reconcileJob` to decide whether a task's recorded
      * `stagedPath` directory still exists on disk (so apply can reuse it instead
@@ -48,13 +40,18 @@ export declare class LifecycleJobEngine {
      */
     private applyAddonTask;
     /**
-     * Run the framework task: stage lockstep → `staged` → requestFrameworkSwap.
-     * In production the process exits after requestFrameworkSwap and the reboot
-     * finalizes the job, so this returns the current durable job WITHOUT
-     * finalization. Returns null only if the framework deps are not wired (the
-     * task is marked `failed` and the caller finalizes the job).
+     * Mark a framework task `skipped`.
+     *
+     * Framework packages (`@camstack/system` + its lockstep companions) are NO
+     * LONGER updated through this engine. The legacy `/data/framework` per-package
+     * swap was removed in the single-copy framework collapse (2026-07-18) — the
+     * running framework is loaded from the active server-root single copy, and
+     * framework/cap updates now ship EXCLUSIVELY via `applyServerUpdate` (the
+     * node-root ServerUpdateService). Any framework task that still reaches this
+     * engine (e.g. an "Update all" bulk job that swept `@camstack/system`) is
+     * skipped, never applied — applying it would swap a dead dir.
      */
-    private runFrameworkTask;
+    private skipFrameworkTask;
     /**
      * Run the addon fetch phase with a bounded-concurrency worker pool. At most
      * `fetchConcurrency` fetches are in flight at once; completion order may vary
@@ -65,19 +62,16 @@ export declare class LifecycleJobEngine {
      * §10 boot reconcile: re-drive every NON-TERMINAL addon task of a job that
      * was interrupted mid-flight (e.g. a crash) from its on-disk checkpoint.
      *
-     * Framework tasks are LEFT UNTOUCHED — they are owned by the F2
-     * `resumeFrameworkSwapJob` path (which marks `applied`→`done` on a healthy
-     * reboot). Terminal addon tasks (`done`/`failed`/`skipped`) are skipped.
+     * Framework tasks are NOT applied by this engine (single-copy collapse —
+     * framework updates ship via `applyServerUpdate`). Any stray non-terminal
+     * framework task is marked `skipped` so the interrupted job can finalize
+     * instead of hanging `running` forever. Terminal addon tasks
+     * (`done`/`failed`/`skipped`) are left as-is.
      *
      * Apply is idempotent (`applyAddonUpdate` backs up the live dir + restores on
      * failure), so every non-terminal addon phase collapses to:
      *   ensure staged (reuse a still-valid `stagedPath` or re-fetch) → apply → done;
      *   on failure → `failed`.
-     *
-     * The job is finalized (`completed`/`partially-failed`/`failed` + staging
-     * cleanup) ONLY when ALL tasks — including any framework task — are terminal.
-     * If a framework task is still non-terminal the job is LEFT `running` (the
-     * reboot/F2 path finalizes it).
      */
     reconcileJob(job: LifecycleJob): Promise<LifecycleJob>;
     private isTerminal;
@@ -88,9 +82,10 @@ export declare class LifecycleJobEngine {
     private reconcileAddonTask;
     /**
      * Finalize a reconciled job: `completed` if all addon tasks succeeded,
-     * `failed` if all failed, `partially-failed` if mixed — but ONLY when every
-     * task (including framework) is terminal. If any task is still non-terminal
-     * (a framework task pending its reboot resume), leave the job `running`.
+     * `failed` if all failed, `partially-failed` if mixed. A skipped framework
+     * task counts as neither success nor failure. Defensive: if a task is still
+     * non-terminal (should not happen — reconcile drives every task terminal),
+     * leave the job `running` and do not clean staging.
      */
     private finalizeReconciledJob;
     runJob(job: LifecycleJob): Promise<LifecycleJob>;

package/dist/{manifest-python-deps-9wuRyL-k.mjs → manifest-python-deps-Di8m82Nl.mjs}

@@ -1,4 +1,4 @@
-import { K as readNodePin } from "./dist-JAF9YR1q.mjs";
+import { K as readNodePin } from "./dist-DNu-dV4C.mjs";
 import { ensureBinary, ensureFfmpeg, ensurePython, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { createServer } from "node:http";
 import * as fs from "node:fs";

package/dist/{manifest-python-deps-eI3-3FeW.js → manifest-python-deps-E9MNTyA6.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-Bg795EQF.js");
+const require_dist = require("./dist-pMSHmQgR.js");
 let _camstack_types_node = require("@camstack/types/node");
 let node_http = require("node:http");
 let node_fs = require("node:fs");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.1.57",
+  "version": "1.1.59",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",

package/dist/kernel/lifecycle/framework-staging.d.ts

@@ -1,15 +0,0 @@
-import { TarballFetcher, ExtractFn } from './staging-area.js';
-import { FrameworkSwapPackage } from '@camstack/types';
-export declare const FRAMEWORK_LOCKSTEP: readonly ["@camstack/system", "@camstack/types", "@camstack/sdk", "@camstack/shm-ring"];
-export interface StageFrameworkInput {
-    readonly jobId: string;
-    readonly toVersion: string;
-    readonly frameworkDir: string;
-    readonly stagingDir: string;
-    readonly fetchTarball: TarballFetcher;
-    readonly extract: ExtractFn;
-    readonly resolveVersion: (name: string) => Promise<string>;
-    readonly currentVersionOf: (name: string) => string | null;
-    readonly signal: AbortSignal;
-}
-export declare function stageFrameworkLockstep(input: StageFrameworkInput): Promise<FrameworkSwapPackage[]>;