@camstack/system 1.2.140 → 1.2.141

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-D5Jhh8Vk.js");
+const require_dist = require("./dist-BNhvXrQk.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -26,7 +26,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_file_data_plane = require("./file-data-plane-DO8KbxCe.js");
 const require_tls$1 = require("./tls-u8QCJCFE.js");
-const require_manifest_python_deps = require("./manifest-python-deps-Bu8H1_rg.js");
+const require_manifest_python_deps = require("./manifest-python-deps-DBQarwp9.js");
 const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let zod = require("zod");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { At as asJsonObject$1, B as extractNestedAddonId, Bt as parseJsonObject, Ct as DEVICE_STATUS_METHOD, Dt as ReadinessRegistry, H as isArrayOutputSchema, Ht as readinessKey, It as expandCapMethods, J as lifecycleJobSchema, K as isVoidInput, Kt as EventCategory$1, Mt as asString$1, Nt as createEvent, Ot as ReadinessTimeoutError, Pt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_SETTINGS_CONTRIBUTION_METHODS, U as isCollectionArrayMethod, Ut as resolveCapMount, Vt as parseJsonUnknown$1, W as isObjectInput, Wt as scopeKey, Z as logLevelAtMost, at as resolveMethodAuth, ct as scopesAllowDeviceCap, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asNumber, q as kebabToCamel, st as scopesAllowAddon, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, xt as DATAPLANE_SECRET_HEADER$1, y as addonSettingsCapability, yt as errMsg$1 } from "./dist-Clses4Bs.mjs";
+import { At as asJsonObject$1, B as extractNestedAddonId, Bt as parseJsonObject, Ct as DEVICE_STATUS_METHOD, Dt as ReadinessRegistry, H as isArrayOutputSchema, Ht as readinessKey, It as expandCapMethods, J as lifecycleJobSchema, K as isVoidInput, Kt as EventCategory$1, Mt as asString$1, Nt as createEvent, Ot as ReadinessTimeoutError, Pt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_SETTINGS_CONTRIBUTION_METHODS, U as isCollectionArrayMethod, Ut as resolveCapMount, Vt as parseJsonUnknown$1, W as isObjectInput, Wt as scopeKey, Z as logLevelAtMost, at as resolveMethodAuth, ct as scopesAllowDeviceCap, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asNumber, q as kebabToCamel, st as scopesAllowAddon, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, xt as DATAPLANE_SECRET_HEADER$1, y as addonSettingsCapability, yt as errMsg$1 } from "./dist-6mn3LQvB.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -25,7 +25,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { a as parseTokenizedUrl, c as collectModelFiles, d as downloadModel, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, o as resolveFilePath, p as fetchJson, r as createAuthenticatedFileServer, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-BhKdxJgf.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-CQhPGSJm.mjs";
-import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, At as createV8Reclaimer, B as AGENT_CAP_FWD_SERVICE, C as brokerTransportLink, Ct as createAddonDataPlaneFacility, D as HUB_CAP_FWD_ACTION, Dt as HEAP_WATCH_WARN_RATIO, E as localProviderLink, Et as HEAP_WATCH_INTERVAL_MS, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, Mt as startHeapWatch, N as udsChildLogToWorkerEntry, Nt as startRunnerHeapWatch, O as HUB_CAP_FWD_SERVICE, Ot as RUNNER_HEAP_WATCH_INTERVAL_MS, P as createUdsLogger, Pt as strandedMb, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerCallForCap, St as runNpm, T as ipcParentLink, Tt as HEAP_RECLAIM_TRIGGER_MB, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as createKernelHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as __resetCapUsageRegistryForTests, bt as resolveAddonClass, c as setHubConnected, ct as capActionName, d as getBrokerEventBus, dt as capServiceName, et as createBrokerDeviceManagerApi, f as getMoleculerEventStats, ft as parseCapAction, g as AddonDepsManager, gt as CapabilityHandle, h as subscribePassthrough, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, jt as shouldReclaim, k as createHubCapForwardService, kt as buildHeapSample, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as setNodeEventInterest, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as registerEventBusService, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as clusterEventTopic, ut as capBareAction, v as resolveHwAccel, vt as copyBundledNativeModules, w as buildLinkChain, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as getCapUsageRegistry, xt as resolveNpmInvocation, y as CapUsageRegistry, yt as installManifestNativeDeps, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-Dxifi-o0.mjs";
+import { $ as buildUdsNativeCapProxy, A as createParentUnownedCallHandler, At as createV8Reclaimer, B as AGENT_CAP_FWD_SERVICE, C as brokerTransportLink, Ct as createAddonDataPlaneFacility, D as HUB_CAP_FWD_ACTION, Dt as HEAP_WATCH_WARN_RATIO, E as localProviderLink, Et as HEAP_WATCH_INTERVAL_MS, F as createUdsLoggerWithControl, G as createLocalTransport, H as CapRouteError, I as LocalChildClient, J as SocketChannel, K as UdsLocalTransportClient, L as LocalChildRegistry, M as createUdsEventBus, Mt as startHeapWatch, N as udsChildLogToWorkerEntry, Nt as startRunnerHeapWatch, O as HUB_CAP_FWD_SERVICE, Ot as RUNNER_HEAP_WATCH_INTERVAL_MS, P as createUdsLogger, Pt as strandedMb, Q as buildNativeCapProxy, R as UDS_NO_ROUTE_PREFIX, S as brokerCallForCap, St as runNpm, T as ipcParentLink, Tt as HEAP_RECLAIM_TRIGGER_MB, U as classifyCapRoute, V as CapRouteResolver, W as callWithServiceDiscovery, X as FrameDecoder, Y as localEndpointPath, Z as encodeFrame, _ as createKernelHwAccel, _t as CapabilityUnavailableError, a as getWorkerDeviceRegistry, at as createAddonService, b as __resetCapUsageRegistryForTests, bt as resolveAddonClass, c as setHubConnected, ct as capActionName, d as getBrokerEventBus, dt as capServiceName, et as createBrokerDeviceManagerApi, f as getMoleculerEventStats, ft as parseCapAction, g as AddonDepsManager, gt as CapabilityHandle, h as subscribePassthrough, ht as DeviceRegistry, i as createUdsAddonContext, j as createUdsEventBridge, jt as shouldReclaim, k as createHubCapForwardService, kt as buildHeapSample, l as EVENT_TOPIC_PREFIX, lt as capActionSuffix, m as setNodeEventInterest, mt as serializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as validateProviderRegistrations, p as registerEventBusService, pt as deserializeTypedArrays, q as UdsLocalTransportServer, r as createAddonContext, rt as mountNativeCapService, s as getOrInitReadinessRegistryForClient, st as NATIVE_PROVIDER_SERVICE_INFIX, t as installManifestPythonDeps, u as clusterEventTopic, ut as capBareAction, v as resolveHwAccel, vt as copyBundledNativeModules, w as buildLinkChain, wt as HEAP_RECLAIM_MIN_INTERVAL_MS, x as getCapUsageRegistry, xt as resolveNpmInvocation, y as CapUsageRegistry, yt as installManifestNativeDeps, z as AGENT_CAP_FWD_ACTION } from "./manifest-python-deps-D3zYlMEa.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { z } from "zod";

package/dist/kernel/transport/cap-route-resolver.d.ts

@@ -193,8 +193,18 @@ export declare class CapRouteResolver {
      *   `hub-local-uds` caller that already knows the addonId (`buildCapCallFn`)
      *   talks to `LocalChildRegistry.callCapOnChild` directly rather than through
      *   `dispatch`.
+     * @param callerAddonId Optional out-of-band CALLER-identity hint — the
+     *   addon that ORIGINATED the call, distinct from `addonId` above (which
+     *   names the resolved PROVIDER, not the caller). Set by
+     *   `onUnownedCall` from `CapCallInput.callerAddonId`
+     *   (`LocalChildRegistry` stamped it off the registered `childId`). Only
+     *   the `hub-in-process` branch consumes it — merged into `args` so a
+     *   diagnostic tool deep in that provider (e.g. device-manager's
+     *   fleet-read census) can read it without every provider method changing
+     *   signature, the same "extra field the provider destructures or
+     *   ignores" convention `nodeId` already uses on this path.
      */
-    dispatch(route: CapRoute, method: string, args: unknown, addonId?: string): Promise<unknown>;
+    dispatch(route: CapRoute, method: string, args: unknown, addonId?: string, callerAddonId?: string): Promise<unknown>;
     /**
      * Inner dispatch: may throw CapRouteError (validation failures) or arbitrary
      * transport errors. The outer `dispatch` wraps non-CapRouteErrors.

package/dist/kernel/transport/child-cap-protocol.d.ts

@@ -136,6 +136,20 @@ export interface CapCallMessage {
      * the child dispatch falls back to its sole provider for the cap.
      */
     readonly addonId?: string;
+    /**
+     * Out-of-band CALLER-identity hint — the addon that ORIGINATED this call,
+     * as distinct from {@link addonId} (which names the resolved PROVIDER).
+     * Set ONLY by `LocalChildRegistry` when it turns a registered child's
+     * `cap-call-out` into a `CapCallInput` for `onUnownedCall`: the parent
+     * already knows which `childId` sent the message (it owns the UDS
+     * connection the frame arrived on), and stamps it here rather than
+     * trusting anything the child claims in its `args`. Absent for a call that
+     * did not arrive over the cap channel (hub-in-process, HTTP/tRPC) — those
+     * callers are attributed by other means (see
+     * `fleet-read-census.ts#siteOf`). A provider that does not care about its
+     * caller simply never reads it.
+     */
+    readonly callerAddonId?: string;
     /**
      * Native-only routing hint — see {@link CapCallOutMessage.native}. Carried
      * here because `CapCallInput` (the type every parent-side router takes) is

package/dist/{manifest-python-deps-Dxifi-o0.mjs → manifest-python-deps-D3zYlMEa.mjs}

@@ -4735,6 +4735,24 @@ function extractNodeId(args) {
 	const raw = Reflect.get(args, "nodeId");
 	return typeof raw === "string" && raw.length > 0 ? raw : void 0;
 }
+/**
+* Merge `callerAddonId` into `args` as an extra field — the SAME "provider
+* destructures what it needs and ignores the rest" convention
+* {@link extractNodeId} already relies on for the inline `nodeId` pin.
+* `undefined` (the overwhelmingly common case: no caller hint, or the census
+* consuming it is disarmed) returns `args` unchanged — no allocation. A
+* non-object `args` (or `null`/array) is returned unchanged too: there is
+* nowhere to attach an extra key without changing the payload's shape, and a
+* provider taking a bare value never reads `callerAddonId` off it anyway.
+*/
+function withCallerAddonId(args, callerAddonId) {
+	if (callerAddonId === void 0) return args;
+	if (args === null || typeof args !== "object" || Array.isArray(args)) return args;
+	return {
+		...args,
+		callerAddonId
+	};
+}
 var CapRouteResolver = class {
 	hubNodeId;
 	broker;
@@ -4802,10 +4820,20 @@ var CapRouteResolver = class {
 	*   `hub-local-uds` caller that already knows the addonId (`buildCapCallFn`)
 	*   talks to `LocalChildRegistry.callCapOnChild` directly rather than through
 	*   `dispatch`.
+	* @param callerAddonId Optional out-of-band CALLER-identity hint — the
+	*   addon that ORIGINATED the call, distinct from `addonId` above (which
+	*   names the resolved PROVIDER, not the caller). Set by
+	*   `onUnownedCall` from `CapCallInput.callerAddonId`
+	*   (`LocalChildRegistry` stamped it off the registered `childId`). Only
+	*   the `hub-in-process` branch consumes it — merged into `args` so a
+	*   diagnostic tool deep in that provider (e.g. device-manager's
+	*   fleet-read census) can read it without every provider method changing
+	*   signature, the same "extra field the provider destructures or
+	*   ignores" convention `nodeId` already uses on this path.
 	*/
-	async dispatch(route, method, args, addonId) {
+	async dispatch(route, method, args, addonId, callerAddonId) {
 		try {
-			return await this.dispatchInner(route, method, args, addonId);
+			return await this.dispatchInner(route, method, args, addonId, callerAddonId);
 		} catch (err) {
 			if (err instanceof CapRouteError) throw err;
 			const nodeId = this.routeNodeId(route);
@@ -4824,9 +4852,9 @@ var CapRouteResolver = class {
 	* Inner dispatch: may throw CapRouteError (validation failures) or arbitrary
 	* transport errors. The outer `dispatch` wraps non-CapRouteErrors.
 	*/
-	async dispatchInner(route, method, args, addonId) {
+	async dispatchInner(route, method, args, addonId, callerAddonId) {
 		switch (route.kind) {
-			case "hub-in-process": return route.ref.invoke(method, args);
+			case "hub-in-process": return route.ref.invoke(method, withCallerAddonId(args, callerAddonId));
 			case "hub-local-uds": {
 				const registry = this.hubLocalRegistry;
 				if (registry === null) throw new CapRouteError(route.capName, method, {
@@ -5368,7 +5396,8 @@ var LocalChildRegistry = class {
 					args: out.args,
 					...out.deviceId !== void 0 ? { deviceId: out.deviceId } : {},
 					...out.nodeId !== void 0 ? { nodeId: out.nodeId } : {},
-					...out.native === true ? { native: true } : {}
+					...out.native === true ? { native: true } : {},
+					...childId !== null ? { callerAddonId: childId } : {}
 				};
 				const pinnedNodeId = out.nodeId ?? extractNodeId(out.args);
 				const pinTargetsThisNode = pinnedNodeId !== void 0 && this.ownNodeId !== void 0 && pinnedNodeId === this.ownNodeId;
@@ -5977,7 +6006,7 @@ function createParentUnownedCallHandler(deps) {
 				...nodeId !== void 0 ? { nodeId } : {},
 				...deviceId !== void 0 ? { deviceId } : {}
 			});
-			return await resolver.dispatch(route, input.method, input.args);
+			return input.callerAddonId !== void 0 ? await resolver.dispatch(route, input.method, input.args, void 0, input.callerAddonId) : await resolver.dispatch(route, input.method, input.args);
 		} catch (err) {
 			if (!(err instanceof CapRouteError) || err.reason !== "no-provider") throw err;
 		}

package/dist/{manifest-python-deps-Bu8H1_rg.js → manifest-python-deps-DBQarwp9.js}

@@ -4739,6 +4739,24 @@ function extractNodeId(args) {
 	const raw = Reflect.get(args, "nodeId");
 	return typeof raw === "string" && raw.length > 0 ? raw : void 0;
 }
+/**
+* Merge `callerAddonId` into `args` as an extra field — the SAME "provider
+* destructures what it needs and ignores the rest" convention
+* {@link extractNodeId} already relies on for the inline `nodeId` pin.
+* `undefined` (the overwhelmingly common case: no caller hint, or the census
+* consuming it is disarmed) returns `args` unchanged — no allocation. A
+* non-object `args` (or `null`/array) is returned unchanged too: there is
+* nowhere to attach an extra key without changing the payload's shape, and a
+* provider taking a bare value never reads `callerAddonId` off it anyway.
+*/
+function withCallerAddonId(args, callerAddonId) {
+	if (callerAddonId === void 0) return args;
+	if (args === null || typeof args !== "object" || Array.isArray(args)) return args;
+	return {
+		...args,
+		callerAddonId
+	};
+}
 var CapRouteResolver = class {
 	hubNodeId;
 	broker;
@@ -4806,10 +4824,20 @@ var CapRouteResolver = class {
 	*   `hub-local-uds` caller that already knows the addonId (`buildCapCallFn`)
 	*   talks to `LocalChildRegistry.callCapOnChild` directly rather than through
 	*   `dispatch`.
+	* @param callerAddonId Optional out-of-band CALLER-identity hint — the
+	*   addon that ORIGINATED the call, distinct from `addonId` above (which
+	*   names the resolved PROVIDER, not the caller). Set by
+	*   `onUnownedCall` from `CapCallInput.callerAddonId`
+	*   (`LocalChildRegistry` stamped it off the registered `childId`). Only
+	*   the `hub-in-process` branch consumes it — merged into `args` so a
+	*   diagnostic tool deep in that provider (e.g. device-manager's
+	*   fleet-read census) can read it without every provider method changing
+	*   signature, the same "extra field the provider destructures or
+	*   ignores" convention `nodeId` already uses on this path.
 	*/
-	async dispatch(route, method, args, addonId) {
+	async dispatch(route, method, args, addonId, callerAddonId) {
 		try {
-			return await this.dispatchInner(route, method, args, addonId);
+			return await this.dispatchInner(route, method, args, addonId, callerAddonId);
 		} catch (err) {
 			if (err instanceof CapRouteError) throw err;
 			const nodeId = this.routeNodeId(route);
@@ -4828,9 +4856,9 @@ var CapRouteResolver = class {
 	* Inner dispatch: may throw CapRouteError (validation failures) or arbitrary
 	* transport errors. The outer `dispatch` wraps non-CapRouteErrors.
 	*/
-	async dispatchInner(route, method, args, addonId) {
+	async dispatchInner(route, method, args, addonId, callerAddonId) {
 		switch (route.kind) {
-			case "hub-in-process": return route.ref.invoke(method, args);
+			case "hub-in-process": return route.ref.invoke(method, withCallerAddonId(args, callerAddonId));
 			case "hub-local-uds": {
 				const registry = this.hubLocalRegistry;
 				if (registry === null) throw new CapRouteError(route.capName, method, {
@@ -5372,7 +5400,8 @@ var LocalChildRegistry = class {
 					args: out.args,
 					...out.deviceId !== void 0 ? { deviceId: out.deviceId } : {},
 					...out.nodeId !== void 0 ? { nodeId: out.nodeId } : {},
-					...out.native === true ? { native: true } : {}
+					...out.native === true ? { native: true } : {},
+					...childId !== null ? { callerAddonId: childId } : {}
 				};
 				const pinnedNodeId = out.nodeId ?? extractNodeId(out.args);
 				const pinTargetsThisNode = pinnedNodeId !== void 0 && this.ownNodeId !== void 0 && pinnedNodeId === this.ownNodeId;
@@ -5981,7 +6010,7 @@ function createParentUnownedCallHandler(deps) {
 				...nodeId !== void 0 ? { nodeId } : {},
 				...deviceId !== void 0 ? { deviceId } : {}
 			});
-			return await resolver.dispatch(route, input.method, input.args);
+			return input.callerAddonId !== void 0 ? await resolver.dispatch(route, input.method, input.args, void 0, input.callerAddonId) : await resolver.dispatch(route, input.method, input.args);
 		} catch (err) {
 			if (!(err instanceof CapRouteError) || err.reason !== "no-provider") throw err;
 		}

package/dist/{retired-settings-keys-Dflres-F.js → retired-settings-keys-DVgdWTd7.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D5Jhh8Vk.js");
+const require_dist = require("./dist-BNhvXrQk.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-Cr8N6C6X.mjs → retired-settings-keys-SYwVv_Ym.mjs}

@@ -1,4 +1,4 @@
-import { At as asJsonObject } from "./dist-Clses4Bs.mjs";
+import { At as asJsonObject } from "./dist-6mn3LQvB.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.140",
+  "version": "1.2.141",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",