@camstack/system 1.2.156 → 1.2.159

package/dist/{manifest-python-deps-CD14Pv0-.mjs → manifest-system-deps-tZZYG3RR.mjs}

@@ -1,4 +1,4 @@
-import "./dist-LvKus-mT.mjs";
+import "./dist-DLh4_rn3.mjs";
 import * as crypto$1 from "node:crypto";
 import { randomBytes, randomUUID } from "node:crypto";
 import { ensureBinary, ensureFfmpeg, ensurePython, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
@@ -1603,7 +1603,7 @@ function createAddonDataPlaneFacility(args) {
 * Failures THROW with an actionable message — a caller must never proceed as
 * if dependencies were installed when they were not.
 */
-var execFileAsync$1 = promisify(execFile);
+var execFileAsync$2 = promisify(execFile);
 var DEFAULT_REGISTRY = "https://registry.npmjs.org";
 /** Where the bootstrap lands inside `cacheDir` (npm tgz carries a `package/` prefix). */
 function bootstrappedCliPath(cacheDir) {
@@ -1611,7 +1611,7 @@ function bootstrappedCliPath(cacheDir) {
 }
 async function defaultProbeSystemNpm() {
 	try {
-		await execFileAsync$1("npm", ["--version"], { timeout: 15e3 });
+		await execFileAsync$2("npm", ["--version"], { timeout: 15e3 });
 		return true;
 	} catch {
 		return false;
@@ -1629,7 +1629,7 @@ async function defaultDownloadTarball(url, destTgz) {
 	await fs.promises.writeFile(destTgz, bytes);
 }
 async function defaultExtractTarball(tgzPath, destDir) {
-	await execFileAsync$1("tar", [
+	await execFileAsync$2("tar", [
 		"-xzf",
 		tgzPath,
 		"-C",
@@ -1668,7 +1668,7 @@ async function runNpm(args, options) {
 		registry: options.registry,
 		logger: options.logger
 	});
-	return execFileAsync$1(invocation.command, [...invocation.argsPrefix, ...args], {
+	return execFileAsync$2(invocation.command, [...invocation.argsPrefix, ...args], {
 		...options.cwd !== void 0 ? { cwd: options.cwd } : {},
 		timeout: options.timeout ?? 3e5
 	});
@@ -1748,7 +1748,7 @@ function resolveAddonClass(mod) {
 }
 //#endregion
 //#region src/kernel/deps/manifest-native-deps.ts
-var execFileAsync = promisify(execFile);
+var execFileAsync$1 = promisify(execFile);
 /**
 * Fallback bootstrap-cache location when the caller doesn't thread one
 * through (the forked addon-runner's spawn-time install). tmpdir survives the
@@ -2057,7 +2057,7 @@ async function rebuildNativeDeps(addonDir, packageNames, logger, npmCacheDir, re
 				return;
 			}
 			logger.warn("@electron/rebuild not available — falling back to npx", { meta: { addonDir } });
-			await execFileAsync("npx", [
+			await execFileAsync$1("npx", [
 				"--yes",
 				"electron-rebuild",
 				"-m",
@@ -9500,4 +9500,193 @@ async function installManifestPythonDeps(declaration, addonDir, deps, logger) {
 	await deps.installPythonRequirements(reqAbs);
 }
 //#endregion
-export { buildNativeCapProxy as $, RUNNER_HEAP_SNAPSHOT_ENV as $t, createParentUnownedCallHandler as A, HUB_MAIN_HEAP_WATCH_LABEL as At, AGENT_CAP_FWD_SERVICE as B, createLoopDelayMeter as Bt, brokerTransportLink as C, runNpm as Ct, HUB_CAP_FWD_ACTION as D, HEAP_RECLAIM_TRIGGER_MB as Dt, localProviderLink as E, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS as Et, createUdsLoggerWithControl as F, RUNNER_HEAP_WATCH_INTERVAL_MS as Ft, readMoleculerFanoutMode as G, parseRssBudgetMb as Gt, CapRouteError as H, describeRss as Ht, LocalChildClient as I, RUNNER_RSS_BUDGET_ENV as It, UdsLocalTransportServer as J, startHeapWatch as Jt, createLocalTransport as K, reclaimIntervalMs as Kt, LocalChildRegistry as L, ZERO_LOOP_DELAY as Lt, createUdsEventBus as M, HUB_RSS_BUDGET_ENV as Mt, udsChildLogToWorkerEntry as N, RSS_BUDGET_REANNOUNCE_MIN_MS as Nt, HUB_CAP_FWD_SERVICE as O, HEAP_WATCH_INTERVAL_MS as Ot, createUdsLogger as P, RSS_BUDGET_RELEASE_RATIO as Pt, encodeFrame as Q, HEAP_SPACE_REPORT_MIN_MB as Qt, UDS_NO_ROUTE_PREFIX as R, buildHeapSample as Rt, brokerCallForCap as S, formatEventPlane as Sn, resolveNpmInvocation as St, ipcParentLink as T, HEAP_RECLAIM_MIN_INTERVAL_MS as Tt, classifyCapRoute as U, hubMainRssBudget as Ut, CapRouteResolver as V, createV8Reclaimer as Vt, callWithServiceDiscovery as W, nextRssBudgetState as Wt, localEndpointPath as X, strandedMb as Xt, SocketChannel as Y, startRunnerHeapWatch as Yt, FrameDecoder as Z, DECISIVE_HEAP_SPACES as Zt, createKernelHwAccel as _, socketDirectionMessages as _n, CapabilityHandle as _t, getWorkerDeviceRegistry as a, selectReportedSpaces as an, setWorkerNativeCapsChangeListener as at, __resetCapUsageRegistryForTests as b, createEventPlaneReader as bn, installManifestNativeDeps as bt, setHubConnected as c, createSocketPlaneMeter as cn, NATIVE_PROVIDER_SERVICE_INFIX as ct, getBrokerEventBus as d, formatSocketPlane as dn, capBareAction as dt, emitHeapDiagnosticReport as en, buildUdsNativeCapProxy as et, getMoleculerEventStats as f, EMPTY_SOCKET_DIRECTION as fn, capServiceName as ft, AddonDepsManager as g, socketDirectionBytes as gn, DeviceRegistry as gt, subscribePassthrough as h, sampleSocketDirection as hn, serializeTypedArrays as ht, createUdsAddonContext as i, readHeapSpaces as in, mountNativeCapService as it, createUdsEventBridge as j, HUB_MAIN_RSS_BUDGET_MB as jt, createHubCapForwardService as k, HEAP_WATCH_WARN_RATIO as kt, EVENT_TOPIC_PREFIX as l, createSocketPlaneReader as ln, capActionName as lt, setNodeEventInterest as m, recordSocketFrame as mn, deserializeTypedArrays as mt, adaptBrokerToCluster as n, heapSnapshotAuthorised as nn, getWorkerNativeCapProvider as nt, getOrInitReadinessRegistry as o, EMPTY_SOCKET_PLANE_BASELINE as on, createAddonService as ot, registerEventBusService as p, createSocketDirectionCounters as pn, parseCapAction as pt, UdsLocalTransportClient as q, shouldReclaim as qt, createAddonContext as r, heapSpaceField as rn, getWorkerNativeCapSnapshot as rt, getOrInitReadinessRegistryForClient as s, SOCKET_PLANE_TOP_N as sn, validateProviderRegistrations as st, installManifestPythonDeps as t, formatHeapSpaces as tn, createBrokerDeviceManagerApi as tt, clusterEventTopic as u, diffSocketPlane as un, capActionSuffix as ut, resolveHwAccel as v, EVENT_PLANE_TOP_N as vn, CapabilityUnavailableError as vt, buildLinkChain as w, createAddonDataPlaneFacility as wt, getCapUsageRegistry as x, diffEventPlane as xn, resolveAddonClass as xt, CapUsageRegistry as y, createEventPlaneMeter as yn, copyBundledNativeModules as yt, AGENT_CAP_FWD_ACTION as z, createDeferredHeapWatchSink as zt };
+//#region src/kernel/deps/manifest-system-deps.ts
+/**
+* Auto-install the host binaries declared in an addon's manifest
+* (`camstack.addons[].systemDependencies`) before `onInitialize()` runs.
+*
+* ── Why this is framework and not addon-local ──────────────────────────────
+* The Python precedent (`camstack.addons[].python.requirements` →
+* `installManifestPythonDeps`, called from the same place in
+* `addon-runner.ts`) already answers "this addon needs something installed,
+* satisfy it before its caps register". A binary is the same question with a
+* different package manager, so it gets the same mechanism rather than a
+* second one per addon — CLAUDE.md forbids a parallel answer where one exists,
+* and the next addon that needs `rclone` or `mediainfo` inherits this for
+* free instead of copying a startup routine.
+*
+* ── The four things this has to get right ──────────────────────────────────
+*  1. **Cheap on the common path.** The binary is probed first; the package
+*     manager is only invoked when it is genuinely absent. Runners respawn
+*     routinely (deploys, updates, crash recovery) and a network round-trip on
+*     every boot is a cost the Python mechanism does not impose either.
+*  2. **Runs every boot, not once.** The install lands INSIDE the container
+*     and is lost on every image update. That is expected. "Already
+*     installed" is a success, not an error.
+*  3. **Honest, not fatal.** A failure warns and returns. The addon still
+*     loads; the capability that wraps the binary is responsible for refusing
+*     loudly on its own surface. Aborting the runner here would take the
+*     addon's SIBLINGS down with it (they share `execution.group`).
+*  4. **Platform reality is stated, not assumed.** An unsupported host logs
+*     which manager it looked for and continues. Silence would read as
+*     "installed".
+*
+* Every branch that declines to install SAYS SO. A dependency step that
+* produced no line at all is indistinguishable from one that never ran, and
+* the failure it precedes ("smbclient: ENOENT") arrives minutes later in a
+* different addon's logs.
+*/
+var execFileAsync = promisify(execFile);
+/** How long a single package-manager invocation may take. */
+var INSTALL_TIMEOUT_MS = 300 * 1e3;
+/** How long the `command -v <binary>` presence probe may take. */
+var PROBE_TIMEOUT_MS = 1e4;
+/**
+* Satisfy every `systemDependencies` entry the declaration carries.
+* Resolves regardless of outcome — see the docblock.
+*/
+async function installManifestSystemDeps(declaration, logger, options = {}) {
+	const deps = declaration.systemDependencies;
+	if (!deps || deps.length === 0) return;
+	const hasBinary = options.hasBinary ?? defaultHasBinary;
+	const detectManager = options.detectManager ?? defaultDetectManager;
+	const run = options.run ?? defaultRun;
+	const platform = options.platform ?? process.platform;
+	for (const dep of deps) try {
+		await satisfyOne(dep, declaration.id, {
+			hasBinary,
+			detectManager,
+			run,
+			platform
+		}, logger);
+	} catch (err) {
+		logger.warn("system dependency step failed", { meta: {
+			addonId: declaration.id,
+			binary: dep.binary,
+			error: err instanceof Error ? err.message : String(err)
+		} });
+	}
+}
+async function satisfyOne(dep, addonId, rt, logger) {
+	if (await rt.hasBinary(dep.binary)) {
+		logger.debug("system dependency already present", { meta: {
+			addonId,
+			binary: dep.binary
+		} });
+		return;
+	}
+	const manager = await rt.detectManager();
+	if (manager === null) {
+		logger.warn("system dependency missing and no supported package manager on this host", { meta: {
+			addonId,
+			binary: dep.binary,
+			platform: rt.platform,
+			...dep.reason !== void 0 ? { reason: dep.reason } : {}
+		} });
+		return;
+	}
+	const packageName = dep.packages[manager];
+	if (packageName === void 0 || packageName.length === 0) {
+		logger.warn("system dependency missing and the addon declares no package for this manager", { meta: {
+			addonId,
+			binary: dep.binary,
+			manager,
+			...dep.reason !== void 0 ? { reason: dep.reason } : {}
+		} });
+		return;
+	}
+	const plan = planFor(manager, packageName);
+	logger.info("installing system dependency", { meta: {
+		addonId,
+		binary: dep.binary,
+		manager,
+		package: packageName
+	} });
+	try {
+		for (const [command, args] of plan.steps) await rt.run(command, args);
+	} catch (err) {
+		logger.warn("system dependency install failed — the addon loads, its capability must refuse", { meta: {
+			addonId,
+			binary: dep.binary,
+			manager,
+			package: packageName,
+			error: err instanceof Error ? err.message : String(err),
+			...dep.reason !== void 0 ? { reason: dep.reason } : {}
+		} });
+		return;
+	}
+	if (!await rt.hasBinary(dep.binary)) {
+		logger.warn("system dependency installed but the binary still does not resolve", { meta: {
+			addonId,
+			binary: dep.binary,
+			manager,
+			package: packageName
+		} });
+		return;
+	}
+	logger.info("system dependency installed", { meta: {
+		addonId,
+		binary: dep.binary,
+		manager,
+		package: packageName
+	} });
+}
+function planFor(manager, packageName) {
+	switch (manager) {
+		case "apt": return {
+			manager,
+			steps: [["apt-get", ["update"]], ["apt-get", [
+				"install",
+				"-y",
+				"--no-install-recommends",
+				packageName
+			]]]
+		};
+		case "apk": return {
+			manager,
+			steps: [["apk", [
+				"add",
+				"--no-cache",
+				packageName
+			]]]
+		};
+		case "dnf": return {
+			manager,
+			steps: [["dnf", [
+				"install",
+				"-y",
+				packageName
+			]]]
+		};
+		case "brew": return {
+			manager,
+			steps: [["brew", ["install", packageName]]]
+		};
+	}
+}
+async function defaultHasBinary(binary) {
+	try {
+		await execFileAsync("command", ["-v", binary], {
+			timeout: PROBE_TIMEOUT_MS,
+			shell: process.platform === "win32" ? false : "/bin/sh"
+		});
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function defaultDetectManager() {
+	const candidates = os.platform() === "darwin" ? ["brew"] : [
+		"apt",
+		"apk",
+		"dnf",
+		"brew"
+	];
+	for (const candidate of candidates) if (await defaultHasBinary(candidate === "apt" ? "apt-get" : candidate)) return candidate;
+	return null;
+}
+async function defaultRun(command, args) {
+	await execFileAsync(command, [...args], { timeout: INSTALL_TIMEOUT_MS });
+}
+//#endregion
+export { encodeFrame as $, HEAP_SPACE_REPORT_MIN_MB as $t, createHubCapForwardService as A, HEAP_WATCH_WARN_RATIO as At, AGENT_CAP_FWD_ACTION as B, createDeferredHeapWatchSink as Bt, brokerCallForCap as C, formatEventPlane as Cn, resolveNpmInvocation as Ct, localProviderLink as D, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS as Dt, ipcParentLink as E, HEAP_RECLAIM_MIN_INTERVAL_MS as Et, createUdsLogger as F, RSS_BUDGET_RELEASE_RATIO as Ft, callWithServiceDiscovery as G, nextRssBudgetState as Gt, CapRouteResolver as H, createV8Reclaimer as Ht, createUdsLoggerWithControl as I, RUNNER_HEAP_WATCH_INTERVAL_MS as It, UdsLocalTransportClient as J, shouldReclaim as Jt, readMoleculerFanoutMode as K, parseRssBudgetMb as Kt, LocalChildClient as L, RUNNER_RSS_BUDGET_ENV as Lt, createUdsEventBridge as M, HUB_MAIN_RSS_BUDGET_MB as Mt, createUdsEventBus as N, HUB_RSS_BUDGET_ENV as Nt, HUB_CAP_FWD_ACTION as O, HEAP_RECLAIM_TRIGGER_MB as Ot, udsChildLogToWorkerEntry as P, RSS_BUDGET_REANNOUNCE_MIN_MS as Pt, FrameDecoder as Q, DECISIVE_HEAP_SPACES as Qt, LocalChildRegistry as R, ZERO_LOOP_DELAY as Rt, getCapUsageRegistry as S, diffEventPlane as Sn, resolveAddonClass as St, buildLinkChain as T, createAddonDataPlaneFacility as Tt, CapRouteError as U, describeRss as Ut, AGENT_CAP_FWD_SERVICE as V, createLoopDelayMeter as Vt, classifyCapRoute as W, hubMainRssBudget as Wt, SocketChannel as X, startRunnerHeapWatch as Xt, UdsLocalTransportServer as Y, startHeapWatch as Yt, localEndpointPath as Z, strandedMb as Zt, AddonDepsManager as _, socketDirectionBytes as _n, DeviceRegistry as _t, createUdsAddonContext as a, readHeapSpaces as an, mountNativeCapService as at, CapUsageRegistry as b, createEventPlaneMeter as bn, copyBundledNativeModules as bt, getOrInitReadinessRegistryForClient as c, SOCKET_PLANE_TOP_N as cn, validateProviderRegistrations as ct, clusterEventTopic as d, diffSocketPlane as dn, capActionSuffix as dt, RUNNER_HEAP_SNAPSHOT_ENV as en, buildNativeCapProxy as et, getBrokerEventBus as f, formatSocketPlane as fn, capBareAction as ft, subscribePassthrough as g, sampleSocketDirection as gn, serializeTypedArrays as gt, setNodeEventInterest as h, recordSocketFrame as hn, deserializeTypedArrays as ht, createAddonContext as i, heapSpaceField as in, getWorkerNativeCapSnapshot as it, createParentUnownedCallHandler as j, HUB_MAIN_HEAP_WATCH_LABEL as jt, HUB_CAP_FWD_SERVICE as k, HEAP_WATCH_INTERVAL_MS as kt, setHubConnected as l, createSocketPlaneMeter as ln, NATIVE_PROVIDER_SERVICE_INFIX as lt, registerEventBusService as m, createSocketDirectionCounters as mn, parseCapAction as mt, installManifestPythonDeps as n, formatHeapSpaces as nn, createBrokerDeviceManagerApi as nt, getWorkerDeviceRegistry as o, selectReportedSpaces as on, setWorkerNativeCapsChangeListener as ot, getMoleculerEventStats as p, EMPTY_SOCKET_DIRECTION as pn, capServiceName as pt, createLocalTransport as q, reclaimIntervalMs as qt, adaptBrokerToCluster as r, heapSnapshotAuthorised as rn, getWorkerNativeCapProvider as rt, getOrInitReadinessRegistry as s, EMPTY_SOCKET_PLANE_BASELINE as sn, createAddonService as st, installManifestSystemDeps as t, emitHeapDiagnosticReport as tn, buildUdsNativeCapProxy as tt, EVENT_TOPIC_PREFIX as u, createSocketPlaneReader as un, capActionName as ut, createKernelHwAccel as v, socketDirectionMessages as vn, CapabilityHandle as vt, brokerTransportLink as w, runNpm as wt, __resetCapUsageRegistryForTests as x, createEventPlaneReader as xn, installManifestNativeDeps as xt, resolveHwAccel as y, EVENT_PLANE_TOP_N as yn, CapabilityUnavailableError as yt, UDS_NO_ROUTE_PREFIX as z, buildHeapSample as zt };

package/dist/{retired-settings-keys-CV4QVdXj.mjs → retired-settings-keys-Bi0ZKBjb.mjs}

@@ -1,4 +1,4 @@
-import { zt as asJsonObject } from "./dist-LvKus-mT.mjs";
+import { Ht as asJsonObject } from "./dist-DLh4_rn3.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-BfAzWvPC.js → retired-settings-keys-Dp_CyuCW.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CDgIzo82.js");
+const require_dist = require("./dist-Ck2jkBZk.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.156",
+  "version": "1.2.159",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",
@@ -135,6 +135,7 @@
             "displayName": "Backups",
             "description": "Backup archives.",
             "cardinality": "multi",
+            "access": "cap-mediated",
             "defaultRoot": "backup"
           }
         ]