@camstack/system 1.2.156 → 1.2.159

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $ as isVoidInput, $t as scopeKey, At as DATAPLANE_SECRET_HEADER$1, Bt as asNumber, C as addonSettingsCapability, G as extractNestedAddonId, Gt as expandCapMethods, Ht as createEvent, It as ReadinessRegistry, J as isArrayOutputSchema, Lt as ReadinessTimeoutError, Mt as DEVICE_STATUS_METHOD, Ot as errMsg$1, Qt as resolveCapMount, Ut as emitDownForOwnedCaps, Vt as asString$1, X as isObjectInput, Xt as parseJsonUnknown$1, Y as isCollectionArrayMethod, Yt as parseJsonObject, Zt as readinessKey, _t as scopesAllowDeviceCap, at as looseSchema, ct as objectInputDeclaresAddonId, dt as procedureAuthKey, et as kebabToCamel, f as LOG_LEVEL_RANK, gt as scopesAllowAddon, it as logLevelAtMost, jt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, m as RUNTIME_DEFAULTS, mt as resolveMethodAuth, p as METHOD_ACCESS_MAP, t as ALL_CAPABILITY_DEFINITIONS, tn as EventCategory$1, tt as lifecycleJobSchema, zt as asJsonObject$1 } from "./dist-LvKus-mT.mjs";
+import { $ as isObjectInput, $t as parseJsonUnknown$1, Bt as ReadinessTimeoutError, Ft as DEVICE_STATUS_METHOD, Gt as createEvent, Ht as asJsonObject$1, J as extractNestedAddonId, Jt as expandCapMethods, Kt as emitDownForOwnedCaps, Nt as DATAPLANE_SECRET_HEADER$1, Pt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Q as isCollectionArrayMethod, Qt as parseJsonObject, T as addonSettingsCapability, Ut as asNumber, Wt as asString$1, Z as isArrayOutputSchema, _t as resolveMethodAuth, bt as scopesAllowDeviceCap, ct as looseSchema, dt as objectInputDeclaresAddonId, en as readinessKey, f as LOG_LEVEL_RANK, h as RUNTIME_DEFAULTS, in as EventCategory$1, it as lifecycleJobSchema, jt as errMsg$1, mt as procedureAuthKey, nn as scopeKey, nt as isVoidInput, p as METHOD_ACCESS_MAP, rt as kebabToCamel, st as logLevelAtMost, t as ALL_CAPABILITY_DEFINITIONS, tn as resolveCapMount, yt as scopesAllowAddon, zt as ReadinessRegistry } from "./dist-DLh4_rn3.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -25,7 +25,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { a as parseTokenizedUrl, c as collectModelFiles, d as downloadModel, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, o as resolveFilePath, p as fetchJson, r as createAuthenticatedFileServer, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-BhKdxJgf.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-DOTmtLCW.mjs";
-import { $ as buildNativeCapProxy, $t as RUNNER_HEAP_SNAPSHOT_ENV, A as createParentUnownedCallHandler, At as HUB_MAIN_HEAP_WATCH_LABEL, B as AGENT_CAP_FWD_SERVICE, Bt as createLoopDelayMeter, C as brokerTransportLink, Ct as runNpm, D as HUB_CAP_FWD_ACTION, Dt as HEAP_RECLAIM_TRIGGER_MB, E as localProviderLink, Et as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, F as createUdsLoggerWithControl, Ft as RUNNER_HEAP_WATCH_INTERVAL_MS, G as readMoleculerFanoutMode, Gt as parseRssBudgetMb, H as CapRouteError, Ht as describeRss, I as LocalChildClient, It as RUNNER_RSS_BUDGET_ENV, J as UdsLocalTransportServer, Jt as startHeapWatch, K as createLocalTransport, Kt as reclaimIntervalMs, L as LocalChildRegistry, Lt as ZERO_LOOP_DELAY, M as createUdsEventBus, Mt as HUB_RSS_BUDGET_ENV, N as udsChildLogToWorkerEntry, Nt as RSS_BUDGET_REANNOUNCE_MIN_MS, O as HUB_CAP_FWD_SERVICE, Ot as HEAP_WATCH_INTERVAL_MS, P as createUdsLogger, Pt as RSS_BUDGET_RELEASE_RATIO, Q as encodeFrame, Qt as HEAP_SPACE_REPORT_MIN_MB, R as UDS_NO_ROUTE_PREFIX, Rt as buildHeapSample, S as brokerCallForCap, Sn as formatEventPlane, St as resolveNpmInvocation, T as ipcParentLink, Tt as HEAP_RECLAIM_MIN_INTERVAL_MS, U as classifyCapRoute, Ut as hubMainRssBudget, V as CapRouteResolver, Vt as createV8Reclaimer, W as callWithServiceDiscovery, Wt as nextRssBudgetState, X as localEndpointPath, Xt as strandedMb, Y as SocketChannel, Yt as startRunnerHeapWatch, Z as FrameDecoder, Zt as DECISIVE_HEAP_SPACES, _ as createKernelHwAccel, _n as socketDirectionMessages, _t as CapabilityHandle, a as getWorkerDeviceRegistry, an as selectReportedSpaces, b as __resetCapUsageRegistryForTests, bn as createEventPlaneReader, bt as installManifestNativeDeps, c as setHubConnected, cn as createSocketPlaneMeter, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dn as formatSocketPlane, dt as capBareAction, en as emitHeapDiagnosticReport, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, fn as EMPTY_SOCKET_DIRECTION, ft as capServiceName, g as AddonDepsManager, gn as socketDirectionBytes, gt as DeviceRegistry, h as subscribePassthrough, hn as sampleSocketDirection, ht as serializeTypedArrays, i as createUdsAddonContext, in as readHeapSpaces, it as mountNativeCapService, j as createUdsEventBridge, jt as HUB_MAIN_RSS_BUDGET_MB, k as createHubCapForwardService, kt as HEAP_WATCH_WARN_RATIO, l as EVENT_TOPIC_PREFIX, ln as createSocketPlaneReader, lt as capActionName, m as setNodeEventInterest, mn as recordSocketFrame, mt as deserializeTypedArrays, n as adaptBrokerToCluster, nn as heapSnapshotAuthorised, o as getOrInitReadinessRegistry, on as EMPTY_SOCKET_PLANE_BASELINE, ot as createAddonService, p as registerEventBusService, pn as createSocketDirectionCounters, pt as parseCapAction, q as UdsLocalTransportClient, qt as shouldReclaim, r as createAddonContext, rn as heapSpaceField, s as getOrInitReadinessRegistryForClient, sn as SOCKET_PLANE_TOP_N, st as validateProviderRegistrations, t as installManifestPythonDeps, tn as formatHeapSpaces, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, un as diffSocketPlane, ut as capActionSuffix, v as resolveHwAccel, vn as EVENT_PLANE_TOP_N, vt as CapabilityUnavailableError, w as buildLinkChain, wt as createAddonDataPlaneFacility, x as getCapUsageRegistry, xn as diffEventPlane, xt as resolveAddonClass, y as CapUsageRegistry, yn as createEventPlaneMeter, yt as copyBundledNativeModules, z as AGENT_CAP_FWD_ACTION, zt as createDeferredHeapWatchSink } from "./manifest-python-deps-CD14Pv0-.mjs";
+import { $ as encodeFrame, $t as HEAP_SPACE_REPORT_MIN_MB, A as createHubCapForwardService, At as HEAP_WATCH_WARN_RATIO, B as AGENT_CAP_FWD_ACTION, Bt as createDeferredHeapWatchSink, C as brokerCallForCap, Cn as formatEventPlane, Ct as resolveNpmInvocation, D as localProviderLink, Dt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, E as ipcParentLink, Et as HEAP_RECLAIM_MIN_INTERVAL_MS, F as createUdsLogger, Ft as RSS_BUDGET_RELEASE_RATIO, G as callWithServiceDiscovery, Gt as nextRssBudgetState, H as CapRouteResolver, Ht as createV8Reclaimer, I as createUdsLoggerWithControl, It as RUNNER_HEAP_WATCH_INTERVAL_MS, J as UdsLocalTransportClient, Jt as shouldReclaim, K as readMoleculerFanoutMode, Kt as parseRssBudgetMb, L as LocalChildClient, Lt as RUNNER_RSS_BUDGET_ENV, M as createUdsEventBridge, Mt as HUB_MAIN_RSS_BUDGET_MB, N as createUdsEventBus, Nt as HUB_RSS_BUDGET_ENV, O as HUB_CAP_FWD_ACTION, Ot as HEAP_RECLAIM_TRIGGER_MB, P as udsChildLogToWorkerEntry, Pt as RSS_BUDGET_REANNOUNCE_MIN_MS, Q as FrameDecoder, Qt as DECISIVE_HEAP_SPACES, R as LocalChildRegistry, Rt as ZERO_LOOP_DELAY, S as getCapUsageRegistry, Sn as diffEventPlane, St as resolveAddonClass, T as buildLinkChain, Tt as createAddonDataPlaneFacility, U as CapRouteError, Ut as describeRss, V as AGENT_CAP_FWD_SERVICE, Vt as createLoopDelayMeter, W as classifyCapRoute, Wt as hubMainRssBudget, X as SocketChannel, Xt as startRunnerHeapWatch, Y as UdsLocalTransportServer, Yt as startHeapWatch, Z as localEndpointPath, Zt as strandedMb, _ as AddonDepsManager, _n as socketDirectionBytes, _t as DeviceRegistry, a as createUdsAddonContext, an as readHeapSpaces, at as mountNativeCapService, b as CapUsageRegistry, bn as createEventPlaneMeter, bt as copyBundledNativeModules, c as getOrInitReadinessRegistryForClient, cn as SOCKET_PLANE_TOP_N, ct as validateProviderRegistrations, d as clusterEventTopic, dn as diffSocketPlane, dt as capActionSuffix, en as RUNNER_HEAP_SNAPSHOT_ENV, et as buildNativeCapProxy, f as getBrokerEventBus, fn as formatSocketPlane, ft as capBareAction, g as subscribePassthrough, gn as sampleSocketDirection, gt as serializeTypedArrays, h as setNodeEventInterest, hn as recordSocketFrame, ht as deserializeTypedArrays, i as createAddonContext, in as heapSpaceField, j as createParentUnownedCallHandler, jt as HUB_MAIN_HEAP_WATCH_LABEL, k as HUB_CAP_FWD_SERVICE, kt as HEAP_WATCH_INTERVAL_MS, l as setHubConnected, ln as createSocketPlaneMeter, lt as NATIVE_PROVIDER_SERVICE_INFIX, m as registerEventBusService, mn as createSocketDirectionCounters, mt as parseCapAction, n as installManifestPythonDeps, nn as formatHeapSpaces, nt as createBrokerDeviceManagerApi, o as getWorkerDeviceRegistry, on as selectReportedSpaces, p as getMoleculerEventStats, pn as EMPTY_SOCKET_DIRECTION, pt as capServiceName, q as createLocalTransport, qt as reclaimIntervalMs, r as adaptBrokerToCluster, rn as heapSnapshotAuthorised, s as getOrInitReadinessRegistry, sn as EMPTY_SOCKET_PLANE_BASELINE, st as createAddonService, t as installManifestSystemDeps, tn as emitHeapDiagnosticReport, tt as buildUdsNativeCapProxy, u as EVENT_TOPIC_PREFIX, un as createSocketPlaneReader, ut as capActionName, v as createKernelHwAccel, vn as socketDirectionMessages, vt as CapabilityHandle, w as brokerTransportLink, wt as runNpm, x as __resetCapUsageRegistryForTests, xn as createEventPlaneReader, xt as installManifestNativeDeps, y as resolveHwAccel, yn as EVENT_PLANE_TOP_N, yt as CapabilityUnavailableError, z as UDS_NO_ROUTE_PREFIX, zt as buildHeapSample } from "./manifest-system-deps-tZZYG3RR.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { z } from "zod";
@@ -9605,20 +9605,63 @@ var ConfigManager = class ConfigManager {
 		if (this.settingsStore === null) return;
 		this.settingsStore.clearDeviceRuntimeState(deviceId);
 	}
+	/**
+	* The addon's `ctx.settings`.
+	*
+	* The backend is chosen on EVERY call, never frozen when the view is built.
+	* That is not a nicety: `settings-store` is owned by `storage-orchestrator`,
+	* so the door is wired by `registerProvider` STRICTLY AFTER that addon's
+	* context — and therefore its settings view — already exists. A view bound at
+	* construction handed the door's own owner the sync-store backend, whose
+	* writes throw for the whole life of the process once `sqlite-settings` runs
+	* isolated (D181: no sync `ISettingsStore` reaches hub-main, only the async
+	* door). Reads were worse than the writes: they answered `{}` in silence.
+	* That is what made `storageMigration.start` fail on its first durable write
+	* while every other addon's persistence worked. See D294.
+	*/
 	createSettingsView(addonId) {
-		if (this.settingsStore === null && this.settingsDoor !== null) {
+		const storeBacked = this.createStoreSettingsView(addonId);
+		let doorBacked = null;
+		let doorBackedSource = null;
+		const active = () => {
+			if (this.settingsStore !== null) return storeBacked;
 			const door = this.settingsDoor;
-			return createDoorSettingsView(addonId, door, {
-				getSection: (section) => this.getSection(section),
-				setSection: async (section, patch) => {
-					for (const [key, value] of Object.entries(patch)) await door.set({
-						collection: "system-settings",
-						key: `${section}.${key}`,
-						value
-					});
-				}
-			});
-		}
+			if (door === null) return storeBacked;
+			if (doorBacked === null || doorBackedSource !== door) {
+				doorBackedSource = door;
+				doorBacked = this.createDoorBackedSettingsView(addonId, door);
+			}
+			return doorBacked;
+		};
+		return {
+			readAddonStore: () => active().readAddonStore(),
+			writeAddonStore: (patch) => active().writeAddonStore(patch),
+			readDeviceStore: (deviceId) => active().readDeviceStore(deviceId),
+			readDeviceStoreBatch: (deviceIds) => active().readDeviceStoreBatch(deviceIds),
+			writeDeviceStore: (deviceId, patch) => active().writeDeviceStore(deviceId, patch),
+			clearDeviceStore: (deviceId) => active().clearDeviceStore(deviceId),
+			getSection: (section) => active().getSection(section),
+			setSection: (section, patch) => active().setSection(section, patch),
+			readDeviceRuntimeState: (deviceId) => active().readDeviceRuntimeState(deviceId),
+			writeDeviceRuntimeState: (deviceId, data) => active().writeDeviceRuntimeState(deviceId, data),
+			clearDeviceRuntimeState: (deviceId) => active().clearDeviceRuntimeState(deviceId)
+		};
+	}
+	/** The async-door backend of {@link createSettingsView}. */
+	createDoorBackedSettingsView(addonId, door) {
+		return createDoorSettingsView(addonId, door, {
+			getSection: (section) => this.getSection(section),
+			setSection: async (section, patch) => {
+				for (const [key, value] of Object.entries(patch)) await door.set({
+					collection: "system-settings",
+					key: `${section}.${key}`,
+					value
+				});
+			}
+		});
+	}
+	/** The sync-`ISettingsStore` backend of {@link createSettingsView}. */
+	createStoreSettingsView(addonId) {
 		const cm = this;
 		return {
 			async readAddonStore() {
@@ -9634,6 +9677,15 @@ var ConfigManager = class ConfigManager {
 			async readDeviceStore(deviceId) {
 				return cm.getAddonDevice(addonId, String(deviceId));
 			},
+			async readDeviceStoreBatch(deviceIds) {
+				const out = /* @__PURE__ */ new Map();
+				for (const deviceId of deviceIds) try {
+					out.set(deviceId, cm.getAddonDevice(addonId, String(deviceId)));
+				} catch {
+					out.set(deviceId, {});
+				}
+				return out;
+			},
 			async writeDeviceStore(deviceId, patch) {
 				const key = String(deviceId);
 				const existing = cm.getAddonDevice(addonId, key);
@@ -95283,4 +95335,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_SNAPSHOT_ENV, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSnapshotAuthorised, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CA_COMMON_NAME, CA_VALIDITY_DAYS, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DECISIVE_HEAP_SPACES, DEFAULT_DATA_PATH, DEFAULT_LAN_HTTP_PORT, DEFAULT_LOG_LEVEL, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EMPTY_SOCKET_DIRECTION, EMPTY_SOCKET_PLANE_BASELINE, EVENT_PLANE_TOP_N, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_SPACE_REPORT_MIN_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LEAF_RENEWAL_WINDOW_DAYS, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LoggingGate, LokiDestination, LokiLoggingAddon, MAX_LEAF_VALIDITY_DAYS, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_SNAPSHOT_ENV, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, SERVER_AUTH_OID, SOCKET_PLANE_TOP_N, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, ZERO_LOOP_DELAY, __resetCapUsageRegistryForTests, __resetLoggingGateForTests, adaptBrokerToCluster, addonSettingsCapability, allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, canServeDataPlane, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, closeLanHttp, clusterEventTopic, clusterSecretMatches, collectCertIdentity, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createDeferredHeapWatchSink, createDoorSettingsView, createEventPlaneMeter, createEventPlaneReader, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createLoopDelayMeter, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createSocketDirectionCounters, createSocketPlaneMeter, createSocketPlaneReader, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, describeRss, detectWorkspacePackagesDir, diffEventPlane, diffSocketPlane, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, emitHeapDiagnosticReport, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, evaluateExistingCert, expandCapMethods, fetchJson, findInPath, formatEventPlane, formatHeapSpaces, formatLogLine, formatSocketPlane, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getLoggingGate, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, heapSnapshotAuthorised, heapSpaceField, hubMainRssBudget, installManifestNativeDeps, installManifestPythonDeps, installManifestSystemDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, isolatedBuiltinPhase, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, nextRssBudgetState, parseCapAction, parseRangeHeader, parseRssBudgetMb, parseTokenizedUrl, partitionIsolatedBuiltinIds, proxyToUpstream, quarantineAddonResidue, readExtraSans, readHeapSpaces, readLanHttpState, readMoleculerFanoutMode, readPendingRestart, readTlsAccessStatus, readTlsMode, readinessKey, reclaimIntervalMs, recordSocketFrame, registerEventBusService, registerLanHttpHandler, reissueTlsLeaf, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runHubAddonBoot, runNpm, sampleSocketDirection, scheduleSelfRestart, scopeKey, scopesAllowAddon, scopesAllowDeviceCap, selectAddonResidue, selectReportedSpaces, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, socketDirectionBytes, socketDirectionMessages, startHeapWatch, startRunnerHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, validateUploadedTls, waitUntilReady, writeExtraSans, writePendingRestart, writeTlsMode };

package/dist/kernel/config-manager.d.ts

@@ -31,6 +31,19 @@ export interface AddonSettingsView {
     writeDeviceRuntimeState(deviceId: number, data: Record<string, unknown>): Promise<void>;
     clearDeviceRuntimeState(deviceId: number): Promise<void>;
 }
+/**
+ * A CONCRETE backend behind {@link ConfigManager.createSettingsView} — the
+ * sync-`ISettingsStore` one or the async-door one.
+ *
+ * `readDeviceStoreBatch` is required here and optional on
+ * {@link AddonSettingsView} because both of these can answer it, so the view
+ * the kernel hands an addon never has to decide whether the method exists.
+ * The optionality on the public interface stays for the implementation that
+ * genuinely cannot batch: a forked runner's UDS-backed view.
+ */
+export interface SettingsViewBackend extends AddonSettingsView {
+    readDeviceStoreBatch(deviceIds: readonly number[]): Promise<ReadonlyMap<number, Record<string, unknown>>>;
+}
 export interface ISettingsStore {
     getSystem(key: string): unknown;
     setSystem(key: string, value: unknown): void;
@@ -181,7 +194,25 @@ export declare class ConfigManager {
     setDeviceRuntimeState(deviceId: string, blob: Record<string, unknown>): void;
     /** Forget the device's runtime state. No-op before the store is wired. */
     clearDeviceRuntimeState(deviceId: string): void;
+    /**
+     * The addon's `ctx.settings`.
+     *
+     * The backend is chosen on EVERY call, never frozen when the view is built.
+     * That is not a nicety: `settings-store` is owned by `storage-orchestrator`,
+     * so the door is wired by `registerProvider` STRICTLY AFTER that addon's
+     * context — and therefore its settings view — already exists. A view bound at
+     * construction handed the door's own owner the sync-store backend, whose
+     * writes throw for the whole life of the process once `sqlite-settings` runs
+     * isolated (D181: no sync `ISettingsStore` reaches hub-main, only the async
+     * door). Reads were worse than the writes: they answered `{}` in silence.
+     * That is what made `storageMigration.start` fail on its first durable write
+     * while every other addon's persistence worked. See D294.
+     */
     createSettingsView(addonId: string): AddonSettingsView;
+    /** The async-door backend of {@link createSettingsView}. */
+    private createDoorBackedSettingsView;
+    /** The sync-`ISettingsStore` backend of {@link createSettingsView}. */
+    private createStoreSettingsView;
     /** Get all system-wide activation overrides. */
     getSystemActivation(): Readonly<Record<string, boolean>>;
     /** Set system-wide activation for a capability/addon pair. */

package/dist/kernel/deps/manifest-system-deps.d.ts

@@ -0,0 +1,15 @@
+import { AddonDeclaration, IScopedLogger } from '@camstack/types';
+/** Host package managers this mechanism knows how to drive. */
+export type SystemPackageManager = 'apt' | 'apk' | 'dnf' | 'brew';
+/** Test seams — production callers omit these. */
+export interface InstallManifestSystemDepsOptions {
+    readonly hasBinary?: (binary: string) => Promise<boolean>;
+    readonly detectManager?: () => Promise<SystemPackageManager | null>;
+    readonly run?: (command: string, args: readonly string[]) => Promise<void>;
+    readonly platform?: NodeJS.Platform;
+}
+/**
+ * Satisfy every `systemDependencies` entry the declaration carries.
+ * Resolves regardless of outcome — see the docblock.
+ */
+export declare function installManifestSystemDeps(declaration: AddonDeclaration, logger: IScopedLogger, options?: InstallManifestSystemDepsOptions): Promise<void>;

package/dist/kernel/index.d.ts

@@ -60,6 +60,8 @@ export type { StreamProbeBrokerDeps } from './moleculer/stream-probe-service.js'
 export { resolveHwAccel, createKernelHwAccel } from './hwaccel/hwaccel-resolver.js';
 export { AddonDepsManager } from './deps/addon-deps-manager.js';
 export { installManifestPythonDeps } from './deps/manifest-python-deps.js';
+export { installManifestSystemDeps } from './deps/manifest-system-deps.js';
+export type { InstallManifestSystemDepsOptions, SystemPackageManager, } from './deps/manifest-system-deps.js';
 export { installManifestNativeDeps } from './deps/manifest-native-deps.js';
 export { AddonHealthMonitor, HEALTH_MONITOR_TICK_MS, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, } from './addon-health-monitor.js';
 export type { AddonHealthPhase, AddonHealthState, AddonHealthSnapshot, AddonHealthMonitorOptions, } from './addon-health-monitor.js';

package/dist/kernel/settings-door-view.d.ts

@@ -1,7 +1,7 @@
 import { ISettingsStoreProvider } from '@camstack/types';
-import { AddonSettingsView } from './config-manager.js';
+import { SettingsViewBackend } from './config-manager.js';
 export interface DoorSectionAccess {
     getSection(section: string): Record<string, unknown>;
     setSection(section: string, patch: Record<string, unknown>): void | Promise<void>;
 }
-export declare function createDoorSettingsView(addonId: string, door: ISettingsStoreProvider, sections: DoorSectionAccess): AddonSettingsView;
+export declare function createDoorSettingsView(addonId: string, door: ISettingsStoreProvider, sections: DoorSectionAccess): SettingsViewBackend;

package/dist/kernel/storage-location-registry.d.ts

@@ -1,4 +1,4 @@
-import { StorageLocationDeclaration } from '@camstack/types';
+import { StorageAccess, StorageLocationDeclaration } from '@camstack/types';
 /**
  * Read-only view over all aggregated storage-location declarations.
  *
@@ -15,6 +15,15 @@ export interface StorageLocationRegistry {
      * Convenience shortcut over `get(id)?.cardinality`.
      */
     cardinalityOf(id: string): 'single' | 'multi' | null;
+    /**
+     * The declared {@link StorageAccess} of `id`, or `null` when no addon
+     * declared it. An UNDECLARED `access` on a DECLARED id resolves to
+     * `STORAGE_ACCESS_FALLBACK` (`'local-path'`) — fail-closed, so a kind that
+     * says nothing is treated as doing raw filesystem I/O and refuses a remote
+     * provider. `null` is reserved for "nobody declared this id at all", which
+     * callers treat separately.
+     */
+    accessOf(id: string): StorageAccess | null;
     /**
      * Stable, immutable list of all aggregated declarations (insertion order of
      * first occurrence per `id`).
@@ -33,6 +42,12 @@ export interface StorageLocationRegistry {
  * - **Cardinality conflict throws**: if two addons declare the same `id` with
  *   different `cardinality` values an `Error` is thrown immediately (message
  *   contains the words "cardinality" and the conflicting `id`).
+ * - **Access conflict throws**, for the same reason and more sharply: the
+ *   EFFECTIVE access (declared, else `STORAGE_ACCESS_FALLBACK`) must agree.
+ *   "First declarer wins" is the right rule for a display name and a
+ *   catastrophic one for a safety constraint — it would let a second addon
+ *   silently widen a kind that the first one restricted, which is exactly the
+ *   accident this constraint exists to make impossible.
  *
  * @param perAddon - One entry per addon; each entry is that addon's
  *   `storageLocations` declaration array.

package/dist/{manifest-python-deps-DVODn-qc.js → manifest-system-deps-8boi90D9.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-require("./dist-CDgIzo82.js");
+require("./dist-Ck2jkBZk.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let _camstack_types_node = require("@camstack/types/node");
@@ -1607,7 +1607,7 @@ function createAddonDataPlaneFacility(args) {
 * Failures THROW with an actionable message — a caller must never proceed as
 * if dependencies were installed when they were not.
 */
-var execFileAsync$1 = (0, node_util.promisify)(node_child_process.execFile);
+var execFileAsync$2 = (0, node_util.promisify)(node_child_process.execFile);
 var DEFAULT_REGISTRY = "https://registry.npmjs.org";
 /** Where the bootstrap lands inside `cacheDir` (npm tgz carries a `package/` prefix). */
 function bootstrappedCliPath(cacheDir) {
@@ -1615,7 +1615,7 @@ function bootstrappedCliPath(cacheDir) {
 }
 async function defaultProbeSystemNpm() {
 	try {
-		await execFileAsync$1("npm", ["--version"], { timeout: 15e3 });
+		await execFileAsync$2("npm", ["--version"], { timeout: 15e3 });
 		return true;
 	} catch {
 		return false;
@@ -1633,7 +1633,7 @@ async function defaultDownloadTarball(url, destTgz) {
 	await node_fs.promises.writeFile(destTgz, bytes);
 }
 async function defaultExtractTarball(tgzPath, destDir) {
-	await execFileAsync$1("tar", [
+	await execFileAsync$2("tar", [
 		"-xzf",
 		tgzPath,
 		"-C",
@@ -1672,7 +1672,7 @@ async function runNpm(args, options) {
 		registry: options.registry,
 		logger: options.logger
 	});
-	return execFileAsync$1(invocation.command, [...invocation.argsPrefix, ...args], {
+	return execFileAsync$2(invocation.command, [...invocation.argsPrefix, ...args], {
 		...options.cwd !== void 0 ? { cwd: options.cwd } : {},
 		timeout: options.timeout ?? 3e5
 	});
@@ -1752,7 +1752,7 @@ function resolveAddonClass(mod) {
 }
 //#endregion
 //#region src/kernel/deps/manifest-native-deps.ts
-var execFileAsync = (0, node_util.promisify)(node_child_process.execFile);
+var execFileAsync$1 = (0, node_util.promisify)(node_child_process.execFile);
 /**
 * Fallback bootstrap-cache location when the caller doesn't thread one
 * through (the forked addon-runner's spawn-time install). tmpdir survives the
@@ -2061,7 +2061,7 @@ async function rebuildNativeDeps(addonDir, packageNames, logger, npmCacheDir, re
 				return;
 			}
 			logger.warn("@electron/rebuild not available — falling back to npx", { meta: { addonDir } });
-			await execFileAsync("npx", [
+			await execFileAsync$1("npx", [
 				"--yes",
 				"electron-rebuild",
 				"-m",
@@ -9504,6 +9504,195 @@ async function installManifestPythonDeps(declaration, addonDir, deps, logger) {
 	await deps.installPythonRequirements(reqAbs);
 }
 //#endregion
+//#region src/kernel/deps/manifest-system-deps.ts
+/**
+* Auto-install the host binaries declared in an addon's manifest
+* (`camstack.addons[].systemDependencies`) before `onInitialize()` runs.
+*
+* ── Why this is framework and not addon-local ──────────────────────────────
+* The Python precedent (`camstack.addons[].python.requirements` →
+* `installManifestPythonDeps`, called from the same place in
+* `addon-runner.ts`) already answers "this addon needs something installed,
+* satisfy it before its caps register". A binary is the same question with a
+* different package manager, so it gets the same mechanism rather than a
+* second one per addon — CLAUDE.md forbids a parallel answer where one exists,
+* and the next addon that needs `rclone` or `mediainfo` inherits this for
+* free instead of copying a startup routine.
+*
+* ── The four things this has to get right ──────────────────────────────────
+*  1. **Cheap on the common path.** The binary is probed first; the package
+*     manager is only invoked when it is genuinely absent. Runners respawn
+*     routinely (deploys, updates, crash recovery) and a network round-trip on
+*     every boot is a cost the Python mechanism does not impose either.
+*  2. **Runs every boot, not once.** The install lands INSIDE the container
+*     and is lost on every image update. That is expected. "Already
+*     installed" is a success, not an error.
+*  3. **Honest, not fatal.** A failure warns and returns. The addon still
+*     loads; the capability that wraps the binary is responsible for refusing
+*     loudly on its own surface. Aborting the runner here would take the
+*     addon's SIBLINGS down with it (they share `execution.group`).
+*  4. **Platform reality is stated, not assumed.** An unsupported host logs
+*     which manager it looked for and continues. Silence would read as
+*     "installed".
+*
+* Every branch that declines to install SAYS SO. A dependency step that
+* produced no line at all is indistinguishable from one that never ran, and
+* the failure it precedes ("smbclient: ENOENT") arrives minutes later in a
+* different addon's logs.
+*/
+var execFileAsync = (0, node_util.promisify)(node_child_process.execFile);
+/** How long a single package-manager invocation may take. */
+var INSTALL_TIMEOUT_MS = 300 * 1e3;
+/** How long the `command -v <binary>` presence probe may take. */
+var PROBE_TIMEOUT_MS = 1e4;
+/**
+* Satisfy every `systemDependencies` entry the declaration carries.
+* Resolves regardless of outcome — see the docblock.
+*/
+async function installManifestSystemDeps(declaration, logger, options = {}) {
+	const deps = declaration.systemDependencies;
+	if (!deps || deps.length === 0) return;
+	const hasBinary = options.hasBinary ?? defaultHasBinary;
+	const detectManager = options.detectManager ?? defaultDetectManager;
+	const run = options.run ?? defaultRun;
+	const platform = options.platform ?? process.platform;
+	for (const dep of deps) try {
+		await satisfyOne(dep, declaration.id, {
+			hasBinary,
+			detectManager,
+			run,
+			platform
+		}, logger);
+	} catch (err) {
+		logger.warn("system dependency step failed", { meta: {
+			addonId: declaration.id,
+			binary: dep.binary,
+			error: err instanceof Error ? err.message : String(err)
+		} });
+	}
+}
+async function satisfyOne(dep, addonId, rt, logger) {
+	if (await rt.hasBinary(dep.binary)) {
+		logger.debug("system dependency already present", { meta: {
+			addonId,
+			binary: dep.binary
+		} });
+		return;
+	}
+	const manager = await rt.detectManager();
+	if (manager === null) {
+		logger.warn("system dependency missing and no supported package manager on this host", { meta: {
+			addonId,
+			binary: dep.binary,
+			platform: rt.platform,
+			...dep.reason !== void 0 ? { reason: dep.reason } : {}
+		} });
+		return;
+	}
+	const packageName = dep.packages[manager];
+	if (packageName === void 0 || packageName.length === 0) {
+		logger.warn("system dependency missing and the addon declares no package for this manager", { meta: {
+			addonId,
+			binary: dep.binary,
+			manager,
+			...dep.reason !== void 0 ? { reason: dep.reason } : {}
+		} });
+		return;
+	}
+	const plan = planFor(manager, packageName);
+	logger.info("installing system dependency", { meta: {
+		addonId,
+		binary: dep.binary,
+		manager,
+		package: packageName
+	} });
+	try {
+		for (const [command, args] of plan.steps) await rt.run(command, args);
+	} catch (err) {
+		logger.warn("system dependency install failed — the addon loads, its capability must refuse", { meta: {
+			addonId,
+			binary: dep.binary,
+			manager,
+			package: packageName,
+			error: err instanceof Error ? err.message : String(err),
+			...dep.reason !== void 0 ? { reason: dep.reason } : {}
+		} });
+		return;
+	}
+	if (!await rt.hasBinary(dep.binary)) {
+		logger.warn("system dependency installed but the binary still does not resolve", { meta: {
+			addonId,
+			binary: dep.binary,
+			manager,
+			package: packageName
+		} });
+		return;
+	}
+	logger.info("system dependency installed", { meta: {
+		addonId,
+		binary: dep.binary,
+		manager,
+		package: packageName
+	} });
+}
+function planFor(manager, packageName) {
+	switch (manager) {
+		case "apt": return {
+			manager,
+			steps: [["apt-get", ["update"]], ["apt-get", [
+				"install",
+				"-y",
+				"--no-install-recommends",
+				packageName
+			]]]
+		};
+		case "apk": return {
+			manager,
+			steps: [["apk", [
+				"add",
+				"--no-cache",
+				packageName
+			]]]
+		};
+		case "dnf": return {
+			manager,
+			steps: [["dnf", [
+				"install",
+				"-y",
+				packageName
+			]]]
+		};
+		case "brew": return {
+			manager,
+			steps: [["brew", ["install", packageName]]]
+		};
+	}
+}
+async function defaultHasBinary(binary) {
+	try {
+		await execFileAsync("command", ["-v", binary], {
+			timeout: PROBE_TIMEOUT_MS,
+			shell: process.platform === "win32" ? false : "/bin/sh"
+		});
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function defaultDetectManager() {
+	const candidates = node_os.platform() === "darwin" ? ["brew"] : [
+		"apt",
+		"apk",
+		"dnf",
+		"brew"
+	];
+	for (const candidate of candidates) if (await defaultHasBinary(candidate === "apt" ? "apt-get" : candidate)) return candidate;
+	return null;
+}
+async function defaultRun(command, args) {
+	await execFileAsync(command, [...args], { timeout: INSTALL_TIMEOUT_MS });
+}
+//#endregion
 Object.defineProperty(exports, "AGENT_CAP_FWD_ACTION", {
 	enumerable: true,
 	get: function() {
@@ -10098,6 +10287,12 @@ Object.defineProperty(exports, "installManifestPythonDeps", {
 		return installManifestPythonDeps;
 	}
 });
+Object.defineProperty(exports, "installManifestSystemDeps", {
+	enumerable: true,
+	get: function() {
+		return installManifestSystemDeps;
+	}
+});
 Object.defineProperty(exports, "ipcParentLink", {
 	enumerable: true,
 	get: function() {