@camstack/system 1.2.2 → 1.2.4

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import { At as EventCategory$1, Dt as resolveCapMount, Et as readinessKey, F as kebabToCamel, I as lifecycleJobSchema, K as procedureAuthKey, M as isCollectionArrayMethod, N as isObjectInput, O as extractNestedAddonId, Ot as scopeKey, P as isVoidInput, Tt as parseJsonUnknown$1, U as objectInputDeclaresAddonId, _t as asString$1, ct as DEVICE_STATUS_METHOD, ft as ReadinessRegistry, gt as asNumber, ht as asJsonObject$1, it as errMsg$1, j as isArrayOutputSchema, o as METHOD_ACCESS_MAP, ot as DATAPLANE_SECRET_HEADER$1, p as addonSettingsCapability, pt as ReadinessTimeoutError, s as RUNTIME_DEFAULTS, st as DEVICE_SETTINGS_CONTRIBUTION_METHODS, t as ALL_CAPABILITY_DEFINITIONS, vt as createEvent, wt as parseJsonObject, xt as expandCapMethods, yt as emitDownForOwnedCaps, z as looseSchema } from "./dist-DTTTjPCL.mjs";
+import { At as EventCategory$1, Dt as resolveCapMount, Et as readinessKey, F as kebabToCamel, I as lifecycleJobSchema, K as procedureAuthKey, M as isCollectionArrayMethod, N as isObjectInput, O as extractNestedAddonId, Ot as scopeKey, P as isVoidInput, Tt as parseJsonUnknown$1, U as objectInputDeclaresAddonId, _t as asString$1, ct as DEVICE_STATUS_METHOD, ft as ReadinessRegistry, gt as asNumber, ht as asJsonObject$1, it as errMsg$1, j as isArrayOutputSchema, o as METHOD_ACCESS_MAP, ot as DATAPLANE_SECRET_HEADER$1, p as addonSettingsCapability, pt as ReadinessTimeoutError, s as RUNTIME_DEFAULTS, st as DEVICE_SETTINGS_CONTRIBUTION_METHODS, t as ALL_CAPABILITY_DEFINITIONS, vt as createEvent, wt as parseJsonObject, xt as expandCapMethods, yt as emitDownForOwnedCaps, z as looseSchema } from "./dist-72yufD8v.mjs";
 import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-Cp9f4dk6.mjs";
-import { $ as buildNativeCapProxy, A as createHubCapForwardService, B as AGENT_CAP_FWD_ACTION, C as brokerTransportLink, Ct as createAddonDataPlaneFacility, D as localProviderLink, E as ipcParentLink, F as createUdsLogger, G as callWithServiceDiscovery, H as CapRouteResolver, I as createUdsLoggerWithControl, J as UdsLocalTransportServer, K as createLocalTransport, L as LocalChildClient, M as createUdsEventBridge, N as createUdsEventBus, O as HUB_CAP_FWD_ACTION, P as udsChildLogToWorkerEntry, Q as encodeFrame, R as LocalChildRegistry, S as brokerCallForCap, St as resolveAddonClass, T as ipcChildLink, U as CapRouteError, V as AGENT_CAP_FWD_SERVICE, W as classifyCapRoute, X as localEndpointPath, Y as SocketChannel, Z as FrameDecoder, _ as createKernelHwAccel, _t as CapabilityHandle, a as getWorkerDeviceRegistry, b as __resetCapUsageRegistryForTests, bt as resolveNpmInvocation, c as setHubConnected, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dt as capBareAction, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, ft as capServiceName, g as AddonDepsManager, gt as DeviceRegistry, h as subscribePassthrough, ht as serializeTypedArrays, i as createUdsAddonContext, it as mountNativeCapService, j as createParentUnownedCallHandler, k as HUB_CAP_FWD_SERVICE, l as EVENT_TOPIC_PREFIX, lt as capActionName, m as setNodeEventInterest, mt as deserializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as createAddonService, p as registerEventBusService, pt as parseCapAction, q as UdsLocalTransportClient, r as createAddonContext, s as getOrInitReadinessRegistryForClient, st as validateProviderRegistrations, t as installManifestPythonDeps, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, ut as capActionSuffix, v as resolveHwAccel, vt as CapabilityUnavailableError, w as buildLinkChain, x as getCapUsageRegistry, xt as runNpm, y as CapUsageRegistry, yt as installManifestNativeDeps, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-s_-uULmp.mjs";
+import { $ as buildNativeCapProxy, A as createHubCapForwardService, B as AGENT_CAP_FWD_ACTION, C as brokerTransportLink, Ct as resolveAddonClass, D as localProviderLink, E as ipcParentLink, F as createUdsLogger, G as callWithServiceDiscovery, H as CapRouteResolver, I as createUdsLoggerWithControl, J as UdsLocalTransportServer, K as createLocalTransport, L as LocalChildClient, M as createUdsEventBridge, N as createUdsEventBus, O as HUB_CAP_FWD_ACTION, P as udsChildLogToWorkerEntry, Q as encodeFrame, R as LocalChildRegistry, S as brokerCallForCap, St as runNpm, T as ipcChildLink, U as CapRouteError, V as AGENT_CAP_FWD_SERVICE, W as classifyCapRoute, X as localEndpointPath, Y as SocketChannel, Z as FrameDecoder, _ as createKernelHwAccel, _t as CapabilityHandle, a as getWorkerDeviceRegistry, b as __resetCapUsageRegistryForTests, bt as installManifestNativeDeps, c as setHubConnected, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dt as capBareAction, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, ft as capServiceName, g as AddonDepsManager, gt as DeviceRegistry, h as subscribePassthrough, ht as serializeTypedArrays, i as createUdsAddonContext, it as mountNativeCapService, j as createParentUnownedCallHandler, k as HUB_CAP_FWD_SERVICE, l as EVENT_TOPIC_PREFIX, lt as capActionName, m as setNodeEventInterest, mt as deserializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as createAddonService, p as registerEventBusService, pt as parseCapAction, q as UdsLocalTransportClient, r as createAddonContext, s as getOrInitReadinessRegistryForClient, st as validateProviderRegistrations, t as installManifestPythonDeps, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, ut as capActionSuffix, v as resolveHwAccel, vt as CapabilityUnavailableError, w as buildLinkChain, wt as createAddonDataPlaneFacility, x as getCapUsageRegistry, xt as resolveNpmInvocation, y as CapUsageRegistry, yt as copyBundledNativeModules, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-6__QF75g.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Le3l0qS2.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, t as SqliteSettingsBackend } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
@@ -29,7 +29,7 @@ import { accessSync, constants, existsSync, mkdirSync, readFileSync } from "node
 import * as path$39 from "node:path";
 import { dirname, isAbsolute, join, posix, resolve, win32 } from "node:path";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
-import { asJsonObject, parseJsonUnknown } from "@camstack/types/addon";
+import { asJsonObject, errMsg, parseJsonUnknown } from "@camstack/types/addon";
 import { execFile, spawn } from "node:child_process";
 import * as util$10 from "node:util";
 import { promisify } from "node:util";
@@ -176,7 +176,7 @@ function proxyToUpstream(opts) {
 }
 //#endregion
 //#region src/python/python-env-manager.ts
-var execFileAsync$3 = promisify(execFile);
+var execFileAsync$4 = promisify(execFile);
 var PythonEnvManager = class {
 	venvPath;
 	cachedProbe = null;
@@ -186,12 +186,12 @@ var PythonEnvManager = class {
 	async probe() {
 		if (this.cachedProbe) return this.cachedProbe;
 		for (const cmd of ["python3", "python"]) try {
-			const { stdout } = await execFileAsync$3(cmd, ["--version"]);
+			const { stdout } = await execFileAsync$4(cmd, ["--version"]);
 			const version = stdout.trim().replace("Python ", "");
 			const major = parseInt(version.split(".")[0] ?? "0", 10);
 			const minor = parseInt(version.split(".")[1] ?? "0", 10);
 			if (major < 3 || major === 3 && minor < 10) continue;
-			const { stdout: pathOut } = await execFileAsync$3(cmd, ["-c", "import sys; print(sys.executable)"]);
+			const { stdout: pathOut } = await execFileAsync$4(cmd, ["-c", "import sys; print(sys.executable)"]);
 			this.cachedProbe = {
 				available: true,
 				version,
@@ -207,13 +207,13 @@ var PythonEnvManager = class {
 	async ensure(options) {
 		const probe = await this.probe();
 		if (!probe.available || !probe.path) throw new Error("Python 3.10+ is required but not found on this system");
-		if (!fs$17.existsSync(path$39.join(this.venvPath, "bin", "python"))) await execFileAsync$3(probe.path, [
+		if (!fs$17.existsSync(path$39.join(this.venvPath, "bin", "python"))) await execFileAsync$4(probe.path, [
 			"-m",
 			"venv",
 			this.venvPath
 		]);
 		const venvPython = path$39.join(this.venvPath, "bin", "python");
-		if (options.packages.length > 0) await execFileAsync$3(venvPython, [
+		if (options.packages.length > 0) await execFileAsync$4(venvPython, [
 			"-m",
 			"pip",
 			"install",
@@ -1684,7 +1684,7 @@ function matchPath(pattern, path) {
 }
 //#endregion
 //#region src/tls/cert-manager.ts
-var execFileAsync$2 = promisify(execFile);
+var execFileAsync$3 = promisify(execFile);
 /**
 * Ensure a self-signed TLS certificate exists in the given directory.
 * Generates one if missing. Returns paths to cert and key files.
@@ -1721,7 +1721,7 @@ async function ensureTlsCert(dataDir, options) {
 	for (const dns of sanDns) sanParts.push(`DNS:${dns}`);
 	for (const ip of sanIps) sanParts.push(`IP:${ip}`);
 	const sanString = sanParts.join(",");
-	await execFileAsync$2("openssl", [
+	await execFileAsync$3("openssl", [
 		"req",
 		"-x509",
 		"-newkey",
@@ -2589,7 +2589,7 @@ var AddonEngineManager = class {
 };
 //#endregion
 //#region src/kernel/fs-utils.ts
-var execFileAsync$1 = promisify(execFile);
+var execFileAsync$2 = promisify(execFile);
 /**
 * Ensure a directory exists (recursive).
 * Single source of truth — replaces scattered mkdirSync calls.
@@ -2773,7 +2773,7 @@ function ensureLibraryBuilt(packageName, packagesDir) {
 async function installPackageFromNpm(packageName, targetDir) {
 	const tmpDir = await fs$17.promises.mkdtemp(path$39.join(os$18.tmpdir(), "camstack-install-"));
 	try {
-		const { stdout } = await execFileAsync$1("npm", [
+		const { stdout } = await execFileAsync$2("npm", [
 			"pack",
 			packageName,
 			"--pack-destination",
@@ -2787,7 +2787,7 @@ async function installPackageFromNpm(packageName, targetDir) {
 		const tgzPath = path$39.join(tmpDir, tgzFilename);
 		const extractDir = path$39.join(tmpDir, "extracted");
 		ensureDir(extractDir);
-		await execFileAsync$1("tar", [
+		await execFileAsync$2("tar", [
 			"-xzf",
 			tgzPath,
 			"-C",
@@ -3022,6 +3022,268 @@ var AddonManifest = class {
 	}
 };
 //#endregion
+//#region src/kernel/deps/ensure-native-prebuilds.ts
+/**
+* `ensureNativePrebuilds` — the post-install native-prebuild ENSURE step the
+* shared `RootUpdateService` runs while staging a `@camstack/server` closure,
+* BEFORE its `findMissingNativePrebuilds` validator (in `@camstack/node-root`)
+* decides whether to arm the swap.
+*
+* Why this exists (Mac desktop incident, 2026-07-21): a runtime
+* `applyServerUpdate` on a packaged desktop stages the closure with
+* `npm install @camstack/server@X` under the app's BUNDLED bare Node. The one
+* TRADITIONAL (non-N-API) native, `better-sqlite3`, resolves its `.node` via
+* its `install` script `prebuild-install || node-gyp rebuild`. On a user's Mac
+* with no build toolchain (and where the auto `prebuild-install` does not
+* target the bundled Node's ABI/arch the way the DMG build's EXPLICIT
+* `prebuild-install --runtime node --target <bundled> --arch <arch>` call does)
+* that leaves the module SOURCE-ONLY → the closure has no `better-sqlite3`
+* `.node` → the validator refuses the swap ("staged closure missing native
+* prebuilds: better-sqlite3"). The docker image never hits this: its Node ABI
+* has a published prebuild the auto path fetches cleanly, and it carries a
+* build toolchain fallback.
+*
+* This mirrors the DMG build's explicit re-fetch (`scripts/stage-deps.mjs`)
+* into the runtime staging path: for each traditional native that is present
+* in the closure but missing its compiled `.node`, fetch the prebuild for the
+* RUNNING Node ABI/arch (the same Node that will load the swapped closure).
+*
+* N-API natives (`sharp`, `node-av`) are ABI-stable and ship their binaries as
+* platform SIBLING packages that npm fetches reliably with no compile step, so
+* they are not in scope here — a genuine miss there is a broken install the
+* validator should still reject, not something a prebuild re-fetch can heal.
+*
+* Injected into the update service from the construction site so the zero-dep
+* `@camstack/node-root` layer never depends on npm/@camstack/system, and the
+* fetch is unit-testable with a fake fetcher.
+*/
+var execFileAsync$1 = promisify(execFile);
+/** Bounded recursive `.node` scan depth inside a module dir. */
+var NATIVE_SCAN_DEPTH = 4;
+/** Timeout for a single `prebuild-install` fetch. */
+var PREBUILD_FETCH_TIMEOUT_MS = 12e4;
+/**
+* Traditional (compile-or-prebuild) natives an installed closure must carry a
+* `.node` for. Only these are ENSURE-able by a prebuild re-fetch; N-API natives
+* are excluded (see file header).
+*/
+var TRADITIONAL_NATIVE_PACKAGES = ["better-sqlite3"];
+/** Bounded recursive scan for ANY `*.node` file under `dir`. */
+function hasDotNode(dir, maxDepth) {
+	let entries;
+	try {
+		entries = fs$17.readdirSync(dir, { withFileTypes: true });
+	} catch {
+		return false;
+	}
+	for (const entry of entries) if (entry.isFile() && entry.name.endsWith(".node")) return true;
+	if (maxDepth <= 0) return false;
+	for (const entry of entries) if (entry.isDirectory() && hasDotNode(path$39.join(dir, entry.name), maxDepth - 1)) return true;
+	return false;
+}
+/** Locate the bundled `prebuild-install` bin.js inside the staged closure. */
+function resolvePrebuildInstallBin(closureDir, moduleDir) {
+	return [path$39.join(moduleDir, "node_modules", "prebuild-install", "bin.js"), path$39.join(closureDir, "node_modules", "prebuild-install", "bin.js")].find((c) => fs$17.existsSync(c)) ?? null;
+}
+/**
+* Default fetcher: run the closure's own `prebuild-install` under the CURRENT
+* Node (`process.execPath`) — no reliance on `npx`/`npm` on PATH (a packaged
+* app ships a bare Node). Explicitly targets the running ABI/arch, mirroring
+* `scripts/stage-deps.mjs`.
+*/
+function makeDefaultFetch(closureDir, logger) {
+	return async (moduleDir, target) => {
+		const bin = resolvePrebuildInstallBin(closureDir, moduleDir);
+		if (bin === null) throw new Error(`prebuild-install not found in the staged closure for ${moduleDir}`);
+		logger.info("fetching native prebuild via prebuild-install", { meta: {
+			moduleDir,
+			bin,
+			nodeVersion: target.nodeVersion,
+			arch: target.arch
+		} });
+		await execFileAsync$1(process.execPath, [
+			bin,
+			"--runtime",
+			"node",
+			"--target",
+			target.nodeVersion,
+			"--arch",
+			target.arch
+		], {
+			cwd: moduleDir,
+			timeout: PREBUILD_FETCH_TIMEOUT_MS
+		});
+	};
+}
+/**
+* Ensure every traditional native in `<closureDir>/node_modules` carries its
+* compiled `.node`, fetching the prebuild for the running ABI when missing.
+*
+* A NO-OP when nothing is missing (docker / tests) and when a native package is
+* absent from the closure. Never throws for a single package's fetch failure —
+* it logs and continues so the downstream `findMissingNativePrebuilds`
+* validator makes the final swap/abort decision. Returns the packages whose
+* prebuild was successfully fetched (for logging/tests).
+*/
+async function ensureNativePrebuilds(closureDir, options) {
+	const nm = path$39.join(closureDir, "node_modules");
+	const target = options.target ?? {
+		nodeVersion: process.versions.node,
+		arch: process.arch
+	};
+	const packages = options.packages ?? TRADITIONAL_NATIVE_PACKAGES;
+	const fetchPrebuild = options.fetchPrebuild ?? makeDefaultFetch(closureDir, options.logger);
+	const fetched = [];
+	for (const pkg of packages) {
+		const moduleDir = path$39.join(nm, pkg);
+		if (!fs$17.existsSync(moduleDir)) continue;
+		if (hasDotNode(moduleDir, 4)) continue;
+		options.logger.warn("staged closure native prebuild missing — fetching for running ABI", { meta: {
+			pkg,
+			moduleDir,
+			nodeVersion: target.nodeVersion,
+			arch: target.arch
+		} });
+		try {
+			await fetchPrebuild(moduleDir, target);
+		} catch (err) {
+			options.logger.error("native prebuild fetch failed (validator will decide)", { meta: {
+				pkg,
+				error: errMsg(err)
+			} });
+			continue;
+		}
+		if (hasDotNode(moduleDir, 4)) {
+			fetched.push(pkg);
+			options.logger.info("native prebuild fetched", { meta: { pkg } });
+		} else options.logger.error("native prebuild still missing after fetch", { meta: { pkg } });
+	}
+	return fetched;
+}
+//#endregion
+//#region src/kernel/deps/ensure-addon-natives.ts
+/**
+* `ensureAddonNativePrebuilds` — the POST-install native-prebuild ENSURE pass an
+* addon install runs on the INSTALLED addon dir AFTER `npm install`.
+*
+* Why this exists (Mac desktop first-boot FATAL, 2026-07-21): `installCopy`
+* copies `dist/`, plants prebuilt natives from the bundled addon copy
+* (`copyBundledNativeModules`), then `npm install`s the addon's runtime deps.
+* On a TOOLCHAIN-LESS host that `npm install` RE-CREATES the traditional native
+* `better-sqlite3` SOURCE-ONLY — clobbering the good `.node` the pre-install
+* copy just planted — and the runner later dies at addon init with a cryptic
+* "Could not locate the bindings file". The copy-BEFORE-install fix was
+* empirically insufficient: npm's own install in the copied dir replaces the
+* satisfied dep without its binary.
+*
+* This pass runs LAST, so it always sees the final on-disk state npm left, and
+* per referenced traditional native still lacking its compiled `.node`:
+*   1. bundled-copy first — if the bundled addon copy carries the matching
+*      `.node` (same machine → same platform/arch/ABI), re-plant it DIRECTLY.
+*      Cheapest + offline-safe; runs BEFORE any network fetch.
+*   2. fetch fallback — otherwise fetch the prebuild for the running ABI via the
+*      shared `ensureNativePrebuilds` pointed at the addon dir.
+*   3. FAIL LOUD — if the native is STILL source-only after both, log a clear
+*      error naming module + addon and THROW so the install fails at install
+*      time rather than at addon init.
+*
+* N-API natives (`sharp`, `node-av`) ship their binaries as ABI-stable platform
+* SIBLING packages npm fetches without a compile step, so they are excluded from
+* the default set — a miss there is a broken install, not something a prebuild
+* re-fetch heals (same rationale as `ensureNativePrebuilds`).
+*/
+/**
+* Re-plant `<srcModuleDir>` → `<dstModuleDir>` when the source carries a `.node`.
+* Returns whether the destination ends up with a compiled binary.
+*/
+function replantFromBundled(srcModuleDir, dstModuleDir, hasNative) {
+	if (!hasNative(srcModuleDir)) return false;
+	try {
+		fs$17.rmSync(dstModuleDir, {
+			recursive: true,
+			force: true
+		});
+		fs$17.mkdirSync(path$39.dirname(dstModuleDir), { recursive: true });
+		fs$17.cpSync(srcModuleDir, dstModuleDir, {
+			recursive: true,
+			dereference: true
+		});
+	} catch {
+		return false;
+	}
+	return hasNative(dstModuleDir);
+}
+/**
+* Ensure every referenced traditional native in `<addonDir>/node_modules`
+* carries its compiled `.node` after the addon's `npm install`. Bundled-copy
+* first (offline), prebuild-fetch fallback, LOUD throw on a residual miss.
+*
+* SKIPS a native absent from the addon's own `node_modules` (it resolves via a
+* hoisted host copy — not this addon's concern). A NO-OP in docker / dev where
+* npm produced a working `.node` (already-present). Returns the per-native
+* outcomes for logging/tests.
+*
+* @throws if any required native is still source-only after copy + fetch.
+*/
+async function ensureAddonNativePrebuilds(addonDir, options) {
+	const packages = options.packages ?? TRADITIONAL_NATIVE_PACKAGES;
+	const hasNative = options.hasNative ?? ((dir) => hasDotNode(dir, 4));
+	const nm = path$39.join(addonDir, "node_modules");
+	const results = [];
+	const missing = [];
+	for (const pkg of packages) {
+		const moduleDir = path$39.join(nm, pkg);
+		if (!fs$17.existsSync(moduleDir)) continue;
+		if (hasNative(moduleDir)) {
+			results.push({
+				pkg,
+				outcome: "already-present"
+			});
+			continue;
+		}
+		if (options.bundledSourceDir) {
+			const src = path$39.join(options.bundledSourceDir, "node_modules", pkg);
+			if (replantFromBundled(src, moduleDir, hasNative)) {
+				options.logger.info("addon native prebuild re-planted from bundled copy (offline)", { meta: {
+					addon: options.addonName,
+					pkg,
+					src,
+					moduleDir
+				} });
+				results.push({
+					pkg,
+					outcome: "copied"
+				});
+				continue;
+			}
+		}
+		if ((await ensureNativePrebuilds(addonDir, {
+			logger: options.logger,
+			packages: [pkg],
+			...options.target ? { target: options.target } : {},
+			...options.fetchPrebuild ? { fetchPrebuild: options.fetchPrebuild } : {}
+		})).includes(pkg)) {
+			results.push({
+				pkg,
+				outcome: "fetched"
+			});
+			continue;
+		}
+		options.logger.error("addon native prebuild MISSING after ensure — module has no compiled .node", { meta: {
+			addon: options.addonName,
+			pkg,
+			moduleDir
+		} });
+		results.push({
+			pkg,
+			outcome: "missing"
+		});
+		missing.push(pkg);
+	}
+	if (missing.length > 0) throw new Error(`${options.addonName} — required native module(s) missing a compiled .node after install (bundled-copy + prebuild-fetch both failed): ${missing.join(", ")}`);
+	return results;
+}
+//#endregion
 //#region src/kernel/addon-installer.ts
 var execFileAsync = promisify(execFile);
 function parseInstallSource(value) {
@@ -3310,6 +3572,7 @@ var AddonInstaller = class AddonInstaller {
 		await fs$17.promises.writeFile(path$39.join(targetDir, "package.json"), JSON.stringify(stripBundledDeps(pkgData), null, 2));
 		await copyDirRecursive(distDir, path$39.join(targetDir, "dist"));
 		await copyExtraFileDirs(pkgData, sourceDir, targetDir);
+		copyBundledNativeModules(sourceDir, targetDir, this.logger);
 		await fs$17.promises.writeFile(path$39.join(targetDir, ".install-source"), "local");
 		const localPkgVersion = asString$1(pkgData.version, "0.0.0");
 		this.manifest.upsert(packageName, {
@@ -3331,6 +3594,11 @@ var AddonInstaller = class AddonInstaller {
 		} catch (err) {
 			this.logger.warn(`${packageName} — native deps install failed (continuing)`, { meta: { error: errMsg$1(err) } });
 		}
+		await ensureAddonNativePrebuilds(targetDir, {
+			addonName: packageName,
+			logger: this.logger,
+			bundledSourceDir: sourceDir
+		});
 		this.logger.info(`${packageName} — copied from ${sourceDir}`);
 		return {
 			name: pkgData.name,
@@ -3517,6 +3785,10 @@ var AddonInstaller = class AddonInstaller {
 			} catch (nativeErr) {
 				throw new Error(`${pkgView.name} — native deps install failed: ${errMsg$1(nativeErr)}`, { cause: nativeErr });
 			}
+			await ensureAddonNativePrebuilds(pkgDir, {
+				addonName: pkgView.name,
+				logger: this.logger
+			});
 			await this.evictInstallDir(targetDir);
 			ensureDir(path$39.dirname(targetDir));
 			await fs$17.promises.rename(pkgDir, targetDir);
@@ -93389,4 +93661,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterEventTopic, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensurePython, ensureTlsCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runNpm, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, setNodeEventInterest, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterEventTopic, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runNpm, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, setNodeEventInterest, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };

package/dist/kernel/deps/ensure-addon-natives.d.ts

@@ -0,0 +1,41 @@
+import { IScopedLogger } from '@camstack/types';
+import { PrebuildFetchFn, PrebuildTarget } from './ensure-native-prebuilds.js';
+/** Per-native outcome of the ensure pass. */
+export type NativeEnsureOutcome = 'already-present' | 'copied' | 'fetched' | 'missing';
+export interface NativeEnsureResult {
+    readonly pkg: string;
+    readonly outcome: NativeEnsureOutcome;
+}
+export interface EnsureAddonNativePrebuildsOptions {
+    /** Addon package name — for loud error messages naming module + addon. */
+    readonly addonName: string;
+    readonly logger: IScopedLogger;
+    /**
+     * Bundled addon copy dir (the `installCopy` `sourceDir` / a
+     * `CAMSTACK_BUNDLED_ADDONS_DIR/<addon>` copy) whose own
+     * `node_modules/<pkg>` may carry a prebuilt `.node` for THIS machine.
+     * Copied in directly before any network fetch. Absent on the npm/tgz path.
+     */
+    readonly bundledSourceDir?: string;
+    /** Running ABI/arch the fetched prebuild must match. Defaults to the process. */
+    readonly target?: PrebuildTarget;
+    /** Native package set. Defaults to `TRADITIONAL_NATIVE_PACKAGES`. */
+    readonly packages?: readonly string[];
+    /** Override the fetcher (tests). Production uses the bundled `prebuild-install`. */
+    readonly fetchPrebuild?: PrebuildFetchFn;
+    /** Override the `.node` presence scan (tests). */
+    readonly hasNative?: (moduleDir: string) => boolean;
+}
+/**
+ * Ensure every referenced traditional native in `<addonDir>/node_modules`
+ * carries its compiled `.node` after the addon's `npm install`. Bundled-copy
+ * first (offline), prebuild-fetch fallback, LOUD throw on a residual miss.
+ *
+ * SKIPS a native absent from the addon's own `node_modules` (it resolves via a
+ * hoisted host copy — not this addon's concern). A NO-OP in docker / dev where
+ * npm produced a working `.node` (already-present). Returns the per-native
+ * outcomes for logging/tests.
+ *
+ * @throws if any required native is still source-only after copy + fetch.
+ */
+export declare function ensureAddonNativePrebuilds(addonDir: string, options: EnsureAddonNativePrebuildsOptions): Promise<readonly NativeEnsureResult[]>;

package/dist/kernel/deps/ensure-native-prebuilds.d.ts

@@ -0,0 +1,40 @@
+import { IScopedLogger } from '@camstack/types';
+/** Bounded recursive `.node` scan depth inside a module dir. */
+export declare const NATIVE_SCAN_DEPTH = 4;
+/**
+ * Traditional (compile-or-prebuild) natives an installed closure must carry a
+ * `.node` for. Only these are ENSURE-able by a prebuild re-fetch; N-API natives
+ * are excluded (see file header).
+ */
+export declare const TRADITIONAL_NATIVE_PACKAGES: readonly string[];
+/** The running Node ABI/arch the fetched prebuild must match. */
+export interface PrebuildTarget {
+    /** Node version, e.g. `process.versions.node` (`24.16.0`). */
+    readonly nodeVersion: string;
+    /** CPU arch, e.g. `process.arch` (`arm64` | `x64`). */
+    readonly arch: string;
+}
+/** Fetch a `<moduleDir>`'s prebuild for `target`. Test seam. */
+export type PrebuildFetchFn = (moduleDir: string, target: PrebuildTarget) => Promise<void>;
+export interface EnsureNativePrebuildsOptions {
+    readonly logger: IScopedLogger;
+    /** Defaults to the running process (`process.versions.node` / `process.arch`). */
+    readonly target?: PrebuildTarget;
+    /** Override the native package set (tests). */
+    readonly packages?: readonly string[];
+    /** Override the fetcher (tests). Production uses the bundled `prebuild-install`. */
+    readonly fetchPrebuild?: PrebuildFetchFn;
+}
+/** Bounded recursive scan for ANY `*.node` file under `dir`. */
+export declare function hasDotNode(dir: string, maxDepth: number): boolean;
+/**
+ * Ensure every traditional native in `<closureDir>/node_modules` carries its
+ * compiled `.node`, fetching the prebuild for the running ABI when missing.
+ *
+ * A NO-OP when nothing is missing (docker / tests) and when a native package is
+ * absent from the closure. Never throws for a single package's fetch failure —
+ * it logs and continues so the downstream `findMissingNativePrebuilds`
+ * validator makes the final swap/abort decision. Returns the packages whose
+ * prebuild was successfully fetched (for logging/tests).
+ */
+export declare function ensureNativePrebuilds(closureDir: string, options: EnsureNativePrebuildsOptions): Promise<readonly string[]>;

package/dist/kernel/deps/manifest-native-deps.d.ts

@@ -23,3 +23,20 @@ import { IScopedLogger } from '@camstack/types';
  *     otherwise).
  */
 export declare function installManifestNativeDeps(addonDir: string, pkgRaw: Record<string, unknown>, logger: IScopedLogger, registry?: string, npmCacheDir?: string): Promise<void>;
+/**
+ * Propagate PREBUILT native modules from a bundled addon copy's own
+ * `node_modules` (the packaged-desktop 'local' source at
+ * `<resources>/addons/<addon>`) into the freshly-copied target
+ * (`<data>/addons/@camstack/<addon>`), BEFORE the target's `npm install` runs.
+ *
+ * Why (Mac desktop first-boot FATAL, 2026-07-21): `installCopy` copies only
+ * `dist/` then `npm install`s the addon's runtime deps. On a toolchain-less Mac
+ * that install leaves the traditional native `better-sqlite3` SOURCE-ONLY in
+ * `<addon>/node_modules` — a broken copy that then SHADOWS the good hoisted
+ * `.node` NODE_PATH would otherwise resolve, crashing the runner with "Could
+ * not locate the bindings file". Seeding the prebuilt copy here makes the npm
+ * install treat the native as satisfied (no re-run of `prebuild-install`), so
+ * the good `.node` stays in place. A no-op in dev / docker where the source
+ * carries no bundled natives.
+ */
+export declare function copyBundledNativeModules(sourceDir: string, targetDir: string, logger: IScopedLogger): void;

package/dist/{manifest-python-deps-s_-uULmp.mjs → manifest-python-deps-6__QF75g.mjs}

@@ -1,4 +1,4 @@
-import { q as readNodePin } from "./dist-DTTTjPCL.mjs";
+import { q as readNodePin } from "./dist-72yufD8v.mjs";
 import { ensureBinary, ensureFfmpeg, ensurePython, installPythonPackages, installPythonRequirements } from "@camstack/types/node";
 import { createServer } from "node:http";
 import * as fs from "node:fs";
@@ -437,6 +437,92 @@ function copyPrebuiltNativeDep(name, addonDir, logger) {
 	}
 	return false;
 }
+/**
+* Native packages the packaged desktop ships PREBUILT inside each bundled addon
+* copy (`scripts/stage-deps.mjs` plants them), keyed to the platform SIBLING
+* scopes that hold the N-API binary. The traditional `better-sqlite3` carries
+* its `.node` in its own dir; `sharp`/`node-av` carry it in a `@img`/`@seydx`
+* sibling.
+*/
+var BUNDLED_NATIVE_SIBLING_SCOPES = {
+	"better-sqlite3": [],
+	sharp: ["@img"],
+	"node-av": ["@seydx"]
+};
+/** Bounded recursive scan for ANY `*.node` under `dir`. */
+function hasAnyDotNode(dir, maxDepth) {
+	let entries;
+	try {
+		entries = fs.readdirSync(dir, { withFileTypes: true });
+	} catch {
+		return false;
+	}
+	for (const entry of entries) if (entry.isFile() && entry.name.endsWith(".node")) return true;
+	if (maxDepth <= 0) return false;
+	for (const entry of entries) if (entry.isDirectory() && hasAnyDotNode(path$1.join(dir, entry.name), maxDepth - 1)) return true;
+	return false;
+}
+/** Copy `<src>` → `<dst>` when `<src>` carries a `.node`. Best-effort. */
+function copyPrebuiltModuleDir(src, dst, label, logger) {
+	if (!hasAnyDotNode(src, 5)) return;
+	if (hasAnyDotNode(dst, 5)) return;
+	try {
+		fs.rmSync(dst, {
+			recursive: true,
+			force: true
+		});
+		fs.mkdirSync(path$1.dirname(dst), { recursive: true });
+		fs.cpSync(src, dst, {
+			recursive: true,
+			dereference: true
+		});
+		logger.info("Prebuilt native module propagated from bundled addon copy", { meta: {
+			module: label,
+			src,
+			dst
+		} });
+	} catch (err) {
+		logger.warn("Prebuilt native module propagation failed (npm install will retry)", { meta: {
+			module: label,
+			src,
+			error: errMsg(err)
+		} });
+	}
+}
+/**
+* Propagate PREBUILT native modules from a bundled addon copy's own
+* `node_modules` (the packaged-desktop 'local' source at
+* `<resources>/addons/<addon>`) into the freshly-copied target
+* (`<data>/addons/@camstack/<addon>`), BEFORE the target's `npm install` runs.
+*
+* Why (Mac desktop first-boot FATAL, 2026-07-21): `installCopy` copies only
+* `dist/` then `npm install`s the addon's runtime deps. On a toolchain-less Mac
+* that install leaves the traditional native `better-sqlite3` SOURCE-ONLY in
+* `<addon>/node_modules` — a broken copy that then SHADOWS the good hoisted
+* `.node` NODE_PATH would otherwise resolve, crashing the runner with "Could
+* not locate the bindings file". Seeding the prebuilt copy here makes the npm
+* install treat the native as satisfied (no re-run of `prebuild-install`), so
+* the good `.node` stays in place. A no-op in dev / docker where the source
+* carries no bundled natives.
+*/
+function copyBundledNativeModules(sourceDir, targetDir, logger) {
+	const srcNm = path$1.join(sourceDir, "node_modules");
+	if (!fs.existsSync(srcNm)) return;
+	const dstNm = path$1.join(targetDir, "node_modules");
+	for (const [name, scopes] of Object.entries(BUNDLED_NATIVE_SIBLING_SCOPES)) {
+		copyPrebuiltModuleDir(path$1.join(srcNm, name), path$1.join(dstNm, name), name, logger);
+		for (const scope of scopes) {
+			const scopeSrc = path$1.join(srcNm, scope);
+			let siblings;
+			try {
+				siblings = fs.readdirSync(scopeSrc);
+			} catch {
+				continue;
+			}
+			for (const sibling of siblings) copyPrebuiltModuleDir(path$1.join(scopeSrc, sibling), path$1.join(dstNm, scope, sibling), `${scope}/${sibling}`, logger);
+		}
+	}
+}
 /** A package dir is "built" when it carries a compiled `.node` or a prebuilds tree. */
 function hasBuiltBinary(pkgDir) {
 	if (!fs.existsSync(path$1.join(pkgDir, "package.json"))) return false;
@@ -7320,4 +7406,4 @@ async function installManifestPythonDeps(declaration, addonDir, deps, logger) {
 	await deps.installPythonRequirements(reqAbs);
 }
 //#endregion
-export { buildNativeCapProxy as $, createHubCapForwardService as A, AGENT_CAP_FWD_ACTION as B, brokerTransportLink as C, createAddonDataPlaneFacility as Ct, localProviderLink as D, ipcParentLink as E, createUdsLogger as F, callWithServiceDiscovery as G, CapRouteResolver as H, createUdsLoggerWithControl as I, UdsLocalTransportServer as J, createLocalTransport as K, LocalChildClient as L, createUdsEventBridge as M, createUdsEventBus as N, HUB_CAP_FWD_ACTION as O, udsChildLogToWorkerEntry as P, encodeFrame as Q, LocalChildRegistry as R, brokerCallForCap as S, resolveAddonClass as St, ipcChildLink as T, CapRouteError as U, AGENT_CAP_FWD_SERVICE as V, classifyCapRoute as W, localEndpointPath as X, SocketChannel as Y, FrameDecoder as Z, createKernelHwAccel as _, CapabilityHandle as _t, getWorkerDeviceRegistry as a, setWorkerNativeCapsChangeListener as at, __resetCapUsageRegistryForTests as b, resolveNpmInvocation as bt, setHubConnected as c, NATIVE_PROVIDER_SERVICE_INFIX as ct, getBrokerEventBus as d, capBareAction as dt, buildUdsNativeCapProxy as et, getMoleculerEventStats as f, capServiceName as ft, AddonDepsManager as g, DeviceRegistry as gt, subscribePassthrough as h, serializeTypedArrays as ht, createUdsAddonContext as i, mountNativeCapService as it, createParentUnownedCallHandler as j, HUB_CAP_FWD_SERVICE as k, EVENT_TOPIC_PREFIX as l, capActionName as lt, setNodeEventInterest as m, deserializeTypedArrays as mt, adaptBrokerToCluster as n, getWorkerNativeCapProvider as nt, getOrInitReadinessRegistry as o, createAddonService as ot, registerEventBusService as p, parseCapAction as pt, UdsLocalTransportClient as q, createAddonContext as r, getWorkerNativeCapSnapshot as rt, getOrInitReadinessRegistryForClient as s, validateProviderRegistrations as st, installManifestPythonDeps as t, createBrokerDeviceManagerApi as tt, clusterEventTopic as u, capActionSuffix as ut, resolveHwAccel as v, CapabilityUnavailableError as vt, buildLinkChain as w, getCapUsageRegistry as x, runNpm as xt, CapUsageRegistry as y, installManifestNativeDeps as yt, UDS_NO_ROUTE_PREFIX as z };
+export { buildNativeCapProxy as $, createHubCapForwardService as A, AGENT_CAP_FWD_ACTION as B, brokerTransportLink as C, resolveAddonClass as Ct, localProviderLink as D, ipcParentLink as E, createUdsLogger as F, callWithServiceDiscovery as G, CapRouteResolver as H, createUdsLoggerWithControl as I, UdsLocalTransportServer as J, createLocalTransport as K, LocalChildClient as L, createUdsEventBridge as M, createUdsEventBus as N, HUB_CAP_FWD_ACTION as O, udsChildLogToWorkerEntry as P, encodeFrame as Q, LocalChildRegistry as R, brokerCallForCap as S, runNpm as St, ipcChildLink as T, CapRouteError as U, AGENT_CAP_FWD_SERVICE as V, classifyCapRoute as W, localEndpointPath as X, SocketChannel as Y, FrameDecoder as Z, createKernelHwAccel as _, CapabilityHandle as _t, getWorkerDeviceRegistry as a, setWorkerNativeCapsChangeListener as at, __resetCapUsageRegistryForTests as b, installManifestNativeDeps as bt, setHubConnected as c, NATIVE_PROVIDER_SERVICE_INFIX as ct, getBrokerEventBus as d, capBareAction as dt, buildUdsNativeCapProxy as et, getMoleculerEventStats as f, capServiceName as ft, AddonDepsManager as g, DeviceRegistry as gt, subscribePassthrough as h, serializeTypedArrays as ht, createUdsAddonContext as i, mountNativeCapService as it, createParentUnownedCallHandler as j, HUB_CAP_FWD_SERVICE as k, EVENT_TOPIC_PREFIX as l, capActionName as lt, setNodeEventInterest as m, deserializeTypedArrays as mt, adaptBrokerToCluster as n, getWorkerNativeCapProvider as nt, getOrInitReadinessRegistry as o, createAddonService as ot, registerEventBusService as p, parseCapAction as pt, UdsLocalTransportClient as q, createAddonContext as r, getWorkerNativeCapSnapshot as rt, getOrInitReadinessRegistryForClient as s, validateProviderRegistrations as st, installManifestPythonDeps as t, createBrokerDeviceManagerApi as tt, clusterEventTopic as u, capActionSuffix as ut, resolveHwAccel as v, CapabilityUnavailableError as vt, buildLinkChain as w, createAddonDataPlaneFacility as wt, getCapUsageRegistry as x, resolveNpmInvocation as xt, CapUsageRegistry as y, copyBundledNativeModules as yt, UDS_NO_ROUTE_PREFIX as z };