@camstack/system 1.2.29 → 1.2.30

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { A as extractNestedAddonId, At as scopeKey, Dt as parseJsonUnknown$1, Et as parseJsonObject, F as isObjectInput, G as objectInputDeclaresAddonId, H as looseSchema, I as isVoidInput, J as procedureAuthKey, L as kebabToCamel, Mt as EventCategory$1, N as isArrayOutputSchema, Ot as readinessKey, P as isCollectionArrayMethod, R as lifecycleJobSchema, St as expandCapMethods, V as logLevelAtMost, _t as asNumber, at as errMsg$1, bt as emitDownForOwnedCaps, c as RUNTIME_DEFAULTS, ct as DEVICE_SETTINGS_CONTRIBUTION_METHODS, gt as asJsonObject$1, kt as resolveCapMount, lt as DEVICE_STATUS_METHOD, m as addonSettingsCapability, mt as ReadinessTimeoutError, pt as ReadinessRegistry, s as METHOD_ACCESS_MAP, st as DATAPLANE_SECRET_HEADER$1, t as ALL_CAPABILITY_DEFINITIONS, vt as asString$1, yt as createEvent } from "./dist-B7hOpr5i.mjs";
+import { A as extractNestedAddonId, At as scopeKey, Dt as parseJsonUnknown$1, Et as parseJsonObject, F as isObjectInput, G as objectInputDeclaresAddonId, H as looseSchema, I as isVoidInput, J as procedureAuthKey, L as kebabToCamel, Mt as EventCategory$1, N as isArrayOutputSchema, Ot as readinessKey, P as isCollectionArrayMethod, R as lifecycleJobSchema, St as expandCapMethods, V as logLevelAtMost, _t as asNumber, at as errMsg$1, bt as emitDownForOwnedCaps, c as RUNTIME_DEFAULTS, ct as DEVICE_SETTINGS_CONTRIBUTION_METHODS, gt as asJsonObject$1, kt as resolveCapMount, lt as DEVICE_STATUS_METHOD, m as addonSettingsCapability, mt as ReadinessTimeoutError, pt as ReadinessRegistry, s as METHOD_ACCESS_MAP, st as DATAPLANE_SECRET_HEADER$1, t as ALL_CAPABILITY_DEFINITIONS, vt as asString$1, yt as createEvent } from "./dist-Dr_P0DOB.mjs";
 import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-Cp9f4dk6.mjs";
 import { $ as buildNativeCapProxy, A as createHubCapForwardService, B as AGENT_CAP_FWD_ACTION, C as brokerTransportLink, Ct as resolveAddonClass, D as localProviderLink, E as ipcParentLink, F as createUdsLogger, G as callWithServiceDiscovery, H as CapRouteResolver, I as createUdsLoggerWithControl, J as UdsLocalTransportServer, K as createLocalTransport, L as LocalChildClient, M as createUdsEventBridge, N as createUdsEventBus, O as HUB_CAP_FWD_ACTION, P as udsChildLogToWorkerEntry, Q as encodeFrame, R as LocalChildRegistry, S as brokerCallForCap, St as runNpm, T as ipcChildLink, U as CapRouteError, V as AGENT_CAP_FWD_SERVICE, W as classifyCapRoute, X as localEndpointPath, Y as SocketChannel, Z as FrameDecoder, _ as createKernelHwAccel, _t as CapabilityHandle, a as getWorkerDeviceRegistry, b as __resetCapUsageRegistryForTests, bt as installManifestNativeDeps, c as setHubConnected, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dt as capBareAction, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, ft as capServiceName, g as AddonDepsManager, gt as DeviceRegistry, h as subscribePassthrough, ht as serializeTypedArrays, i as createUdsAddonContext, it as mountNativeCapService, j as createParentUnownedCallHandler, k as HUB_CAP_FWD_SERVICE, l as EVENT_TOPIC_PREFIX, lt as capActionName, m as setNodeEventInterest, mt as deserializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as createAddonService, p as registerEventBusService, pt as parseCapAction, q as UdsLocalTransportClient, r as createAddonContext, s as getOrInitReadinessRegistryForClient, st as validateProviderRegistrations, t as installManifestPythonDeps, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, ut as capActionSuffix, v as resolveHwAccel, vt as CapabilityUnavailableError, w as buildLinkChain, wt as createAddonDataPlaneFacility, x as getCapUsageRegistry, xt as resolveNpmInvocation, y as CapUsageRegistry, yt as copyBundledNativeModules, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-Ck4-9K9m.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BkP504Vq.mjs";
@@ -3566,6 +3566,25 @@ function readPackageJson(pkgJsonPath) {
 		camstackAddons: Array.isArray(addonsField) ? addonsField : null
 	};
 }
+/**
+* Should the bootstrap SKIP seeding `packageName` into /data/addons?
+*
+* True only for the package the closure provides, and only when it actually
+* resolves. Both halves are load-bearing:
+*
+*  - seeding a copy the closure already provides creates one that WINS over
+*    the closure and is never refreshed (bootstrap is seed-only, and
+*    `camstack deploy` of a framework package is rejected on an image hub), so
+*    the node runs first-boot builtins forever while reporting the new
+*    version;
+*  - skipping it when it does NOT resolve is how a fresh deployment was once
+*    made unbootable ("No addon provides required infrastructure capability
+*    storage-provider"). That is why the guard is resolvability rather than a
+*    blanket removal from the bootstrap list.
+*/
+function shouldSkipClosureProvidedSeed(packageName, isResolvable) {
+	return packageName === "@camstack/system" && isResolvable;
+}
 /** Minimal no-op logger for default parameter */
 var noopLogger = {
 	debug() {},
@@ -3585,6 +3604,7 @@ var AddonInstaller = class AddonInstaller {
 	workspaceDir;
 	installSource;
 	logger;
+	isPackageResolvable;
 	/**
 	* Central manifest of installed addons. Tracks version + source +
 	* timestamps + last-backup pointer per package, written atomically
@@ -3600,6 +3620,7 @@ var AddonInstaller = class AddonInstaller {
 		this.workspaceDir = config.workspacePackagesDir;
 		this.logger = logger;
 		this.manifest = new AddonManifest(config.addonsDir);
+		this.isPackageResolvable = config.isPackageResolvable;
 		if (config.installSource) this.installSource = config.installSource;
 		else this.installSource = "npm";
 	}
@@ -3628,6 +3649,25 @@ var AddonInstaller = class AddonInstaller {
 	* hardcoded lists — see design spec
 	* docs/superpowers/specs/2026-05-20-docker-install-from-npm-design.md.
 	*/
+	/**
+	* Is `packageName` reachable through normal resolution — i.e. does the
+	* running closure already provide it?
+	*
+	* Overridable via `AddonInstallerConfig.isPackageResolvable` so a spec can
+	* exercise BOTH sides. That matters more than it looks: the branch that
+	* still seeds is the one protecting a fresh deployment from an unbootable
+	* node, and it is unreachable in a test process where `@camstack/system`
+	* always resolves.
+	*/
+	isResolvableFromClosure(packageName) {
+		if (this.isPackageResolvable) return this.isPackageResolvable(packageName);
+		try {
+			__require.resolve(`${packageName}/package.json`);
+			return true;
+		} catch {
+			return false;
+		}
+	}
 	static deriveBootstrapList(metaPackageName) {
 		const pkgJsonId = `${metaPackageName}/package.json`;
 		let pkgPath;
@@ -3710,6 +3750,10 @@ var AddonInstaller = class AddonInstaller {
 				this.logger.debug(`${packageName} — already installed, skipping`);
 				continue;
 			}
+			if (shouldSkipClosureProvidedSeed(packageName, this.isResolvableFromClosure(packageName))) {
+				this.logger.info(`${packageName} — provided by the server closure, not seeding a copy that would shadow it`);
+				continue;
+			}
 			try {
 				if (isLocal) {
 					const pkgDir = this.findLocalPackage(packageName);

package/dist/kernel/addon-installer.d.ts

@@ -22,6 +22,25 @@ import { AddonManifest } from './addon-manifest.js';
  * `addonsDir/<pkg>` → `packages/<pkg>`.
  */
 export type InstallSource = 'npm' | 'local' | 'symlink';
+/** The one bootstrap package the server closure carries itself. */
+export declare const CLOSURE_PROVIDED_PACKAGE = "@camstack/system";
+/**
+ * Should the bootstrap SKIP seeding `packageName` into /data/addons?
+ *
+ * True only for the package the closure provides, and only when it actually
+ * resolves. Both halves are load-bearing:
+ *
+ *  - seeding a copy the closure already provides creates one that WINS over
+ *    the closure and is never refreshed (bootstrap is seed-only, and
+ *    `camstack deploy` of a framework package is rejected on an image hub), so
+ *    the node runs first-boot builtins forever while reporting the new
+ *    version;
+ *  - skipping it when it does NOT resolve is how a fresh deployment was once
+ *    made unbootable ("No addon provides required infrastructure capability
+ *    storage-provider"). That is why the guard is resolvability rather than a
+ *    blanket removal from the bootstrap list.
+ */
+export declare function shouldSkipClosureProvidedSeed(packageName: string, isResolvable: boolean): boolean;
 export interface AddonInstallerConfig {
     /** Directory where addons are stored (e.g., {dataDir}/addons) */
     readonly addonsDir: string;
@@ -31,6 +50,13 @@ export interface AddonInstallerConfig {
     readonly workspacePackagesDir?: string;
     /** Install source mode. Default: auto-detect */
     readonly installSource?: InstallSource;
+    /**
+     * Override for "does the running closure already provide this package?".
+     * Production leaves it unset (real `require.resolve`); a spec sets it to
+     * reach the branch that still seeds `@camstack/system`, which is otherwise
+     * unreachable in a process where that package always resolves.
+     */
+    readonly isPackageResolvable?: (packageName: string) => boolean;
 }
 export type { InstalledPackage };
 /** Outcome of {@link AddonInstaller.sweepBackups}. Absolute paths. */
@@ -46,6 +72,7 @@ export declare class AddonInstaller {
     readonly workspaceDir: string | undefined;
     readonly installSource: InstallSource;
     private readonly logger;
+    private readonly isPackageResolvable?;
     /**
      * Central manifest of installed addons. Tracks version + source +
      * timestamps + last-backup pointer per package, written atomically
@@ -71,6 +98,17 @@ export declare class AddonInstaller {
      * hardcoded lists — see design spec
      * docs/superpowers/specs/2026-05-20-docker-install-from-npm-design.md.
      */
+    /**
+     * Is `packageName` reachable through normal resolution — i.e. does the
+     * running closure already provide it?
+     *
+     * Overridable via `AddonInstallerConfig.isPackageResolvable` so a spec can
+     * exercise BOTH sides. That matters more than it looks: the branch that
+     * still seeds is the one protecting a fresh deployment from an unbootable
+     * node, and it is unreachable in a test process where `@camstack/system`
+     * always resolves.
+     */
+    private isResolvableFromClosure;
     private static deriveBootstrapList;
     /**
      * Bootstrap packages installed on first boot — derived from the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.29",
+  "version": "1.2.30",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",