@camstack/system 1.2.359 → 1.2.361

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Ar as EventCategory, Ft as isAppLinkBase, Kt as localNetworkCapability, Rn as validateCustomAddress, Rt as isDefaultViewerEndpoint, Sn as resolveViewerAddresses, ar as BaseAddon, cn as pickAppLinkHub, s as CAMSTACK_APP_LINK_ORIGIN, tt as checkRoleAddress, vn as resolveHubAddressRoles, xn as resolveNotificationsAddress } from "../../dist-pTfD_M-U.mjs";
+import { Ar as EventCategory, Ft as isAppLinkBase, Kt as localNetworkCapability, Rn as validateCustomAddress, Rt as isDefaultAppConnectionEndpoint, Sn as resolveNotificationTapAddress, ar as BaseAddon, cn as pickAppLinkHub, hn as resolveAppConnections, s as CAMSTACK_APP_LINK_ORIGIN, tt as checkRoleAddress, yn as resolveHubAddressRoles } from "../../dist-C9Rk6KVv.mjs";
 import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-CJHogwTl.mjs";
 import { z } from "zod";
 import * as os from "node:os";
@@ -9,24 +9,26 @@ import { isIP } from "node:net";
 * The Network page's address book, as pure functions: custom addresses plus
 * the role flags carried by detected and custom addresses alike.
 *
-* ## Storage
+* ## Storage (D734)
 *
-* The role flags keep the keys they always had, so a rolled-back hub reads
-* them with the meaning it knew: `viewerBaseUrls` (viewer, many),
-* `notificationBaseUrl` (notifications, D709), `agentBaseUrl` and
-* `signInBaseUrl` (agents / sign-in, D729 amendment). A single-valued role is
+* One key per role: `appConnectionUrls` (`appConnections`, many),
+* `notificationTapUrl` (`notificationTaps`), `publicEndpointUrl`
+* (`publicEndpoint`) and `internalUrl` (`internal`). A single-valued role is
 * one URL — at most one address carries it, by construction. `''` / `[]` is
 * automatic. The custom addresses are `customAddresses` (url + label).
 *
-* ## Migration in the read path
+* The keys of the earlier role names (`viewerBaseUrls`, `notificationBaseUrl`,
+* `signInBaseUrl`, `agentBaseUrl`) are not read: a value stored under one is
+* ignored, and that role is automatic until the operator flags it again
+* (D734 — one install, re-set by hand, no migration code).
 *
-* Before this, a single-valued flag could name an address that was in no row:
-* the notification links' typed custom address (D709) and the two hub-address
-* overrides (D729 amendment) were free URLs. {@link normalizeAddressBook}
-* turns every such flag into a custom address carrying that role, on every
-* read; the next write persists the result. It is the same rule forever, not
-* a one-off: a flagged detected address that disappears (a DHCP move) shows up
-* as a custom row instead of vanishing while it still wins.
+* ## A flag on an address that is in no row
+*
+* A flagged detected address can disappear (a DHCP move) while it still wins
+* its role. {@link normalizeAddressBook} turns every single-valued flag that
+* names neither a detected address, a custom one nor the app link into a
+* custom address carrying that role, on every read; the next write persists
+* the result — so the address shows as a custom row instead of vanishing.
 */
 var CustomAddressListSchema = z.array(z.object({
 	baseUrl: z.string(),
@@ -34,14 +36,14 @@ var CustomAddressListSchema = z.array(z.object({
 }));
 /** The label a flag promoted to a custom address is given. */
 var PROMOTED_LABEL = {
-	notifications: "Notification links address",
-	agents: "Hub address for agents",
-	signIn: "Sign-in address"
+	notificationTaps: "Notification taps address",
+	internal: "Internal address",
+	publicEndpoint: "Public endpoint"
 };
 var SINGLE_ROLES = [
-	"notifications",
-	"agents",
-	"signIn"
+	"notificationTaps",
+	"internal",
+	"publicEndpoint"
 ];
 function flagOf(value) {
 	return value === "" ? null : value;
@@ -58,10 +60,10 @@ function parseCustomAddresses(raw) {
 */
 function normalizeAddressBook(stored, detectedUrls) {
 	const flags = {
-		viewer: stored.viewerBaseUrls,
-		notifications: flagOf(stored.notificationBaseUrl),
-		agents: flagOf(stored.agentBaseUrl),
-		signIn: flagOf(stored.signInBaseUrl)
+		appConnections: stored.appConnectionUrls,
+		notificationTaps: flagOf(stored.notificationTapUrl),
+		internal: flagOf(stored.internalUrl),
+		publicEndpoint: flagOf(stored.publicEndpointUrl)
 	};
 	const custom = [...parseCustomAddresses(stored.customAddresses)];
 	for (const role of SINGLE_ROLES) {
@@ -82,10 +84,10 @@ function normalizeAddressBook(stored, detectedUrls) {
 function addressBookPatch(state) {
 	return {
 		customAddresses: state.custom,
-		viewerBaseUrls: state.flags.viewer,
-		notificationBaseUrl: state.flags.notifications ?? "",
-		agentBaseUrl: state.flags.agents ?? "",
-		signInBaseUrl: state.flags.signIn ?? ""
+		appConnectionUrls: state.flags.appConnections,
+		notificationTapUrl: state.flags.notificationTaps ?? "",
+		publicEndpointUrl: state.flags.publicEndpoint ?? "",
+		internalUrl: state.flags.internal ?? ""
 	};
 }
 function withCustomAddress(state, entry) {
@@ -101,20 +103,20 @@ function withoutCustomAddress(state, baseUrl) {
 	return {
 		custom: state.custom.filter((c) => c.baseUrl !== baseUrl),
 		flags: {
-			viewer: state.flags.viewer.filter((u) => u !== baseUrl),
-			notifications: clear(state.flags.notifications),
-			agents: clear(state.flags.agents),
-			signIn: clear(state.flags.signIn)
+			appConnections: state.flags.appConnections.filter((u) => u !== baseUrl),
+			notificationTaps: clear(state.flags.notificationTaps),
+			internal: clear(state.flags.internal),
+			publicEndpoint: clear(state.flags.publicEndpoint)
 		}
 	};
 }
 /** Every role back to automatic for `role`. */
 function withRoleAutomatic(state, role) {
-	return role === "viewer" ? {
+	return role === "appConnections" ? {
 		...state,
 		flags: {
 			...state.flags,
-			viewer: []
+			appConnections: []
 		}
 	} : {
 		...state,
@@ -127,24 +129,24 @@ function withRoleAutomatic(state, role) {
 /**
 * Flag or unflag `baseUrl` for `role`. A single-valued role flagged here moves
 * off every other address (it is one URL); unflagging the address that carries
-* it returns the role to automatic. The app link flagged for notifications IS
-* the automatic answer, stored as automatic — one representation. `viewer`
-* toggles inside the set; toggling while automatic starts from the automatic
-* set (`autoViewer`) so the other addresses keep racing.
+* it returns the role to automatic. The app link flagged for notification
+* taps IS the automatic answer, stored as automatic — one representation.
+* `appConnections` toggles inside the set; toggling while automatic starts
+* from the automatic set (`autoApp`) so the other addresses keep racing.
 */
-function withRoleFlag(state, role, baseUrl, enabled, autoViewer) {
-	if (role === "viewer") {
-		const without = (state.flags.viewer.length === 0 ? autoViewer : state.flags.viewer).filter((u) => u !== baseUrl);
-		const viewer = enabled ? [...without, baseUrl] : without;
+function withRoleFlag(state, role, baseUrl, enabled, autoApp) {
+	if (role === "appConnections") {
+		const without = (state.flags.appConnections.length === 0 ? autoApp : state.flags.appConnections).filter((u) => u !== baseUrl);
+		const appConnections = enabled ? [...without, baseUrl] : without;
 		return {
 			...state,
 			flags: {
 				...state.flags,
-				viewer
+				appConnections
 			}
 		};
 	}
-	if (role === "notifications" && isAppLinkBase(baseUrl)) return withRoleAutomatic(state, role);
+	if (role === "notificationTaps" && isAppLinkBase(baseUrl)) return withRoleAutomatic(state, role);
 	if (enabled) return {
 		...state,
 		flags: {
@@ -157,12 +159,12 @@ function withRoleFlag(state, role, baseUrl, enabled, autoViewer) {
 /** What a row may be flagged with. */
 function eligibleRoles(endpoint) {
 	if (endpoint.kind === "loopback") return [];
-	if (endpoint.kind === "app-link") return ["notifications"];
+	if (endpoint.kind === "app-link") return ["notificationTaps"];
 	return [
-		"viewer",
-		"notifications",
-		"agents",
-		"signIn"
+		"appConnections",
+		"notificationTaps",
+		"internal",
+		"publicEndpoint"
 	];
 }
 /** A custom address as a palette entry (`kind: 'custom'`). */
@@ -179,27 +181,27 @@ function customEndpoint(entry) {
 }
 /**
 * The palette a client races: the detected endpoints plus the custom
-* addresses flagged `viewer` (a detected URL is never listed twice).
+* addresses flagged `appConnections` (a detected URL is never listed twice).
 */
-function withViewerCustomEndpoints(detected, state) {
+function withAppConnectionCustomEndpoints(detected, state) {
 	const known = new Set(detected.map((e) => e.baseUrl));
-	const wanted = new Set(state.flags.viewer);
+	const wanted = new Set(state.flags.appConnections);
 	const extra = state.custom.filter((c) => wanted.has(c.baseUrl) && !known.has(c.baseUrl)).map(customEndpoint);
 	return [...detected, ...extra];
 }
 /** Every role's answer — the resolvers from `@camstack/types`, nothing else. */
-function resolveRoles(state, viewerPalette, httpsPalette) {
-	return resolveHubAddressRoles(withViewerCustomEndpoints(viewerPalette, state), httpsPalette, state.flags);
+function resolveRoles(state, appPalette, httpsPalette) {
+	return resolveHubAddressRoles(withAppConnectionCustomEndpoints(appPalette, state), httpsPalette, state.flags);
 }
 function flagsOn(state, baseUrl) {
 	const out = [];
-	if (state.flags.viewer.includes(baseUrl)) out.push("viewer");
+	if (state.flags.appConnections.includes(baseUrl)) out.push("appConnections");
 	for (const role of SINGLE_ROLES) if (state.flags[role] === baseUrl) out.push(role);
 	return out;
 }
 function inUseOn(roles, baseUrl) {
 	const out = [];
-	if (roles.viewer.resolved.includes(baseUrl)) out.push("viewer");
+	if (roles.appConnections.resolved.includes(baseUrl)) out.push("appConnections");
 	for (const role of SINGLE_ROLES) if (roles[role].resolved === baseUrl) out.push(role);
 	return out;
 }
@@ -213,7 +215,7 @@ function buildAddressBook(state, inputs) {
 		detected,
 		custom: customUrls.has(endpoint.baseUrl),
 		flags: endpoint.kind === "app-link" ? [] : flagsOn(state, endpoint.baseUrl),
-		inUse: endpoint.kind === "app-link" ? roles.notifications.resolved === "https://camstack.zentik.app" ? ["notifications"] : [] : inUseOn(roles, endpoint.baseUrl),
+		inUse: endpoint.kind === "app-link" ? roles.notificationTaps.resolved === "https://camstack.zentik.app" ? ["notificationTaps"] : [] : inUseOn(roles, endpoint.baseUrl),
 		eligible: eligibleRoles(endpoint)
 	});
 	return {
@@ -418,20 +420,20 @@ var LocalNetworkAddon = class extends BaseAddon {
 		super({
 			allowedAddresses: [],
 			bootSeeded: false,
-			notificationBaseUrl: "",
-			viewerBaseUrls: [],
+			notificationTapUrl: "",
+			appConnectionUrls: [],
 			customAddresses: [],
 			httpEnabled: true,
 			httpPort: DEFAULT_LAN_HTTP_PORT,
 			localHostname: "",
-			agentBaseUrl: "",
-			signInBaseUrl: ""
+			internalUrl: "",
+			publicEndpointUrl: ""
 		});
 	}
 	/**
-	* The detected palettes, with the mesh reconciled once: `https` (what agents
-	* and sign-in resolve over, and the app link's `hub=`) and `http` (what the
-	* viewer race resolves over, as before).
+	* The detected palettes, with the mesh reconciled once: `https` (what
+	* `internal` and `publicEndpoint` resolve over, and the app link's `hub=`)
+	* and `http` (what the app-connections race resolves over).
 	*/
 	async palettes() {
 		const port = (await this.resolveAdvertisedListenPort(null)).port;
@@ -469,7 +471,7 @@ var LocalNetworkAddon = class extends BaseAddon {
 		const detectedUrls = new Set(detected.map((e) => e.baseUrl));
 		const changed = change(this.addressState(detected), {
 			detectedUrls,
-			autoViewer: [...new Set(detected.filter(isDefaultViewerEndpoint).map((e) => e.baseUrl))]
+			autoApp: [...new Set(detected.filter(isDefaultAppConnectionEndpoint).map((e) => e.baseUrl))]
 		});
 		const after = normalizeAddressBook({
 			...addressBookPatch(changed),
@@ -486,18 +488,18 @@ var LocalNetworkAddon = class extends BaseAddon {
 			source: r.source === "flagged" ? "override" : r.source
 		});
 		return {
-			cluster: legacy(roles.agents),
-			browser: legacy(roles.signIn)
+			cluster: legacy(roles.internal),
+			browser: legacy(roles.publicEndpoint)
 		};
 	}
 	/**
 	* Flag / unflag `baseUrl` for `role`, or (`baseUrl: null`) return the role
 	* to automatic. Validated: the address must be a row (detected, custom, or
-	* the app link for notifications), never loopback, and `signIn` on plain
-	* http only when accepted. A refusal stores nothing.
+	* the app link for `notificationTaps`), never loopback, and
+	* `publicEndpoint` on plain http only when accepted. A refusal stores nothing.
 	*/
 	async setRole(role, baseUrl, enabled, acceptInsecureHttp) {
-		if (baseUrl === null || baseUrl.trim() === "" && role !== "viewer") {
+		if (baseUrl === null || baseUrl.trim() === "" && role !== "appConnections") {
 			await this.changeAddressBook((state) => withRoleAutomatic(state, role));
 			this.ctx.logger.info("local-network: address role set to automatic", { meta: { role } });
 			return;
@@ -510,8 +512,8 @@ var LocalNetworkAddon = class extends BaseAddon {
 		}
 		await this.changeAddressBook((state, ctx) => {
 			const known = isAppLinkBase(target) || ctx.detectedUrls.has(target) || state.custom.some((c) => c.baseUrl === target);
-			if (enabled && !known && role !== "notifications") throw new Error(`${target} is not in the address list — add it as a custom address first.`);
-			return withRoleFlag(state, role, target, enabled, ctx.autoViewer);
+			if (enabled && !known && role !== "notificationTaps") throw new Error(`${target} is not in the address list — add it as a custom address first.`);
+			return withRoleFlag(state, role, target, enabled, ctx.autoApp);
 		});
 		this.ctx.logger.info("local-network: address role set", { meta: {
 			role,
@@ -520,7 +522,7 @@ var LocalNetworkAddon = class extends BaseAddon {
 		} });
 	}
 	async notificationEndpointSnapshot() {
-		const resolution = resolveNotificationsAddress(this.storedFlags());
+		const resolution = resolveNotificationTapAddress(this.storedFlags());
 		const port = (await this.resolveAdvertisedListenPort(null)).port;
 		return {
 			baseUrl: resolution.flagged,
@@ -529,7 +531,7 @@ var LocalNetworkAddon = class extends BaseAddon {
 		};
 	}
 	async snapshotViewerEndpoints() {
-		const resolution = resolveViewerAddresses(await this.buildAdvertisedEndpoints(false, false, "http", (await this.resolveAdvertisedListenPort(null)).port), this.storedFlags());
+		const resolution = resolveAppConnections(await this.buildAdvertisedEndpoints(false, false, "http", (await this.resolveAdvertisedListenPort(null)).port), this.storedFlags());
 		return {
 			baseUrls: resolution.flagged,
 			resolved: resolution.resolved
@@ -537,14 +539,14 @@ var LocalNetworkAddon = class extends BaseAddon {
 	}
 	/**
 	* Palette shown to clients: LAN IPv4, stable LAN IPv6, public, mesh, and
-	* the custom addresses flagged `viewer` (`kind: 'custom'`). The viewer
-	* HTTP/WS race is a subset (`selectViewerEndpoints`) — IPv6 stays in this
+	* the custom addresses flagged `appConnections` (`kind: 'custom'`). The app
+	* HTTP/WS race is a subset (`selectAppConnectionEndpoints`) — IPv6 stays in this
 	* list because ICE/WebRTC gathers it regardless.
 	*/
 	async buildAdvertisedEndpoints(includeLoopback, ipv4Only, scheme, httpsPort) {
 		await this.reconcileMeshEndpoint();
 		const detected = this.endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort);
-		return withViewerCustomEndpoints(detected, this.addressState(detected));
+		return withAppConnectionCustomEndpoints(detected, this.addressState(detected));
 	}
 	/** The DETECTED palette from the cached interface/tunnel/mesh state. */
 	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort) {
@@ -591,22 +593,22 @@ var LocalNetworkAddon = class extends BaseAddon {
 			},
 			getNotificationEndpoint: async () => this.notificationEndpointSnapshot(),
 			setNotificationEndpoint: async ({ baseUrl }) => {
-				await this.setRole("notifications", baseUrl, true, false);
+				await this.setRole("notificationTaps", baseUrl, true, false);
 				return this.notificationEndpointSnapshot();
 			},
 			getViewerEndpoints: async () => this.snapshotViewerEndpoints(),
 			setViewerEndpoints: async ({ baseUrls }) => {
-				const viewer = [...new Set(baseUrls.filter((u) => u.length > 0))];
+				const appConnections = [...new Set(baseUrls.filter((u) => u.length > 0))];
 				await this.changeAddressBook((state) => ({
 					...state,
 					flags: {
 						...state.flags,
-						viewer
+						appConnections
 					}
 				}));
-				this.ctx.logger.info("local-network: viewer endpoints set", { meta: {
-					count: viewer.length,
-					auto: viewer.length === 0
+				this.ctx.logger.info("local-network: app connections set", { meta: {
+					count: appConnections.length,
+					auto: appConnections.length === 0
 				} });
 				return this.snapshotViewerEndpoints();
 			},

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-W_X44h-s.js");
+const require_dist = require("../../dist-Cv1lnnQq.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Jt as logDestinationCapability, ar as BaseAddon } from "../../dist-pTfD_M-U.mjs";
+import { Jt as logDestinationCapability, ar as BaseAddon } from "../../dist-C9Rk6KVv.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.d.ts

@@ -151,6 +151,22 @@ export default class NativeMetricsAddon extends BaseAddon<NativeMetricsConfig> {
      * is why the retention default is six hours rather than three days.
      */
     private startProcessSnapshotTimer;
+    /**
+     * Run one periodic tick so that it can NEVER become an unhandled rejection.
+     *
+     * `clearInterval` in `onShutdown` stops FUTURE ticks; it cannot recall one
+     * already in flight. A process tick awaits a `/proc` read and a
+     * `$process.list` broker call, and a graceful stop shuts this addon down
+     * (nulling `ctx`) while the agent goes on to stop its other addons and the
+     * broker — so the tick resumed with no context, its catch block reached for
+     * `this.ctx.logger`, threw again, and the rejection of the timer callback
+     * killed `docker stop CamStack-Agent` with exit code 1 (little-unraid,
+     * 2026-10-07 04:22Z). The ticks themselves now capture their context once
+     * and stand down when it is gone; this wrapper is the backstop.
+     *
+     * A tick before `initialize()` or after `shutdown()` is a no-op.
+     */
+    private runTick;
     protected onShutdown(): Promise<void>;
     /**
      * Resolve this node's short id (strips any `nodeId/addonId` suffix).

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-W_X44h-s.js");
+const require_dist = require("../../dist-Cv1lnnQq.js");
 const require_proc_stat = require("../../proc-stat-DL-WUOhl.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");
@@ -3014,7 +3014,8 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 		}
 		this.memoryProbe = new ContainerMemoryProbe({ logger: this.ctx.logger.child("ContainerMemory") });
 		this.pidsProbe = new ContainerPidsProbe({ logger: this.ctx.logger.child("ContainerPids") });
-		this.snapshotTimer = setInterval(() => this.emitResourcesSnapshot(), METRICS_SNAPSHOT_INTERVAL_MS);
+		if (this.snapshotTimer) clearInterval(this.snapshotTimer);
+		this.snapshotTimer = setInterval(() => this.runTick("resources snapshot", () => this.emitResourcesSnapshot()), METRICS_SNAPSHOT_INTERVAL_MS);
 		this.startProcessSnapshotTimer();
 		this.ctx.addDisposer(this.ctx.eventBus.subscribe({ category: require_dist.EventCategory.MetricsNodeProcessesSnapshot }, (event) => this.retainSnapshot(event.data.nodeId, event.data.timestamp, event.data.processes, event.data.containerMemory)));
 		return [{
@@ -3179,7 +3180,33 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 	*/
 	startProcessSnapshotTimer() {
 		if (this.processSnapshotTimer) clearInterval(this.processSnapshotTimer);
-		this.processSnapshotTimer = setInterval(() => this.emitProcessesSnapshot(), this.loadConfig.cadenceSec * 1e3);
+		this.processSnapshotTimer = null;
+		if (!this.ctxIfReady) return;
+		this.processSnapshotTimer = setInterval(() => this.runTick("process snapshot", () => this.emitProcessesSnapshot()), this.loadConfig.cadenceSec * 1e3);
+	}
+	/**
+	* Run one periodic tick so that it can NEVER become an unhandled rejection.
+	*
+	* `clearInterval` in `onShutdown` stops FUTURE ticks; it cannot recall one
+	* already in flight. A process tick awaits a `/proc` read and a
+	* `$process.list` broker call, and a graceful stop shuts this addon down
+	* (nulling `ctx`) while the agent goes on to stop its other addons and the
+	* broker — so the tick resumed with no context, its catch block reached for
+	* `this.ctx.logger`, threw again, and the rejection of the timer callback
+	* killed `docker stop CamStack-Agent` with exit code 1 (little-unraid,
+	* 2026-10-07 04:22Z). The ticks themselves now capture their context once
+	* and stand down when it is gone; this wrapper is the backstop.
+	*
+	* A tick before `initialize()` or after `shutdown()` is a no-op.
+	*/
+	runTick(name, tick) {
+		if (!this.ctxIfReady) return;
+		tick().catch((err) => {
+			this.ctxIfReady?.logger.warn("native-metrics tick failed — this interval will be missing", { meta: {
+				tick: name,
+				error: err instanceof Error ? err.message : String(err)
+			} });
+		});
 	}
 	async onShutdown() {
 		if (this.snapshotTimer) {
@@ -3197,9 +3224,9 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 	* Resolve this node's short id (strips any `nodeId/addonId` suffix).
 	* Returns null when the provider or event bus isn't available yet.
 	*/
-	resolveSnapshotNodeId() {
-		if (!this.provider || !this.ctx.eventBus) return null;
-		const rawNodeId = this.ctx.kernel.localNodeId ?? this.ctx.id;
+	resolveSnapshotNodeId(ctx) {
+		if (!this.provider || !ctx.eventBus) return null;
+		const rawNodeId = ctx.kernel.localNodeId ?? ctx.id;
 		return rawNodeId.includes("/") ? rawNodeId.split("/")[0] : rawNodeId;
 	}
 	/**
@@ -3208,13 +3235,16 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 	* runs at samplingIntervalMs). Fires on METRICS_SNAPSHOT_INTERVAL_MS.
 	*/
 	async emitResourcesSnapshot() {
+		const ctx = this.ctxIfReady;
+		if (!ctx) return;
 		const provider = this.provider;
-		const eventBus = this.ctx.eventBus;
-		const nodeId = this.resolveSnapshotNodeId();
+		const eventBus = ctx.eventBus;
+		const nodeId = this.resolveSnapshotNodeId(ctx);
 		if (!provider || !eventBus || !nodeId) return;
 		const timestamp = Date.now();
 		try {
 			const snapshot = await provider.getCached() ?? await provider.collectSnapshot();
+			if (this.ctxIfReady !== ctx) return;
 			const coarse = coarsenResourcesSnapshot(snapshot);
 			const prev = this.lastResourcesEmit;
 			const heartbeatDue = !prev || timestamp - prev.emittedAt >= METRICS_SNAPSHOT_HEARTBEAT_MS;
@@ -3247,12 +3277,18 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 	* A failed scan emits nothing, which is the same signal: nobody reported.
 	*/
 	async emitProcessesSnapshot() {
-		const eventBus = this.ctx.eventBus;
-		const nodeId = this.resolveSnapshotNodeId();
+		const ctx = this.ctxIfReady;
+		if (!ctx) return;
+		const eventBus = ctx.eventBus;
+		const nodeId = this.resolveSnapshotNodeId(ctx);
 		if (!this.provider || !eventBus || !nodeId) return;
 		const timestamp = Date.now();
 		try {
 			const processes = await this.listNodeProcesses();
+			if (this.ctxIfReady !== ctx) {
+				ctx.logger.debug("process snapshot dropped — addon shut down mid-tick", { meta: { nodeId } });
+				return;
+			}
 			const containerMemory = this.memoryProbe?.sample() ?? null;
 			this.pidsProbe?.sample();
 			eventBus.emit(require_dist.createEvent(require_dist.EventCategory.MetricsNodeProcessesSnapshot, {
@@ -3266,20 +3302,21 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 				containerMemory
 			}));
 		} catch (err) {
-			this.ctx.logger.warn("process snapshot skipped — this interval will be missing", { meta: {
+			ctx.logger.warn("process snapshot skipped — this interval will be missing", { meta: {
 				nodeId,
 				error: err instanceof Error ? err.message : String(err)
 			} });
 		}
 	}
 	async onConfigChanged() {
+		if (!this.ctxIfReady) return;
 		this.provider?.stopSampling();
 		this.provider?.startSampling(this.config.samplingIntervalMs);
 		this.applyLoadSeriesConfig();
 		this.startProcessSnapshotTimer();
 	}
 	async listWorkerInstances() {
-		const broker = this.ctx.kernel.cluster?.broker;
+		const broker = this.ctxIfReady?.kernel.cluster?.broker;
 		if (!broker) return [];
 		try {
 			return await broker.call("$process.list");
@@ -3326,6 +3363,7 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 	* walk behind them — live in `process-classification.ts`.
 	*/
 	async listNodeProcesses() {
+		const selfNodeId = this.ctx.kernel.cluster?.broker?.nodeID ?? "hub";
 		const ps = await this.runPs();
 		if (ps.length === 0) return [];
 		const managed = /* @__PURE__ */ new Map();
@@ -3339,7 +3377,7 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 		return buildNodeProcesses({
 			psRows: ps,
 			selfPid: process.pid,
-			selfNodeId: this.ctx.kernel.cluster?.broker?.nodeID ?? "hub",
+			selfNodeId,
 			managed,
 			cpuSplits
 		});
@@ -3355,7 +3393,7 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 		try {
 			return await readProcessTable();
 		} catch (err) {
-			this.ctx.logger.warn("process table read failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
+			this.ctxIfReady?.logger.warn("process table read failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
 			return [];
 		}
 	}