@camstack/system 1.2.390 → 1.2.391

package/dist/http/file-data-plane.d.ts

@@ -1,18 +1,18 @@
-import { IncomingMessage, ServerResponse } from 'node:http';
+import type { IncomingMessage, ServerResponse } from "node:http";
 export interface FileDataPlaneOptions {
-    /** Current set of root dirs searched for a requested rel path (multi-location).
-     *  Invoked per request so it always reflects live config. */
-    readonly getRoots: () => readonly string[];
-    /** Optional extension→content-type overrides merged over the media defaults. */
-    readonly contentTypes?: Readonly<Record<string, string>>;
-    /**
-     * Optional per-path Cache-Control resolver. Return a header value to use for
-     * this rel path, or undefined for the default (`no-cache`). Lets a caller
-     * serve content-hashed bundle assets as `public, max-age=…, immutable`
-     * (re-downloading a 1MB SPA bundle on every open is a real cold-start cost)
-     * while entry HTML stays revalidated.
-     */
-    readonly cacheControl?: (rel: string) => string | undefined;
+	/** Current set of root dirs searched for a requested rel path (multi-location).
+	*  Invoked per request so it always reflects live config. */
+	readonly getRoots: () => readonly string[];
+	/** Optional extension→content-type overrides merged over the media defaults. */
+	readonly contentTypes?: Readonly<Record<string, string>>;
+	/**
+	* Optional per-path Cache-Control resolver. Return a header value to use for
+	* this rel path, or undefined for the default (`no-cache`). Lets a caller
+	* serve content-hashed bundle assets as `public, max-age=…, immutable`
+	* (re-downloading a 1MB SPA bundle on every open is a real cold-start cost)
+	* while entry HTML stays revalidated.
+	*/
+	readonly cacheControl?: (rel: string) => string | undefined;
 }
 /** Build a `(req, res)` handler that serves `getRoots()` files with Range. */
 export declare function createFileDataPlaneHandler(opts: FileDataPlaneOptions): (req: IncomingMessage, res: ServerResponse) => Promise<void>;

package/dist/http/lan-http-bind.d.ts

@@ -1,26 +1,37 @@
-import { IncomingMessage, ServerResponse } from 'node:http';
-import { Duplex } from 'node:stream';
+/**
+* Second HTTP listener that shares the hub's existing request handler.
+*
+* Fastify is one protocol per instance; HTTPS stays on :4443 and this
+* binds a plain `http.Server` that emits `request` AND `upgrade` onto the
+* same handler graph (tRPC HTTP, cookies, data-plane, static, tRPC WS).
+*
+* Forwarding only `request` is not enough: the viewer speaks tRPC exclusively
+* over WebSocket (`wsLink`). `/health` wins the LAN race, then `ws://…/trpc`
+* hangs because nobody handles the upgrade on this socket.
+*/
+import { type IncomingMessage, type ServerResponse } from "node:http";
+import type { Duplex } from "node:stream";
 export interface LanHttpBindOptions {
-    readonly enabled: boolean;
-    readonly port: number;
-    readonly host: string;
+	readonly enabled: boolean;
+	readonly port: number;
+	readonly host: string;
 }
 export interface LanHttpBindResult {
-    readonly listening: boolean;
-    readonly error: string | null;
-    readonly port: number;
+	readonly listening: boolean;
+	readonly error: string | null;
+	readonly port: number;
 }
 export type LanHttpRequestHandler = (req: IncomingMessage, res: ServerResponse) => void;
 export type LanHttpUpgradeHandler = (req: IncomingMessage, socket: Duplex, head: Buffer) => void;
 export interface LanHttpHandlers {
-    readonly onRequest: LanHttpRequestHandler;
-    readonly onUpgrade: LanHttpUpgradeHandler;
+	readonly onRequest: LanHttpRequestHandler;
+	readonly onUpgrade: LanHttpUpgradeHandler;
 }
-export declare const DEFAULT_LAN_HTTP_PORT = 4480;
+export declare const DEFAULT_LAN_HTTP_PORT: number;
 /** Map "all IPv4" to dual-stack IPv6 (`::`, ipv6Only false) so IPv4 still works. */
 export declare function allFamiliesListenHost(host: string): {
-    host: string;
-    ipv6Only: boolean;
+	host: string;
+	ipv6Only: boolean;
 };
 export declare function registerLanHttpHandler(next: LanHttpHandlers | null): void;
 export declare function readLanHttpState(): LanHttpBindResult;

package/dist/http/reverse-proxy.d.ts

@@ -1,30 +1,42 @@
-import { IncomingMessage, ServerResponse, OutgoingHttpHeaders } from 'node:http';
+/**
+* Transport-agnostic reverse-proxy from the hub to an addon's `127.0.0.1`
+* data-plane listener. Operates on RAW Node http objects (`request.raw` /
+* `reply.raw`) so `@camstack/system` stays free of any HTTP-framework dependency.
+*
+* The hub authenticates first (its existing scoped-token / admin / cookie logic),
+* then hands the raw request+response here. We forward method + headers (incl.
+* `Range`) + body upstream — injecting the per-listener shared secret so the addon
+* accepts the call — and pipe the upstream response straight back (status +
+* headers + body), so `Content-Range`, backpressure and client-disconnect are all
+* native. No bytes are buffered; nothing crosses the cap channel.
+*/
+import { type IncomingMessage, type ServerResponse, type OutgoingHttpHeaders } from "node:http";
 export interface ReverseProxyOptions {
-    /** Addon listener base, e.g. `http://127.0.0.1:54123`. */
-    readonly baseUrl: string;
-    /** Per-listener shared secret injected so the addon trusts the request. */
-    readonly secret: string;
-    /** Upstream path INCLUDING any query string, leading-slashed (`/7/seg.m4s?x=1`). */
-    readonly upstreamPath: string;
-    readonly clientReq: IncomingMessage;
-    readonly clientRes: ServerResponse;
-    /**
-     * Body already consumed by the host HTTP framework. When present, replay it
-     * explicitly instead of piping the now-ended raw request stream.
-     */
-    readonly replayBody?: Buffer;
+	/** Addon listener base, e.g. `http://127.0.0.1:54123`. */
+	readonly baseUrl: string;
+	/** Per-listener shared secret injected so the addon trusts the request. */
+	readonly secret: string;
+	/** Upstream path INCLUDING any query string, leading-slashed (`/7/seg.m4s?x=1`). */
+	readonly upstreamPath: string;
+	readonly clientReq: IncomingMessage;
+	readonly clientRes: ServerResponse;
+	/**
+	* Body already consumed by the host HTTP framework. When present, replay it
+	* explicitly instead of piping the now-ended raw request stream.
+	*/
+	readonly replayBody?: Buffer;
 }
 /**
- * The upstream's response headers, minus the CORS policy, which belongs to the
- * EDGE (D707). The hub stamps its allowlist verdict on `clientRes` with
- * `setHeader` before hijacking, and Node merges those into `writeHead` — so an
- * upstream `access-control-*` header would OVERRIDE the hub's answer: the
- * authenticated file-server's `*` reached a refused origin this way. `Vary` is
- * merged rather than replaced, so the edge's `Origin` survives an upstream
- * `Accept-Encoding`.
- */
+* The upstream's response headers, minus the CORS policy, which belongs to the
+* EDGE (D707). The hub stamps its allowlist verdict on `clientRes` with
+* `setHeader` before hijacking, and Node merges those into `writeHead` — so an
+* upstream `access-control-*` header would OVERRIDE the hub's answer: the
+* authenticated file-server's `*` reached a refused origin this way. `Vary` is
+* merged rather than replaced, so the edge's `Origin` survives an upstream
+* `Accept-Encoding`.
+*/
 export declare function edgeOwnedResponseHeaders(upRes: IncomingMessage, clientRes: ServerResponse): OutgoingHttpHeaders;
 /** Reverse-proxy one request to an addon data-plane listener. Fire-and-forget:
- *  the caller must `reply.hijack()` (or otherwise stop the framework from also
- *  responding) before calling this, since we drive `clientRes` directly. */
+*  the caller must `reply.hijack()` (or otherwise stop the framework from also
+*  responding) before calling this, since we drive `clientRes` directly. */
 export declare function proxyToUpstream(opts: ReverseProxyOptions): void;

package/dist/index.d.ts

@@ -1,139 +1,139 @@
-export { ALL_CAPABILITY_DEFINITIONS, addonSettingsCapability, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, expandCapMethods, isArrayOutputSchema, isCollectionArrayMethod, METHOD_ACCESS_MAP, } from '@camstack/types';
-export type { PlatformInfo } from '@camstack/types/node';
-export { buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements, PYTHON_VERSION, } from '@camstack/types/node';
-export type { DirectCallerOptions } from './addon/addon-api-factory.js';
-export { AddonApiFactory } from './addon/addon-api-factory.js';
-export { AddonRouteRegistry } from './addon-routes/addon-route-registry.js';
-export type { ApiKeyRecord, ApiKeyStorageAccess } from './auth/api-key-manager.js';
-export { ApiKeyManager } from './auth/api-key-manager.js';
-export type { AuthConfigReader, ReauthClaims, TokenPayload } from './auth/auth-manager.js';
-export { AuthManager } from './auth/auth-manager.js';
-export { scopesAllowAddon, scopesAllowDeviceCap } from './auth/scope-matcher.js';
-export { ScopedTokenManager } from './auth/scoped-token-manager.js';
-export type { TokenExpiryResult } from './auth/token-expiry.js';
-export { parseTokenExpiry } from './auth/token-expiry.js';
-export type { CreateLoginSessionInput, LoginSessionCheck, LoginSessionMethod, LoginSessionRecord, LoginSessionRefresh, LoginSessionRevocation, LoginSessionSummary, } from './auth/login-session-manager.js';
-export { LoginSessionManager, REFRESH_TOKEN_PREFIX } from './auth/login-session-manager.js';
-export type { AdminTokenRecord } from './auth/admin-token-manager.js';
-export { ADMIN_TOKEN_MAX_LIFETIME_MS, ADMIN_TOKEN_PREFIX, AdminTokenManager, } from './auth/admin-token-manager.js';
-export { AuthAuditLog } from './auth/auth-audit-log.js';
-export type { AuthAuditAction, AuthAuditEvent, AuthAuditRecord } from './auth/auth-audit-log.js';
-export type { CidrMatcher, ParsedCidr, ParsedCidrList } from './auth/cidr.js';
-export { createCidrMatcher, normalizeIp, parseCidrList, readCidrSetting } from './auth/cidr.js';
-export type { AdminTokensInternal, AuthAuditInternal, LinkExternalIdentityInput, LoginSessionsInternal, SetPasswordInput, UserManagementInternal, } from './auth/user-management-internal.js';
-export { attachUserManagementInternal, getUserManagementInternal, USER_MANAGEMENT_INTERNAL, } from './auth/user-management-internal.js';
-export type { UserRecord, UserStorageAccess } from './auth/user-manager.js';
-export { FIRST_BOOT_ADMIN_PASSWORD, FIRST_BOOT_ADMIN_USERNAME, UserManager, } from './auth/user-manager.js';
-export type { JwtSigningKeySource, JwtSigningKeyState } from './auth/jwt-signing-key.js';
-export { getProcessJwtSigningKeyState, JWT_SIGNING_KEY_REF, JwtSigningKeyUnavailableError, processJwtSigningKey, staticJwtSigningKey, SYSTEM_SECRET_OWNER, } from './auth/jwt-signing-key.js';
-export { AlertCenterAddon } from './builtins/alerts/index.js';
-export { CalendarsAddon } from './builtins/calendars/index.js';
-export { ComposerAddon } from './builtins/composer/index.js';
-export { ConsoleDestination, ConsoleLoggingAddon } from './builtins/console-logging/index.js';
-export { CoreBlocksAddon } from './builtins/core-blocks/index.js';
-export { DeviceManagerAddon } from './builtins/device-manager/index.js';
+export { ALL_CAPABILITY_DEFINITIONS, addonSettingsCapability, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, expandCapMethods, isArrayOutputSchema, isCollectionArrayMethod, METHOD_ACCESS_MAP } from "@camstack/types";
+export type { PlatformInfo } from "@camstack/types/node";
+export { buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements, PYTHON_VERSION } from "@camstack/types/node";
+export type { DirectCallerOptions } from "./addon/addon-api-factory.js";
+export { AddonApiFactory } from "./addon/addon-api-factory.js";
+export { AddonRouteRegistry } from "./addon-routes/addon-route-registry.js";
+export type { ApiKeyRecord, ApiKeyStorageAccess } from "./auth/api-key-manager.js";
+export { ApiKeyManager } from "./auth/api-key-manager.js";
+export type { AuthConfigReader, ReauthClaims, TokenPayload } from "./auth/auth-manager.js";
+export { AuthManager } from "./auth/auth-manager.js";
+export { scopesAllowAddon, scopesAllowDeviceCap } from "./auth/scope-matcher.js";
+export { ScopedTokenManager } from "./auth/scoped-token-manager.js";
+export type { TokenExpiryResult } from "./auth/token-expiry.js";
+export { parseTokenExpiry } from "./auth/token-expiry.js";
+export type { CreateLoginSessionInput, LoginSessionCheck, LoginSessionMethod, LoginSessionRecord, LoginSessionRefresh, LoginSessionRevocation, LoginSessionSummary } from "./auth/login-session-manager.js";
+export { LoginSessionManager, REFRESH_TOKEN_PREFIX } from "./auth/login-session-manager.js";
+export type { AdminTokenRecord } from "./auth/admin-token-manager.js";
+export { ADMIN_TOKEN_MAX_LIFETIME_MS, ADMIN_TOKEN_PREFIX, AdminTokenManager } from "./auth/admin-token-manager.js";
+export { AuthAuditLog } from "./auth/auth-audit-log.js";
+export type { AuthAuditAction, AuthAuditEvent, AuthAuditRecord } from "./auth/auth-audit-log.js";
+export type { CidrMatcher, ParsedCidr, ParsedCidrList } from "./auth/cidr.js";
+export { createCidrMatcher, normalizeIp, parseCidrList, readCidrSetting } from "./auth/cidr.js";
+export type { AdminTokensInternal, AuthAuditInternal, LinkExternalIdentityInput, LoginSessionsInternal, SetPasswordInput, UserManagementInternal } from "./auth/user-management-internal.js";
+export { attachUserManagementInternal, getUserManagementInternal, USER_MANAGEMENT_INTERNAL } from "./auth/user-management-internal.js";
+export type { UserRecord, UserStorageAccess } from "./auth/user-manager.js";
+export { FIRST_BOOT_ADMIN_PASSWORD, FIRST_BOOT_ADMIN_USERNAME, UserManager } from "./auth/user-manager.js";
+export type { JwtSigningKeySource, JwtSigningKeyState } from "./auth/jwt-signing-key.js";
+export { getProcessJwtSigningKeyState, JWT_SIGNING_KEY_REF, JwtSigningKeyUnavailableError, processJwtSigningKey, staticJwtSigningKey, SYSTEM_SECRET_OWNER } from "./auth/jwt-signing-key.js";
+export { AlertCenterAddon } from "./builtins/alerts/index.js";
+export { CalendarsAddon } from "./builtins/calendars/index.js";
+export { ComposerAddon } from "./builtins/composer/index.js";
+export { ConsoleDestination, ConsoleLoggingAddon } from "./builtins/console-logging/index.js";
+export { CoreBlocksAddon } from "./builtins/core-blocks/index.js";
+export { DeviceManagerAddon } from "./builtins/device-manager/index.js";
 /**
- * The per-device wrapper activation (D556). Exported because it is the
- * OPERATOR-FACING verb and the only writer of the registry's per-device source
- * projection — a spec that proves "activate, then list" must be able to drive
- * the real one, not a re-implementation of it.
- */
-export { setWrapperActive, type WrapperActivationDeps, type WrapperActivationInput, } from './builtins/device-manager/device-source-activation.js';
-export { HubForwarderAddon, HubForwarderDestination } from './builtins/hub-forwarder/index.js';
-export { LivenessMonitorAddon } from './builtins/liveness-monitor/index.js';
-export { LocalAuthAddon } from './builtins/local-auth/index.js';
-export type { LokiConfig, LokiStatus } from './builtins/loki-logging/index.js';
-export { LokiDestination, LokiLoggingAddon } from './builtins/loki-logging/index.js';
-export { default as NativeMetricsAddon } from './builtins/native-metrics/native-metrics.addon.js';
-export { NativeMetricsProvider } from './builtins/native-metrics/native-metrics-provider.js';
-export type { DeviceRow } from './builtins/sqlite-storage/index.js';
-export { ConfigStore, DeviceStore, FilesystemStorageAddon, FilesystemStorageProvider, SqliteSettingsAddon, SqliteSettingsBackend, } from './builtins/sqlite-storage/index.js';
-export type { ListLocationsFilter, StorageProviderLookup, } from './builtins/storage-orchestrator/index.js';
-export { StorageOrchestratorAddon, StorageOrchestratorService, } from './builtins/storage-orchestrator/index.js';
-export { SystemConfigAddon } from './builtins/system-config/index.js';
-export { WinstonDestination, WinstonLoggingAddon } from './builtins/winston-logging/index.js';
-export { ModelDownloadService } from './download/model-download-service.js';
-export type { DownloadProgressCallback, ModelRevisionAdoption, RevisionWeightFile, } from './download/model-downloader.js';
-export { adoptModelRevisions, collectModelFiles, deleteModelFromDisk, downloadFile, downloadModel, ensureModel, fetchJson, getModelFilePath, isModelDownloaded, resolveFormatRevision, revisionWeightUrl, } from './download/model-downloader.js';
-export { EventBus } from './events/event-bus.js';
-export type { EventFilter, EventSource, SystemEvent, } from './events/system-event-bus.js';
-export { SystemEventBus } from './events/system-event-bus.js';
-export type { FeatureConfigReader, FeatureFlag, FeatureManifest, } from './feature/feature-manager.js';
-export { FeatureManager } from './feature/feature-manager.js';
-export type { AuthenticatedFileServerOptions, ByteRange, FileResolveResult, FileServerHandle, FileServerTokenVerifier, } from './http/authenticated-file-server.js';
-export { contentTypeFor, createAuthenticatedFileServer, parseRangeHeader, parseTokenizedUrl, resolveFilePath, } from './http/authenticated-file-server.js';
-export type { DataPlaneEligibility, DataPlaneMatch } from './http/data-plane-registry.js';
-export { canServeDataPlane, DataPlaneRegistry } from './http/data-plane-registry.js';
-export type { FileDataPlaneOptions } from './http/file-data-plane.js';
-export { createFileDataPlaneHandler } from './http/file-data-plane.js';
-export { allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, closeLanHttp, DEFAULT_LAN_HTTP_PORT, readLanHttpState, registerLanHttpHandler, } from './http/lan-http-bind.js';
-export type { ReverseProxyOptions } from './http/reverse-proxy.js';
-export { proxyToUpstream } from './http/reverse-proxy.js';
-export type { ChildFanoutDelta, ChildFanoutRegistry, ChildFanoutSample, CrossNodeEventStats, EventPlaneCounters, EventPlaneReader, EventPlaneSources, EventPlaneWindow, } from './kernel/event-plane-report.js';
-export { createEventPlaneMeter, createEventPlaneReader, diffEventPlane, EVENT_PLANE_TOP_N, formatEventPlane, } from './kernel/event-plane-report.js';
-export type { SocketPeerDelta, SocketPeerSample, SocketPlaneBaseline, SocketPlaneCounters, SocketPlaneMeter, SocketPlaneReader, SocketPlaneRegistry, SocketPlaneRegistryChild, SocketPlaneSources, SocketPlaneWindow, } from './kernel/socket-plane-report.js';
-export { createSocketPlaneMeter, createSocketPlaneReader, diffSocketPlane, EMPTY_SOCKET_PLANE_BASELINE, formatSocketPlane, readSocketQueues, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, } from './kernel/socket-plane-report.js';
-export type { SocketPeerQueue, SocketQueueReading } from './kernel/socket-plane-report.js';
-export type { MeshPeerQueue, MeshQueueReader } from './kernel/moleculer/mesh-queue-report.js';
-export { createMeshQueueReader, formatMeshQueue, MESH_QUEUE_TOP_N, } from './kernel/moleculer/mesh-queue-report.js';
-export type { OutboundQueueGate, OutboundQueueGateOptions, OutboundQueueReading, OutboundQueueVerdict, } from './kernel/outbound-queue-watch.js';
-export { createOutboundQueueGate, formatOutboundQueueVerdict, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES, } from './kernel/outbound-queue-watch.js';
-export type { HeapDiagnosticDeps, HeapDiagnosticRequest, HeapSpaceReader, HeapSpaceUsage, } from './kernel/heap-spaces.js';
-export { DECISIVE_HEAP_SPACES, emitHeapDiagnosticReport, formatHeapSpaces, HEAP_SPACE_REPORT_MIN_MB, heapSpaceField, readHeapSpaces, selectReportedSpaces, } from './kernel/heap-spaces.js';
-export type { ArrayBufferCensus, ArrayBufferCensusContext, ArrayBufferCensusGate, ArrayBufferCensusGateOptions, ArrayBufferCensusReport, ArrayBufferCensusVerdict, ArrayBufferExactSize, ArrayBufferSizeBucket, } from './kernel/array-buffer-census.js';
-export { ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, createArrayBufferCensusGate, createInspectorArrayBufferCensus, formatArrayBufferCensus, isArrayBufferCensusReport, } from './kernel/array-buffer-census.js';
-export type { ArrayBufferCensusProbe, DeferredHeapWatchSink, HeapReclaimer, HeapReclaimOptions, HeapSample, HeapWatchProbes, HeapWatchSink, LoopDelayMeter, LoopDelaySample, RssBreakdown, RssBudgetOptions, RssBudgetState, RssGrowthShape, RunnerHeapWatchOptions, } from './kernel/heap-watch.js';
-export { buildHeapSample, createDeferredHeapWatchSink, createLoopDelayMeter, createV8Reclaimer, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, hubMainRssBudget, describeRss, nextRssBudgetState, parseRssBudgetMb, reclaimIntervalMs, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, shouldReclaim, startHeapWatch, startRunnerHeapWatch, strandedMb, ZERO_LOOP_DELAY, } from './kernel/heap-watch.js';
-export type { StallVerdict } from './kernel/event-loop-stall-monitor.js';
-export { attributeStall, STALL_REPORT_MS, STALL_TICK_MS, startEventLoopStallMonitor, } from './kernel/event-loop-stall-monitor.js';
-export type { AddonDataPlaneFacility, DataPlaneSink, } from './kernel/moleculer/addon-data-plane-facility.js';
-export { createAddonDataPlaneFacility } from './kernel/moleculer/addon-data-plane-facility.js';
-export { createAddonPeerBytesFacility, hostNodeIdOf, type AddonPeerBytesFacility, type AddonPeerBytesFacilityArgs, } from './kernel/moleculer/addon-peer-bytes-facility.js';
-export type { ElementState, ElementStatus, } from './lifecycle/lifecycle-state-machine.js';
-export { LifecycleStateMachine } from './lifecycle/lifecycle-state-machine.js';
-export { formatLogLine } from './logging/formatter.js';
-export type { ILogDestination } from './logging/log-manager.js';
-export { LogManager } from './logging/log-manager.js';
-export { isCredentialKeyName, redactLogEntry, redactLogMeta, redactLogText, } from './logging/log-redactor.js';
-export { clearPlatformKeychainKey, getPlatformKeychainKey, type PlatformKeychainKey, setPlatformKeychainKey, } from './builtins/keychain/platform-key-source.js';
-export type { LogEntry, LogFilter, LogLevel } from './logging/log-ring-buffer.js';
-export { LogRingBuffer } from './logging/log-ring-buffer.js';
-export type { LevelBearing } from './logging/logging-gate.js';
-export { DEFAULT_LOG_LEVEL, LoggingGate } from './logging/logging-gate.js';
-export { __resetLoggingGateForTests, getLoggingGate, } from './logging/logging-gate.singleton.js';
-export type { IScopedLogger } from './logging/scoped-logger.js';
-export { ScopedLogger } from './logging/scoped-logger.js';
-export type { ClientNetworkStats, DeviceNetworkStats, INetworkQualityTracker, StreamNetworkStats, } from './network/network-quality.js';
-export { NetworkQualityTracker } from './network/network-quality.js';
-export type { NotificationTargetRef } from './notification/notification-service.js';
-export { NotificationService } from './notification/notification-service.js';
-export type { Unsubscribe } from './notification/toast-service.js';
-export { ToastService } from './notification/toast-service.js';
-export { EngineManagerResolver } from './pipeline/engine-manager-resolver.js';
-export { PipelineRunner } from './pipeline/pipeline-runner.js';
-export type { ValidationIssue, ValidationResult } from './pipeline/pipeline-validator.js';
-export { PipelineValidator } from './pipeline/pipeline-validator.js';
-export type { PidStats } from './process/resource-monitor.js';
-export { getPidStats, getSinglePidStats } from './process/resource-monitor.js';
-export { PythonEnvManager } from './python/python-env-manager.js';
-export type { IReplContextProvider, IReplEngine, ReplResult, ReplScope, ReplSessionContext, } from './repl/interfaces.js';
-export { ReplEngine } from './repl/repl-engine.js';
-export type { IStorageBackend } from './storage/fs-storage-backend.js';
-export { FsStorageBackend } from './storage/fs-storage-backend.js';
-export type { StorageLocationName } from './storage/storage-location-manager.js';
-export { StorageLocationManager } from './storage/storage-location-manager.js';
-export type { IFileStorage, IStorageLocation, IStorageProvider as ICoreStorageProvider, IStructuredStorage, QueryFilter, StorageRecord, } from './storage/storage-manager.js';
-export { StorageManager } from './storage/storage-manager.js';
-export * from './tls/index.js';
-export { IntegrationRegistry } from './builtins/sqlite-storage/integration-registry.js';
-export { type EnsureAddonNativePrebuildsOptions, ensureAddonNativePrebuilds, type NativeEnsureOutcome, type NativeEnsureResult, } from './kernel/deps/ensure-addon-natives.js';
-export { type EnsureNativePrebuildsOptions, ensureNativePrebuilds, hasDotNode, NATIVE_SCAN_DEPTH, type PrebuildFetchFn, type PrebuildTarget, TRADITIONAL_NATIVE_PACKAGES, } from './kernel/deps/ensure-native-prebuilds.js';
-export { type NpmInvocation, type RunNpmOptions, buildNpmChildEnv, resolveNpmInvocation, runNpm, } from './kernel/deps/npm-command.js';
-export * from './kernel/index.js';
+* The per-device wrapper activation (D556). Exported because it is the
+* OPERATOR-FACING verb and the only writer of the registry's per-device source
+* projection — a spec that proves "activate, then list" must be able to drive
+* the real one, not a re-implementation of it.
+*/
+export { setWrapperActive, type WrapperActivationDeps, type WrapperActivationInput } from "./builtins/device-manager/device-source-activation.js";
+export { HubForwarderAddon, HubForwarderDestination } from "./builtins/hub-forwarder/index.js";
+export { LivenessMonitorAddon } from "./builtins/liveness-monitor/index.js";
+export { LocalAuthAddon } from "./builtins/local-auth/index.js";
+export type { LokiConfig, LokiStatus } from "./builtins/loki-logging/index.js";
+export { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index.js";
+export { default as NativeMetricsAddon } from "./builtins/native-metrics/native-metrics.addon.js";
+export { NativeMetricsProvider } from "./builtins/native-metrics/native-metrics-provider.js";
+export type { DeviceRow } from "./builtins/sqlite-storage/index.js";
+export { ConfigStore, DeviceStore, FilesystemStorageAddon, FilesystemStorageProvider, SqliteSettingsAddon, SqliteSettingsBackend } from "./builtins/sqlite-storage/index.js";
+export type { ListLocationsFilter, StorageProviderLookup } from "./builtins/storage-orchestrator/index.js";
+export { StorageOrchestratorAddon, StorageOrchestratorService } from "./builtins/storage-orchestrator/index.js";
+export { SystemConfigAddon } from "./builtins/system-config/index.js";
+export { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.js";
+export { ModelDownloadService } from "./download/model-download-service.js";
+export type { DownloadProgressCallback, ModelRevisionAdoption, RevisionWeightFile } from "./download/model-downloader.js";
+export { adoptModelRevisions, collectModelFiles, deleteModelFromDisk, downloadFile, downloadModel, ensureModel, fetchJson, getModelFilePath, isModelDownloaded, resolveFormatRevision, revisionWeightUrl } from "./download/model-downloader.js";
+export { EventBus } from "./events/event-bus.js";
+export type { EventFilter, EventSource, SystemEvent } from "./events/system-event-bus.js";
+export { SystemEventBus } from "./events/system-event-bus.js";
+export type { FeatureConfigReader, FeatureFlag, FeatureManifest } from "./feature/feature-manager.js";
+export { FeatureManager } from "./feature/feature-manager.js";
+export type { AuthenticatedFileServerOptions, ByteRange, FileResolveResult, FileServerHandle, FileServerTokenVerifier } from "./http/authenticated-file-server.js";
+export { contentTypeFor, createAuthenticatedFileServer, parseRangeHeader, parseTokenizedUrl, resolveFilePath } from "./http/authenticated-file-server.js";
+export type { DataPlaneEligibility, DataPlaneMatch } from "./http/data-plane-registry.js";
+export { canServeDataPlane, DataPlaneRegistry } from "./http/data-plane-registry.js";
+export type { FileDataPlaneOptions } from "./http/file-data-plane.js";
+export { createFileDataPlaneHandler } from "./http/file-data-plane.js";
+export { allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, closeLanHttp, DEFAULT_LAN_HTTP_PORT, readLanHttpState, registerLanHttpHandler } from "./http/lan-http-bind.js";
+export type { ReverseProxyOptions } from "./http/reverse-proxy.js";
+export { proxyToUpstream } from "./http/reverse-proxy.js";
+export type { ChildFanoutDelta, ChildFanoutRegistry, ChildFanoutSample, CrossNodeEventStats, EventPlaneCounters, EventPlaneReader, EventPlaneSources, EventPlaneWindow } from "./kernel/event-plane-report.js";
+export { createEventPlaneMeter, createEventPlaneReader, diffEventPlane, EVENT_PLANE_TOP_N, formatEventPlane } from "./kernel/event-plane-report.js";
+export type { SocketPeerDelta, SocketPeerSample, SocketPlaneBaseline, SocketPlaneCounters, SocketPlaneMeter, SocketPlaneReader, SocketPlaneRegistry, SocketPlaneRegistryChild, SocketPlaneSources, SocketPlaneWindow } from "./kernel/socket-plane-report.js";
+export { createSocketPlaneMeter, createSocketPlaneReader, diffSocketPlane, EMPTY_SOCKET_PLANE_BASELINE, formatSocketPlane, readSocketQueues, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N } from "./kernel/socket-plane-report.js";
+export type { SocketPeerQueue, SocketQueueReading } from "./kernel/socket-plane-report.js";
+export type { MeshPeerQueue, MeshQueueReader } from "./kernel/moleculer/mesh-queue-report.js";
+export { createMeshQueueReader, formatMeshQueue, MESH_QUEUE_TOP_N } from "./kernel/moleculer/mesh-queue-report.js";
+export type { OutboundQueueGate, OutboundQueueGateOptions, OutboundQueueReading, OutboundQueueVerdict } from "./kernel/outbound-queue-watch.js";
+export { createOutboundQueueGate, formatOutboundQueueVerdict, OUTBOUND_QUEUE_COOLDOWN_MS, OUTBOUND_QUEUE_SUSTAIN_MS, OUTBOUND_QUEUE_THRESHOLD_BYTES } from "./kernel/outbound-queue-watch.js";
+export type { HeapDiagnosticDeps, HeapDiagnosticRequest, HeapSpaceReader, HeapSpaceUsage } from "./kernel/heap-spaces.js";
+export { DECISIVE_HEAP_SPACES, emitHeapDiagnosticReport, formatHeapSpaces, HEAP_SPACE_REPORT_MIN_MB, heapSpaceField, readHeapSpaces, selectReportedSpaces } from "./kernel/heap-spaces.js";
+export type { ArrayBufferCensus, ArrayBufferCensusContext, ArrayBufferCensusGate, ArrayBufferCensusGateOptions, ArrayBufferCensusReport, ArrayBufferCensusVerdict, ArrayBufferExactSize, ArrayBufferSizeBucket } from "./kernel/array-buffer-census.js";
+export { ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ARRAY_BUFFER_CENSUS_THRESHOLD_MB, ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, createArrayBufferCensusGate, createInspectorArrayBufferCensus, formatArrayBufferCensus, isArrayBufferCensusReport } from "./kernel/array-buffer-census.js";
+export type { ArrayBufferCensusProbe, DeferredHeapWatchSink, HeapReclaimer, HeapReclaimOptions, HeapSample, HeapWatchProbes, HeapWatchSink, LoopDelayMeter, LoopDelaySample, RssBreakdown, RssBudgetOptions, RssBudgetState, RssGrowthShape, RunnerHeapWatchOptions } from "./kernel/heap-watch.js";
+export { buildHeapSample, createDeferredHeapWatchSink, createLoopDelayMeter, createV8Reclaimer, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_MAIN_HEAP_WATCH_LABEL, HUB_MAIN_RSS_BUDGET_MB, HUB_RSS_BUDGET_ENV, hubMainRssBudget, describeRss, nextRssBudgetState, parseRssBudgetMb, reclaimIntervalMs, RSS_BUDGET_REANNOUNCE_MIN_MS, RSS_BUDGET_RELEASE_RATIO, RUNNER_HEAP_WATCH_INTERVAL_MS, RUNNER_RSS_BUDGET_ENV, shouldReclaim, startHeapWatch, startRunnerHeapWatch, strandedMb, ZERO_LOOP_DELAY } from "./kernel/heap-watch.js";
+export type { StallVerdict } from "./kernel/event-loop-stall-monitor.js";
+export { attributeStall, STALL_REPORT_MS, STALL_TICK_MS, startEventLoopStallMonitor } from "./kernel/event-loop-stall-monitor.js";
+export type { AddonDataPlaneFacility, DataPlaneSink } from "./kernel/moleculer/addon-data-plane-facility.js";
+export { createAddonDataPlaneFacility } from "./kernel/moleculer/addon-data-plane-facility.js";
+export { createAddonPeerBytesFacility, hostNodeIdOf, type AddonPeerBytesFacility, type AddonPeerBytesFacilityArgs } from "./kernel/moleculer/addon-peer-bytes-facility.js";
+export type { ElementState, ElementStatus } from "./lifecycle/lifecycle-state-machine.js";
+export { LifecycleStateMachine } from "./lifecycle/lifecycle-state-machine.js";
+export { formatLogLine } from "./logging/formatter.js";
+export type { ILogDestination } from "./logging/log-manager.js";
+export { LogManager } from "./logging/log-manager.js";
+export { isCredentialKeyName, redactLogEntry, redactLogMeta, redactLogText } from "./logging/log-redactor.js";
+export { clearPlatformKeychainKey, getPlatformKeychainKey, type PlatformKeychainKey, setPlatformKeychainKey } from "./builtins/keychain/platform-key-source.js";
+export type { LogEntry, LogFilter, LogLevel } from "./logging/log-ring-buffer.js";
+export { LogRingBuffer } from "./logging/log-ring-buffer.js";
+export type { LevelBearing } from "./logging/logging-gate.js";
+export { DEFAULT_LOG_LEVEL, LoggingGate } from "./logging/logging-gate.js";
+export { __resetLoggingGateForTests, getLoggingGate } from "./logging/logging-gate.singleton.js";
+export type { IScopedLogger } from "./logging/scoped-logger.js";
+export { ScopedLogger } from "./logging/scoped-logger.js";
+export type { ClientNetworkStats, DeviceNetworkStats, INetworkQualityTracker, StreamNetworkStats } from "./network/network-quality.js";
+export { NetworkQualityTracker } from "./network/network-quality.js";
+export type { NotificationTargetRef } from "./notification/notification-service.js";
+export { NotificationService } from "./notification/notification-service.js";
+export type { Unsubscribe } from "./notification/toast-service.js";
+export { ToastService } from "./notification/toast-service.js";
+export { EngineManagerResolver } from "./pipeline/engine-manager-resolver.js";
+export { PipelineRunner } from "./pipeline/pipeline-runner.js";
+export type { ValidationIssue, ValidationResult } from "./pipeline/pipeline-validator.js";
+export { PipelineValidator } from "./pipeline/pipeline-validator.js";
+export type { PidStats } from "./process/resource-monitor.js";
+export { getPidStats, getSinglePidStats } from "./process/resource-monitor.js";
+export { PythonEnvManager } from "./python/python-env-manager.js";
+export type { IReplContextProvider, IReplEngine, ReplResult, ReplScope, ReplSessionContext } from "./repl/interfaces.js";
+export { ReplEngine } from "./repl/repl-engine.js";
+export type { IStorageBackend } from "./storage/fs-storage-backend.js";
+export { FsStorageBackend } from "./storage/fs-storage-backend.js";
+export type { StorageLocationName } from "./storage/storage-location-manager.js";
+export { StorageLocationManager } from "./storage/storage-location-manager.js";
+export type { IFileStorage, IStorageLocation, IStorageProvider as ICoreStorageProvider, IStructuredStorage, QueryFilter, StorageRecord } from "./storage/storage-manager.js";
+export { StorageManager } from "./storage/storage-manager.js";
+export * from "./tls/index.js";
+export { IntegrationRegistry } from "./builtins/sqlite-storage/integration-registry.js";
+export { type EnsureAddonNativePrebuildsOptions, ensureAddonNativePrebuilds, type NativeEnsureOutcome, type NativeEnsureResult } from "./kernel/deps/ensure-addon-natives.js";
+export { type EnsureNativePrebuildsOptions, ensureNativePrebuilds, hasDotNode, NATIVE_SCAN_DEPTH, type PrebuildFetchFn, type PrebuildTarget, TRADITIONAL_NATIVE_PACKAGES } from "./kernel/deps/ensure-native-prebuilds.js";
+export { type NpmInvocation, type RunNpmOptions, buildNpmChildEnv, resolveNpmInvocation, runNpm } from "./kernel/deps/npm-command.js";
+export * from "./kernel/index.js";
 /** The token a CHILD uses to say "this method is declared optional and this
- *  provider does not serve it", which the hub turns into `NOT_IMPLEMENTED`.
- *  Crosses a UDS boundary as a plain message, so it is a prefix, not a class. */
-export { CAP_METHOD_NOT_IMPLEMENTED } from './kernel/moleculer/child-cap-dispatch.js';
-export { BackupDecryptError, BackupKeyFormatError, BackupKeyMismatchError, generateBackupKeyPair, readBackupEncryptionHeader, } from './builtins/system-backup/backup-encryption.js';
-export { SystemBackupService } from './builtins/system-backup/system-backup.service.js';
-export { BackupKeyRequiredError, prepareRestoreArchive, } from './builtins/backup-orchestrator/restore-archive.js';
+*  provider does not serve it", which the hub turns into `NOT_IMPLEMENTED`.
+*  Crosses a UDS boundary as a plain message, so it is a prefix, not a class. */
+export { CAP_METHOD_NOT_IMPLEMENTED } from "./kernel/moleculer/child-cap-dispatch.js";
+export { BackupDecryptError, BackupKeyFormatError, BackupKeyMismatchError, generateBackupKeyPair, readBackupEncryptionHeader } from "./builtins/system-backup/backup-encryption.js";
+export { SystemBackupService } from "./builtins/system-backup/system-backup.service.js";
+export { BackupKeyRequiredError, prepareRestoreArchive } from "./builtins/backup-orchestrator/restore-archive.js";

package/dist/index.js

@@ -33,7 +33,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-CNj73d4D.js");
 const require_tls = require("./tls-BWpwU-d5.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-nURMuVTX.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-Bnr8brru.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-BgWGRxN5.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
@@ -7889,8 +7889,6 @@ var keychainSchema = zod.z.object({
 	*/
 	previousKeyFile: zod.z.string().min(1).optional()
 });
-/** Bootstrap config -- loaded from config.yaml ONLY at startup.
-*  All other settings live in SQL (system_settings table). */
 var bootstrapSchema = zod.z.object({
 	/** Server mode: 'hub' (full server) or 'agent' (worker node) */
 	mode: zod.z.enum(["hub", "agent"]).default("hub"),
@@ -14147,6 +14145,7 @@ exports.createHubCapForwardService = require_hub_cap_forward.createHubCapForward
 exports.createHubService = createHubService;
 exports.createInspectorArrayBufferCensus = require_child_cap_dispatch.createInspectorArrayBufferCensus;
 exports.createKernelHwAccel = require_child_cap_dispatch.createKernelHwAccel;
+exports.createKernelInferenceEngine = require_child_cap_dispatch.createKernelInferenceEngine;
 exports.createLocalTransport = require_child_cap_dispatch.createLocalTransport;
 exports.createLoopDelayMeter = require_child_cap_dispatch.createLoopDelayMeter;
 exports.createMeshAccessMiddleware = createMeshAccessMiddleware;
@@ -14319,6 +14318,7 @@ exports.loadMeshCa = require_builtins_system_config_system_config_addon.loadMesh
 exports.loadTlsCert = require_tls.loadTlsCert;
 exports.localEndpointPath = require_child_cap_dispatch.localEndpointPath;
 exports.localProviderLink = require_child_cap_dispatch.localProviderLink;
+exports.mapSignalsToInferenceHardware = require_child_cap_dispatch.mapSignalsToInferenceHardware;
 exports.meshErrorType = meshErrorType;
 exports.mintAgentUiUnlockTicket = require_builtins_system_config_system_config_addon.mintAgentUiUnlockTicket;
 exports.mintMeshJoinToken = require_builtins_system_config_system_config_addon.mintMeshJoinToken;
@@ -14337,6 +14337,7 @@ exports.parseTokenizedUrl = require_event_loop_stall_monitor.parseTokenizedUrl;
 exports.partitionIsolatedBuiltinIds = partitionIsolatedBuiltinIds;
 exports.prepareBootTls = require_tls.prepareBootTls;
 exports.prepareRestoreArchive = require_restore_archive.prepareRestoreArchive;
+exports.probePlatform = require_child_cap_dispatch.probePlatform;
 exports.processJoinTokenJtiStore = require_builtins_system_config_system_config_addon.processJoinTokenJtiStore;
 exports.processJwtSigningKey = require_jwt_signing_key.processJwtSigningKey;
 exports.processMeshCrl = require_builtins_system_config_system_config_addon.processMeshCrl;