@camstack/system 1.2.390 → 1.2.392

package/dist/kernel/addon-loader.d.ts

@@ -1,144 +1,144 @@
-import { AddonDeclaration, ICamstackAddon, IScopedLogger, StorageLocationDeclaration } from '@camstack/types';
+import type { AddonDeclaration, ICamstackAddon, IScopedLogger, StorageLocationDeclaration } from "@camstack/types";
 /**
- * Cache-bust key for an addon entry module: the `?v=` query that makes each
- * on-disk REVISION of `entryPath` a distinct ESM module URL. Returns null when
- * the entry cannot be stat'd — the caller then does a plain import.
- *
- * The key is `<version>-<content hash>`, and BOTH halves are load-bearing
- * because each on its own has a documented way of not changing across a real
- * redeploy:
- *
- *  - **mtime does not change.** `npm pack` normalises every file's mtime in the
- *    tarball to 499162500000 (1985-10-26); every install path here extracts
- *    such a tarball, so the entry file of v1.0.0 and of v1.0.99 carry the same
- *    mtime. An mtime-only key (what this used to be) is a NO-OP — it produced
- *    one byte-identical URL for every version of every addon ever installed.
- *  - **the version does not change** on a `camstack deploy` of an unbumped
- *    workspace package — the whole dev loop.
- *  - **the entry hash does not change** when a multi-chunk dist alters a chunk
- *    the entry only re-exports; the version bump covers that case.
- *
- * Hashing the entry costs one extra read of an already-read file (~1.5 MB for
- * the largest addon bundle, single-digit ms) once per addon load. Cheap against
- * what a stale key costs: hub-main keeps validating `addons.custom` input
- * against the OLD `customActions` schema — silently STRIPPING newly-added
- * fields — and, worse, Node caches a load that THREW as a rejected module and
- * replays that rejection for every later retry at the same URL. On 2026-08-12
- * `@camstack/addon-export-hap` burned 126 identical failed load retries over
- * 10.5h, none of which could have succeeded: the fixed bytes on disk were never
- * read.
- *
- * Never throws: an unreadable version degrades to the mtime, an unreadable body
- * to mtime+size.
- */
+* Cache-bust key for an addon entry module: the `?v=` query that makes each
+* on-disk REVISION of `entryPath` a distinct ESM module URL. Returns null when
+* the entry cannot be stat'd — the caller then does a plain import.
+*
+* The key is `<version>-<content hash>`, and BOTH halves are load-bearing
+* because each on its own has a documented way of not changing across a real
+* redeploy:
+*
+*  - **mtime does not change.** `npm pack` normalises every file's mtime in the
+*    tarball to 499162500000 (1985-10-26); every install path here extracts
+*    such a tarball, so the entry file of v1.0.0 and of v1.0.99 carry the same
+*    mtime. An mtime-only key (what this used to be) is a NO-OP — it produced
+*    one byte-identical URL for every version of every addon ever installed.
+*  - **the version does not change** on a `camstack deploy` of an unbumped
+*    workspace package — the whole dev loop.
+*  - **the entry hash does not change** when a multi-chunk dist alters a chunk
+*    the entry only re-exports; the version bump covers that case.
+*
+* Hashing the entry costs one extra read of an already-read file (~1.5 MB for
+* the largest addon bundle, single-digit ms) once per addon load. Cheap against
+* what a stale key costs: hub-main keeps validating `addons.custom` input
+* against the OLD `customActions` schema — silently STRIPPING newly-added
+* fields — and, worse, Node caches a load that THREW as a rejected module and
+* replays that rejection for every later retry at the same URL. On 2026-08-12
+* `@camstack/addon-export-hap` burned 126 identical failed load retries over
+* 10.5h, none of which could have succeeded: the fixed bytes on disk were never
+* read.
+*
+* Never throws: an unreadable version degrades to the mtime, an unreadable body
+* to mtime+size.
+*/
 export declare function addonModuleCacheKey(entryPath: string): string | null;
 export interface RegisteredAddon {
-    readonly declaration: AddonDeclaration;
-    readonly packageName: string;
-    readonly packageVersion: string;
-    /** Human-readable package name from camstack.displayName in package.json */
-    readonly packageDisplayName?: string;
-    /**
-     * Optional bundle metadata when the npm package ships multiple addon
-     * entries. Mirrors `AddonPackageManifest.bundle`. Drives the
-     * collapsible bundle card in the Addons admin UI.
-     */
-    readonly bundle?: {
-        displayName: string;
-        description?: string;
-        icon?: string;
-    };
-    readonly addonClass: new () => ICamstackAddon;
-    /**
-     * Full raw module namespace. Consumers can read additional named exports
-     * (e.g. `customActions`) without instantiating the addon — lets the hub
-     * register a forkable addon's custom-action catalog with real zod
-     * schemas before the child process is up.
-     */
-    readonly module: Readonly<Record<string, unknown>>;
+	readonly declaration: AddonDeclaration;
+	readonly packageName: string;
+	readonly packageVersion: string;
+	/** Human-readable package name from camstack.displayName in package.json */
+	readonly packageDisplayName?: string;
+	/**
+	* Optional bundle metadata when the npm package ships multiple addon
+	* entries. Mirrors `AddonPackageManifest.bundle`. Drives the
+	* collapsible bundle card in the Addons admin UI.
+	*/
+	readonly bundle?: {
+		displayName: string;
+		description?: string;
+		icon?: string;
+	};
+	readonly addonClass: new () => ICamstackAddon;
+	/**
+	* Full raw module namespace. Consumers can read additional named exports
+	* (e.g. `customActions`) without instantiating the addon — lets the hub
+	* register a forkable addon's custom-action catalog with real zod
+	* schemas before the child process is up.
+	*/
+	readonly module: Readonly<Record<string, unknown>>;
 }
 /**
- * Per-package failure record. Surfaced via `listLoadFailures()` so the
- * AddonRegistry can hand the failures to the kernel's
- * `AddonHealthMonitor` after `loadFromDirectory()` completes — the
- * health monitor then schedules the retry loop and emits operator-
- * visible alerts post-grace.
- *
- * Two failure shapes are tracked:
- *   - **package-level**: package.json couldn't be read/parsed, or the
- *     manifest was malformed. `addonId` undefined.
- *   - **declaration-level**: per-addon load failure inside
- *     `loadDeclaration` (entry import threw, addon class resolution
- *     failed, etc). `addonId` set to `declaration.id`.
- */
+* Per-package failure record. Surfaced via `listLoadFailures()` so the
+* AddonRegistry can hand the failures to the kernel's
+* `AddonHealthMonitor` after `loadFromDirectory()` completes — the
+* health monitor then schedules the retry loop and emits operator-
+* visible alerts post-grace.
+*
+* Two failure shapes are tracked:
+*   - **package-level**: package.json couldn't be read/parsed, or the
+*     manifest was malformed. `addonId` undefined.
+*   - **declaration-level**: per-addon load failure inside
+*     `loadDeclaration` (entry import threw, addon class resolution
+*     failed, etc). `addonId` set to `declaration.id`.
+*/
 export interface AddonLoadFailure {
-    readonly packageName: string;
-    readonly addonDir: string;
-    readonly addonId?: string;
-    readonly error: Error;
-    readonly timestamp: number;
+	readonly packageName: string;
+	readonly addonDir: string;
+	readonly addonId?: string;
+	readonly error: Error;
+	readonly timestamp: number;
 }
 /**
- * Pure extraction of per-addon storage-location declarations from a set of
- * registered addons. Each registered addon carries its manifest declaration
- * (`RegisteredAddon.declaration`), whose optional `storageLocations` array is
- * the `camstack.addons[].storageLocations` entry authored in package.json.
- *
- * Returns ONE inner array per addon that declared at least one location;
- * addons declaring nothing are omitted entirely (no empty arrays). The result
- * is the `perAddon` input shape consumed by
- * {@link buildStorageLocationRegistry}.
- */
+* Pure extraction of per-addon storage-location declarations from a set of
+* registered addons. Each registered addon carries its manifest declaration
+* (`RegisteredAddon.declaration`), whose optional `storageLocations` array is
+* the `camstack.addons[].storageLocations` entry authored in package.json.
+*
+* Returns ONE inner array per addon that declared at least one location;
+* addons declaring nothing are omitted entirely (no empty arrays). The result
+* is the `perAddon` input shape consumed by
+* {@link buildStorageLocationRegistry}.
+*/
 export declare function extractStorageLocationDeclarations(addons: Iterable<RegisteredAddon>): StorageLocationDeclaration[][];
 export declare class AddonLoader {
-    private addons;
-    private readonly loadFailures;
-    private readonly logger;
-    constructor(logger?: IScopedLogger);
-    /**
-     * Failures encountered during the most recent `loadFromDirectory` /
-     * `loadFromAddonDir` pass. Cleared (per-package) on a successful
-     * subsequent reload so retries don't see stale entries. Cumulative
-     * across multiple loads otherwise.
-     */
-    listLoadFailures(): readonly AddonLoadFailure[];
-    /** Forget any tracked failures for a given package — uninstall path. */
-    clearLoadFailures(packageName: string): void;
-    /** Scan addons directory and load all addon packages.
-     *  Supports scoped layout: addons/@scope/package-name/
-     *
-     *  `skipPackages` names scoped packages (e.g. `@camstack/system`) that the
-     *  caller loads from elsewhere — the single-copy model loads the framework
-     *  BUILTINS from the active closure, not the (now-inert) addons-dir copy, so
-     *  the addons-dir `@camstack/system` must NOT be double-loaded here. */
-    loadFromDirectory(addonsDir: string, skipPackages?: readonly string[]): Promise<void>;
-    private tryLoadAddon;
-    /** Load addon from a specific directory (package.json + dist/) */
-    loadFromAddonDir(addonDir: string): Promise<void>;
-    private loadDeclaration;
-    /** Load addon from a direct path (for development/testing) */
-    loadFromPath(addonId: string, modulePath: string, packageName: string, declaration?: Partial<AddonDeclaration>, packageVersion?: string): Promise<void>;
-    /** Get a registered addon by ID */
-    getAddon(addonId: string): RegisteredAddon | undefined;
-    /** List all registered addons */
-    listAddons(): RegisteredAddon[];
-    /**
-     * Per-addon storage-location declarations across every registered addon.
-     *
-     * Each registered addon's `declaration.storageLocations` (the
-     * `camstack.addons[].storageLocations` array from package.json) is surfaced
-     * as one inner array; addons declaring nothing are omitted. The result is
-     * fed directly to `buildStorageLocationRegistry(perAddon)` so the
-     * storage-orchestrator can aggregate declarations and seed `<id>:default`
-     * instances.
-     */
-    listStorageLocationDeclarations(): StorageLocationDeclaration[][];
-    /** Check if an addon is registered */
-    hasAddon(addonId: string): boolean;
-    /**
-     * Create a new instance of an addon (not yet initialized).
-     * Injects the manifest from package.json (AddonDeclaration) so the
-     * addon class doesn't need to declare it.
-     */
-    createInstance(addonId: string): ICamstackAddon;
+	private addons;
+	private readonly loadFailures;
+	private readonly logger;
+	constructor(logger?: IScopedLogger);
+	/**
+	* Failures encountered during the most recent `loadFromDirectory` /
+	* `loadFromAddonDir` pass. Cleared (per-package) on a successful
+	* subsequent reload so retries don't see stale entries. Cumulative
+	* across multiple loads otherwise.
+	*/
+	listLoadFailures(): readonly AddonLoadFailure[];
+	/** Forget any tracked failures for a given package — uninstall path. */
+	clearLoadFailures(packageName: string): void;
+	/** Scan addons directory and load all addon packages.
+	*  Supports scoped layout: addons/@scope/package-name/
+	*
+	*  `skipPackages` names scoped packages (e.g. `@camstack/system`) that the
+	*  caller loads from elsewhere — the single-copy model loads the framework
+	*  BUILTINS from the active closure, not the (now-inert) addons-dir copy, so
+	*  the addons-dir `@camstack/system` must NOT be double-loaded here. */
+	loadFromDirectory(addonsDir: string, skipPackages?: readonly string[]): Promise<void>;
+	private tryLoadAddon;
+	/** Load addon from a specific directory (package.json + dist/) */
+	loadFromAddonDir(addonDir: string): Promise<void>;
+	private loadDeclaration;
+	/** Load addon from a direct path (for development/testing) */
+	loadFromPath(addonId: string, modulePath: string, packageName: string, declaration?: Partial<AddonDeclaration>, packageVersion?: string): Promise<void>;
+	/** Get a registered addon by ID */
+	getAddon(addonId: string): RegisteredAddon | undefined;
+	/** List all registered addons */
+	listAddons(): RegisteredAddon[];
+	/**
+	* Per-addon storage-location declarations across every registered addon.
+	*
+	* Each registered addon's `declaration.storageLocations` (the
+	* `camstack.addons[].storageLocations` array from package.json) is surfaced
+	* as one inner array; addons declaring nothing are omitted. The result is
+	* fed directly to `buildStorageLocationRegistry(perAddon)` so the
+	* storage-orchestrator can aggregate declarations and seed `<id>:default`
+	* instances.
+	*/
+	listStorageLocationDeclarations(): StorageLocationDeclaration[][];
+	/** Check if an addon is registered */
+	hasAddon(addonId: string): boolean;
+	/**
+	* Create a new instance of an addon (not yet initialized).
+	* Injects the manifest from package.json (AddonDeclaration) so the
+	* addon class doesn't need to declare it.
+	*/
+	createInstance(addonId: string): ICamstackAddon;
 }

package/dist/kernel/addon-manifest.d.ts

@@ -1,128 +1,128 @@
 /**
- * `closure` — re-aligned from the running `@camstack/server` closure at boot.
- *
- * Distinct from `bundled`, which is the copy an Electron app shipped with and
- * seeds ONCE. A `closure` install is a refresh of a copy that was already
- * there, and naming it separately is what lets an operator tell "I deployed
- * this" from "the server update brought it" — the distinction the six stale
- * copies of 2026-09-17 had no way to express, all of them reading `upload`
- * because each HAD been a deliberate deploy, once. See D518.
- */
-export type AddonInstallSource = 'npm' | 'local' | 'upload' | 'bundled' | 'seed' | 'closure';
+* `closure` — re-aligned from the running `@camstack/server` closure at boot.
+*
+* Distinct from `bundled`, which is the copy an Electron app shipped with and
+* seeds ONCE. A `closure` install is a refresh of a copy that was already
+* there, and naming it separately is what lets an operator tell "I deployed
+* this" from "the server update brought it" — the distinction the six stale
+* copies of 2026-09-17 had no way to express, all of them reading `upload`
+* because each HAD been a deliberate deploy, once. See D518.
+*/
+export type AddonInstallSource = "npm" | "local" | "upload" | "bundled" | "seed" | "closure";
 export interface AddonManifestEntry {
-    /** Full pkg name, e.g. `@camstack/addon-pipeline`. */
-    name: string;
-    /** Semver currently installed. */
-    version: string;
-    /** Where this version came from. */
-    source: AddonInstallSource;
-    /** ISO 8601 of first install. */
-    installedAt: string;
-    /** ISO 8601 of last update (== installedAt for first install). */
-    updatedAt: string;
-    /**
-     * Path (absolute) of the most recent pre-update backup, if any.
-     * Used by `applyUpdate` rollback when an upgrade fails its post-restart
-     * health check. Cleared once the new version is confirmed healthy.
-     */
-    lastBackupDir?: string;
-    /**
-     * Free-form, addon-specific metadata. Currently unused but reserved so
-     * future fields (e.g. integrity hash, peer-dep checks) don't require a
-     * manifest schema bump.
-     */
-    meta?: Record<string, unknown>;
+	/** Full pkg name, e.g. `@camstack/addon-pipeline`. */
+	name: string;
+	/** Semver currently installed. */
+	version: string;
+	/** Where this version came from. */
+	source: AddonInstallSource;
+	/** ISO 8601 of first install. */
+	installedAt: string;
+	/** ISO 8601 of last update (== installedAt for first install). */
+	updatedAt: string;
+	/**
+	* Path (absolute) of the most recent pre-update backup, if any.
+	* Used by `applyUpdate` rollback when an upgrade fails its post-restart
+	* health check. Cleared once the new version is confirmed healthy.
+	*/
+	lastBackupDir?: string;
+	/**
+	* Free-form, addon-specific metadata. Currently unused but reserved so
+	* future fields (e.g. integrity hash, peer-dep checks) don't require a
+	* manifest schema bump.
+	*/
+	meta?: Record<string, unknown>;
 }
 /** One correction `reconcileFromDisk` made to bring the manifest back to disk truth. */
 export interface ManifestReconcileChange {
-    readonly kind: 'added' | 'version-corrected' | 'pruned';
-    readonly name: string;
-    /** Version the manifest claimed before the change. Absent for `added`. */
-    readonly from?: string;
-    /** Version now recorded. Absent for `pruned`. */
-    readonly to?: string;
+	readonly kind: "added" | "version-corrected" | "pruned";
+	readonly name: string;
+	/** Version the manifest claimed before the change. Absent for `added`. */
+	readonly from?: string;
+	/** Version now recorded. Absent for `pruned`. */
+	readonly to?: string;
 }
 export interface AddonManifestFile {
-    /**
-     * Schema version. Increment whenever the on-disk shape changes
-     * incompatibly so older readers can refuse to load.
-     */
-    version: 1;
-    /** Per-package state, keyed by full pkg name. */
-    addons: Record<string, AddonManifestEntry>;
-    /** ISO 8601 of last manifest write. */
-    updatedAt: string;
+	/**
+	* Schema version. Increment whenever the on-disk shape changes
+	* incompatibly so older readers can refuse to load.
+	*/
+	version: 1;
+	/** Per-package state, keyed by full pkg name. */
+	addons: Record<string, AddonManifestEntry>;
+	/** ISO 8601 of last manifest write. */
+	updatedAt: string;
 }
 export declare class AddonManifest {
-    private readonly manifestPath;
-    private cache;
-    constructor(addonsDir: string);
-    /**
-     * Read the manifest from disk. Returns an empty manifest if the file is
-     * missing or corrupted (logs a warning to stderr in the corrupted case).
-     * Cached per instance — call `invalidate()` to force a re-read.
-     */
-    read(): AddonManifestFile;
-    /**
-     * Atomic write — writes to a tmpfile in the same directory, then renames.
-     * Rename is atomic on the same filesystem, so readers can never observe
-     * a half-written file.
-     */
-    write(manifest: AddonManifestFile): void;
-    /** Lookup a single addon's manifest entry, or `null` if not tracked. */
-    get(name: string): AddonManifestEntry | null;
-    /** List every tracked entry. */
-    list(): AddonManifestEntry[];
-    /**
-     * Insert or replace an addon entry. `installedAt` is preserved if the
-     * entry already exists; only `updatedAt` advances on subsequent writes.
-     */
-    upsert(name: string, fields: Omit<AddonManifestEntry, 'name' | 'installedAt' | 'updatedAt'>): void;
-    /** Remove an addon from tracking (e.g. uninstall). */
-    remove(name: string): void;
-    /**
-     * Drop the in-memory cache so the next `read()` re-loads from disk.
-     * Useful when an external process may have written the manifest.
-     */
-    invalidate(): void;
-    /**
-     * Reconcile the manifest against what is actually present on disk.
-     *
-     * **The directory is the truth.** It is what `AddonLoader` runs; a manifest
-     * that disagrees with it is a lie the update flow and the admin UI then
-     * repeat. Three corrections, all idempotent and safe on every boot:
-     *
-     *  - **added** — an on-disk addon with no entry gets one, source `'seed'`.
-     *    Addons baked into the Docker/Electron image are copied straight into
-     *    `addonsDir` by the container entrypoint (`ensureRequiredPackages` then
-     *    sees `package.json` present and skips, never calling `upsert`), so they
-     *    would otherwise stay untracked and `applyUpdate` would reject them with
-     *    "not currently tracked in manifest" — what broke "Update all" on a
-     *    fresh image.
-     *  - **version-corrected** — an entry whose version disagrees with the
-     *    installed `package.json` adopts the DISK version. Provenance (`source`,
-     *    `installedAt`) is NOT derivable from disk and stays authoritative here;
-     *    `updatedAt` is left alone because the correction is not an update, and
-     *    stamping `now` would claim an install that never happened.
-     *  - **pruned** — an entry naming a directory that does not exist. The live
-     *    hub carried three (`@camstack/system 1.2.29`, `addon-viewer-ui 1.1.39`,
-     *    `addon-agent-ui 1.2.4`); `@camstack/system` in particular is
-     *    host-provided and deliberately NOT seeded under `addonsDir`
-     *    ([D45]), so its entry advertised a copy that must not exist.
-     *    An entry holding a `lastBackupDir` is NEVER pruned: that pointer is the
-     *    only reference to a pre-update backup, and the launcher's backup sweep
-     *    reclaims anything the manifest does not point at.
-     *
-     * `onChange` receives one record per correction, so the caller can log
-     * exactly what moved. Returns the total number of changes.
-     */
-    reconcileFromDisk(addonsDir: string, onChange?: (change: ManifestReconcileChange) => void): number;
-    /**
-     * Migration helper: if the manifest is empty but the addons directory
-     * has packages with `.install-source` markers (the legacy per-addon
-     * tracking), seed the manifest from those markers. Runs once at boot.
-     * Returns the number of entries migrated.
-     */
-    migrateFromInstallSourceMarkers(addonsDir: string): number;
-    private empty;
+	private readonly manifestPath;
+	private cache;
+	constructor(addonsDir: string);
+	/**
+	* Read the manifest from disk. Returns an empty manifest if the file is
+	* missing or corrupted (logs a warning to stderr in the corrupted case).
+	* Cached per instance — call `invalidate()` to force a re-read.
+	*/
+	read(): AddonManifestFile;
+	/**
+	* Atomic write — writes to a tmpfile in the same directory, then renames.
+	* Rename is atomic on the same filesystem, so readers can never observe
+	* a half-written file.
+	*/
+	write(manifest: AddonManifestFile): void;
+	/** Lookup a single addon's manifest entry, or `null` if not tracked. */
+	get(name: string): AddonManifestEntry | null;
+	/** List every tracked entry. */
+	list(): AddonManifestEntry[];
+	/**
+	* Insert or replace an addon entry. `installedAt` is preserved if the
+	* entry already exists; only `updatedAt` advances on subsequent writes.
+	*/
+	upsert(name: string, fields: Omit<AddonManifestEntry, "name" | "installedAt" | "updatedAt">): void;
+	/** Remove an addon from tracking (e.g. uninstall). */
+	remove(name: string): void;
+	/**
+	* Drop the in-memory cache so the next `read()` re-loads from disk.
+	* Useful when an external process may have written the manifest.
+	*/
+	invalidate(): void;
+	/**
+	* Reconcile the manifest against what is actually present on disk.
+	*
+	* **The directory is the truth.** It is what `AddonLoader` runs; a manifest
+	* that disagrees with it is a lie the update flow and the admin UI then
+	* repeat. Three corrections, all idempotent and safe on every boot:
+	*
+	*  - **added** — an on-disk addon with no entry gets one, source `'seed'`.
+	*    Addons baked into the Docker/Electron image are copied straight into
+	*    `addonsDir` by the container entrypoint (`ensureRequiredPackages` then
+	*    sees `package.json` present and skips, never calling `upsert`), so they
+	*    would otherwise stay untracked and `applyUpdate` would reject them with
+	*    "not currently tracked in manifest" — what broke "Update all" on a
+	*    fresh image.
+	*  - **version-corrected** — an entry whose version disagrees with the
+	*    installed `package.json` adopts the DISK version. Provenance (`source`,
+	*    `installedAt`) is NOT derivable from disk and stays authoritative here;
+	*    `updatedAt` is left alone because the correction is not an update, and
+	*    stamping `now` would claim an install that never happened.
+	*  - **pruned** — an entry naming a directory that does not exist. The live
+	*    hub carried three (`@camstack/system 1.2.29`, `addon-viewer-ui 1.1.39`,
+	*    `addon-agent-ui 1.2.4`); `@camstack/system` in particular is
+	*    host-provided and deliberately NOT seeded under `addonsDir`
+	*    ([D45]), so its entry advertised a copy that must not exist.
+	*    An entry holding a `lastBackupDir` is NEVER pruned: that pointer is the
+	*    only reference to a pre-update backup, and the launcher's backup sweep
+	*    reclaims anything the manifest does not point at.
+	*
+	* `onChange` receives one record per correction, so the caller can log
+	* exactly what moved. Returns the total number of changes.
+	*/
+	reconcileFromDisk(addonsDir: string, onChange?: (change: ManifestReconcileChange) => void): number;
+	/**
+	* Migration helper: if the manifest is empty but the addons directory
+	* has packages with `.install-source` markers (the legacy per-addon
+	* tracking), seed the manifest from those markers. Runs once at boot.
+	* Returns the number of entries migrated.
+	*/
+	migrateFromInstallSourceMarkers(addonsDir: string): number;
+	private empty;
 }

package/dist/kernel/addon-residue.d.ts

@@ -1,49 +1,45 @@
 /** Where residue is moved to, relative to the addon root. */
 export declare const QUARANTINE_DIRNAME = ".quarantine";
-export type ResidueReason = 
-/** The directory name carries a backup marker — `.bak…`, `.old…`, `.orig…`. */
-'backup-residue'
-/** The directory declares a package whose name is not this directory. */
- | 'name-mismatch';
+export type ResidueReason = "backup-residue" | "name-mismatch";
 export interface AddonDirCandidate {
-    /** Directory basename under the addon root (or under its `@scope`). */
-    readonly dirName: string;
-    /** `name` from the directory's `package.json`; null when absent/unreadable. */
-    readonly declaredName: string | null;
+	/** Directory basename under the addon root (or under its `@scope`). */
+	readonly dirName: string;
+	/** `name` from the directory's `package.json`; null when absent/unreadable. */
+	readonly declaredName: string | null;
 }
 export interface ResidueVerdict extends AddonDirCandidate {
-    readonly reason: ResidueReason;
+	readonly reason: ResidueReason;
 }
 /**
- * Is this directory residue? Returns the verdict, or null to keep it.
- *
- * A directory with no `package.json` is NOT residue on that ground alone —
- * `models/`, a half-finished copy, a scratch dir are all absence, not a
- * rename. Only a backup marker condemns one.
- */
+* Is this directory residue? Returns the verdict, or null to keep it.
+*
+* A directory with no `package.json` is NOT residue on that ground alone —
+* `models/`, a half-finished copy, a scratch dir are all absence, not a
+* rename. Only a backup marker condemns one.
+*/
 export declare function classifyAddonDir(candidate: AddonDirCandidate): ResidueVerdict | null;
 export declare function selectAddonResidue(candidates: readonly AddonDirCandidate[]): readonly ResidueVerdict[];
 export interface QuarantinedEntry extends ResidueVerdict {
-    /** Absolute path the residue occupied under the addon root. */
-    readonly from: string;
-    /** Absolute path it now occupies under `.quarantine/`. */
-    readonly to: string;
+	/** Absolute path the residue occupied under the addon root. */
+	readonly from: string;
+	/** Absolute path it now occupies under `.quarantine/`. */
+	readonly to: string;
 }
 export interface ResidueQuarantineFailure extends ResidueVerdict {
-    readonly from: string;
-    readonly error: string;
+	readonly from: string;
+	readonly error: string;
 }
 export interface ResidueQuarantineResult {
-    readonly quarantined: readonly QuarantinedEntry[];
-    /** Residue that could not be moved. Reported, never fatal. */
-    readonly failed: readonly ResidueQuarantineFailure[];
+	readonly quarantined: readonly QuarantinedEntry[];
+	/** Residue that could not be moved. Reported, never fatal. */
+	readonly failed: readonly ResidueQuarantineFailure[];
 }
 /**
- * Move every residue directory under `addonsDir` into `addonsDir/.quarantine`.
- *
- * Runs at boot, BEFORE anything scans the root or seeds into it — a residue
- * that is still present when the loader walks has already been installed.
- * Never throws, never deletes; a move that fails is reported and left in
- * place, which is strictly better than a half-moved package.
- */
+* Move every residue directory under `addonsDir` into `addonsDir/.quarantine`.
+*
+* Runs at boot, BEFORE anything scans the root or seeds into it — a residue
+* that is still present when the loader walks has already been installed.
+* Never throws, never deletes; a move that fails is reported and left in
+* place, which is strictly better than a half-moved package.
+*/
 export declare function quarantineAddonResidue(addonsDir: string, log: (message: string) => void): ResidueQuarantineResult;