@camstack/system 1.2.390 → 1.2.392

package/dist/kernel/host-externals.d.ts

@@ -1,12 +1,12 @@
 /**
- * The bare specifiers an ESM addon may leave unbundled and expect the HOST
- * framework to provide. Self-contained addons (the standard) inline
- * @camstack/types, @camstack/sdk, zod, @trpc/* — so for them only
- * @camstack/system survives as genuinely host-provided. Framework-mode (legacy)
- * addons additionally leave the types/sdk/zod/trpc set external. Listing the
- * full union here lets one resolver hook serve both modes: for a self-contained
- * addon the extra entries simply never appear as live imports.
- */
+* The bare specifiers an ESM addon may leave unbundled and expect the HOST
+* framework to provide. Self-contained addons (the standard) inline
+* @camstack/types, @camstack/sdk, zod, @trpc/* — so for them only
+* @camstack/system survives as genuinely host-provided. Framework-mode (legacy)
+* addons additionally leave the types/sdk/zod/trpc set external. Listing the
+* full union here lets one resolver hook serve both modes: for a self-contained
+* addon the extra entries simply never appear as live imports.
+*/
 export declare const HOST_EXTERNAL_SPECIFIERS: readonly string[];
 /** True when `specifier` is one of the host-provided packages or a subpath of one. */
 export declare function isHostExternal(specifier: string): boolean;

package/dist/kernel/hwaccel/hwaccel-resolver.d.ts

@@ -1,32 +1,32 @@
-import { HwAccelBackend, HwAccelResolution } from '@camstack/types';
+import type { HwAccelBackend, HwAccelResolution } from "@camstack/types";
 export interface PlatformSignals {
-    readonly platform: NodeJS.Platform;
-    readonly arch: string;
-    readonly hasNvidiaGpu: boolean;
-    readonly hasAmdGpu: boolean;
-    readonly hasIntelGpu: boolean;
-    readonly hasRenderNode: boolean;
-    /** Intel NPU (Meteor Lake / Core Ultra "AI Boost") — exposed as /dev/accel/accel0. */
-    readonly hasIntelNpu: boolean;
-    /** Coral USB Edge TPU — a discrete USB accelerator (gates the `edgetpu` runtime). */
-    readonly hasCoral: boolean;
+	readonly platform: NodeJS.Platform;
+	readonly arch: string;
+	readonly hasNvidiaGpu: boolean;
+	readonly hasAmdGpu: boolean;
+	readonly hasIntelGpu: boolean;
+	readonly hasRenderNode: boolean;
+	/** Intel NPU (Meteor Lake / Core Ultra "AI Boost") — exposed as /dev/accel/accel0. */
+	readonly hasIntelNpu: boolean;
+	/** Coral USB Edge TPU — a discrete USB accelerator (gates the `edgetpu` runtime). */
+	readonly hasCoral: boolean;
 }
 export declare function probePlatform(): PlatformSignals;
 /**
- * Resolve the preferred hardware acceleration backend order for the
- * current host.
- *
- * An explicit `prefer` override — typically read from
- * `system-config.hwaccel.prefer` — wins unconditionally: the caller
- * stays on that single backend and falls back to software only if it
- * fails at decoder init.
- *
- * When no override is set, platform signals drive the order.
- */
-export declare function resolveHwAccel(prefer?: HwAccelBackend | 'none' | null): HwAccelResolution;
+* Resolve the preferred hardware acceleration backend order for the
+* current host.
+*
+* An explicit `prefer` override — typically read from
+* `system-config.hwaccel.prefer` — wins unconditionally: the caller
+* stays on that single backend and falls back to software only if it
+* fails at decoder init.
+*
+* When no override is set, platform signals drive the order.
+*/
+export declare function resolveHwAccel(prefer?: HwAccelBackend | "none" | null): HwAccelResolution;
 /**
- * Build the `IKernelHwAccel` provider used to populate `ctx.kernel.hwaccel`.
- * Thin async wrapper around the sync `resolveHwAccel` function so the
- * contract matches the per-node `$hwaccel.resolve` Moleculer action.
- */
-export declare function createKernelHwAccel(): import('@camstack/types').IKernelHwAccel;
+* Build the `IKernelHwAccel` provider used to populate `ctx.kernel.hwaccel`.
+* Thin async wrapper around the sync `resolveHwAccel` function so the
+* contract matches the per-node `$hwaccel.resolve` Moleculer action.
+*/
+export declare function createKernelHwAccel(): import("@camstack/types").IKernelHwAccel;

package/dist/kernel/index.d.ts

@@ -1,113 +1,115 @@
-export type { RegisteredAddon } from './addon-loader.js';
-export { AddonLoader } from './addon-loader.js';
-export { AddonEngineManager } from './addon-engine-manager.js';
-export type { AddonInstallerConfig, InstallSource, InstalledPackage } from './addon-installer.js';
-export { AddonInstaller } from './addon-installer.js';
-export type { AddonInstallSource, AddonManifestEntry, AddonManifestFile } from './addon-manifest.js';
-export { AddonManifest } from './addon-manifest.js';
-export type { AddonDirCandidate, QuarantinedEntry, ResidueQuarantineResult, ResidueReason, ResidueVerdict, } from './addon-residue.js';
-export { QUARANTINE_DIRNAME, classifyAddonDir, quarantineAddonResidue, selectAddonResidue, } from './addon-residue.js';
-export { copyDirRecursive, ensureDir, stripCamstackDeps, copyExtraFileDirs, ensureLibraryBuilt, installPackageFromNpm, isSourceNewer, } from './fs-utils.js';
-export { detectWorkspacePackagesDir } from './workspace-detect.js';
-export { RESTART_MARKER_FILE, clearPendingRestart, getRestartMarkerPath, readPendingRestart, scheduleSelfRestart, writePendingRestart, } from './restart-coordinator.js';
-export type { PendingRestartMarker, RestartKind, ScheduleSelfRestartOptions, } from './restart-coordinator.js';
-export { CapabilityHandle, CapabilityUnavailableError } from './capability-handle.js';
-export { CapabilityRegistry } from './capability-registry.js';
-export { buildCapRouters, builderMountedCapNames } from './cap-router-builder.js';
-export type { CapRouterPrimitives, CapRouterServices, CapProviderGetter, RemoteProxyFactory, ProcedureBuilder, ProcedureResolverArgs, } from './cap-router-builder.js';
-export { overlayGetStatus, UNCLAIMED } from './status-overlay.js';
-export type { ClaimedStatusResolver, StatusOverlay, StatusOverlayAnswer } from './status-overlay.js';
-export { describeProviderKindDrift } from './provider-kind-drift.js';
-export type { ProviderKindHint } from './provider-kind-drift.js';
-export type { CapabilityRouter, CapabilityRouterFactory, ConfigReader, PersistedPreferenceReplay, ProviderOwnerToken, } from './capability-registry.js';
-export { CustomActionRegistry, type CustomActionEntry } from './custom-action-registry.js';
-export { INFRA_CAPABILITIES, isInfraCapability } from './infra-capabilities.js';
-export type { InfraCapability } from './infra-capabilities.js';
-export { isolatedBuiltinPhase, partitionIsolatedBuiltinIds, runHubAddonBoot, waitUntilReady, } from './isolated-builtin-phase.js';
-export type { IsolatedBuiltinPhase, IsolatedBuiltinWaves, CapabilityName, WaitUntilReadyOptions, HubAddonBootSteps, } from './isolated-builtin-phase.js';
-export { createDoorSettingsView } from './settings-door-view.js';
-export { ConfigManager } from './config-manager.js';
-export type { ISettingsStore, KernelAddonSettingsView, SystemSettingsPreload, } from './config-manager.js';
-export { SettingsReadUnavailableError, isSettingsReadUnavailable } from './settings-read-error.js';
-export type { SettingsReadRefusal } from './settings-read-error.js';
-export { storeMayAnswer, STORE_READABLE_BOOTSTRAP_KEYS } from './system-settings-policy.js';
-export { bootstrapSchema, RUNTIME_DEFAULTS, DEFAULT_DATA_PATH } from './config-schema.js';
-export type { BootstrapConfig, AppConfig, ServerMode } from './config-schema.js';
-export type { AddonSettingsView } from './config-manager.js';
-export { DeviceRegistry } from './device-registry.js';
-export { buildStorageLocationRegistry } from './storage-location-registry.js';
-export type { StorageLocationRegistry } from './storage-location-registry.js';
-export { createBroker, deriveAgentListenPort, getBrokerTlsTransporter, } from './moleculer/broker-factory.js';
-export type { BrokerConfig } from './moleculer/broker-factory.js';
-export { applyProcessMeshClearPort, caFingerprint, caFingerprintCompact, checkProcessMeshClearPort, createMeshCsrPem, decideMeshClearPortOff, enrollMeshNode, exportMeshPrivateKeyPem, getProcessNodeMeshTransport, MESH_CLEAR_PORT_FIELD, setProcessMeshClearPortControl, generateMeshCa, generateMeshKeyPair, getProcessMeshCaState, issueMeshLeafForNode, issueMeshLeafFromCsr, JoinTokenJtiStore, loadMeshCa, MESH_CA_FIELD, MESH_CA_KEY_REF, MESH_CA_SETTINGS_KEY, MeshCaKeeper, MeshCrl, mintMeshJoinToken, processMeshCrl, processJoinTokenJtiStore, requireProcessMeshCa, setProcessMeshTlsEnabler, TlsTcpTransporter, verifyMeshJoinToken, DEFAULT_HUB_TLS_TCP_PORT, } from './moleculer/mesh-mtls/index.js';
-export type { MeshCaSigner, MeshClearPortAgent, MeshClearPortControl, MeshClearPortDecision, MeshClearPortMode, MeshEnrollResult, MeshTransport, MeshJoinTokenClaims, MeshTlsMaterial, } from './moleculer/mesh-mtls/index.js';
-export { type AddonDeploySource, isAddonDeploySource } from './moleculer/addon-deploy-source.js';
-export { createAddonService, validateProviderRegistrations, } from './moleculer/addon-service-factory.js';
-export { createCoreCapService, CORE_CAP_SERVICE_NAME } from './moleculer/core-cap-service.js';
-export type { CoreCapAction, CoreCapCallOrigin, CoreCapServiceOptions, } from './moleculer/core-cap-service.js';
-export { createAddonContext, createUdsAddonContext, setHubConnected, adaptBrokerToCluster, registerEventBusService, setNodeEventInterest, getMoleculerEventStats, subscribePassthrough, getBrokerEventBus, clusterEventTopic, EVENT_TOPIC_PREFIX, } from './moleculer/addon-context-factory.js';
-export type { MoleculerEventStats } from './moleculer/addon-context-factory.js';
-export { HubLogForwarder } from './moleculer/hub-log-forwarder.js';
-export type { AddonContextOptions } from './moleculer/addon-context-factory.js';
-export { createHubService } from './moleculer/hub-service.js';
-export { HubNodeRegistry } from './moleculer/node-registry.js';
-export type { CallFn, NodeRootPackageInfo, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry, } from './moleculer/node-registry.js';
-export { callRegisterNodeWithRetry, buildNodeManifest } from './moleculer/register-node-client.js';
-export type { RegisterNodeBroker, CallRegisterNodeOptions, } from './moleculer/register-node-client.js';
-export { hashClusterSecret, clusterSecretMatches, isClusterSecretMismatchError, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CLUSTER_SECRET_REF, CLUSTER_SECRET_SETTINGS_KEY, CLUSTER_SECRET_UNAVAILABLE_TYPE, checkClusterSecret, getProcessClusterSecretGate, setProcessClusterSecretGate, } from './moleculer/cluster-secret.js';
-export type { ClusterSecretGate, ClusterSecretVerdict } from './moleculer/cluster-secret.js';
-export { MeshAuthenticator, isRemoteForbiddenAction, MESH_JOIN_CHALLENGE_TTL_MS, } from './moleculer/mesh-authenticator.js';
-export type { MeshAuthenticatorDeps, MeshCallVerdict, } from './moleculer/mesh-authenticator.js';
-export { createMeshAccessMiddleware, stripForgedIdentity, } from './moleculer/mesh-access-middleware.js';
-export type { MeshAccessMiddlewareOptions, MeshCallGate, } from './moleculer/mesh-access-middleware.js';
-export { AgentMeshAuthenticator, AGENT_REGISTER_NODE_ACTION, isOwnChildNodeId, isRemoteForbiddenOnAgent, } from './moleculer/agent-mesh-authenticator.js';
-export type { AgentMeshAuthenticatorDeps } from './moleculer/agent-mesh-authenticator.js';
-export { MeshJoinClient } from './moleculer/mesh-join-client.js';
-export type { MeshJoinCall, MeshJoinClientOptions, MeshJoinState, } from './moleculer/mesh-join-client.js';
-export { computeHubJoinProof, computeNodeJoinProof, meshErrorType, MESH_ACTION_FORBIDDEN_TYPE, MESH_JOIN_AUTHENTICATE_ACTION, MESH_JOIN_CHALLENGE_ACTION, MESH_JOIN_CHALLENGE_INVALID_TYPE, MESH_JOIN_PROTOCOL, MESH_NODE_UNAUTHENTICATED_TYPE, } from './moleculer/mesh-join-proof.js';
-export type { MeshJoinAuthenticateParams, MeshJoinAuthenticateResult, MeshJoinChallenge, } from './moleculer/mesh-join-proof.js';
-export { getProcessMeshAuthMode, getProcessMeshAuthStatus, isMeshAuthMode, MESH_AUTH_MODE_FIELD, parseMeshAuthMode, requestProcessMeshEnforcement, setProcessMeshAuthMode, setProcessMeshAuthStatusSource, setProcessMeshEnforcer, } from './moleculer/mesh-auth-mode.js';
-export { decideMeshAutoEnforce, MESH_AUTO_ENFORCE_GRACE_MS, } from './moleculer/mesh-auto-enforce.js';
-export type { MeshAutoEnforceDecision, MeshAutoEnforceInput, } from './moleculer/mesh-auto-enforce.js';
-export { AGENT_DASHBOARD_ORIGINS_FIELD, AGENT_UI_UNLOCK_DOMAIN, AGENT_UI_UNLOCK_TTL_MS, AGENT_UI_UNLOCK_VERSION, isAllowedAgentDashboardReturnTo, mintAgentUiUnlockTicket, parseAgentDashboardOrigins, UnlockTicketJtiStore, verifyAgentUiUnlockTicket, } from './moleculer/agent-ui-unlock.js';
-export type { AgentUiUnlockPayload, MintAgentUiUnlockTicketInput, VerifyAgentUiUnlockTicketOptions, } from './moleculer/agent-ui-unlock.js';
-export type { MeshAuthMode, MeshAuthStatus, MeshEnforcer, MeshNodeAuthEntry, MeshNodeAuthState, } from './moleculer/mesh-auth-mode.js';
-export { serializeTypedArrays } from './moleculer/typed-array-serde.js';
-export { createReadinessService, createReadinessServiceForRegistry, AGENT_READINESS_SERVICE_NAME, } from './moleculer/readiness-service.js';
-export type { ReadinessServiceDeps } from './moleculer/readiness-service.js';
-export { getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, } from './moleculer/readiness-context.js';
-export type { UdsReadinessClient } from './moleculer/readiness-context.js';
-export { createStreamProbeBrokerService } from './moleculer/stream-probe-service.js';
-export type { StreamProbeBrokerDeps } from './moleculer/stream-probe-service.js';
-export { resolveHwAccel, createKernelHwAccel } from './hwaccel/hwaccel-resolver.js';
-export { AddonDepsManager } from './deps/addon-deps-manager.js';
-export { installManifestPythonDeps } from './deps/manifest-python-deps.js';
-export { installManifestSystemDeps } from './deps/manifest-system-deps.js';
-export type { InstallManifestSystemDepsOptions, SystemPackageManager, } from './deps/manifest-system-deps.js';
-export { installManifestNativeDeps } from './deps/manifest-native-deps.js';
-export { AddonHealthMonitor, HEALTH_MONITOR_TICK_MS, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, } from './addon-health-monitor.js';
-export type { AddonHealthPhase, AddonHealthState, AddonHealthSnapshot, AddonHealthMonitorOptions, } from './addon-health-monitor.js';
-export type { HubServiceDeps } from './moleculer/hub-service.js';
-export { createBrokerDeviceManagerApi, buildNativeCapProxy, mountNativeCapService, NATIVE_PROVIDER_SERVICE_INFIX, } from './moleculer/device-cap-proxy.js';
-export type { WorkerDeviceManagerOptions } from './moleculer/device-cap-proxy.js';
-export { getWorkerDeviceRegistry } from './moleculer/addon-context-factory.js';
-export { localProviderLink, brokerTransportLink, deviceCapResolverLink, ipcParentLink, buildLinkChain, brokerCallForCap, } from './moleculer/trpc-links.js';
-export type { LocalProviderResolver, BrokerCapCallOpts } from './moleculer/trpc-links.js';
-export { createProcessService } from './moleculer/process-service.js';
-export type { ProcessInfo } from './moleculer/process-service.js';
-export { signalAllRunnerGroups } from './moleculer/runner-process-group.js';
-export { CapUsageRegistry, getCapUsageRegistry, PARENT_ROUTED_PROVIDER_ADDON_ID, __resetCapUsageRegistryForTests, } from './moleculer/cap-usage-registry.js';
-export type { CapUsageCallRecord, CapUsageEdge, CapUsageRegistryOptions, CapUsageStats, } from './moleculer/cap-usage-registry.js';
-export { createScopedProcessManager } from './moleculer/process-context.js';
-export type { IAddonProcessManager } from '@camstack/types';
-export { callWithServiceDiscovery } from './moleculer/resilient-cap-call.js';
-export type { ServiceDiscoveryBroker } from './moleculer/resilient-cap-call.js';
-export { RingBuffer } from './utils/ring-buffer.js';
-export * from './transport/index.js';
-export { ReadinessRegistry, ReadinessTimeoutError, readinessKey, scopeKey, emitDownForOwnedCaps, } from '@camstack/types';
-export type { ReadinessHandler, ReadinessTransition, AwaitReadyOptions, ReadinessRegistryOptions, } from '@camstack/types';
-export { JobJournal } from './lifecycle/job-journal.js';
-export { StagingArea } from './lifecycle/staging-area.js';
-export { LifecycleJobEngine } from './lifecycle/lifecycle-job-engine.js';
-export type { ApplyAddonUpdateFn, EmitFn } from './lifecycle/lifecycle-job-engine.js';
-export type { TarballFetcher, ExtractFn } from './lifecycle/staging-area.js';
+export type { RegisteredAddon } from "./addon-loader.js";
+export { AddonLoader } from "./addon-loader.js";
+export { AddonEngineManager } from "./addon-engine-manager.js";
+export type { AddonInstallerConfig, InstallSource, InstalledPackage } from "./addon-installer.js";
+export { AddonInstaller } from "./addon-installer.js";
+export type { AddonInstallSource, AddonManifestEntry, AddonManifestFile } from "./addon-manifest.js";
+export { AddonManifest } from "./addon-manifest.js";
+export type { AddonDirCandidate, QuarantinedEntry, ResidueQuarantineResult, ResidueReason, ResidueVerdict } from "./addon-residue.js";
+export { QUARANTINE_DIRNAME, classifyAddonDir, quarantineAddonResidue, selectAddonResidue } from "./addon-residue.js";
+export { copyDirRecursive, ensureDir, stripCamstackDeps, copyExtraFileDirs, ensureLibraryBuilt, installPackageFromNpm, isSourceNewer } from "./fs-utils.js";
+export { detectWorkspacePackagesDir } from "./workspace-detect.js";
+export { RESTART_MARKER_FILE, clearPendingRestart, getRestartMarkerPath, readPendingRestart, scheduleSelfRestart, writePendingRestart } from "./restart-coordinator.js";
+export type { PendingRestartMarker, RestartKind, ScheduleSelfRestartOptions } from "./restart-coordinator.js";
+export { CapabilityHandle, CapabilityUnavailableError } from "./capability-handle.js";
+export { CapabilityRegistry } from "./capability-registry.js";
+export { buildCapRouters, builderMountedCapNames } from "./cap-router-builder.js";
+export type { CapRouterPrimitives, CapRouterServices, CapProviderGetter, RemoteProxyFactory, ProcedureBuilder, ProcedureResolverArgs } from "./cap-router-builder.js";
+export { overlayGetStatus, UNCLAIMED } from "./status-overlay.js";
+export type { ClaimedStatusResolver, StatusOverlay, StatusOverlayAnswer } from "./status-overlay.js";
+export { describeProviderKindDrift } from "./provider-kind-drift.js";
+export type { ProviderKindHint } from "./provider-kind-drift.js";
+export type { CapabilityRouter, CapabilityRouterFactory, ConfigReader, PersistedPreferenceReplay, ProviderOwnerToken } from "./capability-registry.js";
+export { CustomActionRegistry, type CustomActionEntry } from "./custom-action-registry.js";
+export { INFRA_CAPABILITIES, isInfraCapability } from "./infra-capabilities.js";
+export type { InfraCapability } from "./infra-capabilities.js";
+export { isolatedBuiltinPhase, partitionIsolatedBuiltinIds, runHubAddonBoot, waitUntilReady } from "./isolated-builtin-phase.js";
+export type { IsolatedBuiltinPhase, IsolatedBuiltinWaves, CapabilityName, WaitUntilReadyOptions, HubAddonBootSteps } from "./isolated-builtin-phase.js";
+export { createDoorSettingsView } from "./settings-door-view.js";
+export { ConfigManager } from "./config-manager.js";
+export type { ISettingsStore, KernelAddonSettingsView, SystemSettingsPreload } from "./config-manager.js";
+export { SettingsReadUnavailableError, isSettingsReadUnavailable } from "./settings-read-error.js";
+export type { SettingsReadRefusal } from "./settings-read-error.js";
+export { storeMayAnswer, STORE_READABLE_BOOTSTRAP_KEYS } from "./system-settings-policy.js";
+export { bootstrapSchema, RUNTIME_DEFAULTS, DEFAULT_DATA_PATH } from "./config-schema.js";
+export type { BootstrapConfig, AppConfig, ServerMode } from "./config-schema.js";
+export type { AddonSettingsView } from "./config-manager.js";
+export { DeviceRegistry } from "./device-registry.js";
+export { buildStorageLocationRegistry } from "./storage-location-registry.js";
+export type { StorageLocationRegistry } from "./storage-location-registry.js";
+export { createBroker, deriveAgentListenPort, getBrokerTlsTransporter } from "./moleculer/broker-factory.js";
+export type { BrokerConfig } from "./moleculer/broker-factory.js";
+export { applyProcessMeshClearPort, caFingerprint, caFingerprintCompact, checkProcessMeshClearPort, createMeshCsrPem, decideMeshClearPortOff, enrollMeshNode, exportMeshPrivateKeyPem, getProcessNodeMeshTransport, MESH_CLEAR_PORT_FIELD, setProcessMeshClearPortControl, generateMeshCa, generateMeshKeyPair, getProcessMeshCaState, issueMeshLeafForNode, issueMeshLeafFromCsr, JoinTokenJtiStore, loadMeshCa, MESH_CA_FIELD, MESH_CA_KEY_REF, MESH_CA_SETTINGS_KEY, MeshCaKeeper, MeshCrl, mintMeshJoinToken, processMeshCrl, processJoinTokenJtiStore, requireProcessMeshCa, setProcessMeshTlsEnabler, TlsTcpTransporter, verifyMeshJoinToken, DEFAULT_HUB_TLS_TCP_PORT } from "./moleculer/mesh-mtls/index.js";
+export type { MeshCaSigner, MeshClearPortAgent, MeshClearPortControl, MeshClearPortDecision, MeshClearPortMode, MeshEnrollResult, MeshTransport, MeshJoinTokenClaims, MeshTlsMaterial } from "./moleculer/mesh-mtls/index.js";
+export { type AddonDeploySource, isAddonDeploySource } from "./moleculer/addon-deploy-source.js";
+export { createAddonService, validateProviderRegistrations } from "./moleculer/addon-service-factory.js";
+export { createCoreCapService, CORE_CAP_SERVICE_NAME } from "./moleculer/core-cap-service.js";
+export type { CoreCapAction, CoreCapCallOrigin, CoreCapServiceOptions } from "./moleculer/core-cap-service.js";
+export { createAddonContext, createUdsAddonContext, setHubConnected, adaptBrokerToCluster, registerEventBusService, setNodeEventInterest, getMoleculerEventStats, subscribePassthrough, getBrokerEventBus, clusterEventTopic, EVENT_TOPIC_PREFIX } from "./moleculer/addon-context-factory.js";
+export type { MoleculerEventStats } from "./moleculer/addon-context-factory.js";
+export { HubLogForwarder } from "./moleculer/hub-log-forwarder.js";
+export type { AddonContextOptions } from "./moleculer/addon-context-factory.js";
+export { createHubService } from "./moleculer/hub-service.js";
+export { HubNodeRegistry } from "./moleculer/node-registry.js";
+export type { CallFn, NodeRootPackageInfo, RegisteredAddonManifest, RegisteredNativeCap, RegisterNodeParams, RegisterNodeResult, NodeCapEntry, NodeNativeCapEntry } from "./moleculer/node-registry.js";
+export { callRegisterNodeWithRetry, buildNodeManifest } from "./moleculer/register-node-client.js";
+export type { RegisterNodeBroker, CallRegisterNodeOptions } from "./moleculer/register-node-client.js";
+export { hashClusterSecret, clusterSecretMatches, isClusterSecretMismatchError, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CLUSTER_SECRET_REF, CLUSTER_SECRET_SETTINGS_KEY, CLUSTER_SECRET_UNAVAILABLE_TYPE, checkClusterSecret, getProcessClusterSecretGate, setProcessClusterSecretGate } from "./moleculer/cluster-secret.js";
+export type { ClusterSecretGate, ClusterSecretVerdict } from "./moleculer/cluster-secret.js";
+export { MeshAuthenticator, isRemoteForbiddenAction, MESH_JOIN_CHALLENGE_TTL_MS } from "./moleculer/mesh-authenticator.js";
+export type { MeshAuthenticatorDeps, MeshCallVerdict } from "./moleculer/mesh-authenticator.js";
+export { createMeshAccessMiddleware, stripForgedIdentity } from "./moleculer/mesh-access-middleware.js";
+export type { MeshAccessMiddlewareOptions, MeshCallGate } from "./moleculer/mesh-access-middleware.js";
+export { AgentMeshAuthenticator, AGENT_REGISTER_NODE_ACTION, isOwnChildNodeId, isRemoteForbiddenOnAgent } from "./moleculer/agent-mesh-authenticator.js";
+export type { AgentMeshAuthenticatorDeps } from "./moleculer/agent-mesh-authenticator.js";
+export { MeshJoinClient } from "./moleculer/mesh-join-client.js";
+export type { MeshJoinCall, MeshJoinClientOptions, MeshJoinState } from "./moleculer/mesh-join-client.js";
+export { computeHubJoinProof, computeNodeJoinProof, meshErrorType, MESH_ACTION_FORBIDDEN_TYPE, MESH_JOIN_AUTHENTICATE_ACTION, MESH_JOIN_CHALLENGE_ACTION, MESH_JOIN_CHALLENGE_INVALID_TYPE, MESH_JOIN_PROTOCOL, MESH_NODE_UNAUTHENTICATED_TYPE } from "./moleculer/mesh-join-proof.js";
+export type { MeshJoinAuthenticateParams, MeshJoinAuthenticateResult, MeshJoinChallenge } from "./moleculer/mesh-join-proof.js";
+export { getProcessMeshAuthMode, getProcessMeshAuthStatus, isMeshAuthMode, MESH_AUTH_MODE_FIELD, parseMeshAuthMode, requestProcessMeshEnforcement, setProcessMeshAuthMode, setProcessMeshAuthStatusSource, setProcessMeshEnforcer } from "./moleculer/mesh-auth-mode.js";
+export { decideMeshAutoEnforce, MESH_AUTO_ENFORCE_GRACE_MS } from "./moleculer/mesh-auto-enforce.js";
+export type { MeshAutoEnforceDecision, MeshAutoEnforceInput } from "./moleculer/mesh-auto-enforce.js";
+export { AGENT_DASHBOARD_ORIGINS_FIELD, AGENT_UI_UNLOCK_DOMAIN, AGENT_UI_UNLOCK_TTL_MS, AGENT_UI_UNLOCK_VERSION, isAllowedAgentDashboardReturnTo, mintAgentUiUnlockTicket, parseAgentDashboardOrigins, UnlockTicketJtiStore, verifyAgentUiUnlockTicket } from "./moleculer/agent-ui-unlock.js";
+export type { AgentUiUnlockPayload, MintAgentUiUnlockTicketInput, VerifyAgentUiUnlockTicketOptions } from "./moleculer/agent-ui-unlock.js";
+export type { MeshAuthMode, MeshAuthStatus, MeshEnforcer, MeshNodeAuthEntry, MeshNodeAuthState } from "./moleculer/mesh-auth-mode.js";
+export { serializeTypedArrays } from "./moleculer/typed-array-serde.js";
+export { createReadinessService, createReadinessServiceForRegistry, AGENT_READINESS_SERVICE_NAME } from "./moleculer/readiness-service.js";
+export type { ReadinessServiceDeps } from "./moleculer/readiness-service.js";
+export { getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient } from "./moleculer/readiness-context.js";
+export type { UdsReadinessClient } from "./moleculer/readiness-context.js";
+export { createStreamProbeBrokerService } from "./moleculer/stream-probe-service.js";
+export type { StreamProbeBrokerDeps } from "./moleculer/stream-probe-service.js";
+export { resolveHwAccel, createKernelHwAccel, probePlatform } from "./hwaccel/hwaccel-resolver.js";
+export type { PlatformSignals } from "./hwaccel/hwaccel-resolver.js";
+export { createKernelInferenceEngine, mapSignalsToInferenceHardware } from "./inference/inference-resolver.js";
+export { AddonDepsManager } from "./deps/addon-deps-manager.js";
+export { installManifestPythonDeps } from "./deps/manifest-python-deps.js";
+export { installManifestSystemDeps } from "./deps/manifest-system-deps.js";
+export type { InstallManifestSystemDepsOptions, SystemPackageManager } from "./deps/manifest-system-deps.js";
+export { installManifestNativeDeps } from "./deps/manifest-native-deps.js";
+export { AddonHealthMonitor, HEALTH_MONITOR_TICK_MS, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS } from "./addon-health-monitor.js";
+export type { AddonHealthPhase, AddonHealthState, AddonHealthSnapshot, AddonHealthMonitorOptions } from "./addon-health-monitor.js";
+export type { HubServiceDeps } from "./moleculer/hub-service.js";
+export { createBrokerDeviceManagerApi, buildNativeCapProxy, mountNativeCapService, NATIVE_PROVIDER_SERVICE_INFIX } from "./moleculer/device-cap-proxy.js";
+export type { WorkerDeviceManagerOptions } from "./moleculer/device-cap-proxy.js";
+export { getWorkerDeviceRegistry } from "./moleculer/addon-context-factory.js";
+export { localProviderLink, brokerTransportLink, deviceCapResolverLink, ipcParentLink, buildLinkChain, brokerCallForCap } from "./moleculer/trpc-links.js";
+export type { LocalProviderResolver, BrokerCapCallOpts } from "./moleculer/trpc-links.js";
+export { createProcessService } from "./moleculer/process-service.js";
+export type { ProcessInfo } from "./moleculer/process-service.js";
+export { signalAllRunnerGroups } from "./moleculer/runner-process-group.js";
+export { CapUsageRegistry, getCapUsageRegistry, PARENT_ROUTED_PROVIDER_ADDON_ID, __resetCapUsageRegistryForTests } from "./moleculer/cap-usage-registry.js";
+export type { CapUsageCallRecord, CapUsageEdge, CapUsageRegistryOptions, CapUsageStats } from "./moleculer/cap-usage-registry.js";
+export { createScopedProcessManager } from "./moleculer/process-context.js";
+export type { IAddonProcessManager } from "@camstack/types";
+export { callWithServiceDiscovery } from "./moleculer/resilient-cap-call.js";
+export type { ServiceDiscoveryBroker } from "./moleculer/resilient-cap-call.js";
+export { RingBuffer } from "./utils/ring-buffer.js";
+export * from "./transport/index.js";
+export { ReadinessRegistry, ReadinessTimeoutError, readinessKey, scopeKey, emitDownForOwnedCaps } from "@camstack/types";
+export type { ReadinessHandler, ReadinessTransition, AwaitReadyOptions, ReadinessRegistryOptions } from "@camstack/types";
+export { JobJournal } from "./lifecycle/job-journal.js";
+export { StagingArea } from "./lifecycle/staging-area.js";
+export { LifecycleJobEngine } from "./lifecycle/lifecycle-job-engine.js";
+export type { ApplyAddonUpdateFn, EmitFn } from "./lifecycle/lifecycle-job-engine.js";
+export type { TarballFetcher, ExtractFn } from "./lifecycle/staging-area.js";

package/dist/kernel/inference/inference-resolver.d.ts

@@ -1,17 +1,17 @@
-import { IKernelInferenceEngine, KernelInferenceHardware } from '@camstack/types';
-import { PlatformSignals } from '../hwaccel/hwaccel-resolver.js';
+import type { IKernelInferenceEngine, KernelInferenceHardware } from "@camstack/types";
+import { type PlatformSignals } from "../hwaccel/hwaccel-resolver.js";
 /**
- * Map the shared platform GPU-vendor probe into the inference `gpu`/`npu` types
- * the runtime scorer understands. NVIDIA → cuda; Intel iGPU (or a bare render
- * node) → openvino; Apple Silicon → CoreML/ANE; Intel NPU ("AI Boost") →
- * intel-npu. The NPU only bumps the score, never changes the openvino winner,
- * but surfacing it lets the TS hint/UI reflect the accelerator the python pool
- * actually compiles onto (NPU>GPU>CPU). PURE — unit-tested.
- */
+* Map the shared platform GPU-vendor probe into the inference `gpu`/`npu` types
+* the runtime scorer understands. NVIDIA → cuda; Intel iGPU (or a bare render
+* node) → openvino; Apple Silicon → CoreML/ANE; Intel NPU ("AI Boost") →
+* intel-npu. The NPU only bumps the score, never changes the openvino winner,
+* but surfacing it lets the TS hint/UI reflect the accelerator the python pool
+* actually compiles onto (NPU>GPU>CPU). PURE — unit-tested.
+*/
 export declare function mapSignalsToInferenceHardware(signals: PlatformSignals): KernelInferenceHardware;
 /**
- * Build the local in-process inference-hardware resolver used to populate
- * `ctx.kernel.inferenceEngine`. The exact model as `createKernelHwAccel`:
- * deterministic per host, safe to call repeatedly, always the LOCAL node.
- */
+* Build the local in-process inference-hardware resolver used to populate
+* `ctx.kernel.inferenceEngine`. The exact model as `createKernelHwAccel`:
+* deterministic per host, safe to call repeatedly, always the LOCAL node.
+*/
 export declare function createKernelInferenceEngine(): IKernelInferenceEngine;

package/dist/kernel/infra-capabilities.d.ts

@@ -1,13 +1,13 @@
 export interface InfraCapability {
-    /** Capability name */
-    readonly name: string;
-    /** If true, boot aborts when this capability's addon fails to initialize */
-    readonly required: boolean;
+	/** Capability name */
+	readonly name: string;
+	/** If true, boot aborts when this capability's addon fails to initialize */
+	readonly required: boolean;
 }
 /**
- * Infrastructure capabilities that must boot before all other addons.
- * Enabled in Phase 1 of the boot sequence. Order matters: storage before logging.
- */
+* Infrastructure capabilities that must boot before all other addons.
+* Enabled in Phase 1 of the boot sequence. Order matters: storage before logging.
+*/
 export declare const INFRA_CAPABILITIES: readonly InfraCapability[];
 /** Check if a capability name is an infrastructure capability */
 export declare function isInfraCapability(name: string): boolean;

package/dist/kernel/isolated-builtin-phase.d.ts

@@ -1,57 +1,57 @@
 /**
- * Isolated builtins are not one spawn wave.
- *
- * Snapshot (D123) persists behind `settings-store`, so it must boot AFTER
- * the in-process door. sqlite-settings IS the engine behind that door: spawn
- * it in the consumer wave and every in-process builtin initialises against a
- * missing store — the D44 empty-read failure, just with a fork in the way.
- *
- * `infra` = provides a capability in {@link INFRA_CAPABILITIES} → spawn
- * BEFORE in-process builtins. `consumer` = everything else → spawn AFTER.
- */
+* Isolated builtins are not one spawn wave.
+*
+* Snapshot (D123) persists behind `settings-store`, so it must boot AFTER
+* the in-process door. sqlite-settings IS the engine behind that door: spawn
+* it in the consumer wave and every in-process builtin initialises against a
+* missing store — the D44 empty-read failure, just with a fork in the way.
+*
+* `infra` = provides a capability in {@link INFRA_CAPABILITIES} → spawn
+* BEFORE in-process builtins. `consumer` = everything else → spawn AFTER.
+*/
 export interface CapabilityName {
-    readonly name: string;
+	readonly name: string;
 }
-export type IsolatedBuiltinPhase = 'infra' | 'consumer';
+export type IsolatedBuiltinPhase = "infra" | "consumer";
 export declare function isolatedBuiltinPhase(capabilities: readonly CapabilityName[]): IsolatedBuiltinPhase;
 export interface IsolatedBuiltinWaves {
-    readonly infra: readonly string[];
-    readonly consumers: readonly string[];
+	readonly infra: readonly string[];
+	readonly consumers: readonly string[];
 }
 export declare function partitionIsolatedBuiltinIds(ids: readonly string[], capabilitiesOf: (id: string) => readonly CapabilityName[]): IsolatedBuiltinWaves;
 export interface WaitUntilReadyOptions {
-    readonly timeoutMs: number;
-    readonly intervalMs: number;
-    readonly what: string;
+	readonly timeoutMs: number;
+	readonly intervalMs: number;
+	readonly what: string;
 }
 /**
- * Spawn of an infra isolate returns when the child process exists, not when
- * its UDS handshake has put the engine in the parent's `getCollection`.
- * In-process builtins that read the door before that handshake throw D44
- * ("nothing behind it") and are skipped for the rest of the boot.
- */
+* Spawn of an infra isolate returns when the child process exists, not when
+* its UDS handshake has put the engine in the parent's `getCollection`.
+* In-process builtins that read the door before that handshake throw D44
+* ("nothing behind it") and are skipped for the rest of the boot.
+*/
 export declare function waitUntilReady(isReady: () => boolean, options: WaitUntilReadyOptions): Promise<void>;
 /**
- * Hub boot waves after the isolated sqlite engine exists as a process.
- *
- * Spawn of that engine returns when the child exists, not when
- * `data-store-provider` is in the parent's collection, and not when the
- * in-process `settings-store` door has booted. Forked addons that
- * `resolveConfig()` before both of those see constructor defaults — on
- * 2026-08-25 cloudflare-tunnel auto-started a quick tunnel and the named
- * hostname the notification centre still minted went Cloudflare 530.
- *
- * `waitUntilReady` yields via `setTimeout`; the 1.2.151 deadlock was the
- * engine's own `resolveConfig` waiting on a door that this sequence had
- * not built yet (fixed: sqlite skips that read), not this wait blocking
- * the UDS read. A timeout in the caller must still not throw.
- */
+* Hub boot waves after the isolated sqlite engine exists as a process.
+*
+* Spawn of that engine returns when the child exists, not when
+* `data-store-provider` is in the parent's collection, and not when the
+* in-process `settings-store` door has booted. Forked addons that
+* `resolveConfig()` before both of those see constructor defaults — on
+* 2026-08-25 cloudflare-tunnel auto-started a quick tunnel and the named
+* hostname the notification centre still minted went Cloudflare 530.
+*
+* `waitUntilReady` yields via `setTimeout`; the 1.2.151 deadlock was the
+* engine's own `resolveConfig` waiting on a door that this sequence had
+* not built yet (fixed: sqlite skips that read), not this wait blocking
+* the UDS read. A timeout in the caller must still not throw.
+*/
 export interface HubAddonBootSteps {
-    readonly spawnIsolatedInfra: () => Promise<void>;
-    readonly waitForDataStoreProvider: () => Promise<void>;
-    readonly bootInProcessInfra: () => Promise<void>;
-    readonly spawnForkedAddons: () => Promise<void>;
-    readonly bootInProcessConsumers: () => Promise<void>;
-    readonly spawnIsolatedConsumers: () => Promise<void>;
+	readonly spawnIsolatedInfra: () => Promise<void>;
+	readonly waitForDataStoreProvider: () => Promise<void>;
+	readonly bootInProcessInfra: () => Promise<void>;
+	readonly spawnForkedAddons: () => Promise<void>;
+	readonly bootInProcessConsumers: () => Promise<void>;
+	readonly spawnIsolatedConsumers: () => Promise<void>;
 }
 export declare function runHubAddonBoot(steps: HubAddonBootSteps): Promise<void>;

package/dist/kernel/lifecycle/job-journal.d.ts

@@ -1,19 +1,19 @@
-import { LifecycleJob, LifecycleTask, TaskLogEntry } from '@camstack/types';
+import { type LifecycleJob, type LifecycleTask, type TaskLogEntry } from "@camstack/types";
 export declare class JobJournal {
-    private readonly jobsDir;
-    private readonly indexPath;
-    constructor(jobsDir: string);
-    private jobPath;
-    private writeAtomic;
-    private readIndex;
-    private addToIndex;
-    createJob(job: LifecycleJob): void;
-    getJob(id: string): LifecycleJob | null;
-    listJobs(opts?: {
-        activeOnly?: boolean;
-    }): LifecycleJob[];
-    private mutate;
-    patchTask(jobId: string, taskId: string, patch: Partial<LifecycleTask>): LifecycleJob;
-    appendLog(jobId: string, taskId: string, entry: TaskLogEntry): LifecycleJob;
-    setJobState(jobId: string, state: LifecycleJob['state']): LifecycleJob;
+	private readonly jobsDir;
+	private readonly indexPath;
+	constructor(jobsDir: string);
+	private jobPath;
+	private writeAtomic;
+	private readIndex;
+	private addToIndex;
+	createJob(job: LifecycleJob): void;
+	getJob(id: string): LifecycleJob | null;
+	listJobs(opts?: {
+		activeOnly?: boolean;
+	}): LifecycleJob[];
+	private mutate;
+	patchTask(jobId: string, taskId: string, patch: Partial<LifecycleTask>): LifecycleJob;
+	appendLog(jobId: string, taskId: string, entry: TaskLogEntry): LifecycleJob;
+	setJobState(jobId: string, state: LifecycleJob["state"]): LifecycleJob;
 }