@camstack/system 1.2.456 → 1.2.458

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-CNEs_I94.js");
+const require_wal_maintenance = require("./wal-maintenance-DfSIOj24.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-AerF4XE6.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-Duejh7Lx.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{hub-mdns-ciao-CHaGDzyz.mjs → hub-mdns-ciao-Bg2HfTwP.mjs}

@@ -1,7 +1,7 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { Ca as userError } from "./dist-BSF_C8W2.mjs";
+import { Ea as userError } from "./dist-B_GRPhnY.mjs";
 import { f as X509Certificate$1 } from "./x509.es-DK__ETIe.mjs";
-import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-fm4AR8XL.mjs";
+import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-CQA3W-3e.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/{hub-mdns-ciao-CZlZRxxA.js → hub-mdns-ciao-nce3TXs_.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BpqA2CT0.js");
+const require_dist = require("./dist-BZQjLPiz.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
-const require_agent_https = require("./agent-https-yjxdfJDA.js");
+const require_agent_https = require("./agent-https-DOELEug8.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/index.d.ts

@@ -102,6 +102,7 @@ export { isCredentialKeyName, redactLogEntry, redactLogMeta, redactLogText } fro
 export { clearPlatformKeychainKey, getPlatformKeychainKey, type PlatformKeychainKey, setPlatformKeychainKey } from "./builtins/keychain/platform-key-source.js";
 export type { LogEntry, LogFilter, LogLevel } from "./logging/log-ring-buffer.js";
 export { LogRingBuffer } from "./logging/log-ring-buffer.js";
+export { bareAddonOf, compileLogFilter, type CompiledLogFilter, filterIsEmpty, levelRank, lineContainsText, lineMatches, originNodeOf, type ReadableLine } from "./logging/log-read-filter.js";
 export type { LevelBearing } from "./logging/logging-gate.js";
 export { DEFAULT_LOG_LEVEL, LoggingGate } from "./logging/logging-gate.js";
 export { __resetLoggingGateForTests, getLoggingGate } from "./logging/logging-gate.singleton.js";

package/dist/index.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BpqA2CT0.js");
+const require_dist = require("./dist-BZQjLPiz.js");
 const require_read_all_rows$1 = require("./read-all-rows-CVoO1ONM.js");
-const require_device_ca = require("./device-ca-bpoEr0zG.js");
+const require_device_ca = require("./device-ca-BrVK_5s3.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -23,25 +23,27 @@ const require_builtins_liveness_monitor_liveness_monitor_addon = require("./buil
 require("./builtins/liveness-monitor/index.js");
 const require_builtins_local_auth_local_auth_addon = require("./builtins/local-auth/local-auth.addon.js");
 require("./builtins/local-auth/index.js");
+const require_log_read_filter = require("./log-read-filter-Bi066jwU.js");
 const require_builtins_loki_logging_index = require("./builtins/loki-logging/index.js");
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_device_history_device_history_addon = require("./builtins/device-history/device-history.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-CNEs_I94.js");
+const require_wal_maintenance = require("./wal-maintenance-DfSIOj24.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_constants = require("./constants-CavyKfHZ.js");
-const require_agent_https = require("./agent-https-yjxdfJDA.js");
+const require_constants = require("./constants-Njka8Cv6.js");
+const require_agent_https = require("./agent-https-DOELEug8.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_custom_action_registry = require("./custom-action-registry-COyb49zm.js");
-const require_hub_mdns_ciao = require("./hub-mdns-ciao-CZlZRxxA.js");
+const require_hub_mdns_ciao = require("./hub-mdns-ciao-nce3TXs_.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-B4QG7XmX.js");
+const require_restore_archive = require("./restore-archive-FyfZ8YMC.js");
+const require_coral_accelerators = require("./coral-accelerators-Bi_c3Rft.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
@@ -4439,6 +4441,16 @@ var ScopedLogger = class ScopedLogger {
 		};
 	}
 };
+//#endregion
+//#region src/logging/log-manager.ts
+/**
+* A short id for one process lifetime: the first half of every entry `id`.
+* Base-36 epoch ms plus a random suffix, so two boots of the same process in
+* the same millisecond still mint different ids.
+*/
+function newBootId() {
+	return `${Date.now().toString(36)}${Math.floor(Math.random() * 36 ** 4).toString(36).padStart(4, "0")}`;
+}
 var LogManager = class {
 	ringBuffer;
 	/**
@@ -4475,6 +4487,14 @@ var LogManager = class {
 	*/
 	gate = getLoggingGate();
 	/**
+	* Entry identity (D898): `<bootId>.<seq>`, stamped once, here, on every line
+	* this process accepts — so the in-memory tail, the live subscription and
+	* the rotated file carry the SAME id and a page read from disk dedupes
+	* exactly against the lines pushed live.
+	*/
+	bootId = newBootId();
+	seq = 0;
+	/**
 	* `perAddonCapacity` bounds EACH addon's bucket, not the total — a chatty addon
 	* evicts only its own lines, so quiet addons keep their sparse history.
 	*
@@ -4507,7 +4527,10 @@ var LogManager = class {
 	}
 	createLogger(scope) {
 		return new ScopedLogger(scope, (entry) => {
-			const enriched = redactLogEntry(this.enrichDeviceName(entry));
+			const enriched = {
+				...redactLogEntry(this.enrichDeviceName(entry)),
+				id: `${this.bootId}.${String(++this.seq)}`
+			};
 			if (this.isDestinationEnabled?.("log-buffer") !== false) this.ringBuffer.push(enriched);
 			if (this.gate.allowsDestination(enriched)) for (const entry of this.destinations) {
 				if (entry.addonId !== void 0 && this.isDestinationEnabled?.(entry.addonId) === false) continue;
@@ -16049,6 +16072,67 @@ function createChildrenBatchLoader(opts) {
 	} };
 }
 //#endregion
+//#region src/kernel/moleculer/accessory-prune-gate.ts
+function isSpecList(answer) {
+	return Array.isArray(answer);
+}
+function classifyAccessoryRead(answer, ctx) {
+	if (isSpecList(answer)) {
+		if (!ctx.online) return {
+			kind: "unknown",
+			reason: "parent offline",
+			children: answer
+		};
+		if (ctx.probedAt === 0) return {
+			kind: "unknown",
+			reason: "probe not yet completed",
+			children: answer
+		};
+		return {
+			kind: "successful",
+			children: answer
+		};
+	}
+	if (answer.kind === "unknown") return {
+		kind: "unknown",
+		reason: answer.reason,
+		children: answer.known ?? []
+	};
+	return {
+		kind: "successful",
+		children: answer.children
+	};
+}
+/** One per parent registration; in-memory on purpose (a restart starts over — the safe direction). */
+var AccessoryShrinkGate = class {
+	/** childId → the probe (`lastProbedAt`) of the first successful read that lacked it. */
+	#firstMissing = /* @__PURE__ */ new Map();
+	/**
+	* `missing` = the managed children a SUCCESSFUL read no longer lists. Never
+	* call this for an unknown read.
+	*/
+	decide(missing, probedAt) {
+		const missingSet = new Set(missing);
+		for (const id of [...this.#firstMissing.keys()]) if (!missingSet.has(id)) this.#firstMissing.delete(id);
+		const prune = [];
+		const deferred = [];
+		for (const id of missing) {
+			const first = this.#firstMissing.get(id);
+			if (first !== void 0 && probedAt > first) {
+				prune.push(id);
+				this.#firstMissing.delete(id);
+				continue;
+			}
+			if (first === void 0) this.#firstMissing.set(id, probedAt);
+			deferred.push(id);
+		}
+		return {
+			prune,
+			deferred
+		};
+	}
+};
+//#endregion
 //#region src/kernel/moleculer/runtime-state-load.ts
 /** A device build refused because its runtime state could not be loaded. */
 var RuntimeStateLoadError = class extends Error {
@@ -16771,6 +16855,7 @@ function createBrokerDeviceManagerApi(opts) {
 				throw err;
 			}
 			const lifecycleHost = device;
+			const shrinkGate = new AccessoryShrinkGate();
 			const runReconcile = async () => {
 				try {
 					await callDeviceManager(api, "registerDevice", {
@@ -16794,7 +16879,12 @@ function createBrokerDeviceManagerApi(opts) {
 					});
 				}
 				if (typeof lifecycleHost.getAccessoryChildren !== "function") return;
-				const specs = lifecycleHost.getAccessoryChildren();
+				const probedAt = device.runtimeState?.getCapState("feature-probe")?.lastProbedAt ?? 0;
+				const read = classifyAccessoryRead(lifecycleHost.getAccessoryChildren(), {
+					online: device.online,
+					probedAt
+				});
+				const specs = read.children;
 				const expected = new Set(specs.map((s) => `${device.stableId}-${s.stableIdSuffix}`));
 				await runBounded(specs, ACCESSORY_SPAWN_CONCURRENCY, async (spec) => {
 					try {
@@ -16812,24 +16902,42 @@ function createBrokerDeviceManagerApi(opts) {
 						});
 					}
 				});
-				if ((device.runtimeState?.getCapState("feature-probe")?.lastProbedAt ?? 0) === 0 && specs.length === 0) {
-					opts.logger.debug("Accessory orphan reconciliation skipped — probe not yet completed", { tags: {
-						parentDeviceId: device.id,
-						parentStableId: device.stableId
-					} });
+				if (read.kind === "unknown") {
+					opts.logger.info("Accessory orphan reconciliation skipped — child list unknown", {
+						tags: {
+							deviceId: device.id,
+							parentStableId: device.stableId
+						},
+						meta: {
+							reason: read.reason,
+							probedAt
+						}
+					});
 					return;
 				}
 				try {
-					const currentChildren = await childrenLoader.load(device.id);
-					for (const child of currentChildren) {
-						if (child.linkDeviceId !== device.id) continue;
-						if (expected.has(child.stableId)) continue;
+					const missing = (await childrenLoader.load(device.id)).filter((child) => child.linkDeviceId === device.id && !expected.has(child.stableId));
+					const decision = shrinkGate.decide(missing.map((child) => child.id), probedAt);
+					if (decision.deferred.length > 0) opts.logger.info("Accessory children missing from a complete read — kept until a later probe agrees", {
+						tags: {
+							deviceId: device.id,
+							parentStableId: device.stableId
+						},
+						meta: {
+							childDeviceIds: [...decision.deferred],
+							probedAt
+						}
+					});
+					const confirmed = new Set(decision.prune);
+					for (const child of missing) {
+						if (!confirmed.has(child.id)) continue;
 						const live = registry.getById(child.id);
 						try {
 							if (live) await deviceApi.remove(child.id);
 							else await callDeviceManager(api, "removeDevice", { deviceId: child.id });
 							opts.logger.info("Removed orphan accessory child no longer in parent specs", {
 								tags: {
+									deviceId: child.id,
 									parentDeviceId: device.id,
 									parentStableId: device.stableId
 								},
@@ -16842,6 +16950,7 @@ function createBrokerDeviceManagerApi(opts) {
 						} catch (err) {
 							opts.logger.warn("Failed to remove orphan accessory child", {
 								tags: {
+									deviceId: child.id,
 									parentDeviceId: device.id,
 									parentStableId: device.stableId,
 									childDeviceId: child.id
@@ -21301,7 +21410,7 @@ var LEVEL_ORDER = {
 	warn: 2,
 	error: 3
 };
-function levelRank(level) {
+function levelRank$1(level) {
 	return LEVEL_ORDER[level] ?? 0;
 }
 function createUdsLoggerWithState(client, addonId, nodeId, levelState, scope, tags = {}) {
@@ -21313,7 +21422,7 @@ function createUdsLoggerWithState(client, addonId, nodeId, levelState, scope, ta
 		...tags
 	};
 	function log(level, message, extras) {
-		if (levelRank(level) < levelRank(levelState.current)) return;
+		if (levelRank$1(level) < levelRank$1(levelState.current)) return;
 		const mergedTags = extras?.tags ? {
 			...baseTags,
 			...extras.tags
@@ -22205,30 +22314,6 @@ function safeExistsSync(path) {
 		return false;
 	}
 }
-/**
-* Detect a Coral USB Edge TPU: a matching USB device (`1a6e:089a` pre-init or
-* `18d1:9302` post-init) OR the installed libedgetpu delegate (the hub
-* provisions it out-of-band; its presence is a reliable "Coral is wired"
-* signal even where the container's `/sys` USB view is limited).
-*/
-function detectCoralUsb() {
-	const CORAL_IDS = [{
-		vendor: "1a6e",
-		product: "089a"
-	}, {
-		vendor: "18d1",
-		product: "9302"
-	}];
-	try {
-		for (const device of node_fs.readdirSync("/sys/bus/usb/devices")) try {
-			const base = `/sys/bus/usb/devices/${device}`;
-			const vendor = node_fs.readFileSync(`${base}/idVendor`, "utf8").trim().toLowerCase();
-			const product = node_fs.readFileSync(`${base}/idProduct`, "utf8").trim().toLowerCase();
-			if (CORAL_IDS.some((id) => id.vendor === vendor && id.product === product)) return true;
-		} catch {}
-	} catch {}
-	return safeExistsSync(process.env["CAMSTACK_EDGETPU_LIB"] ?? "/data/deps/edgetpu/lib/libedgetpu.so.1");
-}
 /** Probe Linux GPU vendors by parsing /proc/bus/pci/devices or /sys/class/drm. */
 function probeLinuxGpus() {
 	const signals = {
@@ -22237,7 +22322,7 @@ function probeLinuxGpus() {
 		hasIntelGpu: false,
 		hasRenderNode: false,
 		hasIntelNpu: safeExistsSync("/dev/accel/accel0"),
-		hasCoral: detectCoralUsb()
+		coral: require_coral_accelerators.classifyCoralAccelerator(require_coral_accelerators.nodeCoralFs)
 	};
 	signals.hasRenderNode = safeExistsSync("/dev/dri/renderD128");
 	if (safeExistsSync("/dev/nvidia0") || safeExistsSync("/proc/driver/nvidia/version")) signals.hasNvidiaGpu = true;
@@ -22271,7 +22356,7 @@ function probePlatform() {
 		hasIntelGpu: false,
 		hasRenderNode: false,
 		hasIntelNpu: false,
-		hasCoral: safeExistsSync(process.env["CAMSTACK_EDGETPU_LIB"] ?? "/data/deps/edgetpu/lib/libedgetpu.so.1")
+		coral: require_coral_accelerators.classifyCoralAccelerator(require_coral_accelerators.nodeCoralFs)
 	};
 }
 function pickBackendsForPlatform(signals) {
@@ -22362,7 +22447,7 @@ function mapSignalsToInferenceHardware(signals) {
 	return {
 		gpu: signals.hasNvidiaGpu ? { type: "nvidia" } : signals.hasAmdGpu ? { type: "amd" } : signals.hasIntelGpu ? { type: "intel" } : signals.hasRenderNode ? { type: "intel" } : null,
 		npu: signals.platform === "darwin" && signals.arch === "arm64" ? { type: "apple-ane" } : signals.hasIntelNpu ? { type: "intel-npu" } : null,
-		coral: signals.hasCoral ? { type: "coral-edgetpu" } : null
+		coral: signals.coral
 	};
 }
 /**
@@ -24709,7 +24794,7 @@ function localHardwareInfo() {
 			name: gpuType
 		} : null,
 		npu: npuType !== null ? { type: npuType } : null,
-		coral: inference.coral != null ? { type: "coral-edgetpu" } : null
+		coral: inference.coral ?? null
 	};
 }
 /** Runtime ids offered on this host (`onnx`, `openvino`, `coreml`, `edgetpu`). */
@@ -27827,6 +27912,7 @@ exports.attachUserManagementInternal = require_builtins_local_auth_local_auth_ad
 exports.attributeStall = require_custom_action_registry.attributeStall;
 exports.backupOrchestratorRecordKinds = require_restore_archive.backupOrchestratorRecordKinds;
 exports.backupRecordStoresOf = require_restore_archive.backupRecordStoresOf;
+exports.bareAddonOf = require_log_read_filter.bareAddonOf;
 exports.bindPendingLanHttp = require_hub_mdns_ciao.bindPendingLanHttp;
 exports.bootstrapSchema = bootstrapSchema;
 exports.brokerCallForCap = brokerCallForCap;
@@ -27875,6 +27961,7 @@ exports.clusterNodeHistoryRecordKind = clusterNodeHistoryRecordKind;
 exports.collectAgentNames = require_agent_https.collectAgentNames;
 exports.collectCertIdentity = require_agent_https.collectCertIdentity;
 exports.collectModelFiles = require_custom_action_registry.collectModelFiles;
+exports.compileLogFilter = require_log_read_filter.compileLogFilter;
 exports.computePairingCommitment = require_builtins_system_config_system_config_addon.computePairingCommitment;
 exports.computePairingSas = require_builtins_system_config_system_config_addon.computePairingSas;
 exports.connectBrokerTransport = connectBrokerTransport;
@@ -27984,6 +28071,7 @@ exports.evaluateExistingCert = require_agent_https.evaluateExistingCert;
 exports.expandCapMethods = require_dist.expandCapMethods;
 exports.exportMeshPrivateKeyPem = require_agent_https.exportMeshPrivateKeyPem;
 exports.fetchJson = require_custom_action_registry.fetchJson;
+exports.filterIsEmpty = require_log_read_filter.filterIsEmpty;
 exports.findAddonRefusal = findAddonRefusal;
 Object.defineProperty(exports, "findInPath", {
 	enumerable: true,
@@ -28094,6 +28182,9 @@ exports.issueMeshLeafForNode = require_agent_https.issueMeshLeafForNode;
 exports.issueMeshLeafFromCsr = require_agent_https.issueMeshLeafFromCsr;
 exports.keyFingerprintShort = require_builtins_system_config_system_config_addon.keyFingerprintShort;
 exports.leafFingerprintOf = require_hub_mdns_ciao.leafFingerprintOf;
+exports.levelRank = require_log_read_filter.levelRank;
+exports.lineContainsText = require_log_read_filter.lineContainsText;
+exports.lineMatches = require_log_read_filter.lineMatches;
 exports.loadAgentHttps = require_agent_https.loadAgentHttps;
 exports.loadDeviceCa = require_device_ca.loadDeviceCa;
 exports.loadMeshCa = require_agent_https.loadMeshCa;
@@ -28111,6 +28202,7 @@ exports.normalizeIp = require_builtins_system_config_system_config_addon.normali
 exports.onProcessNodeRegistered = require_builtins_system_config_system_config_addon.onProcessNodeRegistered;
 exports.onSessionsRevoked = require_builtins_local_auth_local_auth_addon.onSessionsRevoked;
 exports.openMeshTlsWhenRevocationsLoaded = require_builtins_system_config_system_config_addon.openMeshTlsWhenRevocationsLoaded;
+exports.originNodeOf = require_log_read_filter.originNodeOf;
 exports.overlayGetStatus = overlayGetStatus;
 exports.parseAgentDashboardOrigins = require_builtins_system_config_system_config_addon.parseAgentDashboardOrigins;
 exports.parseCapAction = parseCapAction;