@camstack/system 1.2.456 → 1.2.458

package/dist/addon-runner.mjs

@@ -1,6 +1,6 @@
 import { register } from "node:module";
-import * as fs from "node:fs";
-import { createReadStream, createWriteStream, existsSync, readFileSync, readdirSync } from "node:fs";
+import * as fs$1 from "node:fs";
+import fs, { createReadStream, createWriteStream, existsSync, readFileSync, readdirSync } from "node:fs";
 import * as path from "node:path";
 import { dirname, isAbsolute, join } from "node:path";
 import { BOOT_RECOVERY_BACKOFF_MS, CALLER_STAMPED_CAPABILITIES, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DeviceType, DisposerChain, ErrorI18nPayloadSchema, EventCategory, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, ReadinessRegistry, ReadinessTimeoutError, addonSliceHandleApi, asJsonObject, asString, collectZodSecretPaths, createDeviceProxy, createEventBusSliceSource, createRecordsAccess, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, isCollectionArrayMethodName, isProviderOptionalMethodName, maskUrlCredentials, normalizeAddonInitResult, readErrorI18n, readNodePin, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, withCapInputDefaults } from "@camstack/types/addon";
@@ -222,7 +222,7 @@ async function defaultDownloadTarball(url, destTgz) {
 	const res = await fetch(url);
 	if (!res.ok || !res.body) throw new Error(`HTTP ${res.status} downloading ${url}`);
 	const bytes = Buffer.from(await res.arrayBuffer());
-	await fs.promises.writeFile(destTgz, bytes);
+	await fs$1.promises.writeFile(destTgz, bytes);
 }
 async function defaultExtractTarball(tgzPath, destDir) {
 	await execFileAsync$3("tar", [
@@ -308,7 +308,7 @@ async function resolveUncached(options) {
 		argsPrefix: []
 	};
 	const cliPath = bootstrappedCliPath(options.cacheDir);
-	if (fs.existsSync(cliPath)) {
+	if (fs$1.existsSync(cliPath)) {
 		options.logger.info("system npm unavailable — using bootstrapped npm", { meta: { cliPath } });
 		return {
 			command: process.execPath,
@@ -320,12 +320,12 @@ async function resolveUncached(options) {
 		const registry = (options.registry ?? DEFAULT_REGISTRY).replace(/\/+$/, "");
 		const tarballUrl = tarballUrlOf(await (options.fetchJson ?? defaultFetchJson)(`${registry}/npm/latest`));
 		if (!tarballUrl) throw new Error(`registry metadata for 'npm' carries no dist.tarball (${registry})`);
-		await fs.promises.mkdir(options.cacheDir, { recursive: true });
+		await fs$1.promises.mkdir(options.cacheDir, { recursive: true });
 		const tgzPath = path.join(options.cacheDir, "npm-bootstrap.tgz");
 		await (options.downloadTarball ?? defaultDownloadTarball)(tarballUrl, tgzPath);
 		await (options.extractTarball ?? defaultExtractTarball)(tgzPath, options.cacheDir);
-		await fs.promises.rm(tgzPath, { force: true });
-		if (!fs.existsSync(cliPath)) throw new Error(`extracted npm tarball is missing ${cliPath}`);
+		await fs$1.promises.rm(tgzPath, { force: true });
+		if (!fs$1.existsSync(cliPath)) throw new Error(`extracted npm tarball is missing ${cliPath}`);
 		options.logger.info("npm bootstrapped", { meta: { cliPath } });
 		return {
 			command: process.execPath,
@@ -389,7 +389,7 @@ async function installManifestNativeDeps(addonDir, pkgRaw, logger, registry, npm
 			count: Object.keys(native).length
 		} });
 		try {
-			fs.writeFileSync(markerFile, markerHash);
+			fs$1.writeFileSync(markerFile, markerHash);
 		} catch (err) {
 			logger.warn("Failed to write native deps marker", { meta: {
 				markerFile,
@@ -427,7 +427,7 @@ async function installManifestNativeDeps(addonDir, pkgRaw, logger, registry, npm
 	}
 	await rebuildNativeDeps(addonDir, pending.map(([name]) => name), logger, npmCacheDir ?? defaultNpmCacheDir(), registry);
 	try {
-		fs.writeFileSync(markerFile, markerHash);
+		fs$1.writeFileSync(markerFile, markerHash);
 	} catch (err) {
 		logger.warn("Failed to write native deps marker", { meta: {
 			markerFile,
@@ -449,12 +449,12 @@ function copyPrebuiltNativeDep(name, addonDir, logger) {
 		if (source === target) continue;
 		if (!hasBuiltBinary(source)) continue;
 		try {
-			fs.rmSync(target, {
+			fs$1.rmSync(target, {
 				recursive: true,
 				force: true
 			});
-			fs.mkdirSync(path.dirname(target), { recursive: true });
-			fs.cpSync(source, target, {
+			fs$1.mkdirSync(path.dirname(target), { recursive: true });
+			fs$1.cpSync(source, target, {
 				recursive: true,
 				dereference: true
 			});
@@ -476,12 +476,12 @@ function copyPrebuiltNativeDep(name, addonDir, logger) {
 }
 /** A package dir is "built" when it carries a compiled `.node` or a prebuilds tree. */
 function hasBuiltBinary(pkgDir) {
-	if (!fs.existsSync(path.join(pkgDir, "package.json"))) return false;
+	if (!fs$1.existsSync(path.join(pkgDir, "package.json"))) return false;
 	const releaseDir = path.join(pkgDir, "build", "Release");
 	try {
-		if (fs.existsSync(releaseDir) && fs.readdirSync(releaseDir).some((f) => f.endsWith(".node"))) return true;
+		if (fs$1.existsSync(releaseDir) && fs$1.readdirSync(releaseDir).some((f) => f.endsWith(".node"))) return true;
 	} catch {}
-	return fs.existsSync(path.join(pkgDir, "prebuilds"));
+	return fs$1.existsSync(path.join(pkgDir, "prebuilds"));
 }
 /** Candidate hoisted locations for `<name>`: NODE_PATH entries + ancestors of `addonDir`. */
 function candidateHoistedDirs(name, addonDir) {
@@ -519,7 +519,7 @@ function hashDeclaration(deps) {
 }
 function markerMatches(markerFile, expected) {
 	try {
-		return fs.readFileSync(markerFile, "utf-8").trim() === expected;
+		return fs$1.readFileSync(markerFile, "utf-8").trim() === expected;
 	} catch {
 		return false;
 	}
@@ -5443,6 +5443,67 @@ function createChildrenBatchLoader(opts) {
 	} };
 }
 //#endregion
+//#region src/kernel/moleculer/accessory-prune-gate.ts
+function isSpecList(answer) {
+	return Array.isArray(answer);
+}
+function classifyAccessoryRead(answer, ctx) {
+	if (isSpecList(answer)) {
+		if (!ctx.online) return {
+			kind: "unknown",
+			reason: "parent offline",
+			children: answer
+		};
+		if (ctx.probedAt === 0) return {
+			kind: "unknown",
+			reason: "probe not yet completed",
+			children: answer
+		};
+		return {
+			kind: "successful",
+			children: answer
+		};
+	}
+	if (answer.kind === "unknown") return {
+		kind: "unknown",
+		reason: answer.reason,
+		children: answer.known ?? []
+	};
+	return {
+		kind: "successful",
+		children: answer.children
+	};
+}
+/** One per parent registration; in-memory on purpose (a restart starts over — the safe direction). */
+var AccessoryShrinkGate = class {
+	/** childId → the probe (`lastProbedAt`) of the first successful read that lacked it. */
+	#firstMissing = /* @__PURE__ */ new Map();
+	/**
+	* `missing` = the managed children a SUCCESSFUL read no longer lists. Never
+	* call this for an unknown read.
+	*/
+	decide(missing, probedAt) {
+		const missingSet = new Set(missing);
+		for (const id of [...this.#firstMissing.keys()]) if (!missingSet.has(id)) this.#firstMissing.delete(id);
+		const prune = [];
+		const deferred = [];
+		for (const id of missing) {
+			const first = this.#firstMissing.get(id);
+			if (first !== void 0 && probedAt > first) {
+				prune.push(id);
+				this.#firstMissing.delete(id);
+				continue;
+			}
+			if (first === void 0) this.#firstMissing.set(id, probedAt);
+			deferred.push(id);
+		}
+		return {
+			prune,
+			deferred
+		};
+	}
+};
+//#endregion
 //#region src/kernel/moleculer/runtime-state-load.ts
 /** A device build refused because its runtime state could not be loaded. */
 var RuntimeStateLoadError = class extends Error {
@@ -6176,6 +6237,7 @@ function createBrokerDeviceManagerApi(opts) {
 				throw err;
 			}
 			const lifecycleHost = device;
+			const shrinkGate = new AccessoryShrinkGate();
 			const runReconcile = async () => {
 				try {
 					await callDeviceManager(api, "registerDevice", {
@@ -6199,7 +6261,12 @@ function createBrokerDeviceManagerApi(opts) {
 					});
 				}
 				if (typeof lifecycleHost.getAccessoryChildren !== "function") return;
-				const specs = lifecycleHost.getAccessoryChildren();
+				const probedAt = device.runtimeState?.getCapState("feature-probe")?.lastProbedAt ?? 0;
+				const read = classifyAccessoryRead(lifecycleHost.getAccessoryChildren(), {
+					online: device.online,
+					probedAt
+				});
+				const specs = read.children;
 				const expected = new Set(specs.map((s) => `${device.stableId}-${s.stableIdSuffix}`));
 				await runBounded(specs, ACCESSORY_SPAWN_CONCURRENCY, async (spec) => {
 					try {
@@ -6217,24 +6284,42 @@ function createBrokerDeviceManagerApi(opts) {
 						});
 					}
 				});
-				if ((device.runtimeState?.getCapState("feature-probe")?.lastProbedAt ?? 0) === 0 && specs.length === 0) {
-					opts.logger.debug("Accessory orphan reconciliation skipped — probe not yet completed", { tags: {
-						parentDeviceId: device.id,
-						parentStableId: device.stableId
-					} });
+				if (read.kind === "unknown") {
+					opts.logger.info("Accessory orphan reconciliation skipped — child list unknown", {
+						tags: {
+							deviceId: device.id,
+							parentStableId: device.stableId
+						},
+						meta: {
+							reason: read.reason,
+							probedAt
+						}
+					});
 					return;
 				}
 				try {
-					const currentChildren = await childrenLoader.load(device.id);
-					for (const child of currentChildren) {
-						if (child.linkDeviceId !== device.id) continue;
-						if (expected.has(child.stableId)) continue;
+					const missing = (await childrenLoader.load(device.id)).filter((child) => child.linkDeviceId === device.id && !expected.has(child.stableId));
+					const decision = shrinkGate.decide(missing.map((child) => child.id), probedAt);
+					if (decision.deferred.length > 0) opts.logger.info("Accessory children missing from a complete read — kept until a later probe agrees", {
+						tags: {
+							deviceId: device.id,
+							parentStableId: device.stableId
+						},
+						meta: {
+							childDeviceIds: [...decision.deferred],
+							probedAt
+						}
+					});
+					const confirmed = new Set(decision.prune);
+					for (const child of missing) {
+						if (!confirmed.has(child.id)) continue;
 						const live = registry.getById(child.id);
 						try {
 							if (live) await deviceApi.remove(child.id);
 							else await callDeviceManager(api, "removeDevice", { deviceId: child.id });
 							opts.logger.info("Removed orphan accessory child no longer in parent specs", {
 								tags: {
+									deviceId: child.id,
 									parentDeviceId: device.id,
 									parentStableId: device.stableId
 								},
@@ -6247,6 +6332,7 @@ function createBrokerDeviceManagerApi(opts) {
 						} catch (err) {
 							opts.logger.warn("Failed to remove orphan accessory child", {
 								tags: {
+									deviceId: child.id,
 									parentDeviceId: device.id,
 									parentStableId: device.stableId,
 									childDeviceId: child.id
@@ -7755,6 +7841,166 @@ function ipcParentLink(getCallOut) {
 	};
 }
 //#endregion
+//#region src/builtins/platform-probe/coral-accelerators.ts
+/**
+* Coral USB Edge TPU USB identifiers.
+*
+* The device enumerates as `1a6e:089a` (Global Unichip) BEFORE the libedgetpu
+* firmware loads, then re-enumerates as `18d1:9302` (Google) AFTER. Either id
+* means a Coral is physically attached, so both count as a positive signal.
+*/
+var CORAL_USB_IDS = [{
+	vendor: "1a6e",
+	product: "089a"
+}, {
+	vendor: "18d1",
+	product: "9302"
+}];
+/** The PCIe / M.2 Coral's PCI function id (Global Unichip "Apex"). */
+var CORAL_PCI_VENDOR = "0x1ac1";
+var CORAL_PCI_DEVICE = "0x089a";
+/** A unit the apex driver bound: `/sys/class/apex/apex_<N>` ↔ `/dev/apex_<N>`. */
+var APEX_ENTRY = /^apex_(\d+)$/;
+/**
+* Default install path of the libedgetpu delegate on the hub, provisioned
+* out-of-band by `/data/deps/edgetpu-install.sh` (it is a system shared
+* library, not a pip package). Overridable via `CAMSTACK_EDGETPU_LIB` — kept in
+* sync with the Python pool's own default in `inference_pool.py`.
+*/
+var DEFAULT_EDGETPU_LIB = "/data/deps/edgetpu/lib/libedgetpu.so.1";
+function countUsbCorals(fsx) {
+	let count = 0;
+	for (const device of fsx.listUsbDevices()) {
+		const vendor = fsx.readUsbAttr(device, "idVendor").toLowerCase();
+		const product = fsx.readUsbAttr(device, "idProduct").toLowerCase();
+		if (CORAL_USB_IDS.some((id) => id.vendor === vendor && id.product === product)) count++;
+	}
+	return count;
+}
+function countPciCorals(fsx) {
+	let count = 0;
+	for (const device of fsx.listPciDevices()) {
+		const vendor = fsx.readPciAttr(device, "vendor").toLowerCase();
+		const product = fsx.readPciAttr(device, "device").toLowerCase();
+		if (vendor === CORAL_PCI_VENDOR && product === CORAL_PCI_DEVICE) count++;
+	}
+	return count;
+}
+/**
+* PCIe units: each `/sys/class/apex/apex_N` is a unit the driver bound; it is
+* usable only when `/dev/apex_N` is in this process's view AND opens read/write.
+* PCI functions with the Coral id beyond the bound units have no driver.
+*/
+function classifyPci(fsx) {
+	let usable = 0;
+	let notAccessible = 0;
+	for (const entry of fsx.listApexClass()) {
+		const match = APEX_ENTRY.exec(entry);
+		if (match === null) continue;
+		const node = `/dev/apex_${match[1]}`;
+		if (fsx.exists(node) && fsx.canOpen(node)) usable++;
+		else notAccessible++;
+	}
+	const driverMissing = Math.max(0, countPciCorals(fsx) - usable - notAccessible);
+	return {
+		usable,
+		notAccessible,
+		driverMissing
+	};
+}
+/**
+* Detect Coral Edge TPUs on USB and PCIe/M.2.
+*
+* - USB: every matching USB device counts (multiple Corals run concurrently).
+* - PCIe: the apex driver's units, each usable only if its device node opens;
+*   a Coral PCI function the driver did not bind is `driver-missing`.
+* - Fallback: when NO Coral signal of either bus is visible but the libedgetpu
+*   delegate is installed (a container whose `/sys` USB view is limited), one
+*   USB Coral is assumed — never when a PCI Coral was seen, since the delegate
+*   then says nothing about USB.
+*
+* Returns `null` only when no Coral was found at all; a present-but-unusable
+* Coral is reported with its typed reason, never as absent (D393/D315).
+*/
+function classifyCoralAccelerator(fsx) {
+	const usb = countUsbCorals(fsx);
+	const pci = classifyPci(fsx);
+	const units = [];
+	if (usb > 0) units.push({
+		bus: "usb",
+		count: usb
+	});
+	if (pci.usable > 0) units.push({
+		bus: "pci",
+		count: pci.usable
+	});
+	const unavailable = [];
+	if (pci.driverMissing > 0) unavailable.push({
+		bus: "pci",
+		count: pci.driverMissing,
+		reason: "driver-missing"
+	});
+	if (pci.notAccessible > 0) unavailable.push({
+		bus: "pci",
+		count: pci.notAccessible,
+		reason: "device-not-accessible"
+	});
+	if (units.length > 0 || unavailable.length > 0) return unavailable.length > 0 ? {
+		type: "coral-edgetpu",
+		units,
+		unavailable
+	} : {
+		type: "coral-edgetpu",
+		units
+	};
+	const libPath = process.env["CAMSTACK_EDGETPU_LIB"] ?? DEFAULT_EDGETPU_LIB;
+	if (fsx.exists(libPath)) return {
+		type: "coral-edgetpu",
+		units: [{
+			bus: "usb",
+			count: 1
+		}]
+	};
+	return null;
+}
+function safeList(dir) {
+	try {
+		return fs.readdirSync(dir);
+	} catch {
+		return [];
+	}
+}
+function safeRead(path) {
+	try {
+		return fs.readFileSync(path, "utf8").trim();
+	} catch {
+		return "";
+	}
+}
+/** The real filesystem view: `/sys` for enumeration, `/dev` for access. */
+var nodeCoralFs = {
+	listUsbDevices: () => safeList("/sys/bus/usb/devices"),
+	readUsbAttr: (device, attr) => safeRead(`/sys/bus/usb/devices/${device}/${attr}`),
+	listPciDevices: () => safeList("/sys/bus/pci/devices"),
+	readPciAttr: (device, attr) => safeRead(`/sys/bus/pci/devices/${device}/${attr}`),
+	listApexClass: () => safeList("/sys/class/apex"),
+	canOpen: (path) => {
+		try {
+			fs.accessSync(path, fs.constants.R_OK | fs.constants.W_OK);
+			return true;
+		} catch {
+			return false;
+		}
+	},
+	exists: (path) => {
+		try {
+			return fs.existsSync(path);
+		} catch {
+			return false;
+		}
+	}
+};
+//#endregion
 //#region src/kernel/hwaccel/hwaccel-resolver.ts
 /**
 * Platform-probe for hardware video decode acceleration.
@@ -7774,35 +8020,11 @@ function ipcParentLink(getCallOut) {
 */
 function safeExistsSync(path) {
 	try {
-		return fs.existsSync(path);
+		return fs$1.existsSync(path);
 	} catch {
 		return false;
 	}
 }
-/**
-* Detect a Coral USB Edge TPU: a matching USB device (`1a6e:089a` pre-init or
-* `18d1:9302` post-init) OR the installed libedgetpu delegate (the hub
-* provisions it out-of-band; its presence is a reliable "Coral is wired"
-* signal even where the container's `/sys` USB view is limited).
-*/
-function detectCoralUsb() {
-	const CORAL_IDS = [{
-		vendor: "1a6e",
-		product: "089a"
-	}, {
-		vendor: "18d1",
-		product: "9302"
-	}];
-	try {
-		for (const device of fs.readdirSync("/sys/bus/usb/devices")) try {
-			const base = `/sys/bus/usb/devices/${device}`;
-			const vendor = fs.readFileSync(`${base}/idVendor`, "utf8").trim().toLowerCase();
-			const product = fs.readFileSync(`${base}/idProduct`, "utf8").trim().toLowerCase();
-			if (CORAL_IDS.some((id) => id.vendor === vendor && id.product === product)) return true;
-		} catch {}
-	} catch {}
-	return safeExistsSync(process.env["CAMSTACK_EDGETPU_LIB"] ?? "/data/deps/edgetpu/lib/libedgetpu.so.1");
-}
 /** Probe Linux GPU vendors by parsing /proc/bus/pci/devices or /sys/class/drm. */
 function probeLinuxGpus() {
 	const signals = {
@@ -7811,17 +8033,17 @@ function probeLinuxGpus() {
 		hasIntelGpu: false,
 		hasRenderNode: false,
 		hasIntelNpu: safeExistsSync("/dev/accel/accel0"),
-		hasCoral: detectCoralUsb()
+		coral: classifyCoralAccelerator(nodeCoralFs)
 	};
 	signals.hasRenderNode = safeExistsSync("/dev/dri/renderD128");
 	if (safeExistsSync("/dev/nvidia0") || safeExistsSync("/proc/driver/nvidia/version")) signals.hasNvidiaGpu = true;
 	try {
 		const drmDir = "/sys/class/drm";
-		if (fs.existsSync(drmDir)) for (const entry of fs.readdirSync(drmDir)) {
+		if (fs$1.existsSync(drmDir)) for (const entry of fs$1.readdirSync(drmDir)) {
 			if (!entry.startsWith("card")) continue;
 			const vendorPath = `${drmDir}/${entry}/device/vendor`;
 			if (!safeExistsSync(vendorPath)) continue;
-			const vendor = fs.readFileSync(vendorPath, "utf8").trim().toLowerCase();
+			const vendor = fs$1.readFileSync(vendorPath, "utf8").trim().toLowerCase();
 			if (vendor === "0x10de") signals.hasNvidiaGpu = true;
 			else if (vendor === "0x1002") signals.hasAmdGpu = true;
 			else if (vendor === "0x8086") signals.hasIntelGpu = true;
@@ -7845,7 +8067,7 @@ function probePlatform() {
 		hasIntelGpu: false,
 		hasRenderNode: false,
 		hasIntelNpu: false,
-		hasCoral: safeExistsSync(process.env["CAMSTACK_EDGETPU_LIB"] ?? "/data/deps/edgetpu/lib/libedgetpu.so.1")
+		coral: classifyCoralAccelerator(nodeCoralFs)
 	};
 }
 function pickBackendsForPlatform(signals) {
@@ -7936,7 +8158,7 @@ function mapSignalsToInferenceHardware(signals) {
 	return {
 		gpu: signals.hasNvidiaGpu ? { type: "nvidia" } : signals.hasAmdGpu ? { type: "amd" } : signals.hasIntelGpu ? { type: "intel" } : signals.hasRenderNode ? { type: "intel" } : null,
 		npu: signals.platform === "darwin" && signals.arch === "arm64" ? { type: "apple-ane" } : signals.hasIntelNpu ? { type: "intel-npu" } : null,
-		coral: signals.hasCoral ? { type: "coral-edgetpu" } : null
+		coral: signals.coral
 	};
 }
 /**
@@ -8680,21 +8902,21 @@ function sleep(ms) {
 * crashed holder) is stolen.
 */
 async function withFileLock(lockPath, fn) {
-	fs.mkdirSync(join(lockPath, ".."), { recursive: true });
+	fs$1.mkdirSync(join(lockPath, ".."), { recursive: true });
 	for (;;) try {
-		const fd = fs.openSync(lockPath, "wx");
-		fs.closeSync(fd);
+		const fd = fs$1.openSync(lockPath, "wx");
+		fs$1.closeSync(fd);
 		break;
 	} catch {
 		try {
-			if (Date.now() - fs.statSync(lockPath).mtimeMs > LOCK_STALE_MS) fs.rmSync(lockPath, { force: true });
+			if (Date.now() - fs$1.statSync(lockPath).mtimeMs > LOCK_STALE_MS) fs$1.rmSync(lockPath, { force: true });
 			else await sleep(LOCK_POLL_MS);
 		} catch {}
 	}
 	try {
 		return await fn();
 	} finally {
-		fs.rmSync(lockPath, { force: true });
+		fs$1.rmSync(lockPath, { force: true });
 	}
 }
 /** Coalesce in-process + serialize cross-process for one binary id. */
@@ -10249,7 +10471,7 @@ async function buildAddonContext(runtime, declaration, dataDir, options) {
 	const addonId = declaration.id;
 	const nodeDataDir = process.env["CAMSTACK_DATA"] ?? dataDir;
 	const addonDataDir = path.resolve(nodeDataDir, "addons-data", addonId);
-	fs.mkdirSync(addonDataDir, { recursive: true });
+	fs$1.mkdirSync(addonDataDir, { recursive: true });
 	if (runtime.mode === "broker") ensureBindingSubscription(runtime.broker);
 	const regs = getRegistries(nodeId);
 	const workerResolver = {
@@ -11117,11 +11339,11 @@ function parseAddonsSpec(raw) {
 }
 async function loadAddonModule(addonId, addonDir) {
 	const pkgJsonPath = path.join(addonDir, "package.json");
-	if (!fs.existsSync(pkgJsonPath)) throw new Error(`No package.json at ${addonDir}`);
-	const declaration = JSON.parse(fs.readFileSync(pkgJsonPath, "utf-8"))["camstack"]?.addons?.find((a) => a.id === addonId);
+	if (!fs$1.existsSync(pkgJsonPath)) throw new Error(`No package.json at ${addonDir}`);
+	const declaration = JSON.parse(fs$1.readFileSync(pkgJsonPath, "utf-8"))["camstack"]?.addons?.find((a) => a.id === addonId);
 	if (!declaration?.entry) throw new Error(`Addon "${addonId}" not found in ${pkgJsonPath} manifest`);
 	const entryPath = path.resolve(addonDir, declaration.entry);
-	if (!fs.existsSync(entryPath)) throw new Error(`Entry point not found: ${entryPath}`);
+	if (!fs$1.existsSync(entryPath)) throw new Error(`Entry point not found: ${entryPath}`);
 	const modUnknown = await import(entryPath);
 	const mod = isRecord(modUnknown) ? modUnknown : {};
 	const AddonClass = resolveAddonClass(mod);
@@ -11318,7 +11540,7 @@ async function main() {
 		});
 		if (context.secrets !== void 0) addonSecrets.set(spec.addonId, context.secrets);
 		try {
-			const pkgRaw = JSON.parse(fs.readFileSync(path.join(spec.addonDir, "package.json"), "utf-8"));
+			const pkgRaw = JSON.parse(fs$1.readFileSync(path.join(spec.addonDir, "package.json"), "utf-8"));
 			await installManifestNativeDeps(spec.addonDir, pkgRaw, context.logger);
 		} catch (nativeErr) {
 			console.error(`[addon-runner] native deps install failed for "${spec.addonId}": ${errMsg(nativeErr)}`);
@@ -11381,7 +11603,7 @@ async function main() {
 		const refusal = findAddonRefusal(err);
 		if (refusal !== null) {
 			try {
-				fs.writeSync(1, formatRunnerRefusalLine(nodeId, refusalReportOf(spec.addonId, refusal)));
+				fs$1.writeSync(1, formatRunnerRefusalLine(nodeId, refusalReportOf(spec.addonId, refusal)));
 			} catch {}
 			process.exit(78);
 		}

package/dist/{agent-https-fm4AR8XL.mjs → agent-https-CQA3W-3e.mjs}

@@ -1,6 +1,6 @@
-import { Ui as defineRecordKinds } from "./dist-BSF_C8W2.mjs";
+import { Ki as defineRecordKinds } from "./dist-B_GRPhnY.mjs";
 import { S as backdatedNotBefore, _ as NameConstraints, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, g as GeneralSubtrees, h as GeneralSubtree, i as Extension, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension, v as GeneralName, x as AsnConvert } from "./x509.es-DK__ETIe.mjs";
-import { c as SERVER_AUTH_OID$1, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "./constants-i5oD_gLB.mjs";
+import { c as SERVER_AUTH_OID$1, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "./constants-FGjnsE2x.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, webcrypto } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/{agent-https-yjxdfJDA.js → agent-https-DOELEug8.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BpqA2CT0.js");
+const require_dist = require("./dist-BZQjLPiz.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
-const require_constants = require("./constants-CavyKfHZ.js");
+const require_constants = require("./constants-Njka8Cv6.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BpqA2CT0.js");
+const require_dist = require("../../dist-BZQjLPiz.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as BaseAddon, Qr as errMsg, Ta as EventCategory, gt as addonPagesCapability } from "../../dist-BSF_C8W2.mjs";
+import { Oa as EventCategory, ni as BaseAddon, ti as errMsg, yt as addonPagesCapability } from "../../dist-B_GRPhnY.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BpqA2CT0.js");
+const require_dist = require("../../dist-BZQjLPiz.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as BaseAddon, Qr as errMsg, Ta as EventCategory, vt as addonWidgetsCapability } from "../../dist-BSF_C8W2.mjs";
+import { Oa as EventCategory, ni as BaseAddon, ti as errMsg, xt as addonWidgetsCapability } from "../../dist-B_GRPhnY.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BpqA2CT0.js");
+const require_dist = require("../../dist-BZQjLPiz.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_phase6_declare_gate = require("../../phase6-declare-gate-n-IZRklX.js");
+const require_phase6_declare_gate = require("../../phase6-declare-gate-Dag1_WR2.js");
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**
 * When does an alert open a new EPISODE, and which edge of it is announced?

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,6 +1,6 @@
-import { $r as BaseAddon, Qr as errMsg, Ta as EventCategory, Ui as defineRecordKinds, bt as alertEpisodePayload, i as AlertSchema, vn as isAlertEpisodeOpen, xt as alertsCapability, yn as isAlertEpisodeSeverity, yt as alertEpisodeId, zi as createEvent } from "../../dist-BSF_C8W2.mjs";
+import { Ct as alertEpisodePayload, Hi as createEvent, Ki as defineRecordKinds, Oa as EventCategory, Sn as isAlertEpisodeSeverity, St as alertEpisodeId, i as AlertSchema, ni as BaseAddon, ti as errMsg, wt as alertsCapability, xn as isAlertEpisodeOpen } from "../../dist-B_GRPhnY.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-B4yfsf2n.mjs";
+import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-Lb-mrVvz.mjs";
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**
 * When does an alert open a new EPISODE, and which edge of it is announced?

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BpqA2CT0.js");
+const require_dist = require("../../dist-BZQjLPiz.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { $r as BaseAddon, I as FIRST_LEVEL_MACRO_CLASSES, Qr as errMsg, Ta as EventCategory, Tt as bareAddonId, Xi as isEvent, er as ptzAutotrackCapability } from "../../dist-BSF_C8W2.mjs";
+import { $i as isEvent, L as FIRST_LEVEL_MACRO_CLASSES, Oa as EventCategory, Ot as bareAddonId, ni as BaseAddon, rr as ptzAutotrackCapability, ti as errMsg } from "../../dist-B_GRPhnY.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,