@camstack/system 1.2.457 → 1.2.459

package/dist/index.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-C89nqNnn.js");
+const require_dist = require("./dist-Bn-RNanh.js");
 const require_read_all_rows$1 = require("./read-all-rows-CVoO1ONM.js");
-const require_device_ca = require("./device-ca-CVK3YcR_.js");
+const require_device_ca = require("./device-ca-CPTDs--d.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -28,21 +28,22 @@ const require_builtins_loki_logging_index = require("./builtins/loki-logging/ind
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_device_history_device_history_addon = require("./builtins/device-history/device-history.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-DVN-DiVP.js");
+const require_wal_maintenance = require("./wal-maintenance-DUHEp_09.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_constants = require("./constants-B_X9cWEK.js");
-const require_agent_https = require("./agent-https-CoyOZ3pC.js");
+const require_agent_https = require("./agent-https-Dnr_nIVx.js");
+const require_constants = require("./constants-6OeJiZgi.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_custom_action_registry = require("./custom-action-registry-COyb49zm.js");
-const require_hub_mdns_ciao = require("./hub-mdns-ciao-DB1Y9agt.js");
+const require_hub_mdns_ciao = require("./hub-mdns-ciao-CTBTlia4.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-4DOUR5Gu.js");
+const require_restore_archive = require("./restore-archive-DM1OBYq4.js");
+const require_coral_accelerators = require("./coral-accelerators-Bi_c3Rft.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
@@ -5618,8 +5619,7 @@ var _integrationRegistryRecordKinds = require_dist.defineRecordKinds({
 			name: "addon_id",
 			fields: ["addonId"]
 		}],
-		retention: { none: "deleteIntegration only" },
-		adoptsFrom: INTEGRATIONS_LEGACY
+		retention: { none: "deleteIntegration only" }
 	},
 	"integration-settings": {
 		schema: IntegrationSettingBodySchema,
@@ -5631,8 +5631,7 @@ var _integrationRegistryRecordKinds = require_dist.defineRecordKinds({
 			name: "integration_id",
 			fields: ["integrationId"]
 		}],
-		retention: { none: "cascade on deleteIntegration" },
-		adoptsFrom: INTEGRATION_SETTINGS_LEGACY
+		retention: { none: "cascade on deleteIntegration" }
 	}
 });
 var integrationRegistryRecordKinds = _integrationRegistryRecordKinds;
@@ -6120,8 +6119,7 @@ var _clusterAgentRecordKinds = require_dist.defineRecordKinds({ "node-history":
 		name: "last_active",
 		fields: ["at"]
 	}],
-	retention: { none: "rows removed only by operator forget(nodeId)" },
-	adoptsFrom: CLUSTER_NODE_HISTORY_COLLECTION
+	retention: { none: "rows removed only by operator forget(nodeId)" }
 } });
 var clusterAgentRecordKinds = _clusterAgentRecordKinds;
 /** Narrow kind for `records.kind()` — `IsolatedRecordKinds` string index is `| undefined`. */
@@ -22313,30 +22311,6 @@ function safeExistsSync(path) {
 		return false;
 	}
 }
-/**
-* Detect a Coral USB Edge TPU: a matching USB device (`1a6e:089a` pre-init or
-* `18d1:9302` post-init) OR the installed libedgetpu delegate (the hub
-* provisions it out-of-band; its presence is a reliable "Coral is wired"
-* signal even where the container's `/sys` USB view is limited).
-*/
-function detectCoralUsb() {
-	const CORAL_IDS = [{
-		vendor: "1a6e",
-		product: "089a"
-	}, {
-		vendor: "18d1",
-		product: "9302"
-	}];
-	try {
-		for (const device of node_fs.readdirSync("/sys/bus/usb/devices")) try {
-			const base = `/sys/bus/usb/devices/${device}`;
-			const vendor = node_fs.readFileSync(`${base}/idVendor`, "utf8").trim().toLowerCase();
-			const product = node_fs.readFileSync(`${base}/idProduct`, "utf8").trim().toLowerCase();
-			if (CORAL_IDS.some((id) => id.vendor === vendor && id.product === product)) return true;
-		} catch {}
-	} catch {}
-	return safeExistsSync(process.env["CAMSTACK_EDGETPU_LIB"] ?? "/data/deps/edgetpu/lib/libedgetpu.so.1");
-}
 /** Probe Linux GPU vendors by parsing /proc/bus/pci/devices or /sys/class/drm. */
 function probeLinuxGpus() {
 	const signals = {
@@ -22345,7 +22319,7 @@ function probeLinuxGpus() {
 		hasIntelGpu: false,
 		hasRenderNode: false,
 		hasIntelNpu: safeExistsSync("/dev/accel/accel0"),
-		hasCoral: detectCoralUsb()
+		coral: require_coral_accelerators.classifyCoralAccelerator(require_coral_accelerators.nodeCoralFs)
 	};
 	signals.hasRenderNode = safeExistsSync("/dev/dri/renderD128");
 	if (safeExistsSync("/dev/nvidia0") || safeExistsSync("/proc/driver/nvidia/version")) signals.hasNvidiaGpu = true;
@@ -22379,7 +22353,7 @@ function probePlatform() {
 		hasIntelGpu: false,
 		hasRenderNode: false,
 		hasIntelNpu: false,
-		hasCoral: safeExistsSync(process.env["CAMSTACK_EDGETPU_LIB"] ?? "/data/deps/edgetpu/lib/libedgetpu.so.1")
+		coral: require_coral_accelerators.classifyCoralAccelerator(require_coral_accelerators.nodeCoralFs)
 	};
 }
 function pickBackendsForPlatform(signals) {
@@ -22470,7 +22444,7 @@ function mapSignalsToInferenceHardware(signals) {
 	return {
 		gpu: signals.hasNvidiaGpu ? { type: "nvidia" } : signals.hasAmdGpu ? { type: "amd" } : signals.hasIntelGpu ? { type: "intel" } : signals.hasRenderNode ? { type: "intel" } : null,
 		npu: signals.platform === "darwin" && signals.arch === "arm64" ? { type: "apple-ane" } : signals.hasIntelNpu ? { type: "intel-npu" } : null,
-		coral: signals.hasCoral ? { type: "coral-edgetpu" } : null
+		coral: signals.coral
 	};
 }
 /**
@@ -24817,7 +24791,7 @@ function localHardwareInfo() {
 			name: gpuType
 		} : null,
 		npu: npuType !== null ? { type: npuType } : null,
-		coral: inference.coral != null ? { type: "coral-edgetpu" } : null
+		coral: inference.coral ?? null
 	};
 }
 /** Runtime ids offered on this host (`onnx`, `openvino`, `coreml`, `edgetpu`). */
@@ -27823,14 +27797,14 @@ exports.MESH_ACTION_FORBIDDEN_TYPE = MESH_ACTION_FORBIDDEN_TYPE;
 exports.MESH_CA_FIELD = require_constants.MESH_CA_FIELD;
 exports.MESH_CA_KEY_REF = require_constants.MESH_CA_KEY_REF;
 exports.MESH_CA_SETTINGS_KEY = require_constants.MESH_CA_SETTINGS_KEY;
-exports.MESH_NODE_CERTIFICATES_COLLECTION = require_agent_https.MESH_NODE_CERTIFICATES_COLLECTION;
-exports.MESH_NODE_CERTIFICATES_COLUMNS = require_agent_https.MESH_NODE_CERTIFICATES_COLUMNS;
+exports.MESH_NODE_CERTIFICATES_COLLECTION = require_builtins_system_config_system_config_addon.MESH_NODE_CERTIFICATES_COLLECTION;
+exports.MESH_NODE_CERTIFICATES_COLUMNS = require_builtins_system_config_system_config_addon.MESH_NODE_CERTIFICATES_COLUMNS;
 exports.MESH_NODE_UNAUTHENTICATED_TYPE = MESH_NODE_UNAUTHENTICATED_TYPE;
 exports.MESH_QUEUE_TOP_N = MESH_QUEUE_TOP_N;
 exports.MESH_TLS_PORT_HELLO_FIELD = require_builtins_system_config_system_config_addon.MESH_TLS_PORT_HELLO_FIELD;
 exports.METHOD_ACCESS_MAP = require_dist.METHOD_ACCESS_MAP;
 exports.MeshCaKeeper = require_builtins_system_config_system_config_addon.MeshCaKeeper;
-exports.MeshCertificateRegistry = require_agent_https.MeshCertificateRegistry;
+exports.MeshCertificateRegistry = require_builtins_system_config_system_config_addon.MeshCertificateRegistry;
 exports.MeshCrl = require_builtins_system_config_system_config_addon.MeshCrl;
 exports.MeshIdentityGate = MeshIdentityGate;
 exports.ModelDownloadService = require_custom_action_registry.ModelDownloadService;
@@ -27867,7 +27841,7 @@ exports.PipelineValidator = PipelineValidator;
 exports.PythonEnvManager = PythonEnvManager;
 exports.QUARANTINE_DIRNAME = QUARANTINE_DIRNAME;
 exports.REFRESH_TOKEN_PREFIX = require_builtins_local_auth_local_auth_addon.REFRESH_TOKEN_PREFIX;
-exports.RENEWAL_ABANDONED = require_agent_https.RENEWAL_ABANDONED;
+exports.RENEWAL_ABANDONED = require_builtins_system_config_system_config_addon.RENEWAL_ABANDONED;
 exports.RESTART_MARKER_FILE = RESTART_MARKER_FILE;
 exports.RSS_BUDGET_REANNOUNCE_MIN_MS = RSS_BUDGET_REANNOUNCE_MIN_MS;
 exports.RSS_BUDGET_RELEASE_RATIO = RSS_BUDGET_RELEASE_RATIO;
@@ -27957,8 +27931,8 @@ exports.buildNpmChildEnv = buildNpmChildEnv;
 exports.buildStorageLocationRegistry = require_builtins_storage_orchestrator_storage_orchestrator_addon.buildStorageLocationRegistry;
 exports.buildTransporter = buildTransporter;
 exports.builderMountedCapNames = builderMountedCapNames;
-exports.caFingerprint = require_agent_https.caFingerprint;
-exports.caFingerprintCompact = require_agent_https.caFingerprintCompact;
+exports.caFingerprint = require_builtins_system_config_system_config_addon.caFingerprint;
+exports.caFingerprintCompact = require_builtins_system_config_system_config_addon.caFingerprintCompact;
 exports.caReplacementMarkerFile = require_hub_mdns_ciao.caReplacementMarkerFile;
 exports.callRegisterNodeWithRetry = callRegisterNodeWithRetry;
 exports.callWithServiceDiscovery = callWithServiceDiscovery;
@@ -28020,7 +27994,7 @@ exports.createKernelInferenceEngine = createKernelInferenceEngine;
 exports.createLocalTransport = createLocalTransport;
 exports.createLoopDelayMeter = createLoopDelayMeter;
 exports.createMeshAccessMiddleware = createMeshAccessMiddleware;
-exports.createMeshCsrPem = require_agent_https.createMeshCsrPem;
+exports.createMeshCsrPem = require_builtins_system_config_system_config_addon.createMeshCsrPem;
 exports.createMeshQueueReader = createMeshQueueReader;
 exports.createOutboundQueueGate = createOutboundQueueGate;
 exports.createParentUnownedCallHandler = createParentUnownedCallHandler;
@@ -28043,7 +28017,7 @@ exports.deleteModelFromDisk = require_custom_action_registry.deleteModelFromDisk
 exports.deriveAgentListenPort = deriveAgentListenPort;
 exports.describeCsr = require_builtins_system_config_system_config_addon.describeCsr;
 exports.describeHttpsLeaf = require_agent_https.describeHttpsLeaf;
-exports.describeMeshLeaf = require_agent_https.describeMeshLeaf;
+exports.describeMeshLeaf = require_builtins_system_config_system_config_addon.describeMeshLeaf;
 exports.describeProviderKindDrift = describeProviderKindDrift;
 exports.describeRss = describeRss;
 exports.detectWorkspacePackagesDir = detectWorkspacePackagesDir;
@@ -28092,7 +28066,7 @@ Object.defineProperty(exports, "ensurePython", {
 exports.ensureTlsCert = require_hub_mdns_ciao.ensureTlsCert;
 exports.evaluateExistingCert = require_agent_https.evaluateExistingCert;
 exports.expandCapMethods = require_dist.expandCapMethods;
-exports.exportMeshPrivateKeyPem = require_agent_https.exportMeshPrivateKeyPem;
+exports.exportMeshPrivateKeyPem = require_builtins_system_config_system_config_addon.exportMeshPrivateKeyPem;
 exports.fetchJson = require_custom_action_registry.fetchJson;
 exports.filterIsEmpty = require_log_read_filter.filterIsEmpty;
 exports.findAddonRefusal = findAddonRefusal;
@@ -28111,8 +28085,8 @@ exports.formatOutboundQueueVerdict = formatOutboundQueueVerdict;
 exports.formatSocketPlane = formatSocketPlane;
 exports.generateBackupKeyPair = require_restore_archive.generateBackupKeyPair;
 exports.generateDeviceCa = require_device_ca.generateDeviceCa;
-exports.generateMeshCa = require_agent_https.generateMeshCa;
-exports.generateMeshKeyPair = require_agent_https.generateMeshKeyPair;
+exports.generateMeshCa = require_builtins_system_config_system_config_addon.generateMeshCa;
+exports.generateMeshKeyPair = require_builtins_system_config_system_config_addon.generateMeshKeyPair;
 exports.getBrokerEventBus = getBrokerEventBus;
 exports.getBrokerTlsTransporter = getBrokerTlsTransporter;
 exports.getCapUsageRegistry = getCapUsageRegistry;
@@ -28139,7 +28113,7 @@ exports.getPlatformKeychainKey = require_platform_key_source.getPlatformKeychain
 exports.getProcessAgentHttpsNames = require_agent_https.getProcessAgentHttpsNames;
 exports.getProcessJwtSigningKeyState = require_device_ca.getProcessJwtSigningKeyState;
 exports.getProcessMeshCaState = require_builtins_system_config_system_config_addon.getProcessMeshCaState;
-exports.getProcessMeshCertificateRegistry = require_agent_https.getProcessMeshCertificateRegistry;
+exports.getProcessMeshCertificateRegistry = require_builtins_system_config_system_config_addon.getProcessMeshCertificateRegistry;
 exports.getProcessMeshTlsListenerState = require_builtins_system_config_system_config_addon.getProcessMeshTlsListenerState;
 exports.getProcessNodeMeshTransport = require_builtins_system_config_system_config_addon.getProcessNodeMeshTransport;
 exports.getProcessPeerLeaf = require_builtins_system_config_system_config_addon.getProcessPeerLeaf;
@@ -28197,12 +28171,12 @@ exports.isRemoteForbiddenAction = isRemoteForbiddenAction;
 exports.isRemoteForbiddenOnAgent = isRemoteForbiddenOnAgent;
 exports.isSettingsReadUnavailable = require_builtins_local_auth_local_auth_addon.isSettingsReadUnavailable;
 exports.isSourceNewer = isSourceNewer;
-exports.isValidAgentNodeId = require_agent_https.isValidAgentNodeId;
+exports.isValidAgentNodeId = require_builtins_system_config_system_config_addon.isValidAgentNodeId;
 exports.isolatedBuiltinPhase = isolatedBuiltinPhase;
 exports.issueAgentHttpsLeaf = require_agent_https.issueAgentHttpsLeaf;
 exports.issueDeviceLeaf = require_device_ca.issueDeviceLeaf;
-exports.issueMeshLeafForNode = require_agent_https.issueMeshLeafForNode;
-exports.issueMeshLeafFromCsr = require_agent_https.issueMeshLeafFromCsr;
+exports.issueMeshLeafForNode = require_builtins_system_config_system_config_addon.issueMeshLeafForNode;
+exports.issueMeshLeafFromCsr = require_builtins_system_config_system_config_addon.issueMeshLeafFromCsr;
 exports.keyFingerprintShort = require_builtins_system_config_system_config_addon.keyFingerprintShort;
 exports.leafFingerprintOf = require_hub_mdns_ciao.leafFingerprintOf;
 exports.levelRank = require_log_read_filter.levelRank;
@@ -28210,7 +28184,7 @@ exports.lineContainsText = require_log_read_filter.lineContainsText;
 exports.lineMatches = require_log_read_filter.lineMatches;
 exports.loadAgentHttps = require_agent_https.loadAgentHttps;
 exports.loadDeviceCa = require_device_ca.loadDeviceCa;
-exports.loadMeshCa = require_agent_https.loadMeshCa;
+exports.loadMeshCa = require_builtins_system_config_system_config_addon.loadMeshCa;
 exports.loadTlsCert = require_hub_mdns_ciao.loadTlsCert;
 exports.localCaCommonName = require_agent_https.localCaCommonName;
 exports.localEndpointPath = localEndpointPath;
@@ -28302,7 +28276,7 @@ exports.setHubConnected = setHubConnected;
 exports.setNodeEventInterest = setNodeEventInterest;
 exports.setPlatformKeychainKey = require_platform_key_source.setPlatformKeychainKey;
 exports.setProcessAgentHttpsNames = require_agent_https.setProcessAgentHttpsNames;
-exports.setProcessMeshCertificateRegistry = require_agent_https.setProcessMeshCertificateRegistry;
+exports.setProcessMeshCertificateRegistry = require_builtins_system_config_system_config_addon.setProcessMeshCertificateRegistry;
 exports.setProcessMeshPeerTransportLookup = require_builtins_system_config_system_config_addon.setProcessMeshPeerTransportLookup;
 exports.setProcessMeshTlsEnabler = require_builtins_system_config_system_config_addon.setProcessMeshTlsEnabler;
 exports.setProcessMeshTlsListenerState = require_builtins_system_config_system_config_addon.setProcessMeshTlsListenerState;

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { i as __require } from "./chunk-CNf5ZN-e.mjs";
-import { An as isVoidInput, Bn as logLevelAtMost, Ci as ReadinessTimeoutError, Da as withoutCallerStamp, Ea as userError, Fi as asString$1, Hi as createEvent$1, In as lifecycleJobSchema, J as METHOD_ACCESS_MAP, K as LOG_LEVEL_RANK, Ki as defineRecordKinds, Mr as supportedRuntimes, Ni as asJsonObject$1, Oa as EventCategory$1, Pi as asNumber, Si as ReadinessRegistry, Tn as isCollectionArrayMethod, Vn as looseSchema, Xn as objectInputDeclaresAddonId, Yi as expandCapMethods, Zn as objectInputDeclaresRequiredDeviceId, _a as resolveCapMount, _r as scopesAllowAddon, ai as DATAPLANE_SECRET_HEADER$1, bn as interpolate, bt as addonSettingsCapability, d as CATALOG_LANGS, da as parseJsonUnknown, ha as readinessKey, ii as CALLER_STAMPED_CAPABILITIES$1, jn as kebabToCamel$1, kn as isObjectInput, mn as extractNestedAddonId, mr as resolveMethodAuth, n as AGENT_MDNS_TXT_KEYS, nr as procedureAuthKey, oi as DEVICE_SETTINGS_CONTRIBUTION_METHODS, qi as emitDownForOwnedCaps, r as ALL_CAPABILITY_DEFINITIONS, si as DEVICE_STATUS_METHOD, t as AGENT_MDNS_SERVICE_TYPE, ti as errMsg$1, ua as parseJsonObject, v as CatalogFileSchema, vr as scopesAllowDeviceCap, wn as isArrayOutputSchema, wr as splitTranslationRef, xi as RUNTIME_DEFAULTS, ya as scopeKey } from "./dist-Dhux90yB.mjs";
+import { An as isVoidInput, Bn as logLevelAtMost, Ca as userError, Ci as ReadinessTimeoutError, Fi as asString$1, Gi as defineRecordKinds, Hi as createEvent$1, In as lifecycleJobSchema, J as METHOD_ACCESS_MAP, Ji as expandCapMethods, K as LOG_LEVEL_RANK, Ki as emitDownForOwnedCaps, Mr as supportedRuntimes, Ni as asJsonObject$1, Pi as asNumber, Si as ReadinessRegistry, Ta as EventCategory$1, Tn as isCollectionArrayMethod, Vn as looseSchema, Xn as objectInputDeclaresAddonId, Zn as objectInputDeclaresRequiredDeviceId, _r as scopesAllowAddon, ai as DATAPLANE_SECRET_HEADER$1, bn as interpolate, bt as addonSettingsCapability, d as CATALOG_LANGS, fa as readinessKey, ga as scopeKey, ii as CALLER_STAMPED_CAPABILITIES$1, jn as kebabToCamel$1, kn as isObjectInput, la as parseJsonObject, ma as resolveCapMount, mn as extractNestedAddonId, mr as resolveMethodAuth, n as AGENT_MDNS_TXT_KEYS, nr as procedureAuthKey, oi as DEVICE_SETTINGS_CONTRIBUTION_METHODS, r as ALL_CAPABILITY_DEFINITIONS, si as DEVICE_STATUS_METHOD, t as AGENT_MDNS_SERVICE_TYPE, ti as errMsg$1, ua as parseJsonUnknown, v as CatalogFileSchema, vr as scopesAllowDeviceCap, wa as withoutCallerStamp, wn as isArrayOutputSchema, wr as splitTranslationRef, xi as RUNTIME_DEFAULTS } from "./dist-Wy8cTxg6.mjs";
 import { t as require_read_all_rows } from "./read-all-rows-TaPqdWNF.mjs";
-import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-BB6nHAL5.mjs";
+import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-Bnkw8GyU.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
@@ -27,21 +27,22 @@ import { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index
 import NativeMetricsAddon, { a as NativeMetricsProvider, n as nodeProcReader, r as parseProcStat } from "./builtins/native-metrics/native-metrics.addon.mjs";
 import { DeviceHistoryAddon } from "./builtins/device-history/device-history.addon.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
-import { l as SqliteSettingsBackend } from "./wal-maintenance-BMiX6UIa.mjs";
+import { l as SqliteSettingsBackend } from "./wal-maintenance-NKbwWovZ.mjs";
 import { SqliteSettingsAddon } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
 import { StorageOrchestratorAddon, a as stripForwardedCaller, i as createHubCapForwardService, l as STORAGE_DRAIN_STATE_LEGACY, n as HUB_CAP_FWD_ACTION, o as buildStorageLocationRegistry, r as HUB_CAP_FWD_SERVICE, t as StorageOrchestratorService, u as storageOrchestratorRecordKinds } from "./builtins/storage-orchestrator/storage-orchestrator.addon.mjs";
 import "./builtins/storage-orchestrator/index.mjs";
-import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-cxKcZRMi.mjs";
-import { $ as generateMeshCa, A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, G as RENEWAL_ABANDONED, H as MESH_NODE_CERTIFICATES_COLLECTION, I as AGENT_HTTPS_NAMES_COLLECTION, J as setProcessMeshCertificateRegistry, K as describeMeshLeaf, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, Q as exportMeshPrivateKeyPem, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, U as MESH_NODE_CERTIFICATES_COLUMNS, W as MeshCertificateRegistry, X as caFingerprintCompact, Y as caFingerprint, Z as createMeshCsrPem, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, et as generateMeshKeyPair, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, it as loadMeshCa, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, nt as issueMeshLeafForNode, o as createAgentHttpsRequest, p as pemDigest, q as getProcessMeshCertificateRegistry, r as agentHttpsPaths, rt as issueMeshLeafFromCsr, s as describeHttpsLeaf, t as AgentHttpsInstallError, tt as isValidAgentNodeId, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-CK9Z4sSR.mjs";
-import { $ as parseCidrList, A as setProcessMeshPeerTransportLookup, B as requireProcessMeshCa, C as setProcessMeshTlsEnabler, D as getProcessPeerLeaf, E as getProcessNodeMeshTransport, F as setProcessMeshTlsListenerState, G as AGENT_UI_UNLOCK_VERSION, H as AGENT_UI_UNLOCK_TTL_MS, I as MeshCrl, J as mintAgentUiUnlockTicket, K as UnlockTicketJtiStore, L as processMeshCrl, M as revokeMeshCertificate, N as getProcessMeshTlsListenerState, O as isProcessVerifiedMeshPeer, P as openMeshTlsWhenRevocationsLoaded, Q as normalizeIp, R as MeshCaKeeper, S as ServiceBroker, SystemConfigAddon, T as emitProcessNodeRegistered, U as AGENT_UI_UNLOCK_TYP, V as AGENT_DASHBOARD_ORIGINS_FIELD, W as AGENT_UI_UNLOCK_USE, X as verifyAgentUiUnlockTicket, Y as parseAgentDashboardOrigins, Z as createCidrMatcher, _ as signPairingProof, a as hubHostFromMeshAddress, b as TlsTcpTransporter, c as PAIRING_MAX_SESSIONS, d as PAIRING_PROTOCOL, et as readCidrSetting, f as PAIRING_TTL_MS, g as keyFingerprintShort, h as describeCsr, i as AgentPairing, j as renewMeshCertificate, k as onProcessNodeRegistered, l as PAIRING_PATHS, m as computePairingSas, n as HubPairing, o as PAIRING_CODE_DIGITS, p as computePairingCommitment, q as isAllowedAgentDashboardReturnTo, r as PairingHttpError, s as PAIRING_MAX_CODE_ATTEMPTS, u as PAIRING_PIN_DIGITS, v as verifyPairingProof, w as dropProcessPeer, x as Errors, y as MESH_TLS_PORT_HELLO_FIELD, z as getProcessMeshCaState } from "./builtins/system-config/system-config.addon.mjs";
+import { A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, o as createAgentHttpsRequest, p as pemDigest, r as agentHttpsPaths, s as describeHttpsLeaf, t as AgentHttpsInstallError, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-Iw3RSQup.mjs";
+import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-BnkOdj9Q.mjs";
+import { $ as generateMeshKeyPair, A as setProcessMeshPeerTransportLookup, B as describeMeshLeaf, C as setProcessMeshTlsEnabler, D as getProcessPeerLeaf, E as getProcessNodeMeshTransport, F as setProcessMeshTlsListenerState, G as MeshCaKeeper, H as setProcessMeshCertificateRegistry, I as MESH_NODE_CERTIFICATES_COLLECTION, J as caFingerprint, K as getProcessMeshCaState, L as MESH_NODE_CERTIFICATES_COLUMNS, M as revokeMeshCertificate, N as getProcessMeshTlsListenerState, O as isProcessVerifiedMeshPeer, P as openMeshTlsWhenRevocationsLoaded, Q as generateMeshCa, R as MeshCertificateRegistry, S as ServiceBroker, SystemConfigAddon, T as emitProcessNodeRegistered, U as MeshCrl, V as getProcessMeshCertificateRegistry, W as processMeshCrl, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, _ as signPairingProof, _t as readCidrSetting, a as hubHostFromMeshAddress, at as AGENT_UI_UNLOCK_TTL_MS, b as TlsTcpTransporter, c as PAIRING_MAX_SESSIONS, ct as AGENT_UI_UNLOCK_VERSION, d as PAIRING_PROTOCOL, dt as mintAgentUiUnlockTicket, et as isValidAgentNodeId, f as PAIRING_TTL_MS, ft as parseAgentDashboardOrigins, g as keyFingerprintShort, gt as parseCidrList, h as describeCsr, ht as normalizeIp, i as AgentPairing, it as AGENT_DASHBOARD_ORIGINS_FIELD, j as renewMeshCertificate, k as onProcessNodeRegistered, l as PAIRING_PATHS, lt as UnlockTicketJtiStore, m as computePairingSas, mt as createCidrMatcher, n as HubPairing, nt as issueMeshLeafFromCsr, o as PAIRING_CODE_DIGITS, ot as AGENT_UI_UNLOCK_TYP, p as computePairingCommitment, pt as verifyAgentUiUnlockTicket, q as requireProcessMeshCa, r as PairingHttpError, rt as loadMeshCa, s as PAIRING_MAX_CODE_ATTEMPTS, st as AGENT_UI_UNLOCK_USE, tt as issueMeshLeafForNode, u as PAIRING_PIN_DIGITS, ut as isAllowedAgentDashboardReturnTo, v as verifyPairingProof, w as dropProcessPeer, x as Errors, y as MESH_TLS_PORT_HELLO_FIELD, z as RENEWAL_ABANDONED } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { C as isModelDownloaded, T as revisionWeightUrl, _ as downloadFile, a as startEventLoopStallMonitor, b as fetchJson, c as createAuthenticatedFileServer, d as resolveFilePath, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, u as parseTokenizedUrl, v as downloadModel, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-stpC3Zy-.mjs";
-import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-B8olZqqd.mjs";
+import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-CJu0nhla.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Di9daRwI.mjs";
-import { c as backupOrchestratorRecordKinds, f as BackupDecryptError, g as generateBackupKeyPair, l as backupRecordStoresOf, m as BackupKeyMismatchError, p as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, v as readBackupEncryptionHeader } from "./restore-archive-DyOaPeAr.mjs";
+import { _ as backupRecordStoresOf, c as BackupDecryptError, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-CmP-iiG9.mjs";
+import { n as nodeCoralFs, t as classifyCoralAccelerator } from "./coral-accelerators-DcnZvctM.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -5615,8 +5616,7 @@ var _integrationRegistryRecordKinds = defineRecordKinds({
 			name: "addon_id",
 			fields: ["addonId"]
 		}],
-		retention: { none: "deleteIntegration only" },
-		adoptsFrom: INTEGRATIONS_LEGACY
+		retention: { none: "deleteIntegration only" }
 	},
 	"integration-settings": {
 		schema: IntegrationSettingBodySchema,
@@ -5628,8 +5628,7 @@ var _integrationRegistryRecordKinds = defineRecordKinds({
 			name: "integration_id",
 			fields: ["integrationId"]
 		}],
-		retention: { none: "cascade on deleteIntegration" },
-		adoptsFrom: INTEGRATION_SETTINGS_LEGACY
+		retention: { none: "cascade on deleteIntegration" }
 	}
 });
 var integrationRegistryRecordKinds = _integrationRegistryRecordKinds;
@@ -6117,8 +6116,7 @@ var _clusterAgentRecordKinds = defineRecordKinds({ "node-history": {
 		name: "last_active",
 		fields: ["at"]
 	}],
-	retention: { none: "rows removed only by operator forget(nodeId)" },
-	adoptsFrom: CLUSTER_NODE_HISTORY_COLLECTION
+	retention: { none: "rows removed only by operator forget(nodeId)" }
 } });
 var clusterAgentRecordKinds = _clusterAgentRecordKinds;
 /** Narrow kind for `records.kind()` — `IsolatedRecordKinds` string index is `| undefined`. */
@@ -22310,30 +22308,6 @@ function safeExistsSync(path) {
 		return false;
 	}
 }
-/**
-* Detect a Coral USB Edge TPU: a matching USB device (`1a6e:089a` pre-init or
-* `18d1:9302` post-init) OR the installed libedgetpu delegate (the hub
-* provisions it out-of-band; its presence is a reliable "Coral is wired"
-* signal even where the container's `/sys` USB view is limited).
-*/
-function detectCoralUsb() {
-	const CORAL_IDS = [{
-		vendor: "1a6e",
-		product: "089a"
-	}, {
-		vendor: "18d1",
-		product: "9302"
-	}];
-	try {
-		for (const device of fs.readdirSync("/sys/bus/usb/devices")) try {
-			const base = `/sys/bus/usb/devices/${device}`;
-			const vendor = fs.readFileSync(`${base}/idVendor`, "utf8").trim().toLowerCase();
-			const product = fs.readFileSync(`${base}/idProduct`, "utf8").trim().toLowerCase();
-			if (CORAL_IDS.some((id) => id.vendor === vendor && id.product === product)) return true;
-		} catch {}
-	} catch {}
-	return safeExistsSync(process.env["CAMSTACK_EDGETPU_LIB"] ?? "/data/deps/edgetpu/lib/libedgetpu.so.1");
-}
 /** Probe Linux GPU vendors by parsing /proc/bus/pci/devices or /sys/class/drm. */
 function probeLinuxGpus() {
 	const signals = {
@@ -22342,7 +22316,7 @@ function probeLinuxGpus() {
 		hasIntelGpu: false,
 		hasRenderNode: false,
 		hasIntelNpu: safeExistsSync("/dev/accel/accel0"),
-		hasCoral: detectCoralUsb()
+		coral: classifyCoralAccelerator(nodeCoralFs)
 	};
 	signals.hasRenderNode = safeExistsSync("/dev/dri/renderD128");
 	if (safeExistsSync("/dev/nvidia0") || safeExistsSync("/proc/driver/nvidia/version")) signals.hasNvidiaGpu = true;
@@ -22376,7 +22350,7 @@ function probePlatform() {
 		hasIntelGpu: false,
 		hasRenderNode: false,
 		hasIntelNpu: false,
-		hasCoral: safeExistsSync(process.env["CAMSTACK_EDGETPU_LIB"] ?? "/data/deps/edgetpu/lib/libedgetpu.so.1")
+		coral: classifyCoralAccelerator(nodeCoralFs)
 	};
 }
 function pickBackendsForPlatform(signals) {
@@ -22467,7 +22441,7 @@ function mapSignalsToInferenceHardware(signals) {
 	return {
 		gpu: signals.hasNvidiaGpu ? { type: "nvidia" } : signals.hasAmdGpu ? { type: "amd" } : signals.hasIntelGpu ? { type: "intel" } : signals.hasRenderNode ? { type: "intel" } : null,
 		npu: signals.platform === "darwin" && signals.arch === "arm64" ? { type: "apple-ane" } : signals.hasIntelNpu ? { type: "intel-npu" } : null,
-		coral: signals.hasCoral ? { type: "coral-edgetpu" } : null
+		coral: signals.coral
 	};
 }
 /**
@@ -24814,7 +24788,7 @@ function localHardwareInfo() {
 			name: gpuType
 		} : null,
 		npu: npuType !== null ? { type: npuType } : null,
-		coral: inference.coral != null ? { type: "coral-edgetpu" } : null
+		coral: inference.coral ?? null
 	};
 }
 /** Runtime ids offered on this host (`onnx`, `openvino`, `coreml`, `edgetpu`). */

package/dist/kernel/hwaccel/hwaccel-resolver.d.ts

@@ -1,4 +1,4 @@
-import type { HwAccelBackend, HwAccelResolution } from "@camstack/types";
+import type { CoralInfo, HwAccelBackend, HwAccelResolution } from "@camstack/types";
 export interface PlatformSignals {
 	readonly platform: NodeJS.Platform;
 	readonly arch: string;
@@ -8,8 +8,12 @@ export interface PlatformSignals {
 	readonly hasRenderNode: boolean;
 	/** Intel NPU (Meteor Lake / Core Ultra "AI Boost") — exposed as /dev/accel/accel0. */
 	readonly hasIntelNpu: boolean;
-	/** Coral USB Edge TPU — a discrete USB accelerator (gates the `edgetpu` runtime). */
-	readonly hasCoral: boolean;
+	/**
+	* Coral Edge TPU hardware (USB and/or PCIe), whole — usable units and the
+	* present-but-unusable ones with their reason. `null` ⇒ no Coral found. The
+	* SAME classifier as the platform-probe builtin, so the two never disagree.
+	*/
+	readonly coral: CoralInfo | null;
 }
 export declare function probePlatform(): PlatformSignals;
 /**