@camstack/system 1.2.468 → 1.2.470

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-l6zKmHEb.js");
+const require_dist = require("../../dist-DRL3rEfN.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as BaseAddon, Bn as mayWriteToLocation, Cr as storageCapability, Gi as defineRecordKinds, Ir as withLocationMode, K as LegacyStorageLocationDefaultSchema, Mn as legacyModeOf, Ri as collectSecretConfigKeys, Sa as transformSecretWrite, Ta as EventCategory, Tn as isLocationEnabled, Un as modeMayWrite, _a as secretTreeFromPaths, _r as settingsStoreCapability, cn as evictionPolicyOfLocation, dt as StorageLocationTypeSchema, ft as StorageMigrationJobSchema, gi as REDACTED_SECRET, gn as gbToBytes, ha as resolveSecretMarkers, la as parseJsonObject, lt as StorageCleanupJobSchema, sa as normalizeNodeId, ta as isSecretMarker, ur as resolveLocationMode, ut as StorageLocationModeSchema, wr as storageMigrationCapability, zn as mayReadLocation } from "../../dist-BpUtAgqR.mjs";
+import { Bn as mayReadLocation, Da as EventCategory, En as isLocationEnabled, Ki as defineRecordKinds, Lr as withLocationMode, Nn as legacyModeOf, Tr as storageMigrationCapability, Vn as mayWriteToLocation, Wn as modeMayWrite, _a as resolveSecretMarkers, _i as REDACTED_SECRET, _n as gbToBytes, da as parseJsonObject, dr as resolveLocationMode, dt as StorageLocationModeSchema, ei as BaseAddon, ft as StorageLocationTypeSchema, la as normalizeNodeId, ln as evictionPolicyOfLocation, pt as StorageMigrationJobSchema, q as LegacyStorageLocationDefaultSchema, ra as isSecretMarker, ut as StorageCleanupJobSchema, vr as settingsStoreCapability, wa as transformSecretWrite, wr as storageCapability, ya as secretTreeFromPaths, zi as collectSecretConfigKeys } from "../../dist-X1r44BdF.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-l6zKmHEb.js");
+const require_dist = require("../../dist-DRL3rEfN.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_x509_es = require("../../x509.es-C4cOo48M.js");
-const require_agent_https = require("../../agent-https-DJ8OzQOr.js");
-const require_constants$8 = require("../../constants-CuO3rcw4.js");
+const require_agent_https = require("../../agent-https-D_oo3PNv.js");
+const require_constants$8 = require("../../constants-WF1AqoKF.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,9 +1,9 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { $r as BaseAddon, Qr as errMsg, Ui as customAction, Wi as defineCustomActions, Xi as hydrateSchema, st as ServerNameSchema, vr as shortHostname } from "../../dist-BpUtAgqR.mjs";
+import { $r as errMsg, Gi as defineCustomActions, Qi as hydrateSchema, Wi as customAction, ct as ServerNameSchema, ei as BaseAddon, yr as shortHostname } from "../../dist-X1r44BdF.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension } from "../../x509.es-DK__ETIe.mjs";
-import { B as setProcessAgentHttpsNames, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, R as AgentHttpsNames, V as systemConfigRecordKinds, u as isPrivateAddress, z as getProcessAgentHttpsNames } from "../../agent-https-DR1wmhYY.mjs";
-import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-BWli8Cju.mjs";
+import { B as setProcessAgentHttpsNames, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, R as AgentHttpsNames, V as systemConfigRecordKinds, u as isPrivateAddress, z as getProcessAgentHttpsNames } from "../../agent-https-DmNQyAl7.mjs";
+import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants--A505iuO.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, randomInt, sign, timingSafeEqual, verify, webcrypto } from "node:crypto";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-l6zKmHEb.js");
+const require_dist = require("../../dist-DRL3rEfN.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 const require_log_file_read_protocol = require("../../log-file-read-protocol-D0WcLbIV.js");
 let node_path = require("node:path");

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { $r as BaseAddon, In as logDestinationCapability } from "../../dist-BpUtAgqR.mjs";
+import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-X1r44BdF.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import { a as LogFileIndexStore, i as serveRead, n as isFromReader, t as CancelBook } from "../../log-file-read-protocol-B7M3X3bT.mjs";
 import { createRequire } from "node:module";

package/dist/{composition-sources-Qto-S6MA.mjs → composition-sources-B0tqvf0t.mjs}

@@ -1,4 +1,4 @@
-import { Gr as compositionSourceKey, Qr as errMsg } from "./dist-BpUtAgqR.mjs";
+import { $r as errMsg, Kr as compositionSourceKey } from "./dist-X1r44BdF.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-5rpWQhA1.js → composition-sources-CRJffEiB.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-l6zKmHEb.js");
+const require_dist = require("./dist-DRL3rEfN.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-BWli8Cju.mjs → constants--A505iuO.mjs}

@@ -1,4 +1,4 @@
-import { Li as buildSecretRef } from "./dist-BpUtAgqR.mjs";
+import { Ri as buildSecretRef } from "./dist-X1r44BdF.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{constants-CuO3rcw4.js → constants-WF1AqoKF.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-l6zKmHEb.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-DRL3rEfN.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{coral-accelerators-oUXmmbc2.js → coral-accelerators-Cri32b7q.js}

@@ -29,9 +29,9 @@ function currentDelegateHost() {
 		override: process.env[_camstack_types_node.EDGETPU_LIB_ENV]
 	};
 }
-function countUsbCorals(fsx) {
+function countUsbCorals(devices, fsx) {
 	let count = 0;
-	for (const device of fsx.listUsbDevices()) {
+	for (const device of devices) {
 		const vendor = fsx.readUsbAttr(device, "idVendor").toLowerCase();
 		const product = fsx.readUsbAttr(device, "idProduct").toLowerCase();
 		if (CORAL_USB_IDS.some((id) => id.vendor === vendor && id.product === product)) count++;
@@ -70,21 +70,33 @@ function classifyPci(fsx) {
 	};
 }
 /**
-* Detect Coral Edge TPUs on USB and PCIe/M.2.
+* Detect Coral Edge TPUs on USB and PCIe/M.2 — the answer only. See
+* {@link detectCoralAccelerator} for the evidence that decided it.
+*/
+function classifyCoralAccelerator(fsx, delegateHost = currentDelegateHost()) {
+	return detectCoralAccelerator(fsx, delegateHost).info;
+}
+/**
+* Detect Coral Edge TPUs on USB and PCIe/M.2, with the evidence that decided.
 *
 * - USB: every matching USB device counts (multiple Corals run concurrently).
 * - PCIe: the apex driver's units, each usable only if its device node opens;
 *   a Coral PCI function the driver did not bind is `driver-missing`.
-* - Fallback: when NO Coral signal of either bus is visible but the libedgetpu
-*   delegate is installed (a container whose `/sys` USB view is limited), one
-*   USB Coral is assumed — never when a PCI Coral was seen, since the delegate
-*   then says nothing about USB.
+* - Fallback: when the USB bus is NOT OBSERVABLE (`/sys/bus/usb/devices`
+*   missing, unreadable or empty — a macOS desktop, a restricted container)
+*   and no PCI Coral was seen, an installed libedgetpu delegate means one USB
+*   Coral is assumed. A bus that IS readable and lists no Coral id is the
+*   answer: no USB Coral. The delegate stays installed after a stick is
+*   unplugged or moved to another node, so it is evidence only where nothing
+*   better exists (D919).
 *
 * Returns `null` only when no Coral was found at all; a present-but-unusable
 * Coral is reported with its typed reason, never as absent (D393/D315).
 */
-function classifyCoralAccelerator(fsx, delegateHost = currentDelegateHost()) {
-	const usb = countUsbCorals(fsx);
+function detectCoralAccelerator(fsx, delegateHost = currentDelegateHost()) {
+	const usbDevices = fsx.listUsbDevices();
+	const usbBus = usbDevices !== null && usbDevices.length > 0 ? "observed" : "unobservable";
+	const usb = usbDevices === null ? 0 : countUsbCorals(usbDevices, fsx);
 	const pci = classifyPci(fsx);
 	const units = [];
 	if (usb > 0) units.push({
@@ -106,25 +118,44 @@ function classifyCoralAccelerator(fsx, delegateHost = currentDelegateHost()) {
 		count: pci.notAccessible,
 		reason: "device-not-accessible"
 	});
-	if (units.length > 0 || unavailable.length > 0) return unavailable.length > 0 ? {
-		type: "coral-edgetpu",
-		units,
-		unavailable
-	} : {
-		type: "coral-edgetpu",
-		units
+	if (units.length > 0 || unavailable.length > 0) return {
+		info: unavailable.length > 0 ? {
+			type: "coral-edgetpu",
+			units,
+			unavailable
+		} : {
+			type: "coral-edgetpu",
+			units
+		},
+		usbBus,
+		decidedBy: usb > 0 ? "usb-ids" : "pci"
 	};
-	if ((0, _camstack_types_node.chooseEdgetpuDelegate)({
+	if (usbBus === "unobservable" && (0, _camstack_types_node.chooseEdgetpuDelegate)({
 		...delegateHost,
 		exists: (p) => fsx.exists(p)
 	}) !== null) return {
-		type: "coral-edgetpu",
-		units: [{
-			bus: "usb",
-			count: 1
-		}]
+		info: {
+			type: "coral-edgetpu",
+			units: [{
+				bus: "usb",
+				count: 1
+			}]
+		},
+		usbBus,
+		decidedBy: "delegate-fallback"
+	};
+	return {
+		info: null,
+		usbBus,
+		decidedBy: "none"
 	};
-	return null;
+}
+function safeListOrNull(dir) {
+	try {
+		return node_fs.default.readdirSync(dir);
+	} catch {
+		return null;
+	}
 }
 function safeList(dir) {
 	try {
@@ -142,7 +173,7 @@ function safeRead(path) {
 }
 /** The real filesystem view: `/sys` for enumeration, `/dev` for access. */
 var nodeCoralFs = {
-	listUsbDevices: () => safeList("/sys/bus/usb/devices"),
+	listUsbDevices: () => safeListOrNull("/sys/bus/usb/devices"),
 	readUsbAttr: (device, attr) => safeRead(`/sys/bus/usb/devices/${device}/${attr}`),
 	listPciDevices: () => safeList("/sys/bus/pci/devices"),
 	readPciAttr: (device, attr) => safeRead(`/sys/bus/pci/devices/${device}/${attr}`),
@@ -170,6 +201,12 @@ Object.defineProperty(exports, "classifyCoralAccelerator", {
 		return classifyCoralAccelerator;
 	}
 });
+Object.defineProperty(exports, "detectCoralAccelerator", {
+	enumerable: true,
+	get: function() {
+		return detectCoralAccelerator;
+	}
+});
 Object.defineProperty(exports, "nodeCoralFs", {
 	enumerable: true,
 	get: function() {

package/dist/{coral-accelerators-D_S1Fo5h.mjs → coral-accelerators-Dl-GnMHn.mjs}

@@ -27,9 +27,9 @@ function currentDelegateHost() {
 		override: process.env[EDGETPU_LIB_ENV]
 	};
 }
-function countUsbCorals(fsx) {
+function countUsbCorals(devices, fsx) {
 	let count = 0;
-	for (const device of fsx.listUsbDevices()) {
+	for (const device of devices) {
 		const vendor = fsx.readUsbAttr(device, "idVendor").toLowerCase();
 		const product = fsx.readUsbAttr(device, "idProduct").toLowerCase();
 		if (CORAL_USB_IDS.some((id) => id.vendor === vendor && id.product === product)) count++;
@@ -68,21 +68,33 @@ function classifyPci(fsx) {
 	};
 }
 /**
-* Detect Coral Edge TPUs on USB and PCIe/M.2.
+* Detect Coral Edge TPUs on USB and PCIe/M.2 — the answer only. See
+* {@link detectCoralAccelerator} for the evidence that decided it.
+*/
+function classifyCoralAccelerator(fsx, delegateHost = currentDelegateHost()) {
+	return detectCoralAccelerator(fsx, delegateHost).info;
+}
+/**
+* Detect Coral Edge TPUs on USB and PCIe/M.2, with the evidence that decided.
 *
 * - USB: every matching USB device counts (multiple Corals run concurrently).
 * - PCIe: the apex driver's units, each usable only if its device node opens;
 *   a Coral PCI function the driver did not bind is `driver-missing`.
-* - Fallback: when NO Coral signal of either bus is visible but the libedgetpu
-*   delegate is installed (a container whose `/sys` USB view is limited), one
-*   USB Coral is assumed — never when a PCI Coral was seen, since the delegate
-*   then says nothing about USB.
+* - Fallback: when the USB bus is NOT OBSERVABLE (`/sys/bus/usb/devices`
+*   missing, unreadable or empty — a macOS desktop, a restricted container)
+*   and no PCI Coral was seen, an installed libedgetpu delegate means one USB
+*   Coral is assumed. A bus that IS readable and lists no Coral id is the
+*   answer: no USB Coral. The delegate stays installed after a stick is
+*   unplugged or moved to another node, so it is evidence only where nothing
+*   better exists (D919).
 *
 * Returns `null` only when no Coral was found at all; a present-but-unusable
 * Coral is reported with its typed reason, never as absent (D393/D315).
 */
-function classifyCoralAccelerator(fsx, delegateHost = currentDelegateHost()) {
-	const usb = countUsbCorals(fsx);
+function detectCoralAccelerator(fsx, delegateHost = currentDelegateHost()) {
+	const usbDevices = fsx.listUsbDevices();
+	const usbBus = usbDevices !== null && usbDevices.length > 0 ? "observed" : "unobservable";
+	const usb = usbDevices === null ? 0 : countUsbCorals(usbDevices, fsx);
 	const pci = classifyPci(fsx);
 	const units = [];
 	if (usb > 0) units.push({
@@ -104,25 +116,44 @@ function classifyCoralAccelerator(fsx, delegateHost = currentDelegateHost()) {
 		count: pci.notAccessible,
 		reason: "device-not-accessible"
 	});
-	if (units.length > 0 || unavailable.length > 0) return unavailable.length > 0 ? {
-		type: "coral-edgetpu",
-		units,
-		unavailable
-	} : {
-		type: "coral-edgetpu",
-		units
+	if (units.length > 0 || unavailable.length > 0) return {
+		info: unavailable.length > 0 ? {
+			type: "coral-edgetpu",
+			units,
+			unavailable
+		} : {
+			type: "coral-edgetpu",
+			units
+		},
+		usbBus,
+		decidedBy: usb > 0 ? "usb-ids" : "pci"
 	};
-	if (chooseEdgetpuDelegate({
+	if (usbBus === "unobservable" && chooseEdgetpuDelegate({
 		...delegateHost,
 		exists: (p) => fsx.exists(p)
 	}) !== null) return {
-		type: "coral-edgetpu",
-		units: [{
-			bus: "usb",
-			count: 1
-		}]
+		info: {
+			type: "coral-edgetpu",
+			units: [{
+				bus: "usb",
+				count: 1
+			}]
+		},
+		usbBus,
+		decidedBy: "delegate-fallback"
+	};
+	return {
+		info: null,
+		usbBus,
+		decidedBy: "none"
 	};
-	return null;
+}
+function safeListOrNull(dir) {
+	try {
+		return Kt.readdirSync(dir);
+	} catch {
+		return null;
+	}
 }
 function safeList(dir) {
 	try {
@@ -140,7 +171,7 @@ function safeRead(path) {
 }
 /** The real filesystem view: `/sys` for enumeration, `/dev` for access. */
 var nodeCoralFs = {
-	listUsbDevices: () => safeList("/sys/bus/usb/devices"),
+	listUsbDevices: () => safeListOrNull("/sys/bus/usb/devices"),
 	readUsbAttr: (device, attr) => safeRead(`/sys/bus/usb/devices/${device}/${attr}`),
 	listPciDevices: () => safeList("/sys/bus/pci/devices"),
 	readPciAttr: (device, attr) => safeRead(`/sys/bus/pci/devices/${device}/${attr}`),
@@ -162,4 +193,4 @@ var nodeCoralFs = {
 	}
 };
 //#endregion
-export { nodeCoralFs as n, classifyCoralAccelerator as t };
+export { detectCoralAccelerator as n, nodeCoralFs as r, classifyCoralAccelerator as t };

package/dist/{device-ca-C5cLlah1.mjs → device-ca-DYmToMp8.mjs}

@@ -1,4 +1,4 @@
-import { A as DEVICE_SAN_USER_PREFIX, Li as buildSecretRef, k as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-BpUtAgqR.mjs";
+import { A as DEVICE_SAN_USER_PREFIX, Ri as buildSecretRef, k as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-X1r44BdF.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-DK__ETIe.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-CGcaSheI.js → device-ca-R4MZZtc0.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-l6zKmHEb.js");
+const require_dist = require("./dist-DRL3rEfN.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts