@camstack/system 1.2.469 → 1.2.471

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_composition_sources = require("../../composition-sources-BGXTiUZm.js");
+const require_composition_sources = require("../../composition-sources-B5uJZXZ1.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");
 let zod = require("zod");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,6 +1,6 @@
-import { $r as errMsg, Bt as coreBlockComposition, Ht as coreBlockSourceKind, Ki as defineRecordKinds, Kn as normalizeCoreBlockWrite, Kr as compositionSourceKey, Mr as validateComposition, N as DeclaredDevices, Ot as buildCapabilityLookup, Qi as hydrateSchema, Qn as planComposition, Rt as compositionSourceRefs, Ut as coreBlocksCapability, Vi as collectSecretMarkerRefs, Vr as composedDeviceRef, Vt as coreBlockIdFromAddonId, Zt as describeComposableCaps, _a as resolveSecretMarkers, aa as isSecretRefOwnedBy, ar as replacedFieldKeys, ba as secretTreeFromSchema, cr as resolveCoreBlockEntry, ei as BaseAddon, f as COMPOSER_RUNNER_ID, lr as resolveCoreBlockFiles, m as CORE_BLOCK_ADDON_PREFIX, p as CORE_BLOCKS_ADDON_ID, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretMarker, v as CoreBlockSchema, wa as transformSecretWrite, zt as coreBlockAddonId } from "../../dist-CtVVtyTX.mjs";
+import { $r as errMsg, Bt as coreBlockComposition, Ht as coreBlockSourceKind, Ki as defineRecordKinds, Kn as normalizeCoreBlockWrite, Kr as compositionSourceKey, Mr as validateComposition, N as DeclaredDevices, Ot as buildCapabilityLookup, Qi as hydrateSchema, Qn as planComposition, Rt as compositionSourceRefs, Ut as coreBlocksCapability, Vi as collectSecretMarkerRefs, Vr as composedDeviceRef, Vt as coreBlockIdFromAddonId, Zt as describeComposableCaps, _a as resolveSecretMarkers, aa as isSecretRefOwnedBy, ar as replacedFieldKeys, ba as secretTreeFromSchema, cr as resolveCoreBlockEntry, ei as BaseAddon, f as COMPOSER_RUNNER_ID, lr as resolveCoreBlockFiles, m as CORE_BLOCK_ADDON_PREFIX, p as CORE_BLOCKS_ADDON_ID, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretMarker, v as CoreBlockSchema, wa as transformSecretWrite, zt as coreBlockAddonId } from "../../dist-5XUG7iYJ.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-DTdzzyf0.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-DRw_vBKH.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { n as unwrapStoredValue, t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";
 import { createRequire } from "node:module";

package/dist/builtins/device-history/device-history.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
 //#region src/builtins/device-history/time/bucket-time.ts
 /**
 * Bucket arithmetic for the three rollup tiers (D850, plan §4/§5.5).

package/dist/builtins/device-history/device-history.addon.mjs

@@ -1,4 +1,4 @@
-import { B as HISTORY_ITEM_CATALOG, Ct as armRemovalReconcile, D as DEVICE_HISTORY_ENERGY_KEY, Da as EventCategory, Ji as emitReadiness, Qr as DeviceType, Zi as historyItemFieldPath, ei as BaseAddon, en as deviceHistoryCapability, li as HISTORY_DEFAULT_MIN_INTERVAL_MS, nn as deviceRemovalHookCapability, z as HISTORY_CATALOG } from "../../dist-CtVVtyTX.mjs";
+import { B as HISTORY_ITEM_CATALOG, Ct as armRemovalReconcile, D as DEVICE_HISTORY_ENERGY_KEY, Da as EventCategory, Ji as emitReadiness, Qr as DeviceType, Zi as historyItemFieldPath, ei as BaseAddon, en as deviceHistoryCapability, li as HISTORY_DEFAULT_MIN_INTERVAL_MS, nn as deviceRemovalHookCapability, z as HISTORY_CATALOG } from "../../dist-5XUG7iYJ.mjs";
 //#region src/builtins/device-history/time/bucket-time.ts
 /**
 * Bucket arithmetic for the three rollup tiers (D850, plan §4/§5.5).

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { $i as isDeviceConfigCap, $r as errMsg, $t as deviceExtensionCapability, Ca as toSecretFieldView, Da as EventCategory, Di as SECRET_CLEAR, F as DeviceTombstoneSchema, Hi as collectZodSecretPaths, In as locationIconKey, Ki as defineRecordKinds, L as FieldClaimModeSchema, Mi as WELL_KNOWN_TAB_MAP, Mn as legacyAutoLinkIds, P as DeviceStatusSchema, Pt as canonicalIconKey, Qr as DeviceType, R as FieldClaimSchema, Ta as userError, Wt as createDeviceExtensionProvider, Xn as parseStreamParamsFormPatch, Xr as DeviceFeature, Y as MINUTES_PER_DAY, Yt as defineExtensionSlotProvider, Zr as DeviceRole, _a as resolveSecretMarkers, br as siteZoneKey, ei as BaseAddon, gn as formatMinutes, ia as isSecretMarkerLike, in as deviceStatusCapability, jt as buildStreamParamsConfigSchema, l as CAP_NAMES_WITH_STATUS, mr as runtimeStatePolicyFor, na as isSecretClear, on as enumerateItemArrayFields, ot as STREAM_PROFILE_META, qn as normalizeUnit, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretMarker, rn as deviceStateCapability, s as CAMERA_SWITCH_ORDER, sn as enumerateSchemaFields, ta as isKeychainStoredField, tn as deviceManagerCapability, un as expandContainer, w as DAY_NAMES, wa as transformSecretWrite, xa as sleep$1, ya as secretTreeFromPaths } from "../../dist-CtVVtyTX.mjs";
+import { $i as isDeviceConfigCap, $r as errMsg, $t as deviceExtensionCapability, Ca as toSecretFieldView, Da as EventCategory, Di as SECRET_CLEAR, F as DeviceTombstoneSchema, Hi as collectZodSecretPaths, In as locationIconKey, Ki as defineRecordKinds, L as FieldClaimModeSchema, Mi as WELL_KNOWN_TAB_MAP, Mn as legacyAutoLinkIds, P as DeviceStatusSchema, Pt as canonicalIconKey, Qr as DeviceType, R as FieldClaimSchema, Ta as userError, Wt as createDeviceExtensionProvider, Xn as parseStreamParamsFormPatch, Xr as DeviceFeature, Y as MINUTES_PER_DAY, Yt as defineExtensionSlotProvider, Zr as DeviceRole, _a as resolveSecretMarkers, br as siteZoneKey, ei as BaseAddon, gn as formatMinutes, ia as isSecretMarkerLike, in as deviceStatusCapability, jt as buildStreamParamsConfigSchema, l as CAP_NAMES_WITH_STATUS, mr as runtimeStatePolicyFor, na as isSecretClear, on as enumerateItemArrayFields, ot as STREAM_PROFILE_META, qn as normalizeUnit, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretMarker, rn as deviceStateCapability, s as CAMERA_SWITCH_ORDER, sn as enumerateSchemaFields, ta as isKeychainStoredField, tn as deviceManagerCapability, un as expandContainer, w as DAY_NAMES, wa as transformSecretWrite, xa as sleep$1, ya as secretTreeFromPaths } from "../../dist-5XUG7iYJ.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-CtVVtyTX.mjs";
+import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-5XUG7iYJ.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
-const require_device_ca = require("../../device-ca-CC58lmNV.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
+const require_device_ca = require("../../device-ca-nOCYVFS4.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_constants = require("../../constants-2mPqJjkR.js");
+const require_constants = require("../../constants-CToE4OFp.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,7 +1,7 @@
-import { An as keychainAdminCapability, Da as EventCategory, G as KeychainResetRecordSchema, Ki as defineRecordKinds, U as KEYCHAIN_RESET_TRIGGER_ACTOR, W as KeychainAuditEntrySchema, Xi as formatSecretScope, ei as BaseAddon, jn as keychainCapability, pa as parseSecretRef, ua as normalizeSecretOwner } from "../../dist-CtVVtyTX.mjs";
-import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-CFdyrqeJ.mjs";
+import { An as keychainAdminCapability, Da as EventCategory, G as KeychainResetRecordSchema, Ki as defineRecordKinds, U as KEYCHAIN_RESET_TRIGGER_ACTOR, W as KeychainAuditEntrySchema, Xi as formatSecretScope, ei as BaseAddon, jn as keychainCapability, pa as parseSecretRef, ua as normalizeSecretOwner } from "../../dist-5XUG7iYJ.mjs";
+import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-URrs1lxK.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { a as MESH_CA_KEY_REF } from "../../constants-md_POijo.mjs";
+import { a as MESH_CA_KEY_REF } from "../../constants-5lA8Z9d8.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as errMsg, Da as EventCategory, Ui as createEvent, ei as BaseAddon, it as RecordingStatusSchema, nt as RECORDING_SOURCE_CAMSTACK_ADDON } from "../../dist-CtVVtyTX.mjs";
+import { $r as errMsg, Da as EventCategory, Ui as createEvent, ei as BaseAddon, it as RecordingStatusSchema, nt as RECORDING_SOURCE_CAMSTACK_ADDON } from "../../dist-5XUG7iYJ.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_device_ca = require("../../device-ca-CC58lmNV.js");
+const require_device_ca = require("../../device-ca-nOCYVFS4.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,15 +1,15 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { $ as PreferenceDeviceIdSchema, At as buildDeviceSignatureMessage, E as DEVICE_ENROLLMENT_TTL_MS, Ki as defineRecordKinds, O as DEVICE_NONCE_TTL_MS, Q as PREFERENCES_MAX_VALUE_BYTES, Qt as deviceCredentialsCapability, Ta as userError, ei as BaseAddon, et as PreferenceNamespaceSchema, gt as UserRecordSchema, h as CREDENTIAL_TOKEN_AUDIENCE, hn as formatDeviceRevoker, jr as userManagementCapability, kt as buildDeviceEnrollmentLink, lt as SsoBridgeClaimsSchema, mt as TokenScopeSchema, oa as makeSecretMarker, ra as isSecretMarker, st as ScopedTokenSchema, tt as PreferenceValueSchema, wn as isCredentialTokenPayload, wt as authProviderCapability, y as CredentialTokenClaimsSchema } from "../../dist-CtVVtyTX.mjs";
+import { $ as PreferenceDeviceIdSchema, At as buildDeviceSignatureMessage, E as DEVICE_ENROLLMENT_TTL_MS, Ki as defineRecordKinds, O as DEVICE_NONCE_TTL_MS, Q as PREFERENCES_MAX_VALUE_BYTES, Qt as deviceCredentialsCapability, Ta as userError, ei as BaseAddon, et as PreferenceNamespaceSchema, gt as UserRecordSchema, h as CREDENTIAL_TOKEN_AUDIENCE, hn as formatDeviceRevoker, jr as userManagementCapability, kt as buildDeviceEnrollmentLink, lt as SsoBridgeClaimsSchema, mt as TokenScopeSchema, oa as makeSecretMarker, ra as isSecretMarker, st as ScopedTokenSchema, tt as PreferenceValueSchema, wn as isCredentialTokenPayload, wt as authProviderCapability, y as CredentialTokenClaimsSchema } from "../../dist-5XUG7iYJ.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-CFdyrqeJ.mjs";
+import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-URrs1lxK.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";
 import * as path$1 from "node:path";
-import * as fs$1 from "node:fs";
+import * as fs from "node:fs";
 //#region ../../node_modules/bcryptjs/index.js
 /**
 * The random implementation to use as a fallback.
@@ -12064,8 +12064,8 @@ var LocalAuthAddon = class extends BaseAddon {
 					users: this.userManager,
 					dataDir: this.ctx.nodeDataDir,
 					fs: {
-						exists: (filePath) => fs$1.existsSync(filePath),
-						remove: (filePath) => fs$1.rmSync(filePath, { force: true })
+						exists: (filePath) => fs.existsSync(filePath),
+						remove: (filePath) => fs.rmSync(filePath, { force: true })
 					},
 					logger: this.ctx.logger
 				});

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
-const require_hub_mdns_ciao = require("../../hub-mdns-ciao-BLsX_2cL.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
+const require_hub_mdns_ciao = require("../../hub-mdns-ciao-vEWhJ_SD.js");
 let zod = require("zod");
 let node_net = require("node:net");
 let node_os = require("node:os");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
-import { $r as errMsg, Da as EventCategory, Fn as localNetworkCapability, Ft as checkRoleAddress, H as HUB_MDNS_TXT_KEYS, Nr as validateCustomAddress, Tn as isDefaultAppConnectionEndpoint, V as HUB_MDNS_SERVICE_TYPE, Z as NetworkTunnelStartedDataSchema, Zn as pickAppLinkHub, c as CAMSTACK_APP_LINK_ORIGIN, ei as BaseAddon, or as resolveAppConnections, pr as resolveNotificationTapAddress, ur as resolveHubAddressRoles, xn as isAppLinkBase, yr as shortHostname } from "../../dist-CtVVtyTX.mjs";
-import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-CmuWLPci.mjs";
+import { $r as errMsg, Da as EventCategory, Fn as localNetworkCapability, Ft as checkRoleAddress, H as HUB_MDNS_TXT_KEYS, Nr as validateCustomAddress, Tn as isDefaultAppConnectionEndpoint, V as HUB_MDNS_SERVICE_TYPE, Z as NetworkTunnelStartedDataSchema, Zn as pickAppLinkHub, c as CAMSTACK_APP_LINK_ORIGIN, ei as BaseAddon, or as resolveAppConnections, pr as resolveNotificationTapAddress, ur as resolveHubAddressRoles, xn as isAppLinkBase, yr as shortHostname } from "../../dist-5XUG7iYJ.mjs";
+import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-zD3JojB_.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
 import * as os$1 from "node:os";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
 const require_log_read_filter = require("../../log-read-filter-Bi066jwU.js");
 let zod = require("zod");
 //#region src/builtins/loki-logging/loki-payload.ts

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-CtVVtyTX.mjs";
+import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-5XUG7iYJ.mjs";
 import { n as compileLogFilter, o as lineMatches } from "../../log-read-filter-D7Ev3zm-.mjs";
 import { z } from "zod";
 //#region src/builtins/loki-logging/loki-payload.ts

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DuBtzSCh.js");
+const require_dist = require("../../dist-BjcWEfRy.js");
 let node_fs_promises = require("node:fs/promises");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,9 +1,9 @@
-import { $r as errMsg, Da as EventCategory, Ui as createEvent, Un as metricsProviderCapability, ei as BaseAddon, ht as UNATTRIBUTED_BUCKET_KEY, ir as reducePoints, mn as foldSnapshotByFunction, rt as ROOT_BUCKET_KEY, sr as resolveBucketMs } from "../../dist-CtVVtyTX.mjs";
+import { $r as errMsg, Da as EventCategory, Ui as createEvent, Un as metricsProviderCapability, ei as BaseAddon, ht as UNATTRIBUTED_BUCKET_KEY, ir as reducePoints, mn as foldSnapshotByFunction, rt as ROOT_BUCKET_KEY, sr as resolveBucketMs } from "../../dist-5XUG7iYJ.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";
 import { platform } from "node:os";
-import * as fs$1 from "node:fs";
+import * as fs from "node:fs";
 import { constants, readFileSync } from "node:fs";
 import { execFile, execFileSync } from "node:child_process";
 //#region src/builtins/native-metrics/cgroup-memory.ts
@@ -1642,7 +1642,7 @@ var NativeMetricsProvider = class {
 		let swapUsedBytes = 0;
 		let swapTotalBytes = 0;
 		if (IS_LINUX) try {
-			const meminfo = fs$1.readFileSync("/proc/meminfo", "utf-8");
+			const meminfo = fs.readFileSync("/proc/meminfo", "utf-8");
 			const swapTotal = parseInt(meminfo.match(/SwapTotal:\s+(\d+)/)?.[1] ?? "0", 10) * 1024;
 			const swapFree = parseInt(meminfo.match(/SwapFree:\s+(\d+)/)?.[1] ?? "0", 10) * 1024;
 			swapTotalBytes = swapTotal;
@@ -1720,7 +1720,7 @@ function sampleMacMemory(provider) {
 }
 function getDiskSpaceInternal(dirPath) {
 	return new Promise((resolve, reject) => {
-		fs$1.statfs(dirPath, (err, stats) => {
+		fs.statfs(dirPath, (err, stats) => {
 			if (err) return reject(err);
 			const totalBytes = stats.blocks * stats.bsize;
 			const availableBytes = stats.bavail * stats.bsize;
@@ -1738,7 +1738,7 @@ function getDiskSpaceInternal(dirPath) {
 async function takeDiskIoSnapshot() {
 	const now = Date.now();
 	if (IS_LINUX) try {
-		const data = fs$1.readFileSync("/proc/diskstats", "utf-8");
+		const data = fs.readFileSync("/proc/diskstats", "utf-8");
 		let readOps = 0, readBytes = 0, writeOps = 0, writeBytes = 0;
 		for (const line of data.split("\n")) {
 			const parts = line.trim().split(/\s+/);
@@ -1769,7 +1769,7 @@ async function takeDiskIoSnapshot() {
 async function takeNetworkIoSnapshot() {
 	const now = Date.now();
 	if (IS_LINUX) try {
-		const data = fs$1.readFileSync("/proc/net/dev", "utf-8");
+		const data = fs.readFileSync("/proc/net/dev", "utf-8");
 		let rxBytes = 0, txBytes = 0, rxPackets = 0, txPackets = 0, rxErrors = 0, txErrors = 0;
 		for (const line of data.split("\n")) {
 			const match = line.match(/^\s*(\w+):\s+(.+)$/);
@@ -1830,7 +1830,7 @@ async function takeNetworkIoSnapshot() {
 }
 async function getCpuTemperatureInternal() {
 	if (IS_LINUX) for (const p of ["/sys/class/thermal/thermal_zone0/temp", "/sys/class/hwmon/hwmon0/temp1_input"]) try {
-		const raw = fs$1.readFileSync(p, "utf-8").trim();
+		const raw = fs.readFileSync(p, "utf-8").trim();
 		const millideg = parseInt(raw, 10);
 		if (!isNaN(millideg)) return Math.round(millideg / 100) / 10;
 	} catch {
@@ -1881,10 +1881,10 @@ function getProcessResources() {
 	let threadCount = 0;
 	if (IS_LINUX) {
 		try {
-			openFds = fs$1.readdirSync(`/proc/${process.pid}/fd`).length;
+			openFds = fs.readdirSync(`/proc/${process.pid}/fd`).length;
 		} catch {}
 		try {
-			const match = fs$1.readFileSync(`/proc/${process.pid}/status`, "utf-8").match(/Threads:\s+(\d+)/);
+			const match = fs.readFileSync(`/proc/${process.pid}/status`, "utf-8").match(/Threads:\s+(\d+)/);
 			if (match) threadCount = parseInt(match[1], 10);
 		} catch {}
 	}
@@ -1899,7 +1899,7 @@ function getProcessResources() {
 function getPressure(resource) {
 	if (!IS_LINUX) return null;
 	try {
-		const data = fs$1.readFileSync(`/proc/pressure/${resource}`, "utf-8");
+		const data = fs.readFileSync(`/proc/pressure/${resource}`, "utf-8");
 		const parseLine = (prefix) => {
 			const match = data.match(new RegExp(`${prefix} avg10=(\\d+\\.\\d+) avg60=(\\d+\\.\\d+) avg300=(\\d+\\.\\d+)`));
 			if (!match) return null;

package/dist/builtins/platform-probe/accelerator-reprobe.d.ts

@@ -0,0 +1,23 @@
+import type { CoralInfo, InferenceDeviceDescriptor, PlatformCapabilities } from "@camstack/types";
+import type { CoralDetection } from "./coral-accelerators.js";
+/** Device keys that appeared and disappeared between two probes, sorted. */
+export interface InferenceDeviceSetChange {
+	readonly appeared: readonly string[];
+	readonly disappeared: readonly string[];
+}
+/** The result of one accelerator re-probe. */
+export interface AcceleratorReprobe {
+	readonly caps: PlatformCapabilities;
+	readonly change: InferenceDeviceSetChange;
+	readonly detection: CoralDetection;
+}
+/** A stable signature of a Coral answer — what decides "did it change". */
+export declare function coralSignature(coral: CoralInfo | null | undefined): string;
+/** Which device keys a new probe added and removed. */
+export declare function diffInferenceDevices(previous: readonly InferenceDeviceDescriptor[], next: readonly InferenceDeviceDescriptor[]): InferenceDeviceSetChange;
+/**
+* The capabilities with a new Coral answer: hardware, scores and the device
+* enumeration are all derived again from it, so the edgetpu runtime and its
+* devices follow the hardware rather than the boot-time snapshot.
+*/
+export declare function withCoral(caps: PlatformCapabilities, coral: CoralInfo | null): PlatformCapabilities;

package/dist/builtins/platform-probe/coral-accelerators.d.ts

@@ -6,9 +6,13 @@ import { type EdgetpuDelegateLookup } from "@camstack/types/node";
 * stays a pure, unit-testable function over injected reads.
 */
 export interface CoralFs {
-	/** USB device directory names under `/sys/bus/usb/devices` (e.g. `2-4`). */
-	listUsbDevices(): readonly string[];
-	/** Read a `<sysfsNode>/<attr>` value (idVendor / idProduct), trimmed. */
+	/**
+	* USB device directory names under `/sys/bus/usb/devices` (e.g. `2-4`), or
+	* `null` when the bus cannot be read at all (no `/sys`, a restricted view).
+	* `null` and an empty listing both mean "the bus is not observable".
+	*/
+	listUsbDevices(): readonly string[] | null;
+	/** Read a `<sysfsNode>/<attr>` value (idVendor / idProduct / busnum / devnum), trimmed. */
 	readUsbAttr(device: string, attr: string): string;
 	/** PCI function names under `/sys/bus/pci/devices` (e.g. `0000:03:00.0`). */
 	listPciDevices(): readonly string[];
@@ -16,7 +20,7 @@ export interface CoralFs {
 	readPciAttr(device: string, attr: string): string;
 	/** Entry names under `/sys/class/apex` (the gasket/apex driver: `apex_0`, …). */
 	listApexClass(): readonly string[];
-	/** Whether this process can open a device node for read AND write. */
+	/** Whether this process can open a device node (`/dev/apex_N`, `/dev/bus/usb/…`) for read AND write. */
 	canOpen(path: string): boolean;
 	/** Whether a filesystem path exists (the libedgetpu delegate, `/dev/apex_N`). */
 	exists(path: string): boolean;
@@ -29,20 +33,55 @@ export interface CoralFs {
 * `/data/deps/edgetpu/lib/libedgetpu.so.1`.
 */
 export type EdgetpuDelegateHost = Omit<EdgetpuDelegateLookup, "exists">;
+/** Whether this process could see the USB bus at all. */
+export type CoralUsbBusView = "observed" | "unobservable";
 /**
-* Detect Coral Edge TPUs on USB and PCIe/M.2.
+* Which evidence decided the Coral answer — logged by the probe so a node
+* that reports (or stops reporting) a Coral says WHY:
+*  - `usb-ids` — a Coral USB id is on the bus (usable or not: its device node
+*    decides, see {@link CoralDetection.inaccessibleUsbNodes});
+*  - `pci` — a PCIe/M.2 Coral (usable or not) is on the PCI bus;
+*  - `delegate-fallback` — the USB bus is not observable and the libedgetpu
+*    delegate is installed, so one USB unit is ASSUMED;
+*  - `none` — no Coral.
+*/
+export type CoralDecision = "usb-ids" | "pci" | "delegate-fallback" | "none";
+export interface CoralDetection {
+	readonly info: CoralInfo | null;
+	readonly usbBus: CoralUsbBusView;
+	readonly decidedBy: CoralDecision;
+	/**
+	* The device node of every USB Coral sysfs lists but this process cannot
+	* open read/write (`/dev/bus/usb/<BBB>/<DDD>`, or `<sysfs entry>` when
+	* sysfs gave no bus/device number) — the evidence behind a USB
+	* `device-not-accessible`. Empty when every listed stick is usable.
+	*/
+	readonly inaccessibleUsbNodes: readonly string[];
+}
+/**
+* Detect Coral Edge TPUs on USB and PCIe/M.2 — the answer only. See
+* {@link detectCoralAccelerator} for the evidence that decided it.
+*/
+export declare function classifyCoralAccelerator(fsx: CoralFs, delegateHost?: EdgetpuDelegateHost): CoralInfo | null;
+/**
+* Detect Coral Edge TPUs on USB and PCIe/M.2, with the evidence that decided.
 *
-* - USB: every matching USB device counts (multiple Corals run concurrently).
+* - USB: every matching USB device counts (multiple Corals run concurrently),
+*   usable only if its `/dev/bus/usb/<BBB>/<DDD>` node opens read/write — a
+*   listed stick whose node is missing or refused is `device-not-accessible`.
 * - PCIe: the apex driver's units, each usable only if its device node opens;
 *   a Coral PCI function the driver did not bind is `driver-missing`.
-* - Fallback: when NO Coral signal of either bus is visible but the libedgetpu
-*   delegate is installed (a container whose `/sys` USB view is limited), one
-*   USB Coral is assumed — never when a PCI Coral was seen, since the delegate
-*   then says nothing about USB.
+* - Fallback: when the USB bus is NOT OBSERVABLE (`/sys/bus/usb/devices`
+*   missing, unreadable or empty — a macOS desktop, a restricted container)
+*   and no PCI Coral was seen, an installed libedgetpu delegate means one USB
+*   Coral is assumed. A bus that IS readable and lists no Coral id is the
+*   answer: no USB Coral. The delegate stays installed after a stick is
+*   unplugged or moved to another node, so it is evidence only where nothing
+*   better exists (D919).
 *
 * Returns `null` only when no Coral was found at all; a present-but-unusable
 * Coral is reported with its typed reason, never as absent (D393/D315).
 */
-export declare function classifyCoralAccelerator(fsx: CoralFs, delegateHost?: EdgetpuDelegateHost): CoralInfo | null;
+export declare function detectCoralAccelerator(fsx: CoralFs, delegateHost?: EdgetpuDelegateHost): CoralDetection;
 /** The real filesystem view: `/sys` for enumeration, `/dev` for access. */
 export declare const nodeCoralFs: CoralFs;

package/dist/builtins/platform-probe/index.d.ts

@@ -5,13 +5,19 @@
 * exposes the result via the `platform-probe` capability (singleton per
 * node).
 */
-import type { ProviderRegistration } from "@camstack/types";
+import type { ProviderRegistration, AcceleratorRescan } from "@camstack/types";
 import { BaseAddon } from "@camstack/types";
 export { PlatformScorer } from "./platform-scorer.js";
 export { InferenceConfigResolver } from "./inference-config-resolver.js";
+/** How often the accelerator part of the probe is re-run (D919). Cheap: `/sys` + `/dev` reads. */
+export declare const ACCELERATOR_REPROBE_INTERVAL_MS = 6e4;
+/** What started an accelerator re-probe — logged with every change. */
+export type AcceleratorReprobeTrigger = "periodic" | "operator";
 export declare class PlatformProbeNativeAddon extends BaseAddon {
 	private scorer;
 	private cachedCaps;
+	/** The periodic accelerator re-probe; started once the full probe completed. */
+	private reprobeTimer;
 	/**
 	* Per-boot generation stamp for the manual readiness emissions below.
 	* Constant for the lifetime of this addon instance (== one process boot);
@@ -36,6 +42,16 @@ export declare class PlatformProbeNativeAddon extends BaseAddon {
 	/** Emit a `system.ready-state` transition for the platform-probe cap. */
 	private emitProbeReadiness;
 	protected onInitialize(): Promise<ProviderRegistration[]>;
+	/** Start the periodic accelerator re-probe (idempotent). */
+	private startAcceleratorReprobe;
+	/**
+	* Re-run the accelerator part of the probe and serve its answer from now on.
+	* Every device that appeared or disappeared is logged, naming the node and
+	* what triggered the re-probe; the orchestrator sees the new list on its next
+	* `getCapabilities` read and re-elects through its device-set-change path.
+	* `null` when the scorer is gone or has not completed its first probe.
+	*/
+	reprobeAccelerators(trigger: AcceleratorReprobeTrigger): AcceleratorRescan | null;
 	protected onShutdown(): Promise<void>;
 }
 export default PlatformProbeNativeAddon;