@camstack/system 1.2.481 → 1.2.483

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-CsGk4kYn.js");
+const require_wal_maintenance = require("./wal-maintenance-DbUC_wdC.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-DYAJwPWu.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-TCW_esAc.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{formatter-B7qW8bPJ.mjs → formatter-DkYZ4LXp.mjs}

@@ -81,7 +81,7 @@ function buildBrand(entry) {
 /**
 * Build the optional device-context bracket. Returns `null` when the
 * line doesn't carry a device tag — renders as just the brand + message
-* without the second bracket. With a device tag: `salone` / `#42`.
+* without the second bracket. With a device tag: `hall` / `#42`.
 */
 function buildDeviceContext(entry) {
 	return resolveDevice(entry.tags);

package/dist/{formatter-DqAKDlvN.js → formatter-xbxeV4GD.js}

@@ -81,7 +81,7 @@ function buildBrand(entry) {
 /**
 * Build the optional device-context bracket. Returns `null` when the
 * line doesn't carry a device tag — renders as just the brand + message
-* without the second bracket. With a device tag: `salone` / `#42`.
+* without the second bracket. With a device tag: `hall` / `#42`.
 */
 function buildDeviceContext(entry) {
 	return resolveDevice(entry.tags);

package/dist/{hub-mdns-ciao-C3NJsOvK.js → hub-mdns-ciao-Bs3cn9C1.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist--v3KMKa1.js");
+const require_dist = require("./dist-2gZWO597.js");
 const require_x509_es = require("./x509.es-WtnRNyYS.js");
-const require_agent_https = require("./agent-https-o3X-jkS7.js");
+const require_agent_https = require("./agent-https-CHZpVx3I.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/{hub-mdns-ciao-DMFXIlMY.mjs → hub-mdns-ciao-CVf6mxIZ.mjs}

@@ -1,7 +1,7 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { Da as userError } from "./dist-BIJXQo_j.mjs";
+import { Da as userError } from "./dist-DvKEKSap.mjs";
 import { f as X509Certificate$1 } from "./x509.es-BRiJgOvu.mjs";
-import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-doVPSeiy.mjs";
+import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-NP141VCW.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist--v3KMKa1.js");
-const require_device_ca = require("./device-ca-DgLZPn5R.js");
+const require_dist = require("./dist-2gZWO597.js");
+const require_device_ca = require("./device-ca-CSLMfr4Q.js");
 const require_read_all_rows$1 = require("./read-all-rows-CVoO1ONM.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
@@ -9,7 +9,7 @@ const require_builtins_calendars_calendars_addon = require("./builtins/calendars
 require("./builtins/calendars/index.js");
 const require_builtins_composer_composer_addon = require("./builtins/composer/composer.addon.js");
 require("./builtins/composer/index.js");
-const require_formatter = require("./formatter-DqAKDlvN.js");
+const require_formatter = require("./formatter-xbxeV4GD.js");
 const require_builtins_console_logging_index = require("./builtins/console-logging/index.js");
 const require_prefix_walk = require("./prefix-walk-Dv6MLZlM.js");
 const require_builtins_core_blocks_core_blocks_addon = require("./builtins/core-blocks/core-blocks.addon.js");
@@ -26,21 +26,21 @@ const require_builtins_loki_logging_index = require("./builtins/loki-logging/ind
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_device_history_device_history_addon = require("./builtins/device-history/device-history.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-CsGk4kYn.js");
+const require_wal_maintenance = require("./wal-maintenance-DbUC_wdC.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_agent_https = require("./agent-https-o3X-jkS7.js");
-const require_constants = require("./constants-BVJrLycr.js");
+const require_agent_https = require("./agent-https-CHZpVx3I.js");
+const require_constants = require("./constants-Bt0NFXDm.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_custom_action_registry = require("./custom-action-registry-MRyes5j0.js");
-const require_hub_mdns_ciao = require("./hub-mdns-ciao-C3NJsOvK.js");
+const require_hub_mdns_ciao = require("./hub-mdns-ciao-Bs3cn9C1.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-DpkdAuFf.js");
+const require_restore_archive = require("./restore-archive-_mgadWlk.js");
 const require_coral_accelerators = require("./coral-accelerators-BSVsBVzt.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
@@ -7528,6 +7528,34 @@ var AddonManifest = class {
 	}
 };
 //#endregion
+//#region src/kernel/addon-version-policy.ts
+/**
+* Which version an installed addon should be running (D942).
+*
+* The hub's target is the registry dist-tag `latest`. An agent's target is
+* the hub's installed version — never the registry, and never "strictly
+* newer". A missing target is an unreadable authority: a failed read changes
+* nothing (D49), including never a move downward because the registry or the
+* hub could not be asked.
+*/
+var ADDON_VERSION_REASON_REGISTRY_LATEST = "installed version differs from registry latest";
+var ADDON_VERSION_REASON_HUB = "agent follows the hub installed version";
+/**
+* Move when `installed` is not `target`. `target === null` (or empty) means
+* the authority could not be read — keep whatever is installed.
+* `installed === null` with a known target is a first install of that target.
+*/
+function decideAddonVersionMove(installed, target, reason) {
+	if (target === null || target.length === 0) return { move: false };
+	if (installed !== null && installed === target) return { move: false };
+	return {
+		move: true,
+		from: installed ?? "absent",
+		to: target,
+		reason
+	};
+}
+//#endregion
 //#region src/kernel/deps/closure-dedupe.ts
 /**
 * Closure dedupe — stop copying into every addon the libraries the server
@@ -8282,6 +8310,25 @@ function readPackageJson(pkgJsonPath) {
 function shouldSkipClosureProvidedSeed(packageName, isResolvable) {
 	return packageName === "@camstack/system" && isResolvable;
 }
+/** How long a boot-time `dist-tags.latest` read may take before it is "unreadable". */
+var REGISTRY_LATEST_TIMEOUT_MS = 15e3;
+function readInstalledPackageVersion(addonDir) {
+	try {
+		const raw = JSON.parse(node_fs.readFileSync(node_path.join(addonDir, "package.json"), "utf-8"));
+		if (raw === null || typeof raw !== "object") return null;
+		const version = Reflect.get(raw, "version");
+		return typeof version === "string" && version.length > 0 ? version : null;
+	} catch {
+		return null;
+	}
+}
+function distTagLatest(body) {
+	if (body === null || typeof body !== "object") return null;
+	const tags = Reflect.get(body, "dist-tags");
+	if (tags === null || typeof tags !== "object") return null;
+	const latest = Reflect.get(tags, "latest");
+	return typeof latest === "string" && latest.length > 0 ? latest : null;
+}
 /** Minimal no-op logger for default parameter */
 var noopLogger = {
 	debug() {},
@@ -8315,7 +8362,7 @@ var STAGING_RESIDUE_MIN_AGE_MS = 30 * 6e4;
 *   npm error path …/.staging/install-14820-2026-08-07T12-28-28-875Z/package/package.json
 *
 * which the propagation then reported as `runtime dependency install failed`.
-* Observed on the Mac desktop agent and on little-unraid on 2026-08-07.
+* Observed on the Mac desktop agent and on agent-a on 2026-08-07.
 *
 * So a sweep only removes what cannot be live: not a tree this process is
 * building, and not one young enough to belong to anybody's in-flight install.
@@ -8332,6 +8379,7 @@ var AddonInstaller = class AddonInstaller {
 	isPackageResolvable;
 	/** Test seam — production resolves via `CAMSTACK_FRAMEWORK_DIR`. */
 	closureNodeModulesDir;
+	resolveLatestVersionOverride;
 	/**
 	* Central manifest of installed addons. Tracks version + source +
 	* timestamps + last-backup pointer per package, written atomically
@@ -8354,6 +8402,7 @@ var AddonInstaller = class AddonInstaller {
 		this.manifest = new AddonManifest(config.addonsDir);
 		this.isPackageResolvable = config.isPackageResolvable;
 		this.closureNodeModulesDir = config.closureNodeModulesDir;
+		this.resolveLatestVersionOverride = config.resolveLatestVersion;
 		if (config.installSource) this.installSource = config.installSource;
 		else this.installSource = "npm";
 	}
@@ -8467,10 +8516,13 @@ var AddonInstaller = class AddonInstaller {
 	* defaults to npm in production.
 	*
 	* There is no version argument and there is deliberately no pin: the system is
-	* addons-agnostic and `latest` is the whole contract at first boot (operator,
-	* 2026-08-13). A copy already under the addon root is never replaced either —
-	* bootstrap is seed-only, and overwriting a deployed bundle would be an
-	* un-deploy ([D90](../../../../docs/decisions/adr-0090.md)).
+	* addons-agnostic and `latest` is the whole contract (operator, 2026-08-13,
+	* restated 2026-10-25 — D942). A copy already under the addon root is left
+	* alone when this installer is not on the npm source (a workspace or a
+	* bundled desktop seed) and when the package is the closure-provided
+	* `@camstack/system` (a copy there would shadow the closure). Every other
+	* required addon already on disk is moved to registry `latest` when that
+	* tag differs, higher or lower. An unreadable registry changes nothing.
 	*
 	* @param packages — optional custom package list (default: REQUIRED_PACKAGES)
 	*/
@@ -8486,7 +8538,16 @@ var AddonInstaller = class AddonInstaller {
 		for (const packageName of pkgList) {
 			const addonDir = node_path.join(this.addonsDir, packageName);
 			if (node_fs.existsSync(node_path.join(addonDir, "package.json"))) {
-				this.logger.debug(`${packageName} — already installed, skipping`);
+				if (this.installSource !== "npm" || shouldSkipClosureProvidedSeed(packageName, this.isResolvableFromClosure(packageName))) {
+					this.logger.debug(`${packageName} — already installed, skipping`);
+					continue;
+				}
+				try {
+					await this.followInstalledAddonToLatest(packageName, addonDir);
+				} catch (err) {
+					const msg = require_dist.errMsg(err);
+					this.logger.error(`Failed to move ${packageName} to registry latest`, { meta: { error: msg } });
+				}
 				continue;
 			}
 			if (shouldSkipClosureProvidedSeed(packageName, this.isResolvableFromClosure(packageName))) {
@@ -8511,6 +8572,56 @@ var AddonInstaller = class AddonInstaller {
 		}
 	}
 	/**
+	* Move an already-installed required addon to registry `latest` when the
+	* installed version differs. `applyUpdate` keeps the previous tree as a
+	* backup and restores it if the install throws. A null latest (registry
+	* down, or no tag) leaves the copy where it is.
+	*/
+	async followInstalledAddonToLatest(packageName, addonDir) {
+		const installedVersion = readInstalledPackageVersion(addonDir);
+		const decision = decideAddonVersionMove(installedVersion, await this.readRegistryLatest(packageName), ADDON_VERSION_REASON_REGISTRY_LATEST);
+		if (!decision.move) {
+			this.logger.debug(`${packageName} — installed copy matches registry latest, or the registry could not be read`);
+			return;
+		}
+		this.logger.info(`${packageName} — moving ${decision.from} → ${decision.to}: ${decision.reason}`, { meta: {
+			from: decision.from,
+			to: decision.to,
+			reason: decision.reason
+		} });
+		if (this.manifest.get(packageName) == null) this.manifest.upsert(packageName, {
+			version: installedVersion ?? "0.0.0",
+			source: "npm"
+		});
+		await this.applyUpdate(packageName, decision.to);
+	}
+	/** `dist-tags.latest`, or `null` when the registry cannot be read. */
+	async readRegistryLatest(packageName) {
+		if (this.resolveLatestVersionOverride) try {
+			return await this.resolveLatestVersionOverride(packageName);
+		} catch (err) {
+			this.logger.warn(`${packageName} — registry unreadable, leaving the installed copy`, { meta: { error: require_dist.errMsg(err) } });
+			return null;
+		}
+		return this.fetchRegistryLatest(packageName);
+	}
+	async fetchRegistryLatest(packageName) {
+		const metadataUrl = `${(this.registry ?? "https://registry.npmjs.org").replace(/\/+$/, "")}/${encodeURIComponent(packageName).replace(/^%40/, "@")}`;
+		try {
+			const metadataRes = await fetch(metadataUrl, { signal: AbortSignal.timeout(REGISTRY_LATEST_TIMEOUT_MS) });
+			if (!metadataRes.ok) {
+				this.logger.warn(`${packageName} — registry answered ${metadataRes.status}, leaving the installed copy`);
+				return null;
+			}
+			const latest = distTagLatest(await metadataRes.json());
+			if (latest === null) this.logger.warn(`${packageName} — registry returned no dist-tags.latest, leaving the installed copy`);
+			return latest;
+		} catch (err) {
+			this.logger.warn(`${packageName} — registry unreadable, leaving the installed copy`, { meta: { error: require_dist.errMsg(err) } });
+			return null;
+		}
+	}
+	/**
 	* Reconcile the install manifest against the addons actually present on
 	* disk: register seeded addons, correct a version that disagrees with the
 	* installed `package.json`, and drop entries naming a directory that does
@@ -9725,7 +9836,7 @@ function isDirEntry(entry, parentDir) {
 *
 * Measured 2026-08-07/08 on the live cluster:
 *
-*   little-unraid  `@camstack/system.bak-pre-unshadow` — no package.json left,
+*   agent-a  `@camstack/system.bak-pre-unshadow` — no package.json left,
 *                  so not loadable, but the agent main process held five live
 *                  mappings of `better_sqlite3.node` out of it (D87).
 *   macmini        `@camstack/system.bak-pre-1272-1786129145` — still declares
@@ -19325,7 +19436,7 @@ var SocketChannel = class {
 	* `res` frame, or the socket's `close` (which drains `pending`) — so a peer
 	* that receives the request and then neither answers nor closes leaves the
 	* caller pending forever. That is a wedged handler, or a half-open socket
-	* after a child died without a clean teardown, and it is how camera 615 spent
+	* after a child died without a clean teardown, and it is how camera 101 spent
 	* 30+ minutes with every inference permit held by a call that was never
 	* coming back.
 	*/
@@ -22303,7 +22414,7 @@ function buildLinkChain(target, localResolver, hookup) {
 /**
 * Can libva initialise the VA driver on this node's render node? (D926)
 *
-* Measured 2026-10-23 (intel-1.2.509, hub + little-unraid): Intel's iHD 25.2.4
+* Measured 2026-10-23 (intel-1.2.509, hub + agent-a): Intel's iHD 25.2.4
 * exports only `__vaDriverInit_1_22`, the container's Ubuntu libva 2.20 looks
 * for `_1_20`, and `vaInitialize` failed — while the resolver kept offering
 * `qsv, vaapi`. Every session tried, failed and fell back to software: 722
@@ -27769,6 +27880,8 @@ function resetCatalogRegistryForTests() {
 	shared = null;
 }
 //#endregion
+exports.ADDON_VERSION_REASON_HUB = ADDON_VERSION_REASON_HUB;
+exports.ADDON_VERSION_REASON_REGISTRY_LATEST = ADDON_VERSION_REASON_REGISTRY_LATEST;
 exports.AGENT_CAP_FWD_ACTION = AGENT_CAP_FWD_ACTION;
 exports.AGENT_CAP_FWD_SERVICE = AGENT_CAP_FWD_SERVICE;
 exports.AGENT_DASHBOARD_ORIGINS_FIELD = require_builtins_system_config_system_config_addon.AGENT_DASHBOARD_ORIGINS_FIELD;
@@ -28115,6 +28228,7 @@ exports.createUdsLogger = createUdsLogger;
 exports.createUdsLoggerWithControl = createUdsLoggerWithControl;
 exports.createV8Reclaimer = createV8Reclaimer;
 exports.currentBrokerTransporter = currentBrokerTransporter;
+exports.decideAddonVersionMove = decideAddonVersionMove;
 exports.deleteModelFromDisk = require_custom_action_registry.deleteModelFromDisk;
 exports.deriveAgentListenPort = deriveAgentListenPort;
 exports.describeCsr = require_builtins_system_config_system_config_addon.describeCsr;