@camstack/system 1.2.61 → 1.2.63

package/dist/index.d.ts

@@ -51,7 +51,7 @@ export { LivenessMonitorAddon } from './builtins/liveness-monitor/index.js';
 export { NativeMetricsProvider } from './builtins/native-metrics/native-metrics-provider.js';
 export { SystemConfigAddon } from './builtins/system-config/index.js';
 export { CoreBlocksAddon } from './builtins/core-blocks/index.js';
-export { LocalAuthAddon } from './builtins/local-auth/index.js';
+export { LocalAuthAddon, HOME_ASSISTANT_OAUTH_INTEGRATION } from './builtins/local-auth/index.js';
 export { DeviceManagerAddon } from './builtins/device-manager/index.js';
 export { LifecycleStateMachine } from './lifecycle/lifecycle-state-machine.js';
 export type { ElementState, ElementStatus, } from './lifecycle/lifecycle-state-machine.js';

package/dist/index.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BN681PgO.js");
+const require_dist = require("./dist-LDrOFrd-.js");
 const require_model_download_service = require("./model-download-service-Cpc6SWzV.js");
-const require_manifest_python_deps = require("./manifest-python-deps-d4acYXVV.js");
+const require_manifest_python_deps = require("./manifest-python-deps-DNfmBu20.js");
 const require_resource_monitor = require("./resource-monitor-DNNomR-i.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
@@ -3356,7 +3356,12 @@ var MANIFEST_VERSION = 1;
 * workspace source. Trusting the dirent there finds zero addons on disk, which
 * with pruning would empty a developer's manifest on the next boot.
 */
-function isDirLike(p) {
+/** `@camstack/system` → `system`: the directory a package must live in. */
+function packageDirName$1(declaredName) {
+	const slash = declaredName.lastIndexOf("/");
+	return slash === -1 ? declaredName : declaredName.slice(slash + 1);
+}
+function isDirLike$1(p) {
 	try {
 		return node_fs.statSync(p).isDirectory();
 	} catch {
@@ -3490,10 +3495,10 @@ var AddonManifest = class {
 		/** Package name → version, for every ADDON package actually installed. */
 		const onDisk = /* @__PURE__ */ new Map();
 		for (const scope of node_fs.readdirSync(addonsDir, { withFileTypes: true })) {
-			if (!scope.name.startsWith("@") || !isDirLike(node_path.join(addonsDir, scope.name))) continue;
+			if (!scope.name.startsWith("@") || !isDirLike$1(node_path.join(addonsDir, scope.name))) continue;
 			const scopeDir = node_path.join(addonsDir, scope.name);
 			for (const pkg of node_fs.readdirSync(scopeDir, { withFileTypes: true })) {
-				if (!isDirLike(node_path.join(scopeDir, pkg.name))) continue;
+				if (!isDirLike$1(node_path.join(scopeDir, pkg.name))) continue;
 				const pkgJsonPath = node_path.join(scopeDir, pkg.name, "package.json");
 				if (!node_fs.existsSync(pkgJsonPath)) continue;
 				let pkgJson;
@@ -3507,6 +3512,7 @@ var AddonManifest = class {
 				if (!pkgJson.name || !pkgJson.version) continue;
 				const addons = pkgJson.camstack?.addons;
 				if (!Array.isArray(addons) || addons.length === 0) continue;
+				if (packageDirName$1(pkgJson.name) !== pkg.name) continue;
 				onDisk.set(pkgJson.name, pkgJson.version);
 			}
 		}
@@ -5024,6 +5030,199 @@ function isDirEntry(entry, parentDir) {
 	return false;
 }
 //#endregion
+//#region src/kernel/addon-residue.ts
+/**
+* Residue quarantine for the ONE addon root.
+*
+* ── The bug class this closes ──────────────────────────────────────────────
+* `<dataDir>/addons/@camstack/<pkg>` is the only directory a node loads addons
+* from. Renaming a package inside it does NOT archive it — the directory name
+* is decoration, and three independent consumers key on the `package.json`
+* they find inside:
+*
+*   - `AddonLoader.loadFromDirectory` walks `@scope/*` and loads anything with
+*     a `package.json`; its skip list is keyed on the PACKAGE name, so
+*     `@camstack/system.bak-pre-unshadow` was never skipped;
+*   - the agent's `resolveAddonPackageDirs` scans on the same rule;
+*   - `AddonManifest.reconcileFromDisk` does `onDisk.set(pkgJson.name, …)`,
+*     so the backup's version becomes the version the manifest — and every
+*     surface reading it — REPORTS.
+*
+* Measured 2026-08-07/08 on the live cluster:
+*
+*   little-unraid  `@camstack/system.bak-pre-unshadow` — no package.json left,
+*                  so not loadable, but the agent main process held five live
+*                  mappings of `better_sqlite3.node` out of it (D87).
+*   macmini        `@camstack/system.bak-pre-1272-1786129145` — still declares
+*                  `@camstack/system@1.2.3` (17 days old, 97 MB). The data root
+*                  has NO `addons/@camstack/system` directory at all, yet the
+*                  manifest reports `@camstack/system 1.2.3` — read straight
+*                  out of the backup. The live process still had the backup's
+*                  `better_sqlite3.node` mapped `txt` against a 1.2.61 closure.
+*
+* ── Why quarantine and not delete ─────────────────────────────────────────
+* The same evening, a cleanup that DELETED what it judged to be a shadow copy
+* removed the only builtins an agent had and gutted the node. So this never
+* deletes: it renames out of the scanned root into `.quarantine/`, logs every
+* move by name, reason and both paths, and leaves the bytes recoverable. A
+* silent sweep reads as "nothing was here", which is the failure mode that
+* made the original one unobservable.
+*
+* `.quarantine` sits beside `.staging` / `.backups` / `.evicting` under the
+* addon root: dot-prefixed, carrying no `package.json` at its top level, so no
+* scanner descends into it.
+*/
+/** Where residue is moved to, relative to the addon root. */
+var QUARANTINE_DIRNAME = ".quarantine";
+/**
+* A backup marker: a `.bak` / `.old` / `.orig` segment, not merely those
+* letters. `.backups` — the installer's own rollback store — must NOT match,
+* and it is also excluded by the dot rule below; the pattern stays tight
+* anyway so the two guards are independent.
+*/
+var BACKUP_MARKER = /\.(bak|old|orig)(?![a-z])/i;
+/** Installer-owned stores and node's own tree. Never candidates. */
+function isReservedDir(dirName) {
+	return dirName.startsWith(".") || dirName === "node_modules";
+}
+/** `@camstack/system` → `system`; `foo` → `foo`. */
+function packageDirName(declaredName) {
+	const slash = declaredName.lastIndexOf("/");
+	return slash === -1 ? declaredName : declaredName.slice(slash + 1);
+}
+/**
+* Is this directory residue? Returns the verdict, or null to keep it.
+*
+* A directory with no `package.json` is NOT residue on that ground alone —
+* `models/`, a half-finished copy, a scratch dir are all absence, not a
+* rename. Only a backup marker condemns one.
+*/
+function classifyAddonDir(candidate) {
+	const { dirName, declaredName } = candidate;
+	if (isReservedDir(dirName)) return null;
+	if (BACKUP_MARKER.test(dirName)) return {
+		dirName,
+		declaredName,
+		reason: "backup-residue"
+	};
+	if (declaredName !== null && packageDirName(declaredName) !== dirName) return {
+		dirName,
+		declaredName,
+		reason: "name-mismatch"
+	};
+	return null;
+}
+function selectAddonResidue(candidates) {
+	const out = [];
+	for (const candidate of candidates) {
+		const verdict = classifyAddonDir(candidate);
+		if (verdict !== null) out.push(verdict);
+	}
+	return out;
+}
+function readDeclaredName(dir) {
+	try {
+		const parsed = JSON.parse(node_fs.readFileSync(node_path.join(dir, "package.json"), "utf-8"));
+		if (typeof parsed !== "object" || parsed === null) return null;
+		const name = parsed.name;
+		return typeof name === "string" ? name : null;
+	} catch {
+		return null;
+	}
+}
+function readDeclaredVersion(dir) {
+	try {
+		const parsed = JSON.parse(node_fs.readFileSync(node_path.join(dir, "package.json"), "utf-8"));
+		if (typeof parsed !== "object" || parsed === null) return null;
+		const version = parsed.version;
+		return typeof version === "string" ? version : null;
+	} catch {
+		return null;
+	}
+}
+function isDirLike(p) {
+	try {
+		return node_fs.statSync(p).isDirectory();
+	} catch {
+		return false;
+	}
+}
+/** `<scope>__<dir>`, suffixed until free — two sweeps must not overwrite. */
+function freeQuarantineTarget(store, scope, dirName) {
+	const base = scope === null ? dirName : `${scope.replace("@", "")}__${dirName}`;
+	let candidate = node_path.join(store, base);
+	let n = 1;
+	while (node_fs.existsSync(candidate)) {
+		candidate = node_path.join(store, `${base}-${n}`);
+		n += 1;
+	}
+	return candidate;
+}
+/**
+* Move every residue directory under `addonsDir` into `addonsDir/.quarantine`.
+*
+* Runs at boot, BEFORE anything scans the root or seeds into it — a residue
+* that is still present when the loader walks has already been installed.
+* Never throws, never deletes; a move that fails is reported and left in
+* place, which is strictly better than a half-moved package.
+*/
+function quarantineAddonResidue(addonsDir, log) {
+	const quarantined = [];
+	const failed = [];
+	if (!node_fs.existsSync(addonsDir)) return {
+		quarantined,
+		failed
+	};
+	const store = node_path.join(addonsDir, QUARANTINE_DIRNAME);
+	const scan = (parent, scope) => {
+		let names;
+		try {
+			names = node_fs.readdirSync(parent);
+		} catch {
+			return;
+		}
+		for (const dirName of names) {
+			const full = node_path.join(parent, dirName);
+			if (!isDirLike(full)) continue;
+			if (scope === null && dirName.startsWith("@")) {
+				scan(full, dirName);
+				continue;
+			}
+			const verdict = classifyAddonDir({
+				dirName,
+				declaredName: readDeclaredName(full)
+			});
+			if (verdict === null) continue;
+			const version = readDeclaredVersion(full);
+			const to = freeQuarantineTarget(store, scope, dirName);
+			try {
+				node_fs.mkdirSync(store, { recursive: true });
+				node_fs.renameSync(full, to);
+			} catch (err) {
+				const error = err instanceof Error ? err.message : String(err);
+				failed.push({
+					...verdict,
+					from: full,
+					error
+				});
+				log(`[addons] residue quarantine FAILED for ${full} (${verdict.reason}) — ${error}. It stays on the addon root and will be loaded, scanned and reported as an install.`);
+				continue;
+			}
+			quarantined.push({
+				...verdict,
+				from: full,
+				to
+			});
+			log(`[addons] quarantined ${verdict.reason} ${full} → ${to} (declares ${verdict.declaredName ?? "no package name"}${version === null ? "" : `@${version}`}). A renamed package dir is INSTALLED, not archived — nothing was deleted.`);
+		}
+	};
+	scan(addonsDir, null);
+	return {
+		quarantined,
+		failed
+	};
+}
+//#endregion
 //#region src/kernel/workspace-detect.ts
 /**
 * Detect whether we're running inside the monorepo workspace.
@@ -94687,6 +94886,7 @@ exports.HEAP_RECLAIM_MIN_INTERVAL_MS = HEAP_RECLAIM_MIN_INTERVAL_MS;
 exports.HEAP_RECLAIM_TRIGGER_MB = HEAP_RECLAIM_TRIGGER_MB;
 exports.HEAP_WATCH_INTERVAL_MS = HEAP_WATCH_INTERVAL_MS;
 exports.HEAP_WATCH_WARN_RATIO = HEAP_WATCH_WARN_RATIO;
+exports.HOME_ASSISTANT_OAUTH_INTEGRATION = require_builtins_local_auth_local_auth_addon.HOME_ASSISTANT_OAUTH_INTEGRATION;
 exports.HUB_CAP_FWD_ACTION = require_manifest_python_deps.HUB_CAP_FWD_ACTION;
 exports.HUB_CAP_FWD_SERVICE = require_manifest_python_deps.HUB_CAP_FWD_SERVICE;
 exports.HubForwarderAddon = require_builtins_hub_forwarder_index.HubForwarderAddon$1;
@@ -94723,6 +94923,7 @@ Object.defineProperty(exports, "PYTHON_VERSION", {
 exports.PipelineRunner = PipelineRunner;
 exports.PipelineValidator = PipelineValidator;
 exports.PythonEnvManager = PythonEnvManager;
+exports.QUARANTINE_DIRNAME = QUARANTINE_DIRNAME;
 exports.RESTART_MARKER_FILE = RESTART_MARKER_FILE;
 exports.RUNTIME_DEFAULTS = require_dist.RUNTIME_DEFAULTS;
 exports.ReadinessRegistry = require_dist.ReadinessRegistry;
@@ -94775,6 +94976,7 @@ exports.capActionName = require_manifest_python_deps.capActionName;
 exports.capActionSuffix = require_manifest_python_deps.capActionSuffix;
 exports.capBareAction = require_manifest_python_deps.capBareAction;
 exports.capServiceName = require_manifest_python_deps.capServiceName;
+exports.classifyAddonDir = classifyAddonDir;
 exports.classifyCapRoute = require_manifest_python_deps.classifyCapRoute;
 exports.clearPendingRestart = clearPendingRestart;
 exports.clusterEventTopic = require_manifest_python_deps.clusterEventTopic;
@@ -94916,6 +95118,7 @@ exports.parseCapAction = require_manifest_python_deps.parseCapAction;
 exports.parseRangeHeader = require_model_download_service.parseRangeHeader;
 exports.parseTokenizedUrl = require_model_download_service.parseTokenizedUrl;
 exports.proxyToUpstream = proxyToUpstream;
+exports.quarantineAddonResidue = quarantineAddonResidue;
 exports.readPendingRestart = readPendingRestart;
 exports.readinessKey = require_dist.readinessKey;
 exports.registerEventBusService = require_manifest_python_deps.registerEventBusService;
@@ -94926,6 +95129,7 @@ exports.runNpm = require_manifest_python_deps.runNpm;
 exports.scheduleSelfRestart = scheduleSelfRestart;
 exports.scopeKey = require_dist.scopeKey;
 exports.scopesAllowDeviceCap = scopesAllowDeviceCap;
+exports.selectAddonResidue = selectAddonResidue;
 exports.serializeTypedArrays = require_manifest_python_deps.serializeTypedArrays;
 exports.setHubConnected = require_manifest_python_deps.setHubConnected;
 exports.setNodeEventInterest = require_manifest_python_deps.setNodeEventInterest;

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $ as procedureAuthKey, Ct as asJsonObject$1, Dt as emitDownForOwnedCaps, Et as createEvent, Ft as readinessKey, H as kebabToCamel, It as resolveCapMount, K as logLevelAtMost, L as isArrayOutputSchema, Lt as scopeKey, Nt as parseJsonObject, P as extractNestedAddonId, Pt as parseJsonUnknown$1, R as isCollectionArrayMethod, Tt as asString$1, U as lifecycleJobSchema, V as isVoidInput, X as objectInputDeclaresAddonId, bt as ReadinessRegistry, c as METHOD_ACCESS_MAP, ft as errMsg$1, gt as DEVICE_STATUS_METHOD, h as addonSettingsCapability, ht as DEVICE_SETTINGS_CONTRIBUTION_METHODS, kt as expandCapMethods, l as RUNTIME_DEFAULTS, mt as DATAPLANE_SECRET_HEADER$1, q as looseSchema, t as ALL_CAPABILITY_DEFINITIONS, wt as asNumber, xt as ReadinessTimeoutError, z as isObjectInput, zt as EventCategory$1 } from "./dist-L6QPJWsr.mjs";
+import { Ct as asString$1, Dt as expandCapMethods, F as extractNestedAddonId, Ft as scopeKey, H as kebabToCamel, K as logLevelAtMost, L as isArrayOutputSchema, Lt as EventCategory$1, Mt as parseJsonUnknown$1, Nt as readinessKey, Pt as resolveCapMount, R as isCollectionArrayMethod, St as asNumber, Tt as emitDownForOwnedCaps, U as lifecycleJobSchema, V as isVoidInput, Z as objectInputDeclaresAddonId, et as procedureAuthKey, ft as DATAPLANE_SECRET_HEADER$1, g as addonSettingsCapability, jt as parseJsonObject, l as METHOD_ACCESS_MAP, mt as DEVICE_STATUS_METHOD, pt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, q as looseSchema, t as ALL_CAPABILITY_DEFINITIONS, u as RUNTIME_DEFAULTS, ut as errMsg$1, vt as ReadinessRegistry, wt as createEvent, xt as asJsonObject$1, yt as ReadinessTimeoutError, z as isObjectInput } from "./dist-BJ2w3uoN.mjs";
 import { a as downloadModel, c as getModelFilePath, d as contentTypeFor, f as createAuthenticatedFileServer, h as resolveFilePath, i as downloadFile, l as isModelDownloaded, m as parseTokenizedUrl, n as collectModelFiles, o as ensureModel, p as parseRangeHeader, r as deleteModelFromDisk, s as fetchJson, t as ModelDownloadService, u as createFileDataPlaneHandler } from "./model-download-service-D8B-4ktF.mjs";
-import { $ as buildNativeCapProxy, A as createHubCapForwardService, B as AGENT_CAP_FWD_ACTION, C as brokerTransportLink, Ct as resolveAddonClass, D as localProviderLink, E as ipcParentLink, F as createUdsLogger, G as callWithServiceDiscovery, H as CapRouteResolver, I as createUdsLoggerWithControl, J as UdsLocalTransportServer, K as createLocalTransport, L as LocalChildClient, M as createUdsEventBridge, N as createUdsEventBus, O as HUB_CAP_FWD_ACTION, P as udsChildLogToWorkerEntry, Q as encodeFrame, R as LocalChildRegistry, S as brokerCallForCap, St as runNpm, T as ipcChildLink, U as CapRouteError, V as AGENT_CAP_FWD_SERVICE, W as classifyCapRoute, X as localEndpointPath, Y as SocketChannel, Z as FrameDecoder, _ as createKernelHwAccel, _t as CapabilityHandle, a as getWorkerDeviceRegistry, b as __resetCapUsageRegistryForTests, bt as installManifestNativeDeps, c as setHubConnected, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dt as capBareAction, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, ft as capServiceName, g as AddonDepsManager, gt as DeviceRegistry, h as subscribePassthrough, ht as serializeTypedArrays, i as createUdsAddonContext, it as mountNativeCapService, j as createParentUnownedCallHandler, k as HUB_CAP_FWD_SERVICE, l as EVENT_TOPIC_PREFIX, lt as capActionName, m as setNodeEventInterest, mt as deserializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as createAddonService, p as registerEventBusService, pt as parseCapAction, q as UdsLocalTransportClient, r as createAddonContext, s as getOrInitReadinessRegistryForClient, st as validateProviderRegistrations, t as installManifestPythonDeps, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, ut as capActionSuffix, v as resolveHwAccel, vt as CapabilityUnavailableError, w as buildLinkChain, wt as createAddonDataPlaneFacility, x as getCapUsageRegistry, xt as resolveNpmInvocation, y as CapUsageRegistry, yt as copyBundledNativeModules, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-CX5tGRqf.mjs";
+import { $ as buildNativeCapProxy, A as createHubCapForwardService, B as AGENT_CAP_FWD_ACTION, C as brokerTransportLink, Ct as resolveAddonClass, D as localProviderLink, E as ipcParentLink, F as createUdsLogger, G as callWithServiceDiscovery, H as CapRouteResolver, I as createUdsLoggerWithControl, J as UdsLocalTransportServer, K as createLocalTransport, L as LocalChildClient, M as createUdsEventBridge, N as createUdsEventBus, O as HUB_CAP_FWD_ACTION, P as udsChildLogToWorkerEntry, Q as encodeFrame, R as LocalChildRegistry, S as brokerCallForCap, St as runNpm, T as ipcChildLink, U as CapRouteError, V as AGENT_CAP_FWD_SERVICE, W as classifyCapRoute, X as localEndpointPath, Y as SocketChannel, Z as FrameDecoder, _ as createKernelHwAccel, _t as CapabilityHandle, a as getWorkerDeviceRegistry, b as __resetCapUsageRegistryForTests, bt as installManifestNativeDeps, c as setHubConnected, ct as NATIVE_PROVIDER_SERVICE_INFIX, d as getBrokerEventBus, dt as capBareAction, et as buildUdsNativeCapProxy, f as getMoleculerEventStats, ft as capServiceName, g as AddonDepsManager, gt as DeviceRegistry, h as subscribePassthrough, ht as serializeTypedArrays, i as createUdsAddonContext, it as mountNativeCapService, j as createParentUnownedCallHandler, k as HUB_CAP_FWD_SERVICE, l as EVENT_TOPIC_PREFIX, lt as capActionName, m as setNodeEventInterest, mt as deserializeTypedArrays, n as adaptBrokerToCluster, o as getOrInitReadinessRegistry, ot as createAddonService, p as registerEventBusService, pt as parseCapAction, q as UdsLocalTransportClient, r as createAddonContext, s as getOrInitReadinessRegistryForClient, st as validateProviderRegistrations, t as installManifestPythonDeps, tt as createBrokerDeviceManagerApi, u as clusterEventTopic, ut as capActionSuffix, v as resolveHwAccel, vt as CapabilityUnavailableError, w as buildLinkChain, wt as createAddonDataPlaneFacility, x as getCapUsageRegistry, xt as resolveNpmInvocation, y as CapUsageRegistry, yt as copyBundledNativeModules, z as UDS_NO_ROUTE_PREFIX } from "./manifest-python-deps-CopL1_5C.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BkP504Vq.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
 import { SqliteSettingsAddon, o as SqliteSettingsBackend } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
@@ -22,7 +22,7 @@ import { SystemConfigAddon } from "./builtins/system-config/system-config.addon.
 import "./builtins/system-config/index.mjs";
 import { CoreBlocksAddon } from "./builtins/core-blocks/core-blocks.addon.mjs";
 import "./builtins/core-blocks/index.mjs";
-import { LocalAuthAddon, a as require_ms, i as AuthManager, n as ApiKeyManager, o as require_safe_buffer, r as UserManager, t as ScopedTokenManager } from "./builtins/local-auth/local-auth.addon.mjs";
+import { LocalAuthAddon, a as require_safe_buffer, i as require_ms, n as ScopedTokenManager, o as ApiKeyManager, r as AuthManager, s as HOME_ASSISTANT_OAUTH_INTEGRATION, t as UserManager } from "./builtins/local-auth/local-auth.addon.mjs";
 import "./builtins/local-auth/index.mjs";
 import { DeviceManagerAddon } from "./builtins/device-manager/device-manager.addon.mjs";
 import "./builtins/device-manager/index.mjs";
@@ -3348,7 +3348,12 @@ var MANIFEST_VERSION = 1;
 * workspace source. Trusting the dirent there finds zero addons on disk, which
 * with pruning would empty a developer's manifest on the next boot.
 */
-function isDirLike(p) {
+/** `@camstack/system` → `system`: the directory a package must live in. */
+function packageDirName$1(declaredName) {
+	const slash = declaredName.lastIndexOf("/");
+	return slash === -1 ? declaredName : declaredName.slice(slash + 1);
+}
+function isDirLike$1(p) {
 	try {
 		return fs$17.statSync(p).isDirectory();
 	} catch {
@@ -3482,10 +3487,10 @@ var AddonManifest = class {
 		/** Package name → version, for every ADDON package actually installed. */
 		const onDisk = /* @__PURE__ */ new Map();
 		for (const scope of fs$17.readdirSync(addonsDir, { withFileTypes: true })) {
-			if (!scope.name.startsWith("@") || !isDirLike(path$39.join(addonsDir, scope.name))) continue;
+			if (!scope.name.startsWith("@") || !isDirLike$1(path$39.join(addonsDir, scope.name))) continue;
 			const scopeDir = path$39.join(addonsDir, scope.name);
 			for (const pkg of fs$17.readdirSync(scopeDir, { withFileTypes: true })) {
-				if (!isDirLike(path$39.join(scopeDir, pkg.name))) continue;
+				if (!isDirLike$1(path$39.join(scopeDir, pkg.name))) continue;
 				const pkgJsonPath = path$39.join(scopeDir, pkg.name, "package.json");
 				if (!fs$17.existsSync(pkgJsonPath)) continue;
 				let pkgJson;
@@ -3499,6 +3504,7 @@ var AddonManifest = class {
 				if (!pkgJson.name || !pkgJson.version) continue;
 				const addons = pkgJson.camstack?.addons;
 				if (!Array.isArray(addons) || addons.length === 0) continue;
+				if (packageDirName$1(pkgJson.name) !== pkg.name) continue;
 				onDisk.set(pkgJson.name, pkgJson.version);
 			}
 		}
@@ -5016,6 +5022,199 @@ function isDirEntry(entry, parentDir) {
 	return false;
 }
 //#endregion
+//#region src/kernel/addon-residue.ts
+/**
+* Residue quarantine for the ONE addon root.
+*
+* ── The bug class this closes ──────────────────────────────────────────────
+* `<dataDir>/addons/@camstack/<pkg>` is the only directory a node loads addons
+* from. Renaming a package inside it does NOT archive it — the directory name
+* is decoration, and three independent consumers key on the `package.json`
+* they find inside:
+*
+*   - `AddonLoader.loadFromDirectory` walks `@scope/*` and loads anything with
+*     a `package.json`; its skip list is keyed on the PACKAGE name, so
+*     `@camstack/system.bak-pre-unshadow` was never skipped;
+*   - the agent's `resolveAddonPackageDirs` scans on the same rule;
+*   - `AddonManifest.reconcileFromDisk` does `onDisk.set(pkgJson.name, …)`,
+*     so the backup's version becomes the version the manifest — and every
+*     surface reading it — REPORTS.
+*
+* Measured 2026-08-07/08 on the live cluster:
+*
+*   little-unraid  `@camstack/system.bak-pre-unshadow` — no package.json left,
+*                  so not loadable, but the agent main process held five live
+*                  mappings of `better_sqlite3.node` out of it (D87).
+*   macmini        `@camstack/system.bak-pre-1272-1786129145` — still declares
+*                  `@camstack/system@1.2.3` (17 days old, 97 MB). The data root
+*                  has NO `addons/@camstack/system` directory at all, yet the
+*                  manifest reports `@camstack/system 1.2.3` — read straight
+*                  out of the backup. The live process still had the backup's
+*                  `better_sqlite3.node` mapped `txt` against a 1.2.61 closure.
+*
+* ── Why quarantine and not delete ─────────────────────────────────────────
+* The same evening, a cleanup that DELETED what it judged to be a shadow copy
+* removed the only builtins an agent had and gutted the node. So this never
+* deletes: it renames out of the scanned root into `.quarantine/`, logs every
+* move by name, reason and both paths, and leaves the bytes recoverable. A
+* silent sweep reads as "nothing was here", which is the failure mode that
+* made the original one unobservable.
+*
+* `.quarantine` sits beside `.staging` / `.backups` / `.evicting` under the
+* addon root: dot-prefixed, carrying no `package.json` at its top level, so no
+* scanner descends into it.
+*/
+/** Where residue is moved to, relative to the addon root. */
+var QUARANTINE_DIRNAME = ".quarantine";
+/**
+* A backup marker: a `.bak` / `.old` / `.orig` segment, not merely those
+* letters. `.backups` — the installer's own rollback store — must NOT match,
+* and it is also excluded by the dot rule below; the pattern stays tight
+* anyway so the two guards are independent.
+*/
+var BACKUP_MARKER = /\.(bak|old|orig)(?![a-z])/i;
+/** Installer-owned stores and node's own tree. Never candidates. */
+function isReservedDir(dirName) {
+	return dirName.startsWith(".") || dirName === "node_modules";
+}
+/** `@camstack/system` → `system`; `foo` → `foo`. */
+function packageDirName(declaredName) {
+	const slash = declaredName.lastIndexOf("/");
+	return slash === -1 ? declaredName : declaredName.slice(slash + 1);
+}
+/**
+* Is this directory residue? Returns the verdict, or null to keep it.
+*
+* A directory with no `package.json` is NOT residue on that ground alone —
+* `models/`, a half-finished copy, a scratch dir are all absence, not a
+* rename. Only a backup marker condemns one.
+*/
+function classifyAddonDir(candidate) {
+	const { dirName, declaredName } = candidate;
+	if (isReservedDir(dirName)) return null;
+	if (BACKUP_MARKER.test(dirName)) return {
+		dirName,
+		declaredName,
+		reason: "backup-residue"
+	};
+	if (declaredName !== null && packageDirName(declaredName) !== dirName) return {
+		dirName,
+		declaredName,
+		reason: "name-mismatch"
+	};
+	return null;
+}
+function selectAddonResidue(candidates) {
+	const out = [];
+	for (const candidate of candidates) {
+		const verdict = classifyAddonDir(candidate);
+		if (verdict !== null) out.push(verdict);
+	}
+	return out;
+}
+function readDeclaredName(dir) {
+	try {
+		const parsed = JSON.parse(fs$17.readFileSync(path$39.join(dir, "package.json"), "utf-8"));
+		if (typeof parsed !== "object" || parsed === null) return null;
+		const name = parsed.name;
+		return typeof name === "string" ? name : null;
+	} catch {
+		return null;
+	}
+}
+function readDeclaredVersion(dir) {
+	try {
+		const parsed = JSON.parse(fs$17.readFileSync(path$39.join(dir, "package.json"), "utf-8"));
+		if (typeof parsed !== "object" || parsed === null) return null;
+		const version = parsed.version;
+		return typeof version === "string" ? version : null;
+	} catch {
+		return null;
+	}
+}
+function isDirLike(p) {
+	try {
+		return fs$17.statSync(p).isDirectory();
+	} catch {
+		return false;
+	}
+}
+/** `<scope>__<dir>`, suffixed until free — two sweeps must not overwrite. */
+function freeQuarantineTarget(store, scope, dirName) {
+	const base = scope === null ? dirName : `${scope.replace("@", "")}__${dirName}`;
+	let candidate = path$39.join(store, base);
+	let n = 1;
+	while (fs$17.existsSync(candidate)) {
+		candidate = path$39.join(store, `${base}-${n}`);
+		n += 1;
+	}
+	return candidate;
+}
+/**
+* Move every residue directory under `addonsDir` into `addonsDir/.quarantine`.
+*
+* Runs at boot, BEFORE anything scans the root or seeds into it — a residue
+* that is still present when the loader walks has already been installed.
+* Never throws, never deletes; a move that fails is reported and left in
+* place, which is strictly better than a half-moved package.
+*/
+function quarantineAddonResidue(addonsDir, log) {
+	const quarantined = [];
+	const failed = [];
+	if (!fs$17.existsSync(addonsDir)) return {
+		quarantined,
+		failed
+	};
+	const store = path$39.join(addonsDir, QUARANTINE_DIRNAME);
+	const scan = (parent, scope) => {
+		let names;
+		try {
+			names = fs$17.readdirSync(parent);
+		} catch {
+			return;
+		}
+		for (const dirName of names) {
+			const full = path$39.join(parent, dirName);
+			if (!isDirLike(full)) continue;
+			if (scope === null && dirName.startsWith("@")) {
+				scan(full, dirName);
+				continue;
+			}
+			const verdict = classifyAddonDir({
+				dirName,
+				declaredName: readDeclaredName(full)
+			});
+			if (verdict === null) continue;
+			const version = readDeclaredVersion(full);
+			const to = freeQuarantineTarget(store, scope, dirName);
+			try {
+				fs$17.mkdirSync(store, { recursive: true });
+				fs$17.renameSync(full, to);
+			} catch (err) {
+				const error = err instanceof Error ? err.message : String(err);
+				failed.push({
+					...verdict,
+					from: full,
+					error
+				});
+				log(`[addons] residue quarantine FAILED for ${full} (${verdict.reason}) — ${error}. It stays on the addon root and will be loaded, scanned and reported as an install.`);
+				continue;
+			}
+			quarantined.push({
+				...verdict,
+				from: full,
+				to
+			});
+			log(`[addons] quarantined ${verdict.reason} ${full} → ${to} (declares ${verdict.declaredName ?? "no package name"}${version === null ? "" : `@${version}`}). A renamed package dir is INSTALLED, not archived — nothing was deleted.`);
+		}
+	};
+	scan(addonsDir, null);
+	return {
+		quarantined,
+		failed
+	};
+}
+//#endregion
 //#region src/kernel/workspace-detect.ts
 /**
 * Detect whether we're running inside the monorepo workspace.
@@ -94627,4 +94826,4 @@ var LifecycleJobEngine = class {
 	}
 };
 //#endregion
-export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LokiDestination, LokiLoggingAddon, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyCapRoute, clearPendingRestart, clusterEventTopic, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runNpm, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, startHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };
+export { AGENT_CAP_FWD_ACTION, AGENT_CAP_FWD_SERVICE, AGENT_READINESS_SERVICE_NAME, ALL_CAPABILITY_DEFINITIONS, AddonApiFactory, AddonDepsManager, AddonEngineManager, AddonHealthMonitor, AddonInstaller, AddonLoader, AddonManifest, AddonRouteRegistry, AlertCenterAddon, ApiKeyManager, AuthManager, CLUSTER_SECRET_MISMATCH_TYPE, CLUSTER_SECRET_REJECTED_EXIT_CODE, CORE_CAP_SERVICE_NAME, CapRouteError, CapRouteResolver, CapUsageRegistry, CapabilityHandle, CapabilityRegistry, CapabilityUnavailableError, ConfigManager, ConfigStore, ConsoleDestination, ConsoleLoggingAddon, CoreBlocksAddon, CustomActionRegistry, DEFAULT_DATA_PATH, DEVICE_SETTINGS_CONTRIBUTION_METHODS, DEVICE_STATUS_METHOD, DataPlaneRegistry, DeviceManagerAddon, DeviceRegistry, DeviceStore, EVENT_TOPIC_PREFIX, EngineManagerResolver, EventBus, FeatureManager, FilesystemStorageAddon, FilesystemStorageProvider, FrameDecoder, FsStorageBackend, HEALTH_MONITOR_GRACE_PERIOD_MS, HEALTH_MONITOR_RETRY_INTERVALS_MS, HEALTH_MONITOR_TICK_MS, HEAP_RECLAIM_MIN_INTERVAL_MS, HEAP_RECLAIM_TRIGGER_MB, HEAP_WATCH_INTERVAL_MS, HEAP_WATCH_WARN_RATIO, HOME_ASSISTANT_OAUTH_INTEGRATION, HUB_CAP_FWD_ACTION, HUB_CAP_FWD_SERVICE, HubForwarderAddon, HubForwarderDestination, HubLogForwarder, HubNodeRegistry, INFRA_CAPABILITIES, IntegrationRegistry, JobJournal, LifecycleJobEngine, LifecycleStateMachine, LivenessMonitorAddon, LocalAuthAddon, LocalChildClient, LocalChildRegistry, LogManager, LogRingBuffer, LokiDestination, LokiLoggingAddon, METHOD_ACCESS_MAP, ModelDownloadService, NATIVE_PROVIDER_SERVICE_INFIX, NATIVE_SCAN_DEPTH, NativeMetricsAddon, NativeMetricsProvider, NetworkQualityTracker, NotificationService, PYTHON_VERSION, PipelineRunner, PipelineValidator, PythonEnvManager, QUARANTINE_DIRNAME, RESTART_MARKER_FILE, RUNTIME_DEFAULTS, ReadinessRegistry, ReadinessTimeoutError, ReplEngine, RingBuffer, ScopedLogger, ScopedTokenManager, SocketChannel, SqliteSettingsAddon, SqliteSettingsBackend, StagingArea, StorageLocationManager, StorageManager, StorageOrchestratorAddon, StorageOrchestratorService, SystemConfigAddon, SystemEventBus, TRADITIONAL_NATIVE_PACKAGES, ToastService, UDS_NO_ROUTE_PREFIX, UdsLocalTransportClient, UdsLocalTransportServer, UserManager, WinstonDestination, WinstonLoggingAddon, __resetCapUsageRegistryForTests, adaptBrokerToCluster, addonSettingsCapability, bootstrapSchema, brokerCallForCap, brokerTransportLink, buildBinaryPath, buildCapRouters, buildHeapSample, buildLinkChain, buildNativeCapProxy, buildNodeManifest, buildStorageLocationRegistry, buildUdsNativeCapProxy, builderMountedCapNames, callRegisterNodeWithRetry, callWithServiceDiscovery, capActionName, capActionSuffix, capBareAction, capServiceName, classifyAddonDir, classifyCapRoute, clearPendingRestart, clusterEventTopic, clusterSecretMatches, collectModelFiles, contentTypeFor, copyDirRecursive, copyExtraFileDirs, createAddonContext, createAddonDataPlaneFacility, createAddonService, createAuthenticatedFileServer, createBroker, createBrokerDeviceManagerApi, createCoreCapService, createFileDataPlaneHandler, createHubCapForwardService, createHubService, createKernelHwAccel, createLocalTransport, createParentUnownedCallHandler, createProcessService, createReadinessService, createReadinessServiceForRegistry, createScopedProcessManager, createStreamProbeBrokerService, createUdsAddonContext, createUdsEventBridge, createUdsEventBus, createUdsLogger, createUdsLoggerWithControl, createV8Reclaimer, deleteModelFromDisk, deriveAgentListenPort, describeProviderKindDrift, detectWorkspacePackagesDir, downloadBinary, downloadFile, downloadModel, emitDownForOwnedCaps, encodeFrame, ensureAddonNativePrebuilds, ensureBinary, ensureDir, ensureFfmpeg, ensureLibraryBuilt, ensureModel, ensureNativePrebuilds, ensurePython, ensureTlsCert, expandCapMethods, fetchJson, findInPath, formatLogLine, getBrokerEventBus, getCapUsageRegistry, getFfmpegDownloadUrl, getModelFilePath, getMoleculerEventStats, getOrInitReadinessRegistry, getOrInitReadinessRegistryForClient, getPidStats, getPlatformInfo, getPythonDownloadUrl, getRestartMarkerPath, getSinglePidStats, getWorkerDeviceRegistry, hasDotNode, hashClusterSecret, installManifestNativeDeps, installManifestPythonDeps, installPackageFromNpm, installPythonPackages, installPythonRequirements, ipcChildLink, ipcParentLink, isAddonDeploySource, isArrayOutputSchema, isClusterSecretMismatchError, isCollectionArrayMethod, isInfraCapability, isModelDownloaded, isSourceNewer, loadTlsCert, localEndpointPath, localProviderLink, mountNativeCapService, parseCapAction, parseRangeHeader, parseTokenizedUrl, proxyToUpstream, quarantineAddonResidue, readPendingRestart, readinessKey, registerEventBusService, resolveFilePath, resolveHwAccel, resolveNpmInvocation, runNpm, scheduleSelfRestart, scopeKey, scopesAllowDeviceCap, selectAddonResidue, serializeTypedArrays, setHubConnected, setNodeEventInterest, shouldReclaim, startHeapWatch, strandedMb, stripCamstackDeps, subscribePassthrough, udsChildLogToWorkerEntry, validateProviderRegistrations, writePendingRestart };

package/dist/kernel/addon-residue.d.ts

@@ -0,0 +1,49 @@
+/** Where residue is moved to, relative to the addon root. */
+export declare const QUARANTINE_DIRNAME = ".quarantine";
+export type ResidueReason = 
+/** The directory name carries a backup marker — `.bak…`, `.old…`, `.orig…`. */
+'backup-residue'
+/** The directory declares a package whose name is not this directory. */
+ | 'name-mismatch';
+export interface AddonDirCandidate {
+    /** Directory basename under the addon root (or under its `@scope`). */
+    readonly dirName: string;
+    /** `name` from the directory's `package.json`; null when absent/unreadable. */
+    readonly declaredName: string | null;
+}
+export interface ResidueVerdict extends AddonDirCandidate {
+    readonly reason: ResidueReason;
+}
+/**
+ * Is this directory residue? Returns the verdict, or null to keep it.
+ *
+ * A directory with no `package.json` is NOT residue on that ground alone —
+ * `models/`, a half-finished copy, a scratch dir are all absence, not a
+ * rename. Only a backup marker condemns one.
+ */
+export declare function classifyAddonDir(candidate: AddonDirCandidate): ResidueVerdict | null;
+export declare function selectAddonResidue(candidates: readonly AddonDirCandidate[]): readonly ResidueVerdict[];
+export interface QuarantinedEntry extends ResidueVerdict {
+    /** Absolute path the residue occupied under the addon root. */
+    readonly from: string;
+    /** Absolute path it now occupies under `.quarantine/`. */
+    readonly to: string;
+}
+export interface ResidueQuarantineFailure extends ResidueVerdict {
+    readonly from: string;
+    readonly error: string;
+}
+export interface ResidueQuarantineResult {
+    readonly quarantined: readonly QuarantinedEntry[];
+    /** Residue that could not be moved. Reported, never fatal. */
+    readonly failed: readonly ResidueQuarantineFailure[];
+}
+/**
+ * Move every residue directory under `addonsDir` into `addonsDir/.quarantine`.
+ *
+ * Runs at boot, BEFORE anything scans the root or seeds into it — a residue
+ * that is still present when the loader walks has already been installed.
+ * Never throws, never deletes; a move that fails is reported and left in
+ * place, which is strictly better than a half-moved package.
+ */
+export declare function quarantineAddonResidue(addonsDir: string, log: (message: string) => void): ResidueQuarantineResult;

package/dist/kernel/index.d.ts

@@ -5,6 +5,8 @@ export type { AddonInstallerConfig, InstallSource, InstalledPackage } from './ad
 export { AddonInstaller } from './addon-installer.js';
 export type { AddonInstallSource, AddonManifestEntry, AddonManifestFile } from './addon-manifest.js';
 export { AddonManifest } from './addon-manifest.js';
+export type { AddonDirCandidate, QuarantinedEntry, ResidueQuarantineResult, ResidueReason, ResidueVerdict, } from './addon-residue.js';
+export { QUARANTINE_DIRNAME, classifyAddonDir, quarantineAddonResidue, selectAddonResidue, } from './addon-residue.js';
 export { copyDirRecursive, ensureDir, stripCamstackDeps, copyExtraFileDirs, ensureLibraryBuilt, installPackageFromNpm, isSourceNewer, } from './fs-utils.js';
 export { detectWorkspacePackagesDir } from './workspace-detect.js';
 export { RESTART_MARKER_FILE, clearPendingRestart, getRestartMarkerPath, readPendingRestart, scheduleSelfRestart, writePendingRestart, } from './restart-coordinator.js';

package/dist/kernel/moleculer/device-cap-proxy.d.ts

@@ -1,8 +1,8 @@
+import { AddonApi, CapabilityDefinition, DeviceManagerApi, IDevice, IEventBus, IKernelStreamProbe, InferProvider, IScopedLogger } from '@camstack/types';
 import { deviceOpsCapability } from '@camstack/types/addon';
-import { AddonApi, CapabilityDefinition, DeviceManagerApi, IDevice, IEventBus, IKernelStreamProbe, IScopedLogger, InferProvider } from '@camstack/types';
 import { ServiceBroker } from 'moleculer';
-import { DeviceRegistry } from '../device-registry.js';
 import { CapabilityRegistry } from '../capability-registry.js';
+import { DeviceRegistry } from '../device-registry.js';
 import { LocalChildRegistry } from '../transport/local-child-registry.js';
 export { NATIVE_PROVIDER_SERVICE_INFIX } from '../transport/cap-action-name.js';
 export interface WorkerDeviceManagerOptions {