@camstack/system 1.2.85 → 1.2.87

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DiScsb8j.js");
+const require_dist = require("./dist-D4nuaPdd.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -4227,23 +4227,15 @@ var AddonInstaller = class AddonInstaller {
 	* installs from the admin UI go through `install()` instead, which
 	* defaults to npm in production.
 	*
-	* @param packages — optional custom package list (default: REQUIRED_PACKAGES)
-	* @param pins — optional `name → exact version` map. A named package is
-	*   fetched at THAT version instead of the registry's `latest`.
-	*
-	*   Preparation for [D45](../../../../docs/decisions/adr-0045.md) task 32: the
-	*   image seed answers first today, so `latest` has never been the version a
-	*   node actually got. Once the image stops baking an addon tree under `/opt`
-	*   this call IS the answer, and it has to be the version the running closure was
-	*   published with — otherwise a node fetches latest-of-everything and its
-	*   addon set depends on the minute it first booted. Passing nothing keeps
-	*   exactly today's behaviour, and `launcher.ts` passes nothing yet.
+	* There is no version argument and there is deliberately no pin: the system is
+	* addons-agnostic and `latest` is the whole contract at first boot (operator,
+	* 2026-08-13). A copy already under the addon root is never replaced either —
+	* bootstrap is seed-only, and overwriting a deployed bundle would be an
+	* un-deploy ([D90](../../../../docs/decisions/adr-0090.md)).
 	*
-	*   A pin never triggers a re-install: bootstrap stays seed-only, so a copy
-	*   already under the addon root is left alone whatever its version. Replacing
-	*   it would be an un-deploy ([D90](../../../../docs/decisions/adr-0090.md)).
+	* @param packages — optional custom package list (default: REQUIRED_PACKAGES)
 	*/
-	async ensureRequiredPackages(packages, pins) {
+	async ensureRequiredPackages(packages) {
 		const pkgList = packages ?? AddonInstaller.REQUIRED_PACKAGES;
 		ensureDir(this.addonsDir);
 		const isLocal = this.installSource !== "npm" && this.workspaceDir != null;
@@ -4271,7 +4263,7 @@ var AddonInstaller = class AddonInstaller {
 					}
 					this.logger.info(`${packageName} — not found locally, trying npm`);
 				}
-				await this.installFromNpm(packageName, pins?.[packageName]);
+				await this.installFromNpm(packageName);
 			} catch (err) {
 				const msg = require_dist.errMsg(err);
 				if (packageName === "@camstack/system") throw new Error(`Required package ${packageName} failed to install: ${msg}`, { cause: err });
@@ -9646,6 +9638,32 @@ var ConfigManager = class ConfigManager {
 		if (this.settingsStore === null) return;
 		this.settingsStore.clearAddonDevice(addonId, deviceId);
 	}
+	/**
+	* The device's persisted runtime-state blob. `{}` before the settings store
+	* is wired — the same answer as "this device has never persisted a slice",
+	* which is what every caller already handles.
+	*/
+	getDeviceRuntimeState(deviceId) {
+		if (this.settingsStore === null) return {};
+		return this.settingsStore.getDeviceRuntimeState(deviceId);
+	}
+	/**
+	* Replace the device's persisted runtime-state blob.
+	*
+	* THROWS when the store is not wired, and that is deliberate: the caller
+	* (`DeviceStateMirror.scheduleRuntimeStateDiskWrite`) catches and logs, so a
+	* persist that cannot happen leaves a line naming the device. A silent no-op
+	* here is the shape that let a whole collection read zero for months.
+	*/
+	setDeviceRuntimeState(deviceId, blob) {
+		if (this.settingsStore === null) throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
+		this.settingsStore.setDeviceRuntimeState(deviceId, blob);
+	}
+	/** Forget the device's runtime state. No-op before the store is wired. */
+	clearDeviceRuntimeState(deviceId) {
+		if (this.settingsStore === null) return;
+		this.settingsStore.clearDeviceRuntimeState(deviceId);
+	}
 	createSettingsView(addonId) {
 		const cm = this;
 		return {
@@ -9674,13 +9692,13 @@ var ConfigManager = class ConfigManager {
 				cm.clearAddonDevice(addonId, String(deviceId));
 			},
 			async readDeviceRuntimeState(deviceId) {
-				return cm.getAddonDevice("__device-state", String(deviceId));
+				return cm.getDeviceRuntimeState(String(deviceId));
 			},
 			async writeDeviceRuntimeState(deviceId, data) {
-				cm.setAddonDevice("__device-state", String(deviceId), data);
+				cm.setDeviceRuntimeState(String(deviceId), data);
 			},
 			async clearDeviceRuntimeState(deviceId) {
-				cm.clearAddonDevice("__device-state", String(deviceId));
+				cm.clearDeviceRuntimeState(String(deviceId));
 			},
 			async getSection(section) {
 				return cm.getSection(section);

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $ as objectInputDeclaresAddonId, At as emitDownForOwnedCaps, B as isArrayOutputSchema, Bt as scopeKey, Ct as ReadinessRegistry, Dt as asNumber, Et as asJsonObject$1, G as kebabToCamel, H as isObjectInput, Ht as EventCategory$1, It as parseJsonObject, K as lifecycleJobSchema, Lt as parseJsonUnknown$1, Mt as expandCapMethods, Ot as asString$1, R as extractNestedAddonId, Rt as readinessKey, V as isCollectionArrayMethod, W as isVoidInput, X as looseSchema, Y as logLevelAtMost, _t as DATAPLANE_SECRET_HEADER$1, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, ht as errMsg$1, it as scopesAllowDeviceCap, kt as createEvent, nt as procedureAuthKey, rt as scopesAllowAddon, t as ALL_CAPABILITY_DEFINITIONS, vt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, wt as ReadinessTimeoutError, y as addonSettingsCapability, yt as DEVICE_STATUS_METHOD, zt as resolveCapMount } from "./dist-DWuNENzg.mjs";
+import { $ as objectInputDeclaresAddonId, At as createEvent, B as isArrayOutputSchema, Bt as resolveCapMount, Dt as asJsonObject$1, G as kebabToCamel, H as isObjectInput, K as lifecycleJobSchema, Lt as parseJsonObject, Nt as expandCapMethods, Ot as asNumber, R as extractNestedAddonId, Rt as parseJsonUnknown$1, Tt as ReadinessTimeoutError, Ut as EventCategory$1, V as isCollectionArrayMethod, Vt as scopeKey, W as isVoidInput, X as looseSchema, Y as logLevelAtMost, at as scopesAllowDeviceCap, bt as DEVICE_STATUS_METHOD, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, gt as errMsg$1, it as scopesAllowAddon, jt as emitDownForOwnedCaps, kt as asString$1, nt as procedureAuthKey, t as ALL_CAPABILITY_DEFINITIONS, vt as DATAPLANE_SECRET_HEADER$1, wt as ReadinessRegistry, y as addonSettingsCapability, yt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, zt as readinessKey } from "./dist-CuAaqtdt.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -4219,23 +4219,15 @@ var AddonInstaller = class AddonInstaller {
 	* installs from the admin UI go through `install()` instead, which
 	* defaults to npm in production.
 	*
-	* @param packages — optional custom package list (default: REQUIRED_PACKAGES)
-	* @param pins — optional `name → exact version` map. A named package is
-	*   fetched at THAT version instead of the registry's `latest`.
-	*
-	*   Preparation for [D45](../../../../docs/decisions/adr-0045.md) task 32: the
-	*   image seed answers first today, so `latest` has never been the version a
-	*   node actually got. Once the image stops baking an addon tree under `/opt`
-	*   this call IS the answer, and it has to be the version the running closure was
-	*   published with — otherwise a node fetches latest-of-everything and its
-	*   addon set depends on the minute it first booted. Passing nothing keeps
-	*   exactly today's behaviour, and `launcher.ts` passes nothing yet.
+	* There is no version argument and there is deliberately no pin: the system is
+	* addons-agnostic and `latest` is the whole contract at first boot (operator,
+	* 2026-08-13). A copy already under the addon root is never replaced either —
+	* bootstrap is seed-only, and overwriting a deployed bundle would be an
+	* un-deploy ([D90](../../../../docs/decisions/adr-0090.md)).
 	*
-	*   A pin never triggers a re-install: bootstrap stays seed-only, so a copy
-	*   already under the addon root is left alone whatever its version. Replacing
-	*   it would be an un-deploy ([D90](../../../../docs/decisions/adr-0090.md)).
+	* @param packages — optional custom package list (default: REQUIRED_PACKAGES)
 	*/
-	async ensureRequiredPackages(packages, pins) {
+	async ensureRequiredPackages(packages) {
 		const pkgList = packages ?? AddonInstaller.REQUIRED_PACKAGES;
 		ensureDir(this.addonsDir);
 		const isLocal = this.installSource !== "npm" && this.workspaceDir != null;
@@ -4263,7 +4255,7 @@ var AddonInstaller = class AddonInstaller {
 					}
 					this.logger.info(`${packageName} — not found locally, trying npm`);
 				}
-				await this.installFromNpm(packageName, pins?.[packageName]);
+				await this.installFromNpm(packageName);
 			} catch (err) {
 				const msg = errMsg$1(err);
 				if (packageName === "@camstack/system") throw new Error(`Required package ${packageName} failed to install: ${msg}`, { cause: err });
@@ -9638,6 +9630,32 @@ var ConfigManager = class ConfigManager {
 		if (this.settingsStore === null) return;
 		this.settingsStore.clearAddonDevice(addonId, deviceId);
 	}
+	/**
+	* The device's persisted runtime-state blob. `{}` before the settings store
+	* is wired — the same answer as "this device has never persisted a slice",
+	* which is what every caller already handles.
+	*/
+	getDeviceRuntimeState(deviceId) {
+		if (this.settingsStore === null) return {};
+		return this.settingsStore.getDeviceRuntimeState(deviceId);
+	}
+	/**
+	* Replace the device's persisted runtime-state blob.
+	*
+	* THROWS when the store is not wired, and that is deliberate: the caller
+	* (`DeviceStateMirror.scheduleRuntimeStateDiskWrite`) catches and logs, so a
+	* persist that cannot happen leaves a line naming the device. A silent no-op
+	* here is the shape that let a whole collection read zero for months.
+	*/
+	setDeviceRuntimeState(deviceId, blob) {
+		if (this.settingsStore === null) throw new Error("[ConfigManager] SettingsStore not initialized -- call setSettingsStore() first");
+		this.settingsStore.setDeviceRuntimeState(deviceId, blob);
+	}
+	/** Forget the device's runtime state. No-op before the store is wired. */
+	clearDeviceRuntimeState(deviceId) {
+		if (this.settingsStore === null) return;
+		this.settingsStore.clearDeviceRuntimeState(deviceId);
+	}
 	createSettingsView(addonId) {
 		const cm = this;
 		return {
@@ -9666,13 +9684,13 @@ var ConfigManager = class ConfigManager {
 				cm.clearAddonDevice(addonId, String(deviceId));
 			},
 			async readDeviceRuntimeState(deviceId) {
-				return cm.getAddonDevice("__device-state", String(deviceId));
+				return cm.getDeviceRuntimeState(String(deviceId));
 			},
 			async writeDeviceRuntimeState(deviceId, data) {
-				cm.setAddonDevice("__device-state", String(deviceId), data);
+				cm.setDeviceRuntimeState(String(deviceId), data);
 			},
 			async clearDeviceRuntimeState(deviceId) {
-				cm.clearAddonDevice("__device-state", String(deviceId));
+				cm.clearDeviceRuntimeState(String(deviceId));
 			},
 			async getSection(section) {
 				return cm.getSection(section);

package/dist/kernel/addon-installer.d.ts

@@ -186,23 +186,15 @@ export declare class AddonInstaller {
      * installs from the admin UI go through `install()` instead, which
      * defaults to npm in production.
      *
+     * There is no version argument and there is deliberately no pin: the system is
+     * addons-agnostic and `latest` is the whole contract at first boot (operator,
+     * 2026-08-13). A copy already under the addon root is never replaced either —
+     * bootstrap is seed-only, and overwriting a deployed bundle would be an
+     * un-deploy ([D90](../../../../docs/decisions/adr-0090.md)).
+     *
      * @param packages — optional custom package list (default: REQUIRED_PACKAGES)
-     * @param pins — optional `name → exact version` map. A named package is
-     *   fetched at THAT version instead of the registry's `latest`.
-     *
-     *   Preparation for [D45](../../../../docs/decisions/adr-0045.md) task 32: the
-     *   image seed answers first today, so `latest` has never been the version a
-     *   node actually got. Once the image stops baking an addon tree under `/opt`
-     *   this call IS the answer, and it has to be the version the running closure was
-     *   published with — otherwise a node fetches latest-of-everything and its
-     *   addon set depends on the minute it first booted. Passing nothing keeps
-     *   exactly today's behaviour, and `launcher.ts` passes nothing yet.
-     *
-     *   A pin never triggers a re-install: bootstrap stays seed-only, so a copy
-     *   already under the addon root is left alone whatever its version. Replacing
-     *   it would be an un-deploy ([D90](../../../../docs/decisions/adr-0090.md)).
      */
-    ensureRequiredPackages(packages?: readonly string[], pins?: Readonly<Record<string, string>>): Promise<void>;
+    ensureRequiredPackages(packages?: readonly string[]): Promise<void>;
     /**
      * Reconcile the install manifest against the addons actually present on
      * disk: register seeded addons, correct a version that disagrees with the

package/dist/kernel/config-manager.d.ts

@@ -56,6 +56,21 @@ export interface ISettingsStore {
     getAddonDevice(addonId: string, deviceId: string): Record<string, unknown>;
     setAddonDevice(addonId: string, deviceId: string, values: Record<string, unknown>): void;
     clearAddonDevice(addonId: string, deviceId: string): void;
+    /**
+     * Per-device runtime state — the whole cap-slice map as ONE row in the
+     * `device-runtime-state` collection.
+     *
+     * These are separate from `getAddonDevice`/`setAddonDevice` because runtime
+     * state is not an addon's config: it belongs to the device, it is replaced
+     * wholesale on every flush, and it is written orders of magnitude more often.
+     * It USED to share that keyspace under a synthetic `__device-state` addonId,
+     * which cost one row (and one INSERT) per cap slice per flush and left the
+     * collection it is named for empty on every installation. The backend keeps
+     * reading the legacy prefix; see `SqliteSettingsBackend.getDeviceRuntimeState`.
+     */
+    getDeviceRuntimeState(deviceId: string): Record<string, unknown>;
+    setDeviceRuntimeState(deviceId: string, blob: Record<string, unknown>): void;
+    clearDeviceRuntimeState(deviceId: string): void;
 }
 export declare class ConfigManager {
     private readonly configPath;
@@ -138,6 +153,23 @@ export declare class ConfigManager {
      * No-op if the settings store is not yet wired.
      */
     clearAddonDevice(addonId: string, deviceId: string): void;
+    /**
+     * The device's persisted runtime-state blob. `{}` before the settings store
+     * is wired — the same answer as "this device has never persisted a slice",
+     * which is what every caller already handles.
+     */
+    getDeviceRuntimeState(deviceId: string): Record<string, unknown>;
+    /**
+     * Replace the device's persisted runtime-state blob.
+     *
+     * THROWS when the store is not wired, and that is deliberate: the caller
+     * (`DeviceStateMirror.scheduleRuntimeStateDiskWrite`) catches and logs, so a
+     * persist that cannot happen leaves a line naming the device. A silent no-op
+     * here is the shape that let a whole collection read zero for months.
+     */
+    setDeviceRuntimeState(deviceId: string, blob: Record<string, unknown>): void;
+    /** Forget the device's runtime state. No-op before the store is wired. */
+    clearDeviceRuntimeState(deviceId: string): void;
     createSettingsView(addonId: string): AddonSettingsView;
     /** Get all system-wide activation overrides. */
     getSystemActivation(): Readonly<Record<string, boolean>>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.85",
+  "version": "1.2.87",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",