camstack 1.2.213 → 1.2.214

package/dist/{launcher-6TBFW332.js → launcher-JAOMC5YY.js}

@@ -7149,9 +7149,9 @@ var require_chunk_Cek0wNdY = __commonJS({
   }
 });
 
-// ../system/dist/dist-D98erEr-.js
-var require_dist_D98erEr = __commonJS({
-  "../system/dist/dist-D98erEr-.js"(exports) {
+// ../system/dist/dist-BVrPqzF0.js
+var require_dist_BVrPqzF0 = __commonJS({
+  "../system/dist/dist-BVrPqzF0.js"(exports) {
     "use strict";
     var zod = __require("zod");
     __require("crypto");
@@ -62827,6 +62827,12 @@ var require_dist_D98erEr = __commonJS({
       instanceId: zod.z.string(),
       cameraStableId: zod.z.string(),
       nodeId: zod.z.string(),
+      /**
+      * False while the node the instance is bound to is not in the cluster
+      * topology (forgotten, renamed, re-paired). The instance is kept; the
+      * operator re-points it with `updateInstance({ targetNodeId })`.
+      */
+      nodeInCluster: zod.z.boolean(),
       profileId: zod.z.string(),
       profileLabel: zod.z.string(),
       name: zod.z.string(),
@@ -62886,6 +62892,8 @@ var require_dist_D98erEr = __commonJS({
         }),
         updateInstance: method(zod.z.object({
           instanceId: zod.z.string().min(1),
+          /** Re-point the instance to another node; the profile must exist there. */
+          targetNodeId: zod.z.string().min(1).max(256).optional(),
           name: zod.z.string().trim().min(1).max(160).optional(),
           executable: zod.z.string().max(1024).optional(),
           args: zod.z.array(zod.z.string().max(2048)).max(64).optional(),
@@ -66058,7 +66066,14 @@ var require_dist_D98erEr = __commonJS({
       col: zod.z.number().int().min(0).max(24),
       rowSpan: zod.z.number().int().min(1).max(24),
       colSpan: zod.z.number().int().min(1).max(24),
-      title: zod.z.string().min(1).max(40).optional()
+      title: zod.z.string().min(1).max(40).optional(),
+      /**
+      * How much room a divider takes: `compact` (the default) is a slim rule,
+      * `normal` a full grid row. Other frames ignore it.
+      */
+      size: zod.z.enum(["compact", "normal"]).optional(),
+      /** Keep the title in the layout but draw only the rule. */
+      hideTitle: zod.z.boolean().optional()
     });
     function rectsOverlap(a, b) {
       return a.row < b.row + b.rowSpan && b.row < a.row + a.rowSpan && a.col < b.col + b.colSpan && b.col < a.col + a.colSpan;
@@ -112533,11 +112548,11 @@ ${values.join("\n")}` : `${blockName} :`;
   }
 });
 
-// ../system/dist/device-ca-Cf7XE3OX.js
-var require_device_ca_Cf7XE3OX = __commonJS({
-  "../system/dist/device-ca-Cf7XE3OX.js"(exports) {
+// ../system/dist/device-ca-COyWgERw.js
+var require_device_ca_COyWgERw = __commonJS({
+  "../system/dist/device-ca-COyWgERw.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_x509_es = require_x509_es_WtnRNyYS();
     var node_crypto = __require("crypto");
     var SYSTEM_SECRET_OWNER = "system";
@@ -112996,7 +113011,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     function nextEpisodeId(input) {
       const { previous } = input;
@@ -114464,7 +114479,7 @@ var require_calendars_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_settle_sources = require_settle_sources_Bhsy57y();
     var zod = __require("zod");
     var CALENDAR_COLOR_PALETTE = [
@@ -114680,11 +114695,11 @@ var require_calendars = __commonJS({
   }
 });
 
-// ../system/dist/composition-sources-9_KhSHJA.js
-var require_composition_sources_9_KhSHJA = __commonJS({
-  "../system/dist/composition-sources-9_KhSHJA.js"(exports) {
+// ../system/dist/composition-sources-Ccap9mGu.js
+var require_composition_sources_Ccap9mGu = __commonJS({
+  "../system/dist/composition-sources-Ccap9mGu.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     function normalizedNativeOwner(owner) {
       const trimmed = owner?.trim();
       return trimmed ? trimmed : null;
@@ -114792,11 +114807,11 @@ var require_composition_sources_9_KhSHJA = __commonJS({
   }
 });
 
-// ../system/dist/retention-BAdXMSlp.js
-var require_retention_BAdXMSlp = __commonJS({
-  "../system/dist/retention-BAdXMSlp.js"(exports) {
+// ../system/dist/retention-Br19kWJ2.js
+var require_retention_Br19kWJ2 = __commonJS({
+  "../system/dist/retention-Br19kWJ2.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     function subjectIdOf(subject) {
       return subject.kind === "device" ? `d:${subject.deviceId}` : `n:${subject.nodeId}`;
     }
@@ -115734,9 +115749,9 @@ var require_composer_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
-    var require_composition_sources = require_composition_sources_9_KhSHJA();
-    var require_retention = require_retention_BAdXMSlp();
+    var require_dist10 = require_dist_BVrPqzF0();
+    var require_composition_sources = require_composition_sources_Ccap9mGu();
+    var require_retention = require_retention_Br19kWJ2();
     var zod = __require("zod");
     function isRecord$4(value) {
       return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -121450,7 +121465,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_formatter = require_formatter_xbxeV4GD();
     var LEVEL_RANK = {
       debug: 0,
@@ -127504,9 +127519,9 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
-    var require_composition_sources = require_composition_sources_9_KhSHJA();
+    var require_composition_sources = require_composition_sources_Ccap9mGu();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
     var zod = __require("zod");
@@ -142956,7 +142971,7 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var require_prefix_walk = require_prefix_walk_Dv6MLZlM();
@@ -152224,7 +152239,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_formatter = require_formatter_xbxeV4GD();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -152358,7 +152373,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
     var node_path = __require("path");
@@ -152877,10 +152892,10 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_ms$1 = require_ms_LB3giGoU();
-    var require_device_ca = require_device_ca_Cf7XE3OX();
+    var require_device_ca = require_device_ca_COyWgERw();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var zod = __require("zod");
     var node_crypto = __require("crypto");
@@ -163275,7 +163290,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_log_read_filter = require_log_read_filter_Bi066jwU();
     var zod = __require("zod");
     function sanitizeLabelName(raw) {
@@ -164236,7 +164251,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var node_fs_promises = __require("fs/promises");
     var node_util = __require("util");
     var node_os = __require("os");
@@ -166856,8 +166871,8 @@ var require_device_history_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
-    var require_retention = require_retention_BAdXMSlp();
+    var require_dist10 = require_dist_BVrPqzF0();
+    var require_retention = require_retention_Br19kWJ2();
     var FLUSH_INTERVAL_MS = 1e4;
     var MAX_BUFFER_AGE_MS = 6e4;
     var MAX_QUEUE_POINTS = 1e5;
@@ -169578,7 +169593,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -170688,12 +170703,12 @@ var require_lib = __commonJS({
   }
 });
 
-// ../system/dist/wal-maintenance-yGa7IMrk.js
-var require_wal_maintenance_yGa7IMrk = __commonJS({
-  "../system/dist/wal-maintenance-yGa7IMrk.js"(exports) {
+// ../system/dist/wal-maintenance-Cfc56oIs.js
+var require_wal_maintenance_Cfc56oIs = __commonJS({
+  "../system/dist/wal-maintenance-Cfc56oIs.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_prefix_range = require_prefix_range_D_KueXbQ();
     var node_crypto = __require("crypto");
     var node_module = __require("module");
@@ -174931,9 +174946,9 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_retired_settings_keys = require_retired_settings_keys_DorakcxV();
-    var require_wal_maintenance = require_wal_maintenance_yGa7IMrk();
+    var require_wal_maintenance = require_wal_maintenance_Cfc56oIs();
     var require_sqlite_snapshot_protocol = require_sqlite_snapshot_protocol_B9OndqZv();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_d2z2qPqx();
     var node_fs_promises = __require("fs/promises");
@@ -176903,7 +176918,7 @@ var require_sqlite_storage = __commonJS({
     });
     require_chunk_Cek0wNdY();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_yGa7IMrk();
+    var require_wal_maintenance = require_wal_maintenance_Cfc56oIs();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var ConfigStore = class {
       db;
@@ -176987,7 +177002,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var zod = __require("zod");
     var node_crypto = __require("crypto");
@@ -181574,12 +181589,12 @@ var require_storage_orchestrator = __commonJS({
   }
 });
 
-// ../system/dist/agent-https-D_yo1pzU.js
-var require_agent_https_D_yo1pzU = __commonJS({
-  "../system/dist/agent-https-D_yo1pzU.js"(exports) {
+// ../system/dist/agent-https-BrFzCJ3T.js
+var require_agent_https_BrFzCJ3T = __commonJS({
+  "../system/dist/agent-https-BrFzCJ3T.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_x509_es = require_x509_es_WtnRNyYS();
     var zod = __require("zod");
     var node_crypto = __require("crypto");
@@ -182634,11 +182649,11 @@ var require_agent_https_D_yo1pzU = __commonJS({
   }
 });
 
-// ../system/dist/constants-D-InfVew.js
-var require_constants_D_InfVew = __commonJS({
-  "../system/dist/constants-D-InfVew.js"(exports) {
+// ../system/dist/constants-BA4NvR5U.js
+var require_constants_BA4NvR5U = __commonJS({
+  "../system/dist/constants-BA4NvR5U.js"(exports) {
     "use strict";
-    var MESH_CA_KEY_REF = require_dist_D98erEr().buildSecretRef({
+    var MESH_CA_KEY_REF = require_dist_BVrPqzF0().buildSecretRef({
       owner: "system",
       scope: { kind: "global" },
       fieldPath: "meshCaKey"
@@ -199735,11 +199750,11 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_safe_buffer$1 = require_safe_buffer_D3aoa_7X();
     var require_x509_es = require_x509_es_WtnRNyYS();
-    var require_agent_https = require_agent_https_D_yo1pzU();
-    var require_constants$8 = require_constants_D_InfVew();
+    var require_agent_https = require_agent_https_BrFzCJ3T();
+    var require_constants$8 = require_constants_BA4NvR5U();
     var require_src$1 = require_src_CnAqG6EF();
     var zod = __require("zod");
     var node_crypto = __require("crypto");
@@ -281015,7 +281030,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_formatter = require_formatter_xbxeV4GD();
     var require_log_file_read_protocol = require_log_file_read_protocol_D0WcLbIV();
     var node_path = __require("path");
@@ -288863,14 +288878,14 @@ var require_lib_C3U1yluo = __commonJS({
   }
 });
 
-// ../system/dist/hub-mdns-ciao-D9zaAZDx.js
-var require_hub_mdns_ciao_D9zaAZDx = __commonJS({
-  "../system/dist/hub-mdns-ciao-D9zaAZDx.js"(exports) {
+// ../system/dist/hub-mdns-ciao-UNHb4yo0.js
+var require_hub_mdns_ciao_UNHb4yo0 = __commonJS({
+  "../system/dist/hub-mdns-ciao-UNHb4yo0.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var require_x509_es = require_x509_es_WtnRNyYS();
-    var require_agent_https = require_agent_https_D_yo1pzU();
+    var require_agent_https = require_agent_https_BrFzCJ3T();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var node_fs_promises = __require("fs/promises");
@@ -289882,12 +289897,12 @@ var require_platform_key_source_Di7HrlGR = __commonJS({
   }
 });
 
-// ../system/dist/restore-archive-TQEVsdCY.js
-var require_restore_archive_TQEVsdCY = __commonJS({
-  "../system/dist/restore-archive-TQEVsdCY.js"(exports) {
+// ../system/dist/restore-archive-BS86n89m.js
+var require_restore_archive_BS86n89m = __commonJS({
+  "../system/dist/restore-archive-BS86n89m.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
+    var require_dist10 = require_dist_BVrPqzF0();
     var zod = __require("zod");
     var node_crypto = __require("crypto");
     var buffer = __require("buffer");
@@ -301184,8 +301199,8 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_D98erEr();
-    var require_device_ca = require_device_ca_Cf7XE3OX();
+    var require_dist10 = require_dist_BVrPqzF0();
+    var require_device_ca = require_device_ca_COyWgERw();
     var require_read_all_rows$1 = require_read_all_rows_CVoO1ONM();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
@@ -301210,21 +301225,21 @@ var require_dist3 = __commonJS({
     var require_builtins_native_metrics_native_metrics_addon = require_native_metrics_addon();
     var require_builtins_device_history_device_history_addon = require_device_history_addon();
     var require_builtins_sqlite_storage_filesystem_storage_addon = require_filesystem_storage_addon();
-    var require_wal_maintenance = require_wal_maintenance_yGa7IMrk();
+    var require_wal_maintenance = require_wal_maintenance_Cfc56oIs();
     var require_builtins_sqlite_storage_sqlite_settings_addon = require_sqlite_settings_addon();
     var require_builtins_sqlite_storage_index = require_sqlite_storage();
     var require_builtins_storage_orchestrator_storage_orchestrator_addon = require_storage_orchestrator_addon();
     require_storage_orchestrator();
-    var require_agent_https = require_agent_https_D_yo1pzU();
-    var require_constants15 = require_constants_D_InfVew();
+    var require_agent_https = require_agent_https_BrFzCJ3T();
+    var require_constants15 = require_constants_BA4NvR5U();
     var require_builtins_system_config_system_config_addon = require_system_config_addon();
     require_system_config();
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_custom_action_registry = require_custom_action_registry_JuMHGKEc();
-    var require_hub_mdns_ciao = require_hub_mdns_ciao_D9zaAZDx();
+    var require_hub_mdns_ciao = require_hub_mdns_ciao_UNHb4yo0();
     var require_platform_key_source = require_platform_key_source_Di7HrlGR();
     var require_resource_monitor = require_resource_monitor_mio9dSCT();
-    var require_restore_archive = require_restore_archive_TQEVsdCY();
+    var require_restore_archive = require_restore_archive_BS86n89m();
     var require_coral_accelerators = require_coral_accelerators_BSVsBVzt();
     var zod = __require("zod");
     var node_crypto = __require("crypto");
@@ -305690,7 +305705,8 @@ var require_dist3 = __commonJS({
       isHub: zod.z.boolean(),
       localIps: zod.z.array(zod.z.string()).readonly(),
       addonIds: zod.z.array(zod.z.string()).readonly(),
-      packages: zod.z.array(NodePackageEntrySchema).readonly().optional()
+      packages: zod.z.array(NodePackageEntrySchema).readonly().optional(),
+      tombstones: zod.z.array(zod.z.string()).readonly().optional()
     });
     var ClusterNodeHistoryBodySchema = zod.z.object({ descriptor: _clusterNodeDescriptorBody });
     var clusterNodeHistoryKindSpec = {
@@ -313384,7 +313400,8 @@ var require_dist3 = __commonJS({
       "auth.tokenExpiry",
       "auth.accessTokenExpiry",
       "auth.trustedProxies",
-      "auth.trustedNetworks"
+      "auth.trustedNetworks",
+      "addons.convergence.dryRun"
     ];
     function isPreloadedSystemKey(key) {
       if (PRELOADED_SYSTEM_KEYS.includes(key)) return true;
@@ -379182,6 +379199,12 @@ ${eventLeaves.map(({ leaf, path }) => emitLeaf(leaf, path)).join("\n\n")}
       instanceId: zod.z.string(),
       cameraStableId: zod.z.string(),
       nodeId: zod.z.string(),
+      /**
+      * False while the node the instance is bound to is not in the cluster
+      * topology (forgotten, renamed, re-paired). The instance is kept; the
+      * operator re-points it with `updateInstance({ targetNodeId })`.
+      */
+      nodeInCluster: zod.z.boolean(),
       profileId: zod.z.string(),
       profileLabel: zod.z.string(),
       name: zod.z.string(),
@@ -379241,6 +379264,8 @@ ${eventLeaves.map(({ leaf, path }) => emitLeaf(leaf, path)).join("\n\n")}
         }),
         updateInstance: require_sleep.method(zod.z.object({
           instanceId: zod.z.string().min(1),
+          /** Re-point the instance to another node; the profile must exist there. */
+          targetNodeId: zod.z.string().min(1).max(256).optional(),
           name: zod.z.string().trim().min(1).max(160).optional(),
           executable: zod.z.string().max(1024).optional(),
           args: zod.z.array(zod.z.string().max(2048)).max(64).optional(),
@@ -382515,7 +382540,14 @@ ${eventLeaves.map(({ leaf, path }) => emitLeaf(leaf, path)).join("\n\n")}
       col: zod.z.number().int().min(0).max(24),
       rowSpan: zod.z.number().int().min(1).max(24),
       colSpan: zod.z.number().int().min(1).max(24),
-      title: zod.z.string().min(1).max(40).optional()
+      title: zod.z.string().min(1).max(40).optional(),
+      /**
+      * How much room a divider takes: `compact` (the default) is a slim rule,
+      * `normal` a full grid row. Other frames ignore it.
+      */
+      size: zod.z.enum(["compact", "normal"]).optional(),
+      /** Keep the title in the layout but draw only the rule. */
+      hideTitle: zod.z.boolean().optional()
     });
     function rectsOverlap(a, b) {
       return a.row < b.row + b.rowSpan && b.row < a.row + a.rowSpan && a.col < b.col + b.colSpan && b.col < a.col + a.colSpan;
@@ -438029,6 +438061,69 @@ var require_agent_mesh_gate = __commonJS({
   }
 });
 
+// ../../server/backend/dist/agent/agent-shutdown.js
+var require_agent_shutdown = __commonJS({
+  "../../server/backend/dist/agent/agent-shutdown.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.SHUTDOWN_DEADLINE_MS = exports.SHUTDOWN_STEP_TIMEOUT_MS = void 0;
+    exports.createAgentShutdown = createAgentShutdown;
+    exports.SHUTDOWN_STEP_TIMEOUT_MS = 5e3;
+    exports.SHUTDOWN_DEADLINE_MS = 15e3;
+    function errMessage(err) {
+      return err instanceof Error ? err.message : String(err);
+    }
+    async function runBounded(step, timeoutMs) {
+      let timer;
+      const timeout = new Promise((resolve) => {
+        timer = setTimeout(() => resolve("timed-out"), timeoutMs);
+      });
+      try {
+        return await Promise.race([step.run().then(() => "done"), timeout]);
+      } finally {
+        clearTimeout(timer);
+      }
+    }
+    function createAgentShutdown(deps) {
+      const stepTimeoutMs = deps.stepTimeoutMs ?? exports.SHUTDOWN_STEP_TIMEOUT_MS;
+      const deadlineMs = deps.deadlineMs ?? exports.SHUTDOWN_DEADLINE_MS;
+      const { logger } = deps;
+      let startedAt = null;
+      return async (reason) => {
+        if (startedAt !== null) {
+          logger.error(`shutdown already in progress for ${Date.now() - startedAt}ms; ${reason} forces exit`);
+          deps.exit(1);
+          return;
+        }
+        const began = Date.now();
+        startedAt = began;
+        logger.info(`shutdown started by ${reason}`);
+        const deadline = setTimeout(() => {
+          logger.error(`shutdown deadline of ${deadlineMs}ms exceeded (started by ${reason}); exiting 1`);
+          deps.exit(1);
+        }, deadlineMs);
+        for (const step of deps.steps) {
+          const stepStart = Date.now();
+          try {
+            const outcome = await runBounded(step, stepTimeoutMs);
+            const took = `${Date.now() - stepStart}ms`;
+            if (outcome === "timed-out") {
+              logger.warn(`shutdown step ${step.name} timed out after ${took}; continuing`);
+            } else {
+              logger.info(`shutdown step ${step.name} done in ${took}`);
+            }
+          } catch (err) {
+            logger.warn(`shutdown step ${step.name} failed after ${Date.now() - stepStart}ms: ${errMessage(err)}`);
+          }
+        }
+        clearTimeout(deadline);
+        logger.info(`shutdown finished in ${Date.now() - began}ms (started by ${reason})`);
+        deps.exit(0);
+      };
+    }
+  }
+});
+
 // ../../server/backend/dist/agent/agent-pairing-local.js
 var require_agent_pairing_local = __commonJS({
   "../../server/backend/dist/agent/agent-pairing-local.js"(exports) {
@@ -574919,6 +575014,7 @@ var require_main2 = __commonJS({
     var agent_addon_updates_js_1 = require_agent_addon_updates();
     var agent_hub_registration_js_1 = require_agent_hub_registration();
     var agent_mesh_gate_js_1 = require_agent_mesh_gate();
+    var agent_shutdown_js_1 = require_agent_shutdown();
     var agent_pairing_local_js_1 = require_agent_pairing_local();
     var agent_membership_watch_js_1 = require_agent_membership_watch();
     var agent_pairing_store_js_1 = require_agent_pairing_store();
@@ -575647,26 +575743,41 @@ var require_main2 = __commonJS({
       }).then((listener) => {
         agentHttpListener = listener;
       });
-      const shutdown = async () => {
-        console.log("[Agent] Shutting down...");
-        registerAbortController.abort();
-        udsEventBridgeDispose?.();
-        udsEventBridgeDispose = null;
-        for (const [, entry] of loadedAddons) {
-          if (entry.addon?.shutdown) {
-            try {
-              await entry.addon.shutdown();
-            } catch {
+      const shutdown = (0, agent_shutdown_js_1.createAgentShutdown)({
+        logger: consoleLogger,
+        exit: (code) => process.exit(code),
+        steps: [
+          {
+            name: "abort-registration",
+            run: async () => {
+              registerAbortController.abort();
+              udsEventBridgeDispose?.();
+              udsEventBridgeDispose = null;
             }
-          }
-        }
-        await agentMdns.stop().catch(() => void 0);
-        await agentHttpListener?.close().catch(() => void 0);
-        await broker.stop();
-        process.exit(0);
-      };
-      process.on("SIGTERM", shutdown);
-      process.on("SIGINT", shutdown);
+          },
+          {
+            name: "addons",
+            // Concurrent: one slow addon must not eat the budget of the others.
+            run: async () => {
+              const stops = [];
+              for (const [addonId, entry] of loadedAddons) {
+                if (!entry.addon?.shutdown)
+                  continue;
+                const began = Date.now();
+                stops.push(Promise.resolve().then(() => entry.addon?.shutdown?.()).then(() => void 0).catch((err) => consoleLogger.warn(`addon ${addonId} shutdown failed: ${(0, types_2.errMsg)(err)}`)).finally(() => consoleLogger.info(`addon ${addonId} shutdown took ${Date.now() - began}ms`)));
+              }
+              await Promise.all(stops);
+            }
+          },
+          // Withdraw the mDNS advertisement, then stop accepting new HTTP/HTTPS connections before
+          // the broker goes away.
+          { name: "mdns", run: () => agentMdns.stop() },
+          { name: "http-listener", run: async () => void await agentHttpListener?.close() },
+          { name: "broker", run: () => broker.stop() }
+        ]
+      });
+      process.on("SIGTERM", () => void shutdown("SIGTERM"));
+      process.on("SIGINT", () => void shutdown("SIGINT"));
       if (!addonsBooted) {
         console.log(`[Agent] Node "${config.nodeId}" is unpaired - serving pairing only; addons boot after pairing`);
         return;
@@ -592486,6 +592597,14 @@ var require_addon_package_service = __commonJS({
           fs.rmSync(destDir, { recursive: true, force: true });
         }
       }
+      /**
+       * The version the registry serves as `latest` for a package — what the hub
+       * follows for an agent-only package it tracks without installing (D982).
+       * Throws when the registry cannot answer.
+       */
+      async resolveRegistryVersion(name) {
+        return resolveNpmVersion(name, "latest", process.env["CAMSTACK_NPM_REGISTRY"]);
+      }
       /**
        * Resolve `name@version` and `npm pack` it into a tarball buffer
        * WITHOUT installing. Used to push a package update to an agent: the
@@ -598291,7 +598410,7 @@ var require_addon_upload = __commonJS({
         bytes: staged.bytes
       };
     }
-    async function registerAddonUploadRoute(fastify, addonBridge, authService, moleculer, addonRegistry, addonPackageService, logger, resolveClusterBaseUrl, deliveryLedger) {
+    async function registerAddonUploadRoute(fastify, addonBridge, authService, moleculer, addonRegistry, addonPackageService, logger, resolveClusterBaseUrl, deliveryLedger, convergence) {
       await fastify.register(Promise.resolve().then(() => __importStar(require_multipart2())), {
         limits: { fileSize: MAX_UPLOAD_BYTES }
       });
@@ -598322,10 +598441,10 @@ var require_addon_upload = __commonJS({
           });
         }
         if (!nodeId || nodeId === "hub") {
-          return installToHub(reply, addonBridge, addonRegistry, addonPackageService, moleculer, logger, data.filename, buffer, resolveClusterBaseUrl, deliveryLedger);
+          return installToHub(reply, addonBridge, addonRegistry, addonPackageService, moleculer, logger, data.filename, buffer, resolveClusterBaseUrl, deliveryLedger, convergence);
         }
         const agentAddonId = addonIdHint ?? manifest.name;
-        return deployToAgent(reply, moleculer, logger, nodeId, agentAddonId, buffer, resolveClusterBaseUrl, deliveryLedger);
+        return deployToAgent(reply, moleculer, logger, nodeId, agentAddonId, buffer, resolveClusterBaseUrl, deliveryLedger, convergence);
       });
     }
     function packageHasAgentDeployable(addonsDir, packageName) {
@@ -598378,7 +598497,7 @@ var require_addon_upload = __commonJS({
       }
       return results;
     }
-    async function installToHub(reply, addonBridge, addonRegistry, addonPackageService, moleculer, logger, filename, buffer, resolveClusterBaseUrl, deliveryLedger) {
+    async function installToHub(reply, addonBridge, addonRegistry, addonPackageService, moleculer, logger, filename, buffer, resolveClusterBaseUrl, deliveryLedger, convergence) {
       const tmpDir = path.join(os.tmpdir(), `camstack-addon-upload-${Date.now()}`);
       fs.mkdirSync(tmpDir, { recursive: true });
       const tgzPath = path.join(tmpDir, filename);
@@ -598453,7 +598572,10 @@ var require_addon_upload = __commonJS({
             logger.info("propagation done", {
               meta: { packageName: result.name, agents: agentResults }
             });
+            void convergence?.requestConvergence("hub-change");
           });
+        } else {
+          void convergence?.requestConvergence("hub-change");
         }
         return reply.send({
           success: true,
@@ -598469,7 +598591,7 @@ var require_addon_upload = __commonJS({
         fs.rmSync(tmpDir, { recursive: true, force: true });
       }
     }
-    async function deployToAgent(reply, moleculer, logger, nodeId, addonId, buffer, resolveClusterBaseUrl, deliveryLedger) {
+    async function deployToAgent(reply, moleculer, logger, nodeId, addonId, buffer, resolveClusterBaseUrl, deliveryLedger, convergence) {
       const hubBaseUrl = await resolveBaseUrlOrReason(resolveClusterBaseUrl);
       if (!hubBaseUrl.ok) {
         logger.error("agent deploy: no hub address the agent can reach \u2014 nothing delivered", {
@@ -598488,6 +598610,7 @@ var require_addon_upload = __commonJS({
       if (!result.success) {
         return reply.status(502).send({ error: `Agent deploy failed: ${result.error ?? "unknown"}` });
       }
+      await convergence?.noteExplicitDelivery(nodeId, addonId);
       return reply.send({
         success: true,
         target: nodeId,
@@ -599374,6 +599497,96 @@ var require_addon_uninstall = __commonJS({
   }
 });
 
+// ../../server/backend/dist/core/agent/agent-desired-set.js
+var require_agent_desired_set = __commonJS({
+  "../../server/backend/dist/core/agent/agent-desired-set.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.AGENT_TRACKED_PACKAGES = void 0;
+    exports.isAgentTrackedPackage = isAgentTrackedPackage;
+    exports.computeDesiredSet = computeDesiredSet;
+    exports.diffNodeAgainstDesired = diffNodeAgainstDesired;
+    var system_1 = require_dist3();
+    exports.AGENT_TRACKED_PACKAGES = ["@camstack/addon-agent-ui"];
+    function isAgentTrackedPackage(name) {
+      return exports.AGENT_TRACKED_PACKAGES.includes(name);
+    }
+    function computeDesiredSet(input) {
+      const desired = /* @__PURE__ */ new Map();
+      const hubOnly = /* @__PURE__ */ new Set();
+      const excluded = [];
+      for (const [name, fact] of input.hubPackages) {
+        if (input.bootstrap.has(name))
+          continue;
+        if (fact.placements.length > 0 && fact.placements.every((p) => p === "hub-only")) {
+          hubOnly.add(name);
+          excluded.push({ name, reason: "hub-only placement" });
+          continue;
+        }
+        if (fact.placements.includes("hub-only")) {
+          excluded.push({ name, reason: "mixes a hub-only addon" });
+          continue;
+        }
+        if (!fact.placements.includes("any-node")) {
+          excluded.push({ name, reason: "placement does not allow any node" });
+          continue;
+        }
+        if (input.tombstones.has(name)) {
+          excluded.push({ name, reason: "tombstoned" });
+          continue;
+        }
+        if (fact.version === null) {
+          excluded.push({ name, reason: "hub version unknown" });
+          continue;
+        }
+        desired.set(name, { name, version: fact.version, origin: "hub-any-node" });
+      }
+      for (const [name, version] of input.trackedForAgents) {
+        if (input.bootstrap.has(name))
+          continue;
+        if (input.tombstones.has(name)) {
+          excluded.push({ name, reason: "tombstoned" });
+          continue;
+        }
+        desired.set(name, { name, version, origin: "agent-tracked" });
+      }
+      return { desired, hubOnly, tombstones: input.tombstones, excluded };
+    }
+    function diffNodeAgainstDesired(input) {
+      const observed = new Map(input.observed.map((p) => [p.name, p.version]));
+      const install = [];
+      const update = [];
+      const remove = [];
+      const retired = [];
+      for (const entry of input.desired.desired.values()) {
+        const present = observed.has(entry.name);
+        const from = present ? observed.get(entry.name) ?? null : null;
+        const decision = (0, system_1.decideAddonVersionMove)(from, entry.version, system_1.ADDON_VERSION_REASON_HUB);
+        if (!decision.move)
+          continue;
+        if (input.retired.has(entry.name)) {
+          retired.push(entry.name);
+          continue;
+        }
+        const target = { ...entry, from };
+        if (present)
+          update.push(target);
+        else
+          install.push(target);
+      }
+      for (const name of observed.keys()) {
+        if (input.bootstrap.has(name))
+          continue;
+        if (input.desired.tombstones.has(name))
+          remove.push({ name, reason: "tombstoned" });
+        else if (input.desired.hubOnly.has(name))
+          remove.push({ name, reason: "hub-only placement" });
+      }
+      return { install, update, remove, retired };
+    }
+  }
+});
+
 // ../../server/backend/dist/core/updates/agent-installed-packages.js
 var require_agent_installed_packages = __commonJS({
   "../../server/backend/dist/core/updates/agent-installed-packages.js"(exports) {
@@ -601174,6 +601387,7 @@ var require_cap_providers = __commonJS({
     var integration_id_backfill_1 = require_integration_id_backfill();
     var addon_package_service_js_1 = require_addon_package_service();
     var addon_uninstall_js_1 = require_addon_uninstall();
+    var agent_desired_set_1 = require_agent_desired_set();
     var lifecycle_runner_singleton_js_1 = require_lifecycle_runner_singleton();
     var agent_installed_packages_js_1 = require_agent_installed_packages();
     var http_request_census_singleton_js_1 = require_http_request_census_singleton();
@@ -602275,6 +602489,13 @@ var require_cap_providers = __commonJS({
       const broker = (0, system_1.asBrokerLike)(moleculer.broker);
       const uninstallSeam = buildUninstallSeam(ar, ps, broker, agentRegistry);
       const frameworkAllowSet = /* @__PURE__ */ new Set([addon_package_service_js_1.SYSTEM_PACKAGE]);
+      const requestHubChangeConvergence = () => {
+        void agentRegistry?.requestConvergence("hub-change");
+      };
+      const deployPackedToAgent = async (agentNodeId, packageName, bundle) => {
+        await broker.call("$agent.deploy", { addonId: packageName, bundle }, { nodeID: agentNodeId, timeout: 3e5 });
+        await broker.call("$agent.reload", {}, { nodeID: agentNodeId, timeout: 3e5 });
+      };
       const lifecycleRunner = (0, lifecycle_runner_singleton_js_1.getLifecycleRunner)();
       const lifecycleCreatedBy = ctx.user?.username ?? ctx.user?.id ?? "system";
       return {
@@ -602325,13 +602546,23 @@ var require_cap_providers = __commonJS({
           level: input.level
         }),
         listPackages: async () => ps.listInstalled(),
-        installPackage: async (input) => ps.installAndLoad(input.packageName, input.version),
-        installFromWorkspace: async (input) => ps.installFromWorkspaceAndLoad(input.packageName),
+        installPackage: async (input) => {
+          const result = await ps.installAndLoad(input.packageName, input.version);
+          requestHubChangeConvergence();
+          return result;
+        },
+        installFromWorkspace: async (input) => {
+          const result = await ps.installFromWorkspaceAndLoad(input.packageName);
+          requestHubChangeConvergence();
+          return result;
+        },
         isWorkspaceAvailable: async () => ps.isWorkspaceAvailable(),
         listWorkspacePackages: async () => ps.listWorkspacePackages(),
         uninstallPackage: async (input) => {
           try {
-            return await (0, addon_uninstall_js_1.uninstallPackage)(uninstallSeam, input);
+            const result = await (0, addon_uninstall_js_1.uninstallPackage)(uninstallSeam, input);
+            requestHubChangeConvergence();
+            return result;
           } catch (err) {
             if (err instanceof addon_uninstall_js_1.PackageProtectedError) {
               throw new server_1.TRPCError({ code: "FORBIDDEN", message: err.message });
@@ -602356,6 +602587,28 @@ var require_cap_providers = __commonJS({
         },
         updatePackage: async (input) => {
           const nodeId = input.nodeId;
+          if ((0, agent_desired_set_1.isAgentTrackedPackage)(input.name) && (nodeId === void 0 || isHubNode(nodeId))) {
+            if (agentRegistry === void 0) {
+              return {
+                success: false,
+                error: `${input.name} is delivered by the agent registry, which is not wired`
+              };
+            }
+            const packed2 = await ps.packPackage(input.name, input.version);
+            const targets = agentRegistry.onlineAgentIds();
+            const failures = [];
+            for (const target of targets) {
+              try {
+                await deployPackedToAgent(target, input.name, packed2.buffer);
+                await agentRegistry.noteExplicitDelivery(target, input.name);
+              } catch (err) {
+                failures.push(`${target}: ${err instanceof Error ? err.message : String(err)}`);
+              }
+            }
+            if (failures.length > 0)
+              return { success: false, error: failures.join("; ") };
+            return { success: true, name: input.name, version: packed2.version };
+          }
           if (nodeId === void 0 || isHubNode(nodeId)) {
             const version = input.version ?? "latest";
             const { jobId } = await lifecycleRunner.startJob({
@@ -602366,13 +602619,14 @@ var require_cap_providers = __commonJS({
             const job = lifecycleRunner.getJob(jobId);
             const task = job?.tasks[0];
             if (task?.phase === "done") {
+              requestHubChangeConvergence();
               return { success: true, name: input.name, version, jobId };
             }
             return { success: false, error: task?.error ?? "update failed", jobId };
           }
           const packed = await ps.packPackage(input.name, input.version);
-          await broker.call("$agent.deploy", { addonId: input.name, bundle: packed.buffer }, { nodeID: nodeId, timeout: 3e5 });
-          await broker.call("$agent.reload", {}, { nodeID: nodeId, timeout: 3e5 });
+          await deployPackedToAgent(nodeId, input.name, packed.buffer);
+          await agentRegistry?.noteExplicitDelivery(nodeId, input.name);
           return { success: true, name: input.name, version: packed.version, nodeId };
         },
         rollbackPackage: async (input) => ps.rollbackPackage(input.name),
@@ -618889,92 +619143,18 @@ var require_agent_addon_backfill = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.BackfillAttemptTracker = exports.MAX_BACKFILL_ATTEMPTS = void 0;
     exports.triggerMayDeliver = triggerMayDeliver;
-    exports.freshNodeSkipReason = freshNodeSkipReason;
-    exports.computeBackfillPlan = computeBackfillPlan;
     exports.confirmBackfillPlan = confirmBackfillPlan;
     exports.executeBackfill = executeBackfill;
-    var system_1 = require_dist3();
     var DELIVERING_TRIGGERS = /* @__PURE__ */ new Set([
       "node-registration",
       "hub-boot",
-      "operator-repair"
+      "operator-repair",
+      "periodic",
+      "hub-change"
     ]);
     function triggerMayDeliver(trigger) {
       return DELIVERING_TRIGGERS.has(trigger);
     }
-    function freshNodeSkipReason(placements) {
-      if (placements.includes("hub-only"))
-        return "hub-only placement";
-      if (!placements.includes("any-node"))
-        return "placement does not allow any node";
-      return null;
-    }
-    function computeBackfillPlan(input) {
-      if (input.freshNode !== void 0 && input.recorded.length === 0) {
-        return computeFreshNodePlan(input, input.freshNode);
-      }
-      const liveByName = new Map(input.live.map((p) => [p.name, p.version]));
-      const targets = [];
-      const retired = [];
-      const notOnHub = [];
-      for (const entry of input.recorded) {
-        if (input.bootstrap.has(entry.name))
-          continue;
-        if (input.undeployed.has(entry.name))
-          continue;
-        const hubVersion = input.hubVersions.get(entry.name);
-        const present = liveByName.has(entry.name);
-        const liveVersion = present ? liveByName.get(entry.name) ?? null : null;
-        if (hubVersion === void 0) {
-          if (!present && input.retired.has(entry.name))
-            retired.push(entry.name);
-          else if (!present)
-            notOnHub.push(entry.name);
-          continue;
-        }
-        const decision = (0, system_1.decideAddonVersionMove)(present ? liveVersion : null, hubVersion, system_1.ADDON_VERSION_REASON_HUB);
-        if (!decision.move)
-          continue;
-        if (input.retired.has(entry.name)) {
-          retired.push(entry.name);
-          continue;
-        }
-        targets.push({ name: entry.name, version: hubVersion, versionSource: "hub-installed" });
-      }
-      return { targets, retired, notOnHub, liveCount: liveByName.size, skipped: [] };
-    }
-    function computeFreshNodePlan(input, fresh) {
-      const liveByName = new Map(input.live.map((p) => [p.name, p.version]));
-      const targets = [];
-      const retired = [];
-      const skipped = [];
-      for (const [name, placements] of fresh.hubPackagePlacements) {
-        if (input.bootstrap.has(name))
-          continue;
-        if (input.undeployed.has(name))
-          continue;
-        const reason = freshNodeSkipReason(placements);
-        if (reason !== null) {
-          skipped.push({ name, reason });
-          continue;
-        }
-        const hubVersion = input.hubVersions.get(name);
-        if (hubVersion === void 0) {
-          skipped.push({ name, reason: "hub version unknown" });
-          continue;
-        }
-        const present = liveByName.has(name);
-        const decision = (0, system_1.decideAddonVersionMove)(present ? liveByName.get(name) ?? null : null, hubVersion, system_1.ADDON_VERSION_REASON_HUB);
-        if (!decision.move)
-          continue;
-        if (input.retired.has(name)) {
-          retired.push(name);
-          continue;
-        }
-        targets.push({ name, version: hubVersion, versionSource: "hub-installed" });
-      }
-      return { targets, retired, notOnHub: [], liveCount: liveByName.size, skipped };
-    }
     function confirmBackfillPlan(plan, secondRead) {
       const seen = new Map(secondRead.map((p) => [p.name, p.version]));
       const targets = [];
@@ -619061,13 +619241,18 @@ var require_agent_addon_backfill = __commonJS({
         } catch (err) {
           const error = err instanceof Error ? err.message : String(err);
           const { retired } = tracker.recordFailure(nodeId, target.name, target.version, error);
-          failed.push({ name: target.name, version: target.version, error, retired });
+          failed.push({
+            name: target.name,
+            version: target.version,
+            error,
+            retired
+          });
         }
       }
       if (delivered.length > 0) {
         await seam.reload(nodeId);
       }
-      return { delivered, failed, skipped: plan.retired, notOnHub: plan.notOnHub };
+      return { delivered, failed, skipped: plan.retired };
     }
   }
 });
@@ -619311,7 +619496,7 @@ var require_agent_registry_service = __commonJS({
       };
     })();
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.AgentRegistryService = exports.AGENT_BACKFILL_RPC_TIMEOUT_MS = exports.FORGOTTEN_NODE_REVOCATION_REASON = void 0;
+    exports.AgentRegistryService = exports.ADDON_CONVERGENCE_DRY_RUN_KEY = exports.ADDON_CONVERGENCE_INTERVAL_MS = exports.AGENT_BACKFILL_RPC_TIMEOUT_MS = exports.FORGOTTEN_NODE_REVOCATION_REASON = void 0;
     exports.toNodeLiveness = toNodeLiveness;
     exports.toDescriptor = toDescriptor;
     var node_crypto_1 = __require("crypto");
@@ -619319,6 +619504,7 @@ var require_agent_registry_service = __commonJS({
     var system_1 = require_dist3();
     var types_1 = require_dist4();
     var agent_addon_backfill_1 = require_agent_addon_backfill();
+    var agent_desired_set_1 = require_agent_desired_set();
     var agent_delivery_ledger_1 = require_agent_delivery_ledger();
     var agent_liveness_event_1 = require_agent_liveness_event();
     var cluster_node_history_mirror_1 = require_cluster_node_history_mirror();
@@ -619358,6 +619544,10 @@ var require_agent_registry_service = __commonJS({
       "@camstack/system",
       "@camstack/addon-agent-ui"
     ]);
+    var CONVERGENCE_BOOTSTRAP = /* @__PURE__ */ new Set(["@camstack/system"]);
+    exports.ADDON_CONVERGENCE_INTERVAL_MS = 10 * 6e4;
+    exports.ADDON_CONVERGENCE_DRY_RUN_KEY = "addons.convergence.dryRun";
+    var TRACKED_VERSION_TTL_MS = 5 * 6e4;
     function rosterFromAddons(addons) {
       const byName = /* @__PURE__ */ new Map();
       for (const addon of addons) {
@@ -619470,6 +619660,14 @@ var require_agent_registry_service = __commonJS({
        * diff and each deliver it.
        */
       reconcilingNodes = /* @__PURE__ */ new Set();
+      /** Resolves the version of an agent-tracked package (agent-ui); `null` = not wired. */
+      trackedVersionResolver = null;
+      trackedVersionCache = /* @__PURE__ */ new Map();
+      /** Reads the dry-run switch per round, so flipping the setting needs no restart. */
+      convergenceDryRun = () => true;
+      convergenceTimer = null;
+      convergenceRunning = false;
+      convergenceRerun = null;
       constructor(eventBus, moleculer, capabilityService) {
         this.eventBus = eventBus;
         this.moleculer = moleculer;
@@ -619533,6 +619731,15 @@ var require_agent_registry_service = __commonJS({
       setAddonBackfill(seam) {
         this.addonBackfill = seam;
       }
+      /** Wire how the hub resolves the version of an agent-only tracked package. */
+      setTrackedVersionResolver(resolver) {
+        this.trackedVersionResolver = resolver;
+        this.trackedVersionCache.clear();
+      }
+      /** Wire the dry-run switch; unwired it is ON (D982: the first live run only logs). */
+      setConvergenceDryRun(read) {
+        this.convergenceDryRun = read;
+      }
       /**
        * Delivery failures the breaker is tracking for a node — surfaced so a node
        * that is missing capabilities never merely *looks* healthy.
@@ -619553,9 +619760,18 @@ var require_agent_registry_service = __commonJS({
         const packageName = this.resolvePackageForAddon(addonId);
         if (packageName === null)
           return;
-        if (AGENT_BOOTSTRAP_PACKAGES.has(packageName))
+        if (CONVERGENCE_BOOTSTRAP.has(packageName))
           return;
         await this.historyStore?.prunePackages(nodeId, [packageName]);
+        await this.historyStore?.addTombstones(nodeId, [packageName]);
+      }
+      /**
+       * The operator delivered a package to ONE node on purpose (`updatePackage` with
+       * a `nodeId`, `camstack deploy -n`): that lifts its tombstone, so the desired
+       * set wants it there again.
+       */
+      async noteExplicitDelivery(nodeId, packageName) {
+        await this.historyStore?.clearTombstones(nodeId, [packageName]);
       }
       /**
        * The operator removed a whole PACKAGE from a node (`addons.uninstallPackage`
@@ -619566,9 +619782,10 @@ var require_agent_registry_service = __commonJS({
        * stale-addon reconcile does.
        */
       async notePackageUndeployed(nodeId, packageName, addonIds) {
-        if (AGENT_BOOTSTRAP_PACKAGES.has(packageName))
+        if (CONVERGENCE_BOOTSTRAP.has(packageName))
           return;
         await this.historyStore?.prunePackages(nodeId, [packageName]);
+        await this.historyStore?.addTombstones(nodeId, [packageName]);
         for (const addonId of addonIds) {
           this.eventBus.emit({
             id: (0, node_crypto_1.randomUUID)(),
@@ -619826,6 +620043,89 @@ var require_agent_registry_service = __commonJS({
           }
         } catch {
         }
+        this.startConvergenceTimer();
+      }
+      /**
+       * The fixed schedule of D982: every online agent is converged to its desired
+       * set every {@link ADDON_CONVERGENCE_INTERVAL_MS}. A round never gates
+       * registration (D3) and a failed delivery waits for the next round — the
+       * per-`(node, package)` breaker bounds the retries, there is no tight loop.
+       */
+      startConvergenceTimer() {
+        if (this.convergenceTimer !== null)
+          return;
+        const timer = setInterval(() => {
+          void this.requestConvergence("periodic");
+        }, exports.ADDON_CONVERGENCE_INTERVAL_MS);
+        timer.unref();
+        this.convergenceTimer = timer;
+      }
+      /** Stop the convergence schedule (shutdown, specs). */
+      stopConvergenceTimer() {
+        if (this.convergenceTimer === null)
+          return;
+        clearInterval(this.convergenceTimer);
+        this.convergenceTimer = null;
+      }
+      /**
+       * Converge every online agent to its desired set. Requests that arrive while a
+       * round runs collapse into ONE more round after it — a burst of hub installs
+       * cannot stack passes, and a round never re-triggers itself.
+       */
+      async requestConvergence(trigger) {
+        if (this.convergenceRunning) {
+          this.convergenceRerun = trigger;
+          return;
+        }
+        this.convergenceRunning = true;
+        try {
+          let next = trigger;
+          while (next !== null) {
+            this.convergenceRerun = null;
+            for (const agentId of this.onlineAgentIds()) {
+              await this.reconcileAgentAddons(agentId, next);
+            }
+            next = this.convergenceRerun;
+          }
+        } finally {
+          this.convergenceRunning = false;
+        }
+      }
+      /** Bare agent ids currently online (workers and the hub excluded). */
+      onlineAgentIds() {
+        const registry = this.nodeCatalogRegistry();
+        const nodes = registry?.getNodeList?.({ onlyAvailable: true }) ?? [];
+        return nodes.map((n) => n.id).filter((id) => typeof id === "string" && id !== "hub" && !id.includes("/"));
+      }
+      /** The version the hub follows for an agent-only tracked package, or `null`. */
+      async resolveTrackedVersions() {
+        const resolver = this.trackedVersionResolver;
+        const out = /* @__PURE__ */ new Map();
+        if (resolver === null)
+          return out;
+        const now = Date.now();
+        for (const name of agent_desired_set_1.AGENT_TRACKED_PACKAGES) {
+          const cached = this.trackedVersionCache.get(name);
+          if (cached !== void 0 && now - cached.at < TRACKED_VERSION_TTL_MS) {
+            out.set(name, cached.version);
+            continue;
+          }
+          try {
+            const version = await resolver(name);
+            if (version === null)
+              continue;
+            this.trackedVersionCache.set(name, { version, at: now });
+            out.set(name, version);
+          } catch (err) {
+            this.logger?.warn("convergence: could not resolve a tracked package version", {
+              meta: {
+                package: name,
+                error: err instanceof Error ? err.message : String(err)
+              }
+            });
+          }
+        }
+        return out;
       }
       /** The durable history's display name for a node, when it knows a real one. */
       knownNodeName(nodeId) {
@@ -619842,9 +620142,7 @@ var require_agent_registry_service = __commonJS({
        * must not abort the pass or hub boot.
        */
       async reconcileConnectedAgents() {
-        const registry = this.nodeCatalogRegistry();
-        const nodes = registry?.getNodeList?.({ onlyAvailable: true }) ?? [];
-        const agentIds = nodes.map((n) => n.id).filter((id) => typeof id === "string" && id !== "hub" && !id.includes("/"));
+        const agentIds = this.onlineAgentIds();
         if (agentIds.length === 0)
           return;
         console.log(`[agent-registry] Boot reconcile: ${agentIds.length} connected agent(s)`);
@@ -619945,7 +620243,10 @@ var require_agent_registry_service = __commonJS({
               }
             }
           }
+          const sweepsStale = trigger !== "periodic" && trigger !== "hub-change";
           const stale = agentAddons.filter((addon) => {
+            if (!sweepsStale)
+              return false;
             if (addon.packageName !== void 0 && AGENT_BOOTSTRAP_PACKAGES.has(addon.packageName)) {
               return false;
             }
@@ -619957,10 +620258,11 @@ var require_agent_registry_service = __commonJS({
             }
             return placement === "hub-only";
           });
-          if (stale.length === 0) {
+          if (stale.length === 0 && sweepsStale) {
             console.log(`[agent-registry] Reconcile ${agentId}: no stale addons (${agentAddons.length} checked)`);
           }
           const undeployedPackages = /* @__PURE__ */ new Set();
+          const undeployedIds = /* @__PURE__ */ new Set();
           const survivingIds = new Set(agentAddons.filter((a) => !stale.includes(a)).map((a) => a.id));
           for (const addon of stale) {
             const reason = hubPlacements.has(addon.id) ? "placement is hub-only" : "not installed on hub";
@@ -619969,6 +620271,7 @@ var require_agent_registry_service = __commonJS({
                 nodeID: agentId,
                 timeout: AGENT_RECONCILE_RPC_TIMEOUT_MS
               });
+              undeployedIds.add(addon.id);
               console.log(`[agent-registry] Reconcile ${agentId}: undeployed stale addon "${addon.id}" (${reason})`);
               const packageName = addon.packageName;
               if (packageName !== void 0 && packageName.length > 0) {
@@ -619987,7 +620290,14 @@ var require_agent_registry_service = __commonJS({
               console.error(`[agent-registry] Reconcile ${agentId}: failed to undeploy "${addon.id}":`, err instanceof Error ? err.message : String(err));
             }
           }
-          await this.backfillAgentAddons(agentId, agentAddons, undeployedPackages, hubVersions, hubPackagePlacements, trigger);
+          const hubPackageFacts = /* @__PURE__ */ new Map();
+          for (const [name, placements] of hubPackagePlacements) {
+            hubPackageFacts.set(name, {
+              version: hubVersions.get(name) ?? null,
+              placements
+            });
+          }
+          await this.convergeAgentAddons(agentId, agentAddons.filter((a) => !undeployedIds.has(a.id)), undeployedPackages, hubPackageFacts, trigger);
         } catch (err) {
           console.error(`[agent-registry] Reconcile failed for agent ${agentId}:`, err instanceof Error ? err.message : String(err));
         } finally {
@@ -619995,22 +620305,25 @@ var require_agent_registry_service = __commonJS({
         }
       }
       /**
-       * Converge a node UP to the roster it last declared.
+       * Converge a node to ITS DESIRED SET ([D982](../../../../docs/decisions/adr-0982-the-hub-owns-every-nodes-addon-set.md)).
+       *
+       * The desired set comes from the hub (placements, versions, the agent-only
+       * packages it tracks, the node's tombstones); the roster the node reports is
+       * the observation it is diffed against and is recorded only as history.
        *
        * Order matters and is deliberate:
-       *   1. record what the node declares NOW (grow-only merge) — a wiped node
-       *      reporting 4 packages must not erase the record of its 14;
-       *   2. prune what this pass undeployed — the intended set's only shrink;
-       *   3. read the resulting intended set and deliver the difference.
+       *   1. record what the node declares NOW — history, never intent;
+       *   2. prune what the stale sweep undeployed from that record;
+       *   3. compute the plan, then apply it behind the gates (trigger allowlist,
+       *      delivery window, confirmation read, dry-run switch).
        *
        * Every leg is idempotent: run twice with no change in between and step 3
        * finds nothing to do.
        */
-      async backfillAgentAddons(agentId, agentAddons, undeployedPackages, hubVersions, hubPackagePlacements, trigger) {
+      async convergeAgentAddons(agentId, agentAddons, undeployedPackages, hubPackages, trigger) {
         const store = this.historyStore;
         if (!store)
           return;
-        const priorRoster = await store.getPackages(agentId);
         const live = rosterFromAddons(agentAddons);
         await store.recordPackages(agentId, live);
         if (undeployedPackages.size > 0) {
@@ -620019,63 +620332,153 @@ var require_agent_registry_service = __commonJS({
         const seam = this.addonBackfill;
         if (!seam)
           return;
-        const recorded = await store.getPackages(agentId);
-        const planned = (0, agent_addon_backfill_1.computeBackfillPlan)({
-          recorded,
-          live,
-          bootstrap: AGENT_BOOTSTRAP_PACKAGES,
-          undeployed: undeployedPackages,
+        const tombstones = await store.getTombstones(agentId);
+        const desired = (0, agent_desired_set_1.computeDesiredSet)({
+          hubPackages,
+          trackedForAgents: await this.resolveTrackedVersions(),
+          tombstones,
+          bootstrap: CONVERGENCE_BOOTSTRAP
+        });
+        const planned = (0, agent_desired_set_1.diffNodeAgainstDesired)({
+          desired,
+          observed: live.filter((p) => !undeployedPackages.has(p.name)),
           retired: this.backfillTracker.retiredFor(agentId),
-          hubVersions,
-          freshNode: priorRoster.length === 0 ? { hubPackagePlacements } : void 0
+          bootstrap: CONVERGENCE_BOOTSTRAP
         });
-        if (priorRoster.length === 0) {
-          this.logger?.info("back-fill: fresh node (no prior declared roster), plan from the hub any-node set", {
-            tags: { nodeId: agentId },
-            meta: {
-              planned: planned.targets.map((t) => `${t.name}@${t.version}`)
-            }
-          });
-          for (const skip of planned.skipped) {
-            this.logger?.info("back-fill: fresh node not given a hub package", {
-              tags: { nodeId: agentId },
-              meta: { package: skip.name, reason: skip.reason }
-            });
-          }
-        }
-        if (planned.notOnHub.length > 0) {
-          console.log(`[agent-registry] Back-fill ${agentId}: NOT delivering ${planned.notOnHub.join(", ")} \u2014 in the node's declared roster but not installed on the hub`);
-        }
-        if (planned.targets.length === 0 && planned.retired.length === 0) {
+        const changes = planned.install.length + planned.update.length + planned.remove.length;
+        if (changes === 0 && planned.retired.length === 0)
           return;
-        }
+        const dryRun = this.readConvergenceDryRun(agentId);
+        this.logger?.info(dryRun ? "convergence plan (DRY RUN, removals held back)" : "convergence plan", {
+          tags: { nodeId: agentId },
+          meta: {
+            trigger,
+            install: planned.install.map((t) => `${t.name}@${t.version}`),
+            update: planned.update.map((t) => `${t.name} ${t.from ?? "absent"} -> ${t.version}`),
+            remove: planned.remove.map((r) => `${r.name} (${r.reason})`),
+            retired: planned.retired,
+            observed: live.length
+          }
+        });
         if (!(0, agent_addon_backfill_1.triggerMayDeliver)(trigger)) {
-          console.log(`[agent-registry] Back-fill ${agentId}: SKIPPED \u2014 trigger "${trigger}" may not deliver (${planned.targets.length} package(s) would have been installed)`);
+          console.log(`[agent-registry] Convergence ${agentId}: SKIPPED \u2014 trigger "${trigger}" may not deliver (${changes} change(s) planned)`);
           return;
         }
         const suppression = this.deliveryLedger.suppressionFor(agentId);
         if (suppression !== null) {
-          console.log(`[agent-registry] Back-fill ${agentId}: SKIPPED \u2014 a hub delivery to this node is in flight or just finished (inFlight=${suppression.inFlight}, msSinceLastDelivery=${suppression.msSinceLastDelivery ?? "n/a"}, packages=${suppression.packages.join(", ") || "none"}); the node reported ${planned.liveCount} package(s) and the roster gap is OURS, not the node's`);
+          console.log(`[agent-registry] Convergence ${agentId}: SKIPPED \u2014 a hub delivery to this node is in flight or just finished (inFlight=${suppression.inFlight}, msSinceLastDelivery=${suppression.msSinceLastDelivery ?? "n/a"}, packages=${suppression.packages.join(", ") || "none"}); the roster gap is OURS, not the node's`);
           return;
         }
-        const plan = await this.confirmBackfillTargets(agentId, planned);
-        if (plan === null)
+        if (!dryRun)
+          await this.applyRemovals(agentId, agentAddons, planned);
+        await this.applyDeliveries(agentId, live, planned, trigger, seam);
+      }
+      /**
+       * The dry-run switch, read fail-safe: a read that cannot be answered counts
+       * as ON (nothing is removed) and never fails the reconcile.
+       */
+      readConvergenceDryRun(agentId) {
+        try {
+          return this.convergenceDryRun();
+        } catch (err) {
+          this.logger?.warn("convergence: dry-run switch unreadable, treated as ON", {
+            tags: { nodeId: agentId },
+            meta: { error: err instanceof Error ? err.message : String(err) }
+          });
+          return true;
+        }
+      }
+      /**
+       * Remove tombstoned and hub-only leftovers. A removal DESTROYS work, so it
+       * needs a second roster read to agree (D49) and fails closed when that read
+       * cannot be taken. Every removal logs its reason.
+       */
+      async applyRemovals(agentId, agentAddons, plan) {
+        if (plan.remove.length === 0)
           return;
-        if (plan.targets.length === 0 && plan.retired.length === 0) {
+        let secondAddons = null;
+        try {
+          secondAddons = this.extractAgentAddons(await this.broker.call("$agent.status", {}, { nodeID: agentId, timeout: AGENT_RECONCILE_RPC_TIMEOUT_MS }));
+        } catch (err) {
+          this.logger?.warn("convergence: removals skipped, the confirmation read failed", {
+            tags: { nodeId: agentId },
+            meta: { error: err instanceof Error ? err.message : String(err) }
+          });
           return;
         }
-        const closeWindow = this.deliveryLedger.begin(agentId, plan.targets.map((t) => t.name).join(", ") || "back-fill");
+        if (secondAddons === null) {
+          this.logger?.warn("convergence: removals skipped, the confirmation read had no addon list", {
+            tags: { nodeId: agentId }
+          });
+          return;
+        }
+        const stillThere = new Set(secondAddons.flatMap((a) => a.packageName === void 0 ? [] : [a.packageName]));
+        for (const removal of plan.remove) {
+          if (!stillThere.has(removal.name))
+            continue;
+          const addonIds = agentAddons.filter((a) => a.packageName === removal.name).map((a) => a.id);
+          try {
+            await this.broker.call("$agent.undeploy", {
+              packageName: removal.name,
+              ...addonIds[0] === void 0 ? {} : { addonId: addonIds[0] }
+            }, { nodeID: agentId, timeout: AGENT_RECONCILE_RPC_TIMEOUT_MS });
+            this.logger?.info("convergence: removed a package from the node", {
+              tags: { nodeId: agentId },
+              meta: { package: removal.name, reason: removal.reason, addonIds }
+            });
+            this.eventBus.emit({
+              id: (0, node_crypto_1.randomUUID)(),
+              timestamp: /* @__PURE__ */ new Date(),
+              source: { type: "core", id: "agent-registry" },
+              category: types_1.EventCategory.AddonUninstalled,
+              data: {
+                agentId,
+                packageName: removal.name,
+                reason: `convergence: ${removal.reason}`
+              }
+            });
+          } catch (err) {
+            this.logger?.warn("convergence: removing a package failed, the next round retries", {
+              tags: { nodeId: agentId },
+              meta: {
+                package: removal.name,
+                reason: removal.reason,
+                error: err instanceof Error ? err.message : String(err)
+              }
+            });
+          }
+        }
+      }
+      /** Install and update, behind the D49 confirmation read. */
+      async applyDeliveries(agentId, live, plan, trigger, seam) {
+        const planned = {
+          targets: [...plan.install, ...plan.update].map((t) => ({
+            name: t.name,
+            version: t.version,
+            versionSource: t.origin === "agent-tracked" ? "agent-tracked" : "hub-installed"
+          })),
+          retired: plan.retired,
+          liveCount: live.length
+        };
+        if (planned.targets.length === 0 && planned.retired.length === 0)
+          return;
+        const confirmed = await this.confirmBackfillTargets(agentId, planned);
+        if (confirmed === null)
+          return;
+        if (confirmed.targets.length === 0 && confirmed.retired.length === 0)
+          return;
+        const closeWindow = this.deliveryLedger.begin(agentId, confirmed.targets.map((t) => t.name).join(", ") || "convergence");
         let outcome;
         try {
-          outcome = await (0, agent_addon_backfill_1.executeBackfill)(seam, agentId, plan, this.backfillTracker);
+          outcome = await (0, agent_addon_backfill_1.executeBackfill)(seam, agentId, confirmed, this.backfillTracker);
         } finally {
           closeWindow();
         }
         if (outcome.delivered.length > 0) {
-          console.log(`[agent-registry] Back-fill ${agentId}: delivered ${outcome.delivered.map((d) => {
+          console.log(`[agent-registry] Convergence ${agentId}: delivered ${outcome.delivered.map((d) => {
             const from = live.find((p) => p.name === d.name)?.version ?? "absent";
-            return `${d.name} ${from} \u2192 ${d.version} (agent follows the hub installed version)`;
-          }).join(", ")} \u2014 trigger=${trigger}, node reported ${plan.liveCount} package(s) and its declared roster has ${recorded.length}`);
+            return `${d.name} ${from} \u2192 ${d.version} (${d.versionSource})`;
+          }).join(", ")} \u2014 trigger=${trigger}, node reported ${confirmed.liveCount} package(s)`);
           this.eventBus.emit({
             id: (0, node_crypto_1.randomUUID)(),
             timestamp: /* @__PURE__ */ new Date(),
@@ -620084,15 +620487,15 @@ var require_agent_registry_service = __commonJS({
             data: {
               agentId,
               packages: outcome.delivered.map((d) => `${d.name}@${d.version}`),
-              reason: "back-fill: node missing packages from its declared roster"
+              reason: "convergence: the hub desired set differs from what the node runs"
             }
           });
         }
         for (const failure of outcome.failed) {
-          console.error(`[agent-registry] Back-fill ${agentId}: FAILED to deliver ${failure.name}@${failure.version} \u2014 ${failure.error}` + (failure.retired ? ` (retired after ${agent_addon_backfill_1.MAX_BACKFILL_ATTEMPTS} attempts; this node is running WITHOUT that package)` : ""));
+          console.error(`[agent-registry] Convergence ${agentId}: FAILED to deliver ${failure.name}@${failure.version} \u2014 ${failure.error}` + (failure.retired ? ` (retired after ${agent_addon_backfill_1.MAX_BACKFILL_ATTEMPTS} attempts; this node is running WITHOUT that package)` : " (the next round retries)"));
         }
         for (const name of outcome.skipped) {
-          console.error(`[agent-registry] Back-fill ${agentId}: ${name} is still missing and RETIRED \u2014 the node is degraded until an operator intervenes`);
+          console.error(`[agent-registry] Convergence ${agentId}: ${name} is still wrong and RETIRED \u2014 the node is degraded until an operator intervenes`);
         }
       }
       /**
@@ -623281,7 +623684,8 @@ var require_cluster_node_history_store = __commonJS({
       isHub: zod_1.z.boolean(),
       localIps: zod_1.z.array(zod_1.z.string()).readonly(),
       addonIds: zod_1.z.array(zod_1.z.string()).readonly(),
-      packages: zod_1.z.array(zod_1.z.object({ name: zod_1.z.string(), version: zod_1.z.string().nullable() })).readonly().optional()
+      packages: zod_1.z.array(zod_1.z.object({ name: zod_1.z.string(), version: zod_1.z.string().nullable() })).readonly().optional(),
+      tombstones: zod_1.z.array(zod_1.z.string()).readonly().optional()
     });
     var RowDataSchema = zod_1.z.object({
       lastActive: zod_1.z.number(),
@@ -623289,7 +623693,7 @@ var require_cluster_node_history_store = __commonJS({
     });
     var LAST_ACTIVE_HEARTBEAT_MS = 5 * 6e4;
     function descriptorsEqual(a, b) {
-      return a.id === b.id && a.name === b.name && a.hostname === b.hostname && a.platform === b.platform && a.arch === b.arch && a.cpuModel === b.cpuModel && a.cpuCores === b.cpuCores && a.memoryMB === b.memoryMB && a.isHub === b.isHub && sameStrings(a.engines, b.engines) && sameStrings(a.localIps, b.localIps) && sameStrings(a.addonIds, b.addonIds) && samePackages(a.packages, b.packages);
+      return a.id === b.id && a.name === b.name && a.hostname === b.hostname && a.platform === b.platform && a.arch === b.arch && a.cpuModel === b.cpuModel && a.cpuCores === b.cpuCores && a.memoryMB === b.memoryMB && a.isHub === b.isHub && sameStrings(a.engines, b.engines) && sameStrings(a.localIps, b.localIps) && sameStrings(a.addonIds, b.addonIds) && samePackages(a.packages, b.packages) && sameStrings(a.tombstones ?? [], b.tombstones ?? []);
     }
     function sameStrings(a, b) {
       return a.length === b.length && a.every((v, i) => v === b[i]);
@@ -623335,7 +623739,12 @@ var require_cluster_node_history_store = __commonJS({
         try {
           const existing = await this.readStored(kind, descriptor.id);
           const packages = descriptor.packages ?? existing?.descriptor.packages;
-          const next = packages === void 0 ? descriptor : { ...descriptor, packages };
+          const tombstones = descriptor.tombstones ?? existing?.descriptor.tombstones;
+          const next = {
+            ...descriptor,
+            ...packages === void 0 ? {} : { packages },
+            ...tombstones === void 0 ? {} : { tombstones }
+          };
           if (existing !== null && !this.worthWriting(existing, next))
             return;
           await this.writeStored(kind, descriptor.id, Date.now(), next);
@@ -623477,6 +623886,61 @@ var require_cluster_node_history_store = __commonJS({
           });
         }
       }
+      /** The packages tombstoned for a node (D982). Empty when none or unreadable. */
+      async getTombstones(nodeId) {
+        const kind = this.resolveKind();
+        if (kind === null)
+          return /* @__PURE__ */ new Set();
+        try {
+          return new Set((await this.readStored(kind, nodeId))?.descriptor.tombstones ?? []);
+        } catch (err) {
+          this.logger.warn("getTombstones failed (best-effort)", {
+            tags: { nodeId },
+            meta: { error: (0, types_1.errMsg)(err) }
+          });
+          return /* @__PURE__ */ new Set();
+        }
+      }
+      /** Keep packages off a node: an operator undeploy / hub uninstall for it. */
+      async addTombstones(nodeId, names) {
+        await this.editTombstones(nodeId, names, "add");
+      }
+      /** An explicit delivery to the node lifts the tombstone. */
+      async clearTombstones(nodeId, names) {
+        await this.editTombstones(nodeId, names, "clear");
+      }
+      async editTombstones(nodeId, names, mode) {
+        if (names.length === 0)
+          return;
+        const kind = this.resolveKind();
+        if (kind === null)
+          return;
+        try {
+          const existing = await this.readStored(kind, nodeId);
+          if (existing === null && mode === "clear")
+            return;
+          const current = new Set(existing?.descriptor.tombstones ?? []);
+          const before = current.size;
+          for (const name of names) {
+            if (mode === "add")
+              current.add(name);
+            else
+              current.delete(name);
+          }
+          if (current.size === before)
+            return;
+          const base = existing?.descriptor ?? _ClusterNodeHistoryStore.placeholderDescriptor(nodeId);
+          await this.writeStored(kind, nodeId, existing?.lastActive ?? Date.now(), {
+            ...base,
+            tombstones: [...current].sort()
+          });
+        } catch (err) {
+          this.logger.warn("editTombstones failed (best-effort)", {
+            tags: { nodeId },
+            meta: { error: (0, types_1.errMsg)(err), mode }
+          });
+        }
+      }
       /**
        * Touch `lastActive` for a node without rewriting its descriptor — used on
        * `$node.disconnected` so an offline node's "last seen" is the disconnect
@@ -623527,11 +623991,16 @@ var require_cluster_node_history_store = __commonJS({
               });
               continue;
             }
-            result.push({ ...parsed.data.descriptor, lastActive: parsed.data.lastActive });
+            result.push({
+              ...parsed.data.descriptor,
+              lastActive: parsed.data.lastActive
+            });
           }
           return result;
         } catch (err) {
-          this.logger.warn("history read failed (best-effort)", { meta: { error: (0, types_1.errMsg)(err) } });
+          this.logger.warn("history read failed (best-effort)", {
+            meta: { error: (0, types_1.errMsg)(err) }
+          });
           return null;
         }
       }
@@ -623551,7 +624020,9 @@ var require_cluster_node_history_store = __commonJS({
           const existed = await this.readStored(kind, nodeId) !== null;
           await kind.delete(nodeId);
           if (!existed) {
-            this.logger.info("cluster node had no history row to forget", { tags: { nodeId } });
+            this.logger.info("cluster node had no history row to forget", {
+              tags: { nodeId }
+            });
             return "not-found";
           }
           this.logger.info("forgot cluster node", { tags: { nodeId } });
@@ -624379,6 +624850,8 @@ var require_manual_boot = __commonJS({
           await moleculerService.broker.call("$agent.reload", {}, { nodeID: nodeId, timeout: agent_registry_service_1.AGENT_BACKFILL_RPC_TIMEOUT_MS });
         }
       });
+      agentRegistryService.setTrackedVersionResolver((name) => addonPackageService.resolveRegistryVersion(name));
+      agentRegistryService.setConvergenceDryRun(() => configService.get(agent_registry_service_1.ADDON_CONVERGENCE_DRY_RUN_KEY) !== false);
       const lifecycleDataDir = path.resolve(process.env["CAMSTACK_DATA"] ?? "camstack-data");
       (0, lifecycle_runner_singleton_1.initLifecycleRunner)({
         dataDir: lifecycleDataDir,
@@ -624925,7 +625398,7 @@ var require_main4 = __commonJS({
         const uploadAddonRegistry = app.get(addon_registry_service_1.AddonRegistryService);
         const uploadAddonPackage = app.get(addon_package_service_1.AddonPackageService);
         const uploadLogger = app.get(logging_service_1.LoggingService).createLogger("addon-upload");
-        await (0, addon_upload_1.registerAddonUploadRoute)(fastify, uploadAddonBridge, uploadAuthService, uploadMoleculer, uploadAddonRegistry, uploadAddonPackage, uploadLogger, (0, hub_cluster_url_1.clusterBaseUrlResolver)(() => uploadAddonRegistry.getCapabilityRegistry().getSingleton("local-network")), app.get(agent_registry_service_1.AgentRegistryService).deliveryLedger);
+        await (0, addon_upload_1.registerAddonUploadRoute)(fastify, uploadAddonBridge, uploadAuthService, uploadMoleculer, uploadAddonRegistry, uploadAddonPackage, uploadLogger, (0, hub_cluster_url_1.clusterBaseUrlResolver)(() => uploadAddonRegistry.getCapabilityRegistry().getSingleton("local-network")), app.get(agent_registry_service_1.AgentRegistryService).deliveryLedger, app.get(agent_registry_service_1.AgentRegistryService));
         console.log("[bootstrap] Addon upload route registered at POST /api/addons/upload");
         (0, server_upload_1.registerServerUploadRoute)(fastify, {
           authService: uploadAuthService,