camstack 1.2.83 → 1.2.84

package/dist/{launcher-FITGLHP4.js → launcher-EQ3SI35Z.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-C7qWwrK1.js
-var require_dist_C7qWwrK1 = __commonJS({
-  "../system/dist/dist-C7qWwrK1.js"(exports) {
+// ../system/dist/dist-TEwQZL3g.js
+var require_dist_TEwQZL3g = __commonJS({
+  "../system/dist/dist-TEwQZL3g.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -28488,6 +28488,68 @@ var require_dist_C7qWwrK1 = __commonJS({
       fileCount: zod.z.number(),
       present: zod.z.boolean()
     });
+    var BackupRunStateSchema = zod.z.enum([
+      "queued",
+      "running",
+      "succeeded",
+      "failed",
+      "cancelled"
+    ]);
+    var BackupRunPhaseSchema = zod.z.enum([
+      "queued",
+      "building",
+      "uploading",
+      "done"
+    ]);
+    var BackupRunSchema = zod.z.object({
+      /** Stable run id — the handle `backup.cancel` takes. */
+      id: zod.z.string(),
+      state: BackupRunStateSchema,
+      phase: BackupRunPhaseSchema,
+      /**
+      * Resolved destination location ids. Empty while queued (targets are
+      * resolved when the run starts, against the then-current policies).
+      */
+      destinationIds: zod.z.array(zod.z.string()).readonly(),
+      label: zod.z.string().optional(),
+      /** ms-epoch when the run was submitted (trigger call / schedule fire). */
+      requestedAt: zod.z.number(),
+      /** ms-epoch when the run left the queue and started building. */
+      startedAt: zod.z.number().optional(),
+      /** ms-epoch when the run reached a terminal state. */
+      finishedAt: zod.z.number().optional(),
+      /** Compressed bytes of the staging archive written so far. */
+      stagedBytes: zod.z.number(),
+      /** Final staged archive size, once the build phase completes. */
+      archiveSizeBytes: zod.z.number().optional(),
+      /** Bytes pushed to the destination currently uploading. */
+      uploadedBytes: zod.z.number(),
+      /** Destinations where the archive fully landed (uploaded + indexed). */
+      completedDestinationIds: zod.z.array(zod.z.string()).readonly(),
+      /** Destinations that failed during the fan-out. */
+      failedDestinationIds: zod.z.array(zod.z.string()).readonly(),
+      /** Failure message when `state === 'failed'`. */
+      error: zod.z.string().optional(),
+      /**
+      * 1-based place in the execution queue — 1 = runs next. Present only
+      * while `state === 'queued'`. Stamped by the orchestrator from the
+      * queue's OWN pending order, never derived from timestamps, so the
+      * UI cannot show an order the executor will not honour.
+      */
+      queuePosition: zod.z.number().int().min(1).optional()
+    });
+    var BackupTriggerResultSchema = zod.z.object({
+      /** The run this trigger mapped to — poll it via `listRuns`, stop it via `cancel`. */
+      runId: zod.z.string(),
+      /** True when the run waited behind an in-flight run instead of starting immediately. */
+      queued: zod.z.boolean(),
+      /** True when this trigger was coalesced onto an identical already-queued run. */
+      joined: zod.z.boolean(),
+      /** True when the run was cancelled before completing every destination. */
+      cancelled: zod.z.boolean(),
+      /** One entry per destination the archive landed at (partial on cancel). */
+      entries: zod.z.array(BackupEntrySchema).readonly()
+    });
     var BackupScheduleSchema = zod.z.object({
       /** Stable id. Generated by the orchestrator on first upsert if absent. */
       id: zod.z.string(),
@@ -28524,6 +28586,11 @@ var require_dist_C7qWwrK1 = __commonJS({
         * Trigger a backup. Without `destinations` the orchestrator fans
         * out to every destination flagged as enabled in the routing
         * config; with it, only the listed addons receive the archive.
+        *
+        * At most ONE backup run executes at a time — the source tree and
+        * the staging disk are shared by every run, so a second trigger
+        * while one is in flight is enqueued (or joined onto an identical
+        * queued run) and the result says so. See D342.
         */
         trigger: method(zod.z.object({
           /** Subset of registered `backup-destination` addon ids to write to. */
@@ -28537,7 +28604,30 @@ var require_dist_C7qWwrK1 = __commonJS({
           * retention (manual runs).
           */
           retentionCount: zod.z.number().int().min(1).max(1e3).optional()
-        }).optional(), zod.z.array(BackupEntrySchema).readonly(), {
+        }).optional(), BackupTriggerResultSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /**
+        * Every run the orchestrator knows about, in EXECUTION order: the
+        * running run first, then queued runs in the exact order they will
+        * execute (each with `queuePosition`, 1 = next), then the bounded
+        * finished history newest-first. Only one run executes at a time
+        * (D342) — the queued section IS the line. Each run carries live
+        * phase + byte counters so a runaway build is visible in seconds,
+        * not via `du`.
+        */
+        listRuns: method(zod.z.void(), zod.z.array(BackupRunSchema).readonly(), { auth: "admin" }),
+        /**
+        * Stop a backup run. Mirrors `storage-migration.cancel` semantics:
+        * id in, `{ cancelled }` out — `false` when the run is unknown or
+        * already terminal. A QUEUED run is removed before it ever starts;
+        * the RUNNING run has its tar/upload stream actually aborted, the
+        * half-written staging archive is deleted, and the in-flight
+        * destination upload is aborted server-side (partial discarded).
+        * Destinations that already completed keep their archive.
+        */
+        cancel: method(zod.z.object({ runId: zod.z.string() }), zod.z.object({ cancelled: zod.z.boolean() }), {
           kind: "mutation",
           auth: "admin"
         }),
@@ -29277,6 +29367,38 @@ var require_dist_C7qWwrK1 = __commonJS({
           auth: "admin"
         }),
         /**
+        * The HARDWARE behind a device number was replaced
+        * (`deviceManager.migrateDevice`). Forget every piece of broker state that
+        * described the old box, so the next catalog pull derives everything from
+        * the camera that is actually there:
+        *
+        *  - every `derived:*` stream definition — a derived is authored against a
+        *    specific profile layout, and against the wrong hardware its feeder
+        *    respawns forever (observed at attempt 2732 on the live hub,
+        *    2026-09-01);
+        *  - the profile-slot assignment entry, PURGED (not unassigned — unassign
+        *    marks the slot manual, which would pin the stale choice instead of
+        *    letting `computeInitialAssignment` re-derive it);
+        *  - the probe snapshots (`<deviceId>/…` — probed codec/resolution of the
+        *    old hardware);
+        *  - the persisted RTSP token rows for the device's brokers (keyed
+        *    `<deviceId>/<camStreamId>`; the stream ids change with the hardware,
+        *    so the rows are dead URLs).
+        *
+        * An RPC, deliberately — an event is telemetry and may be dropped (D8),
+        * and a dropped forget leaves a feeder respawning against a stream that
+        * does not exist.
+        */
+        forgetDeviceHardware: method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.object({
+          derivedStreamsDeleted: zod.z.array(zod.z.string()).readonly(),
+          assignmentsPurged: zod.z.boolean(),
+          probeSnapshotsDropped: zod.z.number().int().nonnegative(),
+          rtspTokenRowsDeleted: zod.z.number().int().nonnegative()
+        }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /**
         * Render a short GIF or MP4 from the broker's PRE-BUFFER around an instant.
         *
         * The pre-buffer is the only source that already holds the seconds BEFORE
@@ -51132,6 +51254,12 @@ var require_dist_C7qWwrK1 = __commonJS({
         addonId: null,
         access: "create"
       },
+      "backup.cancel": {
+        capName: "backup",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "backup.delete": {
         capName: "backup",
         capScope: "system",
@@ -51174,6 +51302,12 @@ var require_dist_C7qWwrK1 = __commonJS({
         addonId: null,
         access: "view"
       },
+      "backup.listRuns": {
+        capName: "backup",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "backup.listSchedules": {
         capName: "backup",
         capScope: "system",
@@ -55740,6 +55874,12 @@ var require_dist_C7qWwrK1 = __commonJS({
         addonId: null,
         access: "create"
       },
+      "streamBroker.forgetDeviceHardware": {
+        capName: "stream-broker",
+        capScope: "system",
+        addonId: null,
+        access: "delete"
+      },
       "streamBroker.getAllRtspEntries": {
         capName: "stream-broker",
         capScope: "system",
@@ -58198,6 +58338,11 @@ var require_dist_C7qWwrK1 = __commonJS({
         form: "single",
         optional: false
       }],
+      "streamBroker.forgetDeviceHardware": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "streamBroker.getDeviceAudioMute": [{
         name: "deviceId",
         form: "single",
@@ -59854,7 +59999,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -60673,7 +60818,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -60767,7 +60912,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -61664,11 +61809,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-3soU9pfP.js
-var require_retired_settings_keys_3soU9pfP = __commonJS({
-  "../system/dist/retired-settings-keys-3soU9pfP.js"(exports) {
+// ../system/dist/retired-settings-keys-DauPtbFR.js
+var require_retired_settings_keys_DauPtbFR = __commonJS({
+  "../system/dist/retired-settings-keys-DauPtbFR.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -63882,8 +64027,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
-    var require_retired_settings_keys = require_retired_settings_keys_3soU9pfP();
+    var require_dist10 = require_dist_TEwQZL3g();
+    var require_retired_settings_keys = require_retired_settings_keys_DauPtbFR();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -65546,7 +65691,13 @@ var require_device_manager_addon = __commonJS({
       if (config.mode === "auto") {
         if (selfLocation !== null && selfLocation.length > 0) for (const c of candidates) {
           if (c.type === require_dist10.DeviceType.Container) continue;
-          if (c.location === selfLocation) ids.add(c.id);
+          if (c.location !== selfLocation) continue;
+          const parent = c.parentDeviceId !== null ? byId.get(c.parentDeviceId) : void 0;
+          if (parent !== void 0 && parent.type === require_dist10.DeviceType.Container) {
+            expand(parent.id);
+            continue;
+          }
+          ids.add(c.id);
         }
       } else for (const id of config.manualIds) if (byId.has(id)) expand(id);
       ids.delete(selfId);
@@ -66409,6 +66560,16 @@ var require_device_manager_addon = __commonJS({
       const down = [...await applyAll(deps, sourceId, false), ...await applyAll(deps, targetId, false)];
       const sourceStillLive = down.filter((r) => r.deviceId === sourceId && r.outcome === "unreachable").map((r) => r.switchId);
       await deps.swapIds(sourceId, targetId);
+      await deps.swapHardwareState(sourceId, targetId);
+      for (const deviceId of [sourceId, targetId]) try {
+        await deps.forgetStreamState(deviceId);
+      } catch (err) {
+        deps.log("migration: broker hardware state NOT forgotten \u2014 stale stream state survives", {
+          deviceId,
+          error: err instanceof Error ? err.message : String(err),
+          remedy: "delete the device's derived streams and reassign its stream profiles, or update the stream-broker addon and re-run streamBroker.forgetDeviceHardware"
+        });
+      }
       const up = await applyAll(deps, sourceId, true);
       await deps.respawnRunners([sourceId, targetId]);
       deps.log("camera migrated", {
@@ -66425,6 +66586,49 @@ var require_device_manager_addon = __commonJS({
         swapped: true
       };
     }
+    var PROFILE_MAP_CONFIG_KEY = "_profileMap";
+    var ROLE_SCOPED_CONFIG_KEYS = new Set(DEVICE_STORE_SECTIONS.flatMap((section) => [...section.keys]));
+    function splitConfig(config) {
+      const hardware = {};
+      const role = {};
+      for (const [key, value] of Object.entries(config)) {
+        if (key === PROFILE_MAP_CONFIG_KEY) continue;
+        if (ROLE_SCOPED_CONFIG_KEYS.has(key)) role[key] = value;
+        else hardware[key] = value;
+      }
+      return {
+        hardware,
+        role
+      };
+    }
+    async function swapHardwareState(settings, sourceId, targetId) {
+      const sourceConfig = await settings.readDeviceStore(sourceId);
+      const targetConfig = await settings.readDeviceStore(targetId);
+      const source = splitConfig(sourceConfig);
+      const target = splitConfig(targetConfig);
+      await settings.clearDeviceStore(sourceId);
+      await settings.writeDeviceStore(sourceId, {
+        ...target.hardware,
+        ...source.role
+      });
+      await settings.clearDeviceStore(targetId);
+      await settings.writeDeviceStore(targetId, {
+        ...source.hardware,
+        ...target.role
+      });
+      const sourceRuntimeState = await settings.readDeviceRuntimeState(sourceId);
+      const targetRuntimeState = await settings.readDeviceRuntimeState(targetId);
+      await settings.writeDeviceRuntimeState(sourceId, targetRuntimeState);
+      await settings.writeDeviceRuntimeState(targetId, sourceRuntimeState);
+      return {
+        runtimeStateNowAtSource: targetRuntimeState,
+        runtimeStateNowAtTarget: sourceRuntimeState,
+        hardwareKeysToSource: Object.keys(target.hardware).toSorted(),
+        hardwareKeysToTarget: Object.keys(source.hardware).toSorted(),
+        roleKeysKeptAtSource: Object.keys(source.role).toSorted(),
+        roleKeysKeptAtTarget: Object.keys(target.role).toSorted()
+      };
+    }
     async function stampIntegrationId(metaStore, ctx, deviceId, integrationId) {
       await metaStore.withMetaWriteLock(async () => {
         if (!await metaStore.resolvePersistedById(deviceId)) throw new Error(`[device-manager] stampIntegrationId: unknown device id=${deviceId}`);
@@ -66484,13 +66688,42 @@ var require_device_manager_addon = __commonJS({
           swapIds: async (a, b) => {
             await pctx.metaStore.rows.swapIds(a, b, tempId);
           },
+          swapHardwareState: async (a, b) => {
+            const swapped = await swapHardwareState(pctx.settings, a, b);
+            pctx.host.seedMirror(a, pctx.host.withResetSessionProbe(swapped.runtimeStateNowAtSource));
+            pctx.host.seedMirror(b, pctx.host.withResetSessionProbe(swapped.runtimeStateNowAtTarget));
+            ctx.logger.info("migration: hardware-scoped device state swapped", {
+              tags: { deviceId: a },
+              meta: {
+                sourceId: a,
+                targetId: b,
+                hardwareKeysToSource: swapped.hardwareKeysToSource,
+                hardwareKeysToTarget: swapped.hardwareKeysToTarget,
+                roleKeysKeptAtSource: swapped.roleKeysKeptAtSource,
+                roleKeysKeptAtTarget: swapped.roleKeysKeptAtTarget
+              }
+            });
+          },
+          forgetStreamState: async (deviceId) => {
+            await ctx.api.streamBroker.forgetDeviceHardware.mutate({ deviceId });
+          },
           respawnRunners: async (deviceIds) => {
             const owners = /* @__PURE__ */ new Set();
             for (const deviceId of deviceIds) {
               const addonId = pctx.metaStore.idToAddonId.get(deviceId);
               if (addonId !== void 0) owners.add(addonId);
             }
-            for (const addonId of owners) await ctx.api.addons.restartAddon.mutate({ addonId });
+            for (const addonId of owners) {
+              const owned = [...pctx.metaStore.idToAddonId.entries()].filter(([, a]) => a === addonId).length;
+              ctx.logger.info("migration: restarting a whole provider to flush the id maps", {
+                tags: { deviceId: sourceId },
+                meta: {
+                  addonId,
+                  devicesTakenDown: owned
+                }
+              });
+              await ctx.api.addons.restartAddon.mutate({ addonId });
+            }
           },
           log: (message, meta) => {
             ctx.logger.info(message, {
@@ -68923,7 +69156,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -69060,7 +69293,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -69250,7 +69483,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -77063,7 +77296,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -77628,7 +77861,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -80212,7 +80445,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -81328,8 +81561,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
-    var require_retired_settings_keys = require_retired_settings_keys_3soU9pfP();
+    var require_dist10 = require_dist_TEwQZL3g();
+    var require_retired_settings_keys = require_retired_settings_keys_DauPtbFR();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -83819,7 +84052,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -86770,7 +87003,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -104831,7 +105064,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -106774,9 +107007,9 @@ var require_event_category_BaEgqJNv = __commonJS({
   }
 });
 
-// ../types/dist/sleep-BwGJ_wL_.js
-var require_sleep_BwGJ_wL = __commonJS({
-  "../types/dist/sleep-BwGJ_wL_.js"(exports) {
+// ../types/dist/sleep-BDmIj1HV.js
+var require_sleep_BDmIj1HV = __commonJS({
+  "../types/dist/sleep-BDmIj1HV.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BaEgqJNv();
     var zod = require_zod();
@@ -109784,6 +110017,7 @@ var require_sleep_BwGJ_wL = __commonJS({
           retractCameraStream: (input) => dispatchSystem("streamBroker", "retractCameraStream", "mutation", input),
           assignProfile: (input) => dispatchSystem("streamBroker", "assignProfile", "mutation", input),
           unassignProfile: (input) => dispatchSystem("streamBroker", "unassignProfile", "mutation", input),
+          forgetDeviceHardware: (input) => dispatchSystem("streamBroker", "forgetDeviceHardware", "mutation", input),
           renderPreBufferClip: (input) => dispatchSystem("streamBroker", "renderPreBufferClip", "mutation", input),
           produceEventMedia: (input) => dispatchSystem("streamBroker", "produceEventMedia", "mutation", input),
           restartProfile: (input) => dispatchSystem("streamBroker", "restartProfile", "mutation", input),
@@ -110448,7 +110682,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_BwGJ_wL();
+    var require_sleep = require_sleep_BDmIj1HV();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -117331,12 +117565,12 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-PAIfmNun.js
-var require_manifest_system_deps_PAIfmNun = __commonJS({
-  "../system/dist/manifest-system-deps-PAIfmNun.js"(exports) {
+// ../system/dist/manifest-system-deps-BVIr3MYJ.js
+var require_manifest_system_deps_BVIr3MYJ = __commonJS({
+  "../system/dist/manifest-system-deps-BVIr3MYJ.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    require_dist_C7qWwrK1();
+    require_dist_TEwQZL3g();
     require_hub_cap_forward_DmHNjbB0();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
@@ -129403,7 +129637,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_C7qWwrK1();
+    var require_dist10 = require_dist_TEwQZL3g();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -129430,7 +129664,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_PAIfmNun();
+    var require_manifest_system_deps = require_manifest_system_deps_BVIr3MYJ();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -132468,7 +132702,265 @@ var require_dist3 = __commonJS({
         };
       }
     };
+    function parseVersion(value) {
+      const m = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/.exec(value.trim());
+      if (!m) return null;
+      return {
+        major: Number(m[1]),
+        minor: Number(m[2]),
+        patch: Number(m[3]),
+        prerelease: m[4] ?? null
+      };
+    }
+    function compareTriple(a, b) {
+      if (a.major !== b.major) return a.major < b.major ? -1 : 1;
+      if (a.minor !== b.minor) return a.minor < b.minor ? -1 : 1;
+      if (a.patch !== b.patch) return a.patch < b.patch ? -1 : 1;
+      return 0;
+    }
+    function closureSatisfiesRange(range, version2) {
+      const trimmedRange = range.trim();
+      const v2 = parseVersion(version2);
+      if (v2 === null) return false;
+      if (v2.prerelease !== null) return trimmedRange === version2.trim() || trimmedRange === `=${version2.trim()}`;
+      const exactBase = parseVersion(trimmedRange.startsWith("=") ? trimmedRange.slice(1) : trimmedRange);
+      if (exactBase !== null) return exactBase.prerelease === null && compareTriple(v2, exactBase) === 0;
+      const operator = trimmedRange[0];
+      if (operator !== "^" && operator !== "~") return false;
+      const base = parseVersion(trimmedRange.slice(1));
+      if (base === null || base.prerelease !== null) return false;
+      if (operator === "~") return v2.major === base.major && v2.minor === base.minor && compareTriple(v2, base) >= 0;
+      if (base.major > 0) return v2.major === base.major && compareTriple(v2, base) >= 0;
+      if (base.minor > 0) return v2.major === 0 && v2.minor === base.minor && compareTriple(v2, base) >= 0;
+      return compareTriple(v2, base) === 0;
+    }
+    function sameCompatLine(a, b) {
+      const pa = parseVersion(a);
+      const pb = parseVersion(b);
+      if (pa === null || pb === null) return false;
+      if (pa.major !== pb.major) return false;
+      if (pa.major === 0) return pa.minor === pb.minor;
+      return true;
+    }
+    function planClosureDedupe(input) {
+      const links = [];
+      const keeps = [];
+      for (const candidate of input.candidates) {
+        if (candidate.name.startsWith("@camstack/")) {
+          keeps.push({
+            name: candidate.name,
+            reason: "camstack-package"
+          });
+          continue;
+        }
+        if (input.neverLink.has(candidate.name)) {
+          keeps.push({
+            name: candidate.name,
+            reason: "never-link"
+          });
+          continue;
+        }
+        const closureVersion = input.closureVersions.get(candidate.name);
+        if (closureVersion === void 0) {
+          keeps.push({
+            name: candidate.name,
+            reason: "not-in-closure"
+          });
+          continue;
+        }
+        if (closureVersion === candidate.version) {
+          links.push({
+            name: candidate.name,
+            closureVersion
+          });
+          continue;
+        }
+        const ranges = input.requirements.get(candidate.name) ?? [];
+        if (ranges.length > 0 && ranges.every((range) => closureSatisfiesRange(range, closureVersion)) && sameCompatLine(closureVersion, candidate.version)) links.push({
+          name: candidate.name,
+          closureVersion
+        });
+        else keeps.push({
+          name: candidate.name,
+          reason: "version-incompatible"
+        });
+      }
+      return {
+        links,
+        keeps
+      };
+    }
+    function readTreeManifest(pkgJsonPath) {
+      let raw;
+      try {
+        raw = require_dist10.asJsonObject(require_dist10.parseJsonUnknown(node_fs.readFileSync(pkgJsonPath, "utf-8")));
+      } catch {
+        return null;
+      }
+      if (raw === null) return null;
+      const ranges = /* @__PURE__ */ new Map();
+      for (const key of [
+        "dependencies",
+        "optionalDependencies",
+        "peerDependencies"
+      ]) {
+        const deps = require_dist10.asJsonObject(raw[key]);
+        if (deps === null) continue;
+        for (const [name2, range] of Object.entries(deps)) if (typeof range === "string" && !ranges.has(name2)) ranges.set(name2, range);
+      }
+      const version2 = require_dist10.asString(raw["version"]);
+      return {
+        version: version2.length > 0 ? version2 : null,
+        ranges
+      };
+    }
+    function listTopLevelEntries(nodeModulesDir) {
+      let entries;
+      try {
+        entries = node_fs.readdirSync(nodeModulesDir, { withFileTypes: true });
+      } catch {
+        return [];
+      }
+      const names = [];
+      for (const entry of entries) {
+        if (entry.name.startsWith(".")) continue;
+        if (entry.name.startsWith("@")) {
+          let inner;
+          try {
+            inner = node_fs.readdirSync(node_path.join(nodeModulesDir, entry.name), { withFileTypes: true });
+          } catch {
+            continue;
+          }
+          for (const sub of inner) if (!sub.name.startsWith(".")) names.push(`${entry.name}/${sub.name}`);
+        } else names.push(entry.name);
+      }
+      return names;
+    }
+    function collectAddonTreeState(addonDir) {
+      const nodeModulesDir = node_path.join(addonDir, "node_modules");
+      const requirements = /* @__PURE__ */ new Map();
+      const addRange = (name2, range) => {
+        const existing = requirements.get(name2);
+        if (existing === void 0) requirements.set(name2, [range]);
+        else existing.push(range);
+      };
+      const rootManifest = readTreeManifest(node_path.join(addonDir, "package.json"));
+      if (rootManifest !== null) for (const [name2, range] of rootManifest.ranges) addRange(name2, range);
+      const candidates = [];
+      const existingLinks = [];
+      for (const name2 of listTopLevelEntries(nodeModulesDir)) {
+        const entryDir = node_path.join(nodeModulesDir, name2);
+        let isLink = false;
+        try {
+          isLink = node_fs.lstatSync(entryDir).isSymbolicLink();
+        } catch {
+          continue;
+        }
+        if (isLink) {
+          let target = "";
+          try {
+            target = node_fs.readlinkSync(entryDir);
+          } catch {
+          }
+          existingLinks.push({
+            name: name2,
+            target
+          });
+        }
+        const manifest = readTreeManifest(node_path.join(entryDir, "package.json"));
+        if (manifest === null) continue;
+        if (!isLink && manifest.version !== null) candidates.push({
+          name: name2,
+          version: manifest.version
+        });
+        for (const [depName, range] of manifest.ranges) {
+          if (node_fs.existsSync(node_path.join(entryDir, "node_modules", depName))) continue;
+          addRange(depName, range);
+        }
+      }
+      return {
+        candidates,
+        requirements,
+        existingLinks
+      };
+    }
+    function readClosureVersions(closureNodeModulesDir, names) {
+      const versions = /* @__PURE__ */ new Map();
+      for (const name2 of names) {
+        const manifest = readTreeManifest(node_path.join(closureNodeModulesDir, name2, "package.json"));
+        if (manifest !== null && manifest.version !== null) versions.set(name2, manifest.version);
+      }
+      return versions;
+    }
+    function resolveClosureNodeModulesDir(explicitDir) {
+      const frameworkDir = explicitDir ?? process.env["CAMSTACK_FRAMEWORK_DIR"];
+      if (frameworkDir === void 0 || frameworkDir.length === 0) return null;
+      const nodeModulesDir = explicitDir ?? node_path.join(frameworkDir, "node_modules");
+      return node_fs.existsSync(nodeModulesDir) ? nodeModulesDir : null;
+    }
+    function symlinkType() {
+      return process.platform === "win32" ? "junction" : "dir";
+    }
+    function executeClosureDedupe(addonDir, closureNodeModulesDir, plan, logger) {
+      if (plan.links.length === 0) return [];
+      const nodeModulesDir = node_path.join(addonDir, "node_modules");
+      const probePath = node_path.join(nodeModulesDir, ".closure-link-probe");
+      try {
+        node_fs.mkdirSync(nodeModulesDir, { recursive: true });
+        node_fs.rmSync(probePath, { force: true });
+        node_fs.symlinkSync(closureNodeModulesDir, probePath, symlinkType());
+        node_fs.rmSync(probePath, { force: true });
+      } catch (err) {
+        logger.warn("closure dedupe skipped \u2014 symlinks unavailable on this volume", { meta: {
+          addonDir,
+          error: require_dist10.errMsg(err)
+        } });
+        return [];
+      }
+      const linked = [];
+      for (const link of plan.links) {
+        const target = node_path.join(closureNodeModulesDir, link.name);
+        const manifest = readTreeManifest(node_path.join(target, "package.json"));
+        if (manifest === null || manifest.version !== link.closureVersion) {
+          logger.warn("closure dedupe \u2014 closure changed under the plan; keeping own copy", { meta: {
+            name: link.name,
+            planned: link.closureVersion,
+            found: manifest?.version ?? null
+          } });
+          continue;
+        }
+        const entryDir = node_path.join(nodeModulesDir, link.name);
+        try {
+          node_fs.rmSync(entryDir, {
+            recursive: true,
+            force: true
+          });
+          node_fs.mkdirSync(node_path.dirname(entryDir), { recursive: true });
+          node_fs.symlinkSync(target, entryDir, symlinkType());
+          linked.push(link.name);
+        } catch (err) {
+          logger.warn("closure dedupe \u2014 link failed; entry removed copy may need reinstall", { meta: {
+            name: link.name,
+            error: require_dist10.errMsg(err)
+          } });
+        }
+      }
+      return linked;
+    }
+    function isClosureLinkTarget(linkTarget, closureNodeModulesDir) {
+      if (linkTarget.length === 0) return false;
+      const normalized = node_path.resolve(linkTarget);
+      const root = node_path.resolve(closureNodeModulesDir);
+      return normalized === root || normalized.startsWith(`${root}${node_path.sep}`);
+    }
     var execFileAsync = (0, node_util.promisify)(node_child_process.execFile);
+    function readNativeDependencyNames(pkg) {
+      if (pkg === void 0) return /* @__PURE__ */ new Set();
+      const camstack = require_dist10.asJsonObject(pkg["camstack"]);
+      if (camstack === null) return /* @__PURE__ */ new Set();
+      const native = require_dist10.asJsonObject(camstack["nativeDependencies"]);
+      return native === null ? /* @__PURE__ */ new Set() : new Set(Object.keys(native));
+    }
     function parseInstallSource(value) {
       switch (value) {
         case "npm":
@@ -132530,6 +133022,8 @@ var require_dist3 = __commonJS({
       installSource;
       logger;
       isPackageResolvable;
+      /** Test seam — production resolves via `CAMSTACK_FRAMEWORK_DIR`. */
+      closureNodeModulesDir;
       /**
       * Central manifest of installed addons. Tracks version + source +
       * timestamps + last-backup pointer per package, written atomically
@@ -132551,6 +133045,7 @@ var require_dist3 = __commonJS({
         this.logger = logger;
         this.manifest = new AddonManifest(config.addonsDir);
         this.isPackageResolvable = config.isPackageResolvable;
+        this.closureNodeModulesDir = config.closureNodeModulesDir;
         if (config.installSource) this.installSource = config.installSource;
         else this.installSource = "npm";
       }
@@ -132738,6 +133233,140 @@ var require_dist3 = __commonJS({
         return changes;
       }
       /**
+      * Make every INSTALLED addon's runtime dependencies resolvable — doing the
+      * least work that achieves it. Runs at boot on hub and agent, which is what
+      * turns a restore back into a working node: a system backup archives no
+      * node_modules (D338), so before this pass every restored non-bootstrap
+      * addon failed its first import until someone redeployed it by hand.
+      *
+      * Per addon, in order:
+      *  1. drop closure links that no longer hold (dangling, or the closure
+      *     moved to a version the addon tree's recorded ranges refuse) — those
+      *     addons get a reinstall;
+      *  2. a declared dep that already resolves in the addon tree costs nothing;
+      *  3. a missing declared dep the closure provides at a COMPATIBLE version
+      *     becomes a link — no npm, no network;
+      *  4. only an addon left with a genuinely unresolvable dep gets an npm
+      *     install (then dedupe + native ensure, same tail as a fresh install).
+      *
+      * "Only when necessary" is the contract: an addon whose deps are all
+      * satisfied is not touched at all. Failures are per-addon and non-fatal —
+      * a dep that cannot be re-fetched leaves that addon exactly as broken as
+      * it already was, but LOUDLY, and never blocks the rest of the boot.
+      */
+      async ensureAddonRuntimeDeps() {
+        const closureNodeModules = resolveClosureNodeModulesDir(this.closureNodeModulesDir);
+        const linked = [];
+        const reinstalled = [];
+        const failed = [];
+        const installedPackages = this.listInstalled();
+        for (const pkg of installedPackages) {
+          try {
+            if (node_fs.lstatSync(pkg.dir).isSymbolicLink()) continue;
+          } catch {
+            continue;
+          }
+          try {
+            const outcome = this.ensureOneAddonDeps(pkg.dir, pkg.name, closureNodeModules);
+            for (const dep of outcome.linked) linked.push(`${pkg.name}:${dep}`);
+            if (outcome.needsInstall) {
+              await this.reinstallAddonDeps(pkg.dir, pkg.name);
+              reinstalled.push(pkg.name);
+            }
+          } catch (err) {
+            failed.push(pkg.name);
+            this.logger.error(`${pkg.name} \u2014 runtime dependencies could NOT be ensured; the addon will fail to load until its deps install`, { meta: {
+              dir: pkg.dir,
+              error: require_dist10.errMsg(err)
+            } });
+          }
+        }
+        return {
+          checked: installedPackages.length,
+          linked,
+          reinstalled,
+          failed
+        };
+      }
+      /**
+      * One addon's dependency audit (steps 1–3 of `ensureAddonRuntimeDeps`).
+      * Pure decision + link creation; the npm fallback is the caller's.
+      */
+      ensureOneAddonDeps(addonDir, packageName, closureNodeModules) {
+        const pkgView = readPackageJson(node_path.join(addonDir, "package.json"));
+        const declared = pkgView === null ? null : require_dist10.asJsonObject(pkgView.raw["dependencies"]);
+        const declaredEntries = declared === null ? [] : Object.entries(declared);
+        const state = collectAddonTreeState(addonDir);
+        const nodeModulesDir = node_path.join(addonDir, "node_modules");
+        let needsInstall = false;
+        if (closureNodeModules !== null) for (const link of state.existingLinks) {
+          if (!isClosureLinkTarget(link.target, closureNodeModules)) continue;
+          const linkDir = node_path.join(nodeModulesDir, link.name);
+          const targetManifest = node_fs.existsSync(node_path.join(linkDir, "package.json"));
+          const ranges = state.requirements.get(link.name) ?? [];
+          let holds = targetManifest;
+          if (holds && ranges.length > 0) {
+            const version2 = readClosureVersions(closureNodeModules, [link.name]).get(link.name);
+            holds = version2 !== void 0 && ranges.every((range) => closureSatisfiesRange(range, version2));
+          }
+          if (!holds) {
+            this.logger.warn(`${packageName} \u2014 closure link for ${link.name} no longer holds; reinstalling this addon's deps`, { meta: { target: link.target } });
+            node_fs.rmSync(linkDir, { force: true });
+            needsInstall = true;
+          }
+        }
+        const linked = [];
+        for (const [depName, range] of declaredEntries) {
+          if (typeof range !== "string") continue;
+          if (node_fs.existsSync(node_path.join(nodeModulesDir, depName, "package.json"))) continue;
+          const closureVersion = closureNodeModules === null ? void 0 : readClosureVersions(closureNodeModules, [depName]).get(depName);
+          if (closureNodeModules !== null && closureVersion !== void 0 && closureSatisfiesRange(range, closureVersion)) {
+            if (executeClosureDedupe(addonDir, closureNodeModules, {
+              links: [{
+                name: depName,
+                closureVersion
+              }],
+              keeps: []
+            }, this.logger).length === 1) {
+              this.logger.info(`${packageName} \u2014 ${depName} linked from the server closure`, { meta: { closureVersion } });
+              linked.push(depName);
+              continue;
+            }
+          }
+          needsInstall = true;
+        }
+        return {
+          linked,
+          needsInstall
+        };
+      }
+      /**
+      * npm-install an installed addon's runtime deps IN PLACE (the restore /
+      * repair path — the tree is not yet running at boot), then the same tail
+      * every fresh install gets: closure dedupe + native deps + prebuild ensure.
+      * Closure links are stripped first so npm reifies against plain missing
+      * dirs instead of symlinks it does not own.
+      */
+      async reinstallAddonDeps(addonDir, packageName) {
+        const closureNodeModules = resolveClosureNodeModulesDir(this.closureNodeModulesDir);
+        if (closureNodeModules !== null) {
+          const state = collectAddonTreeState(addonDir);
+          for (const link of state.existingLinks) if (isClosureLinkTarget(link.target, closureNodeModules)) node_fs.rmSync(node_path.join(addonDir, "node_modules", link.name), { force: true });
+        }
+        this.logger.info(`${packageName} \u2014 reinstalling runtime dependencies`, { meta: { addonDir } });
+        await require_manifest_system_deps.runNpm([
+          "install",
+          "--omit=dev",
+          "--omit=peer",
+          "--no-audit",
+          "--no-fund",
+          "--no-package-lock",
+          ...this.registry ? ["--registry", this.registry] : []
+        ], this.npmRunOptions(addonDir, 24e4));
+        this.dedupeTreeAgainstClosure(addonDir, packageName);
+        await this.installNativeDependencies(addonDir, packageName);
+      }
+      /**
       * Install a single addon — on-demand installer used by AddonPackageService
       * (admin UI "Install addon" / "Reinstall" buttons).
       *
@@ -132845,6 +133474,7 @@ var require_dist3 = __commonJS({
           logger: this.logger,
           bundledSourceDir: sourceDir
         });
+        this.dedupeTreeAgainstClosure(targetDir, packageName);
         this.logger.info(`${packageName} \u2014 copied from ${sourceDir}`);
         return {
           name: pkgData.name,
@@ -133149,6 +133779,40 @@ var require_dist3 = __commonJS({
           logger: this.logger
         });
       }
+      /**
+      * Stop copying what the server closure already provides: replace each
+      * top-level `node_modules` entry the closure serves at a COMPATIBLE version
+      * with a symlink into the closure (see `deps/closure-dedupe.ts` for the
+      * plan rules and the live measurements). Runs LAST in tree
+      * materialisation — after the runtime-dep npm install AND the native-dep
+      * steps — so no later npm invocation can fight the links.
+      *
+      * Non-fatal by design: dedupe is an optimisation, and its failure mode is
+      * "the addon keeps its own copies", which is exactly today's behaviour. A
+      * refusal on version grounds is logged loudly — that line is the answer to
+      * "why does this addon still carry its own zod".
+      */
+      dedupeTreeAgainstClosure(pkgDir, packageName) {
+        const closureNodeModules = resolveClosureNodeModulesDir(this.closureNodeModulesDir);
+        if (closureNodeModules === null) return;
+        try {
+          const state = collectAddonTreeState(pkgDir);
+          if (state.candidates.length === 0) return;
+          const pkgView = readPackageJson(node_path.join(pkgDir, "package.json"));
+          const plan = planClosureDedupe({
+            candidates: state.candidates,
+            closureVersions: readClosureVersions(closureNodeModules, state.candidates.map((c) => c.name)),
+            requirements: state.requirements,
+            neverLink: readNativeDependencyNames(pkgView?.raw)
+          });
+          const linked = executeClosureDedupe(pkgDir, closureNodeModules, plan, this.logger);
+          if (linked.length > 0) this.logger.info(`${packageName} \u2014 ${linked.length} node_modules entr${linked.length === 1 ? "y" : "ies"} now resolve from the server closure`, { meta: { linked } });
+          const refused = plan.keeps.filter((k2) => k2.reason === "version-incompatible");
+          if (refused.length > 0) this.logger.info(`${packageName} \u2014 kept own copy where the closure version is incompatible`, { meta: { kept: refused.map((k2) => k2.name) } });
+        } catch (err) {
+          this.logger.warn(`${packageName} \u2014 closure dedupe failed (copies kept)`, { meta: { error: require_dist10.errMsg(err) } });
+        }
+      }
       /** Install addon from a tgz file (uploaded or downloaded) */
       async installFromTgz(tgzPath) {
         const stagingRoot = node_path.join(this.addonsDir, ".staging");
@@ -133174,6 +133838,7 @@ var require_dist3 = __commonJS({
           const targetDir = node_path.join(this.addonsDir, pkgView.name);
           await this.installRuntimeDependencies(pkgDir, pkgView.name);
           await this.installNativeDependencies(pkgDir, pkgView.name);
+          this.dedupeTreeAgainstClosure(pkgDir, pkgView.name);
           await this.evictInstallDir(targetDir);
           ensureDir(node_path.dirname(targetDir));
           await node_fs.promises.rename(pkgDir, targetDir);
@@ -133306,6 +133971,7 @@ var require_dist3 = __commonJS({
         if (!node_fs.existsSync(addonDir)) throw new Error(`Cannot update ${packageName}: install dir ${addonDir} missing`);
         await this.installRuntimeDependencies(stagedPath, packageName);
         await this.installNativeDependencies(stagedPath, packageName);
+        this.dedupeTreeAgainstClosure(stagedPath, packageName);
         const ts2 = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
         const backupRoot = node_path.join(this.addonsDir, ".backups", packageName);
         ensureDir(backupRoot);
@@ -163521,7 +164187,7 @@ globstar while`, t, d, e, u, m), this.matchOne(t.slice(d), e.slice(u), s)) retur
     }));
     var require_symlink_type2 = /* @__PURE__ */ require_chunk.__commonJSMin(((exports2, module2) => {
       var fs2 = require_graceful_fs2();
-      function symlinkType(srcpath, type2, callback) {
+      function symlinkType2(srcpath, type2, callback) {
         callback = typeof type2 === "function" ? type2 : callback;
         type2 = typeof type2 === "function" ? false : type2;
         if (type2) return callback(null, type2);
@@ -163542,7 +164208,7 @@ globstar while`, t, d, e, u, m), this.matchOne(t.slice(d), e.slice(u), s)) retur
         return stats && stats.isDirectory() ? "dir" : "file";
       }
       module2.exports = {
-        symlinkType,
+        symlinkType: symlinkType2,
         symlinkTypeSync
       };
     }));
@@ -163557,7 +164223,7 @@ globstar while`, t, d, e, u, m), this.matchOne(t.slice(d), e.slice(u), s)) retur
       var symlinkPaths = _symlinkPaths.symlinkPaths;
       var symlinkPathsSync = _symlinkPaths.symlinkPathsSync;
       var _symlinkType = require_symlink_type2();
-      var symlinkType = _symlinkType.symlinkType;
+      var symlinkType2 = _symlinkType.symlinkType;
       var symlinkTypeSync = _symlinkType.symlinkTypeSync;
       var pathExists = require_path_exists2().pathExists;
       function createSymlink(srcpath, dstpath, type2, callback) {
@@ -163569,7 +164235,7 @@ globstar while`, t, d, e, u, m), this.matchOne(t.slice(d), e.slice(u), s)) retur
           symlinkPaths(srcpath, dstpath, (err2, relative) => {
             if (err2) return callback(err2);
             srcpath = relative.toDst;
-            symlinkType(relative.toCwd, type2, (err3, type3) => {
+            symlinkType2(relative.toCwd, type2, (err3, type3) => {
               if (err3) return callback(err3);
               const dir = path$23.dirname(dstpath);
               pathExists(dir, (err4, dirExists) => {
@@ -210088,7 +210754,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_BwGJ_wL();
+    var require_sleep = require_sleep_BDmIj1HV();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -214698,6 +215364,68 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       fileCount: zod.z.number(),
       present: zod.z.boolean()
     });
+    var BackupRunStateSchema = zod.z.enum([
+      "queued",
+      "running",
+      "succeeded",
+      "failed",
+      "cancelled"
+    ]);
+    var BackupRunPhaseSchema = zod.z.enum([
+      "queued",
+      "building",
+      "uploading",
+      "done"
+    ]);
+    var BackupRunSchema = zod.z.object({
+      /** Stable run id — the handle `backup.cancel` takes. */
+      id: zod.z.string(),
+      state: BackupRunStateSchema,
+      phase: BackupRunPhaseSchema,
+      /**
+      * Resolved destination location ids. Empty while queued (targets are
+      * resolved when the run starts, against the then-current policies).
+      */
+      destinationIds: zod.z.array(zod.z.string()).readonly(),
+      label: zod.z.string().optional(),
+      /** ms-epoch when the run was submitted (trigger call / schedule fire). */
+      requestedAt: zod.z.number(),
+      /** ms-epoch when the run left the queue and started building. */
+      startedAt: zod.z.number().optional(),
+      /** ms-epoch when the run reached a terminal state. */
+      finishedAt: zod.z.number().optional(),
+      /** Compressed bytes of the staging archive written so far. */
+      stagedBytes: zod.z.number(),
+      /** Final staged archive size, once the build phase completes. */
+      archiveSizeBytes: zod.z.number().optional(),
+      /** Bytes pushed to the destination currently uploading. */
+      uploadedBytes: zod.z.number(),
+      /** Destinations where the archive fully landed (uploaded + indexed). */
+      completedDestinationIds: zod.z.array(zod.z.string()).readonly(),
+      /** Destinations that failed during the fan-out. */
+      failedDestinationIds: zod.z.array(zod.z.string()).readonly(),
+      /** Failure message when `state === 'failed'`. */
+      error: zod.z.string().optional(),
+      /**
+      * 1-based place in the execution queue — 1 = runs next. Present only
+      * while `state === 'queued'`. Stamped by the orchestrator from the
+      * queue's OWN pending order, never derived from timestamps, so the
+      * UI cannot show an order the executor will not honour.
+      */
+      queuePosition: zod.z.number().int().min(1).optional()
+    });
+    var BackupTriggerResultSchema = zod.z.object({
+      /** The run this trigger mapped to — poll it via `listRuns`, stop it via `cancel`. */
+      runId: zod.z.string(),
+      /** True when the run waited behind an in-flight run instead of starting immediately. */
+      queued: zod.z.boolean(),
+      /** True when this trigger was coalesced onto an identical already-queued run. */
+      joined: zod.z.boolean(),
+      /** True when the run was cancelled before completing every destination. */
+      cancelled: zod.z.boolean(),
+      /** One entry per destination the archive landed at (partial on cancel). */
+      entries: zod.z.array(BackupEntrySchema).readonly()
+    });
     var BackupScheduleSchema = zod.z.object({
       /** Stable id. Generated by the orchestrator on first upsert if absent. */
       id: zod.z.string(),
@@ -214734,6 +215462,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         * Trigger a backup. Without `destinations` the orchestrator fans
         * out to every destination flagged as enabled in the routing
         * config; with it, only the listed addons receive the archive.
+        *
+        * At most ONE backup run executes at a time — the source tree and
+        * the staging disk are shared by every run, so a second trigger
+        * while one is in flight is enqueued (or joined onto an identical
+        * queued run) and the result says so. See D342.
         */
         trigger: require_sleep.method(zod.z.object({
           /** Subset of registered `backup-destination` addon ids to write to. */
@@ -214747,7 +215480,30 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           * retention (manual runs).
           */
           retentionCount: zod.z.number().int().min(1).max(1e3).optional()
-        }).optional(), zod.z.array(BackupEntrySchema).readonly(), {
+        }).optional(), BackupTriggerResultSchema, {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /**
+        * Every run the orchestrator knows about, in EXECUTION order: the
+        * running run first, then queued runs in the exact order they will
+        * execute (each with `queuePosition`, 1 = next), then the bounded
+        * finished history newest-first. Only one run executes at a time
+        * (D342) — the queued section IS the line. Each run carries live
+        * phase + byte counters so a runaway build is visible in seconds,
+        * not via `du`.
+        */
+        listRuns: require_sleep.method(zod.z.void(), zod.z.array(BackupRunSchema).readonly(), { auth: "admin" }),
+        /**
+        * Stop a backup run. Mirrors `storage-migration.cancel` semantics:
+        * id in, `{ cancelled }` out — `false` when the run is unknown or
+        * already terminal. A QUEUED run is removed before it ever starts;
+        * the RUNNING run has its tar/upload stream actually aborted, the
+        * half-written staging archive is deleted, and the in-flight
+        * destination upload is aborted server-side (partial discarded).
+        * Destinations that already completed keep their archive.
+        */
+        cancel: require_sleep.method(zod.z.object({ runId: zod.z.string() }), zod.z.object({ cancelled: zod.z.boolean() }), {
           kind: "mutation",
           auth: "admin"
         }),
@@ -215487,6 +216243,38 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         /**
+        * The HARDWARE behind a device number was replaced
+        * (`deviceManager.migrateDevice`). Forget every piece of broker state that
+        * described the old box, so the next catalog pull derives everything from
+        * the camera that is actually there:
+        *
+        *  - every `derived:*` stream definition — a derived is authored against a
+        *    specific profile layout, and against the wrong hardware its feeder
+        *    respawns forever (observed at attempt 2732 on the live hub,
+        *    2026-09-01);
+        *  - the profile-slot assignment entry, PURGED (not unassigned — unassign
+        *    marks the slot manual, which would pin the stale choice instead of
+        *    letting `computeInitialAssignment` re-derive it);
+        *  - the probe snapshots (`<deviceId>/…` — probed codec/resolution of the
+        *    old hardware);
+        *  - the persisted RTSP token rows for the device's brokers (keyed
+        *    `<deviceId>/<camStreamId>`; the stream ids change with the hardware,
+        *    so the rows are dead URLs).
+        *
+        * An RPC, deliberately — an event is telemetry and may be dropped (D8),
+        * and a dropped forget leaves a feeder respawning against a stream that
+        * does not exist.
+        */
+        forgetDeviceHardware: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().nonnegative() }), zod.z.object({
+          derivedStreamsDeleted: zod.z.array(zod.z.string()).readonly(),
+          assignmentsPurged: zod.z.boolean(),
+          probeSnapshotsDropped: zod.z.number().int().nonnegative(),
+          rtspTokenRowsDeleted: zod.z.number().int().nonnegative()
+        }), {
+          kind: "mutation",
+          auth: "admin"
+        }),
+        /**
         * Render a short GIF or MP4 from the broker's PRE-BUFFER around an instant.
         *
         * The pre-buffer is the only source that already holds the seconds BEFORE
@@ -241376,6 +242164,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "backup.cancel": {
+        capName: "backup",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "backup.delete": {
         capName: "backup",
         capScope: "system",
@@ -241418,6 +242212,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "backup.listRuns": {
+        capName: "backup",
+        capScope: "system",
+        addonId: null,
+        access: "view"
+      },
       "backup.listSchedules": {
         capName: "backup",
         capScope: "system",
@@ -245984,6 +246784,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "streamBroker.forgetDeviceHardware": {
+        capName: "stream-broker",
+        capScope: "system",
+        addonId: null,
+        access: "delete"
+      },
       "streamBroker.getAllRtspEntries": {
         capName: "stream-broker",
         capScope: "system",
@@ -248700,6 +249506,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "streamBroker.forgetDeviceHardware": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "streamBroker.getDeviceAudioMute": [{
         name: "deviceId",
         form: "single",
@@ -249071,6 +249882,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "recordingExport.listExports",
       "streamBroker.acquireEgressTranscode",
       "streamBroker.assignProfile",
+      "streamBroker.forgetDeviceHardware",
       "streamBroker.getDeviceAudioMute",
       "streamBroker.getStreamWithCodec",
       "streamBroker.produceEventMedia",
@@ -249569,6 +250381,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         backup: {
           listDestinations: (input) => dispatch("backup", "listDestinations", "query", input),
           trigger: (input) => dispatch("backup", "trigger", "mutation", input),
+          listRuns: (input) => dispatch("backup", "listRuns", "query", input),
+          cancel: (input) => dispatch("backup", "cancel", "mutation", input),
           list: (input) => dispatch("backup", "list", "query", input),
           listLocations: (input) => dispatch("backup", "listLocations", "query", input),
           getEntries: (input) => dispatch("backup", "getEntries", "query", input),
@@ -252848,6 +253662,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.BacklightModeSchema = BacklightModeSchema;
     exports.BackupDestinationInfoSchema = BackupDestinationInfoSchema;
     exports.BackupEntrySchema = BackupEntrySchema;
+    exports.BackupRunPhaseSchema = BackupRunPhaseSchema;
+    exports.BackupRunSchema = BackupRunSchema;
+    exports.BackupRunStateSchema = BackupRunStateSchema;
+    exports.BackupTriggerResultSchema = BackupTriggerResultSchema;
     exports.BaseAddon = require_sleep.BaseAddon;
     exports.BaseDevice = BaseDevice;
     exports.BaseDeviceProvider = BaseDeviceProvider;
@@ -387819,6 +388637,16 @@ var require_main2 = __commonJS({
         installSource: resolvedSource
       });
       await installer.ensureRequiredPackages(system_1.AddonInstaller.AGENT_PACKAGES);
+      if (typeof installer.ensureAddonRuntimeDeps === "function") {
+        try {
+          const depsResult = await installer.ensureAddonRuntimeDeps();
+          if (depsResult.linked.length > 0 || depsResult.reinstalled.length > 0 || depsResult.failed.length > 0) {
+            console.log(`[Agent] Addon runtime deps ensured \u2014 linked: [${depsResult.linked.join(", ")}], reinstalled: [${depsResult.reinstalled.join(", ")}], failed: [${depsResult.failed.join(", ")}] (${depsResult.checked} checked)`);
+          }
+        } catch (err) {
+          console.warn(`[Agent] ensureAddonRuntimeDeps failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+      }
       console.log(`[Agent] Addon packages ready in ${config.addonsDir}`);
       let broker = (0, system_1.createBroker)({
         nodeID: config.nodeId,
@@ -427674,6 +428502,18 @@ var require_launcher = __commonJS({
         console.warn(`[launcher] first-boot addon plan failed: ${err instanceof Error ? err.message : String(err)}`);
       }
       await installer.ensureRequiredPackages(bootstrapRequired);
+      if (typeof installer.ensureAddonRuntimeDeps === "function") {
+        try {
+          const depsResult = await installer.ensureAddonRuntimeDeps();
+          if (depsResult.linked.length > 0 || depsResult.reinstalled.length > 0 || depsResult.failed.length > 0) {
+            console.log(`[launcher] Addon runtime deps ensured \u2014 linked: [${depsResult.linked.join(", ")}], reinstalled: [${depsResult.reinstalled.join(", ")}], failed: [${depsResult.failed.join(", ")}] (${depsResult.checked} checked)`);
+          }
+        } catch (err) {
+          console.warn(`[launcher] ensureAddonRuntimeDeps failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+      } else {
+        console.warn("[launcher] ensureAddonRuntimeDeps unavailable \u2014 skipping addon dep repair");
+      }
       if (typeof installer.reconcileManifest === "function") {
         const reconciled = installer.reconcileManifest();
         if (reconciled > 0) {