@camstack/addon-osd-manager 0.1.191 → 0.1.193

package/dist/index.js

@@ -16108,6 +16108,14 @@ var KeychainAuditEntrySchema = object({
 	ref: string().nullable(),
 	detail: string().nullable()
 });
+var KEYCHAIN_RESET_CONFIRMATION = "RESET KEYCHAIN";
+/**
+* Secrets the HUB itself holds (owner `system`) that no settings form shows:
+* `jwt-signing-key` — the session signing key (D797). It is always "in use",
+* never an orphan; it is generated on a fresh hub and replaced only through
+* {@link keychainAdminCapability.methods.setSystemSecret}.
+*/
+var SystemHeldSecretNameSchema = _enum(["jwt-signing-key"]);
 var keychainAdminCapability = {
 	name: "keychain-admin",
 	scope: "system",
@@ -16128,6 +16136,24 @@ var keychainAdminCapability = {
 			auth: "admin",
 			caller: "required"
 		}),
+		/**
+		* Replace a system-held secret (no form edits it) with an operator-supplied
+		* value — e.g. importing the session signing key a pre-keychain hub kept in
+		* config.yaml, so the tokens it signed stay valid. Audited as the operator.
+		* Replacing the session signing key invalidates every token signed with the
+		* previous one.
+		*/
+		setSystemSecret: method(object({
+			name: SystemHeldSecretNameSchema,
+			value: string().min(16)
+		}), object({
+			ref: string(),
+			version: number().int()
+		}), {
+			kind: "mutation",
+			auth: "admin",
+			caller: "required"
+		}),
 		/** Delete refs no owner points at any more. Re-checked here; `unknown` is kept. */
 		deleteOrphans: method(object({ refs: array(string().min(1)).max(1e3) }), object({
 			deleted: array(string()).readonly(),
@@ -16180,7 +16206,7 @@ var keychainAdminCapability = {
 		* key. Every secret field then reads "not set". Requires the typed
 		* confirmation {@link KEYCHAIN_RESET_CONFIRMATION}.
 		*/
-		resetKeychain: method(object({ confirm: literal("RESET KEYCHAIN") }), object({
+		resetKeychain: method(object({ confirm: literal(KEYCHAIN_RESET_CONFIRMATION) }), object({
 			archivedCollection: string().nullable(),
 			archived: number().int()
 		}), {
@@ -51481,6 +51507,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"keychainAdmin.setSystemSecret": {
+		capName: "keychain-admin",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"keychainAdmin.status": {
 		capName: "keychain-admin",
 		capScope: "system",

package/dist/index.mjs

@@ -16104,6 +16104,14 @@ var KeychainAuditEntrySchema = object({
 	ref: string().nullable(),
 	detail: string().nullable()
 });
+var KEYCHAIN_RESET_CONFIRMATION = "RESET KEYCHAIN";
+/**
+* Secrets the HUB itself holds (owner `system`) that no settings form shows:
+* `jwt-signing-key` — the session signing key (D797). It is always "in use",
+* never an orphan; it is generated on a fresh hub and replaced only through
+* {@link keychainAdminCapability.methods.setSystemSecret}.
+*/
+var SystemHeldSecretNameSchema = _enum(["jwt-signing-key"]);
 var keychainAdminCapability = {
 	name: "keychain-admin",
 	scope: "system",
@@ -16124,6 +16132,24 @@ var keychainAdminCapability = {
 			auth: "admin",
 			caller: "required"
 		}),
+		/**
+		* Replace a system-held secret (no form edits it) with an operator-supplied
+		* value — e.g. importing the session signing key a pre-keychain hub kept in
+		* config.yaml, so the tokens it signed stay valid. Audited as the operator.
+		* Replacing the session signing key invalidates every token signed with the
+		* previous one.
+		*/
+		setSystemSecret: method(object({
+			name: SystemHeldSecretNameSchema,
+			value: string().min(16)
+		}), object({
+			ref: string(),
+			version: number().int()
+		}), {
+			kind: "mutation",
+			auth: "admin",
+			caller: "required"
+		}),
 		/** Delete refs no owner points at any more. Re-checked here; `unknown` is kept. */
 		deleteOrphans: method(object({ refs: array(string().min(1)).max(1e3) }), object({
 			deleted: array(string()).readonly(),
@@ -16176,7 +16202,7 @@ var keychainAdminCapability = {
 		* key. Every secret field then reads "not set". Requires the typed
 		* confirmation {@link KEYCHAIN_RESET_CONFIRMATION}.
 		*/
-		resetKeychain: method(object({ confirm: literal("RESET KEYCHAIN") }), object({
+		resetKeychain: method(object({ confirm: literal(KEYCHAIN_RESET_CONFIRMATION) }), object({
 			archivedCollection: string().nullable(),
 			archived: number().int()
 		}), {
@@ -51477,6 +51503,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"keychainAdmin.setSystemSecret": {
+		capName: "keychain-admin",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"keychainAdmin.status": {
 		capName: "keychain-admin",
 		capScope: "system",

package/dist/{player-overlays-g9eZki2x.mjs → player-overlays-yo3byY33.mjs}

@@ -1,5 +1,5 @@
 import { _ as e, l as t, u as n, x as r } from "./_virtual_mf___mfe_internal__addon_osd_manager_page__loadShare__react__loadShare__.js-D7xZfSHZ.mjs";
-import { c as i, s as a } from "./responsive-BBqy78Qy.mjs";
+import { c as i, s as a } from "./responsive-DManlL_B.mjs";
 import { n as o, r as s, t as c } from "./_virtual_mf___mfe_internal__addon_osd_manager_page__loadShare__react_mf_1_jsx_mf_2_runtime__loadShare__.js-DalfdIDw.mjs";
 var l = i("chevron-down", [["path", {
 	d: "m6 9 6 6 6-6",

package/dist/remoteEntry.js

@@ -1,2 +1,2 @@
-import { n as e, t } from "./virtual_mf-REMOTE_ENTRY_ID___mfe_internal__addon_osd_manager_page__remoteEntry_js-CoJrTruj.mjs";
+import { n as e, t } from "./virtual_mf-REMOTE_ENTRY_ID___mfe_internal__addon_osd_manager_page__remoteEntry_js-CEE9ag27.mjs";
 export { t as get, e as init };

package/dist/{responsive-BBqy78Qy.mjs → responsive-DManlL_B.mjs}

@@ -1,5 +1,5 @@
 import { _ as e, c as t, h as n, l as r, n as i, r as a, t as o, u as s, v as c, x as l } from "./_virtual_mf___mfe_internal__addon_osd_manager_page__loadShare__react__loadShare__.js-D7xZfSHZ.mjs";
-import { i as u } from "./_virtual_mf___mfe_internal__addon_osd_manager_page__loadShare___mf_0_camstack_mf_1_types__loadShare__.js-CLbOsdyJ.mjs";
+import { i as u } from "./_virtual_mf___mfe_internal__addon_osd_manager_page__loadShare___mf_0_camstack_mf_1_types__loadShare__.js-Bn-J0B4D.mjs";
 import "./_virtual_mf___mfe_internal__addon_osd_manager_page__loadShare__react_mf_1_jsx_mf_2_runtime__loadShare__.js-DalfdIDw.mjs";
 //#region ../../node_modules/lucide-react/dist/esm/shared/src/utils/mergeClasses.js
 l();

package/dist/{scene-monitor-copy-D5DzgrKC.mjs → scene-monitor-copy-D3DDVyfO.mjs}

@@ -1,5 +1,5 @@
 import { _ as e, c as t, h as n, x as r } from "./_virtual_mf___mfe_internal__addon_osd_manager_page__loadShare__react__loadShare__.js-D7xZfSHZ.mjs";
-import { c as i } from "./responsive-BBqy78Qy.mjs";
+import { c as i } from "./responsive-DManlL_B.mjs";
 var a = i("camera", [["path", {
 	d: "M13.997 4a2 2 0 0 1 1.76 1.05l.486.9A2 2 0 0 0 18.003 7H20a2 2 0 0 1 2 2v9a2 2 0 0 1-2 2H4a2 2 0 0 1-2-2V9a2 2 0 0 1 2-2h1.997a2 2 0 0 0 1.759-1.048l.489-.904A2 2 0 0 1 10.004 4z",
 	key: "18u6gg"

package/dist/{square-CenwrjWY.mjs → square-Cez2ojTo.mjs}

@@ -1,4 +1,4 @@
-import { c as e } from "./responsive-BBqy78Qy.mjs";
+import { c as e } from "./responsive-DManlL_B.mjs";
 var t = e("eye-off", [
 	["path", {
 		d: "M10.733 5.076a10.744 10.744 0 0 1 11.205 6.575 1 1 0 0 1 0 .696 10.747 10.747 0 0 1-1.444 2.49",

package/dist/{trash-2-CLXJ-udw.mjs → trash-2-Dfdmc9go.mjs}

@@ -1,4 +1,4 @@
-import { c as e } from "./responsive-BBqy78Qy.mjs";
+import { c as e } from "./responsive-DManlL_B.mjs";
 var t = e("trash-2", [
 	["path", {
 		d: "M10 11v6",

package/dist/{virtual_mf-REMOTE_ENTRY_ID___mfe_internal__addon_osd_manager_page__remoteEntry_js-CoJrTruj.mjs → virtual_mf-REMOTE_ENTRY_ID___mfe_internal__addon_osd_manager_page__remoteEntry_js-CEE9ag27.mjs}

@@ -2753,7 +2753,7 @@ async function rr(e) {
 	}
 }
 async function ir() {
-	return tr ||= rr(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_osd_manager_page-CumeuzAd.mjs")).catch((e) => {
+	return tr ||= rr(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_osd_manager_page-CoX8JVLh.mjs")).catch((e) => {
 		throw tr = void 0, e;
 	}), tr;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-osd-manager",
-  "version": "0.1.191",
+  "version": "0.1.193",
   "description": "Binds camera on-screen-display slots to live state and recognitions",
   "keywords": [
     "camstack",