@camstack/system 1.2.161 → 1.2.162

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_system_deps = require("./manifest-system-deps-DYv4ZPo2.js");
+const require_manifest_system_deps = require("./manifest-system-deps-alrkBKVQ.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { Ct as resolveAddonClass, N as createUdsLoggerWithControl, P as LocalChildClient, Rt as RUNNER_RSS_BUDGET_ENV, St as installManifestNativeDeps, Zt as startRunnerHeapWatch, a as createUdsAddonContext, at as getWorkerNativeCapSnapshot, it as getWorkerNativeCapProvider, lt as validateProviderRegistrations, n as installManifestPythonDeps, nn as emitHeapDiagnosticReport, st as setWorkerNativeCapsChangeListener, t as installManifestSystemDeps } from "./manifest-system-deps-CiCuev2R.mjs";
+import { Ct as resolveAddonClass, N as createUdsLoggerWithControl, P as LocalChildClient, Rt as RUNNER_RSS_BUDGET_ENV, St as installManifestNativeDeps, Zt as startRunnerHeapWatch, a as createUdsAddonContext, at as getWorkerNativeCapSnapshot, it as getWorkerNativeCapProvider, lt as validateProviderRegistrations, n as installManifestPythonDeps, nn as emitHeapDiagnosticReport, st as setWorkerNativeCapsChangeListener, t as installManifestSystemDeps } from "./manifest-system-deps-shjDShSB.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, in as EventCategory, jt as errMsg, w as addonPagesCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, in as EventCategory, jt as errMsg, w as addonPagesCapability } from "../../dist-5Xzz_kCk.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { E as addonWidgetsCapability, Mt as BaseAddon, in as EventCategory, jt as errMsg } from "../../dist-D4xNBlJM.mjs";
+import { E as addonWidgetsCapability, Mt as BaseAddon, in as EventCategory, jt as errMsg } from "../../dist-5Xzz_kCk.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { D as alertsCapability, Gt as createEvent, Mt as BaseAddon, in as EventCategory, jt as errMsg, n as AlertSchema } from "../../dist-D4xNBlJM.mjs";
+import { D as alertsCapability, Gt as createEvent, Mt as BaseAddon, in as EventCategory, jt as errMsg, n as AlertSchema } from "../../dist-5Xzz_kCk.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, in as EventCategory, k as backupCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, in as EventCategory, k as backupCapability } from "../../dist-5Xzz_kCk.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-5Xzz_kCk.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { F as coreBlockIdFromAddonId, I as coreBlocksCapability, Mt as BaseAddon, P as coreBlockAddonId, c as CoreBlockSchema, jt as errMsg, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, u as DeclaredDevices } from "../../dist-D4xNBlJM.mjs";
+import { F as coreBlockIdFromAddonId, I as coreBlocksCapability, Mt as BaseAddon, P as coreBlockAddonId, c as CoreBlockSchema, jt as errMsg, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, u as DeclaredDevices } from "../../dist-5Xzz_kCk.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-BBohF-eC.js");
+const require_dist = require("../../dist-CCIBlacf.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-BxV3e2Km.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { B as deviceManagerCapability, G as enumerateItemArrayFields, H as deviceStatusCapability, It as DeviceFeature, K as enumerateSchemaFields, Lt as DeviceRole, M as buildStreamParamsConfigSchema, Mt as BaseAddon, Rt as DeviceType, V as deviceStateCapability, Vt as WELL_KNOWN_TAB_MAP, Xt as isDeviceConfigCap, a as CAP_NAMES_WITH_STATUS, d as DeviceStatusSchema, ft as parseStreamParamsFormPatch, in as EventCategory, jt as errMsg, rn as sleep, t as ALL_CAPABILITY_DEFINITIONS, ut as normalizeUnit, vt as runtimeStatePolicyFor, y as STREAM_PROFILE_META } from "../../dist-D4xNBlJM.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-COQMNlOJ.mjs";
+import { B as deviceManagerCapability, G as enumerateItemArrayFields, H as deviceStatusCapability, It as DeviceFeature, K as enumerateSchemaFields, Lt as DeviceRole, M as buildStreamParamsConfigSchema, Mt as BaseAddon, Rt as DeviceType, V as deviceStateCapability, Vt as WELL_KNOWN_TAB_MAP, Xt as isDeviceConfigCap, a as CAP_NAMES_WITH_STATUS, d as DeviceStatusSchema, ft as parseStreamParamsFormPatch, in as EventCategory, jt as errMsg, rn as sleep, t as ALL_CAPABILITY_DEFINITIONS, ut as normalizeUnit, vt as runtimeStatePolicyFor, y as STREAM_PROFILE_META } from "../../dist-5Xzz_kCk.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CnuALlaP.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { A as bareAddonId, Gt as createEvent, Mt as BaseAddon, Rt as DeviceType, U as doorbellCapability, _ as SOURCE_DEVICE_TYPES, et as isSameAddonId, g as SOURCE_CAPS, in as EventCategory, jt as errMsg, q as evaluateSensorEdge, tt as isSourceCap } from "../../dist-D4xNBlJM.mjs";
+import { A as bareAddonId, Gt as createEvent, Mt as BaseAddon, Rt as DeviceType, U as doorbellCapability, _ as SOURCE_DEVICE_TYPES, et as isSameAddonId, g as SOURCE_CAPS, in as EventCategory, jt as errMsg, q as evaluateSensorEdge, tt as isSourceCap } from "../../dist-5Xzz_kCk.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-5Xzz_kCk.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as createEvent, Mt as BaseAddon, in as EventCategory, jt as errMsg } from "../../dist-D4xNBlJM.mjs";
+import { Gt as createEvent, Mt as BaseAddon, in as EventCategory, jt as errMsg } from "../../dist-5Xzz_kCk.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { C as UserRecordSchema, Mt as BaseAddon, O as authProviderCapability, Ot as userManagementCapability, b as ScopedTokenSchema, r as ApiKeyRecordSchema } from "../../dist-D4xNBlJM.mjs";
+import { C as UserRecordSchema, Mt as BaseAddon, O as authProviderCapability, Ot as userManagementCapability, b as ScopedTokenSchema, r as ApiKeyRecordSchema } from "../../dist-5Xzz_kCk.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 const require_tls = require("../../tls-BxQlomxd.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, at as localNetworkCapability, in as EventCategory } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, at as localNetworkCapability, in as EventCategory } from "../../dist-5Xzz_kCk.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-DOTmtLCW.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-5Xzz_kCk.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 let node_fs_promises = require("node:fs/promises");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as createEvent, Mt as BaseAddon, X as foldSnapshotByFunction, gt as resolveBucketMs, ht as reducePoints, in as EventCategory, jt as errMsg, lt as metricsProviderCapability } from "../../dist-D4xNBlJM.mjs";
+import { Gt as createEvent, Mt as BaseAddon, X as foldSnapshotByFunction, gt as resolveBucketMs, ht as reducePoints, in as EventCategory, jt as errMsg, lt as metricsProviderCapability } from "../../dist-5Xzz_kCk.mjs";
 import { readFile, readdir } from "node:fs/promises";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Mt as BaseAddon, W as enumerateInferenceDevices, in as EventCategory, jt as errMsg, pt as platformProbeCapability, qt as emitReadiness, xt as scoreRuntimes } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, W as enumerateInferenceDevices, in as EventCategory, jt as errMsg, pt as platformProbeCapability, qt as emitReadiness, xt as scoreRuntimes } from "../../dist-5Xzz_kCk.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, in as EventCategory } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, in as EventCategory } from "../../dist-5Xzz_kCk.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { A as bareAddonId, Ct as snapshotCapability, Dt as streamQualityLabel, It as DeviceFeature, Mt as BaseAddon, Rt as DeviceType, Zt as nodePin, i as BatteryStatusSchema, in as EventCategory, j as batteryCapability, jt as errMsg, z as deriveBatteryPresence } from "../../dist-D4xNBlJM.mjs";
+import { A as bareAddonId, Ct as snapshotCapability, Dt as streamQualityLabel, It as DeviceFeature, Mt as BaseAddon, Rt as DeviceType, Zt as nodePin, i as BatteryStatusSchema, in as EventCategory, j as batteryCapability, jt as errMsg, z as deriveBatteryPresence } from "../../dist-5Xzz_kCk.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Et as storageProviderCapability, Mt as BaseAddon, Y as filesystemBrowseCapability } from "../../dist-D4xNBlJM.mjs";
+import { Et as storageProviderCapability, Mt as BaseAddon, Y as filesystemBrowseCapability } from "../../dist-5Xzz_kCk.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/location-secrets.d.ts

@@ -1,6 +1,22 @@
 import { StorageLocation } from '@camstack/types';
-/** Shared empty set for providers that declare no secrets (or are unknown). */
-export declare const EMPTY_SECRET_KEYS: ReadonlySet<string>;
+/**
+ * The config keys the ORCHESTRATOR itself owns, as opposed to the ones a
+ * provider owns. Every one of them is read by framework code that has no idea
+ * which provider is behind the row:
+ *
+ *  - `basePath`     — `localCapacityOf`, `locationOccupancy`, the seed pass,
+ *                     `LocationCard`'s summary, `StorageSection`;
+ *  - `readOnly`     — drain mode; the recorder and post-analysis both filter on
+ *                     it off a `listLocations` row;
+ *  - `maxUsedGb`    — `resolveLocationMaxUsedBytes`;
+ *  - `minFreePercent` — `resolveLocationThresholds`.
+ *
+ * None can be a credential, because the framework interprets all four itself.
+ * That is what makes the list safe to hardcode — it is NOT a list of "keys we
+ * believe are not secret", which is the rotting kind. It is the closed set of
+ * keys this module, not a provider, defines the meaning of.
+ */
+export declare const FRAMEWORK_CONFIG_KEYS: ReadonlySet<string>;
 /** Minimal shape needed off a provider's `getProviderInfo()` result. */
 export interface ProviderInfoLike {
     readonly providerId: string;
@@ -8,6 +24,30 @@ export interface ProviderInfoLike {
 }
 /** Secret config keys a provider declares, derived from its own form schema. */
 export declare function secretKeysOfProviderInfo(info: ProviderInfoLike): ReadonlySet<string>;
+/**
+ * Which keys of THIS config must be treated as secret.
+ *
+ * `declared` is what the provider's own schema said, or `undefined` when the
+ * provider has not registered on this node and so has said nothing.
+ *
+ * The `undefined` branch is the one that matters. Redaction is schema-driven
+ * and the schema arrives with the provider, so "no provider" used to mean "no
+ * secret keys" — which redacted nothing while `listLocations` happily served
+ * the row, because that method reads the store and never needs a provider.
+ * That is a real window on every hub restart (the `remote-storage` group is a
+ * separate runner that registers after the orchestrator boots) and it is
+ * PERMANENT for a runner the CrashSupervisor marked terminally failed.
+ *
+ * So an unknown provider fails CLOSED: every key the framework does not itself
+ * define is withheld. It over-redacts — a host name is hidden alongside the
+ * password — and that is the correct direction, because the admin UI cannot
+ * render a provider's form without that same provider's `configSchema` either,
+ * so nothing that was working stops working.
+ *
+ * Withholding is done with the sentinel, never by dropping the key, so a save
+ * performed in this degraded state still round-trips every value back intact.
+ */
+export declare function secretKeysForConfig(config: Readonly<Record<string, unknown>>, declared: ReadonlySet<string> | undefined): ReadonlySet<string>;
 /**
  * A copy of `config` with every declared secret replaced by the sentinel.
  * Returns the SAME object when there is nothing to redact, so the common case

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.d.ts

@@ -74,7 +74,13 @@ export declare class StorageOrchestratorAddon extends BaseAddon<StorageOrchestra
      * the recorder so disk-pressure is a single core concern.
      */
     private resolveLocationThresholds;
-    /** Declared secret config keys for a provider; empty when unknown. */
+    /**
+     * What the provider's own schema declared secret, or `undefined` when this
+     * node has never heard from that provider. The distinction is the whole
+     * point — see `secretKeysForConfig`, which fails CLOSED on `undefined`.
+     */
+    private declaredSecretKeys;
+    /** Which keys of a given stored config must never leave this process. */
     private secretKeysFor;
     /** A location with its provider's declared secrets replaced by the sentinel. */
     private redacted;

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -1178,47 +1178,62 @@ function createDataStoreDispatch(getEngines) {
 //#endregion
 //#region src/builtins/storage-orchestrator/location-secrets.ts
 /**
-* Credential redaction for `StorageLocation.config`.
+* The config keys the ORCHESTRATOR itself owns, as opposed to the ones a
+* provider owns. Every one of them is read by framework code that has no idea
+* which provider is behind the row:
 *
-* ── What was wrong ─────────────────────────────────────────────────────────
-* `storage.listLocations` carries no `auth` override, so it is `protected` —
-* every authenticated session reaches it, admin or not. The orchestrator
-* spread each stored row verbatim. `StorageLocation.config` is
-* `z.record(z.string(), z.unknown())`, and the SFTP / S3 / WebDAV providers
-* already declare `password`, `privateKey`, `privateKeyPassphrase`,
-* `secretAccessKey` and `token` inside it. Nothing was exposed only because
-* every location on the live hub is `filesystem-storage`, whose config is
-* `basePath` + `maxUsedGb`. The exposure arrives with the first remote
-* location, and three providers that collect one already ship.
+*  - `basePath`     — `localCapacityOf`, `locationOccupancy`, the seed pass,
+*                     `LocationCard`'s summary, `StorageSection`;
+*  - `readOnly`     — drain mode; the recorder and post-analysis both filter on
+*                     it off a `listLocations` row;
+*  - `maxUsedGb`    — `resolveLocationMaxUsedBytes`;
+*  - `minFreePercent` — `resolveLocationThresholds`.
 *
-* ── The mechanism ──────────────────────────────────────────────────────────
-* Schema-driven, never a hardcoded key list: each provider's
-* `getProviderInfo().configSchema` already says which of its fields hold a
-* credential, so it is the one thing that cannot drift from the provider.
-*
-* Two directions, and both are needed:
-*  - **out** — {@link redactLocationConfig} replaces every secret value with
-*    `REDACTED_SECRET` on the way to a caller.
-*  - **in** — {@link restoreRedactedSecrets} treats that same sentinel, sent
-*    back on an upsert, as "keep what is stored". Without it the wizard's
-*    edit-and-save round trip would write the sentinel into the config and
-*    lock the operator out of their own share on the first rename.
-*
-* ── The trap this deliberately avoids ──────────────────────────────────────
-* Keying redaction off `type: 'password'` alone MISSES a secret parked in a
-* `textarea`, and the SFTP provider parks an entire PEM private key there.
-* Discovery goes through `collectSecretConfigKeys`, whose discriminator is
-* `type === 'password' || secret === true`. A redaction that quietly misses a
-* credential is worse than none: it is a leak plus an assurance there is not
-* one.
+* None can be a credential, because the framework interprets all four itself.
+* That is what makes the list safe to hardcode — it is NOT a list of "keys we
+* believe are not secret", which is the rotting kind. It is the closed set of
+* keys this module, not a provider, defines the meaning of.
 */
-/** Shared empty set for providers that declare no secrets (or are unknown). */
-var EMPTY_SECRET_KEYS = /* @__PURE__ */ new Set();
+var FRAMEWORK_CONFIG_KEYS = new Set([
+	"basePath",
+	"readOnly",
+	"maxUsedGb",
+	"minFreePercent"
+]);
 /** Secret config keys a provider declares, derived from its own form schema. */
 function secretKeysOfProviderInfo(info) {
 	return require_dist.collectSecretConfigKeys(info.configSchema);
 }
 /**
+* Which keys of THIS config must be treated as secret.
+*
+* `declared` is what the provider's own schema said, or `undefined` when the
+* provider has not registered on this node and so has said nothing.
+*
+* The `undefined` branch is the one that matters. Redaction is schema-driven
+* and the schema arrives with the provider, so "no provider" used to mean "no
+* secret keys" — which redacted nothing while `listLocations` happily served
+* the row, because that method reads the store and never needs a provider.
+* That is a real window on every hub restart (the `remote-storage` group is a
+* separate runner that registers after the orchestrator boots) and it is
+* PERMANENT for a runner the CrashSupervisor marked terminally failed.
+*
+* So an unknown provider fails CLOSED: every key the framework does not itself
+* define is withheld. It over-redacts — a host name is hidden alongside the
+* password — and that is the correct direction, because the admin UI cannot
+* render a provider's form without that same provider's `configSchema` either,
+* so nothing that was working stops working.
+*
+* Withholding is done with the sentinel, never by dropping the key, so a save
+* performed in this degraded state still round-trips every value back intact.
+*/
+function secretKeysForConfig(config, declared) {
+	if (declared !== void 0) return declared;
+	const out = /* @__PURE__ */ new Set();
+	for (const key of Object.keys(config)) if (!FRAMEWORK_CONFIG_KEYS.has(key)) out.add(key);
+	return out;
+}
+/**
 * A copy of `config` with every declared secret replaced by the sentinel.
 * Returns the SAME object when there is nothing to redact, so the common case
 * (a filesystem location) allocates nothing.
@@ -2300,7 +2315,7 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 			listLocationDeclarations: async () => service.listDeclarations(),
 			upsertLocation: async (input) => {
 				const stored = service.getLocationById(input.id);
-				const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId));
+				const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId, stored?.config ?? {}));
 				const saved = service.upsertLocation(config === input.config ? input : {
 					...input,
 					config
@@ -2333,11 +2348,14 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 					} });
 				});
 			},
-			testConfig: async ({ providerId, config }) => {
+			testConfig: async ({ providerId, locationId, config }) => {
+				const stored = locationId === void 0 ? void 0 : service.getLocationById(locationId);
+				const base = stored?.providerId === providerId ? stored.config : void 0;
+				const resolved = restoreRedactedSecrets(config, base, this.secretKeysFor(providerId, base ?? {}));
 				const providers = getProviders();
 				for (const p of providers) try {
 					if ((await p.getProviderInfo()).providerId !== providerId) continue;
-					return p.testLocation({ config });
+					return p.testLocation({ config: resolved });
 				} catch (err) {
 					return {
 						ok: false,
@@ -2655,13 +2673,21 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 		}
 		return out;
 	}
-	/** Declared secret config keys for a provider; empty when unknown. */
-	secretKeysFor(providerId) {
-		return this.secretKeysByProvider.get(providerId) ?? EMPTY_SECRET_KEYS;
+	/**
+	* What the provider's own schema declared secret, or `undefined` when this
+	* node has never heard from that provider. The distinction is the whole
+	* point — see `secretKeysForConfig`, which fails CLOSED on `undefined`.
+	*/
+	declaredSecretKeys(providerId) {
+		return this.secretKeysByProvider.get(providerId);
+	}
+	/** Which keys of a given stored config must never leave this process. */
+	secretKeysFor(providerId, config) {
+		return secretKeysForConfig(config, this.declaredSecretKeys(providerId));
 	}
 	/** A location with its provider's declared secrets replaced by the sentinel. */
 	redacted(location) {
-		return redactLocation(location, this.secretKeysFor(location.providerId));
+		return redactLocation(location, this.secretKeysFor(location.providerId, location.config));
 	}
 	/**
 	* Is this location backed by a provider that serves a genuine local

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, N as collectSecretConfigKeys, Qt as parseJsonObject, S as StorageMigrationJobSchema, St as settingsStoreCapability, Tt as storageMigrationCapability, m as REDACTED_SECRET, wt as storageCapability, x as StorageLocationTypeSchema } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, N as collectSecretConfigKeys, Qt as parseJsonObject, S as StorageMigrationJobSchema, St as settingsStoreCapability, Tt as storageMigrationCapability, m as REDACTED_SECRET, wt as storageCapability, x as StorageLocationTypeSchema } from "../../dist-5Xzz_kCk.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";
@@ -1171,47 +1171,62 @@ function createDataStoreDispatch(getEngines) {
 //#endregion
 //#region src/builtins/storage-orchestrator/location-secrets.ts
 /**
-* Credential redaction for `StorageLocation.config`.
+* The config keys the ORCHESTRATOR itself owns, as opposed to the ones a
+* provider owns. Every one of them is read by framework code that has no idea
+* which provider is behind the row:
 *
-* ── What was wrong ─────────────────────────────────────────────────────────
-* `storage.listLocations` carries no `auth` override, so it is `protected` —
-* every authenticated session reaches it, admin or not. The orchestrator
-* spread each stored row verbatim. `StorageLocation.config` is
-* `z.record(z.string(), z.unknown())`, and the SFTP / S3 / WebDAV providers
-* already declare `password`, `privateKey`, `privateKeyPassphrase`,
-* `secretAccessKey` and `token` inside it. Nothing was exposed only because
-* every location on the live hub is `filesystem-storage`, whose config is
-* `basePath` + `maxUsedGb`. The exposure arrives with the first remote
-* location, and three providers that collect one already ship.
+*  - `basePath`     — `localCapacityOf`, `locationOccupancy`, the seed pass,
+*                     `LocationCard`'s summary, `StorageSection`;
+*  - `readOnly`     — drain mode; the recorder and post-analysis both filter on
+*                     it off a `listLocations` row;
+*  - `maxUsedGb`    — `resolveLocationMaxUsedBytes`;
+*  - `minFreePercent` — `resolveLocationThresholds`.
 *
-* ── The mechanism ──────────────────────────────────────────────────────────
-* Schema-driven, never a hardcoded key list: each provider's
-* `getProviderInfo().configSchema` already says which of its fields hold a
-* credential, so it is the one thing that cannot drift from the provider.
-*
-* Two directions, and both are needed:
-*  - **out** — {@link redactLocationConfig} replaces every secret value with
-*    `REDACTED_SECRET` on the way to a caller.
-*  - **in** — {@link restoreRedactedSecrets} treats that same sentinel, sent
-*    back on an upsert, as "keep what is stored". Without it the wizard's
-*    edit-and-save round trip would write the sentinel into the config and
-*    lock the operator out of their own share on the first rename.
-*
-* ── The trap this deliberately avoids ──────────────────────────────────────
-* Keying redaction off `type: 'password'` alone MISSES a secret parked in a
-* `textarea`, and the SFTP provider parks an entire PEM private key there.
-* Discovery goes through `collectSecretConfigKeys`, whose discriminator is
-* `type === 'password' || secret === true`. A redaction that quietly misses a
-* credential is worse than none: it is a leak plus an assurance there is not
-* one.
+* None can be a credential, because the framework interprets all four itself.
+* That is what makes the list safe to hardcode — it is NOT a list of "keys we
+* believe are not secret", which is the rotting kind. It is the closed set of
+* keys this module, not a provider, defines the meaning of.
 */
-/** Shared empty set for providers that declare no secrets (or are unknown). */
-var EMPTY_SECRET_KEYS = /* @__PURE__ */ new Set();
+var FRAMEWORK_CONFIG_KEYS = new Set([
+	"basePath",
+	"readOnly",
+	"maxUsedGb",
+	"minFreePercent"
+]);
 /** Secret config keys a provider declares, derived from its own form schema. */
 function secretKeysOfProviderInfo(info) {
 	return collectSecretConfigKeys(info.configSchema);
 }
 /**
+* Which keys of THIS config must be treated as secret.
+*
+* `declared` is what the provider's own schema said, or `undefined` when the
+* provider has not registered on this node and so has said nothing.
+*
+* The `undefined` branch is the one that matters. Redaction is schema-driven
+* and the schema arrives with the provider, so "no provider" used to mean "no
+* secret keys" — which redacted nothing while `listLocations` happily served
+* the row, because that method reads the store and never needs a provider.
+* That is a real window on every hub restart (the `remote-storage` group is a
+* separate runner that registers after the orchestrator boots) and it is
+* PERMANENT for a runner the CrashSupervisor marked terminally failed.
+*
+* So an unknown provider fails CLOSED: every key the framework does not itself
+* define is withheld. It over-redacts — a host name is hidden alongside the
+* password — and that is the correct direction, because the admin UI cannot
+* render a provider's form without that same provider's `configSchema` either,
+* so nothing that was working stops working.
+*
+* Withholding is done with the sentinel, never by dropping the key, so a save
+* performed in this degraded state still round-trips every value back intact.
+*/
+function secretKeysForConfig(config, declared) {
+	if (declared !== void 0) return declared;
+	const out = /* @__PURE__ */ new Set();
+	for (const key of Object.keys(config)) if (!FRAMEWORK_CONFIG_KEYS.has(key)) out.add(key);
+	return out;
+}
+/**
 * A copy of `config` with every declared secret replaced by the sentinel.
 * Returns the SAME object when there is nothing to redact, so the common case
 * (a filesystem location) allocates nothing.
@@ -2293,7 +2308,7 @@ var StorageOrchestratorAddon = class extends BaseAddon {
 			listLocationDeclarations: async () => service.listDeclarations(),
 			upsertLocation: async (input) => {
 				const stored = service.getLocationById(input.id);
-				const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId));
+				const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId, stored?.config ?? {}));
 				const saved = service.upsertLocation(config === input.config ? input : {
 					...input,
 					config
@@ -2326,11 +2341,14 @@ var StorageOrchestratorAddon = class extends BaseAddon {
 					} });
 				});
 			},
-			testConfig: async ({ providerId, config }) => {
+			testConfig: async ({ providerId, locationId, config }) => {
+				const stored = locationId === void 0 ? void 0 : service.getLocationById(locationId);
+				const base = stored?.providerId === providerId ? stored.config : void 0;
+				const resolved = restoreRedactedSecrets(config, base, this.secretKeysFor(providerId, base ?? {}));
 				const providers = getProviders();
 				for (const p of providers) try {
 					if ((await p.getProviderInfo()).providerId !== providerId) continue;
-					return p.testLocation({ config });
+					return p.testLocation({ config: resolved });
 				} catch (err) {
 					return {
 						ok: false,
@@ -2648,13 +2666,21 @@ var StorageOrchestratorAddon = class extends BaseAddon {
 		}
 		return out;
 	}
-	/** Declared secret config keys for a provider; empty when unknown. */
-	secretKeysFor(providerId) {
-		return this.secretKeysByProvider.get(providerId) ?? EMPTY_SECRET_KEYS;
+	/**
+	* What the provider's own schema declared secret, or `undefined` when this
+	* node has never heard from that provider. The distinction is the whole
+	* point — see `secretKeysForConfig`, which fails CLOSED on `undefined`.
+	*/
+	declaredSecretKeys(providerId) {
+		return this.secretKeysByProvider.get(providerId);
+	}
+	/** Which keys of a given stored config must never leave this process. */
+	secretKeysFor(providerId, config) {
+		return secretKeysForConfig(config, this.declaredSecretKeys(providerId));
 	}
 	/** A location with its provider's declared secrets replaced by the sentinel. */
 	redacted(location) {
-		return redactLocation(location, this.secretKeysFor(location.providerId));
+		return redactLocation(location, this.secretKeysFor(location.providerId, location.config));
 	}
 	/**
 	* Is this location backed by a provider that serves a genuine local

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, Yt as hydrateSchema, jt as errMsg } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, Yt as hydrateSchema, jt as errMsg } from "../../dist-5Xzz_kCk.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-CCIBlacf.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-5Xzz_kCk.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-D4xNBlJM.mjs → dist-5Xzz_kCk.mjs}

@@ -17876,6 +17876,50 @@ var EventStoreFootprintSchema = z.object({
 	totalBytes: z.number().int(),
 	devices: z.array(EventStoreDeviceFootprintSchema).readonly()
 });
+/** Event-media footprint for one {@link MediaFileKind}. */
+var EventMediaKindFootprintSchema = z.object({
+	kind: MediaFileKindEnum,
+	/** Media rows of this kind. */
+	rows: z.number().int(),
+	/** Bytes on disk held by those rows. */
+	bytes: z.number().int()
+});
+/**
+* The media footprint broken down by KIND — the axis a deletion decision
+* actually turns on.
+*
+* A byte total says how much there is; it cannot say what is safe to remove.
+* The deletable set (the periodic `snapshot` filmstrip, the surplus per-edge
+* motion stills) and the keep set (`firstFrame`, rolling `lastFrame`,
+* `thumbnail`/`thumbnailSmall`, `keyFrame`/`keyFrameSmall`, the face/plate
+* buffers, gallery media, the CLIP `crop`) are distinguished by `kind` and by
+* nothing else, so sizing a deletion means summing per kind.
+*
+* ## Why `unaccounted*` exists
+*
+* `kinds` is enumerated from {@link MediaFileKindEnum} — the closed set the
+* writers use — and summed one kind at a time. `totalRows` / `totalBytes` come
+* from a SEPARATE unfiltered aggregate over the same rows, never from adding
+* `kinds` up. A row whose stored `kind` is not in the enum (written by a
+* retired code path, or by a version that knew a kind this one does not) would
+* otherwise vanish from the total silently, and an operator would delete
+* against a denominator smaller than the disk.
+*
+* `unaccountedRows` / `unaccountedBytes` are the difference. They are normally
+* zero; a non-zero value is a real finding and must be shown, not rounded away.
+*/
+var EventMediaKindBreakdownSchema = z.object({
+	/** Every media row in scope, from one unfiltered aggregate. */
+	totalRows: z.number().int(),
+	/** Every media byte in scope, from that same aggregate. */
+	totalBytes: z.number().int(),
+	/** Per-kind footprint, ordered by bytes descending. */
+	kinds: z.array(EventMediaKindFootprintSchema).readonly(),
+	/** `totalRows` minus the summed `kinds` rows — see the schema note. */
+	unaccountedRows: z.number().int(),
+	/** `totalBytes` minus the summed `kinds` bytes — see the schema note. */
+	unaccountedBytes: z.number().int()
+});
 /** Per-kind counts returned by the event-prune / device-delete mutations. */
 var EventPruneCountsSchema = z.object({
 	motion: z.number().int(),
@@ -18258,6 +18302,22 @@ var pipelineAnalyticsCapability = {
 			auth: "admin"
 		}),
 		/**
+		* The same media footprint, broken down by {@link MediaFileKind} instead of
+		* by camera — fleet-wide, or for one camera with `deviceId`.
+		*
+		* Separate from {@link getEventStoreFootprint} rather than a field on it:
+		* the two answer different questions on different axes, the per-camera one
+		* is what the management table renders on every open, and nothing should
+		* pay for a per-kind pass to draw it. See
+		* {@link EventMediaKindBreakdownSchema} for why `unaccounted*` exists —
+		* `kinds` is enumerated, `totalBytes` is not, and the gap must be visible
+		* to anyone sizing a deletion against it.
+		*/
+		getEventMediaFootprintByKind: method(z.object({ deviceId: z.number().int().optional() }), EventMediaKindBreakdownSchema, {
+			kind: "query",
+			auth: "admin"
+		}),
+		/**
 		* Cluster-wide prune of events older than `olderThanMs` (exclusive) across
 		* every camera, deleting each event's media in lockstep. Logged to the
 		* events ops-log with `reason` (default `'retention'`). Returns the summed
@@ -21255,6 +21315,20 @@ var storageCapability = {
 		listProviders: method(z.void(), z.array(ProviderListEntrySchema).readonly()),
 		testConfig: method(z.object({
 			providerId: z.string(),
+			/**
+			* The location this config is an UNSAVED edit of, when there is one.
+			*
+			* `listLocations` replaces every declared secret with the redaction
+			* sentinel, so the edit modal's form state holds the sentinel for any
+			* credential the operator did not retype — and posting that here
+			* without a way to resolve it makes the provider try to authenticate
+			* as `__camstack_redacted__` and report the operator's own working
+			* password as wrong. Given this id, the orchestrator restores each
+			* sentinel from the stored config (same rule as `upsertLocation`)
+			* before dispatching. Omitted by the "Add location" wizard, where
+			* every value was typed just now and nothing is stored yet.
+			*/
+			locationId: z.string().optional(),
 			config: z.record(z.string(), z.unknown())
 		}), z.object({
 			ok: z.boolean(),
@@ -36827,6 +36901,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getEventMediaFootprintByKind": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getEventStoreFootprint": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -40492,6 +40572,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineAnalytics.getEventMediaFootprintByKind": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
 	"pipelineAnalytics.getGroup": [{
 		name: "deviceId",
 		form: "single",

package/dist/{dist-Keu5TDO7.js → dist-CCIBlacf.js}

@@ -17876,6 +17876,50 @@ var EventStoreFootprintSchema = zod.z.object({
 	totalBytes: zod.z.number().int(),
 	devices: zod.z.array(EventStoreDeviceFootprintSchema).readonly()
 });
+/** Event-media footprint for one {@link MediaFileKind}. */
+var EventMediaKindFootprintSchema = zod.z.object({
+	kind: MediaFileKindEnum,
+	/** Media rows of this kind. */
+	rows: zod.z.number().int(),
+	/** Bytes on disk held by those rows. */
+	bytes: zod.z.number().int()
+});
+/**
+* The media footprint broken down by KIND — the axis a deletion decision
+* actually turns on.
+*
+* A byte total says how much there is; it cannot say what is safe to remove.
+* The deletable set (the periodic `snapshot` filmstrip, the surplus per-edge
+* motion stills) and the keep set (`firstFrame`, rolling `lastFrame`,
+* `thumbnail`/`thumbnailSmall`, `keyFrame`/`keyFrameSmall`, the face/plate
+* buffers, gallery media, the CLIP `crop`) are distinguished by `kind` and by
+* nothing else, so sizing a deletion means summing per kind.
+*
+* ## Why `unaccounted*` exists
+*
+* `kinds` is enumerated from {@link MediaFileKindEnum} — the closed set the
+* writers use — and summed one kind at a time. `totalRows` / `totalBytes` come
+* from a SEPARATE unfiltered aggregate over the same rows, never from adding
+* `kinds` up. A row whose stored `kind` is not in the enum (written by a
+* retired code path, or by a version that knew a kind this one does not) would
+* otherwise vanish from the total silently, and an operator would delete
+* against a denominator smaller than the disk.
+*
+* `unaccountedRows` / `unaccountedBytes` are the difference. They are normally
+* zero; a non-zero value is a real finding and must be shown, not rounded away.
+*/
+var EventMediaKindBreakdownSchema = zod.z.object({
+	/** Every media row in scope, from one unfiltered aggregate. */
+	totalRows: zod.z.number().int(),
+	/** Every media byte in scope, from that same aggregate. */
+	totalBytes: zod.z.number().int(),
+	/** Per-kind footprint, ordered by bytes descending. */
+	kinds: zod.z.array(EventMediaKindFootprintSchema).readonly(),
+	/** `totalRows` minus the summed `kinds` rows — see the schema note. */
+	unaccountedRows: zod.z.number().int(),
+	/** `totalBytes` minus the summed `kinds` bytes — see the schema note. */
+	unaccountedBytes: zod.z.number().int()
+});
 /** Per-kind counts returned by the event-prune / device-delete mutations. */
 var EventPruneCountsSchema = zod.z.object({
 	motion: zod.z.number().int(),
@@ -18258,6 +18302,22 @@ var pipelineAnalyticsCapability = {
 			auth: "admin"
 		}),
 		/**
+		* The same media footprint, broken down by {@link MediaFileKind} instead of
+		* by camera — fleet-wide, or for one camera with `deviceId`.
+		*
+		* Separate from {@link getEventStoreFootprint} rather than a field on it:
+		* the two answer different questions on different axes, the per-camera one
+		* is what the management table renders on every open, and nothing should
+		* pay for a per-kind pass to draw it. See
+		* {@link EventMediaKindBreakdownSchema} for why `unaccounted*` exists —
+		* `kinds` is enumerated, `totalBytes` is not, and the gap must be visible
+		* to anyone sizing a deletion against it.
+		*/
+		getEventMediaFootprintByKind: method(zod.z.object({ deviceId: zod.z.number().int().optional() }), EventMediaKindBreakdownSchema, {
+			kind: "query",
+			auth: "admin"
+		}),
+		/**
 		* Cluster-wide prune of events older than `olderThanMs` (exclusive) across
 		* every camera, deleting each event's media in lockstep. Logged to the
 		* events ops-log with `reason` (default `'retention'`). Returns the summed
@@ -21255,6 +21315,20 @@ var storageCapability = {
 		listProviders: method(zod.z.void(), zod.z.array(ProviderListEntrySchema).readonly()),
 		testConfig: method(zod.z.object({
 			providerId: zod.z.string(),
+			/**
+			* The location this config is an UNSAVED edit of, when there is one.
+			*
+			* `listLocations` replaces every declared secret with the redaction
+			* sentinel, so the edit modal's form state holds the sentinel for any
+			* credential the operator did not retype — and posting that here
+			* without a way to resolve it makes the provider try to authenticate
+			* as `__camstack_redacted__` and report the operator's own working
+			* password as wrong. Given this id, the orchestrator restores each
+			* sentinel from the stored config (same rule as `upsertLocation`)
+			* before dispatching. Omitted by the "Add location" wizard, where
+			* every value was typed just now and nothing is stored yet.
+			*/
+			locationId: zod.z.string().optional(),
 			config: zod.z.record(zod.z.string(), zod.z.unknown())
 		}), zod.z.object({
 			ok: zod.z.boolean(),
@@ -36827,6 +36901,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getEventMediaFootprintByKind": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getEventStoreFootprint": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -40492,6 +40572,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineAnalytics.getEventMediaFootprintByKind": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
 	"pipelineAnalytics.getGroup": [{
 		name: "deviceId",
 		form: "single",

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-Keu5TDO7.js");
+const require_dist = require("./dist-CCIBlacf.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -26,7 +26,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_file_data_plane = require("./file-data-plane-DO8KbxCe.js");
 const require_tls$1 = require("./tls-BxQlomxd.js");
-const require_manifest_system_deps = require("./manifest-system-deps-DYv4ZPo2.js");
+const require_manifest_system_deps = require("./manifest-system-deps-alrkBKVQ.js");
 const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let zod = require("zod");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $ as isObjectInput, $t as parseJsonUnknown$1, Bt as ReadinessTimeoutError, Ft as DEVICE_STATUS_METHOD, Gt as createEvent, Ht as asJsonObject$1, J as extractNestedAddonId, Jt as expandCapMethods, Kt as emitDownForOwnedCaps, Nt as DATAPLANE_SECRET_HEADER$1, Pt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Q as isCollectionArrayMethod, Qt as parseJsonObject, T as addonSettingsCapability, Ut as asNumber, Wt as asString$1, Z as isArrayOutputSchema, _t as resolveMethodAuth, bt as scopesAllowDeviceCap, ct as looseSchema, dt as objectInputDeclaresAddonId, en as readinessKey, f as LOG_LEVEL_RANK, h as RUNTIME_DEFAULTS, in as EventCategory$1, it as lifecycleJobSchema, jt as errMsg$1, mt as procedureAuthKey, nn as scopeKey, nt as isVoidInput, p as METHOD_ACCESS_MAP, rt as kebabToCamel, st as logLevelAtMost, t as ALL_CAPABILITY_DEFINITIONS, tn as resolveCapMount, yt as scopesAllowAddon, zt as ReadinessRegistry } from "./dist-D4xNBlJM.mjs";
+import { $ as isObjectInput, $t as parseJsonUnknown$1, Bt as ReadinessTimeoutError, Ft as DEVICE_STATUS_METHOD, Gt as createEvent, Ht as asJsonObject$1, J as extractNestedAddonId, Jt as expandCapMethods, Kt as emitDownForOwnedCaps, Nt as DATAPLANE_SECRET_HEADER$1, Pt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Q as isCollectionArrayMethod, Qt as parseJsonObject, T as addonSettingsCapability, Ut as asNumber, Wt as asString$1, Z as isArrayOutputSchema, _t as resolveMethodAuth, bt as scopesAllowDeviceCap, ct as looseSchema, dt as objectInputDeclaresAddonId, en as readinessKey, f as LOG_LEVEL_RANK, h as RUNTIME_DEFAULTS, in as EventCategory$1, it as lifecycleJobSchema, jt as errMsg$1, mt as procedureAuthKey, nn as scopeKey, nt as isVoidInput, p as METHOD_ACCESS_MAP, rt as kebabToCamel, st as logLevelAtMost, t as ALL_CAPABILITY_DEFINITIONS, tn as resolveCapMount, yt as scopesAllowAddon, zt as ReadinessRegistry } from "./dist-5Xzz_kCk.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -25,7 +25,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { a as parseTokenizedUrl, c as collectModelFiles, d as downloadModel, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, o as resolveFilePath, p as fetchJson, r as createAuthenticatedFileServer, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-BhKdxJgf.mjs";
 import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-DOTmtLCW.mjs";
-import { $ as FrameDecoder, $t as DECISIVE_HEAP_SPACES, A as createUdsEventBus, At as HEAP_WATCH_INTERVAL_MS, B as CapRouteError, Bt as buildHeapSample, C as ipcParentLink, Cn as diffEventPlane, Ct as resolveAddonClass, D as createHubCapForwardService, Dt as HEAP_RECLAIM_MIN_INTERVAL_MS, E as HUB_CAP_FWD_SERVICE, Et as createAddonDataPlaneFacility, F as LocalChildRegistry, Ft as RSS_BUDGET_REANNOUNCE_MIN_MS, G as PARENT_ROUTED_PROVIDER_ADDON_ID, Gt as hubMainRssBudget, H as callWithServiceDiscovery, Ht as createLoopDelayMeter, I as UDS_NO_ROUTE_PREFIX, It as RSS_BUDGET_RELEASE_RATIO, J as createLocalTransport, Jt as reclaimIntervalMs, K as __resetCapUsageRegistryForTests, Kt as nextRssBudgetState, L as AGENT_CAP_FWD_ACTION, Lt as RUNNER_HEAP_WATCH_INTERVAL_MS, M as createUdsLogger, Mt as HUB_MAIN_HEAP_WATCH_LABEL, N as createUdsLoggerWithControl, Nt as HUB_MAIN_RSS_BUDGET_MB, O as createParentUnownedCallHandler, Ot as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, P as LocalChildClient, Pt as HUB_RSS_BUDGET_ENV, Q as localEndpointPath, Qt as strandedMb, R as AGENT_CAP_FWD_SERVICE, Rt as RUNNER_RSS_BUDGET_ENV, S as buildLinkChain, Sn as createEventPlaneReader, St as installManifestNativeDeps, T as HUB_CAP_FWD_ACTION, Tt as runNpm, U as readMoleculerFanoutMode, Ut as createV8Reclaimer, V as classifyCapRoute, Vt as createDeferredHeapWatchSink, W as CapUsageRegistry, Wt as describeRss, X as UdsLocalTransportServer, Xt as startHeapWatch, Y as UdsLocalTransportClient, Yt as shouldReclaim, Z as SocketChannel, Zt as startRunnerHeapWatch, _ as AddonDepsManager, _n as sampleSocketDirection, _t as serializeTypedArrays, a as createUdsAddonContext, an as heapSpaceField, b as brokerCallForCap, bn as EVENT_PLANE_TOP_N, bt as CapabilityUnavailableError, c as getOrInitReadinessRegistryForClient, cn as EMPTY_SOCKET_PLANE_BASELINE, ct as createAddonService, d as clusterEventTopic, dn as createSocketPlaneReader, dt as capActionName, en as HEAP_SPACE_REPORT_MIN_MB, et as encodeFrame, f as getBrokerEventBus, fn as diffSocketPlane, ft as capActionSuffix, g as subscribePassthrough, gn as recordSocketFrame, gt as deserializeTypedArrays, h as setNodeEventInterest, hn as createSocketDirectionCounters, ht as parseCapAction, i as createAddonContext, in as heapSnapshotAuthorised, j as udsChildLogToWorkerEntry, jt as HEAP_WATCH_WARN_RATIO, k as createUdsEventBridge, kt as HEAP_RECLAIM_TRIGGER_MB, l as setHubConnected, ln as SOCKET_PLANE_TOP_N, lt as validateProviderRegistrations, m as registerEventBusService, mn as EMPTY_SOCKET_DIRECTION, mt as capServiceName, n as installManifestPythonDeps, nn as emitHeapDiagnosticReport, nt as buildUdsNativeCapProxy, o as getWorkerDeviceRegistry, on as readHeapSpaces, ot as mountNativeCapService, p as getMoleculerEventStats, pn as formatSocketPlane, pt as capBareAction, q as getCapUsageRegistry, qt as parseRssBudgetMb, r as adaptBrokerToCluster, rn as formatHeapSpaces, rt as createBrokerDeviceManagerApi, s as getOrInitReadinessRegistry, sn as selectReportedSpaces, t as installManifestSystemDeps, tn as RUNNER_HEAP_SNAPSHOT_ENV, tt as buildNativeCapProxy, u as EVENT_TOPIC_PREFIX, un as createSocketPlaneMeter, ut as NATIVE_PROVIDER_SERVICE_INFIX, v as createKernelHwAccel, vn as socketDirectionBytes, vt as DeviceRegistry, w as localProviderLink, wn as formatEventPlane, wt as resolveNpmInvocation, x as brokerTransportLink, xn as createEventPlaneMeter, xt as copyBundledNativeModules, y as resolveHwAccel, yn as socketDirectionMessages, yt as CapabilityHandle, z as CapRouteResolver, zt as ZERO_LOOP_DELAY } from "./manifest-system-deps-CiCuev2R.mjs";
+import { $ as FrameDecoder, $t as DECISIVE_HEAP_SPACES, A as createUdsEventBus, At as HEAP_WATCH_INTERVAL_MS, B as CapRouteError, Bt as buildHeapSample, C as ipcParentLink, Cn as diffEventPlane, Ct as resolveAddonClass, D as createHubCapForwardService, Dt as HEAP_RECLAIM_MIN_INTERVAL_MS, E as HUB_CAP_FWD_SERVICE, Et as createAddonDataPlaneFacility, F as LocalChildRegistry, Ft as RSS_BUDGET_REANNOUNCE_MIN_MS, G as PARENT_ROUTED_PROVIDER_ADDON_ID, Gt as hubMainRssBudget, H as callWithServiceDiscovery, Ht as createLoopDelayMeter, I as UDS_NO_ROUTE_PREFIX, It as RSS_BUDGET_RELEASE_RATIO, J as createLocalTransport, Jt as reclaimIntervalMs, K as __resetCapUsageRegistryForTests, Kt as nextRssBudgetState, L as AGENT_CAP_FWD_ACTION, Lt as RUNNER_HEAP_WATCH_INTERVAL_MS, M as createUdsLogger, Mt as HUB_MAIN_HEAP_WATCH_LABEL, N as createUdsLoggerWithControl, Nt as HUB_MAIN_RSS_BUDGET_MB, O as createParentUnownedCallHandler, Ot as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, P as LocalChildClient, Pt as HUB_RSS_BUDGET_ENV, Q as localEndpointPath, Qt as strandedMb, R as AGENT_CAP_FWD_SERVICE, Rt as RUNNER_RSS_BUDGET_ENV, S as buildLinkChain, Sn as createEventPlaneReader, St as installManifestNativeDeps, T as HUB_CAP_FWD_ACTION, Tt as runNpm, U as readMoleculerFanoutMode, Ut as createV8Reclaimer, V as classifyCapRoute, Vt as createDeferredHeapWatchSink, W as CapUsageRegistry, Wt as describeRss, X as UdsLocalTransportServer, Xt as startHeapWatch, Y as UdsLocalTransportClient, Yt as shouldReclaim, Z as SocketChannel, Zt as startRunnerHeapWatch, _ as AddonDepsManager, _n as sampleSocketDirection, _t as serializeTypedArrays, a as createUdsAddonContext, an as heapSpaceField, b as brokerCallForCap, bn as EVENT_PLANE_TOP_N, bt as CapabilityUnavailableError, c as getOrInitReadinessRegistryForClient, cn as EMPTY_SOCKET_PLANE_BASELINE, ct as createAddonService, d as clusterEventTopic, dn as createSocketPlaneReader, dt as capActionName, en as HEAP_SPACE_REPORT_MIN_MB, et as encodeFrame, f as getBrokerEventBus, fn as diffSocketPlane, ft as capActionSuffix, g as subscribePassthrough, gn as recordSocketFrame, gt as deserializeTypedArrays, h as setNodeEventInterest, hn as createSocketDirectionCounters, ht as parseCapAction, i as createAddonContext, in as heapSnapshotAuthorised, j as udsChildLogToWorkerEntry, jt as HEAP_WATCH_WARN_RATIO, k as createUdsEventBridge, kt as HEAP_RECLAIM_TRIGGER_MB, l as setHubConnected, ln as SOCKET_PLANE_TOP_N, lt as validateProviderRegistrations, m as registerEventBusService, mn as EMPTY_SOCKET_DIRECTION, mt as capServiceName, n as installManifestPythonDeps, nn as emitHeapDiagnosticReport, nt as buildUdsNativeCapProxy, o as getWorkerDeviceRegistry, on as readHeapSpaces, ot as mountNativeCapService, p as getMoleculerEventStats, pn as formatSocketPlane, pt as capBareAction, q as getCapUsageRegistry, qt as parseRssBudgetMb, r as adaptBrokerToCluster, rn as formatHeapSpaces, rt as createBrokerDeviceManagerApi, s as getOrInitReadinessRegistry, sn as selectReportedSpaces, t as installManifestSystemDeps, tn as RUNNER_HEAP_SNAPSHOT_ENV, tt as buildNativeCapProxy, u as EVENT_TOPIC_PREFIX, un as createSocketPlaneMeter, ut as NATIVE_PROVIDER_SERVICE_INFIX, v as createKernelHwAccel, vn as socketDirectionBytes, vt as DeviceRegistry, w as localProviderLink, wn as formatEventPlane, wt as resolveNpmInvocation, x as brokerTransportLink, xn as createEventPlaneMeter, xt as copyBundledNativeModules, y as resolveHwAccel, yn as socketDirectionMessages, yt as CapabilityHandle, z as CapRouteResolver, zt as ZERO_LOOP_DELAY } from "./manifest-system-deps-shjDShSB.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-BWmQ5i-o.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { z } from "zod";

package/dist/{manifest-system-deps-DYv4ZPo2.js → manifest-system-deps-alrkBKVQ.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-require("./dist-Keu5TDO7.js");
+require("./dist-CCIBlacf.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let _camstack_types_node = require("@camstack/types/node");

package/dist/{manifest-system-deps-CiCuev2R.mjs → manifest-system-deps-shjDShSB.mjs}

@@ -1,4 +1,4 @@
-import "./dist-D4xNBlJM.mjs";
+import "./dist-5Xzz_kCk.mjs";
 import * as crypto$1 from "node:crypto";
 import { randomBytes, randomUUID } from "node:crypto";
 import { ensureBinary, ensureFfmpeg, ensurePython, installPythonPackages, installPythonRequirements } from "@camstack/types/node";

package/dist/{retired-settings-keys-BBohF-eC.js → retired-settings-keys-BxV3e2Km.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Keu5TDO7.js");
+const require_dist = require("./dist-CCIBlacf.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-COQMNlOJ.mjs → retired-settings-keys-CnuALlaP.mjs}

@@ -1,4 +1,4 @@
-import { Ht as asJsonObject } from "./dist-D4xNBlJM.mjs";
+import { Ht as asJsonObject } from "./dist-5Xzz_kCk.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.161",
+  "version": "1.2.162",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",