@camstack/system 1.2.161 → 1.2.163

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_system_deps = require("./manifest-system-deps-DYv4ZPo2.js");
+const require_manifest_system_deps = require("./manifest-system-deps-DBje540e.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { Ct as resolveAddonClass, N as createUdsLoggerWithControl, P as LocalChildClient, Rt as RUNNER_RSS_BUDGET_ENV, St as installManifestNativeDeps, Zt as startRunnerHeapWatch, a as createUdsAddonContext, at as getWorkerNativeCapSnapshot, it as getWorkerNativeCapProvider, lt as validateProviderRegistrations, n as installManifestPythonDeps, nn as emitHeapDiagnosticReport, st as setWorkerNativeCapsChangeListener, t as installManifestSystemDeps } from "./manifest-system-deps-CiCuev2R.mjs";
+import { Ct as resolveAddonClass, N as createUdsLoggerWithControl, P as LocalChildClient, Rt as RUNNER_RSS_BUDGET_ENV, St as installManifestNativeDeps, Zt as startRunnerHeapWatch, a as createUdsAddonContext, at as getWorkerNativeCapSnapshot, it as getWorkerNativeCapProvider, lt as validateProviderRegistrations, n as installManifestPythonDeps, nn as emitHeapDiagnosticReport, st as setWorkerNativeCapsChangeListener, t as installManifestSystemDeps } from "./manifest-system-deps-CG9ESHhv.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, in as EventCategory, jt as errMsg, w as addonPagesCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, in as EventCategory, jt as errMsg, w as addonPagesCapability } from "../../dist-DxFjna2a.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { E as addonWidgetsCapability, Mt as BaseAddon, in as EventCategory, jt as errMsg } from "../../dist-D4xNBlJM.mjs";
+import { E as addonWidgetsCapability, Mt as BaseAddon, in as EventCategory, jt as errMsg } from "../../dist-DxFjna2a.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { D as alertsCapability, Gt as createEvent, Mt as BaseAddon, in as EventCategory, jt as errMsg, n as AlertSchema } from "../../dist-D4xNBlJM.mjs";
+import { D as alertsCapability, Gt as createEvent, Mt as BaseAddon, in as EventCategory, jt as errMsg, n as AlertSchema } from "../../dist-DxFjna2a.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, in as EventCategory, k as backupCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, in as EventCategory, k as backupCapability } from "../../dist-DxFjna2a.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-DxFjna2a.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { F as coreBlockIdFromAddonId, I as coreBlocksCapability, Mt as BaseAddon, P as coreBlockAddonId, c as CoreBlockSchema, jt as errMsg, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, u as DeclaredDevices } from "../../dist-D4xNBlJM.mjs";
+import { F as coreBlockIdFromAddonId, I as coreBlocksCapability, Mt as BaseAddon, P as coreBlockAddonId, c as CoreBlockSchema, jt as errMsg, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, u as DeclaredDevices } from "../../dist-DxFjna2a.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-BBohF-eC.js");
+const require_dist = require("../../dist-B29Skpzo.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-CRL0qOnU.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { B as deviceManagerCapability, G as enumerateItemArrayFields, H as deviceStatusCapability, It as DeviceFeature, K as enumerateSchemaFields, Lt as DeviceRole, M as buildStreamParamsConfigSchema, Mt as BaseAddon, Rt as DeviceType, V as deviceStateCapability, Vt as WELL_KNOWN_TAB_MAP, Xt as isDeviceConfigCap, a as CAP_NAMES_WITH_STATUS, d as DeviceStatusSchema, ft as parseStreamParamsFormPatch, in as EventCategory, jt as errMsg, rn as sleep, t as ALL_CAPABILITY_DEFINITIONS, ut as normalizeUnit, vt as runtimeStatePolicyFor, y as STREAM_PROFILE_META } from "../../dist-D4xNBlJM.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-COQMNlOJ.mjs";
+import { B as deviceManagerCapability, G as enumerateItemArrayFields, H as deviceStatusCapability, It as DeviceFeature, K as enumerateSchemaFields, Lt as DeviceRole, M as buildStreamParamsConfigSchema, Mt as BaseAddon, Rt as DeviceType, V as deviceStateCapability, Vt as WELL_KNOWN_TAB_MAP, Xt as isDeviceConfigCap, a as CAP_NAMES_WITH_STATUS, d as DeviceStatusSchema, ft as parseStreamParamsFormPatch, in as EventCategory, jt as errMsg, rn as sleep, t as ALL_CAPABILITY_DEFINITIONS, ut as normalizeUnit, vt as runtimeStatePolicyFor, y as STREAM_PROFILE_META } from "../../dist-DxFjna2a.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-N0NZzDE3.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { A as bareAddonId, Gt as createEvent, Mt as BaseAddon, Rt as DeviceType, U as doorbellCapability, _ as SOURCE_DEVICE_TYPES, et as isSameAddonId, g as SOURCE_CAPS, in as EventCategory, jt as errMsg, q as evaluateSensorEdge, tt as isSourceCap } from "../../dist-D4xNBlJM.mjs";
+import { A as bareAddonId, Gt as createEvent, Mt as BaseAddon, Rt as DeviceType, U as doorbellCapability, _ as SOURCE_DEVICE_TYPES, et as isSameAddonId, g as SOURCE_CAPS, in as EventCategory, jt as errMsg, q as evaluateSensorEdge, tt as isSourceCap } from "../../dist-DxFjna2a.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-DxFjna2a.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as createEvent, Mt as BaseAddon, in as EventCategory, jt as errMsg } from "../../dist-D4xNBlJM.mjs";
+import { Gt as createEvent, Mt as BaseAddon, in as EventCategory, jt as errMsg } from "../../dist-DxFjna2a.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { C as UserRecordSchema, Mt as BaseAddon, O as authProviderCapability, Ot as userManagementCapability, b as ScopedTokenSchema, r as ApiKeyRecordSchema } from "../../dist-D4xNBlJM.mjs";
+import { C as UserRecordSchema, Mt as BaseAddon, O as authProviderCapability, Ot as userManagementCapability, b as ScopedTokenSchema, r as ApiKeyRecordSchema } from "../../dist-DxFjna2a.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 const require_tls = require("../../tls-BxQlomxd.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, at as localNetworkCapability, in as EventCategory } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, at as localNetworkCapability, in as EventCategory } from "../../dist-DxFjna2a.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-DOTmtLCW.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, ot as logDestinationCapability } from "../../dist-DxFjna2a.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 let node_fs_promises = require("node:fs/promises");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as createEvent, Mt as BaseAddon, X as foldSnapshotByFunction, gt as resolveBucketMs, ht as reducePoints, in as EventCategory, jt as errMsg, lt as metricsProviderCapability } from "../../dist-D4xNBlJM.mjs";
+import { Gt as createEvent, Mt as BaseAddon, X as foldSnapshotByFunction, gt as resolveBucketMs, ht as reducePoints, in as EventCategory, jt as errMsg, lt as metricsProviderCapability } from "../../dist-DxFjna2a.mjs";
 import { readFile, readdir } from "node:fs/promises";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Mt as BaseAddon, W as enumerateInferenceDevices, in as EventCategory, jt as errMsg, pt as platformProbeCapability, qt as emitReadiness, xt as scoreRuntimes } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, W as enumerateInferenceDevices, in as EventCategory, jt as errMsg, pt as platformProbeCapability, qt as emitReadiness, xt as scoreRuntimes } from "../../dist-DxFjna2a.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as BaseAddon, in as EventCategory } from "../../dist-D4xNBlJM.mjs";
+import { Mt as BaseAddon, in as EventCategory } from "../../dist-DxFjna2a.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { A as bareAddonId, Ct as snapshotCapability, Dt as streamQualityLabel, It as DeviceFeature, Mt as BaseAddon, Rt as DeviceType, Zt as nodePin, i as BatteryStatusSchema, in as EventCategory, j as batteryCapability, jt as errMsg, z as deriveBatteryPresence } from "../../dist-D4xNBlJM.mjs";
+import { A as bareAddonId, Ct as snapshotCapability, Dt as streamQualityLabel, It as DeviceFeature, Mt as BaseAddon, Rt as DeviceType, Zt as nodePin, i as BatteryStatusSchema, in as EventCategory, j as batteryCapability, jt as errMsg, z as deriveBatteryPresence } from "../../dist-DxFjna2a.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Et as storageProviderCapability, Mt as BaseAddon, Y as filesystemBrowseCapability } from "../../dist-D4xNBlJM.mjs";
+import { Et as storageProviderCapability, Mt as BaseAddon, Y as filesystemBrowseCapability } from "../../dist-DxFjna2a.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/location-secrets.d.ts

@@ -1,6 +1,22 @@
 import { StorageLocation } from '@camstack/types';
-/** Shared empty set for providers that declare no secrets (or are unknown). */
-export declare const EMPTY_SECRET_KEYS: ReadonlySet<string>;
+/**
+ * The config keys the ORCHESTRATOR itself owns, as opposed to the ones a
+ * provider owns. Every one of them is read by framework code that has no idea
+ * which provider is behind the row:
+ *
+ *  - `basePath`     — `localCapacityOf`, `locationOccupancy`, the seed pass,
+ *                     `LocationCard`'s summary, `StorageSection`;
+ *  - `readOnly`     — drain mode; the recorder and post-analysis both filter on
+ *                     it off a `listLocations` row;
+ *  - `maxUsedGb`    — `resolveLocationMaxUsedBytes`;
+ *  - `minFreePercent` — `resolveLocationThresholds`.
+ *
+ * None can be a credential, because the framework interprets all four itself.
+ * That is what makes the list safe to hardcode — it is NOT a list of "keys we
+ * believe are not secret", which is the rotting kind. It is the closed set of
+ * keys this module, not a provider, defines the meaning of.
+ */
+export declare const FRAMEWORK_CONFIG_KEYS: ReadonlySet<string>;
 /** Minimal shape needed off a provider's `getProviderInfo()` result. */
 export interface ProviderInfoLike {
     readonly providerId: string;
@@ -8,6 +24,30 @@ export interface ProviderInfoLike {
 }
 /** Secret config keys a provider declares, derived from its own form schema. */
 export declare function secretKeysOfProviderInfo(info: ProviderInfoLike): ReadonlySet<string>;
+/**
+ * Which keys of THIS config must be treated as secret.
+ *
+ * `declared` is what the provider's own schema said, or `undefined` when the
+ * provider has not registered on this node and so has said nothing.
+ *
+ * The `undefined` branch is the one that matters. Redaction is schema-driven
+ * and the schema arrives with the provider, so "no provider" used to mean "no
+ * secret keys" — which redacted nothing while `listLocations` happily served
+ * the row, because that method reads the store and never needs a provider.
+ * That is a real window on every hub restart (the `remote-storage` group is a
+ * separate runner that registers after the orchestrator boots) and it is
+ * PERMANENT for a runner the CrashSupervisor marked terminally failed.
+ *
+ * So an unknown provider fails CLOSED: every key the framework does not itself
+ * define is withheld. It over-redacts — a host name is hidden alongside the
+ * password — and that is the correct direction, because the admin UI cannot
+ * render a provider's form without that same provider's `configSchema` either,
+ * so nothing that was working stops working.
+ *
+ * Withholding is done with the sentinel, never by dropping the key, so a save
+ * performed in this degraded state still round-trips every value back intact.
+ */
+export declare function secretKeysForConfig(config: Readonly<Record<string, unknown>>, declared: ReadonlySet<string> | undefined): ReadonlySet<string>;
 /**
  * A copy of `config` with every declared secret replaced by the sentinel.
  * Returns the SAME object when there is nothing to redact, so the common case

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.d.ts

@@ -74,7 +74,13 @@ export declare class StorageOrchestratorAddon extends BaseAddon<StorageOrchestra
      * the recorder so disk-pressure is a single core concern.
      */
     private resolveLocationThresholds;
-    /** Declared secret config keys for a provider; empty when unknown. */
+    /**
+     * What the provider's own schema declared secret, or `undefined` when this
+     * node has never heard from that provider. The distinction is the whole
+     * point — see `secretKeysForConfig`, which fails CLOSED on `undefined`.
+     */
+    private declaredSecretKeys;
+    /** Which keys of a given stored config must never leave this process. */
     private secretKeysFor;
     /** A location with its provider's declared secrets replaced by the sentinel. */
     private redacted;

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Keu5TDO7.js");
+const require_dist = require("../../dist-B29Skpzo.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -1178,47 +1178,62 @@ function createDataStoreDispatch(getEngines) {
 //#endregion
 //#region src/builtins/storage-orchestrator/location-secrets.ts
 /**
-* Credential redaction for `StorageLocation.config`.
+* The config keys the ORCHESTRATOR itself owns, as opposed to the ones a
+* provider owns. Every one of them is read by framework code that has no idea
+* which provider is behind the row:
 *
-* ── What was wrong ─────────────────────────────────────────────────────────
-* `storage.listLocations` carries no `auth` override, so it is `protected` —
-* every authenticated session reaches it, admin or not. The orchestrator
-* spread each stored row verbatim. `StorageLocation.config` is
-* `z.record(z.string(), z.unknown())`, and the SFTP / S3 / WebDAV providers
-* already declare `password`, `privateKey`, `privateKeyPassphrase`,
-* `secretAccessKey` and `token` inside it. Nothing was exposed only because
-* every location on the live hub is `filesystem-storage`, whose config is
-* `basePath` + `maxUsedGb`. The exposure arrives with the first remote
-* location, and three providers that collect one already ship.
+*  - `basePath`     — `localCapacityOf`, `locationOccupancy`, the seed pass,
+*                     `LocationCard`'s summary, `StorageSection`;
+*  - `readOnly`     — drain mode; the recorder and post-analysis both filter on
+*                     it off a `listLocations` row;
+*  - `maxUsedGb`    — `resolveLocationMaxUsedBytes`;
+*  - `minFreePercent` — `resolveLocationThresholds`.
 *
-* ── The mechanism ──────────────────────────────────────────────────────────
-* Schema-driven, never a hardcoded key list: each provider's
-* `getProviderInfo().configSchema` already says which of its fields hold a
-* credential, so it is the one thing that cannot drift from the provider.
-*
-* Two directions, and both are needed:
-*  - **out** — {@link redactLocationConfig} replaces every secret value with
-*    `REDACTED_SECRET` on the way to a caller.
-*  - **in** — {@link restoreRedactedSecrets} treats that same sentinel, sent
-*    back on an upsert, as "keep what is stored". Without it the wizard's
-*    edit-and-save round trip would write the sentinel into the config and
-*    lock the operator out of their own share on the first rename.
-*
-* ── The trap this deliberately avoids ──────────────────────────────────────
-* Keying redaction off `type: 'password'` alone MISSES a secret parked in a
-* `textarea`, and the SFTP provider parks an entire PEM private key there.
-* Discovery goes through `collectSecretConfigKeys`, whose discriminator is
-* `type === 'password' || secret === true`. A redaction that quietly misses a
-* credential is worse than none: it is a leak plus an assurance there is not
-* one.
+* None can be a credential, because the framework interprets all four itself.
+* That is what makes the list safe to hardcode — it is NOT a list of "keys we
+* believe are not secret", which is the rotting kind. It is the closed set of
+* keys this module, not a provider, defines the meaning of.
 */
-/** Shared empty set for providers that declare no secrets (or are unknown). */
-var EMPTY_SECRET_KEYS = /* @__PURE__ */ new Set();
+var FRAMEWORK_CONFIG_KEYS = new Set([
+	"basePath",
+	"readOnly",
+	"maxUsedGb",
+	"minFreePercent"
+]);
 /** Secret config keys a provider declares, derived from its own form schema. */
 function secretKeysOfProviderInfo(info) {
 	return require_dist.collectSecretConfigKeys(info.configSchema);
 }
 /**
+* Which keys of THIS config must be treated as secret.
+*
+* `declared` is what the provider's own schema said, or `undefined` when the
+* provider has not registered on this node and so has said nothing.
+*
+* The `undefined` branch is the one that matters. Redaction is schema-driven
+* and the schema arrives with the provider, so "no provider" used to mean "no
+* secret keys" — which redacted nothing while `listLocations` happily served
+* the row, because that method reads the store and never needs a provider.
+* That is a real window on every hub restart (the `remote-storage` group is a
+* separate runner that registers after the orchestrator boots) and it is
+* PERMANENT for a runner the CrashSupervisor marked terminally failed.
+*
+* So an unknown provider fails CLOSED: every key the framework does not itself
+* define is withheld. It over-redacts — a host name is hidden alongside the
+* password — and that is the correct direction, because the admin UI cannot
+* render a provider's form without that same provider's `configSchema` either,
+* so nothing that was working stops working.
+*
+* Withholding is done with the sentinel, never by dropping the key, so a save
+* performed in this degraded state still round-trips every value back intact.
+*/
+function secretKeysForConfig(config, declared) {
+	if (declared !== void 0) return declared;
+	const out = /* @__PURE__ */ new Set();
+	for (const key of Object.keys(config)) if (!FRAMEWORK_CONFIG_KEYS.has(key)) out.add(key);
+	return out;
+}
+/**
 * A copy of `config` with every declared secret replaced by the sentinel.
 * Returns the SAME object when there is nothing to redact, so the common case
 * (a filesystem location) allocates nothing.
@@ -2300,7 +2315,7 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 			listLocationDeclarations: async () => service.listDeclarations(),
 			upsertLocation: async (input) => {
 				const stored = service.getLocationById(input.id);
-				const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId));
+				const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId, stored?.config ?? {}));
 				const saved = service.upsertLocation(config === input.config ? input : {
 					...input,
 					config
@@ -2333,11 +2348,14 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 					} });
 				});
 			},
-			testConfig: async ({ providerId, config }) => {
+			testConfig: async ({ providerId, locationId, config }) => {
+				const stored = locationId === void 0 ? void 0 : service.getLocationById(locationId);
+				const base = stored?.providerId === providerId ? stored.config : void 0;
+				const resolved = restoreRedactedSecrets(config, base, this.secretKeysFor(providerId, base ?? {}));
 				const providers = getProviders();
 				for (const p of providers) try {
 					if ((await p.getProviderInfo()).providerId !== providerId) continue;
-					return p.testLocation({ config });
+					return p.testLocation({ config: resolved });
 				} catch (err) {
 					return {
 						ok: false,
@@ -2655,13 +2673,21 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 		}
 		return out;
 	}
-	/** Declared secret config keys for a provider; empty when unknown. */
-	secretKeysFor(providerId) {
-		return this.secretKeysByProvider.get(providerId) ?? EMPTY_SECRET_KEYS;
+	/**
+	* What the provider's own schema declared secret, or `undefined` when this
+	* node has never heard from that provider. The distinction is the whole
+	* point — see `secretKeysForConfig`, which fails CLOSED on `undefined`.
+	*/
+	declaredSecretKeys(providerId) {
+		return this.secretKeysByProvider.get(providerId);
+	}
+	/** Which keys of a given stored config must never leave this process. */
+	secretKeysFor(providerId, config) {
+		return secretKeysForConfig(config, this.declaredSecretKeys(providerId));
 	}
 	/** A location with its provider's declared secrets replaced by the sentinel. */
 	redacted(location) {
-		return redactLocation(location, this.secretKeysFor(location.providerId));
+		return redactLocation(location, this.secretKeysFor(location.providerId, location.config));
 	}
 	/**
 	* Is this location backed by a provider that serves a genuine local