@camstack/system 1.2.22 → 1.2.23

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_manifest_python_deps = require("./manifest-python-deps-CnRW2Utv.js");
+const require_manifest_python_deps = require("./manifest-python-deps-CqDPWqEE.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { Ct as resolveAddonClass, I as createUdsLoggerWithControl, L as LocalChildClient, at as setWorkerNativeCapsChangeListener, bt as installManifestNativeDeps, i as createUdsAddonContext, nt as getWorkerNativeCapProvider, rt as getWorkerNativeCapSnapshot, st as validateProviderRegistrations, t as installManifestPythonDeps } from "./manifest-python-deps-B30qVAuW.mjs";
+import { Ct as resolveAddonClass, I as createUdsLoggerWithControl, L as LocalChildClient, at as setWorkerNativeCapsChangeListener, bt as installManifestNativeDeps, i as createUdsAddonContext, nt as getWorkerNativeCapProvider, rt as getWorkerNativeCapSnapshot, st as validateProviderRegistrations, t as installManifestPythonDeps } from "./manifest-python-deps-57PA4rHm.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 import { register } from "node:module";
 import * as fs from "node:fs";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, it as errMsg, jt as EventCategory, p as addonPagesCapability } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, it as errMsg, jt as EventCategory, p as addonPagesCapability } from "../../dist-CIek6F9X.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, h as addonWidgetsCapability, it as errMsg, jt as EventCategory } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, h as addonWidgetsCapability, it as errMsg, jt as EventCategory } from "../../dist-CIek6F9X.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 //#region src/builtins/alerts/alerts.addon.ts
 var CATEGORY_MAPPINGS = {
 	"addon.crashed": {

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, g as alertsCapability, it as errMsg, jt as EventCategory, n as AlertSchema, vt as createEvent } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, g as alertsCapability, it as errMsg, jt as EventCategory, n as AlertSchema, vt as createEvent } from "../../dist-CIek6F9X.mjs";
 //#region src/builtins/alerts/alerts.addon.ts
 var CATEGORY_MAPPINGS = {
 	"addon.crashed": {

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.d.ts

@@ -149,15 +149,6 @@ export declare class BackupOrchestratorAddon extends BaseAddon<Record<string, ne
     private listSchedules;
     private upsertSchedule;
     private deleteSchedule;
-    /**
-     * One-shot migration: pre-schedule installs carried the cron on each
-     * `BackupDestinationPolicy`. When the schedule table is empty but
-     * policies with crons exist, mint one schedule per cron'd destination
-     * so existing scheduled backups keep firing after the redesign. The
-     * legacy per-location cron is left intact but the scheduler no longer
-     * reads it, so no double-fire.
-     */
-    private migrateLegacyCronToSchedules;
     private resolveScheduleService;
     private resolvePolicyService;
     /**

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let node_fs = require("node:fs");
 let node_fs$1 = require_chunk.__toESM(node_fs, 1);
 node_fs = require_chunk.__toESM(node_fs);
@@ -4815,7 +4815,6 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 		this.schedules = this.resolveScheduleService();
 		if (this.schedules) try {
 			await this.schedules.initialize();
-			await this.migrateLegacyCronToSchedules();
 		} catch (err) {
 			this.ctx.logger.error("backup-orchestrator: schedule table init failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
 			this.schedules = null;
@@ -5449,44 +5448,6 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 		if (!this.schedules) return;
 		await this.schedules.delete(input.id);
 	}
-	/**
-	* One-shot migration: pre-schedule installs carried the cron on each
-	* `BackupDestinationPolicy`. When the schedule table is empty but
-	* policies with crons exist, mint one schedule per cron'd destination
-	* so existing scheduled backups keep firing after the redesign. The
-	* legacy per-location cron is left intact but the scheduler no longer
-	* reads it, so no double-fire.
-	*/
-	async migrateLegacyCronToSchedules() {
-		if (!this.schedules || !this.policies) return;
-		if ((await this.schedules.list()).length > 0) return;
-		const cronned = (await this.policies.list()).filter((p) => p.cron && p.cron.trim().length > 0);
-		if (cronned.length === 0) return;
-		for (const p of cronned) {
-			const schedule = {
-				id: (0, node_crypto.randomUUID)(),
-				label: p.label ?? p.locationId,
-				cron: p.cron ?? "",
-				enabled: p.enabled,
-				locationIds: [p.locationId],
-				retentionCount: p.retentionCount,
-				...p.lastRunAt !== void 0 ? { lastRunAt: p.lastRunAt } : {}
-			};
-			try {
-				await this.schedules.upsert(schedule);
-				this.ctx.logger.info("Migrated legacy per-location cron to schedule", { meta: {
-					locationId: p.locationId,
-					scheduleId: schedule.id,
-					cron: schedule.cron
-				} });
-			} catch (err) {
-				this.ctx.logger.warn("Legacy cron migration failed for destination", { meta: {
-					locationId: p.locationId,
-					error: err instanceof Error ? err.message : String(err)
-				} });
-			}
-		}
-	}
 	resolveScheduleService() {
 		const reg = this.ctx.kernel.capabilityRegistry;
 		if (!reg) return null;

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, jt as EventCategory, y as backupCapability } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, jt as EventCategory, y as backupCapability } from "../../dist-CIek6F9X.mjs";
 import * as fs from "node:fs";
 import Kt from "node:fs";
 import * as path$1 from "node:path";
@@ -4800,7 +4800,6 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		this.schedules = this.resolveScheduleService();
 		if (this.schedules) try {
 			await this.schedules.initialize();
-			await this.migrateLegacyCronToSchedules();
 		} catch (err) {
 			this.ctx.logger.error("backup-orchestrator: schedule table init failed", { meta: { error: err instanceof Error ? err.message : String(err) } });
 			this.schedules = null;
@@ -5434,44 +5433,6 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 		if (!this.schedules) return;
 		await this.schedules.delete(input.id);
 	}
-	/**
-	* One-shot migration: pre-schedule installs carried the cron on each
-	* `BackupDestinationPolicy`. When the schedule table is empty but
-	* policies with crons exist, mint one schedule per cron'd destination
-	* so existing scheduled backups keep firing after the redesign. The
-	* legacy per-location cron is left intact but the scheduler no longer
-	* reads it, so no double-fire.
-	*/
-	async migrateLegacyCronToSchedules() {
-		if (!this.schedules || !this.policies) return;
-		if ((await this.schedules.list()).length > 0) return;
-		const cronned = (await this.policies.list()).filter((p) => p.cron && p.cron.trim().length > 0);
-		if (cronned.length === 0) return;
-		for (const p of cronned) {
-			const schedule = {
-				id: randomUUID(),
-				label: p.label ?? p.locationId,
-				cron: p.cron ?? "",
-				enabled: p.enabled,
-				locationIds: [p.locationId],
-				retentionCount: p.retentionCount,
-				...p.lastRunAt !== void 0 ? { lastRunAt: p.lastRunAt } : {}
-			};
-			try {
-				await this.schedules.upsert(schedule);
-				this.ctx.logger.info("Migrated legacy per-location cron to schedule", { meta: {
-					locationId: p.locationId,
-					scheduleId: schedule.id,
-					cron: schedule.cron
-				} });
-			} catch (err) {
-				this.ctx.logger.warn("Legacy cron migration failed for destination", { meta: {
-					locationId: p.locationId,
-					error: err instanceof Error ? err.message : String(err)
-				} });
-			}
-		}
-	}
 	resolveScheduleService() {
 		const reg = this.ctx.kernel.capabilityRegistry;
 		if (!reg) return null;

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, z as logDestinationCapability } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, z as logDestinationCapability } from "../../dist-CIek6F9X.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let _camstack_types_node = require("@camstack/types/node");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { At as sleep, C as deviceStatusCapability, Ct as isDeviceConfigCap, D as enumerateSchemaFields, E as enumerateItemArrayFields, G as parseStreamParamsFormPatch, O as evaluateLinkExpression, S as deviceStateCapability, U as normalizeUnit, Y as setByPath, _ as applyTransform, a as CAP_NAMES_WITH_STATUS, at as BaseAddon, b as buildStreamParamsConfigSchema, dt as DeviceType, it as errMsg, j as getByPath, jt as EventCategory, l as STREAM_PROFILE_META, lt as DeviceFeature, mt as WELL_KNOWN_TAB_MAP, o as DeviceStatusSchema, rt as validateExpressionSource, t as ALL_CAPABILITY_DEFINITIONS, tt as toExpressionValue, ut as DeviceRole, x as deviceManagerCapability } from "../../dist-C9_XdXl5.mjs";
+import { At as sleep, C as deviceStatusCapability, Ct as isDeviceConfigCap, D as enumerateSchemaFields, E as enumerateItemArrayFields, G as parseStreamParamsFormPatch, O as evaluateLinkExpression, S as deviceStateCapability, U as normalizeUnit, Y as setByPath, _ as applyTransform, a as CAP_NAMES_WITH_STATUS, at as BaseAddon, b as buildStreamParamsConfigSchema, dt as DeviceType, it as errMsg, j as getByPath, jt as EventCategory, l as STREAM_PROFILE_META, lt as DeviceFeature, mt as WELL_KNOWN_TAB_MAP, o as DeviceStatusSchema, rt as validateExpressionSource, t as ALL_CAPABILITY_DEFINITIONS, tt as toExpressionValue, ut as DeviceRole, x as deviceManagerCapability } from "../../dist-CIek6F9X.mjs";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, dt as DeviceType, it as errMsg, jt as EventCategory, vt as createEvent, w as doorbellCapability } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, dt as DeviceType, it as errMsg, jt as EventCategory, vt as createEvent, w as doorbellCapability } from "../../dist-CIek6F9X.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, z as logDestinationCapability } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, z as logDestinationCapability } from "../../dist-CIek6F9X.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { at as BaseAddon, f as UserRecordSchema, nt as userManagementCapability, r as ApiKeyRecordSchema, u as ScopedTokenSchema, v as authProviderCapability } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, f as UserRecordSchema, nt as userManagementCapability, r as ApiKeyRecordSchema, u as ScopedTokenSchema, v as authProviderCapability } from "../../dist-CIek6F9X.mjs";
 import * as crypto$1 from "node:crypto";
 import { randomUUID } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.d.ts

@@ -20,6 +20,14 @@ interface LocalNetworkConfig {
      *  with LAN/Wi-Fi addresses) from "operator explicitly cleared the
      *  allowlist" (true + empty → respect operator's choice). */
     readonly bootSeeded: boolean;
+    /**
+     * The endpoint outbound artifacts (notification attachment links, deep
+     * links) must be addressed by. Empty = AUTO: the first public candidate,
+     * never loopback. Stored VERBATIM rather than as an index into the candidate
+     * list — interfaces come and go, and an index would silently re-point at a
+     * different address after a reboot.
+     */
+    readonly notificationBaseUrl: string;
 }
 export declare class LocalNetworkAddon extends BaseAddon<LocalNetworkConfig> {
     private pollTimer;
@@ -35,6 +43,14 @@ export declare class LocalNetworkAddon extends BaseAddon<LocalNetworkConfig> {
      */
     private meshEndpoint;
     constructor();
+    /**
+     * What AUTO currently resolves to for outbound artifact links: the first
+     * PUBLIC candidate, never loopback and never a LAN address — a link is
+     * opened on someone's phone, off this network, possibly hours later.
+     * `null` when nothing public is reachable (the caller then ships bytes only
+     * rather than a link that 404s).
+     */
+    private resolveNotificationEndpoint;
     protected onInitialize(): Promise<ProviderRegistration[]>;
     protected onShutdown(): Promise<void>;
     /**

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 //#region src/builtins/local-network/local-network.addon.ts
@@ -44,9 +44,25 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	constructor() {
 		super({
 			allowedAddresses: [],
-			bootSeeded: false
+			bootSeeded: false,
+			notificationBaseUrl: ""
 		});
 	}
+	/**
+	* What AUTO currently resolves to for outbound artifact links: the first
+	* PUBLIC candidate, never loopback and never a LAN address — a link is
+	* opened on someone's phone, off this network, possibly hours later.
+	* `null` when nothing public is reachable (the caller then ships bytes only
+	* rather than a link that 404s).
+	*/
+	resolveNotificationEndpoint() {
+		const explicit = this.config.notificationBaseUrl;
+		if (explicit !== "") return explicit;
+		if (this.publicHostname !== "") return `https://${this.publicHostname}`;
+		const mesh = this.meshEndpoint;
+		if (mesh !== null && mesh.host !== "") return `https://${mesh.host}:${mesh.port}`;
+		return null;
+	}
 	async onInitialize() {
 		if (!this.config.bootSeeded) {
 			const seed = autoSeedAllowlist(this.enumerate());
@@ -71,6 +87,18 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 				await this.reconcileMeshEndpoint();
 				return { endpoints: buildEndpoints(interfaces, input.port, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint) };
 			},
+			getNotificationEndpoint: async () => ({
+				baseUrl: this.config.notificationBaseUrl === "" ? null : this.config.notificationBaseUrl,
+				resolved: this.resolveNotificationEndpoint()
+			}),
+			setNotificationEndpoint: async ({ baseUrl }) => {
+				await this.updateGlobalSettings({ notificationBaseUrl: baseUrl ?? "" });
+				this.ctx.logger.info("local-network: notification endpoint set", { meta: { baseUrl: baseUrl ?? "(auto)" } });
+				return {
+					baseUrl: baseUrl === "" ? null : baseUrl,
+					resolved: this.resolveNotificationEndpoint()
+				};
+			},
 			getAllowedAddresses: async () => ({ addresses: this.config.allowedAddresses }),
 			resetAllowlistToBestMatch: async () => {
 				const seed = autoSeedAllowlist(this.enumerate());

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { R as localNetworkCapability, at as BaseAddon, jt as EventCategory } from "../../dist-C9_XdXl5.mjs";
+import { R as localNetworkCapability, at as BaseAddon, jt as EventCategory } from "../../dist-CIek6F9X.mjs";
 import * as os from "node:os";
 //#region src/builtins/local-network/local-network.addon.ts
 /**
@@ -41,9 +41,25 @@ var LocalNetworkAddon = class extends BaseAddon {
 	constructor() {
 		super({
 			allowedAddresses: [],
-			bootSeeded: false
+			bootSeeded: false,
+			notificationBaseUrl: ""
 		});
 	}
+	/**
+	* What AUTO currently resolves to for outbound artifact links: the first
+	* PUBLIC candidate, never loopback and never a LAN address — a link is
+	* opened on someone's phone, off this network, possibly hours later.
+	* `null` when nothing public is reachable (the caller then ships bytes only
+	* rather than a link that 404s).
+	*/
+	resolveNotificationEndpoint() {
+		const explicit = this.config.notificationBaseUrl;
+		if (explicit !== "") return explicit;
+		if (this.publicHostname !== "") return `https://${this.publicHostname}`;
+		const mesh = this.meshEndpoint;
+		if (mesh !== null && mesh.host !== "") return `https://${mesh.host}:${mesh.port}`;
+		return null;
+	}
 	async onInitialize() {
 		if (!this.config.bootSeeded) {
 			const seed = autoSeedAllowlist(this.enumerate());
@@ -68,6 +84,18 @@ var LocalNetworkAddon = class extends BaseAddon {
 				await this.reconcileMeshEndpoint();
 				return { endpoints: buildEndpoints(interfaces, input.port, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint) };
 			},
+			getNotificationEndpoint: async () => ({
+				baseUrl: this.config.notificationBaseUrl === "" ? null : this.config.notificationBaseUrl,
+				resolved: this.resolveNotificationEndpoint()
+			}),
+			setNotificationEndpoint: async ({ baseUrl }) => {
+				await this.updateGlobalSettings({ notificationBaseUrl: baseUrl ?? "" });
+				this.ctx.logger.info("local-network: notification endpoint set", { meta: { baseUrl: baseUrl ?? "(auto)" } });
+				return {
+					baseUrl: baseUrl === "" ? null : baseUrl,
+					resolved: this.resolveNotificationEndpoint()
+				};
+			},
 			getAllowedAddresses: async () => ({ addresses: this.config.allowedAddresses }),
 			resetAllowlistToBestMatch: async () => {
 				const seed = autoSeedAllowlist(this.enumerate());

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-j49ewCPY.js");
+const require_dist = require("../../dist-CS0pdC8l.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label
@@ -295,7 +295,8 @@ var LokiDestination = class {
 //#endregion
 //#region src/builtins/loki-logging/loki-logging.addon.ts
 var DEFAULTS = {
-	enabled: false,
+	enabled: true,
+	migratedEnabled: false,
 	url: "",
 	job: "camstack",
 	level: "info",
@@ -315,12 +316,39 @@ var LokiLoggingAddon = class extends require_dist.BaseAddon {
 	async onInitialize() {
 		this.destination = new LokiDestination();
 		await this.destination.initialize(this.destinationConfig());
-		this.ctx.logger.info(this.config.enabled && this.config.url.length > 0 ? `Loki logging initialized → ${this.config.url}` : "Loki logging registered but inactive (set a URL and enable it)");
+		this.ctx.logger.info(this.config.url.length > 0 ? `Loki logging initialized → ${this.config.url}` : "Loki logging registered but inactive (no URL set)");
+		await this.migrateRetiredEnabledFlag();
 		return [{
 			capability: require_dist.logDestinationCapability,
 			provider: this.destination
 		}];
 	}
+	/**
+	* ONE-SHOT: carry a stored `enabled: false` over to the orchestrator's
+	* per-destination toggle, then never look at the flag again.
+	*
+	* Without this, retiring the private setting would silently RE-ENABLE Loki
+	* for every operator who had turned it off — shipping their logs to a host
+	* they may no longer control. Best-effort: if the toggle call fails the
+	* migration is simply retried next boot (the flag is only cleared on
+	* success).
+	*/
+	async migrateRetiredEnabledFlag() {
+		if (this.config.migratedEnabled) return;
+		try {
+			if (!this.config.enabled) {
+				await this.ctx.api.addons.setCapabilityProviderEnabled.mutate({
+					capName: "log-destination",
+					addonId: this.ctx.id,
+					enabled: false
+				});
+				this.ctx.logger.info("Loki logging: the retired `enabled: false` setting was carried over to the per-destination toggle — re-enable it there if you want Loki shipping again.");
+			}
+			await this.updateGlobalSettings({ migratedEnabled: true });
+		} catch (err) {
+			this.ctx.logger.warn("Loki logging: enablement migration deferred to next boot", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		}
+	}
 	async onShutdown() {
 		await this.destination?.shutdown();
 		this.destination = null;
@@ -334,7 +362,7 @@ var LokiLoggingAddon = class extends require_dist.BaseAddon {
 	*/
 	async onConfigChanged() {
 		await this.destination?.reconfigure(this.destinationConfig());
-		this.ctx.logger.info(this.config.enabled && this.config.url.length > 0 ? `Loki logging reconfigured → ${this.config.url}` : "Loki logging now inactive (disabled or no URL)");
+		this.ctx.logger.info(this.config.url.length > 0 ? `Loki logging reconfigured → ${this.config.url}` : "Loki logging now inactive (no URL)");
 	}
 	/**
 	* `node` is a Loki LABEL, so it must be the node's real identity and must not
@@ -350,6 +378,7 @@ var LokiLoggingAddon = class extends require_dist.BaseAddon {
 	destinationConfig() {
 		return {
 			...this.config,
+			enabled: true,
 			node: this.ctx.kernel.localNodeId ?? "hub"
 		};
 	}
@@ -361,16 +390,9 @@ var LokiLoggingAddon = class extends require_dist.BaseAddon {
 		return this.schema({ sections: [{
 			id: "loki-logging",
 			title: "Loki",
-			description: "Ship this node’s logs to a Grafana Loki instance. Independent of the rotated-file and console destinations — enabling this does not disable those.",
+			description: "Ship this node’s logs to a Grafana Loki instance. Independent of the rotated-file and console destinations. Turn it on or off with the Enable/Disable control on this destination — the same one every other destination uses.",
 			columns: 2,
 			fields: [
-				this.field({
-					type: "boolean",
-					key: "enabled",
-					label: "Enabled",
-					description: "Off by default. Needs a URL below to do anything.",
-					default: false
-				}),
 				this.field({
 					type: "text",
 					key: "url",

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { at as BaseAddon, z as logDestinationCapability } from "../../dist-C9_XdXl5.mjs";
+import { at as BaseAddon, z as logDestinationCapability } from "../../dist-CIek6F9X.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label
@@ -290,7 +290,8 @@ var LokiDestination = class {
 //#endregion
 //#region src/builtins/loki-logging/loki-logging.addon.ts
 var DEFAULTS = {
-	enabled: false,
+	enabled: true,
+	migratedEnabled: false,
 	url: "",
 	job: "camstack",
 	level: "info",
@@ -310,12 +311,39 @@ var LokiLoggingAddon = class extends BaseAddon {
 	async onInitialize() {
 		this.destination = new LokiDestination();
 		await this.destination.initialize(this.destinationConfig());
-		this.ctx.logger.info(this.config.enabled && this.config.url.length > 0 ? `Loki logging initialized → ${this.config.url}` : "Loki logging registered but inactive (set a URL and enable it)");
+		this.ctx.logger.info(this.config.url.length > 0 ? `Loki logging initialized → ${this.config.url}` : "Loki logging registered but inactive (no URL set)");
+		await this.migrateRetiredEnabledFlag();
 		return [{
 			capability: logDestinationCapability,
 			provider: this.destination
 		}];
 	}
+	/**
+	* ONE-SHOT: carry a stored `enabled: false` over to the orchestrator's
+	* per-destination toggle, then never look at the flag again.
+	*
+	* Without this, retiring the private setting would silently RE-ENABLE Loki
+	* for every operator who had turned it off — shipping their logs to a host
+	* they may no longer control. Best-effort: if the toggle call fails the
+	* migration is simply retried next boot (the flag is only cleared on
+	* success).
+	*/
+	async migrateRetiredEnabledFlag() {
+		if (this.config.migratedEnabled) return;
+		try {
+			if (!this.config.enabled) {
+				await this.ctx.api.addons.setCapabilityProviderEnabled.mutate({
+					capName: "log-destination",
+					addonId: this.ctx.id,
+					enabled: false
+				});
+				this.ctx.logger.info("Loki logging: the retired `enabled: false` setting was carried over to the per-destination toggle — re-enable it there if you want Loki shipping again.");
+			}
+			await this.updateGlobalSettings({ migratedEnabled: true });
+		} catch (err) {
+			this.ctx.logger.warn("Loki logging: enablement migration deferred to next boot", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		}
+	}
 	async onShutdown() {
 		await this.destination?.shutdown();
 		this.destination = null;
@@ -329,7 +357,7 @@ var LokiLoggingAddon = class extends BaseAddon {
 	*/
 	async onConfigChanged() {
 		await this.destination?.reconfigure(this.destinationConfig());
-		this.ctx.logger.info(this.config.enabled && this.config.url.length > 0 ? `Loki logging reconfigured → ${this.config.url}` : "Loki logging now inactive (disabled or no URL)");
+		this.ctx.logger.info(this.config.url.length > 0 ? `Loki logging reconfigured → ${this.config.url}` : "Loki logging now inactive (no URL)");
 	}
 	/**
 	* `node` is a Loki LABEL, so it must be the node's real identity and must not
@@ -345,6 +373,7 @@ var LokiLoggingAddon = class extends BaseAddon {
 	destinationConfig() {
 		return {
 			...this.config,
+			enabled: true,
 			node: this.ctx.kernel.localNodeId ?? "hub"
 		};
 	}
@@ -356,16 +385,9 @@ var LokiLoggingAddon = class extends BaseAddon {
 		return this.schema({ sections: [{
 			id: "loki-logging",
 			title: "Loki",
-			description: "Ship this node’s logs to a Grafana Loki instance. Independent of the rotated-file and console destinations — enabling this does not disable those.",
+			description: "Ship this node’s logs to a Grafana Loki instance. Independent of the rotated-file and console destinations. Turn it on or off with the Enable/Disable control on this destination — the same one every other destination uses.",
 			columns: 2,
 			fields: [
-				this.field({
-					type: "boolean",
-					key: "enabled",
-					label: "Enabled",
-					description: "Off by default. Needs a URL below to do anything.",
-					default: false
-				}),
 				this.field({
 					type: "text",
 					key: "url",