@camstack/system 1.2.344 → 1.2.346

package/dist/builtins/calendars/calendars.addon.js

@@ -0,0 +1,110 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+require("../../chunk-Cek0wNdY.js");
+const require_dist = require("../../dist-CqafgUSr.js");
+const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
+//#region src/builtins/calendars/calendars.addon.ts
+/**
+* Hub calendars aggregator — walks `calendar-source` providers and stamps
+* cluster-stable ids (`<providerAddonId>:<localId>`).
+*/
+var PER_SOURCE_TIMEOUT_MS = 2500;
+var HA_ADDON_ID = "provider-homeassistant";
+function stampId(providerAddonId, localId) {
+	return `${providerAddonId}:${localId}`;
+}
+function localIdOf(stamped, providerAddonId) {
+	const prefix = `${providerAddonId}:`;
+	if (!stamped.startsWith(prefix)) return null;
+	return stamped.slice(prefix.length);
+}
+var CalendarsAddon = class extends require_dist.BaseAddon {
+	id = "calendars";
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		const provider = {
+			listCalendars: async () => this.listCalendars(),
+			listEvents: async (input) => this.listEvents(input),
+			importFromHomeAssistant: async () => this.importFromHomeAssistant()
+		};
+		this.ctx.logger.info("Initialized — aggregating calendar-source providers");
+		return [{
+			capability: require_dist.calendarsCapability,
+			provider
+		}];
+	}
+	sources() {
+		return (this.capabilities?.getCollectionEntries("calendar-source") ?? []).map(([id, provider]) => ({
+			id,
+			provider
+		}));
+	}
+	async listCalendars() {
+		const settled = await require_settle_sources.settleSourcesWithTimeout(this.sources().map((s) => [s.id, async () => {
+			return (await s.provider.listCalendars()).map((cal) => ({
+				...cal,
+				id: stampId(s.id, cal.id),
+				providerAddonId: s.id
+			}));
+		}]), PER_SOURCE_TIMEOUT_MS);
+		const out = [];
+		for (const [sourceId, result] of settled) if (result.ok) for (const entry of result.value) out.push(entry);
+		else this.ctx.logger.warn("calendar-source provider failed", { meta: {
+			sourceId,
+			error: result.error.message
+		} });
+		return out;
+	}
+	async listEvents(input) {
+		const sources = this.sources();
+		const wanted = input.calendarIds !== void 0 ? new Set(input.calendarIds) : null;
+		const settled = await require_settle_sources.settleSourcesWithTimeout(sources.map((s) => {
+			const localIds = wanted === null ? void 0 : [...wanted].map((id) => localIdOf(id, s.id)).filter((id) => id !== null);
+			return [s.id, async () => {
+				if (wanted !== null && localIds !== void 0 && localIds.length === 0) return [];
+				return (await s.provider.listEvents({
+					startMs: input.startMs,
+					endMs: input.endMs,
+					...localIds !== void 0 ? { calendarIds: [...localIds] } : {}
+				})).map((ev) => ({
+					...ev,
+					calendarId: stampId(s.id, ev.calendarId),
+					id: stampId(s.id, ev.id)
+				}));
+			}];
+		}), PER_SOURCE_TIMEOUT_MS);
+		const out = [];
+		for (const [sourceId, result] of settled) if (result.ok) for (const ev of result.value) out.push(ev);
+		else this.ctx.logger.warn("calendar-source listEvents failed", { meta: {
+			sourceId,
+			error: result.error.message
+		} });
+		return out.toSorted((a, b) => a.startMs - b.startMs);
+	}
+	async importFromHomeAssistant() {
+		const ha = this.sources().find((s) => s.id === HA_ADDON_ID || s.id.includes("homeassistant"));
+		if (ha === void 0) return {
+			imported: 0,
+			error: "No Home Assistant calendar-source provider is registered"
+		};
+		try {
+			return {
+				imported: (await ha.provider.listCalendars()).length,
+				providerAddonId: ha.id
+			};
+		} catch (err) {
+			return {
+				imported: 0,
+				providerAddonId: ha.id,
+				error: require_dist.errMsg(err)
+			};
+		}
+	}
+};
+//#endregion
+exports.CalendarsAddon = CalendarsAddon;
+exports.default = CalendarsAddon;

package/dist/builtins/calendars/calendars.addon.mjs

@@ -0,0 +1,104 @@
+import { Gn as BaseAddon, Wn as errMsg, Z as calendarsCapability } from "../../dist-0zO6jHkf.mjs";
+import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
+//#region src/builtins/calendars/calendars.addon.ts
+/**
+* Hub calendars aggregator — walks `calendar-source` providers and stamps
+* cluster-stable ids (`<providerAddonId>:<localId>`).
+*/
+var PER_SOURCE_TIMEOUT_MS = 2500;
+var HA_ADDON_ID = "provider-homeassistant";
+function stampId(providerAddonId, localId) {
+	return `${providerAddonId}:${localId}`;
+}
+function localIdOf(stamped, providerAddonId) {
+	const prefix = `${providerAddonId}:`;
+	if (!stamped.startsWith(prefix)) return null;
+	return stamped.slice(prefix.length);
+}
+var CalendarsAddon = class extends BaseAddon {
+	id = "calendars";
+	constructor() {
+		super({});
+	}
+	async onInitialize() {
+		const provider = {
+			listCalendars: async () => this.listCalendars(),
+			listEvents: async (input) => this.listEvents(input),
+			importFromHomeAssistant: async () => this.importFromHomeAssistant()
+		};
+		this.ctx.logger.info("Initialized — aggregating calendar-source providers");
+		return [{
+			capability: calendarsCapability,
+			provider
+		}];
+	}
+	sources() {
+		return (this.capabilities?.getCollectionEntries("calendar-source") ?? []).map(([id, provider]) => ({
+			id,
+			provider
+		}));
+	}
+	async listCalendars() {
+		const settled = await settleSourcesWithTimeout(this.sources().map((s) => [s.id, async () => {
+			return (await s.provider.listCalendars()).map((cal) => ({
+				...cal,
+				id: stampId(s.id, cal.id),
+				providerAddonId: s.id
+			}));
+		}]), PER_SOURCE_TIMEOUT_MS);
+		const out = [];
+		for (const [sourceId, result] of settled) if (result.ok) for (const entry of result.value) out.push(entry);
+		else this.ctx.logger.warn("calendar-source provider failed", { meta: {
+			sourceId,
+			error: result.error.message
+		} });
+		return out;
+	}
+	async listEvents(input) {
+		const sources = this.sources();
+		const wanted = input.calendarIds !== void 0 ? new Set(input.calendarIds) : null;
+		const settled = await settleSourcesWithTimeout(sources.map((s) => {
+			const localIds = wanted === null ? void 0 : [...wanted].map((id) => localIdOf(id, s.id)).filter((id) => id !== null);
+			return [s.id, async () => {
+				if (wanted !== null && localIds !== void 0 && localIds.length === 0) return [];
+				return (await s.provider.listEvents({
+					startMs: input.startMs,
+					endMs: input.endMs,
+					...localIds !== void 0 ? { calendarIds: [...localIds] } : {}
+				})).map((ev) => ({
+					...ev,
+					calendarId: stampId(s.id, ev.calendarId),
+					id: stampId(s.id, ev.id)
+				}));
+			}];
+		}), PER_SOURCE_TIMEOUT_MS);
+		const out = [];
+		for (const [sourceId, result] of settled) if (result.ok) for (const ev of result.value) out.push(ev);
+		else this.ctx.logger.warn("calendar-source listEvents failed", { meta: {
+			sourceId,
+			error: result.error.message
+		} });
+		return out.toSorted((a, b) => a.startMs - b.startMs);
+	}
+	async importFromHomeAssistant() {
+		const ha = this.sources().find((s) => s.id === HA_ADDON_ID || s.id.includes("homeassistant"));
+		if (ha === void 0) return {
+			imported: 0,
+			error: "No Home Assistant calendar-source provider is registered"
+		};
+		try {
+			return {
+				imported: (await ha.provider.listCalendars()).length,
+				providerAddonId: ha.id
+			};
+		} catch (err) {
+			return {
+				imported: 0,
+				providerAddonId: ha.id,
+				error: errMsg(err)
+			};
+		}
+	}
+};
+//#endregion
+export { CalendarsAddon, CalendarsAddon as default };

package/dist/builtins/calendars/index.js

@@ -0,0 +1,8 @@
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+require("../../chunk-Cek0wNdY.js");
+const require_builtins_calendars_calendars_addon = require("./calendars.addon.js");
+exports.CalendarsAddon = require_builtins_calendars_calendars_addon.CalendarsAddon;
+exports.default = require_builtins_calendars_calendars_addon.CalendarsAddon;

package/dist/builtins/calendars/index.mjs

@@ -0,0 +1,2 @@
+import { CalendarsAddon } from "./calendars.addon.mjs";
+export { CalendarsAddon, CalendarsAddon as default };

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
 const require_dist = require("../../dist-CqafgUSr.js");
-const require_tls = require("../../tls-D_wUeOTD.js");
+const require_tls = require("../../tls-DEjOOARt.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
 let node_fs = require("node:fs");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
 import { Bt as localNetworkCapability, Gn as BaseAddon, gr as EventCategory } from "../../dist-0zO6jHkf.mjs";
-import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-IM-v7JV4.mjs";
+import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-DAtaKVUT.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import { readFileSync } from "node:fs";

package/dist/index.js

@@ -3,7 +3,8 @@ const require_chunk = require("./chunk-Cek0wNdY.js");
 const require_dist = require("./dist-CqafgUSr.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
-const require_settle_sources = require("./settle-sources-Bhsy57y-.js");
+const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
+require("./builtins/calendars/index.js");
 const require_builtins_composer_composer_addon = require("./builtins/composer/composer.addon.js");
 require("./builtins/composer/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -29,7 +30,7 @@ const require_builtins_system_config_system_config_addon = require("./builtins/s
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-ey4mbofz.js");
-const require_tls$1 = require("./tls-D_wUeOTD.js");
+const require_tls$1 = require("./tls-DEjOOARt.js");
 const require_child_cap_dispatch = require("./child-cap-dispatch-Bm4Kpo7v.js");
 const require_resource_monitor = require("./resource-monitor-DzNn_IZK.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
@@ -186,107 +187,6 @@ function matchPath(pattern, path) {
 	return params;
 }
 //#endregion
-//#region src/builtins/calendars/calendars.addon.ts
-/**
-* Hub calendars aggregator — walks `calendar-source` providers and stamps
-* cluster-stable ids (`<providerAddonId>:<localId>`).
-*/
-var PER_SOURCE_TIMEOUT_MS = 2500;
-var HA_ADDON_ID = "provider-homeassistant";
-function stampId(providerAddonId, localId) {
-	return `${providerAddonId}:${localId}`;
-}
-function localIdOf(stamped, providerAddonId) {
-	const prefix = `${providerAddonId}:`;
-	if (!stamped.startsWith(prefix)) return null;
-	return stamped.slice(prefix.length);
-}
-var CalendarsAddon = class extends require_dist.BaseAddon {
-	id = "calendars";
-	constructor() {
-		super({});
-	}
-	async onInitialize() {
-		const provider = {
-			listCalendars: async () => this.listCalendars(),
-			listEvents: async (input) => this.listEvents(input),
-			importFromHomeAssistant: async () => this.importFromHomeAssistant()
-		};
-		this.ctx.logger.info("Initialized — aggregating calendar-source providers");
-		return [{
-			capability: require_dist.calendarsCapability,
-			provider
-		}];
-	}
-	sources() {
-		return (this.capabilities?.getCollectionEntries("calendar-source") ?? []).map(([id, provider]) => ({
-			id,
-			provider
-		}));
-	}
-	async listCalendars() {
-		const settled = await require_settle_sources.settleSourcesWithTimeout(this.sources().map((s) => [s.id, async () => {
-			return (await s.provider.listCalendars()).map((cal) => ({
-				...cal,
-				id: stampId(s.id, cal.id),
-				providerAddonId: s.id
-			}));
-		}]), PER_SOURCE_TIMEOUT_MS);
-		const out = [];
-		for (const [sourceId, result] of settled) if (result.ok) for (const entry of result.value) out.push(entry);
-		else this.ctx.logger.warn("calendar-source provider failed", { meta: {
-			sourceId,
-			error: result.error.message
-		} });
-		return out;
-	}
-	async listEvents(input) {
-		const sources = this.sources();
-		const wanted = input.calendarIds !== void 0 ? new Set(input.calendarIds) : null;
-		const settled = await require_settle_sources.settleSourcesWithTimeout(sources.map((s) => {
-			const localIds = wanted === null ? void 0 : [...wanted].map((id) => localIdOf(id, s.id)).filter((id) => id !== null);
-			return [s.id, async () => {
-				if (wanted !== null && localIds !== void 0 && localIds.length === 0) return [];
-				return (await s.provider.listEvents({
-					startMs: input.startMs,
-					endMs: input.endMs,
-					...localIds !== void 0 ? { calendarIds: [...localIds] } : {}
-				})).map((ev) => ({
-					...ev,
-					calendarId: stampId(s.id, ev.calendarId),
-					id: stampId(s.id, ev.id)
-				}));
-			}];
-		}), PER_SOURCE_TIMEOUT_MS);
-		const out = [];
-		for (const [sourceId, result] of settled) if (result.ok) for (const ev of result.value) out.push(ev);
-		else this.ctx.logger.warn("calendar-source listEvents failed", { meta: {
-			sourceId,
-			error: result.error.message
-		} });
-		return out.toSorted((a, b) => a.startMs - b.startMs);
-	}
-	async importFromHomeAssistant() {
-		const ha = this.sources().find((s) => s.id === HA_ADDON_ID || s.id.includes("homeassistant"));
-		if (ha === void 0) return {
-			imported: 0,
-			error: "No Home Assistant calendar-source provider is registered"
-		};
-		try {
-			return {
-				imported: (await ha.provider.listCalendars()).length,
-				providerAddonId: ha.id
-			};
-		} catch (err) {
-			return {
-				imported: 0,
-				providerAddonId: ha.id,
-				error: require_dist.errMsg(err)
-			};
-		}
-	}
-};
-//#endregion
 //#region src/events/event-bus.ts
 var EventBus = class {
 	listeners = /* @__PURE__ */ new Map();
@@ -96564,7 +96464,7 @@ exports.CA_VALIDITY_DAYS = require_tls$1.CA_VALIDITY_DAYS;
 exports.CLUSTER_SECRET_MISMATCH_TYPE = CLUSTER_SECRET_MISMATCH_TYPE;
 exports.CLUSTER_SECRET_REJECTED_EXIT_CODE = CLUSTER_SECRET_REJECTED_EXIT_CODE;
 exports.CORE_CAP_SERVICE_NAME = CORE_CAP_SERVICE_NAME;
-exports.CalendarsAddon = CalendarsAddon;
+exports.CalendarsAddon = require_builtins_calendars_calendars_addon.CalendarsAddon;
 exports.CapRouteError = require_child_cap_dispatch.CapRouteError;
 exports.CapRouteResolver = require_child_cap_dispatch.CapRouteResolver;
 exports.CapUsageRegistry = require_child_cap_dispatch.CapUsageRegistry;

package/dist/index.mjs

@@ -1,8 +1,9 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $n as asNumber, $t as objectInputDeclaresRequiredDeviceId, C as LOG_LEVEL_RANK, E as METHOD_ACCESS_MAP, Et as extractNestedAddonId, Ft as isVoidInput, Gn as BaseAddon, H as addonSettingsCapability, It as kebabToCamel, Jn as DEVICE_STATUS_METHOD, Kn as DATAPLANE_SECRET_HEADER$1, Mt as isCollectionArrayMethod, Pt as isObjectInput, Qn as asJsonObject$1, Qt as objectInputDeclaresAddonId, Ut as logLevelAtMost, Wn as errMsg$1, Wt as looseSchema, Xn as ReadinessTimeoutError, Yn as ReadinessRegistry, Z as calendarsCapability, dn as scopesAllowAddon, dr as readinessKey, er as asString$1, fn as scopesAllowDeviceCap, fr as resolveCapMount, gr as EventCategory$1, ir as expandCapMethods, j as RUNTIME_DEFAULTS, jt as isArrayOutputSchema, ln as resolveMethodAuth, lr as parseJsonObject, nr as emitDownForOwnedCaps, pr as scopeKey, qn as DEVICE_SETTINGS_CONTRIBUTION_METHODS, rn as procedureAuthKey, t as ALL_CAPABILITY_DEFINITIONS, tr as createEvent, ur as parseJsonUnknown, zt as lifecycleJobSchema } from "./dist-0zO6jHkf.mjs";
+import { $n as asNumber, $t as objectInputDeclaresRequiredDeviceId, C as LOG_LEVEL_RANK, E as METHOD_ACCESS_MAP, Et as extractNestedAddonId, Ft as isVoidInput, H as addonSettingsCapability, It as kebabToCamel, Jn as DEVICE_STATUS_METHOD, Kn as DATAPLANE_SECRET_HEADER$1, Mt as isCollectionArrayMethod, Pt as isObjectInput, Qn as asJsonObject$1, Qt as objectInputDeclaresAddonId, Ut as logLevelAtMost, Wn as errMsg$1, Wt as looseSchema, Xn as ReadinessTimeoutError, Yn as ReadinessRegistry, dn as scopesAllowAddon, dr as readinessKey, er as asString$1, fn as scopesAllowDeviceCap, fr as resolveCapMount, gr as EventCategory$1, ir as expandCapMethods, j as RUNTIME_DEFAULTS, jt as isArrayOutputSchema, ln as resolveMethodAuth, lr as parseJsonObject, nr as emitDownForOwnedCaps, pr as scopeKey, qn as DEVICE_SETTINGS_CONTRIBUTION_METHODS, rn as procedureAuthKey, t as ALL_CAPABILITY_DEFINITIONS, tr as createEvent, ur as parseJsonUnknown, zt as lifecycleJobSchema } from "./dist-0zO6jHkf.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
-import { t as settleSourcesWithTimeout } from "./settle-sources-CDtNC8ub.mjs";
+import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
+import "./builtins/calendars/index.mjs";
 import { ComposerAddon } from "./builtins/composer/composer.addon.mjs";
 import "./builtins/composer/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
@@ -28,7 +29,7 @@ import { SystemConfigAddon } from "./builtins/system-config/system-config.addon.
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { _ as ensureModel, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, g as downloadModel, h as downloadFile, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as deleteModelFromDisk, n as STALL_TICK_MS, o as contentTypeFor, p as collectModelFiles, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as fetchJson, x as isModelDownloaded, y as getModelFilePath } from "./event-loop-stall-monitor-EXjzIxDz.mjs";
-import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-IM-v7JV4.mjs";
+import { C as registerLanHttpHandler, S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, b as bindPendingLanHttp, c as loadTlsCert, d as collectCertIdentity, f as CA_VALIDITY_DAYS, g as evaluateExistingCert, h as SERVER_AUTH_OID, i as writeExtraSans, l as reissueTlsLeaf, m as MAX_LEAF_VALIDITY_DAYS, n as readTlsAccessStatus, o as validateUploadedTls, p as LEAF_RENEWAL_WINDOW_DAYS, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, u as CA_COMMON_NAME, v as allFamiliesListenHost, x as closeLanHttp, y as applyLanHttp } from "./tls-DAtaKVUT.mjs";
 import { $ as CapRouteError, $n as CAP_ACTION_UNLABELLED, $t as RUNNER_HEAP_WATCH_INTERVAL_MS, A as resolveHwAccel, An as OUTBOUND_QUEUE_COOLDOWN_MS, At as serializeTypedArrays, B as udsChildLogToWorkerEntry, Bn as SOCKET_QUEUE_TOP_N, Bt as createAddonPeerBytesFacility, C as getBrokerEventBus, Cn as DECISIVE_HEAP_SPACES, Ct as NATIVE_PROVIDER_SERVICE_INFIX, D as subscribePassthrough, Dn as heapSpaceField, Dt as capServiceName, E as setNodeEventInterest, En as formatHeapSpaces, Et as capBareAction, F as ipcParentLink, Fn as MESH_QUEUE_TOP_N, Ft as installManifestNativeDeps, G as UDS_NO_ROUTE_PREFIX, Gn as readSocketQueues, Gt as HEAP_RECLAIM_TRIGGER_MB, H as createUdsLoggerWithControl, Hn as createSocketPlaneReader, Ht as createAddonDataPlaneFacility, I as localProviderLink, In as createMeshQueueReader, It as resolveAddonClass, J as answerClaimedGetStatus, Jn as recordSocketFrame, Jt as HUB_MAIN_HEAP_WATCH_LABEL, K as afterWorkerOnlineAnnounce, Kn as EMPTY_SOCKET_DIRECTION, Kt as HEAP_WATCH_INTERVAL_MS, L as createParentUnownedCallHandler, Ln as formatMeshQueue, Lt as buildNpmChildEnv, M as brokerTransportLink, Mn as OUTBOUND_QUEUE_THRESHOLD_BYTES, Mt as CapabilityHandle, N as buildLinkChain, Nn as createOutboundQueueGate, Nt as CapabilityUnavailableError, O as AddonDepsManager, On as readHeapSpaces, Ot as parseCapAction, P as deviceCapResolverLink, Pn as formatOutboundQueueVerdict, Pt as copyBundledNativeModules, Q as CapRouteResolver, Qn as CAP_ACTION_OVERFLOW_LABEL, Qt as RSS_BUDGET_RELEASE_RATIO, R as createUdsEventBridge, Rn as EMPTY_SOCKET_PLANE_BASELINE, Rt as resolveNpmInvocation, S as clusterEventTopic, Sn as isArrayBufferCensusReport, St as validateProviderRegistrations, T as registerEventBusService, Tn as emitHeapDiagnosticReport, Tt as capActionSuffix, U as LocalChildClient, Un as diffSocketPlane, Ut as HEAP_RECLAIM_MIN_INTERVAL_MS, V as createUdsLogger, Vn as createSocketPlaneMeter, Vt as hostNodeIdOf, W as LocalChildRegistry, Wn as formatSocketPlane, Wt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, X as AGENT_CAP_FWD_ACTION, Xn as socketDirectionBytes, Xt as HUB_RSS_BUDGET_ENV, Y as deviceOfGetStatus, Yn as sampleSocketDirection, Yt as HUB_MAIN_RSS_BUDGET_MB, Z as AGENT_CAP_FWD_SERVICE, Zn as socketDirectionMessages, Zt as RSS_BUDGET_REANNOUNCE_MIN_MS, _ as getWorkerDeviceRegistry, _n as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, a as reapProcessGroup, an as createV8Reclaimer, ar as EVENT_PLANE_TOP_N, at as __resetCapUsageRegistryForTests, b as setHubConnected, bn as createInspectorArrayBufferCensus, c as runnerOwnsProcessGroup, cn as nextRssBudgetState, cr as diffEventPlane, ct as UdsLocalTransportClient, d as summarizeMembers, dn as shouldReclaim, dt as PeerAnsweredError, en as RUNNER_RSS_BUDGET_ENV, er as EMPTY_CAP_ACTION_READING, et as classifyCapRoute, f as installManifestSystemDeps, fn as startHeapWatch, ft as localEndpointPath, g as createUdsAddonContext, gn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, gt as createBrokerDeviceManagerApi, h as createAddonContext, hn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, ht as buildNativeCapProxy, in as createLoopDelayMeter, ir as diffCapActionCensus, it as PARENT_ROUTED_PROVIDER_ADDON_ID, j as brokerCallForCap, jn as OUTBOUND_QUEUE_SUSTAIN_MS, jt as DeviceRegistry, k as createKernelHwAccel, kn as selectReportedSpaces, kt as deserializeTypedArrays, l as signalAllRunnerGroups, ln as parseRssBudgetMb, lr as formatEventPlane, lt as UdsLocalTransportServer, m as adaptBrokerToCluster, mn as strandedMb, mt as encodeFrame, nn as buildHeapSample, nr as capActionLabel, nt as readMoleculerFanoutMode, o as registerRunnerGroup, on as describeRss, or as createEventPlaneMeter, ot as getCapUsageRegistry, p as installManifestPythonDeps, pn as startRunnerHeapWatch, pt as FrameDecoder, q as GET_STATUS_METHOD, qn as createSocketDirectionCounters, qt as HEAP_WATCH_WARN_RATIO, r as defaultProcessGroupOps, rn as createDeferredHeapWatchSink, rr as createCapActionCensus, rt as CapUsageRegistry, s as releaseRunnerGroup, sn as hubMainRssBudget, sr as createEventPlaneReader, st as createLocalTransport, t as CAP_METHOD_NOT_IMPLEMENTED, tn as ZERO_LOOP_DELAY, tr as MAX_CAP_ACTIONS_PER_PEER, tt as callWithServiceDiscovery, un as reclaimIntervalMs, ut as SocketChannel, v as getOrInitReadinessRegistry, vn as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, w as getMoleculerEventStats, wn as HEAP_SPACE_REPORT_MIN_MB, wt as capActionName, x as EVENT_TOPIC_PREFIX, xn as formatArrayBufferCensus, xt as createAddonService, y as getOrInitReadinessRegistryForClient, yn as createArrayBufferCensusGate, yt as mountNativeCapService, z as createUdsEventBus, zn as SOCKET_PLANE_TOP_N, zt as runNpm } from "./child-cap-dispatch-B52e2Bcw.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-B1v6E07R.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
@@ -179,107 +180,6 @@ function matchPath(pattern, path) {
 	return params;
 }
 //#endregion
-//#region src/builtins/calendars/calendars.addon.ts
-/**
-* Hub calendars aggregator — walks `calendar-source` providers and stamps
-* cluster-stable ids (`<providerAddonId>:<localId>`).
-*/
-var PER_SOURCE_TIMEOUT_MS = 2500;
-var HA_ADDON_ID = "provider-homeassistant";
-function stampId(providerAddonId, localId) {
-	return `${providerAddonId}:${localId}`;
-}
-function localIdOf(stamped, providerAddonId) {
-	const prefix = `${providerAddonId}:`;
-	if (!stamped.startsWith(prefix)) return null;
-	return stamped.slice(prefix.length);
-}
-var CalendarsAddon = class extends BaseAddon {
-	id = "calendars";
-	constructor() {
-		super({});
-	}
-	async onInitialize() {
-		const provider = {
-			listCalendars: async () => this.listCalendars(),
-			listEvents: async (input) => this.listEvents(input),
-			importFromHomeAssistant: async () => this.importFromHomeAssistant()
-		};
-		this.ctx.logger.info("Initialized — aggregating calendar-source providers");
-		return [{
-			capability: calendarsCapability,
-			provider
-		}];
-	}
-	sources() {
-		return (this.capabilities?.getCollectionEntries("calendar-source") ?? []).map(([id, provider]) => ({
-			id,
-			provider
-		}));
-	}
-	async listCalendars() {
-		const settled = await settleSourcesWithTimeout(this.sources().map((s) => [s.id, async () => {
-			return (await s.provider.listCalendars()).map((cal) => ({
-				...cal,
-				id: stampId(s.id, cal.id),
-				providerAddonId: s.id
-			}));
-		}]), PER_SOURCE_TIMEOUT_MS);
-		const out = [];
-		for (const [sourceId, result] of settled) if (result.ok) for (const entry of result.value) out.push(entry);
-		else this.ctx.logger.warn("calendar-source provider failed", { meta: {
-			sourceId,
-			error: result.error.message
-		} });
-		return out;
-	}
-	async listEvents(input) {
-		const sources = this.sources();
-		const wanted = input.calendarIds !== void 0 ? new Set(input.calendarIds) : null;
-		const settled = await settleSourcesWithTimeout(sources.map((s) => {
-			const localIds = wanted === null ? void 0 : [...wanted].map((id) => localIdOf(id, s.id)).filter((id) => id !== null);
-			return [s.id, async () => {
-				if (wanted !== null && localIds !== void 0 && localIds.length === 0) return [];
-				return (await s.provider.listEvents({
-					startMs: input.startMs,
-					endMs: input.endMs,
-					...localIds !== void 0 ? { calendarIds: [...localIds] } : {}
-				})).map((ev) => ({
-					...ev,
-					calendarId: stampId(s.id, ev.calendarId),
-					id: stampId(s.id, ev.id)
-				}));
-			}];
-		}), PER_SOURCE_TIMEOUT_MS);
-		const out = [];
-		for (const [sourceId, result] of settled) if (result.ok) for (const ev of result.value) out.push(ev);
-		else this.ctx.logger.warn("calendar-source listEvents failed", { meta: {
-			sourceId,
-			error: result.error.message
-		} });
-		return out.toSorted((a, b) => a.startMs - b.startMs);
-	}
-	async importFromHomeAssistant() {
-		const ha = this.sources().find((s) => s.id === HA_ADDON_ID || s.id.includes("homeassistant"));
-		if (ha === void 0) return {
-			imported: 0,
-			error: "No Home Assistant calendar-source provider is registered"
-		};
-		try {
-			return {
-				imported: (await ha.provider.listCalendars()).length,
-				providerAddonId: ha.id
-			};
-		} catch (err) {
-			return {
-				imported: 0,
-				providerAddonId: ha.id,
-				error: errMsg$1(err)
-			};
-		}
-	}
-};
-//#endregion
 //#region src/events/event-bus.ts
 var EventBus = class {
 	listeners = /* @__PURE__ */ new Map();

package/dist/tls/cert-identity.d.ts

@@ -24,9 +24,10 @@ export declare function systemHostFacts(): HostFacts;
  *
  * The two are deliberately different sizes. Everything plausible is
  * certified — costs nothing. Only a **stable** identity gates
- * regeneration, because a gate that fires on a rotating address rewrites
- * the certificate on every boot, which is a worse bug than the one the
- * gate exists to fix.
+ * regeneration (IPv4 + DNS + operator `extraSans`), because a gate that
+ * fires on a rotating address rewrites the certificate on every boot,
+ * which is a worse bug than the one the gate exists to fix. IPv6 never
+ * gates — ULA proved as unstable as global SLAAC on the live hub.
  */
 export interface CertIdentity {
     readonly dnsNames: readonly string[];

package/dist/tls/cert-manager.d.ts

@@ -68,8 +68,9 @@ export interface CertOptions {
  *
  * And explicitly NOT when: the certificate names an address the machine
  * no longer has (a superset still works — the check is one-directional),
- * a volatile interface (docker/VPN/mesh) or a global-scope IPv6 address
- * changed (SLAAC privacy addresses rotate daily), or a new build shipped.
+ * a volatile interface (docker/VPN/mesh) or **any** IPv6 address changed
+ * (global and ULA both rotate under privacy extensions / interface-id
+ * churn — `os` cannot tell temporary from permanent), or a new build shipped.
  *
  * Every trigger is derived from the files plus the machine, so once a
  * reissue clears them it clears them for good: the next boot returns

package/dist/{tls-IM-v7JV4.mjs → tls-DAtaKVUT.mjs}

@@ -277,27 +277,21 @@ function isLinkLocal(value) {
 	const parsed = Number.parseInt(firstGroup, 16);
 	return Number.isFinite(parsed) && (parsed & 65472) === 65152;
 }
-/** `fc00::/7` — the IPv6 range that behaves like RFC 1918 does for v4. */
-function isUniqueLocalIpv6(value) {
-	if (!isIpv6(value)) return false;
-	const firstGroup = value.split(":")[0] ?? "";
-	const parsed = Number.parseInt(firstGroup, 16);
-	return Number.isFinite(parsed) && (parsed & 65024) === 64512;
-}
 function isVolatileInterface(name) {
 	const lower = name.toLowerCase();
 	return VOLATILE_INTERFACE_PREFIXES.some((prefix) => lower.startsWith(prefix));
 }
 /**
-* A global-scope IPv6 address is NOT a stable identity: SLAAC privacy
-* extensions rotate temporary addresses roughly daily, and `os` gives us
-* no way to tell a temporary address from a permanent one. Gating on
-* one would reissue the certificate every day.
+* Only IPv4 gates a reissue. Every IPv6 address we see — global **or**
+* ULA — is certified but never required: `os` cannot tell a temporary
+* address from a permanent one, and the live hub's ULA interface-id
+* rotated on every restart (eight leaf reissues in one day under
+* `san-coverage-gap`). Gating on ULA reproduced the churn D227 exists
+* to prevent. Operators who need a fixed IPv6 declare it via `extraSans`.
 */
 function isStableGateAddress(address) {
 	if (isLinkLocal(address)) return false;
-	if (isIpv4(address)) return true;
-	return isUniqueLocalIpv6(address);
+	return isIpv4(address);
 }
 function addSan(dns, ips, value) {
 	const trimmed = value.trim();
@@ -11711,8 +11705,9 @@ var DEFAULT_COMMON_NAME = "camstack.local";
 *
 * And explicitly NOT when: the certificate names an address the machine
 * no longer has (a superset still works — the check is one-directional),
-* a volatile interface (docker/VPN/mesh) or a global-scope IPv6 address
-* changed (SLAAC privacy addresses rotate daily), or a new build shipped.
+* a volatile interface (docker/VPN/mesh) or **any** IPv6 address changed
+* (global and ULA both rotate under privacy extensions / interface-id
+* churn — `os` cannot tell temporary from permanent), or a new build shipped.
 *
 * Every trigger is derived from the files plus the machine, so once a
 * reissue clears them it clears them for good: the next boot returns

package/dist/{tls-D_wUeOTD.js → tls-DEjOOARt.js}

@@ -278,27 +278,21 @@ function isLinkLocal(value) {
 	const parsed = Number.parseInt(firstGroup, 16);
 	return Number.isFinite(parsed) && (parsed & 65472) === 65152;
 }
-/** `fc00::/7` — the IPv6 range that behaves like RFC 1918 does for v4. */
-function isUniqueLocalIpv6(value) {
-	if (!isIpv6(value)) return false;
-	const firstGroup = value.split(":")[0] ?? "";
-	const parsed = Number.parseInt(firstGroup, 16);
-	return Number.isFinite(parsed) && (parsed & 65024) === 64512;
-}
 function isVolatileInterface(name) {
 	const lower = name.toLowerCase();
 	return VOLATILE_INTERFACE_PREFIXES.some((prefix) => lower.startsWith(prefix));
 }
 /**
-* A global-scope IPv6 address is NOT a stable identity: SLAAC privacy
-* extensions rotate temporary addresses roughly daily, and `os` gives us
-* no way to tell a temporary address from a permanent one. Gating on
-* one would reissue the certificate every day.
+* Only IPv4 gates a reissue. Every IPv6 address we see — global **or**
+* ULA — is certified but never required: `os` cannot tell a temporary
+* address from a permanent one, and the live hub's ULA interface-id
+* rotated on every restart (eight leaf reissues in one day under
+* `san-coverage-gap`). Gating on ULA reproduced the churn D227 exists
+* to prevent. Operators who need a fixed IPv6 declare it via `extraSans`.
 */
 function isStableGateAddress(address) {
 	if (isLinkLocal(address)) return false;
-	if (isIpv4(address)) return true;
-	return isUniqueLocalIpv6(address);
+	return isIpv4(address);
 }
 function addSan(dns, ips, value) {
 	const trimmed = value.trim();
@@ -11712,8 +11706,9 @@ var DEFAULT_COMMON_NAME = "camstack.local";
 *
 * And explicitly NOT when: the certificate names an address the machine
 * no longer has (a superset still works — the check is one-directional),
-* a volatile interface (docker/VPN/mesh) or a global-scope IPv6 address
-* changed (SLAAC privacy addresses rotate daily), or a new build shipped.
+* a volatile interface (docker/VPN/mesh) or **any** IPv6 address changed
+* (global and ULA both rotate under privacy extensions / interface-id
+* churn — `os` cannot tell temporary from permanent), or a new build shipped.
 *
 * Every trigger is derived from the files plus the machine, so once a
 * reissue clears them it clears them for good: the next boot returns

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.344",
+  "version": "1.2.346",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",