@camstack/system 1.2.353 → 1.2.355

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_tls = require("../../tls-ue_Xefmv.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
@@ -8,40 +8,6 @@ let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");
 let node_net = require("node:net");
-//#region src/builtins/local-network/local-hostname.ts
-var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;
-/**
-* Parse the operator-typed local hostname.
-*
-* Empty / whitespace → `null` (advertise the raw LAN IP). A DNS name is
-* lowercased. A URL, port suffix, path, or bare IP is rejected so it cannot
-* leak into a SAN or a candidate URL.
-*/
-function parseLocalHostname(raw) {
-	const trimmed = raw.trim();
-	if (trimmed === "") return {
-		ok: true,
-		value: null
-	};
-	if (/[\s/:?#]/.test(trimmed) || trimmed.includes("\\")) return {
-		ok: false,
-		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
-	};
-	const lowered = trimmed.toLowerCase();
-	if ((0, node_net.isIP)(lowered) !== 0) return {
-		ok: false,
-		error: "Use the address allowlist for IPs — this field is a DNS name."
-	};
-	if (!DNS_NAME.test(lowered)) return {
-		ok: false,
-		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
-	};
-	return {
-		ok: true,
-		value: lowered
-	};
-}
-//#endregion
 //#region src/builtins/local-network/ipv6-lan.ts
 /**
 * IPv6 helpers for LAN advertisement: prefix matching (privacy addresses
@@ -147,6 +113,40 @@ function parseIpv6Groups(address) {
 	];
 }
 //#endregion
+//#region src/builtins/local-network/local-hostname.ts
+var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;
+/**
+* Parse the operator-typed local hostname.
+*
+* Empty / whitespace → `null` (advertise the raw LAN IP). A DNS name is
+* lowercased. A URL, port suffix, path, or bare IP is rejected so it cannot
+* leak into a SAN or a candidate URL.
+*/
+function parseLocalHostname(raw) {
+	const trimmed = raw.trim();
+	if (trimmed === "") return {
+		ok: true,
+		value: null
+	};
+	if (/[\s/:?#]/.test(trimmed) || trimmed.includes("\\")) return {
+		ok: false,
+		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
+	};
+	const lowered = trimmed.toLowerCase();
+	if ((0, node_net.isIP)(lowered) !== 0) return {
+		ok: false,
+		error: "Use the address allowlist for IPs — this field is a DNS name."
+	};
+	if (!DNS_NAME.test(lowered)) return {
+		ok: false,
+		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
+	};
+	return {
+		ok: true,
+		value: lowered
+	};
+}
+//#endregion
 //#region src/builtins/local-network/local-network.addon.ts
 /**
 * local-network — hub-only system cap implementation.
@@ -207,19 +207,32 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 		});
 	}
 	/**
-	* What AUTO currently resolves to for outbound artifact links: the first
-	* PUBLIC candidate, never loopback and never a LAN address — a link is
-	* opened on someone's phone, off this network, possibly hours later.
-	* `null` when nothing public is reachable (the caller then ships bytes only
-	* rather than a link that 404s).
+	* The effective flagged notification address: the operator's explicit
+	* choice, else AUTO — the CamStack app link (D709, operator decision
+	* 2026-10-06; before it AUTO was the tunnel, then the mesh). The app link is
+	* not a hub address: the NC's signed media and buttons keep their own hub
+	* ladder when it is flagged; only viewer taps take the app form.
 	*/
 	resolveNotificationEndpoint() {
 		const explicit = this.config.notificationBaseUrl;
-		if (explicit !== "") return explicit;
-		if (this.publicHostname !== "") return `https://${this.publicHostname}`;
-		const mesh = this.meshEndpoint;
-		if (mesh !== null && mesh.host !== "") return `https://${mesh.host}:${mesh.port}`;
-		return null;
+		return explicit !== "" ? explicit : require_dist.CAMSTACK_APP_LINK_ORIGIN;
+	}
+	/**
+	* The `hub=` an app link carries: the best public HTTPS address in this
+	* cap's own palette (tunnel, then mesh) — so it can never disagree with
+	* what the Network page lists. See `pickAppLinkHub`.
+	*/
+	async resolveAppLinkHub() {
+		const port = (await this.resolveAdvertisedListenPort(null)).port;
+		return require_dist.pickAppLinkHub(await this.buildAdvertisedEndpoints(false, false, "https", port));
+	}
+	async notificationEndpointSnapshot() {
+		const explicit = this.config.notificationBaseUrl;
+		return {
+			baseUrl: explicit === "" ? null : explicit,
+			resolved: this.resolveNotificationEndpoint(),
+			appLinkHub: await this.resolveAppLinkHub()
+		};
 	}
 	async snapshotViewerEndpoints() {
 		const selected = selectViewerEndpoints(await this.buildAdvertisedEndpoints(false, false, "http", (await this.resolveAdvertisedListenPort(null)).port), this.config.viewerBaseUrls);
@@ -271,22 +284,17 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 					advertised: localPort.port,
 					source: localPort.source
 				} });
+				const endpoints = await this.buildAdvertisedEndpoints(includeLoopback, input.ipv4Only ?? false, scheme, localPort.port);
 				return {
-					endpoints: await this.buildAdvertisedEndpoints(includeLoopback, input.ipv4Only ?? false, scheme, localPort.port),
+					endpoints: input.includeAppLink === true ? [appLinkEndpoint(), ...endpoints] : endpoints,
 					localPort
 				};
 			},
-			getNotificationEndpoint: async () => ({
-				baseUrl: this.config.notificationBaseUrl === "" ? null : this.config.notificationBaseUrl,
-				resolved: this.resolveNotificationEndpoint()
-			}),
+			getNotificationEndpoint: async () => this.notificationEndpointSnapshot(),
 			setNotificationEndpoint: async ({ baseUrl }) => {
 				await this.updateGlobalSettings({ notificationBaseUrl: baseUrl ?? "" });
 				this.ctx.logger.info("local-network: notification endpoint set", { meta: { baseUrl: baseUrl ?? "(auto)" } });
-				return {
-					baseUrl: baseUrl === "" ? null : baseUrl,
-					resolved: this.resolveNotificationEndpoint()
-				};
+				return this.notificationEndpointSnapshot();
 			},
 			getViewerEndpoints: async () => this.snapshotViewerEndpoints(),
 			setViewerEndpoints: async ({ baseUrls }) => {
@@ -729,6 +737,24 @@ function pickPreferred(interfaces) {
 		return prefixLen(b.netmask) - prefixLen(a.netmask);
 	})[0] ?? null;
 }
+/**
+* The CamStack app link as a palette entry (D709): the one address on the
+* Network page that is not this hub's. Flagging it for notifications (the
+* default) makes viewer taps open the native app, with the hub carried as
+* `hub=`. `kind: 'app-link'` keeps it out of every race and ranking; it is
+* only emitted on `includeAppLink: true`.
+*/
+function appLinkEndpoint() {
+	return {
+		label: "CamStack app link",
+		baseUrl: require_dist.CAMSTACK_APP_LINK_ORIGIN,
+		kind: "app-link",
+		interfaceKind: "public",
+		plausible: true,
+		plausibleReason: "",
+		priority: -1
+	};
+}
 function buildEndpoints(interfaces, port, includeLoopback, ipv4Only, publicHostname, scheme = "http", meshEndpoint = null, lanHttp = null) {
 	const out = [];
 	let priority = 0;
@@ -949,6 +975,7 @@ function readLinuxIpv6Flags() {
 //#endregion
 exports.ALLOWLIST_RECONCILE_INTERVAL_MS = ALLOWLIST_RECONCILE_INTERVAL_MS;
 exports.LocalNetworkAddon = LocalNetworkAddon;
+exports.appLinkEndpoint = appLinkEndpoint;
 exports.applyAllowlist = applyAllowlist;
 exports.autoSeedAllowlist = autoSeedAllowlist;
 exports.buildEndpoints = buildEndpoints;

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,44 +1,10 @@
-import { Vt as localNetworkCapability, Yn as BaseAddon, br as EventCategory } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, Qn as BaseAddon, Ut as localNetworkCapability, an as pickAppLinkHub, s as CAMSTACK_APP_LINK_ORIGIN } from "../../dist-OCi0K-iM.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-DTlVWwAI.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import * as os from "node:os";
 import { readFileSync } from "node:fs";
 import { isIP } from "node:net";
-//#region src/builtins/local-network/local-hostname.ts
-var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;
-/**
-* Parse the operator-typed local hostname.
-*
-* Empty / whitespace → `null` (advertise the raw LAN IP). A DNS name is
-* lowercased. A URL, port suffix, path, or bare IP is rejected so it cannot
-* leak into a SAN or a candidate URL.
-*/
-function parseLocalHostname(raw) {
-	const trimmed = raw.trim();
-	if (trimmed === "") return {
-		ok: true,
-		value: null
-	};
-	if (/[\s/:?#]/.test(trimmed) || trimmed.includes("\\")) return {
-		ok: false,
-		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
-	};
-	const lowered = trimmed.toLowerCase();
-	if (isIP(lowered) !== 0) return {
-		ok: false,
-		error: "Use the address allowlist for IPs — this field is a DNS name."
-	};
-	if (!DNS_NAME.test(lowered)) return {
-		ok: false,
-		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
-	};
-	return {
-		ok: true,
-		value: lowered
-	};
-}
-//#endregion
 //#region src/builtins/local-network/ipv6-lan.ts
 /**
 * IPv6 helpers for LAN advertisement: prefix matching (privacy addresses
@@ -144,6 +110,40 @@ function parseIpv6Groups(address) {
 	];
 }
 //#endregion
+//#region src/builtins/local-network/local-hostname.ts
+var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;
+/**
+* Parse the operator-typed local hostname.
+*
+* Empty / whitespace → `null` (advertise the raw LAN IP). A DNS name is
+* lowercased. A URL, port suffix, path, or bare IP is rejected so it cannot
+* leak into a SAN or a candidate URL.
+*/
+function parseLocalHostname(raw) {
+	const trimmed = raw.trim();
+	if (trimmed === "") return {
+		ok: true,
+		value: null
+	};
+	if (/[\s/:?#]/.test(trimmed) || trimmed.includes("\\")) return {
+		ok: false,
+		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
+	};
+	const lowered = trimmed.toLowerCase();
+	if (isIP(lowered) !== 0) return {
+		ok: false,
+		error: "Use the address allowlist for IPs — this field is a DNS name."
+	};
+	if (!DNS_NAME.test(lowered)) return {
+		ok: false,
+		error: "Enter a DNS name such as camstack.lan, without a scheme or port."
+	};
+	return {
+		ok: true,
+		value: lowered
+	};
+}
+//#endregion
 //#region src/builtins/local-network/local-network.addon.ts
 /**
 * local-network — hub-only system cap implementation.
@@ -204,19 +204,32 @@ var LocalNetworkAddon = class extends BaseAddon {
 		});
 	}
 	/**
-	* What AUTO currently resolves to for outbound artifact links: the first
-	* PUBLIC candidate, never loopback and never a LAN address — a link is
-	* opened on someone's phone, off this network, possibly hours later.
-	* `null` when nothing public is reachable (the caller then ships bytes only
-	* rather than a link that 404s).
+	* The effective flagged notification address: the operator's explicit
+	* choice, else AUTO — the CamStack app link (D709, operator decision
+	* 2026-10-06; before it AUTO was the tunnel, then the mesh). The app link is
+	* not a hub address: the NC's signed media and buttons keep their own hub
+	* ladder when it is flagged; only viewer taps take the app form.
 	*/
 	resolveNotificationEndpoint() {
 		const explicit = this.config.notificationBaseUrl;
-		if (explicit !== "") return explicit;
-		if (this.publicHostname !== "") return `https://${this.publicHostname}`;
-		const mesh = this.meshEndpoint;
-		if (mesh !== null && mesh.host !== "") return `https://${mesh.host}:${mesh.port}`;
-		return null;
+		return explicit !== "" ? explicit : CAMSTACK_APP_LINK_ORIGIN;
+	}
+	/**
+	* The `hub=` an app link carries: the best public HTTPS address in this
+	* cap's own palette (tunnel, then mesh) — so it can never disagree with
+	* what the Network page lists. See `pickAppLinkHub`.
+	*/
+	async resolveAppLinkHub() {
+		const port = (await this.resolveAdvertisedListenPort(null)).port;
+		return pickAppLinkHub(await this.buildAdvertisedEndpoints(false, false, "https", port));
+	}
+	async notificationEndpointSnapshot() {
+		const explicit = this.config.notificationBaseUrl;
+		return {
+			baseUrl: explicit === "" ? null : explicit,
+			resolved: this.resolveNotificationEndpoint(),
+			appLinkHub: await this.resolveAppLinkHub()
+		};
 	}
 	async snapshotViewerEndpoints() {
 		const selected = selectViewerEndpoints(await this.buildAdvertisedEndpoints(false, false, "http", (await this.resolveAdvertisedListenPort(null)).port), this.config.viewerBaseUrls);
@@ -268,22 +281,17 @@ var LocalNetworkAddon = class extends BaseAddon {
 					advertised: localPort.port,
 					source: localPort.source
 				} });
+				const endpoints = await this.buildAdvertisedEndpoints(includeLoopback, input.ipv4Only ?? false, scheme, localPort.port);
 				return {
-					endpoints: await this.buildAdvertisedEndpoints(includeLoopback, input.ipv4Only ?? false, scheme, localPort.port),
+					endpoints: input.includeAppLink === true ? [appLinkEndpoint(), ...endpoints] : endpoints,
 					localPort
 				};
 			},
-			getNotificationEndpoint: async () => ({
-				baseUrl: this.config.notificationBaseUrl === "" ? null : this.config.notificationBaseUrl,
-				resolved: this.resolveNotificationEndpoint()
-			}),
+			getNotificationEndpoint: async () => this.notificationEndpointSnapshot(),
 			setNotificationEndpoint: async ({ baseUrl }) => {
 				await this.updateGlobalSettings({ notificationBaseUrl: baseUrl ?? "" });
 				this.ctx.logger.info("local-network: notification endpoint set", { meta: { baseUrl: baseUrl ?? "(auto)" } });
-				return {
-					baseUrl: baseUrl === "" ? null : baseUrl,
-					resolved: this.resolveNotificationEndpoint()
-				};
+				return this.notificationEndpointSnapshot();
 			},
 			getViewerEndpoints: async () => this.snapshotViewerEndpoints(),
 			setViewerEndpoints: async ({ baseUrls }) => {
@@ -726,6 +734,24 @@ function pickPreferred(interfaces) {
 		return prefixLen(b.netmask) - prefixLen(a.netmask);
 	})[0] ?? null;
 }
+/**
+* The CamStack app link as a palette entry (D709): the one address on the
+* Network page that is not this hub's. Flagging it for notifications (the
+* default) makes viewer taps open the native app, with the hub carried as
+* `hub=`. `kind: 'app-link'` keeps it out of every race and ranking; it is
+* only emitted on `includeAppLink: true`.
+*/
+function appLinkEndpoint() {
+	return {
+		label: "CamStack app link",
+		baseUrl: CAMSTACK_APP_LINK_ORIGIN,
+		kind: "app-link",
+		interfaceKind: "public",
+		plausible: true,
+		plausibleReason: "",
+		priority: -1
+	};
+}
 function buildEndpoints(interfaces, port, includeLoopback, ipv4Only, publicHostname, scheme = "http", meshEndpoint = null, lanHttp = null) {
 	const out = [];
 	let priority = 0;
@@ -944,4 +970,4 @@ function readLinuxIpv6Flags() {
 	}
 }
 //#endregion
-export { ALLOWLIST_RECONCILE_INTERVAL_MS, LocalNetworkAddon, applyAllowlist, autoSeedAllowlist, buildEndpoints, classifyKind, enumerateOsInterfaces, explainNonPlausible, ipv6Prefix64Key, isDefaultViewerEndpoint, isPlausibleAutoSeed, parseProcIfInet6, pickPreferred, prefixLen, reconcileAllowlist, resolveAdvertisedPort, selectViewerEndpoints, shouldAdvertiseIpv6 };
+export { ALLOWLIST_RECONCILE_INTERVAL_MS, LocalNetworkAddon, appLinkEndpoint, applyAllowlist, autoSeedAllowlist, buildEndpoints, classifyKind, enumerateOsInterfaces, explainNonPlausible, ipv6Prefix64Key, isDefaultViewerEndpoint, isPlausibleAutoSeed, parseProcIfInet6, pickPreferred, prefixLen, reconcileAllowlist, resolveAdvertisedPort, selectViewerEndpoints, shouldAdvertiseIpv6 };

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ut as logDestinationCapability, Yn as BaseAddon } from "../../dist-Cm556q2j.mjs";
+import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-OCi0K-iM.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_proc_stat = require("../../proc-stat-DL-WUOhl.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Jn as errMsg, Yn as BaseAddon, Yt as metricsProviderCapability, ar as createEvent, br as EventCategory, kt as foldSnapshotByFunction, ln as resolveBucketMs, sn as reducePoints } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, Qn as BaseAddon, Zn as errMsg, Zt as metricsProviderCapability, cr as createEvent, fn as resolveBucketMs, jt as foldSnapshotByFunction, un as reducePoints } from "../../dist-OCi0K-iM.mjs";
 import { a as parseProcStat, i as nodeProcReader, n as elapsedSecSince, o as parseProcStatusRss, r as lifetimeCpuPercent, t as commandFromCmdline } from "../../proc-stat-CbC55Kqi.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as os from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Jn as errMsg, Yn as BaseAddon, _n as scoreRuntimes, br as EventCategory, in as platformProbeCapability, sr as emitReadiness, xt as enumerateInferenceDevices } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, Qn as BaseAddon, St as enumerateInferenceDevices, Zn as errMsg, bn as scoreRuntimes, sn as platformProbeCapability, ur as emitReadiness } from "../../dist-OCi0K-iM.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Yn as BaseAddon, br as EventCategory } from "../../dist-Cm556q2j.mjs";
+import { Cr as EventCategory, Qn as BaseAddon } from "../../dist-OCi0K-iM.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { En as streamQualityLabel, Gn as DeviceFeature, J as bareAddonId, Jn as errMsg, Jt as memoizePinnedFfmpeg, Y as batteryCapability, Yn as BaseAddon, a as BatteryStatusSchema, bn as snapshotCapability, br as EventCategory, fr as nodePin, ht as deriveBatteryPresence, qn as DeviceType } from "../../dist-Cm556q2j.mjs";
+import { Cn as snapshotCapability, Cr as EventCategory, Jn as DeviceFeature, Qn as BaseAddon, X as batteryCapability, Xn as DeviceType, Xt as memoizePinnedFfmpeg, Y as bareAddonId, Zn as errMsg, a as BatteryStatusSchema, gt as deriveBatteryPresence, hr as nodePin, kn as streamQualityLabel } from "../../dist-OCi0K-iM.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/analyze-stats.d.ts

@@ -8,8 +8,6 @@ import { Database } from 'better-sqlite3';
  * the cluster is serving before the engine goes quiet.
  */
 export declare const ANALYZE_DELAY_MS = 120000;
-/** Env var that disables the one-shot analysis. `off` is the only value read. */
-export declare const ANALYZE_ENV_VAR = "CAMSTACK_SQLITE_ANALYZE";
 /** What {@link runAnalyzeIfMissing} did, for the caller to log. */
 export type AnalyzeOutcome = {
     readonly kind: 'already-present';

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Ot as filesystemBrowseCapability, Yn as BaseAddon, wn as storageProviderCapability } from "../../dist-Cm556q2j.mjs";
+import { At as filesystemBrowseCapability, Dn as storageProviderCapability, Qn as BaseAddon } from "../../dist-OCi0K-iM.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings-backend.d.ts

@@ -369,15 +369,6 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
      * with a number yields 0, which `sqliteOccupancy` reads as "unknown" and
      * reports as an empty file rather than inventing a ratio.
      */
-    /**
-     * Name the biggest tables, once, a minute after the connection opens.
-     *
-     * `dbSizeMb` says how big the file is and `freePct` says how much of it is
-     * live; neither says WHOSE. Per-addon scoped collections are created on first
-     * write and declared nowhere, so this is the only place the real set can be
-     * enumerated. `unref` so it can never hold the process open, and
-     * `CAMSTACK_SQLITE_STORAGE_REPORT=off` turns it off without a rebuild.
-     */
     /**
      * Follow the file as it grows.
      *
@@ -388,8 +379,7 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
      * node escaped it only because 130 MB → 858 MB spanned seventeen days of
      * restarts.
      *
-     * `unref` so it never holds the process open, and the same kill switch as the
-     * storage report turns it off without a rebuild.
+     * `unref` so it never holds the process open.
      */
     private scheduleMapGrowthCheck;
     /**
@@ -402,6 +392,14 @@ export declare class SqliteSettingsBackend implements ISettingsBackend {
      * one thread the cluster reads configuration through.
      */
     private scheduleIndexAnalysis;
+    /**
+     * Name the biggest tables, once, a minute after the connection opens.
+     *
+     * `dbSizeMb` says how big the file is and `freePct` says how much of it is
+     * live; neither says WHOSE. Per-addon scoped collections are created on first
+     * write and declared nowhere, so this is the only place the real set can be
+     * enumerated. `unref` so it can never hold the process open.
+     */
     private scheduleStorageReport;
     private logStorageReport;
     private readPragmaNumber;

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-DmHNjbB0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
@@ -1745,7 +1745,7 @@ function resolveMinFreePercent(config, providerDefaultPercent, capacity, notice)
 *
 * Measured on the live hub, 2026-09-13. `storage.listLocations` returned two
 * `backups` locations with byte-identical capacity — `/data/backups` on
-* `filesystem-storage` and `//192.168.x.x/backups` on `smb-storage`, both
+* `filesystem-storage` and `//192.168.10.89/backups` on `smb-storage`, both
 * `total 506107977728 / available 193348673536`. `owned` differed correctly
 * (9.9 GB vs 1.6 GB), so nothing about the rendering was at fault: the probe
 * simply never looked at the provider. It `path.resolve`d the SMB row's

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { B as StorageMigrationJobSchema, Kt as mayReadLocation, L as StorageCleanupJobSchema, Mn as withLocationMode, Pt as isLocationEnabled, R as StorageLocationModeSchema, Sn as storageMigrationCapability, T as LegacyStorageLocationDefaultSchema, Tt as evictionPolicyOfLocation, Xt as modeMayWrite, Yn as BaseAddon, br as EventCategory, et as collectSecretConfigKeys, fn as resolveLocationMode, j as REDACTED_SECRET, jt as gbToBytes, pr as parseJsonObject, qt as mayWriteToLocation, vn as settingsStoreCapability, xn as storageCapability, z as StorageLocationTypeSchema, zt as legacyModeOf } from "../../dist-Cm556q2j.mjs";
+import { B as StorageLocationTypeSchema, Cr as EventCategory, E as LegacyStorageLocationDefaultSchema, Et as evictionPolicyOfLocation, Fn as withLocationMode, It as isLocationEnabled, Jt as mayReadLocation, M as REDACTED_SECRET, Nt as gbToBytes, Qn as BaseAddon, Qt as modeMayWrite, R as StorageCleanupJobSchema, Tn as storageMigrationCapability, V as StorageMigrationJobSchema, Vt as legacyModeOf, Yt as mayWriteToLocation, gr as parseJsonObject, hn as resolveLocationMode, tt as collectSecretConfigKeys, wn as storageCapability, xn as settingsStoreCapability, z as StorageLocationModeSchema } from "../../dist-OCi0K-iM.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-BdT320dq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
@@ -1740,7 +1740,7 @@ function resolveMinFreePercent(config, providerDefaultPercent, capacity, notice)
 *
 * Measured on the live hub, 2026-09-13. `storage.listLocations` returned two
 * `backups` locations with byte-identical capacity — `/data/backups` on
-* `filesystem-storage` and `//192.168.x.x/backups` on `smb-storage`, both
+* `filesystem-storage` and `//192.168.10.89/backups` on `smb-storage`, both
 * `total 506107977728 / available 193348673536`. `owned` differed correctly
 * (9.9 GB vs 1.6 GB), so nothing about the rendering was at fault: the probe
 * simply never looked at the provider. It `path.resolve`d the SMB row's

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Jn as errMsg, Yn as BaseAddon, lr as hydrateSchema } from "../../dist-Cm556q2j.mjs";
+import { Qn as BaseAddon, Zn as errMsg, fr as hydrateSchema } from "../../dist-OCi0K-iM.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CXVXFdJX.js");
+const require_dist = require("../../dist-BWicEEVA.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ut as logDestinationCapability, Yn as BaseAddon } from "../../dist-Cm556q2j.mjs";
+import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-OCi0K-iM.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";