@camstack/system 1.2.355 → 1.2.357

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-CqV-7-QZ.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-wbIQJctP.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { $t as RUNNER_RSS_BUDGET_ENV, Ft as resolveAddonClass, H as createUdsLoggerWithControl, Pt as installManifestNativeDeps, U as LocalChildClient, _t as getWorkerNativeCapSnapshot, f as installManifestSystemDeps, fn as startRunnerHeapWatch, g as createUdsAddonContext, gt as getWorkerNativeCapProvider, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, wn as emitHeapDiagnosticReport, xt as validateProviderRegistrations, yt as setWorkerNativeCapsChangeListener } from "./child-cap-dispatch-DMx2axev.mjs";
+import { $t as RUNNER_RSS_BUDGET_ENV, Ft as resolveAddonClass, H as createUdsLoggerWithControl, Pt as installManifestNativeDeps, U as LocalChildClient, _t as getWorkerNativeCapSnapshot, f as installManifestSystemDeps, fn as startRunnerHeapWatch, g as createUdsAddonContext, gt as getWorkerNativeCapProvider, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, wn as emitHeapDiagnosticReport, xt as validateProviderRegistrations, yt as setWorkerNativeCapsChangeListener } from "./child-cap-dispatch-BcRHQBKW.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, Qn as BaseAddon, U as addonPagesCapability, Zn as errMsg } from "../../dist-OCi0K-iM.mjs";
+import { Cr as EventCategory, Qn as BaseAddon, U as addonPagesCapability, Zn as errMsg } from "../../dist-B7WRgEZY.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, G as addonWidgetsCapability, Qn as BaseAddon, Zn as errMsg } from "../../dist-OCi0K-iM.mjs";
+import { Cr as EventCategory, G as addonWidgetsCapability, Qn as BaseAddon, Zn as errMsg } from "../../dist-B7WRgEZY.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, K as alertsCapability, Qn as BaseAddon, Zn as errMsg, cr as createEvent, n as AlertSchema } from "../../dist-OCi0K-iM.mjs";
+import { Cr as EventCategory, K as alertsCapability, Qn as BaseAddon, Zn as errMsg, cr as createEvent, n as AlertSchema } from "../../dist-B7WRgEZY.mjs";
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, Qn as BaseAddon, S as FIRST_LEVEL_MACRO_CLASSES, Y as bareAddonId, Zn as errMsg, ln as ptzAutotrackCapability, mr as isEvent } from "../../dist-OCi0K-iM.mjs";
+import { Cr as EventCategory, Qn as BaseAddon, S as FIRST_LEVEL_MACRO_CLASSES, Y as bareAddonId, Zn as errMsg, ln as ptzAutotrackCapability, mr as isEvent } from "../../dist-B7WRgEZY.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, En as storageOccupancyCapability, J as backupCapability, Qn as BaseAddon, Sr as toNodeId, Yt as mayWriteToLocation, g as DATABASE_SNAPSHOT_SUFFIX, hr as nodePin } from "../../dist-OCi0K-iM.mjs";
+import { Cr as EventCategory, En as storageOccupancyCapability, J as backupCapability, Qn as BaseAddon, Sr as toNodeId, Yt as mayWriteToLocation, g as DATABASE_SNAPSHOT_SUFFIX, hr as nodePin } from "../../dist-B7WRgEZY.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as calendarsCapability, Qn as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-OCi0K-iM.mjs";
+import { $ as calendarsCapability, Qn as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-B7WRgEZY.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/grid-activity-mirror.d.ts

@@ -1,14 +1,24 @@
 /** The grid's own motion answer, in the shape the `motion` cap publishes. */
 export interface GridMotionState {
     readonly detected: boolean;
-    /** Ms epoch of the most recent rising edge on ANY source. Null if never. */
+    /** Ms epoch of the most recent rising edge on ANY source (never a heartbeat). Null if never. */
     readonly lastDetectedAt: number | null;
 }
 export declare class GridActivityMirror {
     private readonly motion;
     private readonly audio;
     private lastDetectedAt;
-    /** One source's motion push. `detected: false` is as important as `true`. */
+    /**
+     * One source's motion push. `detected: false` is as important as `true`.
+     *
+     * `lastDetectedAt` moves only on a source's RISING edge — the source was not
+     * moving, or its last `true` had expired. A source's pushes include a
+     * heartbeat (the bridge's sustain ticks, every `true` a camera re-sends while
+     * a subject stays), and moving the stamp on each one made the grid's
+     * `lastDetectedAt` "the last tick of any cell" while every camera's is its
+     * last effective RISE (D696): the viewer's Motion order then ranked the grid
+     * above the very cells it shows (2026-10-06).
+     */
     noteMotion(sourceDeviceId: number, detected: boolean, atMs: number): void;
     /** One source's audio window. `dbfs` is the level, on the analyzer's scale. */
     noteAudio(sourceDeviceId: number, dbfs: number, atMs: number): void;

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");
@@ -475,13 +475,25 @@ var GridActivityMirror = class {
 	motion = /* @__PURE__ */ new Map();
 	audio = /* @__PURE__ */ new Map();
 	lastDetectedAt = null;
-	/** One source's motion push. `detected: false` is as important as `true`. */
+	/**
+	* One source's motion push. `detected: false` is as important as `true`.
+	*
+	* `lastDetectedAt` moves only on a source's RISING edge — the source was not
+	* moving, or its last `true` had expired. A source's pushes include a
+	* heartbeat (the bridge's sustain ticks, every `true` a camera re-sends while
+	* a subject stays), and moving the stamp on each one made the grid's
+	* `lastDetectedAt` "the last tick of any cell" while every camera's is its
+	* last effective RISE (D696): the viewer's Motion order then ranked the grid
+	* above the very cells it shows (2026-10-06).
+	*/
 	noteMotion(sourceDeviceId, detected, atMs) {
+		const prev = this.motion.get(sourceDeviceId);
+		const wasMoving = prev !== void 0 && prev.detected && atMs - prev.atMs <= 15e3;
 		this.motion.set(sourceDeviceId, {
 			detected,
 			atMs
 		});
-		if (detected) this.lastDetectedAt = Math.max(this.lastDetectedAt ?? 0, atMs);
+		if (detected && !wasMoving) this.lastDetectedAt = Math.max(this.lastDetectedAt ?? 0, atMs);
 	}
 	/** One source's audio window. `dbfs` is the level, on the analyzer's scale. */
 	noteAudio(sourceDeviceId, dbfs, atMs) {

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { $t as motionCapability, A as MOTION_CLOSE_AFTER_MS, Cn as snapshotCapability, Cr as EventCategory, Jn as DeviceFeature, Ln as buildFfmpegArgs, On as streamCatalogCapability, Qn as BaseAddon, Xn as DeviceType, Xt as memoizePinnedFfmpeg, Zn as errMsg, b as DeclaredDevices, cr as createEvent, et as cameraGridLayoutCapability, fr as hydrateSchema, i as BaseDevice, pt as declarationOwnerNodeId, y as DERIVED_CAMERA_SILENCED_CAP_NAMES } from "../../dist-OCi0K-iM.mjs";
+import { $t as motionCapability, A as MOTION_CLOSE_AFTER_MS, Cn as snapshotCapability, Cr as EventCategory, Jn as DeviceFeature, Ln as buildFfmpegArgs, On as streamCatalogCapability, Qn as BaseAddon, Xn as DeviceType, Xt as memoizePinnedFfmpeg, Zn as errMsg, b as DeclaredDevices, cr as createEvent, et as cameraGridLayoutCapability, fr as hydrateSchema, i as BaseDevice, pt as declarationOwnerNodeId, y as DERIVED_CAMERA_SILENCED_CAP_NAMES } from "../../dist-B7WRgEZY.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";
@@ -470,13 +470,25 @@ var GridActivityMirror = class {
 	motion = /* @__PURE__ */ new Map();
 	audio = /* @__PURE__ */ new Map();
 	lastDetectedAt = null;
-	/** One source's motion push. `detected: false` is as important as `true`. */
+	/**
+	* One source's motion push. `detected: false` is as important as `true`.
+	*
+	* `lastDetectedAt` moves only on a source's RISING edge — the source was not
+	* moving, or its last `true` had expired. A source's pushes include a
+	* heartbeat (the bridge's sustain ticks, every `true` a camera re-sends while
+	* a subject stays), and moving the stamp on each one made the grid's
+	* `lastDetectedAt` "the last tick of any cell" while every camera's is its
+	* last effective RISE (D696): the viewer's Motion order then ranked the grid
+	* above the very cells it shows (2026-10-06).
+	*/
 	noteMotion(sourceDeviceId, detected, atMs) {
+		const prev = this.motion.get(sourceDeviceId);
+		const wasMoving = prev !== void 0 && prev.detected && atMs - prev.atMs <= 15e3;
 		this.motion.set(sourceDeviceId, {
 			detected,
 			atMs
 		});
-		if (detected) this.lastDetectedAt = Math.max(this.lastDetectedAt ?? 0, atMs);
+		if (detected && !wasMoving) this.lastDetectedAt = Math.max(this.lastDetectedAt ?? 0, atMs);
 	}
 	/** One source's audio window. `dbfs` is the level, on the analyzer's scale. */
 	noteAudio(sourceDeviceId, dbfs, atMs) {

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
-const require_composition_sources = require("../../composition-sources-Bk-MjK1D.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
+const require_composition_sources = require("../../composition-sources-CeO0K2cl.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { Bn as composedDeviceStableId, Cr as EventCategory, Gn as createStatefulExpressionMemory, Hn as compositionItemFieldPath, In as COMPOSER_ADDON_ID, Kn as disarmRoseMemory, Ot as expressionContainsBuiltinCall, Qn as BaseAddon, Rn as cloneStatefulExpressionMemory, Tt as evaluateCompositionField, Un as compositionSliceKey, Vn as compositionFeatureEnabled, Wn as compositionSourceKey, Xn as DeviceType, Z as buildCapabilityLookup, Zn as errMsg, b as DeclaredDevices, cr as createEvent, i as BaseDevice, l as COMPOSED_ITEM_FIXED_FIELDS, nt as composerCapability, on as planComposition, qn as toExpressionValue, rt as compositionFieldKey, t as ALL_CAPABILITY_DEFINITIONS, zn as composedDeviceRef } from "../../dist-OCi0K-iM.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-Dpl1G0Gr.mjs";
+import { Bn as composedDeviceStableId, Cr as EventCategory, Gn as createStatefulExpressionMemory, Hn as compositionItemFieldPath, In as COMPOSER_ADDON_ID, Kn as disarmRoseMemory, Ot as expressionContainsBuiltinCall, Qn as BaseAddon, Rn as cloneStatefulExpressionMemory, Tt as evaluateCompositionField, Un as compositionSliceKey, Vn as compositionFeatureEnabled, Wn as compositionSourceKey, Xn as DeviceType, Z as buildCapabilityLookup, Zn as errMsg, b as DeclaredDevices, cr as createEvent, i as BaseDevice, l as COMPOSED_ITEM_FIXED_FIELDS, nt as composerCapability, on as planComposition, qn as toExpressionValue, rt as compositionFieldKey, t as ALL_CAPABILITY_DEFINITIONS, zn as composedDeviceRef } from "../../dist-B7WRgEZY.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-BBfqepyT.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-OCi0K-iM.mjs";
+import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-B7WRgEZY.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
-const require_composition_sources = require("../../composition-sources-Bk-MjK1D.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
+const require_composition_sources = require("../../composition-sources-CeO0K2cl.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { Qn as BaseAddon, Wn as compositionSourceKey, Z as buildCapabilityLookup, Zn as errMsg, _t as describeComposableCaps, at as coreBlockAddonId, b as DeclaredDevices, ct as coreBlockSourceKind, d as CORE_BLOCKS_ADDON_ID, dn as replacedFieldKeys, en as normalizeCoreBlockWrite, f as CORE_BLOCK_ADDON_PREFIX, fr as hydrateSchema, it as compositionSourceRefs, jn as validateComposition, lt as coreBlocksCapability, m as CoreBlockSchema, mn as resolveCoreBlockFiles, on as planComposition, ot as coreBlockComposition, pn as resolveCoreBlockEntry, st as coreBlockIdFromAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, zn as composedDeviceRef } from "../../dist-OCi0K-iM.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-Dpl1G0Gr.mjs";
+import { Qn as BaseAddon, Wn as compositionSourceKey, Z as buildCapabilityLookup, Zn as errMsg, _t as describeComposableCaps, at as coreBlockAddonId, b as DeclaredDevices, ct as coreBlockSourceKind, d as CORE_BLOCKS_ADDON_ID, dn as replacedFieldKeys, en as normalizeCoreBlockWrite, f as CORE_BLOCK_ADDON_PREFIX, fr as hydrateSchema, it as compositionSourceRefs, jn as validateComposition, lt as coreBlocksCapability, m as CoreBlockSchema, mn as resolveCoreBlockFiles, on as planComposition, ot as coreBlockComposition, pn as resolveCoreBlockEntry, st as coreBlockIdFromAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, zn as composedDeviceRef } from "../../dist-B7WRgEZY.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-BBfqepyT.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DLJ7MvIB.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-CRlTzxaS.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { Bt as legacyAutoLinkIds, C as FieldClaimModeSchema, Cr as EventCategory, Ct as enumerateItemArrayFields, D as LocationIconIdSchema, Dt as expandContainer, I as STREAM_PROFILE_META, Jn as DeviceFeature, Mt as formatMinutes, Q as buildStreamParamsConfigSchema, Qn as BaseAddon, Sn as siteZoneKey, Wt as locationIconKey, Xn as DeviceType, Yn as DeviceRole, Zn as errMsg, _n as runtimeStatePolicyFor, bt as deviceStateCapability, c as CAP_NAMES_WITH_STATUS, ht as defineExtensionSlotProvider, in as parseStreamParamsFormPatch, ir as WELL_KNOWN_TAB_MAP, k as MINUTES_PER_DAY, o as CAMERA_SWITCH_ORDER, pr as isDeviceConfigCap, t as ALL_CAPABILITY_DEFINITIONS, tn as normalizeUnit, ut as createDeviceExtensionProvider, v as DAY_NAMES, vt as deviceExtensionCapability, w as FieldClaimSchema, wt as enumerateSchemaFields, x as DeviceStatusSchema, xr as sleep$1, xt as deviceStatusCapability, yt as deviceManagerCapability } from "../../dist-OCi0K-iM.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-TDzxE6GA.mjs";
+import { Bt as legacyAutoLinkIds, C as FieldClaimModeSchema, Cr as EventCategory, Ct as enumerateItemArrayFields, D as LocationIconIdSchema, Dt as expandContainer, I as STREAM_PROFILE_META, Jn as DeviceFeature, Mt as formatMinutes, Q as buildStreamParamsConfigSchema, Qn as BaseAddon, Sn as siteZoneKey, Wt as locationIconKey, Xn as DeviceType, Yn as DeviceRole, Zn as errMsg, _n as runtimeStatePolicyFor, bt as deviceStateCapability, c as CAP_NAMES_WITH_STATUS, ht as defineExtensionSlotProvider, in as parseStreamParamsFormPatch, ir as WELL_KNOWN_TAB_MAP, k as MINUTES_PER_DAY, o as CAMERA_SWITCH_ORDER, pr as isDeviceConfigCap, t as ALL_CAPABILITY_DEFINITIONS, tn as normalizeUnit, ut as createDeviceExtensionProvider, v as DAY_NAMES, vt as deviceExtensionCapability, w as FieldClaimSchema, wt as enumerateSchemaFields, x as DeviceStatusSchema, xr as sleep$1, xt as deviceStatusCapability, yt as deviceManagerCapability } from "../../dist-B7WRgEZY.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DKRjfz0U.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-OCi0K-iM.mjs";
+import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-B7WRgEZY.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, P as RecordingStatusSchema, Qn as BaseAddon, Zn as errMsg, cr as createEvent, j as RECORDING_SOURCE_CAMSTACK_ADDON } from "../../dist-OCi0K-iM.mjs";
+import { Cr as EventCategory, P as RecordingStatusSchema, Qn as BaseAddon, Zn as errMsg, cr as createEvent, j as RECORDING_SOURCE_CAMSTACK_ADDON } from "../../dist-B7WRgEZY.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { An as userManagementCapability, H as UserRecordSchema, L as ScopedTokenSchema, Qn as BaseAddon, q as authProviderCapability, r as ApiKeyRecordSchema } from "../../dist-OCi0K-iM.mjs";
+import { An as userManagementCapability, H as UserRecordSchema, L as ScopedTokenSchema, Qn as BaseAddon, q as authProviderCapability, r as ApiKeyRecordSchema } from "../../dist-B7WRgEZY.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.d.ts

@@ -120,6 +120,13 @@ export declare class LocalNetworkAddon extends BaseAddon<LocalNetworkConfig> {
     private resolvedHttpPort;
     private tlsDataDir;
     private snapshotTls;
+    /**
+     * Hot-swap the HTTPS listener onto the pair now on disk. A failure is not
+     * thrown — the files are already written and the status reports
+     * `restartRequired` from the served-vs-disk fingerprints — but it is logged:
+     * a certificate change that did not reach the listener must say so.
+     */
+    private putCertificateOnListener;
     /**
      * Bind or unbind the LAN HTTP sibling from the addon's own settings, and
      * keep the leaf SAN in sync with `localHostname`. This is the settings

package/dist/builtins/local-network/local-network.addon.js

@@ -1,9 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
-const require_tls = require("../../tls-ue_Xefmv.js");
-let node_fs_promises = require("node:fs/promises");
-let node_path = require("node:path");
+const require_dist = require("../../dist-CFVOy8VT.js");
+const require_tls = require("../../tls-CCMX7MjX.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");
@@ -326,32 +324,30 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 				} });
 				return { success: true };
 			},
-			getTlsStatus: async () => this.snapshotTls(false),
+			getTlsStatus: async () => this.snapshotTls(),
 			regenerateCertificate: async (_input) => {
-				if (require_tls.readTlsMode(this.tlsDataDir()) === "uploaded") throw new Error("Cannot regenerate an uploaded certificate — revert to generated first.");
 				const extraSans = [...require_tls.readExtraSans(this.tlsDataDir())];
-				await require_tls.reissueTlsLeaf(this.tlsDataDir(), { extraSans });
-				return this.snapshotTls(true);
+				await require_tls.regenerateCertificate(this.tlsDataDir(), { extraSans });
+				this.putCertificateOnListener("regenerate");
+				return this.snapshotTls();
 			},
 			uploadCertificate: async ({ certPem, keyPem, caPem }) => {
-				const valid = require_tls.validateUploadedTls(certPem, keyPem);
-				if (!valid.ok) throw new Error(valid.error);
-				const dir = (0, node_path.join)(this.tlsDataDir(), "tls");
-				await (0, node_fs_promises.mkdir)(dir, { recursive: true });
-				await (0, node_fs_promises.writeFile)((0, node_path.join)(dir, "camstack.crt"), certPem.endsWith("\n") ? certPem : `${certPem}\n`);
-				await (0, node_fs_promises.writeFile)((0, node_path.join)(dir, "camstack.key"), keyPem.endsWith("\n") ? keyPem : `${keyPem}\n`, { mode: 384 });
-				if (caPem && caPem.trim() !== "") await (0, node_fs_promises.writeFile)((0, node_path.join)(dir, "camstack-ca.crt"), caPem.endsWith("\n") ? caPem : `${caPem}\n`);
-				require_tls.writeTlsMode(this.tlsDataDir(), "uploaded");
-				return this.snapshotTls(true);
+				await require_tls.storeUploadedCertificate(this.tlsDataDir(), {
+					certPem,
+					keyPem,
+					caPem
+				});
+				this.putCertificateOnListener("upload");
+				return this.snapshotTls();
 			},
 			downloadCa: async () => {
-				return { pem: this.snapshotTls(false).caCertPem ?? "" };
+				return { pem: this.snapshotTls().caCertPem ?? "" };
 			},
 			revertToGeneratedCertificate: async () => {
-				require_tls.writeTlsMode(this.tlsDataDir(), "generated");
 				const extraSans = [...require_tls.readExtraSans(this.tlsDataDir())];
-				await require_tls.ensureTlsCert(this.tlsDataDir(), { extraSans });
-				return this.snapshotTls(true);
+				await require_tls.revertToGeneratedCertificate(this.tlsDataDir(), { extraSans });
+				this.putCertificateOnListener("revert");
+				return this.snapshotTls();
 			}
 		};
 		this.lastSnapshotKey = snapshotKey(this.enumerate());
@@ -510,14 +506,35 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	tlsDataDir() {
 		return this.ctx.nodeDataDir ?? this.ctx.dataDir;
 	}
-	snapshotTls(restartRequired) {
-		const status = require_tls.readTlsAccessStatus(this.tlsDataDir(), restartRequired);
+	snapshotTls() {
+		const status = require_tls.readTlsAccessStatus(this.tlsDataDir(), require_tls.servedHttpsLeafFingerprint());
 		return {
 			...status,
 			sans: [...status.sans]
 		};
 	}
 	/**
+	* Hot-swap the HTTPS listener onto the pair now on disk. A failure is not
+	* thrown — the files are already written and the status reports
+	* `restartRequired` from the served-vs-disk fingerprints — but it is logged:
+	* a certificate change that did not reach the listener must say so.
+	*/
+	putCertificateOnListener(action) {
+		const outcome = require_tls.applyCertificateToListener(this.tlsDataDir());
+		if (outcome.kind === "reloaded") {
+			this.ctx.logger.info("local-network: HTTPS listener now serves the new certificate", { meta: {
+				action,
+				leafFingerprintSha256: outcome.servedLeafFingerprint
+			} });
+			return;
+		}
+		this.ctx.logger.warn("local-network: certificate changed on disk but NOT on the listener", { meta: {
+			action,
+			reason: outcome.kind,
+			...outcome.kind === "failed" ? { error: outcome.error } : {}
+		} });
+	}
+	/**
 	* Bind or unbind the LAN HTTP sibling from the addon's own settings, and
 	* keep the leaf SAN in sync with `localHostname`. This is the settings
 	* side-effect path — there is no second persist API.
@@ -536,7 +553,9 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 		});
 		if (hostname !== "") {
 			require_tls.writeExtraSans(this.tlsDataDir(), [hostname]);
-			if (require_tls.readTlsMode(this.tlsDataDir()) === "generated") await require_tls.ensureTlsCert(this.tlsDataDir(), { extraSans: [hostname] });
+			if (require_tls.readTlsMode(this.tlsDataDir()) === "generated") {
+				if ((await require_tls.ensureTlsCert(this.tlsDataDir(), { extraSans: [hostname] })).generated) this.putCertificateOnListener("hostname");
+			}
 		} else require_tls.writeExtraSans(this.tlsDataDir(), []);
 	}
 	/**

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,7 +1,5 @@
-import { Cr as EventCategory, Qn as BaseAddon, Ut as localNetworkCapability, an as pickAppLinkHub, s as CAMSTACK_APP_LINK_ORIGIN } from "../../dist-OCi0K-iM.mjs";
-import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-DTlVWwAI.mjs";
-import { mkdir, writeFile } from "node:fs/promises";
-import { join } from "node:path";
+import { Cr as EventCategory, Qn as BaseAddon, Ut as localNetworkCapability, an as pickAppLinkHub, s as CAMSTACK_APP_LINK_ORIGIN } from "../../dist-B7WRgEZY.mjs";
+import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-CJHogwTl.mjs";
 import * as os from "node:os";
 import { readFileSync } from "node:fs";
 import { isIP } from "node:net";
@@ -323,32 +321,30 @@ var LocalNetworkAddon = class extends BaseAddon {
 				} });
 				return { success: true };
 			},
-			getTlsStatus: async () => this.snapshotTls(false),
+			getTlsStatus: async () => this.snapshotTls(),
 			regenerateCertificate: async (_input) => {
-				if (readTlsMode(this.tlsDataDir()) === "uploaded") throw new Error("Cannot regenerate an uploaded certificate — revert to generated first.");
 				const extraSans = [...readExtraSans(this.tlsDataDir())];
-				await reissueTlsLeaf(this.tlsDataDir(), { extraSans });
-				return this.snapshotTls(true);
+				await regenerateCertificate(this.tlsDataDir(), { extraSans });
+				this.putCertificateOnListener("regenerate");
+				return this.snapshotTls();
 			},
 			uploadCertificate: async ({ certPem, keyPem, caPem }) => {
-				const valid = validateUploadedTls(certPem, keyPem);
-				if (!valid.ok) throw new Error(valid.error);
-				const dir = join(this.tlsDataDir(), "tls");
-				await mkdir(dir, { recursive: true });
-				await writeFile(join(dir, "camstack.crt"), certPem.endsWith("\n") ? certPem : `${certPem}\n`);
-				await writeFile(join(dir, "camstack.key"), keyPem.endsWith("\n") ? keyPem : `${keyPem}\n`, { mode: 384 });
-				if (caPem && caPem.trim() !== "") await writeFile(join(dir, "camstack-ca.crt"), caPem.endsWith("\n") ? caPem : `${caPem}\n`);
-				writeTlsMode(this.tlsDataDir(), "uploaded");
-				return this.snapshotTls(true);
+				await storeUploadedCertificate(this.tlsDataDir(), {
+					certPem,
+					keyPem,
+					caPem
+				});
+				this.putCertificateOnListener("upload");
+				return this.snapshotTls();
 			},
 			downloadCa: async () => {
-				return { pem: this.snapshotTls(false).caCertPem ?? "" };
+				return { pem: this.snapshotTls().caCertPem ?? "" };
 			},
 			revertToGeneratedCertificate: async () => {
-				writeTlsMode(this.tlsDataDir(), "generated");
 				const extraSans = [...readExtraSans(this.tlsDataDir())];
-				await ensureTlsCert(this.tlsDataDir(), { extraSans });
-				return this.snapshotTls(true);
+				await revertToGeneratedCertificate(this.tlsDataDir(), { extraSans });
+				this.putCertificateOnListener("revert");
+				return this.snapshotTls();
 			}
 		};
 		this.lastSnapshotKey = snapshotKey(this.enumerate());
@@ -507,14 +503,35 @@ var LocalNetworkAddon = class extends BaseAddon {
 	tlsDataDir() {
 		return this.ctx.nodeDataDir ?? this.ctx.dataDir;
 	}
-	snapshotTls(restartRequired) {
-		const status = readTlsAccessStatus(this.tlsDataDir(), restartRequired);
+	snapshotTls() {
+		const status = readTlsAccessStatus(this.tlsDataDir(), servedHttpsLeafFingerprint());
 		return {
 			...status,
 			sans: [...status.sans]
 		};
 	}
 	/**
+	* Hot-swap the HTTPS listener onto the pair now on disk. A failure is not
+	* thrown — the files are already written and the status reports
+	* `restartRequired` from the served-vs-disk fingerprints — but it is logged:
+	* a certificate change that did not reach the listener must say so.
+	*/
+	putCertificateOnListener(action) {
+		const outcome = applyCertificateToListener(this.tlsDataDir());
+		if (outcome.kind === "reloaded") {
+			this.ctx.logger.info("local-network: HTTPS listener now serves the new certificate", { meta: {
+				action,
+				leafFingerprintSha256: outcome.servedLeafFingerprint
+			} });
+			return;
+		}
+		this.ctx.logger.warn("local-network: certificate changed on disk but NOT on the listener", { meta: {
+			action,
+			reason: outcome.kind,
+			...outcome.kind === "failed" ? { error: outcome.error } : {}
+		} });
+	}
+	/**
 	* Bind or unbind the LAN HTTP sibling from the addon's own settings, and
 	* keep the leaf SAN in sync with `localHostname`. This is the settings
 	* side-effect path — there is no second persist API.
@@ -533,7 +550,9 @@ var LocalNetworkAddon = class extends BaseAddon {
 		});
 		if (hostname !== "") {
 			writeExtraSans(this.tlsDataDir(), [hostname]);
-			if (readTlsMode(this.tlsDataDir()) === "generated") await ensureTlsCert(this.tlsDataDir(), { extraSans: [hostname] });
+			if (readTlsMode(this.tlsDataDir()) === "generated") {
+				if ((await ensureTlsCert(this.tlsDataDir(), { extraSans: [hostname] })).generated) this.putCertificateOnListener("hostname");
+			}
 		} else writeExtraSans(this.tlsDataDir(), []);
 	}
 	/**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BWicEEVA.js");
+const require_dist = require("../../dist-CFVOy8VT.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-OCi0K-iM.mjs";
+import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-B7WRgEZY.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label