@camstack/system 1.2.357 → 1.2.359

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-wbIQJctP.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-t61ohDpb.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { $t as RUNNER_RSS_BUDGET_ENV, Ft as resolveAddonClass, H as createUdsLoggerWithControl, Pt as installManifestNativeDeps, U as LocalChildClient, _t as getWorkerNativeCapSnapshot, f as installManifestSystemDeps, fn as startRunnerHeapWatch, g as createUdsAddonContext, gt as getWorkerNativeCapProvider, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, wn as emitHeapDiagnosticReport, xt as validateProviderRegistrations, yt as setWorkerNativeCapsChangeListener } from "./child-cap-dispatch-BcRHQBKW.mjs";
+import { $t as RUNNER_RSS_BUDGET_ENV, Ft as resolveAddonClass, H as createUdsLoggerWithControl, Pt as installManifestNativeDeps, U as LocalChildClient, _t as getWorkerNativeCapSnapshot, f as installManifestSystemDeps, fn as startRunnerHeapWatch, g as createUdsAddonContext, gt as getWorkerNativeCapProvider, i as killOwnRunnerGroupAfterParentLoss, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, wn as emitHeapDiagnosticReport, xt as validateProviderRegistrations, yt as setWorkerNativeCapsChangeListener } from "./child-cap-dispatch-Dm1TRDCr.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/auth/user-manager.d.ts

@@ -1,5 +1,5 @@
+import { SettingsStoreClient, TokenScope, UserRecord } from '@camstack/types';
 import { AuthManager } from './auth-manager.js';
-import { UserRecord, TokenScope, SettingsStoreClient } from '@camstack/types';
 export type { UserRecord };
 interface CreateUserInput {
     username: string;
@@ -10,6 +10,26 @@ interface CreateUserInput {
     scopes?: TokenScope[];
 }
 type UpdatableUserFields = Partial<Pick<UserRecord, 'isAdmin' | 'allowedProviders' | 'allowedDevices' | 'scopes'>>;
+export interface EnsureAdminOptions {
+    /** The operator's explicit, one-shot recovery request. Never a default. */
+    readonly resetPassword?: boolean;
+}
+/** What `ensureAdminExists` did — every branch is named so the caller can log it. */
+export type AdminSeedOutcome = {
+    readonly kind: 'not-configured';
+} | {
+    readonly kind: 'seeded';
+    readonly username: string;
+} | {
+    readonly kind: 'exists';
+    readonly username: string;
+} | {
+    readonly kind: 'other-admin-exists';
+    readonly username: string;
+} | {
+    readonly kind: 'reset';
+    readonly username: string;
+};
 export interface UserStorageAccess {
     getStore(): SettingsStoreClient;
 }
@@ -31,5 +51,26 @@ export declare class UserManager {
     update(id: string, data: UpdatableUserFields): Promise<void>;
     delete(id: string): Promise<void>;
     resetPassword(id: string, newPassword: string): Promise<void>;
-    ensureAdminExists(): Promise<void>;
+    /**
+     * Seed the configured admin (`auth.adminUsername` / `auth.adminPassword`,
+     * i.e. `CAMSTACK_ADMIN_USER` / `CAMSTACK_ADMIN_PASS`) — on FIRST boot only.
+     *
+     * The configured password is a seed, never an authority. Once any admin
+     * exists, this never writes a password: the operator's own change in the
+     * admin UI is the truth from then on. This method used to compare the stored
+     * hash with the configured password on every boot and rewrite it when they
+     * differed, so a password changed in the UI went back to the configured one
+     * (`changeme` on a Mac hub and on any container without `CAMSTACK_ADMIN_PASS`)
+     * at the next restart.
+     *
+     * `resetPassword: true` is the one explicit exception — the operator's
+     * one-shot recovery request (see `admin-password-reset.ts`): the configured
+     * admin's password is set back to the configured one.
+     */
+    ensureAdminExists(options?: EnsureAdminOptions): Promise<AdminSeedOutcome>;
+    /**
+     * Does `username` still sign in with `password`? A hash comparison — the
+     * password is never logged or stored. `false` when the user does not exist.
+     */
+    hasPassword(username: string, password: string): Promise<boolean>;
 }

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, Qn as BaseAddon, U as addonPagesCapability, Zn as errMsg } from "../../dist-B7WRgEZY.mjs";
+import { Ar as EventCategory, U as addonPagesCapability, ar as BaseAddon, ir as errMsg } from "../../dist-pTfD_M-U.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, G as addonWidgetsCapability, Qn as BaseAddon, Zn as errMsg } from "../../dist-B7WRgEZY.mjs";
+import { Ar as EventCategory, G as addonWidgetsCapability, ar as BaseAddon, ir as errMsg } from "../../dist-pTfD_M-U.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, K as alertsCapability, Qn as BaseAddon, Zn as errMsg, cr as createEvent, n as AlertSchema } from "../../dist-B7WRgEZY.mjs";
+import { Ar as EventCategory, K as alertsCapability, ar as BaseAddon, hr as createEvent, ir as errMsg, n as AlertSchema } from "../../dist-pTfD_M-U.mjs";
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,
@@ -113,7 +113,7 @@ function parseZoom(raw) {
 function zoomRefusalFor(record) {
 	const target = record.zoom.targetSubjectFraction;
 	if (target === null) return null;
-	return `autotrack zoom is configured (target subject fraction ${String(target)}) but NOT IMPLEMENTED: the loop drives pan and tilt only. Subject-size control needs a third axis with its own dead band, a rule that it may act only while pan/tilt are settled, and the two D520 measurements first — a stale error costs more the further the optics are zoomed in.`;
+	return `autotrack zoom is configured (target subject fraction ${String(target)}) but NOT IMPLEMENTED: the loop drives pan and tilt only. Subject-size control needs a third axis with its own dead band, a rule that it may act only while pan/tilt are settled, and two calibration measurements first — a stale error costs more the further the optics are zoomed in.`;
 }
 function parseCameraRecords(raw) {
 	if (!isRecordObject(raw)) return {};

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, Qn as BaseAddon, S as FIRST_LEVEL_MACRO_CLASSES, Y as bareAddonId, Zn as errMsg, ln as ptzAutotrackCapability, mr as isEvent } from "../../dist-B7WRgEZY.mjs";
+import { Ar as EventCategory, S as FIRST_LEVEL_MACRO_CLASSES, Y as bareAddonId, ar as BaseAddon, fn as ptzAutotrackCapability, ir as errMsg, xr as isEvent } from "../../dist-pTfD_M-U.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,
@@ -108,7 +108,7 @@ function parseZoom(raw) {
 function zoomRefusalFor(record) {
 	const target = record.zoom.targetSubjectFraction;
 	if (target === null) return null;
-	return `autotrack zoom is configured (target subject fraction ${String(target)}) but NOT IMPLEMENTED: the loop drives pan and tilt only. Subject-size control needs a third axis with its own dead band, a rule that it may act only while pan/tilt are settled, and the two D520 measurements first — a stale error costs more the further the optics are zoomed in.`;
+	return `autotrack zoom is configured (target subject fraction ${String(target)}) but NOT IMPLEMENTED: the loop drives pan and tilt only. Subject-size control needs a third axis with its own dead band, a rule that it may act only while pan/tilt are settled, and two calibration measurements first — a stale error costs more the further the optics are zoomed in.`;
 }
 function parseCameraRecords(raw) {
 	if (!isRecordObject(raw)) return {};

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, En as storageOccupancyCapability, J as backupCapability, Qn as BaseAddon, Sr as toNodeId, Yt as mayWriteToLocation, g as DATABASE_SNAPSHOT_SUFFIX, hr as nodePin } from "../../dist-B7WRgEZY.mjs";
+import { Ar as EventCategory, J as backupCapability, Mn as storageOccupancyCapability, Qt as mayWriteToLocation, Sr as nodePin, ar as BaseAddon, g as DATABASE_SNAPSHOT_SUFFIX, kr as toNodeId } from "../../dist-pTfD_M-U.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as calendarsCapability, Qn as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-B7WRgEZY.mjs";
+import { $ as calendarsCapability, ar as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-pTfD_M-U.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { $t as motionCapability, A as MOTION_CLOSE_AFTER_MS, Cn as snapshotCapability, Cr as EventCategory, Jn as DeviceFeature, Ln as buildFfmpegArgs, On as streamCatalogCapability, Qn as BaseAddon, Xn as DeviceType, Xt as memoizePinnedFfmpeg, Zn as errMsg, b as DeclaredDevices, cr as createEvent, et as cameraGridLayoutCapability, fr as hydrateSchema, i as BaseDevice, pt as declarationOwnerNodeId, y as DERIVED_CAMERA_SILENCED_CAP_NAMES } from "../../dist-B7WRgEZY.mjs";
+import { $t as memoizePinnedFfmpeg, A as MOTION_CLOSE_AFTER_MS, Ar as EventCategory, Pn as streamCatalogCapability, Wn as buildFfmpegArgs, ar as BaseAddon, b as DeclaredDevices, et as cameraGridLayoutCapability, hr as createEvent, i as BaseDevice, ir as errMsg, kn as snapshotCapability, mt as declarationOwnerNodeId, nn as motionCapability, rr as DeviceType, tr as DeviceFeature, y as DERIVED_CAMERA_SILENCED_CAP_NAMES, yr as hydrateSchema } from "../../dist-pTfD_M-U.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
-const require_composition_sources = require("../../composition-sources-CeO0K2cl.js");
+const require_dist = require("../../dist-W_X44h-s.js");
+const require_composition_sources = require("../../composition-sources-CCU_KizO.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */
@@ -317,7 +317,7 @@ var ComposedDeviceSet = class {
 //#endregion
 //#region src/builtins/composer/composer-apply-waits.ts
 var INTEGRATION_WAIT = "waiting for the shared Blocks integration to reconcile";
-var STORE_NOT_LOADED = "the core_blocks store has not loaded — nothing is declared or withdrawn until it does (D49)";
+var STORE_NOT_LOADED = "the core_blocks store has not loaded — nothing is declared or withdrawn until it does";
 var ApplyWaits = class {
 	logger;
 	/** Consecutive applies refused because `core_blocks` had not loaded: warned once per run. */
@@ -522,7 +522,7 @@ function degradedReason(released) {
 function heldReason(held) {
 	return held.map((r) => {
 		const path = r.item === void 0 ? r.path : require_dist.compositionItemFieldPath(r.item.arrayPath, r.item.key, r.path);
-		return `held on its last value until its source answers (D49): ${r.cap}.${path} — ${r.reason}`;
+		return `held on its last value until its source answers: ${r.cap}.${path} — ${r.reason}`;
 	}).join("; ");
 }
 /**
@@ -2530,10 +2530,10 @@ var ConfirmedSeed = class {
 * holds (before any release). Each is a `ConfirmedSeed`: an unread or a
 * first-empty answer waits, by name, for an agreeing read.
 */
-var ROWS_UNREAD = "the composer's own device rows could not be read — nothing is declared or withdrawn until they are (D49)";
-var ROWS_EMPTY_UNCONFIRMED = "the composer's own device rows read empty once — a cold registry answers the same, so nothing is declared or withdrawn until the next apply's read agrees (D49)";
-var CLAIMS_NOT_LOADED = "the claims index has not loaded — nothing is claimed or released until it does (D49)";
-var CLAIMS_EMPTY_UNCONFIRMED = "the claims index read empty once — nothing is claimed or released until the next apply's read agrees (D49)";
+var ROWS_UNREAD = "the composer's own device rows could not be read — nothing is declared or withdrawn until they are";
+var ROWS_EMPTY_UNCONFIRMED = "the composer's own device rows read empty once — a cold registry answers the same, so nothing is declared or withdrawn until the next apply's read agrees";
+var CLAIMS_NOT_LOADED = "the claims index has not loaded — nothing is claimed or released until it does";
+var CLAIMS_EMPTY_UNCONFIRMED = "the claims index read empty once — nothing is claimed or released until the next apply's read agrees";
 /** The rows the composer owns, read ONCE before its first withdrawal decision. */
 function composedRowSeed(deps) {
 	return new ConfirmedSeed({

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { Bn as composedDeviceStableId, Cr as EventCategory, Gn as createStatefulExpressionMemory, Hn as compositionItemFieldPath, In as COMPOSER_ADDON_ID, Kn as disarmRoseMemory, Ot as expressionContainsBuiltinCall, Qn as BaseAddon, Rn as cloneStatefulExpressionMemory, Tt as evaluateCompositionField, Un as compositionSliceKey, Vn as compositionFeatureEnabled, Wn as compositionSourceKey, Xn as DeviceType, Z as buildCapabilityLookup, Zn as errMsg, b as DeclaredDevices, cr as createEvent, i as BaseDevice, l as COMPOSED_ITEM_FIXED_FIELDS, nt as composerCapability, on as planComposition, qn as toExpressionValue, rt as compositionFieldKey, t as ALL_CAPABILITY_DEFINITIONS, zn as composedDeviceRef } from "../../dist-B7WRgEZY.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-BBfqepyT.mjs";
+import { $n as disarmRoseMemory, Ar as EventCategory, Et as evaluateCompositionField, Gn as cloneStatefulExpressionMemory, Jn as compositionFeatureEnabled, Kn as composedDeviceRef, Qn as createStatefulExpressionMemory, Un as COMPOSER_ADDON_ID, Xn as compositionSliceKey, Yn as compositionItemFieldPath, Z as buildCapabilityLookup, Zn as compositionSourceKey, ar as BaseAddon, b as DeclaredDevices, er as toExpressionValue, hr as createEvent, i as BaseDevice, ir as errMsg, it as compositionFieldKey, kt as expressionContainsBuiltinCall, l as COMPOSED_ITEM_FIXED_FIELDS, ln as planComposition, qn as composedDeviceStableId, rr as DeviceType, rt as composerCapability, t as ALL_CAPABILITY_DEFINITIONS } from "../../dist-pTfD_M-U.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-CHlfWHl6.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */
@@ -312,7 +312,7 @@ var ComposedDeviceSet = class {
 //#endregion
 //#region src/builtins/composer/composer-apply-waits.ts
 var INTEGRATION_WAIT = "waiting for the shared Blocks integration to reconcile";
-var STORE_NOT_LOADED = "the core_blocks store has not loaded — nothing is declared or withdrawn until it does (D49)";
+var STORE_NOT_LOADED = "the core_blocks store has not loaded — nothing is declared or withdrawn until it does";
 var ApplyWaits = class {
 	logger;
 	/** Consecutive applies refused because `core_blocks` had not loaded: warned once per run. */
@@ -517,7 +517,7 @@ function degradedReason(released) {
 function heldReason(held) {
 	return held.map((r) => {
 		const path = r.item === void 0 ? r.path : compositionItemFieldPath(r.item.arrayPath, r.item.key, r.path);
-		return `held on its last value until its source answers (D49): ${r.cap}.${path} — ${r.reason}`;
+		return `held on its last value until its source answers: ${r.cap}.${path} — ${r.reason}`;
 	}).join("; ");
 }
 /**
@@ -2525,10 +2525,10 @@ var ConfirmedSeed = class {
 * holds (before any release). Each is a `ConfirmedSeed`: an unread or a
 * first-empty answer waits, by name, for an agreeing read.
 */
-var ROWS_UNREAD = "the composer's own device rows could not be read — nothing is declared or withdrawn until they are (D49)";
-var ROWS_EMPTY_UNCONFIRMED = "the composer's own device rows read empty once — a cold registry answers the same, so nothing is declared or withdrawn until the next apply's read agrees (D49)";
-var CLAIMS_NOT_LOADED = "the claims index has not loaded — nothing is claimed or released until it does (D49)";
-var CLAIMS_EMPTY_UNCONFIRMED = "the claims index read empty once — nothing is claimed or released until the next apply's read agrees (D49)";
+var ROWS_UNREAD = "the composer's own device rows could not be read — nothing is declared or withdrawn until they are";
+var ROWS_EMPTY_UNCONFIRMED = "the composer's own device rows read empty once — a cold registry answers the same, so nothing is declared or withdrawn until the next apply's read agrees";
+var CLAIMS_NOT_LOADED = "the claims index has not loaded — nothing is claimed or released until it does";
+var CLAIMS_EMPTY_UNCONFIRMED = "the claims index read empty once — nothing is claimed or released until the next apply's read agrees";
 /** The rows the composer owns, read ONCE before its first withdrawal decision. */
 function composedRowSeed(deps) {
 	return new ConfirmedSeed({

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-B7WRgEZY.mjs";
+import { Jt as logDestinationCapability, ar as BaseAddon } from "../../dist-pTfD_M-U.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
-const require_composition_sources = require("../../composition-sources-CeO0K2cl.js");
+const require_dist = require("../../dist-W_X44h-s.js");
+const require_composition_sources = require("../../composition-sources-CCU_KizO.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { Qn as BaseAddon, Wn as compositionSourceKey, Z as buildCapabilityLookup, Zn as errMsg, _t as describeComposableCaps, at as coreBlockAddonId, b as DeclaredDevices, ct as coreBlockSourceKind, d as CORE_BLOCKS_ADDON_ID, dn as replacedFieldKeys, en as normalizeCoreBlockWrite, f as CORE_BLOCK_ADDON_PREFIX, fr as hydrateSchema, it as compositionSourceRefs, jn as validateComposition, lt as coreBlocksCapability, m as CoreBlockSchema, mn as resolveCoreBlockFiles, on as planComposition, ot as coreBlockComposition, pn as resolveCoreBlockEntry, st as coreBlockIdFromAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, zn as composedDeviceRef } from "../../dist-B7WRgEZY.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-BBfqepyT.mjs";
+import { Kn as composedDeviceRef, Ln as validateComposition, Z as buildCapabilityLookup, Zn as compositionSourceKey, _n as resolveCoreBlockFiles, ar as BaseAddon, at as compositionSourceRefs, b as DeclaredDevices, ct as coreBlockIdFromAddonId, d as CORE_BLOCKS_ADDON_ID, f as CORE_BLOCK_ADDON_PREFIX, gn as resolveCoreBlockEntry, ir as errMsg, ln as planComposition, lt as coreBlockSourceKind, m as CoreBlockSchema, mn as replacedFieldKeys, ot as coreBlockAddonId, rn as normalizeCoreBlockWrite, st as coreBlockComposition, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, ut as coreBlocksCapability, vt as describeComposableCaps, yr as hydrateSchema } from "../../dist-pTfD_M-U.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-CHlfWHl6.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-CRlTzxaS.js");
+const require_dist = require("../../dist-W_X44h-s.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-jglEzgWR.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -4048,7 +4048,7 @@ async function applyGroupPatch(deps, deviceId, group) {
 				tags: { deviceId },
 				meta: { keys: retired }
 			});
-			throw new Error(`[device-manager] ${retired.join(", ")} can no longer be saved from the settings section (D655) — reload the page and use the Extensions section`);
+			throw new Error(`[device-manager] ${retired.join(", ")} can no longer be saved from the settings section — reload the page and use the Extensions section`);
 		}
 		const driverPatch = group.patch;
 		if (Object.keys(driverPatch).length === 0) return;
@@ -4431,7 +4431,7 @@ function sourceOf(deviceId, byId) {
 		deviceId,
 		name: device.name,
 		health: "unavailable",
-		detail: "A container is never a pick (D356): its children are linked in its place. Pick the children instead."
+		detail: "A container is never a pick: its children are linked in its place. Pick the children instead."
 	};
 	return {
 		deviceId,
@@ -8223,13 +8223,13 @@ function deepEqual(a, b) {
 var RuntimeStateRowUnreadError = class extends Error {
 	deviceId;
 	constructor(deviceId) {
-		super(`runtime-state row of device ${deviceId} could not be read — nothing written, a row this process has not read is never replaced (D677)`);
+		super(`runtime-state row of device ${deviceId} could not be read — nothing written, a row this process has not read is never replaced`);
 		this.deviceId = deviceId;
 		this.name = "RuntimeStateRowUnreadError";
 	}
 };
-var ROW_UNREAD_REFUSAL_MESSAGE = "runtime-state row write refused — the row could not be read first, nothing written (D677)";
-var ROW_DROPS_CAPS_MESSAGE = "runtime-state row write DROPS caps the stored row holds (D677)";
+var ROW_UNREAD_REFUSAL_MESSAGE = "runtime-state row write refused — the row could not be read first, nothing written";
+var ROW_DROPS_CAPS_MESSAGE = "runtime-state row write DROPS caps the stored row holds";
 function errorMessage$2(err) {
 	return err instanceof Error ? err.message : String(err);
 }
@@ -8631,7 +8631,7 @@ var MirrorRowWriter = class MirrorRowWriter {
 * the owner alone — `nativeSlice` and `DeviceNativeShadowChanged`, a category
 * the public routers refuse (D224).
 */
-var SEED_REFUSAL_MESSAGE = "runtime-state row unreadable — native write refused until it reads (D49)";
+var SEED_REFUSAL_MESSAGE = "runtime-state row unreadable — native write refused until it reads";
 function errorMessage$1(err) {
 	return err instanceof Error ? err.message : String(err);
 }
@@ -9353,7 +9353,7 @@ var FieldClaimsIndex = class {
 	/** The three-way read (D651): a failed read is a REASON, never an empty index. */
 	async readBlob(settings) {
 		if (settings.readAddonStoreResult === void 0) {
-			this.notLoadedReason = "this settings view predates the three-way addon-store read (D651)";
+			this.notLoadedReason = "this settings view predates the three-way addon-store read";
 			return false;
 		}
 		let read;

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { Bt as legacyAutoLinkIds, C as FieldClaimModeSchema, Cr as EventCategory, Ct as enumerateItemArrayFields, D as LocationIconIdSchema, Dt as expandContainer, I as STREAM_PROFILE_META, Jn as DeviceFeature, Mt as formatMinutes, Q as buildStreamParamsConfigSchema, Qn as BaseAddon, Sn as siteZoneKey, Wt as locationIconKey, Xn as DeviceType, Yn as DeviceRole, Zn as errMsg, _n as runtimeStatePolicyFor, bt as deviceStateCapability, c as CAP_NAMES_WITH_STATUS, ht as defineExtensionSlotProvider, in as parseStreamParamsFormPatch, ir as WELL_KNOWN_TAB_MAP, k as MINUTES_PER_DAY, o as CAMERA_SWITCH_ORDER, pr as isDeviceConfigCap, t as ALL_CAPABILITY_DEFINITIONS, tn as normalizeUnit, ut as createDeviceExtensionProvider, v as DAY_NAMES, vt as deviceExtensionCapability, w as FieldClaimSchema, wt as enumerateSchemaFields, x as DeviceStatusSchema, xr as sleep$1, xt as deviceStatusCapability, yt as deviceManagerCapability } from "../../dist-B7WRgEZY.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DKRjfz0U.mjs";
+import { Ar as EventCategory, C as FieldClaimModeSchema, Cn as runtimeStatePolicyFor, D as LocationIconIdSchema, I as STREAM_PROFILE_META, Nt as formatMinutes, On as siteZoneKey, Or as sleep$1, Ot as expandContainer, Q as buildStreamParamsConfigSchema, St as deviceStatusCapability, Tt as enumerateSchemaFields, Ut as legacyAutoLinkIds, ar as BaseAddon, br as isDeviceConfigCap, bt as deviceManagerCapability, c as CAP_NAMES_WITH_STATUS, dr as WELL_KNOWN_TAB_MAP, dt as createDeviceExtensionProvider, gt as defineExtensionSlotProvider, in as normalizeUnit, ir as errMsg, k as MINUTES_PER_DAY, nr as DeviceRole, o as CAMERA_SWITCH_ORDER, qt as locationIconKey, rr as DeviceType, sn as parseStreamParamsFormPatch, t as ALL_CAPABILITY_DEFINITIONS, tr as DeviceFeature, v as DAY_NAMES, w as FieldClaimSchema, wt as enumerateItemArrayFields, x as DeviceStatusSchema, xt as deviceStateCapability, yt as deviceExtensionCapability } from "../../dist-pTfD_M-U.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CK_ifret.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
@@ -4043,7 +4043,7 @@ async function applyGroupPatch(deps, deviceId, group) {
 				tags: { deviceId },
 				meta: { keys: retired }
 			});
-			throw new Error(`[device-manager] ${retired.join(", ")} can no longer be saved from the settings section (D655) — reload the page and use the Extensions section`);
+			throw new Error(`[device-manager] ${retired.join(", ")} can no longer be saved from the settings section — reload the page and use the Extensions section`);
 		}
 		const driverPatch = group.patch;
 		if (Object.keys(driverPatch).length === 0) return;
@@ -4426,7 +4426,7 @@ function sourceOf(deviceId, byId) {
 		deviceId,
 		name: device.name,
 		health: "unavailable",
-		detail: "A container is never a pick (D356): its children are linked in its place. Pick the children instead."
+		detail: "A container is never a pick: its children are linked in its place. Pick the children instead."
 	};
 	return {
 		deviceId,
@@ -8218,13 +8218,13 @@ function deepEqual(a, b) {
 var RuntimeStateRowUnreadError = class extends Error {
 	deviceId;
 	constructor(deviceId) {
-		super(`runtime-state row of device ${deviceId} could not be read — nothing written, a row this process has not read is never replaced (D677)`);
+		super(`runtime-state row of device ${deviceId} could not be read — nothing written, a row this process has not read is never replaced`);
 		this.deviceId = deviceId;
 		this.name = "RuntimeStateRowUnreadError";
 	}
 };
-var ROW_UNREAD_REFUSAL_MESSAGE = "runtime-state row write refused — the row could not be read first, nothing written (D677)";
-var ROW_DROPS_CAPS_MESSAGE = "runtime-state row write DROPS caps the stored row holds (D677)";
+var ROW_UNREAD_REFUSAL_MESSAGE = "runtime-state row write refused — the row could not be read first, nothing written";
+var ROW_DROPS_CAPS_MESSAGE = "runtime-state row write DROPS caps the stored row holds";
 function errorMessage$2(err) {
 	return err instanceof Error ? err.message : String(err);
 }
@@ -8626,7 +8626,7 @@ var MirrorRowWriter = class MirrorRowWriter {
 * the owner alone — `nativeSlice` and `DeviceNativeShadowChanged`, a category
 * the public routers refuse (D224).
 */
-var SEED_REFUSAL_MESSAGE = "runtime-state row unreadable — native write refused until it reads (D49)";
+var SEED_REFUSAL_MESSAGE = "runtime-state row unreadable — native write refused until it reads";
 function errorMessage$1(err) {
 	return err instanceof Error ? err.message : String(err);
 }
@@ -9348,7 +9348,7 @@ var FieldClaimsIndex = class {
 	/** The three-way read (D651): a failed read is a REASON, never an empty index. */
 	async readBlob(settings) {
 		if (settings.readAddonStoreResult === void 0) {
-			this.notLoadedReason = "this settings view predates the three-way addon-store read (D651)";
+			this.notLoadedReason = "this settings view predates the three-way addon-store read";
 			return false;
 		}
 		let read;

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-B7WRgEZY.mjs";
+import { Jt as logDestinationCapability, ar as BaseAddon } from "../../dist-pTfD_M-U.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-W_X44h-s.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Cr as EventCategory, P as RecordingStatusSchema, Qn as BaseAddon, Zn as errMsg, cr as createEvent, j as RECORDING_SOURCE_CAMSTACK_ADDON } from "../../dist-B7WRgEZY.mjs";
+import { Ar as EventCategory, P as RecordingStatusSchema, ar as BaseAddon, hr as createEvent, ir as errMsg, j as RECORDING_SOURCE_CAMSTACK_ADDON } from "../../dist-pTfD_M-U.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/admin-account-boot.d.ts

@@ -0,0 +1,27 @@
+import { IScopedLogger } from '@camstack/types';
+import { AdminSeedOutcome, EnsureAdminOptions } from '../../auth/user-manager.js';
+/** The trigger's name, at the root of the node's data directory. */
+export declare const ADMIN_PASSWORD_RESET_TRIGGER = "RESET_ADMIN_PASSWORD";
+/** The file operations the boot step needs — injectable for tests. */
+export interface TriggerFs {
+    exists(filePath: string): boolean;
+    remove(filePath: string): void;
+}
+/** The slice of `UserManager` the boot step drives. */
+export interface AdminAccountManager {
+    ensureAdminExists(options?: EnsureAdminOptions): Promise<AdminSeedOutcome>;
+    hasPassword(username: string, password: string): Promise<boolean>;
+}
+export interface AdminAccountBootInput {
+    readonly users: AdminAccountManager;
+    /** `ctx.nodeDataDir` — where the operator drops the trigger. */
+    readonly dataDir: string;
+    readonly fs: TriggerFs;
+    readonly logger: IScopedLogger;
+}
+export interface AdminAccountBootResult {
+    readonly outcome: AdminSeedOutcome;
+    /** The admin still signs in with {@link DEFAULT_ADMIN_PASSWORD}. */
+    readonly usesDefaultPassword: boolean;
+}
+export declare function reconcileAdminAccountAtBoot(input: AdminAccountBootInput): Promise<AdminAccountBootResult>;

package/dist/builtins/local-auth/auth-schema.d.ts

@@ -1,8 +1,9 @@
 import { SettingsStoreClient } from '@camstack/types';
 /**
  * @durable class=config owner=local-auth
- *   write="an operator creates a user, or `ensureAdminExists` seeds/re-syncs the
- *     configured admin at boot; updated on scope, isAdmin and password edits"
+ *   write="an operator creates a user, or `ensureAdminExists` seeds the configured
+ *     admin on first boot (or resets its password on the operator's one-shot
+ *     RESET_ADMIN_PASSWORD trigger); updated on scope, isAdmin and password edits"
  *   retention="none — a row goes only when an operator deletes the user. A
  *     `declareCollection` that adds a PK/UNIQUE/NOT-NULL-without-default column
  *     REBUILDS the table: every account is wiped and only the configured admin