@camstack/system 1.2.359 → 1.2.361

package/dist/{dist-W_X44h-s.js → dist-Cv1lnnQq.js}

@@ -17231,6 +17231,12 @@ function pickAppLinkHub(endpoints) {
 		}];
 	}).toSorted((a, b) => a.r - b.r || a.p - b.p)[0]?.origin ?? null;
 }
+var HUB_ADDRESS_ROLES = [
+	"appConnections",
+	"notificationTaps",
+	"internal",
+	"publicEndpoint"
+];
 var IPV4_LITERAL = /^\d{1,3}(?:\.\d{1,3}){3}$/;
 function hostnameOf(baseUrl) {
 	try {
@@ -17261,7 +17267,7 @@ function isLanIpv4Literal(endpoint) {
 function autoRankFor(role, endpoint) {
 	if (endpoint.kind === "loopback" || endpoint.kind === "app-link" || endpoint.kind === "custom") return null;
 	if (hostnameOf(endpoint.baseUrl) === null) return null;
-	if (role === "agents") {
+	if (role === "internal") {
 		if (isLanIpv4Literal(endpoint)) return 0;
 		if (isPlausibleLan(endpoint)) return 1;
 		if (isMesh(endpoint)) return 2;
@@ -17331,28 +17337,28 @@ function validateCustomAddress(raw) {
 		baseUrl: parsed.origin
 	};
 }
-/** The reason a plain-http sign-in address is refused unless accepted. */
-var SIGN_IN_HTTP_REASON = "Sign-in needs an https:// address: passkeys and most identity providers refuse a plain-http origin. Accept http only for a sign-in that never leaves your own network.";
+/** The reason a plain-http public endpoint is refused unless accepted. */
+var PUBLIC_ENDPOINT_HTTP_REASON = "The public endpoint needs an https:// address: passkeys and most identity providers refuse a plain-http origin. Accept http only when sign-in and notification links never leave your own network.";
 /**
 * May `baseUrl` carry `role`? The address check above, plus two role rules:
-* the app link carries `notifications` only (it is not a hub address), and a
-* plain-http address carries `signIn` only when the operator explicitly
-* accepted it (`acceptInsecureHttp`) — a LAN-only password or magic-link
-* sign-in works over http, a passkey or an OIDC callback does not.
+* the app link carries `notificationTaps` only (it is not a hub address), and
+* a plain-http address carries `publicEndpoint` only when the operator
+* explicitly accepted it (`acceptInsecureHttp`) — a LAN-only password or
+* magic-link sign-in works over http, a passkey or an OIDC callback does not.
 */
 function checkRoleAddress(role, baseUrl, options = {}) {
-	if (isAppLinkBase(baseUrl)) return role === "notifications" ? {
+	if (isAppLinkBase(baseUrl)) return role === "notificationTaps" ? {
 		ok: true,
 		baseUrl: CAMSTACK_APP_LINK_ORIGIN
 	} : {
 		ok: false,
-		reason: "The CamStack app link is not a hub address — only notifications can use it."
+		reason: "The CamStack app link is not a hub address — only notification taps can use it."
 	};
 	const check = validateCustomAddress(baseUrl);
 	if (!check.ok) return check;
-	if (role === "signIn" && check.baseUrl.startsWith("http:") && options.acceptInsecureHttp !== true) return {
+	if (role === "publicEndpoint" && check.baseUrl.startsWith("http:") && options.acceptInsecureHttp !== true) return {
 		ok: false,
-		reason: SIGN_IN_HTTP_REASON
+		reason: PUBLIC_ENDPOINT_HTTP_REASON
 	};
 	return check;
 }
@@ -17387,17 +17393,21 @@ function resolveHubRole(endpoints, role, flag) {
 		source: auto === null ? "none" : "auto"
 	};
 }
-/** `agents`: what agents and LAN devices pull from. */
-function resolveAgentsAddress(endpoints, flags) {
-	return resolveHubRole(endpoints, "agents", flags.agents);
+/** `internal`: what agents and LAN devices download from. */
+function resolveInternalAddress(endpoints, flags) {
+	return resolveHubRole(endpoints, "internal", flags.internal);
 }
-/** `signIn`: sign-in links, OIDC callbacks, the relying party, OAuth2. */
-function resolveSignInAddress(endpoints, flags) {
-	return resolveHubRole(endpoints, "signIn", flags.signIn);
+/**
+* `publicEndpoint`: every URL that must work off the LAN — sign-in links, OIDC
+* / OAuth2 callbacks, the relying party, and notification buttons,
+* attachments, media and admin links.
+*/
+function resolvePublicEndpoint(endpoints, flags) {
+	return resolveHubRole(endpoints, "publicEndpoint", flags.publicEndpoint);
 }
-/** `notifications`: the flagged address, else the CamStack app link (D709). */
-function resolveNotificationsAddress(flags) {
-	const flagged = validFlag("notifications", flags.notifications);
+/** `notificationTaps`: the flagged address, else the CamStack app link (D709). */
+function resolveNotificationTapAddress(flags) {
+	const flagged = validFlag("notificationTaps", flags.notificationTaps);
 	if (flagged !== null && !isAppLinkBase(flagged)) return {
 		flagged,
 		resolved: flagged,
@@ -17409,46 +17419,47 @@ function resolveNotificationsAddress(flags) {
 		source: "auto"
 	};
 }
-/** AUTO viewer race: LAN IPv4 + the public tunnel. Never IPv6, mesh, loopback or custom. */
-function isDefaultViewerEndpoint(endpoint) {
+/** AUTO app connections: LAN IPv4 + the public tunnel. Never IPv6, mesh, loopback or custom. */
+function isDefaultAppConnectionEndpoint(endpoint) {
 	if (endpoint.kind === "lan-ipv4") return true;
 	return endpoint.kind === "public" && endpoint.interfaceKind === "public";
 }
 /**
 * The endpoints the apps race: the flagged ones that are in `endpoints`
-* (which carries the custom addresses flagged `viewer`), else AUTO. A flagged
+* (which carries the custom addresses flagged `appConnections`), else AUTO. A flagged
 * set none of which is currently up falls back to AUTO rather than racing
 * nothing.
 */
-function selectViewerEndpoints(endpoints, flags) {
-	const auto = endpoints.filter(isDefaultViewerEndpoint);
-	if (flags.viewer.length === 0) return auto;
-	const wanted = new Set(flags.viewer);
+function selectAppConnectionEndpoints(endpoints, flags) {
+	const auto = endpoints.filter(isDefaultAppConnectionEndpoint);
+	if (flags.appConnections.length === 0) return auto;
+	const wanted = new Set(flags.appConnections);
 	const explicit = endpoints.filter((e) => wanted.has(e.baseUrl));
 	return explicit.length > 0 ? explicit : auto;
 }
-/** `viewer`: what the apps race and connect to. */
-function resolveViewerAddresses(endpoints, flags) {
-	const wanted = new Set(flags.viewer);
-	const selected = selectViewerEndpoints(endpoints, flags);
+/** `appConnections`: what the apps try when connecting. */
+function resolveAppConnections(endpoints, flags) {
+	const wanted = new Set(flags.appConnections);
+	const selected = selectAppConnectionEndpoints(endpoints, flags);
 	const usedFlags = selected.some((e) => wanted.has(e.baseUrl));
 	return {
-		flagged: flags.viewer,
+		flagged: flags.appConnections,
 		resolved: selected.map((e) => e.baseUrl),
 		source: selected.length === 0 ? "none" : usedFlags ? "flagged" : "auto"
 	};
 }
 /**
-* Every role at once, each through its own resolver. `viewerPalette` is what
-* the apps race (it carries the custom addresses flagged `viewer`);
-* `hubPalette` is the detected HTTPS palette agents and sign-in resolve over.
+* Every role at once, each through its own resolver. `appPalette` is what
+* the apps race (it carries the custom addresses flagged `appConnections`);
+* `hubPalette` is the detected HTTPS palette `internal` and `publicEndpoint`
+* resolve over.
 */
-function resolveHubAddressRoles(viewerPalette, hubPalette, flags) {
+function resolveHubAddressRoles(appPalette, hubPalette, flags) {
 	return {
-		viewer: resolveViewerAddresses(viewerPalette, flags),
-		notifications: resolveNotificationsAddress(flags),
-		agents: resolveAgentsAddress(hubPalette, flags),
-		signIn: resolveSignInAddress(hubPalette, flags)
+		appConnections: resolveAppConnections(appPalette, flags),
+		notificationTaps: resolveNotificationTapAddress(flags),
+		internal: resolveInternalAddress(hubPalette, flags),
+		publicEndpoint: resolvePublicEndpoint(hubPalette, flags)
 	};
 }
 /**
@@ -22008,7 +22019,13 @@ var NcAlarmModeDelaysSchema = zod.z.object({
 	* Absent = false (logged, not sent). Even when true it is not sent when that same sensor
 	* is the one that starts the entry delay — the entry-delay notification already names it.
 	*/
-	notifySensorRewatched: zod.z.boolean().optional()
+	notifySensorRewatched: zod.z.boolean().optional(),
+	/**
+	* D735: notify "ignored" when a sensor this arm bypassed really MOVED while armed (its own
+	* change time is after the arm) and set nothing off. Absent = false (logged, not sent). A
+	* re-sync, a recovery from `unavailable` or a duplicate is never announced, switch or not.
+	*/
+	notifySensorIgnored: zod.z.boolean().optional()
 });
 var NcAlarmModeDelaysListSchema = zod.z.array(NcAlarmModeDelaysSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 /**
@@ -22027,7 +22044,9 @@ var NcAlarmModeDelaysEditSchema = zod.z.object({
 	/** D706: set the switch, or `null` to clear it (back to the default, false). */
 	notifyDuringEntryDelay: zod.z.boolean().nullable().optional(),
 	/** D706: set the switch, or `null` to clear it (back to the default, false). */
-	notifySensorRewatched: zod.z.boolean().nullable().optional()
+	notifySensorRewatched: zod.z.boolean().nullable().optional(),
+	/** D735: set the switch, or `null` to clear it (back to the default, false). */
+	notifySensorIgnored: zod.z.boolean().nullable().optional()
 });
 var NcAlarmModeDelaysEditListSchema = zod.z.array(NcAlarmModeDelaysEditSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
@@ -36720,7 +36739,7 @@ var GetConnectionEndpointsResultSchema = zod.z.object({
 	localPort: AdvertisedLocalPortSchema
 });
 /**
-* The address flagged for notification links. `baseUrl: null` = AUTO, which
+* The address flagged for notification taps (`notificationTaps`). `baseUrl: null` = AUTO, which
 * since D709 is the CamStack app link; `resolved` reports the effective value,
 * so the UI can show it either way.
 */
@@ -36755,8 +36774,8 @@ var ViewerEndpointsSchema = zod.z.object({
 });
 /**
 * DEPRECATED compatibility shape of `getHubAddresses` (D729 amendment, kept
-* one release for addons built against it): `cluster` is the `agents` role,
-* `browser` the `signIn` role; `override` is the flagged address.
+* for addons built against it): `cluster` is the `internal` role, `browser`
+* the `publicEndpoint` role; `override` is the flagged address.
 */
 var HubAddressSnapshotSchema = zod.z.object({
 	override: zod.z.string().nullable(),
@@ -36772,15 +36791,11 @@ var HubAddressesSchema = zod.z.object({
 	browser: HubAddressSnapshotSchema
 });
 /**
-* What an address is used for (`hub-address.ts`). `viewer` is many-valued;
-* `notifications`, `agents` and `signIn` are carried by at most one address.
+* What an address is used for (`hub-address.ts`, D734). `appConnections` is
+* many-valued; `notificationTaps`, `publicEndpoint` and `internal` are carried
+* by at most one address.
 */
-var HubAddressRoleSchema = zod.z.enum([
-	"viewer",
-	"notifications",
-	"agents",
-	"signIn"
-]);
+var HubAddressRoleSchema = zod.z.enum(HUB_ADDRESS_ROLES);
 var RoleSourceSchema = zod.z.enum([
 	"flagged",
 	"auto",
@@ -36794,8 +36809,8 @@ var HubAddressRoleResolutionSchema = zod.z.object({
 	resolved: zod.z.string().nullable(),
 	source: RoleSourceSchema
 });
-var HubViewerResolutionSchema = zod.z.object({
-	/** The addresses flagged `viewer`, or empty = automatic. */
+var HubAppConnectionsResolutionSchema = zod.z.object({
+	/** The addresses flagged `appConnections`, or empty = automatic. */
 	flagged: zod.z.array(zod.z.string()).readonly(),
 	/** What the apps race right now. */
 	resolved: zod.z.array(zod.z.string()).readonly(),
@@ -36821,10 +36836,10 @@ var HubAddressRowSchema = ConnectionEndpointSchema.extend({
 var HubAddressBookSchema = zod.z.object({
 	rows: zod.z.array(HubAddressRowSchema).readonly(),
 	roles: zod.z.object({
-		viewer: HubViewerResolutionSchema,
-		notifications: HubAddressRoleResolutionSchema,
-		agents: HubAddressRoleResolutionSchema,
-		signIn: HubAddressRoleResolutionSchema
+		appConnections: HubAppConnectionsResolutionSchema,
+		notificationTaps: HubAddressRoleResolutionSchema,
+		internal: HubAddressRoleResolutionSchema,
+		publicEndpoint: HubAddressRoleResolutionSchema
 	}),
 	/** The `hub=` an app link carries (D709), or null. */
 	appLinkHub: zod.z.string().nullable()
@@ -36919,19 +36934,18 @@ var localNetworkCapability = {
 			*  tunnel always emits `https://` regardless. */
 			scheme: zod.z.enum(["http", "https"]).optional(),
 			/** Append the CamStack app link entry (`kind: 'app-link'`, D709) —
-			*  an address notification links can be flagged with, not a hub
+			*  an address notification taps can be flagged with, not a hub
 			*  route. Default `false`: racers and rankers never see it. */
 			includeAppLink: zod.z.boolean().optional()
 		}), GetConnectionEndpointsResultSchema),
 		/**
-		* The address notification links are flagged with. `baseUrl: null` means
-		* AUTO, which is the CamStack app link (D709): viewer taps go through
-		* `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the app. Any
-		* hub address the palette lists can be flagged instead; then viewer taps,
-		* attachment links and action buttons all use it. Signed media and
-		* buttons never use the app link — with it flagged (or AUTO) they keep
-		* the ranked hub ladder (a configured origin, a connected tunnel, then
-		* the LAN), never loopback.
+		* The `notificationTaps` role (D734): where TAPPING a notification opens.
+		* `baseUrl: null` means AUTO, which is the CamStack app link (D709): taps
+		* go through `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the
+		* app. Any hub address the palette lists can be flagged instead; then a
+		* tap opens that address. Only the tap: action buttons, attachment /
+		* media links and admin links follow the `publicEndpoint` role
+		* (`getAddresses().roles.publicEndpoint`), never this one.
 		*
 		* Why an explicit marker: the automatic ranking cannot know which of
 		* several reachable addresses the RECIPIENT can actually open. A link is
@@ -36941,14 +36955,13 @@ var localNetworkCapability = {
 		*/
 		getNotificationEndpoint: method(zod.z.void(), NotificationEndpointSchema),
 		/**
-		* @deprecated Use `setAddressRole({ role: 'notifications', … })`. Kept so
-		* an older admin UI keeps working: it writes the same `notifications`
-		* flag, with the same validation. `baseUrl: null` restores automatic; an
+		* @deprecated Use `setAddressRole({ role: 'notificationTaps', … })`. It
+		* writes the same `notificationTaps` flag, with the same validation. `baseUrl: null` restores automatic; an
 		* address that is not detected becomes a custom address.
 		*/
 		setNotificationEndpoint: method(zod.z.object({ baseUrl: zod.z.string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }),
 		/**
-		* The `viewer` role as shipped apps read it: the flagged addresses
+		* The `appConnections` role as shipped apps read it: the flagged addresses
 		* (detected or custom), or empty for AUTO — every LAN IPv4 address plus
 		* the public tunnel, never IPv6, mesh, loopback or a custom address.
 		* `resolved` is the set as it stands right now; the custom ones in it are
@@ -36956,8 +36969,8 @@ var localNetworkCapability = {
 		*/
 		getViewerEndpoints: method(zod.z.void(), ViewerEndpointsSchema),
 		/**
-		* @deprecated Use `setAddressRole({ role: 'viewer', … })`. Kept so an
-		* older admin UI keeps working: it replaces the same `viewer` flags.
+		* @deprecated Use `setAddressRole({ role: 'appConnections', … })`. It
+		* replaces the same `appConnections` flags.
 		* Empty `baseUrls` restores automatic.
 		*/
 		setViewerEndpoints: method(zod.z.object({ baseUrls: zod.z.array(zod.z.string()).readonly() }), ViewerEndpointsSchema, { kind: "mutation" }),
@@ -36966,10 +36979,12 @@ var localNetworkCapability = {
 		* reading of "which address is this hub reached at, for what": detected
 		* endpoints and custom addresses with their role flags, and per role the
 		* flagged address, the one in use and whether it is automatic. Agent
-		* deliveries, sign-in and LAN devices read `roles.agents` / `roles.signIn`
-		* here; nothing ranks the palette itself. `scheme` is the one the caller
-		* shows LAN rows in (as `getConnectionEndpoints`); agents and sign-in are
-		* always resolved over the HTTPS palette.
+		* deliveries and LAN devices read `roles.internal`; sign-in, OAuth2 and
+		* the notification centre's buttons / media / admin links read
+		* `roles.publicEndpoint`; nothing ranks the palette itself. `scheme` is
+		* the one the caller shows LAN rows in (as `getConnectionEndpoints`);
+		* `internal` and `publicEndpoint` are always resolved over the HTTPS
+		* palette.
 		*/
 		getAddresses: method(zod.z.object({ scheme: zod.z.enum(["http", "https"]).optional() }).optional(), HubAddressBookSchema),
 		/**
@@ -36994,8 +37009,9 @@ var localNetworkCapability = {
 		* Flag (`enabled: true`) or unflag an address for a role. For a
 		* single-valued role, flagging moves the flag off every other address.
 		* `baseUrl: null` returns the role to automatic. The address must be a row
-		* of the table (detected, custom, or the app link for notifications);
-		* `signIn` on a plain-http address is refused unless `acceptInsecureHttp`.
+		* of the table (detected, custom, or the app link for `notificationTaps`);
+		* `publicEndpoint` on a plain-http address is refused unless
+		* `acceptInsecureHttp`, and never takes the app link.
 		*/
 		setAddressRole: method(zod.z.object({
 			role: HubAddressRoleSchema,
@@ -37007,9 +37023,9 @@ var localNetworkCapability = {
 			auth: "admin"
 		}),
 		/**
-		* @deprecated Read `getAddresses().roles.agents` / `.signIn`. Kept one
-		* release so an addon built against the D729 amendment keeps resolving:
-		* `cluster` = the `agents` role, `browser` = the `signIn` role.
+		* @deprecated Read `getAddresses().roles.internal` / `.publicEndpoint`.
+		* Kept so an addon built against the D729 amendment keeps resolving:
+		* `cluster` = the `internal` role, `browser` = the `publicEndpoint` role.
 		*/
 		getHubAddresses: method(zod.z.void(), HubAddressesSchema),
 		/**
@@ -60980,10 +60996,10 @@ Object.defineProperty(exports, "isCollectionArrayMethod", {
 		return isCollectionArrayMethod;
 	}
 });
-Object.defineProperty(exports, "isDefaultViewerEndpoint", {
+Object.defineProperty(exports, "isDefaultAppConnectionEndpoint", {
 	enumerable: true,
 	get: function() {
-		return isDefaultViewerEndpoint;
+		return isDefaultAppConnectionEndpoint;
 	}
 });
 Object.defineProperty(exports, "isDeviceConfigCap", {
@@ -61202,6 +61218,12 @@ Object.defineProperty(exports, "replacedFieldKeys", {
 		return replacedFieldKeys;
 	}
 });
+Object.defineProperty(exports, "resolveAppConnections", {
+	enumerable: true,
+	get: function() {
+		return resolveAppConnections;
+	}
+});
 Object.defineProperty(exports, "resolveBucketMs", {
 	enumerable: true,
 	get: function() {
@@ -61244,16 +61266,10 @@ Object.defineProperty(exports, "resolveMethodAuth", {
 		return resolveMethodAuth;
 	}
 });
-Object.defineProperty(exports, "resolveNotificationsAddress", {
-	enumerable: true,
-	get: function() {
-		return resolveNotificationsAddress;
-	}
-});
-Object.defineProperty(exports, "resolveViewerAddresses", {
+Object.defineProperty(exports, "resolveNotificationTapAddress", {
 	enumerable: true,
 	get: function() {
-		return resolveViewerAddresses;
+		return resolveNotificationTapAddress;
 	}
 });
 Object.defineProperty(exports, "runtimeStatePolicyFor", {

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-W_X44h-s.js");
+const require_dist = require("./dist-Cv1lnnQq.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -31,7 +31,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-ey4mbofz.js");
 const require_tls$1 = require("./tls-CCMX7MjX.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-t61ohDpb.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-T3Kdhbb3.js");
 const require_resource_monitor = require("./resource-monitor-BgWGRxN5.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let zod = require("zod");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { Ar as EventCategory$1, At as extractNestedAddonId, Bt as isObjectInput, Cr as parseJsonObject, Dr as scopeKey, Er as resolveCapMount, Gt as lifecycleJobSchema, Ht as kebabToCamel, It as isArrayOutputSchema, Lt as isCollectionArrayMethod, N as RUNTIME_DEFAULTS, O as METHOD_ACCESS_MAP, T as LOG_LEVEL_RANK, Tn as scopesAllowDeviceCap, Tr as readinessKey, Vt as isVoidInput, W as addonSettingsCapability, Xt as looseSchema, Yt as logLevelAtMost, an as objectInputDeclaresAddonId, bn as resolveMethodAuth, cr as DEVICE_STATUS_METHOD, dn as procedureAuthKey, fr as asJsonObject$1, gr as emitDownForOwnedCaps, hr as createEvent, ir as errMsg$1, lr as ReadinessRegistry, mr as asString$1, on as objectInputDeclaresRequiredDeviceId, or as DATAPLANE_SECRET_HEADER$1, pr as asNumber, sr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, t as ALL_CAPABILITY_DEFINITIONS, ur as ReadinessTimeoutError, vr as expandCapMethods, wn as scopesAllowAddon, wr as parseJsonUnknown } from "./dist-pTfD_M-U.mjs";
+import { Ar as EventCategory$1, At as extractNestedAddonId, Bt as isObjectInput, Cr as parseJsonObject, Dr as scopeKey, Er as resolveCapMount, Gt as lifecycleJobSchema, Ht as kebabToCamel, It as isArrayOutputSchema, Lt as isCollectionArrayMethod, N as RUNTIME_DEFAULTS, O as METHOD_ACCESS_MAP, T as LOG_LEVEL_RANK, Tn as scopesAllowDeviceCap, Tr as readinessKey, Vt as isVoidInput, W as addonSettingsCapability, Xt as looseSchema, Yt as logLevelAtMost, an as objectInputDeclaresAddonId, cr as DEVICE_STATUS_METHOD, dn as procedureAuthKey, fr as asJsonObject$1, gr as emitDownForOwnedCaps, hr as createEvent, ir as errMsg$1, lr as ReadinessRegistry, mr as asString$1, on as objectInputDeclaresRequiredDeviceId, or as DATAPLANE_SECRET_HEADER$1, pr as asNumber, sr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, t as ALL_CAPABILITY_DEFINITIONS, ur as ReadinessTimeoutError, vr as expandCapMethods, wn as scopesAllowAddon, wr as parseJsonUnknown, xn as resolveMethodAuth } from "./dist-C9Rk6KVv.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
@@ -30,7 +30,7 @@ import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { _ as ensureModel, a as createFileDataPlaneHandler, c as parseRangeHeader, d as ModelDownloadService, g as downloadModel, h as downloadFile, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as deleteModelFromDisk, n as STALL_TICK_MS, o as contentTypeFor, p as collectModelFiles, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as fetchJson, x as isModelDownloaded, y as getModelFilePath } from "./event-loop-stall-monitor-EXjzIxDz.mjs";
 import { A as allFamiliesListenHost, C as collectCertIdentity, D as SERVER_AUTH_OID, E as MAX_LEAF_VALIDITY_DAYS, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as evaluateExistingCert, P as readLanHttpState, S as CA_COMMON_NAME, T as LEAF_RENEWAL_WINDOW_DAYS, _ as writeExtraSans, a as validateUploadedTls, b as loadTlsCert, c as registerHttpsListener, d as prepareBootTls, f as UPLOADED_CA_FILE, g as splitPemCertificates, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as reloadHttpsListener, m as readTlsAccessStatus, n as regenerateCertificate, o as clearHttpsListener, p as readExtraSans, r as revertToGeneratedCertificate, s as leafFingerprintOf, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, v as writeTlsMode, w as CA_VALIDITY_DAYS, x as reissueTlsLeaf, y as ensureTlsCert } from "./tls-CJHogwTl.mjs";
-import { $ as CapRouteError, $n as EMPTY_CAP_ACTION_READING, $t as RUNNER_RSS_BUDGET_ENV, A as resolveHwAccel, An as OUTBOUND_QUEUE_SUSTAIN_MS, At as DeviceRegistry, B as udsChildLogToWorkerEntry, Bn as createSocketPlaneMeter, Bt as hostNodeIdOf, C as getBrokerEventBus, Cn as HEAP_SPACE_REPORT_MIN_MB, Ct as capActionName, D as subscribePassthrough, Dn as readHeapSpaces, Dt as parseCapAction, E as setNodeEventInterest, En as heapSpaceField, Et as capServiceName, F as ipcParentLink, Fn as createMeshQueueReader, Ft as resolveAddonClass, G as UDS_NO_ROUTE_PREFIX, Gn as EMPTY_SOCKET_DIRECTION, Gt as HEAP_WATCH_INTERVAL_MS, H as createUdsLoggerWithControl, Hn as diffSocketPlane, Ht as HEAP_RECLAIM_MIN_INTERVAL_MS, I as localProviderLink, In as formatMeshQueue, It as buildNpmChildEnv, J as answerClaimedGetStatus, Jn as sampleSocketDirection, Jt as HUB_MAIN_RSS_BUDGET_MB, K as afterWorkerOnlineAnnounce, Kn as createSocketDirectionCounters, Kt as HEAP_WATCH_WARN_RATIO, L as createParentUnownedCallHandler, Ln as EMPTY_SOCKET_PLANE_BASELINE, Lt as resolveNpmInvocation, M as brokerTransportLink, Mn as createOutboundQueueGate, Mt as CapabilityUnavailableError, N as buildLinkChain, Nn as formatOutboundQueueVerdict, Nt as copyBundledNativeModules, O as AddonDepsManager, On as selectReportedSpaces, Ot as deserializeTypedArrays, P as deviceCapResolverLink, Pn as MESH_QUEUE_TOP_N, Pt as installManifestNativeDeps, Q as CapRouteResolver, Qn as CAP_ACTION_UNLABELLED, Qt as RUNNER_HEAP_WATCH_INTERVAL_MS, R as createUdsEventBridge, Rn as SOCKET_PLANE_TOP_N, Rt as runNpm, S as clusterEventTopic, Sn as DECISIVE_HEAP_SPACES, St as NATIVE_PROVIDER_SERVICE_INFIX, T as registerEventBusService, Tn as formatHeapSpaces, Tt as capBareAction, U as LocalChildClient, Un as formatSocketPlane, Ut as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, V as createUdsLogger, Vn as createSocketPlaneReader, Vt as createAddonDataPlaneFacility, W as LocalChildRegistry, Wn as readSocketQueues, Wt as HEAP_RECLAIM_TRIGGER_MB, X as AGENT_CAP_FWD_ACTION, Xn as socketDirectionMessages, Xt as RSS_BUDGET_REANNOUNCE_MIN_MS, Y as deviceOfGetStatus, Yn as socketDirectionBytes, Yt as HUB_RSS_BUDGET_ENV, Z as AGENT_CAP_FWD_SERVICE, Zn as CAP_ACTION_OVERFLOW_LABEL, Zt as RSS_BUDGET_RELEASE_RATIO, _ as getWorkerDeviceRegistry, _n as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, a as reapProcessGroup, an as describeRss, ar as createEventPlaneMeter, at as getCapUsageRegistry, b as setHubConnected, bn as formatArrayBufferCensus, bt as createAddonService, c as runnerOwnsProcessGroup, cn as parseRssBudgetMb, cr as formatEventPlane, ct as UdsLocalTransportServer, d as summarizeMembers, dn as startHeapWatch, dt as localEndpointPath, en as ZERO_LOOP_DELAY, er as MAX_CAP_ACTIONS_PER_PEER, et as classifyCapRoute, f as installManifestSystemDeps, fn as startRunnerHeapWatch, ft as FrameDecoder, g as createUdsAddonContext, gn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, h as createAddonContext, hn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ht as createBrokerDeviceManagerApi, in as createV8Reclaimer, ir as EVENT_PLANE_TOP_N, it as __resetCapUsageRegistryForTests, j as brokerCallForCap, jn as OUTBOUND_QUEUE_THRESHOLD_BYTES, jt as CapabilityHandle, k as createKernelHwAccel, kn as OUTBOUND_QUEUE_COOLDOWN_MS, kt as serializeTypedArrays, l as signalAllRunnerGroups, ln as reclaimIntervalMs, lt as SocketChannel, m as adaptBrokerToCluster, mn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, mt as buildNativeCapProxy, nn as createDeferredHeapWatchSink, nr as createCapActionCensus, nt as CapUsageRegistry, o as registerRunnerGroup, on as hubMainRssBudget, or as createEventPlaneReader, ot as createLocalTransport, p as installManifestPythonDeps, pn as strandedMb, pt as encodeFrame, q as GET_STATUS_METHOD, qn as recordSocketFrame, qt as HUB_MAIN_HEAP_WATCH_LABEL, r as defaultProcessGroupOps, rn as createLoopDelayMeter, rr as diffCapActionCensus, rt as PARENT_ROUTED_PROVIDER_ADDON_ID, s as releaseRunnerGroup, sn as nextRssBudgetState, sr as diffEventPlane, st as UdsLocalTransportClient, t as CAP_METHOD_NOT_IMPLEMENTED, tn as buildHeapSample, tr as capActionLabel, tt as callWithServiceDiscovery, un as shouldReclaim, ut as PeerAnsweredError, v as getOrInitReadinessRegistry, vn as createArrayBufferCensusGate, vt as mountNativeCapService, w as getMoleculerEventStats, wn as emitHeapDiagnosticReport, wt as capActionSuffix, x as EVENT_TOPIC_PREFIX, xn as isArrayBufferCensusReport, xt as validateProviderRegistrations, y as getOrInitReadinessRegistryForClient, yn as createInspectorArrayBufferCensus, z as createUdsEventBus, zn as SOCKET_QUEUE_TOP_N, zt as createAddonPeerBytesFacility } from "./child-cap-dispatch-Dm1TRDCr.mjs";
+import { $ as CapRouteError, $n as EMPTY_CAP_ACTION_READING, $t as RUNNER_RSS_BUDGET_ENV, A as resolveHwAccel, An as OUTBOUND_QUEUE_SUSTAIN_MS, At as DeviceRegistry, B as udsChildLogToWorkerEntry, Bn as createSocketPlaneMeter, Bt as hostNodeIdOf, C as getBrokerEventBus, Cn as HEAP_SPACE_REPORT_MIN_MB, Ct as capActionName, D as subscribePassthrough, Dn as readHeapSpaces, Dt as parseCapAction, E as setNodeEventInterest, En as heapSpaceField, Et as capServiceName, F as ipcParentLink, Fn as createMeshQueueReader, Ft as resolveAddonClass, G as UDS_NO_ROUTE_PREFIX, Gn as EMPTY_SOCKET_DIRECTION, Gt as HEAP_WATCH_INTERVAL_MS, H as createUdsLoggerWithControl, Hn as diffSocketPlane, Ht as HEAP_RECLAIM_MIN_INTERVAL_MS, I as localProviderLink, In as formatMeshQueue, It as buildNpmChildEnv, J as answerClaimedGetStatus, Jn as sampleSocketDirection, Jt as HUB_MAIN_RSS_BUDGET_MB, K as afterWorkerOnlineAnnounce, Kn as createSocketDirectionCounters, Kt as HEAP_WATCH_WARN_RATIO, L as createParentUnownedCallHandler, Ln as EMPTY_SOCKET_PLANE_BASELINE, Lt as resolveNpmInvocation, M as brokerTransportLink, Mn as createOutboundQueueGate, Mt as CapabilityUnavailableError, N as buildLinkChain, Nn as formatOutboundQueueVerdict, Nt as copyBundledNativeModules, O as AddonDepsManager, On as selectReportedSpaces, Ot as deserializeTypedArrays, P as deviceCapResolverLink, Pn as MESH_QUEUE_TOP_N, Pt as installManifestNativeDeps, Q as CapRouteResolver, Qn as CAP_ACTION_UNLABELLED, Qt as RUNNER_HEAP_WATCH_INTERVAL_MS, R as createUdsEventBridge, Rn as SOCKET_PLANE_TOP_N, Rt as runNpm, S as clusterEventTopic, Sn as DECISIVE_HEAP_SPACES, St as NATIVE_PROVIDER_SERVICE_INFIX, T as registerEventBusService, Tn as formatHeapSpaces, Tt as capBareAction, U as LocalChildClient, Un as formatSocketPlane, Ut as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, V as createUdsLogger, Vn as createSocketPlaneReader, Vt as createAddonDataPlaneFacility, W as LocalChildRegistry, Wn as readSocketQueues, Wt as HEAP_RECLAIM_TRIGGER_MB, X as AGENT_CAP_FWD_ACTION, Xn as socketDirectionMessages, Xt as RSS_BUDGET_REANNOUNCE_MIN_MS, Y as deviceOfGetStatus, Yn as socketDirectionBytes, Yt as HUB_RSS_BUDGET_ENV, Z as AGENT_CAP_FWD_SERVICE, Zn as CAP_ACTION_OVERFLOW_LABEL, Zt as RSS_BUDGET_RELEASE_RATIO, _ as getWorkerDeviceRegistry, _n as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, a as reapProcessGroup, an as describeRss, ar as createEventPlaneMeter, at as getCapUsageRegistry, b as setHubConnected, bn as formatArrayBufferCensus, bt as createAddonService, c as runnerOwnsProcessGroup, cn as parseRssBudgetMb, cr as formatEventPlane, ct as UdsLocalTransportServer, d as summarizeMembers, dn as startHeapWatch, dt as localEndpointPath, en as ZERO_LOOP_DELAY, er as MAX_CAP_ACTIONS_PER_PEER, et as classifyCapRoute, f as installManifestSystemDeps, fn as startRunnerHeapWatch, ft as FrameDecoder, g as createUdsAddonContext, gn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, h as createAddonContext, hn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, ht as createBrokerDeviceManagerApi, in as createV8Reclaimer, ir as EVENT_PLANE_TOP_N, it as __resetCapUsageRegistryForTests, j as brokerCallForCap, jn as OUTBOUND_QUEUE_THRESHOLD_BYTES, jt as CapabilityHandle, k as createKernelHwAccel, kn as OUTBOUND_QUEUE_COOLDOWN_MS, kt as serializeTypedArrays, l as signalAllRunnerGroups, ln as reclaimIntervalMs, lt as SocketChannel, m as adaptBrokerToCluster, mn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, mt as buildNativeCapProxy, nn as createDeferredHeapWatchSink, nr as createCapActionCensus, nt as CapUsageRegistry, o as registerRunnerGroup, on as hubMainRssBudget, or as createEventPlaneReader, ot as createLocalTransport, p as installManifestPythonDeps, pn as strandedMb, pt as encodeFrame, q as GET_STATUS_METHOD, qn as recordSocketFrame, qt as HUB_MAIN_HEAP_WATCH_LABEL, r as defaultProcessGroupOps, rn as createLoopDelayMeter, rr as diffCapActionCensus, rt as PARENT_ROUTED_PROVIDER_ADDON_ID, s as releaseRunnerGroup, sn as nextRssBudgetState, sr as diffEventPlane, st as UdsLocalTransportClient, t as CAP_METHOD_NOT_IMPLEMENTED, tn as buildHeapSample, tr as capActionLabel, tt as callWithServiceDiscovery, un as shouldReclaim, ut as PeerAnsweredError, v as getOrInitReadinessRegistry, vn as createArrayBufferCensusGate, vt as mountNativeCapService, w as getMoleculerEventStats, wn as emitHeapDiagnosticReport, wt as capActionSuffix, x as EVENT_TOPIC_PREFIX, xn as isArrayBufferCensusReport, xt as validateProviderRegistrations, y as getOrInitReadinessRegistryForClient, yn as createInspectorArrayBufferCensus, z as createUdsEventBus, zn as SOCKET_QUEUE_TOP_N, zt as createAddonPeerBytesFacility } from "./child-cap-dispatch-StBHObCA.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-B2WZ8_q9.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { z } from "zod";

package/dist/{retired-settings-keys-jglEzgWR.js → retired-settings-keys-BGNqRNhu.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-W_X44h-s.js");
+const require_dist = require("./dist-Cv1lnnQq.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-CK_ifret.mjs → retired-settings-keys-BjG8bQVI.mjs}

@@ -1,4 +1,4 @@
-import { fr as asJsonObject } from "./dist-pTfD_M-U.mjs";
+import { fr as asJsonObject } from "./dist-C9Rk6KVv.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.359",
+  "version": "1.2.361",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",