@camstack/system 1.2.377 → 1.2.378

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_a9mUiM.js");
+const require_dist = require("../../dist-KxsOMQik.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-COCmYaup.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ar as isSecretMarker, B as StorageLocationModeSchema, Bt as isLocationEnabled, D as LegacyStorageLocationDefaultSchema, Dt as evictionPolicyOfLocation, Fn as storageMigrationCapability, Gr as EventCategory, H as StorageMigrationJobSchema, Kn as withLocationMode, Nr as parseJsonObject, Pn as storageCapability, Pt as gbToBytes, Rr as resolveSecretMarkers, V as StorageLocationTypeSchema, Vr as secretTreeFromPaths, Wr as transformSecretWrite, an as modeMayWrite, br as collectSecretConfigKeys, jn as settingsStoreCapability, lr as BaseAddon, nn as mayWriteToLocation, pr as REDACTED_SECRET, qt as legacyModeOf, tn as mayReadLocation, wn as resolveLocationMode, z as StorageCleanupJobSchema } from "../../dist-BWNoS-1S.mjs";
+import { Ar as isSecretMarker, B as StorageLocationModeSchema, Bt as isLocationEnabled, D as LegacyStorageLocationDefaultSchema, Dt as evictionPolicyOfLocation, Fn as storageMigrationCapability, Gr as EventCategory, H as StorageMigrationJobSchema, Kn as withLocationMode, Nr as parseJsonObject, Pn as storageCapability, Pt as gbToBytes, Rr as resolveSecretMarkers, V as StorageLocationTypeSchema, Vr as secretTreeFromPaths, Wr as transformSecretWrite, an as modeMayWrite, br as collectSecretConfigKeys, jn as settingsStoreCapability, lr as BaseAddon, nn as mayWriteToLocation, pr as REDACTED_SECRET, qt as legacyModeOf, tn as mayReadLocation, wn as resolveLocationMode, z as StorageCleanupJobSchema } from "../../dist-Bvl5JgNt.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-CH6_VWVO.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_a9mUiM.js");
+const require_dist = require("../../dist-KxsOMQik.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Dr as hydrateSchema, cr as errMsg, lr as BaseAddon } from "../../dist-BWNoS-1S.mjs";
+import { Dr as hydrateSchema, cr as errMsg, lr as BaseAddon } from "../../dist-Bvl5JgNt.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D_a9mUiM.js");
+const require_dist = require("../../dist-KxsOMQik.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-BWNoS-1S.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-Bvl5JgNt.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{child-cap-dispatch-DlDSoqm1.js → child-cap-dispatch-C9lmrWFT.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-D_a9mUiM.js");
+const require_dist = require("./dist-KxsOMQik.js");
 const require_proc_stat = require("./proc-stat-DL-WUOhl.js");
 require("./hub-cap-forward-COCmYaup.js");
 let node_crypto = require("node:crypto");

package/dist/{child-cap-dispatch-CgmOo0yl.mjs → child-cap-dispatch-DpHovtQd.mjs}

@@ -1,4 +1,4 @@
-import { Br as scrubKnownSecrets, Gr as EventCategory$1, Sr as createEvent, en as maskUrlCredentials } from "./dist-BWNoS-1S.mjs";
+import { Br as scrubKnownSecrets, Gr as EventCategory$1, Sr as createEvent, en as maskUrlCredentials } from "./dist-Bvl5JgNt.mjs";
 import { a as parseProcStat, i as nodeProcReader } from "./proc-stat-CbC55Kqi.mjs";
 import "./hub-cap-forward-CH6_VWVO.mjs";
 import * as crypto$1 from "node:crypto";

package/dist/{composition-sources-D39bl0nP.mjs → composition-sources-BLBd338N.mjs}

@@ -1,4 +1,4 @@
-import { cr as errMsg, tr as compositionSourceKey } from "./dist-BWNoS-1S.mjs";
+import { cr as errMsg, tr as compositionSourceKey } from "./dist-Bvl5JgNt.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-BNyXPSs_.js → composition-sources-CxhGdtdh.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D_a9mUiM.js");
+const require_dist = require("./dist-KxsOMQik.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{dist-BWNoS-1S.mjs → dist-Bvl5JgNt.mjs}

@@ -708,7 +708,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-Cr5YOk3m.mjs
+//#region ../types/dist/sleep-DujUvOcb.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -25402,6 +25402,9 @@ var RetrainExportFilterSchema = z.object({
 	frameIds: z.array(z.string()).max(2e4).optional(),
 	/** Only frames in at least one of these named collections. */
 	collectionIds: z.array(z.string()).max(200).optional(),
+	/** Exactly the frames of this dataset version (and its completeOnly). An
+	*  unknown id selects nothing. */
+	datasetVersionId: z.string().optional(),
 	batchId: z.string().optional(),
 	/** Only frames the operator marked complete (all subjects boxed). */
 	completeOnly: z.boolean().optional()
@@ -25569,6 +25572,67 @@ var RetrainLlmAssistResultSchema = z.discriminatedUnion("kind", [z.object({
 	]),
 	detail: z.string().optional()
 })]);
+/** What a dataset version is cut from. Every field narrows. */
+var RetrainDatasetSelectionSchema = z.object({
+	deviceIds: z.array(z.number()).readonly().optional(),
+	collectionIds: z.array(z.string()).max(200).readonly().optional(),
+	frameIds: z.array(z.string()).max(2e4).readonly().optional()
+});
+/** The counts a dataset is judged by. */
+var RetrainDatasetStatsSchema = z.object({
+	frames: z.number().int(),
+	completeFrames: z.number().int(),
+	/** `completeFrames / frames`, 0..1. */
+	completeness: z.number(),
+	/** Boxes to learn (model errors excluded). */
+	subjects: z.number().int(),
+	modelErrors: z.number().int(),
+	/** Complete frames with no subject. */
+	hardNegatives: z.number().int(),
+	/** Subjects per class × camera × day/night. */
+	cells: z.array(z.object({
+		macroClass: z.string(),
+		deviceId: z.number(),
+		lighting: z.enum([
+			"day",
+			"night",
+			"unknown"
+		]),
+		subjects: z.number().int(),
+		frames: z.number().int()
+	})).readonly(),
+	cameras: z.array(z.object({
+		deviceId: z.number(),
+		frames: z.number().int(),
+		completeFrames: z.number().int()
+	})).readonly()
+});
+/** An immutable dataset version, without its frame list. */
+var RetrainDatasetVersionSchema = z.object({
+	id: z.string(),
+	name: z.string(),
+	createdAt: z.number(),
+	selection: RetrainDatasetSelectionSchema,
+	layout: RetrainExportLayoutSchema,
+	completeOnly: z.boolean(),
+	frameCount: z.number().int(),
+	/** sha256 of what the frames taught when the version was frozen. */
+	annotationHash: z.string(),
+	/** The export manifest schema the version was cut under. */
+	manifestSchema: z.string(),
+	stats: RetrainDatasetStatsSchema
+});
+var CreateRetrainDatasetVersionResultSchema = z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("created"),
+	version: RetrainDatasetVersionSchema
+}), z.object({
+	kind: z.literal("refused"),
+	reason: z.enum([
+		"empty-name",
+		"duplicate-name",
+		"no-frames"
+	])
+})]);
 /** The outcome of a lifecycle move owned by the retrain page. */
 var RetrainTransitionResultSchema = z.object({
 	trackId: z.string(),
@@ -26919,6 +26983,53 @@ var pipelineAnalyticsCapability = {
 			auth: "admin",
 			timeoutMs: 60 * 6e4
 		}),
+		/** The counts a selection would freeze — class × camera × day/night,
+		*  completeness — without freezing anything. Index reads only. */
+		previewRetrainDataset: method(z.object({
+			selection: RetrainDatasetSelectionSchema,
+			completeOnly: z.boolean().optional()
+		}), RetrainDatasetStatsSchema, {
+			kind: "query",
+			auth: "admin"
+		}),
+		/**
+		* Freeze a dataset version: the frames the selection yields (the same plan
+		* the annotated export builds), the hash of what they teach, the export
+		* parameters and the counts. Immutable — a different selection is a new
+		* version. Export it with `getRetrainExportUrl({ datasetVersionId })`.
+		*/
+		createRetrainDatasetVersion: method(z.object({
+			name: z.string().max(120),
+			selection: RetrainDatasetSelectionSchema,
+			layout: RetrainExportLayoutSchema,
+			completeOnly: z.boolean()
+		}), CreateRetrainDatasetVersionResultSchema, {
+			kind: "mutation",
+			auth: "admin",
+			timeoutMs: 12e4
+		}),
+		/** Every dataset version, newest first. */
+		listRetrainDatasetVersions: method(z.object({}), z.array(RetrainDatasetVersionSchema).readonly(), {
+			kind: "query",
+			auth: "admin"
+		}),
+		/** Delete a version. Its frames stay in the dataset. */
+		deleteRetrainDatasetVersion: method(z.object({ id: z.string() }), z.object({ deleted: z.boolean() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Does the corpus still teach what the version froze? `missingFrames`
+		*  counts frames that left the dataset (or lost every box and tick). */
+		verifyRetrainDatasetVersion: method(z.object({ id: z.string() }), z.object({
+			found: z.boolean(),
+			annotationHash: z.string(),
+			matches: z.boolean(),
+			missingFrames: z.number().int()
+		}), {
+			kind: "query",
+			auth: "admin",
+			timeoutMs: 12e4
+		}),
 		/** The enabled, vision-capable LLM profiles, each saying whether a frame
 		*  sent to it leaves the house. */
 		listRetrainAssistProfiles: method(z.object({}), z.array(RetrainAssistProfileSchema).readonly(), {
@@ -53758,6 +53869,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.createRetrainDatasetVersion": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.deleteDeviceEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -53770,6 +53887,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineAnalytics.deleteRetrainDatasetVersion": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineAnalytics.deleteTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -53992,6 +54115,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listRetrainDatasetVersions": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listRetrainFrames": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -54034,6 +54163,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.previewRetrainDataset": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.proposeRetrainAnnotations": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -54172,6 +54307,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.verifyRetrainDatasetVersion": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.wipeAllAnalytics": {
 		capName: "pipeline-analytics",
 		capScope: "device",

package/dist/{dist-D_a9mUiM.js → dist-KxsOMQik.js}

@@ -708,7 +708,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-Cr5YOk3m.mjs
+//#region ../types/dist/sleep-DujUvOcb.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -25402,6 +25402,9 @@ var RetrainExportFilterSchema = zod.z.object({
 	frameIds: zod.z.array(zod.z.string()).max(2e4).optional(),
 	/** Only frames in at least one of these named collections. */
 	collectionIds: zod.z.array(zod.z.string()).max(200).optional(),
+	/** Exactly the frames of this dataset version (and its completeOnly). An
+	*  unknown id selects nothing. */
+	datasetVersionId: zod.z.string().optional(),
 	batchId: zod.z.string().optional(),
 	/** Only frames the operator marked complete (all subjects boxed). */
 	completeOnly: zod.z.boolean().optional()
@@ -25569,6 +25572,67 @@ var RetrainLlmAssistResultSchema = zod.z.discriminatedUnion("kind", [zod.z.objec
 	]),
 	detail: zod.z.string().optional()
 })]);
+/** What a dataset version is cut from. Every field narrows. */
+var RetrainDatasetSelectionSchema = zod.z.object({
+	deviceIds: zod.z.array(zod.z.number()).readonly().optional(),
+	collectionIds: zod.z.array(zod.z.string()).max(200).readonly().optional(),
+	frameIds: zod.z.array(zod.z.string()).max(2e4).readonly().optional()
+});
+/** The counts a dataset is judged by. */
+var RetrainDatasetStatsSchema = zod.z.object({
+	frames: zod.z.number().int(),
+	completeFrames: zod.z.number().int(),
+	/** `completeFrames / frames`, 0..1. */
+	completeness: zod.z.number(),
+	/** Boxes to learn (model errors excluded). */
+	subjects: zod.z.number().int(),
+	modelErrors: zod.z.number().int(),
+	/** Complete frames with no subject. */
+	hardNegatives: zod.z.number().int(),
+	/** Subjects per class × camera × day/night. */
+	cells: zod.z.array(zod.z.object({
+		macroClass: zod.z.string(),
+		deviceId: zod.z.number(),
+		lighting: zod.z.enum([
+			"day",
+			"night",
+			"unknown"
+		]),
+		subjects: zod.z.number().int(),
+		frames: zod.z.number().int()
+	})).readonly(),
+	cameras: zod.z.array(zod.z.object({
+		deviceId: zod.z.number(),
+		frames: zod.z.number().int(),
+		completeFrames: zod.z.number().int()
+	})).readonly()
+});
+/** An immutable dataset version, without its frame list. */
+var RetrainDatasetVersionSchema = zod.z.object({
+	id: zod.z.string(),
+	name: zod.z.string(),
+	createdAt: zod.z.number(),
+	selection: RetrainDatasetSelectionSchema,
+	layout: RetrainExportLayoutSchema,
+	completeOnly: zod.z.boolean(),
+	frameCount: zod.z.number().int(),
+	/** sha256 of what the frames taught when the version was frozen. */
+	annotationHash: zod.z.string(),
+	/** The export manifest schema the version was cut under. */
+	manifestSchema: zod.z.string(),
+	stats: RetrainDatasetStatsSchema
+});
+var CreateRetrainDatasetVersionResultSchema = zod.z.discriminatedUnion("kind", [zod.z.object({
+	kind: zod.z.literal("created"),
+	version: RetrainDatasetVersionSchema
+}), zod.z.object({
+	kind: zod.z.literal("refused"),
+	reason: zod.z.enum([
+		"empty-name",
+		"duplicate-name",
+		"no-frames"
+	])
+})]);
 /** The outcome of a lifecycle move owned by the retrain page. */
 var RetrainTransitionResultSchema = zod.z.object({
 	trackId: zod.z.string(),
@@ -26919,6 +26983,53 @@ var pipelineAnalyticsCapability = {
 			auth: "admin",
 			timeoutMs: 60 * 6e4
 		}),
+		/** The counts a selection would freeze — class × camera × day/night,
+		*  completeness — without freezing anything. Index reads only. */
+		previewRetrainDataset: method(zod.z.object({
+			selection: RetrainDatasetSelectionSchema,
+			completeOnly: zod.z.boolean().optional()
+		}), RetrainDatasetStatsSchema, {
+			kind: "query",
+			auth: "admin"
+		}),
+		/**
+		* Freeze a dataset version: the frames the selection yields (the same plan
+		* the annotated export builds), the hash of what they teach, the export
+		* parameters and the counts. Immutable — a different selection is a new
+		* version. Export it with `getRetrainExportUrl({ datasetVersionId })`.
+		*/
+		createRetrainDatasetVersion: method(zod.z.object({
+			name: zod.z.string().max(120),
+			selection: RetrainDatasetSelectionSchema,
+			layout: RetrainExportLayoutSchema,
+			completeOnly: zod.z.boolean()
+		}), CreateRetrainDatasetVersionResultSchema, {
+			kind: "mutation",
+			auth: "admin",
+			timeoutMs: 12e4
+		}),
+		/** Every dataset version, newest first. */
+		listRetrainDatasetVersions: method(zod.z.object({}), zod.z.array(RetrainDatasetVersionSchema).readonly(), {
+			kind: "query",
+			auth: "admin"
+		}),
+		/** Delete a version. Its frames stay in the dataset. */
+		deleteRetrainDatasetVersion: method(zod.z.object({ id: zod.z.string() }), zod.z.object({ deleted: zod.z.boolean() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Does the corpus still teach what the version froze? `missingFrames`
+		*  counts frames that left the dataset (or lost every box and tick). */
+		verifyRetrainDatasetVersion: method(zod.z.object({ id: zod.z.string() }), zod.z.object({
+			found: zod.z.boolean(),
+			annotationHash: zod.z.string(),
+			matches: zod.z.boolean(),
+			missingFrames: zod.z.number().int()
+		}), {
+			kind: "query",
+			auth: "admin",
+			timeoutMs: 12e4
+		}),
 		/** The enabled, vision-capable LLM profiles, each saying whether a frame
 		*  sent to it leaves the house. */
 		listRetrainAssistProfiles: method(zod.z.object({}), zod.z.array(RetrainAssistProfileSchema).readonly(), {
@@ -53758,6 +53869,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.createRetrainDatasetVersion": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.deleteDeviceEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -53770,6 +53887,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineAnalytics.deleteRetrainDatasetVersion": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineAnalytics.deleteTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -53992,6 +54115,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listRetrainDatasetVersions": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listRetrainFrames": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -54034,6 +54163,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.previewRetrainDataset": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.proposeRetrainAnnotations": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -54172,6 +54307,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.verifyRetrainDatasetVersion": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.wipeAllAnalytics": {
 		capName: "pipeline-analytics",
 		capScope: "device",

package/dist/{event-loop-stall-monitor-DuOn8H1n.js → event-loop-stall-monitor-CbSmCWkp.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-D_a9mUiM.js");
+const require_dist = require("./dist-KxsOMQik.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
@@ -193,12 +193,13 @@ function collectModelFiles(entry, format) {
 	for (const extra of entry.extraFiles ?? []) names.push(extra.filename);
 	return names;
 }
-/** Build fetch headers, including HF auth token for huggingface.co URLs */
-function buildHeaders(url) {
-	const headers = { "User-Agent": "CamStack/1.0" };
-	const hfToken = process.env["HF_TOKEN"] ?? process.env["HUGGING_FACE_HUB_TOKEN"];
-	if (hfToken && url.includes("huggingface.co")) headers["Authorization"] = `Bearer ${hfToken}`;
-	return headers;
+/**
+* Fetch headers for a model download. No credential: the CamStack model repos
+* are public, and no secret is ever read from the environment (operator rule —
+* a token, if a gated source ever needs one, is a keychain-backed setting).
+*/
+function buildHeaders(_url) {
+	return { "User-Agent": "CamStack/1.0" };
 }
 /**
 * A download that the server ANSWERED with a non-2xx status. Typed so a caller

package/dist/{event-loop-stall-monitor-ClPhfx7Y.mjs → event-loop-stall-monitor-D8rqSWfW.mjs}

@@ -1,4 +1,4 @@
-import { Ft as hfModelUrl, T as HF_REPO, j as MODEL_FORMATS } from "./dist-BWNoS-1S.mjs";
+import { Ft as hfModelUrl, T as HF_REPO, j as MODEL_FORMATS } from "./dist-Bvl5JgNt.mjs";
 import { createHash } from "node:crypto";
 import * as path$1 from "node:path";
 import path from "node:path";
@@ -192,12 +192,13 @@ function collectModelFiles(entry, format) {
 	for (const extra of entry.extraFiles ?? []) names.push(extra.filename);
 	return names;
 }
-/** Build fetch headers, including HF auth token for huggingface.co URLs */
-function buildHeaders(url) {
-	const headers = { "User-Agent": "CamStack/1.0" };
-	const hfToken = process.env["HF_TOKEN"] ?? process.env["HUGGING_FACE_HUB_TOKEN"];
-	if (hfToken && url.includes("huggingface.co")) headers["Authorization"] = `Bearer ${hfToken}`;
-	return headers;
+/**
+* Fetch headers for a model download. No credential: the CamStack model repos
+* are public, and no secret is ever read from the environment (operator rule —
+* a token, if a gated source ever needs one, is a keychain-backed setting).
+*/
+function buildHeaders(_url) {
+	return { "User-Agent": "CamStack/1.0" };
 }
 /**
 * A download that the server ANSWERED with a non-2xx status. Typed so a caller

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-D_a9mUiM.js");
+const require_dist = require("./dist-KxsOMQik.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -29,9 +29,9 @@ require("./builtins/storage-orchestrator/index.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
-const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-DuOn8H1n.js");
+const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-CbSmCWkp.js");
 const require_tls$1 = require("./tls-CCMX7MjX.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-DlDSoqm1.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-C9lmrWFT.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-BgWGRxN5.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { $t as looseSchema, At as extractNestedAddonId, Cr as emitDownForOwnedCaps, E as LOG_LEVEL_RANK, G as addonSettingsCapability, Gr as EventCategory$1, Ht as isVoidInput, Ir as readinessKey, Jt as lifecycleJobSchema, Lr as resolveCapMount, Lt as isArrayOutputSchema, Nr as parseJsonObject, On as scopesAllowAddon, P as RUNTIME_DEFAULTS, Pr as parseJsonUnknown, Qt as logLevelAtMost, Rt as isCollectionArrayMethod, Sr as createEvent, Tn as resolveMethodAuth, Tr as expandCapMethods, Ut as kebabToCamel, Vt as isObjectInput, _r as asJsonObject$1, cr as errMsg$1, dr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, fr as DEVICE_STATUS_METHOD, hn as procedureAuthKey, hr as ReadinessTimeoutError, k as METHOD_ACCESS_MAP, kn as scopesAllowDeviceCap, ln as objectInputDeclaresAddonId, mr as ReadinessRegistry, t as ALL_CAPABILITY_DEFINITIONS, un as objectInputDeclaresRequiredDeviceId, ur as DATAPLANE_SECRET_HEADER$1, vr as asNumber, yr as asString$1, zr as scopeKey } from "./dist-BWNoS-1S.mjs";
+import { $t as looseSchema, At as extractNestedAddonId, Cr as emitDownForOwnedCaps, E as LOG_LEVEL_RANK, G as addonSettingsCapability, Gr as EventCategory$1, Ht as isVoidInput, Ir as readinessKey, Jt as lifecycleJobSchema, Lr as resolveCapMount, Lt as isArrayOutputSchema, Nr as parseJsonObject, On as scopesAllowAddon, P as RUNTIME_DEFAULTS, Pr as parseJsonUnknown, Qt as logLevelAtMost, Rt as isCollectionArrayMethod, Sr as createEvent, Tn as resolveMethodAuth, Tr as expandCapMethods, Ut as kebabToCamel, Vt as isObjectInput, _r as asJsonObject$1, cr as errMsg$1, dr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, fr as DEVICE_STATUS_METHOD, hn as procedureAuthKey, hr as ReadinessTimeoutError, k as METHOD_ACCESS_MAP, kn as scopesAllowDeviceCap, ln as objectInputDeclaresAddonId, mr as ReadinessRegistry, t as ALL_CAPABILITY_DEFINITIONS, un as objectInputDeclaresRequiredDeviceId, ur as DATAPLANE_SECRET_HEADER$1, vr as asNumber, yr as asString$1, zr as scopeKey } from "./dist-Bvl5JgNt.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
@@ -28,9 +28,9 @@ import "./builtins/storage-orchestrator/index.mjs";
 import { SystemConfigAddon } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
-import { C as resolveFormatRevision, S as isModelDownloaded, _ as downloadModel, a as createFileDataPlaneHandler, b as getModelFilePath, c as parseRangeHeader, d as ModelDownloadService, g as downloadFile, h as deleteModelFromDisk, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as collectModelFiles, n as STALL_TICK_MS, o as contentTypeFor, p as adoptModelRevisions, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as ensureModel, w as revisionWeightUrl, y as fetchJson } from "./event-loop-stall-monitor-ClPhfx7Y.mjs";
+import { C as resolveFormatRevision, S as isModelDownloaded, _ as downloadModel, a as createFileDataPlaneHandler, b as getModelFilePath, c as parseRangeHeader, d as ModelDownloadService, g as downloadFile, h as deleteModelFromDisk, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as collectModelFiles, n as STALL_TICK_MS, o as contentTypeFor, p as adoptModelRevisions, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as ensureModel, w as revisionWeightUrl, y as fetchJson } from "./event-loop-stall-monitor-D8rqSWfW.mjs";
 import { A as allFamiliesListenHost, C as collectCertIdentity, D as SERVER_AUTH_OID, E as MAX_LEAF_VALIDITY_DAYS, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as evaluateExistingCert, P as readLanHttpState, S as CA_COMMON_NAME, T as LEAF_RENEWAL_WINDOW_DAYS, _ as writeExtraSans, a as validateUploadedTls, b as loadTlsCert, c as registerHttpsListener, d as prepareBootTls, f as UPLOADED_CA_FILE, g as splitPemCertificates, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as reloadHttpsListener, m as readTlsAccessStatus, n as regenerateCertificate, o as clearHttpsListener, p as readExtraSans, r as revertToGeneratedCertificate, s as leafFingerprintOf, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, v as writeTlsMode, w as CA_VALIDITY_DAYS, x as reissueTlsLeaf, y as ensureTlsCert } from "./tls-CJHogwTl.mjs";
-import { $ as stampCallerAddonId, $n as sampleSocketDirection, $t as HUB_MAIN_RSS_BUDGET_MB, A as resolveHwAccel, An as formatHeapSpaces, At as serializeTypedArrays, B as udsChildLogToWorkerEntry, Bn as createMeshQueueReader, Bt as isCredentialKeyName, C as getBrokerEventBus, Cn as createArrayBufferCensusGate, Ct as NATIVE_PROVIDER_SERVICE_INFIX, D as subscribePassthrough, Dn as DECISIVE_HEAP_SPACES, Dt as capServiceName, E as setNodeEventInterest, En as isArrayBufferCensusReport, Et as capBareAction, F as ipcParentLink, Fn as OUTBOUND_QUEUE_SUSTAIN_MS, Ft as installManifestNativeDeps, G as UDS_NO_ROUTE_PREFIX, Gn as createSocketPlaneMeter, Gt as hostNodeIdOf, H as createUdsLoggerWithControl, Hn as EMPTY_SOCKET_PLANE_BASELINE, Ht as redactLogMeta, I as localProviderLink, In as OUTBOUND_QUEUE_THRESHOLD_BYTES, It as resolveAddonClass, J as answerClaimedGetStatus, Jn as formatSocketPlane, Jt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, K as afterWorkerOnlineAnnounce, Kn as createSocketPlaneReader, Kt as createAddonDataPlaneFacility, L as createParentUnownedCallHandler, Ln as createOutboundQueueGate, Lt as buildNpmChildEnv, M as brokerTransportLink, Mn as readHeapSpaces, Mt as CapabilityHandle, N as buildLinkChain, Nn as selectReportedSpaces, Nt as CapabilityUnavailableError, O as AddonDepsManager, On as HEAP_SPACE_REPORT_MIN_MB, Ot as parseCapAction, P as deviceCapResolverLink, Pn as OUTBOUND_QUEUE_COOLDOWN_MS, Pt as copyBundledNativeModules, Q as CapRouteResolver, Qn as recordSocketFrame, Qt as HUB_MAIN_HEAP_WATCH_LABEL, R as createUdsEventBridge, Rn as formatOutboundQueueVerdict, Rt as resolveNpmInvocation, S as clusterEventTopic, Sn as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, St as validateProviderRegistrations, T as registerEventBusService, Tn as formatArrayBufferCensus, Tt as capActionSuffix, U as LocalChildClient, Un as SOCKET_PLANE_TOP_N, Ut as redactLogText, V as createUdsLogger, Vn as formatMeshQueue, Vt as redactLogEntry, W as LocalChildRegistry, Wn as SOCKET_QUEUE_TOP_N, Wt as createAddonPeerBytesFacility, X as AGENT_CAP_FWD_ACTION, Xn as EMPTY_SOCKET_DIRECTION, Xt as HEAP_WATCH_INTERVAL_MS, Y as deviceOfGetStatus, Yn as readSocketQueues, Yt as HEAP_RECLAIM_TRIGGER_MB, Z as AGENT_CAP_FWD_SERVICE, Zn as createSocketDirectionCounters, Zt as HEAP_WATCH_WARN_RATIO, _ as getWorkerDeviceRegistry, _n as startRunnerHeapWatch, a as reapProcessGroup, an as ZERO_LOOP_DELAY, ar as MAX_CAP_ACTIONS_PER_PEER, at as __resetCapUsageRegistryForTests, b as setHubConnected, bn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, c as runnerOwnsProcessGroup, cn as createLoopDelayMeter, cr as diffCapActionCensus, ct as UdsLocalTransportClient, d as summarizeMembers, dn as hubMainRssBudget, dr as createEventPlaneReader, dt as PeerAnsweredError, en as HUB_RSS_BUDGET_ENV, er as socketDirectionBytes, et as CapRouteError, f as installManifestSystemDeps, fn as nextRssBudgetState, fr as diffEventPlane, ft as localEndpointPath, g as createUdsAddonContext, gn as startHeapWatch, gt as createBrokerDeviceManagerApi, h as createAddonContext, hn as shouldReclaim, ht as buildNativeCapProxy, in as RUNNER_RSS_BUDGET_ENV, ir as EMPTY_CAP_ACTION_READING, it as PARENT_ROUTED_PROVIDER_ADDON_ID, j as brokerCallForCap, jn as heapSpaceField, jt as DeviceRegistry, k as createKernelHwAccel, kn as emitHeapDiagnosticReport, kt as deserializeTypedArrays, l as signalAllRunnerGroups, ln as createV8Reclaimer, lr as EVENT_PLANE_TOP_N, lt as UdsLocalTransportServer, m as adaptBrokerToCluster, mn as reclaimIntervalMs, mt as encodeFrame, nn as RSS_BUDGET_RELEASE_RATIO, nr as CAP_ACTION_OVERFLOW_LABEL, nt as callWithServiceDiscovery, o as registerRunnerGroup, on as buildHeapSample, or as capActionLabel, ot as getCapUsageRegistry, p as installManifestPythonDeps, pn as parseRssBudgetMb, pr as formatEventPlane, pt as FrameDecoder, q as GET_STATUS_METHOD, qn as diffSocketPlane, qt as HEAP_RECLAIM_MIN_INTERVAL_MS, r as defaultProcessGroupOps, rn as RUNNER_HEAP_WATCH_INTERVAL_MS, rr as CAP_ACTION_UNLABELLED, rt as CapUsageRegistry, s as releaseRunnerGroup, sn as createDeferredHeapWatchSink, sr as createCapActionCensus, st as createLocalTransport, t as CAP_METHOD_NOT_IMPLEMENTED, tn as RSS_BUDGET_REANNOUNCE_MIN_MS, tr as socketDirectionMessages, tt as classifyCapRoute, un as describeRss, ur as createEventPlaneMeter, ut as SocketChannel, v as getOrInitReadinessRegistry, vn as strandedMb, w as getMoleculerEventStats, wn as createInspectorArrayBufferCensus, wt as capActionName, x as EVENT_TOPIC_PREFIX, xn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, xt as createAddonService, y as getOrInitReadinessRegistryForClient, yn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, yt as mountNativeCapService, z as createUdsEventBus, zn as MESH_QUEUE_TOP_N, zt as runNpm } from "./child-cap-dispatch-CgmOo0yl.mjs";
+import { $ as stampCallerAddonId, $n as sampleSocketDirection, $t as HUB_MAIN_RSS_BUDGET_MB, A as resolveHwAccel, An as formatHeapSpaces, At as serializeTypedArrays, B as udsChildLogToWorkerEntry, Bn as createMeshQueueReader, Bt as isCredentialKeyName, C as getBrokerEventBus, Cn as createArrayBufferCensusGate, Ct as NATIVE_PROVIDER_SERVICE_INFIX, D as subscribePassthrough, Dn as DECISIVE_HEAP_SPACES, Dt as capServiceName, E as setNodeEventInterest, En as isArrayBufferCensusReport, Et as capBareAction, F as ipcParentLink, Fn as OUTBOUND_QUEUE_SUSTAIN_MS, Ft as installManifestNativeDeps, G as UDS_NO_ROUTE_PREFIX, Gn as createSocketPlaneMeter, Gt as hostNodeIdOf, H as createUdsLoggerWithControl, Hn as EMPTY_SOCKET_PLANE_BASELINE, Ht as redactLogMeta, I as localProviderLink, In as OUTBOUND_QUEUE_THRESHOLD_BYTES, It as resolveAddonClass, J as answerClaimedGetStatus, Jn as formatSocketPlane, Jt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, K as afterWorkerOnlineAnnounce, Kn as createSocketPlaneReader, Kt as createAddonDataPlaneFacility, L as createParentUnownedCallHandler, Ln as createOutboundQueueGate, Lt as buildNpmChildEnv, M as brokerTransportLink, Mn as readHeapSpaces, Mt as CapabilityHandle, N as buildLinkChain, Nn as selectReportedSpaces, Nt as CapabilityUnavailableError, O as AddonDepsManager, On as HEAP_SPACE_REPORT_MIN_MB, Ot as parseCapAction, P as deviceCapResolverLink, Pn as OUTBOUND_QUEUE_COOLDOWN_MS, Pt as copyBundledNativeModules, Q as CapRouteResolver, Qn as recordSocketFrame, Qt as HUB_MAIN_HEAP_WATCH_LABEL, R as createUdsEventBridge, Rn as formatOutboundQueueVerdict, Rt as resolveNpmInvocation, S as clusterEventTopic, Sn as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, St as validateProviderRegistrations, T as registerEventBusService, Tn as formatArrayBufferCensus, Tt as capActionSuffix, U as LocalChildClient, Un as SOCKET_PLANE_TOP_N, Ut as redactLogText, V as createUdsLogger, Vn as formatMeshQueue, Vt as redactLogEntry, W as LocalChildRegistry, Wn as SOCKET_QUEUE_TOP_N, Wt as createAddonPeerBytesFacility, X as AGENT_CAP_FWD_ACTION, Xn as EMPTY_SOCKET_DIRECTION, Xt as HEAP_WATCH_INTERVAL_MS, Y as deviceOfGetStatus, Yn as readSocketQueues, Yt as HEAP_RECLAIM_TRIGGER_MB, Z as AGENT_CAP_FWD_SERVICE, Zn as createSocketDirectionCounters, Zt as HEAP_WATCH_WARN_RATIO, _ as getWorkerDeviceRegistry, _n as startRunnerHeapWatch, a as reapProcessGroup, an as ZERO_LOOP_DELAY, ar as MAX_CAP_ACTIONS_PER_PEER, at as __resetCapUsageRegistryForTests, b as setHubConnected, bn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, c as runnerOwnsProcessGroup, cn as createLoopDelayMeter, cr as diffCapActionCensus, ct as UdsLocalTransportClient, d as summarizeMembers, dn as hubMainRssBudget, dr as createEventPlaneReader, dt as PeerAnsweredError, en as HUB_RSS_BUDGET_ENV, er as socketDirectionBytes, et as CapRouteError, f as installManifestSystemDeps, fn as nextRssBudgetState, fr as diffEventPlane, ft as localEndpointPath, g as createUdsAddonContext, gn as startHeapWatch, gt as createBrokerDeviceManagerApi, h as createAddonContext, hn as shouldReclaim, ht as buildNativeCapProxy, in as RUNNER_RSS_BUDGET_ENV, ir as EMPTY_CAP_ACTION_READING, it as PARENT_ROUTED_PROVIDER_ADDON_ID, j as brokerCallForCap, jn as heapSpaceField, jt as DeviceRegistry, k as createKernelHwAccel, kn as emitHeapDiagnosticReport, kt as deserializeTypedArrays, l as signalAllRunnerGroups, ln as createV8Reclaimer, lr as EVENT_PLANE_TOP_N, lt as UdsLocalTransportServer, m as adaptBrokerToCluster, mn as reclaimIntervalMs, mt as encodeFrame, nn as RSS_BUDGET_RELEASE_RATIO, nr as CAP_ACTION_OVERFLOW_LABEL, nt as callWithServiceDiscovery, o as registerRunnerGroup, on as buildHeapSample, or as capActionLabel, ot as getCapUsageRegistry, p as installManifestPythonDeps, pn as parseRssBudgetMb, pr as formatEventPlane, pt as FrameDecoder, q as GET_STATUS_METHOD, qn as diffSocketPlane, qt as HEAP_RECLAIM_MIN_INTERVAL_MS, r as defaultProcessGroupOps, rn as RUNNER_HEAP_WATCH_INTERVAL_MS, rr as CAP_ACTION_UNLABELLED, rt as CapUsageRegistry, s as releaseRunnerGroup, sn as createDeferredHeapWatchSink, sr as createCapActionCensus, st as createLocalTransport, t as CAP_METHOD_NOT_IMPLEMENTED, tn as RSS_BUDGET_REANNOUNCE_MIN_MS, tr as socketDirectionMessages, tt as classifyCapRoute, un as describeRss, ur as createEventPlaneMeter, ut as SocketChannel, v as getOrInitReadinessRegistry, vn as strandedMb, w as getMoleculerEventStats, wn as createInspectorArrayBufferCensus, wt as capActionName, x as EVENT_TOPIC_PREFIX, xn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, xt as createAddonService, y as getOrInitReadinessRegistryForClient, yn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, yt as mountNativeCapService, z as createUdsEventBus, zn as MESH_QUEUE_TOP_N, zt as runNpm } from "./child-cap-dispatch-DpHovtQd.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-B2WZ8_q9.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";

package/dist/{retired-settings-keys-iGcmzwLV.mjs → retired-settings-keys-BAcfvFtm.mjs}

@@ -1,4 +1,4 @@
-import { _r as asJsonObject } from "./dist-BWNoS-1S.mjs";
+import { _r as asJsonObject } from "./dist-Bvl5JgNt.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-CDyOGAje.js → retired-settings-keys-gTsZfpmP.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D_a9mUiM.js");
+const require_dist = require("./dist-KxsOMQik.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.377",
+  "version": "1.2.378",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",