@camstack/system 1.2.381 → 1.2.382

package/dist/builtins/backup-orchestrator/encryption-key-store.d.ts

@@ -0,0 +1,36 @@
+import { ISettingsStoreProvider } from '@camstack/types';
+/**
+ * @durable class=config owner=backup-orchestrator
+ *   write="`setupEncryption` inserts one row per generated key and retires the
+ *     previous active row; `disableEncryption` retires the active row"
+ *   retention="none — one small row per key ever generated; a retired row
+ *     names the key older archives need"
+ */
+export declare const BACKUP_ENCRYPTION_KEYS_COLLECTION = "backup_encryption_keys";
+export interface BackupEncryptionKeyRecord {
+    readonly keyId: string;
+    readonly publicKey: string;
+    readonly createdAt: number;
+    readonly retiredAt: number | null;
+}
+type Store = Pick<ISettingsStoreProvider, 'declareCollection' | 'query' | 'insert' | 'deleteWhere'>;
+export declare class BackupEncryptionKeyStore {
+    private readonly store;
+    private readonly now;
+    private declared;
+    constructor(store: Store, now?: () => number);
+    private ensureDeclared;
+    /** Every key, newest first. */
+    list(): Promise<readonly BackupEncryptionKeyRecord[]>;
+    /** The key new archives are encrypted to; `null` = encryption off. */
+    active(): Promise<BackupEncryptionKeyRecord | null>;
+    /** Make `publicKey` the active key; the previous one is retired, kept listed. */
+    activate(input: {
+        readonly publicKey: string;
+    }): Promise<BackupEncryptionKeyRecord>;
+    /** Encryption off: the active key is retired. Archives already made keep needing it. */
+    disable(): Promise<void>;
+    private retireActive;
+    private write;
+}
+export {};

package/dist/builtins/backup-orchestrator/manifest-store.d.ts

@@ -9,8 +9,19 @@ export interface ManifestArchiveEntry {
     readonly createdAt: number;
     readonly sizeBytes: number;
     readonly label?: string;
-    /** Snapshot of the embedded `.camstack-backup-manifest.json`. */
+    /**
+     * Snapshot of the embedded `.camstack-backup-manifest.json`. For an
+     * ENCRYPTED archive only its outline (locations, totals, no file list): the
+     * destination holds this index in clear, and the file list stays inside the
+     * ciphertext.
+     */
     readonly manifest: ArchiveManifest;
+    /** Present when the archive is encrypted to a backup key. */
+    readonly encryption?: ManifestArchiveEncryption;
+}
+export interface ManifestArchiveEncryption {
+    readonly scheme: string;
+    readonly keyId: string;
 }
 export interface LocationBackupManifest {
     readonly version: 1;
@@ -38,6 +49,12 @@ export declare function writeLocationManifest(api: ManifestStorageApi, locationI
  * stance as the legacy `LocalBackupService.ensureManifestsLoaded`.
  */
 export declare function parseManifestBytes(bytes: Uint8Array): LocationBackupManifest;
+/**
+ * What the destination's clear-text index may say about an encrypted archive:
+ * the outline a restore needs (locations, sizes, the snapshot promise) — not
+ * the list of files, which stays inside the ciphertext.
+ */
+export declare function outlineOfManifest(manifest: ArchiveManifest): ArchiveManifest;
 /**
  * Build a `ManifestArchiveEntry` from the raw inputs collected during
  * a successful upload. Pure transform — no I/O — kept here so the
@@ -50,6 +67,7 @@ export declare function buildArchiveEntry(input: {
     sizeBytes: number;
     label?: string;
     manifest: ArchiveManifest;
+    encryption?: ManifestArchiveEncryption;
 }): ManifestArchiveEntry;
 /**
  * Pure retention split: given an archive list and the operator's

package/dist/builtins/backup-orchestrator/restore-archive.d.ts

@@ -0,0 +1,24 @@
+/** An encrypted backup was asked to restore without its key. */
+export declare class BackupKeyRequiredError extends Error {
+    readonly keyId: string;
+    constructor(keyId: string);
+}
+/**
+ * Before downloading gigabytes: does the operator's key fit what the
+ * destination's manifest says the archive needs? `archiveKeyId` undefined =
+ * the manifest records no encryption (the header check after the download
+ * remains the authority).
+ */
+export declare function precheckRestoreKey(archiveKeyId: string | undefined, secretKey: string | undefined): void;
+export interface PrepareRestoreInput {
+    /** The archive as downloaded from the destination. Consumed (deleted or renamed). */
+    readonly downloaded: string;
+    /** Where the restore marker will point: a plain `.tar.gz`. */
+    readonly target: string;
+    readonly secretKey?: string;
+}
+export interface PreparedRestore {
+    readonly encrypted: boolean;
+    readonly keyId?: string;
+}
+export declare function prepareRestoreArchive(input: PrepareRestoreInput): Promise<PreparedRestore>;

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BugrtARh.js");
+const require_dist = require("../../dist-tnAO12ak.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { et as calendarsCapability, lr as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-BC0GnGeg.mjs";
+import { p as CalendarPreferencesSchema, tt as calendarsCapability, ur as BaseAddon } from "../../dist-CP5TTjwd.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BugrtARh.js");
+const require_dist = require("../../dist-tnAO12ak.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { Jn as buildFfmpegArgs, M as MOTION_CLOSE_AFTER_MS, Nn as snapshotCapability, Qr as EventCategory, Rn as streamCatalogCapability, ar as DeviceFeature, b as DeclaredDevices, cr as errMsg, i as BaseDevice, kr as hydrateSchema, lr as BaseAddon, mt as declarationOwnerNodeId, on as motionCapability, rn as memoizePinnedFfmpeg, sr as DeviceType, tt as cameraGridLayoutCapability, wr as createEvent, y as DERIVED_CAMERA_SILENCED_CAP_NAMES } from "../../dist-BC0GnGeg.mjs";
+import { Ar as hydrateSchema, N as MOTION_CLOSE_AFTER_MS, Pn as snapshotCapability, Tr as createEvent, Yn as buildFfmpegArgs, b as DeclaredDevices, cr as DeviceType, ei as EventCategory, ht as declarationOwnerNodeId, i as BaseDevice, in as memoizePinnedFfmpeg, lr as errMsg, nt as cameraGridLayoutCapability, or as DeviceFeature, sn as motionCapability, ur as BaseAddon, y as DERIVED_CAMERA_SILENCED_CAP_NAMES, zn as streamCatalogCapability } from "../../dist-CP5TTjwd.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BugrtARh.js");
-const require_composition_sources = require("../../composition-sources-4SmsP0O4.js");
+const require_dist = require("../../dist-tnAO12ak.js");
+const require_composition_sources = require("../../composition-sources-C6ZynCZ2.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $n as compositionItemFieldPath, Et as evaluateCompositionField, Q as buildCapabilityLookup, Qn as compositionFeatureEnabled, Qr as EventCategory, Xn as composedDeviceRef, Yn as cloneStatefulExpressionMemory, Zn as composedDeviceStableId, b as DeclaredDevices, cr as errMsg, er as compositionSliceKey, i as BaseDevice, ir as toExpressionValue, it as compositionFieldKey, kt as expressionContainsBuiltinCall, l as COMPOSED_ITEM_FIXED_FIELDS, lr as BaseAddon, nr as createStatefulExpressionMemory, pn as planComposition, qn as COMPOSER_ADDON_ID, rr as disarmRoseMemory, rt as composerCapability, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, wr as createEvent } from "../../dist-BC0GnGeg.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-CgOQVIwa.mjs";
+import { $ as buildCapabilityLookup, $n as compositionFeatureEnabled, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Jn as COMPOSER_ADDON_ID, Qn as composedDeviceStableId, Tr as createEvent, Xn as cloneStatefulExpressionMemory, Zn as composedDeviceRef, ar as toExpressionValue, at as compositionFieldKey, b as DeclaredDevices, cr as DeviceType, ei as EventCategory, er as compositionItemFieldPath, i as BaseDevice, ir as disarmRoseMemory, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as errMsg, mn as planComposition, nr as compositionSourceKey, rr as createStatefulExpressionMemory, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSliceKey, ur as BaseAddon } from "../../dist-CP5TTjwd.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-XqRX51db.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BugrtARh.js");
+const require_dist = require("../../dist-tnAO12ak.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-BC0GnGeg.mjs";
+import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-CP5TTjwd.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BugrtARh.js");
-const require_composition_sources = require("../../composition-sources-4SmsP0O4.js");
+const require_dist = require("../../dist-tnAO12ak.js");
+const require_composition_sources = require("../../composition-sources-C6ZynCZ2.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { Q as buildCapabilityLookup, Sn as resolveCoreBlockFiles, Vn as validateComposition, Xn as composedDeviceRef, at as compositionSourceRefs, b as DeclaredDevices, cr as errMsg, ct as coreBlockIdFromAddonId, d as CORE_BLOCKS_ADDON_ID, f as CORE_BLOCK_ADDON_PREFIX, kr as hydrateSchema, lr as BaseAddon, lt as coreBlockSourceKind, m as CoreBlockSchema, ot as coreBlockAddonId, pn as planComposition, sn as normalizeCoreBlockWrite, st as coreBlockComposition, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlocksCapability, vn as replacedFieldKeys, vt as describeComposableCaps, xn as resolveCoreBlockEntry } from "../../dist-BC0GnGeg.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-CgOQVIwa.mjs";
+import { $ as buildCapabilityLookup, Ar as hydrateSchema, Cn as resolveCoreBlockFiles, Hn as validateComposition, Sn as resolveCoreBlockEntry, Zn as composedDeviceRef, b as DeclaredDevices, cn as normalizeCoreBlockWrite, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, lr as errMsg, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, mn as planComposition, nr as compositionSourceKey, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, ur as BaseAddon, ut as coreBlockSourceKind, yn as replacedFieldKeys, yt as describeComposableCaps } from "../../dist-CP5TTjwd.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-XqRX51db.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BugrtARh.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DCuetwOt.js");
+const require_dist = require("../../dist-tnAO12ak.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-4bHpL-0m.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildStreamParamsConfigSchema, A as MINUTES_PER_DAY, Ar as isDeviceConfigCap, C as FieldClaimModeSchema, Cr as collectZodSecretPaths, Dn as runtimeStatePolicyFor, Fr as isSecretMarkerLike, Jr as sleep$1, Kr as secretTreeFromPaths, Kt as legacyAutoLinkIds, L as STREAM_PROFILE_META, Mn as siteZoneKey, Mr as isKeychainStoredField, Nr as isSecretClear, Nt as formatMinutes, O as LocationIconIdSchema, Ot as expandContainer, Pr as isSecretMarker, Qr as EventCategory, St as deviceStatusCapability, Tt as enumerateSchemaFields, Ur as resolveSecretMarkers, Xr as toSecretFieldView, Xt as locationIconKey, Zr as transformSecretWrite, _r as WELL_KNOWN_TAB_MAP, ar as DeviceFeature, bt as deviceManagerCapability, c as CAP_NAMES_WITH_STATUS, cn as normalizeUnit, cr as errMsg, dn as parseStreamParamsFormPatch, dt as createDeviceExtensionProvider, gr as SECRET_CLEAR, gt as defineExtensionSlotProvider, lr as BaseAddon, o as CAMERA_SWITCH_ORDER, or as DeviceRole, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, v as DAY_NAMES, w as FieldClaimSchema, wt as enumerateItemArrayFields, x as DeviceStatusSchema, xt as deviceStateCapability, yt as deviceExtensionCapability } from "../../dist-BC0GnGeg.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-MCVhxPkJ.mjs";
+import { $r as transformSecretWrite, C as FieldClaimModeSchema, Ct as deviceStatusCapability, Et as enumerateSchemaFields, Fr as isSecretMarker, Gr as resolveSecretMarkers, Ir as isSecretMarkerLike, Jr as secretTreeFromPaths, Nn as siteZoneKey, Nr as isKeychainStoredField, On as runtimeStatePolicyFor, Pr as isSecretClear, Pt as formatMinutes, Qr as toSecretFieldView, R as STREAM_PROFILE_META, St as deviceStateCapability, Tt as enumerateItemArrayFields, Xr as sleep$1, Zt as locationIconKey, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as DeviceType, ei as EventCategory, et as buildStreamParamsConfigSchema, fn as parseStreamParamsFormPatch, ft as createDeviceExtensionProvider, j as MINUTES_PER_DAY, jr as isDeviceConfigCap, k as LocationIconIdSchema, kt as expandContainer, ln as normalizeUnit, lr as errMsg, o as CAMERA_SWITCH_ORDER, or as DeviceFeature, qt as legacyAutoLinkIds, sr as DeviceRole, t as ALL_CAPABILITY_DEFINITIONS, ur as BaseAddon, v as DAY_NAMES, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimSchema, wr as collectZodSecretPaths, x as DeviceStatusSchema, xt as deviceManagerCapability } from "../../dist-CP5TTjwd.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CzpIkwS-.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BugrtARh.js");
+const require_dist = require("../../dist-tnAO12ak.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-BC0GnGeg.mjs";
+import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-CP5TTjwd.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;