@camstack/system 1.2.382 → 1.2.384

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (102) hide show
  1. package/dist/addon-runner.js +1 -1
  2. package/dist/addon-runner.mjs +1 -1
  3. package/dist/addon-utils.js +1 -1
  4. package/dist/addon-utils.mjs +1 -1
  5. package/dist/auth/auth-audit-log.d.ts +2 -2
  6. package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js +1 -1
  7. package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs +1 -1
  8. package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js +1 -1
  9. package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs +1 -1
  10. package/dist/builtins/alerts/alerts.addon.js +1 -1
  11. package/dist/builtins/alerts/alerts.addon.mjs +1 -1
  12. package/dist/builtins/autotrack/index.js +1 -1
  13. package/dist/builtins/autotrack/index.mjs +1 -1
  14. package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js +2 -2
  15. package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs +2 -2
  16. package/dist/builtins/calendars/calendars.addon.js +1 -1
  17. package/dist/builtins/calendars/calendars.addon.mjs +1 -1
  18. package/dist/builtins/camera-grid/index.js +1 -1
  19. package/dist/builtins/camera-grid/index.mjs +1 -1
  20. package/dist/builtins/composer/composer.addon.js +2 -2
  21. package/dist/builtins/composer/composer.addon.mjs +2 -2
  22. package/dist/builtins/console-logging/index.js +1 -1
  23. package/dist/builtins/console-logging/index.mjs +1 -1
  24. package/dist/builtins/core-blocks/core-blocks.addon.js +2 -2
  25. package/dist/builtins/core-blocks/core-blocks.addon.mjs +2 -2
  26. package/dist/builtins/device-manager/device-manager.addon.js +2 -2
  27. package/dist/builtins/device-manager/device-manager.addon.mjs +2 -2
  28. package/dist/builtins/hub-forwarder/index.js +1 -1
  29. package/dist/builtins/hub-forwarder/index.mjs +1 -1
  30. package/dist/builtins/keychain/index.js +5 -5
  31. package/dist/builtins/keychain/index.mjs +4 -4
  32. package/dist/builtins/keychain/system-held-secrets.d.ts +2 -1
  33. package/dist/builtins/liveness-monitor/liveness-monitor.addon.js +1 -1
  34. package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs +1 -1
  35. package/dist/builtins/local-auth/local-auth.addon.js +12 -180
  36. package/dist/builtins/local-auth/local-auth.addon.mjs +7 -163
  37. package/dist/builtins/local-network/local-network.addon.js +2 -2
  38. package/dist/builtins/local-network/local-network.addon.mjs +2 -2
  39. package/dist/builtins/loki-logging/index.js +1 -1
  40. package/dist/builtins/loki-logging/index.mjs +1 -1
  41. package/dist/builtins/native-metrics/native-metrics.addon.js +1 -1
  42. package/dist/builtins/native-metrics/native-metrics.addon.mjs +1 -1
  43. package/dist/builtins/platform-probe/index.js +1 -1
  44. package/dist/builtins/platform-probe/index.mjs +1 -1
  45. package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js +1 -1
  46. package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs +1 -1
  47. package/dist/builtins/snapshot/index.js +1 -1
  48. package/dist/builtins/snapshot/index.mjs +1 -1
  49. package/dist/builtins/sqlite-storage/filesystem-storage.addon.js +1 -1
  50. package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs +1 -1
  51. package/dist/builtins/sqlite-storage/sqlite-settings.addon.js +0 -0
  52. package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs +0 -0
  53. package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js +1 -1
  54. package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs +1 -1
  55. package/dist/builtins/system-config/index.d.ts +1 -0
  56. package/dist/builtins/system-config/index.js +2 -0
  57. package/dist/builtins/system-config/index.mjs +2 -2
  58. package/dist/builtins/system-config/mesh-actions.d.ts +19 -0
  59. package/dist/builtins/system-config/system-config.addon.d.ts +46 -1
  60. package/dist/builtins/system-config/system-config.addon.js +87733 -11
  61. package/dist/builtins/system-config/system-config.addon.mjs +87693 -6
  62. package/dist/builtins/winston-logging/index.js +1 -1
  63. package/dist/builtins/winston-logging/index.mjs +1 -1
  64. package/dist/{child-cap-dispatch-BrMdKHfp.js → child-cap-dispatch-CqsXM79k.js} +2 -2
  65. package/dist/{child-cap-dispatch-WsYPNvnK.mjs → child-cap-dispatch-DgsAJDT1.mjs} +2 -2
  66. package/dist/{composition-sources-XqRX51db.mjs → composition-sources-B91DJLGR.mjs} +1 -1
  67. package/dist/{composition-sources-C6ZynCZ2.js → composition-sources-DQ0PZZXu.js} +1 -1
  68. package/dist/{cluster-secret-DhPdZ0VA.mjs → constants-4cKqLT_b.mjs} +23 -2
  69. package/dist/{cluster-secret-BEPLh3LL.js → constants-cBzlas-4.js} +82 -1
  70. package/dist/{dist-tnAO12ak.js → dist-Cf0yAy6y.js} +41 -1
  71. package/dist/{dist-CP5TTjwd.mjs → dist-D8XMuZCS.mjs} +30 -2
  72. package/dist/{event-loop-stall-monitor-WkssIXjq.mjs → event-loop-stall-monitor-RO35vF41.mjs} +1 -1
  73. package/dist/{event-loop-stall-monitor-9kR0sAPS.js → event-loop-stall-monitor-oQrkb_SD.js} +1 -1
  74. package/dist/index.js +291 -86048
  75. package/dist/index.mjs +513 -86302
  76. package/dist/{jwt-signing-key-Dgf8sIXY.js → jwt-signing-key-BTDLP6U5.js} +1 -1
  77. package/dist/{jwt-signing-key-CAbozwvF.mjs → jwt-signing-key-CnNafp3J.mjs} +1 -1
  78. package/dist/kernel/index.d.ts +6 -2
  79. package/dist/kernel/moleculer/agent-mesh-authenticator.d.ts +41 -0
  80. package/dist/kernel/moleculer/broker-factory.d.ts +19 -3
  81. package/dist/kernel/moleculer/mesh-access-middleware.d.ts +7 -2
  82. package/dist/kernel/moleculer/mesh-mtls/constants.d.ts +20 -0
  83. package/dist/kernel/moleculer/mesh-mtls/index.d.ts +10 -0
  84. package/dist/kernel/moleculer/mesh-mtls/mesh-ca-keeper.d.ts +55 -0
  85. package/dist/kernel/moleculer/mesh-mtls/mesh-ca.d.ts +45 -0
  86. package/dist/kernel/moleculer/mesh-mtls/mesh-clear-port.d.ts +56 -0
  87. package/dist/kernel/moleculer/mesh-mtls/mesh-crl.d.ts +16 -0
  88. package/dist/kernel/moleculer/mesh-mtls/mesh-enroll.d.ts +27 -0
  89. package/dist/kernel/moleculer/mesh-mtls/mesh-join-token.d.ts +55 -0
  90. package/dist/kernel/moleculer/mesh-mtls/mesh-tls-enabler.d.ts +5 -0
  91. package/dist/kernel/moleculer/mesh-mtls/tls-tcp-transporter.d.ts +125 -0
  92. package/dist/ms-DlIWNkkk.mjs +160 -0
  93. package/dist/ms-t68_FaqE.js +171 -0
  94. package/dist/{restore-archive-BV39nY46.mjs → restore-archive-CK-0QFkj.mjs} +2 -2
  95. package/dist/{restore-archive-CbvrfPuB.js → restore-archive-Cu2A2AsD.js} +3 -3
  96. package/dist/{retired-settings-keys-4bHpL-0m.js → retired-settings-keys-BhSpvEke.js} +1 -1
  97. package/dist/{retired-settings-keys-CzpIkwS-.mjs → retired-settings-keys-CgRxDKvT.mjs} +1 -1
  98. package/dist/tls-BWpwU-d5.js +1160 -0
  99. package/dist/tls-C2NT-Orr.mjs +949 -0
  100. package/dist/{tls-CljF057D.js → x509.es-BhTzcFhZ.js} +65 -1108
  101. package/dist/{tls-4cRH24Id.mjs → x509.es-Xf3K_brW.mjs} +40 -950
  102. package/package.json +3 -2
@@ -3,8 +3,9 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-tnAO12ak.js");
7
- const require_jwt_signing_key = require("../../jwt-signing-key-Dgf8sIXY.js");
6
+ const require_dist = require("../../dist-Cf0yAy6y.js");
7
+ const require_ms$1 = require("../../ms-t68_FaqE.js");
8
+ const require_jwt_signing_key = require("../../jwt-signing-key-BTDLP6U5.js");
8
9
  let node_crypto = require("node:crypto");
9
10
  node_crypto = require_chunk.__toESM(node_crypto);
10
11
  let crypto$1 = require("crypto");
@@ -1859,49 +1860,9 @@ function _hash(password, salt, callback, progressCallback) {
1859
1860
  }, progressCallback);
1860
1861
  }
1861
1862
  //#endregion
1862
- //#region ../../node_modules/safe-buffer/index.js
1863
- var require_safe_buffer = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, module) => {
1864
- /*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */
1865
- var buffer = require("buffer");
1866
- var Buffer = buffer.Buffer;
1867
- function copyProps(src, dst) {
1868
- for (var key in src) dst[key] = src[key];
1869
- }
1870
- if (Buffer.from && Buffer.alloc && Buffer.allocUnsafe && Buffer.allocUnsafeSlow) module.exports = buffer;
1871
- else {
1872
- copyProps(buffer, exports);
1873
- exports.Buffer = SafeBuffer;
1874
- }
1875
- function SafeBuffer(arg, encodingOrOffset, length) {
1876
- return Buffer(arg, encodingOrOffset, length);
1877
- }
1878
- SafeBuffer.prototype = Object.create(Buffer.prototype);
1879
- copyProps(Buffer, SafeBuffer);
1880
- SafeBuffer.from = function(arg, encodingOrOffset, length) {
1881
- if (typeof arg === "number") throw new TypeError("Argument must not be a number");
1882
- return Buffer(arg, encodingOrOffset, length);
1883
- };
1884
- SafeBuffer.alloc = function(size, fill, encoding) {
1885
- if (typeof size !== "number") throw new TypeError("Argument must be a number");
1886
- var buf = Buffer(size);
1887
- if (fill !== void 0) if (typeof encoding === "string") buf.fill(fill, encoding);
1888
- else buf.fill(fill);
1889
- else buf.fill(0);
1890
- return buf;
1891
- };
1892
- SafeBuffer.allocUnsafe = function(size) {
1893
- if (typeof size !== "number") throw new TypeError("Argument must be a number");
1894
- return Buffer(size);
1895
- };
1896
- SafeBuffer.allocUnsafeSlow = function(size) {
1897
- if (typeof size !== "number") throw new TypeError("Argument must be a number");
1898
- return buffer.SlowBuffer(size);
1899
- };
1900
- }));
1901
- //#endregion
1902
1863
  //#region ../../node_modules/jws/lib/data-stream.js
1903
1864
  var require_data_stream = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, module) => {
1904
- var Buffer = require_safe_buffer().Buffer;
1865
+ var Buffer = require_ms$1.require_safe_buffer().Buffer;
1905
1866
  var Stream$2 = require("stream");
1906
1867
  var util$3 = require("util");
1907
1868
  function DataStream(data) {
@@ -1964,7 +1925,7 @@ var require_param_bytes_for_alg = /* @__PURE__ */ require_chunk.__commonJSMin(((
1964
1925
  //#endregion
1965
1926
  //#region ../../node_modules/ecdsa-sig-formatter/src/ecdsa-sig-formatter.js
1966
1927
  var require_ecdsa_sig_formatter = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, module) => {
1967
- var Buffer = require_safe_buffer().Buffer;
1928
+ var Buffer = require_ms$1.require_safe_buffer().Buffer;
1968
1929
  var getParamBytesForAlg = require_param_bytes_for_alg();
1969
1930
  var MAX_OCTET = 128, CLASS_UNIVERSAL = 0, PRIMITIVE_BIT = 32, TAG_SEQ = 16, TAG_INT = 2, ENCODED_TAG_SEQ = TAG_SEQ | PRIMITIVE_BIT | CLASS_UNIVERSAL << 6, ENCODED_TAG_INT = TAG_INT | CLASS_UNIVERSAL << 6;
1970
1931
  function base64Url(base64) {
@@ -2081,7 +2042,7 @@ var require_buffer_equal_constant_time = /* @__PURE__ */ require_chunk.__commonJ
2081
2042
  //#endregion
2082
2043
  //#region ../../node_modules/jwa/index.js
2083
2044
  var require_jwa = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, module) => {
2084
- var Buffer = require_safe_buffer().Buffer;
2045
+ var Buffer = require_ms$1.require_safe_buffer().Buffer;
2085
2046
  var crypto$2 = require("crypto");
2086
2047
  var formatEcdsa = require_ecdsa_sig_formatter();
2087
2048
  var util$2 = require("util");
@@ -2267,7 +2228,7 @@ var require_tostring = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, mo
2267
2228
  //#endregion
2268
2229
  //#region ../../node_modules/jws/lib/sign-stream.js
2269
2230
  var require_sign_stream = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, module) => {
2270
- var Buffer = require_safe_buffer().Buffer;
2231
+ var Buffer = require_ms$1.require_safe_buffer().Buffer;
2271
2232
  var DataStream = require_data_stream();
2272
2233
  var jwa = require_jwa();
2273
2234
  var Stream$1 = require("stream");
@@ -2336,7 +2297,7 @@ var require_sign_stream = /* @__PURE__ */ require_chunk.__commonJSMin(((exports,
2336
2297
  //#endregion
2337
2298
  //#region ../../node_modules/jws/lib/verify-stream.js
2338
2299
  var require_verify_stream = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, module) => {
2339
- var Buffer = require_safe_buffer().Buffer;
2300
+ var Buffer = require_ms$1.require_safe_buffer().Buffer;
2340
2301
  var DataStream = require_data_stream();
2341
2302
  var jwa = require_jwa();
2342
2303
  var Stream = require("stream");
@@ -2529,127 +2490,9 @@ var require_TokenExpiredError = /* @__PURE__ */ require_chunk.__commonJSMin(((ex
2529
2490
  module.exports = TokenExpiredError;
2530
2491
  }));
2531
2492
  //#endregion
2532
- //#region ../../node_modules/ms/index.js
2533
- var require_ms = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, module) => {
2534
- /**
2535
- * Helpers.
2536
- */
2537
- var s = 1e3;
2538
- var m = s * 60;
2539
- var h = m * 60;
2540
- var d = h * 24;
2541
- var w = d * 7;
2542
- var y = d * 365.25;
2543
- /**
2544
- * Parse or format the given `val`.
2545
- *
2546
- * Options:
2547
- *
2548
- * - `long` verbose formatting [false]
2549
- *
2550
- * @param {String|Number} val
2551
- * @param {Object} [options]
2552
- * @throws {Error} throw an error if val is not a non-empty string or a number
2553
- * @return {String|Number}
2554
- * @api public
2555
- */
2556
- module.exports = function(val, options) {
2557
- options = options || {};
2558
- var type = typeof val;
2559
- if (type === "string" && val.length > 0) return parse(val);
2560
- else if (type === "number" && isFinite(val)) return options.long ? fmtLong(val) : fmtShort(val);
2561
- throw new Error("val is not a non-empty string or a valid number. val=" + JSON.stringify(val));
2562
- };
2563
- /**
2564
- * Parse the given `str` and return milliseconds.
2565
- *
2566
- * @param {String} str
2567
- * @return {Number}
2568
- * @api private
2569
- */
2570
- function parse(str) {
2571
- str = String(str);
2572
- if (str.length > 100) return;
2573
- var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(str);
2574
- if (!match) return;
2575
- var n = parseFloat(match[1]);
2576
- switch ((match[2] || "ms").toLowerCase()) {
2577
- case "years":
2578
- case "year":
2579
- case "yrs":
2580
- case "yr":
2581
- case "y": return n * y;
2582
- case "weeks":
2583
- case "week":
2584
- case "w": return n * w;
2585
- case "days":
2586
- case "day":
2587
- case "d": return n * d;
2588
- case "hours":
2589
- case "hour":
2590
- case "hrs":
2591
- case "hr":
2592
- case "h": return n * h;
2593
- case "minutes":
2594
- case "minute":
2595
- case "mins":
2596
- case "min":
2597
- case "m": return n * m;
2598
- case "seconds":
2599
- case "second":
2600
- case "secs":
2601
- case "sec":
2602
- case "s": return n * s;
2603
- case "milliseconds":
2604
- case "millisecond":
2605
- case "msecs":
2606
- case "msec":
2607
- case "ms": return n;
2608
- default: return;
2609
- }
2610
- }
2611
- /**
2612
- * Short format for `ms`.
2613
- *
2614
- * @param {Number} ms
2615
- * @return {String}
2616
- * @api private
2617
- */
2618
- function fmtShort(ms) {
2619
- var msAbs = Math.abs(ms);
2620
- if (msAbs >= d) return Math.round(ms / d) + "d";
2621
- if (msAbs >= h) return Math.round(ms / h) + "h";
2622
- if (msAbs >= m) return Math.round(ms / m) + "m";
2623
- if (msAbs >= s) return Math.round(ms / s) + "s";
2624
- return ms + "ms";
2625
- }
2626
- /**
2627
- * Long format for `ms`.
2628
- *
2629
- * @param {Number} ms
2630
- * @return {String}
2631
- * @api private
2632
- */
2633
- function fmtLong(ms) {
2634
- var msAbs = Math.abs(ms);
2635
- if (msAbs >= d) return plural(ms, msAbs, d, "day");
2636
- if (msAbs >= h) return plural(ms, msAbs, h, "hour");
2637
- if (msAbs >= m) return plural(ms, msAbs, m, "minute");
2638
- if (msAbs >= s) return plural(ms, msAbs, s, "second");
2639
- return ms + " ms";
2640
- }
2641
- /**
2642
- * Pluralization helper.
2643
- */
2644
- function plural(ms, msAbs, n, name) {
2645
- var isPlural = msAbs >= n * 1.5;
2646
- return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
2647
- }
2648
- }));
2649
- //#endregion
2650
2493
  //#region ../../node_modules/jsonwebtoken/lib/timespan.js
2651
2494
  var require_timespan = /* @__PURE__ */ require_chunk.__commonJSMin(((exports, module) => {
2652
- var ms = require_ms();
2495
+ var ms = require_ms$1.require_ms();
2653
2496
  module.exports = function(time, iat) {
2654
2497
  var timestamp = iat || Math.floor(Date.now() / 1e3);
2655
2498
  if (typeof time === "string") {
@@ -7250,7 +7093,7 @@ var AdminTokenManager = class {
7250
7093
  /**
7251
7094
  * @durable class=ledger owner=local-auth
7252
7095
  * write="one row per audited auth event: a second factor skipped from a trusted
7253
- * network, an admin token created / used / revoked"
7096
+ * network, an admin token created / used / revoked, a bulk revoke of credentials"
7254
7097
  * retention="the daily reap deletes rows older than 90 days"
7255
7098
  */
7256
7099
  var AUTH_AUDIT_COLLECTION = "auth_audit";
@@ -7288,7 +7131,8 @@ var AUTH_AUDIT_ACTIONS = [
7288
7131
  "second-factor-skipped",
7289
7132
  "admin-token-created",
7290
7133
  "admin-token-used",
7291
- "admin-token-revoked"
7134
+ "admin-token-revoked",
7135
+ "credentials-revoked"
7292
7136
  ];
7293
7137
  var RETENTION_MS = 90 * 864e5;
7294
7138
  var MAX_LIST = 500;
@@ -11303,15 +11147,3 @@ exports.attachUserManagementInternal = attachUserManagementInternal;
11303
11147
  exports.getUserManagementInternal = getUserManagementInternal;
11304
11148
  exports.isSettingsReadUnavailable = isSettingsReadUnavailable;
11305
11149
  exports.parseTokenExpiry = parseTokenExpiry;
11306
- Object.defineProperty(exports, "require_ms", {
11307
- enumerable: true,
11308
- get: function() {
11309
- return require_ms;
11310
- }
11311
- });
11312
- Object.defineProperty(exports, "require_safe_buffer", {
11313
- enumerable: true,
11314
- get: function() {
11315
- return require_safe_buffer;
11316
- }
11317
- });
@@ -1,6 +1,7 @@
1
1
  import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
2
- import { Vn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, r as ApiKeyRecordSchema, ur as BaseAddon, z as ScopedTokenSchema } from "../../dist-CP5TTjwd.mjs";
3
- import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CAbozwvF.mjs";
2
+ import { Vn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, r as ApiKeyRecordSchema, ur as BaseAddon, z as ScopedTokenSchema } from "../../dist-D8XMuZCS.mjs";
3
+ import { n as require_safe_buffer, t as require_ms } from "../../ms-DlIWNkkk.mjs";
4
+ import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CnNafp3J.mjs";
4
5
  import * as crypto$1 from "node:crypto";
5
6
  import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
6
7
  import nodeCrypto from "crypto";
@@ -1852,46 +1853,6 @@ function _hash(password, salt, callback, progressCallback) {
1852
1853
  }, progressCallback);
1853
1854
  }
1854
1855
  //#endregion
1855
- //#region ../../node_modules/safe-buffer/index.js
1856
- var require_safe_buffer = /* @__PURE__ */ __commonJSMin(((exports, module) => {
1857
- /*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> */
1858
- var buffer = __require("buffer");
1859
- var Buffer = buffer.Buffer;
1860
- function copyProps(src, dst) {
1861
- for (var key in src) dst[key] = src[key];
1862
- }
1863
- if (Buffer.from && Buffer.alloc && Buffer.allocUnsafe && Buffer.allocUnsafeSlow) module.exports = buffer;
1864
- else {
1865
- copyProps(buffer, exports);
1866
- exports.Buffer = SafeBuffer;
1867
- }
1868
- function SafeBuffer(arg, encodingOrOffset, length) {
1869
- return Buffer(arg, encodingOrOffset, length);
1870
- }
1871
- SafeBuffer.prototype = Object.create(Buffer.prototype);
1872
- copyProps(Buffer, SafeBuffer);
1873
- SafeBuffer.from = function(arg, encodingOrOffset, length) {
1874
- if (typeof arg === "number") throw new TypeError("Argument must not be a number");
1875
- return Buffer(arg, encodingOrOffset, length);
1876
- };
1877
- SafeBuffer.alloc = function(size, fill, encoding) {
1878
- if (typeof size !== "number") throw new TypeError("Argument must be a number");
1879
- var buf = Buffer(size);
1880
- if (fill !== void 0) if (typeof encoding === "string") buf.fill(fill, encoding);
1881
- else buf.fill(fill);
1882
- else buf.fill(0);
1883
- return buf;
1884
- };
1885
- SafeBuffer.allocUnsafe = function(size) {
1886
- if (typeof size !== "number") throw new TypeError("Argument must be a number");
1887
- return Buffer(size);
1888
- };
1889
- SafeBuffer.allocUnsafeSlow = function(size) {
1890
- if (typeof size !== "number") throw new TypeError("Argument must be a number");
1891
- return buffer.SlowBuffer(size);
1892
- };
1893
- }));
1894
- //#endregion
1895
1856
  //#region ../../node_modules/jws/lib/data-stream.js
1896
1857
  var require_data_stream = /* @__PURE__ */ __commonJSMin(((exports, module) => {
1897
1858
  var Buffer = require_safe_buffer().Buffer;
@@ -2522,124 +2483,6 @@ var require_TokenExpiredError = /* @__PURE__ */ __commonJSMin(((exports, module)
2522
2483
  module.exports = TokenExpiredError;
2523
2484
  }));
2524
2485
  //#endregion
2525
- //#region ../../node_modules/ms/index.js
2526
- var require_ms = /* @__PURE__ */ __commonJSMin(((exports, module) => {
2527
- /**
2528
- * Helpers.
2529
- */
2530
- var s = 1e3;
2531
- var m = s * 60;
2532
- var h = m * 60;
2533
- var d = h * 24;
2534
- var w = d * 7;
2535
- var y = d * 365.25;
2536
- /**
2537
- * Parse or format the given `val`.
2538
- *
2539
- * Options:
2540
- *
2541
- * - `long` verbose formatting [false]
2542
- *
2543
- * @param {String|Number} val
2544
- * @param {Object} [options]
2545
- * @throws {Error} throw an error if val is not a non-empty string or a number
2546
- * @return {String|Number}
2547
- * @api public
2548
- */
2549
- module.exports = function(val, options) {
2550
- options = options || {};
2551
- var type = typeof val;
2552
- if (type === "string" && val.length > 0) return parse(val);
2553
- else if (type === "number" && isFinite(val)) return options.long ? fmtLong(val) : fmtShort(val);
2554
- throw new Error("val is not a non-empty string or a valid number. val=" + JSON.stringify(val));
2555
- };
2556
- /**
2557
- * Parse the given `str` and return milliseconds.
2558
- *
2559
- * @param {String} str
2560
- * @return {Number}
2561
- * @api private
2562
- */
2563
- function parse(str) {
2564
- str = String(str);
2565
- if (str.length > 100) return;
2566
- var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(str);
2567
- if (!match) return;
2568
- var n = parseFloat(match[1]);
2569
- switch ((match[2] || "ms").toLowerCase()) {
2570
- case "years":
2571
- case "year":
2572
- case "yrs":
2573
- case "yr":
2574
- case "y": return n * y;
2575
- case "weeks":
2576
- case "week":
2577
- case "w": return n * w;
2578
- case "days":
2579
- case "day":
2580
- case "d": return n * d;
2581
- case "hours":
2582
- case "hour":
2583
- case "hrs":
2584
- case "hr":
2585
- case "h": return n * h;
2586
- case "minutes":
2587
- case "minute":
2588
- case "mins":
2589
- case "min":
2590
- case "m": return n * m;
2591
- case "seconds":
2592
- case "second":
2593
- case "secs":
2594
- case "sec":
2595
- case "s": return n * s;
2596
- case "milliseconds":
2597
- case "millisecond":
2598
- case "msecs":
2599
- case "msec":
2600
- case "ms": return n;
2601
- default: return;
2602
- }
2603
- }
2604
- /**
2605
- * Short format for `ms`.
2606
- *
2607
- * @param {Number} ms
2608
- * @return {String}
2609
- * @api private
2610
- */
2611
- function fmtShort(ms) {
2612
- var msAbs = Math.abs(ms);
2613
- if (msAbs >= d) return Math.round(ms / d) + "d";
2614
- if (msAbs >= h) return Math.round(ms / h) + "h";
2615
- if (msAbs >= m) return Math.round(ms / m) + "m";
2616
- if (msAbs >= s) return Math.round(ms / s) + "s";
2617
- return ms + "ms";
2618
- }
2619
- /**
2620
- * Long format for `ms`.
2621
- *
2622
- * @param {Number} ms
2623
- * @return {String}
2624
- * @api private
2625
- */
2626
- function fmtLong(ms) {
2627
- var msAbs = Math.abs(ms);
2628
- if (msAbs >= d) return plural(ms, msAbs, d, "day");
2629
- if (msAbs >= h) return plural(ms, msAbs, h, "hour");
2630
- if (msAbs >= m) return plural(ms, msAbs, m, "minute");
2631
- if (msAbs >= s) return plural(ms, msAbs, s, "second");
2632
- return ms + " ms";
2633
- }
2634
- /**
2635
- * Pluralization helper.
2636
- */
2637
- function plural(ms, msAbs, n, name) {
2638
- var isPlural = msAbs >= n * 1.5;
2639
- return Math.round(ms / n) + " " + name + (isPlural ? "s" : "");
2640
- }
2641
- }));
2642
- //#endregion
2643
2486
  //#region ../../node_modules/jsonwebtoken/lib/timespan.js
2644
2487
  var require_timespan = /* @__PURE__ */ __commonJSMin(((exports, module) => {
2645
2488
  var ms = require_ms();
@@ -7240,7 +7083,7 @@ var AdminTokenManager = class {
7240
7083
  /**
7241
7084
  * @durable class=ledger owner=local-auth
7242
7085
  * write="one row per audited auth event: a second factor skipped from a trusted
7243
- * network, an admin token created / used / revoked"
7086
+ * network, an admin token created / used / revoked, a bulk revoke of credentials"
7244
7087
  * retention="the daily reap deletes rows older than 90 days"
7245
7088
  */
7246
7089
  var AUTH_AUDIT_COLLECTION = "auth_audit";
@@ -7278,7 +7121,8 @@ var AUTH_AUDIT_ACTIONS = [
7278
7121
  "second-factor-skipped",
7279
7122
  "admin-token-created",
7280
7123
  "admin-token-used",
7281
- "admin-token-revoked"
7124
+ "admin-token-revoked",
7125
+ "credentials-revoked"
7282
7126
  ];
7283
7127
  var RETENTION_MS = 90 * 864e5;
7284
7128
  var MAX_LIST = 500;
@@ -11273,4 +11117,4 @@ var LocalAuthAddon = class extends BaseAddon {
11273
11117
  }
11274
11118
  };
11275
11119
  //#endregion
11276
- export { LocalAuthAddon, LocalAuthAddon as default, isSettingsReadUnavailable as _, attachUserManagementInternal as a, ApiKeyManager as b, ADMIN_TOKEN_MAX_LIFETIME_MS as c, LoginSessionManager as d, REFRESH_TOKEN_PREFIX as f, SettingsReadUnavailableError as g, parseTokenExpiry as h, USER_MANAGEMENT_INTERNAL as i, ADMIN_TOKEN_PREFIX as l, AuthManager as m, FIRST_BOOT_ADMIN_USERNAME as n, getUserManagementInternal as o, ScopedTokenManager as p, UserManager as r, AuthAuditLog as s, FIRST_BOOT_ADMIN_PASSWORD as t, AdminTokenManager as u, require_ms as v, require_safe_buffer as y };
11120
+ export { LocalAuthAddon, LocalAuthAddon as default, isSettingsReadUnavailable as _, attachUserManagementInternal as a, ADMIN_TOKEN_MAX_LIFETIME_MS as c, LoginSessionManager as d, REFRESH_TOKEN_PREFIX as f, SettingsReadUnavailableError as g, parseTokenExpiry as h, USER_MANAGEMENT_INTERNAL as i, ADMIN_TOKEN_PREFIX as l, AuthManager as m, FIRST_BOOT_ADMIN_USERNAME as n, getUserManagementInternal as o, ScopedTokenManager as p, UserManager as r, AuthAuditLog as s, FIRST_BOOT_ADMIN_PASSWORD as t, AdminTokenManager as u, ApiKeyManager as v };
@@ -1,7 +1,7 @@
1
1
  Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
2
2
  const require_chunk = require("../../chunk-Cek0wNdY.js");
3
- const require_dist = require("../../dist-tnAO12ak.js");
4
- const require_tls = require("../../tls-CljF057D.js");
3
+ const require_dist = require("../../dist-Cf0yAy6y.js");
4
+ const require_tls = require("../../tls-BWpwU-d5.js");
5
5
  let zod = require("zod");
6
6
  let node_net = require("node:net");
7
7
  let node_os = require("node:os");
@@ -1,5 +1,5 @@
1
- import { Bt as isDefaultAppConnectionEndpoint, Dn as resolveNotificationTapAddress, Lt as isAppLinkBase, Un as validateCustomAddress, Xt as localNetworkCapability, bn as resolveAppConnections, ei as EventCategory, pn as pickAppLinkHub, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ur as BaseAddon, wn as resolveHubAddressRoles } from "../../dist-CP5TTjwd.mjs";
2
- import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-4cRH24Id.mjs";
1
+ import { Bt as isDefaultAppConnectionEndpoint, Dn as resolveNotificationTapAddress, Lt as isAppLinkBase, Un as validateCustomAddress, Xt as localNetworkCapability, bn as resolveAppConnections, ni as EventCategory, pn as pickAppLinkHub, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ur as BaseAddon, wn as resolveHubAddressRoles } from "../../dist-D8XMuZCS.mjs";
2
+ import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-C2NT-Orr.mjs";
3
3
  import { z } from "zod";
4
4
  import { isIP } from "node:net";
5
5
  import * as os from "node:os";
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-tnAO12ak.js");
6
+ const require_dist = require("../../dist-Cf0yAy6y.js");
7
7
  //#region src/builtins/loki-logging/loki-payload.ts
8
8
  /**
9
9
  * Loki rejects a label name that is not a valid Prometheus label
@@ -1,4 +1,4 @@
1
- import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-CP5TTjwd.mjs";
1
+ import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
2
2
  //#region src/builtins/loki-logging/loki-payload.ts
3
3
  /**
4
4
  * Loki rejects a label name that is not a valid Prometheus label
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-tnAO12ak.js");
6
+ const require_dist = require("../../dist-Cf0yAy6y.js");
7
7
  const require_proc_stat = require("../../proc-stat-DL-WUOhl.js");
8
8
  let node_fs_promises = require("node:fs/promises");
9
9
  let node_os = require("node:os");
@@ -1,4 +1,4 @@
1
- import { Nt as foldSnapshotByFunction, Tr as createEvent, an as metricsProviderCapability, ei as EventCategory, lr as errMsg, ur as BaseAddon, vn as reducePoints, xn as resolveBucketMs } from "../../dist-CP5TTjwd.mjs";
1
+ import { Nt as foldSnapshotByFunction, Tr as createEvent, an as metricsProviderCapability, lr as errMsg, ni as EventCategory, ur as BaseAddon, vn as reducePoints, xn as resolveBucketMs } from "../../dist-D8XMuZCS.mjs";
2
2
  import { a as parseProcStat, i as nodeProcReader, n as elapsedSecSince, o as parseProcStatusRss, r as lifetimeCpuPercent, t as commandFromCmdline } from "../../proc-stat-CbC55Kqi.mjs";
3
3
  import { access, readFile, readdir } from "node:fs/promises";
4
4
  import * as os from "node:os";
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-tnAO12ak.js");
6
+ const require_dist = require("../../dist-Cf0yAy6y.js");
7
7
  let node_os = require("node:os");
8
8
  node_os = require_chunk.__toESM(node_os);
9
9
  let node_fs = require("node:fs");
@@ -1,5 +1,5 @@
1
1
  import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
2
- import { Dr as emitReadiness, ei as EventCategory, hn as platformProbeCapability, jn as scoreRuntimes, lr as errMsg, ur as BaseAddon, wt as enumerateInferenceDevices } from "../../dist-CP5TTjwd.mjs";
2
+ import { hn as platformProbeCapability, jn as scoreRuntimes, kr as emitReadiness, lr as errMsg, ni as EventCategory, ur as BaseAddon, wt as enumerateInferenceDevices } from "../../dist-D8XMuZCS.mjs";
3
3
  import * as os from "node:os";
4
4
  import * as fs from "node:fs";
5
5
  import { execFile } from "node:child_process";
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-tnAO12ak.js");
6
+ const require_dist = require("../../dist-Cf0yAy6y.js");
7
7
  //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
8
8
  /**
9
9
  * Reconcile the durable `enabledProviders` set against authoritative
@@ -1,4 +1,4 @@
1
- import { ei as EventCategory, ur as BaseAddon } from "../../dist-CP5TTjwd.mjs";
1
+ import { ni as EventCategory, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
2
2
  //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
3
3
  /**
4
4
  * Reconcile the durable `enabledProviders` set against authoritative
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-tnAO12ak.js");
6
+ const require_dist = require("../../dist-Cf0yAy6y.js");
7
7
  const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
8
8
  let zod = require("zod");
9
9
  let node_crypto = require("node:crypto");
@@ -1,4 +1,4 @@
1
- import { Bn as streamQualityLabel, Pn as snapshotCapability, Q as batteryCapability, Rr as nodePin, Z as bareAddonId, a as BatteryStatusSchema, cr as DeviceType, ei as EventCategory, in as memoizePinnedFfmpeg, lr as errMsg, or as DeviceFeature, ur as BaseAddon, vt as deriveBatteryPresence } from "../../dist-CP5TTjwd.mjs";
1
+ import { Bn as streamQualityLabel, Br as nodePin, Pn as snapshotCapability, Q as batteryCapability, Z as bareAddonId, a as BatteryStatusSchema, cr as DeviceType, in as memoizePinnedFfmpeg, lr as errMsg, ni as EventCategory, or as DeviceFeature, ur as BaseAddon, vt as deriveBatteryPresence } from "../../dist-D8XMuZCS.mjs";
2
2
  import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
3
3
  import { z } from "zod";
4
4
  import { randomUUID } from "node:crypto";
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-tnAO12ak.js");
6
+ const require_dist = require("../../dist-Cf0yAy6y.js");
7
7
  let node_crypto = require("node:crypto");
8
8
  let node_fs_promises = require("node:fs/promises");
9
9
  let node_path = require("node:path");
@@ -1,4 +1,4 @@
1
- import { Mt as filesystemBrowseCapability, Rn as storageProviderCapability, ur as BaseAddon } from "../../dist-CP5TTjwd.mjs";
1
+ import { Mt as filesystemBrowseCapability, Rn as storageProviderCapability, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
2
2
  import { randomUUID } from "node:crypto";
3
3
  import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
4
4
  import * as path$1 from "node:path";
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-tnAO12ak.js");
6
+ const require_dist = require("../../dist-Cf0yAy6y.js");
7
7
  const require_hub_cap_forward = require("../../hub-cap-forward-W8oEm4ME.js");
8
8
  let zod = require("zod");
9
9
  let node_crypto = require("node:crypto");
@@ -1,4 +1,4 @@
1
- import { $r as transformSecretWrite, B as StorageCleanupJobSchema, Br as parseJsonObject, Cr as collectSecretConfigKeys, Fn as storageCapability, Fr as isSecretMarker, Ft as gbToBytes, Gr as resolveSecretMarkers, H as StorageLocationTypeSchema, In as storageMigrationCapability, Jr as secretTreeFromPaths, Jt as legacyModeOf, Mn as settingsStoreCapability, O as LegacyStorageLocationDefaultSchema, Ot as evictionPolicyOfLocation, Tn as resolveLocationMode, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Vt as isLocationEnabled, ei as EventCategory, mr as REDACTED_SECRET, nn as mayReadLocation, on as modeMayWrite, qn as withLocationMode, rn as mayWriteToLocation, ur as BaseAddon } from "../../dist-CP5TTjwd.mjs";
1
+ import { B as StorageCleanupJobSchema, Cr as collectSecretConfigKeys, Fn as storageCapability, Ft as gbToBytes, H as StorageLocationTypeSchema, Hr as parseJsonObject, In as storageMigrationCapability, Jt as legacyModeOf, Lr as isSecretMarker, Mn as settingsStoreCapability, O as LegacyStorageLocationDefaultSchema, Ot as evictionPolicyOfLocation, Tn as resolveLocationMode, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Vt as isLocationEnabled, Xr as secretTreeFromPaths, mr as REDACTED_SECRET, ni as EventCategory, nn as mayReadLocation, on as modeMayWrite, qn as withLocationMode, qr as resolveSecretMarkers, rn as mayWriteToLocation, ti as transformSecretWrite, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
2
2
  import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-CDiN1p98.mjs";
3
3
  import { z } from "zod";
4
4
  import { randomUUID } from "node:crypto";
@@ -1 +1,2 @@
1
1
  export { SystemConfigAddon, default } from './system-config.addon.js';
2
+ export { systemConfigMeshActions, systemConfigMeshActions as customActions, } from './mesh-actions.js';
@@ -5,4 +5,6 @@ Object.defineProperties(exports, {
5
5
  require("../../chunk-Cek0wNdY.js");
6
6
  const require_builtins_system_config_system_config_addon = require("./system-config.addon.js");
7
7
  exports.SystemConfigAddon = require_builtins_system_config_system_config_addon.SystemConfigAddon;
8
+ exports.customActions = require_builtins_system_config_system_config_addon.systemConfigMeshActions;
8
9
  exports.default = require_builtins_system_config_system_config_addon.SystemConfigAddon;
10
+ exports.systemConfigMeshActions = require_builtins_system_config_system_config_addon.systemConfigMeshActions;
@@ -1,2 +1,2 @@
1
- import { SystemConfigAddon } from "./system-config.addon.mjs";
2
- export { SystemConfigAddon, SystemConfigAddon as default };
1
+ import { SystemConfigAddon, t as systemConfigMeshActions } from "./system-config.addon.mjs";
2
+ export { SystemConfigAddon, SystemConfigAddon as default, systemConfigMeshActions as customActions, systemConfigMeshActions };