@camstack/system 1.2.383 → 1.2.384

package/dist/addon-runner.js

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-BD8fhJ1b.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-CqsXM79k.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/addon-runner.mjs

@@ -1,4 +1,4 @@
-import { Ft as installManifestNativeDeps, H as createUdsLoggerWithControl, It as resolveAddonClass, St as validateProviderRegistrations, U as LocalChildClient, _n as startRunnerHeapWatch, _t as getWorkerNativeCapProvider, bt as setWorkerNativeCapsChangeListener, f as installManifestSystemDeps, g as createUdsAddonContext, i as killOwnRunnerGroupAfterParentLoss, in as RUNNER_RSS_BUDGET_ENV, kn as emitHeapDiagnosticReport, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, vt as getWorkerNativeCapSnapshot } from "./child-cap-dispatch-C68N2a6Y.mjs";
+import { Ft as installManifestNativeDeps, H as createUdsLoggerWithControl, It as resolveAddonClass, St as validateProviderRegistrations, U as LocalChildClient, _n as startRunnerHeapWatch, _t as getWorkerNativeCapProvider, bt as setWorkerNativeCapsChangeListener, f as installManifestSystemDeps, g as createUdsAddonContext, i as killOwnRunnerGroupAfterParentLoss, in as RUNNER_RSS_BUDGET_ENV, kn as emitHeapDiagnosticReport, n as createChildCapDispatch, p as installManifestPythonDeps, u as startRunnerParentDeathWatchdog, vt as getWorkerNativeCapSnapshot } from "./child-cap-dispatch-DgsAJDT1.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { register } from "node:module";
 import * as path$1 from "node:path";

package/dist/addon-utils.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("./chunk-Cek0wNdY.js");
-const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-Dk28EF8B.js");
+const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-oQrkb_SD.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
 const require_snapshot_courtesy = require("./snapshot-courtesy-D_C5-nC0.js");
 exports.COURTESY_DEFAULT_WIDTH = require_snapshot_courtesy.COURTESY_DEFAULT_WIDTH;

package/dist/addon-utils.mjs

@@ -1,4 +1,4 @@
-import { C as resolveFormatRevision, S as isModelDownloaded, a as createFileDataPlaneHandler, b as getModelFilePath, c as parseRangeHeader, d as ModelDownloadService, f as ModelDownloadHttpError, g as downloadFile, h as deleteModelFromDisk, i as startEventLoopStallMonitor, m as collectModelFiles, n as STALL_TICK_MS, o as contentTypeFor, p as adoptModelRevisions, r as attributeStall, t as STALL_REPORT_MS, v as ensureModel, x as isModelDownloadHttpError } from "./event-loop-stall-monitor-BeeWMnyT.mjs";
+import { C as resolveFormatRevision, S as isModelDownloaded, a as createFileDataPlaneHandler, b as getModelFilePath, c as parseRangeHeader, d as ModelDownloadService, f as ModelDownloadHttpError, g as downloadFile, h as deleteModelFromDisk, i as startEventLoopStallMonitor, m as collectModelFiles, n as STALL_TICK_MS, o as contentTypeFor, p as adoptModelRevisions, r as attributeStall, t as STALL_REPORT_MS, v as ensureModel, x as isModelDownloadHttpError } from "./event-loop-stall-monitor-RO35vF41.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg, t as COURTESY_DEFAULT_WIDTH } from "./snapshot-courtesy-CyFs1M3I.mjs";
 export { COURTESY_DEFAULT_WIDTH, CustomActionRegistry, ModelDownloadHttpError, ModelDownloadService, STALL_REPORT_MS, STALL_TICK_MS, adoptModelRevisions, attributeStall, collectModelFiles, contentTypeFor, courtesyCacheKey, createFileDataPlaneHandler, deleteModelFromDisk, downloadFile, ensureModel, getModelFilePath, isModelDownloadHttpError, isModelDownloaded, parseRangeHeader, renderCourtesyJpeg, renderCourtesyOverlayJpeg, resolveFormatRevision, startEventLoopStallMonitor };

package/dist/auth/auth-audit-log.d.ts

@@ -2,7 +2,7 @@ import { IScopedLogger, SettingsStoreClient } from '@camstack/types';
 /**
  * @durable class=ledger owner=local-auth
  *   write="one row per audited auth event: a second factor skipped from a trusted
- *     network, an admin token created / used / revoked"
+ *     network, an admin token created / used / revoked, a bulk revoke of credentials"
  *   retention="the daily reap deletes rows older than 90 days"
  */
 export declare const AUTH_AUDIT_COLLECTION = "auth_audit";
@@ -27,7 +27,7 @@ export declare const AUTH_AUDIT_COLUMNS: ({
     primaryKey?: undefined;
     notNull?: undefined;
 })[];
-export declare const AUTH_AUDIT_ACTIONS: readonly ["second-factor-skipped", "admin-token-created", "admin-token-used", "admin-token-revoked"];
+export declare const AUTH_AUDIT_ACTIONS: readonly ["second-factor-skipped", "admin-token-created", "admin-token-used", "admin-token-revoked", "credentials-revoked"];
 export type AuthAuditAction = (typeof AUTH_AUDIT_ACTIONS)[number];
 export interface AuthAuditEvent {
     readonly action: AuthAuditAction;

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { G as addonPagesCapability, lr as errMsg, ni as EventCategory, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { G as addonPagesCapability, lr as errMsg, ni as EventCategory, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { lr as errMsg, ni as EventCategory, q as addonWidgetsCapability, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { lr as errMsg, ni as EventCategory, q as addonWidgetsCapability, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { J as alertsCapability, Tr as createEvent, lr as errMsg, n as AlertSchema, ni as EventCategory, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { J as alertsCapability, Tr as createEvent, lr as errMsg, n as AlertSchema, ni as EventCategory, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Pr as isEvent, S as FIRST_LEVEL_MACRO_CLASSES, Z as bareAddonId, _n as ptzAutotrackCapability, lr as errMsg, ni as EventCategory, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { Pr as isEvent, S as FIRST_LEVEL_MACRO_CLASSES, Z as bareAddonId, _n as ptzAutotrackCapability, lr as errMsg, ni as EventCategory, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
-const require_restore_archive = require("../../restore-archive-C5f9yX90.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
+const require_restore_archive = require("../../restore-archive-Cu2A2AsD.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,5 +1,5 @@
-import { $r as toNodeId, Br as nodePin, Ln as storageOccupancyCapability, X as backupCapability, ni as EventCategory, rn as mayWriteToLocation, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
-import { a as BackupSnapshotRefusedError, c as BackupKeyFormatError, d as generateBackupKeyPair, f as parseBackupPublicKey, i as BackupCancelledError, n as precheckRestoreKey, o as SystemBackupService, p as parseBackupSecretKey, r as prepareRestoreArchive, u as ENCRYPTED_BACKUP_SUFFIX } from "../../restore-archive-CZRtI1k9.mjs";
+import { $r as toNodeId, Br as nodePin, Ln as storageOccupancyCapability, X as backupCapability, ni as EventCategory, rn as mayWriteToLocation, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
+import { a as BackupSnapshotRefusedError, c as BackupKeyFormatError, d as generateBackupKeyPair, f as parseBackupPublicKey, i as BackupCancelledError, n as precheckRestoreKey, o as SystemBackupService, p as parseBackupSecretKey, r as prepareRestoreArchive, u as ENCRYPTED_BACKUP_SUFFIX } from "../../restore-archive-CK-0QFkj.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { p as CalendarPreferencesSchema, tt as calendarsCapability, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { p as CalendarPreferencesSchema, tt as calendarsCapability, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { Mr as hydrateSchema, N as MOTION_CLOSE_AFTER_MS, Pn as snapshotCapability, Tr as createEvent, Yn as buildFfmpegArgs, b as DeclaredDevices, cr as DeviceType, ht as declarationOwnerNodeId, i as BaseDevice, in as memoizePinnedFfmpeg, lr as errMsg, ni as EventCategory, nt as cameraGridLayoutCapability, or as DeviceFeature, sn as motionCapability, ur as BaseAddon, y as DERIVED_CAMERA_SILENCED_CAP_NAMES, zn as streamCatalogCapability } from "../../dist-osl3bkF0.mjs";
+import { Mr as hydrateSchema, N as MOTION_CLOSE_AFTER_MS, Pn as snapshotCapability, Tr as createEvent, Yn as buildFfmpegArgs, b as DeclaredDevices, cr as DeviceType, ht as declarationOwnerNodeId, i as BaseDevice, in as memoizePinnedFfmpeg, lr as errMsg, ni as EventCategory, nt as cameraGridLayoutCapability, or as DeviceFeature, sn as motionCapability, ur as BaseAddon, y as DERIVED_CAMERA_SILENCED_CAP_NAMES, zn as streamCatalogCapability } from "../../dist-D8XMuZCS.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
-const require_composition_sources = require("../../composition-sources-ChpT_Yw4.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
+const require_composition_sources = require("../../composition-sources-DQ0PZZXu.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildCapabilityLookup, $n as compositionFeatureEnabled, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Jn as COMPOSER_ADDON_ID, Qn as composedDeviceStableId, Tr as createEvent, Xn as cloneStatefulExpressionMemory, Zn as composedDeviceRef, ar as toExpressionValue, at as compositionFieldKey, b as DeclaredDevices, cr as DeviceType, er as compositionItemFieldPath, i as BaseDevice, ir as disarmRoseMemory, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as errMsg, mn as planComposition, ni as EventCategory, nr as compositionSourceKey, rr as createStatefulExpressionMemory, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSliceKey, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-DM7Ft_tp.mjs";
+import { $ as buildCapabilityLookup, $n as compositionFeatureEnabled, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Jn as COMPOSER_ADDON_ID, Qn as composedDeviceStableId, Tr as createEvent, Xn as cloneStatefulExpressionMemory, Zn as composedDeviceRef, ar as toExpressionValue, at as compositionFieldKey, b as DeclaredDevices, cr as DeviceType, er as compositionItemFieldPath, i as BaseDevice, ir as disarmRoseMemory, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as errMsg, mn as planComposition, ni as EventCategory, nr as compositionSourceKey, rr as createStatefulExpressionMemory, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSliceKey, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-B91DJLGR.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
-const require_composition_sources = require("../../composition-sources-ChpT_Yw4.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
+const require_composition_sources = require("../../composition-sources-DQ0PZZXu.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildCapabilityLookup, Cn as resolveCoreBlockFiles, Hn as validateComposition, Mr as hydrateSchema, Sn as resolveCoreBlockEntry, Zn as composedDeviceRef, b as DeclaredDevices, cn as normalizeCoreBlockWrite, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, lr as errMsg, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, mn as planComposition, nr as compositionSourceKey, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, ur as BaseAddon, ut as coreBlockSourceKind, yn as replacedFieldKeys, yt as describeComposableCaps } from "../../dist-osl3bkF0.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-DM7Ft_tp.mjs";
+import { $ as buildCapabilityLookup, Cn as resolveCoreBlockFiles, Hn as validateComposition, Mr as hydrateSchema, Sn as resolveCoreBlockEntry, Zn as composedDeviceRef, b as DeclaredDevices, cn as normalizeCoreBlockWrite, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, lr as errMsg, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, mn as planComposition, nr as compositionSourceKey, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID, ur as BaseAddon, ut as coreBlockSourceKind, yn as replacedFieldKeys, yt as describeComposableCaps } from "../../dist-D8XMuZCS.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-B91DJLGR.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-WLrbzdPR.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-BhSpvEke.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { C as FieldClaimModeSchema, Ct as deviceStatusCapability, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Lr as isSecretMarker, Nn as siteZoneKey, Nr as isDeviceConfigCap, On as runtimeStatePolicyFor, Pt as formatMinutes, Qr as sleep$1, R as STREAM_PROFILE_META, Rr as isSecretMarkerLike, St as deviceStateCapability, Tt as enumerateItemArrayFields, Xr as secretTreeFromPaths, Zt as locationIconKey, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as DeviceType, ei as toSecretFieldView, et as buildStreamParamsConfigSchema, fn as parseStreamParamsFormPatch, ft as createDeviceExtensionProvider, j as MINUTES_PER_DAY, k as LocationIconIdSchema, kt as expandContainer, ln as normalizeUnit, lr as errMsg, ni as EventCategory, o as CAMERA_SWITCH_ORDER, or as DeviceFeature, qr as resolveSecretMarkers, qt as legacyAutoLinkIds, sr as DeviceRole, t as ALL_CAPABILITY_DEFINITIONS, ti as transformSecretWrite, ur as BaseAddon, v as DAY_NAMES, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimSchema, wr as collectZodSecretPaths, x as DeviceStatusSchema, xt as deviceManagerCapability } from "../../dist-osl3bkF0.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-LuDd4y3M.mjs";
+import { C as FieldClaimModeSchema, Ct as deviceStatusCapability, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Lr as isSecretMarker, Nn as siteZoneKey, Nr as isDeviceConfigCap, On as runtimeStatePolicyFor, Pt as formatMinutes, Qr as sleep$1, R as STREAM_PROFILE_META, Rr as isSecretMarkerLike, St as deviceStateCapability, Tt as enumerateItemArrayFields, Xr as secretTreeFromPaths, Zt as locationIconKey, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as DeviceType, ei as toSecretFieldView, et as buildStreamParamsConfigSchema, fn as parseStreamParamsFormPatch, ft as createDeviceExtensionProvider, j as MINUTES_PER_DAY, k as LocationIconIdSchema, kt as expandContainer, ln as normalizeUnit, lr as errMsg, ni as EventCategory, o as CAMERA_SWITCH_ORDER, or as DeviceFeature, qr as resolveSecretMarkers, qt as legacyAutoLinkIds, sr as DeviceRole, t as ALL_CAPABILITY_DEFINITIONS, ti as transformSecretWrite, ur as BaseAddon, v as DAY_NAMES, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimSchema, wr as collectZodSecretPaths, x as DeviceStatusSchema, xt as deviceManagerCapability } from "../../dist-D8XMuZCS.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CgRxDKvT.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-WI6z7JBo.js");
-const require_constants = require("../../constants-CDpry1_T.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-BTDLP6U5.js");
+const require_constants = require("../../constants-cBzlas-4.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/keychain/index.mjs

@@ -1,6 +1,6 @@
-import { E as KEYCHAIN_RESET_TRIGGER_ACTOR, Gt as keychainAdminCapability, Kt as keychainCapability, Vr as normalizeSecretOwner, Wr as parseSecretRef, jr as formatSecretScope, ni as EventCategory, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
-import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-MQLxLfgF.mjs";
-import { m as CLUSTER_SECRET_SETTINGS_KEY, o as MESH_CA_KEY_REF } from "../../constants-e3mCa1jG.mjs";
+import { E as KEYCHAIN_RESET_TRIGGER_ACTOR, Gt as keychainAdminCapability, Kt as keychainCapability, Vr as normalizeSecretOwner, Wr as parseSecretRef, jr as formatSecretScope, ni as EventCategory, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
+import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CnNafp3J.mjs";
+import { m as CLUSTER_SECRET_SETTINGS_KEY, o as MESH_CA_KEY_REF } from "../../constants-4cKqLT_b.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { I as RecordingStatusSchema, P as RECORDING_SOURCE_CAMSTACK_ADDON, Tr as createEvent, lr as errMsg, ni as EventCategory, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { I as RecordingStatusSchema, P as RECORDING_SOURCE_CAMSTACK_ADDON, Tr as createEvent, lr as errMsg, ni as EventCategory, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_ms$1 = require("../../ms-t68_FaqE.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-WI6z7JBo.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-BTDLP6U5.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");
@@ -7093,7 +7093,7 @@ var AdminTokenManager = class {
 /**
 * @durable class=ledger owner=local-auth
 *   write="one row per audited auth event: a second factor skipped from a trusted
-*     network, an admin token created / used / revoked"
+*     network, an admin token created / used / revoked, a bulk revoke of credentials"
 *   retention="the daily reap deletes rows older than 90 days"
 */
 var AUTH_AUDIT_COLLECTION = "auth_audit";
@@ -7131,7 +7131,8 @@ var AUTH_AUDIT_ACTIONS = [
 	"second-factor-skipped",
 	"admin-token-created",
 	"admin-token-used",
-	"admin-token-revoked"
+	"admin-token-revoked",
+	"credentials-revoked"
 ];
 var RETENTION_MS = 90 * 864e5;
 var MAX_LIST = 500;

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,7 +1,7 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Vn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, r as ApiKeyRecordSchema, ur as BaseAddon, z as ScopedTokenSchema } from "../../dist-osl3bkF0.mjs";
+import { Vn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, r as ApiKeyRecordSchema, ur as BaseAddon, z as ScopedTokenSchema } from "../../dist-D8XMuZCS.mjs";
 import { n as require_safe_buffer, t as require_ms } from "../../ms-DlIWNkkk.mjs";
-import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-MQLxLfgF.mjs";
+import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CnNafp3J.mjs";
 import * as crypto$1 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";
@@ -7083,7 +7083,7 @@ var AdminTokenManager = class {
 /**
 * @durable class=ledger owner=local-auth
 *   write="one row per audited auth event: a second factor skipped from a trusted
-*     network, an admin token created / used / revoked"
+*     network, an admin token created / used / revoked, a bulk revoke of credentials"
 *   retention="the daily reap deletes rows older than 90 days"
 */
 var AUTH_AUDIT_COLLECTION = "auth_audit";
@@ -7121,7 +7121,8 @@ var AUTH_AUDIT_ACTIONS = [
 	"second-factor-skipped",
 	"admin-token-created",
 	"admin-token-used",
-	"admin-token-revoked"
+	"admin-token-revoked",
+	"credentials-revoked"
 ];
 var RETENTION_MS = 90 * 864e5;
 var MAX_LIST = 500;

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_tls = require("../../tls-BWpwU-d5.js");
 let zod = require("zod");
 let node_net = require("node:net");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Bt as isDefaultAppConnectionEndpoint, Dn as resolveNotificationTapAddress, Lt as isAppLinkBase, Un as validateCustomAddress, Xt as localNetworkCapability, bn as resolveAppConnections, ni as EventCategory, pn as pickAppLinkHub, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ur as BaseAddon, wn as resolveHubAddressRoles } from "../../dist-osl3bkF0.mjs";
+import { Bt as isDefaultAppConnectionEndpoint, Dn as resolveNotificationTapAddress, Lt as isAppLinkBase, Un as validateCustomAddress, Xt as localNetworkCapability, bn as resolveAppConnections, ni as EventCategory, pn as pickAppLinkHub, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ur as BaseAddon, wn as resolveHubAddressRoles } from "../../dist-D8XMuZCS.mjs";
 import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-C2NT-Orr.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { Qt as logDestinationCapability, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_proc_stat = require("../../proc-stat-DL-WUOhl.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Nt as foldSnapshotByFunction, Tr as createEvent, an as metricsProviderCapability, lr as errMsg, ni as EventCategory, ur as BaseAddon, vn as reducePoints, xn as resolveBucketMs } from "../../dist-osl3bkF0.mjs";
+import { Nt as foldSnapshotByFunction, Tr as createEvent, an as metricsProviderCapability, lr as errMsg, ni as EventCategory, ur as BaseAddon, vn as reducePoints, xn as resolveBucketMs } from "../../dist-D8XMuZCS.mjs";
 import { a as parseProcStat, i as nodeProcReader, n as elapsedSecSince, o as parseProcStatusRss, r as lifetimeCpuPercent, t as commandFromCmdline } from "../../proc-stat-CbC55Kqi.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as os from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { hn as platformProbeCapability, jn as scoreRuntimes, kr as emitReadiness, lr as errMsg, ni as EventCategory, ur as BaseAddon, wt as enumerateInferenceDevices } from "../../dist-osl3bkF0.mjs";
+import { hn as platformProbeCapability, jn as scoreRuntimes, kr as emitReadiness, lr as errMsg, ni as EventCategory, ur as BaseAddon, wt as enumerateInferenceDevices } from "../../dist-D8XMuZCS.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { ni as EventCategory, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { ni as EventCategory, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Bn as streamQualityLabel, Br as nodePin, Pn as snapshotCapability, Q as batteryCapability, Z as bareAddonId, a as BatteryStatusSchema, cr as DeviceType, in as memoizePinnedFfmpeg, lr as errMsg, ni as EventCategory, or as DeviceFeature, ur as BaseAddon, vt as deriveBatteryPresence } from "../../dist-osl3bkF0.mjs";
+import { Bn as streamQualityLabel, Br as nodePin, Pn as snapshotCapability, Q as batteryCapability, Z as bareAddonId, a as BatteryStatusSchema, cr as DeviceType, in as memoizePinnedFfmpeg, lr as errMsg, ni as EventCategory, or as DeviceFeature, ur as BaseAddon, vt as deriveBatteryPresence } from "../../dist-D8XMuZCS.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as filesystemBrowseCapability, Rn as storageProviderCapability, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { Mt as filesystemBrowseCapability, Rn as storageProviderCapability, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CUNGH0fs.js");
+const require_dist = require("../../dist-Cf0yAy6y.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-W8oEm4ME.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { B as StorageCleanupJobSchema, Cr as collectSecretConfigKeys, Fn as storageCapability, Ft as gbToBytes, H as StorageLocationTypeSchema, Hr as parseJsonObject, In as storageMigrationCapability, Jt as legacyModeOf, Lr as isSecretMarker, Mn as settingsStoreCapability, O as LegacyStorageLocationDefaultSchema, Ot as evictionPolicyOfLocation, Tn as resolveLocationMode, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Vt as isLocationEnabled, Xr as secretTreeFromPaths, mr as REDACTED_SECRET, ni as EventCategory, nn as mayReadLocation, on as modeMayWrite, qn as withLocationMode, qr as resolveSecretMarkers, rn as mayWriteToLocation, ti as transformSecretWrite, ur as BaseAddon } from "../../dist-osl3bkF0.mjs";
+import { B as StorageCleanupJobSchema, Cr as collectSecretConfigKeys, Fn as storageCapability, Ft as gbToBytes, H as StorageLocationTypeSchema, Hr as parseJsonObject, In as storageMigrationCapability, Jt as legacyModeOf, Lr as isSecretMarker, Mn as settingsStoreCapability, O as LegacyStorageLocationDefaultSchema, Ot as evictionPolicyOfLocation, Tn as resolveLocationMode, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Vt as isLocationEnabled, Xr as secretTreeFromPaths, mr as REDACTED_SECRET, ni as EventCategory, nn as mayReadLocation, on as modeMayWrite, qn as withLocationMode, qr as resolveSecretMarkers, rn as mayWriteToLocation, ti as transformSecretWrite, ur as BaseAddon } from "../../dist-D8XMuZCS.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-CDiN1p98.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.d.ts

@@ -25,7 +25,7 @@ export declare class SystemConfigAddon extends BaseAddon {
             }>;
         };
         actionHandlers: {
-            mintJoinToken: (input: any) => Promise<{
+            mintJoinToken: (input: unknown) => Promise<{
                 token: string;
                 exp: number;
                 hubUrl: string;
@@ -36,6 +36,12 @@ export declare class SystemConfigAddon extends BaseAddon {
         };
     }>;
     protected onShutdown(): Promise<void>;
+    /**
+     * Boot: a stored `meshClearPort: off` is the operator's standing choice, so it
+     * is applied WITHOUT the agents gate (nobody is connected yet to be checked).
+     * Default `on` changes nothing.
+     */
+    private applyStoredClearPort;
     private onMeshCaReady;
     private mintJoinToken;
     private resolveHubUrl;
@@ -52,6 +58,12 @@ export declare class SystemConfigAddon extends BaseAddon {
      * is REFUSED — never written inline (D787, P5). `meshAuth` is a plain value.
      */
     private writeClusterSection;
+    /**
+     * `cluster.meshClearPort`: `off` is REFUSED while any online agent still
+     * connects in clear (or the TLS listener is not up); the refusal names them.
+     * Persist, then apply — an `on` save always passes.
+     */
+    private writeMeshClearPort;
     /** `cluster.meshAuth` (D802), then republish it. */
     private writeMeshAuthMode;
     /**