@camstack/system 1.2.408 → 1.2.410

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-C_NIHmRl.js");
+const require_dist = require("../../dist-CrznXkOZ.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Qt as logDestinationCapability, dr as BaseAddon } from "../../dist-CRjmCjqs.mjs";
+import { Qt as logDestinationCapability, dr as BaseAddon } from "../../dist-CvjyPlVK.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{child-cap-dispatch-CB2qQnYM.js → child-cap-dispatch-BymegE_4.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-C_NIHmRl.js");
+const require_dist = require("./dist-CrznXkOZ.js");
 const require_proc_stat = require("./proc-stat-DL-WUOhl.js");
 require("./hub-cap-forward-W8oEm4ME.js");
 let node_crypto = require("node:crypto");

package/dist/{child-cap-dispatch-DmRpp1gd.mjs → child-cap-dispatch-C-t9A5bd.mjs}

@@ -1,4 +1,4 @@
-import { Er as createEvent, Xr as scrubKnownSecrets, ri as EventCategory$1, tn as maskUrlCredentials } from "./dist-CRjmCjqs.mjs";
+import { Er as createEvent, Xr as scrubKnownSecrets, ri as EventCategory$1, tn as maskUrlCredentials } from "./dist-CvjyPlVK.mjs";
 import { a as parseProcStat, i as nodeProcReader } from "./proc-stat-CbC55Kqi.mjs";
 import "./hub-cap-forward-CDiN1p98.mjs";
 import * as crypto$1 from "node:crypto";

package/dist/{composition-sources-BH10GbGr.js → composition-sources-D2TB0T_2.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-C_NIHmRl.js");
+const require_dist = require("./dist-CrznXkOZ.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-ChCEybWx.mjs → composition-sources-DfGBDGDf.mjs}

@@ -1,4 +1,4 @@
-import { rr as compositionSourceKey, ur as errMsg } from "./dist-CRjmCjqs.mjs";
+import { rr as compositionSourceKey, ur as errMsg } from "./dist-CvjyPlVK.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-Dz0pH0Ga.js → constants-C9RU0W0k.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-C_NIHmRl.js");
+const require_dist = require("./dist-CrznXkOZ.js");
 let node_crypto = require("node:crypto");
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{constants-uHarkJy0.mjs → constants-U8qDgboP.mjs}

@@ -1,4 +1,4 @@
-import { Cr as buildSecretRef } from "./dist-CRjmCjqs.mjs";
+import { Cr as buildSecretRef } from "./dist-CvjyPlVK.mjs";
 import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{dist-C_NIHmRl.js → dist-CrznXkOZ.js}

@@ -19900,14 +19900,14 @@ var LlmProfileSchema = zod.z.object({
 /** ConfigUISchema tree passed through untyped on the wire (the
 *  notification-output `ConfigSchemaPassthrough` precedent at
 *  notification-output.cap.ts:151); the exported TS type re-tightens it. */
-var ConfigSchemaPassthrough$1 = zod.z.unknown();
+var ConfigSchemaPassthrough$2 = zod.z.unknown();
 var LlmProfileKindDescriptorSchema = zod.z.object({
 	kind: LlmProfileKindSchema,
 	label: zod.z.string(),
 	icon: zod.z.string(),
 	/** Stamped by each provider so the concat-fanned catalog stays routable. */
 	addonId: zod.z.string(),
-	configSchema: ConfigSchemaPassthrough$1
+	configSchema: ConfigSchemaPassthrough$2
 });
 var LlmDefaultSelectorSchema = zod.z.union([zod.z.object({ consumer: zod.z.string() }), zod.z.object({ purpose: zod.z.enum(["text", "vision"]) })]);
 var LlmDefaultSchema = zod.z.object({
@@ -21284,7 +21284,7 @@ var TargetKindCapsSchema = zod.z.object({
 * the union is large and not meant for runtime validation here; the exported
 * `TargetKind` type re-tightens `configSchema` to `ConfigUISchema`.
 */
-var ConfigSchemaPassthrough = zod.z.unknown();
+var ConfigSchemaPassthrough$1 = zod.z.unknown();
 var TargetKindSchema = zod.z.object({
 	kind: zod.z.string(),
 	label: zod.z.string(),
@@ -21321,7 +21321,7 @@ var TargetKindSchema = zod.z.object({
 	* its raster path, which is the safe default for an unknown image.
 	*/
 	iconMediaType: zod.z.string().optional(),
-	configSchema: ConfigSchemaPassthrough,
+	configSchema: ConfigSchemaPassthrough$1,
 	/**
 	* The config keys that decide WHERE this kind's secrets are sent (server,
 	* base URL, instance, chat, recipient). A save that changes any of them
@@ -37121,6 +37121,7 @@ var calendarSourceCapability = {
 	scope: "system",
 	mode: "collection",
 	internal: true,
+	providerKind: "calendar",
 	methods: {
 		listCalendars: method(zod.z.void(), zod.z.array(CalendarInfoSchema).readonly(), { auth: "admin" }),
 		listEvents: method(CalendarListEventsInputSchema, zod.z.array(CalendarEventSchema).readonly(), { auth: "admin" })
@@ -48902,6 +48903,12 @@ var TrainingProviderDefaultsSchema = zod.z.object({
 	/** Hours a FAILED job's cloud dataset is kept for debugging; 0 = delete at once. */
 	failedDatasetGraceHours: zod.z.number().nonnegative()
 });
+/**
+* Entry form schema for a provider type — same seam as notification
+* `TargetKind.configSchema` (`z.unknown()` at the wire; callers tighten to
+* {@link ConfigUISchema}). Drives `ConfigFormBuilder` on Training → Providers.
+*/
+var ConfigSchemaPassthrough = zod.z.unknown();
 /** One creatable provider type, for the Add-entry dialog. */
 var TrainingProviderTypeSchema = zod.z.object({
 	typeId: zod.z.string(),
@@ -48909,7 +48916,13 @@ var TrainingProviderTypeSchema = zod.z.object({
 	/** Path under the addon package (e.g. `assets/training-modal/icon.svg`). */
 	iconAsset: zod.z.string(),
 	/** Owning `training-provider` addon — collection selector for createEntry. */
-	addonId: zod.z.string()
+	addonId: zod.z.string(),
+	/**
+	* Fields for one entry of this type (credentials + defaults). Absent on a
+	* type that only needs a name. Password fields are keychain-backed on the
+	* provider addon (`secretStatePaths`), not D634 plaintext.
+	*/
+	configSchema: ConfigSchemaPassthrough.optional()
 });
 /** One configured account / workspace under a provider type. */
 var TrainingProviderEntrySchema = zod.z.object({
@@ -48941,24 +48954,11 @@ var TrainingProviderDescriptorSchema = zod.z.object({
 	configured: zod.z.boolean(),
 	defaults: TrainingProviderDefaultsSchema,
 	/**
-	* Non-secret account fields for the Providers form (e.g. Modal token id).
-	* The secret itself never appears — only a keychain {@link SecretFieldView}
-	* (or `hasTokenSecret` for older clients).
+	* Values for {@link TrainingProviderTypeSchema}'s `configSchema` — password
+	* fields are keychain {@link SecretFieldView} or `null` / `''` (create),
+	* never plaintext. Same hydrate contract as settings forms (D789).
 	*/
-	tokenId: zod.z.string().optional(),
-	environment: zod.z.string().optional(),
-	hasTokenSecret: zod.z.boolean().optional(),
-	/**
-	* Keychain view for the entry's token secret — for `SecretFieldControl` on
-	* edit. Create has no view (`null` / omitted); the form uses a plain
-	* `PasswordInput` instead.
-	*/
-	tokenSecretView: zod.z.object({
-		$secret: zod.z.string().nullable(),
-		v: zod.z.literal(1),
-		set: zod.z.literal(true),
-		inline: zod.z.literal(true).optional()
-	}).nullable().optional()
+	formValues: zod.z.record(zod.z.string(), zod.z.unknown()).optional()
 });
 /**
 * Patch one entry's name, credentials and defaults. Pin with owning `{ addonId }`.
@@ -63344,6 +63344,7 @@ Object.freeze({
 });
 Object.freeze({
 	"broker": "broker",
+	"calendar-source": "calendar",
 	"device-export": "device-export",
 	"llm": "ai",
 	"mesh-network": "mesh",

package/dist/{dist-CRjmCjqs.mjs → dist-CvjyPlVK.mjs}

@@ -19900,14 +19900,14 @@ var LlmProfileSchema = z.object({
 /** ConfigUISchema tree passed through untyped on the wire (the
 *  notification-output `ConfigSchemaPassthrough` precedent at
 *  notification-output.cap.ts:151); the exported TS type re-tightens it. */
-var ConfigSchemaPassthrough$1 = z.unknown();
+var ConfigSchemaPassthrough$2 = z.unknown();
 var LlmProfileKindDescriptorSchema = z.object({
 	kind: LlmProfileKindSchema,
 	label: z.string(),
 	icon: z.string(),
 	/** Stamped by each provider so the concat-fanned catalog stays routable. */
 	addonId: z.string(),
-	configSchema: ConfigSchemaPassthrough$1
+	configSchema: ConfigSchemaPassthrough$2
 });
 var LlmDefaultSelectorSchema = z.union([z.object({ consumer: z.string() }), z.object({ purpose: z.enum(["text", "vision"]) })]);
 var LlmDefaultSchema = z.object({
@@ -21284,7 +21284,7 @@ var TargetKindCapsSchema = z.object({
 * the union is large and not meant for runtime validation here; the exported
 * `TargetKind` type re-tightens `configSchema` to `ConfigUISchema`.
 */
-var ConfigSchemaPassthrough = z.unknown();
+var ConfigSchemaPassthrough$1 = z.unknown();
 var TargetKindSchema = z.object({
 	kind: z.string(),
 	label: z.string(),
@@ -21321,7 +21321,7 @@ var TargetKindSchema = z.object({
 	* its raster path, which is the safe default for an unknown image.
 	*/
 	iconMediaType: z.string().optional(),
-	configSchema: ConfigSchemaPassthrough,
+	configSchema: ConfigSchemaPassthrough$1,
 	/**
 	* The config keys that decide WHERE this kind's secrets are sent (server,
 	* base URL, instance, chat, recipient). A save that changes any of them
@@ -37121,6 +37121,7 @@ var calendarSourceCapability = {
 	scope: "system",
 	mode: "collection",
 	internal: true,
+	providerKind: "calendar",
 	methods: {
 		listCalendars: method(z.void(), z.array(CalendarInfoSchema).readonly(), { auth: "admin" }),
 		listEvents: method(CalendarListEventsInputSchema, z.array(CalendarEventSchema).readonly(), { auth: "admin" })
@@ -48902,6 +48903,12 @@ var TrainingProviderDefaultsSchema = z.object({
 	/** Hours a FAILED job's cloud dataset is kept for debugging; 0 = delete at once. */
 	failedDatasetGraceHours: z.number().nonnegative()
 });
+/**
+* Entry form schema for a provider type — same seam as notification
+* `TargetKind.configSchema` (`z.unknown()` at the wire; callers tighten to
+* {@link ConfigUISchema}). Drives `ConfigFormBuilder` on Training → Providers.
+*/
+var ConfigSchemaPassthrough = z.unknown();
 /** One creatable provider type, for the Add-entry dialog. */
 var TrainingProviderTypeSchema = z.object({
 	typeId: z.string(),
@@ -48909,7 +48916,13 @@ var TrainingProviderTypeSchema = z.object({
 	/** Path under the addon package (e.g. `assets/training-modal/icon.svg`). */
 	iconAsset: z.string(),
 	/** Owning `training-provider` addon — collection selector for createEntry. */
-	addonId: z.string()
+	addonId: z.string(),
+	/**
+	* Fields for one entry of this type (credentials + defaults). Absent on a
+	* type that only needs a name. Password fields are keychain-backed on the
+	* provider addon (`secretStatePaths`), not D634 plaintext.
+	*/
+	configSchema: ConfigSchemaPassthrough.optional()
 });
 /** One configured account / workspace under a provider type. */
 var TrainingProviderEntrySchema = z.object({
@@ -48941,24 +48954,11 @@ var TrainingProviderDescriptorSchema = z.object({
 	configured: z.boolean(),
 	defaults: TrainingProviderDefaultsSchema,
 	/**
-	* Non-secret account fields for the Providers form (e.g. Modal token id).
-	* The secret itself never appears — only a keychain {@link SecretFieldView}
-	* (or `hasTokenSecret` for older clients).
+	* Values for {@link TrainingProviderTypeSchema}'s `configSchema` — password
+	* fields are keychain {@link SecretFieldView} or `null` / `''` (create),
+	* never plaintext. Same hydrate contract as settings forms (D789).
 	*/
-	tokenId: z.string().optional(),
-	environment: z.string().optional(),
-	hasTokenSecret: z.boolean().optional(),
-	/**
-	* Keychain view for the entry's token secret — for `SecretFieldControl` on
-	* edit. Create has no view (`null` / omitted); the form uses a plain
-	* `PasswordInput` instead.
-	*/
-	tokenSecretView: z.object({
-		$secret: z.string().nullable(),
-		v: z.literal(1),
-		set: z.literal(true),
-		inline: z.literal(true).optional()
-	}).nullable().optional()
+	formValues: z.record(z.string(), z.unknown()).optional()
 });
 /**
 * Patch one entry's name, credentials and defaults. Pin with owning `{ addonId }`.
@@ -63344,6 +63344,7 @@ Object.freeze({
 });
 Object.freeze({
 	"broker": "broker",
+	"calendar-source": "calendar",
 	"device-export": "device-export",
 	"llm": "ai",
 	"mesh-network": "mesh",

package/dist/{event-loop-stall-monitor-Bdc1ZAE5.js → event-loop-stall-monitor-CaAcghV2.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-C_NIHmRl.js");
+const require_dist = require("./dist-CrznXkOZ.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/{event-loop-stall-monitor-YIJgGpj4.mjs → event-loop-stall-monitor-De1uffaC.mjs}

@@ -1,4 +1,4 @@
-import { It as hfModelUrl, M as MODEL_FORMATS, T as HF_REPO } from "./dist-CRjmCjqs.mjs";
+import { It as hfModelUrl, M as MODEL_FORMATS, T as HF_REPO } from "./dist-CvjyPlVK.mjs";
 import { createHash } from "node:crypto";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-C_NIHmRl.js");
-const require_jwt_signing_key = require("./jwt-signing-key-plcgFXbB.js");
+const require_dist = require("./dist-CrznXkOZ.js");
+const require_jwt_signing_key = require("./jwt-signing-key-7JsaDUwM.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -27,17 +27,17 @@ const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage
 const require_hub_cap_forward = require("./hub-cap-forward-W8oEm4ME.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_constants = require("./constants-Dz0pH0Ga.js");
+const require_constants = require("./constants-C9RU0W0k.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
-const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-Bdc1ZAE5.js");
+const require_event_loop_stall_monitor = require("./event-loop-stall-monitor-CaAcghV2.js");
 const require_tls = require("./tls-BWpwU-d5.js");
-const require_child_cap_dispatch = require("./child-cap-dispatch-CB2qQnYM.js");
+const require_child_cap_dispatch = require("./child-cap-dispatch-BymegE_4.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-BgWGRxN5.js");
 const require_custom_action_registry = require("./custom-action-registry-acBY3mHA.js");
-const require_restore_archive = require("./restore-archive-B1mvRnlN.js");
+const require_restore_archive = require("./restore-archive-BwOOlIex.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { i as __require } from "./chunk-CNf5ZN-e.mjs";
-import { $t as logLevelAtMost, A as METHOD_ACCESS_MAP, An as scopesAllowDeviceCap, D as LOG_LEVEL_RANK, En as resolveMethodAuth, Er as createEvent, F as RUNTIME_DEFAULTS, Ht as isObjectInput, K as addonSettingsCapability, Kr as readinessKey, Rt as isArrayOutputSchema, Sr as asString$1, Ur as parseJsonObject, Ut as isVoidInput, Vn as supportedRuntimes, Wr as parseJsonUnknown, Wt as kebabToCamel, Yr as scopeKey, Yt as lifecycleJobSchema, _r as ReadinessTimeoutError, br as asJsonObject$1, dn as objectInputDeclaresRequiredDeviceId, en as looseSchema, fr as DATAPLANE_SECRET_HEADER$1, gn as procedureAuthKey, gr as ReadinessRegistry, jr as expandCapMethods, jt as extractNestedAddonId, kn as scopesAllowAddon, kr as emitDownForOwnedCaps, mr as DEVICE_STATUS_METHOD, pr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, qr as resolveCapMount, ri as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, un as objectInputDeclaresAddonId, ur as errMsg$1, xr as asNumber, zt as isCollectionArrayMethod } from "./dist-CRjmCjqs.mjs";
-import { c as staticJwtSigningKey, i as getProcessJwtSigningKeyState, n as JwtSigningKeyUnavailableError, o as processJwtSigningKey, r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "./jwt-signing-key-CjQkIWGw.mjs";
+import { $t as logLevelAtMost, A as METHOD_ACCESS_MAP, An as scopesAllowDeviceCap, D as LOG_LEVEL_RANK, En as resolveMethodAuth, Er as createEvent, F as RUNTIME_DEFAULTS, Ht as isObjectInput, K as addonSettingsCapability, Kr as readinessKey, Rt as isArrayOutputSchema, Sr as asString$1, Ur as parseJsonObject, Ut as isVoidInput, Vn as supportedRuntimes, Wr as parseJsonUnknown, Wt as kebabToCamel, Yr as scopeKey, Yt as lifecycleJobSchema, _r as ReadinessTimeoutError, br as asJsonObject$1, dn as objectInputDeclaresRequiredDeviceId, en as looseSchema, fr as DATAPLANE_SECRET_HEADER$1, gn as procedureAuthKey, gr as ReadinessRegistry, jr as expandCapMethods, jt as extractNestedAddonId, kn as scopesAllowAddon, kr as emitDownForOwnedCaps, mr as DEVICE_STATUS_METHOD, pr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, qr as resolveCapMount, ri as EventCategory$1, t as ALL_CAPABILITY_DEFINITIONS, un as objectInputDeclaresAddonId, ur as errMsg$1, xr as asNumber, zt as isCollectionArrayMethod } from "./dist-CvjyPlVK.mjs";
+import { c as staticJwtSigningKey, i as getProcessJwtSigningKeyState, n as JwtSigningKeyUnavailableError, o as processJwtSigningKey, r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "./jwt-signing-key-Bv9SAJgK.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
@@ -26,17 +26,17 @@ import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
 import { i as stripForwardedCaller, n as HUB_CAP_FWD_SERVICE, r as createHubCapForwardService, t as HUB_CAP_FWD_ACTION } from "./hub-cap-forward-CDiN1p98.mjs";
 import { StorageOrchestratorAddon, n as buildStorageLocationRegistry, t as StorageOrchestratorService } from "./builtins/storage-orchestrator/storage-orchestrator.addon.mjs";
 import "./builtins/storage-orchestrator/index.mjs";
-import { _ as getProcessClusterSecretGate, a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, d as CLUSTER_SECRET_REF, f as CLUSTER_SECRET_REJECTED_EXIT_CODE, g as clusterSecretMatches, h as checkClusterSecret, i as MESH_CA_FIELD, m as CLUSTER_SECRET_UNAVAILABLE_TYPE, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, p as CLUSTER_SECRET_SETTINGS_KEY, u as CLUSTER_SECRET_MISMATCH_TYPE, v as hashClusterSecret, y as isClusterSecretMismatchError } from "./constants-uHarkJy0.mjs";
+import { _ as getProcessClusterSecretGate, a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, d as CLUSTER_SECRET_REF, f as CLUSTER_SECRET_REJECTED_EXIT_CODE, g as clusterSecretMatches, h as checkClusterSecret, i as MESH_CA_FIELD, m as CLUSTER_SECRET_UNAVAILABLE_TYPE, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, p as CLUSTER_SECRET_SETTINGS_KEY, u as CLUSTER_SECRET_MISMATCH_TYPE, v as hashClusterSecret, y as isClusterSecretMismatchError } from "./constants-U8qDgboP.mjs";
 import { A as AGENT_UI_UNLOCK_VERSION, B as parseMeshAuthMode, C as generateMeshKeyPair, D as AGENT_DASHBOARD_ORIGINS_FIELD, E as loadMeshCa, F as verifyAgentUiUnlockTicket, G as createCidrMatcher, H as setProcessMeshAuthMode, I as MESH_AUTH_MODE_FIELD, J as readCidrSetting, K as normalizeIp, L as getProcessMeshAuthMode, M as isAllowedAgentDashboardReturnTo, N as mintAgentUiUnlockTicket, O as AGENT_UI_UNLOCK_DOMAIN, P as parseAgentDashboardOrigins, R as getProcessMeshAuthStatus, S as generateMeshCa, SystemConfigAddon, T as issueMeshLeafFromCsr, U as setProcessMeshAuthStatusSource, V as requestProcessMeshEnforcement, W as setProcessMeshEnforcer, _ as requireProcessMeshCa, a as setProcessMeshTlsEnabler, b as createMeshCsrPem, c as mintMeshJoinToken, d as getProcessNodeMeshTransport, f as setProcessMeshPeerTransportLookup, g as getProcessMeshCaState, h as MeshCaKeeper, i as ServiceBroker, j as UnlockTicketJtiStore, k as AGENT_UI_UNLOCK_TTL_MS, l as processJoinTokenJtiStore, m as processMeshCrl, n as TlsTcpTransporter, o as enrollMeshNode, p as MeshCrl, q as parseCidrList, r as Errors, s as JoinTokenJtiStore, u as verifyMeshJoinToken, v as caFingerprint, w as issueMeshLeafForNode, x as exportMeshPrivateKeyPem, y as caFingerprintCompact, z as isMeshAuthMode } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
-import { C as resolveFormatRevision, S as isModelDownloaded, _ as downloadModel, a as createFileDataPlaneHandler, b as getModelFilePath, c as parseRangeHeader, d as ModelDownloadService, g as downloadFile, h as deleteModelFromDisk, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as collectModelFiles, n as STALL_TICK_MS, o as contentTypeFor, p as adoptModelRevisions, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as ensureModel, w as revisionWeightUrl, y as fetchJson } from "./event-loop-stall-monitor-YIJgGpj4.mjs";
+import { C as resolveFormatRevision, S as isModelDownloaded, _ as downloadModel, a as createFileDataPlaneHandler, b as getModelFilePath, c as parseRangeHeader, d as ModelDownloadService, g as downloadFile, h as deleteModelFromDisk, i as startEventLoopStallMonitor, l as parseTokenizedUrl, m as collectModelFiles, n as STALL_TICK_MS, o as contentTypeFor, p as adoptModelRevisions, r as attributeStall, s as createAuthenticatedFileServer, t as STALL_REPORT_MS, u as resolveFilePath, v as ensureModel, w as revisionWeightUrl, y as fetchJson } from "./event-loop-stall-monitor-De1uffaC.mjs";
 import { A as allFamiliesListenHost, C as collectCertIdentity, D as SERVER_AUTH_OID, E as MAX_LEAF_VALIDITY_DAYS, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as evaluateExistingCert, P as readLanHttpState, S as CA_COMMON_NAME, T as LEAF_RENEWAL_WINDOW_DAYS, _ as writeExtraSans, a as validateUploadedTls, b as loadTlsCert, c as registerHttpsListener, d as prepareBootTls, f as UPLOADED_CA_FILE, g as splitPemCertificates, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as reloadHttpsListener, m as readTlsAccessStatus, n as regenerateCertificate, o as clearHttpsListener, p as readExtraSans, r as revertToGeneratedCertificate, s as leafFingerprintOf, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, v as writeTlsMode, w as CA_VALIDITY_DAYS, x as reissueTlsLeaf, y as ensureTlsCert } from "./tls-C2NT-Orr.mjs";
-import { $ as AGENT_CAP_FWD_ACTION, $n as EMPTY_SOCKET_DIRECTION, $t as HEAP_WATCH_INTERVAL_MS, A as mapSignalsToInferenceHardware, An as DECISIVE_HEAP_SPACES, At as capServiceName, B as createParentUnownedCallHandler, Bn as createOutboundQueueGate, Bt as buildNpmChildEnv, C as getBrokerEventBus, Cn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, D as subscribePassthrough, Dn as createInspectorArrayBufferCensus, Dt as capActionName, E as setNodeEventInterest, En as createArrayBufferCensusGate, Et as NATIVE_PROVIDER_SERVICE_INFIX, F as brokerTransportLink, Fn as readHeapSpaces, Ft as CapabilityHandle, G as createUdsLoggerWithControl, Gn as EMPTY_SOCKET_PLANE_BASELINE, Gt as redactLogMeta, H as createUdsEventBus, Hn as MESH_QUEUE_TOP_N, Ht as runNpm, I as buildLinkChain, In as selectReportedSpaces, It as CapabilityUnavailableError, J as UDS_NO_ROUTE_PREFIX, Jn as createSocketPlaneMeter, Jt as hostNodeIdOf, K as LocalChildClient, Kn as SOCKET_PLANE_TOP_N, Kt as redactLogText, L as deviceCapResolverLink, Ln as OUTBOUND_QUEUE_COOLDOWN_MS, Lt as copyBundledNativeModules, M as probePlatform, Mn as emitHeapDiagnosticReport, Mt as deserializeTypedArrays, N as resolveHwAccel, Nn as formatHeapSpaces, Nt as serializeTypedArrays, O as AddonDepsManager, On as formatArrayBufferCensus, Ot as capActionSuffix, P as brokerCallForCap, Pn as heapSpaceField, Pt as DeviceRegistry, Q as deviceOfGetStatus, Qn as readSocketQueues, Qt as HEAP_RECLAIM_TRIGGER_MB, R as ipcParentLink, Rn as OUTBOUND_QUEUE_SUSTAIN_MS, Rt as installManifestNativeDeps, S as clusterEventTopic, Sn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, St as mountNativeCapService, T as registerEventBusService, Tn as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, Tt as validateProviderRegistrations, U as udsChildLogToWorkerEntry, Un as createMeshQueueReader, Ut as isCredentialKeyName, V as createUdsEventBridge, Vn as formatOutboundQueueVerdict, Vt as resolveNpmInvocation, W as createUdsLogger, Wn as formatMeshQueue, Wt as redactLogEntry, X as GET_STATUS_METHOD, Xn as diffSocketPlane, Xt as HEAP_RECLAIM_MIN_INTERVAL_MS, Y as afterWorkerOnlineAnnounce, Yn as createSocketPlaneReader, Yt as createAddonDataPlaneFacility, Z as answerClaimedGetStatus, Zn as formatSocketPlane, Zt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, _ as getWorkerDeviceRegistry, _n as reclaimIntervalMs, _t as encodeFrame, a as reapProcessGroup, an as RSS_BUDGET_RELEASE_RATIO, ar as CAP_ACTION_OVERFLOW_LABEL, at as callWithServiceDiscovery, b as setHubConnected, bn as startRunnerHeapWatch, c as runnerOwnsProcessGroup, cn as ZERO_LOOP_DELAY, cr as MAX_CAP_ACTIONS_PER_PEER, ct as __resetCapUsageRegistryForTests, d as summarizeMembers, dn as createLoopDelayMeter, dr as diffCapActionCensus, dt as UdsLocalTransportClient, en as HEAP_WATCH_WARN_RATIO, er as createSocketDirectionCounters, et as AGENT_CAP_FWD_SERVICE, f as installManifestSystemDeps, fn as createV8Reclaimer, fr as EVENT_PLANE_TOP_N, ft as UdsLocalTransportServer, g as createUdsAddonContext, gn as parseRssBudgetMb, gr as formatEventPlane, gt as FrameDecoder, h as createAddonContext, hn as nextRssBudgetState, hr as diffEventPlane, ht as localEndpointPath, in as RSS_BUDGET_REANNOUNCE_MIN_MS, ir as socketDirectionMessages, it as classifyCapRoute, j as createKernelHwAccel, jn as HEAP_SPACE_REPORT_MIN_MB, jt as parseCapAction, k as createKernelInferenceEngine, kn as isArrayBufferCensusReport, kt as capBareAction, l as signalAllRunnerGroups, ln as buildHeapSample, lr as capActionLabel, lt as getCapUsageRegistry, m as adaptBrokerToCluster, mn as hubMainRssBudget, mr as createEventPlaneReader, mt as PeerAnsweredError, nn as HUB_MAIN_RSS_BUDGET_MB, nr as sampleSocketDirection, nt as stampCallerAddonId, o as registerRunnerGroup, on as RUNNER_HEAP_WATCH_INTERVAL_MS, or as CAP_ACTION_UNLABELLED, ot as CapUsageRegistry, p as installManifestPythonDeps, pn as describeRss, pr as createEventPlaneMeter, pt as SocketChannel, q as LocalChildRegistry, qn as SOCKET_QUEUE_TOP_N, qt as createAddonPeerBytesFacility, r as defaultProcessGroupOps, rn as HUB_RSS_BUDGET_ENV, rr as socketDirectionBytes, rt as CapRouteError, s as releaseRunnerGroup, sn as RUNNER_RSS_BUDGET_ENV, sr as EMPTY_CAP_ACTION_READING, st as PARENT_ROUTED_PROVIDER_ADDON_ID, t as CAP_METHOD_NOT_IMPLEMENTED, tn as HUB_MAIN_HEAP_WATCH_LABEL, tr as recordSocketFrame, tt as CapRouteResolver, un as createDeferredHeapWatchSink, ur as createCapActionCensus, ut as createLocalTransport, v as getOrInitReadinessRegistry, vn as shouldReclaim, vt as buildNativeCapProxy, w as getMoleculerEventStats, wn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, wt as createAddonService, x as EVENT_TOPIC_PREFIX, xn as strandedMb, y as getOrInitReadinessRegistryForClient, yn as startHeapWatch, yt as createBrokerDeviceManagerApi, z as localProviderLink, zn as OUTBOUND_QUEUE_THRESHOLD_BYTES, zt as resolveAddonClass } from "./child-cap-dispatch-DmRpp1gd.mjs";
+import { $ as AGENT_CAP_FWD_ACTION, $n as EMPTY_SOCKET_DIRECTION, $t as HEAP_WATCH_INTERVAL_MS, A as mapSignalsToInferenceHardware, An as DECISIVE_HEAP_SPACES, At as capServiceName, B as createParentUnownedCallHandler, Bn as createOutboundQueueGate, Bt as buildNpmChildEnv, C as getBrokerEventBus, Cn as ARRAY_BUFFER_CENSUS_SUSTAIN_MS, D as subscribePassthrough, Dn as createInspectorArrayBufferCensus, Dt as capActionName, E as setNodeEventInterest, En as createArrayBufferCensusGate, Et as NATIVE_PROVIDER_SERVICE_INFIX, F as brokerTransportLink, Fn as readHeapSpaces, Ft as CapabilityHandle, G as createUdsLoggerWithControl, Gn as EMPTY_SOCKET_PLANE_BASELINE, Gt as redactLogMeta, H as createUdsEventBus, Hn as MESH_QUEUE_TOP_N, Ht as runNpm, I as buildLinkChain, In as selectReportedSpaces, It as CapabilityUnavailableError, J as UDS_NO_ROUTE_PREFIX, Jn as createSocketPlaneMeter, Jt as hostNodeIdOf, K as LocalChildClient, Kn as SOCKET_PLANE_TOP_N, Kt as redactLogText, L as deviceCapResolverLink, Ln as OUTBOUND_QUEUE_COOLDOWN_MS, Lt as copyBundledNativeModules, M as probePlatform, Mn as emitHeapDiagnosticReport, Mt as deserializeTypedArrays, N as resolveHwAccel, Nn as formatHeapSpaces, Nt as serializeTypedArrays, O as AddonDepsManager, On as formatArrayBufferCensus, Ot as capActionSuffix, P as brokerCallForCap, Pn as heapSpaceField, Pt as DeviceRegistry, Q as deviceOfGetStatus, Qn as readSocketQueues, Qt as HEAP_RECLAIM_TRIGGER_MB, R as ipcParentLink, Rn as OUTBOUND_QUEUE_SUSTAIN_MS, Rt as installManifestNativeDeps, S as clusterEventTopic, Sn as ARRAY_BUFFER_CENSUS_COOLDOWN_MS, St as mountNativeCapService, T as registerEventBusService, Tn as ARRAY_BUFFER_RELEASE_MIN_DROP_RATIO, Tt as validateProviderRegistrations, U as udsChildLogToWorkerEntry, Un as createMeshQueueReader, Ut as isCredentialKeyName, V as createUdsEventBridge, Vn as formatOutboundQueueVerdict, Vt as resolveNpmInvocation, W as createUdsLogger, Wn as formatMeshQueue, Wt as redactLogEntry, X as GET_STATUS_METHOD, Xn as diffSocketPlane, Xt as HEAP_RECLAIM_MIN_INTERVAL_MS, Y as afterWorkerOnlineAnnounce, Yn as createSocketPlaneReader, Yt as createAddonDataPlaneFacility, Z as answerClaimedGetStatus, Zn as formatSocketPlane, Zt as HEAP_RECLAIM_STEADY_STATE_INTERVAL_MS, _ as getWorkerDeviceRegistry, _n as reclaimIntervalMs, _t as encodeFrame, a as reapProcessGroup, an as RSS_BUDGET_RELEASE_RATIO, ar as CAP_ACTION_OVERFLOW_LABEL, at as callWithServiceDiscovery, b as setHubConnected, bn as startRunnerHeapWatch, c as runnerOwnsProcessGroup, cn as ZERO_LOOP_DELAY, cr as MAX_CAP_ACTIONS_PER_PEER, ct as __resetCapUsageRegistryForTests, d as summarizeMembers, dn as createLoopDelayMeter, dr as diffCapActionCensus, dt as UdsLocalTransportClient, en as HEAP_WATCH_WARN_RATIO, er as createSocketDirectionCounters, et as AGENT_CAP_FWD_SERVICE, f as installManifestSystemDeps, fn as createV8Reclaimer, fr as EVENT_PLANE_TOP_N, ft as UdsLocalTransportServer, g as createUdsAddonContext, gn as parseRssBudgetMb, gr as formatEventPlane, gt as FrameDecoder, h as createAddonContext, hn as nextRssBudgetState, hr as diffEventPlane, ht as localEndpointPath, in as RSS_BUDGET_REANNOUNCE_MIN_MS, ir as socketDirectionMessages, it as classifyCapRoute, j as createKernelHwAccel, jn as HEAP_SPACE_REPORT_MIN_MB, jt as parseCapAction, k as createKernelInferenceEngine, kn as isArrayBufferCensusReport, kt as capBareAction, l as signalAllRunnerGroups, ln as buildHeapSample, lr as capActionLabel, lt as getCapUsageRegistry, m as adaptBrokerToCluster, mn as hubMainRssBudget, mr as createEventPlaneReader, mt as PeerAnsweredError, nn as HUB_MAIN_RSS_BUDGET_MB, nr as sampleSocketDirection, nt as stampCallerAddonId, o as registerRunnerGroup, on as RUNNER_HEAP_WATCH_INTERVAL_MS, or as CAP_ACTION_UNLABELLED, ot as CapUsageRegistry, p as installManifestPythonDeps, pn as describeRss, pr as createEventPlaneMeter, pt as SocketChannel, q as LocalChildRegistry, qn as SOCKET_QUEUE_TOP_N, qt as createAddonPeerBytesFacility, r as defaultProcessGroupOps, rn as HUB_RSS_BUDGET_ENV, rr as socketDirectionBytes, rt as CapRouteError, s as releaseRunnerGroup, sn as RUNNER_RSS_BUDGET_ENV, sr as EMPTY_CAP_ACTION_READING, st as PARENT_ROUTED_PROVIDER_ADDON_ID, t as CAP_METHOD_NOT_IMPLEMENTED, tn as HUB_MAIN_HEAP_WATCH_LABEL, tr as recordSocketFrame, tt as CapRouteResolver, un as createDeferredHeapWatchSink, ur as createCapActionCensus, ut as createLocalTransport, v as getOrInitReadinessRegistry, vn as shouldReclaim, vt as buildNativeCapProxy, w as getMoleculerEventStats, wn as ARRAY_BUFFER_CENSUS_THRESHOLD_MB, wt as createAddonService, x as EVENT_TOPIC_PREFIX, xn as strandedMb, y as getOrInitReadinessRegistryForClient, yn as startHeapWatch, yt as createBrokerDeviceManagerApi, z as localProviderLink, zn as OUTBOUND_QUEUE_THRESHOLD_BYTES, zt as resolveAddonClass } from "./child-cap-dispatch-C-t9A5bd.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-B2WZ8_q9.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-B4Cf4O_X.mjs";
-import { c as BackupKeyFormatError, d as generateBackupKeyPair, l as BackupKeyMismatchError, m as readBackupEncryptionHeader, o as SystemBackupService, r as prepareRestoreArchive, s as BackupDecryptError, t as BackupKeyRequiredError } from "./restore-archive-CvQ3o9Ub.mjs";
+import { c as BackupKeyFormatError, d as generateBackupKeyPair, l as BackupKeyMismatchError, m as readBackupEncryptionHeader, o as SystemBackupService, r as prepareRestoreArchive, s as BackupDecryptError, t as BackupKeyRequiredError } from "./restore-archive-BxlXOFwo.mjs";
 import { z } from "zod";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { PYTHON_VERSION, buildBinaryPath, downloadBinary, ensureBinary, ensureFfmpeg, ensurePython, findInPath, getFfmpegDownloadUrl, getPlatformInfo, getPythonDownloadUrl, installPythonPackages, installPythonRequirements } from "@camstack/types/node";

package/dist/{jwt-signing-key-plcgFXbB.js → jwt-signing-key-7JsaDUwM.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-C_NIHmRl.js");
+const require_dist = require("./dist-CrznXkOZ.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts
 /**

package/dist/{jwt-signing-key-CjQkIWGw.mjs → jwt-signing-key-Bv9SAJgK.mjs}

@@ -1,4 +1,4 @@
-import { Cr as buildSecretRef } from "./dist-CRjmCjqs.mjs";
+import { Cr as buildSecretRef } from "./dist-CvjyPlVK.mjs";
 import { randomBytes } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts
 /**

package/dist/{restore-archive-B1mvRnlN.js → restore-archive-BwOOlIex.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-C_NIHmRl.js");
+const require_dist = require("./dist-CrznXkOZ.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");