@camstack/system 1.2.420 → 1.2.422

package/dist/{dist-DLHPmdoV.js → dist-FSNJUw7p.js}

@@ -718,7 +718,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-vWTnHq9G.mjs
+//#region ../types/dist/sleep-BBF1iXUi.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -7338,6 +7338,15 @@ zod.z.discriminatedUnion("type", [
 		message: zod.z.string()
 	})
 ]);
+/** Every status, in the order a summary lists them. */
+var RETRAIN_REVIEW_STATUSES = [
+	"unchanged",
+	"adjusted",
+	"reclassified",
+	"added",
+	"removed",
+	"model-error"
+];
 /**
 * What the gate decided about a birth, from the CALLER's point of view.
 *
@@ -12004,6 +12013,16 @@ var BrokerClientsSchema = zod.z.object({
 	/** Total encoded + raw-RTP callback subscriber count (sum of `encoded[].length`). */
 	encodedSubscribers: zod.z.number()
 });
+/**
+* How many people are watching one camera LIVE right now — see
+* `getLiveViewerCounts`. A camera with nobody watching is absent from the list
+* (so `viewers` is always at least 1): the listing carries the cameras that
+* have viewers, never a row of zeros.
+*/
+var LiveViewerCountSchema = zod.z.object({
+	deviceId: zod.z.number().int().nonnegative(),
+	viewers: zod.z.number().int().positive()
+});
 zod.z.enum([
 	"reconnecting",
 	"sleeping",
@@ -12487,6 +12506,24 @@ var streamBrokerCapability = {
 			auth: "admin"
 		}),
 		listClients: method(zod.z.object({ brokerId: zod.z.string() }), BrokerClientsSchema),
+		/**
+		* People watching each camera LIVE right now, for every camera at once —
+		* cheap enough to poll (a walk of the live session maps, no I/O).
+		*
+		* Counts EXTERNAL viewers only: WebRTC sessions of a viewer kind
+		* (`webrtc-browser` / `-mobile` / `-whep`, `alexa`, `homekit`) that are on
+		* the live edge, plus RTSP restream clients from outside that are playing.
+		* The system's own consumers are never counted: the detection decoder, the
+		* recorder, snapshots, the prebuffer hold, audio analysis, and the RTSP
+		* dials an agent's derived broker makes. One WebRTC session or RTSP
+		* connection is one viewer, so two tabs on one camera read 2.
+		*
+		* The count is read off the live session maps at call time, so a session
+		* that ends — cleanly or by the peer vanishing — stops counting with no
+		* counter to leak. It covers the sessions THIS provider serves; a node
+		* with its own stream-broker is asked with a `nodeId` pin.
+		*/
+		getLiveViewerCounts: method(zod.z.void(), zod.z.array(LiveViewerCountSchema).readonly()),
 		killClient: method(zod.z.object({
 			brokerId: zod.z.string(),
 			channel: zod.z.enum(["rtsp", "audio"]),
@@ -15096,6 +15133,38 @@ var BulkRecordSchema = zod.z.object({
 	data: zod.z.record(zod.z.string(), zod.z.unknown())
 });
 /**
+* One write inside a {@link settingsStoreCapability.methods.transact} call.
+* Only the three that a "replace this set, bump that revision" write needs.
+*/
+var TransactOpSchema = zod.z.discriminatedUnion("op", [
+	zod.z.object({
+		op: zod.z.literal("deleteWhere"),
+		collection: zod.z.string(),
+		filter: MutationFilterSchema
+	}),
+	zod.z.object({
+		op: zod.z.literal("insertMany"),
+		collection: zod.z.string(),
+		records: zod.z.array(BulkRecordSchema).readonly()
+	}),
+	zod.z.object({
+		op: zod.z.literal("update"),
+		collection: zod.z.string(),
+		id: zod.z.string(),
+		data: zod.z.record(zod.z.string(), zod.z.unknown())
+	})
+]);
+/**
+* The precondition of a transaction: the row `key` of `collection` must hold
+* `equals` in `column`, read INSIDE the transaction.
+*/
+var TransactGuardSchema = zod.z.object({
+	collection: zod.z.string(),
+	key: zod.z.string(),
+	column: zod.z.string(),
+	equals: zod.z.unknown()
+});
+/**
 * Column declaration for a structured (SQL-backed) collection.
 *
 * Logical types — the backend translates each to the matching SQLite
@@ -15320,6 +15389,36 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Several writes, ONE transaction, behind an optional precondition.
+		*
+		* The multi-collection twin of {@link insertMany}: a write that has to move
+		* a set of rows in one collection AND a revision in another cannot be
+		* expressed as separate calls without a window in which a reader (or a
+		* crash) sees half of it. The retrain annotation save replaces a frame's
+		* rows, its dismissed set and its revision this way.
+		*
+		* `guard`, when given, is read inside the transaction: if the row is
+		* missing or its column differs from `equals`, NOTHING is written and the
+		* answer is `{ applied: false, current }` with what was found — the
+		* compare-and-set a revisioned write needs, with no second reader able to
+		* slip between the check and the writes.
+		*
+		* **All or nothing**, like {@link insertMany}: a throw in any op rolls the
+		* whole call back. Ops run in the order given (delete before insert to
+		* replace a set). `namespace` applies to every collection named.
+		*/
+		transact: method(zod.z.object({
+			namespace: zod.z.string().optional(),
+			guard: TransactGuardSchema.optional(),
+			ops: zod.z.array(TransactOpSchema).readonly()
+		}), zod.z.object({
+			applied: zod.z.boolean(),
+			current: zod.z.unknown().optional()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Update an existing record by ID. */
 		update: method(zod.z.object({
 			namespace: zod.z.string().optional(),
@@ -15604,6 +15703,18 @@ id: zod.z.union([zod.z.string(), zod.z.number()]) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/** Several writes in ONE transaction behind an optional guard; see the door. */
+		transact: method(zod.z.object({
+			namespace: zod.z.string().optional(),
+			guard: TransactGuardSchema.optional(),
+			ops: zod.z.array(TransactOpSchema).readonly()
+		}), zod.z.object({
+			applied: zod.z.boolean(),
+			current: zod.z.unknown().optional()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Update an existing record by ID. */
 		update: method(zod.z.object({
 			namespace: zod.z.string().optional(),
@@ -26285,6 +26396,56 @@ var RetrainBboxSchema = zod.z.object({
 	h: zod.z.number()
 });
 /**
+* What a box LOOKED LIKE when it was offered, snapshotted at the moment the
+* operator accepted it. The saved row keeps only the final rectangle; this is
+* the other half of the pair, and the pair is what says whether the operator
+* accepted, nudged, relabelled or replaced a proposal (`retrain-review.ts`).
+*
+* `ref` names the proposal inside its frame: `pipeline:<trackId>` for a box the
+* live pipeline drew, `assist:<n>` for the n-th box of a detector or LLM run,
+* and anything unique for an operator-drawn box (`operator:<n>`). Re-derived
+* pipeline boxes carry the same ref every time, which is what lets a dismissal
+* stay dismissed.
+*/
+var RetrainOriginSchema = zod.z.object({
+	source: RetrainAnnotationSourceSchema,
+	ref: zod.z.string().min(1),
+	bbox: RetrainBboxSchema,
+	macroClass: RetrainMacroClassSchema,
+	label: zod.z.string().optional(),
+	score: zod.z.number().optional(),
+	modelId: zod.z.string().optional()
+});
+/**
+* A proposal the operator deleted. Durable on the frame, so a deleted pipeline
+* box does not come back as a draft every time the frame is reopened, and so
+* the deletion itself is a recorded fact rather than an absence.
+*/
+var RetrainDismissedSchema = zod.z.object({
+	ref: zod.z.string().min(1),
+	snapshot: RetrainOriginSchema
+});
+/** What the operator did with a proposal (see `retrain-review.ts`). */
+var RetrainReviewStatusSchema = zod.z.enum(RETRAIN_REVIEW_STATUSES);
+var RetrainBoxReviewSchema = zod.z.object({
+	ref: zod.z.string(),
+	savedId: zod.z.string().optional(),
+	status: RetrainReviewStatusSchema,
+	/** The baseline was re-derived, not snapshotted (a pre-origin row). */
+	approximate: zod.z.boolean(),
+	origin: RetrainOriginSchema.optional(),
+	iou: zod.z.number().optional()
+});
+var RetrainFrameReviewSchema = zod.z.object({
+	boxes: zod.z.array(RetrainBoxReviewSchema).readonly(),
+	summary: zod.z.object({
+		counts: zod.z.record(RetrainReviewStatusSchema, zod.z.number().int()),
+		total: zod.z.number().int(),
+		changed: zod.z.number().int(),
+		approximate: zod.z.boolean()
+	})
+});
+/**
 * One annotated subject.
 *
 * `bbox` is normalised against the full frame, ALWAYS. The per-model shapes
@@ -26308,6 +26469,9 @@ var RetrainAnnotationSchema = zod.z.object({
 	/** Which model proposed this box — or, on a `model_error`, drew the phantom. */
 	assistModelId: zod.z.string().optional(),
 	assistScore: zod.z.number().optional(),
+	/** The proposal this box started from, snapshotted at accept time. `null` on
+	*  a row saved before origins existed; absent on a draft nobody snapshotted. */
+	origin: RetrainOriginSchema.nullable().optional(),
 	exportedInBatch: zod.z.string().optional(),
 	createdAt: zod.z.number()
 });
@@ -26400,7 +26564,19 @@ var RetrainFrameSchema = zod.z.object({
 	*  empty when nothing the track store holds can be placed on it. */
 	pipelineBoxes: zod.z.array(RetrainPipelineBoxSchema).readonly().optional(),
 	/** The named collections this frame belongs to. Present on list answers. */
-	collectionIds: zod.z.array(zod.z.string()).readonly().optional()
+	collectionIds: zod.z.array(zod.z.string()).readonly().optional(),
+	/** Bumped by every annotation save. A save that names a stale
+	*  `expectedRevision` is refused, so two surfaces cannot overwrite each other. */
+	revision: zod.z.number().int().optional(),
+	/** Proposals the operator deleted — never re-seeded as drafts. */
+	dismissed: zod.z.array(RetrainDismissedSchema).readonly().optional(),
+	/** What the operator did with the proposals, computed by the server. */
+	review: RetrainFrameReviewSchema.optional(),
+	/** The frame's pixels over the admin data plane (full size). Fetch with the
+	*  admin bearer token; relative to the hub root. */
+	imageUrl: zod.z.string().optional(),
+	/** The same, as a ~480 px thumbnail for grids. */
+	thumbnailUrl: zod.z.string().optional()
 });
 /** Why a copy-on-select could not be honoured — named, never a silent skip. */
 var RetrainCopyRefusalSchema = zod.z.enum([
@@ -27943,6 +28119,11 @@ var pipelineAnalyticsCapability = {
 		/**
 		* The pixels of ONE copied frame, base64.
 		*
+		* @deprecated Use `RetrainFrame.imageUrl` / `thumbnailUrl` (the admin
+		* `retrain-frame` data plane, D613). A base64 envelope holds the frame
+		* whole in the producer AND the caller, and a grid of tiles paid that for
+		* every tile. Kept for one release for callers that cannot fetch a URL.
+		*
 		* Through the cap rather than a data plane because it is genuinely one
 		* frame at a time, on demand, at human speed — the shape D9/D18 permit
 		* (what they forbid is frames crossing a boundary at frame RATE). The
@@ -28005,18 +28186,59 @@ var pipelineAnalyticsCapability = {
 		* Refuses a macro class typed into `label` or `subLabel` — the tiers are
 		* separate and the guard is at the WRITE, because a mixed taxonomy cannot
 		* be un-mixed by reading it.
+		*
+		* ATOMIC and REVISIONED: the replaced rows, the frame's `dismissed` set and
+		* its `revision` move in one transaction, guarded by the revision the
+		* caller saw. A stale `expectedRevision` writes nothing and throws
+		* `retrain-revision-conflict` (parse it with `parseRetrainRevisionConflict`);
+		* the UI and an MCP agent no longer overwrite each other silently.
 		*/
 		saveRetrainAnnotations: method(zod.z.object({
 			deviceId: zod.z.number(),
 			/** The frame's track, when it has one — checked against the frame. */
 			trackId: zod.z.string().optional(),
 			frameId: zod.z.string(),
-			annotations: zod.z.array(RetrainAnnotationDraftSchema)
+			annotations: zod.z.array(RetrainAnnotationDraftSchema),
+			/** The frame's `revision` the caller saw. A different current revision
+			*  refuses the save with a `retrain-revision-conflict` error
+			*  (`parseRetrainRevisionConflict`). Absent ⇒ last write wins. */
+			expectedRevision: zod.z.number().int().optional(),
+			/** The proposals the operator deleted. Absent ⇒ keep the frame's
+			*  current set; present ⇒ replace it (an empty array un-dismisses). */
+			dismissed: zod.z.array(RetrainDismissedSchema).optional()
 		}), zod.z.array(RetrainAnnotationSchema).readonly(), {
 			kind: "mutation",
 			auth: "admin"
 		}),
 		/**
+		* Give annotations saved BEFORE origins existed the origin a caller
+		* reconstructed for them (the MCP `track_review_backfill_origin` tool
+		* matches each row to the pipeline box it equals).
+		*
+		* Writes `origin` and nothing else: ids, creation time and the export stamp
+		* are untouched (a re-save through `saveRetrainAnnotations` would reset all
+		* three). A row that already has an origin is SKIPPED — a snapshot taken at
+		* accept time is evidence, a reconstruction is a guess. Atomic and
+		* revision-guarded like the save; bumps the frame's `revision`.
+		*/
+		backfillRetrainOrigins: method(zod.z.object({
+			deviceId: zod.z.number(),
+			trackId: zod.z.string().optional(),
+			frameId: zod.z.string(),
+			expectedRevision: zod.z.number().int().optional(),
+			origins: zod.z.array(zod.z.object({
+				annotationId: zod.z.string(),
+				origin: RetrainOriginSchema
+			})).min(1).max(500)
+		}), zod.z.object({
+			updated: zod.z.number().int(),
+			skipped: zod.z.number().int(),
+			revision: zod.z.number().int()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
 		* Finish with a track: `staging → trained`. **The only writer of that
 		* state** — D81 shipped the column with it deliberately unreachable.
 		*
@@ -31304,6 +31526,12 @@ var CameraStepOverridePatchSchema = zod.z.object({
 	settings: zod.z.record(zod.z.string(), zod.z.unknown()).readonly().optional()
 });
 var CameraStepSettingsSchema = zod.z.record(zod.z.string(), zod.z.record(zod.z.string(), zod.z.unknown()).readonly());
+/** The three root-detector choices a camera has (D507: at most one root). */
+var CameraDetectionSourceSchema = zod.z.enum([
+	"pipeline",
+	"onboard",
+	"none"
+]);
 var CameraPipelineSettingsSchema = zod.z.object({
 	stepToggles: zod.z.record(zod.z.string(), zod.z.boolean()).optional(),
 	stepSettings: CameraStepSettingsSchema.optional(),
@@ -32232,6 +32460,41 @@ var pipelineOrchestratorCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Where this camera's first-level detections come from: this node's own
+		* root step (`pipeline`), the camera's onboard detector alone (`onboard`),
+		* or no root detector (`none`). A camera runs at most one root detector
+		* (D507), so there is no "both". Read from the camera's stored
+		* `detectionSources` — the one authority; `explicit` is false while the
+		* operator has never picked and the default stands.
+		*/
+		getCameraDetectionSource: method(zod.z.object({ deviceId: zod.z.number() }), zod.z.object({
+			source: CameraDetectionSourceSchema,
+			explicit: zod.z.boolean(),
+			onboard: zod.z.object({
+				/** The camera has an onboard detector this system can read. */
+				available: zod.z.boolean(),
+				/** What its detections carry — a camera with no box cannot be a root step. */
+				geometry: zod.z.enum([
+					"boxed",
+					"while-streaming",
+					"flag-only",
+					"unknown"
+				])
+			})
+		})),
+		/**
+		* Pick where this camera's detections come from. Writes `detectionSources`
+		* and arms (or disarms) the vendor's boxed sub-stream that the choice
+		* drives. Refuses `onboard` on a camera with no onboard detector.
+		*/
+		setCameraDetectionSource: method(zod.z.object({
+			deviceId: zod.z.number(),
+			source: CameraDetectionSourceSchema
+		}), zod.z.object({ success: zod.z.literal(true) }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Read every per-(node,device) override map for a device. Null when device has no overrides. */
 		getCameraStepOverrides: method(zod.z.object({ deviceId: zod.z.number() }), zod.z.record(zod.z.string(), zod.z.record(zod.z.string(), zod.z.record(zod.z.string(), CameraStepOverridePatchSchema))).nullable()),
 		/**
@@ -42089,7 +42352,14 @@ var TopologyNodeSchema = zod.z.object({
 	* completed a mutual-TLS handshake, `clear` otherwise. Absent for the hub,
 	* for offline rows and when the hub cannot tell.
 	*/
-	meshTransport: zod.z.enum(["tls", "clear"]).optional()
+	meshTransport: zod.z.enum(["tls", "clear"]).optional(),
+	/**
+	* Whether the hub holds this online AGENT's capability registration (its
+	* `registerNode` manifest). `false` = online in the mesh but not ready: the
+	* hub dropped the registration on a disconnect only it saw and the agent has
+	* not re-sent it. Absent for the hub and offline rows.
+	*/
+	capabilitiesRegistered: zod.z.boolean().optional()
 });
 var CapUsageEdgeSchema = zod.z.object({
 	callerAddonId: zod.z.string(),
@@ -52801,6 +53071,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"dataStoreProvider.transact": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"dataStoreProvider.update": {
 		capName: "data-store-provider",
 		capScope: "system",
@@ -55645,6 +55921,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.backfillRetrainOrigins": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.cancelRelocateMedia": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -56425,6 +56707,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getCameraDetectionSource": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getCameraMetrics": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -56653,6 +56941,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setCameraDetectionSource": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.setCameraPipelineForAgent": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -57625,6 +57919,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"settingsStore.transact": {
+		capName: "settings-store",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"settingsStore.update": {
 		capName: "settings-store",
 		capScope: "system",
@@ -58105,6 +58405,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"streamBroker.getLiveViewerCounts": {
+		capName: "stream-broker",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"streamBroker.getPreBufferInfo": {
 		capName: "stream-broker",
 		capScope: "system",
@@ -62205,6 +62511,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineAnalytics.backfillRetrainOrigins": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineAnalytics.clearTrackRelation": [{
 		name: "deviceId",
 		form: "single",
@@ -62510,6 +62821,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineOrchestrator.getCameraDetectionSource": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineOrchestrator.getCameraMetrics": [{
 		name: "deviceId",
 		form: "single",
@@ -62570,6 +62886,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineOrchestrator.setCameraDetectionSource": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineOrchestrator.setCameraPipelineForAgent": [{
 		name: "deviceId",
 		form: "single",

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DLHPmdoV.js");
-const require_jwt_signing_key = require("./jwt-signing-key-CWmNKLQi.js");
+const require_dist = require("./dist-FSNJUw7p.js");
+const require_jwt_signing_key = require("./jwt-signing-key-CPha_bf7.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -26,7 +26,7 @@ const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtin
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_constants = require("./constants-ik5xtasS.js");
+const require_constants = require("./constants-CY4vXTV-.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
@@ -34,7 +34,7 @@ const require_custom_action_registry = require("./custom-action-registry-Bf_Ynag
 const require_tls = require("./tls-BgImdxCO.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-DZeFVS2l.js");
+const require_restore_archive = require("./restore-archive-BwGWspP1.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { i as __require } from "./chunk-CNf5ZN-e.mjs";
-import { At as extractNestedAddonId, Bt as isObjectInput, Cn as resolveMethodAuth, Dn as scopesAllowDeviceCap, Dr as emitDownForOwnedCaps, En as scopesAllowAddon, G as addonSettingsCapability, Gr as resolveCapMount, Hr as parseJsonUnknown, Ht as kebabToCamel$1, It as isArrayOutputSchema, Lt as isCollectionArrayMethod, O as LOG_LEVEL_RANK, Qt as looseSchema, Rn as supportedRuntimes, Vr as parseJsonObject, Vt as isVoidInput, Wr as readinessKey, Zt as logLevelAtMost, br as asString$1, cn as objectInputDeclaresRequiredDeviceId, dr as DEVICE_STATUS_METHOD, ei as EventCategory$1, hr as ReadinessTimeoutError, j as METHOD_ACCESS_MAP, kr as expandCapMethods, lr as DATAPLANE_SECRET_HEADER$1, mr as ReadinessRegistry, pn as procedureAuthKey, pr as RUNTIME_DEFAULTS, qr as scopeKey, qt as lifecycleJobSchema, sn as objectInputDeclaresAddonId, sr as errMsg$1, t as ALL_CAPABILITY_DEFINITIONS, ur as DEVICE_SETTINGS_CONTRIBUTION_METHODS, vr as asJsonObject$1, wr as createEvent$1, yr as asNumber } from "./dist-C0wYvAHC.mjs";
-import { c as staticJwtSigningKey, i as getProcessJwtSigningKeyState, n as JwtSigningKeyUnavailableError, o as processJwtSigningKey, r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "./jwt-signing-key-dkTVfsLI.mjs";
+import { At as extractNestedAddonId, Bt as isObjectInput, Cn as resolveMethodAuth, Dn as scopesAllowDeviceCap, Dr as emitDownForOwnedCaps, En as scopesAllowAddon, G as addonSettingsCapability, Gr as resolveCapMount, Hr as parseJsonUnknown, Ht as kebabToCamel$1, It as isArrayOutputSchema, Lt as isCollectionArrayMethod, O as LOG_LEVEL_RANK, Qt as looseSchema, Rn as supportedRuntimes, Vr as parseJsonObject, Vt as isVoidInput, Wr as readinessKey, Zt as logLevelAtMost, br as asString$1, cn as objectInputDeclaresRequiredDeviceId, dr as DEVICE_STATUS_METHOD, ei as EventCategory$1, hr as ReadinessTimeoutError, j as METHOD_ACCESS_MAP, kr as expandCapMethods, lr as DATAPLANE_SECRET_HEADER$1, mr as ReadinessRegistry, pn as procedureAuthKey, pr as RUNTIME_DEFAULTS, qr as scopeKey, qt as lifecycleJobSchema, sn as objectInputDeclaresAddonId, sr as errMsg$1, t as ALL_CAPABILITY_DEFINITIONS, ur as DEVICE_SETTINGS_CONTRIBUTION_METHODS, vr as asJsonObject$1, wr as createEvent$1, yr as asNumber } from "./dist-CHsJCqrf.mjs";
+import { c as staticJwtSigningKey, i as getProcessJwtSigningKeyState, n as JwtSigningKeyUnavailableError, o as processJwtSigningKey, r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "./jwt-signing-key-DUVvfILp.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
@@ -25,7 +25,7 @@ import { SqliteSettingsAddon, o as SqliteSettingsBackend, s as prefixRange } fro
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
 import { StorageOrchestratorAddon, a as stripForwardedCaller, i as createHubCapForwardService, n as HUB_CAP_FWD_ACTION, o as buildStorageLocationRegistry, r as HUB_CAP_FWD_SERVICE, t as StorageOrchestratorService } from "./builtins/storage-orchestrator/storage-orchestrator.addon.mjs";
 import "./builtins/storage-orchestrator/index.mjs";
-import { _ as getProcessClusterSecretGate, a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, d as CLUSTER_SECRET_REF, f as CLUSTER_SECRET_REJECTED_EXIT_CODE, g as clusterSecretMatches, h as checkClusterSecret, i as MESH_CA_FIELD, m as CLUSTER_SECRET_UNAVAILABLE_TYPE, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, p as CLUSTER_SECRET_SETTINGS_KEY, u as CLUSTER_SECRET_MISMATCH_TYPE, v as hashClusterSecret, y as isClusterSecretMismatchError } from "./constants-BeQWXybC.mjs";
+import { _ as getProcessClusterSecretGate, a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, d as CLUSTER_SECRET_REF, f as CLUSTER_SECRET_REJECTED_EXIT_CODE, g as clusterSecretMatches, h as checkClusterSecret, i as MESH_CA_FIELD, m as CLUSTER_SECRET_UNAVAILABLE_TYPE, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, p as CLUSTER_SECRET_SETTINGS_KEY, u as CLUSTER_SECRET_MISMATCH_TYPE, v as hashClusterSecret, y as isClusterSecretMismatchError } from "./constants-iLQM7god.mjs";
 import { A as AGENT_UI_UNLOCK_TTL_MS, B as isMeshAuthMode, C as generateMeshCa, D as loadMeshCa, E as issueMeshLeafFromCsr, F as parseAgentDashboardOrigins, G as setProcessMeshEnforcer, H as requestProcessMeshEnforcement, I as verifyAgentUiUnlockTicket, J as parseCidrList, K as createCidrMatcher, L as MESH_AUTH_MODE_FIELD, M as UnlockTicketJtiStore, N as isAllowedAgentDashboardReturnTo, O as AGENT_DASHBOARD_ORIGINS_FIELD, P as mintAgentUiUnlockTicket, R as getProcessMeshAuthMode, S as exportMeshPrivateKeyPem, SystemConfigAddon, T as issueMeshLeafForNode, U as setProcessMeshAuthMode, V as parseMeshAuthMode, W as setProcessMeshAuthStatusSource, Y as readCidrSetting, _ as getProcessMeshCaState, a as ServiceBroker, b as caFingerprintCompact, c as JoinTokenJtiStore, d as verifyMeshJoinToken, f as getProcessNodeMeshTransport, g as MeshCaKeeper, h as processMeshCrl, i as Errors, j as AGENT_UI_UNLOCK_VERSION, k as AGENT_UI_UNLOCK_DOMAIN, l as mintMeshJoinToken, m as MeshCrl, n as MESH_TLS_PORT_HELLO_FIELD, o as setProcessMeshTlsEnabler, p as setProcessMeshPeerTransportLookup, q as normalizeIp, r as TlsTcpTransporter, s as enrollMeshNode, u as processJoinTokenJtiStore, v as requireProcessMeshCa, w as generateMeshKeyPair, x as createMeshCsrPem, y as caFingerprint, z as getProcessMeshAuthStatus } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
@@ -33,7 +33,7 @@ import { C as isModelDownloaded, T as revisionWeightUrl, _ as downloadFile, a as
 import { A as allFamiliesListenHost, C as collectCertIdentity, D as SERVER_AUTH_OID, E as MAX_LEAF_VALIDITY_DAYS, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as evaluateExistingCert, P as readLanHttpState, S as CA_COMMON_NAME, T as LEAF_RENEWAL_WINDOW_DAYS, _ as writeExtraSans, a as validateUploadedTls, b as loadTlsCert, c as registerHttpsListener, d as prepareBootTls, f as UPLOADED_CA_FILE, g as splitPemCertificates, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as reloadHttpsListener, m as readTlsAccessStatus, n as regenerateCertificate, o as clearHttpsListener, p as readExtraSans, r as revertToGeneratedCertificate, s as leafFingerprintOf, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, v as writeTlsMode, w as CA_VALIDITY_DAYS, x as reissueTlsLeaf, y as ensureTlsCert } from "./tls-CaOLZ09W.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Di9daRwI.mjs";
-import { c as BackupKeyFormatError, d as generateBackupKeyPair, l as BackupKeyMismatchError, m as readBackupEncryptionHeader, o as SystemBackupService, r as prepareRestoreArchive, s as BackupDecryptError, t as BackupKeyRequiredError } from "./restore-archive-Bt65Em24.mjs";
+import { c as BackupKeyFormatError, d as generateBackupKeyPair, l as BackupKeyMismatchError, m as readBackupEncryptionHeader, o as SystemBackupService, r as prepareRestoreArchive, s as BackupDecryptError, t as BackupKeyRequiredError } from "./restore-archive-J_BsGRBy.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";

package/dist/{jwt-signing-key-CWmNKLQi.js → jwt-signing-key-CPha_bf7.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DLHPmdoV.js");
+const require_dist = require("./dist-FSNJUw7p.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts
 /**

package/dist/{jwt-signing-key-dkTVfsLI.mjs → jwt-signing-key-DUVvfILp.mjs}

@@ -1,4 +1,4 @@
-import { xr as buildSecretRef } from "./dist-C0wYvAHC.mjs";
+import { xr as buildSecretRef } from "./dist-CHsJCqrf.mjs";
 import { randomBytes } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts
 /**

package/dist/{restore-archive-DZeFVS2l.js → restore-archive-BwGWspP1.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DLHPmdoV.js");
+const require_dist = require("./dist-FSNJUw7p.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/{restore-archive-Bt65Em24.mjs → restore-archive-J_BsGRBy.mjs}

@@ -1,4 +1,4 @@
-import { g as DATABASE_SNAPSHOT_SUFFIX } from "./dist-C0wYvAHC.mjs";
+import { g as DATABASE_SNAPSHOT_SUFFIX } from "./dist-CHsJCqrf.mjs";
 import { createCipheriv, createDecipheriv, createHash, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/{retired-settings-keys-BHlKEYNL.mjs → retired-settings-keys-3SMjMqj0.mjs}

@@ -1,4 +1,4 @@
-import { vr as asJsonObject } from "./dist-C0wYvAHC.mjs";
+import { vr as asJsonObject } from "./dist-CHsJCqrf.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-DibNtLmU.js → retired-settings-keys-BuQBYfu0.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DLHPmdoV.js");
+const require_dist = require("./dist-FSNJUw7p.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.420",
+  "version": "1.2.422",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",