@camstack/system 1.2.424 → 1.2.425

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildCapabilityLookup, Mr as hydrateSchema, Vn as validateComposition, Xn as composedDeviceRef, _n as replacedFieldKeys, bn as resolveCoreBlockEntry, cr as errMsg, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, fn as planComposition, lr as BaseAddon, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, on as normalizeCoreBlockWrite, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlockSourceKind, x as DeclaredDevices, xn as resolveCoreBlockFiles, yt as describeComposableCaps } from "../../dist-B-NmfvVC.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-tRG7nKWK.mjs";
+import { $ as buildCapabilityLookup, Mr as hydrateSchema, Vn as validateComposition, Xn as composedDeviceRef, _n as replacedFieldKeys, bn as resolveCoreBlockEntry, cr as errMsg, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, fn as planComposition, lr as BaseAddon, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, on as normalizeCoreBlockWrite, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlockSourceKind, x as DeclaredDevices, xn as resolveCoreBlockFiles, yt as describeComposableCaps } from "../../dist-DMWeqeTF.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-DmzTSy26.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-D62kN_hT.js");
+const require_dist = require("../../dist-DnALrQF-.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-0FOsnzIE.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $r as toSecretFieldView, Ct as deviceStatusCapability, En as runtimeStatePolicyFor, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Kt as legacyAutoLinkIds, Lr as isSecretMarker, N as MINUTES_PER_DAY, Nr as isDeviceConfigCap, Pt as formatMinutes, R as STREAM_PROFILE_META, Rr as isSecretMarkerLike, S as DeviceStatusSchema, St as deviceStateCapability, T as FieldClaimSchema, Tt as enumerateItemArrayFields, Xt as locationIconKey, Yr as secretTreeFromPaths, Zr as sleep$1, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, ar as DeviceFeature, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as errMsg, ei as transformSecretWrite, et as buildStreamParamsConfigSchema, ft as createDeviceExtensionProvider, j as LocationIconIdSchema, jn as siteZoneKey, kt as expandContainer, lr as BaseAddon, o as CAMERA_SWITCH_ORDER, or as DeviceRole, qr as resolveSecretMarkers, sn as normalizeUnit, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, un as parseStreamParamsFormPatch, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimModeSchema, wr as collectZodSecretPaths, xt as deviceManagerCapability, y as DAY_NAMES } from "../../dist-B-NmfvVC.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-DCGEI4Vi.mjs";
+import { $r as toSecretFieldView, Ct as deviceStatusCapability, En as runtimeStatePolicyFor, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Kt as legacyAutoLinkIds, Lr as isSecretMarker, N as MINUTES_PER_DAY, Nr as isDeviceConfigCap, Pt as formatMinutes, R as STREAM_PROFILE_META, Rr as isSecretMarkerLike, S as DeviceStatusSchema, St as deviceStateCapability, T as FieldClaimSchema, Tt as enumerateItemArrayFields, Xt as locationIconKey, Yr as secretTreeFromPaths, Zr as sleep$1, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, ar as DeviceFeature, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as errMsg, ei as transformSecretWrite, et as buildStreamParamsConfigSchema, ft as createDeviceExtensionProvider, j as LocationIconIdSchema, jn as siteZoneKey, kt as expandContainer, lr as BaseAddon, o as CAMERA_SWITCH_ORDER, or as DeviceRole, qr as resolveSecretMarkers, sn as normalizeUnit, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, un as parseStreamParamsFormPatch, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimModeSchema, wr as collectZodSecretPaths, xt as deviceManagerCapability, y as DAY_NAMES } from "../../dist-DMWeqeTF.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CdVFl7m2.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-B-NmfvVC.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-nwRpRgf_.js");
-const require_constants = require("../../constants-BBWZlnpQ.js");
+const require_dist = require("../../dist-DnALrQF-.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-DeqG7LD9.js");
+const require_constants = require("../../constants-B5Jd8Zch.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,6 +1,6 @@
-import { Gt as keychainCapability, O as KEYCHAIN_RESET_TRIGGER_ACTOR, Vr as normalizeSecretOwner, Wr as parseSecretRef, Wt as keychainAdminCapability, jr as formatSecretScope, lr as BaseAddon, ti as EventCategory } from "../../dist-B-NmfvVC.mjs";
-import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CUpweD22.mjs";
-import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-DHhhVjkt.mjs";
+import { Gt as keychainCapability, O as KEYCHAIN_RESET_TRIGGER_ACTOR, Vr as normalizeSecretOwner, Wr as parseSecretRef, Wt as keychainAdminCapability, jr as formatSecretScope, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CCHXAtrs.mjs";
+import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CkNLi-XW.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { F as RECORDING_SOURCE_CAMSTACK_ADDON, I as RecordingStatusSchema, Tr as createEvent, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-B-NmfvVC.mjs";
+import { F as RECORDING_SOURCE_CAMSTACK_ADDON, I as RecordingStatusSchema, Tr as createEvent, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-nwRpRgf_.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-DeqG7LD9.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,8 +1,8 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Bn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, lr as BaseAddon, r as ApiKeyRecordSchema, z as ScopedTokenSchema } from "../../dist-B-NmfvVC.mjs";
+import { Bn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, lr as BaseAddon, r as ApiKeyRecordSchema, z as ScopedTokenSchema } from "../../dist-DMWeqeTF.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CUpweD22.mjs";
+import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CCHXAtrs.mjs";
 import * as crypto$1 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_tls = require("../../tls-BgImdxCO.js");
 let zod = require("zod");
 let node_net = require("node:net");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { D as HUB_MDNS_TXT_KEYS, E as HUB_MDNS_SERVICE_TYPE, Hn as validateCustomAddress, It as isAppLinkBase, Sn as resolveHubAddressRoles, Tn as resolveNotificationTapAddress, Yt as localNetworkCapability, dn as pickAppLinkHub, lr as BaseAddon, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ti as EventCategory, vn as resolveAppConnections, zt as isDefaultAppConnectionEndpoint } from "../../dist-B-NmfvVC.mjs";
+import { D as HUB_MDNS_TXT_KEYS, E as HUB_MDNS_SERVICE_TYPE, Hn as validateCustomAddress, It as isAppLinkBase, Sn as resolveHubAddressRoles, Tn as resolveNotificationTapAddress, Yt as localNetworkCapability, dn as pickAppLinkHub, lr as BaseAddon, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ti as EventCategory, vn as resolveAppConnections, zt as isDefaultAppConnectionEndpoint } from "../../dist-DMWeqeTF.mjs";
 import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-CaOLZ09W.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-B-NmfvVC.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Nt as foldSnapshotByFunction, Tr as createEvent, cr as errMsg, gn as reducePoints, lr as BaseAddon, rn as metricsProviderCapability, ti as EventCategory, yn as resolveBucketMs } from "../../dist-B-NmfvVC.mjs";
+import { Nt as foldSnapshotByFunction, Tr as createEvent, cr as errMsg, gn as reducePoints, lr as BaseAddon, rn as metricsProviderCapability, ti as EventCategory, yn as resolveBucketMs } from "../../dist-DMWeqeTF.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as os from "node:os";
 import { platform } from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { cr as errMsg, kn as scoreRuntimes, kr as emitReadiness, lr as BaseAddon, pn as platformProbeCapability, ti as EventCategory, wt as enumerateInferenceDevices } from "../../dist-B-NmfvVC.mjs";
+import { cr as errMsg, kn as scoreRuntimes, kr as emitReadiness, lr as BaseAddon, pn as platformProbeCapability, ti as EventCategory, wt as enumerateInferenceDevices } from "../../dist-DMWeqeTF.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { lr as BaseAddon, ti as EventCategory } from "../../dist-B-NmfvVC.mjs";
+import { lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Br as nodePin, Mn as snapshotCapability, Q as batteryCapability, Rn as streamQualityLabel, Z as bareAddonId, a as BatteryStatusSchema, ar as DeviceFeature, cr as errMsg, lr as BaseAddon, nn as memoizePinnedFfmpeg, sr as DeviceType, ti as EventCategory, vt as deriveBatteryPresence } from "../../dist-B-NmfvVC.mjs";
+import { Br as nodePin, Mn as snapshotCapability, Q as batteryCapability, Rn as streamQualityLabel, Z as bareAddonId, a as BatteryStatusSchema, ar as DeviceFeature, cr as errMsg, lr as BaseAddon, nn as memoizePinnedFfmpeg, sr as DeviceType, ti as EventCategory, vt as deriveBatteryPresence } from "../../dist-DMWeqeTF.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/database-snapshot-provider.d.ts

@@ -0,0 +1,18 @@
+import type { DatabaseSnapshotRequest, DatabaseSnapshotTargets, DatabaseSnapshotWritten, IDatabaseSnapshotProvider } from "@camstack/types";
+import type { OwnedSqliteFile } from "./owned-sqlite-file.js";
+/** What the provider needs from an owned file. */
+export type SnapshotableFile = Pick<OwnedSqliteFile, "databaseId" | "livePath" | "snapshot">;
+/** What the provider needs from the placement router. */
+export interface OpenFileSource {
+	openFiles(): readonly SnapshotableFile[];
+}
+export declare class DatabaseSnapshotProvider implements IDatabaseSnapshotProvider {
+	private readonly source;
+	/** Same database asked twice: the second call joins the first. */
+	private readonly inFlight;
+	/** Different databases run one after the other: the disk reserve check is per copy. */
+	private tail;
+	constructor(source: OpenFileSource);
+	listDatabases(): Promise<DatabaseSnapshotTargets>;
+	writeSnapshot(input: DatabaseSnapshotRequest): Promise<DatabaseSnapshotWritten>;
+}

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { In as storageProviderCapability, Mt as filesystemBrowseCapability, lr as BaseAddon } from "../../dist-B-NmfvVC.mjs";
+import { In as storageProviderCapability, Mt as filesystemBrowseCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
-const require_wal_maintenance = require("../../wal-maintenance-BzdCQGjH.js");
+const require_wal_maintenance = require("../../wal-maintenance-DJV1rde2.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/index.mjs

@@ -1,5 +1,5 @@
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./filesystem-storage.addon.mjs";
-import { A as SQLITE_PAGE_CACHE_CEILING_KIB, B as sqliteEngineStorm, D as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_FLOOR_MS, I as SQLITE_PROFILE_REPORT_INTERVAL_MS, L as SQLITE_PROFILE_TOP_N, M as sqliteMmapSizeFor, N as sqlitePageCacheKibFor, O as SQLITE_MMAP_CEILING_BYTES, P as SQLITE_ENGINE_STORM_WALL_SHARE, R as SQLITE_SLOW_CALL_MS, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_FLOOR_KIB, k as SQLITE_MMAP_FLOOR_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SqliteOpProfiler } from "../../wal-maintenance-BlqNqaQ3.mjs";
+import { A as SQLITE_PAGE_CACHE_CEILING_KIB, B as sqliteEngineStorm, D as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_FLOOR_MS, I as SQLITE_PROFILE_REPORT_INTERVAL_MS, L as SQLITE_PROFILE_TOP_N, M as sqliteMmapSizeFor, N as sqlitePageCacheKibFor, O as SQLITE_MMAP_CEILING_BYTES, P as SQLITE_ENGINE_STORM_WALL_SHARE, R as SQLITE_SLOW_CALL_MS, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_FLOOR_KIB, k as SQLITE_MMAP_FLOOR_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SqliteOpProfiler } from "../../wal-maintenance-BtfyfuT5.mjs";
 import { SqliteSettingsAddon } from "./sqlite-settings.addon.mjs";
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-D62kN_hT.js");
-const require_wal_maintenance = require("../../wal-maintenance-BzdCQGjH.js");
+const require_dist = require("../../dist-DnALrQF-.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-0FOsnzIE.js");
+const require_wal_maintenance = require("../../wal-maintenance-DJV1rde2.js");
 const require_sqlite_snapshot_protocol = require("../../sqlite-snapshot-protocol-B9OndqZv.js");
 const require_wal_checkpoint_policy = require("../../wal-checkpoint-policy-d2z2qPqx.js");
 let node_fs_promises = require("node:fs/promises");
@@ -969,6 +969,51 @@ async function openOwnedSqliteFile(spec, deps) {
 	return file;
 }
 //#endregion
+//#region src/builtins/sqlite-storage/database-snapshot-provider.ts
+/**
+* The `database-snapshot` provider of the SQLite engine: every owned database
+* file it has open is listed, and each is snapshotted through its OWN
+* connection (D679, D693) — never by copying files.
+*
+* The list is read from the router at CALL time, not at boot: a file created at
+* runtime (the first declaration that names `events` or `history`) is listed
+* from the moment it opens, so no backup can leave it out.
+*/
+var DatabaseSnapshotProvider = class {
+	source;
+	/** Same database asked twice: the second call joins the first. */
+	inFlight = /* @__PURE__ */ new Map();
+	/** Different databases run one after the other: the disk reserve check is per copy. */
+	tail = Promise.resolve();
+	constructor(source) {
+		this.source = source;
+	}
+	async listDatabases() {
+		return { databases: this.source.openFiles().map((file) => ({
+			databaseId: file.databaseId,
+			livePath: node_path.default.resolve(file.livePath)
+		})) };
+	}
+	writeSnapshot(input) {
+		const running = this.inFlight.get(input.databaseId);
+		if (running !== void 0) return running;
+		const file = this.source.openFiles().find((f) => f.databaseId === input.databaseId);
+		if (file === void 0) return Promise.reject(/* @__PURE__ */ new Error(`database snapshot refused: database "${input.databaseId}" is not open`));
+		const run = this.tail.catch(() => void 0).then(async () => {
+			return {
+				...await file.snapshot(),
+				databaseId: file.databaseId
+			};
+		});
+		this.tail = run;
+		const tracked = run.finally(() => {
+			this.inFlight.delete(input.databaseId);
+		});
+		this.inFlight.set(input.databaseId, tracked);
+		return tracked;
+	}
+};
+//#endregion
 //#region src/builtins/sqlite-storage/placement-router.ts
 function scopedName(namespace, collection) {
 	return namespace ? `${namespace}:${collection}` : collection;
@@ -1344,10 +1389,7 @@ var SqliteSettingsAddon = class extends require_dist.BaseAddon {
 			},
 			{
 				capability: require_dist.databaseSnapshotCapability,
-				provider: {
-					listDatabases: async () => ({ databases: [{ livePath: node_path.default.resolve(settings.livePath) }] }),
-					writeSnapshot: async () => settings.snapshot()
-				}
+				provider: new DatabaseSnapshotProvider(router)
 			}
 		];
 	}

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { Gn as vectorStoreCapability, Z as bareAddonId, _ as DATABASE_SNAPSHOT_TIMEOUT_MS, cr as errMsg, g as DATABASE_SNAPSHOT_SUFFIX, h as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, lr as BaseAddon, mr as RUNTIME_DEFAULTS, mt as databaseSnapshotCapability, pt as dataStoreProviderCapability, v as DATA_STORE_DATABASES } from "../../dist-B-NmfvVC.mjs";
-import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-DCGEI4Vi.mjs";
-import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-BlqNqaQ3.mjs";
+import { Gn as vectorStoreCapability, Z as bareAddonId, _ as DATABASE_SNAPSHOT_TIMEOUT_MS, cr as errMsg, g as DATABASE_SNAPSHOT_SUFFIX, h as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, lr as BaseAddon, mr as RUNTIME_DEFAULTS, mt as databaseSnapshotCapability, pt as dataStoreProviderCapability, v as DATA_STORE_DATABASES } from "../../dist-DMWeqeTF.mjs";
+import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-CdVFl7m2.mjs";
+import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-BtfyfuT5.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";
@@ -963,6 +963,51 @@ async function openOwnedSqliteFile(spec, deps) {
 	return file;
 }
 //#endregion
+//#region src/builtins/sqlite-storage/database-snapshot-provider.ts
+/**
+* The `database-snapshot` provider of the SQLite engine: every owned database
+* file it has open is listed, and each is snapshotted through its OWN
+* connection (D679, D693) — never by copying files.
+*
+* The list is read from the router at CALL time, not at boot: a file created at
+* runtime (the first declaration that names `events` or `history`) is listed
+* from the moment it opens, so no backup can leave it out.
+*/
+var DatabaseSnapshotProvider = class {
+	source;
+	/** Same database asked twice: the second call joins the first. */
+	inFlight = /* @__PURE__ */ new Map();
+	/** Different databases run one after the other: the disk reserve check is per copy. */
+	tail = Promise.resolve();
+	constructor(source) {
+		this.source = source;
+	}
+	async listDatabases() {
+		return { databases: this.source.openFiles().map((file) => ({
+			databaseId: file.databaseId,
+			livePath: path.resolve(file.livePath)
+		})) };
+	}
+	writeSnapshot(input) {
+		const running = this.inFlight.get(input.databaseId);
+		if (running !== void 0) return running;
+		const file = this.source.openFiles().find((f) => f.databaseId === input.databaseId);
+		if (file === void 0) return Promise.reject(/* @__PURE__ */ new Error(`database snapshot refused: database "${input.databaseId}" is not open`));
+		const run = this.tail.catch(() => void 0).then(async () => {
+			return {
+				...await file.snapshot(),
+				databaseId: file.databaseId
+			};
+		});
+		this.tail = run;
+		const tracked = run.finally(() => {
+			this.inFlight.delete(input.databaseId);
+		});
+		this.inFlight.set(input.databaseId, tracked);
+		return tracked;
+	}
+};
+//#endregion
 //#region src/builtins/sqlite-storage/placement-router.ts
 function scopedName(namespace, collection) {
 	return namespace ? `${namespace}:${collection}` : collection;
@@ -1338,10 +1383,7 @@ var SqliteSettingsAddon = class extends BaseAddon {
 			},
 			{
 				capability: databaseSnapshotCapability,
-				provider: {
-					listDatabases: async () => ({ databases: [{ livePath: path.resolve(settings.livePath) }] }),
-					writeSnapshot: async () => settings.snapshot()
-				}
+				provider: new DatabaseSnapshotProvider(router)
 			}
 		];
 	}

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { A as LegacyStorageLocationDefaultSchema, An as settingsStoreCapability, B as StorageCleanupJobSchema, Bt as isLocationEnabled, Cn as resolveLocationMode, Cr as collectSecretConfigKeys, Ft as gbToBytes, H as StorageLocationTypeSchema, Hr as parseJsonObject, Kn as withLocationMode, Lr as isSecretMarker, Nn as storageCapability, Ot as evictionPolicyOfLocation, Pn as storageMigrationCapability, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Yr as secretTreeFromPaths, ei as transformSecretWrite, en as mayReadLocation, in as modeMayWrite, lr as BaseAddon, pr as REDACTED_SECRET, qr as resolveSecretMarkers, qt as legacyModeOf, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-B-NmfvVC.mjs";
+import { A as LegacyStorageLocationDefaultSchema, An as settingsStoreCapability, B as StorageCleanupJobSchema, Bt as isLocationEnabled, Cn as resolveLocationMode, Cr as collectSecretConfigKeys, Ft as gbToBytes, H as StorageLocationTypeSchema, Hr as parseJsonObject, Kn as withLocationMode, Lr as isSecretMarker, Nn as storageCapability, Ot as evictionPolicyOfLocation, Pn as storageMigrationCapability, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Yr as secretTreeFromPaths, ei as transformSecretWrite, en as mayReadLocation, in as modeMayWrite, lr as BaseAddon, pr as REDACTED_SECRET, qr as resolveSecretMarkers, qt as legacyModeOf, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-DMWeqeTF.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";

package/dist/builtins/system-backup/system-backup.service.d.ts

@@ -1,4 +1,4 @@
-import { type ArchiveSqliteSnapshot, type DatabaseSnapshotResult, type IScopedLogger } from "@camstack/types";
+import { type ArchiveSqliteSnapshot, type DatabaseSnapshotWritten, type DataStoreDatabase, type IScopedLogger } from "@camstack/types";
 import { BACKUP_ENCRYPTION_SCHEME } from "./backup-encryption.js";
 /**
 * Thrown when an archive build (or a backup run driving one) is
@@ -58,10 +58,21 @@ export declare function isExcludedFromBackup(relPath: string): boolean;
 * the `database-snapshot` capability, pinned to its own node.
 */
 export interface DatabaseOwner {
-	/** Absolute paths of the databases the owner snapshots. */
-	listDatabases(): Promise<readonly string[]>;
-	writeSnapshot(): Promise<DatabaseSnapshotResult>;
+	/** EVERY database the owner has open: its id, and its absolute path. */
+	listDatabases(): Promise<readonly OwnedDatabase[]>;
+	/** One verified snapshot of ONE database. */
+	writeSnapshot(databaseId: DataStoreDatabase): Promise<DatabaseSnapshotWritten>;
 }
+/** One database file the owner serves. */
+export interface OwnedDatabase {
+	readonly databaseId: DataStoreDatabase;
+	readonly livePath: string;
+}
+/**
+* The databases a run carries when it states none: the minimum (D382). A
+* schedule, a manual run and `createArchive` all fall back to this one value.
+*/
+export declare const DEFAULT_BACKUP_DATABASES: readonly DataStoreDatabase[];
 /** Path of the manifest file embedded inside every archive. */
 export declare const ARCHIVE_MANIFEST_NAME = ".camstack-backup-manifest.json";
 export type ArchiveEntryKind = "file" | "dir" | "symlink";
@@ -94,6 +105,12 @@ export interface ArchiveManifest {
 	* files (D693). Paths are archive-relative.
 	*/
 	sqliteSnapshots?: ArchiveSqliteSnapshot[];
+	/**
+	* Owned databases this run did NOT select: left out of the tar and of
+	* `entries` alike (a live file is never carried anyway). Absent when the
+	* run carried every owned database it found.
+	*/
+	omittedDatabases?: DataStoreDatabase[];
 }
 /** How an archive was encrypted — absent on a plain `.tar.gz`. */
 export interface ArchiveEncryption {
@@ -207,6 +224,12 @@ export declare class SystemBackupService {
 		*/
 		owner?: DatabaseOwner;
 		/**
+		* Which owned databases this run carries as snapshots; the others are left
+		* out and listed in `manifest.omittedDatabases`. Absent = `['settings']`
+		* ({@link DEFAULT_BACKUP_DATABASES}): an unstated ask is the minimum.
+		*/
+		databases?: readonly DataStoreDatabase[];
+		/**
 		* A backup PUBLIC key: the gzip stream is encrypted to it as it is
 		* written, so no plaintext archive ever touches the staging disk. Parsed
 		* before any work — a bad key builds nothing.
@@ -214,6 +237,13 @@ export declare class SystemBackupService {
 		encryptTo?: string;
 	}): Promise<CreateArchiveResult>;
 	/**
+	* An archive of the selected databases' owner snapshots and the manifest —
+	* no data-root walk, no location, no settings (D852). Refused when the owner
+	* has none of the selected files: an archive of nothing must reach no
+	* destination, because its upload prunes an older archive that has them.
+	*/
+	private createSnapshotsOnlyArchive;
+	/**
 	* Tar `present` (filtered by `excluded`) plus the staged manifest into
 	* `archivePath`.
 	*/
@@ -240,20 +270,22 @@ export declare class SystemBackupService {
 	/** Drop the marker after a successful boot-time restore. */
 	clearPendingMarker(): void;
 	/**
-	* The databases the owner declares, archive-relative, that this walk found.
-	* One outside this data root is not in scope. An owner that cannot answer
-	* stops the archive: without the answer, nothing says which file is live.
+	* The databases the owner declares, archive-relative, that this walk found,
+	* with the id of each. One outside this data root is not in scope. An owner
+	* that cannot answer stops the archive: without the answer, nothing says
+	* which file is live.
 	*/
 	private ownedDatabasesInScope;
 	/**
-	* Ask the owner for its snapshot, and place it in this archive. The snapshot
-	* must sit on THIS data root — the call is pinned to this node, so a path
-	* elsewhere means it reached another host, and that file is not ours to
-	* read — beside an owned database in scope, and it must cover EVERY owned
-	* database in scope. Anything else is refused.
+	* Ask the owner for one verified snapshot per SELECTED database, one after
+	* the other, and place each in this archive. A snapshot must sit on THIS data
+	* root — the call is pinned to this node, so a path elsewhere means it
+	* reached another host, and that file is not ours to read — beside the very
+	* database it was asked for. Anything else is refused, and the run builds
+	* nothing: the copies already taken are removed.
 	*
-	* Only ever DELETED here: `<owned db>.backup-snapshot` under this data root,
-	* a name this process derives itself. A path the owner ANSWERS is never
+	* Only ever DELETED here: `<selected db>.backup-snapshot` under this data
+	* root, a name this process derives itself. A path the owner ANSWERS is never
 	* deleted on its word — answering the live database as the snapshot would
 	* otherwise delete the live database. A file at any other path is left to
 	* the owner's own sweep.
@@ -261,7 +293,8 @@ export declare class SystemBackupService {
 	* A cancel is honoured while the owner is still copying; the copy it may
 	* finish afterwards is removed when that call settles.
 	*/
-	private takeOwnerSnapshot;
+	private takeOwnerSnapshots;
+	private takeOneSnapshot;
 	private removeSnapshot;
 	/** `abs` relative to the data root, or null when it lies outside it. */
 	private archiveRelative;

package/dist/builtins/system-config/system-config.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
-const require_constants$8 = require("../../constants-BBWZlnpQ.js");
+const require_constants$8 = require("../../constants-B5Jd8Zch.js");
 const require_x509_es = require("../../x509.es-Dzl0BbmG.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,7 +1,7 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Dr as defineCustomActions, Er as customAction, Ir as isSecretClear, Lr as isSecretMarker, Mr as hydrateSchema, Xr as secretTreeFromSchema, cr as errMsg, ei as transformSecretWrite, lr as BaseAddon, zr as makeSecretMarker } from "../../dist-B-NmfvVC.mjs";
+import { Dr as defineCustomActions, Er as customAction, Ir as isSecretClear, Lr as isSecretMarker, Mr as hydrateSchema, Xr as secretTreeFromSchema, cr as errMsg, ei as transformSecretWrite, lr as BaseAddon, zr as makeSecretMarker } from "../../dist-DMWeqeTF.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
-import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-DHhhVjkt.mjs";
+import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-CkNLi-XW.mjs";
 import { a as KeyUsagesExtension, c as Pkcs10CertificateRequestGenerator, d as X509Certificate$1, f as X509CertificateGenerator, i as KeyUsageFlags, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, s as Pkcs10CertificateRequest, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "../../x509.es-CAjSsrkk.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CiUKtVkX.js");
+const require_dist = require("../../dist-DnALrQF-.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);