@camstack/system 1.2.425 → 1.2.426

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { G as addonPagesCapability, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { G as addonPagesCapability, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-CGz9u2HD.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { cr as errMsg, lr as BaseAddon, q as addonWidgetsCapability, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { cr as errMsg, lr as BaseAddon, q as addonWidgetsCapability, ti as EventCategory } from "../../dist-CGz9u2HD.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { J as alertsCapability, Tr as createEvent, cr as errMsg, lr as BaseAddon, n as AlertSchema, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { J as alertsCapability, Tr as createEvent, cr as errMsg, lr as BaseAddon, n as AlertSchema, ti as EventCategory } from "../../dist-CGz9u2HD.mjs";
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { C as FIRST_LEVEL_MACRO_CLASSES, Pr as isEvent, Z as bareAddonId, cr as errMsg, hn as ptzAutotrackCapability, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { C as FIRST_LEVEL_MACRO_CLASSES, Pr as isEvent, Z as bareAddonId, cr as errMsg, hn as ptzAutotrackCapability, lr as BaseAddon, ti as EventCategory } from "../../dist-CGz9u2HD.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.d.ts

@@ -271,6 +271,12 @@ export declare class BackupOrchestratorAddon extends BaseAddon<Record<string, ne
 	*   - the stamp could not be written → logged, named, not swallowed.
 	*/
 	private runScheduledBackup;
+	/**
+	* The database files the owner has open right now, for the selection UI. An
+	* owner that cannot answer is `answered: false` — never an empty list, which
+	* the UI would read as "none exists yet".
+	*/
+	private listAvailableDatabases;
 	private listSchedules;
 	private upsertSchedule;
 	private deleteSchedule;

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_restore_archive = require("../../restore-archive-C4UhQOsg.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
+const require_restore_archive = require("../../restore-archive-BJp4Llea.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -2272,6 +2272,7 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 			upsertDestinationPolicy: (input) => this.upsertDestinationPolicy(input),
 			previewSchedule: (input) => this.previewSchedule(input),
 			listSchedules: () => this.listSchedules(),
+			listAvailableDatabases: () => this.listAvailableDatabases(),
 			upsertSchedule: (input) => this.upsertSchedule(input),
 			deleteSchedule: (input) => this.deleteSchedule(input)
 		};
@@ -3317,6 +3318,25 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 			} });
 		}
 	}
+	/**
+	* The database files the owner has open right now, for the selection UI. An
+	* owner that cannot answer is `answered: false` — never an empty list, which
+	* the UI would read as "none exists yet".
+	*/
+	async listAvailableDatabases() {
+		try {
+			return {
+				answered: true,
+				databases: (await this.databaseOwner().listDatabases()).map((d) => d.databaseId)
+			};
+		} catch (err) {
+			this.ctx.logger.warn("Backup database list: the database owner did not answer", { meta: { error: err instanceof Error ? err.message : String(err) } });
+			return {
+				answered: false,
+				databases: []
+			};
+		}
+	}
 	async listSchedules() {
 		if (!this.schedules) return [];
 		return (await this.schedules.list()).map((s) => {

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,5 +1,5 @@
-import { Br as nodePin, Fn as storageOccupancyCapability, Qr as toNodeId, X as backupCapability, lr as BaseAddon, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-DMWeqeTF.mjs";
-import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-GevpOHw8.mjs";
+import { Br as nodePin, Fn as storageOccupancyCapability, Qr as toNodeId, X as backupCapability, lr as BaseAddon, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-CGz9u2HD.mjs";
+import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-CZyUM8Qf.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";
@@ -2264,6 +2264,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			upsertDestinationPolicy: (input) => this.upsertDestinationPolicy(input),
 			previewSchedule: (input) => this.previewSchedule(input),
 			listSchedules: () => this.listSchedules(),
+			listAvailableDatabases: () => this.listAvailableDatabases(),
 			upsertSchedule: (input) => this.upsertSchedule(input),
 			deleteSchedule: (input) => this.deleteSchedule(input)
 		};
@@ -3309,6 +3310,25 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			} });
 		}
 	}
+	/**
+	* The database files the owner has open right now, for the selection UI. An
+	* owner that cannot answer is `answered: false` — never an empty list, which
+	* the UI would read as "none exists yet".
+	*/
+	async listAvailableDatabases() {
+		try {
+			return {
+				answered: true,
+				databases: (await this.databaseOwner().listDatabases()).map((d) => d.databaseId)
+			};
+		} catch (err) {
+			this.ctx.logger.warn("Backup database list: the database owner did not answer", { meta: { error: err instanceof Error ? err.message : String(err) } });
+			return {
+				answered: false,
+				databases: []
+			};
+		}
+	}
 	async listSchedules() {
 		if (!this.schedules) return [];
 		return (await this.schedules.list()).map((s) => {

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { lr as BaseAddon, p as CalendarPreferencesSchema, tt as calendarsCapability } from "../../dist-DMWeqeTF.mjs";
+import { lr as BaseAddon, p as CalendarPreferencesSchema, tt as calendarsCapability } from "../../dist-CGz9u2HD.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { Jn as buildFfmpegArgs, Ln as streamCatalogCapability, Mn as snapshotCapability, Mr as hydrateSchema, P as MOTION_CLOSE_AFTER_MS, Tr as createEvent, an as motionCapability, ar as DeviceFeature, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, cr as errMsg, ht as declarationOwnerNodeId, i as BaseDevice, lr as BaseAddon, nn as memoizePinnedFfmpeg, nt as cameraGridLayoutCapability, sr as DeviceType, ti as EventCategory, x as DeclaredDevices } from "../../dist-DMWeqeTF.mjs";
+import { Jn as buildFfmpegArgs, Ln as streamCatalogCapability, Mn as snapshotCapability, Mr as hydrateSchema, P as MOTION_CLOSE_AFTER_MS, Tr as createEvent, an as motionCapability, ar as DeviceFeature, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, cr as errMsg, ht as declarationOwnerNodeId, i as BaseDevice, lr as BaseAddon, nn as memoizePinnedFfmpeg, nt as cameraGridLayoutCapability, sr as DeviceType, ti as EventCategory, x as DeclaredDevices } from "../../dist-CGz9u2HD.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_composition_sources = require("../../composition-sources-197keifF.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
+const require_composition_sources = require("../../composition-sources-60tuHQ9N.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildCapabilityLookup, $n as compositionItemFieldPath, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Qn as compositionFeatureEnabled, Tr as createEvent, Xn as composedDeviceRef, Yn as cloneStatefulExpressionMemory, Zn as composedDeviceStableId, at as compositionFieldKey, cr as errMsg, er as compositionSliceKey, fn as planComposition, i as BaseDevice, ir as toExpressionValue, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as BaseAddon, nr as createStatefulExpressionMemory, qn as COMPOSER_ADDON_ID, rr as disarmRoseMemory, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, tr as compositionSourceKey, x as DeclaredDevices } from "../../dist-DMWeqeTF.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-DmzTSy26.mjs";
+import { $ as buildCapabilityLookup, $n as compositionItemFieldPath, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Qn as compositionFeatureEnabled, Tr as createEvent, Xn as composedDeviceRef, Yn as cloneStatefulExpressionMemory, Zn as composedDeviceStableId, at as compositionFieldKey, cr as errMsg, er as compositionSliceKey, fn as planComposition, i as BaseDevice, ir as toExpressionValue, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as BaseAddon, nr as createStatefulExpressionMemory, qn as COMPOSER_ADDON_ID, rr as disarmRoseMemory, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, tr as compositionSourceKey, x as DeclaredDevices } from "../../dist-CGz9u2HD.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-gxVpghXh.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-CGz9u2HD.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_composition_sources = require("../../composition-sources-197keifF.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
+const require_composition_sources = require("../../composition-sources-60tuHQ9N.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildCapabilityLookup, Mr as hydrateSchema, Vn as validateComposition, Xn as composedDeviceRef, _n as replacedFieldKeys, bn as resolveCoreBlockEntry, cr as errMsg, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, fn as planComposition, lr as BaseAddon, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, on as normalizeCoreBlockWrite, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlockSourceKind, x as DeclaredDevices, xn as resolveCoreBlockFiles, yt as describeComposableCaps } from "../../dist-DMWeqeTF.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-DmzTSy26.mjs";
+import { $ as buildCapabilityLookup, Mr as hydrateSchema, Vn as validateComposition, Xn as composedDeviceRef, _n as replacedFieldKeys, bn as resolveCoreBlockEntry, cr as errMsg, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, fn as planComposition, lr as BaseAddon, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, on as normalizeCoreBlockWrite, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlockSourceKind, x as DeclaredDevices, xn as resolveCoreBlockFiles, yt as describeComposableCaps } from "../../dist-CGz9u2HD.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-gxVpghXh.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-0FOsnzIE.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-Dr2AyhsD.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $r as toSecretFieldView, Ct as deviceStatusCapability, En as runtimeStatePolicyFor, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Kt as legacyAutoLinkIds, Lr as isSecretMarker, N as MINUTES_PER_DAY, Nr as isDeviceConfigCap, Pt as formatMinutes, R as STREAM_PROFILE_META, Rr as isSecretMarkerLike, S as DeviceStatusSchema, St as deviceStateCapability, T as FieldClaimSchema, Tt as enumerateItemArrayFields, Xt as locationIconKey, Yr as secretTreeFromPaths, Zr as sleep$1, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, ar as DeviceFeature, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as errMsg, ei as transformSecretWrite, et as buildStreamParamsConfigSchema, ft as createDeviceExtensionProvider, j as LocationIconIdSchema, jn as siteZoneKey, kt as expandContainer, lr as BaseAddon, o as CAMERA_SWITCH_ORDER, or as DeviceRole, qr as resolveSecretMarkers, sn as normalizeUnit, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, un as parseStreamParamsFormPatch, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimModeSchema, wr as collectZodSecretPaths, xt as deviceManagerCapability, y as DAY_NAMES } from "../../dist-DMWeqeTF.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CdVFl7m2.mjs";
+import { $r as toSecretFieldView, Ct as deviceStatusCapability, En as runtimeStatePolicyFor, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Kt as legacyAutoLinkIds, Lr as isSecretMarker, N as MINUTES_PER_DAY, Nr as isDeviceConfigCap, Pt as formatMinutes, R as STREAM_PROFILE_META, Rr as isSecretMarkerLike, S as DeviceStatusSchema, St as deviceStateCapability, T as FieldClaimSchema, Tt as enumerateItemArrayFields, Xt as locationIconKey, Yr as secretTreeFromPaths, Zr as sleep$1, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, ar as DeviceFeature, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as errMsg, ei as transformSecretWrite, et as buildStreamParamsConfigSchema, ft as createDeviceExtensionProvider, j as LocationIconIdSchema, jn as siteZoneKey, kt as expandContainer, lr as BaseAddon, o as CAMERA_SWITCH_ORDER, or as DeviceRole, qr as resolveSecretMarkers, sn as normalizeUnit, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, un as parseStreamParamsFormPatch, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimModeSchema, wr as collectZodSecretPaths, xt as deviceManagerCapability, y as DAY_NAMES } from "../../dist-CGz9u2HD.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-Dut6QWh6.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-CGz9u2HD.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-DeqG7LD9.js");
-const require_constants = require("../../constants-B5Jd8Zch.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-BdDy9ZJN.js");
+const require_constants = require("../../constants-CO5zpJQY.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,6 +1,6 @@
-import { Gt as keychainCapability, O as KEYCHAIN_RESET_TRIGGER_ACTOR, Vr as normalizeSecretOwner, Wr as parseSecretRef, Wt as keychainAdminCapability, jr as formatSecretScope, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
-import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CCHXAtrs.mjs";
-import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CkNLi-XW.mjs";
+import { Gt as keychainCapability, O as KEYCHAIN_RESET_TRIGGER_ACTOR, Vr as normalizeSecretOwner, Wr as parseSecretRef, Wt as keychainAdminCapability, jr as formatSecretScope, lr as BaseAddon, ti as EventCategory } from "../../dist-CGz9u2HD.mjs";
+import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-C_w5ielw.mjs";
+import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-B6YTf0v2.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { F as RECORDING_SOURCE_CAMSTACK_ADDON, I as RecordingStatusSchema, Tr as createEvent, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { F as RECORDING_SOURCE_CAMSTACK_ADDON, I as RecordingStatusSchema, Tr as createEvent, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-CGz9u2HD.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-DeqG7LD9.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-BdDy9ZJN.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,8 +1,8 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Bn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, lr as BaseAddon, r as ApiKeyRecordSchema, z as ScopedTokenSchema } from "../../dist-DMWeqeTF.mjs";
+import { Bn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, lr as BaseAddon, r as ApiKeyRecordSchema, z as ScopedTokenSchema } from "../../dist-CGz9u2HD.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CCHXAtrs.mjs";
+import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-C_w5ielw.mjs";
 import * as crypto$1 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/address-book.d.ts

@@ -87,8 +87,29 @@ export interface AddressBookInputs {
 	readonly httpsPalette: readonly ConnectionEndpoint[];
 	readonly appLink: ConnectionEndpoint;
 	readonly appLinkHub: string | null;
+	/** Where the hub's listeners answer (see {@link buildListenerOrigins}). */
+	readonly listenerOrigins: readonly string[];
 }
 /** Every role's answer — the resolvers from `@camstack/types`, nothing else. */
 export declare function resolveRoles(state: AddressBookState, appPalette: readonly ConnectionEndpoint[], httpsPalette: readonly ConnectionEndpoint[]): HubAddressBook["roles"];
 /** The Addresses table: app link, detected rows, then custom-only rows. */
 export declare function buildAddressBook(state: AddressBookState, inputs: AddressBookInputs): HubAddressBook;
+export interface ListenerOriginInputs {
+	/** The palette as the HTTPS listener serves it (`https://<ip>:<httpsPort>`). */
+	readonly overHttps: readonly ConnectionEndpoint[];
+	/** The palette with the LAN HTTP listener on; empty while it is off. */
+	readonly overHttp: readonly ConnectionEndpoint[];
+	readonly custom: readonly CustomAddress[];
+	/** The local name when the hub serves it, over each listener. */
+	readonly localNameOrigins: readonly string[];
+}
+/**
+* Every origin a browser can really reach this hub at: the HTTPS listener's
+* `https://<lan>:<httpsPort>` AND, while the LAN HTTP listener is on,
+* `http://<lan>:<httpPort>`; plus the public and custom addresses. The rows
+* show `http://` only while LAN HTTP is on (native clients skip the private
+* certificate), so the https origin the admin UI is opened at is in no row —
+* a sign-in return (D794) matches against this list instead of falling back
+* to the public endpoint. Never loopback, never the app link.
+*/
+export declare function buildListenerOrigins(inputs: ListenerOriginInputs): readonly string[];

package/dist/builtins/local-network/local-network.addon.d.ts

@@ -119,6 +119,12 @@ export declare class LocalNetworkAddon extends BaseAddon<LocalNetworkConfig> {
 	* list because ICE/WebRTC gathers it regardless.
 	*/
 	private buildAdvertisedEndpoints;
+	/**
+	* Where the listeners answer, whatever the rows advertise: the HTTPS
+	* listener's origin per allowlisted LAN address, the HTTP one while it is
+	* on (`http` is the palette that already carries those rows).
+	*/
+	private listenerOriginsNow;
 	/** The DETECTED palette from the cached interface/tunnel/mesh state. */
 	private endpointsNow;
 	protected onInitialize(): Promise<ProviderRegistration[]>;

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-K3WFop9Q.js");
 const require_tls = require("../../tls-BgImdxCO.js");
 let zod = require("zod");
 let node_net = require("node:net");
@@ -228,9 +228,31 @@ function buildAddressBook(state, inputs) {
 			...state.custom.filter((c) => !detectedUrls.has(c.baseUrl)).map((c) => row(customEndpoint(c), false))
 		],
 		roles,
-		appLinkHub: inputs.appLinkHub
+		appLinkHub: inputs.appLinkHub,
+		listenerOrigins: inputs.listenerOrigins
 	};
 }
+var ORIGIN_KINDS = new Set([
+	"lan-ipv4",
+	"lan-ipv6",
+	"public"
+]);
+/**
+* Every origin a browser can really reach this hub at: the HTTPS listener's
+* `https://<lan>:<httpsPort>` AND, while the LAN HTTP listener is on,
+* `http://<lan>:<httpPort>`; plus the public and custom addresses. The rows
+* show `http://` only while LAN HTTP is on (native clients skip the private
+* certificate), so the https origin the admin UI is opened at is in no row —
+* a sign-in return (D794) matches against this list instead of falling back
+* to the public endpoint. Never loopback, never the app link.
+*/
+function buildListenerOrigins(inputs) {
+	const out = /* @__PURE__ */ new Set();
+	for (const e of [...inputs.overHttps, ...inputs.overHttp]) if (ORIGIN_KINDS.has(e.kind)) out.add(e.baseUrl);
+	for (const c of inputs.custom) out.add(c.baseUrl);
+	for (const o of inputs.localNameOrigins) out.add(o);
+	return [...out];
+}
 //#endregion
 //#region src/builtins/local-network/ipv6-lan.ts
 /**
@@ -616,11 +638,14 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	/** `getAddresses`: the Addresses table and every role's answer. */
 	async addressBook(scheme) {
 		const { http, https } = await this.palettes();
-		return buildAddressBook(this.addressState([...http, ...https]), {
+		const state = this.addressState([...http, ...https]);
+		const httpsPort = (await this.resolveAdvertisedListenPort(null)).port;
+		return buildAddressBook(state, {
 			rowsPalette: scheme === "http" ? http : https,
 			httpsPalette: https,
 			appLink: appLinkEndpoint(),
-			appLinkHub: require_dist.pickAppLinkHub(https)
+			appLinkHub: require_dist.pickAppLinkHub(https),
+			listenerOrigins: this.listenerOriginsNow(state, http, httpsPort)
 		});
 	}
 	/**
@@ -711,17 +736,33 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 		const detected = this.endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort);
 		return withAppConnectionCustomEndpoints(detected, this.addressState(detected));
 	}
+	/**
+	* Where the listeners answer, whatever the rows advertise: the HTTPS
+	* listener's origin per allowlisted LAN address, the HTTP one while it is
+	* on (`http` is the palette that already carries those rows).
+	*/
+	listenerOriginsNow(state, http, httpsPort) {
+		const httpListening = this.config.httpEnabled !== false && require_tls.readLanHttpState().listening;
+		const hostname = this.config.localHostname || null;
+		const localNameOrigins = hostname === null ? [] : [`https://${hostname}:${httpsPort}`, ...httpListening ? [`http://${hostname}:${this.resolvedHttpPort()}`] : []];
+		return buildListenerOrigins({
+			overHttps: this.endpointsNow(false, false, "https", httpsPort, false),
+			overHttp: httpListening ? http : [],
+			custom: state.custom,
+			localNameOrigins
+		});
+	}
 	/** The DETECTED palette from the cached interface/tunnel/mesh state. */
-	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort) {
+	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort, advertiseLanHttp = true) {
 		const interfaces = applyAllowlist(this.enumerate(), this.config.allowedAddresses);
 		const httpState = require_tls.readLanHttpState();
-		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, {
+		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, advertiseLanHttp ? {
 			enabled: this.config.httpEnabled !== false,
 			listening: httpState.listening,
 			httpPort: this.resolvedHttpPort(),
 			httpsPort,
 			localHostname: this.config.localHostname || null
-		});
+		} : null);
 	}
 	async onInitialize() {
 		if (!this.config.bootSeeded) {

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { D as HUB_MDNS_TXT_KEYS, E as HUB_MDNS_SERVICE_TYPE, Hn as validateCustomAddress, It as isAppLinkBase, Sn as resolveHubAddressRoles, Tn as resolveNotificationTapAddress, Yt as localNetworkCapability, dn as pickAppLinkHub, lr as BaseAddon, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ti as EventCategory, vn as resolveAppConnections, zt as isDefaultAppConnectionEndpoint } from "../../dist-DMWeqeTF.mjs";
+import { D as HUB_MDNS_TXT_KEYS, E as HUB_MDNS_SERVICE_TYPE, Hn as validateCustomAddress, It as isAppLinkBase, Sn as resolveHubAddressRoles, Tn as resolveNotificationTapAddress, Yt as localNetworkCapability, dn as pickAppLinkHub, lr as BaseAddon, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ti as EventCategory, vn as resolveAppConnections, zt as isDefaultAppConnectionEndpoint } from "../../dist-CGz9u2HD.mjs";
 import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-CaOLZ09W.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
@@ -226,9 +226,31 @@ function buildAddressBook(state, inputs) {
 			...state.custom.filter((c) => !detectedUrls.has(c.baseUrl)).map((c) => row(customEndpoint(c), false))
 		],
 		roles,
-		appLinkHub: inputs.appLinkHub
+		appLinkHub: inputs.appLinkHub,
+		listenerOrigins: inputs.listenerOrigins
 	};
 }
+var ORIGIN_KINDS = new Set([
+	"lan-ipv4",
+	"lan-ipv6",
+	"public"
+]);
+/**
+* Every origin a browser can really reach this hub at: the HTTPS listener's
+* `https://<lan>:<httpsPort>` AND, while the LAN HTTP listener is on,
+* `http://<lan>:<httpPort>`; plus the public and custom addresses. The rows
+* show `http://` only while LAN HTTP is on (native clients skip the private
+* certificate), so the https origin the admin UI is opened at is in no row —
+* a sign-in return (D794) matches against this list instead of falling back
+* to the public endpoint. Never loopback, never the app link.
+*/
+function buildListenerOrigins(inputs) {
+	const out = /* @__PURE__ */ new Set();
+	for (const e of [...inputs.overHttps, ...inputs.overHttp]) if (ORIGIN_KINDS.has(e.kind)) out.add(e.baseUrl);
+	for (const c of inputs.custom) out.add(c.baseUrl);
+	for (const o of inputs.localNameOrigins) out.add(o);
+	return [...out];
+}
 //#endregion
 //#region src/builtins/local-network/ipv6-lan.ts
 /**
@@ -614,11 +636,14 @@ var LocalNetworkAddon = class extends BaseAddon {
 	/** `getAddresses`: the Addresses table and every role's answer. */
 	async addressBook(scheme) {
 		const { http, https } = await this.palettes();
-		return buildAddressBook(this.addressState([...http, ...https]), {
+		const state = this.addressState([...http, ...https]);
+		const httpsPort = (await this.resolveAdvertisedListenPort(null)).port;
+		return buildAddressBook(state, {
 			rowsPalette: scheme === "http" ? http : https,
 			httpsPalette: https,
 			appLink: appLinkEndpoint(),
-			appLinkHub: pickAppLinkHub(https)
+			appLinkHub: pickAppLinkHub(https),
+			listenerOrigins: this.listenerOriginsNow(state, http, httpsPort)
 		});
 	}
 	/**
@@ -709,17 +734,33 @@ var LocalNetworkAddon = class extends BaseAddon {
 		const detected = this.endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort);
 		return withAppConnectionCustomEndpoints(detected, this.addressState(detected));
 	}
+	/**
+	* Where the listeners answer, whatever the rows advertise: the HTTPS
+	* listener's origin per allowlisted LAN address, the HTTP one while it is
+	* on (`http` is the palette that already carries those rows).
+	*/
+	listenerOriginsNow(state, http, httpsPort) {
+		const httpListening = this.config.httpEnabled !== false && readLanHttpState().listening;
+		const hostname = this.config.localHostname || null;
+		const localNameOrigins = hostname === null ? [] : [`https://${hostname}:${httpsPort}`, ...httpListening ? [`http://${hostname}:${this.resolvedHttpPort()}`] : []];
+		return buildListenerOrigins({
+			overHttps: this.endpointsNow(false, false, "https", httpsPort, false),
+			overHttp: httpListening ? http : [],
+			custom: state.custom,
+			localNameOrigins
+		});
+	}
 	/** The DETECTED palette from the cached interface/tunnel/mesh state. */
-	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort) {
+	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort, advertiseLanHttp = true) {
 		const interfaces = applyAllowlist(this.enumerate(), this.config.allowedAddresses);
 		const httpState = readLanHttpState();
-		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, {
+		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, advertiseLanHttp ? {
 			enabled: this.config.httpEnabled !== false,
 			listening: httpState.listening,
 			httpPort: this.resolvedHttpPort(),
 			httpsPort,
 			localHostname: this.config.localHostname || null
-		});
+		} : null);
 	}
 	async onInitialize() {
 		if (!this.config.bootSeeded) {