@camstack/system 1.2.425 → 1.2.427

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { G as addonPagesCapability, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { W as addonPagesCapability, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { cr as errMsg, lr as BaseAddon, q as addonWidgetsCapability, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { K as addonWidgetsCapability, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { J as alertsCapability, Tr as createEvent, cr as errMsg, lr as BaseAddon, n as AlertSchema, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { Tr as createEvent, cr as errMsg, lr as BaseAddon, n as AlertSchema, q as alertsCapability, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
 //#region src/builtins/alerts/device-label.ts
 /**
 * Operator-facing device label for alert messages.

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { C as FIRST_LEVEL_MACRO_CLASSES, Pr as isEvent, Z as bareAddonId, cr as errMsg, hn as ptzAutotrackCapability, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { C as FIRST_LEVEL_MACRO_CLASSES, Pr as isEvent, X as bareAddonId, cr as errMsg, hn as ptzAutotrackCapability, lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.d.ts

@@ -271,6 +271,12 @@ export declare class BackupOrchestratorAddon extends BaseAddon<Record<string, ne
 	*   - the stamp could not be written → logged, named, not swallowed.
 	*/
 	private runScheduledBackup;
+	/**
+	* The database files the owner has open right now, for the selection UI. An
+	* owner that cannot answer is `answered: false` — never an empty list, which
+	* the UI would read as "none exists yet".
+	*/
+	private listAvailableDatabases;
 	private listSchedules;
 	private upsertSchedule;
 	private deleteSchedule;

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_restore_archive = require("../../restore-archive-C4UhQOsg.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
+const require_restore_archive = require("../../restore-archive-Dccm8lkA.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -2272,6 +2272,7 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 			upsertDestinationPolicy: (input) => this.upsertDestinationPolicy(input),
 			previewSchedule: (input) => this.previewSchedule(input),
 			listSchedules: () => this.listSchedules(),
+			listAvailableDatabases: () => this.listAvailableDatabases(),
 			upsertSchedule: (input) => this.upsertSchedule(input),
 			deleteSchedule: (input) => this.deleteSchedule(input)
 		};
@@ -3317,6 +3318,25 @@ var BackupOrchestratorAddon = class extends require_dist.BaseAddon {
 			} });
 		}
 	}
+	/**
+	* The database files the owner has open right now, for the selection UI. An
+	* owner that cannot answer is `answered: false` — never an empty list, which
+	* the UI would read as "none exists yet".
+	*/
+	async listAvailableDatabases() {
+		try {
+			return {
+				answered: true,
+				databases: (await this.databaseOwner().listDatabases()).map((d) => d.databaseId)
+			};
+		} catch (err) {
+			this.ctx.logger.warn("Backup database list: the database owner did not answer", { meta: { error: err instanceof Error ? err.message : String(err) } });
+			return {
+				answered: false,
+				databases: []
+			};
+		}
+	}
 	async listSchedules() {
 		if (!this.schedules) return [];
 		return (await this.schedules.list()).map((s) => {

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,5 +1,5 @@
-import { Br as nodePin, Fn as storageOccupancyCapability, Qr as toNodeId, X as backupCapability, lr as BaseAddon, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-DMWeqeTF.mjs";
-import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-GevpOHw8.mjs";
+import { Br as nodePin, Fn as storageOccupancyCapability, Qr as toNodeId, Y as backupCapability, lr as BaseAddon, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-DHSJV4Qc.mjs";
+import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-DH1Pxq_1.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";
@@ -2264,6 +2264,7 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			upsertDestinationPolicy: (input) => this.upsertDestinationPolicy(input),
 			previewSchedule: (input) => this.previewSchedule(input),
 			listSchedules: () => this.listSchedules(),
+			listAvailableDatabases: () => this.listAvailableDatabases(),
 			upsertSchedule: (input) => this.upsertSchedule(input),
 			deleteSchedule: (input) => this.deleteSchedule(input)
 		};
@@ -3309,6 +3310,25 @@ var BackupOrchestratorAddon = class extends BaseAddon {
 			} });
 		}
 	}
+	/**
+	* The database files the owner has open right now, for the selection UI. An
+	* owner that cannot answer is `answered: false` — never an empty list, which
+	* the UI would read as "none exists yet".
+	*/
+	async listAvailableDatabases() {
+		try {
+			return {
+				answered: true,
+				databases: (await this.databaseOwner().listDatabases()).map((d) => d.databaseId)
+			};
+		} catch (err) {
+			this.ctx.logger.warn("Backup database list: the database owner did not answer", { meta: { error: err instanceof Error ? err.message : String(err) } });
+			return {
+				answered: false,
+				databases: []
+			};
+		}
+	}
 	async listSchedules() {
 		if (!this.schedules) return [];
 		return (await this.schedules.list()).map((s) => {

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { lr as BaseAddon, p as CalendarPreferencesSchema, tt as calendarsCapability } from "../../dist-DMWeqeTF.mjs";
+import { et as calendarsCapability, lr as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-DHSJV4Qc.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { Jn as buildFfmpegArgs, Ln as streamCatalogCapability, Mn as snapshotCapability, Mr as hydrateSchema, P as MOTION_CLOSE_AFTER_MS, Tr as createEvent, an as motionCapability, ar as DeviceFeature, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, cr as errMsg, ht as declarationOwnerNodeId, i as BaseDevice, lr as BaseAddon, nn as memoizePinnedFfmpeg, nt as cameraGridLayoutCapability, sr as DeviceType, ti as EventCategory, x as DeclaredDevices } from "../../dist-DMWeqeTF.mjs";
+import { Jn as buildFfmpegArgs, Ln as streamCatalogCapability, Mn as snapshotCapability, Mr as hydrateSchema, N as MOTION_CLOSE_AFTER_MS, Tr as createEvent, an as motionCapability, ar as DeviceFeature, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, cr as errMsg, ht as declarationOwnerNodeId, i as BaseDevice, lr as BaseAddon, nn as memoizePinnedFfmpeg, sr as DeviceType, ti as EventCategory, tt as cameraGridLayoutCapability, x as DeclaredDevices } from "../../dist-DHSJV4Qc.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_composition_sources = require("../../composition-sources-197keifF.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
+const require_composition_sources = require("../../composition-sources-DvCGZEUI.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildCapabilityLookup, $n as compositionItemFieldPath, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Qn as compositionFeatureEnabled, Tr as createEvent, Xn as composedDeviceRef, Yn as cloneStatefulExpressionMemory, Zn as composedDeviceStableId, at as compositionFieldKey, cr as errMsg, er as compositionSliceKey, fn as planComposition, i as BaseDevice, ir as toExpressionValue, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as BaseAddon, nr as createStatefulExpressionMemory, qn as COMPOSER_ADDON_ID, rr as disarmRoseMemory, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, tr as compositionSourceKey, x as DeclaredDevices } from "../../dist-DMWeqeTF.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-DmzTSy26.mjs";
+import { $n as compositionItemFieldPath, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Q as buildCapabilityLookup, Qn as compositionFeatureEnabled, Tr as createEvent, Xn as composedDeviceRef, Yn as cloneStatefulExpressionMemory, Zn as composedDeviceStableId, at as compositionFieldKey, cr as errMsg, er as compositionSliceKey, fn as planComposition, i as BaseDevice, ir as toExpressionValue, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as BaseAddon, nr as createStatefulExpressionMemory, qn as COMPOSER_ADDON_ID, rr as disarmRoseMemory, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, tr as compositionSourceKey, x as DeclaredDevices } from "../../dist-DHSJV4Qc.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-BQNxXQZG.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DHSJV4Qc.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_composition_sources = require("../../composition-sources-197keifF.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
+const require_composition_sources = require("../../composition-sources-DvCGZEUI.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildCapabilityLookup, Mr as hydrateSchema, Vn as validateComposition, Xn as composedDeviceRef, _n as replacedFieldKeys, bn as resolveCoreBlockEntry, cr as errMsg, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, fn as planComposition, lr as BaseAddon, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, on as normalizeCoreBlockWrite, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlockSourceKind, x as DeclaredDevices, xn as resolveCoreBlockFiles, yt as describeComposableCaps } from "../../dist-DMWeqeTF.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-DmzTSy26.mjs";
+import { Mr as hydrateSchema, Q as buildCapabilityLookup, Vn as validateComposition, Xn as composedDeviceRef, _n as replacedFieldKeys, bn as resolveCoreBlockEntry, cr as errMsg, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, fn as planComposition, lr as BaseAddon, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, on as normalizeCoreBlockWrite, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlockSourceKind, x as DeclaredDevices, xn as resolveCoreBlockFiles, yt as describeComposableCaps } from "../../dist-DHSJV4Qc.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-BQNxXQZG.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-0FOsnzIE.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-BfGaSeQI.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -6683,7 +6683,7 @@ async function addLocation(pctx, input) {
 *
 * Returns only what was actually stored. A location with no assignment is
 * ABSENT, never `map-pin`: the fallback belongs to the renderer
-* (`resolveLocationIcon`), and folding it in here would make "the operator
+* (`resolveIconKey`), and folding it in here would make "the operator
 * picked the pin" indistinguishable from "the operator picked nothing" —
 * which is the difference an icon picker has to draw.
 */
@@ -7214,9 +7214,9 @@ function decodeLocationIcons(raw) {
 	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return null;
 	const out = {};
 	for (const [key, value] of Object.entries(raw)) {
-		const parsed = require_dist.LocationIconIdSchema.safeParse(value);
-		if (!parsed.success) continue;
-		out[key] = parsed.data;
+		const icon = require_dist.canonicalIconKey(value);
+		if (icon === void 0) continue;
+		out[key] = icon;
 	}
 	return out;
 }
@@ -7257,11 +7257,11 @@ function decodeSiteZones(raw) {
 		const rec = value;
 		const label = typeof rec["label"] === "string" ? rec["label"].trim() : "";
 		if (label.length === 0) continue;
-		const icon = require_dist.LocationIconIdSchema.safeParse(rec["icon"]);
-		out[key] = icon.success ? {
+		const icon = require_dist.canonicalIconKey(rec["icon"]);
+		out[key] = icon === void 0 ? { label } : {
 			label,
-			icon: icon.data
-		} : { label };
+			icon
+		};
 	}
 	return out;
 }

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $r as toSecretFieldView, Ct as deviceStatusCapability, En as runtimeStatePolicyFor, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Kt as legacyAutoLinkIds, Lr as isSecretMarker, N as MINUTES_PER_DAY, Nr as isDeviceConfigCap, Pt as formatMinutes, R as STREAM_PROFILE_META, Rr as isSecretMarkerLike, S as DeviceStatusSchema, St as deviceStateCapability, T as FieldClaimSchema, Tt as enumerateItemArrayFields, Xt as locationIconKey, Yr as secretTreeFromPaths, Zr as sleep$1, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, ar as DeviceFeature, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as errMsg, ei as transformSecretWrite, et as buildStreamParamsConfigSchema, ft as createDeviceExtensionProvider, j as LocationIconIdSchema, jn as siteZoneKey, kt as expandContainer, lr as BaseAddon, o as CAMERA_SWITCH_ORDER, or as DeviceRole, qr as resolveSecretMarkers, sn as normalizeUnit, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, un as parseStreamParamsFormPatch, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimModeSchema, wr as collectZodSecretPaths, xt as deviceManagerCapability, y as DAY_NAMES } from "../../dist-DMWeqeTF.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CdVFl7m2.mjs";
+import { $ as buildStreamParamsConfigSchema, $r as toSecretFieldView, Ct as deviceStatusCapability, En as runtimeStatePolicyFor, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Kt as legacyAutoLinkIds, L as STREAM_PROFILE_META, Lr as isSecretMarker, M as MINUTES_PER_DAY, Nr as isDeviceConfigCap, Pt as formatMinutes, Rr as isSecretMarkerLike, S as DeviceStatusSchema, St as deviceStateCapability, T as FieldClaimSchema, Tt as enumerateItemArrayFields, Xt as locationIconKey, Yr as secretTreeFromPaths, Zr as sleep$1, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, ar as DeviceFeature, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as errMsg, ei as transformSecretWrite, ft as createDeviceExtensionProvider, jn as siteZoneKey, kt as expandContainer, lr as BaseAddon, nt as canonicalIconKey, o as CAMERA_SWITCH_ORDER, or as DeviceRole, qr as resolveSecretMarkers, sn as normalizeUnit, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, un as parseStreamParamsFormPatch, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimModeSchema, wr as collectZodSecretPaths, xt as deviceManagerCapability, y as DAY_NAMES } from "../../dist-DHSJV4Qc.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CPz7zpza.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
@@ -6678,7 +6678,7 @@ async function addLocation(pctx, input) {
 *
 * Returns only what was actually stored. A location with no assignment is
 * ABSENT, never `map-pin`: the fallback belongs to the renderer
-* (`resolveLocationIcon`), and folding it in here would make "the operator
+* (`resolveIconKey`), and folding it in here would make "the operator
 * picked the pin" indistinguishable from "the operator picked nothing" —
 * which is the difference an icon picker has to draw.
 */
@@ -7209,9 +7209,9 @@ function decodeLocationIcons(raw) {
 	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return null;
 	const out = {};
 	for (const [key, value] of Object.entries(raw)) {
-		const parsed = LocationIconIdSchema.safeParse(value);
-		if (!parsed.success) continue;
-		out[key] = parsed.data;
+		const icon = canonicalIconKey(value);
+		if (icon === void 0) continue;
+		out[key] = icon;
 	}
 	return out;
 }
@@ -7252,11 +7252,11 @@ function decodeSiteZones(raw) {
 		const rec = value;
 		const label = typeof rec["label"] === "string" ? rec["label"].trim() : "";
 		if (label.length === 0) continue;
-		const icon = LocationIconIdSchema.safeParse(rec["icon"]);
-		out[key] = icon.success ? {
+		const icon = canonicalIconKey(rec["icon"]);
+		out[key] = icon === void 0 ? { label } : {
 			label,
-			icon: icon.data
-		} : { label };
+			icon
+		};
 	}
 	return out;
 }

package/dist/builtins/device-manager/device-meta-actions.d.ts

@@ -223,7 +223,7 @@ export declare function addLocation(pctx: ProviderContext, input: Parameters<IDe
 *
 * Returns only what was actually stored. A location with no assignment is
 * ABSENT, never `map-pin`: the fallback belongs to the renderer
-* (`resolveLocationIcon`), and folding it in here would make "the operator
+* (`resolveIconKey`), and folding it in here would make "the operator
 * picked the pin" indistinguishable from "the operator picked nothing" —
 * which is the difference an icon picker has to draw.
 */

package/dist/builtins/device-manager/device-meta-types.d.ts

@@ -7,7 +7,7 @@
 * the decoders that turn an untyped store read into one of them — nothing that
 * touches a store, a device or an event.
 */
-import type { ChildLayout, DeviceDisplayOverride, LocationIconId, RoleDisplayDefault } from "@camstack/types";
+import type { ChildLayout, DeviceDisplayOverride, IconKey, RoleDisplayDefault } from "@camstack/types";
 /**
 * Wire shape matching `z.infer<typeof SettingsSchemaWithValuesSchema>` —
 * duplicated as a plain interface because importing the Zod schema across
@@ -202,11 +202,11 @@ export interface AddonStore {
 	* and a map keyed on the displayed spelling would silently orphan its entry
 	* on exactly that edit — the icon would vanish and nothing would say why.
 	*
-	* A value outside `LOCATION_ICON_IDS` is DROPPED on decode, not trusted: the
+	* A value outside the icon catalog (`canonicalIconKey`) is DROPPED on decode, not trusted: the
 	* store is JSON on disk and a renderer handed an unknown id can only draw a
 	* hole. Dropping it degrades the location to the fallback pin instead.
 	*/
-	locationIcons?: Readonly<Record<string, LocationIconId>>;
+	locationIcons?: Readonly<Record<string, IconKey>>;
 	/**
 	* What each location LOOKS like, in the operator's own words, keyed the same
 	* way as {@link AddonStore.locationIcons}.
@@ -269,5 +269,5 @@ export declare function decodeAddonStore(raw: Record<string, unknown>): AddonSto
 */
 export interface SiteZoneRecord {
 	readonly label: string;
-	readonly icon?: LocationIconId;
+	readonly icon?: IconKey;
 }

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DHSJV4Qc.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-DeqG7LD9.js");
-const require_constants = require("../../constants-B5Jd8Zch.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-BZm055IP.js");
+const require_constants = require("../../constants-CCSJGnjs.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,6 +1,6 @@
-import { Gt as keychainCapability, O as KEYCHAIN_RESET_TRIGGER_ACTOR, Vr as normalizeSecretOwner, Wr as parseSecretRef, Wt as keychainAdminCapability, jr as formatSecretScope, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
-import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CCHXAtrs.mjs";
-import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CkNLi-XW.mjs";
+import { Gt as keychainCapability, O as KEYCHAIN_RESET_TRIGGER_ACTOR, Vr as normalizeSecretOwner, Wr as parseSecretRef, Wt as keychainAdminCapability, jr as formatSecretScope, lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
+import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-DL-qk1SM.mjs";
+import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CR4If_lP.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { F as RECORDING_SOURCE_CAMSTACK_ADDON, I as RecordingStatusSchema, Tr as createEvent, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { F as RecordingStatusSchema, P as RECORDING_SOURCE_CAMSTACK_ADDON, Tr as createEvent, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-DeqG7LD9.js");
+const require_jwt_signing_key = require("../../jwt-signing-key-BZm055IP.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,8 +1,8 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Bn as userManagementCapability, W as UserRecordSchema, Y as authProviderCapability, lr as BaseAddon, r as ApiKeyRecordSchema, z as ScopedTokenSchema } from "../../dist-DMWeqeTF.mjs";
+import { Bn as userManagementCapability, J as authProviderCapability, R as ScopedTokenSchema, U as UserRecordSchema, lr as BaseAddon, r as ApiKeyRecordSchema } from "../../dist-DHSJV4Qc.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-CCHXAtrs.mjs";
+import { a as loadJwtSigningKey, i as getProcessJwtSigningKeyState, o as processJwtSigningKey, s as setProcessJwtSigningKey, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-DL-qk1SM.mjs";
 import * as crypto$1 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/address-book.d.ts

@@ -87,8 +87,29 @@ export interface AddressBookInputs {
 	readonly httpsPalette: readonly ConnectionEndpoint[];
 	readonly appLink: ConnectionEndpoint;
 	readonly appLinkHub: string | null;
+	/** Where the hub's listeners answer (see {@link buildListenerOrigins}). */
+	readonly listenerOrigins: readonly string[];
 }
 /** Every role's answer — the resolvers from `@camstack/types`, nothing else. */
 export declare function resolveRoles(state: AddressBookState, appPalette: readonly ConnectionEndpoint[], httpsPalette: readonly ConnectionEndpoint[]): HubAddressBook["roles"];
 /** The Addresses table: app link, detected rows, then custom-only rows. */
 export declare function buildAddressBook(state: AddressBookState, inputs: AddressBookInputs): HubAddressBook;
+export interface ListenerOriginInputs {
+	/** The palette as the HTTPS listener serves it (`https://<ip>:<httpsPort>`). */
+	readonly overHttps: readonly ConnectionEndpoint[];
+	/** The palette with the LAN HTTP listener on; empty while it is off. */
+	readonly overHttp: readonly ConnectionEndpoint[];
+	readonly custom: readonly CustomAddress[];
+	/** The local name when the hub serves it, over each listener. */
+	readonly localNameOrigins: readonly string[];
+}
+/**
+* Every origin a browser can really reach this hub at: the HTTPS listener's
+* `https://<lan>:<httpsPort>` AND, while the LAN HTTP listener is on,
+* `http://<lan>:<httpPort>`; plus the public and custom addresses. The rows
+* show `http://` only while LAN HTTP is on (native clients skip the private
+* certificate), so the https origin the admin UI is opened at is in no row —
+* a sign-in return (D794) matches against this list instead of falling back
+* to the public endpoint. Never loopback, never the app link.
+*/
+export declare function buildListenerOrigins(inputs: ListenerOriginInputs): readonly string[];

package/dist/builtins/local-network/local-network.addon.d.ts

@@ -119,6 +119,12 @@ export declare class LocalNetworkAddon extends BaseAddon<LocalNetworkConfig> {
 	* list because ICE/WebRTC gathers it regardless.
 	*/
 	private buildAdvertisedEndpoints;
+	/**
+	* Where the listeners answer, whatever the rows advertise: the HTTPS
+	* listener's origin per allowlisted LAN address, the HTTP one while it is
+	* on (`http` is the palette that already carries those rows).
+	*/
+	private listenerOriginsNow;
 	/** The DETECTED palette from the cached interface/tunnel/mesh state. */
 	private endpointsNow;
 	protected onInitialize(): Promise<ProviderRegistration[]>;