@camstack/system 1.2.425 → 1.2.427

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_tls = require("../../tls-BgImdxCO.js");
 let zod = require("zod");
 let node_net = require("node:net");
@@ -228,9 +228,31 @@ function buildAddressBook(state, inputs) {
 			...state.custom.filter((c) => !detectedUrls.has(c.baseUrl)).map((c) => row(customEndpoint(c), false))
 		],
 		roles,
-		appLinkHub: inputs.appLinkHub
+		appLinkHub: inputs.appLinkHub,
+		listenerOrigins: inputs.listenerOrigins
 	};
 }
+var ORIGIN_KINDS = new Set([
+	"lan-ipv4",
+	"lan-ipv6",
+	"public"
+]);
+/**
+* Every origin a browser can really reach this hub at: the HTTPS listener's
+* `https://<lan>:<httpsPort>` AND, while the LAN HTTP listener is on,
+* `http://<lan>:<httpPort>`; plus the public and custom addresses. The rows
+* show `http://` only while LAN HTTP is on (native clients skip the private
+* certificate), so the https origin the admin UI is opened at is in no row —
+* a sign-in return (D794) matches against this list instead of falling back
+* to the public endpoint. Never loopback, never the app link.
+*/
+function buildListenerOrigins(inputs) {
+	const out = /* @__PURE__ */ new Set();
+	for (const e of [...inputs.overHttps, ...inputs.overHttp]) if (ORIGIN_KINDS.has(e.kind)) out.add(e.baseUrl);
+	for (const c of inputs.custom) out.add(c.baseUrl);
+	for (const o of inputs.localNameOrigins) out.add(o);
+	return [...out];
+}
 //#endregion
 //#region src/builtins/local-network/ipv6-lan.ts
 /**
@@ -616,11 +638,14 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	/** `getAddresses`: the Addresses table and every role's answer. */
 	async addressBook(scheme) {
 		const { http, https } = await this.palettes();
-		return buildAddressBook(this.addressState([...http, ...https]), {
+		const state = this.addressState([...http, ...https]);
+		const httpsPort = (await this.resolveAdvertisedListenPort(null)).port;
+		return buildAddressBook(state, {
 			rowsPalette: scheme === "http" ? http : https,
 			httpsPalette: https,
 			appLink: appLinkEndpoint(),
-			appLinkHub: require_dist.pickAppLinkHub(https)
+			appLinkHub: require_dist.pickAppLinkHub(https),
+			listenerOrigins: this.listenerOriginsNow(state, http, httpsPort)
 		});
 	}
 	/**
@@ -711,17 +736,33 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 		const detected = this.endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort);
 		return withAppConnectionCustomEndpoints(detected, this.addressState(detected));
 	}
+	/**
+	* Where the listeners answer, whatever the rows advertise: the HTTPS
+	* listener's origin per allowlisted LAN address, the HTTP one while it is
+	* on (`http` is the palette that already carries those rows).
+	*/
+	listenerOriginsNow(state, http, httpsPort) {
+		const httpListening = this.config.httpEnabled !== false && require_tls.readLanHttpState().listening;
+		const hostname = this.config.localHostname || null;
+		const localNameOrigins = hostname === null ? [] : [`https://${hostname}:${httpsPort}`, ...httpListening ? [`http://${hostname}:${this.resolvedHttpPort()}`] : []];
+		return buildListenerOrigins({
+			overHttps: this.endpointsNow(false, false, "https", httpsPort, false),
+			overHttp: httpListening ? http : [],
+			custom: state.custom,
+			localNameOrigins
+		});
+	}
 	/** The DETECTED palette from the cached interface/tunnel/mesh state. */
-	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort) {
+	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort, advertiseLanHttp = true) {
 		const interfaces = applyAllowlist(this.enumerate(), this.config.allowedAddresses);
 		const httpState = require_tls.readLanHttpState();
-		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, {
+		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, advertiseLanHttp ? {
 			enabled: this.config.httpEnabled !== false,
 			listening: httpState.listening,
 			httpPort: this.resolvedHttpPort(),
 			httpsPort,
 			localHostname: this.config.localHostname || null
-		});
+		} : null);
 	}
 	async onInitialize() {
 		if (!this.config.bootSeeded) {

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { D as HUB_MDNS_TXT_KEYS, E as HUB_MDNS_SERVICE_TYPE, Hn as validateCustomAddress, It as isAppLinkBase, Sn as resolveHubAddressRoles, Tn as resolveNotificationTapAddress, Yt as localNetworkCapability, dn as pickAppLinkHub, lr as BaseAddon, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ti as EventCategory, vn as resolveAppConnections, zt as isDefaultAppConnectionEndpoint } from "../../dist-DMWeqeTF.mjs";
+import { D as HUB_MDNS_TXT_KEYS, E as HUB_MDNS_SERVICE_TYPE, Hn as validateCustomAddress, It as isAppLinkBase, Sn as resolveHubAddressRoles, Tn as resolveNotificationTapAddress, Yt as localNetworkCapability, dn as pickAppLinkHub, lr as BaseAddon, rt as checkRoleAddress, s as CAMSTACK_APP_LINK_ORIGIN, ti as EventCategory, vn as resolveAppConnections, zt as isDefaultAppConnectionEndpoint } from "../../dist-DHSJV4Qc.mjs";
 import { P as readLanHttpState, _ as writeExtraSans, h as readTlsMode, i as storeUploadedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readTlsAccessStatus, n as regenerateCertificate, p as readExtraSans, r as revertToGeneratedCertificate, t as applyCertificateToListener, u as servedHttpsLeafFingerprint, y as ensureTlsCert } from "../../tls-CaOLZ09W.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
@@ -226,9 +226,31 @@ function buildAddressBook(state, inputs) {
 			...state.custom.filter((c) => !detectedUrls.has(c.baseUrl)).map((c) => row(customEndpoint(c), false))
 		],
 		roles,
-		appLinkHub: inputs.appLinkHub
+		appLinkHub: inputs.appLinkHub,
+		listenerOrigins: inputs.listenerOrigins
 	};
 }
+var ORIGIN_KINDS = new Set([
+	"lan-ipv4",
+	"lan-ipv6",
+	"public"
+]);
+/**
+* Every origin a browser can really reach this hub at: the HTTPS listener's
+* `https://<lan>:<httpsPort>` AND, while the LAN HTTP listener is on,
+* `http://<lan>:<httpPort>`; plus the public and custom addresses. The rows
+* show `http://` only while LAN HTTP is on (native clients skip the private
+* certificate), so the https origin the admin UI is opened at is in no row —
+* a sign-in return (D794) matches against this list instead of falling back
+* to the public endpoint. Never loopback, never the app link.
+*/
+function buildListenerOrigins(inputs) {
+	const out = /* @__PURE__ */ new Set();
+	for (const e of [...inputs.overHttps, ...inputs.overHttp]) if (ORIGIN_KINDS.has(e.kind)) out.add(e.baseUrl);
+	for (const c of inputs.custom) out.add(c.baseUrl);
+	for (const o of inputs.localNameOrigins) out.add(o);
+	return [...out];
+}
 //#endregion
 //#region src/builtins/local-network/ipv6-lan.ts
 /**
@@ -614,11 +636,14 @@ var LocalNetworkAddon = class extends BaseAddon {
 	/** `getAddresses`: the Addresses table and every role's answer. */
 	async addressBook(scheme) {
 		const { http, https } = await this.palettes();
-		return buildAddressBook(this.addressState([...http, ...https]), {
+		const state = this.addressState([...http, ...https]);
+		const httpsPort = (await this.resolveAdvertisedListenPort(null)).port;
+		return buildAddressBook(state, {
 			rowsPalette: scheme === "http" ? http : https,
 			httpsPalette: https,
 			appLink: appLinkEndpoint(),
-			appLinkHub: pickAppLinkHub(https)
+			appLinkHub: pickAppLinkHub(https),
+			listenerOrigins: this.listenerOriginsNow(state, http, httpsPort)
 		});
 	}
 	/**
@@ -709,17 +734,33 @@ var LocalNetworkAddon = class extends BaseAddon {
 		const detected = this.endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort);
 		return withAppConnectionCustomEndpoints(detected, this.addressState(detected));
 	}
+	/**
+	* Where the listeners answer, whatever the rows advertise: the HTTPS
+	* listener's origin per allowlisted LAN address, the HTTP one while it is
+	* on (`http` is the palette that already carries those rows).
+	*/
+	listenerOriginsNow(state, http, httpsPort) {
+		const httpListening = this.config.httpEnabled !== false && readLanHttpState().listening;
+		const hostname = this.config.localHostname || null;
+		const localNameOrigins = hostname === null ? [] : [`https://${hostname}:${httpsPort}`, ...httpListening ? [`http://${hostname}:${this.resolvedHttpPort()}`] : []];
+		return buildListenerOrigins({
+			overHttps: this.endpointsNow(false, false, "https", httpsPort, false),
+			overHttp: httpListening ? http : [],
+			custom: state.custom,
+			localNameOrigins
+		});
+	}
 	/** The DETECTED palette from the cached interface/tunnel/mesh state. */
-	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort) {
+	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort, advertiseLanHttp = true) {
 		const interfaces = applyAllowlist(this.enumerate(), this.config.allowedAddresses);
 		const httpState = readLanHttpState();
-		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, {
+		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, advertiseLanHttp ? {
 			enabled: this.config.httpEnabled !== false,
 			listening: httpState.listening,
 			httpPort: this.resolvedHttpPort(),
 			httpsPort,
 			localHostname: this.config.localHostname || null
-		});
+		} : null);
 	}
 	async onInitialize() {
 		if (!this.config.bootSeeded) {

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DHSJV4Qc.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Nt as foldSnapshotByFunction, Tr as createEvent, cr as errMsg, gn as reducePoints, lr as BaseAddon, rn as metricsProviderCapability, ti as EventCategory, yn as resolveBucketMs } from "../../dist-DMWeqeTF.mjs";
+import { Nt as foldSnapshotByFunction, Tr as createEvent, cr as errMsg, gn as reducePoints, lr as BaseAddon, rn as metricsProviderCapability, ti as EventCategory, yn as resolveBucketMs } from "../../dist-DHSJV4Qc.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as os from "node:os";
 import { platform } from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { cr as errMsg, kn as scoreRuntimes, kr as emitReadiness, lr as BaseAddon, pn as platformProbeCapability, ti as EventCategory, wt as enumerateInferenceDevices } from "../../dist-DMWeqeTF.mjs";
+import { cr as errMsg, kn as scoreRuntimes, kr as emitReadiness, lr as BaseAddon, pn as platformProbeCapability, ti as EventCategory, wt as enumerateInferenceDevices } from "../../dist-DHSJV4Qc.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { lr as BaseAddon, ti as EventCategory } from "../../dist-DMWeqeTF.mjs";
+import { lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Br as nodePin, Mn as snapshotCapability, Q as batteryCapability, Rn as streamQualityLabel, Z as bareAddonId, a as BatteryStatusSchema, ar as DeviceFeature, cr as errMsg, lr as BaseAddon, nn as memoizePinnedFfmpeg, sr as DeviceType, ti as EventCategory, vt as deriveBatteryPresence } from "../../dist-DMWeqeTF.mjs";
+import { Br as nodePin, Mn as snapshotCapability, Rn as streamQualityLabel, X as bareAddonId, Z as batteryCapability, a as BatteryStatusSchema, ar as DeviceFeature, cr as errMsg, lr as BaseAddon, nn as memoizePinnedFfmpeg, sr as DeviceType, ti as EventCategory, vt as deriveBatteryPresence } from "../../dist-DHSJV4Qc.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { In as storageProviderCapability, Mt as filesystemBrowseCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
+import { In as storageProviderCapability, Mt as filesystemBrowseCapability, lr as BaseAddon } from "../../dist-DHSJV4Qc.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
-const require_wal_maintenance = require("../../wal-maintenance-DJV1rde2.js");
+const require_wal_maintenance = require("../../wal-maintenance-DItkuOvu.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/index.mjs

@@ -1,5 +1,5 @@
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./filesystem-storage.addon.mjs";
-import { A as SQLITE_PAGE_CACHE_CEILING_KIB, B as sqliteEngineStorm, D as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_FLOOR_MS, I as SQLITE_PROFILE_REPORT_INTERVAL_MS, L as SQLITE_PROFILE_TOP_N, M as sqliteMmapSizeFor, N as sqlitePageCacheKibFor, O as SQLITE_MMAP_CEILING_BYTES, P as SQLITE_ENGINE_STORM_WALL_SHARE, R as SQLITE_SLOW_CALL_MS, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_FLOOR_KIB, k as SQLITE_MMAP_FLOOR_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SqliteOpProfiler } from "../../wal-maintenance-BtfyfuT5.mjs";
+import { A as SQLITE_PAGE_CACHE_CEILING_KIB, B as sqliteEngineStorm, D as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_FLOOR_MS, I as SQLITE_PROFILE_REPORT_INTERVAL_MS, L as SQLITE_PROFILE_TOP_N, M as sqliteMmapSizeFor, N as sqlitePageCacheKibFor, O as SQLITE_MMAP_CEILING_BYTES, P as SQLITE_ENGINE_STORM_WALL_SHARE, R as SQLITE_SLOW_CALL_MS, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_FLOOR_KIB, k as SQLITE_MMAP_FLOOR_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SqliteOpProfiler } from "../../wal-maintenance-Drqhcjit.mjs";
 import { SqliteSettingsAddon } from "./sqlite-settings.addon.mjs";
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-0FOsnzIE.js");
-const require_wal_maintenance = require("../../wal-maintenance-DJV1rde2.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-BfGaSeQI.js");
+const require_wal_maintenance = require("../../wal-maintenance-DItkuOvu.js");
 const require_sqlite_snapshot_protocol = require("../../sqlite-snapshot-protocol-B9OndqZv.js");
 const require_wal_checkpoint_policy = require("../../wal-checkpoint-policy-d2z2qPqx.js");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { Gn as vectorStoreCapability, Z as bareAddonId, _ as DATABASE_SNAPSHOT_TIMEOUT_MS, cr as errMsg, g as DATABASE_SNAPSHOT_SUFFIX, h as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, lr as BaseAddon, mr as RUNTIME_DEFAULTS, mt as databaseSnapshotCapability, pt as dataStoreProviderCapability, v as DATA_STORE_DATABASES } from "../../dist-DMWeqeTF.mjs";
-import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-CdVFl7m2.mjs";
-import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-BtfyfuT5.mjs";
+import { Gn as vectorStoreCapability, X as bareAddonId, _ as DATABASE_SNAPSHOT_TIMEOUT_MS, cr as errMsg, g as DATABASE_SNAPSHOT_SUFFIX, h as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, lr as BaseAddon, mr as RUNTIME_DEFAULTS, mt as databaseSnapshotCapability, pt as dataStoreProviderCapability, v as DATA_STORE_DATABASES } from "../../dist-DHSJV4Qc.mjs";
+import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-CPz7zpza.mjs";
+import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-Drqhcjit.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { A as LegacyStorageLocationDefaultSchema, An as settingsStoreCapability, B as StorageCleanupJobSchema, Bt as isLocationEnabled, Cn as resolveLocationMode, Cr as collectSecretConfigKeys, Ft as gbToBytes, H as StorageLocationTypeSchema, Hr as parseJsonObject, Kn as withLocationMode, Lr as isSecretMarker, Nn as storageCapability, Ot as evictionPolicyOfLocation, Pn as storageMigrationCapability, U as StorageMigrationJobSchema, V as StorageLocationModeSchema, Yr as secretTreeFromPaths, ei as transformSecretWrite, en as mayReadLocation, in as modeMayWrite, lr as BaseAddon, pr as REDACTED_SECRET, qr as resolveSecretMarkers, qt as legacyModeOf, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-DMWeqeTF.mjs";
+import { A as LegacyStorageLocationDefaultSchema, An as settingsStoreCapability, B as StorageLocationModeSchema, Bt as isLocationEnabled, Cn as resolveLocationMode, Cr as collectSecretConfigKeys, Ft as gbToBytes, H as StorageMigrationJobSchema, Hr as parseJsonObject, Kn as withLocationMode, Lr as isSecretMarker, Nn as storageCapability, Ot as evictionPolicyOfLocation, Pn as storageMigrationCapability, V as StorageLocationTypeSchema, Yr as secretTreeFromPaths, ei as transformSecretWrite, en as mayReadLocation, in as modeMayWrite, lr as BaseAddon, pr as REDACTED_SECRET, qr as resolveSecretMarkers, qt as legacyModeOf, ti as EventCategory, tn as mayWriteToLocation, z as StorageCleanupJobSchema } from "../../dist-DHSJV4Qc.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
-const require_constants$8 = require("../../constants-B5Jd8Zch.js");
+const require_constants$8 = require("../../constants-CCSJGnjs.js");
 const require_x509_es = require("../../x509.es-Dzl0BbmG.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,7 +1,7 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Dr as defineCustomActions, Er as customAction, Ir as isSecretClear, Lr as isSecretMarker, Mr as hydrateSchema, Xr as secretTreeFromSchema, cr as errMsg, ei as transformSecretWrite, lr as BaseAddon, zr as makeSecretMarker } from "../../dist-DMWeqeTF.mjs";
+import { Dr as defineCustomActions, Er as customAction, Ir as isSecretClear, Lr as isSecretMarker, Mr as hydrateSchema, Xr as secretTreeFromSchema, cr as errMsg, ei as transformSecretWrite, lr as BaseAddon, zr as makeSecretMarker } from "../../dist-DHSJV4Qc.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
-import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-CkNLi-XW.mjs";
+import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-CR4If_lP.mjs";
 import { a as KeyUsagesExtension, c as Pkcs10CertificateRequestGenerator, d as X509Certificate$1, f as X509CertificateGenerator, i as KeyUsageFlags, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, s as Pkcs10CertificateRequest, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "../../x509.es-CAjSsrkk.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DnALrQF-.js");
+const require_dist = require("../../dist-BQG3QFg7.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DMWeqeTF.mjs";
+import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DHSJV4Qc.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-DmzTSy26.mjs → composition-sources-BQNxXQZG.mjs}

@@ -1,4 +1,4 @@
-import { cr as errMsg, tr as compositionSourceKey } from "./dist-DMWeqeTF.mjs";
+import { cr as errMsg, tr as compositionSourceKey } from "./dist-DHSJV4Qc.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-197keifF.js → composition-sources-DvCGZEUI.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DnALrQF-.js");
+const require_dist = require("./dist-BQG3QFg7.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-B5Jd8Zch.js → constants-CCSJGnjs.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DnALrQF-.js");
+const require_dist = require("./dist-BQG3QFg7.js");
 let node_crypto = require("node:crypto");
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{constants-CkNLi-XW.mjs → constants-CR4If_lP.mjs}

@@ -1,4 +1,4 @@
-import { Sr as buildSecretRef } from "./dist-DMWeqeTF.mjs";
+import { Sr as buildSecretRef } from "./dist-DHSJV4Qc.mjs";
 import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/kernel/moleculer/cluster-secret.ts
 /**