@camstack/system 1.2.428 → 1.2.429

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (100) hide show
  1. package/dist/agent-https-names-CpUSuP4w.js +120 -0
  2. package/dist/agent-https-names-uetr4OQl.mjs +91 -0
  3. package/dist/auth/auth-audit-log.d.ts +1 -1
  4. package/dist/auth/device-ca-store.d.ts +57 -0
  5. package/dist/auth/device-ca.d.ts +75 -0
  6. package/dist/auth/device-credential-manager.d.ts +154 -0
  7. package/dist/auth/login-session-manager.d.ts +14 -2
  8. package/dist/auth/user-management-internal.d.ts +10 -1
  9. package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js +1 -1
  10. package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs +1 -1
  11. package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js +1 -1
  12. package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs +1 -1
  13. package/dist/builtins/alerts/alerts.addon.js +1 -1
  14. package/dist/builtins/alerts/alerts.addon.mjs +1 -1
  15. package/dist/builtins/autotrack/index.js +1 -1
  16. package/dist/builtins/autotrack/index.mjs +1 -1
  17. package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js +2 -2
  18. package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs +2 -2
  19. package/dist/builtins/calendars/calendars.addon.js +1 -1
  20. package/dist/builtins/calendars/calendars.addon.mjs +1 -1
  21. package/dist/builtins/camera-grid/index.js +1 -1
  22. package/dist/builtins/camera-grid/index.mjs +1 -1
  23. package/dist/builtins/composer/composer.addon.js +2 -2
  24. package/dist/builtins/composer/composer.addon.mjs +2 -2
  25. package/dist/builtins/console-logging/index.js +1 -1
  26. package/dist/builtins/console-logging/index.mjs +1 -1
  27. package/dist/builtins/core-blocks/core-blocks.addon.js +2 -2
  28. package/dist/builtins/core-blocks/core-blocks.addon.mjs +2 -2
  29. package/dist/builtins/device-manager/device-manager.addon.js +2 -2
  30. package/dist/builtins/device-manager/device-manager.addon.mjs +2 -2
  31. package/dist/builtins/hub-forwarder/index.js +1 -1
  32. package/dist/builtins/hub-forwarder/index.mjs +1 -1
  33. package/dist/builtins/keychain/index.js +10 -6
  34. package/dist/builtins/keychain/index.mjs +8 -4
  35. package/dist/builtins/liveness-monitor/liveness-monitor.addon.js +1 -1
  36. package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs +1 -1
  37. package/dist/builtins/local-auth/local-auth.addon.d.ts +6 -0
  38. package/dist/builtins/local-auth/local-auth.addon.js +955 -47
  39. package/dist/builtins/local-auth/local-auth.addon.mjs +946 -41
  40. package/dist/builtins/local-network/local-network.addon.js +2 -2
  41. package/dist/builtins/local-network/local-network.addon.mjs +2 -2
  42. package/dist/builtins/loki-logging/index.js +1 -1
  43. package/dist/builtins/loki-logging/index.mjs +1 -1
  44. package/dist/builtins/native-metrics/native-metrics.addon.js +1 -1
  45. package/dist/builtins/native-metrics/native-metrics.addon.mjs +1 -1
  46. package/dist/builtins/platform-probe/index.js +1 -1
  47. package/dist/builtins/platform-probe/index.mjs +1 -1
  48. package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js +1 -1
  49. package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs +1 -1
  50. package/dist/builtins/snapshot/index.js +1 -1
  51. package/dist/builtins/snapshot/index.mjs +1 -1
  52. package/dist/builtins/sqlite-storage/filesystem-storage.addon.js +1 -1
  53. package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs +1 -1
  54. package/dist/builtins/sqlite-storage/index.js +1 -1
  55. package/dist/builtins/sqlite-storage/index.mjs +1 -1
  56. package/dist/builtins/sqlite-storage/sqlite-settings.addon.js +3 -3
  57. package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs +3 -3
  58. package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js +1 -1
  59. package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs +1 -1
  60. package/dist/builtins/system-config/system-config.addon.d.ts +18 -0
  61. package/dist/builtins/system-config/system-config.addon.js +834 -18
  62. package/dist/builtins/system-config/system-config.addon.mjs +819 -19
  63. package/dist/builtins/winston-logging/index.js +1 -1
  64. package/dist/builtins/winston-logging/index.mjs +1 -1
  65. package/dist/{composition-sources-DvCGZEUI.js → composition-sources-C2VNX6tF.js} +1 -1
  66. package/dist/{composition-sources-BQNxXQZG.mjs → composition-sources-SYtYuAgh.mjs} +1 -1
  67. package/dist/{constants-CR4If_lP.mjs → constants-CKuWoWvc.mjs} +1 -1
  68. package/dist/{constants-CCSJGnjs.js → constants-RI-hGP5S.js} +1 -1
  69. package/dist/device-ca-BWfdDB3k.js +462 -0
  70. package/dist/device-ca-R7DKKZL6.mjs +355 -0
  71. package/dist/{dist-BQG3QFg7.js → dist-Bgy_AmwX.js} +554 -0
  72. package/dist/{dist-DHSJV4Qc.mjs → dist-CSSfTM18.mjs} +507 -1
  73. package/dist/file-host-worker.js +1 -1
  74. package/dist/file-host-worker.mjs +1 -1
  75. package/dist/index.d.ts +4 -1
  76. package/dist/index.js +59 -12
  77. package/dist/index.mjs +10 -9
  78. package/dist/kernel/index.d.ts +2 -2
  79. package/dist/kernel/moleculer/mesh-mtls/index.d.ts +4 -1
  80. package/dist/kernel/moleculer/mesh-mtls/mesh-certificate-registry.d.ts +91 -0
  81. package/dist/kernel/moleculer/mesh-mtls/mesh-enroll.d.ts +4 -0
  82. package/dist/kernel/moleculer/mesh-mtls/mesh-peer-transport.d.ts +23 -0
  83. package/dist/kernel/moleculer/mesh-mtls/mesh-renewal.d.ts +126 -0
  84. package/dist/kernel/moleculer/mesh-mtls/mesh-tls-gate.d.ts +40 -0
  85. package/dist/kernel/moleculer/mesh-mtls/tls-tcp-transporter.d.ts +15 -0
  86. package/dist/{restore-archive-DH1Pxq_1.mjs → restore-archive-AIwMHO5_.mjs} +1 -1
  87. package/dist/{restore-archive-Dccm8lkA.js → restore-archive-BYUEMsog.js} +1 -1
  88. package/dist/{retired-settings-keys-BfGaSeQI.js → retired-settings-keys-BTPkRLTS.js} +1 -1
  89. package/dist/{retired-settings-keys-CPz7zpza.mjs → retired-settings-keys-H0rYXT27.mjs} +1 -1
  90. package/dist/tls/agent-https-names.d.ts +27 -0
  91. package/dist/tls/agent-https.d.ts +111 -0
  92. package/dist/tls/cert-issue.d.ts +7 -0
  93. package/dist/tls/index.d.ts +3 -0
  94. package/dist/{tls-BgImdxCO.js → tls-C5IYg3V5.js} +406 -0
  95. package/dist/{tls-CaOLZ09W.mjs → tls-CpcGkeJV.mjs} +314 -4
  96. package/dist/{wal-maintenance-DItkuOvu.js → wal-maintenance-BSGsxKW7.js} +0 -0
  97. package/dist/{wal-maintenance-Drqhcjit.mjs → wal-maintenance-DW0FfGV7.mjs} +0 -0
  98. package/package.json +4 -1
  99. package/dist/jwt-signing-key-BZm055IP.js +0 -174
  100. package/dist/jwt-signing-key-DL-qk1SM.mjs +0 -127
@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-BQG3QFg7.js");
7
- const require_restore_archive = require("../../restore-archive-Dccm8lkA.js");
6
+ const require_dist = require("../../dist-Bgy_AmwX.js");
7
+ const require_restore_archive = require("../../restore-archive-BYUEMsog.js");
8
8
  let node_crypto = require("node:crypto");
9
9
  let node_fs_promises = require("node:fs/promises");
10
10
  node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -1,5 +1,5 @@
1
- import { Br as nodePin, Fn as storageOccupancyCapability, Qr as toNodeId, Y as backupCapability, lr as BaseAddon, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-DHSJV4Qc.mjs";
2
- import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-DH1Pxq_1.mjs";
1
+ import { $ as backupCapability, Jr as nodePin, Un as storageOccupancyCapability, _r as BaseAddon, li as EventCategory, ln as mayWriteToLocation, oi as toNodeId } from "../../dist-CSSfTM18.mjs";
2
+ import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-AIwMHO5_.mjs";
3
3
  import { randomUUID } from "node:crypto";
4
4
  import * as fsp from "node:fs/promises";
5
5
  import * as path$1 from "node:path";
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-BQG3QFg7.js");
6
+ const require_dist = require("../../dist-Bgy_AmwX.js");
7
7
  const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
8
8
  let zod = require("zod");
9
9
  //#region src/builtins/calendars/calendar-color.ts
@@ -1,4 +1,4 @@
1
- import { et as calendarsCapability, lr as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-DHSJV4Qc.mjs";
1
+ import { _r as BaseAddon, ot as calendarsCapability, p as CalendarPreferencesSchema } from "../../dist-CSSfTM18.mjs";
2
2
  import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
3
3
  import { z } from "zod";
4
4
  //#region src/builtins/calendars/calendar-color.ts
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-BQG3QFg7.js");
6
+ const require_dist = require("../../dist-Bgy_AmwX.js");
7
7
  let zod = require("zod");
8
8
  let _camstack_types_node = require("@camstack/types/node");
9
9
  let node_path = require("node:path");
@@ -1,4 +1,4 @@
1
- import { Jn as buildFfmpegArgs, Ln as streamCatalogCapability, Mn as snapshotCapability, Mr as hydrateSchema, N as MOTION_CLOSE_AFTER_MS, Tr as createEvent, an as motionCapability, ar as DeviceFeature, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, cr as errMsg, ht as declarationOwnerNodeId, i as BaseDevice, lr as BaseAddon, nn as memoizePinnedFfmpeg, sr as DeviceType, ti as EventCategory, tt as cameraGridLayoutCapability, x as DeclaredDevices } from "../../dist-DHSJV4Qc.mjs";
1
+ import { Bn as snapshotCapability, Br as hydrateSchema, Gn as streamCatalogCapability, L as MOTION_CLOSE_AFTER_MS, Nr as createEvent, T as DeclaredDevices, _r as BaseAddon, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, gr as errMsg, hr as DeviceType, i as BaseDevice, li as EventCategory, nr as buildFfmpegArgs, pn as motionCapability, pr as DeviceFeature, st as cameraGridLayoutCapability, un as memoizePinnedFfmpeg, xt as declarationOwnerNodeId } from "../../dist-CSSfTM18.mjs";
2
2
  import { z } from "zod";
3
3
  import { FfmpegProcess } from "@camstack/types/node";
4
4
  import { join } from "node:path";
@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-BQG3QFg7.js");
7
- const require_composition_sources = require("../../composition-sources-DvCGZEUI.js");
6
+ const require_dist = require("../../dist-Bgy_AmwX.js");
7
+ const require_composition_sources = require("../../composition-sources-C2VNX6tF.js");
8
8
  let zod = require("zod");
9
9
  //#region src/builtins/shared/device-state-changed.ts
10
10
  /** Structural narrowing helper for untrusted bus payloads. */
@@ -1,5 +1,5 @@
1
- import { $n as compositionItemFieldPath, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Q as buildCapabilityLookup, Qn as compositionFeatureEnabled, Tr as createEvent, Xn as composedDeviceRef, Yn as cloneStatefulExpressionMemory, Zn as composedDeviceStableId, at as compositionFieldKey, cr as errMsg, er as compositionSliceKey, fn as planComposition, i as BaseDevice, ir as toExpressionValue, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as BaseAddon, nr as createStatefulExpressionMemory, qn as COMPOSER_ADDON_ID, rr as disarmRoseMemory, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, tr as compositionSourceKey, x as DeclaredDevices } from "../../dist-DHSJV4Qc.mjs";
2
- import { n as normalizedNativeOwner } from "../../composition-sources-BQNxXQZG.mjs";
1
+ import { Lt as expressionContainsBuiltinCall, Nr as createEvent, Pt as evaluateCompositionField, T as DeclaredDevices, _r as BaseAddon, ar as composedDeviceStableId, bn as planComposition, cr as compositionSliceKey, dr as disarmRoseMemory, dt as compositionFieldKey, fr as toExpressionValue, gr as errMsg, hr as DeviceType, i as BaseDevice, ir as composedDeviceRef, l as COMPOSED_ITEM_FIXED_FIELDS, li as EventCategory, lr as compositionSourceKey, nt as buildCapabilityLookup, or as compositionFeatureEnabled, rr as cloneStatefulExpressionMemory, sr as compositionItemFieldPath, t as ALL_CAPABILITY_DEFINITIONS, tr as COMPOSER_ADDON_ID, ur as createStatefulExpressionMemory, ut as composerCapability } from "../../dist-CSSfTM18.mjs";
2
+ import { n as normalizedNativeOwner } from "../../composition-sources-SYtYuAgh.mjs";
3
3
  import { z } from "zod";
4
4
  //#region src/builtins/shared/device-state-changed.ts
5
5
  /** Structural narrowing helper for untrusted bus payloads. */
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-BQG3QFg7.js");
6
+ const require_dist = require("../../dist-Bgy_AmwX.js");
7
7
  const require_formatter = require("../../formatter-DqAKDlvN.js");
8
8
  //#region src/builtins/console-logging/console-destination.ts
9
9
  var LEVEL_RANK = {
@@ -1,4 +1,4 @@
1
- import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DHSJV4Qc.mjs";
1
+ import { _r as BaseAddon, an as logDestinationCapability } from "../../dist-CSSfTM18.mjs";
2
2
  import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
3
3
  //#region src/builtins/console-logging/console-destination.ts
4
4
  var LEVEL_RANK = {
@@ -1,7 +1,7 @@
1
1
  Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
2
2
  const require_chunk = require("../../chunk-Cek0wNdY.js");
3
- const require_dist = require("../../dist-BQG3QFg7.js");
4
- const require_composition_sources = require("../../composition-sources-DvCGZEUI.js");
3
+ const require_dist = require("../../dist-Bgy_AmwX.js");
4
+ const require_composition_sources = require("../../composition-sources-C2VNX6tF.js");
5
5
  let node_crypto = require("node:crypto");
6
6
  let _camstack_types_node = require("@camstack/types/node");
7
7
  let node_fs_promises = require("node:fs/promises");
@@ -1,5 +1,5 @@
1
- import { Mr as hydrateSchema, Q as buildCapabilityLookup, Vn as validateComposition, Xn as composedDeviceRef, _n as replacedFieldKeys, bn as resolveCoreBlockEntry, cr as errMsg, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, fn as planComposition, lr as BaseAddon, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, on as normalizeCoreBlockWrite, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlockSourceKind, x as DeclaredDevices, xn as resolveCoreBlockFiles, yt as describeComposableCaps } from "../../dist-DHSJV4Qc.mjs";
2
- import { t as describeCompositionSources } from "../../composition-sources-BQNxXQZG.mjs";
1
+ import { Br as hydrateSchema, On as resolveCoreBlockEntry, T as DeclaredDevices, Tn as replacedFieldKeys, Tt as describeComposableCaps, Yn as validateComposition, _r as BaseAddon, _t as coreBlocksCapability, bn as planComposition, d as CORE_BLOCKS_ADDON_ID, f as CORE_BLOCK_ADDON_PREFIX, ft as compositionSourceRefs, gr as errMsg, gt as coreBlockSourceKind, ht as coreBlockIdFromAddonId, ir as composedDeviceRef, kn as resolveCoreBlockFiles, lr as compositionSourceKey, m as CoreBlockSchema, mn as normalizeCoreBlockWrite, mt as coreBlockComposition, nt as buildCapabilityLookup, pt as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID } from "../../dist-CSSfTM18.mjs";
2
+ import { t as describeCompositionSources } from "../../composition-sources-SYtYuAgh.mjs";
3
3
  import { createRequire } from "node:module";
4
4
  import { randomUUID } from "node:crypto";
5
5
  import { customizationBlockName } from "@camstack/types/node";
@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-BQG3QFg7.js");
7
- const require_retired_settings_keys = require("../../retired-settings-keys-BfGaSeQI.js");
6
+ const require_dist = require("../../dist-Bgy_AmwX.js");
7
+ const require_retired_settings_keys = require("../../retired-settings-keys-BTPkRLTS.js");
8
8
  let zod = require("zod");
9
9
  let node_crypto = require("node:crypto");
10
10
  let _camstack_types_node = require("@camstack/types/node");
@@ -1,5 +1,5 @@
1
- import { $ as buildStreamParamsConfigSchema, $r as toSecretFieldView, Ct as deviceStatusCapability, En as runtimeStatePolicyFor, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Kt as legacyAutoLinkIds, L as STREAM_PROFILE_META, Lr as isSecretMarker, M as MINUTES_PER_DAY, Nr as isDeviceConfigCap, Pt as formatMinutes, Rr as isSecretMarkerLike, S as DeviceStatusSchema, St as deviceStateCapability, T as FieldClaimSchema, Tt as enumerateItemArrayFields, Xt as locationIconKey, Yr as secretTreeFromPaths, Zr as sleep$1, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, ar as DeviceFeature, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as errMsg, ei as transformSecretWrite, ft as createDeviceExtensionProvider, jn as siteZoneKey, kt as expandContainer, lr as BaseAddon, nt as canonicalIconKey, o as CAMERA_SWITCH_ORDER, or as DeviceRole, qr as resolveSecretMarkers, sn as normalizeUnit, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, un as parseStreamParamsFormPatch, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimModeSchema, wr as collectZodSecretPaths, xt as deviceManagerCapability, y as DAY_NAMES } from "../../dist-DHSJV4Qc.mjs";
2
- import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CPz7zpza.mjs";
1
+ import { At as deviceStatusCapability, Ct as defineExtensionSlotProvider, Dt as deviceExtensionCapability, E as DeviceStatusSchema, Er as WELL_KNOWN_TAB_MAP, Gr as isSecretMarker, Ht as formatMinutes, I as MINUTES_PER_DAY, It as expandContainer, Kr as isSecretMarkerLike, Mr as collectZodSecretPaths, Mt as enumerateItemArrayFields, Nt as enumerateSchemaFields, O as FieldClaimModeSchema, Ot as deviceManagerCapability, Pn as runtimeStatePolicyFor, Tr as SECRET_CLEAR, Ur as isKeychainStoredField, V as STREAM_PROFILE_META, Vr as isDeviceConfigCap, Wr as isSecretClear, _r as BaseAddon, ai as sleep$1, at as buildStreamParamsConfigSchema, c as CAP_NAMES_WITH_STATUS, ci as transformSecretWrite, ct as canonicalIconKey, en as legacyAutoLinkIds, gr as errMsg, hn as normalizeUnit, hr as DeviceType, in as locationIconKey, k as FieldClaimSchema, kt as deviceStateCapability, li as EventCategory, mr as DeviceRole, o as CAMERA_SWITCH_ORDER, pr as DeviceFeature, ri as secretTreeFromPaths, si as toSecretFieldView, t as ALL_CAPABILITY_DEFINITIONS, ti as resolveSecretMarkers, vn as parseStreamParamsFormPatch, vt as createDeviceExtensionProvider, y as DAY_NAMES, zn as siteZoneKey } from "../../dist-CSSfTM18.mjs";
2
+ import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-H0rYXT27.mjs";
3
3
  import { z } from "zod";
4
4
  import { randomUUID } from "node:crypto";
5
5
  import { canonicalDeviceFingerprint } from "@camstack/types/node";
@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-BQG3QFg7.js");
6
+ const require_dist = require("../../dist-Bgy_AmwX.js");
7
7
  const require_formatter = require("../../formatter-DqAKDlvN.js");
8
8
  //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
9
9
  var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
@@ -1,4 +1,4 @@
1
- import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DHSJV4Qc.mjs";
1
+ import { _r as BaseAddon, an as logDestinationCapability } from "../../dist-CSSfTM18.mjs";
2
2
  import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
3
3
  //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
4
4
  var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../../chunk-Cek0wNdY.js");
6
- const require_dist = require("../../dist-BQG3QFg7.js");
7
- const require_jwt_signing_key = require("../../jwt-signing-key-BZm055IP.js");
8
- const require_constants = require("../../constants-CCSJGnjs.js");
6
+ const require_dist = require("../../dist-Bgy_AmwX.js");
7
+ const require_device_ca = require("../../device-ca-BWfdDB3k.js");
8
+ const require_constants = require("../../constants-RI-hGP5S.js");
9
9
  const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
10
10
  let node_crypto = require("node:crypto");
11
11
  let _camstack_types_node = require("@camstack/types/node");
@@ -352,9 +352,13 @@ async function applyKeychainResetTrigger(input) {
352
352
  //#endregion
353
353
  //#region src/builtins/keychain/system-held-secrets.ts
354
354
  /** The refs `keychain-admin.setSystemSecret` may write, by name. */
355
- var SYSTEM_HELD_SECRET_REFS = { "jwt-signing-key": require_jwt_signing_key.JWT_SIGNING_KEY_REF };
355
+ var SYSTEM_HELD_SECRET_REFS = { "jwt-signing-key": require_device_ca.JWT_SIGNING_KEY_REF };
356
356
  /** System refs no blob points at — in use for as long as they exist. */
357
- var PROCESS_HELD_SECRET_REFS = new Set([require_jwt_signing_key.JWT_SIGNING_KEY_REF, require_constants.MESH_CA_KEY_REF]);
357
+ var PROCESS_HELD_SECRET_REFS = new Set([
358
+ require_device_ca.JWT_SIGNING_KEY_REF,
359
+ require_constants.MESH_CA_KEY_REF,
360
+ require_device_ca.DEVICE_CA_KEY_REF
361
+ ]);
358
362
  /** `system-settings` keys that may hold a system-owned secret's marker. */
359
363
  var SYSTEM_SECRET_SETTINGS_KEYS = [require_constants.CLUSTER_SECRET_SETTINGS_KEY];
360
364
  var KeychainLockedError = class extends Error {
@@ -744,7 +748,7 @@ var KeychainService = class {
744
748
  */
745
749
  async setSystemSecret(userId, name, value) {
746
750
  const ref = SYSTEM_HELD_SECRET_REFS[name];
747
- return this.put(require_jwt_signing_key.SYSTEM_SECRET_OWNER, ref, value, `user:${userId}`);
751
+ return this.put(require_device_ca.SYSTEM_SECRET_OWNER, ref, value, `user:${userId}`);
748
752
  }
749
753
  async listAudit(limit) {
750
754
  return this.deps.repo.listAudit(limit);
@@ -1,6 +1,6 @@
1
- import { Gt as keychainCapability, O as KEYCHAIN_RESET_TRIGGER_ACTOR, Vr as normalizeSecretOwner, Wr as parseSecretRef, Wt as keychainAdminCapability, jr as formatSecretScope, lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
2
- import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-DL-qk1SM.mjs";
3
- import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CR4If_lP.mjs";
1
+ import { $t as keychainCapability, M as KEYCHAIN_RESET_TRIGGER_ACTOR, Qr as parseSecretRef, Qt as keychainAdminCapability, Yr as normalizeSecretOwner, _r as BaseAddon, li as EventCategory, zr as formatSecretScope } from "../../dist-CSSfTM18.mjs";
2
+ import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-R7DKKZL6.mjs";
3
+ import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CKuWoWvc.mjs";
4
4
  import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
5
5
  import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
6
6
  import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";
@@ -348,7 +348,11 @@ async function applyKeychainResetTrigger(input) {
348
348
  /** The refs `keychain-admin.setSystemSecret` may write, by name. */
349
349
  var SYSTEM_HELD_SECRET_REFS = { "jwt-signing-key": JWT_SIGNING_KEY_REF };
350
350
  /** System refs no blob points at — in use for as long as they exist. */
351
- var PROCESS_HELD_SECRET_REFS = new Set([JWT_SIGNING_KEY_REF, MESH_CA_KEY_REF]);
351
+ var PROCESS_HELD_SECRET_REFS = new Set([
352
+ JWT_SIGNING_KEY_REF,
353
+ MESH_CA_KEY_REF,
354
+ DEVICE_CA_KEY_REF
355
+ ]);
352
356
  /** `system-settings` keys that may hold a system-owned secret's marker. */
353
357
  var SYSTEM_SECRET_SETTINGS_KEYS = [CLUSTER_SECRET_SETTINGS_KEY];
354
358
  var KeychainLockedError = class extends Error {
@@ -1,6 +1,6 @@
1
1
  Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
2
2
  require("../../chunk-Cek0wNdY.js");
3
- const require_dist = require("../../dist-BQG3QFg7.js");
3
+ const require_dist = require("../../dist-Bgy_AmwX.js");
4
4
  //#region src/builtins/liveness-monitor/liveness-checks.ts
5
5
  var NO_DEVICES = "liveness:no-devices";
6
6
  var ALL_OFFLINE = "liveness:all-devices-offline";
@@ -1,4 +1,4 @@
1
- import { F as RecordingStatusSchema, P as RECORDING_SOURCE_CAMSTACK_ADDON, Tr as createEvent, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
1
+ import { Nr as createEvent, R as RECORDING_SOURCE_CAMSTACK_ADDON, _r as BaseAddon, gr as errMsg, li as EventCategory, z as RecordingStatusSchema } from "../../dist-CSSfTM18.mjs";
2
2
  //#region src/builtins/liveness-monitor/liveness-checks.ts
3
3
  var NO_DEVICES = "liveness:no-devices";
4
4
  var ALL_OFFLINE = "liveness:all-devices-offline";
@@ -13,8 +13,14 @@ export declare class LocalAuthAddon extends BaseAddon {
13
13
  private loginSessions;
14
14
  private adminTokens;
15
15
  private auditLog;
16
+ private deviceCredentials;
17
+ private deviceCa;
16
18
  constructor();
17
19
  protected onInitialize(): Promise<ProviderRegistration[]>;
20
+ private readDeviceCertificateSettings;
21
+ private revokeDeviceCredentialsForReset;
22
+ /** The admin cap (`device-credentials`): list, enroll-by-QR, revoke, rename, settings. */
23
+ private buildDeviceCredentialsProvider;
18
24
  /**
19
25
  * The hub-internal surface (`user-management-internal.ts`): operations no
20
26
  * wire may reach. Called only by hub code holding this provider object.