@camstack/system 1.2.428 → 1.2.430

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
-const require_restore_archive = require("../../restore-archive-Dccm8lkA.js");
+const require_dist = require("../../dist-DxJdci75.js");
+const require_restore_archive = require("../../restore-archive-CQJNoqRK.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,5 +1,5 @@
-import { Br as nodePin, Fn as storageOccupancyCapability, Qr as toNodeId, Y as backupCapability, lr as BaseAddon, ti as EventCategory, tn as mayWriteToLocation } from "../../dist-DHSJV4Qc.mjs";
-import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-DH1Pxq_1.mjs";
+import { $ as backupCapability, Jr as nodePin, Un as storageOccupancyCapability, _r as BaseAddon, li as EventCategory, ln as mayWriteToLocation, oi as toNodeId } from "../../dist-CXG6muCR.mjs";
+import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-D_wBL1OO.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
+const require_dist = require("../../dist-DxJdci75.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { et as calendarsCapability, lr as BaseAddon, p as CalendarPreferencesSchema } from "../../dist-DHSJV4Qc.mjs";
+import { _r as BaseAddon, ot as calendarsCapability, p as CalendarPreferencesSchema } from "../../dist-CXG6muCR.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
+const require_dist = require("../../dist-DxJdci75.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { Jn as buildFfmpegArgs, Ln as streamCatalogCapability, Mn as snapshotCapability, Mr as hydrateSchema, N as MOTION_CLOSE_AFTER_MS, Tr as createEvent, an as motionCapability, ar as DeviceFeature, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, cr as errMsg, ht as declarationOwnerNodeId, i as BaseDevice, lr as BaseAddon, nn as memoizePinnedFfmpeg, sr as DeviceType, ti as EventCategory, tt as cameraGridLayoutCapability, x as DeclaredDevices } from "../../dist-DHSJV4Qc.mjs";
+import { Bn as snapshotCapability, Br as hydrateSchema, Gn as streamCatalogCapability, L as MOTION_CLOSE_AFTER_MS, Nr as createEvent, T as DeclaredDevices, _r as BaseAddon, b as DERIVED_CAMERA_SILENCED_CAP_NAMES, gr as errMsg, hr as DeviceType, i as BaseDevice, li as EventCategory, nr as buildFfmpegArgs, pn as motionCapability, pr as DeviceFeature, st as cameraGridLayoutCapability, un as memoizePinnedFfmpeg, xt as declarationOwnerNodeId } from "../../dist-CXG6muCR.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
-const require_composition_sources = require("../../composition-sources-DvCGZEUI.js");
+const require_dist = require("../../dist-DxJdci75.js");
+const require_composition_sources = require("../../composition-sources-o5MPSlk6.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $n as compositionItemFieldPath, At as expressionContainsBuiltinCall, Dt as evaluateCompositionField, Q as buildCapabilityLookup, Qn as compositionFeatureEnabled, Tr as createEvent, Xn as composedDeviceRef, Yn as cloneStatefulExpressionMemory, Zn as composedDeviceStableId, at as compositionFieldKey, cr as errMsg, er as compositionSliceKey, fn as planComposition, i as BaseDevice, ir as toExpressionValue, it as composerCapability, l as COMPOSED_ITEM_FIXED_FIELDS, lr as BaseAddon, nr as createStatefulExpressionMemory, qn as COMPOSER_ADDON_ID, rr as disarmRoseMemory, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, tr as compositionSourceKey, x as DeclaredDevices } from "../../dist-DHSJV4Qc.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-BQNxXQZG.mjs";
+import { Lt as expressionContainsBuiltinCall, Nr as createEvent, Pt as evaluateCompositionField, T as DeclaredDevices, _r as BaseAddon, ar as composedDeviceStableId, bn as planComposition, cr as compositionSliceKey, dr as disarmRoseMemory, dt as compositionFieldKey, fr as toExpressionValue, gr as errMsg, hr as DeviceType, i as BaseDevice, ir as composedDeviceRef, l as COMPOSED_ITEM_FIXED_FIELDS, li as EventCategory, lr as compositionSourceKey, nt as buildCapabilityLookup, or as compositionFeatureEnabled, rr as cloneStatefulExpressionMemory, sr as compositionItemFieldPath, t as ALL_CAPABILITY_DEFINITIONS, tr as COMPOSER_ADDON_ID, ur as createStatefulExpressionMemory, ut as composerCapability } from "../../dist-CXG6muCR.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-Cw_TXEq9.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
+const require_dist = require("../../dist-DxJdci75.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DHSJV4Qc.mjs";
+import { _r as BaseAddon, an as logDestinationCapability } from "../../dist-CXG6muCR.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
-const require_composition_sources = require("../../composition-sources-DvCGZEUI.js");
+const require_dist = require("../../dist-DxJdci75.js");
+const require_composition_sources = require("../../composition-sources-o5MPSlk6.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,5 +1,5 @@
-import { Mr as hydrateSchema, Q as buildCapabilityLookup, Vn as validateComposition, Xn as composedDeviceRef, _n as replacedFieldKeys, bn as resolveCoreBlockEntry, cr as errMsg, ct as coreBlockComposition, d as CORE_BLOCKS_ADDON_ID, dt as coreBlocksCapability, f as CORE_BLOCK_ADDON_PREFIX, fn as planComposition, lr as BaseAddon, lt as coreBlockIdFromAddonId, m as CoreBlockSchema, on as normalizeCoreBlockWrite, ot as compositionSourceRefs, st as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, tr as compositionSourceKey, u as COMPOSER_RUNNER_ID, ut as coreBlockSourceKind, x as DeclaredDevices, xn as resolveCoreBlockFiles, yt as describeComposableCaps } from "../../dist-DHSJV4Qc.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-BQNxXQZG.mjs";
+import { Br as hydrateSchema, On as resolveCoreBlockEntry, T as DeclaredDevices, Tn as replacedFieldKeys, Tt as describeComposableCaps, Yn as validateComposition, _r as BaseAddon, _t as coreBlocksCapability, bn as planComposition, d as CORE_BLOCKS_ADDON_ID, f as CORE_BLOCK_ADDON_PREFIX, ft as compositionSourceRefs, gr as errMsg, gt as coreBlockSourceKind, ht as coreBlockIdFromAddonId, ir as composedDeviceRef, kn as resolveCoreBlockFiles, lr as compositionSourceKey, m as CoreBlockSchema, mn as normalizeCoreBlockWrite, mt as coreBlockComposition, nt as buildCapabilityLookup, pt as coreBlockAddonId, t as ALL_CAPABILITY_DEFINITIONS, u as COMPOSER_RUNNER_ID } from "../../dist-CXG6muCR.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-Cw_TXEq9.mjs";
 import { createRequire } from "node:module";
 import { randomUUID } from "node:crypto";
 import { customizationBlockName } from "@camstack/types/node";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-BfGaSeQI.js");
+const require_dist = require("../../dist-DxJdci75.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-g1oifXxR.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $ as buildStreamParamsConfigSchema, $r as toSecretFieldView, Ct as deviceStatusCapability, En as runtimeStatePolicyFor, Et as enumerateSchemaFields, Fr as isKeychainStoredField, Ir as isSecretClear, Kt as legacyAutoLinkIds, L as STREAM_PROFILE_META, Lr as isSecretMarker, M as MINUTES_PER_DAY, Nr as isDeviceConfigCap, Pt as formatMinutes, Rr as isSecretMarkerLike, S as DeviceStatusSchema, St as deviceStateCapability, T as FieldClaimSchema, Tt as enumerateItemArrayFields, Xt as locationIconKey, Yr as secretTreeFromPaths, Zr as sleep$1, _r as SECRET_CLEAR, _t as defineExtensionSlotProvider, ar as DeviceFeature, bt as deviceExtensionCapability, c as CAP_NAMES_WITH_STATUS, cr as errMsg, ei as transformSecretWrite, ft as createDeviceExtensionProvider, jn as siteZoneKey, kt as expandContainer, lr as BaseAddon, nt as canonicalIconKey, o as CAMERA_SWITCH_ORDER, or as DeviceRole, qr as resolveSecretMarkers, sn as normalizeUnit, sr as DeviceType, t as ALL_CAPABILITY_DEFINITIONS, ti as EventCategory, un as parseStreamParamsFormPatch, vr as WELL_KNOWN_TAB_MAP, w as FieldClaimModeSchema, wr as collectZodSecretPaths, xt as deviceManagerCapability, y as DAY_NAMES } from "../../dist-DHSJV4Qc.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CPz7zpza.mjs";
+import { At as deviceStatusCapability, Ct as defineExtensionSlotProvider, Dt as deviceExtensionCapability, E as DeviceStatusSchema, Er as WELL_KNOWN_TAB_MAP, Gr as isSecretMarker, Ht as formatMinutes, I as MINUTES_PER_DAY, It as expandContainer, Kr as isSecretMarkerLike, Mr as collectZodSecretPaths, Mt as enumerateItemArrayFields, Nt as enumerateSchemaFields, O as FieldClaimModeSchema, Ot as deviceManagerCapability, Pn as runtimeStatePolicyFor, Tr as SECRET_CLEAR, Ur as isKeychainStoredField, V as STREAM_PROFILE_META, Vr as isDeviceConfigCap, Wr as isSecretClear, _r as BaseAddon, ai as sleep$1, at as buildStreamParamsConfigSchema, c as CAP_NAMES_WITH_STATUS, ci as transformSecretWrite, ct as canonicalIconKey, en as legacyAutoLinkIds, gr as errMsg, hn as normalizeUnit, hr as DeviceType, in as locationIconKey, k as FieldClaimSchema, kt as deviceStateCapability, li as EventCategory, mr as DeviceRole, o as CAMERA_SWITCH_ORDER, pr as DeviceFeature, ri as secretTreeFromPaths, si as toSecretFieldView, t as ALL_CAPABILITY_DEFINITIONS, ti as resolveSecretMarkers, vn as parseStreamParamsFormPatch, vt as createDeviceExtensionProvider, y as DAY_NAMES, zn as siteZoneKey } from "../../dist-CXG6muCR.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-EmDe11cP.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
+const require_dist = require("../../dist-DxJdci75.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Zt as logDestinationCapability, lr as BaseAddon } from "../../dist-DHSJV4Qc.mjs";
+import { _r as BaseAddon, an as logDestinationCapability } from "../../dist-CXG6muCR.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
-const require_jwt_signing_key = require("../../jwt-signing-key-BZm055IP.js");
-const require_constants = require("../../constants-CCSJGnjs.js");
+const require_dist = require("../../dist-DxJdci75.js");
+const require_device_ca = require("../../device-ca-CKiqh2Iu.js");
+const require_constants = require("../../constants-BcNaVkvI.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -352,9 +352,13 @@ async function applyKeychainResetTrigger(input) {
 //#endregion
 //#region src/builtins/keychain/system-held-secrets.ts
 /** The refs `keychain-admin.setSystemSecret` may write, by name. */
-var SYSTEM_HELD_SECRET_REFS = { "jwt-signing-key": require_jwt_signing_key.JWT_SIGNING_KEY_REF };
+var SYSTEM_HELD_SECRET_REFS = { "jwt-signing-key": require_device_ca.JWT_SIGNING_KEY_REF };
 /** System refs no blob points at — in use for as long as they exist. */
-var PROCESS_HELD_SECRET_REFS = new Set([require_jwt_signing_key.JWT_SIGNING_KEY_REF, require_constants.MESH_CA_KEY_REF]);
+var PROCESS_HELD_SECRET_REFS = new Set([
+	require_device_ca.JWT_SIGNING_KEY_REF,
+	require_constants.MESH_CA_KEY_REF,
+	require_device_ca.DEVICE_CA_KEY_REF
+]);
 /** `system-settings` keys that may hold a system-owned secret's marker. */
 var SYSTEM_SECRET_SETTINGS_KEYS = [require_constants.CLUSTER_SECRET_SETTINGS_KEY];
 var KeychainLockedError = class extends Error {
@@ -744,7 +748,7 @@ var KeychainService = class {
 	*/
 	async setSystemSecret(userId, name, value) {
 		const ref = SYSTEM_HELD_SECRET_REFS[name];
-		return this.put(require_jwt_signing_key.SYSTEM_SECRET_OWNER, ref, value, `user:${userId}`);
+		return this.put(require_device_ca.SYSTEM_SECRET_OWNER, ref, value, `user:${userId}`);
 	}
 	async listAudit(limit) {
 		return this.deps.repo.listAudit(limit);

package/dist/builtins/keychain/index.mjs

@@ -1,6 +1,6 @@
-import { Gt as keychainCapability, O as KEYCHAIN_RESET_TRIGGER_ACTOR, Vr as normalizeSecretOwner, Wr as parseSecretRef, Wt as keychainAdminCapability, jr as formatSecretScope, lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
-import { r as SYSTEM_SECRET_OWNER, t as JWT_SIGNING_KEY_REF } from "../../jwt-signing-key-DL-qk1SM.mjs";
-import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CR4If_lP.mjs";
+import { $t as keychainCapability, M as KEYCHAIN_RESET_TRIGGER_ACTOR, Qr as parseSecretRef, Qt as keychainAdminCapability, Yr as normalizeSecretOwner, _r as BaseAddon, li as EventCategory, zr as formatSecretScope } from "../../dist-CXG6muCR.mjs";
+import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-B-BTxeCj.mjs";
+import { a as MESH_CA_KEY_REF, p as CLUSTER_SECRET_SETTINGS_KEY } from "../../constants-CttE77VF.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";
@@ -348,7 +348,11 @@ async function applyKeychainResetTrigger(input) {
 /** The refs `keychain-admin.setSystemSecret` may write, by name. */
 var SYSTEM_HELD_SECRET_REFS = { "jwt-signing-key": JWT_SIGNING_KEY_REF };
 /** System refs no blob points at — in use for as long as they exist. */
-var PROCESS_HELD_SECRET_REFS = new Set([JWT_SIGNING_KEY_REF, MESH_CA_KEY_REF]);
+var PROCESS_HELD_SECRET_REFS = new Set([
+	JWT_SIGNING_KEY_REF,
+	MESH_CA_KEY_REF,
+	DEVICE_CA_KEY_REF
+]);
 /** `system-settings` keys that may hold a system-owned secret's marker. */
 var SYSTEM_SECRET_SETTINGS_KEYS = [CLUSTER_SECRET_SETTINGS_KEY];
 var KeychainLockedError = class extends Error {

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BQG3QFg7.js");
+const require_dist = require("../../dist-DxJdci75.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { F as RecordingStatusSchema, P as RECORDING_SOURCE_CAMSTACK_ADDON, Tr as createEvent, cr as errMsg, lr as BaseAddon, ti as EventCategory } from "../../dist-DHSJV4Qc.mjs";
+import { Nr as createEvent, R as RECORDING_SOURCE_CAMSTACK_ADDON, _r as BaseAddon, gr as errMsg, li as EventCategory, z as RecordingStatusSchema } from "../../dist-CXG6muCR.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.d.ts

@@ -13,8 +13,14 @@ export declare class LocalAuthAddon extends BaseAddon {
 	private loginSessions;
 	private adminTokens;
 	private auditLog;
+	private deviceCredentials;
+	private deviceCa;
 	constructor();
 	protected onInitialize(): Promise<ProviderRegistration[]>;
+	private readDeviceCertificateSettings;
+	private revokeDeviceCredentialsForReset;
+	/** The admin cap (`device-credentials`): list, enroll-by-QR, revoke, rename, settings. */
+	private buildDeviceCredentialsProvider;
 	/**
 	* The hub-internal surface (`user-management-internal.ts`): operations no
 	* wire may reach. Called only by hub code holding this provider object.