@camstack/system 1.2.429 → 1.2.430

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { $n as vectorStoreCapability, Sr as RUNTIME_DEFAULTS, _ as DATABASE_SNAPSHOT_TIMEOUT_MS, _r as BaseAddon, bt as databaseSnapshotCapability, et as bareAddonId, g as DATABASE_SNAPSHOT_SUFFIX, gr as errMsg, h as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, v as DATA_STORE_DATABASES, yt as dataStoreProviderCapability } from "../../dist-CSSfTM18.mjs";
-import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-H0rYXT27.mjs";
-import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-DW0FfGV7.mjs";
+import { $n as vectorStoreCapability, Sr as RUNTIME_DEFAULTS, _ as DATABASE_SNAPSHOT_TIMEOUT_MS, _r as BaseAddon, bt as databaseSnapshotCapability, et as bareAddonId, g as DATABASE_SNAPSHOT_SUFFIX, gr as errMsg, h as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, v as DATA_STORE_DATABASES, yt as dataStoreProviderCapability } from "../../dist-CXG6muCR.mjs";
+import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-EmDe11cP.mjs";
+import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-vhPZLYuA.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";
@@ -21,6 +21,8 @@ function defaultFileHostWorkerPath() {
 	const packageRoot = path.dirname(require_.resolve("@camstack/system/package.json"));
 	return path.join(packageRoot, "dist", "file-host-worker.js");
 }
+/** How long a stopped thread has to end on its own before it is terminated. */
+var FILE_HOST_EXIT_GRACE_MS = 5e3;
 var FileHostClient = class {
 	spec;
 	logger;
@@ -32,6 +34,8 @@ var FileHostClient = class {
 	nextId = 1;
 	lastOp = "(none yet)";
 	stopping = false;
+	/** Settles when the thread's event loop has ended and its isolate is gone. */
+	exited;
 	dead = false;
 	lastBusyLogAt = -Infinity;
 	declared = /* @__PURE__ */ new Set();
@@ -56,8 +60,14 @@ var FileHostClient = class {
 		});
 		this.thread.on("message", (message) => this.onMessage(message));
 		this.thread.on("error", (err) => this.die(`worker error: ${errMsg(err)}`));
+		this.exited = new Promise((resolve) => {
+			this.thread.on("exit", () => resolve());
+		});
 		this.thread.on("exit", (code) => {
-			if (this.stopping) return;
+			if (this.stopping) {
+				for (const pending of this.pending.values()) if (pending.op === "stop") pending.resolve(void 0);
+				return;
+			}
 			this.die(`worker exited with code ${code}`);
 		});
 	}
@@ -116,6 +126,26 @@ var FileHostClient = class {
 				});
 			});
 		} finally {
+			await this.awaitExit();
+		}
+	}
+	/**
+	* Let the thread END ITSELF after it answered `stop`: it has closed every
+	* statement and the connection and closed its port, so its loop drains and
+	* the isolate is disposed from inside. `terminate()` straight after the
+	* answer races that disposal and, on macOS, took the whole process down with
+	* a SIGSEGV in the isolate's teardown GC. Terminate is only the fallback for
+	* a thread that does not leave in time.
+	*/
+	async awaitExit() {
+		let timer;
+		const timedOut = new Promise((resolve) => {
+			timer = setTimeout(() => resolve("timeout"), FILE_HOST_EXIT_GRACE_MS);
+		});
+		const outcome = await Promise.race([this.exited.then(() => "exited"), timedOut]);
+		if (timer !== void 0) clearTimeout(timer);
+		if (outcome === "timeout") {
+			this.logger.warn("database worker did not leave after stop — terminating it", { tags: { database: this.spec.databaseId } });
 			await this.thread.terminate();
 		}
 	}

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bgy_AmwX.js");
+const require_dist = require("../../dist-DxJdci75.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ft as evictionPolicyOfLocation, G as StorageLocationTypeSchema, Gr as isSecretMarker, Hn as storageMigrationCapability, Jt as isLocationEnabled, K as StorageMigrationJobSchema, P as LegacyStorageLocationDefaultSchema, Rn as settingsStoreCapability, U as StorageCleanupJobSchema, Ut as gbToBytes, Vn as storageCapability, W as StorageLocationModeSchema, Xr as parseJsonObject, _r as BaseAddon, ci as transformSecretWrite, cn as mayReadLocation, er as withLocationMode, fn as modeMayWrite, jn as resolveLocationMode, jr as collectSecretConfigKeys, li as EventCategory, ln as mayWriteToLocation, ri as secretTreeFromPaths, ti as resolveSecretMarkers, tn as legacyModeOf, xr as REDACTED_SECRET } from "../../dist-CSSfTM18.mjs";
+import { Ft as evictionPolicyOfLocation, G as StorageLocationTypeSchema, Gr as isSecretMarker, Hn as storageMigrationCapability, Jt as isLocationEnabled, K as StorageMigrationJobSchema, P as LegacyStorageLocationDefaultSchema, Rn as settingsStoreCapability, U as StorageCleanupJobSchema, Ut as gbToBytes, Vn as storageCapability, W as StorageLocationModeSchema, Xr as parseJsonObject, _r as BaseAddon, ci as transformSecretWrite, cn as mayReadLocation, er as withLocationMode, fn as modeMayWrite, jn as resolveLocationMode, jr as collectSecretConfigKeys, li as EventCategory, ln as mayWriteToLocation, ri as secretTreeFromPaths, ti as resolveSecretMarkers, tn as legacyModeOf, xr as REDACTED_SECRET } from "../../dist-CXG6muCR.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bgy_AmwX.js");
+const require_dist = require("../../dist-DxJdci75.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_x509_es = require("../../x509.es-Dzl0BbmG.js");
 const require_agent_https_names = require("../../agent-https-names-CpUSuP4w.js");
-const require_constants$8 = require("../../constants-RI-hGP5S.js");
+const require_constants$8 = require("../../constants-BcNaVkvI.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,9 +1,9 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Br as hydrateSchema, Fr as defineCustomActions, Gr as isSecretMarker, Pr as customAction, Wr as isSecretClear, _r as BaseAddon, ci as transformSecretWrite, gr as errMsg, ii as secretTreeFromSchema, qr as makeSecretMarker } from "../../dist-CSSfTM18.mjs";
+import { Br as hydrateSchema, Fr as defineCustomActions, Gr as isSecretMarker, Pr as customAction, Wr as isSecretClear, _r as BaseAddon, ci as transformSecretWrite, gr as errMsg, ii as secretTreeFromSchema, qr as makeSecretMarker } from "../../dist-CXG6muCR.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { a as KeyUsagesExtension, c as Pkcs10CertificateRequestGenerator, d as X509Certificate$1, f as X509CertificateGenerator, i as KeyUsageFlags, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, s as Pkcs10CertificateRequest, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "../../x509.es-CAjSsrkk.mjs";
 import { a as setProcessAgentHttpsNames, n as AGENT_HTTPS_NAMES_COLUMNS, r as AgentHttpsNames, t as AGENT_HTTPS_NAMES_COLLECTION } from "../../agent-https-names-uetr4OQl.mjs";
-import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-CKuWoWvc.mjs";
+import { a as MESH_CA_KEY_REF, b as setProcessClusterSecretGate, c as MESH_JOIN_TOKEN_MAX_TTL_SEC, d as CLUSTER_SECRET_REF, i as MESH_CA_FIELD, l as SERVER_AUTH_OID, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID, v as hashClusterSecret } from "../../constants-CttE77VF.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createHmac, randomBytes, timingSafeEqual, webcrypto } from "node:crypto";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bgy_AmwX.js");
+const require_dist = require("../../dist-DxJdci75.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { _r as BaseAddon, an as logDestinationCapability } from "../../dist-CSSfTM18.mjs";
+import { _r as BaseAddon, an as logDestinationCapability } from "../../dist-CXG6muCR.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-SYtYuAgh.mjs → composition-sources-Cw_TXEq9.mjs}

@@ -1,4 +1,4 @@
-import { gr as errMsg, lr as compositionSourceKey } from "./dist-CSSfTM18.mjs";
+import { gr as errMsg, lr as compositionSourceKey } from "./dist-CXG6muCR.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-C2VNX6tF.js → composition-sources-o5MPSlk6.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Bgy_AmwX.js");
+const require_dist = require("./dist-DxJdci75.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-RI-hGP5S.js → constants-BcNaVkvI.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Bgy_AmwX.js");
+const require_dist = require("./dist-DxJdci75.js");
 let node_crypto = require("node:crypto");
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{constants-CKuWoWvc.mjs → constants-CttE77VF.mjs}

@@ -1,4 +1,4 @@
-import { Ar as buildSecretRef } from "./dist-CSSfTM18.mjs";
+import { Ar as buildSecretRef } from "./dist-CXG6muCR.mjs";
 import { createHash, timingSafeEqual } from "node:crypto";
 //#region src/kernel/moleculer/cluster-secret.ts
 /**

package/dist/{device-ca-R7DKKZL6.mjs → device-ca-B-BTxeCj.mjs}

@@ -1,4 +1,4 @@
-import { Ar as buildSecretRef, C as DEVICE_SAN_CREDENTIAL_PREFIX, w as DEVICE_SAN_USER_PREFIX } from "./dist-CSSfTM18.mjs";
+import { Ar as buildSecretRef, C as DEVICE_SAN_CREDENTIAL_PREFIX, w as DEVICE_SAN_USER_PREFIX } from "./dist-CXG6muCR.mjs";
 import { a as KeyUsagesExtension, d as X509Certificate$1, f as X509CertificateGenerator, i as KeyUsageFlags, l as SubjectAlternativeNameExtension, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "./x509.es-CAjSsrkk.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-BWfdDB3k.js → device-ca-CKiqh2Iu.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Bgy_AmwX.js");
+const require_dist = require("./dist-DxJdci75.js");
 const require_x509_es = require("./x509.es-Dzl0BbmG.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts