@camstack/system 1.2.432 → 1.2.434

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BCKOeWu_.js");
-const require_tls = require("../../tls-C5IYg3V5.js");
+const require_dist = require("../../dist-CCH3XPqO.js");
+const require_hub_mdns_ciao = require("../../hub-mdns-ciao-CBLvq2oj.js");
 let zod = require("zod");
 let node_net = require("node:net");
 let node_os = require("node:os");
@@ -192,6 +192,48 @@ function withAppConnectionCustomEndpoints(detected, state) {
 	const extra = state.custom.filter((c) => wanted.has(c.baseUrl) && !known.has(c.baseUrl)).map(customEndpoint);
 	return [...detected, ...extra];
 }
+/** Where a twin sorts relative to its plain-HTTP row: straight after it. */
+var HTTPS_TWIN_PRIORITY_STEP = .5;
+/**
+* The HTTPS counterpart of every LAN address advertised over plain HTTP
+* (D859): `http://<lan>:<httpPort>` gains `https://<lan>:<httpsPort>`, the hub's
+* TLS listener, as its own row straight after it. The twin is an ordinary
+* detected LAN row — ticked, unticked and flagged like any other, on by default
+* (a LAN row is an automatic app connection). A phone that does not trust the
+* hub's local CA fails that candidate in the race it already runs; one that
+* does reaches it. Only the app-connection palette and the table carry twins:
+* the palette `internal` and `publicEndpoint` resolve over never does, so those
+* roles keep their answer. Rows already on https (LAN HTTP off), the public
+* tunnel, the mesh, custom addresses and loopback have no twin.
+*/
+function withLanHttpsCounterparts(palette, httpsPort) {
+	const known = new Set(palette.map((e) => e.baseUrl));
+	const out = [];
+	for (const endpoint of palette) {
+		out.push(endpoint);
+		if (endpoint.kind !== "lan-ipv4" && endpoint.kind !== "lan-ipv6") continue;
+		const twin = httpsTwinOf(endpoint, httpsPort);
+		if (twin === null || known.has(twin.baseUrl)) continue;
+		known.add(twin.baseUrl);
+		out.push(twin);
+	}
+	return out;
+}
+function httpsTwinOf(endpoint, httpsPort) {
+	let parsed;
+	try {
+		parsed = new URL(endpoint.baseUrl);
+	} catch {
+		return null;
+	}
+	if (parsed.protocol !== "http:") return null;
+	return {
+		...endpoint,
+		label: `${endpoint.label} (HTTPS)`,
+		baseUrl: `https://${parsed.hostname}:${httpsPort}`,
+		priority: endpoint.priority + HTTPS_TWIN_PRIORITY_STEP
+	};
+}
 /** Every role's answer — the resolvers from `@camstack/types`, nothing else. */
 function resolveRoles(state, appPalette, httpsPalette) {
 	return require_dist.resolveHubAddressRoles(withAppConnectionCustomEndpoints(appPalette, state), httpsPalette, state.flags);
@@ -491,31 +533,6 @@ function internalUrlOf(book) {
 	return book.roles.internal.resolved;
 }
 //#endregion
-//#region src/builtins/local-network/hub-mdns-ciao.ts
-function createCiaoPublisher() {
-	return { async publish(announcement) {
-		const { getResponder } = await Promise.resolve().then(() => /* @__PURE__ */ require_chunk.__toESM(require("../../lib-DOJ5yyWA.js").default));
-		const responder = getResponder();
-		const service = responder.createService({
-			name: announcement.name,
-			type: announcement.type,
-			port: announcement.port,
-			txt: { ...announcement.txt },
-			...announcement.address !== null ? { restrictedAddresses: [announcement.address] } : {}
-		});
-		try {
-			await service.advertise();
-		} catch (err) {
-			await responder.shutdown().catch(() => void 0);
-			throw err;
-		}
-		return { stop: async () => {
-			await service.destroy();
-			await responder.shutdown();
-		} };
-	} };
-}
-//#endregion
 //#region src/builtins/local-network/local-hostname.ts
 var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;
 /**
@@ -607,7 +624,7 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 			appConnectionUrls: [],
 			customAddresses: [],
 			httpEnabled: true,
-			httpPort: require_tls.DEFAULT_LAN_HTTP_PORT,
+			httpPort: require_hub_mdns_ciao.DEFAULT_LAN_HTTP_PORT,
 			localHostname: "",
 			internalUrl: "",
 			publicEndpointUrl: "",
@@ -622,9 +639,13 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	async palettes() {
 		const port = (await this.resolveAdvertisedListenPort(null)).port;
 		await this.reconcileMeshEndpoint();
+		const http = this.endpointsNow(false, false, "http", port);
+		const https = this.endpointsNow(false, false, "https", port);
 		return {
-			http: this.endpointsNow(false, false, "http", port),
-			https: this.endpointsNow(false, false, "https", port)
+			http,
+			https,
+			httpWithTwins: withLanHttpsCounterparts(http, port),
+			httpsWithTwins: withLanHttpsCounterparts(https, port)
 		};
 	}
 	/** The stored address book, normalised against what is detected now. */
@@ -637,11 +658,11 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	}
 	/** `getAddresses`: the Addresses table and every role's answer. */
 	async addressBook(scheme) {
-		const { http, https } = await this.palettes();
-		const state = this.addressState([...http, ...https]);
+		const { http, https, httpWithTwins, httpsWithTwins } = await this.palettes();
+		const state = this.addressState([...httpWithTwins, ...httpsWithTwins]);
 		const httpsPort = (await this.resolveAdvertisedListenPort(null)).port;
 		return buildAddressBook(state, {
-			rowsPalette: scheme === "http" ? http : https,
+			rowsPalette: scheme === "http" ? httpWithTwins : httpsWithTwins,
 			httpsPalette: https,
 			appLink: appLinkEndpoint(),
 			appLinkHub: require_dist.pickAppLinkHub(https),
@@ -653,8 +674,8 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	* naming an address in no row becomes a custom address in the same write).
 	*/
 	async changeAddressBook(change) {
-		const { http, https } = await this.palettes();
-		const detected = [...http, ...https];
+		const { httpWithTwins, httpsWithTwins } = await this.palettes();
+		const detected = [...httpWithTwins, ...httpsWithTwins];
 		const detectedUrls = new Set(detected.map((e) => e.baseUrl));
 		const changed = change(this.addressState(detected), {
 			detectedUrls,
@@ -733,7 +754,7 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	*/
 	async buildAdvertisedEndpoints(includeLoopback, ipv4Only, scheme, httpsPort) {
 		await this.reconcileMeshEndpoint();
-		const detected = this.endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort);
+		const detected = withLanHttpsCounterparts(this.endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort), httpsPort);
 		return withAppConnectionCustomEndpoints(detected, this.addressState(detected));
 	}
 	/**
@@ -742,7 +763,7 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	* on (`http` is the palette that already carries those rows).
 	*/
 	listenerOriginsNow(state, http, httpsPort) {
-		const httpListening = this.config.httpEnabled !== false && require_tls.readLanHttpState().listening;
+		const httpListening = this.config.httpEnabled !== false && require_hub_mdns_ciao.readLanHttpState().listening;
 		const hostname = this.config.localHostname || null;
 		const localNameOrigins = hostname === null ? [] : [`https://${hostname}:${httpsPort}`, ...httpListening ? [`http://${hostname}:${this.resolvedHttpPort()}`] : []];
 		return buildListenerOrigins({
@@ -755,7 +776,7 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	/** The DETECTED palette from the cached interface/tunnel/mesh state. */
 	endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort, advertiseLanHttp = true) {
 		const interfaces = applyAllowlist(this.enumerate(), this.config.allowedAddresses);
-		const httpState = require_tls.readLanHttpState();
+		const httpState = require_hub_mdns_ciao.readLanHttpState();
 		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, advertiseLanHttp ? {
 			enabled: this.config.httpEnabled !== false,
 			listening: httpState.listening,
@@ -863,13 +884,13 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 			},
 			getTlsStatus: async () => this.snapshotTls(),
 			regenerateCertificate: async (_input) => {
-				const extraSans = [...require_tls.readExtraSans(this.tlsDataDir())];
-				await require_tls.regenerateCertificate(this.tlsDataDir(), { extraSans });
+				const extraSans = [...require_hub_mdns_ciao.readExtraSans(this.tlsDataDir())];
+				await require_hub_mdns_ciao.regenerateCertificate(this.tlsDataDir(), { extraSans });
 				this.putCertificateOnListener("regenerate");
 				return this.snapshotTls();
 			},
 			uploadCertificate: async ({ certPem, keyPem, caPem }) => {
-				await require_tls.storeUploadedCertificate(this.tlsDataDir(), {
+				await require_hub_mdns_ciao.storeUploadedCertificate(this.tlsDataDir(), {
 					certPem,
 					keyPem,
 					caPem
@@ -881,8 +902,8 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 				return { pem: this.snapshotTls().caCertPem ?? "" };
 			},
 			revertToGeneratedCertificate: async () => {
-				const extraSans = [...require_tls.readExtraSans(this.tlsDataDir())];
-				await require_tls.revertToGeneratedCertificate(this.tlsDataDir(), { extraSans });
+				const extraSans = [...require_hub_mdns_ciao.readExtraSans(this.tlsDataDir())];
+				await require_hub_mdns_ciao.revertToGeneratedCertificate(this.tlsDataDir(), { extraSans });
 				this.putCertificateOnListener("revert");
 				return this.snapshotTls();
 			}
@@ -945,7 +966,7 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 					min: 1,
 					max: 65535,
 					step: 1,
-					default: require_tls.DEFAULT_LAN_HTTP_PORT,
+					default: require_hub_mdns_ciao.DEFAULT_LAN_HTTP_PORT,
 					showWhen: {
 						field: "httpEnabled",
 						equals: true
@@ -984,7 +1005,7 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 			return;
 		}
 		if (this.mdns === null) this.mdns = new HubMdnsAdvertiser({
-			publisher: createCiaoPublisher(),
+			publisher: require_hub_mdns_ciao.createCiaoPublisher(),
 			logger: this.ctx.logger,
 			nodeId: this.ctx.kernel.localNodeId ?? "hub",
 			version: null,
@@ -1068,13 +1089,13 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	}
 	resolvedHttpPort() {
 		const port = this.config.httpPort;
-		return Number.isInteger(port) && port >= 1 && port <= 65535 ? port : require_tls.DEFAULT_LAN_HTTP_PORT;
+		return Number.isInteger(port) && port >= 1 && port <= 65535 ? port : require_hub_mdns_ciao.DEFAULT_LAN_HTTP_PORT;
 	}
 	tlsDataDir() {
 		return this.ctx.nodeDataDir ?? this.ctx.dataDir;
 	}
 	snapshotTls() {
-		const status = require_tls.readTlsAccessStatus(this.tlsDataDir(), require_tls.servedHttpsLeafFingerprint());
+		const status = require_hub_mdns_ciao.readTlsAccessStatus(this.tlsDataDir(), require_hub_mdns_ciao.servedHttpsLeafFingerprint());
 		return {
 			...status,
 			sans: [...status.sans]
@@ -1087,7 +1108,7 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 	* a certificate change that did not reach the listener must say so.
 	*/
 	putCertificateOnListener(action) {
-		const outcome = require_tls.applyCertificateToListener(this.tlsDataDir());
+		const outcome = require_hub_mdns_ciao.applyCertificateToListener(this.tlsDataDir());
 		if (outcome.kind === "reloaded") {
 			this.ctx.logger.info("local-network: HTTPS listener now serves the new certificate", { meta: {
 				action,
@@ -1113,17 +1134,17 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 		const httpsPort = (await this.resolveAdvertisedListenPort(null)).port;
 		const httpPort = this.resolvedHttpPort();
 		if (this.config.httpEnabled !== false && httpPort === httpsPort) throw new Error(`HTTP port ${httpPort} cannot equal the HTTPS listen port`);
-		await require_tls.applyLanHttp({
+		await require_hub_mdns_ciao.applyLanHttp({
 			enabled: this.config.httpEnabled !== false,
 			port: httpPort,
 			host: "0.0.0.0"
 		});
 		if (hostname !== "") {
-			require_tls.writeExtraSans(this.tlsDataDir(), [hostname]);
-			if (require_tls.readTlsMode(this.tlsDataDir()) === "generated") {
-				if ((await require_tls.ensureTlsCert(this.tlsDataDir(), { extraSans: [hostname] })).generated) this.putCertificateOnListener("hostname");
+			require_hub_mdns_ciao.writeExtraSans(this.tlsDataDir(), [hostname]);
+			if (require_hub_mdns_ciao.readTlsMode(this.tlsDataDir()) === "generated") {
+				if ((await require_hub_mdns_ciao.ensureTlsCert(this.tlsDataDir(), { extraSans: [hostname] })).generated) this.putCertificateOnListener("hostname");
 			}
-		} else require_tls.writeExtraSans(this.tlsDataDir(), []);
+		} else require_hub_mdns_ciao.writeExtraSans(this.tlsDataDir(), []);
 	}
 	/**
 	* The port this hub is actually listening on, plus the provenance of the

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,6 +1,5 @@
-import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { A as HUB_MDNS_SERVICE_TYPE, An as resolveHubAddressRoles, En as resolveAppConnections, Nn as resolveNotificationTapAddress, Wt as isAppLinkBase, Xn as validateCustomAddress, _r as BaseAddon, j as HUB_MDNS_TXT_KEYS, li as EventCategory, lt as checkRoleAddress, qt as isDefaultAppConnectionEndpoint, rn as localNetworkCapability, s as CAMSTACK_APP_LINK_ORIGIN, yn as pickAppLinkHub } from "../../dist-Bt8GTRHB.mjs";
-import { A as readTlsMode, G as DEFAULT_LAN_HTTP_PORT, M as writeExtraSans, O as readExtraSans, P as ensureTlsCert, T as servedHttpsLeafFingerprint, X as readLanHttpState, _ as regenerateCertificate, g as applyCertificateToListener, k as readTlsAccessStatus, q as applyLanHttp, v as revertToGeneratedCertificate, y as storeUploadedCertificate } from "../../tls-CpcGkeJV.mjs";
+import { $n as validateCustomAddress, In as resolveNotificationTapAddress, M as HUB_MDNS_SERVICE_TYPE, N as HUB_MDNS_TXT_KEYS, Nn as resolveHubAddressRoles, Sn as pickAppLinkHub, Xt as isDefaultAppConnectionEndpoint, br as BaseAddon, fi as EventCategory, ft as checkRoleAddress, kn as resolveAppConnections, l as CAMSTACK_APP_LINK_ORIGIN, on as localNetworkCapability, qt as isAppLinkBase } from "../../dist-CYcBqnXk.mjs";
+import { C as DEFAULT_LAN_HTTP_PORT, O as readLanHttpState, T as applyLanHttp, a as storeUploadedCertificate, b as ensureTlsCert, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, m as readExtraSans, n as applyCertificateToListener, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans } from "../../hub-mdns-ciao-DJRwtlA8.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
 import * as os from "node:os";
@@ -190,6 +189,48 @@ function withAppConnectionCustomEndpoints(detected, state) {
 	const extra = state.custom.filter((c) => wanted.has(c.baseUrl) && !known.has(c.baseUrl)).map(customEndpoint);
 	return [...detected, ...extra];
 }
+/** Where a twin sorts relative to its plain-HTTP row: straight after it. */
+var HTTPS_TWIN_PRIORITY_STEP = .5;
+/**
+* The HTTPS counterpart of every LAN address advertised over plain HTTP
+* (D859): `http://<lan>:<httpPort>` gains `https://<lan>:<httpsPort>`, the hub's
+* TLS listener, as its own row straight after it. The twin is an ordinary
+* detected LAN row — ticked, unticked and flagged like any other, on by default
+* (a LAN row is an automatic app connection). A phone that does not trust the
+* hub's local CA fails that candidate in the race it already runs; one that
+* does reaches it. Only the app-connection palette and the table carry twins:
+* the palette `internal` and `publicEndpoint` resolve over never does, so those
+* roles keep their answer. Rows already on https (LAN HTTP off), the public
+* tunnel, the mesh, custom addresses and loopback have no twin.
+*/
+function withLanHttpsCounterparts(palette, httpsPort) {
+	const known = new Set(palette.map((e) => e.baseUrl));
+	const out = [];
+	for (const endpoint of palette) {
+		out.push(endpoint);
+		if (endpoint.kind !== "lan-ipv4" && endpoint.kind !== "lan-ipv6") continue;
+		const twin = httpsTwinOf(endpoint, httpsPort);
+		if (twin === null || known.has(twin.baseUrl)) continue;
+		known.add(twin.baseUrl);
+		out.push(twin);
+	}
+	return out;
+}
+function httpsTwinOf(endpoint, httpsPort) {
+	let parsed;
+	try {
+		parsed = new URL(endpoint.baseUrl);
+	} catch {
+		return null;
+	}
+	if (parsed.protocol !== "http:") return null;
+	return {
+		...endpoint,
+		label: `${endpoint.label} (HTTPS)`,
+		baseUrl: `https://${parsed.hostname}:${httpsPort}`,
+		priority: endpoint.priority + HTTPS_TWIN_PRIORITY_STEP
+	};
+}
 /** Every role's answer — the resolvers from `@camstack/types`, nothing else. */
 function resolveRoles(state, appPalette, httpsPalette) {
 	return resolveHubAddressRoles(withAppConnectionCustomEndpoints(appPalette, state), httpsPalette, state.flags);
@@ -489,31 +530,6 @@ function internalUrlOf(book) {
 	return book.roles.internal.resolved;
 }
 //#endregion
-//#region src/builtins/local-network/hub-mdns-ciao.ts
-function createCiaoPublisher() {
-	return { async publish(announcement) {
-		const { getResponder } = await import("../../lib-B_R6sPC3.mjs").then((m) => /* @__PURE__ */ __toESM(m.default));
-		const responder = getResponder();
-		const service = responder.createService({
-			name: announcement.name,
-			type: announcement.type,
-			port: announcement.port,
-			txt: { ...announcement.txt },
-			...announcement.address !== null ? { restrictedAddresses: [announcement.address] } : {}
-		});
-		try {
-			await service.advertise();
-		} catch (err) {
-			await responder.shutdown().catch(() => void 0);
-			throw err;
-		}
-		return { stop: async () => {
-			await service.destroy();
-			await responder.shutdown();
-		} };
-	} };
-}
-//#endregion
 //#region src/builtins/local-network/local-hostname.ts
 var DNS_NAME = /^(?=.{1,253}$)([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])$/;
 /**
@@ -620,9 +636,13 @@ var LocalNetworkAddon = class extends BaseAddon {
 	async palettes() {
 		const port = (await this.resolveAdvertisedListenPort(null)).port;
 		await this.reconcileMeshEndpoint();
+		const http = this.endpointsNow(false, false, "http", port);
+		const https = this.endpointsNow(false, false, "https", port);
 		return {
-			http: this.endpointsNow(false, false, "http", port),
-			https: this.endpointsNow(false, false, "https", port)
+			http,
+			https,
+			httpWithTwins: withLanHttpsCounterparts(http, port),
+			httpsWithTwins: withLanHttpsCounterparts(https, port)
 		};
 	}
 	/** The stored address book, normalised against what is detected now. */
@@ -635,11 +655,11 @@ var LocalNetworkAddon = class extends BaseAddon {
 	}
 	/** `getAddresses`: the Addresses table and every role's answer. */
 	async addressBook(scheme) {
-		const { http, https } = await this.palettes();
-		const state = this.addressState([...http, ...https]);
+		const { http, https, httpWithTwins, httpsWithTwins } = await this.palettes();
+		const state = this.addressState([...httpWithTwins, ...httpsWithTwins]);
 		const httpsPort = (await this.resolveAdvertisedListenPort(null)).port;
 		return buildAddressBook(state, {
-			rowsPalette: scheme === "http" ? http : https,
+			rowsPalette: scheme === "http" ? httpWithTwins : httpsWithTwins,
 			httpsPalette: https,
 			appLink: appLinkEndpoint(),
 			appLinkHub: pickAppLinkHub(https),
@@ -651,8 +671,8 @@ var LocalNetworkAddon = class extends BaseAddon {
 	* naming an address in no row becomes a custom address in the same write).
 	*/
 	async changeAddressBook(change) {
-		const { http, https } = await this.palettes();
-		const detected = [...http, ...https];
+		const { httpWithTwins, httpsWithTwins } = await this.palettes();
+		const detected = [...httpWithTwins, ...httpsWithTwins];
 		const detectedUrls = new Set(detected.map((e) => e.baseUrl));
 		const changed = change(this.addressState(detected), {
 			detectedUrls,
@@ -731,7 +751,7 @@ var LocalNetworkAddon = class extends BaseAddon {
 	*/
 	async buildAdvertisedEndpoints(includeLoopback, ipv4Only, scheme, httpsPort) {
 		await this.reconcileMeshEndpoint();
-		const detected = this.endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort);
+		const detected = withLanHttpsCounterparts(this.endpointsNow(includeLoopback, ipv4Only, scheme, httpsPort), httpsPort);
 		return withAppConnectionCustomEndpoints(detected, this.addressState(detected));
 	}
 	/**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BCKOeWu_.js");
+const require_dist = require("../../dist-CCH3XPqO.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { _r as BaseAddon, an as logDestinationCapability } from "../../dist-Bt8GTRHB.mjs";
+import { br as BaseAddon, cn as logDestinationCapability } from "../../dist-CYcBqnXk.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BCKOeWu_.js");
+const require_dist = require("../../dist-CCH3XPqO.js");
 let node_fs_promises = require("node:fs/promises");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Bt as foldSnapshotByFunction, Dn as resolveBucketMs, Nr as createEvent, _r as BaseAddon, dn as metricsProviderCapability, gr as errMsg, li as EventCategory, wn as reducePoints } from "../../dist-Bt8GTRHB.mjs";
+import { An as resolveBucketMs, Dn as reducePoints, Ir as createEvent, Ut as foldSnapshotByFunction, br as BaseAddon, fi as EventCategory, mn as metricsProviderCapability, yr as errMsg } from "../../dist-CYcBqnXk.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import * as os from "node:os";
 import { platform } from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BCKOeWu_.js");
+const require_dist = require("../../dist-CCH3XPqO.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { Ln as scoreRuntimes, Lr as emitReadiness, _r as BaseAddon, gr as errMsg, jt as enumerateInferenceDevices, li as EventCategory, xn as platformProbeCapability } from "../../dist-Bt8GTRHB.mjs";
+import { Bn as scoreRuntimes, Br as emitReadiness, Pt as enumerateInferenceDevices, br as BaseAddon, fi as EventCategory, wn as platformProbeCapability, yr as errMsg } from "../../dist-CYcBqnXk.mjs";
 import * as os from "node:os";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BCKOeWu_.js");
+const require_dist = require("../../dist-CCH3XPqO.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { _r as BaseAddon, li as EventCategory } from "../../dist-Bt8GTRHB.mjs";
+import { br as BaseAddon, fi as EventCategory } from "../../dist-CYcBqnXk.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BCKOeWu_.js");
+const require_dist = require("../../dist-CCH3XPqO.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Bn as snapshotCapability, Jr as nodePin, Kn as streamQualityLabel, _r as BaseAddon, a as BatteryStatusSchema, et as bareAddonId, gr as errMsg, hr as DeviceType, li as EventCategory, pr as DeviceFeature, tt as batteryCapability, un as memoizePinnedFfmpeg, wt as deriveBatteryPresence } from "../../dist-Bt8GTRHB.mjs";
+import { Dt as deriveBatteryPresence, Un as snapshotCapability, Yn as streamQualityLabel, Zr as nodePin, br as BaseAddon, fi as EventCategory, gr as DeviceFeature, it as batteryCapability, pn as memoizePinnedFfmpeg, rt as bareAddonId, s as BatteryStatusSchema, vr as DeviceType, yr as errMsg } from "../../dist-CYcBqnXk.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BCKOeWu_.js");
+const require_dist = require("../../dist-CCH3XPqO.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Wn as storageProviderCapability, _r as BaseAddon, zt as filesystemBrowseCapability } from "../../dist-Bt8GTRHB.mjs";
+import { Ht as filesystemBrowseCapability, br as BaseAddon, qn as storageProviderCapability } from "../../dist-CYcBqnXk.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
-const require_wal_maintenance = require("../../wal-maintenance-ChzCPUi2.js");
+const require_wal_maintenance = require("../../wal-maintenance-LZYd8iT-.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/index.mjs

@@ -1,5 +1,5 @@
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./filesystem-storage.addon.mjs";
-import { A as SQLITE_PAGE_CACHE_CEILING_KIB, B as sqliteEngineStorm, D as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_FLOOR_MS, I as SQLITE_PROFILE_REPORT_INTERVAL_MS, L as SQLITE_PROFILE_TOP_N, M as sqliteMmapSizeFor, N as sqlitePageCacheKibFor, O as SQLITE_MMAP_CEILING_BYTES, P as SQLITE_ENGINE_STORM_WALL_SHARE, R as SQLITE_SLOW_CALL_MS, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_FLOOR_KIB, k as SQLITE_MMAP_FLOOR_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SqliteOpProfiler } from "../../wal-maintenance-uQGuStFW.mjs";
+import { A as SQLITE_PAGE_CACHE_CEILING_KIB, B as sqliteEngineStorm, D as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, F as SQLITE_PROFILE_REPORT_FLOOR_MS, I as SQLITE_PROFILE_REPORT_INTERVAL_MS, L as SQLITE_PROFILE_TOP_N, M as sqliteMmapSizeFor, N as sqlitePageCacheKibFor, O as SQLITE_MMAP_CEILING_BYTES, P as SQLITE_ENGINE_STORM_WALL_SHARE, R as SQLITE_SLOW_CALL_MS, a as WalMaintenance, c as SqliteSettingsBackend, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_PAGE_CACHE_FLOOR_KIB, k as SQLITE_MMAP_FLOOR_BYTES, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SqliteOpProfiler } from "../../wal-maintenance-DgLLPK14.mjs";
 import { SqliteSettingsAddon } from "./sqlite-settings.addon.mjs";
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BCKOeWu_.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-u3Wwkdrq.js");
-const require_wal_maintenance = require("../../wal-maintenance-ChzCPUi2.js");
+const require_dist = require("../../dist-CCH3XPqO.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-CEiCaI_j.js");
+const require_wal_maintenance = require("../../wal-maintenance-LZYd8iT-.js");
 const require_sqlite_snapshot_protocol = require("../../sqlite-snapshot-protocol-B9OndqZv.js");
 const require_wal_checkpoint_policy = require("../../wal-checkpoint-policy-d2z2qPqx.js");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { $n as vectorStoreCapability, Sr as RUNTIME_DEFAULTS, _ as DATABASE_SNAPSHOT_TIMEOUT_MS, _r as BaseAddon, bt as databaseSnapshotCapability, et as bareAddonId, g as DATABASE_SNAPSHOT_SUFFIX, gr as errMsg, h as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, v as DATA_STORE_DATABASES, yt as dataStoreProviderCapability } from "../../dist-Bt8GTRHB.mjs";
-import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-CmcEitC2.mjs";
-import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-uQGuStFW.mjs";
+import { Ct as databaseSnapshotCapability, St as dataStoreProviderCapability, Tr as RUNTIME_DEFAULTS, _ as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, b as DATA_STORE_DATABASES, br as BaseAddon, nr as vectorStoreCapability, rt as bareAddonId, v as DATABASE_SNAPSHOT_SUFFIX, y as DATABASE_SNAPSHOT_TIMEOUT_MS, yr as errMsg } from "../../dist-CYcBqnXk.mjs";
+import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-CyDdyjLP.mjs";
+import { C as callControl, E as controlTargetOf, S as trustResult, T as callVector, _ as collectTransferables, a as WalMaintenance, c as SqliteSettingsBackend, d as CrossDatabaseTransactError, f as DatabaseBusyError, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callData } from "../../wal-maintenance-DgLLPK14.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BCKOeWu_.js");
+const require_dist = require("../../dist-CCH3XPqO.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ft as evictionPolicyOfLocation, G as StorageLocationTypeSchema, Gr as isSecretMarker, Hn as storageMigrationCapability, Jt as isLocationEnabled, K as StorageMigrationJobSchema, P as LegacyStorageLocationDefaultSchema, Rn as settingsStoreCapability, U as StorageCleanupJobSchema, Ut as gbToBytes, Vn as storageCapability, W as StorageLocationModeSchema, Xr as parseJsonObject, _r as BaseAddon, ci as transformSecretWrite, cn as mayReadLocation, er as withLocationMode, fn as modeMayWrite, jn as resolveLocationMode, jr as collectSecretConfigKeys, li as EventCategory, ln as mayWriteToLocation, ri as secretTreeFromPaths, ti as resolveSecretMarkers, tn as legacyModeOf, xr as REDACTED_SECRET } from "../../dist-Bt8GTRHB.mjs";
+import { $r as parseJsonObject, Gn as storageMigrationCapability, I as LegacyStorageLocationDefaultSchema, J as StorageLocationTypeSchema, Jr as isSecretMarker, K as StorageCleanupJobSchema, Kt as gbToBytes, Pn as resolveLocationMode, Pr as collectSecretConfigKeys, Rt as evictionPolicyOfLocation, Vn as settingsStoreCapability, Wn as storageCapability, Y as StorageMigrationJobSchema, Zt as isLocationEnabled, br as BaseAddon, di as transformSecretWrite, dn as mayReadLocation, fi as EventCategory, fn as mayWriteToLocation, hn as modeMayWrite, ii as resolveSecretMarkers, in as legacyModeOf, oi as secretTreeFromPaths, q as StorageLocationModeSchema, rr as withLocationMode, wr as REDACTED_SECRET } from "../../dist-CYcBqnXk.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";