@camstack/system 1.2.434 → 1.2.436

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CCH3XPqO.js");
+const require_dist = require("../../dist-DVe0Nsp8.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { br as BaseAddon, cn as logDestinationCapability } from "../../dist-CYcBqnXk.mjs";
+import { ln as logDestinationCapability, xr as BaseAddon } from "../../dist-DjD2M79P.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-B7R1oQnY.js → composition-sources-BAOlCu4j.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CCH3XPqO.js");
+const require_dist = require("./dist-DVe0Nsp8.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-CqrDyHM1.mjs → composition-sources-gN_BWUKp.mjs}

@@ -1,4 +1,4 @@
-import { fr as compositionSourceKey, yr as errMsg } from "./dist-CYcBqnXk.mjs";
+import { br as errMsg, pr as compositionSourceKey } from "./dist-DjD2M79P.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/constants-BFpowodq.mjs

@@ -0,0 +1,20 @@
+import { Pr as buildSecretRef } from "./dist-DjD2M79P.mjs";
+/** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
+var MESH_CA_KEY_REF = buildSecretRef({
+	owner: "system",
+	scope: { kind: "global" },
+	fieldPath: "meshCaKey"
+});
+/** `system-settings` key holding the public CA certificate PEM. */
+var MESH_CA_SETTINGS_KEY = "cluster.meshCa";
+/** Field inside the `cluster` section. */
+var MESH_CA_FIELD = "meshCa";
+var MESH_CA_VALIDITY_DAYS = 3650;
+var DEFAULT_HUB_TLS_TCP_PORT = 6443;
+/** Subject of the mesh root. Distinct from the HTTPS local CA. */
+var MESH_CA_COMMON_NAME = "CamStack Mesh CA";
+/** Client + server auth EKU OIDs (mutual TLS). */
+var SERVER_AUTH_OID = "1.3.6.1.5.5.7.3.1";
+var CLIENT_AUTH_OID = "1.3.6.1.5.5.7.3.2";
+//#endregion
+export { MESH_CA_KEY_REF as a, SERVER_AUTH_OID as c, MESH_CA_FIELD as i, DEFAULT_HUB_TLS_TCP_PORT as n, MESH_CA_SETTINGS_KEY as o, MESH_CA_COMMON_NAME as r, MESH_CA_VALIDITY_DAYS as s, CLIENT_AUTH_OID as t };

package/dist/constants-GENKqk9k.js

@@ -0,0 +1,66 @@
+/** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
+var MESH_CA_KEY_REF = require("./dist-DVe0Nsp8.js").buildSecretRef({
+	owner: "system",
+	scope: { kind: "global" },
+	fieldPath: "meshCaKey"
+});
+/** `system-settings` key holding the public CA certificate PEM. */
+var MESH_CA_SETTINGS_KEY = "cluster.meshCa";
+/** Field inside the `cluster` section. */
+var MESH_CA_FIELD = "meshCa";
+var MESH_CA_VALIDITY_DAYS = 3650;
+var DEFAULT_HUB_TLS_TCP_PORT = 6443;
+/** Subject of the mesh root. Distinct from the HTTPS local CA. */
+var MESH_CA_COMMON_NAME = "CamStack Mesh CA";
+/** Client + server auth EKU OIDs (mutual TLS). */
+var SERVER_AUTH_OID = "1.3.6.1.5.5.7.3.1";
+var CLIENT_AUTH_OID = "1.3.6.1.5.5.7.3.2";
+//#endregion
+Object.defineProperty(exports, "CLIENT_AUTH_OID", {
+	enumerable: true,
+	get: function() {
+		return CLIENT_AUTH_OID;
+	}
+});
+Object.defineProperty(exports, "DEFAULT_HUB_TLS_TCP_PORT", {
+	enumerable: true,
+	get: function() {
+		return DEFAULT_HUB_TLS_TCP_PORT;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_COMMON_NAME", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_COMMON_NAME;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_FIELD", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_FIELD;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_KEY_REF", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_KEY_REF;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_SETTINGS_KEY", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_SETTINGS_KEY;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_VALIDITY_DAYS", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_VALIDITY_DAYS;
+	}
+});
+Object.defineProperty(exports, "SERVER_AUTH_OID", {
+	enumerable: true,
+	get: function() {
+		return SERVER_AUTH_OID;
+	}
+});

package/dist/{device-ca-CDjGQQPd.mjs → device-ca-BNM5ai4t.mjs}

@@ -1,4 +1,4 @@
-import { E as DEVICE_SAN_USER_PREFIX, Nr as buildSecretRef, T as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-CYcBqnXk.mjs";
+import { E as DEVICE_SAN_USER_PREFIX, Pr as buildSecretRef, T as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-DjD2M79P.mjs";
 import { a as KeyUsagesExtension, d as X509Certificate$1, f as X509CertificateGenerator, g as backdatedNotBefore, i as KeyUsageFlags, l as SubjectAlternativeNameExtension, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "./x509.es-CDvj67p1.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-D21ZP00q.js → device-ca-CuWuRW9N.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CCH3XPqO.js");
+const require_dist = require("./dist-DVe0Nsp8.js");
 const require_x509_es = require("./x509.es-r7Ht1thA.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{dist-CCH3XPqO.js → dist-DVe0Nsp8.js}

@@ -39976,10 +39976,14 @@ function isLanIpv4Literal(endpoint) {
 	const host = hostnameOf(endpoint.baseUrl);
 	return host !== null && IPV4_LITERAL.test(host);
 }
+function isUnstable(endpoint) {
+	return endpoint.stable === false;
+}
 /** Lower = better; `null` = never this role's AUTOMATIC answer. */
 function autoRankFor(role, endpoint) {
 	if (endpoint.kind === "loopback" || endpoint.kind === "app-link" || endpoint.kind === "custom") return null;
 	if (hostnameOf(endpoint.baseUrl) === null) return null;
+	if (isUnstable(endpoint)) return null;
 	if (role === "internal") {
 		if (isLanIpv4Literal(endpoint)) return 0;
 		if (isPlausibleLan(endpoint)) return 1;
@@ -40134,6 +40138,7 @@ function resolveNotificationTapAddress(flags) {
 }
 /** AUTO app connections: LAN IPv4 + the public tunnel. Never IPv6, mesh, loopback or custom. */
 function isDefaultAppConnectionEndpoint(endpoint) {
+	if (isUnstable(endpoint)) return false;
 	if (endpoint.kind === "lan-ipv4") return true;
 	return endpoint.kind === "public" && endpoint.interfaceKind === "public";
 }
@@ -41860,7 +41865,25 @@ var NetworkEndpointSchema = zod.z.object({
 	url: zod.z.string(),
 	hostname: zod.z.string(),
 	port: zod.z.number(),
-	protocol: zod.z.enum(["http", "https"])
+	protocol: zod.z.enum(["http", "https"]),
+	/**
+	* Whether this address survives a restart of its provider. `false` = it is
+	* re-issued every time (a Quick tunnel's random `*.trycloudflare.com`); the
+	* hub never selects such an address AUTOMATICALLY for a role (D860), though
+	* it stays visible and an operator may still flag it. Absent = stable: every
+	* provider except a Quick tunnel owns a name that does not change.
+	*/
+	stable: zod.z.boolean().optional()
+});
+/**
+* `data` of a `network.tunnel.started` event — what `local-network` (which
+* tails the bus and cannot import a provider) learns about the new address.
+*/
+var NetworkTunnelStartedDataSchema = zod.z.object({
+	url: zod.z.string(),
+	/** Mirrors {@link NetworkEndpointSchema} `stable`; absent = stable. */
+	stable: zod.z.boolean().optional(),
+	updated: zod.z.boolean().optional()
 });
 var NetworkAccessStatusSchema = zod.z.object({
 	connected: zod.z.boolean(),
@@ -57156,7 +57179,12 @@ var SearchResultSchema = zod.z.object({
 	publishedAt: zod.z.string(),
 	author: zod.z.string(),
 	installed: zod.z.boolean(),
-	installedVersion: zod.z.string().optional()
+	installedVersion: zod.z.string().optional(),
+	/**
+	* Capability names the package's addons declare (from its published
+	* manifest). `null` = the registry lookup failed — unknown, never `[]` (D393).
+	*/
+	capabilities: zod.z.array(zod.z.string()).readonly().nullable()
 });
 var AutoUpdateSettingsSchema = zod.z.object({
 	channel: ChannelSchema,
@@ -57375,7 +57403,11 @@ var addonsCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
-		searchAvailable: method(zod.z.object({ query: zod.z.string().optional() }), zod.z.array(SearchResultSchema)),
+		searchAvailable: method(zod.z.object({
+			query: zod.z.string().optional(),
+			/** Only packages whose addons declare this capability (unknown ones excluded). */
+			capability: zod.z.string().optional()
+		}), zod.z.array(SearchResultSchema)),
 		/**
 		* Available package updates for a node. `nodeId` omitted (or
 		* `'hub'`) checks the hub's own installed packages; an agent
@@ -61482,7 +61514,13 @@ var ConnectionEndpointSchema = zod.z.object({
 	* calls so the client can sort even if the cap returns a new
 	* ordering between polls.
 	*/
-	priority: zod.z.number()
+	priority: zod.z.number(),
+	/**
+	* `false` = the address changes on its own (a Quick tunnel, re-issued on
+	* every respawn). Automatic role resolution skips it (D860); an explicit
+	* operator flag still honours it. Absent = stable.
+	*/
+	stable: zod.z.boolean().optional()
 });
 /**
 * Where the advertised local port came from. Ordered most → least
@@ -85833,6 +85871,12 @@ Object.defineProperty(exports, "MOTION_CLOSE_AFTER_MS", {
 		return MOTION_CLOSE_AFTER_MS;
 	}
 });
+Object.defineProperty(exports, "NetworkTunnelStartedDataSchema", {
+	enumerable: true,
+	get: function() {
+		return NetworkTunnelStartedDataSchema;
+	}
+});
 Object.defineProperty(exports, "RECORDING_SOURCE_CAMSTACK_ADDON", {
 	enumerable: true,
 	get: function() {
@@ -86529,12 +86573,6 @@ Object.defineProperty(exports, "looseSchema", {
 		return looseSchema;
 	}
 });
-Object.defineProperty(exports, "makeSecretMarker", {
-	enumerable: true,
-	get: function() {
-		return makeSecretMarker;
-	}
-});
 Object.defineProperty(exports, "mayReadLocation", {
 	enumerable: true,
 	get: function() {
@@ -86775,12 +86813,6 @@ Object.defineProperty(exports, "secretTreeFromPaths", {
 		return secretTreeFromPaths;
 	}
 });
-Object.defineProperty(exports, "secretTreeFromSchema", {
-	enumerable: true,
-	get: function() {
-		return secretTreeFromSchema;
-	}
-});
 Object.defineProperty(exports, "settingsStoreCapability", {
 	enumerable: true,
 	get: function() {

package/dist/{dist-CYcBqnXk.mjs → dist-DjD2M79P.mjs}

@@ -39976,10 +39976,14 @@ function isLanIpv4Literal(endpoint) {
 	const host = hostnameOf(endpoint.baseUrl);
 	return host !== null && IPV4_LITERAL.test(host);
 }
+function isUnstable(endpoint) {
+	return endpoint.stable === false;
+}
 /** Lower = better; `null` = never this role's AUTOMATIC answer. */
 function autoRankFor(role, endpoint) {
 	if (endpoint.kind === "loopback" || endpoint.kind === "app-link" || endpoint.kind === "custom") return null;
 	if (hostnameOf(endpoint.baseUrl) === null) return null;
+	if (isUnstable(endpoint)) return null;
 	if (role === "internal") {
 		if (isLanIpv4Literal(endpoint)) return 0;
 		if (isPlausibleLan(endpoint)) return 1;
@@ -40134,6 +40138,7 @@ function resolveNotificationTapAddress(flags) {
 }
 /** AUTO app connections: LAN IPv4 + the public tunnel. Never IPv6, mesh, loopback or custom. */
 function isDefaultAppConnectionEndpoint(endpoint) {
+	if (isUnstable(endpoint)) return false;
 	if (endpoint.kind === "lan-ipv4") return true;
 	return endpoint.kind === "public" && endpoint.interfaceKind === "public";
 }
@@ -41860,7 +41865,25 @@ var NetworkEndpointSchema = z.object({
 	url: z.string(),
 	hostname: z.string(),
 	port: z.number(),
-	protocol: z.enum(["http", "https"])
+	protocol: z.enum(["http", "https"]),
+	/**
+	* Whether this address survives a restart of its provider. `false` = it is
+	* re-issued every time (a Quick tunnel's random `*.trycloudflare.com`); the
+	* hub never selects such an address AUTOMATICALLY for a role (D860), though
+	* it stays visible and an operator may still flag it. Absent = stable: every
+	* provider except a Quick tunnel owns a name that does not change.
+	*/
+	stable: z.boolean().optional()
+});
+/**
+* `data` of a `network.tunnel.started` event — what `local-network` (which
+* tails the bus and cannot import a provider) learns about the new address.
+*/
+var NetworkTunnelStartedDataSchema = z.object({
+	url: z.string(),
+	/** Mirrors {@link NetworkEndpointSchema} `stable`; absent = stable. */
+	stable: z.boolean().optional(),
+	updated: z.boolean().optional()
 });
 var NetworkAccessStatusSchema = z.object({
 	connected: z.boolean(),
@@ -57156,7 +57179,12 @@ var SearchResultSchema = z.object({
 	publishedAt: z.string(),
 	author: z.string(),
 	installed: z.boolean(),
-	installedVersion: z.string().optional()
+	installedVersion: z.string().optional(),
+	/**
+	* Capability names the package's addons declare (from its published
+	* manifest). `null` = the registry lookup failed — unknown, never `[]` (D393).
+	*/
+	capabilities: z.array(z.string()).readonly().nullable()
 });
 var AutoUpdateSettingsSchema = z.object({
 	channel: ChannelSchema,
@@ -57375,7 +57403,11 @@ var addonsCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
-		searchAvailable: method(z.object({ query: z.string().optional() }), z.array(SearchResultSchema)),
+		searchAvailable: method(z.object({
+			query: z.string().optional(),
+			/** Only packages whose addons declare this capability (unknown ones excluded). */
+			capability: z.string().optional()
+		}), z.array(SearchResultSchema)),
 		/**
 		* Available package updates for a node. `nodeId` omitted (or
 		* `'hub'`) checks the hub's own installed packages; an agent
@@ -61482,7 +61514,13 @@ var ConnectionEndpointSchema = z.object({
 	* calls so the client can sort even if the cap returns a new
 	* ordering between polls.
 	*/
-	priority: z.number()
+	priority: z.number(),
+	/**
+	* `false` = the address changes on its own (a Quick tunnel, re-issued on
+	* every respawn). Automatic role resolution skips it (D860); an explicit
+	* operator flag still honours it. Absent = stable.
+	*/
+	stable: z.boolean().optional()
 });
 /**
 * Where the advertised local port came from. Ordered most → least
@@ -85545,4 +85583,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { addonWidgetsCapability as $, validateCustomAddress as $n, parseJsonObject as $r, isVoidInput as $t, FieldClaimModeSchema as A, resolveBucketMs as An, asJsonObject as Ar, deviceExtensionCapability as At, RECORDING_SOURCE_CAMSTACK_ADDON as B, scoreRuntimes as Bn, emitReadiness as Br, expressionContainsBuiltinCall as Bt, DEVICE_ENROLLMENT_TTL_MS as C, planComposition as Cn, DEVICE_STATUS_METHOD as Cr, databaseSnapshotCapability as Ct, DeclaredDevices as D, reducePoints as Dn, ReadinessTimeoutError as Dr, deriveBatteryPresence as Dt, DEVICE_SAN_USER_PREFIX as E, ptzAutotrackCapability as En, ReadinessRegistry as Er, defineExtensionSlotProvider as Et, LOG_LEVEL_RANK as F, resolveMethodAuth as Fn, collectZodSecretPaths as Fr, enumerateItemArrayFields as Ft, SsoBridgeClaimsSchema as G, storageMigrationCapability as Gn, isEvent as Gr, formatMinutes as Gt, STORAGE_ACCESS_FALLBACK as H, siteZoneKey as Hn, formatSecretScope as Hr, filesystemBrowseCapability as Ht, LegacyStorageLocationDefaultSchema as I, resolveNotificationTapAddress as In, createEvent as Ir, enumerateSchemaFields as It, StorageLocationTypeSchema as J, streamCatalogCapability as Jn, isSecretMarker as Jr, isArrayOutputSchema as Jt, StorageCleanupJobSchema as K, storageOccupancyCapability as Kn, isKeychainStoredField as Kr, gbToBytes as Kt, METHOD_ACCESS_MAP as L, runtimeStatePolicyFor as Ln, customAction as Lr, evaluateCompositionField as Lt, HUB_MDNS_SERVICE_TYPE as M, resolveCoreBlockFiles as Mn, asString$1 as Mr, deviceStateCapability as Mt, HUB_MDNS_TXT_KEYS as N, resolveHubAddressRoles as Nn, buildSecretRef as Nr, deviceStatusCapability as Nt, DeviceStatusSchema as O, replacedFieldKeys as On, SECRET_CLEAR as Or, describeComposableCaps as Ot, KEYCHAIN_RESET_TRIGGER_ACTOR as P, resolveLocationMode as Pn, collectSecretConfigKeys as Pr, enumerateInferenceDevices as Pt, addonSettingsCapability as Q, validateComposition as Qn, normalizeSecretOwner as Qr, isObjectInput as Qt, MINUTES_PER_DAY as R, scopesAllowAddon as Rn, defineCustomActions as Rr, evictionPolicyOfLocation as Rt, DERIVED_CAMERA_SILENCED_CAP_NAMES as S, pickAppLinkHub as Sn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Sr, dataStoreProviderCapability as St, DEVICE_SAN_CREDENTIAL_PREFIX as T, procedureAuthKey as Tn, RUNTIME_DEFAULTS as Tr, decodeVectorBase64 as Tt, STREAM_PROFILE_META as U, snapshotCapability as Un, hydrateSchema as Ur, foldSnapshotByFunction as Ut, RecordingStatusSchema as V, settingsStoreCapability as Vn, expandCapMethods as Vr, extractNestedAddonId as Vt, ScopedTokenSchema as W, storageCapability as Wn, isDeviceConfigCap as Wr, formatDeviceRevoker as Wt, UserRecordSchema as X, supportedRuntimes as Xn, makeSecretMarker as Xr, isDefaultAppConnectionEndpoint as Xt, StorageMigrationJobSchema as Y, streamQualityLabel as Yn, isSecretMarkerLike as Yr, isCollectionArrayMethod as Yt, addonPagesCapability as Z, userManagementCapability as Zn, nodePin as Zr, isLocationEnabled as Zt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as _, normalizeCoreBlockWrite as _n, DeviceRole as _r, coreBlockComposition as _t, ApiKeyRecordSchema as a, scopeKey as ai, lifecycleJobSchema as an, buildFfmpegArgs as ar, buildCapabilityLookup as at, DATA_STORE_DATABASES as b, objectInputDeclaresRequiredDeviceId as bn, BaseAddon as br, coreBlocksCapability as bt, CAMERA_SWITCH_ORDER as c, sleep as ci, logDestinationCapability as cn, composedDeviceStableId as cr, buildStreamParamsConfigSchema as ct, COMPOSED_ITEM_FIXED_FIELDS as d, transformSecretWrite as di, mayReadLocation as dn, compositionSliceKey as dr, canonicalIconKey as dt, parseJsonUnknown as ei, kebabToCamel as en, vectorDimFromBase64 as er, alertsCapability as et, COMPOSER_RUNNER_ID as f, EventCategory as fi, mayWriteToLocation as fn, compositionSourceKey as fr, checkRoleAddress as ft, CoreBlockSchema as g, motionCapability as gn, DeviceFeature as gr, coreBlockAddonId as gt, CalendarPreferencesSchema as h, modeMayWrite as hn, toExpressionValue as hr, compositionSourceRefs as ht, AlertSchema as i, resolveSecretMarkers as ii, legacyModeOf as in, COMPOSER_ADDON_ID as ir, batteryCapability as it, FieldClaimSchema as j, resolveCoreBlockEntry as jn, asNumber as jr, deviceManagerCapability as jt, FIRST_LEVEL_MACRO_CLASSES as k, resolveAppConnections as kn, WELL_KNOWN_TAB_MAP as kr, deviceCredentialsCapability as kt, CAMSTACK_APP_LINK_ORIGIN as l, toNodeId as li, logLevelAtMost as ln, compositionFeatureEnabled as lr, calendarsCapability as lt, CORE_BLOCK_ADDON_PREFIX as m, metricsProviderCapability as mn, disarmRoseMemory as mr, compositionFieldKey as mt, AGENT_MDNS_TXT_KEYS as n, readinessKey as ni, keychainCapability as nn, vectorStoreCapability as nr, backupCapability as nt, BaseDevice as o, secretTreeFromPaths as oi, localNetworkCapability as on, cloneStatefulExpressionMemory as or, buildDeviceEnrollmentLink as ot, CORE_BLOCKS_ADDON_ID as p, memoizePinnedFfmpeg as pn, createStatefulExpressionMemory as pr, composerCapability as pt, StorageLocationModeSchema as q, storageProviderCapability as qn, isSecretClear as qr, isAppLinkBase as qt, ALL_CAPABILITY_DEFINITIONS as r, resolveCapMount as ri, legacyAutoLinkIds as rn, withLocationMode as rr, bareAddonId as rt, BatteryStatusSchema as s, secretTreeFromSchema as si, locationIconKey as sn, composedDeviceRef as sr, buildDeviceSignatureMessage as st, AGENT_MDNS_SERVICE_TYPE as t, parseSecretRef as ti, keychainAdminCapability as tn, vectorIndexDimConflictError as tr, authProviderCapability as tt, CAP_NAMES_WITH_STATUS as u, toSecretFieldView as ui, looseSchema as un, compositionItemFieldPath as ur, cameraGridLayoutCapability as ut, DATABASE_SNAPSHOT_SUFFIX as v, normalizeUnit as vn, DeviceType as vr, coreBlockIdFromAddonId as vt, DEVICE_NONCE_TTL_MS as w, platformProbeCapability as wn, REDACTED_SECRET as wr, declarationOwnerNodeId as wt, DAY_NAMES as x, parseStreamParamsFormPatch as xn, DATAPLANE_SECRET_HEADER as xr, createDeviceExtensionProvider as xt, DATABASE_SNAPSHOT_TIMEOUT_MS as y, objectInputDeclaresAddonId as yn, errMsg as yr, coreBlockSourceKind as yt, MOTION_CLOSE_AFTER_MS as z, scopesAllowDeviceCap as zn, emitDownForOwnedCaps as zr, expandContainer as zt };
+export { addonSettingsCapability as $, validateComposition as $n, parseJsonObject as $r, isObjectInput as $t, FieldClaimModeSchema as A, resolveAppConnections as An, WELL_KNOWN_TAB_MAP as Ar, deviceCredentialsCapability as At, NetworkTunnelStartedDataSchema as B, scopesAllowDeviceCap as Bn, emitDownForOwnedCaps as Br, expandContainer as Bt, DEVICE_ENROLLMENT_TTL_MS as C, pickAppLinkHub as Cn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Cr, dataStoreProviderCapability as Ct, DeclaredDevices as D, ptzAutotrackCapability as Dn, ReadinessRegistry as Dr, defineExtensionSlotProvider as Dt, DEVICE_SAN_USER_PREFIX as E, procedureAuthKey as En, RUNTIME_DEFAULTS as Er, decodeVectorBase64 as Et, LOG_LEVEL_RANK as F, resolveLocationMode as Fn, collectSecretConfigKeys as Fr, enumerateInferenceDevices as Ft, ScopedTokenSchema as G, storageCapability as Gn, isDeviceConfigCap as Gr, formatDeviceRevoker as Gt, RecordingStatusSchema as H, settingsStoreCapability as Hn, expandCapMethods as Hr, extractNestedAddonId as Ht, LegacyStorageLocationDefaultSchema as I, resolveMethodAuth as In, collectZodSecretPaths as Ir, enumerateItemArrayFields as It, StorageLocationModeSchema as J, storageProviderCapability as Jn, isSecretClear as Jr, isAppLinkBase as Jt, SsoBridgeClaimsSchema as K, storageMigrationCapability as Kn, isEvent as Kr, formatMinutes as Kt, METHOD_ACCESS_MAP as L, resolveNotificationTapAddress as Ln, createEvent as Lr, enumerateSchemaFields as Lt, HUB_MDNS_SERVICE_TYPE as M, resolveCoreBlockEntry as Mn, asNumber as Mr, deviceManagerCapability as Mt, HUB_MDNS_TXT_KEYS as N, resolveCoreBlockFiles as Nn, asString$1 as Nr, deviceStateCapability as Nt, DeviceStatusSchema as O, reducePoints as On, ReadinessTimeoutError as Or, deriveBatteryPresence as Ot, KEYCHAIN_RESET_TRIGGER_ACTOR as P, resolveHubAddressRoles as Pn, buildSecretRef as Pr, deviceStatusCapability as Pt, addonPagesCapability as Q, userManagementCapability as Qn, normalizeSecretOwner as Qr, isLocationEnabled as Qt, MINUTES_PER_DAY as R, runtimeStatePolicyFor as Rn, customAction as Rr, evaluateCompositionField as Rt, DERIVED_CAMERA_SILENCED_CAP_NAMES as S, parseStreamParamsFormPatch as Sn, DATAPLANE_SECRET_HEADER as Sr, createDeviceExtensionProvider as St, DEVICE_SAN_CREDENTIAL_PREFIX as T, platformProbeCapability as Tn, REDACTED_SECRET as Tr, declarationOwnerNodeId as Tt, STORAGE_ACCESS_FALLBACK as U, siteZoneKey as Un, formatSecretScope as Ur, filesystemBrowseCapability as Ut, RECORDING_SOURCE_CAMSTACK_ADDON as V, scoreRuntimes as Vn, emitReadiness as Vr, expressionContainsBuiltinCall as Vt, STREAM_PROFILE_META as W, snapshotCapability as Wn, hydrateSchema as Wr, foldSnapshotByFunction as Wt, StorageMigrationJobSchema as X, streamQualityLabel as Xn, isSecretMarkerLike as Xr, isCollectionArrayMethod as Xt, StorageLocationTypeSchema as Y, streamCatalogCapability as Yn, isSecretMarker as Yr, isArrayOutputSchema as Yt, UserRecordSchema as Z, supportedRuntimes as Zn, nodePin as Zr, isDefaultAppConnectionEndpoint as Zt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as _, motionCapability as _n, DeviceFeature as _r, coreBlockAddonId as _t, ApiKeyRecordSchema as a, scopeKey as ai, legacyModeOf as an, COMPOSER_ADDON_ID as ar, batteryCapability as at, DATA_STORE_DATABASES as b, objectInputDeclaresAddonId as bn, errMsg as br, coreBlockSourceKind as bt, CAMERA_SWITCH_ORDER as c, toNodeId as ci, locationIconKey as cn, composedDeviceRef as cr, buildDeviceSignatureMessage as ct, COMPOSED_ITEM_FIXED_FIELDS as d, EventCategory as di, looseSchema as dn, compositionItemFieldPath as dr, cameraGridLayoutCapability as dt, parseJsonUnknown as ei, isVoidInput as en, validateCustomAddress as er, addonWidgetsCapability as et, COMPOSER_RUNNER_ID as f, mayReadLocation as fn, compositionSliceKey as fr, canonicalIconKey as ft, CoreBlockSchema as g, modeMayWrite as gn, toExpressionValue as gr, compositionSourceRefs as gt, CalendarPreferencesSchema as h, metricsProviderCapability as hn, disarmRoseMemory as hr, compositionFieldKey as ht, AlertSchema as i, resolveSecretMarkers as ii, legacyAutoLinkIds as in, withLocationMode as ir, bareAddonId as it, FieldClaimSchema as j, resolveBucketMs as jn, asJsonObject as jr, deviceExtensionCapability as jt, FIRST_LEVEL_MACRO_CLASSES as k, replacedFieldKeys as kn, SECRET_CLEAR as kr, describeComposableCaps as kt, CAMSTACK_APP_LINK_ORIGIN as l, toSecretFieldView as li, logDestinationCapability as ln, composedDeviceStableId as lr, buildStreamParamsConfigSchema as lt, CORE_BLOCK_ADDON_PREFIX as m, memoizePinnedFfmpeg as mn, createStatefulExpressionMemory as mr, composerCapability as mt, AGENT_MDNS_TXT_KEYS as n, readinessKey as ni, keychainAdminCapability as nn, vectorIndexDimConflictError as nr, authProviderCapability as nt, BaseDevice as o, secretTreeFromPaths as oi, lifecycleJobSchema as on, buildFfmpegArgs as or, buildCapabilityLookup as ot, CORE_BLOCKS_ADDON_ID as p, mayWriteToLocation as pn, compositionSourceKey as pr, checkRoleAddress as pt, StorageCleanupJobSchema as q, storageOccupancyCapability as qn, isKeychainStoredField as qr, gbToBytes as qt, ALL_CAPABILITY_DEFINITIONS as r, resolveCapMount as ri, keychainCapability as rn, vectorStoreCapability as rr, backupCapability as rt, BatteryStatusSchema as s, sleep as si, localNetworkCapability as sn, cloneStatefulExpressionMemory as sr, buildDeviceEnrollmentLink as st, AGENT_MDNS_SERVICE_TYPE as t, parseSecretRef as ti, kebabToCamel as tn, vectorDimFromBase64 as tr, alertsCapability as tt, CAP_NAMES_WITH_STATUS as u, transformSecretWrite as ui, logLevelAtMost as un, compositionFeatureEnabled as ur, calendarsCapability as ut, DATABASE_SNAPSHOT_SUFFIX as v, normalizeCoreBlockWrite as vn, DeviceRole as vr, coreBlockComposition as vt, DEVICE_NONCE_TTL_MS as w, planComposition as wn, DEVICE_STATUS_METHOD as wr, databaseSnapshotCapability as wt, DAY_NAMES as x, objectInputDeclaresRequiredDeviceId as xn, BaseAddon as xr, coreBlocksCapability as xt, DATABASE_SNAPSHOT_TIMEOUT_MS as y, normalizeUnit as yn, DeviceType as yr, coreBlockIdFromAddonId as yt, MOTION_CLOSE_AFTER_MS as z, scopesAllowAddon as zn, defineCustomActions as zr, evictionPolicyOfLocation as zt };

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-LZYd8iT-.js");
+const require_wal_maintenance = require("./wal-maintenance-Br60onAQ.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as callControl, E as controlTargetOf, T as callVector, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, c as SqliteSettingsBackend, h as serializeError, o as createVectorIndex, s as vectorProviderOf, w as callData, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-DgLLPK14.mjs";
+import { C as callControl, E as controlTargetOf, T as callVector, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, c as SqliteSettingsBackend, h as serializeError, o as createVectorIndex, s as vectorProviderOf, w as callData, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-CaDsrJM_.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**