@camstack/system 1.2.435 → 1.2.436

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Fn as resolveLocationMode, Fr as collectSecretConfigKeys, Gn as storageCapability, Hn as settingsStoreCapability, I as LegacyStorageLocationDefaultSchema, J as StorageLocationModeSchema, Kn as storageMigrationCapability, Qt as isLocationEnabled, Tr as REDACTED_SECRET, X as StorageMigrationJobSchema, Y as StorageLocationTypeSchema, Yr as isSecretMarker, ai as resolveSecretMarkers, an as legacyModeOf, ei as parseJsonObject, fi as transformSecretWrite, fn as mayReadLocation, gn as modeMayWrite, ir as withLocationMode, pi as EventCategory, pn as mayWriteToLocation, q as StorageCleanupJobSchema, qt as gbToBytes, si as secretTreeFromPaths, xr as BaseAddon, zt as evictionPolicyOfLocation } from "../../dist-Bz4_y8Xy.mjs";
+import { $r as parseJsonObject, Fn as resolveLocationMode, Fr as collectSecretConfigKeys, Gn as storageCapability, Hn as settingsStoreCapability, I as LegacyStorageLocationDefaultSchema, J as StorageLocationModeSchema, Kn as storageMigrationCapability, Qt as isLocationEnabled, Tr as REDACTED_SECRET, X as StorageMigrationJobSchema, Y as StorageLocationTypeSchema, Yr as isSecretMarker, an as legacyModeOf, di as EventCategory, fn as mayReadLocation, gn as modeMayWrite, ii as resolveSecretMarkers, ir as withLocationMode, oi as secretTreeFromPaths, pn as mayWriteToLocation, q as StorageCleanupJobSchema, qt as gbToBytes, ui as transformSecretWrite, xr as BaseAddon, zt as evictionPolicyOfLocation } from "../../dist-DjD2M79P.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";

package/dist/builtins/system-config/system-config.addon.d.ts

@@ -5,7 +5,6 @@ import { systemConfigMeshActions } from "./mesh-actions.js";
 export declare const SYSTEM_CONFIG_CLUSTER_SECTION_ID = "system-config-cluster";
 export declare class SystemConfigAddon extends BaseAddon {
 	readonly id = "system-config";
-	private clusterSecretKeeper;
 	private meshCaKeeper;
 	private meshReapTimer;
 	private readonly meshGateTimers;
@@ -29,40 +28,20 @@ export declare class SystemConfigAddon extends BaseAddon {
 	* empty CRL would accept a revoked leaf. Retries until the settings store answers.
 	*/
 	private onMeshCaReady;
-	private mintJoinToken;
 	/** D821 — short-lived ticket for the agent's `:4444` unlock session. */
 	private mintAgentUiUnlock;
 	private readAgentDashboardOrigins;
-	private resolveHubUrl;
-	private resolveHubMeshAddress;
 	/** The keychain handle for owner `system`; `null` where there is no door. */
 	private systemSecrets;
 	private buildGlobalSchema;
 	getGlobalSettings(): Promise<ConfigUISchemaWithValues>;
 	/**
 	* The admin UI / `addonSettings` cap prefer {@link BaseAddon.updateGlobalSettingsAsOperator}.
-	* That BaseAddon path writes the generic addon store and never reaches
-	* {@link writeClusterSection}. Route the operator write through the same
-	* section-aware path as {@link updateGlobalSettings}.
+	* That BaseAddon path writes the generic addon store and never reaches the
+	* yml sections. Route the operator write through the same section-aware path
+	* as {@link updateGlobalSettings}.
 	*/
 	override updateGlobalSettingsAsOperator(patch: Record<string, unknown>, _nodeId?: string): Promise<void>;
 	updateGlobalSettings(patch: Record<string, unknown>): Promise<void>;
-	/**
-	* The cluster secret's save path: the value goes to the keychain (owner
-	* `system`), the row gets the marker; `''` / a view keeps. `$secretClear` is
-	* REFUSED: the secret is mandatory (D802). A value the keychain cannot store
-	* is REFUSED — never written inline (D787, P5). Mesh auth mode is always
-	* enforced (D821) — a legacy `meshAuth` in the patch is ignored.
-	*/
-	private writeClusterSection;
-	/** Persist + publish mesh auth mode (always `enforced` after D821). */
-	private writeMeshAuthMode;
-	/**
-	* First boot, or a keychain reset that cleared the marker (D802): a fresh
-	* random secret, stored like an operator save. Mesh auth stays enforced
-	* (D821) — every agent must present the secret; there is no transition window.
-	*/
-	private generateClusterSecret;
-	private storeClusterSecret;
 }
 export default SystemConfigAddon;