@camstack/system 1.2.435 → 1.2.437

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CnUtkSwN.js");
+const require_dist = require("../../dist-CEAyXW3Q.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { ln as logDestinationCapability, xr as BaseAddon } from "../../dist-Bz4_y8Xy.mjs";
+import { Cr as BaseAddon, un as logDestinationCapability } from "../../dist-m5JkT8UN.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-Cm42mgbv.js → composition-sources-BIT8IUKm.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CnUtkSwN.js");
+const require_dist = require("./dist-CEAyXW3Q.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-_7W2Ly9s.mjs → composition-sources-tpYR0f1x.mjs}

@@ -1,4 +1,4 @@
-import { br as errMsg, pr as compositionSourceKey } from "./dist-Bz4_y8Xy.mjs";
+import { Sr as errMsg, hr as compositionSourceKey } from "./dist-m5JkT8UN.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/constants-Bc6trhoW.mjs

@@ -0,0 +1,20 @@
+import { Ir as buildSecretRef } from "./dist-m5JkT8UN.mjs";
+/** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
+var MESH_CA_KEY_REF = buildSecretRef({
+	owner: "system",
+	scope: { kind: "global" },
+	fieldPath: "meshCaKey"
+});
+/** `system-settings` key holding the public CA certificate PEM. */
+var MESH_CA_SETTINGS_KEY = "cluster.meshCa";
+/** Field inside the `cluster` section. */
+var MESH_CA_FIELD = "meshCa";
+var MESH_CA_VALIDITY_DAYS = 3650;
+var DEFAULT_HUB_TLS_TCP_PORT = 6443;
+/** Subject of the mesh root. Distinct from the HTTPS local CA. */
+var MESH_CA_COMMON_NAME = "CamStack Mesh CA";
+/** Client + server auth EKU OIDs (mutual TLS). */
+var SERVER_AUTH_OID = "1.3.6.1.5.5.7.3.1";
+var CLIENT_AUTH_OID = "1.3.6.1.5.5.7.3.2";
+//#endregion
+export { MESH_CA_KEY_REF as a, SERVER_AUTH_OID as c, MESH_CA_FIELD as i, DEFAULT_HUB_TLS_TCP_PORT as n, MESH_CA_SETTINGS_KEY as o, MESH_CA_COMMON_NAME as r, MESH_CA_VALIDITY_DAYS as s, CLIENT_AUTH_OID as t };

package/dist/constants-CwRY32Nx.js

@@ -0,0 +1,66 @@
+/** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
+var MESH_CA_KEY_REF = require("./dist-CEAyXW3Q.js").buildSecretRef({
+	owner: "system",
+	scope: { kind: "global" },
+	fieldPath: "meshCaKey"
+});
+/** `system-settings` key holding the public CA certificate PEM. */
+var MESH_CA_SETTINGS_KEY = "cluster.meshCa";
+/** Field inside the `cluster` section. */
+var MESH_CA_FIELD = "meshCa";
+var MESH_CA_VALIDITY_DAYS = 3650;
+var DEFAULT_HUB_TLS_TCP_PORT = 6443;
+/** Subject of the mesh root. Distinct from the HTTPS local CA. */
+var MESH_CA_COMMON_NAME = "CamStack Mesh CA";
+/** Client + server auth EKU OIDs (mutual TLS). */
+var SERVER_AUTH_OID = "1.3.6.1.5.5.7.3.1";
+var CLIENT_AUTH_OID = "1.3.6.1.5.5.7.3.2";
+//#endregion
+Object.defineProperty(exports, "CLIENT_AUTH_OID", {
+	enumerable: true,
+	get: function() {
+		return CLIENT_AUTH_OID;
+	}
+});
+Object.defineProperty(exports, "DEFAULT_HUB_TLS_TCP_PORT", {
+	enumerable: true,
+	get: function() {
+		return DEFAULT_HUB_TLS_TCP_PORT;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_COMMON_NAME", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_COMMON_NAME;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_FIELD", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_FIELD;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_KEY_REF", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_KEY_REF;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_SETTINGS_KEY", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_SETTINGS_KEY;
+	}
+});
+Object.defineProperty(exports, "MESH_CA_VALIDITY_DAYS", {
+	enumerable: true,
+	get: function() {
+		return MESH_CA_VALIDITY_DAYS;
+	}
+});
+Object.defineProperty(exports, "SERVER_AUTH_OID", {
+	enumerable: true,
+	get: function() {
+		return SERVER_AUTH_OID;
+	}
+});

package/dist/{device-ca-B6YJZus6.mjs → device-ca-BhdBByGD.mjs}

@@ -1,4 +1,4 @@
-import { E as DEVICE_SAN_USER_PREFIX, Pr as buildSecretRef, T as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-Bz4_y8Xy.mjs";
+import { E as DEVICE_SAN_USER_PREFIX, Ir as buildSecretRef, T as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-m5JkT8UN.mjs";
 import { a as KeyUsagesExtension, d as X509Certificate$1, f as X509CertificateGenerator, g as backdatedNotBefore, i as KeyUsageFlags, l as SubjectAlternativeNameExtension, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "./x509.es-CDvj67p1.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-WXuKc8AX.js → device-ca-DImD8IzR.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CnUtkSwN.js");
+const require_dist = require("./dist-CEAyXW3Q.js");
 const require_x509_es = require("./x509.es-r7Ht1thA.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{dist-CnUtkSwN.js → dist-CEAyXW3Q.js}

@@ -9769,6 +9769,7 @@ function scopesAllowAddon(scopes, addonId, access) {
 	return scopes.some((s) => s.type === "addon" && s.target === addonId && s.access.includes(access));
 }
 zod.z.enum(["new-session", "step-up"]);
+zod.z.enum(["en", "it"]);
 /** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
 var AppLoginPathSchema = zod.z.discriminatedUnion("kind", [zod.z.object({ kind: zod.z.literal("native") }), zod.z.object({
 	kind: zod.z.literal("browser"),
@@ -54193,7 +54194,9 @@ var SsoBridgeClaimsSchema = zod.z.object({
 		codeChallenge: zod.z.string(),
 		state: zod.z.string(),
 		purpose: zod.z.enum(["new-session", "step-up"]),
-		redirect: zod.z.string()
+		redirect: zod.z.string(),
+		/** The page language the app asked for (D858); the confirm page speaks it. */
+		lang: zod.z.enum(["en", "it"]).optional()
 	}).optional()
 });
 var ssoBridgeCapability = {
@@ -68642,6 +68645,27 @@ var switchCapability = {
 		}
 	}] }
 };
+/** C0 controls, DEL and the C1 range: none of them belongs in a name. */
+function hasControlCharacter(value) {
+	for (const char of value) {
+		const code = char.codePointAt(0) ?? 0;
+		if (code <= 31 || code >= 127 && code <= 159) return true;
+	}
+	return false;
+}
+/** A name an operator may save: trimmed, 1-48 characters, no control characters. */
+var ServerNameSchema = zod.z.string().transform((value) => value.trim()).pipe(zod.z.string().min(1, "The server name cannot be empty").max(48, `The server name is at most 48 characters`).refine((value) => !hasControlCharacter(value), { message: "The server name cannot contain control characters" }));
+/** What every reader gets: the name to show, and whether the hub chose it itself. */
+var ServerNameInfoSchema = zod.z.object({
+	name: zod.z.string(),
+	/** `true` when nobody named the hub: `name` is the machine hostname. */
+	isDefault: zod.z.boolean()
+});
+/** The hostname without its domain (`nas.lan.example` becomes `nas`). */
+function shortHostname(hostname) {
+	const first = hostname.trim().split(".")[0] ?? "";
+	return first.length > 0 ? first : "hub";
+}
 /**
 * system — system-scoped singleton capability exposing hub-level
 * health, feature flags, network interface enumeration, and the
@@ -68671,6 +68695,12 @@ var FeatureManifestSchema = zod.z.object({
 	backup: zod.z.boolean(),
 	repl: zod.z.boolean()
 });
+/**
+* `system.info`: the feature flags plus the hub's human name (D861). The name is
+* `{ name, isDefault }` — `isDefault: true` means nobody named the hub and `name`
+* is the machine hostname.
+*/
+var SystemInfoSchema = FeatureManifestSchema.extend({ serverName: ServerNameInfoSchema });
 var HealthStatusSchema = zod.z.object({
 	status: zod.z.literal("ok"),
 	uptime: zod.z.number()
@@ -69157,7 +69187,7 @@ var systemCapability = {
 	scope: "system",
 	mode: "singleton",
 	methods: {
-		info: method(zod.z.void(), FeatureManifestSchema),
+		info: method(zod.z.void(), SystemInfoSchema),
 		health: method(zod.z.void(), HealthStatusSchema),
 		featureFlags: method(zod.z.void(), FeatureManifestSchema),
 		networkAddresses: method(zod.z.void(), zod.z.array(NetworkAddressSchema).readonly()),
@@ -85937,6 +85967,12 @@ Object.defineProperty(exports, "ScopedTokenSchema", {
 		return ScopedTokenSchema;
 	}
 });
+Object.defineProperty(exports, "ServerNameSchema", {
+	enumerable: true,
+	get: function() {
+		return ServerNameSchema;
+	}
+});
 Object.defineProperty(exports, "SsoBridgeClaimsSchema", {
 	enumerable: true,
 	get: function() {
@@ -86573,12 +86609,6 @@ Object.defineProperty(exports, "looseSchema", {
 		return looseSchema;
 	}
 });
-Object.defineProperty(exports, "makeSecretMarker", {
-	enumerable: true,
-	get: function() {
-		return makeSecretMarker;
-	}
-});
 Object.defineProperty(exports, "mayReadLocation", {
 	enumerable: true,
 	get: function() {
@@ -86819,16 +86849,16 @@ Object.defineProperty(exports, "secretTreeFromPaths", {
 		return secretTreeFromPaths;
 	}
 });
-Object.defineProperty(exports, "secretTreeFromSchema", {
+Object.defineProperty(exports, "settingsStoreCapability", {
 	enumerable: true,
 	get: function() {
-		return secretTreeFromSchema;
+		return settingsStoreCapability;
 	}
 });
-Object.defineProperty(exports, "settingsStoreCapability", {
+Object.defineProperty(exports, "shortHostname", {
 	enumerable: true,
 	get: function() {
-		return settingsStoreCapability;
+		return shortHostname;
 	}
 });
 Object.defineProperty(exports, "siteZoneKey", {

package/dist/{dist-Bz4_y8Xy.mjs → dist-m5JkT8UN.mjs}

@@ -9769,6 +9769,7 @@ function scopesAllowAddon(scopes, addonId, access) {
 	return scopes.some((s) => s.type === "addon" && s.target === addonId && s.access.includes(access));
 }
 z.enum(["new-session", "step-up"]);
+z.enum(["en", "it"]);
 /** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
 var AppLoginPathSchema = z.discriminatedUnion("kind", [z.object({ kind: z.literal("native") }), z.object({
 	kind: z.literal("browser"),
@@ -54193,7 +54194,9 @@ var SsoBridgeClaimsSchema = z.object({
 		codeChallenge: z.string(),
 		state: z.string(),
 		purpose: z.enum(["new-session", "step-up"]),
-		redirect: z.string()
+		redirect: z.string(),
+		/** The page language the app asked for (D858); the confirm page speaks it. */
+		lang: z.enum(["en", "it"]).optional()
 	}).optional()
 });
 var ssoBridgeCapability = {
@@ -68642,6 +68645,27 @@ var switchCapability = {
 		}
 	}] }
 };
+/** C0 controls, DEL and the C1 range: none of them belongs in a name. */
+function hasControlCharacter(value) {
+	for (const char of value) {
+		const code = char.codePointAt(0) ?? 0;
+		if (code <= 31 || code >= 127 && code <= 159) return true;
+	}
+	return false;
+}
+/** A name an operator may save: trimmed, 1-48 characters, no control characters. */
+var ServerNameSchema = z.string().transform((value) => value.trim()).pipe(z.string().min(1, "The server name cannot be empty").max(48, `The server name is at most 48 characters`).refine((value) => !hasControlCharacter(value), { message: "The server name cannot contain control characters" }));
+/** What every reader gets: the name to show, and whether the hub chose it itself. */
+var ServerNameInfoSchema = z.object({
+	name: z.string(),
+	/** `true` when nobody named the hub: `name` is the machine hostname. */
+	isDefault: z.boolean()
+});
+/** The hostname without its domain (`nas.lan.example` becomes `nas`). */
+function shortHostname(hostname) {
+	const first = hostname.trim().split(".")[0] ?? "";
+	return first.length > 0 ? first : "hub";
+}
 /**
 * system — system-scoped singleton capability exposing hub-level
 * health, feature flags, network interface enumeration, and the
@@ -68671,6 +68695,12 @@ var FeatureManifestSchema = z.object({
 	backup: z.boolean(),
 	repl: z.boolean()
 });
+/**
+* `system.info`: the feature flags plus the hub's human name (D861). The name is
+* `{ name, isDefault }` — `isDefault: true` means nobody named the hub and `name`
+* is the machine hostname.
+*/
+var SystemInfoSchema = FeatureManifestSchema.extend({ serverName: ServerNameInfoSchema });
 var HealthStatusSchema = z.object({
 	status: z.literal("ok"),
 	uptime: z.number()
@@ -69157,7 +69187,7 @@ var systemCapability = {
 	scope: "system",
 	mode: "singleton",
 	methods: {
-		info: method(z.void(), FeatureManifestSchema),
+		info: method(z.void(), SystemInfoSchema),
 		health: method(z.void(), HealthStatusSchema),
 		featureFlags: method(z.void(), FeatureManifestSchema),
 		networkAddresses: method(z.void(), z.array(NetworkAddressSchema).readonly()),
@@ -85583,4 +85613,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { addonSettingsCapability as $, validateComposition as $n, normalizeSecretOwner as $r, isObjectInput as $t, FieldClaimModeSchema as A, resolveAppConnections as An, WELL_KNOWN_TAB_MAP as Ar, deviceCredentialsCapability as At, NetworkTunnelStartedDataSchema as B, scopesAllowDeviceCap as Bn, emitDownForOwnedCaps as Br, expandContainer as Bt, DEVICE_ENROLLMENT_TTL_MS as C, pickAppLinkHub as Cn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Cr, dataStoreProviderCapability as Ct, DeclaredDevices as D, ptzAutotrackCapability as Dn, ReadinessRegistry as Dr, defineExtensionSlotProvider as Dt, DEVICE_SAN_USER_PREFIX as E, procedureAuthKey as En, RUNTIME_DEFAULTS as Er, decodeVectorBase64 as Et, LOG_LEVEL_RANK as F, resolveLocationMode as Fn, collectSecretConfigKeys as Fr, enumerateInferenceDevices as Ft, ScopedTokenSchema as G, storageCapability as Gn, isDeviceConfigCap as Gr, formatDeviceRevoker as Gt, RecordingStatusSchema as H, settingsStoreCapability as Hn, expandCapMethods as Hr, extractNestedAddonId as Ht, LegacyStorageLocationDefaultSchema as I, resolveMethodAuth as In, collectZodSecretPaths as Ir, enumerateItemArrayFields as It, StorageLocationModeSchema as J, storageProviderCapability as Jn, isSecretClear as Jr, isAppLinkBase as Jt, SsoBridgeClaimsSchema as K, storageMigrationCapability as Kn, isEvent as Kr, formatMinutes as Kt, METHOD_ACCESS_MAP as L, resolveNotificationTapAddress as Ln, createEvent as Lr, enumerateSchemaFields as Lt, HUB_MDNS_SERVICE_TYPE as M, resolveCoreBlockEntry as Mn, asNumber as Mr, deviceManagerCapability as Mt, HUB_MDNS_TXT_KEYS as N, resolveCoreBlockFiles as Nn, asString$1 as Nr, deviceStateCapability as Nt, DeviceStatusSchema as O, reducePoints as On, ReadinessTimeoutError as Or, deriveBatteryPresence as Ot, KEYCHAIN_RESET_TRIGGER_ACTOR as P, resolveHubAddressRoles as Pn, buildSecretRef as Pr, deviceStatusCapability as Pt, addonPagesCapability as Q, userManagementCapability as Qn, nodePin as Qr, isLocationEnabled as Qt, MINUTES_PER_DAY as R, runtimeStatePolicyFor as Rn, customAction as Rr, evaluateCompositionField as Rt, DERIVED_CAMERA_SILENCED_CAP_NAMES as S, parseStreamParamsFormPatch as Sn, DATAPLANE_SECRET_HEADER as Sr, createDeviceExtensionProvider as St, DEVICE_SAN_CREDENTIAL_PREFIX as T, platformProbeCapability as Tn, REDACTED_SECRET as Tr, declarationOwnerNodeId as Tt, STORAGE_ACCESS_FALLBACK as U, siteZoneKey as Un, formatSecretScope as Ur, filesystemBrowseCapability as Ut, RECORDING_SOURCE_CAMSTACK_ADDON as V, scoreRuntimes as Vn, emitReadiness as Vr, expressionContainsBuiltinCall as Vt, STREAM_PROFILE_META as W, snapshotCapability as Wn, hydrateSchema as Wr, foldSnapshotByFunction as Wt, StorageMigrationJobSchema as X, streamQualityLabel as Xn, isSecretMarkerLike as Xr, isCollectionArrayMethod as Xt, StorageLocationTypeSchema as Y, streamCatalogCapability as Yn, isSecretMarker as Yr, isArrayOutputSchema as Yt, UserRecordSchema as Z, supportedRuntimes as Zn, makeSecretMarker as Zr, isDefaultAppConnectionEndpoint as Zt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as _, motionCapability as _n, DeviceFeature as _r, coreBlockAddonId as _t, ApiKeyRecordSchema as a, resolveSecretMarkers as ai, legacyModeOf as an, COMPOSER_ADDON_ID as ar, batteryCapability as at, DATA_STORE_DATABASES as b, objectInputDeclaresAddonId as bn, errMsg as br, coreBlockSourceKind as bt, CAMERA_SWITCH_ORDER as c, secretTreeFromSchema as ci, locationIconKey as cn, composedDeviceRef as cr, buildDeviceSignatureMessage as ct, COMPOSED_ITEM_FIXED_FIELDS as d, toSecretFieldView as di, looseSchema as dn, compositionItemFieldPath as dr, cameraGridLayoutCapability as dt, parseJsonObject as ei, isVoidInput as en, validateCustomAddress as er, addonWidgetsCapability as et, COMPOSER_RUNNER_ID as f, transformSecretWrite as fi, mayReadLocation as fn, compositionSliceKey as fr, canonicalIconKey as ft, CoreBlockSchema as g, modeMayWrite as gn, toExpressionValue as gr, compositionSourceRefs as gt, CalendarPreferencesSchema as h, metricsProviderCapability as hn, disarmRoseMemory as hr, compositionFieldKey as ht, AlertSchema as i, resolveCapMount as ii, legacyAutoLinkIds as in, withLocationMode as ir, bareAddonId as it, FieldClaimSchema as j, resolveBucketMs as jn, asJsonObject as jr, deviceExtensionCapability as jt, FIRST_LEVEL_MACRO_CLASSES as k, replacedFieldKeys as kn, SECRET_CLEAR as kr, describeComposableCaps as kt, CAMSTACK_APP_LINK_ORIGIN as l, sleep as li, logDestinationCapability as ln, composedDeviceStableId as lr, buildStreamParamsConfigSchema as lt, CORE_BLOCK_ADDON_PREFIX as m, memoizePinnedFfmpeg as mn, createStatefulExpressionMemory as mr, composerCapability as mt, AGENT_MDNS_TXT_KEYS as n, parseSecretRef as ni, keychainAdminCapability as nn, vectorIndexDimConflictError as nr, authProviderCapability as nt, BaseDevice as o, scopeKey as oi, lifecycleJobSchema as on, buildFfmpegArgs as or, buildCapabilityLookup as ot, CORE_BLOCKS_ADDON_ID as p, EventCategory as pi, mayWriteToLocation as pn, compositionSourceKey as pr, checkRoleAddress as pt, StorageCleanupJobSchema as q, storageOccupancyCapability as qn, isKeychainStoredField as qr, gbToBytes as qt, ALL_CAPABILITY_DEFINITIONS as r, readinessKey as ri, keychainCapability as rn, vectorStoreCapability as rr, backupCapability as rt, BatteryStatusSchema as s, secretTreeFromPaths as si, localNetworkCapability as sn, cloneStatefulExpressionMemory as sr, buildDeviceEnrollmentLink as st, AGENT_MDNS_SERVICE_TYPE as t, parseJsonUnknown as ti, kebabToCamel as tn, vectorDimFromBase64 as tr, alertsCapability as tt, CAP_NAMES_WITH_STATUS as u, toNodeId as ui, logLevelAtMost as un, compositionFeatureEnabled as ur, calendarsCapability as ut, DATABASE_SNAPSHOT_SUFFIX as v, normalizeCoreBlockWrite as vn, DeviceRole as vr, coreBlockComposition as vt, DEVICE_NONCE_TTL_MS as w, planComposition as wn, DEVICE_STATUS_METHOD as wr, databaseSnapshotCapability as wt, DAY_NAMES as x, objectInputDeclaresRequiredDeviceId as xn, BaseAddon as xr, coreBlocksCapability as xt, DATABASE_SNAPSHOT_TIMEOUT_MS as y, normalizeUnit as yn, DeviceType as yr, coreBlockIdFromAddonId as yt, MOTION_CLOSE_AFTER_MS as z, scopesAllowAddon as zn, defineCustomActions as zr, evictionPolicyOfLocation as zt };
+export { addonPagesCapability as $, supportedRuntimes as $n, nodePin as $r, isLocationEnabled as $t, FieldClaimModeSchema as A, replacedFieldKeys as An, ReadinessTimeoutError as Ar, describeComposableCaps as At, NetworkTunnelStartedDataSchema as B, scopesAllowAddon as Bn, customAction as Br, evictionPolicyOfLocation as Bt, DEVICE_ENROLLMENT_TTL_MS as C, parseStreamParamsFormPatch as Cn, BaseAddon as Cr, createDeviceExtensionProvider as Ct, DeclaredDevices as D, procedureAuthKey as Dn, REDACTED_SECRET as Dr, decodeVectorBase64 as Dt, DEVICE_SAN_USER_PREFIX as E, platformProbeCapability as En, DEVICE_STATUS_METHOD as Er, declarationOwnerNodeId as Et, LOG_LEVEL_RANK as F, resolveHubAddressRoles as Fn, asString$1 as Fr, deviceStatusCapability as Ft, ScopedTokenSchema as G, siteZoneKey as Gn, formatSecretScope as Gr, foldSnapshotByFunction as Gt, RecordingStatusSchema as H, scoreRuntimes as Hn, emitDownForOwnedCaps as Hr, expressionContainsBuiltinCall as Ht, LegacyStorageLocationDefaultSchema as I, resolveLocationMode as In, buildSecretRef as Ir, enumerateInferenceDevices as It, StorageCleanupJobSchema as J, storageMigrationCapability as Jn, isEvent as Jr, gbToBytes as Jt, ServerNameSchema as K, snapshotCapability as Kn, hydrateSchema as Kr, formatDeviceRevoker as Kt, METHOD_ACCESS_MAP as L, resolveMethodAuth as Ln, collectSecretConfigKeys as Lr, enumerateItemArrayFields as Lt, HUB_MDNS_SERVICE_TYPE as M, resolveBucketMs as Mn, WELL_KNOWN_TAB_MAP as Mr, deviceExtensionCapability as Mt, HUB_MDNS_TXT_KEYS as N, resolveCoreBlockEntry as Nn, asJsonObject as Nr, deviceManagerCapability as Nt, DeviceStatusSchema as O, ptzAutotrackCapability as On, RUNTIME_DEFAULTS as Or, defineExtensionSlotProvider as Ot, KEYCHAIN_RESET_TRIGGER_ACTOR as P, resolveCoreBlockFiles as Pn, asNumber as Pr, deviceStateCapability as Pt, UserRecordSchema as Q, streamQualityLabel as Qn, isSecretMarkerLike as Qr, isDefaultAppConnectionEndpoint as Qt, MINUTES_PER_DAY as R, resolveNotificationTapAddress as Rn, collectZodSecretPaths as Rr, enumerateSchemaFields as Rt, DERIVED_CAMERA_SILENCED_CAP_NAMES as S, objectInputDeclaresRequiredDeviceId as Sn, errMsg as Sr, coreBlocksCapability as St, DEVICE_SAN_CREDENTIAL_PREFIX as T, planComposition as Tn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Tr, databaseSnapshotCapability as Tt, STORAGE_ACCESS_FALLBACK as U, settingsStoreCapability as Un, emitReadiness as Ur, extractNestedAddonId as Ut, RECORDING_SOURCE_CAMSTACK_ADDON as V, scopesAllowDeviceCap as Vn, defineCustomActions as Vr, expandContainer as Vt, STREAM_PROFILE_META as W, shortHostname as Wn, expandCapMethods as Wr, filesystemBrowseCapability as Wt, StorageLocationTypeSchema as X, storageProviderCapability as Xn, isSecretClear as Xr, isArrayOutputSchema as Xt, StorageLocationModeSchema as Y, storageOccupancyCapability as Yn, isKeychainStoredField as Yr, isAppLinkBase as Yt, StorageMigrationJobSchema as Z, streamCatalogCapability as Zn, isSecretMarker as Zr, isCollectionArrayMethod as Zt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as _, modeMayWrite as _n, disarmRoseMemory as _r, compositionSourceRefs as _t, ApiKeyRecordSchema as a, resolveCapMount as ai, legacyAutoLinkIds as an, vectorStoreCapability as ar, bareAddonId as at, DATA_STORE_DATABASES as b, normalizeUnit as bn, DeviceRole as br, coreBlockIdFromAddonId as bt, CAMERA_SWITCH_ORDER as c, secretTreeFromPaths as ci, localNetworkCapability as cn, buildFfmpegArgs as cr, buildDeviceEnrollmentLink as ct, COMPOSED_ITEM_FIXED_FIELDS as d, toSecretFieldView as di, logLevelAtMost as dn, composedDeviceStableId as dr, calendarsCapability as dt, normalizeSecretOwner as ei, isObjectInput as en, userManagementCapability as er, addonSettingsCapability as et, COMPOSER_RUNNER_ID as f, transformSecretWrite as fi, looseSchema as fn, compositionFeatureEnabled as fr, cameraGridLayoutCapability as ft, CoreBlockSchema as g, metricsProviderCapability as gn, createStatefulExpressionMemory as gr, compositionFieldKey as gt, CalendarPreferencesSchema as h, memoizePinnedFfmpeg as hn, compositionSourceKey as hr, composerCapability as ht, AlertSchema as i, readinessKey as ii, keychainCapability as in, vectorIndexDimConflictError as ir, backupCapability as it, FieldClaimSchema as j, resolveAppConnections as jn, SECRET_CLEAR as jr, deviceCredentialsCapability as jt, FIRST_LEVEL_MACRO_CLASSES as k, reducePoints as kn, ReadinessRegistry as kr, deriveBatteryPresence as kt, CAMSTACK_APP_LINK_ORIGIN as l, sleep as li, locationIconKey as ln, cloneStatefulExpressionMemory as lr, buildDeviceSignatureMessage as lt, CORE_BLOCK_ADDON_PREFIX as m, mayWriteToLocation as mn, compositionSliceKey as mr, checkRoleAddress as mt, AGENT_MDNS_TXT_KEYS as n, parseJsonUnknown as ni, kebabToCamel as nn, validateCustomAddress as nr, alertsCapability as nt, BaseDevice as o, resolveSecretMarkers as oi, legacyModeOf as on, withLocationMode as or, batteryCapability as ot, CORE_BLOCKS_ADDON_ID as p, EventCategory as pi, mayReadLocation as pn, compositionItemFieldPath as pr, canonicalIconKey as pt, SsoBridgeClaimsSchema as q, storageCapability as qn, isDeviceConfigCap as qr, formatMinutes as qt, ALL_CAPABILITY_DEFINITIONS as r, parseSecretRef as ri, keychainAdminCapability as rn, vectorDimFromBase64 as rr, authProviderCapability as rt, BatteryStatusSchema as s, scopeKey as si, lifecycleJobSchema as sn, COMPOSER_ADDON_ID as sr, buildCapabilityLookup as st, AGENT_MDNS_SERVICE_TYPE as t, parseJsonObject as ti, isVoidInput as tn, validateComposition as tr, addonWidgetsCapability as tt, CAP_NAMES_WITH_STATUS as u, toNodeId as ui, logDestinationCapability as un, composedDeviceRef as ur, buildStreamParamsConfigSchema as ut, DATABASE_SNAPSHOT_SUFFIX as v, motionCapability as vn, toExpressionValue as vr, coreBlockAddonId as vt, DEVICE_NONCE_TTL_MS as w, pickAppLinkHub as wn, DATAPLANE_SECRET_HEADER as wr, dataStoreProviderCapability as wt, DAY_NAMES as x, objectInputDeclaresAddonId as xn, DeviceType as xr, coreBlockSourceKind as xt, DATABASE_SNAPSHOT_TIMEOUT_MS as y, normalizeCoreBlockWrite as yn, DeviceFeature as yr, coreBlockComposition as yt, MOTION_CLOSE_AFTER_MS as z, runtimeStatePolicyFor as zn, createEvent as zr, evaluateCompositionField as zt };

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-D3gwRj1B.js");
+const require_wal_maintenance = require("./wal-maintenance-Ch79gy9S.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as callControl, E as controlTargetOf, T as callVector, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, c as SqliteSettingsBackend, h as serializeError, o as createVectorIndex, s as vectorProviderOf, w as callData, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-DLrbapzi.mjs";
+import { C as callControl, E as controlTargetOf, T as callVector, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, c as SqliteSettingsBackend, h as serializeError, o as createVectorIndex, s as vectorProviderOf, w as callData, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-DvnVO5IK.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{hub-mdns-ciao-DJRwtlA8.mjs → hub-mdns-ciao-DMlQTdPU.mjs}

@@ -1,5 +1,5 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { D as reasonRequiresNewCa, E as evaluateExistingCert, _ as generateCa, b as collectCertIdentity, v as issueLeaf, y as loadCa } from "./agent-https-B8lKYVtU.mjs";
+import { D as reasonRequiresNewCa, E as evaluateExistingCert, _ as generateCa, b as collectCertIdentity, v as issueLeaf, y as loadCa } from "./agent-https-BPfHrI4c.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/index.d.ts

@@ -14,6 +14,8 @@ export type { TokenExpiryResult } from "./auth/token-expiry.js";
 export { parseTokenExpiry } from "./auth/token-expiry.js";
 export type { CreateLoginSessionInput, LoginSessionCheck, LoginSessionMethod, LoginSessionRecord, LoginSessionRefresh, LoginSessionRevocation, LoginSessionSummary } from "./auth/login-session-manager.js";
 export { LoginSessionManager, REFRESH_TOKEN_PREFIX } from "./auth/login-session-manager.js";
+export { onSessionsRevoked } from "./auth/session-revocation-bus.js";
+export type { SessionsRevokedEvent, SessionsRevokedListener } from "./auth/session-revocation-bus.js";
 export type { AdminTokenRecord } from "./auth/admin-token-manager.js";
 export { ADMIN_TOKEN_MAX_LIFETIME_MS, ADMIN_TOKEN_PREFIX, AdminTokenManager } from "./auth/admin-token-manager.js";
 export { DeviceCaStore } from "./auth/device-ca-store.js";