@camstack/system 1.2.436 → 1.2.438

package/dist/{dist-DVe0Nsp8.js → dist-GgG-7amw.js}

@@ -718,7 +718,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-DAX0-2v9.mjs
+//#region ../types/dist/sleep-DRqxtc0C.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -4421,6 +4421,35 @@ function collectZodSecretPaths(schema, prefix = "") {
 	return [...new Set(paths)];
 }
 /**
+* A user-facing error with a STABLE code (D863).
+*
+* `message` is always the English text, so every consumer that knows nothing
+* of codes (old clients, logs, the mesh) behaves exactly as before. The hub's
+* tRPC error formatter reads `code` + `params` and, when the request language
+* has a text for `server:<code>`, replaces the response `message`; the code
+* stays in the payload (`data.i18n`).
+*/
+/** Dotted lower-case code, e.g. `auth.invalid-credentials`. It is the key in the `server` catalog. */
+var ErrorCodeSchema = zod.z.string().regex(/^[a-z][a-z0-9-]*(\.[a-z0-9-]+)+$/);
+zod.z.object({
+	code: ErrorCodeSchema,
+	params: zod.z.record(zod.z.string(), zod.z.union([zod.z.string(), zod.z.number()])).optional()
+});
+var CamstackError = class extends Error {
+	i18nCode;
+	i18nParams;
+	constructor(code, params, englishMessage) {
+		super(englishMessage);
+		this.name = "CamstackError";
+		this.i18nCode = code;
+		this.i18nParams = params;
+	}
+};
+/** `throw userError('device.not-found', { id }, 'Device 12 not found')` */
+function userError(code, params, englishFallback) {
+	return new CamstackError(code, params, englishFallback);
+}
+/**
 * Type-safe JSON parsing helpers.
 *
 * `JSON.parse` is typed as `any` in lib.es5.d.ts, which triggers
@@ -4486,7 +4515,7 @@ function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
 }
 //#endregion
-//#region ../types/dist/err-msg-DX6i_MY4.mjs
+//#region ../types/dist/err-msg-DLerKiVO.mjs
 var DeviceType = /* @__PURE__ */ function(DeviceType) {
 	DeviceType["Camera"] = "camera";
 	DeviceType["Hub"] = "hub";
@@ -4736,6 +4765,22 @@ var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
 	DeviceRole["Nightvision"] = "nightvision";
 	DeviceRole["PrivacyMask"] = "privacy-mask";
 	DeviceRole["Doorbell"] = "doorbell";
+	/** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
+	DeviceRole["CoverBlind"] = "cover-blind";
+	/** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
+	DeviceRole["CoverShutter"] = "cover-shutter";
+	/** Exterior awning. HA `device_class: awning`. */
+	DeviceRole["CoverAwning"] = "cover-awning";
+	/** Curtain / drape. HA `device_class: curtain`. */
+	DeviceRole["CoverCurtain"] = "cover-curtain";
+	/** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
+	DeviceRole["CoverGarage"] = "cover-garage";
+	/** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
+	DeviceRole["CoverGate"] = "cover-gate";
+	/** Door. HA `device_class: door`. A security actuator: exports gate it. */
+	DeviceRole["CoverDoor"] = "cover-door";
+	/** Window. HA `device_class: window`. */
+	DeviceRole["CoverWindow"] = "cover-window";
 	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
 	*  real Switch device for UI rendering / export adapters. */
 	DeviceRole["BinaryHelper"] = "binary-helper";
@@ -4816,7 +4861,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-C-WpVYTX.mjs
+//#region ../types/dist/composition-EQ9Ok0Ee.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -9769,6 +9814,8 @@ function scopesAllowAddon(scopes, addonId, access) {
 	return scopes.some((s) => s.type === "addon" && s.target === addonId && s.access.includes(access));
 }
 zod.z.enum(["new-session", "step-up"]);
+/** The languages the hub's app landing pages are written in (D858). */
+var AppPageLangSchema = zod.z.enum(["en", "it"]);
 /** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
 var AppLoginPathSchema = zod.z.discriminatedUnion("kind", [zod.z.object({ kind: zod.z.literal("native") }), zod.z.object({
 	kind: zod.z.literal("browser"),
@@ -10371,7 +10418,9 @@ var ConfigTabDeclarationSchema = zod.z.object({
 var ConfigSectionWithValuesSchema = zod.z.object({
 	id: zod.z.string(),
 	title: zod.z.string(),
+	titleKey: zod.z.string().optional(),
 	description: zod.z.string().optional(),
+	descriptionKey: zod.z.string().optional(),
 	style: zod.z.enum(["card", "accordion"]).optional(),
 	defaultCollapsed: zod.z.boolean().optional(),
 	columns: zod.z.union([
@@ -16215,6 +16264,16 @@ var keychainCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Delete every value scoped `device/<deviceId>`, whatever its owner (D864).
+		* Reserved to `device-manager`, on the device-removed path: a driver's
+		* device-scoped secret is not anybody's once the device is gone. Answers the
+		* refs removed (never values).
+		*/
+		deleteDeviceScope: method(zod.z.object({ deviceId: zod.z.number().int() }), zod.z.object({ refs: zod.z.array(zod.z.string()).readonly() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** The caller's own refs, metadata only. */
 		listMeta: method(zod.z.object({}), zod.z.array(KeychainSecretMetaSchema).readonly(), { auth: "admin" }),
 		/** Whether values can be served — the save path refuses a write while locked. */
@@ -38219,6 +38278,42 @@ var DeviceRegisterPayloadSchema = zod.z.object({
 	*  omits it and the keyword backstop applies. */
 	secretConfigPaths: zod.z.array(zod.z.string()).optional()
 });
+/** One deleted device, kept by device-manager so an addon that missed the
+*  deletion can still learn of it (D865). Written by the delete path ONLY. */
+var DeviceTombstoneSchema = zod.z.object({
+	deviceId: zod.z.number().int().positive(),
+	/** Epoch ms the device was deleted. */
+	deletedAt: zod.z.number(),
+	/** The addon that owned the device when it was deleted. */
+	providerAddonId: zod.z.string()
+});
+/** How long a tombstone stays readable. Past it, a device that was deleted
+*  and never cleaned is only reachable by the admin "clean data of deleted
+*  devices" action. */
+var DEVICE_TOMBSTONE_RETENTION_MS = 2160 * 60 * 60 * 1e3;
+/** Data held for one device that device-manager no longer knows. */
+var OrphanDeviceDataSchema = zod.z.object({
+	deviceId: zod.z.number().int().positive(),
+	/** Rows/files per store (`<addonId>:<store>`). */
+	stores: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative())
+});
+var CleanupDeletedDevicesResultSchema = zod.z.object({
+	/**
+	* `skipped` — the absence check could not be trusted (a device-list read
+	* failed or the two reads disagreed); nothing was listed or deleted.
+	* `dry-run` — `devices` is what a confirmed run would delete.
+	* `cleaned` — `devices` is what was deleted.
+	*/
+	status: zod.z.enum([
+		"skipped",
+		"dry-run",
+		"cleaned"
+	]),
+	reason: zod.z.string().nullable(),
+	devices: zod.z.array(OrphanDeviceDataSchema),
+	/** Implementers that could not be asked (their stores are not in `devices`). */
+	unreachable: zod.z.array(zod.z.string())
+});
 var DeviceRemovePayloadSchema = zod.z.object({ deviceId: zod.z.number() });
 var DevicePersistConfigPayloadSchema = zod.z.object({
 	deviceId: zod.z.number(),
@@ -38815,6 +38910,27 @@ var deviceManagerCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* The tombstones of devices deleted at or after `sinceMs` (D865). The
+		* reconcile feed of every `device-removal-hook` implementer: an addon that
+		* was down when a device was deleted asks here at start and periodically.
+		* A tombstone exists only for a DELETE — never for a device that is merely
+		* unregistered, offline or whose provider is restarting. Tombstones older
+		* than `DEVICE_TOMBSTONE_RETENTION_MS` are gone.
+		*/
+		listDeletedSince: method(zod.z.object({ sinceMs: zod.z.number() }), zod.z.array(DeviceTombstoneSchema).readonly(), { auth: "admin" }),
+		/**
+		* Admin-triggered clean-up of data that belongs to devices deleted BEFORE
+		* tombstones existed (D865). Asks every `device-removal-hook` implementer
+		* which device ids it holds data for, keeps those absent from the device
+		* list — confirmed by TWO reads of the list, skipped if either fails — and
+		* with `confirm: false` only reports the counts per store. `confirm: true`
+		* deletes. Never runs on its own.
+		*/
+		cleanupDeletedDevicesData: method(zod.z.object({ confirm: zod.z.boolean() }), CleanupDeletedDevicesResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Cascade-delete every top-level device whose `integrationId` matches.
 		*  Children cascade automatically via the per-parent remove path.
 		*  Idempotent: a device whose `integrationId` was never set never matches.
@@ -39730,6 +39846,85 @@ var embeddingEncoderCapability = {
 	}
 };
 /**
+* `device-removal-hook` — the reliable way an addon learns a device was DELETED,
+* so it can delete what it keeps for that device (D865).
+*
+* ## Why an event was not enough
+*
+* `DeviceUnregistered` is telemetry and may be dropped (D8, D11). An addon that
+* hung its per-device clean-up on it left durable garbage whenever the event was
+* lost, the addon was down, or it was restarting at that moment — footage,
+* analytics rows and settings of device 4483 outlived the device. Loss of this
+* signal corrupts durable state, so it travels by RPC with a recorded fact
+* behind it (D8: "if loss would corrupt durable state, use RPC plus a reconcile").
+*
+* ## The three pieces
+*
+* 1. device-manager records a TOMBSTONE per deleted device
+*    (`deviceManager.listDeletedSince`). The tombstone is written by the delete
+*    path only — a device that is unregistered, offline or whose provider is
+*    restarting is NOT deleted and gets none.
+* 2. After a delete, device-manager calls `onDeviceRemoved` on EVERY provider of
+*    this collection, one by one, with bounded retries, logged.
+* 3. An implementer that was down asks `deviceManager.listDeletedSince` at start
+*    (and periodically) and runs its own `onDeviceRemoved` for each tombstone it
+*    may have missed. Reconcile is driven by tombstones, never by "the device is
+*    not in the current list": a failed or partial list read must not destroy data.
+*
+* ## Contract for an implementer
+*
+* - **Idempotent.** It is called again by a retry, by a reconcile and by the
+*   admin cleanup of data that predates tombstones. A device with nothing left
+*   answers zero counts.
+* - **One key per store** in `counts`, deleted rows/files per store, so the log
+*   line and the admin dry run can say where the data was.
+* - **Training datasets are NOT device data** and are never deleted by a hook.
+* - **Per-device SETTINGS are not hooked.** Configuration lives in the standard
+*   per-device store (`ctx.settings.*DeviceStore`), which device-manager clears
+*   for every addon centrally at delete time. This hook is for device DATA
+*   that is not settings: footage, event media, analytics rows, history.
+* - A provider that cannot tell is allowed to throw; the caller retries it.
+*
+* `listDeviceData` is the read side of the admin "Clean data of deleted devices"
+* action: which device ids this addon holds data for, and how much per store. It
+* never deletes. device-manager decides which of those ids are absent from the
+* fleet, from TWO consistent reads of the device list (D49).
+*/
+/** What a hook is told about the deletion. */
+var DeviceRemovedInputSchema = zod.z.object({
+	deviceId: zod.z.number().int().positive(),
+	/** Epoch ms the device was deleted (the tombstone's `deletedAt`). */
+	deletedAt: zod.z.number(),
+	/** The addon that owned the device, as device-manager last knew it. */
+	providerAddonId: zod.z.string()
+});
+/** Rows/files/refs deleted, per store this implementer owns. */
+var DeviceRemovedResultSchema = zod.z.object({ counts: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative()) });
+/** One (store, device) pair an implementer holds data for. */
+var DeviceDataEntrySchema = zod.z.object({
+	store: zod.z.string(),
+	deviceId: zod.z.number().int().positive(),
+	/** Rows (or files) held for the device in the store. */
+	count: zod.z.number().int().nonnegative()
+});
+var deviceRemovalHookCapability = {
+	name: "device-removal-hook",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: {
+		/** Delete everything this addon keeps for the deleted device. Idempotent. */
+		onDeviceRemoved: method(DeviceRemovedInputSchema, DeviceRemovedResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Which devices this addon holds data for, per store. Reads only. */
+		listDeviceData: method(zod.z.void(), zod.z.array(DeviceDataEntrySchema).readonly(), { auth: "admin" })
+	},
+	/** In-process only — enumerated through `addons.listCapabilityProviders`. */
+	mount: { kind: "skip" }
+};
+/**
 * `failure-contribution` — the capability an addon reports its OWN losses
 * through, per camera, with the denominator attached. It stores nothing.
 *
@@ -54193,7 +54388,9 @@ var SsoBridgeClaimsSchema = zod.z.object({
 		codeChallenge: zod.z.string(),
 		state: zod.z.string(),
 		purpose: zod.z.enum(["new-session", "step-up"]),
-		redirect: zod.z.string()
+		redirect: zod.z.string(),
+		/** The page language the app asked for (D858); the confirm page speaks it. */
+		lang: zod.z.enum(["en", "it"]).optional()
 	}).optional()
 });
 var ssoBridgeCapability = {
@@ -68642,6 +68839,37 @@ var switchCapability = {
 		}
 	}] }
 };
+/** C0 controls, DEL and the C1 range: none of them belongs in a name. */
+function hasControlCharacter(value) {
+	for (const char of value) {
+		const code = char.codePointAt(0) ?? 0;
+		if (code <= 31 || code >= 127 && code <= 159) return true;
+	}
+	return false;
+}
+/** A name an operator may save: trimmed, 1-48 characters, no control characters. */
+var ServerNameSchema = zod.z.string().transform((value) => value.trim()).pipe(zod.z.string().min(1, "The server name cannot be empty").max(48, `The server name is at most 48 characters`).refine((value) => !hasControlCharacter(value), { message: "The server name cannot contain control characters" }));
+/** What every reader gets: the name to show, and whether the hub chose it itself. */
+var ServerNameInfoSchema = zod.z.object({
+	name: zod.z.string(),
+	/** `true` when nobody named the hub: `name` is the machine hostname. */
+	isDefault: zod.z.boolean()
+});
+/** What an unset name shows when the hostname says nothing about the hub. */
+var SERVER_NAME_FALLBACK = "CamStack";
+/** A container id: Docker's default hostname (12 hex chars, or the full 64). */
+var CONTAINER_ID_PATTERN = /^(?:[0-9a-f]{12}|[0-9a-f]{64})$/;
+/**
+* The hostname without its domain (`nas.lan.example` becomes `nas`). A hostname
+* that names nothing (empty, `localhost`, a container id) yields
+* {@link SERVER_NAME_FALLBACK}.
+*/
+function shortHostname(hostname) {
+	const first = hostname.trim().split(".")[0] ?? "";
+	if (first.length === 0 || first.toLowerCase() === "localhost") return SERVER_NAME_FALLBACK;
+	if (CONTAINER_ID_PATTERN.test(first)) return SERVER_NAME_FALLBACK;
+	return first;
+}
 /**
 * system — system-scoped singleton capability exposing hub-level
 * health, feature flags, network interface enumeration, and the
@@ -68671,6 +68899,12 @@ var FeatureManifestSchema = zod.z.object({
 	backup: zod.z.boolean(),
 	repl: zod.z.boolean()
 });
+/**
+* `system.info`: the feature flags plus the hub's human name (D861). The name is
+* `{ name, isDefault }` — `isDefault: true` means nobody named the hub and `name`
+* is the machine hostname.
+*/
+var SystemInfoSchema = FeatureManifestSchema.extend({ serverName: ServerNameInfoSchema });
 var HealthStatusSchema = zod.z.object({
 	status: zod.z.literal("ok"),
 	uptime: zod.z.number()
@@ -69157,7 +69391,7 @@ var systemCapability = {
 	scope: "system",
 	mode: "singleton",
 	methods: {
-		info: method(zod.z.void(), FeatureManifestSchema),
+		info: method(zod.z.void(), SystemInfoSchema),
 		health: method(zod.z.void(), HealthStatusSchema),
 		featureFlags: method(zod.z.void(), FeatureManifestSchema),
 		networkAddresses: method(zod.z.void(), zod.z.array(NetworkAddressSchema).readonly()),
@@ -74760,6 +74994,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"deviceManager.cleanupDeletedDevicesData": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.createDevice": {
 		capName: "device-manager",
 		capScope: "system",
@@ -74940,6 +75180,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.listDeletedSince": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listDeviceIdsByCaps": {
 		capName: "device-manager",
 		capScope: "system",
@@ -75348,6 +75594,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"deviceRemovalHook.listDeviceData": {
+		capName: "device-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"deviceRemovalHook.onDeviceRemoved": {
+		capName: "device-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceState.claimFields": {
 		capName: "device-state",
 		capScope: "system",
@@ -75780,6 +76038,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"keychain.deleteDeviceScope": {
+		capName: "keychain",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"keychain.getState": {
 		capName: "keychain",
 		capScope: "system",
@@ -81162,6 +81426,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	deviceManagerCapability,
 	deviceOpsCapability,
 	deviceProviderCapability,
+	deviceRemovalHookCapability,
 	deviceStateCapability,
 	deviceStatusCapability,
 	doorbellCapability,
@@ -82055,6 +82320,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceRemovalHook.onDeviceRemoved": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceState.claimFields": [{
 		name: "deviceId",
 		form: "single",
@@ -82244,6 +82514,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"keychain.deleteDeviceScope": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"lawnMowerControl.dock": [{
 		name: "deviceId",
 		form: "single",
@@ -84892,6 +85167,26 @@ new Set([
 	"audio-tools",
 	"audio-silence"
 ]);
+var CATALOG_LANGS = AppPageLangSchema.options;
+/** One catalog file: flat key to text. A file of any other shape is rejected whole. */
+var CatalogFileSchema = zod.z.record(zod.z.string().min(1), zod.z.string());
+/** Fills `{name}` placeholders; an unknown placeholder is left as written. */
+function interpolate(template, params) {
+	if (params === void 0) return template;
+	return template.replace(/\{(\w+)\}/g, (whole, name) => {
+		const value = params[name];
+		return value === void 0 ? whole : String(value);
+	});
+}
+/** Splits `"ns:key"`; `null` when the reference has no namespace. */
+function splitTranslationRef(ref) {
+	const at = ref.indexOf(":");
+	if (at <= 0 || at === ref.length - 1) return null;
+	return {
+		ns: ref.slice(0, at),
+		key: ref.slice(at + 1)
+	};
+}
 /**
 * TimelapseRule — the STANDALONE scheduled timelapse producer's rule model.
 *
@@ -85649,6 +85944,12 @@ Object.defineProperty(exports, "CAP_NAMES_WITH_STATUS", {
 		return CAP_NAMES_WITH_STATUS;
 	}
 });
+Object.defineProperty(exports, "CATALOG_LANGS", {
+	enumerable: true,
+	get: function() {
+		return CATALOG_LANGS;
+	}
+});
 Object.defineProperty(exports, "COMPOSED_ITEM_FIXED_FIELDS", {
 	enumerable: true,
 	get: function() {
@@ -85685,6 +85986,12 @@ Object.defineProperty(exports, "CalendarPreferencesSchema", {
 		return CalendarPreferencesSchema;
 	}
 });
+Object.defineProperty(exports, "CatalogFileSchema", {
+	enumerable: true,
+	get: function() {
+		return CatalogFileSchema;
+	}
+});
 Object.defineProperty(exports, "CoreBlockSchema", {
 	enumerable: true,
 	get: function() {
@@ -85769,6 +86076,12 @@ Object.defineProperty(exports, "DEVICE_STATUS_METHOD", {
 		return DEVICE_STATUS_METHOD;
 	}
 });
+Object.defineProperty(exports, "DEVICE_TOMBSTONE_RETENTION_MS", {
+	enumerable: true,
+	get: function() {
+		return DEVICE_TOMBSTONE_RETENTION_MS;
+	}
+});
 Object.defineProperty(exports, "DeclaredDevices", {
 	enumerable: true,
 	get: function() {
@@ -85937,6 +86250,12 @@ Object.defineProperty(exports, "ScopedTokenSchema", {
 		return ScopedTokenSchema;
 	}
 });
+Object.defineProperty(exports, "ServerNameSchema", {
+	enumerable: true,
+	get: function() {
+		return ServerNameSchema;
+	}
+});
 Object.defineProperty(exports, "SsoBridgeClaimsSchema", {
 	enumerable: true,
 	get: function() {
@@ -86429,6 +86748,12 @@ Object.defineProperty(exports, "hydrateSchema", {
 		return hydrateSchema;
 	}
 });
+Object.defineProperty(exports, "interpolate", {
+	enumerable: true,
+	get: function() {
+		return interpolate;
+	}
+});
 Object.defineProperty(exports, "isAppLinkBase", {
 	enumerable: true,
 	get: function() {
@@ -86819,6 +87144,12 @@ Object.defineProperty(exports, "settingsStoreCapability", {
 		return settingsStoreCapability;
 	}
 });
+Object.defineProperty(exports, "shortHostname", {
+	enumerable: true,
+	get: function() {
+		return shortHostname;
+	}
+});
 Object.defineProperty(exports, "siteZoneKey", {
 	enumerable: true,
 	get: function() {
@@ -86837,6 +87168,12 @@ Object.defineProperty(exports, "snapshotCapability", {
 		return snapshotCapability;
 	}
 });
+Object.defineProperty(exports, "splitTranslationRef", {
+	enumerable: true,
+	get: function() {
+		return splitTranslationRef;
+	}
+});
 Object.defineProperty(exports, "storageCapability", {
 	enumerable: true,
 	get: function() {
@@ -86903,6 +87240,12 @@ Object.defineProperty(exports, "transformSecretWrite", {
 		return transformSecretWrite;
 	}
 });
+Object.defineProperty(exports, "userError", {
+	enumerable: true,
+	get: function() {
+		return userError;
+	}
+});
 Object.defineProperty(exports, "userManagementCapability", {
 	enumerable: true,
 	get: function() {

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-Br60onAQ.js");
+const require_wal_maintenance = require("./wal-maintenance-mjB2i-VR.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as callControl, E as controlTargetOf, T as callVector, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, c as SqliteSettingsBackend, h as serializeError, o as createVectorIndex, s as vectorProviderOf, w as callData, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-CaDsrJM_.mjs";
+import { C as callControl, E as controlTargetOf, T as callVector, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, c as SqliteSettingsBackend, h as serializeError, o as createVectorIndex, s as vectorProviderOf, w as callData, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-Bx3lcVA7.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{hub-mdns-ciao-DJRwtlA8.mjs → hub-mdns-ciao-DMlQTdPU.mjs}

@@ -1,5 +1,5 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { D as reasonRequiresNewCa, E as evaluateExistingCert, _ as generateCa, b as collectCertIdentity, v as issueLeaf, y as loadCa } from "./agent-https-B8lKYVtU.mjs";
+import { D as reasonRequiresNewCa, E as evaluateExistingCert, _ as generateCa, b as collectCertIdentity, v as issueLeaf, y as loadCa } from "./agent-https-BPfHrI4c.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/i18n/catalog-registry.d.ts

@@ -0,0 +1,35 @@
+import { type CatalogLang, type CatalogLookup, type TranslationParams } from "@camstack/types";
+/** The core namespace: user-facing error texts and core schema labels. */
+export declare const SERVER_NAMESPACE = "server";
+/** `@camstack/addon-provider-reolink` -> `provider-reolink`; `@camstack/system` -> `system`. */
+export declare function catalogNamespaceOf(packageName: string): string;
+export type CatalogWarn = (message: string) => void;
+export declare class CatalogRegistry {
+	private readonly warn;
+	private readonly namespaces;
+	constructor(warn?: CatalogWarn);
+	/** Validates `raw` and installs it; returns false (after warning) when it is not a flat string map. */
+	set(ns: string, lang: CatalogLang, raw: unknown, origin: string): boolean;
+	/** Loads `<packageDir>/i18n/<lang>.json` for every language that has a file. */
+	loadAddonDir(ns: string, packageDir: string): void;
+	/** Drops a namespace (addon uninstalled or redeployed before a reload). */
+	clear(ns: string): void;
+	/** The text for `ns:key` in `lang`, or `undefined`. Never falls back across languages. */
+	lookup(lang: CatalogLang, ns: string, key: string): string | undefined;
+	/**
+	* `t(ns, key, params, fallbackEnglish)` - the translation in `lang`, else
+	* the English fallback (also interpolated). English is never looked up: the
+	* fallback IS the English text.
+	*/
+	t(lang: CatalogLang, ns: string, key: string, params: TranslationParams | undefined, fallbackEnglish: string): string;
+	/** A lookup bound to one language, for `localizeConfigTree`. English never substitutes. */
+	lookupFor(lang: CatalogLang): CatalogLookup;
+	/** `t` for a `"ns:key"` reference. */
+	tRef(lang: CatalogLang, ref: string, params: TranslationParams | undefined, fallbackEnglish: string): string;
+}
+/** A fresh registry holding the core `server` namespace (specs build their own). */
+export declare function createCoreCatalogRegistry(warn?: CatalogWarn): CatalogRegistry;
+/** The hub's one registry, core catalogs preloaded. */
+export declare function getCatalogRegistry(warn?: CatalogWarn): CatalogRegistry;
+/** Spec hook: forget the shared registry. */
+export declare function resetCatalogRegistryForTests(): void;

package/dist/i18n/index.d.ts

@@ -0,0 +1,2 @@
+export { catalogNamespaceOf, CatalogRegistry, createCoreCatalogRegistry, getCatalogRegistry, resetCatalogRegistryForTests, SERVER_NAMESPACE } from "./catalog-registry.js";
+export type { CatalogWarn } from "./catalog-registry.js";

package/dist/index.d.ts

@@ -14,6 +14,8 @@ export type { TokenExpiryResult } from "./auth/token-expiry.js";
 export { parseTokenExpiry } from "./auth/token-expiry.js";
 export type { CreateLoginSessionInput, LoginSessionCheck, LoginSessionMethod, LoginSessionRecord, LoginSessionRefresh, LoginSessionRevocation, LoginSessionSummary } from "./auth/login-session-manager.js";
 export { LoginSessionManager, REFRESH_TOKEN_PREFIX } from "./auth/login-session-manager.js";
+export { onSessionsRevoked } from "./auth/session-revocation-bus.js";
+export type { SessionsRevokedEvent, SessionsRevokedListener } from "./auth/session-revocation-bus.js";
 export type { AdminTokenRecord } from "./auth/admin-token-manager.js";
 export { ADMIN_TOKEN_MAX_LIFETIME_MS, ADMIN_TOKEN_PREFIX, AdminTokenManager } from "./auth/admin-token-manager.js";
 export { DeviceCaStore } from "./auth/device-ca-store.js";
@@ -143,3 +145,4 @@ export { CAP_METHOD_NOT_IMPLEMENTED } from "./kernel/moleculer/child-cap-dispatc
 export { BackupDecryptError, BackupKeyFormatError, BackupKeyMismatchError, generateBackupKeyPair, readBackupEncryptionHeader } from "./builtins/system-backup/backup-encryption.js";
 export { SystemBackupService } from "./builtins/system-backup/system-backup.service.js";
 export { BackupKeyRequiredError, prepareRestoreArchive } from "./builtins/backup-orchestrator/restore-archive.js";
+export * from "./i18n/index.js";