@camstack/system 1.2.436 → 1.2.438

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,15 +1,16 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Rr as customAction, Wr as hydrateSchema, br as errMsg, xr as BaseAddon, zr as defineCustomActions } from "../../dist-DjD2M79P.mjs";
+import { Dr as errMsg, Gr as customAction, Jn as shortHostname, Kr as defineCustomActions, Or as BaseAddon, Y as ServerNameSchema, Zr as hydrateSchema } from "../../dist-Dc8GKC5H.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { a as KeyUsagesExtension, c as Pkcs10CertificateRequestGenerator, d as X509Certificate$1, f as X509CertificateGenerator, g as backdatedNotBefore, i as KeyUsageFlags, n as BasicConstraintsExtension, o as PemConverter, p as cryptoProvider, r as ExtendedKeyUsageExtension, s as Pkcs10CertificateRequest, t as AuthorityKeyIdentifierExtension, u as SubjectKeyIdentifierExtension } from "../../x509.es-CDvj67p1.mjs";
-import { A as AgentHttpsNames, M as setProcessAgentHttpsNames, O as AGENT_HTTPS_NAMES_COLLECTION, d as isPrivateAddress, j as getProcessAgentHttpsNames, k as AGENT_HTTPS_NAMES_COLUMNS, u as isLocalOnlyHostname } from "../../agent-https-B8lKYVtU.mjs";
-import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-BFpowodq.mjs";
+import { A as AgentHttpsNames, M as setProcessAgentHttpsNames, O as AGENT_HTTPS_NAMES_COLLECTION, d as isPrivateAddress, j as getProcessAgentHttpsNames, k as AGENT_HTTPS_NAMES_COLUMNS, u as isLocalOnlyHostname } from "../../agent-https-BPfHrI4c.mjs";
+import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-DQK705Sb.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, randomInt, sign, timingSafeEqual, verify, webcrypto } from "node:crypto";
 import { BlockList, isIP } from "node:net";
 import { lstat, readdir, readlink, realpath } from "node:fs/promises";
 import { posix, win32 } from "node:path";
+import os from "node:os";
 import { fileURLToPath } from "node:url";
 import * as xi from "node:fs";
 import * as tls from "node:tls";
@@ -21356,7 +21357,7 @@ var require_kleur = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../node_modules/moleculer/src/utils.js
 var require_utils$3 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var kleur = require_kleur();
-	var os$16 = __require("os");
+	var os$17 = __require("os");
 	var path$39 = __require("path");
 	var fs$18 = __require("fs");
 	var { TimeoutError } = require_errors$2();
@@ -21455,7 +21456,7 @@ var require_utils$3 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		* @returns
 		*/
 		getNodeID() {
-			return os$16.hostname().toLowerCase() + "-" + process.pid;
+			return os$17.hostname().toLowerCase() + "-" + process.pid;
 		},
 		/**
 		* Get list of local IPs
@@ -21465,7 +21466,7 @@ var require_utils$3 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		getIpList() {
 			const list = [];
 			const ilist = [];
-			const interfaces = os$16.networkInterfaces();
+			const interfaces = os$17.networkInterfaces();
 			for (let iface in interfaces) for (let i in interfaces[iface]) {
 				const f = interfaces[iface]?.[i];
 				if (f.family === "IPv4") if (f.internal) {
@@ -23151,7 +23152,7 @@ var require_event$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 var require_datadog$2 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var BaseReporter = require_base$8();
 	var _ = require_lodash();
-	var os$15 = __require("os");
+	var os$16 = __require("os");
 	var { MoleculerError } = require_errors$2();
 	var METRIC = require_constants$6();
 	var { isFunction } = require_utils$3();
@@ -23184,7 +23185,7 @@ var require_datadog$2 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			super(opts);
 			/** @type {DatadogReporterOptions} */
 			this.opts = _.defaultsDeep(this.opts, {
-				host: os$15.hostname(),
+				host: os$16.hostname(),
 				baseUrl: BASE_URL,
 				apiVersion: "v1",
 				path: "/series",
@@ -23860,18 +23861,18 @@ var require_cpu_usage$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	*
 	* Based on: https://github.com/icebob/cpu
 	*/
-	var os$14 = __require("os");
+	var os$15 = __require("os");
 	/* istanbul ignore next */
 	module.exports = function getCpuUsage(sampleTime = 100) {
 		return new Promise((resolve, reject) => {
 			try {
-				const first = os$14.cpus().map((cpu) => cpu.times);
+				const first = os$15.cpus().map((cpu) => cpu.times);
 				setTimeout(() => {
 					try {
-						const second = os$14.cpus().map((cpu) => cpu.times);
+						const second = os$15.cpus().map((cpu) => cpu.times);
 						setTimeout(() => {
 							try {
-								const third = os$14.cpus().map((cpu) => cpu.times);
+								const third = os$15.cpus().map((cpu) => cpu.times);
 								const usages = [];
 								for (let i = 0; i < first.length; i++) {
 									const first_idle = first[i].idle;
@@ -23904,7 +23905,7 @@ var require_cpu_usage$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/moleculer/src/metrics/commons.js
 var require_commons = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var os$13 = __require("os");
+	var os$14 = __require("os");
 	var METRIC = require_constants$6();
 	var cpuUsage = require_cpu_usage$1();
 	var v8;
@@ -24083,27 +24084,27 @@ var require_commons = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			name: METRIC.OS_TYPE,
 			type: METRIC.TYPE_INFO,
 			description: "OS type"
-		}).set(os$13.type());
+		}).set(os$14.type());
 		this.register({
 			name: METRIC.OS_RELEASE,
 			type: METRIC.TYPE_INFO,
 			description: "OS release"
-		}).set(os$13.release());
+		}).set(os$14.release());
 		this.register({
 			name: METRIC.OS_HOSTNAME,
 			type: METRIC.TYPE_INFO,
 			description: "Hostname"
-		}).set(os$13.hostname());
+		}).set(os$14.hostname());
 		this.register({
 			name: METRIC.OS_ARCH,
 			type: METRIC.TYPE_INFO,
 			description: "OS architecture"
-		}).set(os$13.arch());
+		}).set(os$14.arch());
 		this.register({
 			name: METRIC.OS_PLATFORM,
 			type: METRIC.TYPE_INFO,
 			description: "OS platform"
-		}).set(os$13.platform());
+		}).set(os$14.platform());
 		const userInfo = getUserInfo();
 		this.register({
 			name: METRIC.OS_USER_UID,
@@ -24254,22 +24255,22 @@ var require_commons = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		this.set(METRIC.PROCESS_UPTIME, process.uptime());
 		this.set(METRIC.PROCESS_INTERNAL_ACTIVE_HANDLES, process.getActiveResourcesInfo().length);
-		const freeMem = os$13.freemem();
-		const totalMem = os$13.totalmem();
+		const freeMem = os$14.freemem();
+		const totalMem = os$14.totalmem();
 		const usedMem = totalMem - freeMem;
 		this.set(METRIC.OS_MEMORY_FREE, freeMem);
 		this.set(METRIC.OS_MEMORY_USED, usedMem);
 		this.set(METRIC.OS_MEMORY_TOTAL, totalMem);
-		this.set(METRIC.OS_UPTIME, os$13.uptime());
-		this.set(METRIC.OS_TYPE, os$13.type());
-		this.set(METRIC.OS_RELEASE, os$13.release());
-		this.set(METRIC.OS_HOSTNAME, os$13.hostname());
-		this.set(METRIC.OS_ARCH, os$13.arch());
-		this.set(METRIC.OS_PLATFORM, os$13.platform());
+		this.set(METRIC.OS_UPTIME, os$14.uptime());
+		this.set(METRIC.OS_TYPE, os$14.type());
+		this.set(METRIC.OS_RELEASE, os$14.release());
+		this.set(METRIC.OS_HOSTNAME, os$14.hostname());
+		this.set(METRIC.OS_ARCH, os$14.arch());
+		this.set(METRIC.OS_PLATFORM, os$14.platform());
 		const getNetworkInterfaces = () => {
 			const list = [];
 			const ilist = [];
-			const interfaces = os$13.networkInterfaces();
+			const interfaces = os$14.networkInterfaces();
 			for (let iface in interfaces) for (let i in interfaces[iface]) {
 				const f = interfaces[iface][i];
 				if (f.internal) ilist.push({
@@ -24299,7 +24300,7 @@ var require_commons = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		this.set(METRIC.OS_DATETIME_ISO, d.toISOString());
 		this.set(METRIC.OS_DATETIME_UTC, d.toUTCString());
 		this.set(METRIC.OS_DATETIME_TZ_OFFSET, d.getTimezoneOffset());
-		const load = os$13.loadavg();
+		const load = os$14.loadavg();
 		this.set(METRIC.OS_CPU_LOAD_1, load[0]);
 		this.set(METRIC.OS_CPU_LOAD_5, load[1]);
 		this.set(METRIC.OS_CPU_LOAD_15, load[2]);
@@ -24307,7 +24308,7 @@ var require_commons = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return this.broker.Promise.resolve().then(() => cpuUsage().then((res) => {
 			this.set(METRIC.OS_CPU_UTILIZATION, res.avg);
 			try {
-				const cpus = os$13.cpus();
+				const cpus = os$14.cpus();
 				this.set(METRIC.OS_CPU_TOTAL, cpus.length);
 				this.set(METRIC.OS_CPU_USER, cpus.reduce((a, b) => a + b.times.user, 0));
 				this.set(METRIC.OS_CPU_SYSTEM, cpus.reduce((a, b) => a + b.times.sys, 0));
@@ -24329,7 +24330,7 @@ var require_commons = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	*/
 	function getUserInfo() {
 		try {
-			return os$13.userInfo();
+			return os$14.userInfo();
 		} catch {
 			/* istanbul ignore next */
 			return {};
@@ -34551,7 +34552,7 @@ var require_node = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../node_modules/moleculer/src/registry/node-catalog.js
 var require_node_catalog = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var _ = require_lodash();
-	var os$12 = __require("os");
+	var os$13 = __require("os");
 	var Node = require_node();
 	var { getIpList } = require_utils$3();
 	/**
@@ -34597,7 +34598,7 @@ var require_node_catalog = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			node.local = true;
 			node.ipList = getIpList();
 			node.instanceID = this.broker.instanceID;
-			node.hostname = os$12.hostname();
+			node.hostname = os$13.hostname();
 			node.client = {
 				type: "nodejs",
 				version: this.broker.MOLECULER_VERSION,
@@ -36671,7 +36672,7 @@ var require_console$2 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 var require_datadog$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var BaseLogger = require_base$4();
 	var _ = require_lodash();
-	var os$11 = __require("os");
+	var os$12 = __require("os");
 	var { MoleculerError } = require_errors$2();
 	var util$5 = __require("util");
 	var { isObject } = require_utils$3();
@@ -36704,7 +36705,7 @@ var require_datadog$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				apiKey: process.env.DATADOG_API_KEY,
 				ddSource: "moleculer",
 				env: void 0,
-				hostname: os$11.hostname(),
+				hostname: os$12.hostname(),
 				objectPrinter: null,
 				interval: 10 * 1e3
 			});
@@ -36900,7 +36901,7 @@ var require_file$2 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var _ = require_lodash();
 	var fs$14 = __require("fs/promises");
 	var path$36 = __require("path");
-	var os$10 = __require("os");
+	var os$11 = __require("os");
 	var { makeDirs } = require_utils$3();
 	/**
 	* Import types
@@ -36929,7 +36930,7 @@ var require_file$2 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			this.opts = _.defaultsDeep(this.opts, {
 				folder: "./logs",
 				filename: "moleculer-{date}.log",
-				eol: os$10.EOL,
+				eol: os$11.EOL,
 				interval: 1 * 1e3
 			});
 			this.opts.colors = false;
@@ -37349,7 +37350,7 @@ var require_lib$5 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../node_modules/log4js/lib/layouts.js
 var require_layouts = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var dateFormat = require_lib$5();
-	var os$9 = __require("os");
+	var os$10 = __require("os");
 	var util$3 = __require("util");
 	var path$35 = __require("path");
 	var styles = {
@@ -37475,13 +37476,13 @@ var require_layouts = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			return dateFormat.asString(format, loggingEvent.startTime);
 		}
 		function hostname() {
-			return os$9.hostname().toString();
+			return os$10.hostname().toString();
 		}
 		function formatMessage(loggingEvent) {
 			return util$3.format(...loggingEvent.data);
 		}
 		function endOfLine() {
-			return os$9.EOL;
+			return os$10.EOL;
 		}
 		function logLevel(loggingEvent) {
 			return loggingEvent.level.toString();
@@ -39080,11 +39081,11 @@ var require_mkdirs = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../node_modules/streamroller/node_modules/fs-extra/lib/util/utimes.js
 var require_utimes = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var fs = require_graceful_fs();
-	var os$8 = __require("os");
+	var os$9 = __require("os");
 	var path$31 = __require("path");
 	function hasMillisResSync() {
 		let tmpfile = path$31.join("millis-test-sync" + Date.now().toString() + Math.random().toString().slice(2));
-		tmpfile = path$31.join(os$8.tmpdir(), tmpfile);
+		tmpfile = path$31.join(os$9.tmpdir(), tmpfile);
 		const d = /* @__PURE__ */ new Date(1435410243862);
 		fs.writeFileSync(tmpfile, "https://github.com/jprichardson/node-fs-extra/pull/141");
 		const fd = fs.openSync(tmpfile, "r+");
@@ -39094,7 +39095,7 @@ var require_utimes = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	}
 	function hasMillisRes(callback) {
 		let tmpfile = path$31.join("millis-test" + Date.now().toString() + Math.random().toString().slice(2));
-		tmpfile = path$31.join(os$8.tmpdir(), tmpfile);
+		tmpfile = path$31.join(os$9.tmpdir(), tmpfile);
 		const d = /* @__PURE__ */ new Date(1435410243862);
 		fs.writeFile(tmpfile, "https://github.com/jprichardson/node-fs-extra/pull/141", (err) => {
 			if (err) return callback(err);
@@ -45396,7 +45397,7 @@ var require_multistream = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/pino/pino.js
 var require_pino$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var os$7 = __require("node:os");
+	var os$8 = __require("node:os");
 	var stdSerializers = require_pino_std_serializers();
 	var caller = require_caller();
 	var redaction = require_redaction();
@@ -45411,7 +45412,7 @@ var require_pino$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var { chindingsSym, redactFmtSym, serializersSym, timeSym, timeSliceIndexSym, streamSym, stringifySym, stringifySafeSym, stringifiersSym, setLevelSym, endSym, formatOptsSym, messageKeySym, errorKeySym, nestedKeySym, mixinSym, levelCompSym, useOnlyCustomLevelsSym, formattersSym, hooksSym, nestedKeyStrSym, mixinMergeStrategySym, msgPrefixSym } = symbols;
 	var { epochTime, nullTime } = time;
 	var { pid } = process;
-	var hostname = os$7.hostname();
+	var hostname = os$8.hostname();
 	var defaultErrorSerializer = stdSerializers.err;
 	var normalize = createArgsNormalizer({
 		level: "info",
@@ -71516,7 +71517,7 @@ var require_ipaddr = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../node_modules/moleculer/src/transporters/tcp/udp-broadcaster.js
 var require_udp_broadcaster = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var EventEmitter$3 = __require("events");
-	var os$6 = __require("os");
+	var os$7 = __require("os");
 	var dgram = __require("dgram");
 	var ipaddr = require_ipaddr();
 	var { randomInt } = require_utils$3();
@@ -71727,7 +71728,7 @@ var require_udp_broadcaster = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		*/
 		getBroadcastAddresses() {
 			const list = [];
-			const interfaces = os$6.networkInterfaces();
+			const interfaces = os$7.networkInterfaces();
 			for (let iface in interfaces) for (let i in interfaces[iface]) {
 				const f = interfaces[iface][i];
 				if (f.family === "IPv4") list.push(ipaddr.IPv4.broadcastAddressFromCIDR(f.cidr).toString());
@@ -71742,7 +71743,7 @@ var require_udp_broadcaster = /* @__PURE__ */ __commonJSMin(((exports, module) =
 		*/
 		getInterfaceAddresses() {
 			const list = [];
-			const interfaces = os$6.networkInterfaces();
+			const interfaces = os$7.networkInterfaces();
 			for (let iface in interfaces) for (let i in interfaces[iface]) {
 				const f = interfaces[iface][i];
 				if (f.family === "IPv4") list.push(f.address);
@@ -73025,7 +73026,7 @@ var init_package = __esmMin((() => {
 //#endregion
 //#region ../../node_modules/moleculer/src/health.js
 var require_health = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var os$5 = __require("os");
+	var os$6 = __require("os");
 	var { getIpList } = require_utils$3();
 	var MOLECULER_VERSION = (init_package(), __toCommonJS(package_exports).default).version;
 	/**
@@ -73041,9 +73042,9 @@ var require_health = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		};
 	};
 	var getCpuInfo = () => {
-		const cpus = os$5.cpus();
-		const load = os$5.loadavg();
-		const cores = Array.isArray(cpus) ? os$5.cpus().length : null;
+		const cpus = os$6.cpus();
+		const load = os$6.loadavg();
+		const cores = Array.isArray(cpus) ? os$6.cpus().length : null;
 		return {
 			load1: load[0],
 			load5: load[1],
@@ -73054,8 +73055,8 @@ var require_health = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 	var getMemoryInfo = () => {
 		const mem = {
-			free: os$5.freemem(),
-			total: os$5.totalmem(),
+			free: os$6.freemem(),
+			total: os$6.totalmem(),
 			percent: null
 		};
 		mem.percent = mem.free * 100 / mem.total;
@@ -73067,19 +73068,19 @@ var require_health = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	*/
 	var getUserInfo = () => {
 		try {
-			return os$5.userInfo();
+			return os$6.userInfo();
 		} catch {
 			return {};
 		}
 	};
 	var getOsInfo = () => {
 		return {
-			uptime: os$5.uptime(),
-			type: os$5.type(),
-			release: os$5.release(),
-			hostname: os$5.hostname(),
-			arch: os$5.arch(),
-			platform: os$5.platform(),
+			uptime: os$6.uptime(),
+			type: os$6.type(),
+			release: os$6.release(),
+			hostname: os$6.hostname(),
+			arch: os$6.arch(),
+			platform: os$6.platform(),
 			user: getUserInfo()
 		};
 	};
@@ -74772,11 +74773,11 @@ var require_ttl = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/recursive-watch/index.js
 var require_recursive_watch = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var os$4 = __require("os");
+	var os$5 = __require("os");
 	var fs$7 = __require("fs");
 	var path$10 = __require("path");
 	var Cache = require_ttl();
-	var watchDirectory = os$4.platform() === "linux" ? watchFallback : watchRecursive;
+	var watchDirectory = os$5.platform() === "linux" ? watchFallback : watchRecursive;
 	module.exports = watch;
 	function watch(name, onchange) {
 		var clear = null;
@@ -81752,7 +81753,7 @@ var require_has_flag = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region ../../node_modules/args/node_modules/supports-color/index.js
 var require_supports_color = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	var os$3 = __require("os");
+	var os$4 = __require("os");
 	var hasFlag = require_has_flag();
 	var env = process.env;
 	var forceColor;
@@ -81775,7 +81776,7 @@ var require_supports_color = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 		if (stream && !stream.isTTY && forceColor !== true) return 0;
 		const min = forceColor ? 1 : 0;
 		if (process.platform === "win32") {
-			const osRelease = os$3.release().split(".");
+			const osRelease = os$4.release().split(".");
 			if (Number(process.versions.node.split(".")[0]) >= 8 && Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) return Number(osRelease[2]) >= 14931 ? 3 : 2;
 			return 1;
 		}
@@ -82665,7 +82666,7 @@ var require_lib = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 var require_main = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var fs$2 = __require("fs");
 	var path$2 = __require("path");
-	var os$2 = __require("os");
+	var os$3 = __require("os");
 	var crypto = __require("crypto");
 	var TIPS = [
 		"◈ encrypted .env [www.dotenvx.com]",
@@ -82798,7 +82799,7 @@ var require_main = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return null;
 	}
 	function _resolveHome(envPath) {
-		return envPath[0] === "~" ? path$2.join(os$2.homedir(), envPath.slice(1)) : envPath;
+		return envPath[0] === "~" ? path$2.join(os$3.homedir(), envPath.slice(1)) : envPath;
 	}
 	function _configVault(options) {
 		const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || options && options.debug);
@@ -82946,7 +82947,7 @@ var require_runner = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var inspect = __require("util").inspect;
 	var _ = require_lodash();
 	var Args = require_lib();
-	var os$1 = __require("os");
+	var os$2 = __require("os");
 	/** @type {Cluster} */
 	var cluster = __require("cluster");
 	var kleur = require_kleur();
@@ -83252,7 +83253,7 @@ var require_runner = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 					logger.info(`Worker #${worker.id} restarted`);
 				} else process.exit(code);
 			});
-			const workerCount = Number.isInteger(instances) && instances > 0 ? instances : os$1.cpus().length;
+			const workerCount = Number.isInteger(instances) && instances > 0 ? instances : os$2.cpus().length;
 			logger.info(`Starting ${workerCount} workers...`);
 			for (let i = 0; i < workerCount; i++) cluster.fork();
 			stopSignals.forEach(function(signal) {
@@ -83390,7 +83391,7 @@ var Gt = (n, t, e) => {
 	}
 	return h;
 };
-var fe = "\0SLASH" + Math.random() + "\0", ue = "\0OPEN" + Math.random() + "\0", qt = "\0CLOSE" + Math.random() + "\0", de = "\0COMMA" + Math.random() + "\0", pe = "\0PERIOD" + Math.random() + "\0", is = new RegExp(fe, "g"), rs = new RegExp(ue, "g"), ns = new RegExp(qt, "g"), os = new RegExp(de, "g"), hs = new RegExp(pe, "g"), as = /\\\\/g, ls = /\\{/g, cs = /\\}/g, fs = /\\,/g, us = /\\./g, ds = 1e5;
+var fe = "\0SLASH" + Math.random() + "\0", ue = "\0OPEN" + Math.random() + "\0", qt = "\0CLOSE" + Math.random() + "\0", de = "\0COMMA" + Math.random() + "\0", pe = "\0PERIOD" + Math.random() + "\0", is = new RegExp(fe, "g"), rs = new RegExp(ue, "g"), ns = new RegExp(qt, "g"), os$1 = new RegExp(de, "g"), hs = new RegExp(pe, "g"), as = /\\\\/g, ls = /\\{/g, cs = /\\}/g, fs = /\\,/g, us = /\\./g, ds = 1e5;
 function Ht(n) {
 	return isNaN(n) ? n.charCodeAt(0) : parseInt(n, 10);
 }
@@ -83398,7 +83399,7 @@ function ps(n) {
 	return n.replace(as, fe).replace(ls, ue).replace(cs, qt).replace(fs, de).replace(us, pe);
 }
 function ms(n) {
-	return n.replace(is, "\\").replace(rs, "{").replace(ns, "}").replace(os, ",").replace(hs, ".");
+	return n.replace(is, "\\").replace(rs, "{").replace(ns, "}").replace(os$1, ",").replace(hs, ".");
 }
 function me(n) {
 	if (!n) return [""];
@@ -88345,7 +88346,8 @@ var MESH_REAP_MS = 24 * 36e5;
 * state of their own (the session token lifetime).
 *
 * Sections exposed — this list is the whole of it:
-*   - server     (port, host, dataPath — READ-ONLY, loaded from config.yaml at bootstrap)
+*   - server     (port, host, dataPath — READ-ONLY, loaded from config.yaml at bootstrap;
+*                 name = the hub's human name, `server.name`, editable — D861)
 *   - auth       (tokenExpiry = session lifetime, accessTokenExpiry, trustedProxies,
 *                 trustedNetworks)
 *   - cluster    (no operator field remains: the cluster secret and the mesh auth
@@ -88384,12 +88386,15 @@ var SECTION_TITLES = {
 };
 /** The keychain owner of the hub's own secrets (D797). */
 var SYSTEM_SECRET_OWNER = "system";
+/** The form key (and the `server` section key) of the hub's human name (D861). */
+var SERVER_NAME_FIELD = "name";
 /** Keys that map 1:1 to a given yml section — used by `updateGlobalSettings`
 *  to figure out which section owns each key in the incoming patch. */
 var KEY_TO_SECTION = {
 	port: "server",
 	host: "server",
 	dataPath: "server",
+	[SERVER_NAME_FIELD]: "server",
 	tokenExpiry: "auth",
 	accessTokenExpiry: "auth",
 	trustedProxies: "auth",
@@ -88580,35 +88585,51 @@ var SystemConfigAddon = class extends BaseAddon {
 			{
 				id: "system-config-server",
 				title: SECTION_TITLES["server"],
-				description: "Core server connection settings — read-only, loaded from config.yaml at bootstrap.",
+				description: "The name of this server, and its connection settings (read-only, loaded from config.yaml at bootstrap).",
+				descriptionKey: "server:global.s_system-config-server.description",
 				columns: 2,
 				fields: [
+					{
+						type: "text",
+						key: SERVER_NAME_FIELD,
+						label: "Server name",
+						description: `Shown in the admin UI and on the apps' sign-in screen (1 to 48 characters). Leave empty to use this machine's hostname.`,
+						placeholder: hostnameWithoutDomain(),
+						span: 2
+					},
 					{
 						type: "info",
 						key: "server-restart-note",
 						label: "Restart required",
-						content: "Server settings are read-only. Change them in config.yaml and restart.",
+						labelKey: "server:global.s_system-config-server.server-restart-note.label",
+						content: "Port, host and data path are read-only. Change them in config.yaml and restart.",
 						variant: "warning"
 					},
 					{
 						type: "text",
 						key: "port",
 						label: "Port",
+						labelKey: "server:global.s_system-config-server.port.label",
 						description: "Listening port",
+						descriptionKey: "server:global.s_system-config-server.port.description",
 						disabled: true
 					},
 					{
 						type: "text",
 						key: "host",
 						label: "Host",
+						labelKey: "server:global.s_system-config-server.host.label",
 						description: "Bind address",
+						descriptionKey: "server:global.s_system-config-server.host.description",
 						disabled: true
 					},
 					{
 						type: "text",
 						key: "dataPath",
 						label: "Data Path",
+						labelKey: "server:global.s_system-config-server.dataPath.label",
 						description: "Root data directory",
+						descriptionKey: "server:global.s_system-config-server.dataPath.description",
 						disabled: true,
 						span: 2
 					}
@@ -88618,13 +88639,16 @@ var SystemConfigAddon = class extends BaseAddon {
 				id: "system-config-auth",
 				title: SECTION_TITLES["auth"],
 				description: "Token and session settings.",
+				descriptionKey: "server:global.s_system-config-auth.description",
 				columns: 1,
 				fields: [
 					{
 						type: "text",
 						key: "tokenExpiry",
 						label: "Session lifetime",
+						labelKey: "server:global.s_system-config-auth.tokenExpiry.label",
 						description: "How long a sign-in lasts without being used, as a duration string (e.g. 7d, 30d). Every refresh starts it again, so a device in use stays signed in; one left unopened this long must sign in again. A bare number is rejected — it would be read as milliseconds. Applies from the next sign-in or refresh.",
+						descriptionKey: "server:global.s_system-config-auth.tokenExpiry.description",
 						placeholder: "30d",
 						default: "30d"
 					},
@@ -88632,7 +88656,9 @@ var SystemConfigAddon = class extends BaseAddon {
 						type: "text",
 						key: "accessTokenExpiry",
 						label: "Access token lifetime",
+						labelKey: "server:global.s_system-config-auth.accessTokenExpiry.label",
 						description: "How long one access token lives before the app silently swaps it for a new one (e.g. 2h; between 5m and 24h, never longer than the session). Shorter limits how long a copied token is useful. Apps that predate refresh tokens get one token for the whole session instead.",
+						descriptionKey: "server:global.s_system-config-auth.accessTokenExpiry.description",
 						placeholder: "2h",
 						default: "2h"
 					},
@@ -88640,13 +88666,16 @@ var SystemConfigAddon = class extends BaseAddon {
 						type: "tags",
 						key: "trustedProxies",
 						label: "Trusted reverse proxies",
+						labelKey: "server:global.s_system-config-auth.trustedProxies.label",
 						description: "Addresses or CIDR ranges (e.g. 192.168.1.2 or 10.0.0.0/24) of reverse proxies in front of the hub. Only a request whose direct sender is one of these — or this host itself, as with the Cloudflare tunnel — has its X-Forwarded-For / CF-Connecting-IP read as the real client address for rate limits. Leave empty unless a proxy on another host forwards to the hub.",
+						descriptionKey: "server:global.s_system-config-auth.trustedProxies.description",
 						creatable: true
 					},
 					{
 						type: "info",
 						key: "trustedNetworksWarning",
 						label: "Skipping two-factor authentication",
+						labelKey: "server:global.s_system-config-auth.trustedNetworksWarning.label",
 						variant: "danger",
 						content: "A sign-in made DIRECTLY from a network listed below skips the second factor (TOTP or passkey): anyone on that network who knows or guesses a password gets in with the password alone — including a compromised camera or a guest device. Requests that come through the Cloudflare tunnel, the public address or any reverse proxy never skip it, whatever address they claim. Every skip is recorded in the authentication audit log. Leave empty (the default) to always ask for the second factor."
 					},
@@ -88654,7 +88683,9 @@ var SystemConfigAddon = class extends BaseAddon {
 						type: "tags",
 						key: "trustedNetworks",
 						label: "Trusted networks (skip the second factor)",
+						labelKey: "server:global.s_system-config-auth.trustedNetworks.label",
 						description: "Addresses or CIDR ranges, e.g. 192.168.1.0/24. Keep it as narrow as you can — a single trusted VLAN, not the whole LAN.",
+						descriptionKey: "server:global.s_system-config-auth.trustedNetworks.description",
 						creatable: true
 					}
 				]
@@ -88694,6 +88725,25 @@ var SystemConfigAddon = class extends BaseAddon {
 	async updateGlobalSettingsAsOperator(patch, _nodeId) {
 		await this.updateGlobalSettings(patch);
 	}
+	/**
+	* The value to store for a `name` in a save, or `undefined` for "leave the row
+	* alone". The whole form posts every field, so an empty box on a hub that was
+	* never named is the NORMAL case and must write nothing (D861: a seed never
+	* overwrites); an empty box over a stored name is the operator clearing it,
+	* which stores `''` (readers treat it as unset). Anything else must be a valid
+	* name — refused whole, like the network lists.
+	*/
+	async normalizeServerName(value) {
+		if (value === void 0 || value === null) return void 0;
+		if (typeof value !== "string") throw new Error("The server name must be text");
+		if (value.trim() === "") {
+			const current = (await this.ctx.settings.getSection("server"))[SERVER_NAME_FIELD];
+			return typeof current === "string" && current !== "" ? "" : void 0;
+		}
+		const parsed = ServerNameSchema.safeParse(value);
+		if (!parsed.success) throw new Error(parsed.error.issues[0]?.message ?? "The server name is not valid");
+		return parsed.data;
+	}
 	async updateGlobalSettings(patch) {
 		if (!this.ctx.settings) throw new Error("system-config: ctx.settings not available — cannot write sections");
 		const perSection = /* @__PURE__ */ new Map();
@@ -88715,6 +88765,14 @@ var SystemConfigAddon = class extends BaseAddon {
 				this.ctx.logger.warn("update ignored unknown key (not mapped to any section)", { meta: { key } });
 				continue;
 			}
+			if (key === SERVER_NAME_FIELD) {
+				const name = await this.normalizeServerName(value);
+				if (name === void 0) continue;
+				const bucket = perSection.get("server") ?? {};
+				bucket[key] = name;
+				perSection.set("server", bucket);
+				continue;
+			}
 			if (section === "server") {
 				this.ctx.logger.warn("update ignored read-only server-section key", { meta: { key } });
 				continue;
@@ -88739,6 +88797,10 @@ var SystemConfigAddon = class extends BaseAddon {
 		}
 	}
 };
+/** This machine's hostname without its domain: what an unnamed hub is called. */
+function hostnameWithoutDomain() {
+	return shortHostname(os.hostname());
+}
 function parseMintUnlockInput(input) {
 	if (input === null || typeof input !== "object") throw new Error("system-config: mintAgentUiUnlockTicket requires { nodeId }");
 	const nodeId = Reflect.get(input, "nodeId");