@camstack/system 1.2.442 → 1.2.443

package/dist/addon-utils.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("./chunk-Cek0wNdY.js");
-const require_custom_action_registry = require("./custom-action-registry-BKmoaqG0.js");
+const require_custom_action_registry = require("./custom-action-registry-COyb49zm.js");
 const require_snapshot_courtesy = require("./snapshot-courtesy-D_C5-nC0.js");
 exports.COURTESY_DEFAULT_WIDTH = require_snapshot_courtesy.COURTESY_DEFAULT_WIDTH;
 exports.CustomActionRegistry = require_custom_action_registry.CustomActionRegistry;

package/dist/addon-utils.mjs

@@ -1,3 +1,3 @@
-import { C as isModelDownloaded, S as isModelDownloadHttpError, _ as downloadFile, a as startEventLoopStallMonitor, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, p as ModelDownloadHttpError, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-CyUuhATc.mjs";
+import { C as isModelDownloaded, S as isModelDownloadHttpError, _ as downloadFile, a as startEventLoopStallMonitor, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, p as ModelDownloadHttpError, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-stpC3Zy-.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg, t as COURTESY_DEFAULT_WIDTH } from "./snapshot-courtesy-CyFs1M3I.mjs";
 export { COURTESY_DEFAULT_WIDTH, CustomActionRegistry, ModelDownloadHttpError, ModelDownloadService, STALL_REPORT_MS, STALL_TICK_MS, adoptModelRevisions, attributeStall, collectModelFiles, contentTypeFor, courtesyCacheKey, createFileDataPlaneHandler, deleteModelFromDisk, downloadFile, ensureModel, getModelFilePath, isModelDownloadHttpError, isModelDownloaded, parseRangeHeader, renderCourtesyJpeg, renderCourtesyOverlayJpeg, resolveFormatRevision, startEventLoopStallMonitor };

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D9qT3jHr.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ar as errMsg, Ci as EventCategory, it as addonPagesCapability, jr as BaseAddon } from "../../dist-DsrQYcLm.mjs";
+import { Ar as errMsg, Ei as EventCategory, it as addonPagesCapability, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D9qT3jHr.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ar as errMsg, Ci as EventCategory, jr as BaseAddon, ot as addonWidgetsCapability } from "../../dist-DsrQYcLm.mjs";
+import { Ar as errMsg, Ei as EventCategory, jr as BaseAddon, ot as addonWidgetsCapability } from "../../dist-Bxt_S-9a.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D9qT3jHr.js");
 //#region src/builtins/alerts/critical-push.ts
 /** Alert categories that are critical system findings. */
 var CRITICAL_CATEGORIES = new Set([

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Ar as errMsg, Ci as EventCategory, i as AlertSchema, jr as BaseAddon, qr as createEvent, st as alertsCapability } from "../../dist-DsrQYcLm.mjs";
+import { Ar as errMsg, Ei as EventCategory, Jr as createEvent, i as AlertSchema, jr as BaseAddon, st as alertsCapability } from "../../dist-Bxt_S-9a.mjs";
 //#region src/builtins/alerts/critical-push.ts
 /** Alert categories that are critical system findings. */
 var CRITICAL_CATEGORIES = new Set([

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D9qT3jHr.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Ar as errMsg, Ci as EventCategory, M as FIRST_LEVEL_MACRO_CLASSES, Pn as ptzAutotrackCapability, jr as BaseAddon, ni as isEvent, ut as bareAddonId } from "../../dist-DsrQYcLm.mjs";
+import { Ar as errMsg, Ei as EventCategory, M as FIRST_LEVEL_MACRO_CLASSES, Pn as ptzAutotrackCapability, jr as BaseAddon, ri as isEvent, ut as bareAddonId } from "../../dist-Bxt_S-9a.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
-const require_restore_archive = require("../../restore-archive-Cdf09dHm.js");
+const require_dist = require("../../dist-D9qT3jHr.js");
+const require_restore_archive = require("../../restore-archive-BMNXwWWD.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,5 +1,5 @@
-import { Ci as EventCategory, bn as mayWriteToLocation, ci as nodePin, jr as BaseAddon, lt as backupCapability, rr as storageOccupancyCapability, yi as toNodeId } from "../../dist-DsrQYcLm.mjs";
-import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-RaA3uZ7H.mjs";
+import { Ei as EventCategory, Si as toNodeId, bn as mayWriteToLocation, jr as BaseAddon, lt as backupCapability, rr as storageOccupancyCapability, ui as nodePin } from "../../dist-Bxt_S-9a.mjs";
+import { a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-9CGgeBzD.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D9qT3jHr.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { g as CalendarPreferencesSchema, gt as calendarsCapability, jr as BaseAddon } from "../../dist-DsrQYcLm.mjs";
+import { g as CalendarPreferencesSchema, gt as calendarsCapability, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D9qT3jHr.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { A as DeclaredDevices, Ar as errMsg, Ci as EventCategory, Dr as DeviceFeature, H as MOTION_CLOSE_AFTER_MS, Qn as snapshotCapability, _t as cameraGridLayoutCapability, ar as streamCatalogCapability, ei as hydrateSchema, gr as buildFfmpegArgs, jr as BaseAddon, jt as declarationOwnerNodeId, kr as DeviceType, o as BaseDevice, qr as createEvent, w as DERIVED_CAMERA_SILENCED_CAP_NAMES, wn as motionCapability, xn as memoizePinnedFfmpeg } from "../../dist-DsrQYcLm.mjs";
+import { A as DeclaredDevices, Ar as errMsg, Dr as DeviceFeature, Ei as EventCategory, H as MOTION_CLOSE_AFTER_MS, Jr as createEvent, Qn as snapshotCapability, _t as cameraGridLayoutCapability, ar as streamCatalogCapability, gr as buildFfmpegArgs, jr as BaseAddon, jt as declarationOwnerNodeId, kr as DeviceType, o as BaseDevice, ti as hydrateSchema, w as DERIVED_CAMERA_SILENCED_CAP_NAMES, wn as motionCapability, xn as memoizePinnedFfmpeg } from "../../dist-Bxt_S-9a.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
-const require_composition_sources = require("../../composition-sources-DmSEMtUD.js");
+const require_dist = require("../../dist-D9qT3jHr.js");
+const require_composition_sources = require("../../composition-sources-BUXX1e8j.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { A as DeclaredDevices, Ar as errMsg, Ci as EventCategory, Cr as compositionSourceKey, Er as toExpressionValue, Sr as compositionSliceKey, Tr as disarmRoseMemory, Wt as evaluateCompositionField, _r as cloneStatefulExpressionMemory, br as compositionFeatureEnabled, bt as composerCapability, f as COMPOSED_ITEM_FIXED_FIELDS, ft as buildCapabilityLookup, hr as COMPOSER_ADDON_ID, jn as planComposition, jr as BaseAddon, kr as DeviceType, o as BaseDevice, qr as createEvent, qt as expressionContainsBuiltinCall, r as ALL_CAPABILITY_DEFINITIONS, vr as composedDeviceRef, wr as createStatefulExpressionMemory, xr as compositionItemFieldPath, xt as compositionFieldKey, yr as composedDeviceStableId } from "../../dist-DsrQYcLm.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-CftPpY4O.mjs";
+import { A as DeclaredDevices, Ar as errMsg, Cr as compositionSourceKey, Ei as EventCategory, Er as toExpressionValue, Jr as createEvent, Sr as compositionSliceKey, Tr as disarmRoseMemory, Wt as evaluateCompositionField, _r as cloneStatefulExpressionMemory, br as compositionFeatureEnabled, bt as composerCapability, f as COMPOSED_ITEM_FIXED_FIELDS, ft as buildCapabilityLookup, hr as COMPOSER_ADDON_ID, jn as planComposition, jr as BaseAddon, kr as DeviceType, o as BaseDevice, qt as expressionContainsBuiltinCall, r as ALL_CAPABILITY_DEFINITIONS, vr as composedDeviceRef, wr as createStatefulExpressionMemory, xr as compositionItemFieldPath, xt as compositionFieldKey, yr as composedDeviceStableId } from "../../dist-Bxt_S-9a.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-C8tUG2uL.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D9qT3jHr.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { gn as logDestinationCapability, jr as BaseAddon } from "../../dist-DsrQYcLm.mjs";
+import { gn as logDestinationCapability, jr as BaseAddon } from "../../dist-Bxt_S-9a.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/block-package.d.ts

@@ -1,4 +1,4 @@
-import { coreBlockAddonId, coreBlockIdFromAddonId } from "@camstack/types";
+import { type ConfigUISchema, coreBlockAddonId, coreBlockIdFromAddonId } from "@camstack/types";
 /**
 * The runner id lives on the CAPABILITY, not here.
 *
@@ -24,6 +24,8 @@ export interface MaterializeBlockInput {
 	* loads. Absent for a legacy single-file materialize.
 	*/
 	readonly files?: Readonly<Record<string, string>>;
+	/** The block's settings form: its secret fields are keychain-backed at runtime (D880). */
+	readonly settingsSchema?: ConfigUISchema | undefined;
 }
 export interface MaterializedBlock {
 	/** What `$process.spawnRunner` gets as `addonDir` — the package root. */
@@ -32,7 +34,7 @@ export interface MaterializedBlock {
 }
 /** Build the wrapper for one block. Exported for the test that asserts the
 *  generated source actually carries the block's identity. */
-export declare function renderBlockWrapper(blockId: string, blockName: string): string;
+export declare function renderBlockWrapper(blockId: string, blockName: string, settingsSchema?: ConfigUISchema | undefined): string;
 /** The package manifest the addon runner reads to find the entry point. */
 export declare function renderBlockManifest(blockId: string, blockName: string): string;
 /**

package/dist/builtins/core-blocks/block-settings-store.d.ts

@@ -1,21 +1,8 @@
-/**
-* Preference values for core blocks.
-*
-* Schema lives on the block record (`settingsSchema`, extracted from the
-* compiled entry's named export or set by the editor). Values live HERE —
-* one JSON blob per blockId — so a settings patch never rewrites the
-* operator's source, and so a block that has not yet declared a schema still
-* keeps any values the UI already wrote.
-*
-* On every patch the same values are mirrored into the block addon's
-* `addon-settings` rows so a running script reads them the same way any
-* addon does: `ctx.settings.readAddonStore()`.
-*/
-import type { SettingsStoreClient } from "@camstack/types";
+import { type ConfigUISchema, type RawSecretMigrationReport, type SecretsAccess, type SettingsStoreClient } from "@camstack/types";
 /**
 * @durable class=config owner=core-blocks
-*   write="`setValues` / `mergeValues` persist the operator's prefs for one block"
-*   retention="`delete` when the block is deleted. Nothing ages out."
+*   write="NOTHING since D880 - the values live in the block addon's `addon-settings` rows. Only the one-shot `migrateRawSecrets` reads it, then deletes each row."
+*   retention="legacy: every row is deleted by the verified operator migration; the declaration goes with it once every hub ran it."
 */
 export declare const CORE_BLOCK_SETTINGS_COLLECTION = "core-blocks:settings";
 export declare const CORE_BLOCK_SETTINGS_COLUMNS: readonly [{
@@ -29,15 +16,74 @@ export declare const CORE_BLOCK_SETTINGS_COLUMNS: readonly [{
 	readonly notNull: true;
 	readonly defaultValue: "{}";
 }];
+/** The keychain door for a given owner, or null when this process has none. */
+export type SecretsForOwner = (owner: string) => SecretsAccess | null;
 export interface BlockSettingsStoreDeps {
 	readonly store: SettingsStoreClient;
+	readonly keychainFor: SecretsForOwner;
+	/** Told about keychain refs a write dropped but could not delete (they are now orphans). */
+	readonly onOrphaned?: (blockId: string, refs: readonly string[]) => void;
+}
+/** The block declares a secret, but this process has no keychain door to put it in. */
+export declare class BlockSecretsUnavailableError extends Error {
+	readonly blockId: string;
+	constructor(blockId: string);
+}
+/** The block addon's settings rows could not be read: never answered as "empty". */
+export declare class BlockSettingsUnreadableError extends Error {
+	readonly blockId: string;
+	constructor(blockId: string, reason: string);
+}
+/** One block as the migration sees it. */
+export interface BlockSecretsSubject {
+	readonly id: string;
+	readonly settingsSchema?: ConfigUISchema | undefined;
 }
 export declare class BlockSettingsStore {
 	private readonly store;
+	private readonly keychainFor;
+	private readonly onOrphaned;
 	constructor(deps: BlockSettingsStoreDeps);
+	/** Declares the LEGACY collection, so the migration can read it. */
 	static declare(store: SettingsStoreClient): Promise<void>;
-	getValues(blockId: string): Promise<Record<string, unknown>>;
-	mergeValues(blockId: string, patch: Record<string, unknown>): Promise<Record<string, unknown>>;
+	private rows;
+	/**
+	* The block's stored values - markers, NOT resolved. For the admin form
+	* (`hydrateSchema` turns a marker into a "set" view) and as the `stored`
+	* side of a write. Absent answers `{}`; an unreadable store THROWS.
+	*/
+	readStored(blockId: string): Promise<Record<string, unknown>>;
+	/**
+	* Patch the block's values. Secret fields (by the schema TYPE) go to the
+	* keychain first and the row gets the marker; a keychain that cannot take
+	* them refuses the whole patch.
+	*/
+	mergeValues(blockId: string, schema: ConfigUISchema | undefined, patch: Record<string, unknown>): Promise<void>;
+	/** The block is gone: its rows, its keychain values and the legacy blob go with it. */
 	delete(blockId: string): Promise<void>;
-	private mirrorToBlockAddon;
+	/**
+	* D880: move every plaintext secret a block's `settingsSchema` declares into
+	* the keychain, and delete the legacy `core-blocks:settings` blob.
+	*
+	* Per block: gather the values (the addon-settings rows win; a key only the
+	* blob holds is carried over), put each secret, READ IT BACK and compare,
+	* and only then write the marker. The legacy row is deleted only after the
+	* block's rows hold every key it had and every secret resolves. A block that
+	* fails stays exactly as it was. Dry run unless `apply`; idempotent; counts
+	* only - never a value, a ref or a block id.
+	*/
+	migrateRawSecrets(blocks: readonly BlockSecretsSubject[], apply: boolean): Promise<RawSecretMigrationReport>;
+	/**
+	* The keys of the legacy blob that may be copied into the block's rows: not in
+	* the rows already, not a secret the tree moves, not a credential-named value no
+	* schema declares (flagged instead), and not a marker that points at another
+	* owner's secret (counted as `foreign`, never copied).
+	*/
+	private carryable;
+	private dropLegacy;
+	/** put -> read back -> compare -> only then the marker rows. */
+	private moveBlock;
+	/** Remove the values a failed move put, never one the row already pointed at. */
+	private discard;
+	private report;
 }