@camstack/system 1.2.442 → 1.2.444

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { Ar as errMsg, At as databaseSnapshotCapability, Ir as RUNTIME_DEFAULTS, J as STORAGE_ADMIN_SCOPED_BASES, S as DATA_STORE_DATABASES, b as DATABASE_SNAPSHOT_SUFFIX, er as storageAdminCapability, jr as BaseAddon, kt as dataStoreProviderCapability, pr as vectorStoreCapability, q as STORAGE_ADMIN_MOVED_COLLECTIONS, ut as bareAddonId, x as DATABASE_SNAPSHOT_TIMEOUT_MS, y as DATABASE_SNAPSHOT_PARTIAL_SUFFIX } from "../../dist-DsrQYcLm.mjs";
+import { At as dataStoreProviderCapability, Br as DeclarationRefusedError, C as DATA_STORE_DATABASES, Fr as BaseAddon, J as STORAGE_ADMIN_MOVED_COLLECTIONS, Li as normalizeSecretOwner, Ln as recordsCapability, Pr as errMsg, Qr as RUNTIME_DEFAULTS, S as DATABASE_SNAPSHOT_TIMEOUT_MS, Wr as NoCallerError, Y as STORAGE_ADMIN_SCOPED_BASES, Yr as RECORD_SWEEP_INTERVAL_MS, b as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, ci as UnknownRecordKindError, dt as bareAddonId, gr as vectorStoreCapability, jt as databaseSnapshotCapability, rr as storageAdminCapability, ti as RecordKindDeclarationSchema, x as DATABASE_SNAPSHOT_SUFFIX } from "../../dist-DERK-gP5.mjs";
 import { i as retiredKeyStoreOf, n as purgeRetiredSettingsKeys } from "../../retired-settings-keys-Bhwe4ymb.mjs";
-import { C as callData, S as callControl, T as controlTargetOf, _ as isFileHostMessage, a as WalMaintenance, c as SqliteSettingsBackend, d as DatabaseBusyError, f as DuplicatePlacementError, g as collectTransferables, l as CollectionPlacementError, o as createVectorIndex, p as rehydrateError, s as vectorProviderOf, u as CrossDatabaseTransactError, w as callVector, x as trustResult } from "../../wal-maintenance-DE8QrreK.mjs";
+import { C as callControl, D as controlTargetOf, E as callVector, S as RecordsEngine, T as callRecords, _ as isFileHostMessage, a as WalMaintenance, c as SqliteSettingsBackend, d as DatabaseBusyError, f as DuplicatePlacementError, g as collectTransferables, l as CollectionPlacementError, o as createVectorIndex, p as rehydrateError, s as vectorProviderOf, u as CrossDatabaseTransactError, w as callData, x as trustResult } from "../../wal-maintenance-zRc24mOC.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";
@@ -101,6 +101,13 @@ var FileHostClient = class {
 			input
 		});
 	}
+	records(op, input) {
+		return this.request({
+			kind: "records",
+			op,
+			input
+		});
+	}
 	control(op, input) {
 		return this.request({
 			kind: "control",
@@ -863,6 +870,7 @@ var InlineOwnedFile = class extends OwnedFileBase {
 	vectorIndex = null;
 	vectorProvider = null;
 	maintenance = null;
+	recordsEngine = null;
 	constructor(spec, deps) {
 		super(spec, deps);
 		this.backend = new SqliteSettingsBackend(spec.livePath, deps.runtimeDefaults === void 0 ? {} : { ...deps.runtimeDefaults }, this.log("Query"), {
@@ -880,6 +888,11 @@ var InlineOwnedFile = class extends OwnedFileBase {
 			this.vectorIndex = vectorIndex;
 			this.vectorProvider = vectorProviderOf(vectorIndex);
 		}
+		const handle = this.backend.getDatabase();
+		if (handle !== null) this.recordsEngine = new RecordsEngine(handle, {
+			databaseId: this.spec.databaseId,
+			logger: this.log("Records")
+		});
 		await this.deps.afterOpen?.(this);
 		const db = this.backend.getDatabase();
 		if (db !== null) {
@@ -901,6 +914,10 @@ var InlineOwnedFile = class extends OwnedFileBase {
 		if (op === "declareCollection") this.declared = this.backend.declaredCollectionNames();
 		return result;
 	}
+	async records(op, input) {
+		if (this.recordsEngine === null) throw new Error(`database "${this.databaseId}" is not open`);
+		return callRecords(this.recordsEngine, op, input);
+	}
 	async vector(op, input) {
 		if (this.vectorProvider === null) throw new Error(`database "${this.databaseId}" does not serve vector calls`);
 		return callVector(this.vectorProvider, op, input);
@@ -956,6 +973,9 @@ var WorkerOwnedFile = class extends OwnedFileBase {
 	vector(op, input) {
 		return this.client.vector(op, input);
 	}
+	records(op, input) {
+		return this.client.records(op, input);
+	}
 	declaredCollections() {
 		return this.client.declaredCollections();
 	}
@@ -1088,6 +1108,14 @@ var PlacementRouter = class {
 	databaseOf(table) {
 		return this.placement.get(table) ?? "settings";
 	}
+	/**
+	* The file that hosts records of `databaseId`, created by the first
+	* declaration that names it (`events`). `history` never hosts records.
+	*/
+	async recordsFileFor(databaseId) {
+		if (databaseId === "history") throw new Error("placement: history.db is device-history's and never hosts records");
+		return this.openFile(databaseId);
+	}
 	/** The files currently open, settings first. */
 	openFiles() {
 		return DATA_STORE_DATABASES.flatMap((id) => {
@@ -1198,6 +1226,267 @@ var PlacementRouter = class {
 	}
 };
 //#endregion
+//#region src/builtins/sqlite-storage/records/records-provider.ts
+/**
+* The `records` capability of the engine (D881): resolves WHO is calling and
+* WHICH file a kind lives in, then hands the call to that file's records engine.
+*
+* - **Owner** = the transport-stamped `callerAddonId` (as device-history's
+*   `not-owner` and the keychain). It is never a field of any input; a call with
+*   no stamp is refused `records/no-caller`.
+* - **Placement**: a kind's file is its declaration's `database`. The map is
+*   rebuilt from each open file's own `_record_kinds` at boot and updated on
+*   declaration. A kind declared for another file than the one it lives in is
+*   refused (the engine never moves data, D853).
+* - **The boot guard**: after a declaration, a kind with `adoptsFrom` that is
+*   EMPTY while its legacy table still holds rows is reported `adoptionPending`;
+*   `ctx.records.declare` turns that into a refusal to start.
+*/
+/** The caller the transport stamped, or a refusal. */
+function recordsCallerOf(input) {
+	const raw = input !== null && typeof input === "object" ? Reflect.get(input, "callerAddonId") : void 0;
+	if (typeof raw !== "string" || raw.length === 0) throw new NoCallerError("the call carries no caller identity; records are reached through ctx.records");
+	return normalizeSecretOwner(raw);
+}
+function keyOf(owner, kind) {
+	return `${owner}\u0000${kind}`;
+}
+var RecordsProvider = class {
+	router;
+	logger;
+	placement = /* @__PURE__ */ new Map();
+	constructor(router, logger) {
+		this.router = router;
+		this.logger = logger;
+	}
+	/** Rebuild the placement map from every open file's catalog. Call once, after the files are open. */
+	async init() {
+		this.placement.clear();
+		for (const file of this.router.openFiles()) {
+			if (file.databaseId === "history") continue;
+			const kinds = await file.records("listKinds", {});
+			for (const k of kinds) {
+				if (k.state === "dropped") continue;
+				const key = keyOf(k.owner, k.kind);
+				const other = this.placement.get(key);
+				if (other !== void 0 && other !== file.databaseId) throw new DeclarationRefusedError(`kind "${k.kind}" of "${k.owner}" is in both "${other}" and "${file.databaseId}"; the layout is corrupt and is not served`);
+				this.placement.set(key, file.databaseId);
+			}
+		}
+		this.logger.info("records: catalog loaded", { meta: { kinds: this.placement.size } });
+	}
+	fileOf(owner, kind) {
+		const database = this.placement.get(keyOf(owner, kind));
+		if (database === void 0) return Promise.reject(new UnknownRecordKindError(`"${owner}" declared no kind "${kind}"`));
+		return this.router.recordsFileFor(database);
+	}
+	async declareKinds(input) {
+		const owner = recordsCallerOf(input);
+		const byDatabase = /* @__PURE__ */ new Map();
+		for (const [kind, raw] of Object.entries(input.kinds)) {
+			const declaration = RecordKindDeclarationSchema.parse(raw);
+			const known = this.placement.get(keyOf(owner, kind));
+			if (known !== void 0 && known !== declaration.database) throw new DeclarationRefusedError(`kind "${kind}" of "${owner}" lives in "${known}", declared for "${declaration.database}" - the engine never moves data`);
+			const group = byDatabase.get(declaration.database) ?? {};
+			byDatabase.set(declaration.database, {
+				...group,
+				[kind]: declaration
+			});
+		}
+		const merged = {};
+		for (const [database, kinds] of byDatabase) {
+			const { kinds: results } = await (await this.router.recordsFileFor(database)).records("declareKinds", {
+				owner,
+				kinds
+			});
+			for (const [kind, result] of Object.entries(results)) {
+				this.placement.set(keyOf(owner, kind), database);
+				merged[kind] = result;
+			}
+		}
+		return { kinds: await this.withAdoption(owner, input.kinds, merged) };
+	}
+	/** The boot guard: empty kind + a legacy table that still has rows = adoption pending. */
+	async withAdoption(owner, declared, results) {
+		const out = { ...results };
+		for (const [kind, raw] of Object.entries(declared)) {
+			const legacy = raw.adoptsFrom;
+			const result = results[kind];
+			if (legacy === void 0 || result === void 0) continue;
+			if ((await (await this.fileOf(owner, kind)).records("adoptionState", {
+				owner,
+				kind
+			})).adoptedAt !== null) continue;
+			const legacyRows = await (await this.router.recordsFileFor("settings")).records("legacyRowCount", { table: legacy });
+			if (legacyRows !== null && legacyRows > 0) out[kind] = {
+				...result,
+				adoptionPending: {
+					legacyTable: legacy,
+					legacyRows
+				}
+			};
+		}
+		return out;
+	}
+	async get(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("get", {
+			...input,
+			owner
+		});
+	}
+	async getMany(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("getMany", {
+			...input,
+			owner
+		});
+	}
+	async secretRefs(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("secretRefs", {
+			...input,
+			owner
+		});
+	}
+	async put(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("put", {
+			...input,
+			owner
+		});
+	}
+	async putMany(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("putMany", {
+			...input,
+			owner
+		});
+	}
+	async patch(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("patch", {
+			...input,
+			owner
+		});
+	}
+	async delete(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("delete", {
+			...input,
+			owner
+		});
+	}
+	async deleteMany(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("deleteMany", {
+			...input,
+			owner
+		});
+	}
+	async query(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("query", {
+			...input,
+			owner
+		});
+	}
+	async count(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("count", {
+			...input,
+			owner
+		});
+	}
+	async histogram(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("histogram", {
+			...input,
+			owner
+		});
+	}
+	async aggregate(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("aggregate", {
+			...input,
+			owner
+		});
+	}
+	async deleteWhere(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("deleteWhere", {
+			...input,
+			owner
+		});
+	}
+	async allocateId(input) {
+		const owner = recordsCallerOf(input);
+		return (await this.fileOf(owner, input.kind)).records("allocateId", {
+			...input,
+			owner
+		});
+	}
+	/** The D865 hook body: every file that holds kinds of this owner. */
+	async deleteDevice(input) {
+		const owner = recordsCallerOf(input);
+		const deleted = {};
+		const secretRefs = [];
+		const databases = new Set([...this.placement.entries()].filter(([key]) => key.startsWith(`${owner}\u0000`)).map(([, database]) => database));
+		for (const database of databases) {
+			const result = await (await this.router.recordsFileFor(database)).records("deleteDevice", {
+				...input,
+				owner
+			});
+			Object.assign(deleted, result.deleted);
+			secretRefs.push(...result.secretRefs);
+		}
+		return {
+			deleted,
+			secretRefs
+		};
+	}
+	async listKinds(input) {
+		const kinds = [];
+		for (const file of this.router.openFiles()) {
+			if (file.databaseId === "history") continue;
+			kinds.push(...await file.records("listKinds", input));
+		}
+		return { kinds };
+	}
+	async readRecords(input) {
+		this.logger.info("records: admin read", { meta: {
+			owner: input.owner,
+			kind: input.kind,
+			limit: input.limit
+		} });
+		return (await this.fileOf(input.owner, input.kind)).records("query", input);
+	}
+	async adoptRecords(input) {
+		const file = await this.fileOf(input.owner, input.kind);
+		const result = await file.records("putMany", input);
+		if (input.complete === true) await file.records("markAdopted", {
+			owner: input.owner,
+			kind: input.kind
+		});
+		this.logger.warn("records: ADOPTED rows as their declared owner", { meta: {
+			owner: input.owner,
+			kind: input.kind,
+			count: result.count,
+			complete: input.complete === true
+		} });
+		return { adopted: result.count };
+	}
+	/** Housekeeping: delete rows past `expires_at` in every file that hosts kinds. */
+	async sweepExpired() {
+		let deleted = 0;
+		for (const file of this.router.openFiles()) {
+			if (file.databaseId === "history") continue;
+			deleted += (await file.records("sweepExpired", {})).deleted;
+		}
+		return deleted;
+	}
+};
+//#endregion
 //#region src/builtins/sqlite-storage/storage-admin-provider.ts
 /**
 * The `storage-admin` provider of the SQLite engine (D870): the operator's
@@ -1211,10 +1500,21 @@ var StorageAdminProvider = class {
 	backend;
 	logger;
 	installedOwners;
-	constructor(backend, logger, installedOwners) {
+	records;
+	constructor(backend, logger, installedOwners, records) {
 		this.backend = backend;
 		this.logger = logger;
 		this.installedOwners = installedOwners;
+		this.records = records;
+	}
+	listKinds(input) {
+		return this.records.listKinds(input);
+	}
+	readRecords(input) {
+		return this.records.readRecords(input);
+	}
+	adoptRecords(input) {
+		return this.records.adoptRecords(input);
 	}
 	/** May this table be dropped AT ALL? Throws with the reason when not. */
 	async assertDroppable(collection) {
@@ -1407,6 +1707,8 @@ var DATABASE_FILE_NAMES = {
 var SqliteSettingsAddon = class extends BaseAddon {
 	settingsFile = null;
 	router = null;
+	sweepTimer = null;
+	sweepStart = null;
 	constructor() {
 		super({});
 	}
@@ -1463,12 +1765,19 @@ var SqliteSettingsAddon = class extends BaseAddon {
 		this.router = router;
 		const vectorIndex = settings.getVectorIndex();
 		if (vectorIndex === null) throw new Error("vector-store: the settings file has no vector index");
+		const records = new RecordsProvider(router, this.ctx.logger.child("Records"));
+		await records.init();
+		this.startRecordsSweep(records);
 		this.ctx.logger.info("Initialized successfully");
 		return [
 			{
 				capability: dataStoreProviderCapability,
 				provider: router
 			},
+			{
+				capability: recordsCapability,
+				provider: records
+			},
 			{
 				capability: vectorStoreCapability,
 				provider: vectorProviderOf(vectorIndex)
@@ -1479,7 +1788,7 @@ var SqliteSettingsAddon = class extends BaseAddon {
 			},
 			{
 				capability: storageAdminCapability,
-				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)))
+				provider: new StorageAdminProvider(settings.backend, this.ctx.logger.child("StorageAdmin"), async () => new Set((await this.ctx.api.addons.list.query()).map((addon) => addon.manifest.id)), records)
 			}
 		];
 	}
@@ -1496,7 +1805,31 @@ var SqliteSettingsAddon = class extends BaseAddon {
 		}
 		await purgeRetiredCollections(retiredCollectionStoreOfFile(file), this.ctx.logger.child("RetiredCollections").withTags({ database: file.databaseId }));
 	}
+	/**
+	* The engine's TTL sweep (D881): every 10 minutes, off the boot path (the
+	* first run a minute after boot), batched and yielding. A failed pass is
+	* warned about and the next one retries; it never blocks anything.
+	*/
+	startRecordsSweep(records) {
+		const run = () => {
+			records.sweepExpired().then((deleted) => {
+				if (deleted > 0) this.ctx.logger.info("records: expired rows swept", { meta: { deleted } });
+			}).catch((err) => {
+				this.ctx.logger.warn("records: expiry sweep failed", { meta: { error: errMsg(err) } });
+			});
+		};
+		this.sweepStart = setTimeout(() => {
+			run();
+			this.sweepTimer = setInterval(run, RECORD_SWEEP_INTERVAL_MS);
+			this.sweepTimer.unref();
+		}, 6e4);
+		this.sweepStart.unref();
+	}
 	async onShutdown() {
+		if (this.sweepStart !== null) clearTimeout(this.sweepStart);
+		if (this.sweepTimer !== null) clearInterval(this.sweepTimer);
+		this.sweepStart = null;
+		this.sweepTimer = null;
 		const files = this.router?.openFiles() ?? [];
 		for (const file of files.toReversed()) try {
 			await file.stop();

package/dist/builtins/sqlite-storage/storage-admin-provider.d.ts

@@ -7,13 +7,19 @@
 * capability's method, once the last hub ran `migrate-device-store.ts --drop`.
 */
 import { type IScopedLogger, type IStorageAdminProvider, type StorageTable } from "@camstack/types";
+import type { RecordsProvider } from "./records/records-provider.js";
 import type { SqliteSettingsBackend } from "./sqlite-settings-backend.js";
 export declare class StorageAdminProvider implements IStorageAdminProvider {
 	private readonly backend;
 	private readonly logger;
 	/** The addon ids installed on this hub; a throw means "cannot tell" and refuses the drop. */
 	private readonly installedOwners;
-	constructor(backend: SqliteSettingsBackend, logger: IScopedLogger, installedOwners: () => Promise<ReadonlySet<string>>);
+	/** The records provider the System -> Data and migration methods delegate to (D881). */
+	private readonly records;
+	constructor(backend: SqliteSettingsBackend, logger: IScopedLogger, installedOwners: () => Promise<ReadonlySet<string>>, records: Pick<RecordsProvider, "listKinds" | "readRecords" | "adoptRecords">);
+	listKinds(input: Parameters<IStorageAdminProvider["listKinds"]>[0]): ReturnType<IStorageAdminProvider["listKinds"]>;
+	readRecords(input: Parameters<IStorageAdminProvider["readRecords"]>[0]): ReturnType<IStorageAdminProvider["readRecords"]>;
+	adoptRecords(input: Parameters<IStorageAdminProvider["adoptRecords"]>[0]): ReturnType<IStorageAdminProvider["adoptRecords"]>;
 	/** May this table be dropped AT ALL? Throws with the reason when not. */
 	private assertDroppable;
 	listTables(input: {

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as StorageCleanupJobSchema, $t as gbToBytes, Ci as EventCategory, Cn as modeMayWrite, Fr as REDACTED_SECRET, Gr as collectSecretConfigKeys, Gt as evictionPolicyOfLocation, Hn as resolveLocationMode, Yn as settingsStoreCapability, _i as secretTreeFromPaths, ai as isSecretMarker, an as isLocationEnabled, bn as mayWriteToLocation, et as StorageLocationModeSchema, fn as legacyModeOf, hi as resolveSecretMarkers, jr as BaseAddon, mr as withLocationMode, nr as storageMigrationCapability, nt as StorageMigrationJobSchema, tr as storageCapability, tt as StorageLocationTypeSchema, ui as parseJsonObject, xi as transformSecretWrite, yn as mayReadLocation, z as LegacyStorageLocationDefaultSchema } from "../../dist-DsrQYcLm.mjs";
+import { $i as EventCategory, B as LegacyStorageLocationDefaultSchema, Fr as BaseAddon, Gn as resolveLocationMode, Ki as secretTreeFromPaths, Kt as evictionPolicyOfLocation, Qn as settingsStoreCapability, Ri as parseJsonObject, Wi as resolveSecretMarkers, Xr as REDACTED_SECRET, Zi as transformSecretWrite, _r as withLocationMode, ar as storageMigrationCapability, bn as mayReadLocation, en as gbToBytes, et as StorageCleanupJobSchema, hi as collectSecretConfigKeys, ir as storageCapability, ji as isSecretMarker, nt as StorageLocationTypeSchema, on as isLocationEnabled, pn as legacyModeOf, rt as StorageMigrationJobSchema, tt as StorageLocationModeSchema, wn as modeMayWrite, xn as mayWriteToLocation } from "../../dist-DERK-gP5.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { containsOrEquals, physicalRootOf } from "@camstack/types/node";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_x509_es = require("../../x509.es-C4cOo48M.js");
 const require_agent_https = require("../../agent-https-DlpTMDqA.js");
-const require_constants$8 = require("../../constants-b7kpjuO4.js");
+const require_constants$8 = require("../../constants-BXiNEIeV.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,9 +1,9 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Ar as errMsg, Jr as customAction, Xn as shortHostname, Yr as defineCustomActions, Z as ServerNameSchema, ei as hydrateSchema, jr as BaseAddon } from "../../dist-DsrQYcLm.mjs";
+import { $n as shortHostname, Ei as hydrateSchema, Fr as BaseAddon, Pr as errMsg, Q as ServerNameSchema, bi as customAction, xi as defineCustomActions } from "../../dist-DERK-gP5.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension } from "../../x509.es-DK__ETIe.mjs";
 import { F as AGENT_HTTPS_NAMES_COLLECTION, I as AGENT_HTTPS_NAMES_COLUMNS, L as AgentHttpsNames, R as getProcessAgentHttpsNames, j as isLocalOnlyHostname, u as isPrivateAddress, z as setProcessAgentHttpsNames } from "../../agent-https-U0d4uvn2.mjs";
-import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-2iWQ-Nx-.mjs";
+import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-BKX2QnIg.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, randomInt, sign, timingSafeEqual, verify, webcrypto } from "node:crypto";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CyIHDLCg.js");
+const require_dist = require("../../dist-D1vECb_6.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { gn as logDestinationCapability, jr as BaseAddon } from "../../dist-DsrQYcLm.mjs";
+import { Fr as BaseAddon, _n as logDestinationCapability } from "../../dist-DERK-gP5.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-CftPpY4O.mjs → composition-sources-C3rKncIF.mjs}

@@ -1,4 +1,4 @@
-import { Ar as errMsg, Cr as compositionSourceKey } from "./dist-DsrQYcLm.mjs";
+import { Dr as compositionSourceKey, Pr as errMsg } from "./dist-DERK-gP5.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-DmSEMtUD.js → composition-sources-NAPZddic.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CyIHDLCg.js");
+const require_dist = require("./dist-D1vECb_6.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-2iWQ-Nx-.mjs → constants-BKX2QnIg.mjs}

@@ -1,4 +1,4 @@
-import { Wr as buildSecretRef } from "./dist-DsrQYcLm.mjs";
+import { mi as buildSecretRef } from "./dist-DERK-gP5.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{constants-b7kpjuO4.js → constants-BXiNEIeV.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-CyIHDLCg.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-D1vECb_6.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{device-ca-tKY_ZS9H.js → device-ca-DT9X2S6d.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CyIHDLCg.js");
+const require_dist = require("./dist-D1vECb_6.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-BJpYTAPg.mjs → device-ca-jxjSL8Ov.mjs}

@@ -1,4 +1,4 @@
-import { D as DEVICE_SAN_CREDENTIAL_PREFIX, O as DEVICE_SAN_USER_PREFIX, Wr as buildSecretRef } from "./dist-DsrQYcLm.mjs";
+import { O as DEVICE_SAN_CREDENTIAL_PREFIX, k as DEVICE_SAN_USER_PREFIX, mi as buildSecretRef } from "./dist-DERK-gP5.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-DK__ETIe.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts