@camstack/system 1.2.445 → 1.2.446

package/dist/{dist-BNunRyXT.mjs → dist-CkZIrsAP.mjs}

@@ -736,7 +736,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-bZIhUvjd.mjs
+//#region ../types/dist/sleep-BOjuyoPC.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -4772,9 +4772,10 @@ function customAction(input, output, options) {
 * owner check, device-history's `not-owner`, records' owner).
 *
 * The stamp is set ONLY by the transport (`stampCallerAddonId`, or stated by a
-* hub in-process caller). The generated HTTP/tRPC mount parses input with
-* `.loose()`, so without this a session could add the key itself and act as
-* another addon. The mount strips it for these caps.
+* hub in-process caller). HTTP/WS mounts parse input with `.loose()`, so a
+* session could add the key itself and act as another addon — those procedures
+* strip it when `ctx.req` is present. Mesh / `$core-caps` calls have no request;
+* the transport stamp must survive to the provider.
 */
 var CALLER_STAMPED_CAPABILITIES = [
 	"keychain",
@@ -5076,7 +5077,7 @@ function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
 }
 //#endregion
-//#region ../types/dist/err-msg--2RrYiLO.mjs
+//#region ../types/dist/err-msg-BXKzRBwg.mjs
 var DeviceType = /* @__PURE__ */ function(DeviceType) {
 	DeviceType["Camera"] = "camera";
 	DeviceType["Hub"] = "hub";
@@ -5168,6 +5169,10 @@ var DeviceType = /* @__PURE__ */ function(DeviceType) {
 	*  native PetKit (`nodepetkit` `FeederDevice`), reusable by other feeder
 	*  integrations sharing the same food/desiccant/hopper surface. */
 	DeviceType["PetFeeder"] = "pet-feeder";
+	/** Built-in dishwasher — program lifecycle, door / remote-start gates,
+	*  salt and rinse-aid levels. Installed with the `dishwasher` cap.
+	*  Sources: native Bosch Home Connect, reusable by similar integrations. */
+	DeviceType["Dishwasher"] = "dishwasher";
 	return DeviceType;
 }({});
 var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
@@ -5425,7 +5430,7 @@ function errMsg(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-DOwQB_Ua.mjs
+//#region ../types/dist/composition-CB6PMT9p.mjs
 var AUDIO_ENCODER_BY_CODEC = {
 	opus: "libopus",
 	aac: "aac",
@@ -11255,8 +11260,13 @@ var AlertSeveritySchema = z.enum([
 	"info",
 	"success",
 	"warning",
-	"error"
+	"error",
+	"critical"
 ]);
+var AlertActionSchema = z.object({
+	label: z.string(),
+	href: z.string().optional()
+});
 var AlertStatusSchema = z.enum([
 	"active",
 	"in-progress",
@@ -11274,6 +11284,7 @@ var AlertSchema = z.object({
 	severity: AlertSeveritySchema,
 	title: z.string(),
 	message: z.string(),
+	action: AlertActionSchema.optional(),
 	status: AlertStatusSchema,
 	progress: z.number().optional(),
 	read: z.boolean(),
@@ -59452,7 +59463,8 @@ var batteryCapability = {
 		DeviceType.Button,
 		DeviceType.Switch,
 		DeviceType.PetFeeder,
-		DeviceType.Container
+		DeviceType.Container,
+		DeviceType.Thermostat
 	],
 	methods: { 
 	/**
@@ -61076,6 +61088,125 @@ onStatusChanged: { data: z.object({
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
 };
+/**
+* Smart-dishwasher cap — program lifecycle, door / remote-start gates,
+* consumable levels (salt, rinse aid) and common program options.
+*
+* Sources: native Bosch Home Connect (`dishwasher` device type). Reusable
+* by any integration that exposes the same program / option surface.
+*
+* `kind: 'poll'` — cloud REST APIs typically have no push channel; the
+* provider refreshes the slice on an interval and eagerly after commands.
+*/
+var DishwasherStateSchema = z.enum([
+	"idle",
+	"running",
+	"paused",
+	"finished",
+	"error",
+	"unavailable"
+]);
+var DishwasherConsumableLevelSchema = z.enum([
+	"ok",
+	"low",
+	"empty"
+]);
+var DishwasherStatusSchema = z.object({
+	state: DishwasherStateSchema,
+	/** Active program id/name, or null when none selected / unknown. */
+	program: z.string().nullable(),
+	/** Program tokens the hardware accepts — drives the UI selector. */
+	availablePrograms: z.array(z.string()),
+	/** Minutes remaining on the active cycle, or null when not running. */
+	remainingMinutes: z.number().int().nonnegative().nullable(),
+	/** Cycle completion 0..100, or null when not applicable. */
+	progressPercent: z.number().min(0).max(100).nullable(),
+	/** True when the door is reported open. */
+	doorOpen: z.boolean(),
+	/** True when remote start is allowed (door closed, power on, etc.). */
+	remoteStartAllowed: z.boolean(),
+	/** Main power / switched-on state. */
+	powerOn: z.boolean(),
+	saltLevel: DishwasherConsumableLevelSchema.nullable(),
+	rinseAidLevel: DishwasherConsumableLevelSchema.nullable(),
+	halfLoad: z.boolean(),
+	hygienePlus: z.boolean(),
+	errorCode: z.number().nullable(),
+	errorLabel: z.string().nullable(),
+	lastFetchedAt: z.number()
+});
+var dishwasherCapability = {
+	name: "dishwasher",
+	scope: "device",
+	deviceNative: true,
+	mode: "singleton",
+	deviceTypes: [DeviceType.Dishwasher],
+	methods: {
+		start: method(z.object({ deviceId: z.number().int().nonnegative() }), z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		pause: method(z.object({ deviceId: z.number().int().nonnegative() }), z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		stop: method(z.object({ deviceId: z.number().int().nonnegative() }), z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		setProgram: method(z.object({
+			deviceId: z.number().int().nonnegative(),
+			program: z.string().min(1)
+		}), z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		setPower: method(z.object({
+			deviceId: z.number().int().nonnegative(),
+			on: z.boolean()
+		}), z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		setHalfLoad: method(z.object({
+			deviceId: z.number().int().nonnegative(),
+			on: z.boolean()
+		}), z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		setHygienePlus: method(z.object({
+			deviceId: z.number().int().nonnegative(),
+			on: z.boolean()
+		}), z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		setOption: method(z.object({
+			deviceId: z.number().int().nonnegative(),
+			key: z.string().min(1),
+			value: z.union([
+				z.boolean(),
+				z.string(),
+				z.number()
+			])
+		}), z.void(), {
+			kind: "mutation",
+			auth: "protected"
+		})
+	},
+	status: {
+		schema: DishwasherStatusSchema,
+		kind: "poll"
+	},
+	runtimeState: DishwasherStatusSchema,
+	durability: "session",
+	history: { fields: { progressPercent: {
+		kind: "gauge",
+		unit: "%",
+		deadband: 2
+	} } }
+};
 var DoorbellStatusSchema = z.object({
 	/** Ms epoch of the last press. null = never observed since this provider started. */
 	lastPressedAt: z.number().nullable(),
@@ -61917,6 +62048,32 @@ var gasCapability = {
 	*  whether persisting is worth a SQLite commit. */
 	volatileStateFields: ["lastChangedAt"]
 };
+var HeatingValveStatusSchema = z.object({
+	/** Radiator valve opening 0 (closed) .. 100 (open). Null = not yet known. */
+	position: z.number().min(0).max(100).nullable(),
+	/** Ms epoch when the slice was last updated (push or poll). */
+	lastFetchedAt: z.number()
+});
+var heatingValveCapability = {
+	name: "heating-valve",
+	scope: "device",
+	deviceNative: true,
+	mode: "singleton",
+	deviceTypes: [DeviceType.Thermostat],
+	methods: {},
+	status: {
+		schema: HeatingValveStatusSchema,
+		kind: "push"
+	},
+	runtimeState: HeatingValveStatusSchema,
+	durability: "session",
+	history: { fields: { position: {
+		kind: "gauge",
+		unit: "%",
+		deadband: 1
+	} } },
+	volatileStateFields: ["lastFetchedAt"]
+};
 /**
 * Humidifier / dehumidifier cap. Models HA `humidifier.*` entities —
 * an on/off actuator with an optional target-humidity setpoint and an
@@ -73428,6 +73585,7 @@ var DEVICE_LOCAL_STATE_CAPS = {
 	dayNight: dayNightCapability,
 	deviceDiscovery: deviceDiscoveryCapability,
 	deviceStatus: deviceStatusCapability,
+	dishwasher: dishwasherCapability,
 	doorbell: doorbellCapability,
 	enumSensor: enumSensorCapability,
 	eventEmitter: eventEmitterCapability,
@@ -73435,6 +73593,7 @@ var DEVICE_LOCAL_STATE_CAPS = {
 	featureProbe: featureProbeCapability,
 	flood: floodCapability,
 	gas: gasCapability,
+	heatingValve: heatingValveCapability,
 	humidifier: humidifierCapability,
 	humiditySensor: humiditySensorCapability,
 	image: imageCapability,
@@ -74469,7 +74628,7 @@ var DeclaredDevices = class {
 		return removed;
 	}
 };
-DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
+DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.Dishwasher;
 new Set(Object.values(DeviceType));
 var METHOD_ACCESS_MAP = Object.freeze({
 	"accessories.getStatus": {
@@ -76890,6 +77049,60 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"dishwasher.getStatus": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
+	"dishwasher.pause": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
+	"dishwasher.setHalfLoad": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
+	"dishwasher.setHygienePlus": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
+	"dishwasher.setOption": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
+	"dishwasher.setPower": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
+	"dishwasher.setProgram": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
+	"dishwasher.start": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
+	"dishwasher.stop": {
+		capName: "dishwasher",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"doorbell.getStatus": {
 		capName: "doorbell",
 		capScope: "device",
@@ -77100,6 +77313,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"heatingValve.getStatus": {
+		capName: "heating-valve",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"humidifier.getStatus": {
 		capName: "humidifier",
 		capScope: "device",
@@ -82687,7 +82906,7 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		access: "create"
 	}
 });
-DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
+DeviceType.Camera, DeviceType.Hub, DeviceType.Light, DeviceType.Siren, DeviceType.Switch, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Fan, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder, DeviceType.Dishwasher;
 DeviceFeature.BatteryOperated;
 /**
 * Runtime list of cap names with status. Used by the settings
@@ -82718,6 +82937,7 @@ var CAP_NAMES_WITH_STATUS = [
 	"device-discovery",
 	"device-export",
 	"device-status",
+	"dishwasher",
 	"doorbell",
 	"enum-sensor",
 	"event-emitter",
@@ -82725,6 +82945,7 @@ var CAP_NAMES_WITH_STATUS = [
 	"feature-probe",
 	"flood",
 	"gas",
+	"heating-valve",
 	"humidifier",
 	"humidity-sensor",
 	"image",
@@ -82839,6 +83060,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	deviceRemovalHookCapability,
 	deviceStateCapability,
 	deviceStatusCapability,
+	dishwasherCapability,
 	doorbellCapability,
 	embeddingEncoderCapability,
 	enumSensorCapability,
@@ -82850,6 +83072,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	filesystemBrowseCapability,
 	floodCapability,
 	gasCapability,
+	heatingValveCapability,
 	humidifierCapability,
 	humiditySensorCapability,
 	imageCapability,
@@ -83778,6 +84001,51 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"dishwasher.getStatus": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dishwasher.pause": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dishwasher.setHalfLoad": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dishwasher.setHygienePlus": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dishwasher.setOption": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dishwasher.setPower": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dishwasher.setProgram": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dishwasher.start": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dishwasher.stop": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"doorbell.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -83847,6 +84115,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"heatingValve.getStatus": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"humidifier.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -85672,7 +85945,7 @@ Object.freeze({
 });
 /**
 * Per-cap runtime-state policy, projected from every `*.cap.ts` that declares
-* `runtimeState`. 69 caps: 37 `restored`, 32 `session`.
+* `runtimeState`. 71 caps: 37 `restored`, 34 `session`.
 *
 * A cap absent from this map has no runtime-state slice at all. A cap PRESENT
 * with `durability: 'session'` has one and has decided not to keep it.
@@ -85758,6 +86031,10 @@ var RUNTIME_STATE_POLICY = {
 		durability: "restored",
 		volatileFields: ["lastChangedAt"]
 	},
+	"dishwasher": {
+		durability: "session",
+		volatileFields: []
+	},
 	"doorbell": {
 		durability: "restored",
 		volatileFields: []
@@ -85786,6 +86063,10 @@ var RUNTIME_STATE_POLICY = {
 		durability: "restored",
 		volatileFields: ["lastChangedAt"]
 	},
+	"heating-valve": {
+		durability: "session",
+		volatileFields: ["lastFetchedAt"]
+	},
 	"humidifier": {
 		durability: "session",
 		volatileFields: []

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-CODGqhKY.js");
+const require_wal_maintenance = require("./wal-maintenance-CuG1DUca.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as callControl, D as controlTargetOf, E as callVector, S as RecordsEngine, T as callRecords, a as WalMaintenance, b as trustInput, c as SqliteSettingsBackend, g as collectTransferables, m as serializeError, o as createVectorIndex, s as vectorProviderOf, v as isFileHostRequest, w as callData, y as isFileHostWorkerData } from "./wal-maintenance-CfvgtQ7C.mjs";
+import { C as callControl, D as controlTargetOf, E as callVector, S as RecordsEngine, T as callRecords, a as WalMaintenance, b as trustInput, c as SqliteSettingsBackend, g as collectTransferables, m as serializeError, o as createVectorIndex, s as vectorProviderOf, v as isFileHostRequest, w as callData, y as isFileHostWorkerData } from "./wal-maintenance-Bqm4zrNA.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{hub-mdns-ciao-D16oRQ9K.mjs → hub-mdns-ciao-CoyIUWHC.mjs}

@@ -1,7 +1,7 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { sa as userError } from "./dist-BNunRyXT.mjs";
+import { sa as userError } from "./dist-CkZIrsAP.mjs";
 import { f as X509Certificate$1 } from "./x509.es-DK__ETIe.mjs";
-import { A as isConstrainedCa, E as reasonRequiresNewCa, M as permitsIdentity, P as readNameConstraints, T as evaluateExistingCert, _ as issueLeaf, g as generateCa, v as loadCa, y as collectCertIdentity } from "./agent-https-D4Q8iFNd.mjs";
+import { A as isConstrainedCa, E as reasonRequiresNewCa, M as permitsIdentity, P as readNameConstraints, T as evaluateExistingCert, _ as issueLeaf, g as generateCa, v as loadCa, y as collectCertIdentity } from "./agent-https-BWUEf6ev.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/{hub-mdns-ciao-BIkTHq-n.js → hub-mdns-ciao-m5LIr4oA.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DgOG8flk.js");
+const require_dist = require("./dist-BkNfEJKa.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
-const require_agent_https = require("./agent-https-CiOW0-sj.js");
+const require_agent_https = require("./agent-https-5DYAOJMO.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/index.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DgOG8flk.js");
+const require_dist = require("./dist-BkNfEJKa.js");
 const require_read_all_rows$1 = require("./read-all-rows-CVoO1ONM.js");
-const require_device_ca = require("./device-ca-CnJ_va7i.js");
+const require_device_ca = require("./device-ca-CnbrgfmW.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -26,21 +26,21 @@ require("./builtins/local-auth/index.js");
 const require_builtins_loki_logging_index = require("./builtins/loki-logging/index.js");
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-CODGqhKY.js");
+const require_wal_maintenance = require("./wal-maintenance-CuG1DUca.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_constants = require("./constants-Br879Axi.js");
-const require_agent_https = require("./agent-https-CiOW0-sj.js");
+const require_constants = require("./constants-DA_tjzIk.js");
+const require_agent_https = require("./agent-https-5DYAOJMO.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_custom_action_registry = require("./custom-action-registry-COyb49zm.js");
-const require_hub_mdns_ciao = require("./hub-mdns-ciao-BIkTHq-n.js");
+const require_hub_mdns_ciao = require("./hub-mdns-ciao-m5LIr4oA.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-DjJnCgap.js");
+const require_restore_archive = require("./restore-archive-B57xI5Ue.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
@@ -11600,7 +11600,8 @@ function buildOneCapRouter(def, primitives, services) {
 			const stampedCap = require_dist.CALLER_STAMPED_CAPABILITIES.includes(capName);
 			const schema = nodeIdData ? inputSchema : require_dist.looseSchema(inputSchema);
 			procedures[method.name] = base.input(schema)[procKind](({ input: wireInput, ctx }) => {
-				const input = stampedCap ? require_dist.withoutCallerStamp(wireInput) : wireInput;
+				const hasHttpReq = typeof ctx === "object" && ctx !== null && "req" in ctx && ctx.req !== void 0;
+				const input = stampedCap && hasHttpReq ? require_dist.withoutCallerStamp(wireInput) : wireInput;
 				if (nodeIdData) return invokeCapMethod(requireLocal(capName, () => getLocal(ctx), services), method, method.callerRequired ? injectCaller(stripKeys(input, []).rest, ctx, capName, method.name, services) : input, capName, isCollection, services);
 				if (isCollection) {
 					const { rest, picked } = stripKeys(input, ["nodeId", "addonId"]);

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { i as __require } from "./chunk-CNf5ZN-e.mjs";
-import { $n as scopesAllowAddon, $t as extractNestedAddonId, Ai as expandCapMethods, Br as CALLER_STAMPED_CAPABILITIES$1, Ci as createEvent$1, Cn as looseSchema, Di as defineRecordKinds, Gi as parseJsonObject, H as LOG_LEVEL_RANK, Hr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Ki as parseJsonUnknown, Lr as errMsg$1, Mn as objectInputDeclaresAddonId, Nn as objectInputDeclaresRequiredDeviceId, Oi as emitDownForOwnedCaps, Qi as resolveCapMount, Rn as procedureAuthKey, Sn as logLevelAtMost, Ur as DEVICE_STATUS_METHOD, Vr as DATAPLANE_SECRET_HEADER$1, W as METHOD_ACCESS_MAP, Xi as readinessKey, Xn as resolveMethodAuth, _ as CatalogFileSchema, an as interpolate, ca as withoutCallerStamp, cn as isCollectionArrayMethod, d as CATALOG_LANGS, dn as isObjectInput, ea as scopeKey, er as scopesAllowDeviceCap, fn as isVoidInput, gi as asString$1, hi as asNumber, ii as ReadinessTimeoutError, la as EventCategory$1, mi as asJsonObject$1, mr as supportedRuntimes, n as AGENT_MDNS_TXT_KEYS, ni as RUNTIME_DEFAULTS, or as splitTranslationRef, pn as kebabToCamel$1, r as ALL_CAPABILITY_DEFINITIONS, ri as ReadinessRegistry, sa as userError, sn as isArrayOutputSchema, t as AGENT_MDNS_SERVICE_TYPE, ut as addonSettingsCapability, vn as lifecycleJobSchema } from "./dist-BNunRyXT.mjs";
+import { $n as scopesAllowAddon, $t as extractNestedAddonId, Ai as expandCapMethods, Br as CALLER_STAMPED_CAPABILITIES$1, Ci as createEvent$1, Cn as looseSchema, Di as defineRecordKinds, Gi as parseJsonObject, H as LOG_LEVEL_RANK, Hr as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Ki as parseJsonUnknown, Lr as errMsg$1, Mn as objectInputDeclaresAddonId, Nn as objectInputDeclaresRequiredDeviceId, Oi as emitDownForOwnedCaps, Qi as resolveCapMount, Rn as procedureAuthKey, Sn as logLevelAtMost, Ur as DEVICE_STATUS_METHOD, Vr as DATAPLANE_SECRET_HEADER$1, W as METHOD_ACCESS_MAP, Xi as readinessKey, Xn as resolveMethodAuth, _ as CatalogFileSchema, an as interpolate, ca as withoutCallerStamp, cn as isCollectionArrayMethod, d as CATALOG_LANGS, dn as isObjectInput, ea as scopeKey, er as scopesAllowDeviceCap, fn as isVoidInput, gi as asString$1, hi as asNumber, ii as ReadinessTimeoutError, la as EventCategory$1, mi as asJsonObject$1, mr as supportedRuntimes, n as AGENT_MDNS_TXT_KEYS, ni as RUNTIME_DEFAULTS, or as splitTranslationRef, pn as kebabToCamel$1, r as ALL_CAPABILITY_DEFINITIONS, ri as ReadinessRegistry, sa as userError, sn as isArrayOutputSchema, t as AGENT_MDNS_SERVICE_TYPE, ut as addonSettingsCapability, vn as lifecycleJobSchema } from "./dist-CkZIrsAP.mjs";
 import { t as require_read_all_rows } from "./read-all-rows-TaPqdWNF.mjs";
-import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-T8osSMos.mjs";
+import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-Bh_ClxMO.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
@@ -25,21 +25,21 @@ import "./builtins/local-auth/index.mjs";
 import { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index.mjs";
 import NativeMetricsAddon, { a as NativeMetricsProvider, n as nodeProcReader, r as parseProcStat } from "./builtins/native-metrics/native-metrics.addon.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
-import { c as SqliteSettingsBackend } from "./wal-maintenance-CfvgtQ7C.mjs";
+import { c as SqliteSettingsBackend } from "./wal-maintenance-Bqm4zrNA.mjs";
 import { SqliteSettingsAddon } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
 import { StorageOrchestratorAddon, a as stripForwardedCaller, i as createHubCapForwardService, l as STORAGE_DRAIN_STATE_LEGACY, n as HUB_CAP_FWD_ACTION, o as buildStorageLocationRegistry, r as HUB_CAP_FWD_SERVICE, t as StorageOrchestratorService, u as storageOrchestratorRecordKinds } from "./builtins/storage-orchestrator/storage-orchestrator.addon.mjs";
 import "./builtins/storage-orchestrator/index.mjs";
-import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-BMHCxRzb.mjs";
-import { $ as generateMeshKeyPair, A as isConstrainedCa, C as MAX_LEAF_VALIDITY_DAYS, D as PERMITTED_DNS_SUFFIXES, F as AGENT_HTTPS_NAMES_COLLECTION, G as describeMeshLeaf, H as MESH_NODE_CERTIFICATES_COLUMNS, I as AGENT_HTTPS_NAMES_COLUMNS, J as caFingerprint, K as getProcessMeshCertificateRegistry, L as AgentHttpsNames, M as permitsIdentity, N as permitsName, O as PERMITTED_IP_RANGES, P as readNameConstraints, Q as generateMeshCa, R as getProcessAgentHttpsNames, S as LEAF_RENEWAL_WINDOW_DAYS, T as evaluateExistingCert, U as MeshCertificateRegistry, V as MESH_NODE_CERTIFICATES_COLLECTION, W as RENEWAL_ABANDONED, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, a as collectAgentNames, b as systemHostFacts, c as installAgentHttps, d as issueAgentHttpsLeaf, et as isValidAgentNodeId, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isLocalOnlyHostname, k as buildNameConstraintSet, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, nt as issueMeshLeafFromCsr, o as createAgentHttpsRequest, p as pemDigest, q as setProcessMeshCertificateRegistry, r as agentHttpsPaths, rt as loadMeshCa, s as describeHttpsLeaf, t as AgentHttpsInstallError, tt as issueMeshLeafForNode, u as isPrivateAddress, w as SERVER_AUTH_OID, x as CA_VALIDITY_DAYS, y as collectCertIdentity, z as setProcessAgentHttpsNames } from "./agent-https-D4Q8iFNd.mjs";
+import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-6XHGmEUF.mjs";
+import { $ as generateMeshKeyPair, A as isConstrainedCa, C as MAX_LEAF_VALIDITY_DAYS, D as PERMITTED_DNS_SUFFIXES, F as AGENT_HTTPS_NAMES_COLLECTION, G as describeMeshLeaf, H as MESH_NODE_CERTIFICATES_COLUMNS, I as AGENT_HTTPS_NAMES_COLUMNS, J as caFingerprint, K as getProcessMeshCertificateRegistry, L as AgentHttpsNames, M as permitsIdentity, N as permitsName, O as PERMITTED_IP_RANGES, P as readNameConstraints, Q as generateMeshCa, R as getProcessAgentHttpsNames, S as LEAF_RENEWAL_WINDOW_DAYS, T as evaluateExistingCert, U as MeshCertificateRegistry, V as MESH_NODE_CERTIFICATES_COLLECTION, W as RENEWAL_ABANDONED, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, a as collectAgentNames, b as systemHostFacts, c as installAgentHttps, d as issueAgentHttpsLeaf, et as isValidAgentNodeId, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isLocalOnlyHostname, k as buildNameConstraintSet, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, nt as issueMeshLeafFromCsr, o as createAgentHttpsRequest, p as pemDigest, q as setProcessMeshCertificateRegistry, r as agentHttpsPaths, rt as loadMeshCa, s as describeHttpsLeaf, t as AgentHttpsInstallError, tt as issueMeshLeafForNode, u as isPrivateAddress, w as SERVER_AUTH_OID, x as CA_VALIDITY_DAYS, y as collectCertIdentity, z as setProcessAgentHttpsNames } from "./agent-https-BWUEf6ev.mjs";
 import { $ as parseCidrList, A as setProcessMeshPeerTransportLookup, B as requireProcessMeshCa, C as setProcessMeshTlsEnabler, D as getProcessPeerLeaf, E as getProcessNodeMeshTransport, F as setProcessMeshTlsListenerState, G as AGENT_UI_UNLOCK_VERSION, H as AGENT_UI_UNLOCK_TTL_MS, I as MeshCrl, J as mintAgentUiUnlockTicket, K as UnlockTicketJtiStore, L as processMeshCrl, M as revokeMeshCertificate, N as getProcessMeshTlsListenerState, O as isProcessVerifiedMeshPeer, P as openMeshTlsWhenRevocationsLoaded, Q as normalizeIp, R as MeshCaKeeper, S as ServiceBroker, SystemConfigAddon, T as emitProcessNodeRegistered, U as AGENT_UI_UNLOCK_TYP, V as AGENT_DASHBOARD_ORIGINS_FIELD, W as AGENT_UI_UNLOCK_USE, X as verifyAgentUiUnlockTicket, Y as parseAgentDashboardOrigins, Z as createCidrMatcher, _ as signPairingProof, a as hubHostFromMeshAddress, b as TlsTcpTransporter, c as PAIRING_MAX_SESSIONS, d as PAIRING_PROTOCOL, et as readCidrSetting, f as PAIRING_TTL_MS, g as keyFingerprintShort, h as describeCsr, i as AgentPairing, j as renewMeshCertificate, k as onProcessNodeRegistered, l as PAIRING_PATHS, m as computePairingSas, n as HubPairing, o as PAIRING_CODE_DIGITS, p as computePairingCommitment, q as isAllowedAgentDashboardReturnTo, r as PairingHttpError, s as PAIRING_MAX_CODE_ATTEMPTS, u as PAIRING_PIN_DIGITS, v as verifyPairingProof, w as dropProcessPeer, x as Errors, y as MESH_TLS_PORT_HELLO_FIELD, z as getProcessMeshCaState } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { C as isModelDownloaded, T as revisionWeightUrl, _ as downloadFile, a as startEventLoopStallMonitor, b as fetchJson, c as createAuthenticatedFileServer, d as resolveFilePath, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, u as parseTokenizedUrl, v as downloadModel, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-stpC3Zy-.mjs";
-import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-D16oRQ9K.mjs";
+import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-CoyIUWHC.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Di9daRwI.mjs";
-import { c as backupOrchestratorRecordKinds, f as BackupDecryptError, g as generateBackupKeyPair, l as backupRecordStoresOf, m as BackupKeyMismatchError, p as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, v as readBackupEncryptionHeader } from "./restore-archive-DR9MtO7J.mjs";
+import { c as backupOrchestratorRecordKinds, f as BackupDecryptError, g as generateBackupKeyPair, l as backupRecordStoresOf, m as BackupKeyMismatchError, p as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, v as readBackupEncryptionHeader } from "./restore-archive-CMr4V7Fi.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
@@ -11597,7 +11597,8 @@ function buildOneCapRouter(def, primitives, services) {
 			const stampedCap = CALLER_STAMPED_CAPABILITIES$1.includes(capName);
 			const schema = nodeIdData ? inputSchema : looseSchema(inputSchema);
 			procedures[method.name] = base.input(schema)[procKind](({ input: wireInput, ctx }) => {
-				const input = stampedCap ? withoutCallerStamp(wireInput) : wireInput;
+				const hasHttpReq = typeof ctx === "object" && ctx !== null && "req" in ctx && ctx.req !== void 0;
+				const input = stampedCap && hasHttpReq ? withoutCallerStamp(wireInput) : wireInput;
 				if (nodeIdData) return invokeCapMethod(requireLocal(capName, () => getLocal(ctx), services), method, method.callerRequired ? injectCaller(stripKeys(input, []).rest, ctx, capName, method.name, services) : input, capName, isCollection, services);
 				if (isCollection) {
 					const { rest, picked } = stripKeys(input, ["nodeId", "addonId"]);

package/dist/{phase6-declare-gate-tkKOEitw.mjs → phase6-declare-gate-BDWZuB2n.mjs}

@@ -1,4 +1,4 @@
-import { Ti as declarationsOf } from "./dist-BNunRyXT.mjs";
+import { Ti as declarationsOf } from "./dist-CkZIrsAP.mjs";
 //#region src/builtins/records/legacy-table-row-count.ts
 /** Row count for a physical settings-db table (matches the records engine `legacyRowCount`). */
 function legacyTableRowCountFromList(tables, collection) {

package/dist/{phase6-declare-gate-Ci1-8uUn.js → phase6-declare-gate-Bl7KocEs.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DgOG8flk.js");
+const require_dist = require("./dist-BkNfEJKa.js");
 //#region src/builtins/records/legacy-table-row-count.ts
 /** Row count for a physical settings-db table (matches the records engine `legacyRowCount`). */
 function legacyTableRowCountFromList(tables, collection) {

package/dist/{restore-archive-DjJnCgap.js → restore-archive-B57xI5Ue.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DgOG8flk.js");
+const require_dist = require("./dist-BkNfEJKa.js");
 const require_read_all_rows$1 = require("./read-all-rows-CVoO1ONM.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/{restore-archive-DR9MtO7J.mjs → restore-archive-CMr4V7Fi.mjs}

@@ -1,4 +1,4 @@
-import { A as DataStoreDatabaseSchema, Di as defineRecordKinds, b as DATABASE_SNAPSHOT_SUFFIX } from "./dist-BNunRyXT.mjs";
+import { A as DataStoreDatabaseSchema, Di as defineRecordKinds, b as DATABASE_SNAPSHOT_SUFFIX } from "./dist-CkZIrsAP.mjs";
 import { t as require_read_all_rows } from "./read-all-rows-TaPqdWNF.mjs";
 import { z } from "zod";
 import { createCipheriv, createDecipheriv, createHash, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes } from "node:crypto";