@camstack/system 1.2.453 → 1.2.454

package/dist/builtins/storage-orchestrator/storage-orchestrator.service.d.ts

@@ -75,6 +75,11 @@ export interface StorageDispatchTarget {
 }
 /** The two chunked-I/O session families the orchestrator tracks. */
 export type StorageSessionKind = "upload" | "download";
+/** What a {@link StorageOrchestratorService.seedDefaults} pass did. */
+export type SeedOutcome = {
+	readonly added: number;
+	readonly deferred?: "store-not-answered" | "provider-unclassified";
+};
 export declare class StorageOrchestratorService {
 	private readonly logger;
 	private readonly getProviders;
@@ -136,6 +141,26 @@ export declare class StorageOrchestratorService {
 	* to touch — its bytes, and its free space, live elsewhere.
 	*/
 	getLocalNodeId(): string;
+	/**
+	* Whether a seed must wait for an ANSWERED read of the store (D49). True on a
+	* node whose locations live in a store: seeding before that read lands writes
+	* defaults the store's own rows (not yet adopted, or not yet read) then
+	* contradict. False on a node that has no store by design — it seeds in memory
+	* at every boot.
+	*/
+	private storeRequiredForSeed;
+	setStoreRequiredForSeed(required: boolean): void;
+	/**
+	* The location types a default was ever seeded for — null when the store
+	* cannot remember (then a type with no row is seeded, as before). What makes
+	* an operator's delete of a seeded default STICK: zero rows today is not
+	* "fresh install", it is only fresh when nothing was ever seeded.
+	*/
+	private seededTypes;
+	/** The store held locations but no seed memory: an install older than the memory. */
+	private installPredatesSeedMemory;
+	private loadSeedMemory;
+	private rememberSeeded;
 	/** True once a persistence store is wired (constructor or {@link attachStore}). */
 	hasStore(): boolean;
 	/**
@@ -430,7 +455,7 @@ export declare class StorageOrchestratorService {
 		*/
 		readonly backupBasePath?: string;
 		readonly declarations: readonly StorageLocationDeclaration[];
-	}): void;
+	}): SeedOutcome;
 	/**
 	* The same-type physical-root refusal (D389).
 	*

package/dist/builtins/system-config/system-config.addon.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DyjNaeIj.js");
+const require_dist = require("../../dist-Bi4Ioxop.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_x509_es = require("../../x509.es-C4cOo48M.js");
-const require_constants$8 = require("../../constants-B3fDUnJt.js");
-const require_agent_https = require("../../agent-https-DL2cFOQv.js");
+const require_constants$8 = require("../../constants-DBGG6Zu5.js");
+const require_agent_https = require("../../agent-https-B7IjRRzT.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,9 +1,9 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Hr as BaseAddon, Li as hydrateSchema, Vr as errMsg, ji as defineCustomActions, ki as customAction, nt as ServerNameSchema, sr as shortHostname } from "../../dist-B9C2v4SG.mjs";
+import { Fi as defineCustomActions, Gr as errMsg, Kr as BaseAddon, Ni as customAction, Vi as hydrateSchema, dr as shortHostname, nt as ServerNameSchema } from "../../dist-7ZciHCIp.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { c as Pkcs10CertificateRequest } from "../../x509.es-DK__ETIe.mjs";
-import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "../../constants-DGBB3tNi.mjs";
-import { $ as generateMeshKeyPair, B as systemConfigRecordKinds, F as AGENT_HTTPS_NAMES_COLLECTION, G as describeMeshLeaf, H as MESH_NODE_CERTIFICATES_COLUMNS, I as AGENT_HTTPS_NAMES_COLUMNS, L as AgentHttpsNames, Q as generateMeshCa, R as getProcessAgentHttpsNames, U as MeshCertificateRegistry, V as MESH_NODE_CERTIFICATES_COLLECTION, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, et as isValidAgentNodeId, it as subjectCn, j as isLocalOnlyHostname, nt as issueMeshLeafFromCsr, q as setProcessMeshCertificateRegistry, rt as loadMeshCa, tt as issueMeshLeafForNode, u as isPrivateAddress, z as setProcessAgentHttpsNames } from "../../agent-https-XAZFJjOS.mjs";
+import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "../../constants-DQcVrhVI.mjs";
+import { $ as generateMeshKeyPair, B as systemConfigRecordKinds, F as AGENT_HTTPS_NAMES_COLLECTION, G as describeMeshLeaf, H as MESH_NODE_CERTIFICATES_COLUMNS, I as AGENT_HTTPS_NAMES_COLUMNS, L as AgentHttpsNames, Q as generateMeshCa, R as getProcessAgentHttpsNames, U as MeshCertificateRegistry, V as MESH_NODE_CERTIFICATES_COLLECTION, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, et as isValidAgentNodeId, it as subjectCn, j as isLocalOnlyHostname, nt as issueMeshLeafFromCsr, q as setProcessMeshCertificateRegistry, rt as loadMeshCa, tt as issueMeshLeafForNode, u as isPrivateAddress, z as setProcessAgentHttpsNames } from "../../agent-https-oXsR24R2.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, randomInt, sign, timingSafeEqual, verify, webcrypto } from "node:crypto";

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DyjNaeIj.js");
+const require_dist = require("../../dist-Bi4Ioxop.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Hr as BaseAddon, Tn as logDestinationCapability } from "../../dist-B9C2v4SG.mjs";
+import { Kr as BaseAddon, kn as logDestinationCapability } from "../../dist-7ZciHCIp.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{composition-sources-DwEvAg5Z.js → composition-sources-Cukc78eu.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DyjNaeIj.js");
+const require_dist = require("./dist-Bi4Ioxop.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-jYNpYEhS.mjs → composition-sources-bt6IQDLu.mjs}

@@ -1,4 +1,4 @@
-import { Pr as compositionSourceKey, Vr as errMsg } from "./dist-B9C2v4SG.mjs";
+import { Gr as errMsg, Rr as compositionSourceKey } from "./dist-7ZciHCIp.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-B3fDUnJt.js → constants-DBGG6Zu5.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-DyjNaeIj.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-Bi4Ioxop.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{constants-DGBB3tNi.mjs → constants-DQcVrhVI.mjs}

@@ -1,4 +1,4 @@
-import { Ci as buildSecretRef } from "./dist-B9C2v4SG.mjs";
+import { Di as buildSecretRef } from "./dist-7ZciHCIp.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{device-ca-njpTMpJC.js → device-ca-B3hUVfYk.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DyjNaeIj.js");
+const require_dist = require("./dist-Bi4Ioxop.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-Dpkxg7px.mjs → device-ca-Utfvsx5x.mjs}

@@ -1,4 +1,4 @@
-import { Ci as buildSecretRef, D as DEVICE_SAN_CREDENTIAL_PREFIX, O as DEVICE_SAN_USER_PREFIX } from "./dist-B9C2v4SG.mjs";
+import { D as DEVICE_SAN_CREDENTIAL_PREFIX, Di as buildSecretRef, O as DEVICE_SAN_USER_PREFIX } from "./dist-7ZciHCIp.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-DK__ETIe.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts