@camstack/system 1.2.454 → 1.2.455

package/dist/{agent-https-B7IjRRzT.js → agent-https-CCvlRQKV.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-Bi4Ioxop.js");
+const require_dist = require("./dist-DjQ8C-ku.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
-const require_constants = require("./constants-DBGG6Zu5.js");
+const require_constants = require("./constants-DruwCkfp.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/{agent-https-oXsR24R2.mjs → agent-https-CLWrOO3o.mjs}

@@ -1,6 +1,6 @@
-import { Ii as defineRecordKinds } from "./dist-7ZciHCIp.mjs";
+import { Li as defineRecordKinds } from "./dist-BpSENkRJ.mjs";
 import { S as backdatedNotBefore, _ as NameConstraints, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, g as GeneralSubtrees, h as GeneralSubtree, i as Extension, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension, v as GeneralName, x as AsnConvert } from "./x509.es-DK__ETIe.mjs";
-import { c as SERVER_AUTH_OID$1, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "./constants-DQcVrhVI.mjs";
+import { c as SERVER_AUTH_OID$1, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "./constants-DOlYt1t1.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, webcrypto } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/auth/auth-audit-log.d.ts

@@ -8,7 +8,7 @@ import type { AuthAuditBody } from "../builtins/local-auth/record-kinds.js";
 */
 export declare const AUTH_AUDIT_COLLECTION = "auth_audit";
 export declare const AUTH_AUDIT_COLUMNS: readonly CollectionColumn[];
-export declare const AUTH_AUDIT_ACTIONS: readonly ["second-factor-skipped", "admin-token-created", "admin-token-used", "admin-token-revoked", "credentials-revoked", "agent-addon-update", "agent-addon-update-refused", "device-credential-enrolled", "device-credential-revoked", "device-credential-login", "device-credential-login-refused"];
+export declare const AUTH_AUDIT_ACTIONS: readonly ["second-factor-skipped", "admin-token-created", "admin-token-used", "admin-token-revoked", "credentials-revoked", "agent-addon-update", "agent-addon-update-refused", "device-credential-enrolled", "device-credential-revoked", "device-credential-login", "device-credential-login-refused", "token-minted", "token-revoked"];
 export type AuthAuditAction = (typeof AUTH_AUDIT_ACTIONS)[number];
 export interface AuthAuditEvent {
 	readonly action: AuthAuditAction;

package/dist/auth/auth-manager.d.ts

@@ -1,4 +1,4 @@
-import type { IScopedLogger, TokenPayload } from "@camstack/types";
+import type { CredentialTokenClaims, IScopedLogger, TokenPayload } from "@camstack/types";
 import { SsoBridgeClaimsSchema } from "@camstack/types";
 import type { z } from "zod";
 import { type JwtSigningKeySource } from "./jwt-signing-key.js";
@@ -53,6 +53,12 @@ export declare class AuthManager {
 	* already had once.
 	*/
 	private readConfiguredExpiry;
+	/**
+	* Sign a unified token (D892). No `exp`: the token's row — read by `jti` on
+	* every verify for revocation — holds its one expiry. The claims are parsed
+	* before signing, so nothing outside the schema is ever signed.
+	*/
+	signCredentialToken(claims: CredentialTokenClaims): string;
 	verifyToken(token: string): TokenPayload;
 	hashPassword(password: string): Promise<string>;
 	comparePassword(password: string, hash: string): Promise<boolean>;

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gr as errMsg, Kr as BaseAddon, ut as addonPagesCapability, va as EventCategory } from "../../dist-7ZciHCIp.mjs";
+import { Kr as errMsg, dt as addonPagesCapability, qr as BaseAddon, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gr as errMsg, Kr as BaseAddon, ft as addonWidgetsCapability, va as EventCategory } from "../../dist-7ZciHCIp.mjs";
+import { Kr as errMsg, pt as addonWidgetsCapability, qr as BaseAddon, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_phase6_declare_gate = require("../../phase6-declare-gate-DwYAep7y.js");
+const require_phase6_declare_gate = require("../../phase6-declare-gate-DrmTtz7F.js");
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**
 * When does an alert open a new EPISODE, and which edge of it is announced?

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,6 +1,6 @@
-import { Gr as errMsg, Ii as defineRecordKinds, Kr as BaseAddon, Mi as createEvent, fn as isAlertEpisodeOpen, ht as alertsCapability, i as AlertSchema, mt as alertEpisodePayload, pn as isAlertEpisodeSeverity, pt as alertEpisodeId, va as EventCategory } from "../../dist-7ZciHCIp.mjs";
+import { Kr as errMsg, Li as defineRecordKinds, Ni as createEvent, gt as alertsCapability, ht as alertEpisodePayload, i as AlertSchema, mn as isAlertEpisodeSeverity, mt as alertEpisodeId, pn as isAlertEpisodeOpen, qr as BaseAddon, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-D-2LMw9o.mjs";
+import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-JQUqgQgq.mjs";
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**
 * When does an alert open a new EPISODE, and which edge of it is announced?

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { Gr as errMsg, Kr as BaseAddon, P as FIRST_LEVEL_MACRO_CLASSES, Ui as isEvent, qn as ptzAutotrackCapability, va as EventCategory, yt as bareAddonId } from "../../dist-7ZciHCIp.mjs";
+import { F as FIRST_LEVEL_MACRO_CLASSES, Jn as ptzAutotrackCapability, Kr as errMsg, Wi as isEvent, bt as bareAddonId, qr as BaseAddon, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_restore_archive = require("../../restore-archive-C0ymYQk7.js");
+const require_restore_archive = require("../../restore-archive-4OP0EYg6.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,6 +1,6 @@
-import { Kr as BaseAddon, Nn as mayWriteToLocation, Zi as nodePin, pa as toNodeId, va as EventCategory, vr as storageOccupancyCapability, vt as backupCapability } from "../../dist-7ZciHCIp.mjs";
+import { Pn as mayWriteToLocation, Qi as nodePin, ma as toNodeId, qr as BaseAddon, ya as EventCategory, yr as storageOccupancyCapability, yt as backupCapability } from "../../dist-BpSENkRJ.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { _ as parseBackupSecretKey, a as BackupSnapshotRefusedError, c as backupOrchestratorRecordKinds, d as BackupEncryptionKeyStore, g as generateBackupKeyPair, h as ENCRYPTED_BACKUP_SUFFIX, i as BackupCancelledError, l as backupRecordStoresOf, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, u as BackupSeedMarkerStore } from "../../restore-archive-UVZv_hmr.mjs";
+import { _ as parseBackupSecretKey, a as BackupSnapshotRefusedError, c as backupOrchestratorRecordKinds, d as BackupEncryptionKeyStore, g as generateBackupKeyPair, h as ENCRYPTED_BACKUP_SUFFIX, i as BackupCancelledError, l as backupRecordStoresOf, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, u as BackupSeedMarkerStore } from "../../restore-archive-YFSJRtKy.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { Ii as defineRecordKinds, Kr as BaseAddon, Tt as calendarsCapability, g as CalendarPreferencesSchema } from "../../dist-7ZciHCIp.mjs";
+import { Et as calendarsCapability, Li as defineRecordKinds, g as CalendarPreferencesSchema, qr as BaseAddon } from "../../dist-BpSENkRJ.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { Bt as declarationOwnerNodeId, Et as cameraGridLayoutCapability, Gr as errMsg, Hr as DeviceFeature, Kr as BaseAddon, Ln as motionCapability, Mi as createEvent, Pn as memoizePinnedFfmpeg, Vi as hydrateSchema, Wr as DeviceType, br as streamCatalogCapability, j as DeclaredDevices, jr as buildFfmpegArgs, o as BaseDevice, pr as snapshotCapability, q as MOTION_CLOSE_AFTER_MS, va as EventCategory, w as DERIVED_CAMERA_SILENCED_CAP_NAMES } from "../../dist-7ZciHCIp.mjs";
+import { Dt as cameraGridLayoutCapability, Fn as memoizePinnedFfmpeg, Gr as DeviceType, Hi as hydrateSchema, J as MOTION_CLOSE_AFTER_MS, Kr as errMsg, M as DeclaredDevices, Mr as buildFfmpegArgs, Ni as createEvent, Rn as motionCapability, T as DERIVED_CAMERA_SILENCED_CAP_NAMES, Ur as DeviceFeature, Vt as declarationOwnerNodeId, mr as snapshotCapability, o as BaseDevice, qr as BaseAddon, xr as streamCatalogCapability, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
-const require_composition_sources = require("../../composition-sources-Cukc78eu.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
+const require_composition_sources = require("../../composition-sources-BxUkLNSo.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { Ar as COMPOSER_ADDON_ID, At as compositionFieldKey, Br as disarmRoseMemory, Fr as compositionFeatureEnabled, Gr as errMsg, Ir as compositionItemFieldPath, Kr as BaseAddon, Lr as compositionSliceKey, Mi as createEvent, Mr as cloneStatefulExpressionMemory, Nr as composedDeviceRef, Pr as composedDeviceStableId, Rr as compositionSourceKey, Vr as toExpressionValue, Wn as planComposition, Wr as DeviceType, f as COMPOSED_ITEM_FIXED_FIELDS, in as expressionContainsBuiltinCall, j as DeclaredDevices, kt as composerCapability, o as BaseDevice, r as ALL_CAPABILITY_DEFINITIONS, tn as evaluateCompositionField, va as EventCategory, xt as buildCapabilityLookup, zr as createStatefulExpressionMemory } from "../../dist-7ZciHCIp.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-bt6IQDLu.mjs";
+import { At as composerCapability, Br as createStatefulExpressionMemory, Fr as composedDeviceStableId, Gn as planComposition, Gr as DeviceType, Hr as toExpressionValue, Ir as compositionFeatureEnabled, Kr as errMsg, Lr as compositionItemFieldPath, M as DeclaredDevices, Ni as createEvent, Nr as cloneStatefulExpressionMemory, Pr as composedDeviceRef, Rr as compositionSliceKey, St as buildCapabilityLookup, Vr as disarmRoseMemory, an as expressionContainsBuiltinCall, f as COMPOSED_ITEM_FIXED_FIELDS, jr as COMPOSER_ADDON_ID, jt as compositionFieldKey, nn as evaluateCompositionField, o as BaseDevice, qr as BaseAddon, r as ALL_CAPABILITY_DEFINITIONS, ya as EventCategory, zr as compositionSourceKey } from "../../dist-BpSENkRJ.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-CSzD5_qX.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Kr as BaseAddon, kn as logDestinationCapability } from "../../dist-7ZciHCIp.mjs";
+import { An as logDestinationCapability, qr as BaseAddon } from "../../dist-BpSENkRJ.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_composition_sources = require("../../composition-sources-Cukc78eu.js");
+const require_composition_sources = require("../../composition-sources-BxUkLNSo.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");
 let zod = require("zod");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,6 +1,6 @@
-import { Ai as collectSecretMarkerRefs, Ft as coreBlockSourceKind, Gr as errMsg, Ii as defineRecordKinds, It as coreBlocksCapability, Ji as isSecretRefOwnedBy, Ki as isSecretMarker, Kr as BaseAddon, Mt as coreBlockAddonId, Nr as composedDeviceRef, Nt as coreBlockComposition, Pt as coreBlockIdFromAddonId, Rn as normalizeCoreBlockWrite, Rr as compositionSourceKey, Vi as hydrateSchema, Wn as planComposition, Wt as describeComposableCaps, Zn as replacedFieldKeys, ca as resolveSecretMarkers, da as secretTreeFromSchema, er as resolveCoreBlockEntry, h as CORE_BLOCK_ADDON_PREFIX, ha as transformSecretWrite, j as DeclaredDevices, jt as compositionSourceRefs, m as CORE_BLOCKS_ADDON_ID, p as COMPOSER_RUNNER_ID, r as ALL_CAPABILITY_DEFINITIONS, tr as resolveCoreBlockFiles, v as CoreBlockSchema, wr as validateComposition, xt as buildCapabilityLookup } from "../../dist-7ZciHCIp.mjs";
+import { Ft as coreBlockIdFromAddonId, Gn as planComposition, Gt as describeComposableCaps, Hi as hydrateSchema, It as coreBlockSourceKind, Kr as errMsg, Li as defineRecordKinds, Lt as coreBlocksCapability, M as DeclaredDevices, Mt as compositionSourceRefs, Nt as coreBlockAddonId, Pr as composedDeviceRef, Pt as coreBlockComposition, Qn as replacedFieldKeys, St as buildCapabilityLookup, Tr as validateComposition, Yi as isSecretRefOwnedBy, fa as secretTreeFromSchema, ga as transformSecretWrite, h as CORE_BLOCK_ADDON_PREFIX, ji as collectSecretMarkerRefs, la as resolveSecretMarkers, m as CORE_BLOCKS_ADDON_ID, nr as resolveCoreBlockFiles, p as COMPOSER_RUNNER_ID, qi as isSecretMarker, qr as BaseAddon, r as ALL_CAPABILITY_DEFINITIONS, tr as resolveCoreBlockEntry, v as CoreBlockSchema, zn as normalizeCoreBlockWrite, zr as compositionSourceKey } from "../../dist-BpSENkRJ.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-bt6IQDLu.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-CSzD5_qX.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { n as unwrapStoredValue, t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";
 import { createRequire } from "node:module";

package/dist/builtins/device-history/device-history.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 //#region src/builtins/device-history/store/series-registry.ts
 function subjectIdOf(subject) {
 	return subject.kind === "device" ? `d:${subject.deviceId}` : `n:${subject.nodeId}`;

package/dist/builtins/device-history/device-history.addon.mjs

@@ -1,4 +1,4 @@
-import { Kr as BaseAddon, L as HISTORY_CATALOG, Wr as DeviceType, Yt as deviceRemovalHookCapability, gt as armRemovalReconcile, qt as deviceHistoryCapability, ti as HISTORY_DEFAULT_MIN_INTERVAL_MS, va as EventCategory } from "../../dist-7ZciHCIp.mjs";
+import { Gr as DeviceType, Jt as deviceHistoryCapability, R as HISTORY_CATALOG, Xt as deviceRemovalHookCapability, _t as armRemovalReconcile, ni as HISTORY_DEFAULT_MIN_INTERVAL_MS, qr as BaseAddon, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 //#region src/builtins/device-history/store/series-registry.ts
 function subjectIdOf(subject) {
 	return subject.kind === "device" ? `d:${subject.deviceId}` : `n:${subject.nodeId}`;

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,4 +1,4 @@
-import { $t as enumerateItemArrayFields, C as DAY_NAMES, Dt as canonicalIconKey, F as FieldClaimModeSchema, Gi as isSecretClear, Gr as errMsg, Hi as isDeviceConfigCap, Hn as parseStreamParamsFormPatch, Hr as DeviceFeature, Ht as defineExtensionSlotProvider, I as FieldClaimSchema, Ii as defineRecordKinds, Jt as deviceManagerCapability, K as MINUTES_PER_DAY, Ki as isSecretMarker, Kr as BaseAddon, Kt as deviceExtensionCapability, Lt as createDeviceExtensionProvider, M as DeviceStatusSchema, N as DeviceTombstoneSchema, On as locationIconKey, Si as WELL_KNOWN_TAB_MAP, Ur as DeviceRole, Wi as isKeychainStoredField, Wr as DeviceType, Xt as deviceStateCapability, Zt as deviceStatusCapability, c as CAMERA_SWITCH_ORDER, ca as resolveSecretMarkers, en as enumerateSchemaFields, et as STREAM_PROFILE_META, fa as sleep$1, fr as siteZoneKey, ga as userError, ha as transformSecretWrite, ji as collectZodSecretPaths, ln as formatMinutes, ma as toSecretFieldView, or as runtimeStatePolicyFor, qi as isSecretMarkerLike, r as ALL_CAPABILITY_DEFINITIONS, rn as expandContainer, u as CAP_NAMES_WITH_STATUS, ua as secretTreeFromPaths, va as EventCategory, wn as legacyAutoLinkIds, wt as buildStreamParamsConfigSchema, yi as SECRET_CLEAR, zn as normalizeUnit } from "../../dist-7ZciHCIp.mjs";
+import { Bn as normalizeUnit, Ci as WELL_KNOWN_TAB_MAP, Gi as isKeychainStoredField, Gr as DeviceType, I as FieldClaimModeSchema, Ji as isSecretMarkerLike, Ki as isSecretClear, Kr as errMsg, L as FieldClaimSchema, Li as defineRecordKinds, Mi as collectZodSecretPaths, N as DeviceStatusSchema, Ot as canonicalIconKey, P as DeviceTombstoneSchema, Qt as deviceStatusCapability, Rt as createDeviceExtensionProvider, Tn as legacyAutoLinkIds, Tt as buildStreamParamsConfigSchema, Ui as isDeviceConfigCap, Un as parseStreamParamsFormPatch, Ur as DeviceFeature, Ut as defineExtensionSlotProvider, Wr as DeviceRole, Yt as deviceManagerCapability, Zt as deviceStateCapability, _a as userError, bi as SECRET_CLEAR, c as CAMERA_SWITCH_ORDER, da as secretTreeFromPaths, en as enumerateItemArrayFields, ga as transformSecretWrite, ha as toSecretFieldView, in as expandContainer, kn as locationIconKey, la as resolveSecretMarkers, pa as sleep$1, pr as siteZoneKey, q as MINUTES_PER_DAY, qi as isSecretMarker, qr as BaseAddon, qt as deviceExtensionCapability, r as ALL_CAPABILITY_DEFINITIONS, sr as runtimeStatePolicyFor, tn as enumerateSchemaFields, tt as STREAM_PROFILE_META, u as CAP_NAMES_WITH_STATUS, un as formatMinutes, w as DAY_NAMES, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Kr as BaseAddon, kn as logDestinationCapability } from "../../dist-7ZciHCIp.mjs";
+import { An as logDestinationCapability, qr as BaseAddon } from "../../dist-BpSENkRJ.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_device_ca = require("../../device-ca-B3hUVfYk.js");
-const require_phase6_declare_gate = require("../../phase6-declare-gate-DwYAep7y.js");
-const require_constants = require("../../constants-DBGG6Zu5.js");
+const require_device_ca = require("../../device-ca-QPBgfqVY.js");
+const require_phase6_declare_gate = require("../../phase6-declare-gate-DrmTtz7F.js");
+const require_constants = require("../../constants-DruwCkfp.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,8 +1,8 @@
-import { $i as normalizeSecretOwner, B as KEYCHAIN_RESET_TRIGGER_ACTOR, Bi as formatSecretScope, Cn as keychainCapability, H as KeychainResetRecordSchema, Ii as defineRecordKinds, Kr as BaseAddon, Sn as keychainAdminCapability, V as KeychainAuditEntrySchema, na as parseSecretRef, va as EventCategory } from "../../dist-7ZciHCIp.mjs";
+import { Cn as keychainAdminCapability, H as KeychainAuditEntrySchema, Li as defineRecordKinds, U as KeychainResetRecordSchema, V as KEYCHAIN_RESET_TRIGGER_ACTOR, Vi as formatSecretScope, ea as normalizeSecretOwner, qr as BaseAddon, ra as parseSecretRef, wn as keychainCapability, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-Utfvsx5x.mjs";
-import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-D-2LMw9o.mjs";
-import { a as MESH_CA_KEY_REF } from "../../constants-DQcVrhVI.mjs";
+import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-uFbTyY_o.mjs";
+import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-JQUqgQgq.mjs";
+import { a as MESH_CA_KEY_REF } from "../../constants-DOlYt1t1.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Gr as errMsg, Kr as BaseAddon, Mi as createEvent, X as RecordingStatusSchema, Y as RECORDING_SOURCE_CAMSTACK_ADDON, va as EventCategory } from "../../dist-7ZciHCIp.mjs";
+import { Kr as errMsg, Ni as createEvent, X as RECORDING_SOURCE_CAMSTACK_ADDON, Z as RecordingStatusSchema, qr as BaseAddon, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,12 +3,12 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_device_ca = require("../../device-ca-B3hUVfYk.js");
-const require_phase6_declare_gate = require("../../phase6-declare-gate-DwYAep7y.js");
+const require_device_ca = require("../../device-ca-QPBgfqVY.js");
+const require_phase6_declare_gate = require("../../phase6-declare-gate-DrmTtz7F.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
@@ -6112,6 +6112,14 @@ var AuthManager = class {
 			return;
 		}
 	}
+	/**
+	* Sign a unified token (D892). No `exp`: the token's row — read by `jti` on
+	* every verify for revocation — holds its one expiry. The claims are parsed
+	* before signing, so nothing outside the schema is ever signed.
+	*/
+	signCredentialToken(claims) {
+		return import_jsonwebtoken.sign(require_dist.CredentialTokenClaimsSchema.parse(claims), this.jwtSecret);
+	}
 	verifyToken(token) {
 		return import_jsonwebtoken.verify(token, this.jwtSecret);
 	}
@@ -6370,7 +6378,9 @@ var AUTH_AUDIT_ACTIONS = [
 	"device-credential-enrolled",
 	"device-credential-revoked",
 	"device-credential-login",
-	"device-credential-login-refused"
+	"device-credential-login-refused",
+	"token-minted",
+	"token-revoked"
 ];
 var RETENTION_MS = 90 * 864e5;
 var MAX_LIST = 500;

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,10 +1,10 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Cr as userManagementCapability, Ct as buildDeviceSignatureMessage, E as DEVICE_NONCE_TTL_MS, Gt as deviceCredentialsCapability, Ii as defineRecordKinds, Ki as isSecretMarker, Kr as BaseAddon, St as buildDeviceEnrollmentLink, T as DEVICE_ENROLLMENT_TTL_MS, Yi as makeSecretMarker, _t as authProviderCapability, a as ApiKeyRecordSchema, cn as formatDeviceRevoker, ct as TokenScopeSchema, ga as userError, lt as UserRecordSchema, rt as SsoBridgeClaimsSchema, tt as ScopedTokenSchema } from "../../dist-7ZciHCIp.mjs";
+import { Ct as buildDeviceEnrollmentLink, D as DEVICE_NONCE_TTL_MS, E as DEVICE_ENROLLMENT_TTL_MS, Kt as deviceCredentialsCapability, Li as defineRecordKinds, Xi as makeSecretMarker, _a as userError, a as ApiKeyRecordSchema, it as SsoBridgeClaimsSchema, ln as formatDeviceRevoker, lt as TokenScopeSchema, nt as ScopedTokenSchema, qi as isSecretMarker, qr as BaseAddon, ut as UserRecordSchema, vt as authProviderCapability, wr as userManagementCapability, wt as buildDeviceSignatureMessage, y as CredentialTokenClaimsSchema } from "../../dist-BpSENkRJ.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-Utfvsx5x.mjs";
-import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-D-2LMw9o.mjs";
+import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-uFbTyY_o.mjs";
+import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-JQUqgQgq.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
@@ -6102,6 +6102,14 @@ var AuthManager = class {
 			return;
 		}
 	}
+	/**
+	* Sign a unified token (D892). No `exp`: the token's row — read by `jti` on
+	* every verify for revocation — holds its one expiry. The claims are parsed
+	* before signing, so nothing outside the schema is ever signed.
+	*/
+	signCredentialToken(claims) {
+		return import_jsonwebtoken.sign(CredentialTokenClaimsSchema.parse(claims), this.jwtSecret);
+	}
 	verifyToken(token) {
 		return import_jsonwebtoken.verify(token, this.jwtSecret);
 	}
@@ -6360,7 +6368,9 @@ var AUTH_AUDIT_ACTIONS = [
 	"device-credential-enrolled",
 	"device-credential-revoked",
 	"device-credential-login",
-	"device-credential-login-refused"
+	"device-credential-login-refused",
+	"token-minted",
+	"token-revoked"
 ];
 var RETENTION_MS = 90 * 864e5;
 var MAX_LIST = 500;

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
-const require_hub_mdns_ciao = require("../../hub-mdns-ciao-2FzLWfbD.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
+const require_hub_mdns_ciao = require("../../hub-mdns-ciao-Bkrvgnma.js");
 let zod = require("zod");
 let node_net = require("node:net");
 let node_os = require("node:os");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
-import { Dn as localNetworkCapability, J as NetworkTunnelStartedDataSchema, Kr as BaseAddon, Ot as checkRoleAddress, Qn as resolveAppConnections, R as HUB_MDNS_SERVICE_TYPE, Tr as validateCustomAddress, Un as pickAppLinkHub, _n as isDefaultAppConnectionEndpoint, ar as resolveNotificationTapAddress, l as CAMSTACK_APP_LINK_ORIGIN, mn as isAppLinkBase, nr as resolveHubAddressRoles, va as EventCategory, z as HUB_MDNS_TXT_KEYS } from "../../dist-7ZciHCIp.mjs";
-import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-BRs3DUT-.mjs";
+import { $n as resolveAppConnections, B as HUB_MDNS_TXT_KEYS, Er as validateCustomAddress, On as localNetworkCapability, Wn as pickAppLinkHub, Y as NetworkTunnelStartedDataSchema, hn as isAppLinkBase, kt as checkRoleAddress, l as CAMSTACK_APP_LINK_ORIGIN, or as resolveNotificationTapAddress, qr as BaseAddon, rr as resolveHubAddressRoles, vn as isDefaultAppConnectionEndpoint, ya as EventCategory, z as HUB_MDNS_SERVICE_TYPE } from "../../dist-BpSENkRJ.mjs";
+import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-DlgkFJVY.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
 import * as os$1 from "node:os";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Kr as BaseAddon, kn as logDestinationCapability } from "../../dist-7ZciHCIp.mjs";
+import { An as logDestinationCapability, qr as BaseAddon } from "../../dist-BpSENkRJ.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 let node_fs_promises = require("node:fs/promises");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { $n as resolveBucketMs, Fn as metricsProviderCapability, Gr as errMsg, Kr as BaseAddon, Mi as createEvent, Xn as reducePoints, sn as foldSnapshotByFunction, va as EventCategory } from "../../dist-7ZciHCIp.mjs";
+import { In as metricsProviderCapability, Kr as errMsg, Ni as createEvent, Zn as reducePoints, cn as foldSnapshotByFunction, er as resolveBucketMs, qr as BaseAddon, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 let node_util = require("node:util");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { Gn as platformProbeCapability, Gr as errMsg, Kr as BaseAddon, Qt as enumerateInferenceDevices, Ri as emitReadiness, lr as scoreRuntimes, va as EventCategory } from "../../dist-7ZciHCIp.mjs";
+import { $t as enumerateInferenceDevices, Kn as platformProbeCapability, Kr as errMsg, qr as BaseAddon, ur as scoreRuntimes, ya as EventCategory, zi as emitReadiness } from "../../dist-BpSENkRJ.mjs";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";
 import * as fs from "node:fs";

package/dist/builtins/record-entries/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 //#region src/builtins/record-entries/entries-service.ts

package/dist/builtins/record-entries/index.mjs

@@ -1,4 +1,4 @@
-import { Jn as recordEntriesCapability, Kr as BaseAddon, Xi as mapSecretLeaves, ni as InvalidRecordError, oa as recordSecretRef, xi as UnknownRecordKindError } from "../../dist-7ZciHCIp.mjs";
+import { Si as UnknownRecordKindError, Yn as recordEntriesCapability, Zi as mapSecretLeaves, qr as BaseAddon, ri as InvalidRecordError, sa as recordSecretRef } from "../../dist-BpSENkRJ.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 //#region src/builtins/record-entries/entries-service.ts

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Kr as BaseAddon, va as EventCategory } from "../../dist-7ZciHCIp.mjs";
+import { qr as BaseAddon, ya as EventCategory } from "../../dist-BpSENkRJ.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bi4Ioxop.js");
+const require_dist = require("../../dist-DjQ8C-ku.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");