@camstack/system 1.2.458 → 1.2.459

package/dist/index.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BZQjLPiz.js");
+const require_dist = require("./dist-Bn-RNanh.js");
 const require_read_all_rows$1 = require("./read-all-rows-CVoO1ONM.js");
-const require_device_ca = require("./device-ca-BrVK_5s3.js");
+const require_device_ca = require("./device-ca-CPTDs--d.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_builtins_calendars_calendars_addon = require("./builtins/calendars/calendars.addon.js");
@@ -28,21 +28,21 @@ const require_builtins_loki_logging_index = require("./builtins/loki-logging/ind
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_device_history_device_history_addon = require("./builtins/device-history/device-history.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-DfSIOj24.js");
+const require_wal_maintenance = require("./wal-maintenance-DUHEp_09.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_constants = require("./constants-Njka8Cv6.js");
-const require_agent_https = require("./agent-https-DOELEug8.js");
+const require_agent_https = require("./agent-https-Dnr_nIVx.js");
+const require_constants = require("./constants-6OeJiZgi.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_custom_action_registry = require("./custom-action-registry-COyb49zm.js");
-const require_hub_mdns_ciao = require("./hub-mdns-ciao-nce3TXs_.js");
+const require_hub_mdns_ciao = require("./hub-mdns-ciao-CTBTlia4.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-FyfZ8YMC.js");
+const require_restore_archive = require("./restore-archive-DM1OBYq4.js");
 const require_coral_accelerators = require("./coral-accelerators-Bi_c3Rft.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
@@ -5619,8 +5619,7 @@ var _integrationRegistryRecordKinds = require_dist.defineRecordKinds({
 			name: "addon_id",
 			fields: ["addonId"]
 		}],
-		retention: { none: "deleteIntegration only" },
-		adoptsFrom: INTEGRATIONS_LEGACY
+		retention: { none: "deleteIntegration only" }
 	},
 	"integration-settings": {
 		schema: IntegrationSettingBodySchema,
@@ -5632,8 +5631,7 @@ var _integrationRegistryRecordKinds = require_dist.defineRecordKinds({
 			name: "integration_id",
 			fields: ["integrationId"]
 		}],
-		retention: { none: "cascade on deleteIntegration" },
-		adoptsFrom: INTEGRATION_SETTINGS_LEGACY
+		retention: { none: "cascade on deleteIntegration" }
 	}
 });
 var integrationRegistryRecordKinds = _integrationRegistryRecordKinds;
@@ -6121,8 +6119,7 @@ var _clusterAgentRecordKinds = require_dist.defineRecordKinds({ "node-history":
 		name: "last_active",
 		fields: ["at"]
 	}],
-	retention: { none: "rows removed only by operator forget(nodeId)" },
-	adoptsFrom: CLUSTER_NODE_HISTORY_COLLECTION
+	retention: { none: "rows removed only by operator forget(nodeId)" }
 } });
 var clusterAgentRecordKinds = _clusterAgentRecordKinds;
 /** Narrow kind for `records.kind()` — `IsolatedRecordKinds` string index is `| undefined`. */
@@ -27800,14 +27797,14 @@ exports.MESH_ACTION_FORBIDDEN_TYPE = MESH_ACTION_FORBIDDEN_TYPE;
 exports.MESH_CA_FIELD = require_constants.MESH_CA_FIELD;
 exports.MESH_CA_KEY_REF = require_constants.MESH_CA_KEY_REF;
 exports.MESH_CA_SETTINGS_KEY = require_constants.MESH_CA_SETTINGS_KEY;
-exports.MESH_NODE_CERTIFICATES_COLLECTION = require_agent_https.MESH_NODE_CERTIFICATES_COLLECTION;
-exports.MESH_NODE_CERTIFICATES_COLUMNS = require_agent_https.MESH_NODE_CERTIFICATES_COLUMNS;
+exports.MESH_NODE_CERTIFICATES_COLLECTION = require_builtins_system_config_system_config_addon.MESH_NODE_CERTIFICATES_COLLECTION;
+exports.MESH_NODE_CERTIFICATES_COLUMNS = require_builtins_system_config_system_config_addon.MESH_NODE_CERTIFICATES_COLUMNS;
 exports.MESH_NODE_UNAUTHENTICATED_TYPE = MESH_NODE_UNAUTHENTICATED_TYPE;
 exports.MESH_QUEUE_TOP_N = MESH_QUEUE_TOP_N;
 exports.MESH_TLS_PORT_HELLO_FIELD = require_builtins_system_config_system_config_addon.MESH_TLS_PORT_HELLO_FIELD;
 exports.METHOD_ACCESS_MAP = require_dist.METHOD_ACCESS_MAP;
 exports.MeshCaKeeper = require_builtins_system_config_system_config_addon.MeshCaKeeper;
-exports.MeshCertificateRegistry = require_agent_https.MeshCertificateRegistry;
+exports.MeshCertificateRegistry = require_builtins_system_config_system_config_addon.MeshCertificateRegistry;
 exports.MeshCrl = require_builtins_system_config_system_config_addon.MeshCrl;
 exports.MeshIdentityGate = MeshIdentityGate;
 exports.ModelDownloadService = require_custom_action_registry.ModelDownloadService;
@@ -27844,7 +27841,7 @@ exports.PipelineValidator = PipelineValidator;
 exports.PythonEnvManager = PythonEnvManager;
 exports.QUARANTINE_DIRNAME = QUARANTINE_DIRNAME;
 exports.REFRESH_TOKEN_PREFIX = require_builtins_local_auth_local_auth_addon.REFRESH_TOKEN_PREFIX;
-exports.RENEWAL_ABANDONED = require_agent_https.RENEWAL_ABANDONED;
+exports.RENEWAL_ABANDONED = require_builtins_system_config_system_config_addon.RENEWAL_ABANDONED;
 exports.RESTART_MARKER_FILE = RESTART_MARKER_FILE;
 exports.RSS_BUDGET_REANNOUNCE_MIN_MS = RSS_BUDGET_REANNOUNCE_MIN_MS;
 exports.RSS_BUDGET_RELEASE_RATIO = RSS_BUDGET_RELEASE_RATIO;
@@ -27934,8 +27931,8 @@ exports.buildNpmChildEnv = buildNpmChildEnv;
 exports.buildStorageLocationRegistry = require_builtins_storage_orchestrator_storage_orchestrator_addon.buildStorageLocationRegistry;
 exports.buildTransporter = buildTransporter;
 exports.builderMountedCapNames = builderMountedCapNames;
-exports.caFingerprint = require_agent_https.caFingerprint;
-exports.caFingerprintCompact = require_agent_https.caFingerprintCompact;
+exports.caFingerprint = require_builtins_system_config_system_config_addon.caFingerprint;
+exports.caFingerprintCompact = require_builtins_system_config_system_config_addon.caFingerprintCompact;
 exports.caReplacementMarkerFile = require_hub_mdns_ciao.caReplacementMarkerFile;
 exports.callRegisterNodeWithRetry = callRegisterNodeWithRetry;
 exports.callWithServiceDiscovery = callWithServiceDiscovery;
@@ -27997,7 +27994,7 @@ exports.createKernelInferenceEngine = createKernelInferenceEngine;
 exports.createLocalTransport = createLocalTransport;
 exports.createLoopDelayMeter = createLoopDelayMeter;
 exports.createMeshAccessMiddleware = createMeshAccessMiddleware;
-exports.createMeshCsrPem = require_agent_https.createMeshCsrPem;
+exports.createMeshCsrPem = require_builtins_system_config_system_config_addon.createMeshCsrPem;
 exports.createMeshQueueReader = createMeshQueueReader;
 exports.createOutboundQueueGate = createOutboundQueueGate;
 exports.createParentUnownedCallHandler = createParentUnownedCallHandler;
@@ -28020,7 +28017,7 @@ exports.deleteModelFromDisk = require_custom_action_registry.deleteModelFromDisk
 exports.deriveAgentListenPort = deriveAgentListenPort;
 exports.describeCsr = require_builtins_system_config_system_config_addon.describeCsr;
 exports.describeHttpsLeaf = require_agent_https.describeHttpsLeaf;
-exports.describeMeshLeaf = require_agent_https.describeMeshLeaf;
+exports.describeMeshLeaf = require_builtins_system_config_system_config_addon.describeMeshLeaf;
 exports.describeProviderKindDrift = describeProviderKindDrift;
 exports.describeRss = describeRss;
 exports.detectWorkspacePackagesDir = detectWorkspacePackagesDir;
@@ -28069,7 +28066,7 @@ Object.defineProperty(exports, "ensurePython", {
 exports.ensureTlsCert = require_hub_mdns_ciao.ensureTlsCert;
 exports.evaluateExistingCert = require_agent_https.evaluateExistingCert;
 exports.expandCapMethods = require_dist.expandCapMethods;
-exports.exportMeshPrivateKeyPem = require_agent_https.exportMeshPrivateKeyPem;
+exports.exportMeshPrivateKeyPem = require_builtins_system_config_system_config_addon.exportMeshPrivateKeyPem;
 exports.fetchJson = require_custom_action_registry.fetchJson;
 exports.filterIsEmpty = require_log_read_filter.filterIsEmpty;
 exports.findAddonRefusal = findAddonRefusal;
@@ -28088,8 +28085,8 @@ exports.formatOutboundQueueVerdict = formatOutboundQueueVerdict;
 exports.formatSocketPlane = formatSocketPlane;
 exports.generateBackupKeyPair = require_restore_archive.generateBackupKeyPair;
 exports.generateDeviceCa = require_device_ca.generateDeviceCa;
-exports.generateMeshCa = require_agent_https.generateMeshCa;
-exports.generateMeshKeyPair = require_agent_https.generateMeshKeyPair;
+exports.generateMeshCa = require_builtins_system_config_system_config_addon.generateMeshCa;
+exports.generateMeshKeyPair = require_builtins_system_config_system_config_addon.generateMeshKeyPair;
 exports.getBrokerEventBus = getBrokerEventBus;
 exports.getBrokerTlsTransporter = getBrokerTlsTransporter;
 exports.getCapUsageRegistry = getCapUsageRegistry;
@@ -28116,7 +28113,7 @@ exports.getPlatformKeychainKey = require_platform_key_source.getPlatformKeychain
 exports.getProcessAgentHttpsNames = require_agent_https.getProcessAgentHttpsNames;
 exports.getProcessJwtSigningKeyState = require_device_ca.getProcessJwtSigningKeyState;
 exports.getProcessMeshCaState = require_builtins_system_config_system_config_addon.getProcessMeshCaState;
-exports.getProcessMeshCertificateRegistry = require_agent_https.getProcessMeshCertificateRegistry;
+exports.getProcessMeshCertificateRegistry = require_builtins_system_config_system_config_addon.getProcessMeshCertificateRegistry;
 exports.getProcessMeshTlsListenerState = require_builtins_system_config_system_config_addon.getProcessMeshTlsListenerState;
 exports.getProcessNodeMeshTransport = require_builtins_system_config_system_config_addon.getProcessNodeMeshTransport;
 exports.getProcessPeerLeaf = require_builtins_system_config_system_config_addon.getProcessPeerLeaf;
@@ -28174,12 +28171,12 @@ exports.isRemoteForbiddenAction = isRemoteForbiddenAction;
 exports.isRemoteForbiddenOnAgent = isRemoteForbiddenOnAgent;
 exports.isSettingsReadUnavailable = require_builtins_local_auth_local_auth_addon.isSettingsReadUnavailable;
 exports.isSourceNewer = isSourceNewer;
-exports.isValidAgentNodeId = require_agent_https.isValidAgentNodeId;
+exports.isValidAgentNodeId = require_builtins_system_config_system_config_addon.isValidAgentNodeId;
 exports.isolatedBuiltinPhase = isolatedBuiltinPhase;
 exports.issueAgentHttpsLeaf = require_agent_https.issueAgentHttpsLeaf;
 exports.issueDeviceLeaf = require_device_ca.issueDeviceLeaf;
-exports.issueMeshLeafForNode = require_agent_https.issueMeshLeafForNode;
-exports.issueMeshLeafFromCsr = require_agent_https.issueMeshLeafFromCsr;
+exports.issueMeshLeafForNode = require_builtins_system_config_system_config_addon.issueMeshLeafForNode;
+exports.issueMeshLeafFromCsr = require_builtins_system_config_system_config_addon.issueMeshLeafFromCsr;
 exports.keyFingerprintShort = require_builtins_system_config_system_config_addon.keyFingerprintShort;
 exports.leafFingerprintOf = require_hub_mdns_ciao.leafFingerprintOf;
 exports.levelRank = require_log_read_filter.levelRank;
@@ -28187,7 +28184,7 @@ exports.lineContainsText = require_log_read_filter.lineContainsText;
 exports.lineMatches = require_log_read_filter.lineMatches;
 exports.loadAgentHttps = require_agent_https.loadAgentHttps;
 exports.loadDeviceCa = require_device_ca.loadDeviceCa;
-exports.loadMeshCa = require_agent_https.loadMeshCa;
+exports.loadMeshCa = require_builtins_system_config_system_config_addon.loadMeshCa;
 exports.loadTlsCert = require_hub_mdns_ciao.loadTlsCert;
 exports.localCaCommonName = require_agent_https.localCaCommonName;
 exports.localEndpointPath = localEndpointPath;
@@ -28279,7 +28276,7 @@ exports.setHubConnected = setHubConnected;
 exports.setNodeEventInterest = setNodeEventInterest;
 exports.setPlatformKeychainKey = require_platform_key_source.setPlatformKeychainKey;
 exports.setProcessAgentHttpsNames = require_agent_https.setProcessAgentHttpsNames;
-exports.setProcessMeshCertificateRegistry = require_agent_https.setProcessMeshCertificateRegistry;
+exports.setProcessMeshCertificateRegistry = require_builtins_system_config_system_config_addon.setProcessMeshCertificateRegistry;
 exports.setProcessMeshPeerTransportLookup = require_builtins_system_config_system_config_addon.setProcessMeshPeerTransportLookup;
 exports.setProcessMeshTlsEnabler = require_builtins_system_config_system_config_addon.setProcessMeshTlsEnabler;
 exports.setProcessMeshTlsListenerState = require_builtins_system_config_system_config_addon.setProcessMeshTlsListenerState;

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import { i as __require } from "./chunk-CNf5ZN-e.mjs";
-import { An as isVoidInput, Bn as logLevelAtMost, Ci as ReadinessTimeoutError, Da as withoutCallerStamp, Ea as userError, Fi as asString$1, Hi as createEvent$1, In as lifecycleJobSchema, J as METHOD_ACCESS_MAP, K as LOG_LEVEL_RANK, Ki as defineRecordKinds, Mr as supportedRuntimes, Ni as asJsonObject$1, Oa as EventCategory$1, Pi as asNumber, Si as ReadinessRegistry, Tn as isCollectionArrayMethod, Vn as looseSchema, Xn as objectInputDeclaresAddonId, Yi as expandCapMethods, Zn as objectInputDeclaresRequiredDeviceId, _a as resolveCapMount, _r as scopesAllowAddon, ai as DATAPLANE_SECRET_HEADER$1, bn as interpolate, bt as addonSettingsCapability, d as CATALOG_LANGS, da as parseJsonUnknown, ha as readinessKey, ii as CALLER_STAMPED_CAPABILITIES$1, jn as kebabToCamel$1, kn as isObjectInput, mn as extractNestedAddonId, mr as resolveMethodAuth, n as AGENT_MDNS_TXT_KEYS, nr as procedureAuthKey, oi as DEVICE_SETTINGS_CONTRIBUTION_METHODS, qi as emitDownForOwnedCaps, r as ALL_CAPABILITY_DEFINITIONS, si as DEVICE_STATUS_METHOD, t as AGENT_MDNS_SERVICE_TYPE, ti as errMsg$1, ua as parseJsonObject, v as CatalogFileSchema, vr as scopesAllowDeviceCap, wn as isArrayOutputSchema, wr as splitTranslationRef, xi as RUNTIME_DEFAULTS, ya as scopeKey } from "./dist-B_GRPhnY.mjs";
+import { An as isVoidInput, Bn as logLevelAtMost, Ca as userError, Ci as ReadinessTimeoutError, Fi as asString$1, Gi as defineRecordKinds, Hi as createEvent$1, In as lifecycleJobSchema, J as METHOD_ACCESS_MAP, Ji as expandCapMethods, K as LOG_LEVEL_RANK, Ki as emitDownForOwnedCaps, Mr as supportedRuntimes, Ni as asJsonObject$1, Pi as asNumber, Si as ReadinessRegistry, Ta as EventCategory$1, Tn as isCollectionArrayMethod, Vn as looseSchema, Xn as objectInputDeclaresAddonId, Zn as objectInputDeclaresRequiredDeviceId, _r as scopesAllowAddon, ai as DATAPLANE_SECRET_HEADER$1, bn as interpolate, bt as addonSettingsCapability, d as CATALOG_LANGS, fa as readinessKey, ga as scopeKey, ii as CALLER_STAMPED_CAPABILITIES$1, jn as kebabToCamel$1, kn as isObjectInput, la as parseJsonObject, ma as resolveCapMount, mn as extractNestedAddonId, mr as resolveMethodAuth, n as AGENT_MDNS_TXT_KEYS, nr as procedureAuthKey, oi as DEVICE_SETTINGS_CONTRIBUTION_METHODS, r as ALL_CAPABILITY_DEFINITIONS, si as DEVICE_STATUS_METHOD, t as AGENT_MDNS_SERVICE_TYPE, ti as errMsg$1, ua as parseJsonUnknown, v as CatalogFileSchema, vr as scopesAllowDeviceCap, wa as withoutCallerStamp, wn as isArrayOutputSchema, wr as splitTranslationRef, xi as RUNTIME_DEFAULTS } from "./dist-Wy8cTxg6.mjs";
 import { t as require_read_all_rows } from "./read-all-rows-TaPqdWNF.mjs";
-import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-lEaAQ9Xi.mjs";
+import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-Bnkw8GyU.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
@@ -27,21 +27,21 @@ import { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index
 import NativeMetricsAddon, { a as NativeMetricsProvider, n as nodeProcReader, r as parseProcStat } from "./builtins/native-metrics/native-metrics.addon.mjs";
 import { DeviceHistoryAddon } from "./builtins/device-history/device-history.addon.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
-import { l as SqliteSettingsBackend } from "./wal-maintenance-Duejh7Lx.mjs";
+import { l as SqliteSettingsBackend } from "./wal-maintenance-NKbwWovZ.mjs";
 import { SqliteSettingsAddon } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
 import { StorageOrchestratorAddon, a as stripForwardedCaller, i as createHubCapForwardService, l as STORAGE_DRAIN_STATE_LEGACY, n as HUB_CAP_FWD_ACTION, o as buildStorageLocationRegistry, r as HUB_CAP_FWD_SERVICE, t as StorageOrchestratorService, u as storageOrchestratorRecordKinds } from "./builtins/storage-orchestrator/storage-orchestrator.addon.mjs";
 import "./builtins/storage-orchestrator/index.mjs";
-import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-FGjnsE2x.mjs";
-import { $ as generateMeshCa, A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, G as RENEWAL_ABANDONED, H as MESH_NODE_CERTIFICATES_COLLECTION, I as AGENT_HTTPS_NAMES_COLLECTION, J as setProcessMeshCertificateRegistry, K as describeMeshLeaf, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, Q as exportMeshPrivateKeyPem, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, U as MESH_NODE_CERTIFICATES_COLUMNS, W as MeshCertificateRegistry, X as caFingerprintCompact, Y as caFingerprint, Z as createMeshCsrPem, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, et as generateMeshKeyPair, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, it as loadMeshCa, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, nt as issueMeshLeafForNode, o as createAgentHttpsRequest, p as pemDigest, q as getProcessMeshCertificateRegistry, r as agentHttpsPaths, rt as issueMeshLeafFromCsr, s as describeHttpsLeaf, t as AgentHttpsInstallError, tt as isValidAgentNodeId, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-CQA3W-3e.mjs";
-import { $ as parseCidrList, A as setProcessMeshPeerTransportLookup, B as requireProcessMeshCa, C as setProcessMeshTlsEnabler, D as getProcessPeerLeaf, E as getProcessNodeMeshTransport, F as setProcessMeshTlsListenerState, G as AGENT_UI_UNLOCK_VERSION, H as AGENT_UI_UNLOCK_TTL_MS, I as MeshCrl, J as mintAgentUiUnlockTicket, K as UnlockTicketJtiStore, L as processMeshCrl, M as revokeMeshCertificate, N as getProcessMeshTlsListenerState, O as isProcessVerifiedMeshPeer, P as openMeshTlsWhenRevocationsLoaded, Q as normalizeIp, R as MeshCaKeeper, S as ServiceBroker, SystemConfigAddon, T as emitProcessNodeRegistered, U as AGENT_UI_UNLOCK_TYP, V as AGENT_DASHBOARD_ORIGINS_FIELD, W as AGENT_UI_UNLOCK_USE, X as verifyAgentUiUnlockTicket, Y as parseAgentDashboardOrigins, Z as createCidrMatcher, _ as signPairingProof, a as hubHostFromMeshAddress, b as TlsTcpTransporter, c as PAIRING_MAX_SESSIONS, d as PAIRING_PROTOCOL, et as readCidrSetting, f as PAIRING_TTL_MS, g as keyFingerprintShort, h as describeCsr, i as AgentPairing, j as renewMeshCertificate, k as onProcessNodeRegistered, l as PAIRING_PATHS, m as computePairingSas, n as HubPairing, o as PAIRING_CODE_DIGITS, p as computePairingCommitment, q as isAllowedAgentDashboardReturnTo, r as PairingHttpError, s as PAIRING_MAX_CODE_ATTEMPTS, u as PAIRING_PIN_DIGITS, v as verifyPairingProof, w as dropProcessPeer, x as Errors, y as MESH_TLS_PORT_HELLO_FIELD, z as getProcessMeshCaState } from "./builtins/system-config/system-config.addon.mjs";
+import { A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, o as createAgentHttpsRequest, p as pemDigest, r as agentHttpsPaths, s as describeHttpsLeaf, t as AgentHttpsInstallError, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-Iw3RSQup.mjs";
+import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-BnkOdj9Q.mjs";
+import { $ as generateMeshKeyPair, A as setProcessMeshPeerTransportLookup, B as describeMeshLeaf, C as setProcessMeshTlsEnabler, D as getProcessPeerLeaf, E as getProcessNodeMeshTransport, F as setProcessMeshTlsListenerState, G as MeshCaKeeper, H as setProcessMeshCertificateRegistry, I as MESH_NODE_CERTIFICATES_COLLECTION, J as caFingerprint, K as getProcessMeshCaState, L as MESH_NODE_CERTIFICATES_COLUMNS, M as revokeMeshCertificate, N as getProcessMeshTlsListenerState, O as isProcessVerifiedMeshPeer, P as openMeshTlsWhenRevocationsLoaded, Q as generateMeshCa, R as MeshCertificateRegistry, S as ServiceBroker, SystemConfigAddon, T as emitProcessNodeRegistered, U as MeshCrl, V as getProcessMeshCertificateRegistry, W as processMeshCrl, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, _ as signPairingProof, _t as readCidrSetting, a as hubHostFromMeshAddress, at as AGENT_UI_UNLOCK_TTL_MS, b as TlsTcpTransporter, c as PAIRING_MAX_SESSIONS, ct as AGENT_UI_UNLOCK_VERSION, d as PAIRING_PROTOCOL, dt as mintAgentUiUnlockTicket, et as isValidAgentNodeId, f as PAIRING_TTL_MS, ft as parseAgentDashboardOrigins, g as keyFingerprintShort, gt as parseCidrList, h as describeCsr, ht as normalizeIp, i as AgentPairing, it as AGENT_DASHBOARD_ORIGINS_FIELD, j as renewMeshCertificate, k as onProcessNodeRegistered, l as PAIRING_PATHS, lt as UnlockTicketJtiStore, m as computePairingSas, mt as createCidrMatcher, n as HubPairing, nt as issueMeshLeafFromCsr, o as PAIRING_CODE_DIGITS, ot as AGENT_UI_UNLOCK_TYP, p as computePairingCommitment, pt as verifyAgentUiUnlockTicket, q as requireProcessMeshCa, r as PairingHttpError, rt as loadMeshCa, s as PAIRING_MAX_CODE_ATTEMPTS, st as AGENT_UI_UNLOCK_USE, tt as issueMeshLeafForNode, u as PAIRING_PIN_DIGITS, ut as isAllowedAgentDashboardReturnTo, v as verifyPairingProof, w as dropProcessPeer, x as Errors, y as MESH_TLS_PORT_HELLO_FIELD, z as RENEWAL_ABANDONED } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { C as isModelDownloaded, T as revisionWeightUrl, _ as downloadFile, a as startEventLoopStallMonitor, b as fetchJson, c as createAuthenticatedFileServer, d as resolveFilePath, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, u as parseTokenizedUrl, v as downloadModel, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-stpC3Zy-.mjs";
-import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-Bg2HfTwP.mjs";
+import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-CJu0nhla.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Di9daRwI.mjs";
-import { c as backupOrchestratorRecordKinds, f as BackupDecryptError, g as generateBackupKeyPair, l as backupRecordStoresOf, m as BackupKeyMismatchError, p as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, v as readBackupEncryptionHeader } from "./restore-archive-C7kLDI_0.mjs";
+import { _ as backupRecordStoresOf, c as BackupDecryptError, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-CmP-iiG9.mjs";
 import { n as nodeCoralFs, t as classifyCoralAccelerator } from "./coral-accelerators-DcnZvctM.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
@@ -5616,8 +5616,7 @@ var _integrationRegistryRecordKinds = defineRecordKinds({
 			name: "addon_id",
 			fields: ["addonId"]
 		}],
-		retention: { none: "deleteIntegration only" },
-		adoptsFrom: INTEGRATIONS_LEGACY
+		retention: { none: "deleteIntegration only" }
 	},
 	"integration-settings": {
 		schema: IntegrationSettingBodySchema,
@@ -5629,8 +5628,7 @@ var _integrationRegistryRecordKinds = defineRecordKinds({
 			name: "integration_id",
 			fields: ["integrationId"]
 		}],
-		retention: { none: "cascade on deleteIntegration" },
-		adoptsFrom: INTEGRATION_SETTINGS_LEGACY
+		retention: { none: "cascade on deleteIntegration" }
 	}
 });
 var integrationRegistryRecordKinds = _integrationRegistryRecordKinds;
@@ -6118,8 +6116,7 @@ var _clusterAgentRecordKinds = defineRecordKinds({ "node-history": {
 		name: "last_active",
 		fields: ["at"]
 	}],
-	retention: { none: "rows removed only by operator forget(nodeId)" },
-	adoptsFrom: CLUSTER_NODE_HISTORY_COLLECTION
+	retention: { none: "rows removed only by operator forget(nodeId)" }
 } });
 var clusterAgentRecordKinds = _clusterAgentRecordKinds;
 /** Narrow kind for `records.kind()` — `IsolatedRecordKinds` string index is `| undefined`. */