@camstack/system 1.2.458 → 1.2.459

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,12 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_device_ca = require("../../device-ca-BrVK_5s3.js");
-const require_phase6_declare_gate = require("../../phase6-declare-gate-Dag1_WR2.js");
+const require_device_ca = require("../../device-ca-CPTDs--d.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
@@ -7694,8 +7693,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 			fields: ["username"],
 			unique: true
 		}],
-		retention: { none: "row goes only when an operator deletes the user; destructive declareCollection rebuild wipes all accounts" },
-		adoptsFrom: USERS_COLLECTION$1
+		retention: { none: "row goes only when an operator deletes the user; destructive declareCollection rebuild wipes all accounts" }
 	},
 	"api-keys": {
 		schema: ApiKeyBodySchema,
@@ -7707,8 +7705,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 			name: "prefix",
 			fields: ["tokenPrefix"]
 		}],
-		retention: { none: "explicit revoke only" },
-		adoptsFrom: API_KEYS_COLLECTION
+		retention: { none: "explicit revoke only" }
 	},
 	"scoped-tokens": {
 		schema: ScopedTokenBodySchema,
@@ -7724,8 +7721,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 			name: "user",
 			fields: ["userId"]
 		}],
-		retention: { none: "the operator drops the legacy rows by hand (D895)" },
-		adoptsFrom: SCOPED_TOKENS_COLLECTION
+		retention: { none: "the operator drops the legacy rows by hand (D895)" }
 	},
 	"admin-tokens": {
 		schema: AdminTokenBodySchema,
@@ -7741,8 +7737,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 			name: "created_by",
 			fields: ["createdBy"]
 		}],
-		retention: { none: "the operator drops the legacy rows by hand (D895)" },
-		adoptsFrom: ADMIN_TOKENS_COLLECTION
+		retention: { none: "the operator drops the legacy rows by hand (D895)" }
 	},
 	"login-sessions": {
 		schema: LoginSessionBodySchema,
@@ -7760,8 +7755,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 		retention: {
 			owner: "local-auth",
 			reason: "daily reap: expired >7d and revoked >30d"
-		},
-		adoptsFrom: LOGIN_SESSIONS_COLLECTION
+		}
 	},
 	"login-session-cutoffs": {
 		schema: LoginSessionCutoffBodySchema,
@@ -7769,8 +7763,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 		writeTrigger: "revoke-all-sessions for a user (password change, delete, logout everywhere)",
 		device: "none",
 		at: "none",
-		retention: { none: "one row per user who ever had all sessions revoked" },
-		adoptsFrom: LOGIN_SESSION_CUTOFFS_COLLECTION
+		retention: { none: "one row per user who ever had all sessions revoked" }
 	},
 	"oauth-sessions": {
 		schema: OauthSessionBodySchema,
@@ -7785,8 +7778,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 		retention: {
 			owner: "local-auth",
 			reason: "daily reap deletes revoked sessions older than 30 days; active rows never expire"
-		},
-		adoptsFrom: OAUTH_SESSIONS_COLLECTION
+		}
 	},
 	"user-totp": {
 		schema: UserTotpBodySchema,
@@ -7794,8 +7786,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 		writeTrigger: "setup inserts seed (keychain); confirm sets confirmedAt; disable deletes row",
 		device: "none",
 		at: "none",
-		retention: { none: "disable or replace on re-setup; user delete does not cascade" },
-		adoptsFrom: USER_TOTP_COLLECTION
+		retention: { none: "disable or replace on re-setup; user delete does not cascade" }
 	},
 	"user-external-identities": {
 		schema: ExternalIdentityBodySchema,
@@ -7811,8 +7802,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 			fields: ["provider", "subject"],
 			unique: true
 		}],
-		retention: { none: "unlink or deleteUser removes rows" },
-		adoptsFrom: USER_EXTERNAL_IDENTITIES_COLLECTION
+		retention: { none: "unlink or deleteUser removes rows" }
 	},
 	"device-credentials": {
 		schema: DeviceCredentialBodySchema,
@@ -7830,8 +7820,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 		retention: {
 			owner: "local-auth",
 			reason: "daily reap removes revoked/expired rows older than 90 days"
-		},
-		adoptsFrom: DEVICE_CREDENTIALS_COLLECTION
+		}
 	},
 	"auth-audit": {
 		schema: AuthAuditBodySchema,
@@ -7846,8 +7835,7 @@ var _localAuthRecordKinds = require_dist.defineRecordKinds({
 		retention: {
 			ttlMs: 90 * DAY_MS,
 			from: "at"
-		},
-		adoptsFrom: AUTH_AUDIT_COLLECTION
+		}
 	}
 });
 var localAuthRecordKinds = _localAuthRecordKinds;
@@ -12307,45 +12295,41 @@ var LocalAuthAddon = class extends require_dist.BaseAddon {
 		const store = this.ctx.api?.settingsStore;
 		const records = this.ctx.records;
 		if (store && records) {
-			const useRecords = await require_phase6_declare_gate.resolvePhase6UseRecordsPathForHub(this.ctx, "local-auth", localAuthRecordKinds, LOCAL_AUTH_RECORDS_LEGACY_COLLECTIONS);
-			const authStores = useRecords ? localAuthRecordStoresOf(records) : null;
+			await records.declare(localAuthRecordKinds);
+			const authStores = localAuthRecordStoresOf(records);
 			await records.declare(localAuthPreferencesRecordKinds);
 			this.preferences = new UserPreferencesStore(records.kind(localAuthPreferencesRecordKinds["user-preferences"]));
-			const legacyStoreAccess = { getStore: () => store };
-			await declareAuthSchema(store, { ...useRecords ? { skipCollections: LOCAL_AUTH_RECORDS_LEGACY_COLLECTIONS } : {} });
-			this.userManager = authStores === null ? new UserManager(legacyStoreAccess, this.authManager) : new UserManager({
+			await declareAuthSchema(store, { skipCollections: LOCAL_AUTH_RECORDS_LEGACY_COLLECTIONS });
+			this.userManager = new UserManager({
 				usersKind: authStores.users,
 				legacyStore: store
 			}, this.authManager);
-			this.apiKeyManager = authStores === null ? new ApiKeyManager(legacyStoreAccess) : new ApiKeyManager({
+			this.apiKeyManager = new ApiKeyManager({
 				apiKeysKind: authStores.apiKeys,
 				legacyStore: store
 			});
-			this.oauthSessionManager = authStores === null ? new OauthSessionManager(store) : new OauthSessionManager({
+			this.oauthSessionManager = new OauthSessionManager({
 				oauthSessionsKind: authStores.oauthSessions,
 				legacyStore: store
 			});
-			this.totpManager = authStores === null ? new TotpManager(store, {
-				secrets: forOwner === null ? null : forOwner("system"),
-				logger: this.ctx.logger
-			}) : new TotpManager({
+			this.totpManager = new TotpManager({
 				userTotpKind: authStores.userTotp,
 				legacyStore: store
 			}, {
 				secrets: forOwner === null ? null : forOwner("system"),
 				logger: this.ctx.logger
 			});
-			this.externalIdentities = authStores === null ? new ExternalIdentityManager(store) : new ExternalIdentityManager({
+			this.externalIdentities = new ExternalIdentityManager({
 				identitiesKind: authStores.userExternalIdentities,
 				legacyStore: store
 			});
-			this.loginSessions = authStores === null ? new LoginSessionManager(store, { logger: this.ctx.logger }) : new LoginSessionManager({
+			this.loginSessions = new LoginSessionManager({
 				sessionsKind: authStores.loginSessions,
 				cutoffsKind: authStores.loginSessionCutoffs,
 				legacyStore: store
 			}, { logger: this.ctx.logger });
 			await this.loginSessions.load();
-			this.auditLog = authStores === null ? new AuthAuditLog(store, this.ctx.logger) : new AuthAuditLog({
+			this.auditLog = new AuthAuditLog({
 				authAuditKind: authStores.authAudit,
 				legacyStore: store
 			}, this.ctx.logger);
@@ -12365,7 +12349,7 @@ var LocalAuthAddon = class extends require_dist.BaseAddon {
 					return user === null ? null : { username: user.username };
 				},
 				selfEnrollmentAllowed: async () => (await this.readDeviceCertificateSettings()).selfEnrollment === "allowed",
-				deviceCredentialsKind: authStores?.deviceCredentials ?? null,
+				deviceCredentialsKind: authStores.deviceCredentials,
 				logger: this.ctx.logger
 			});
 			await this.deviceCredentials.load();

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,10 +1,9 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { $ as PreferenceDeviceIdSchema, D as DEVICE_ENROLLMENT_TTL_MS, Ea as userError, En as isCredentialTokenPayload, Et as authProviderCapability, Ki as defineRecordKinds, Mt as buildDeviceSignatureMessage, Nr as userManagementCapability, Q as PREFERENCES_MAX_VALUE_BYTES, _n as formatDeviceRevoker, a as ApiKeyRecordSchema, aa as makeSecretMarker, b as CredentialTokenClaimsSchema, dt as SsoBridgeClaimsSchema, en as deviceCredentialsCapability, et as PreferenceNamespaceSchema, g as CREDENTIAL_TOKEN_AUDIENCE, gt as TokenScopeSchema, jt as buildDeviceEnrollmentLink, k as DEVICE_NONCE_TTL_MS, lt as ScopedTokenSchema, na as isSecretMarker, ni as BaseAddon, tt as PreferenceValueSchema, vt as UserRecordSchema } from "../../dist-B_GRPhnY.mjs";
+import { $ as PreferenceDeviceIdSchema, Ca as userError, D as DEVICE_ENROLLMENT_TTL_MS, En as isCredentialTokenPayload, Et as authProviderCapability, Gi as defineRecordKinds, Mt as buildDeviceSignatureMessage, Nr as userManagementCapability, Q as PREFERENCES_MAX_VALUE_BYTES, _n as formatDeviceRevoker, a as ApiKeyRecordSchema, b as CredentialTokenClaimsSchema, dt as SsoBridgeClaimsSchema, en as deviceCredentialsCapability, et as PreferenceNamespaceSchema, g as CREDENTIAL_TOKEN_AUDIENCE, gt as TokenScopeSchema, ia as makeSecretMarker, jt as buildDeviceEnrollmentLink, k as DEVICE_NONCE_TTL_MS, lt as ScopedTokenSchema, ni as BaseAddon, ta as isSecretMarker, tt as PreferenceValueSchema, vt as UserRecordSchema } from "../../dist-Wy8cTxg6.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-lEaAQ9Xi.mjs";
-import { t as resolvePhase6UseRecordsPathForHub } from "../../phase6-declare-gate-Lb-mrVvz.mjs";
+import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-Bnkw8GyU.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
 import { X509Certificate, createHash, randomUUID, timingSafeEqual } from "node:crypto";
@@ -7684,8 +7683,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 			fields: ["username"],
 			unique: true
 		}],
-		retention: { none: "row goes only when an operator deletes the user; destructive declareCollection rebuild wipes all accounts" },
-		adoptsFrom: USERS_COLLECTION$1
+		retention: { none: "row goes only when an operator deletes the user; destructive declareCollection rebuild wipes all accounts" }
 	},
 	"api-keys": {
 		schema: ApiKeyBodySchema,
@@ -7697,8 +7695,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 			name: "prefix",
 			fields: ["tokenPrefix"]
 		}],
-		retention: { none: "explicit revoke only" },
-		adoptsFrom: API_KEYS_COLLECTION
+		retention: { none: "explicit revoke only" }
 	},
 	"scoped-tokens": {
 		schema: ScopedTokenBodySchema,
@@ -7714,8 +7711,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 			name: "user",
 			fields: ["userId"]
 		}],
-		retention: { none: "the operator drops the legacy rows by hand (D895)" },
-		adoptsFrom: SCOPED_TOKENS_COLLECTION
+		retention: { none: "the operator drops the legacy rows by hand (D895)" }
 	},
 	"admin-tokens": {
 		schema: AdminTokenBodySchema,
@@ -7731,8 +7727,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 			name: "created_by",
 			fields: ["createdBy"]
 		}],
-		retention: { none: "the operator drops the legacy rows by hand (D895)" },
-		adoptsFrom: ADMIN_TOKENS_COLLECTION
+		retention: { none: "the operator drops the legacy rows by hand (D895)" }
 	},
 	"login-sessions": {
 		schema: LoginSessionBodySchema,
@@ -7750,8 +7745,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 		retention: {
 			owner: "local-auth",
 			reason: "daily reap: expired >7d and revoked >30d"
-		},
-		adoptsFrom: LOGIN_SESSIONS_COLLECTION
+		}
 	},
 	"login-session-cutoffs": {
 		schema: LoginSessionCutoffBodySchema,
@@ -7759,8 +7753,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 		writeTrigger: "revoke-all-sessions for a user (password change, delete, logout everywhere)",
 		device: "none",
 		at: "none",
-		retention: { none: "one row per user who ever had all sessions revoked" },
-		adoptsFrom: LOGIN_SESSION_CUTOFFS_COLLECTION
+		retention: { none: "one row per user who ever had all sessions revoked" }
 	},
 	"oauth-sessions": {
 		schema: OauthSessionBodySchema,
@@ -7775,8 +7768,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 		retention: {
 			owner: "local-auth",
 			reason: "daily reap deletes revoked sessions older than 30 days; active rows never expire"
-		},
-		adoptsFrom: OAUTH_SESSIONS_COLLECTION
+		}
 	},
 	"user-totp": {
 		schema: UserTotpBodySchema,
@@ -7784,8 +7776,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 		writeTrigger: "setup inserts seed (keychain); confirm sets confirmedAt; disable deletes row",
 		device: "none",
 		at: "none",
-		retention: { none: "disable or replace on re-setup; user delete does not cascade" },
-		adoptsFrom: USER_TOTP_COLLECTION
+		retention: { none: "disable or replace on re-setup; user delete does not cascade" }
 	},
 	"user-external-identities": {
 		schema: ExternalIdentityBodySchema,
@@ -7801,8 +7792,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 			fields: ["provider", "subject"],
 			unique: true
 		}],
-		retention: { none: "unlink or deleteUser removes rows" },
-		adoptsFrom: USER_EXTERNAL_IDENTITIES_COLLECTION
+		retention: { none: "unlink or deleteUser removes rows" }
 	},
 	"device-credentials": {
 		schema: DeviceCredentialBodySchema,
@@ -7820,8 +7810,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 		retention: {
 			owner: "local-auth",
 			reason: "daily reap removes revoked/expired rows older than 90 days"
-		},
-		adoptsFrom: DEVICE_CREDENTIALS_COLLECTION
+		}
 	},
 	"auth-audit": {
 		schema: AuthAuditBodySchema,
@@ -7836,8 +7825,7 @@ var _localAuthRecordKinds = defineRecordKinds({
 		retention: {
 			ttlMs: 90 * DAY_MS,
 			from: "at"
-		},
-		adoptsFrom: AUTH_AUDIT_COLLECTION
+		}
 	}
 });
 var localAuthRecordKinds = _localAuthRecordKinds;
@@ -12296,45 +12284,41 @@ var LocalAuthAddon = class extends BaseAddon {
 		const store = this.ctx.api?.settingsStore;
 		const records = this.ctx.records;
 		if (store && records) {
-			const useRecords = await resolvePhase6UseRecordsPathForHub(this.ctx, "local-auth", localAuthRecordKinds, LOCAL_AUTH_RECORDS_LEGACY_COLLECTIONS);
-			const authStores = useRecords ? localAuthRecordStoresOf(records) : null;
+			await records.declare(localAuthRecordKinds);
+			const authStores = localAuthRecordStoresOf(records);
 			await records.declare(localAuthPreferencesRecordKinds);
 			this.preferences = new UserPreferencesStore(records.kind(localAuthPreferencesRecordKinds["user-preferences"]));
-			const legacyStoreAccess = { getStore: () => store };
-			await declareAuthSchema(store, { ...useRecords ? { skipCollections: LOCAL_AUTH_RECORDS_LEGACY_COLLECTIONS } : {} });
-			this.userManager = authStores === null ? new UserManager(legacyStoreAccess, this.authManager) : new UserManager({
+			await declareAuthSchema(store, { skipCollections: LOCAL_AUTH_RECORDS_LEGACY_COLLECTIONS });
+			this.userManager = new UserManager({
 				usersKind: authStores.users,
 				legacyStore: store
 			}, this.authManager);
-			this.apiKeyManager = authStores === null ? new ApiKeyManager(legacyStoreAccess) : new ApiKeyManager({
+			this.apiKeyManager = new ApiKeyManager({
 				apiKeysKind: authStores.apiKeys,
 				legacyStore: store
 			});
-			this.oauthSessionManager = authStores === null ? new OauthSessionManager(store) : new OauthSessionManager({
+			this.oauthSessionManager = new OauthSessionManager({
 				oauthSessionsKind: authStores.oauthSessions,
 				legacyStore: store
 			});
-			this.totpManager = authStores === null ? new TotpManager(store, {
-				secrets: forOwner === null ? null : forOwner("system"),
-				logger: this.ctx.logger
-			}) : new TotpManager({
+			this.totpManager = new TotpManager({
 				userTotpKind: authStores.userTotp,
 				legacyStore: store
 			}, {
 				secrets: forOwner === null ? null : forOwner("system"),
 				logger: this.ctx.logger
 			});
-			this.externalIdentities = authStores === null ? new ExternalIdentityManager(store) : new ExternalIdentityManager({
+			this.externalIdentities = new ExternalIdentityManager({
 				identitiesKind: authStores.userExternalIdentities,
 				legacyStore: store
 			});
-			this.loginSessions = authStores === null ? new LoginSessionManager(store, { logger: this.ctx.logger }) : new LoginSessionManager({
+			this.loginSessions = new LoginSessionManager({
 				sessionsKind: authStores.loginSessions,
 				cutoffsKind: authStores.loginSessionCutoffs,
 				legacyStore: store
 			}, { logger: this.ctx.logger });
 			await this.loginSessions.load();
-			this.auditLog = authStores === null ? new AuthAuditLog(store, this.ctx.logger) : new AuthAuditLog({
+			this.auditLog = new AuthAuditLog({
 				authAuditKind: authStores.authAudit,
 				legacyStore: store
 			}, this.ctx.logger);
@@ -12354,7 +12338,7 @@ var LocalAuthAddon = class extends BaseAddon {
 					return user === null ? null : { username: user.username };
 				},
 				selfEnrollmentAllowed: async () => (await this.readDeviceCertificateSettings()).selfEnrollment === "allowed",
-				deviceCredentialsKind: authStores?.deviceCredentials ?? null,
+				deviceCredentialsKind: authStores.deviceCredentials,
 				logger: this.ctx.logger
 			});
 			await this.deviceCredentials.load();

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
-const require_hub_mdns_ciao = require("../../hub-mdns-ciao-nce3TXs_.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
+const require_hub_mdns_ciao = require("../../hub-mdns-ciao-CTBTlia4.js");
 let zod = require("zod");
 let node_net = require("node:net");
 let node_os = require("node:os");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
-import { $n as pickAppLinkHub, Cn as isAppLinkBase, Dn as isDefaultAppConnectionEndpoint, Fr as validateCustomAddress, H as HUB_MDNS_TXT_KEYS, Ln as localNetworkCapability, Lt as checkRoleAddress, Oa as EventCategory, V as HUB_MDNS_SERVICE_TYPE, Z as NetworkTunnelStartedDataSchema, cr as resolveAppConnections, fr as resolveHubAddressRoles, hr as resolveNotificationTapAddress, l as CAMSTACK_APP_LINK_ORIGIN, ni as BaseAddon, ti as errMsg, xr as shortHostname } from "../../dist-B_GRPhnY.mjs";
-import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-Bg2HfTwP.mjs";
+import { $n as pickAppLinkHub, Cn as isAppLinkBase, Dn as isDefaultAppConnectionEndpoint, Fr as validateCustomAddress, H as HUB_MDNS_TXT_KEYS, Ln as localNetworkCapability, Lt as checkRoleAddress, Ta as EventCategory, V as HUB_MDNS_SERVICE_TYPE, Z as NetworkTunnelStartedDataSchema, cr as resolveAppConnections, fr as resolveHubAddressRoles, hr as resolveNotificationTapAddress, l as CAMSTACK_APP_LINK_ORIGIN, ni as BaseAddon, ti as errMsg, xr as shortHostname } from "../../dist-Wy8cTxg6.mjs";
+import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-CJu0nhla.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
 import * as os$1 from "node:os";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 const require_log_read_filter = require("../../log-read-filter-Bi066jwU.js");
 let zod = require("zod");
 //#region src/builtins/loki-logging/loki-payload.ts

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { ni as BaseAddon, zn as logDestinationCapability } from "../../dist-B_GRPhnY.mjs";
+import { ni as BaseAddon, zn as logDestinationCapability } from "../../dist-Wy8cTxg6.mjs";
 import { n as compileLogFilter, o as lineMatches } from "../../log-read-filter-D7Ev3zm-.mjs";
 import { z } from "zod";
 //#region src/builtins/loki-logging/loki-payload.ts

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 let node_fs_promises = require("node:fs/promises");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Gn as metricsProviderCapability, Hi as createEvent, Oa as EventCategory, _t as UNATTRIBUTED_BUCKET_KEY, gn as foldSnapshotByFunction, lr as resolveBucketMs, ni as BaseAddon, or as reducePoints, rt as ROOT_BUCKET_KEY, ti as errMsg } from "../../dist-B_GRPhnY.mjs";
+import { Gn as metricsProviderCapability, Hi as createEvent, Ta as EventCategory, _t as UNATTRIBUTED_BUCKET_KEY, gn as foldSnapshotByFunction, lr as resolveBucketMs, ni as BaseAddon, or as reducePoints, rt as ROOT_BUCKET_KEY, ti as errMsg } from "../../dist-Wy8cTxg6.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";

package/dist/builtins/native-metrics/node-metrics-history-recorder.d.ts

@@ -35,8 +35,7 @@ export declare const NODE_GPU_TEMPERATURE_KEY: MetricsKey<"node-gpu-temperature"
 export declare const NODE_CONTAINER_CURRENT_KEY: MetricsKey<"container-current-mib">;
 /**
 * The PID-scoped keys of the earlier build. NOT written any more; kept only so
-* the one-shot split-database migration (`scripts/ops/split-databases`) still
-* names what it once wrote.
+* a spec can pin that nothing writes them again.
 */
 export declare const NODE_PROCESS_CPU_KEY: MetricsKey<"process-cpu-percent">;
 export declare const NODE_PROCESS_RSS_KEY: MetricsKey<"process-rss-mib">;

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 const require_coral_accelerators = require("../../coral-accelerators-Bi_c3Rft.js");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { Ji as emitReadiness, Oa as EventCategory, ni as BaseAddon, sn as enumerateInferenceDevices, ti as errMsg, tr as platformProbeCapability, yr as scoreRuntimes } from "../../dist-B_GRPhnY.mjs";
+import { Ta as EventCategory, ni as BaseAddon, qi as emitReadiness, sn as enumerateInferenceDevices, ti as errMsg, tr as platformProbeCapability, yr as scoreRuntimes } from "../../dist-Wy8cTxg6.mjs";
 import { n as nodeCoralFs, t as classifyCoralAccelerator } from "../../coral-accelerators-DcnZvctM.mjs";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";

package/dist/builtins/record-entries/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 //#region src/builtins/record-entries/entries-service.ts

package/dist/builtins/record-entries/index.mjs

@@ -1,4 +1,4 @@
-import { fi as InvalidRecordError, ga as recordSecretRef, ir as recordEntriesCapability, ji as UnknownRecordKindError, ni as BaseAddon, oa as mapSecretLeaves } from "../../dist-B_GRPhnY.mjs";
+import { aa as mapSecretLeaves, fi as InvalidRecordError, ir as recordEntriesCapability, ji as UnknownRecordKindError, ni as BaseAddon, pa as recordSecretRef } from "../../dist-Wy8cTxg6.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 //#region src/builtins/record-entries/entries-service.ts

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Oa as EventCategory, ni as BaseAddon } from "../../dist-B_GRPhnY.mjs";
+import { Ta as EventCategory, ni as BaseAddon } from "../../dist-Wy8cTxg6.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Cr as snapshotCapability, Oa as EventCategory, Ot as bareAddonId, Qr as DeviceFeature, Qt as deriveBatteryPresence, Wn as memoizePinnedFfmpeg, ei as DeviceType, jr as streamQualityLabel, kt as batteryCapability, ni as BaseAddon, s as BatteryStatusSchema, sa as nodePin, ti as errMsg } from "../../dist-B_GRPhnY.mjs";
+import { Cr as snapshotCapability, Ot as bareAddonId, Qr as DeviceFeature, Qt as deriveBatteryPresence, Ta as EventCategory, Wn as memoizePinnedFfmpeg, ei as DeviceType, jr as streamQualityLabel, kt as batteryCapability, ni as BaseAddon, oa as nodePin, s as BatteryStatusSchema, ti as errMsg } from "../../dist-Wy8cTxg6.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/sqlite-storage/file-host-protocol.d.ts

@@ -67,21 +67,6 @@ export interface ControlOps {
 			readonly declaredThisBoot: boolean;
 		}[];
 	};
-	/** Paginated `(id, data)` read of a legacy table in this file. */
-	readonly readLegacyCollection: {
-		readonly input: {
-			readonly collection: string;
-			readonly cursor?: string | undefined;
-			readonly limit?: number | undefined;
-		};
-		readonly output: {
-			readonly rows: readonly {
-				readonly id: string;
-				readonly data: Record<string, unknown>;
-			}[];
-			readonly nextCursor: string | null;
-		};
-	};
 }
 export type ControlOp = keyof ControlOps;
 /** At most this many calls in flight per worker; beyond it a call is refused, never queued. */

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BZQjLPiz.js");
+const require_dist = require("../../dist-Bn-RNanh.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { hn as filesystemBrowseCapability, kr as storageProviderCapability, ni as BaseAddon } from "../../dist-B_GRPhnY.mjs";
+import { hn as filesystemBrowseCapability, kr as storageProviderCapability, ni as BaseAddon } from "../../dist-Wy8cTxg6.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
-const require_wal_maintenance = require("../../wal-maintenance-DfSIOj24.js");
+const require_wal_maintenance = require("../../wal-maintenance-DUHEp_09.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/index.mjs

@@ -1,5 +1,5 @@
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./filesystem-storage.addon.mjs";
-import { A as SQLITE_MMAP_CEILING_BYTES, B as SQLITE_SLOW_CALL_MS, F as sqlitePageCacheKibFor, H as sqliteEngineStorm, I as SQLITE_ENGINE_STORM_WALL_SHARE, L as SQLITE_PROFILE_REPORT_FLOOR_MS, M as SQLITE_PAGE_CACHE_CEILING_KIB, N as SQLITE_PAGE_CACHE_FLOOR_KIB, P as sqliteMmapSizeFor, R as SQLITE_PROFILE_REPORT_INTERVAL_MS, V as SqliteOpProfiler, a as WalMaintenance, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_MMAP_FLOOR_BYTES, k as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, l as SqliteSettingsBackend, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SQLITE_PROFILE_TOP_N } from "../../wal-maintenance-Duejh7Lx.mjs";
+import { A as SQLITE_MMAP_CEILING_BYTES, B as SQLITE_SLOW_CALL_MS, F as sqlitePageCacheKibFor, H as sqliteEngineStorm, I as SQLITE_ENGINE_STORM_WALL_SHARE, L as SQLITE_PROFILE_REPORT_FLOOR_MS, M as SQLITE_PAGE_CACHE_CEILING_KIB, N as SQLITE_PAGE_CACHE_FLOOR_KIB, P as sqliteMmapSizeFor, R as SQLITE_PROFILE_REPORT_INTERVAL_MS, V as SqliteOpProfiler, a as WalMaintenance, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_MMAP_FLOOR_BYTES, k as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, l as SqliteSettingsBackend, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SQLITE_PROFILE_TOP_N } from "../../wal-maintenance-NKbwWovZ.mjs";
 import { SqliteSettingsAddon } from "./sqlite-settings.addon.mjs";
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {