@camstack/system 1.2.461 → 1.2.462

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Bn-RNanh.js");
+const require_dist = require("../../dist-Ct-4tTeX.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 const require_log_file_read_protocol = require("../../log-file-read-protocol-D0WcLbIV.js");
 let node_path = require("node:path");

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { ni as BaseAddon, zn as logDestinationCapability } from "../../dist-Wy8cTxg6.mjs";
+import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-8tWIDoWp.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import { a as LogFileIndexStore, i as serveRead, n as isFromReader, t as CancelBook } from "../../log-file-read-protocol-B7M3X3bT.mjs";
 import { createRequire } from "node:module";

package/dist/{composition-sources-b0e_2I-D.js → composition-sources-BPnpB9XG.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Bn-RNanh.js");
+const require_dist = require("./dist-Ct-4tTeX.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-DNRZWR1j.mjs → composition-sources-BlcYzFwY.mjs}

@@ -1,4 +1,4 @@
-import { Jr as compositionSourceKey, ti as errMsg } from "./dist-Wy8cTxg6.mjs";
+import { $r as errMsg, Kr as compositionSourceKey } from "./dist-8tWIDoWp.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-6OeJiZgi.js → constants-7ZMxWr8Z.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-Bn-RNanh.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-Ct-4tTeX.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{constants-BnkOdj9Q.mjs → constants-CH5UXe_G.mjs}

@@ -1,4 +1,4 @@
-import { Li as buildSecretRef } from "./dist-Wy8cTxg6.mjs";
+import { Fi as buildSecretRef } from "./dist-8tWIDoWp.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{device-ca-Bnkw8GyU.mjs → device-ca-BU_gnd-q.mjs}

@@ -1,4 +1,4 @@
-import { A as DEVICE_SAN_CREDENTIAL_PREFIX, Li as buildSecretRef, j as DEVICE_SAN_USER_PREFIX } from "./dist-Wy8cTxg6.mjs";
+import { A as DEVICE_SAN_CREDENTIAL_PREFIX, Fi as buildSecretRef, j as DEVICE_SAN_USER_PREFIX } from "./dist-8tWIDoWp.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-DK__ETIe.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-CPTDs--d.js → device-ca-CUEx7sti.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Bn-RNanh.js");
+const require_dist = require("./dist-Ct-4tTeX.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{dist-Wy8cTxg6.mjs → dist-8tWIDoWp.mjs}

@@ -17401,36 +17401,13 @@ var StorageKindSchema = z.object({
 	declaration: RecordKindDeclarationSchema
 });
 /**
-* The collections retired by exact name by D870 (their data became keys of the
-* camera's settings). No addon declares any of them any more; the engine still
-* refuses one a running addon declared this boot. `dropCollection` may remove
-* these, the per-addon scoped `addon-settings` / `addon-devices` / `sections`
-* tables, and the tables of owners that are no longer installed - nothing else.
-* The records-migration leftovers (D871 `stats-5m`, the phase-0 tables) were
-* dropped by hand on the operator hubs and left this list with D900.
-*/
-var STORAGE_ADMIN_MOVED_COLLECTIONS = [
-	"stream-broker:probe-snapshots",
-	"stream-broker:profile-map",
-	"stream-broker:rtsp-tokens",
-	"notification-center:device-mutes",
-	"recorder:recording-configs",
-	"pipeline-orchestrator:device-features"
-];
-/** The per-addon blob tables a scoped name may carry. */
-var STORAGE_ADMIN_SCOPED_BASES = [
-	"addon-settings",
-	"addon-devices",
-	"sections"
-];
-/**
-* storage-admin - the operator's maintenance reach into the settings database:
-* list its tables, drop one that nothing owns any more (D870).
+* storage-admin - the operator's maintenance reach into the databases: list
+* their tables and record kinds, read a kind for diagnosis. Read-only: a table
+* the code no longer creates is dropped by hand, offline (D901).
 *
 * Hub-only, internal and `auth: 'admin'` explicitly (`internal` does not gate
-* the mount, see `data-store-provider`). Both methods are LOGGED by the engine
-* with the table and the counts. `dropCollection` is a ONE-SHOT of the D870
-* migration and is marked for removal once the last hub has run it.
+* the mount, see `data-store-provider`). `listTables` is LOGGED by the engine
+* with the counts.
 *
 * `listTables` is READ-ONLY: it never creates a table, which `count` and `get`
 * on an undeclared scoped name used to do.
@@ -17446,26 +17423,6 @@ var storageAdminCapability = {
 		* optionally only those owned by `ownerPrefix`. Reads only.
 		*/
 		listTables: method(z.object({ ownerPrefix: z.string().min(1).optional() }), z.object({ tables: z.array(StorageTableSchema) }), { auth: "admin" }),
-		/**
-		* Drop one table. REFUSES when an addon declared it since the engine
-		* started (a running addon still owns it), when it is an engine or
-		* canonical table, when it does not exist, or when its row count is not
-		* `expectRows` - the caller states what it believes it is deleting. The
-		* engine also refuses anything but `<owner>:(addon-settings|addon-devices|
-		* sections)`, the retired collections by name, and tables of owners that
-		* are not installed (and refuses when it cannot read the installed list).
-		* Removed with the D870 migration script once the last hub ran it.
-		*/
-		dropCollection: method(z.object({
-			collection: z.string().min(1),
-			expectRows: z.number().int().nonnegative()
-		}), z.object({
-			dropped: z.literal(true),
-			rows: z.number().int().nonnegative()
-		}), {
-			kind: "mutation",
-			auth: "admin"
-		}),
 		/** Every record kind of both files with rows, a size estimate, class and retention (D881). */
 		listKinds: method(z.object({
 			owner: z.string().min(1).optional(),
@@ -45847,6 +45804,15 @@ var NcMediaPolicySchema = z.object({
 	* Replaces `zoneCrop`.
 	*/
 	showTriggerZone: z.boolean().optional(),
+	/**
+	* Draw the SUBJECT'S PATH on the picture — a line in the subject's colour
+	* through the track's positions up to the frame shown, the same path the
+	* debug views draw (`buildSubjectPath`, D903). Every picture mode a subject
+	* is drawn on: a `crop` maps the path into the crop and clips it. Valid only
+	* on a rule whose subject is a tracked object (refused on a sound rule);
+	* dropped on `image: 'none'`. Absent = off.
+	*/
+	showSubjectPath: z.boolean().optional(),
 	/** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
 	attach: z.enum([
 		"best",
@@ -82127,12 +82093,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"storageAdmin.dropCollection": {
-		capName: "storage-admin",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"storageAdmin.listKinds": {
 		capName: "storage-admin",
 		capScope: "system",
@@ -88838,4 +88798,4 @@ function armRemovalReconcile(opts) {
 	return () => clearInterval(timer);
 }
 //#endregion
-export { PreferenceDeviceIdSchema as $, isKeychainStoredField as $i, pickAppLinkHub as $n, DeviceRole as $r, describeComposableCaps as $t, DEVICE_SAN_CREDENTIAL_PREFIX as A, UnindexedFilterError as Ai, isVoidInput as An, streamCatalogCapability as Ar, buildCapabilityLookup as At, HISTORY_CATALOG as B, collectSecretMarkerRefs as Bi, logLevelAtMost as Bn, COMPOSER_ADDON_ID as Br, compositionSourceRefs as Bt, DATABASE_SNAPSHOT_TIMEOUT_MS as C, userError as Ca, ReadinessTimeoutError as Ci, isAppLinkBase as Cn, snapshotCapability as Cr, alertEpisodePayload as Ct, DEVICE_ENROLLMENT_TTL_MS as D, RecordUniqueViolationError as Di, isDefaultAppConnectionEndpoint as Dn, storageMigrationCapability as Dr, backupCapability as Dt, DERIVED_CAMERA_SILENCED_CAP_NAMES as E, RecordTooLargeError as Ei, isCredentialTokenPayload as En, storageCapability as Er, authProviderCapability as Et, DeviceStatusSchema as F, asString$1 as Fi, legacyModeOf as Fn, validateCustomAddress as Fr, cameraGridLayoutCapability as Ft, KeychainResetRecordSchema as G, defineRecordKinds as Gi, metricsProviderCapability as Gn, compositionFeatureEnabled as Gr, coreBlocksCapability as Gt, HUB_MDNS_TXT_KEYS as H, createEvent as Hi, mayReadLocation as Hn, cloneStatefulExpressionMemory as Hr, coreBlockComposition as Ht, DeviceTombstoneSchema as I, assertValidDeclaration as Ii, lifecycleJobSchema as In, vectorDimFromBase64 as Ir, canonicalIconKey as It, METHOD_ACCESS_MAP as J, expandCapMethods as Ji, normalizeCoreBlockWrite as Jn, compositionSourceKey as Jr, databaseSnapshotCapability as Jt, LOG_LEVEL_RANK as K, emitDownForOwnedCaps as Ki, modeMayWrite as Kn, compositionItemFieldPath as Kr, createDeviceExtensionProvider as Kt, FIRST_LEVEL_MACRO_CLASSES as L, buildSecretRef as Li, localNetworkCapability as Ln, vectorIndexDimConflictError as Lr, checkRoleAddress as Lt, DEVICE_TOMBSTONE_RETENTION_MS as M, WELL_KNOWN_TAB_MAP as Mi, keychainAdminCapability as Mn, supportedRuntimes as Mr, buildDeviceSignatureMessage as Mt, DataStoreDatabaseSchema as N, asJsonObject as Ni, keychainCapability as Nn, userManagementCapability as Nr, buildStreamParamsConfigSchema as Nt, DEVICE_HISTORY_ENERGY_KEY as O, RevConflictError as Oi, isLocationEnabled as On, storageOccupancyCapability as Or, bareAddonId as Ot, DeclaredDevices as P, asNumber as Pi, legacyAutoLinkIds as Pn, validateComposition as Pr, calendarsCapability as Pt, PREFERENCES_MAX_VALUE_BYTES as Q, isEvent as Qi, parseStreamParamsFormPatch as Qn, DeviceFeature as Qr, deriveBatteryPresence as Qt, FieldClaimModeSchema as R, collectSecretConfigKeys as Ri, locationIconKey as Rn, vectorStoreCapability as Rr, composerCapability as Rt, DATABASE_SNAPSHOT_SUFFIX as S, transformSecretWrite as Sa, ReadinessRegistry as Si, isAlertEpisodeSeverity as Sn, siteZoneKey as Sr, alertEpisodeId as St, DAY_NAMES as T, EventCategory as Ta, RecordNotFoundError as Ti, isCollectionArrayMethod as Tn, storageAdminCapability as Tr, armRemovalReconcile as Tt, KEYCHAIN_RESET_TRIGGER_ACTOR as U, customAction as Ui, mayWriteToLocation as Un, composedDeviceRef as Ur, coreBlockIdFromAddonId as Ut, HUB_MDNS_SERVICE_TYPE as V, collectZodSecretPaths as Vi, looseSchema as Vn, buildFfmpegArgs as Vr, coreBlockAddonId as Vt, KeychainAuditEntrySchema as W, defineCustomActions as Wi, memoizePinnedFfmpeg as Wn, composedDeviceStableId as Wr, coreBlockSourceKind as Wt, MOTION_CLOSE_AFTER_MS as X, hydrateSchema as Xi, objectInputDeclaresAddonId as Xn, disarmRoseMemory as Xr, decodeVectorBase64 as Xt, MINUTES_PER_DAY as Y, formatSecretScope as Yi, normalizeUnit as Yn, createStatefulExpressionMemory as Yr, declarationOwnerNodeId as Yt, NetworkTunnelStartedDataSchema as Z, isDeviceConfigCap as Zi, objectInputDeclaresRequiredDeviceId as Zn, toExpressionValue as Zr, defineExtensionSlotProvider as Zt, CalendarPreferencesSchema as _, secretTreeFromPaths as _a, RECORD_DELETE_BATCH as _i, formatDeviceRevoker as _n, scopesAllowAddon as _r, UNATTRIBUTED_BUCKET_KEY as _t, ApiKeyRecordSchema as a, mapSecretLeaves as aa, DATAPLANE_SECRET_HEADER as ai, deviceStateCapability as an, recordsCapability as ar, STORAGE_ACCESS_FALLBACK as at, CredentialTokenClaimsSchema as b, toNodeId as ba, REMOVE_LEAF as bi, interpolate as bn, settingsStoreCapability as br, addonSettingsCapability as bt, CAMERA_SWITCH_ORDER as c, normalizeSecretOwner as ca, DeclarationRefusedError as ci, enumerateItemArrayFields as cn, resolveAppConnections as cr, STREAM_PROFILE_META as ct, CATALOG_LANGS as d, parseSecretRef as da, HISTORY_DEFAULT_MIN_INTERVAL_MS as di, evictionPolicyOfLocation as dn, resolveCoreBlockFiles as dr, SsoBridgeClaimsSchema as dt, isSecretClear as ea, DeviceType as ei, deviceCredentialsCapability as en, planComposition as er, PreferenceNamespaceSchema as et, COMPOSED_ITEM_FIXED_FIELDS as f, readinessKey as fa, InvalidRecordError as fi, expandContainer as fn, resolveHubAddressRoles as fr, StorageCleanupJobSchema as ft, CREDENTIAL_TOKEN_AUDIENCE as g, scopeKey as ga, RECORD_BATCH_MAX_BYTES as gi, foldSnapshotByFunction as gn, runtimeStatePolicyFor as gr, TokenScopeSchema as gt, CORE_BLOCK_ADDON_PREFIX as h, resolveSecretMarkers as ha, RECORD_BATCH_MAX as hi, filesystemBrowseCapability as hn, resolveNotificationTapAddress as hr, StorageMigrationJobSchema as ht, AlertSchema as i, makeSecretMarker as ia, CALLER_STAMPED_CAPABILITIES as ii, deviceRemovalHookCapability as in, recordEntriesCapability as ir, RecordingStatusSchema as it, DEVICE_SAN_USER_PREFIX as j, UnknownRecordKindError as ji, kebabToCamel as jn, streamQualityLabel as jr, buildDeviceEnrollmentLink as jt, DEVICE_NONCE_TTL_MS as k, SECRET_CLEAR as ki, isObjectInput as kn, storageProviderCapability as kr, batteryCapability as kt, CAMSTACK_APP_LINK_ORIGIN as l, parseJsonObject as la, FilterRequiredError as li, enumerateSchemaFields as ln, resolveBucketMs as lr, ScopedTokenSchema as lt, CORE_BLOCKS_ADDON_ID as m, resolveCapMount as ma, PlaintextSecretError as mi, extractNestedAddonId as mn, resolveMethodAuth as mr, StorageLocationTypeSchema as mt, AGENT_MDNS_TXT_KEYS as n, isSecretMarkerLike as na, BaseAddon as ni, deviceHistoryCapability as nn, procedureAuthKey as nr, RECORDING_SOURCE_CAMSTACK_ADDON as nt, BaseDevice as o, nodePin as oa, DEVICE_SETTINGS_CONTRIBUTION_METHODS as oi, deviceStatusCapability as on, reducePoints as or, STORAGE_ADMIN_MOVED_COLLECTIONS as ot, COMPOSER_RUNNER_ID as p, recordSecretRef as pa, NoCallerError as pi, expressionContainsBuiltinCall as pn, resolveLocationMode as pr, StorageLocationModeSchema as pt, LegacyStorageLocationDefaultSchema as q, emitReadiness as qi, motionCapability as qn, compositionSliceKey as qr, dataStoreProviderCapability as qt, ALL_CAPABILITY_DEFINITIONS as r, isSecretRefOwnedBy as ra, BatchTooLargeError as ri, deviceManagerCapability as rn, ptzAutotrackCapability as rr, ROOT_BUCKET_KEY as rt, BatteryStatusSchema as s, normalizeNodeId as sa, DEVICE_STATUS_METHOD as si, enumerateInferenceDevices as sn, replacedFieldKeys as sr, STORAGE_ADMIN_SCOPED_BASES as st, AGENT_MDNS_SERVICE_TYPE as t, isSecretMarker as ta, errMsg as ti, deviceExtensionCapability as tn, platformProbeCapability as tr, PreferenceValueSchema as tt, CAP_NAMES_WITH_STATUS as u, parseJsonUnknown as ua, ForeignSecretMarkerError as ui, evaluateCompositionField as un, resolveCoreBlockEntry as ur, ServerNameSchema as ut, CatalogFileSchema as v, secretTreeFromSchema as va, RECORD_SWEEP_INTERVAL_MS as vi, formatMinutes as vn, scopesAllowDeviceCap as vr, UserRecordSchema as vt, DATA_STORE_DATABASES as w, withoutCallerStamp as wa, RecordKindDeclarationSchema as wi, isArrayOutputSchema as wn, splitTranslationRef as wr, alertsCapability as wt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as x, toSecretFieldView as xa, RUNTIME_DEFAULTS as xi, isAlertEpisodeOpen as xn, shortHostname as xr, addonWidgetsCapability as xt, CoreBlockSchema as y, sleep as ya, REDACTED_SECRET as yi, gbToBytes as yn, scoreRuntimes as yr, addonPagesCapability as yt, FieldClaimSchema as z, collectSecretLeaves as zi, logDestinationCapability as zn, withLocationMode as zr, compositionFieldKey as zt };
+export { PreferenceDeviceIdSchema as $, isSecretMarker as $i, platformProbeCapability as $n, errMsg as $r, deviceExtensionCapability as $t, DEVICE_SAN_CREDENTIAL_PREFIX as A, WELL_KNOWN_TAB_MAP as Ai, keychainAdminCapability as An, supportedRuntimes as Ar, buildDeviceSignatureMessage as At, HISTORY_CATALOG as B, createEvent as Bi, mayReadLocation as Bn, cloneStatefulExpressionMemory as Br, coreBlockComposition as Bt, DATABASE_SNAPSHOT_TIMEOUT_MS as C, EventCategory as Ca, RecordNotFoundError as Ci, isCollectionArrayMethod as Cn, storageAdminCapability as Cr, armRemovalReconcile as Ct, DEVICE_ENROLLMENT_TTL_MS as D, SECRET_CLEAR as Di, isObjectInput as Dn, storageProviderCapability as Dr, batteryCapability as Dt, DERIVED_CAMERA_SILENCED_CAP_NAMES as E, RevConflictError as Ei, isLocationEnabled as En, storageOccupancyCapability as Er, bareAddonId as Et, DeviceStatusSchema as F, buildSecretRef as Fi, localNetworkCapability as Fn, vectorIndexDimConflictError as Fr, checkRoleAddress as Ft, KeychainResetRecordSchema as G, emitReadiness as Gi, motionCapability as Gn, compositionSliceKey as Gr, dataStoreProviderCapability as Gt, HUB_MDNS_TXT_KEYS as H, defineCustomActions as Hi, memoizePinnedFfmpeg as Hn, composedDeviceStableId as Hr, coreBlockSourceKind as Ht, DeviceTombstoneSchema as I, collectSecretConfigKeys as Ii, locationIconKey as In, vectorStoreCapability as Ir, composerCapability as It, METHOD_ACCESS_MAP as J, hydrateSchema as Ji, objectInputDeclaresAddonId as Jn, disarmRoseMemory as Jr, decodeVectorBase64 as Jt, LOG_LEVEL_RANK as K, expandCapMethods as Ki, normalizeCoreBlockWrite as Kn, compositionSourceKey as Kr, databaseSnapshotCapability as Kt, FIRST_LEVEL_MACRO_CLASSES as L, collectSecretLeaves as Li, logDestinationCapability as Ln, withLocationMode as Lr, compositionFieldKey as Lt, DEVICE_TOMBSTONE_RETENTION_MS as M, asNumber as Mi, legacyAutoLinkIds as Mn, validateComposition as Mr, calendarsCapability as Mt, DataStoreDatabaseSchema as N, asString$1 as Ni, legacyModeOf as Nn, validateCustomAddress as Nr, cameraGridLayoutCapability as Nt, DEVICE_HISTORY_ENERGY_KEY as O, UnindexedFilterError as Oi, isVoidInput as On, streamCatalogCapability as Or, buildCapabilityLookup as Ot, DeclaredDevices as P, assertValidDeclaration as Pi, lifecycleJobSchema as Pn, vectorDimFromBase64 as Pr, canonicalIconKey as Pt, PREFERENCES_MAX_VALUE_BYTES as Q, isSecretClear as Qi, planComposition as Qn, DeviceType as Qr, deviceCredentialsCapability as Qt, FieldClaimModeSchema as R, collectSecretMarkerRefs as Ri, logLevelAtMost as Rn, COMPOSER_ADDON_ID as Rr, compositionSourceRefs as Rt, DATABASE_SNAPSHOT_SUFFIX as S, withoutCallerStamp as Sa, RecordKindDeclarationSchema as Si, isArrayOutputSchema as Sn, splitTranslationRef as Sr, alertsCapability as St, DAY_NAMES as T, RecordUniqueViolationError as Ti, isDefaultAppConnectionEndpoint as Tn, storageMigrationCapability as Tr, backupCapability as Tt, KEYCHAIN_RESET_TRIGGER_ACTOR as U, defineRecordKinds as Ui, metricsProviderCapability as Un, compositionFeatureEnabled as Ur, coreBlocksCapability as Ut, HUB_MDNS_SERVICE_TYPE as V, customAction as Vi, mayWriteToLocation as Vn, composedDeviceRef as Vr, coreBlockIdFromAddonId as Vt, KeychainAuditEntrySchema as W, emitDownForOwnedCaps as Wi, modeMayWrite as Wn, compositionItemFieldPath as Wr, createDeviceExtensionProvider as Wt, MOTION_CLOSE_AFTER_MS as X, isEvent as Xi, parseStreamParamsFormPatch as Xn, DeviceFeature as Xr, deriveBatteryPresence as Xt, MINUTES_PER_DAY as Y, isDeviceConfigCap as Yi, objectInputDeclaresRequiredDeviceId as Yn, toExpressionValue as Yr, defineExtensionSlotProvider as Yt, NetworkTunnelStartedDataSchema as Z, isKeychainStoredField as Zi, pickAppLinkHub as Zn, DeviceRole as Zr, describeComposableCaps as Zt, CalendarPreferencesSchema as _, sleep as _a, REDACTED_SECRET as _i, gbToBytes as _n, scoreRuntimes as _r, addonPagesCapability as _t, ApiKeyRecordSchema as a, normalizeNodeId as aa, DEVICE_STATUS_METHOD as ai, enumerateInferenceDevices as an, replacedFieldKeys as ar, STORAGE_ACCESS_FALLBACK as at, CredentialTokenClaimsSchema as b, transformSecretWrite as ba, ReadinessRegistry as bi, isAlertEpisodeSeverity as bn, siteZoneKey as br, alertEpisodeId as bt, CAMERA_SWITCH_ORDER as c, parseJsonUnknown as ca, ForeignSecretMarkerError as ci, evaluateCompositionField as cn, resolveCoreBlockEntry as cr, ServerNameSchema as ct, CATALOG_LANGS as d, recordSecretRef as da, NoCallerError as di, expressionContainsBuiltinCall as dn, resolveLocationMode as dr, StorageLocationModeSchema as dt, isSecretMarkerLike as ea, BaseAddon as ei, deviceHistoryCapability as en, procedureAuthKey as er, PreferenceNamespaceSchema as et, COMPOSED_ITEM_FIXED_FIELDS as f, resolveCapMount as fa, PlaintextSecretError as fi, extractNestedAddonId as fn, resolveMethodAuth as fr, StorageLocationTypeSchema as ft, CREDENTIAL_TOKEN_AUDIENCE as g, secretTreeFromSchema as ga, RECORD_SWEEP_INTERVAL_MS as gi, formatMinutes as gn, scopesAllowDeviceCap as gr, UserRecordSchema as gt, CORE_BLOCK_ADDON_PREFIX as h, secretTreeFromPaths as ha, RECORD_DELETE_BATCH as hi, formatDeviceRevoker as hn, scopesAllowAddon as hr, UNATTRIBUTED_BUCKET_KEY as ht, AlertSchema as i, nodePin as ia, DEVICE_SETTINGS_CONTRIBUTION_METHODS as ii, deviceStatusCapability as in, reducePoints as ir, RecordingStatusSchema as it, DEVICE_SAN_USER_PREFIX as j, asJsonObject as ji, keychainCapability as jn, userManagementCapability as jr, buildStreamParamsConfigSchema as jt, DEVICE_NONCE_TTL_MS as k, UnknownRecordKindError as ki, kebabToCamel as kn, streamQualityLabel as kr, buildDeviceEnrollmentLink as kt, CAMSTACK_APP_LINK_ORIGIN as l, parseSecretRef as la, HISTORY_DEFAULT_MIN_INTERVAL_MS as li, evictionPolicyOfLocation as ln, resolveCoreBlockFiles as lr, SsoBridgeClaimsSchema as lt, CORE_BLOCKS_ADDON_ID as m, scopeKey as ma, RECORD_BATCH_MAX_BYTES as mi, foldSnapshotByFunction as mn, runtimeStatePolicyFor as mr, TokenScopeSchema as mt, AGENT_MDNS_TXT_KEYS as n, makeSecretMarker as na, CALLER_STAMPED_CAPABILITIES as ni, deviceRemovalHookCapability as nn, recordEntriesCapability as nr, RECORDING_SOURCE_CAMSTACK_ADDON as nt, BaseDevice as o, normalizeSecretOwner as oa, DeclarationRefusedError as oi, enumerateItemArrayFields as on, resolveAppConnections as or, STREAM_PROFILE_META as ot, COMPOSER_RUNNER_ID as p, resolveSecretMarkers as pa, RECORD_BATCH_MAX as pi, filesystemBrowseCapability as pn, resolveNotificationTapAddress as pr, StorageMigrationJobSchema as pt, LegacyStorageLocationDefaultSchema as q, formatSecretScope as qi, normalizeUnit as qn, createStatefulExpressionMemory as qr, declarationOwnerNodeId as qt, ALL_CAPABILITY_DEFINITIONS as r, mapSecretLeaves as ra, DATAPLANE_SECRET_HEADER as ri, deviceStateCapability as rn, recordsCapability as rr, ROOT_BUCKET_KEY as rt, BatteryStatusSchema as s, parseJsonObject as sa, FilterRequiredError as si, enumerateSchemaFields as sn, resolveBucketMs as sr, ScopedTokenSchema as st, AGENT_MDNS_SERVICE_TYPE as t, isSecretRefOwnedBy as ta, BatchTooLargeError as ti, deviceManagerCapability as tn, ptzAutotrackCapability as tr, PreferenceValueSchema as tt, CAP_NAMES_WITH_STATUS as u, readinessKey as ua, InvalidRecordError as ui, expandContainer as un, resolveHubAddressRoles as ur, StorageCleanupJobSchema as ut, CatalogFileSchema as v, toNodeId as va, REMOVE_LEAF as vi, interpolate as vn, settingsStoreCapability as vr, addonSettingsCapability as vt, DATA_STORE_DATABASES as w, RecordTooLargeError as wi, isCredentialTokenPayload as wn, storageCapability as wr, authProviderCapability as wt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as x, userError as xa, ReadinessTimeoutError as xi, isAppLinkBase as xn, snapshotCapability as xr, alertEpisodePayload as xt, CoreBlockSchema as y, toSecretFieldView as ya, RUNTIME_DEFAULTS as yi, isAlertEpisodeOpen as yn, shortHostname as yr, addonWidgetsCapability as yt, FieldClaimSchema as z, collectZodSecretPaths as zi, looseSchema as zn, buildFfmpegArgs as zr, coreBlockAddonId as zt };

package/dist/{dist-Bn-RNanh.js → dist-Ct-4tTeX.js}

@@ -17401,36 +17401,13 @@ var StorageKindSchema = zod.z.object({
 	declaration: RecordKindDeclarationSchema
 });
 /**
-* The collections retired by exact name by D870 (their data became keys of the
-* camera's settings). No addon declares any of them any more; the engine still
-* refuses one a running addon declared this boot. `dropCollection` may remove
-* these, the per-addon scoped `addon-settings` / `addon-devices` / `sections`
-* tables, and the tables of owners that are no longer installed - nothing else.
-* The records-migration leftovers (D871 `stats-5m`, the phase-0 tables) were
-* dropped by hand on the operator hubs and left this list with D900.
-*/
-var STORAGE_ADMIN_MOVED_COLLECTIONS = [
-	"stream-broker:probe-snapshots",
-	"stream-broker:profile-map",
-	"stream-broker:rtsp-tokens",
-	"notification-center:device-mutes",
-	"recorder:recording-configs",
-	"pipeline-orchestrator:device-features"
-];
-/** The per-addon blob tables a scoped name may carry. */
-var STORAGE_ADMIN_SCOPED_BASES = [
-	"addon-settings",
-	"addon-devices",
-	"sections"
-];
-/**
-* storage-admin - the operator's maintenance reach into the settings database:
-* list its tables, drop one that nothing owns any more (D870).
+* storage-admin - the operator's maintenance reach into the databases: list
+* their tables and record kinds, read a kind for diagnosis. Read-only: a table
+* the code no longer creates is dropped by hand, offline (D901).
 *
 * Hub-only, internal and `auth: 'admin'` explicitly (`internal` does not gate
-* the mount, see `data-store-provider`). Both methods are LOGGED by the engine
-* with the table and the counts. `dropCollection` is a ONE-SHOT of the D870
-* migration and is marked for removal once the last hub has run it.
+* the mount, see `data-store-provider`). `listTables` is LOGGED by the engine
+* with the counts.
 *
 * `listTables` is READ-ONLY: it never creates a table, which `count` and `get`
 * on an undeclared scoped name used to do.
@@ -17446,26 +17423,6 @@ var storageAdminCapability = {
 		* optionally only those owned by `ownerPrefix`. Reads only.
 		*/
 		listTables: method(zod.z.object({ ownerPrefix: zod.z.string().min(1).optional() }), zod.z.object({ tables: zod.z.array(StorageTableSchema) }), { auth: "admin" }),
-		/**
-		* Drop one table. REFUSES when an addon declared it since the engine
-		* started (a running addon still owns it), when it is an engine or
-		* canonical table, when it does not exist, or when its row count is not
-		* `expectRows` - the caller states what it believes it is deleting. The
-		* engine also refuses anything but `<owner>:(addon-settings|addon-devices|
-		* sections)`, the retired collections by name, and tables of owners that
-		* are not installed (and refuses when it cannot read the installed list).
-		* Removed with the D870 migration script once the last hub ran it.
-		*/
-		dropCollection: method(zod.z.object({
-			collection: zod.z.string().min(1),
-			expectRows: zod.z.number().int().nonnegative()
-		}), zod.z.object({
-			dropped: zod.z.literal(true),
-			rows: zod.z.number().int().nonnegative()
-		}), {
-			kind: "mutation",
-			auth: "admin"
-		}),
 		/** Every record kind of both files with rows, a size estimate, class and retention (D881). */
 		listKinds: method(zod.z.object({
 			owner: zod.z.string().min(1).optional(),
@@ -45847,6 +45804,15 @@ var NcMediaPolicySchema = zod.z.object({
 	* Replaces `zoneCrop`.
 	*/
 	showTriggerZone: zod.z.boolean().optional(),
+	/**
+	* Draw the SUBJECT'S PATH on the picture — a line in the subject's colour
+	* through the track's positions up to the frame shown, the same path the
+	* debug views draw (`buildSubjectPath`, D903). Every picture mode a subject
+	* is drawn on: a `crop` maps the path into the crop and clips it. Valid only
+	* on a rule whose subject is a tracked object (refused on a sound rule);
+	* dropped on `image: 'none'`. Absent = off.
+	*/
+	showSubjectPath: zod.z.boolean().optional(),
 	/** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
 	attach: zod.z.enum([
 		"best",
@@ -82127,12 +82093,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"storageAdmin.dropCollection": {
-		capName: "storage-admin",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"storageAdmin.listKinds": {
 		capName: "storage-admin",
 		capScope: "system",
@@ -89390,18 +89350,6 @@ Object.defineProperty(exports, "STORAGE_ACCESS_FALLBACK", {
 		return STORAGE_ACCESS_FALLBACK;
 	}
 });
-Object.defineProperty(exports, "STORAGE_ADMIN_MOVED_COLLECTIONS", {
-	enumerable: true,
-	get: function() {
-		return STORAGE_ADMIN_MOVED_COLLECTIONS;
-	}
-});
-Object.defineProperty(exports, "STORAGE_ADMIN_SCOPED_BASES", {
-	enumerable: true,
-	get: function() {
-		return STORAGE_ADMIN_SCOPED_BASES;
-	}
-});
 Object.defineProperty(exports, "STREAM_PROFILE_META", {
 	enumerable: true,
 	get: function() {

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-CaJjuLHq.js");
+const require_wal_maintenance = require("./wal-maintenance-DBvuVU9s.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-Bj_MmDkr.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-BvzVehem.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{hub-mdns-ciao-CJu0nhla.mjs → hub-mdns-ciao-Cuy7LUdz.mjs}

@@ -1,7 +1,7 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { Ca as userError } from "./dist-Wy8cTxg6.mjs";
+import { xa as userError } from "./dist-8tWIDoWp.mjs";
 import { f as X509Certificate$1 } from "./x509.es-DK__ETIe.mjs";
-import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-Iw3RSQup.mjs";
+import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-CC7jpktS.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/{hub-mdns-ciao-CTBTlia4.js → hub-mdns-ciao-DJ-Amqd7.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-Bn-RNanh.js");
+const require_dist = require("./dist-Ct-4tTeX.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
-const require_agent_https = require("./agent-https-Dnr_nIVx.js");
+const require_agent_https = require("./agent-https-C6M6apPV.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/index.d.ts

@@ -136,7 +136,7 @@ export type { HubMdnsAnnouncement, HubMdnsHandle, HubMdnsPublisher } from "./bui
 export { IntegrationRegistry } from "./builtins/sqlite-storage/integration-registry.js";
 export type { IntegrationRecordStores } from "./builtins/sqlite-storage/integration-registry.js";
 export { integrationRegistryRecordKinds, INTEGRATIONS_LEGACY, INTEGRATION_SETTINGS_LEGACY } from "./builtins/sqlite-storage/integration-record-kinds.js";
-export { clusterAgentRecordKinds, clusterNodeHistoryRecordKind, ClusterNodeHistoryBodySchema, CLUSTER_NODE_HISTORY_COLLECTION } from "./builtins/cluster-agent/record-kinds.js";
+export { clusterAgentRecordKinds, clusterNodeHistoryRecordKind, ClusterNodeHistoryBodySchema } from "./builtins/cluster-agent/record-kinds.js";
 export type { ClusterNodeHistoryBody } from "./builtins/cluster-agent/record-kinds.js";
 export { storageOrchestratorRecordKinds, STORAGE_DRAIN_STATE_LEGACY } from "./builtins/storage-orchestrator/record-kinds.js";
 export { backupOrchestratorRecordKinds, backupRecordStoresOf, type BackupRecordStores } from "./builtins/backup-orchestrator/record-kinds.js";