@camstack/system 1.2.461 → 1.2.463

package/dist/{dist-Bn-RNanh.js → dist-D9aw_d0G.js}

@@ -745,7 +745,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-CSuN0thG.mjs
+//#region ../types/dist/sleep-_sV1BE2f.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -857,21 +857,21 @@ function collectSecretConfigKeys(schema) {
 	for (const section of sectionsOf(schema)) for (const field of fieldsOf(section)) walkField(field, keys);
 	return keys;
 }
-function isRecord$6(value) {
+function isRecord$7(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function sectionsOf(schema) {
-	if (!isRecord$6(schema)) return [];
+	if (!isRecord$7(schema)) return [];
 	const sections = schema["sections"];
 	return Array.isArray(sections) ? sections : [];
 }
 function fieldsOf(node) {
-	if (!isRecord$6(node)) return [];
+	if (!isRecord$7(node)) return [];
 	const fields = node["fields"];
 	return Array.isArray(fields) ? fields : [];
 }
 function walkField(field, out) {
-	if (!isRecord$6(field)) return;
+	if (!isRecord$7(field)) return;
 	const type = field["type"];
 	const key = field["key"];
 	if ((type === "password" || field["secret"] === true) && typeof key === "string" && key.length > 0) out.add(key);
@@ -909,7 +909,7 @@ function walkField(field, out) {
 var SECRET_CLEAR = { $secretClear: true };
 /** The `'***'` token D634 redaction writes for non-admins. */
 var LEGACY_DEVICE_REDACTION = "***";
-function isRecord$5(value) {
+function isRecord$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function makeSecretMarker(ref) {
@@ -920,16 +920,16 @@ function makeSecretMarker(ref) {
 }
 /** A stored marker: an object whose `$secret` is a non-empty string. */
 function isSecretMarker(value) {
-	if (!isRecord$5(value)) return false;
+	if (!isRecord$6(value)) return false;
 	const ref = value["$secret"];
 	return typeof ref === "string" && ref.length > 0;
 }
 /** Anything carrying a `$secret` key — a stored marker or a UI view of one. */
 function isSecretMarkerLike(value) {
-	return isRecord$5(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
+	return isRecord$6(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
 }
 function isSecretClear(value) {
-	return isRecord$5(value) && value["$secretClear"] === true;
+	return isRecord$6(value) && value["$secretClear"] === true;
 }
 /**
 * The UI view of a stored secret field value: a marker becomes "set", inline
@@ -1598,7 +1598,7 @@ var KeychainWriteRefusedError = class extends Error {
 	}
 };
 var KEEP = { kind: "keep" };
-function isRecord$4(value) {
+function isRecord$5(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function defaultMintId() {
@@ -1611,7 +1611,7 @@ function collectSecretMarkerRefs(value, out = []) {
 		return out;
 	}
 	if (Array.isArray(value)) for (const item of value) collectSecretMarkerRefs(item, out);
-	else if (isRecord$4(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
+	else if (isRecord$5(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
 	return out;
 }
 async function storedValueEquals(secrets, marker, candidate) {
@@ -1666,7 +1666,7 @@ function rowId(row, idKey) {
 	return null;
 }
 async function writeArray(ctx, node, incoming, stored, fieldPath) {
-	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$4) : [];
+	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$5) : [];
 	if (!Array.isArray(incoming)) {
 		ctx.deletes.push(...collectSecretMarkerRefs(storedRows));
 		return {
@@ -1682,7 +1682,7 @@ async function writeArray(ctx, node, incoming, stored, fieldPath) {
 	const kept = /* @__PURE__ */ new Set();
 	const rows = [];
 	for (const row of incoming) {
-		if (!isRecord$4(row)) {
+		if (!isRecord$5(row)) {
 			rows.push(row);
 			continue;
 		}
@@ -1707,7 +1707,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 		case "leaf": return writeLeaf(ctx, incoming, stored, fieldPath);
 		case "array": return writeArray(ctx, node, incoming, stored, fieldPath);
 		case "object": {
-			if (!isRecord$4(incoming)) {
+			if (!isRecord$5(incoming)) {
 				if (incoming === void 0) return KEEP;
 				ctx.deletes.push(...collectSecretMarkerRefs(stored));
 				return {
@@ -1715,7 +1715,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 					value: incoming
 				};
 			}
-			const storedObj = isRecord$4(stored) ? stored : {};
+			const storedObj = isRecord$5(stored) ? stored : {};
 			return {
 				kind: "value",
 				value: await writeMembers(ctx, node.children, incoming, storedObj, (m) => `${fieldPath}.${m}`)
@@ -1838,7 +1838,7 @@ async function resolveSecretMarkers(value, secrets, options = {}) {
 				value: items
 			};
 		}
-		if (isRecord$4(v)) {
+		if (isRecord$5(v)) {
 			const out = {};
 			for (const [k, child] of Object.entries(v)) {
 				const s = substitute(child);
@@ -1870,7 +1870,7 @@ var SecretOverwriteRefusedError = class extends Error {
 		this.name = "SecretOverwriteRefusedError";
 	}
 };
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function resolvedValue(pass, marker) {
@@ -1899,7 +1899,7 @@ function inArray(pass, incoming, stored) {
 	return incoming.map((item, index) => {
 		const twin = stored[index];
 		if (isSecretMarker(twin)) return typeof item === "string" && item === resolvedValue(pass, twin) ? twin : item;
-		if (isRecord$3(item) && isRecord$3(twin)) return inArrayRow(pass, item, twin);
+		if (isRecord$4(item) && isRecord$4(twin)) return inArrayRow(pass, item, twin);
 		if (Array.isArray(item) && Array.isArray(twin)) return inArray(pass, item, twin);
 		return item;
 	});
@@ -1910,7 +1910,7 @@ function inArrayRow(pass, incoming, stored) {
 		const twin = stored[key];
 		if (isSecretMarker(twin)) {
 			if (typeof value === "string" && value === resolvedValue(pass, twin)) out[key] = twin;
-		} else if (isRecord$3(value) && isRecord$3(twin)) out[key] = inArrayRow(pass, value, twin);
+		} else if (isRecord$4(value) && isRecord$4(twin)) out[key] = inArrayRow(pass, value, twin);
 		else if (Array.isArray(value) && Array.isArray(twin)) out[key] = inArray(pass, value, twin);
 	}
 	return out;
@@ -1918,7 +1918,7 @@ function inArrayRow(pass, incoming, stored) {
 async function walk(pass, incoming, stored) {
 	if (isSecretMarker(stored)) return atMarker(pass, incoming, stored);
 	if (Array.isArray(incoming) && Array.isArray(stored)) return inArray(pass, incoming, stored);
-	if (!isRecord$3(incoming) || !isRecord$3(stored)) return incoming;
+	if (!isRecord$4(incoming) || !isRecord$4(stored)) return incoming;
 	const out = { ...incoming };
 	for (const [key, value] of Object.entries(incoming)) out[key] = await walk(pass, value, stored[key]);
 	return out;
@@ -1949,7 +1949,7 @@ async function restoreUnchangedSecrets(input) {
 function isJsonEqual(a, b) {
 	if (Object.is(a, b)) return true;
 	if (Array.isArray(a)) return Array.isArray(b) && a.length === b.length && a.every((v, i) => isJsonEqual(v, b[i]));
-	if (isRecord$3(a) && isRecord$3(b)) {
+	if (isRecord$4(a) && isRecord$4(b)) {
 		const keys = Object.keys(a);
 		if (keys.length !== Object.keys(b).length) return false;
 		return keys.every((k) => Object.prototype.hasOwnProperty.call(b, k) && isJsonEqual(a[k], b[k]));
@@ -1973,7 +1973,7 @@ function markerKeysOf(blob, owner) {
 }
 function nodeFromStored(value, owner) {
 	if (isSecretMarker(value)) return isSecretRefOwnedBy(value.$secret, owner) ? { kind: "leaf" } : null;
-	if (!isRecord$3(value)) return null;
+	if (!isRecord$4(value)) return null;
 	const children = /* @__PURE__ */ new Map();
 	for (const [key, child] of Object.entries(value)) {
 		const node = nodeFromStored(child, owner);
@@ -3507,11 +3507,11 @@ function secretArrayPrefixes(path) {
 	}
 	return prefixes;
 }
-function isRecord$2(value) {
+function isRecord$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function elementId(element, idKey, declared, prefix) {
-	const id = isRecord$2(element) ? element[idKey] : void 0;
+	const id = isRecord$3(element) ? element[idKey] : void 0;
 	if (typeof id !== "string" || id.length === 0) throw new InvalidRecordError(`"${declared}": every element of "${prefix}" needs a non-empty string "${idKey}" to carry a secret`);
 	return id;
 }
@@ -3522,7 +3522,7 @@ function elementId(element, idKey, declared, prefix) {
 */
 var REMOVE_LEAF = Symbol("remove-leaf");
 function mapAt(node, segments, index, walkedKeys, concretePrefix, declared, arrayKeys, visit) {
-	if (!isRecord$2(node)) return node;
+	if (!isRecord$3(node)) return node;
 	const segment = segments[index];
 	if (segment === void 0) return node;
 	if (!Object.prototype.hasOwnProperty.call(node, segment.key)) return node;
@@ -17401,36 +17401,13 @@ var StorageKindSchema = zod.z.object({
 	declaration: RecordKindDeclarationSchema
 });
 /**
-* The collections retired by exact name by D870 (their data became keys of the
-* camera's settings). No addon declares any of them any more; the engine still
-* refuses one a running addon declared this boot. `dropCollection` may remove
-* these, the per-addon scoped `addon-settings` / `addon-devices` / `sections`
-* tables, and the tables of owners that are no longer installed - nothing else.
-* The records-migration leftovers (D871 `stats-5m`, the phase-0 tables) were
-* dropped by hand on the operator hubs and left this list with D900.
-*/
-var STORAGE_ADMIN_MOVED_COLLECTIONS = [
-	"stream-broker:probe-snapshots",
-	"stream-broker:profile-map",
-	"stream-broker:rtsp-tokens",
-	"notification-center:device-mutes",
-	"recorder:recording-configs",
-	"pipeline-orchestrator:device-features"
-];
-/** The per-addon blob tables a scoped name may carry. */
-var STORAGE_ADMIN_SCOPED_BASES = [
-	"addon-settings",
-	"addon-devices",
-	"sections"
-];
-/**
-* storage-admin - the operator's maintenance reach into the settings database:
-* list its tables, drop one that nothing owns any more (D870).
+* storage-admin - the operator's maintenance reach into the databases: list
+* their tables and record kinds, read a kind for diagnosis. Read-only: a table
+* the code no longer creates is dropped by hand, offline (D901).
 *
 * Hub-only, internal and `auth: 'admin'` explicitly (`internal` does not gate
-* the mount, see `data-store-provider`). Both methods are LOGGED by the engine
-* with the table and the counts. `dropCollection` is a ONE-SHOT of the D870
-* migration and is marked for removal once the last hub has run it.
+* the mount, see `data-store-provider`). `listTables` is LOGGED by the engine
+* with the counts.
 *
 * `listTables` is READ-ONLY: it never creates a table, which `count` and `get`
 * on an undeclared scoped name used to do.
@@ -17446,26 +17423,6 @@ var storageAdminCapability = {
 		* optionally only those owned by `ownerPrefix`. Reads only.
 		*/
 		listTables: method(zod.z.object({ ownerPrefix: zod.z.string().min(1).optional() }), zod.z.object({ tables: zod.z.array(StorageTableSchema) }), { auth: "admin" }),
-		/**
-		* Drop one table. REFUSES when an addon declared it since the engine
-		* started (a running addon still owns it), when it is an engine or
-		* canonical table, when it does not exist, or when its row count is not
-		* `expectRows` - the caller states what it believes it is deleting. The
-		* engine also refuses anything but `<owner>:(addon-settings|addon-devices|
-		* sections)`, the retired collections by name, and tables of owners that
-		* are not installed (and refuses when it cannot read the installed list).
-		* Removed with the D870 migration script once the last hub ran it.
-		*/
-		dropCollection: method(zod.z.object({
-			collection: zod.z.string().min(1),
-			expectRows: zod.z.number().int().nonnegative()
-		}), zod.z.object({
-			dropped: zod.z.literal(true),
-			rows: zod.z.number().int().nonnegative()
-		}), {
-			kind: "mutation",
-			auth: "admin"
-		}),
 		/** Every record kind of both files with rows, a size estimate, class and retention (D881). */
 		listKinds: method(zod.z.object({
 			owner: zod.z.string().min(1).optional(),
@@ -45847,6 +45804,15 @@ var NcMediaPolicySchema = zod.z.object({
 	* Replaces `zoneCrop`.
 	*/
 	showTriggerZone: zod.z.boolean().optional(),
+	/**
+	* Draw the SUBJECT'S PATH on the picture — a line in the subject's colour
+	* through the track's positions up to the frame shown, the same path the
+	* debug views draw (`buildSubjectPath`, D903). Every picture mode a subject
+	* is drawn on: a `crop` maps the path into the crop and clips it. Valid only
+	* on a rule whose subject is a tracked object (refused on a sound rule);
+	* dropped on `image: 'none'`. Absent = off.
+	*/
+	showSubjectPath: zod.z.boolean().optional(),
 	/** @deprecated D897 — accepted from an editor that predates `image`, folded into it on save. */
 	attach: zod.z.enum([
 		"best",
@@ -82127,12 +82093,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"storageAdmin.dropCollection": {
-		capName: "storage-admin",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"storageAdmin.listKinds": {
 		capName: "storage-admin",
 		capScope: "system",
@@ -89390,18 +89350,6 @@ Object.defineProperty(exports, "STORAGE_ACCESS_FALLBACK", {
 		return STORAGE_ACCESS_FALLBACK;
 	}
 });
-Object.defineProperty(exports, "STORAGE_ADMIN_MOVED_COLLECTIONS", {
-	enumerable: true,
-	get: function() {
-		return STORAGE_ADMIN_MOVED_COLLECTIONS;
-	}
-});
-Object.defineProperty(exports, "STORAGE_ADMIN_SCOPED_BASES", {
-	enumerable: true,
-	get: function() {
-		return STORAGE_ADMIN_SCOPED_BASES;
-	}
-});
 Object.defineProperty(exports, "STREAM_PROFILE_META", {
 	enumerable: true,
 	get: function() {

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-CaJjuLHq.js");
+const require_wal_maintenance = require("./wal-maintenance-jXcOxm2T.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-Bj_MmDkr.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-Dg6IzSgz.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{hub-mdns-ciao-CJu0nhla.mjs → hub-mdns-ciao-Bm09NrMS.mjs}

@@ -1,7 +1,7 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { Ca as userError } from "./dist-Wy8cTxg6.mjs";
+import { xa as userError } from "./dist-C2OBCa-A.mjs";
 import { f as X509Certificate$1 } from "./x509.es-DK__ETIe.mjs";
-import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-Iw3RSQup.mjs";
+import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-B9gbXoJI.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/{hub-mdns-ciao-CTBTlia4.js → hub-mdns-ciao-CFlhVKK6.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-Bn-RNanh.js");
+const require_dist = require("./dist-D9aw_d0G.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
-const require_agent_https = require("./agent-https-Dnr_nIVx.js");
+const require_agent_https = require("./agent-https-DhFIbEwN.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/index.d.ts

@@ -136,7 +136,7 @@ export type { HubMdnsAnnouncement, HubMdnsHandle, HubMdnsPublisher } from "./bui
 export { IntegrationRegistry } from "./builtins/sqlite-storage/integration-registry.js";
 export type { IntegrationRecordStores } from "./builtins/sqlite-storage/integration-registry.js";
 export { integrationRegistryRecordKinds, INTEGRATIONS_LEGACY, INTEGRATION_SETTINGS_LEGACY } from "./builtins/sqlite-storage/integration-record-kinds.js";
-export { clusterAgentRecordKinds, clusterNodeHistoryRecordKind, ClusterNodeHistoryBodySchema, CLUSTER_NODE_HISTORY_COLLECTION } from "./builtins/cluster-agent/record-kinds.js";
+export { clusterAgentRecordKinds, clusterNodeHistoryRecordKind, ClusterNodeHistoryBodySchema } from "./builtins/cluster-agent/record-kinds.js";
 export type { ClusterNodeHistoryBody } from "./builtins/cluster-agent/record-kinds.js";
 export { storageOrchestratorRecordKinds, STORAGE_DRAIN_STATE_LEGACY } from "./builtins/storage-orchestrator/record-kinds.js";
 export { backupOrchestratorRecordKinds, backupRecordStoresOf, type BackupRecordStores } from "./builtins/backup-orchestrator/record-kinds.js";