@camstack/system 1.2.462 → 1.2.464

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-Ct-4tTeX.js");
+const require_dist = require("../../dist-D9aw_d0G.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 const require_log_file_read_protocol = require("../../log-file-read-protocol-D0WcLbIV.js");
 let node_path = require("node:path");

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-8tWIDoWp.mjs";
+import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-C2OBCa-A.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import { a as LogFileIndexStore, i as serveRead, n as isFromReader, t as CancelBook } from "../../log-file-read-protocol-B7M3X3bT.mjs";
 import { createRequire } from "node:module";

package/dist/{composition-sources-BlcYzFwY.mjs → composition-sources-CGtooHSL.mjs}

@@ -1,4 +1,4 @@
-import { $r as errMsg, Kr as compositionSourceKey } from "./dist-8tWIDoWp.mjs";
+import { $r as errMsg, Kr as compositionSourceKey } from "./dist-C2OBCa-A.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-BPnpB9XG.js → composition-sources-oXvmbMHX.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Ct-4tTeX.js");
+const require_dist = require("./dist-D9aw_d0G.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-7ZMxWr8Z.js → constants-5mrGZxwS.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-Ct-4tTeX.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-D9aw_d0G.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{constants-CH5UXe_G.mjs → constants-CdutnpL9.mjs}

@@ -1,4 +1,4 @@
-import { Fi as buildSecretRef } from "./dist-8tWIDoWp.mjs";
+import { Fi as buildSecretRef } from "./dist-C2OBCa-A.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{coral-accelerators-Qhn5TOYZ.mjs → coral-accelerators-D_S1Fo5h.mjs}

@@ -1,5 +1,5 @@
 import { EDGETPU_LIB_ENV, chooseEdgetpuDelegate, nodeDataRootFromEnv } from "@camstack/types/node";
-import fs from "node:fs";
+import Kt from "node:fs";
 //#region src/builtins/platform-probe/coral-accelerators.ts
 /**
 * Coral USB Edge TPU USB identifiers.
@@ -126,14 +126,14 @@ function classifyCoralAccelerator(fsx, delegateHost = currentDelegateHost()) {
 }
 function safeList(dir) {
 	try {
-		return fs.readdirSync(dir);
+		return Kt.readdirSync(dir);
 	} catch {
 		return [];
 	}
 }
 function safeRead(path) {
 	try {
-		return fs.readFileSync(path, "utf8").trim();
+		return Kt.readFileSync(path, "utf8").trim();
 	} catch {
 		return "";
 	}
@@ -147,7 +147,7 @@ var nodeCoralFs = {
 	listApexClass: () => safeList("/sys/class/apex"),
 	canOpen: (path) => {
 		try {
-			fs.accessSync(path, fs.constants.R_OK | fs.constants.W_OK);
+			Kt.accessSync(path, Kt.constants.R_OK | Kt.constants.W_OK);
 			return true;
 		} catch {
 			return false;
@@ -155,7 +155,7 @@ var nodeCoralFs = {
 	},
 	exists: (path) => {
 		try {
-			return fs.existsSync(path);
+			return Kt.existsSync(path);
 		} catch {
 			return false;
 		}

package/dist/{custom-action-registry-DZSCLBuT.mjs → custom-action-registry-BGYDjTqY.mjs}

@@ -3,7 +3,7 @@ import * as path$1 from "node:path";
 import path from "node:path";
 import { promisify } from "node:util";
 import { HF_REPO, MODEL_FORMATS, describeCustomActions, hfModelUrl } from "@camstack/types/addon";
-import * as fs$1 from "node:fs";
+import * as fs from "node:fs";
 import { createReadStream, promises } from "node:fs";
 import { createServer } from "node:http";
 import { brotliCompress, constants as constants$1, gzip } from "node:zlib";
@@ -159,7 +159,7 @@ var HOSTED_MODEL_REVISIONS = {
 //#endregion
 //#region src/download/model-downloader.ts
 function isNonEmptyFile(filePath) {
-	return fs$1.existsSync(filePath) && fs$1.statSync(filePath).size > 0;
+	return fs.existsSync(filePath) && fs.statSync(filePath).size > 0;
 }
 /**
 * Sibling files of a single-file (non-directory) format — extra files the
@@ -236,11 +236,11 @@ function resolveRedirectUrl(current, location) {
 	return new URL(location, current);
 }
 async function downloadFile(url, destPath, onProgressOrOptions) {
-	if (fs$1.existsSync(destPath)) return destPath;
+	if (fs.existsSync(destPath)) return destPath;
 	const opts = normalizeDownloadOptions(onProgressOrOptions);
 	const fetchImpl = opts.fetchImpl ?? fetch;
 	const maxRedirects = opts.maxRedirects ?? DEFAULT_MAX_REDIRECTS;
-	fs$1.mkdirSync(path$1.dirname(destPath), { recursive: true });
+	fs.mkdirSync(path$1.dirname(destPath), { recursive: true });
 	const tmpPath = destPath + ".downloading";
 	try {
 		let current = url;
@@ -278,7 +278,7 @@ async function downloadFile(url, destPath, onProgressOrOptions) {
 		if (!response.body) throw new Error(`No response body from ${url}`);
 		const total = parseInt(response.headers.get("content-length") ?? "0", 10);
 		let downloaded = 0;
-		const fileStream = fs$1.createWriteStream(tmpPath);
+		const fileStream = fs.createWriteStream(tmpPath);
 		const reader = response.body.getReader();
 		try {
 			for (;;) {
@@ -296,11 +296,11 @@ async function downloadFile(url, destPath, onProgressOrOptions) {
 				fileStream.on("error", reject);
 			});
 		}
-		fs$1.renameSync(tmpPath, destPath);
+		fs.renameSync(tmpPath, destPath);
 		return destPath;
 	} catch (err) {
 		try {
-			fs$1.unlinkSync(tmpPath);
+			fs.unlinkSync(tmpPath);
 		} catch {}
 		throw err;
 	}
@@ -324,12 +324,12 @@ async function downloadModel(options) {
 	const { url, fallbackUrls = [], destDir, filename, expectedSha256, onProgress } = options;
 	const fname = filename ?? url.split("/").pop() ?? "model.bin";
 	const destPath = path$1.join(destDir, fname);
-	if (fs$1.existsSync(destPath)) return {
+	if (fs.existsSync(destPath)) return {
 		filePath: destPath,
 		downloadedBytes: 0,
 		fromCache: true
 	};
-	fs$1.mkdirSync(destDir, { recursive: true });
+	fs.mkdirSync(destDir, { recursive: true });
 	const urls = [url, ...fallbackUrls];
 	let lastError = null;
 	for (const tryUrl of urls) try {
@@ -337,25 +337,25 @@ async function downloadModel(options) {
 		if (expectedSha256) {
 			const hash = await computeSha256(destPath);
 			if (hash !== expectedSha256) {
-				fs$1.unlinkSync(destPath);
+				fs.unlinkSync(destPath);
 				throw new Error(`SHA256 mismatch: expected ${expectedSha256}, got ${hash}`);
 			}
 		}
 		return {
 			filePath: destPath,
-			downloadedBytes: fs$1.statSync(destPath).size,
+			downloadedBytes: fs.statSync(destPath).size,
 			fromCache: false
 		};
 	} catch (e) {
 		lastError = e;
-		if (fs$1.existsSync(destPath)) fs$1.unlinkSync(destPath);
+		if (fs.existsSync(destPath)) fs.unlinkSync(destPath);
 	}
 	throw lastError ?? /* @__PURE__ */ new Error(`Failed to download model from ${url}`);
 }
 async function computeSha256(filePath) {
 	return new Promise((resolve, reject) => {
 		const hash = createHash("sha256");
-		const stream = fs$1.createReadStream(filePath);
+		const stream = fs.createReadStream(filePath);
 		stream.on("data", (chunk) => hash.update(chunk));
 		stream.on("end", () => resolve(hash.digest("hex")));
 		stream.on("error", reject);
@@ -380,28 +380,28 @@ async function downloadDirectory(url, destDir, knownFiles, onProgress) {
 		fileUrl: `https://huggingface.co/${repo}/resolve/main/${dirPath}/${f}`
 	}));
 	const tmpDir = destDir + ".downloading";
-	fs$1.rmSync(tmpDir, {
+	fs.rmSync(tmpDir, {
 		recursive: true,
 		force: true
 	});
-	fs$1.mkdirSync(tmpDir, { recursive: true });
+	fs.mkdirSync(tmpDir, { recursive: true });
 	let totalDownloaded = 0;
 	try {
 		for (const file of files) {
 			const destPath = path$1.join(tmpDir, file.relativePath);
-			fs$1.mkdirSync(path$1.dirname(destPath), { recursive: true });
+			fs.mkdirSync(path$1.dirname(destPath), { recursive: true });
 			await downloadFile(file.fileUrl, destPath, (downloaded, _total) => {
 				onProgress?.(totalDownloaded + downloaded, void 0);
 			});
-			totalDownloaded += fs$1.statSync(destPath).size;
+			totalDownloaded += fs.statSync(destPath).size;
 		}
-		fs$1.rmSync(destDir, {
+		fs.rmSync(destDir, {
 			recursive: true,
 			force: true
 		});
-		fs$1.renameSync(tmpDir, destDir);
+		fs.renameSync(tmpDir, destDir);
 	} catch (err) {
-		fs$1.rmSync(tmpDir, {
+		fs.rmSync(tmpDir, {
 			recursive: true,
 			force: true
 		});
@@ -433,7 +433,7 @@ function revisionRecordPath(modelPath) {
 }
 function readRevisionRecord(modelPath) {
 	try {
-		return fs$1.readFileSync(revisionRecordPath(modelPath), "utf8").trim();
+		return fs.readFileSync(revisionRecordPath(modelPath), "utf8").trim();
 	} catch {
 		return null;
 	}
@@ -497,8 +497,8 @@ function writeRevisionRecord(modelPath, revision) {
 	if (revision === void 0) return;
 	const record = revisionRecordPath(modelPath);
 	const tmp = `${record}.tmp`;
-	fs$1.writeFileSync(tmp, `${revision}\n`);
-	fs$1.renameSync(tmp, record);
+	fs.writeFileSync(tmp, `${revision}\n`);
+	fs.renameSync(tmp, record);
 }
 /**
 * Prove an unrecorded (or differently recorded) copy current by hashing its
@@ -518,9 +518,9 @@ async function adoptByHash(modelsDir, modelPath, formatEntry) {
 }
 /** True when every file of the format is on disk, whatever revision it holds. */
 function isCompleteCopy(modelsDir, modelPath, formatEntry) {
-	if (!fs$1.existsSync(modelPath)) return false;
-	if (formatEntry.isDirectory) return fs$1.existsSync(path$1.join(modelPath, "Manifest.json"));
-	if (fs$1.statSync(modelPath).size <= 0) return false;
+	if (!fs.existsSync(modelPath)) return false;
+	if (formatEntry.isDirectory) return fs.existsSync(path$1.join(modelPath, "Manifest.json"));
+	if (fs.statSync(modelPath).size <= 0) return false;
 	return siblingFilesFor(formatEntry).every((f) => isNonEmptyFile(path$1.join(modelsDir, f)));
 }
 /**
@@ -542,14 +542,14 @@ async function replaceSingleFileFormat(url, modelPath, modelsDir, siblings, onPr
 	}));
 	try {
 		for (const [i, part] of parts.entries()) {
-			fs$1.rmSync(part.staged, { force: true });
+			fs.rmSync(part.staged, { force: true });
 			await downloadFile(part.url, part.staged, i === 0 ? (downloaded, total) => onProgress?.(downloaded, total === 0 ? void 0 : total) : void 0);
 		}
 	} catch (err) {
-		for (const part of parts) fs$1.rmSync(part.staged, { force: true });
+		for (const part of parts) fs.rmSync(part.staged, { force: true });
 		throw err;
 	}
-	for (const part of parts) fs$1.renameSync(part.staged, part.dest);
+	for (const part of parts) fs.renameSync(part.staged, part.dest);
 }
 /**
 * Resolve a `ModelCatalogEntry` against `modelsDir`: download model file
@@ -564,14 +564,14 @@ async function ensureModel(modelsDir, entry, format, onProgress) {
 	const modelPath = path$1.join(modelsDir, filename);
 	const siblings = siblingFilesFor(formatEntry);
 	let outdated = false;
-	if (fs$1.existsSync(modelPath)) if (formatEntry.isDirectory && !fs$1.existsSync(path$1.join(modelPath, "Manifest.json"))) fs$1.rmSync(modelPath, {
+	if (fs.existsSync(modelPath)) if (formatEntry.isDirectory && !fs.existsSync(path$1.join(modelPath, "Manifest.json"))) fs.rmSync(modelPath, {
 		recursive: true,
 		force: true
 	});
 	else if (siblings.some((f) => !isNonEmptyFile(path$1.join(modelsDir, f)))) outdated = !isCurrentRevision(modelPath, formatEntry) && !await adoptByHash(modelsDir, modelPath, formatEntry);
 	else if (isCurrentRevision(modelPath, formatEntry) || await adoptByHash(modelsDir, modelPath, formatEntry)) return modelPath;
 	else outdated = true;
-	fs$1.mkdirSync(modelsDir, { recursive: true });
+	fs.mkdirSync(modelsDir, { recursive: true });
 	if (formatEntry.isDirectory) await downloadDirectory(formatEntry.url, modelPath, formatEntry.files, onProgress);
 	else if (outdated) await replaceSingleFileFormat(formatEntry.url, modelPath, modelsDir, siblings, onProgress);
 	else {
@@ -629,25 +629,25 @@ function isModelDownloaded(modelsDir, entry, format) {
 	const formatEntry = entry.formats[format];
 	if (!formatEntry) return false;
 	const modelPath = getModelFilePath(modelsDir, entry, format);
-	if (!modelPath || !fs$1.existsSync(modelPath)) return false;
+	if (!modelPath || !fs.existsSync(modelPath)) return false;
 	if (!isCurrentRevision(modelPath, formatEntry)) return false;
 	return isCompleteCopy(modelsDir, modelPath, formatEntry);
 }
 /** Remove the on-disk model file/directory. Returns true if something was deleted. */
 function deleteModelFromDisk(modelsDir, entry, format) {
 	const modelPath = getModelFilePath(modelsDir, entry, format);
-	if (!modelPath || !fs$1.existsSync(modelPath)) return false;
-	fs$1.rmSync(revisionRecordPath(modelPath), { force: true });
+	if (!modelPath || !fs.existsSync(modelPath)) return false;
+	fs.rmSync(revisionRecordPath(modelPath), { force: true });
 	const formatEntry = entry.formats[format];
-	if (formatEntry?.isDirectory) fs$1.rmSync(modelPath, {
+	if (formatEntry?.isDirectory) fs.rmSync(modelPath, {
 		recursive: true,
 		force: true
 	});
 	else {
-		fs$1.unlinkSync(modelPath);
+		fs.unlinkSync(modelPath);
 		if (formatEntry) for (const sibling of siblingFilesFor(formatEntry)) {
 			const sibPath = path$1.join(modelsDir, sibling);
-			if (fs$1.existsSync(sibPath)) fs$1.unlinkSync(sibPath);
+			if (fs.existsSync(sibPath)) fs.unlinkSync(sibPath);
 		}
 	}
 	return true;

package/dist/{device-ca-CUEx7sti.js → device-ca-B3xUzps7.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-Ct-4tTeX.js");
+const require_dist = require("./dist-D9aw_d0G.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-BU_gnd-q.mjs → device-ca-DZHKlZlD.mjs}

@@ -1,4 +1,4 @@
-import { A as DEVICE_SAN_CREDENTIAL_PREFIX, Fi as buildSecretRef, j as DEVICE_SAN_USER_PREFIX } from "./dist-8tWIDoWp.mjs";
+import { A as DEVICE_SAN_CREDENTIAL_PREFIX, Fi as buildSecretRef, j as DEVICE_SAN_USER_PREFIX } from "./dist-C2OBCa-A.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-DK__ETIe.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{dist-8tWIDoWp.mjs → dist-C2OBCa-A.mjs}

@@ -745,7 +745,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-CSuN0thG.mjs
+//#region ../types/dist/sleep-_sV1BE2f.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -857,21 +857,21 @@ function collectSecretConfigKeys(schema) {
 	for (const section of sectionsOf(schema)) for (const field of fieldsOf(section)) walkField(field, keys);
 	return keys;
 }
-function isRecord$6(value) {
+function isRecord$7(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function sectionsOf(schema) {
-	if (!isRecord$6(schema)) return [];
+	if (!isRecord$7(schema)) return [];
 	const sections = schema["sections"];
 	return Array.isArray(sections) ? sections : [];
 }
 function fieldsOf(node) {
-	if (!isRecord$6(node)) return [];
+	if (!isRecord$7(node)) return [];
 	const fields = node["fields"];
 	return Array.isArray(fields) ? fields : [];
 }
 function walkField(field, out) {
-	if (!isRecord$6(field)) return;
+	if (!isRecord$7(field)) return;
 	const type = field["type"];
 	const key = field["key"];
 	if ((type === "password" || field["secret"] === true) && typeof key === "string" && key.length > 0) out.add(key);
@@ -909,7 +909,7 @@ function walkField(field, out) {
 var SECRET_CLEAR = { $secretClear: true };
 /** The `'***'` token D634 redaction writes for non-admins. */
 var LEGACY_DEVICE_REDACTION = "***";
-function isRecord$5(value) {
+function isRecord$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function makeSecretMarker(ref) {
@@ -920,16 +920,16 @@ function makeSecretMarker(ref) {
 }
 /** A stored marker: an object whose `$secret` is a non-empty string. */
 function isSecretMarker(value) {
-	if (!isRecord$5(value)) return false;
+	if (!isRecord$6(value)) return false;
 	const ref = value["$secret"];
 	return typeof ref === "string" && ref.length > 0;
 }
 /** Anything carrying a `$secret` key — a stored marker or a UI view of one. */
 function isSecretMarkerLike(value) {
-	return isRecord$5(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
+	return isRecord$6(value) && Object.prototype.hasOwnProperty.call(value, "$secret");
 }
 function isSecretClear(value) {
-	return isRecord$5(value) && value["$secretClear"] === true;
+	return isRecord$6(value) && value["$secretClear"] === true;
 }
 /**
 * The UI view of a stored secret field value: a marker becomes "set", inline
@@ -1598,7 +1598,7 @@ var KeychainWriteRefusedError = class extends Error {
 	}
 };
 var KEEP = { kind: "keep" };
-function isRecord$4(value) {
+function isRecord$5(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function defaultMintId() {
@@ -1611,7 +1611,7 @@ function collectSecretMarkerRefs(value, out = []) {
 		return out;
 	}
 	if (Array.isArray(value)) for (const item of value) collectSecretMarkerRefs(item, out);
-	else if (isRecord$4(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
+	else if (isRecord$5(value)) for (const child of Object.values(value)) collectSecretMarkerRefs(child, out);
 	return out;
 }
 async function storedValueEquals(secrets, marker, candidate) {
@@ -1666,7 +1666,7 @@ function rowId(row, idKey) {
 	return null;
 }
 async function writeArray(ctx, node, incoming, stored, fieldPath) {
-	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$4) : [];
+	const storedRows = Array.isArray(stored) ? stored.filter(isRecord$5) : [];
 	if (!Array.isArray(incoming)) {
 		ctx.deletes.push(...collectSecretMarkerRefs(storedRows));
 		return {
@@ -1682,7 +1682,7 @@ async function writeArray(ctx, node, incoming, stored, fieldPath) {
 	const kept = /* @__PURE__ */ new Set();
 	const rows = [];
 	for (const row of incoming) {
-		if (!isRecord$4(row)) {
+		if (!isRecord$5(row)) {
 			rows.push(row);
 			continue;
 		}
@@ -1707,7 +1707,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 		case "leaf": return writeLeaf(ctx, incoming, stored, fieldPath);
 		case "array": return writeArray(ctx, node, incoming, stored, fieldPath);
 		case "object": {
-			if (!isRecord$4(incoming)) {
+			if (!isRecord$5(incoming)) {
 				if (incoming === void 0) return KEEP;
 				ctx.deletes.push(...collectSecretMarkerRefs(stored));
 				return {
@@ -1715,7 +1715,7 @@ async function writeNode(ctx, node, incoming, stored, fieldPath) {
 					value: incoming
 				};
 			}
-			const storedObj = isRecord$4(stored) ? stored : {};
+			const storedObj = isRecord$5(stored) ? stored : {};
 			return {
 				kind: "value",
 				value: await writeMembers(ctx, node.children, incoming, storedObj, (m) => `${fieldPath}.${m}`)
@@ -1838,7 +1838,7 @@ async function resolveSecretMarkers(value, secrets, options = {}) {
 				value: items
 			};
 		}
-		if (isRecord$4(v)) {
+		if (isRecord$5(v)) {
 			const out = {};
 			for (const [k, child] of Object.entries(v)) {
 				const s = substitute(child);
@@ -1870,7 +1870,7 @@ var SecretOverwriteRefusedError = class extends Error {
 		this.name = "SecretOverwriteRefusedError";
 	}
 };
-function isRecord$3(value) {
+function isRecord$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function resolvedValue(pass, marker) {
@@ -1899,7 +1899,7 @@ function inArray(pass, incoming, stored) {
 	return incoming.map((item, index) => {
 		const twin = stored[index];
 		if (isSecretMarker(twin)) return typeof item === "string" && item === resolvedValue(pass, twin) ? twin : item;
-		if (isRecord$3(item) && isRecord$3(twin)) return inArrayRow(pass, item, twin);
+		if (isRecord$4(item) && isRecord$4(twin)) return inArrayRow(pass, item, twin);
 		if (Array.isArray(item) && Array.isArray(twin)) return inArray(pass, item, twin);
 		return item;
 	});
@@ -1910,7 +1910,7 @@ function inArrayRow(pass, incoming, stored) {
 		const twin = stored[key];
 		if (isSecretMarker(twin)) {
 			if (typeof value === "string" && value === resolvedValue(pass, twin)) out[key] = twin;
-		} else if (isRecord$3(value) && isRecord$3(twin)) out[key] = inArrayRow(pass, value, twin);
+		} else if (isRecord$4(value) && isRecord$4(twin)) out[key] = inArrayRow(pass, value, twin);
 		else if (Array.isArray(value) && Array.isArray(twin)) out[key] = inArray(pass, value, twin);
 	}
 	return out;
@@ -1918,7 +1918,7 @@ function inArrayRow(pass, incoming, stored) {
 async function walk(pass, incoming, stored) {
 	if (isSecretMarker(stored)) return atMarker(pass, incoming, stored);
 	if (Array.isArray(incoming) && Array.isArray(stored)) return inArray(pass, incoming, stored);
-	if (!isRecord$3(incoming) || !isRecord$3(stored)) return incoming;
+	if (!isRecord$4(incoming) || !isRecord$4(stored)) return incoming;
 	const out = { ...incoming };
 	for (const [key, value] of Object.entries(incoming)) out[key] = await walk(pass, value, stored[key]);
 	return out;
@@ -1949,7 +1949,7 @@ async function restoreUnchangedSecrets(input) {
 function isJsonEqual(a, b) {
 	if (Object.is(a, b)) return true;
 	if (Array.isArray(a)) return Array.isArray(b) && a.length === b.length && a.every((v, i) => isJsonEqual(v, b[i]));
-	if (isRecord$3(a) && isRecord$3(b)) {
+	if (isRecord$4(a) && isRecord$4(b)) {
 		const keys = Object.keys(a);
 		if (keys.length !== Object.keys(b).length) return false;
 		return keys.every((k) => Object.prototype.hasOwnProperty.call(b, k) && isJsonEqual(a[k], b[k]));
@@ -1973,7 +1973,7 @@ function markerKeysOf(blob, owner) {
 }
 function nodeFromStored(value, owner) {
 	if (isSecretMarker(value)) return isSecretRefOwnedBy(value.$secret, owner) ? { kind: "leaf" } : null;
-	if (!isRecord$3(value)) return null;
+	if (!isRecord$4(value)) return null;
 	const children = /* @__PURE__ */ new Map();
 	for (const [key, child] of Object.entries(value)) {
 		const node = nodeFromStored(child, owner);
@@ -3507,11 +3507,11 @@ function secretArrayPrefixes(path) {
 	}
 	return prefixes;
 }
-function isRecord$2(value) {
+function isRecord$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function elementId(element, idKey, declared, prefix) {
-	const id = isRecord$2(element) ? element[idKey] : void 0;
+	const id = isRecord$3(element) ? element[idKey] : void 0;
 	if (typeof id !== "string" || id.length === 0) throw new InvalidRecordError(`"${declared}": every element of "${prefix}" needs a non-empty string "${idKey}" to carry a secret`);
 	return id;
 }
@@ -3522,7 +3522,7 @@ function elementId(element, idKey, declared, prefix) {
 */
 var REMOVE_LEAF = Symbol("remove-leaf");
 function mapAt(node, segments, index, walkedKeys, concretePrefix, declared, arrayKeys, visit) {
-	if (!isRecord$2(node)) return node;
+	if (!isRecord$3(node)) return node;
 	const segment = segments[index];
 	if (segment === void 0) return node;
 	if (!Object.prototype.hasOwnProperty.call(node, segment.key)) return node;