@camstack/system 1.2.472 → 1.2.473

package/dist/{constants-CqbO6e9i.js → constants-XkWSVvgY.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist-DX5Fu3mV.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-Bmah6waF.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{constants-zBiEodEM.mjs → constants-p5mPM1iL.mjs}

@@ -1,4 +1,4 @@
-import { Ri as buildSecretRef } from "./dist-CdFkkmXW.mjs";
+import { zi as buildSecretRef } from "./dist-C9lbdBL5.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{device-ca-CfiIg3a9.js → device-ca-BXzQ1pYj.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-DX5Fu3mV.js");
+const require_dist = require("./dist-Bmah6waF.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-BWTWWBcc.mjs → device-ca-DyUtcpf4.mjs}

@@ -1,4 +1,4 @@
-import { A as DEVICE_SAN_USER_PREFIX, Ri as buildSecretRef, k as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-CdFkkmXW.mjs";
+import { A as DEVICE_SAN_USER_PREFIX, k as DEVICE_SAN_CREDENTIAL_PREFIX, zi as buildSecretRef } from "./dist-C9lbdBL5.mjs";
 import { S as backdatedNotBefore, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-DK__ETIe.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts

package/dist/{dist-DX5Fu3mV.js → dist-Bmah6waF.js}

@@ -15543,7 +15543,7 @@ function kindOfValue(value) {
 function only(kind) {
 	return new Set([kind]);
 }
-function union(...sets) {
+function union$1(...sets) {
 	return new Set(sets.flatMap((s) => [...s]));
 }
 function withoutNull(set) {
@@ -15571,8 +15571,8 @@ function callKinds(callee, args) {
 	const rule = BUILTIN_RESULT_KINDS[callee];
 	if (rule === void 0) throw new KindInferenceError(`no result-kind rule for builtin '${callee}'`);
 	if (rule.kind === "fixed") return new Set(rule.result);
-	const nonNull = union(...args.map(withoutNull));
-	return args.every((a) => a.has("null")) ? union(nonNull, only("null")) : nonNull;
+	const nonNull = union$1(...args.map(withoutNull));
+	return args.every((a) => a.has("null")) ? union$1(nonNull, only("null")) : nonNull;
 }
 function kindsOf(node, bindings) {
 	switch (node.kind) {
@@ -15585,8 +15585,8 @@ function kindsOf(node, bindings) {
 		}
 		case "unary": return only(node.op === "!" ? "boolean" : "number");
 		case "binary": return binaryKinds(node.op, kindsOf(node.left, bindings), kindsOf(node.right, bindings));
-		case "logical": return union(kindsOf(node.left, bindings), kindsOf(node.right, bindings));
-		case "conditional": return union(kindsOf(node.consequent, bindings), kindsOf(node.alternate, bindings));
+		case "logical": return union$1(kindsOf(node.left, bindings), kindsOf(node.right, bindings));
+		case "conditional": return union$1(kindsOf(node.consequent, bindings), kindsOf(node.alternate, bindings));
 		case "call": return callKinds(node.callee, node.args.map((a) => kindsOf(a, bindings)));
 	}
 }
@@ -47934,6 +47934,18 @@ Object.freeze({
 	reason: "camera sensor mappings not loaded"
 });
 /**
+* What the vision model must answer before a package event is emitted
+* when a packages rule has "Confirm with the LLM" on.
+*
+* `package` is the verdict. `confidence` is 0..1. `reason` is the model's
+* one-line explanation, stored on the event so a drop is not silent.
+*/
+var PackageLlmVerdictSchema = zod.z.object({
+	package: zod.z.boolean(),
+	confidence: zod.z.number().min(0).max(1),
+	reason: zod.z.string().min(1)
+});
+/**
 * A model choice has a SCOPE, and a scope change has a workflow.
 *
 * ## The two scopes
@@ -48878,6 +48890,21 @@ var ObjectEventSchema = zod.z.object({
 	* pick-up written before D684 — UNKNOWN, never 0 and never `timestamp`.
 	*/
 	observedAt: zod.z.number().optional(),
+	/**
+	* The delivery was emitted without a vision-model yes (D931).
+	*
+	* Set only when the packages rule asked for an LLM confirm and the model
+	* was unreachable, timed out, or answered something that did not parse.
+	* A notification reads it so it can say "possible" instead of a definite
+	* delivery. Absent on every other row, and on a confirm that said yes.
+	*/
+	packagePossible: zod.z.boolean().optional(),
+	/**
+	* The vision model's verdict, when a packages rule asked for one and the
+	* model answered the schema (D931). A "no" never becomes a row — the
+	* detector drops it and logs the reason. Present on a yes.
+	*/
+	packageLlmVerdict: PackageLlmVerdictSchema.optional(),
 	/** The parent track's key-event importance [0,1], propagated to every object
 	*  event of the track (so an event row can be sorted by importance without a
 	*  track join). Absent on legacy rows / before the track was scored. */
@@ -52034,11 +52061,18 @@ var KeptReasonSchema = zod.z.enum(["custom-pin"]);
 * Where a choice's latency came from (D791): this node's own benchmark
 * result, or the hardware-class table. Measured on the node beats the table.
 */
-var LatencySourceSchema = zod.z.discriminatedUnion("kind", [zod.z.object({ kind: zod.z.literal("table") }), zod.z.object({
-	kind: zod.z.literal("node-benchmark"),
-	resultId: zod.z.string(),
-	measuredAtMs: zod.z.number()
-})]);
+var LatencySourceSchema = zod.z.discriminatedUnion("kind", [
+	zod.z.object({ kind: zod.z.literal("table") }),
+	zod.z.object({
+		kind: zod.z.literal("node-benchmark"),
+		resultId: zod.z.string(),
+		measuredAtMs: zod.z.number()
+	}),
+	zod.z.object({
+		kind: zod.z.literal("estimated"),
+		estimatedFrom: HardwareClassIdSchema
+	})
+]);
 var DeviceModelChoiceSchema = zod.z.object({
 	modelId: zod.z.string(),
 	p50Ms: zod.z.number(),
@@ -52046,6 +52080,11 @@ var DeviceModelChoiceSchema = zod.z.object({
 	measured: zod.z.boolean(),
 	/** Absent on a plan from before D791 — read as the table. */
 	source: LatencySourceSchema.optional(),
+	/**
+	* The measured class this latency was scaled from (D930). Absent when the
+	* cell is the table or a node benchmark.
+	*/
+	estimatedFrom: HardwareClassIdSchema.optional(),
 	/** Parallel sessions at the camera rate with the headroom kept free: ⌊fps × (1 − headroom) / camera fps⌋. */
 	capacitySessions: zod.z.number(),
 	personRecall: zod.z.number()
@@ -66951,6 +66990,36 @@ includeCrops: zod.z.boolean().optional() }).optional(), zod.z.array(VehicleSchem
 		})
 	}
 };
+var CORE_ULTRA_265K_IGPU_CLOCK_MHZ = 2e3;
+var positiveOrNull = zod.z.number().nullable().transform((value) => value !== null && Number.isFinite(value) && value > 0 ? value : null);
+var textOrNull = zod.z.string().nullable().transform((value) => value !== null && value.trim() !== "" ? value : null);
+var PrecisionGopsSchema = zod.z.object({
+	int8: positiveOrNull,
+	fp16: positiveOrNull
+});
+/** What one accelerator device reported. Every failed query is null. */
+var AcceleratorComputeSchema = zod.z.object({
+	deviceKey: zod.z.string(),
+	fullDeviceName: textOrNull,
+	executionUnits: positiveOrNull,
+	clockMHz: positiveOrNull,
+	gops: PrecisionGopsSchema.nullable(),
+	architecture: textOrNull,
+	npuName: textOrNull,
+	tops: positiveOrNull,
+	vendor: textOrNull,
+	webgpuArchitecture: textOrNull,
+	webgpuDevice: textOrNull,
+	computeUnits: positiveOrNull
+});
+var AcceleratorFactsPayloadSchema = zod.z.object({ accelerators: zod.z.array(AcceleratorComputeSchema).nullable() });
+64 * CORE_ULTRA_265K_IGPU_CLOCK_MHZ;
+/** Parse a probe payload. `null` means the probe failed — not "no accelerators". */
+function parseAcceleratorFactsJson(raw) {
+	const parsed = AcceleratorFactsPayloadSchema.safeParse(raw);
+	if (!parsed.success || parsed.data.accelerators === null) return null;
+	return parsed.data.accelerators;
+}
 var ModelFormatSchema = zod.z.enum(MODEL_FORMATS);
 var HwAccelBackendInputSchema = zod.z.enum([
 	"videotoolbox",
@@ -67065,7 +67134,12 @@ var HardwareInfoSchema = zod.z.object({
 	availableRAM_MB: zod.z.number(),
 	gpu: GpuInfoSchema.nullable(),
 	npu: NpuInfoSchema.nullable(),
-	coral: CoralInfoSchema.nullable().optional()
+	coral: CoralInfoSchema.nullable().optional(),
+	/**
+	* Per-accelerator compute (D930). Omitted by a node that has not probed it.
+	* `null` fields inside an entry are a failed query, never a zero.
+	*/
+	accelerators: zod.z.array(AcceleratorComputeSchema).readonly().optional()
 });
 var PlatformScoreSchema = zod.z.object({
 	runtime: zod.z.literal("python"),
@@ -70437,7 +70511,20 @@ var ZoneRuleSchema = zod.z.object({
 	* Defaults to `true` so operators creating a rule via the UI
 	* see it active immediately.
 	*/
-	enabled: zod.z.boolean().default(true)
+	enabled: zod.z.boolean().default(true),
+	/**
+	* Package stage only. When true, a package candidate may open from a
+	* scene difference in this rule's zone after a person leaves. The
+	* package model, when it boxes something overlapping, is extra evidence
+	* and is not the gate. Absent or false keeps today's model path.
+	*/
+	detectBySceneDifference: zod.z.boolean().optional(),
+	/**
+	* Package stage only. When true, a promoted package is shown to the
+	* `llm` cap before the delivery event is emitted. Absent or false emits
+	* as today. Usable with or without `detectBySceneDifference`.
+	*/
+	confirmWithLlm: zod.z.boolean().optional()
 });
 zod.z.array(ZoneRuleSchema).readonly();
 /**
@@ -93845,6 +93932,10 @@ TimelapseRuleInputSchema.extend({
 	updatedAt: zod.z.number()
 });
 MotionOnMotionChangedDataSchema.omit({ triggeredBy: true });
+Object.freeze({
+	person: .8,
+	vehicle: .8
+});
 zod.z.object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -95832,6 +95923,12 @@ Object.defineProperty(exports, "objectInputDeclaresRequiredDeviceId", {
 		return objectInputDeclaresRequiredDeviceId;
 	}
 });
+Object.defineProperty(exports, "parseAcceleratorFactsJson", {
+	enumerable: true,
+	get: function() {
+		return parseAcceleratorFactsJson;
+	}
+});
 Object.defineProperty(exports, "parseJsonObject", {
 	enumerable: true,
 	get: function() {

package/dist/{dist-CdFkkmXW.mjs → dist-C9lbdBL5.mjs}

@@ -15543,7 +15543,7 @@ function kindOfValue(value) {
 function only(kind) {
 	return new Set([kind]);
 }
-function union(...sets) {
+function union$1(...sets) {
 	return new Set(sets.flatMap((s) => [...s]));
 }
 function withoutNull(set) {
@@ -15571,8 +15571,8 @@ function callKinds(callee, args) {
 	const rule = BUILTIN_RESULT_KINDS[callee];
 	if (rule === void 0) throw new KindInferenceError(`no result-kind rule for builtin '${callee}'`);
 	if (rule.kind === "fixed") return new Set(rule.result);
-	const nonNull = union(...args.map(withoutNull));
-	return args.every((a) => a.has("null")) ? union(nonNull, only("null")) : nonNull;
+	const nonNull = union$1(...args.map(withoutNull));
+	return args.every((a) => a.has("null")) ? union$1(nonNull, only("null")) : nonNull;
 }
 function kindsOf(node, bindings) {
 	switch (node.kind) {
@@ -15585,8 +15585,8 @@ function kindsOf(node, bindings) {
 		}
 		case "unary": return only(node.op === "!" ? "boolean" : "number");
 		case "binary": return binaryKinds(node.op, kindsOf(node.left, bindings), kindsOf(node.right, bindings));
-		case "logical": return union(kindsOf(node.left, bindings), kindsOf(node.right, bindings));
-		case "conditional": return union(kindsOf(node.consequent, bindings), kindsOf(node.alternate, bindings));
+		case "logical": return union$1(kindsOf(node.left, bindings), kindsOf(node.right, bindings));
+		case "conditional": return union$1(kindsOf(node.consequent, bindings), kindsOf(node.alternate, bindings));
 		case "call": return callKinds(node.callee, node.args.map((a) => kindsOf(a, bindings)));
 	}
 }
@@ -47934,6 +47934,18 @@ Object.freeze({
 	reason: "camera sensor mappings not loaded"
 });
 /**
+* What the vision model must answer before a package event is emitted
+* when a packages rule has "Confirm with the LLM" on.
+*
+* `package` is the verdict. `confidence` is 0..1. `reason` is the model's
+* one-line explanation, stored on the event so a drop is not silent.
+*/
+var PackageLlmVerdictSchema = z.object({
+	package: z.boolean(),
+	confidence: z.number().min(0).max(1),
+	reason: z.string().min(1)
+});
+/**
 * A model choice has a SCOPE, and a scope change has a workflow.
 *
 * ## The two scopes
@@ -48878,6 +48890,21 @@ var ObjectEventSchema = z.object({
 	* pick-up written before D684 — UNKNOWN, never 0 and never `timestamp`.
 	*/
 	observedAt: z.number().optional(),
+	/**
+	* The delivery was emitted without a vision-model yes (D931).
+	*
+	* Set only when the packages rule asked for an LLM confirm and the model
+	* was unreachable, timed out, or answered something that did not parse.
+	* A notification reads it so it can say "possible" instead of a definite
+	* delivery. Absent on every other row, and on a confirm that said yes.
+	*/
+	packagePossible: z.boolean().optional(),
+	/**
+	* The vision model's verdict, when a packages rule asked for one and the
+	* model answered the schema (D931). A "no" never becomes a row — the
+	* detector drops it and logs the reason. Present on a yes.
+	*/
+	packageLlmVerdict: PackageLlmVerdictSchema.optional(),
 	/** The parent track's key-event importance [0,1], propagated to every object
 	*  event of the track (so an event row can be sorted by importance without a
 	*  track join). Absent on legacy rows / before the track was scored. */
@@ -52034,11 +52061,18 @@ var KeptReasonSchema = z.enum(["custom-pin"]);
 * Where a choice's latency came from (D791): this node's own benchmark
 * result, or the hardware-class table. Measured on the node beats the table.
 */
-var LatencySourceSchema = z.discriminatedUnion("kind", [z.object({ kind: z.literal("table") }), z.object({
-	kind: z.literal("node-benchmark"),
-	resultId: z.string(),
-	measuredAtMs: z.number()
-})]);
+var LatencySourceSchema = z.discriminatedUnion("kind", [
+	z.object({ kind: z.literal("table") }),
+	z.object({
+		kind: z.literal("node-benchmark"),
+		resultId: z.string(),
+		measuredAtMs: z.number()
+	}),
+	z.object({
+		kind: z.literal("estimated"),
+		estimatedFrom: HardwareClassIdSchema
+	})
+]);
 var DeviceModelChoiceSchema = z.object({
 	modelId: z.string(),
 	p50Ms: z.number(),
@@ -52046,6 +52080,11 @@ var DeviceModelChoiceSchema = z.object({
 	measured: z.boolean(),
 	/** Absent on a plan from before D791 — read as the table. */
 	source: LatencySourceSchema.optional(),
+	/**
+	* The measured class this latency was scaled from (D930). Absent when the
+	* cell is the table or a node benchmark.
+	*/
+	estimatedFrom: HardwareClassIdSchema.optional(),
 	/** Parallel sessions at the camera rate with the headroom kept free: ⌊fps × (1 − headroom) / camera fps⌋. */
 	capacitySessions: z.number(),
 	personRecall: z.number()
@@ -66951,6 +66990,36 @@ includeCrops: z.boolean().optional() }).optional(), z.array(VehicleSchema).reado
 		})
 	}
 };
+var CORE_ULTRA_265K_IGPU_CLOCK_MHZ = 2e3;
+var positiveOrNull = z.number().nullable().transform((value) => value !== null && Number.isFinite(value) && value > 0 ? value : null);
+var textOrNull = z.string().nullable().transform((value) => value !== null && value.trim() !== "" ? value : null);
+var PrecisionGopsSchema = z.object({
+	int8: positiveOrNull,
+	fp16: positiveOrNull
+});
+/** What one accelerator device reported. Every failed query is null. */
+var AcceleratorComputeSchema = z.object({
+	deviceKey: z.string(),
+	fullDeviceName: textOrNull,
+	executionUnits: positiveOrNull,
+	clockMHz: positiveOrNull,
+	gops: PrecisionGopsSchema.nullable(),
+	architecture: textOrNull,
+	npuName: textOrNull,
+	tops: positiveOrNull,
+	vendor: textOrNull,
+	webgpuArchitecture: textOrNull,
+	webgpuDevice: textOrNull,
+	computeUnits: positiveOrNull
+});
+var AcceleratorFactsPayloadSchema = z.object({ accelerators: z.array(AcceleratorComputeSchema).nullable() });
+64 * CORE_ULTRA_265K_IGPU_CLOCK_MHZ;
+/** Parse a probe payload. `null` means the probe failed — not "no accelerators". */
+function parseAcceleratorFactsJson(raw) {
+	const parsed = AcceleratorFactsPayloadSchema.safeParse(raw);
+	if (!parsed.success || parsed.data.accelerators === null) return null;
+	return parsed.data.accelerators;
+}
 var ModelFormatSchema = z.enum(MODEL_FORMATS);
 var HwAccelBackendInputSchema = z.enum([
 	"videotoolbox",
@@ -67065,7 +67134,12 @@ var HardwareInfoSchema = z.object({
 	availableRAM_MB: z.number(),
 	gpu: GpuInfoSchema.nullable(),
 	npu: NpuInfoSchema.nullable(),
-	coral: CoralInfoSchema.nullable().optional()
+	coral: CoralInfoSchema.nullable().optional(),
+	/**
+	* Per-accelerator compute (D930). Omitted by a node that has not probed it.
+	* `null` fields inside an entry are a failed query, never a zero.
+	*/
+	accelerators: z.array(AcceleratorComputeSchema).readonly().optional()
 });
 var PlatformScoreSchema = z.object({
 	runtime: z.literal("python"),
@@ -70437,7 +70511,20 @@ var ZoneRuleSchema = z.object({
 	* Defaults to `true` so operators creating a rule via the UI
 	* see it active immediately.
 	*/
-	enabled: z.boolean().default(true)
+	enabled: z.boolean().default(true),
+	/**
+	* Package stage only. When true, a package candidate may open from a
+	* scene difference in this rule's zone after a person leaves. The
+	* package model, when it boxes something overlapping, is extra evidence
+	* and is not the gate. Absent or false keeps today's model path.
+	*/
+	detectBySceneDifference: z.boolean().optional(),
+	/**
+	* Package stage only. When true, a promoted package is shown to the
+	* `llm` cap before the delivery event is emitted. Absent or false emits
+	* as today. Usable with or without `detectBySceneDifference`.
+	*/
+	confirmWithLlm: z.boolean().optional()
 });
 z.array(ZoneRuleSchema).readonly();
 /**
@@ -93845,6 +93932,10 @@ TimelapseRuleInputSchema.extend({
 	updatedAt: z.number()
 });
 MotionOnMotionChangedDataSchema.omit({ triggeredBy: true });
+Object.freeze({
+	person: .8,
+	vehicle: .8
+});
 z.object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -94404,4 +94495,4 @@ function armRemovalReconcile(opts) {
 	return () => clearInterval(timer);
 }
 //#endregion
-export { PreferenceDeviceIdSchema as $, isDeviceConfigCap as $i, platformProbeCapability as $n, errMsg as $r, deviceExtensionCapability as $t, DEVICE_SAN_USER_PREFIX as A, UnindexedFilterError as Ai, keychainAdminCapability as An, supportedRuntimes as Ar, buildDeviceSignatureMessage as At, HISTORY_ITEM_CATALOG as B, collectSecretLeaves as Bi, mayReadLocation as Bn, cloneStatefulExpressionMemory as Br, coreBlockComposition as Bt, DATA_STORE_DATABASES as C, toSecretFieldView as Ca, RecordNotFoundError as Ci, isCollectionArrayMethod as Cn, storageAdminCapability as Cr, armRemovalReconcile as Ct, DEVICE_HISTORY_ENERGY_KEY as D, EventCategory as Da, SECRET_CLEAR as Di, isObjectInput as Dn, storageProviderCapability as Dr, batteryCapability as Dt, DEVICE_ENROLLMENT_TTL_MS as E, withoutCallerStamp as Ea, RevConflictError as Ei, isLocationEnabled as En, storageOccupancyCapability as Er, bareAddonId as Et, DeviceTombstoneSchema as F, asString$1 as Fi, localNetworkCapability as Fn, vectorIndexDimConflictError as Fr, checkRoleAddress as Ft, KeychainResetRecordSchema as G, defineCustomActions as Gi, motionCapability as Gn, compositionSliceKey as Gr, dataStoreProviderCapability as Gt, HUB_MDNS_TXT_KEYS as H, collectZodSecretPaths as Hi, memoizePinnedFfmpeg as Hn, composedDeviceStableId as Hr, coreBlockSourceKind as Ht, FIRST_LEVEL_MACRO_CLASSES as I, assertTransactScope as Ii, locationIconKey as In, vectorStoreCapability as Ir, composerCapability as It, METHOD_ACCESS_MAP as J, emitReadiness as Ji, objectInputDeclaresAddonId as Jn, disarmRoseMemory as Jr, decodeVectorBase64 as Jt, LOG_LEVEL_RANK as K, defineRecordKinds as Ki, normalizeCoreBlockWrite as Kn, compositionSourceKey as Kr, databaseSnapshotCapability as Kt, FieldClaimModeSchema as L, assertValidDeclaration as Li, logDestinationCapability as Ln, withLocationMode as Lr, compositionFieldKey as Lt, DataStoreDatabaseSchema as M, WELL_KNOWN_TAB_MAP as Mi, legacyAutoLinkIds as Mn, validateComposition as Mr, calendarsCapability as Mt, DeclaredDevices as N, asJsonObject as Ni, legacyModeOf as Nn, validateCustomAddress as Nr, cameraGridLayoutCapability as Nt, DEVICE_NONCE_TTL_MS as O, StoredRecordKindDeclarationSchema as Oi, isVoidInput as On, streamCatalogCapability as Or, buildCapabilityLookup as Ot, DeviceStatusSchema as P, asNumber as Pi, lifecycleJobSchema as Pn, vectorDimFromBase64 as Pr, canonicalIconKey as Pt, PREFERENCES_MAX_VALUE_BYTES as Q, hydrateSchema as Qi, planComposition as Qn, DeviceType as Qr, deviceCredentialsCapability as Qt, FieldClaimSchema as R, buildSecretRef as Ri, logLevelAtMost as Rn, COMPOSER_ADDON_ID as Rr, compositionSourceRefs as Rt, DATABASE_SNAPSHOT_TIMEOUT_MS as S, toNodeId as Sa, RecordKindDeclarationSchema as Si, isArrayOutputSchema as Sn, splitTranslationRef as Sr, alertsCapability as St, DERIVED_CAMERA_SILENCED_CAP_NAMES as T, userError as Ta, RecordUniqueViolationError as Ti, isDefaultAppConnectionEndpoint as Tn, storageMigrationCapability as Tr, backupCapability as Tt, KEYCHAIN_RESET_TRIGGER_ACTOR as U, createEvent as Ui, metricsProviderCapability as Un, compositionFeatureEnabled as Ur, coreBlocksCapability as Ut, HUB_MDNS_SERVICE_TYPE as V, collectSecretMarkerRefs as Vi, mayWriteToLocation as Vn, composedDeviceRef as Vr, coreBlockIdFromAddonId as Vt, KeychainAuditEntrySchema as W, customAction as Wi, modeMayWrite as Wn, compositionItemFieldPath as Wr, createDeviceExtensionProvider as Wt, MOTION_CLOSE_AFTER_MS as X, formatSecretScope as Xi, parseStreamParamsFormPatch as Xn, DeviceFeature as Xr, deriveBatteryPresence as Xt, MINUTES_PER_DAY as Y, expandCapMethods as Yi, objectInputDeclaresRequiredDeviceId as Yn, toExpressionValue as Yr, defineExtensionSlotProvider as Yt, NetworkTunnelStartedDataSchema as Z, historyItemFieldPath as Zi, pickAppLinkHub as Zn, DeviceRole as Zr, describeComposableCaps as Zt, CatalogFileSchema as _, resolveSecretMarkers as _a, REDACTED_SECRET as _i, gbToBytes as _n, scoreRuntimes as _r, addonPagesCapability as _t, BaseDevice as a, isSecretRefOwnedBy as aa, DEVICE_STATUS_METHOD as ai, enumerateInferenceDevices as an, replacedFieldKeys as ar, STORAGE_ACCESS_FALLBACK as at, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as b, secretTreeFromSchema as ba, ReadinessRegistry as bi, isAlertEpisodeSeverity as bn, siteZoneKey as br, alertEpisodeId as bt, CAMSTACK_APP_LINK_ORIGIN as c, nodePin as ca, ForeignSecretMarkerError as ci, evaluateCompositionField as cn, resolveCoreBlockEntry as cr, ServerNameSchema as ct, COMPOSED_ITEM_FIXED_FIELDS as d, parseJsonObject as da, NoCallerError as di, expressionContainsBuiltinCall as dn, resolveLocationMode as dr, StorageLocationModeSchema as dt, isEvent as ea, BaseAddon as ei, deviceHistoryCapability as en, procedureAuthKey as er, PreferenceNamespaceSchema as et, COMPOSER_RUNNER_ID as f, parseJsonUnknown as fa, PlaintextSecretError as fi, extractNestedAddonId as fn, resolveMethodAuth as fr, StorageLocationTypeSchema as ft, CalendarPreferencesSchema as g, resolveCapMount as ga, RECORD_SWEEP_INTERVAL_MS as gi, formatMinutes as gn, scopesAllowDeviceCap as gr, UserRecordSchema as gt, CREDENTIAL_TOKEN_AUDIENCE as h, recordSecretRef as ha, RECORD_DELETE_BATCH as hi, formatDeviceRevoker as hn, scopesAllowAddon as hr, UNATTRIBUTED_BUCKET_KEY as ht, AlertSchema as i, isSecretMarkerLike as ia, DEVICE_SETTINGS_CONTRIBUTION_METHODS as ii, deviceStatusCapability as in, reducePoints as ir, RecordingStatusSchema as it, DEVICE_TOMBSTONE_RETENTION_MS as j, UnknownRecordKindError as ji, keychainCapability as jn, userManagementCapability as jr, buildStreamParamsConfigSchema as jt, DEVICE_SAN_CREDENTIAL_PREFIX as k, TransactRefusedError as ki, kebabToCamel as kn, streamQualityLabel as kr, buildDeviceEnrollmentLink as kt, CAP_NAMES_WITH_STATUS as l, normalizeNodeId as la, HISTORY_DEFAULT_MIN_INTERVAL_MS as li, evictionPolicyOfLocation as ln, resolveCoreBlockFiles as lr, SsoBridgeClaimsSchema as lt, CORE_BLOCK_ADDON_PREFIX as m, readinessKey as ma, RECORD_BATCH_MAX_BYTES as mi, foldSnapshotByFunction as mn, runtimeStatePolicyFor as mr, TokenScopeSchema as mt, AGENT_MDNS_TXT_KEYS as n, isSecretClear as na, CALLER_STAMPED_CAPABILITIES as ni, deviceRemovalHookCapability as nn, recordEntriesCapability as nr, RECORDING_SOURCE_CAMSTACK_ADDON as nt, BatteryStatusSchema as o, makeSecretMarker as oa, DeclarationRefusedError as oi, enumerateItemArrayFields as on, resolveAppConnections as or, STREAM_PROFILE_META as ot, CORE_BLOCKS_ADDON_ID as p, parseSecretRef as pa, RECORD_BATCH_MAX as pi, filesystemBrowseCapability as pn, resolveNotificationTapAddress as pr, StorageMigrationJobSchema as pt, LegacyStorageLocationDefaultSchema as q, emitDownForOwnedCaps as qi, normalizeUnit as qn, createStatefulExpressionMemory as qr, declarationOwnerNodeId as qt, ALL_CAPABILITY_DEFINITIONS as r, isSecretMarker as ra, DATAPLANE_SECRET_HEADER as ri, deviceStateCapability as rn, recordsCapability as rr, ROOT_BUCKET_KEY as rt, CAMERA_SWITCH_ORDER as s, mapSecretLeaves as sa, FilterRequiredError as si, enumerateSchemaFields as sn, resolveBucketMs as sr, ScopedTokenSchema as st, AGENT_MDNS_SERVICE_TYPE as t, isKeychainStoredField as ta, BatchTooLargeError as ti, deviceManagerCapability as tn, ptzAutotrackCapability as tr, PreferenceValueSchema as tt, CATALOG_LANGS as u, normalizeSecretOwner as ua, InvalidRecordError as ui, expandContainer as un, resolveHubAddressRoles as ur, StorageCleanupJobSchema as ut, CoreBlockSchema as v, scopeKey as va, REMOVE_LEAF as vi, interpolate as vn, settingsStoreCapability as vr, addonSettingsCapability as vt, DAY_NAMES as w, transformSecretWrite as wa, RecordTooLargeError as wi, isCredentialTokenPayload as wn, storageCapability as wr, authProviderCapability as wt, DATABASE_SNAPSHOT_SUFFIX as x, sleep as xa, ReadinessTimeoutError as xi, isAppLinkBase as xn, snapshotCapability as xr, alertEpisodePayload as xt, CredentialTokenClaimsSchema as y, secretTreeFromPaths as ya, RUNTIME_DEFAULTS as yi, isAlertEpisodeOpen as yn, shortHostname as yr, addonWidgetsCapability as yt, HISTORY_CATALOG as z, collectSecretConfigKeys as zi, looseSchema as zn, buildFfmpegArgs as zr, coreBlockAddonId as zt };
+export { PreferenceDeviceIdSchema as $, hydrateSchema as $i, planComposition as $n, DeviceType as $r, deviceExtensionCapability as $t, DEVICE_SAN_USER_PREFIX as A, TransactRefusedError as Ai, keychainAdminCapability as An, streamQualityLabel as Ar, buildDeviceSignatureMessage as At, HISTORY_ITEM_CATALOG as B, collectSecretConfigKeys as Bi, mayReadLocation as Bn, buildFfmpegArgs as Br, coreBlockComposition as Bt, DATA_STORE_DATABASES as C, toNodeId as Ca, RecordKindDeclarationSchema as Ci, isCollectionArrayMethod as Cn, splitTranslationRef as Cr, armRemovalReconcile as Ct, DEVICE_HISTORY_ENERGY_KEY as D, withoutCallerStamp as Da, RevConflictError as Di, isObjectInput as Dn, storageOccupancyCapability as Dr, batteryCapability as Dt, DEVICE_ENROLLMENT_TTL_MS as E, userError as Ea, RecordUniqueViolationError as Ei, isLocationEnabled as En, storageMigrationCapability as Er, bareAddonId as Et, DeviceTombstoneSchema as F, asNumber as Fi, localNetworkCapability as Fn, vectorDimFromBase64 as Fr, checkRoleAddress as Ft, KeychainResetRecordSchema as G, customAction as Gi, motionCapability as Gn, compositionItemFieldPath as Gr, dataStoreProviderCapability as Gt, HUB_MDNS_TXT_KEYS as H, collectSecretMarkerRefs as Hi, memoizePinnedFfmpeg as Hn, composedDeviceRef as Hr, coreBlockSourceKind as Ht, FIRST_LEVEL_MACRO_CLASSES as I, asString$1 as Ii, locationIconKey as In, vectorIndexDimConflictError as Ir, composerCapability as It, METHOD_ACCESS_MAP as J, emitDownForOwnedCaps as Ji, objectInputDeclaresAddonId as Jn, createStatefulExpressionMemory as Jr, decodeVectorBase64 as Jt, LOG_LEVEL_RANK as K, defineCustomActions as Ki, normalizeCoreBlockWrite as Kn, compositionSliceKey as Kr, databaseSnapshotCapability as Kt, FieldClaimModeSchema as L, assertTransactScope as Li, logDestinationCapability as Ln, vectorStoreCapability as Lr, compositionFieldKey as Lt, DataStoreDatabaseSchema as M, UnknownRecordKindError as Mi, legacyAutoLinkIds as Mn, userManagementCapability as Mr, calendarsCapability as Mt, DeclaredDevices as N, WELL_KNOWN_TAB_MAP as Ni, legacyModeOf as Nn, validateComposition as Nr, cameraGridLayoutCapability as Nt, DEVICE_NONCE_TTL_MS as O, EventCategory as Oa, SECRET_CLEAR as Oi, isVoidInput as On, storageProviderCapability as Or, buildCapabilityLookup as Ot, DeviceStatusSchema as P, asJsonObject as Pi, lifecycleJobSchema as Pn, validateCustomAddress as Pr, canonicalIconKey as Pt, PREFERENCES_MAX_VALUE_BYTES as Q, historyItemFieldPath as Qi, pickAppLinkHub as Qn, DeviceRole as Qr, deviceCredentialsCapability as Qt, FieldClaimSchema as R, assertValidDeclaration as Ri, logLevelAtMost as Rn, withLocationMode as Rr, compositionSourceRefs as Rt, DATABASE_SNAPSHOT_TIMEOUT_MS as S, sleep as Sa, ReadinessTimeoutError as Si, isArrayOutputSchema as Sn, snapshotCapability as Sr, alertsCapability as St, DERIVED_CAMERA_SILENCED_CAP_NAMES as T, transformSecretWrite as Ta, RecordTooLargeError as Ti, isDefaultAppConnectionEndpoint as Tn, storageCapability as Tr, backupCapability as Tt, KEYCHAIN_RESET_TRIGGER_ACTOR as U, collectZodSecretPaths as Ui, metricsProviderCapability as Un, composedDeviceStableId as Ur, coreBlocksCapability as Ut, HUB_MDNS_SERVICE_TYPE as V, collectSecretLeaves as Vi, mayWriteToLocation as Vn, cloneStatefulExpressionMemory as Vr, coreBlockIdFromAddonId as Vt, KeychainAuditEntrySchema as W, createEvent as Wi, modeMayWrite as Wn, compositionFeatureEnabled as Wr, createDeviceExtensionProvider as Wt, MOTION_CLOSE_AFTER_MS as X, expandCapMethods as Xi, parseAcceleratorFactsJson as Xn, toExpressionValue as Xr, deriveBatteryPresence as Xt, MINUTES_PER_DAY as Y, emitReadiness as Yi, objectInputDeclaresRequiredDeviceId as Yn, disarmRoseMemory as Yr, defineExtensionSlotProvider as Yt, NetworkTunnelStartedDataSchema as Z, formatSecretScope as Zi, parseStreamParamsFormPatch as Zn, DeviceFeature as Zr, describeComposableCaps as Zt, CatalogFileSchema as _, resolveCapMount as _a, RECORD_SWEEP_INTERVAL_MS as _i, gbToBytes as _n, scopesAllowDeviceCap as _r, addonPagesCapability as _t, BaseDevice as a, isSecretMarkerLike as aa, DEVICE_SETTINGS_CONTRIBUTION_METHODS as ai, enumerateInferenceDevices as an, reducePoints as ar, STORAGE_ACCESS_FALLBACK as at, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as b, secretTreeFromPaths as ba, RUNTIME_DEFAULTS as bi, isAlertEpisodeSeverity as bn, shortHostname as br, alertEpisodeId as bt, CAMSTACK_APP_LINK_ORIGIN as c, mapSecretLeaves as ca, FilterRequiredError as ci, evaluateCompositionField as cn, resolveBucketMs as cr, ServerNameSchema as ct, COMPOSED_ITEM_FIXED_FIELDS as d, normalizeSecretOwner as da, InvalidRecordError as di, expressionContainsBuiltinCall as dn, resolveHubAddressRoles as dr, StorageLocationModeSchema as dt, isDeviceConfigCap as ea, errMsg as ei, deviceHistoryCapability as en, platformProbeCapability as er, PreferenceNamespaceSchema as et, COMPOSER_RUNNER_ID as f, parseJsonObject as fa, NoCallerError as fi, extractNestedAddonId as fn, resolveLocationMode as fr, StorageLocationTypeSchema as ft, CalendarPreferencesSchema as g, recordSecretRef as ga, RECORD_DELETE_BATCH as gi, formatMinutes as gn, scopesAllowAddon as gr, UserRecordSchema as gt, CREDENTIAL_TOKEN_AUDIENCE as h, readinessKey as ha, RECORD_BATCH_MAX_BYTES as hi, formatDeviceRevoker as hn, runtimeStatePolicyFor as hr, UNATTRIBUTED_BUCKET_KEY as ht, AlertSchema as i, isSecretMarker as ia, DATAPLANE_SECRET_HEADER as ii, deviceStatusCapability as in, recordsCapability as ir, RecordingStatusSchema as it, DEVICE_TOMBSTONE_RETENTION_MS as j, UnindexedFilterError as ji, keychainCapability as jn, supportedRuntimes as jr, buildStreamParamsConfigSchema as jt, DEVICE_SAN_CREDENTIAL_PREFIX as k, StoredRecordKindDeclarationSchema as ki, kebabToCamel as kn, streamCatalogCapability as kr, buildDeviceEnrollmentLink as kt, CAP_NAMES_WITH_STATUS as l, nodePin as la, ForeignSecretMarkerError as li, evictionPolicyOfLocation as ln, resolveCoreBlockEntry as lr, SsoBridgeClaimsSchema as lt, CORE_BLOCK_ADDON_PREFIX as m, parseSecretRef as ma, RECORD_BATCH_MAX as mi, foldSnapshotByFunction as mn, resolveNotificationTapAddress as mr, TokenScopeSchema as mt, AGENT_MDNS_TXT_KEYS as n, isKeychainStoredField as na, BatchTooLargeError as ni, deviceRemovalHookCapability as nn, ptzAutotrackCapability as nr, RECORDING_SOURCE_CAMSTACK_ADDON as nt, BatteryStatusSchema as o, isSecretRefOwnedBy as oa, DEVICE_STATUS_METHOD as oi, enumerateItemArrayFields as on, replacedFieldKeys as or, STREAM_PROFILE_META as ot, CORE_BLOCKS_ADDON_ID as p, parseJsonUnknown as pa, PlaintextSecretError as pi, filesystemBrowseCapability as pn, resolveMethodAuth as pr, StorageMigrationJobSchema as pt, LegacyStorageLocationDefaultSchema as q, defineRecordKinds as qi, normalizeUnit as qn, compositionSourceKey as qr, declarationOwnerNodeId as qt, ALL_CAPABILITY_DEFINITIONS as r, isSecretClear as ra, CALLER_STAMPED_CAPABILITIES as ri, deviceStateCapability as rn, recordEntriesCapability as rr, ROOT_BUCKET_KEY as rt, CAMERA_SWITCH_ORDER as s, makeSecretMarker as sa, DeclarationRefusedError as si, enumerateSchemaFields as sn, resolveAppConnections as sr, ScopedTokenSchema as st, AGENT_MDNS_SERVICE_TYPE as t, isEvent as ta, BaseAddon as ti, deviceManagerCapability as tn, procedureAuthKey as tr, PreferenceValueSchema as tt, CATALOG_LANGS as u, normalizeNodeId as ua, HISTORY_DEFAULT_MIN_INTERVAL_MS as ui, expandContainer as un, resolveCoreBlockFiles as ur, StorageCleanupJobSchema as ut, CoreBlockSchema as v, resolveSecretMarkers as va, REDACTED_SECRET as vi, interpolate as vn, scoreRuntimes as vr, addonSettingsCapability as vt, DAY_NAMES as w, toSecretFieldView as wa, RecordNotFoundError as wi, isCredentialTokenPayload as wn, storageAdminCapability as wr, authProviderCapability as wt, DATABASE_SNAPSHOT_SUFFIX as x, secretTreeFromSchema as xa, ReadinessRegistry as xi, isAppLinkBase as xn, siteZoneKey as xr, alertEpisodePayload as xt, CredentialTokenClaimsSchema as y, scopeKey as ya, REMOVE_LEAF as yi, isAlertEpisodeOpen as yn, settingsStoreCapability as yr, addonWidgetsCapability as yt, HISTORY_CATALOG as z, buildSecretRef as zi, looseSchema as zn, COMPOSER_ADDON_ID as zr, coreBlockAddonId as zt };

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-Dxqd5igw.js");
+const require_wal_maintenance = require("./wal-maintenance-BT8Ns0W3.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-KHzJXlF2.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-BuB731DK.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{hub-mdns-ciao-CYp1Gipm.mjs → hub-mdns-ciao-BemeCNGe.mjs}

@@ -1,7 +1,7 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { Ta as userError } from "./dist-CdFkkmXW.mjs";
+import { Ea as userError } from "./dist-C9lbdBL5.mjs";
 import { f as X509Certificate$1 } from "./x509.es-DK__ETIe.mjs";
-import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-JhvY1axF.mjs";
+import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-DOwn4pqL.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/{hub-mdns-ciao-C174UDzO.js → hub-mdns-ciao-CUr6ewsX.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DX5Fu3mV.js");
+const require_dist = require("./dist-Bmah6waF.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
-const require_agent_https = require("./agent-https-bnyFRK7Y.js");
+const require_agent_https = require("./agent-https-B9Q3-IKd.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DX5Fu3mV.js");
-const require_device_ca = require("./device-ca-CfiIg3a9.js");
+const require_dist = require("./dist-Bmah6waF.js");
+const require_device_ca = require("./device-ca-BXzQ1pYj.js");
 const require_read_all_rows$1 = require("./read-all-rows-CVoO1ONM.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
@@ -26,21 +26,21 @@ const require_builtins_loki_logging_index = require("./builtins/loki-logging/ind
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_device_history_device_history_addon = require("./builtins/device-history/device-history.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-Dxqd5igw.js");
+const require_wal_maintenance = require("./wal-maintenance-BT8Ns0W3.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_agent_https = require("./agent-https-bnyFRK7Y.js");
-const require_constants = require("./constants-CqbO6e9i.js");
+const require_agent_https = require("./agent-https-B9Q3-IKd.js");
+const require_constants = require("./constants-XkWSVvgY.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_custom_action_registry = require("./custom-action-registry-MRyes5j0.js");
-const require_hub_mdns_ciao = require("./hub-mdns-ciao-C174UDzO.js");
+const require_hub_mdns_ciao = require("./hub-mdns-ciao-CUr6ewsX.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-B2jIFfu_.js");
+const require_restore_archive = require("./restore-archive-DbPmyjiM.js");
 const require_coral_accelerators = require("./coral-accelerators-BSVsBVzt.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
@@ -27185,6 +27185,7 @@ var en_default = {
 	"auth.session-ended": "Session ended — sign in again",
 	"auth.access-denied": "Access denied",
 	"auth.totp-confirm-failed": "TOTP confirmation failed — code did not match",
+	"auth.person-scopes-refused": "A person is an admin, with no scope rows, or holds exactly one viewer grant",
 	"device.certificates-unavailable": "Device certificates are not available",
 	"device.not-found": "Device {id} not found",
 	"device.credentials-unavailable": "Device credentials not available",
@@ -27436,6 +27437,7 @@ var it_default = {
 	"auth.session-ended": "Sessione terminata — accedi di nuovo",
 	"auth.access-denied": "Accesso negato",
 	"auth.totp-confirm-failed": "Conferma TOTP non riuscita — il codice non corrisponde",
+	"auth.person-scopes-refused": "Una persona è amministratore, senza righe di permesso, oppure ha esattamente un permesso visualizzatore",
 	"device.certificates-unavailable": "I certificati dei dispositivi non sono disponibili",
 	"device.not-found": "Dispositivo {id} non trovato",
 	"device.credentials-unavailable": "Le credenziali del dispositivo non sono disponibili",

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { i as __require } from "./chunk-CNf5ZN-e.mjs";
-import { $r as errMsg$1, Ar as supportedRuntimes, Cn as isCollectionArrayMethod, Da as EventCategory$1, Dn as isObjectInput, Ea as withoutCallerStamp, Fi as asString$1, J as METHOD_ACCESS_MAP, Jn as objectInputDeclaresAddonId, K as LOG_LEVEL_RANK, Ki as defineRecordKinds, Ni as asJsonObject$1, On as isVoidInput, Pi as asNumber, Pn as lifecycleJobSchema, Rn as logLevelAtMost, Sn as isArrayOutputSchema, Sr as splitTranslationRef, Ta as userError, Ui as createEvent$1, Yi as expandCapMethods, Yn as objectInputDeclaresRequiredDeviceId, _ as CatalogFileSchema, ai as DEVICE_STATUS_METHOD, bi as ReadinessRegistry, da as parseJsonObject, er as procedureAuthKey, fa as parseJsonUnknown, fn as extractNestedAddonId, fr as resolveMethodAuth, ga as resolveCapMount, gr as scopesAllowDeviceCap, hr as scopesAllowAddon, ii as DEVICE_SETTINGS_CONTRIBUTION_METHODS, kn as kebabToCamel$1, ma as readinessKey, n as AGENT_MDNS_TXT_KEYS, ni as CALLER_STAMPED_CAPABILITIES$1, qi as emitDownForOwnedCaps, r as ALL_CAPABILITY_DEFINITIONS, ri as DATAPLANE_SECRET_HEADER$1, t as AGENT_MDNS_SERVICE_TYPE, u as CATALOG_LANGS, va as scopeKey, vn as interpolate, vt as addonSettingsCapability, xi as ReadinessTimeoutError, yi as RUNTIME_DEFAULTS, zn as looseSchema } from "./dist-CdFkkmXW.mjs";
-import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-BWTWWBcc.mjs";
+import { Cn as isCollectionArrayMethod, Cr as splitTranslationRef, Da as withoutCallerStamp, Dn as isObjectInput, Ea as userError, Fi as asNumber, Ii as asString$1, J as METHOD_ACCESS_MAP, Ji as emitDownForOwnedCaps, Jn as objectInputDeclaresAddonId, K as LOG_LEVEL_RANK, Oa as EventCategory$1, On as isVoidInput, Pi as asJsonObject$1, Pn as lifecycleJobSchema, Rn as logLevelAtMost, Si as ReadinessTimeoutError, Sn as isArrayOutputSchema, Wi as createEvent$1, Xi as expandCapMethods, Yn as objectInputDeclaresRequiredDeviceId, _ as CatalogFileSchema, _a as resolveCapMount, _r as scopesAllowDeviceCap, ai as DEVICE_SETTINGS_CONTRIBUTION_METHODS, bi as RUNTIME_DEFAULTS, ei as errMsg$1, fa as parseJsonObject, fn as extractNestedAddonId, gr as scopesAllowAddon, ha as readinessKey, ii as DATAPLANE_SECRET_HEADER$1, jr as supportedRuntimes, kn as kebabToCamel$1, n as AGENT_MDNS_TXT_KEYS, oi as DEVICE_STATUS_METHOD, pa as parseJsonUnknown, pr as resolveMethodAuth, qi as defineRecordKinds, r as ALL_CAPABILITY_DEFINITIONS, ri as CALLER_STAMPED_CAPABILITIES$1, t as AGENT_MDNS_SERVICE_TYPE, tr as procedureAuthKey, u as CATALOG_LANGS, vn as interpolate, vt as addonSettingsCapability, xi as ReadinessRegistry, ya as scopeKey, zn as looseSchema } from "./dist-C9lbdBL5.mjs";
+import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-DyUtcpf4.mjs";
 import { t as require_read_all_rows } from "./read-all-rows-TaPqdWNF.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
@@ -25,21 +25,21 @@ import { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index
 import NativeMetricsAddon, { a as NativeMetricsProvider, n as nodeProcReader, r as parseProcStat } from "./builtins/native-metrics/native-metrics.addon.mjs";
 import { DeviceHistoryAddon } from "./builtins/device-history/device-history.addon.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
-import { C as RecordsEngine, l as SqliteSettingsBackend } from "./wal-maintenance-KHzJXlF2.mjs";
+import { C as RecordsEngine, l as SqliteSettingsBackend } from "./wal-maintenance-BuB731DK.mjs";
 import { SqliteSettingsAddon } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
 import { StorageOrchestratorAddon, a as stripForwardedCaller, i as createHubCapForwardService, l as STORAGE_DRAIN_STATE_LEGACY, n as HUB_CAP_FWD_ACTION, o as buildStorageLocationRegistry, r as HUB_CAP_FWD_SERVICE, t as StorageOrchestratorService, u as storageOrchestratorRecordKinds } from "./builtins/storage-orchestrator/storage-orchestrator.addon.mjs";
 import "./builtins/storage-orchestrator/index.mjs";
-import { A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, o as createAgentHttpsRequest, p as pemDigest, r as agentHttpsPaths, s as describeHttpsLeaf, t as AgentHttpsInstallError, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-JhvY1axF.mjs";
-import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-zBiEodEM.mjs";
+import { A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, o as createAgentHttpsRequest, p as pemDigest, r as agentHttpsPaths, s as describeHttpsLeaf, t as AgentHttpsInstallError, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-DOwn4pqL.mjs";
+import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-p5mPM1iL.mjs";
 import { $ as generateMeshKeyPair, A as setProcessMeshPeerTransportLookup, B as describeMeshLeaf, C as setProcessMeshTlsEnabler, D as getProcessPeerLeaf, E as getProcessNodeMeshTransport, F as setProcessMeshTlsListenerState, G as MeshCaKeeper, H as setProcessMeshCertificateRegistry, I as MESH_NODE_CERTIFICATES_COLLECTION, J as caFingerprint, K as getProcessMeshCaState, L as MESH_NODE_CERTIFICATES_COLUMNS, M as revokeMeshCertificate, N as getProcessMeshTlsListenerState, O as isProcessVerifiedMeshPeer, P as openMeshTlsWhenRevocationsLoaded, Q as generateMeshCa, R as MeshCertificateRegistry, S as ServiceBroker, SystemConfigAddon, T as emitProcessNodeRegistered, U as MeshCrl, V as getProcessMeshCertificateRegistry, W as processMeshCrl, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, _ as signPairingProof, _t as readCidrSetting, a as hubHostFromMeshAddress, at as AGENT_UI_UNLOCK_TTL_MS, b as TlsTcpTransporter, c as PAIRING_MAX_SESSIONS, ct as AGENT_UI_UNLOCK_VERSION, d as PAIRING_PROTOCOL, dt as mintAgentUiUnlockTicket, et as isValidAgentNodeId, f as PAIRING_TTL_MS, ft as parseAgentDashboardOrigins, g as keyFingerprintShort, gt as parseCidrList, h as describeCsr, ht as normalizeIp, i as AgentPairing, it as AGENT_DASHBOARD_ORIGINS_FIELD, j as renewMeshCertificate, k as onProcessNodeRegistered, l as PAIRING_PATHS, lt as UnlockTicketJtiStore, m as computePairingSas, mt as createCidrMatcher, n as HubPairing, nt as issueMeshLeafFromCsr, o as PAIRING_CODE_DIGITS, ot as AGENT_UI_UNLOCK_TYP, p as computePairingCommitment, pt as verifyAgentUiUnlockTicket, q as requireProcessMeshCa, r as PairingHttpError, rt as loadMeshCa, s as PAIRING_MAX_CODE_ATTEMPTS, st as AGENT_UI_UNLOCK_USE, tt as issueMeshLeafForNode, u as PAIRING_PIN_DIGITS, ut as isAllowedAgentDashboardReturnTo, v as verifyPairingProof, w as dropProcessPeer, x as Errors, y as MESH_TLS_PORT_HELLO_FIELD, z as RENEWAL_ABANDONED } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { C as isModelDownloaded, T as revisionWeightUrl, _ as downloadFile, a as startEventLoopStallMonitor, b as fetchJson, c as createAuthenticatedFileServer, d as resolveFilePath, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, u as parseTokenizedUrl, v as downloadModel, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-DZSCLBuT.mjs";
-import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-CYp1Gipm.mjs";
+import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-BemeCNGe.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Di9daRwI.mjs";
-import { _ as backupRecordStoresOf, c as BackupDecryptError, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-BX0gaKtG.mjs";
+import { _ as backupRecordStoresOf, c as BackupDecryptError, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-C0aohmAK.mjs";
 import { r as nodeCoralFs, t as classifyCoralAccelerator } from "./coral-accelerators-DBlgWB8k.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
@@ -27182,6 +27182,7 @@ var en_default = {
 	"auth.session-ended": "Session ended — sign in again",
 	"auth.access-denied": "Access denied",
 	"auth.totp-confirm-failed": "TOTP confirmation failed — code did not match",
+	"auth.person-scopes-refused": "A person is an admin, with no scope rows, or holds exactly one viewer grant",
 	"device.certificates-unavailable": "Device certificates are not available",
 	"device.not-found": "Device {id} not found",
 	"device.credentials-unavailable": "Device credentials not available",
@@ -27433,6 +27434,7 @@ var it_default = {
 	"auth.session-ended": "Sessione terminata — accedi di nuovo",
 	"auth.access-denied": "Accesso negato",
 	"auth.totp-confirm-failed": "Conferma TOTP non riuscita — il codice non corrisponde",
+	"auth.person-scopes-refused": "Una persona è amministratore, senza righe di permesso, oppure ha esattamente un permesso visualizzatore",
 	"device.certificates-unavailable": "I certificati dei dispositivi non sono disponibili",
 	"device.not-found": "Dispositivo {id} non trovato",
 	"device.credentials-unavailable": "Le credenziali del dispositivo non sono disponibili",