@camstack/system 1.2.472 → 1.2.474

package/dist/{agent-https-JhvY1axF.mjs → agent-https-CbczsyM0.mjs}

@@ -1,4 +1,4 @@
-import { Ki as defineRecordKinds } from "./dist-CdFkkmXW.mjs";
+import { qi as defineRecordKinds } from "./dist-BugavoVR.mjs";
 import { S as backdatedNotBefore, _ as NameConstraints, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, g as GeneralSubtrees, h as GeneralSubtree, i as Extension, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension, v as GeneralName, x as AsnConvert } from "./x509.es-DK__ETIe.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, webcrypto } from "node:crypto";
@@ -6,7 +6,7 @@ import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { isIP } from "node:net";
 import { join } from "node:path";
 import * as os$1 from "node:os";
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 var MeshNodeCertificateBodySchema = z.object({
 	nodeId: z.string(),
 	serial: z.string(),
@@ -915,14 +915,11 @@ function installAgentHttps(dataDir, input) {
 	if (!leaf.verify(ca.publicKey)) throw new AgentHttpsInstallError("the certificate is not signed by the CA that came with it");
 	if (new Date(leaf.validTo).getTime() <= Date.now()) throw new AgentHttpsInstallError("the certificate is already expired");
 	mkdirSync(paths.dir, { recursive: true });
-	const tmp = `${paths.bundlePath}.tmp`;
-	writeOwnerOnlyFileSync(tmp, JSON.stringify({
+	writeOwnerOnlyFileSync(paths.bundlePath, JSON.stringify({
 		keyPem,
 		certPem: input.certPem,
 		caCertPem: input.caCertPem
 	}));
-	renameSync(tmp, paths.bundlePath);
-	chmodSync(paths.bundlePath, 384);
 	writeFileAtomic(paths.certPath, input.certPem.endsWith("\n") ? input.certPem : `${input.certPem}\n`);
 	return {
 		keyPem,

package/dist/{agent-https-bnyFRK7Y.js → agent-https-DRwEbLL7.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DX5Fu3mV.js");
+const require_dist = require("./dist-Sn-HiZ4e.js");
 const require_x509_es = require("./x509.es-C4cOo48M.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
@@ -917,14 +917,11 @@ function installAgentHttps(dataDir, input) {
 	if (!leaf.verify(ca.publicKey)) throw new AgentHttpsInstallError("the certificate is not signed by the CA that came with it");
 	if (new Date(leaf.validTo).getTime() <= Date.now()) throw new AgentHttpsInstallError("the certificate is already expired");
 	(0, node_fs.mkdirSync)(paths.dir, { recursive: true });
-	const tmp = `${paths.bundlePath}.tmp`;
-	(0, _camstack_types_node.writeOwnerOnlyFileSync)(tmp, JSON.stringify({
+	(0, _camstack_types_node.writeOwnerOnlyFileSync)(paths.bundlePath, JSON.stringify({
 		keyPem,
 		certPem: input.certPem,
 		caCertPem: input.caCertPem
 	}));
-	(0, node_fs.renameSync)(tmp, paths.bundlePath);
-	(0, node_fs.chmodSync)(paths.bundlePath, 384);
 	writeFileAtomic(paths.certPath, input.certPem.endsWith("\n") ? input.certPem : `${input.certPem}\n`);
 	return {
 		keyPem,

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as errMsg, Da as EventCategory, _t as addonPagesCapability, ei as BaseAddon } from "../../dist-CdFkkmXW.mjs";
+import { Oa as EventCategory, _t as addonPagesCapability, ei as errMsg, ti as BaseAddon } from "../../dist-BugavoVR.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as errMsg, Da as EventCategory, ei as BaseAddon, yt as addonWidgetsCapability } from "../../dist-CdFkkmXW.mjs";
+import { Oa as EventCategory, ei as errMsg, ti as BaseAddon, yt as addonWidgetsCapability } from "../../dist-BugavoVR.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as errMsg, Da as EventCategory, Ki as defineRecordKinds, St as alertsCapability, Ui as createEvent, bn as isAlertEpisodeSeverity, bt as alertEpisodeId, ei as BaseAddon, i as AlertSchema, xt as alertEpisodePayload, yn as isAlertEpisodeOpen } from "../../dist-CdFkkmXW.mjs";
+import { Oa as EventCategory, St as alertsCapability, Wi as createEvent, bn as isAlertEpisodeSeverity, bt as alertEpisodeId, ei as errMsg, i as AlertSchema, qi as defineRecordKinds, ti as BaseAddon, xt as alertEpisodePayload, yn as isAlertEpisodeOpen } from "../../dist-BugavoVR.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 //#region src/builtins/alerts/alert-episode-policy.ts
 /**

package/dist/builtins/autotrack/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/autotrack/index.mjs

@@ -1,4 +1,4 @@
-import { $r as errMsg, Da as EventCategory, Et as bareAddonId, I as FIRST_LEVEL_MACRO_CLASSES, ea as isEvent, ei as BaseAddon, tr as ptzAutotrackCapability } from "../../dist-CdFkkmXW.mjs";
+import { Et as bareAddonId, I as FIRST_LEVEL_MACRO_CLASSES, Oa as EventCategory, ei as errMsg, nr as ptzAutotrackCapability, ta as isEvent, ti as BaseAddon } from "../../dist-BugavoVR.mjs";
 //#region src/builtins/autotrack/autotrack-config.ts
 var DEFAULT_AUTOTRACK_LOOP_CONFIG = {
 	deadZoneFraction: .5,

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_restore_archive = require("../../restore-archive-B2jIFfu_.js");
+const require_restore_archive = require("../../restore-archive-gYKzaJ4Y.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,6 +1,6 @@
-import { Da as EventCategory, Er as storageOccupancyCapability, Sa as toNodeId, Tt as backupCapability, Vn as mayWriteToLocation, ca as nodePin, ei as BaseAddon } from "../../dist-CdFkkmXW.mjs";
+import { Ca as toNodeId, Dr as storageOccupancyCapability, Oa as EventCategory, Tt as backupCapability, Vn as mayWriteToLocation, la as nodePin, ti as BaseAddon } from "../../dist-BugavoVR.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { _ as backupRecordStoresOf, a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-BX0gaKtG.mjs";
+import { _ as backupRecordStoresOf, a as BackupSnapshotRefusedError, d as ENCRYPTED_BACKUP_SUFFIX, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, i as BackupCancelledError, l as BackupKeyFormatError, m as parseBackupSecretKey, n as precheckRestoreKey, o as DEFAULT_BACKUP_DATABASES, p as parseBackupPublicKey, r as prepareRestoreArchive, s as SystemBackupService } from "../../restore-archive-CFBm30Gk.mjs";
 import { randomUUID } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/calendars/calendars.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let zod = require("zod");
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/calendars/calendars.addon.mjs

@@ -1,4 +1,4 @@
-import { Ki as defineRecordKinds, Mt as calendarsCapability, ei as BaseAddon, g as CalendarPreferencesSchema } from "../../dist-CdFkkmXW.mjs";
+import { Mt as calendarsCapability, g as CalendarPreferencesSchema, qi as defineRecordKinds, ti as BaseAddon } from "../../dist-BugavoVR.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { z } from "zod";
 //#region src/builtins/calendars/calendar-color.ts

package/dist/builtins/camera-grid/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 let zod = require("zod");
 let _camstack_types_node = require("@camstack/types/node");
 let node_path = require("node:path");

package/dist/builtins/camera-grid/index.mjs

@@ -1,4 +1,4 @@
-import { $r as errMsg, Da as EventCategory, Gn as motionCapability, Hn as memoizePinnedFfmpeg, N as DeclaredDevices, Nt as cameraGridLayoutCapability, Or as streamCatalogCapability, Qi as hydrateSchema, Qr as DeviceType, T as DERIVED_CAMERA_SILENCED_CAP_NAMES, Ui as createEvent, X as MOTION_CLOSE_AFTER_MS, Xr as DeviceFeature, a as BaseDevice, ei as BaseAddon, qt as declarationOwnerNodeId, xr as snapshotCapability, zr as buildFfmpegArgs } from "../../dist-CdFkkmXW.mjs";
+import { $i as hydrateSchema, $r as DeviceType, Br as buildFfmpegArgs, Gn as motionCapability, Hn as memoizePinnedFfmpeg, N as DeclaredDevices, Nt as cameraGridLayoutCapability, Oa as EventCategory, Sr as snapshotCapability, T as DERIVED_CAMERA_SILENCED_CAP_NAMES, Wi as createEvent, X as MOTION_CLOSE_AFTER_MS, Zr as DeviceFeature, a as BaseDevice, ei as errMsg, kr as streamCatalogCapability, qt as declarationOwnerNodeId, ti as BaseAddon } from "../../dist-BugavoVR.mjs";
 import { z } from "zod";
 import { FfmpegProcess } from "@camstack/types/node";
 import { join } from "node:path";

package/dist/builtins/composer/composer.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
-const require_composition_sources = require("../../composition-sources-D3h-tNoJ.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
+const require_composition_sources = require("../../composition-sources-CJv3W669.js");
 let zod = require("zod");
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/composer/composer.addon.mjs

@@ -1,5 +1,5 @@
-import { $r as errMsg, Br as cloneStatefulExpressionMemory, Da as EventCategory, Gr as compositionSliceKey, Hr as composedDeviceStableId, It as composerCapability, Jr as disarmRoseMemory, Kr as compositionSourceKey, Lt as compositionFieldKey, N as DeclaredDevices, Ot as buildCapabilityLookup, Qn as planComposition, Qr as DeviceType, Rr as COMPOSER_ADDON_ID, Ui as createEvent, Ur as compositionFeatureEnabled, Vr as composedDeviceRef, Wr as compositionItemFieldPath, Yr as toExpressionValue, a as BaseDevice, cn as evaluateCompositionField, d as COMPOSED_ITEM_FIXED_FIELDS, dn as expressionContainsBuiltinCall, ei as BaseAddon, qr as createStatefulExpressionMemory, r as ALL_CAPABILITY_DEFINITIONS } from "../../dist-CdFkkmXW.mjs";
-import { n as normalizedNativeOwner } from "../../composition-sources-BY6rFuAE.mjs";
+import { $n as planComposition, $r as DeviceType, Gr as compositionItemFieldPath, Hr as composedDeviceRef, It as composerCapability, Jr as createStatefulExpressionMemory, Kr as compositionSliceKey, Lt as compositionFieldKey, N as DeclaredDevices, Oa as EventCategory, Ot as buildCapabilityLookup, Ur as composedDeviceStableId, Vr as cloneStatefulExpressionMemory, Wi as createEvent, Wr as compositionFeatureEnabled, Xr as toExpressionValue, Yr as disarmRoseMemory, a as BaseDevice, cn as evaluateCompositionField, d as COMPOSED_ITEM_FIXED_FIELDS, dn as expressionContainsBuiltinCall, ei as errMsg, qr as compositionSourceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as BaseAddon, zr as COMPOSER_ADDON_ID } from "../../dist-BugavoVR.mjs";
+import { n as normalizedNativeOwner } from "../../composition-sources-CsBIIit3.mjs";
 import { z } from "zod";
 //#region src/builtins/shared/device-state-changed.ts
 /** Structural narrowing helper for untrusted bus payloads. */

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-CdFkkmXW.mjs";
+import { Ln as logDestinationCapability, ti as BaseAddon } from "../../dist-BugavoVR.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_composition_sources = require("../../composition-sources-D3h-tNoJ.js");
+const require_composition_sources = require("../../composition-sources-CJv3W669.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");
 let zod = require("zod");

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,6 +1,6 @@
-import { $r as errMsg, Bt as coreBlockComposition, Ht as coreBlockSourceKind, Ki as defineRecordKinds, Kn as normalizeCoreBlockWrite, Kr as compositionSourceKey, Mr as validateComposition, N as DeclaredDevices, Ot as buildCapabilityLookup, Qi as hydrateSchema, Qn as planComposition, Rt as compositionSourceRefs, Ut as coreBlocksCapability, Vi as collectSecretMarkerRefs, Vr as composedDeviceRef, Vt as coreBlockIdFromAddonId, Zt as describeComposableCaps, _a as resolveSecretMarkers, aa as isSecretRefOwnedBy, ar as replacedFieldKeys, ba as secretTreeFromSchema, cr as resolveCoreBlockEntry, ei as BaseAddon, f as COMPOSER_RUNNER_ID, lr as resolveCoreBlockFiles, m as CORE_BLOCK_ADDON_PREFIX, p as CORE_BLOCKS_ADDON_ID, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretMarker, v as CoreBlockSchema, wa as transformSecretWrite, zt as coreBlockAddonId } from "../../dist-CdFkkmXW.mjs";
+import { $i as hydrateSchema, $n as planComposition, Bt as coreBlockComposition, Hi as collectSecretMarkerRefs, Hr as composedDeviceRef, Ht as coreBlockSourceKind, Kn as normalizeCoreBlockWrite, N as DeclaredDevices, Nr as validateComposition, Ot as buildCapabilityLookup, Rt as compositionSourceRefs, Ta as transformSecretWrite, Ut as coreBlocksCapability, Vt as coreBlockIdFromAddonId, Zt as describeComposableCaps, ei as errMsg, f as COMPOSER_RUNNER_ID, ia as isSecretMarker, lr as resolveCoreBlockEntry, m as CORE_BLOCK_ADDON_PREFIX, oa as isSecretRefOwnedBy, or as replacedFieldKeys, p as CORE_BLOCKS_ADDON_ID, qi as defineRecordKinds, qr as compositionSourceKey, r as ALL_CAPABILITY_DEFINITIONS, ti as BaseAddon, ur as resolveCoreBlockFiles, v as CoreBlockSchema, va as resolveSecretMarkers, xa as secretTreeFromSchema, zt as coreBlockAddonId } from "../../dist-BugavoVR.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { t as describeCompositionSources } from "../../composition-sources-BY6rFuAE.mjs";
+import { t as describeCompositionSources } from "../../composition-sources-CsBIIit3.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { n as unwrapStoredValue, t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";
 import { createRequire } from "node:module";

package/dist/builtins/device-history/device-history.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 //#region src/builtins/device-history/time/bucket-time.ts
 /**
 * Bucket arithmetic for the three rollup tiers (D850, plan §4/§5.5).

package/dist/builtins/device-history/device-history.addon.mjs

@@ -1,4 +1,4 @@
-import { B as HISTORY_ITEM_CATALOG, Ct as armRemovalReconcile, D as DEVICE_HISTORY_ENERGY_KEY, Da as EventCategory, Ji as emitReadiness, Qr as DeviceType, Zi as historyItemFieldPath, ei as BaseAddon, en as deviceHistoryCapability, li as HISTORY_DEFAULT_MIN_INTERVAL_MS, nn as deviceRemovalHookCapability, z as HISTORY_CATALOG } from "../../dist-CdFkkmXW.mjs";
+import { $r as DeviceType, B as HISTORY_ITEM_CATALOG, Ct as armRemovalReconcile, D as DEVICE_HISTORY_ENERGY_KEY, Oa as EventCategory, Qi as historyItemFieldPath, Yi as emitReadiness, en as deviceHistoryCapability, nn as deviceRemovalHookCapability, ti as BaseAddon, ui as HISTORY_DEFAULT_MIN_INTERVAL_MS, z as HISTORY_CATALOG } from "../../dist-BugavoVR.mjs";
 //#region src/builtins/device-history/time/bucket-time.ts
 /**
 * Bucket arithmetic for the three rollup tiers (D850, plan §4/§5.5).

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 const require_prefix_range = require("../../prefix-range-D_KueXbQ.js");
 const require_prefix_walk = require("../../prefix-walk-Dv6MLZlM.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-CGUqX-Oz.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-DorakcxV.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
@@ -8988,6 +8988,48 @@ function errorMessage$3(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
+//#region src/builtins/device-manager/running-flip.ts
+function readRunning(slice) {
+	const running = slice["running"];
+	if (running === true || running === false) return running;
+	return null;
+}
+var RunningFlipDetector = class {
+	#memory = /* @__PURE__ */ new Map();
+	seed(deviceId, running) {
+		this.#memory.set(deviceId, running);
+	}
+	note(deviceId, slice) {
+		const running = readRunning(slice);
+		const since = typeof slice["since"] === "number" && Number.isFinite(slice["since"]) ? slice["since"] : null;
+		const phase = typeof slice["phase"] === "string" ? slice["phase"] : null;
+		const prev = this.#memory.get(deviceId);
+		this.#memory.set(deviceId, running);
+		if (prev === void 0) {
+			if (running === true) return {
+				kind: "started",
+				deviceId,
+				since,
+				phase
+			};
+			return null;
+		}
+		if (prev === true && running === false) return {
+			kind: "finished",
+			deviceId,
+			since,
+			phase
+		};
+		if (prev !== true && running === true) return {
+			kind: "started",
+			deviceId,
+			since,
+			phase
+		};
+		return null;
+	}
+};
+//#endregion
 //#region src/builtins/device-manager/runtime-state-persist-gate.ts
 /**
 * The subset of `blob` that is allowed on disk: slices whose capability
@@ -9490,6 +9532,7 @@ var MirrorRowWriter = class MirrorRowWriter {
 * the owner alone — `nativeSlice` and `DeviceNativeShadowChanged`, a category
 * the public routers refuse (D224).
 */
+var RUNNING_STATE_CAP = "running-state";
 var SEED_REFUSAL_MESSAGE = "runtime-state row unreadable — native write refused until it reads";
 function errorMessage$1(err) {
 	return err instanceof Error ? err.message : String(err);
@@ -9524,6 +9567,8 @@ var DeviceStateMirror = class {
 	seedRefusalLogged = /* @__PURE__ */ new Set();
 	/** Every write of a device's row, and what is believed to be on it. */
 	writer;
+	/** Edge detector for `running-state` flip events (D933). */
+	runningFlip = new RunningFlipDetector();
 	constructor(ctx, policyFor = require_dist.runtimeStatePolicyFor, schemaFor = defaultSchemaFor) {
 		this.ctx = ctx;
 		this.policyFor = policyFor;
@@ -9931,6 +9976,7 @@ var DeviceStateMirror = class {
 			meta: { caps: split.dropped }
 		});
 		for (const [capName, cap] of this.claims.claimsOf(deviceId)) this.claims.seedView(deviceId, capName, cap, this.nativeOf(deviceId, capName));
+		this.seedRunningFlip(deviceId);
 		this.seeded.add(deviceId);
 		this.rowRead.add(deviceId);
 		this.writer.markPersisted(deviceId, persistableBlob(joinRuntimeBlob(split.native, split.owned, this.policyFor), this.policyFor));
@@ -10038,12 +10084,36 @@ var DeviceStateMirror = class {
 		for (const deviceId of deviceIds) out[String(deviceId)] = this.snapshotForDevice(deviceId);
 		return out;
 	}
+	/** Remember a restored running bit so the first public merge does not emit a flip. */
+	seedRunningFlip(deviceId) {
+		const slice = this.capSlice(deviceId, RUNNING_STATE_CAP);
+		if (slice === null) return;
+		const running = slice["running"];
+		this.runningFlip.seed(deviceId, running === true || running === false ? running : null);
+	}
 	/**
 	* The PUBLIC event: exactly `{ deviceId, capName, slice }` for every device,
 	* claimed or not. The native shadow never rides here (D224) — see
 	* `emitNativeShadow`.
 	*/
 	emitStateChanged(deviceId, capName, slice) {
+		if (capName === RUNNING_STATE_CAP) {
+			const flip = this.runningFlip.note(deviceId, slice);
+			if (flip !== null) this.ctx.eventBus.emit({
+				id: (0, node_crypto.randomUUID)(),
+				timestamp: /* @__PURE__ */ new Date(),
+				source: {
+					type: "device",
+					id: deviceId
+				},
+				category: flip.kind === "started" ? require_dist.EventCategory.RunningStarted : require_dist.EventCategory.RunningFinished,
+				data: {
+					deviceId: flip.deviceId,
+					since: flip.since,
+					phase: flip.phase
+				}
+			});
+		}
 		this.ctx.eventBus.emit({
 			id: (0, node_crypto.randomUUID)(),
 			timestamp: /* @__PURE__ */ new Date(),

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,8 +1,8 @@
-import { $i as isDeviceConfigCap, $r as errMsg, $t as deviceExtensionCapability, Ca as toSecretFieldView, Da as EventCategory, Di as SECRET_CLEAR, F as DeviceTombstoneSchema, Hi as collectZodSecretPaths, In as locationIconKey, Ki as defineRecordKinds, L as FieldClaimModeSchema, Mi as WELL_KNOWN_TAB_MAP, Mn as legacyAutoLinkIds, P as DeviceStatusSchema, Pt as canonicalIconKey, Qr as DeviceType, R as FieldClaimSchema, Ta as userError, Wt as createDeviceExtensionProvider, Xn as parseStreamParamsFormPatch, Xr as DeviceFeature, Y as MINUTES_PER_DAY, Yt as defineExtensionSlotProvider, Zr as DeviceRole, _a as resolveSecretMarkers, br as siteZoneKey, ei as BaseAddon, gn as formatMinutes, ia as isSecretMarkerLike, in as deviceStatusCapability, jt as buildStreamParamsConfigSchema, l as CAP_NAMES_WITH_STATUS, mr as runtimeStatePolicyFor, na as isSecretClear, on as enumerateItemArrayFields, ot as STREAM_PROFILE_META, qn as normalizeUnit, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretMarker, rn as deviceStateCapability, s as CAMERA_SWITCH_ORDER, sn as enumerateSchemaFields, ta as isKeychainStoredField, tn as deviceManagerCapability, un as expandContainer, w as DAY_NAMES, wa as transformSecretWrite, xa as sleep$1, ya as secretTreeFromPaths } from "../../dist-CdFkkmXW.mjs";
+import { $r as DeviceType, $t as deviceExtensionCapability, Ea as userError, F as DeviceTombstoneSchema, In as locationIconKey, L as FieldClaimModeSchema, Mn as legacyAutoLinkIds, Ni as WELL_KNOWN_TAB_MAP, Oa as EventCategory, Oi as SECRET_CLEAR, P as DeviceStatusSchema, Pt as canonicalIconKey, Qr as DeviceRole, R as FieldClaimSchema, Sa as sleep$1, Ta as transformSecretWrite, Ui as collectZodSecretPaths, Wt as createDeviceExtensionProvider, Y as MINUTES_PER_DAY, Yt as defineExtensionSlotProvider, Zn as parseStreamParamsFormPatch, Zr as DeviceFeature, aa as isSecretMarkerLike, ba as secretTreeFromPaths, ea as isDeviceConfigCap, ei as errMsg, gn as formatMinutes, hr as runtimeStatePolicyFor, ia as isSecretMarker, in as deviceStatusCapability, jt as buildStreamParamsConfigSchema, l as CAP_NAMES_WITH_STATUS, na as isKeychainStoredField, on as enumerateItemArrayFields, ot as STREAM_PROFILE_META, qi as defineRecordKinds, qn as normalizeUnit, r as ALL_CAPABILITY_DEFINITIONS, ra as isSecretClear, rn as deviceStateCapability, s as CAMERA_SWITCH_ORDER, sn as enumerateSchemaFields, ti as BaseAddon, tn as deviceManagerCapability, un as expandContainer, va as resolveSecretMarkers, w as DAY_NAMES, wa as toSecretFieldView, xr as siteZoneKey } from "../../dist-BugavoVR.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { t as prefixRange } from "../../prefix-range-Dl0znowN.mjs";
 import { t as loadPrefixed } from "../../prefix-walk-DAOBSyH1.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-C_Kjp-Bj.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-CWp7ZSeA.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
@@ -8982,6 +8982,48 @@ function errorMessage$3(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
+//#region src/builtins/device-manager/running-flip.ts
+function readRunning(slice) {
+	const running = slice["running"];
+	if (running === true || running === false) return running;
+	return null;
+}
+var RunningFlipDetector = class {
+	#memory = /* @__PURE__ */ new Map();
+	seed(deviceId, running) {
+		this.#memory.set(deviceId, running);
+	}
+	note(deviceId, slice) {
+		const running = readRunning(slice);
+		const since = typeof slice["since"] === "number" && Number.isFinite(slice["since"]) ? slice["since"] : null;
+		const phase = typeof slice["phase"] === "string" ? slice["phase"] : null;
+		const prev = this.#memory.get(deviceId);
+		this.#memory.set(deviceId, running);
+		if (prev === void 0) {
+			if (running === true) return {
+				kind: "started",
+				deviceId,
+				since,
+				phase
+			};
+			return null;
+		}
+		if (prev === true && running === false) return {
+			kind: "finished",
+			deviceId,
+			since,
+			phase
+		};
+		if (prev !== true && running === true) return {
+			kind: "started",
+			deviceId,
+			since,
+			phase
+		};
+		return null;
+	}
+};
+//#endregion
 //#region src/builtins/device-manager/runtime-state-persist-gate.ts
 /**
 * The subset of `blob` that is allowed on disk: slices whose capability
@@ -9484,6 +9526,7 @@ var MirrorRowWriter = class MirrorRowWriter {
 * the owner alone — `nativeSlice` and `DeviceNativeShadowChanged`, a category
 * the public routers refuse (D224).
 */
+var RUNNING_STATE_CAP = "running-state";
 var SEED_REFUSAL_MESSAGE = "runtime-state row unreadable — native write refused until it reads";
 function errorMessage$1(err) {
 	return err instanceof Error ? err.message : String(err);
@@ -9518,6 +9561,8 @@ var DeviceStateMirror = class {
 	seedRefusalLogged = /* @__PURE__ */ new Set();
 	/** Every write of a device's row, and what is believed to be on it. */
 	writer;
+	/** Edge detector for `running-state` flip events (D933). */
+	runningFlip = new RunningFlipDetector();
 	constructor(ctx, policyFor = runtimeStatePolicyFor, schemaFor = defaultSchemaFor) {
 		this.ctx = ctx;
 		this.policyFor = policyFor;
@@ -9925,6 +9970,7 @@ var DeviceStateMirror = class {
 			meta: { caps: split.dropped }
 		});
 		for (const [capName, cap] of this.claims.claimsOf(deviceId)) this.claims.seedView(deviceId, capName, cap, this.nativeOf(deviceId, capName));
+		this.seedRunningFlip(deviceId);
 		this.seeded.add(deviceId);
 		this.rowRead.add(deviceId);
 		this.writer.markPersisted(deviceId, persistableBlob(joinRuntimeBlob(split.native, split.owned, this.policyFor), this.policyFor));
@@ -10032,12 +10078,36 @@ var DeviceStateMirror = class {
 		for (const deviceId of deviceIds) out[String(deviceId)] = this.snapshotForDevice(deviceId);
 		return out;
 	}
+	/** Remember a restored running bit so the first public merge does not emit a flip. */
+	seedRunningFlip(deviceId) {
+		const slice = this.capSlice(deviceId, RUNNING_STATE_CAP);
+		if (slice === null) return;
+		const running = slice["running"];
+		this.runningFlip.seed(deviceId, running === true || running === false ? running : null);
+	}
 	/**
 	* The PUBLIC event: exactly `{ deviceId, capName, slice }` for every device,
 	* claimed or not. The native shadow never rides here (D224) — see
 	* `emitNativeShadow`.
 	*/
 	emitStateChanged(deviceId, capName, slice) {
+		if (capName === RUNNING_STATE_CAP) {
+			const flip = this.runningFlip.note(deviceId, slice);
+			if (flip !== null) this.ctx.eventBus.emit({
+				id: randomUUID(),
+				timestamp: /* @__PURE__ */ new Date(),
+				source: {
+					type: "device",
+					id: deviceId
+				},
+				category: flip.kind === "started" ? EventCategory.RunningStarted : EventCategory.RunningFinished,
+				data: {
+					deviceId: flip.deviceId,
+					since: flip.since,
+					phase: flip.phase
+				}
+			});
+		}
 		this.ctx.eventBus.emit({
 			id: randomUUID(),
 			timestamp: /* @__PURE__ */ new Date(),

package/dist/builtins/device-manager/device-state-mirror.d.ts

@@ -58,6 +58,8 @@ export declare class DeviceStateMirror {
 	private readonly seedRefusalLogged;
 	/** Every write of a device's row, and what is believed to be on it. */
 	private readonly writer;
+	/** Edge detector for `running-state` flip events (D933). */
+	private readonly runningFlip;
 	constructor(ctx: AddonContext, policyFor?: RuntimeStatePolicyLookup, schemaFor?: RuntimeStateSchemaLookup);
 	/**
 	* Single-cap mirror update — diff against the current mirror,
@@ -247,6 +249,8 @@ export declare class DeviceStateMirror {
 	/** Whole-system mirror dump. Backs `deviceState.getAllSnapshots` — one
 	*  round-trip for a warm boot instead of N per-device calls. */
 	allSnapshots(): Record<string, Record<string, Record<string, unknown>>>;
+	/** Remember a restored running bit so the first public merge does not emit a flip. */
+	private seedRunningFlip;
 	/**
 	* The PUBLIC event: exactly `{ deviceId, capName, slice }` for every device,
 	* claimed or not. The native shadow never rides here (D224) — see

package/dist/builtins/device-manager/running-flip.d.ts

@@ -0,0 +1,11 @@
+export interface RunningFlipEvent {
+	readonly kind: "started" | "finished";
+	readonly deviceId: number;
+	readonly since: number | null;
+	readonly phase: string | null;
+}
+export declare class RunningFlipDetector {
+	#private;
+	seed(deviceId: number, running: boolean | null): void;
+	note(deviceId: number, slice: Record<string, unknown>): RunningFlipEvent | null;
+}

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as logDestinationCapability, ei as BaseAddon } from "../../dist-CdFkkmXW.mjs";
+import { Ln as logDestinationCapability, ti as BaseAddon } from "../../dist-BugavoVR.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/keychain/index.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
-const require_device_ca = require("../../device-ca-CfiIg3a9.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
+const require_device_ca = require("../../device-ca-Dg3rSU48.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_constants = require("../../constants-CqbO6e9i.js");
+const require_constants = require("../../constants-C0hrXcEr.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,7 +1,7 @@
-import { An as keychainAdminCapability, Da as EventCategory, G as KeychainResetRecordSchema, Ki as defineRecordKinds, U as KEYCHAIN_RESET_TRIGGER_ACTOR, W as KeychainAuditEntrySchema, Xi as formatSecretScope, ei as BaseAddon, jn as keychainCapability, pa as parseSecretRef, ua as normalizeSecretOwner } from "../../dist-CdFkkmXW.mjs";
-import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-BWTWWBcc.mjs";
+import { An as keychainAdminCapability, G as KeychainResetRecordSchema, Oa as EventCategory, U as KEYCHAIN_RESET_TRIGGER_ACTOR, W as KeychainAuditEntrySchema, Zi as formatSecretScope, da as normalizeSecretOwner, jn as keychainCapability, ma as parseSecretRef, qi as defineRecordKinds, ti as BaseAddon } from "../../dist-BugavoVR.mjs";
+import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-CHdsePe5.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { a as MESH_CA_KEY_REF } from "../../constants-zBiEodEM.mjs";
+import { a as MESH_CA_KEY_REF } from "../../constants-Dy8CaDeT.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DX5Fu3mV.js");
+const require_dist = require("../../dist-Sn-HiZ4e.js");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);
 let node_path = require("node:path");

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { $r as errMsg, Da as EventCategory, Ui as createEvent, Vn as mayWriteToLocation, ei as BaseAddon, it as RecordingStatusSchema, nt as RECORDING_SOURCE_CAMSTACK_ADDON } from "../../dist-CdFkkmXW.mjs";
+import { Oa as EventCategory, Vn as mayWriteToLocation, Wi as createEvent, ei as errMsg, it as RecordingStatusSchema, nt as RECORDING_SOURCE_CAMSTACK_ADDON, ti as BaseAddon } from "../../dist-BugavoVR.mjs";
 import * as fsp from "node:fs/promises";
 import path from "node:path";
 import { constants } from "node:fs";