@camstack/system 1.2.478 → 1.2.480

package/dist/{dist-OC-L50JY.mjs → dist-DfZKKnMP.mjs}

@@ -44943,107 +44943,6 @@ var PALETTE_PRESET_IDS = [
 	"high-contrast",
 	"okabe-ito"
 ];
-function isPaletteEntryId(id) {
-	return PALETTE_ENTRY_IDS.includes(id);
-}
-function isPalettePresetId(id) {
-	return PALETTE_PRESET_IDS.includes(id);
-}
-/**
-* CIEDE2000 and WCAG contrast for the display palette (D939).
-*
-* One implementation, shared by the hub validator, the admin editor and
-* (phase 2) the viewer. The arithmetic matches the viewer's `src/theme/cie.ts`.
-*/
-/** Page backgrounds the contrast rule is measured against. */
-var PALETTE_BACKGROUNDS = {
-	dark: "#0c0a09",
-	light: "#fafaf9"
-};
-/** Marks that are not event kinds and share the raised distance floor. */
-var PALETTE_MARK_PAIR = ["live", "heatmapScrub"];
-var HEX = /^#[0-9a-fA-F]{6}$/;
-function srgbChannel(hex, start) {
-	return Number.parseInt(hex.slice(start, start + 2), 16);
-}
-function srgbToLin(channel) {
-	const x = channel / 255;
-	return x <= .04045 ? x / 12.92 : ((x + .055) / 1.055) ** 2.4;
-}
-function relativeLuminance(hex) {
-	const r = srgbToLin(srgbChannel(hex, 1));
-	const g = srgbToLin(srgbChannel(hex, 3));
-	const b = srgbToLin(srgbChannel(hex, 5));
-	return .2126 * r + .7152 * g + .0722 * b;
-}
-/** WCAG contrast ratio of two `#rrggbb` colours. Non-hex returns 0. */
-function contrastRatio(a, b) {
-	if (!HEX.test(a) || !HEX.test(b)) return 0;
-	const hi = Math.max(relativeLuminance(a), relativeLuminance(b));
-	const lo = Math.min(relativeLuminance(a), relativeLuminance(b));
-	return (hi + .05) / (lo + .05);
-}
-function xyzToLab(hex) {
-	const r = srgbToLin(srgbChannel(hex, 1));
-	const g = srgbToLin(srgbChannel(hex, 3));
-	const bl = srgbToLin(srgbChannel(hex, 5));
-	const x = .4124564 * r + .3575761 * g + .1804375 * bl;
-	const y = .2126729 * r + .7151522 * g + .072175 * bl;
-	const z = .0193339 * r + .119192 * g + .9503041 * bl;
-	const f = (t) => t > .008856 ? Math.cbrt(t) : 7.787 * t + 16 / 116;
-	const fx = f(x / .95047);
-	const fy = f(y);
-	const fz = f(z / 1.08883);
-	return {
-		L: 116 * fy - 16,
-		a: 500 * (fx - fy),
-		b: 200 * (fy - fz)
-	};
-}
-function hueDeg(ap, b) {
-	if (ap === 0 && b === 0) return 0;
-	const ang = Math.atan2(b, ap) * 180 / Math.PI;
-	return ang < 0 ? ang + 360 : ang;
-}
-/** CIEDE2000. Non-hex returns 0 so a bad swatch fails the distinctness rule. */
-function deltaE00(hex1, hex2) {
-	if (!HEX.test(hex1) || !HEX.test(hex2)) return 0;
-	const lab1 = xyzToLab(hex1);
-	const lab2 = xyzToLab(hex2);
-	const cab7 = ((Math.hypot(lab1.a, lab1.b) + Math.hypot(lab2.a, lab2.b)) / 2) ** 7;
-	const g = .5 * (1 - Math.sqrt(cab7 / (cab7 + 25 ** 7)));
-	const a1p = (1 + g) * lab1.a;
-	const a2p = (1 + g) * lab2.a;
-	const c1p = Math.hypot(a1p, lab1.b);
-	const c2p = Math.hypot(a2p, lab2.b);
-	const h1p = hueDeg(a1p, lab1.b);
-	const h2p = hueDeg(a2p, lab2.b);
-	let dhp = 0;
-	if (c1p * c2p !== 0) {
-		dhp = h2p - h1p;
-		if (dhp > 180) dhp -= 360;
-		else if (dhp < -180) dhp += 360;
-	}
-	const dHp = 2 * Math.sqrt(c1p * c2p) * Math.sin(dhp * Math.PI / 360);
-	const lbp = (lab1.L + lab2.L) / 2;
-	const cbp = (c1p + c2p) / 2;
-	let hbp = h1p + h2p;
-	if (c1p * c2p !== 0) {
-		if (Math.abs(h1p - h2p) > 180) hbp += hbp < 360 ? 360 : -360;
-		hbp /= 2;
-	}
-	const t = 1 - .17 * Math.cos((hbp - 30) * Math.PI / 180) + .24 * Math.cos(2 * hbp * Math.PI / 180) + .32 * Math.cos((3 * hbp + 6) * Math.PI / 180) - .2 * Math.cos((4 * hbp - 63) * Math.PI / 180);
-	const dTheta = 30 * Math.exp(-(((hbp - 275) / 25) ** 2));
-	const cbp7 = cbp ** 7;
-	const rc = 2 * Math.sqrt(cbp7 / (cbp7 + 25 ** 7));
-	const sl = 1 + .015 * (lbp - 50) ** 2 / Math.sqrt(20 + (lbp - 50) ** 2);
-	const sc = 1 + .045 * cbp;
-	const sh = 1 + .015 * cbp * t;
-	const rt = -Math.sin(2 * dTheta * Math.PI / 180) * rc;
-	const dLp = lab2.L - lab1.L;
-	const dCp = c2p - c1p;
-	return Math.sqrt((dLp / sl) ** 2 + (dCp / sc) ** 2 + (dHp / sh) ** 2 + rt * (dCp / sc) * (dHp / sh));
-}
 /** Frozen palette tables (D939). The spec refuses a table that breaks the rule. */
 var CAMSTACK_HEX = {
 	motion: "#d946ef",
@@ -45273,7 +45172,7 @@ var setPaletteInputSchema = z.union([z.object({ presetId: z.string() }), z.objec
 	presetId: z.string(),
 	overrides: z.record(z.string(), paletteSwatchSchema)
 })]);
-var storedPaletteSchema = z.object({
+z.object({
 	presetId: z.string(),
 	overrides: z.record(z.string(), paletteSwatchSchema)
 });
@@ -45330,101 +45229,6 @@ function readyOf(row, source, customized) {
 		fallbacks: [...row.fallbacks]
 	};
 }
-function namedColours(swatches, fallbacks) {
-	const rows = [];
-	for (const id of PALETTE_ENTRY_IDS) {
-		const swatch = swatches[id];
-		if (swatch !== void 0) rows.push({
-			name: id,
-			hex: swatch.hex
-		});
-	}
-	fallbacks.forEach((hex, index) => {
-		rows.push({
-			name: `fallback-${index}`,
-			hex
-		});
-	});
-	return rows;
-}
-function gradientViolations(swatches) {
-	const audio = swatches[AUDIO_ENTRY_ID];
-	if (audio === void 0) return [];
-	if (audio.form !== "gradient") return [{
-		code: "bad-gradient",
-		entry: AUDIO_ENTRY_ID
-	}];
-	return AUDIO_GRADIENT_ALPHAS.every((alpha, index) => audio.alphas[index] === alpha) ? [] : [{
-		code: "bad-gradient",
-		entry: AUDIO_ENTRY_ID
-	}];
-}
-function isMarkPair(left, right) {
-	const marks = PALETTE_MARK_PAIR;
-	return marks.includes(left) && marks.includes(right);
-}
-/** Refuse a palette whose entries are not pairwise distinct on both themes. */
-function validatePalette(swatches, fallbacks) {
-	const violations = [];
-	for (const id of PALETTE_ENTRY_IDS) if (swatches[id] === void 0) violations.push({
-		code: "missing-entry",
-		entry: id
-	});
-	for (const key of Object.keys(swatches)) if (!isPaletteEntryId(key)) violations.push({
-		code: "unknown-entry",
-		entry: key
-	});
-	if (fallbacks.length !== 8) violations.push({ code: "bad-fallbacks" });
-	violations.push(...gradientViolations(swatches));
-	const rows = namedColours(swatches, fallbacks);
-	for (let i = 0; i < rows.length; i++) for (let j = i + 1; j < rows.length; j++) {
-		const left = rows[i];
-		const right = rows[j];
-		if (left === void 0 || right === void 0) continue;
-		const deltaE = deltaE00(left.hex, right.hex);
-		if (deltaE < (isMarkPair(left.name, right.name) ? 20 : 7)) violations.push({
-			code: "too-close",
-			left: left.name,
-			right: right.name,
-			deltaE
-		});
-	}
-	for (const row of rows) for (const background of ["dark", "light"]) {
-		const contrast = contrastRatio(row.hex, PALETTE_BACKGROUNDS[background]);
-		if (contrast < 3) violations.push({
-			code: "low-contrast",
-			entry: row.name,
-			background,
-			contrast
-		});
-	}
-	return violations.length === 0 ? { ok: true } : {
-		ok: false,
-		violations
-	};
-}
-function formatPaletteViolation(violation) {
-	switch (violation.code) {
-		case "too-close": return `${violation.left} vs ${violation.right} (ΔE ${violation.deltaE.toFixed(1)})`;
-		case "low-contrast": return `${violation.entry} on ${violation.background} (${violation.contrast.toFixed(1)}:1)`;
-		case "missing-entry": return `${violation.entry} is missing`;
-		case "unknown-entry": return `${violation.entry} is not a palette entry`;
-		case "bad-gradient": return `${violation.entry} gradient is not the six canonical steps`;
-		case "bad-fallbacks": return "fallback list must hold eight colours";
-		case "unknown-preset": return `${violation.presetId} is not a preset`;
-	}
-}
-function formatPaletteViolations(violations) {
-	return violations.map(formatPaletteViolation).join("; ");
-}
-var PaletteRejectedError = class extends Error {
-	violations;
-	constructor(violations) {
-		super(formatPaletteViolations(violations));
-		this.name = "PaletteRejectedError";
-		this.violations = violations;
-	}
-};
 function hashFallback(kind, fallbacks) {
 	let hash = 0;
 	for (let i = 0; i < kind.length; i++) hash = hash * 31 + (kind.codePointAt(i) ?? 0) >>> 0;
@@ -45443,78 +45247,6 @@ function paintHex(swatches, fallbacks, kind) {
 	if (direct !== void 0) return direct.hex;
 	return hashFallback(key, fallbacks);
 }
-function mergeOverrides(base, overrides) {
-	return {
-		...base,
-		...overrides
-	};
-}
-function overridesOf(input) {
-	return "overrides" in input ? input.overrides : {};
-}
-/** The palette a `setPalette` input would store. Invalid input is a refusal. */
-function paletteFromInput(input) {
-	const row = presetById(input.presetId);
-	if (row === void 0 || !isPalettePresetId(input.presetId)) throw new PaletteRejectedError([{
-		code: "unknown-preset",
-		presetId: input.presetId
-	}]);
-	const overrides = overridesOf(input);
-	const swatches = mergeOverrides(row.swatches, overrides);
-	const verdict = validatePalette(swatches, row.fallbacks);
-	if (!verdict.ok) throw new PaletteRejectedError(verdict.violations);
-	const customized = Object.keys(overrides).length > 0;
-	return {
-		status: "ready",
-		presetId: row.id,
-		customized,
-		source: "stored",
-		swatches,
-		fallbacks: [...row.fallbacks]
-	};
-}
-function isEmptyRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value) && Object.keys(value).length === 0;
-}
-/**
-* Interpret a settings blob. A missing row is the bundled preset and says so.
-* A blob that does not parse, names an unknown preset, or fails the rule is
-* `unknown` — never the default wearing the stored preset's name.
-*/
-function paletteFromStored(value) {
-	if (value === void 0 || value === null || isEmptyRecord(value)) return bundledCamstack();
-	const parsed = storedPaletteSchema.safeParse(value);
-	if (!parsed.success) return {
-		status: "unknown",
-		reason: "stored palette is unreadable"
-	};
-	const row = presetById(parsed.data.presetId);
-	if (row === void 0) return {
-		status: "unknown",
-		reason: `unknown preset ${parsed.data.presetId}`
-	};
-	const swatches = mergeOverrides(row.swatches, parsed.data.overrides);
-	const verdict = validatePalette(swatches, row.fallbacks);
-	if (!verdict.ok) return {
-		status: "unknown",
-		reason: formatPaletteViolations(verdict.violations)
-	};
-	const customized = Object.keys(parsed.data.overrides).length > 0;
-	return {
-		status: "ready",
-		presetId: row.id,
-		customized,
-		source: "stored",
-		swatches,
-		fallbacks: [...row.fallbacks]
-	};
-}
-function storedFromReady(ready, overrides) {
-	return {
-		presetId: ready.presetId,
-		overrides: { ...overrides }
-	};
-}
 /**
 * Unified event-kind taxonomy — THE single source of truth for
 * `kind → { parentKind, category, level, color, iconId, labelKey, label,
@@ -95688,4 +95420,4 @@ function armRemovalReconcile(opts) {
 	return () => clearInterval(timer);
 }
 //#endregion
-export { PREFERENCES_MAX_VALUE_BYTES as $, defineCustomActions as $i, objectInputDeclaresRequiredDeviceId as $n, compositionSliceKey as $r, deriveBatteryPresence as $t, DEVICE_SAN_USER_PREFIX as A, toNodeId as Aa, RecordKindDeclarationSchema as Ai, isLocationEnabled as An, storageAdminCapability as Ar, buildCapabilityLookup as At, HISTORY_CATALOG as B, WELL_KNOWN_TAB_MAP as Bi, locationIconKey as Bn, validateComposition as Br, compositionFieldKey as Bt, DATA_STORE_DATABASES as C, recordSecretRef as Ca, RECORD_DELETE_BATCH as Ci, isAlertEpisodeOpen as Cn, scopesAllowDeviceCap as Cr, alertEpisodePayload as Ct, DEVICE_HISTORY_ENERGY_KEY as D, secretTreeFromPaths as Da, RUNTIME_DEFAULTS as Di, isCollectionArrayMethod as Dn, siteZoneKey as Dr, backupCapability as Dt, DEVICE_ENROLLMENT_TTL_MS as E, scopeKey as Ea, REMOVE_LEAF as Ei, isArrayOutputSchema as En, shortHostname as Er, authProviderCapability as Et, DeviceStatusSchema as F, EventCategory as Fa, SECRET_CLEAR as Fi, keychainCapability as Fn, storedFromReady as Fr, calendarsCapability as Ft, KeychainAuditEntrySchema as G, assertValidDeclaration as Gi, mayWriteToLocation as Gn, withLocationMode as Gr, coreBlockSourceKind as Gt, HUB_MDNS_SERVICE_TYPE as H, asNumber as Hi, logLevelAtMost as Hn, vectorDimFromBase64 as Hr, coreBlockAddonId as Ht, DeviceTombstoneSchema as I, StoredRecordKindDeclarationSchema as Ii, legacyAutoLinkIds as In, streamCatalogCapability as Ir, cameraGridLayoutCapability as It, LegacyStorageLocationDefaultSchema as J, collectSecretLeaves as Ji, modeMayWrite as Jn, cloneStatefulExpressionMemory as Jr, dataStoreProviderCapability as Jt, KeychainResetRecordSchema as K, buildSecretRef as Ki, memoizePinnedFfmpeg as Kn, COMPOSER_ADDON_ID as Kr, coreBlocksCapability as Kt, FIRST_LEVEL_MACRO_CLASSES as L, TransactRefusedError as Li, legacyModeOf as Ln, streamQualityLabel as Lr, canonicalIconKey as Lt, DISPLAY_PRESETS as M, transformSecretWrite as Ma, RecordTooLargeError as Mi, isVoidInput as Mn, storageMigrationCapability as Mr, buildDeviceSignatureMessage as Mt, DataStoreDatabaseSchema as N, userError as Na, RecordUniqueViolationError as Ni, kebabToCamel as Nn, storageOccupancyCapability as Nr, buildStreamParamsConfigSchema as Nt, DEVICE_NONCE_TTL_MS as O, secretTreeFromSchema as Oa, ReadinessRegistry as Oi, isCredentialTokenPayload as On, snapshotCapability as Or, bareAddonId as Ot, DeclaredDevices as P, withoutCallerStamp as Pa, RevConflictError as Pi, keychainAdminCapability as Pn, storageProviderCapability as Pr, bundledCamstack as Pt, NetworkTunnelStartedDataSchema as Q, customAction as Qi, objectInputDeclaresAddonId as Qn, compositionItemFieldPath as Qr, defineExtensionSlotProvider as Qt, FieldClaimModeSchema as R, UnindexedFilterError as Ri, lifecycleJobSchema as Rn, supportedRuntimes as Rr, checkRoleAddress as Rt, DATABASE_SNAPSHOT_TIMEOUT_MS as S, readinessKey as Sa, RECORD_BATCH_MAX_BYTES as Si, interpolate as Sn, scopesAllowAddon as Sr, alertEpisodeId as St, DERIVED_CAMERA_SILENCED_CAP_NAMES as T, resolveSecretMarkers as Ta, REDACTED_SECRET as Ti, isAppLinkBase as Tn, settingsStoreCapability as Tr, armRemovalReconcile as Tt, HUB_MDNS_TXT_KEYS as U, asString$1 as Ui, looseSchema as Un, vectorIndexDimConflictError as Ur, coreBlockComposition as Ut, HISTORY_ITEM_CATALOG as V, asJsonObject as Vi, logDestinationCapability as Vn, validateCustomAddress as Vr, compositionSourceRefs as Vt, KEYCHAIN_RESET_TRIGGER_ACTOR as W, assertTransactScope as Wi, mayReadLocation as Wn, vectorStoreCapability as Wr, coreBlockIdFromAddonId as Wt, MINUTES_PER_DAY as X, collectZodSecretPaths as Xi, normalizeCoreBlockWrite as Xn, composedDeviceStableId as Xr, declarationOwnerNodeId as Xt, METHOD_ACCESS_MAP as Y, collectSecretMarkerRefs as Yi, motionCapability as Yn, composedDeviceRef as Yr, databaseSnapshotCapability as Yt, MOTION_CLOSE_AFTER_MS as Z, createEvent as Zi, normalizeUnit as Zn, compositionFeatureEnabled as Zr, decodeVectorBase64 as Zt, CatalogFileSchema as _, normalizeNodeId as _a, HISTORY_DEFAULT_MIN_INTERVAL_MS as _i, filesystemBrowseCapability as _n, resolveHubAddressRoles as _r, UNATTRIBUTED_BUCKET_KEY as _t, BaseDevice as a, historyItemFieldPath as aa, DeviceRole as ai, deviceRemovalHookCapability as an, planComposition as ar, ROOT_BUCKET_KEY as at, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as b, parseJsonUnknown as ba, PlaintextSecretError as bi, formatMinutes as bn, resolveNotificationTapAddress as br, addonSettingsCapability as bt, CAMSTACK_APP_LINK_ORIGIN as c, isEvent as ca, BaseAddon as ci, displayPaletteCapability as cn, ptzAutotrackCapability as cr, STREAM_PROFILE_META as ct, COMPOSED_ITEM_FIXED_FIELDS as d, isSecretMarker as da, DATAPLANE_SECRET_HEADER as di, enumerateSchemaFields as dn, reducePoints as dr, SsoBridgeClaimsSchema as dt, defineRecordKinds as ea, compositionSourceKey as ei, describeComposableCaps as en, paletteFromInput as er, PaletteRejectedError as et, COMPOSER_RUNNER_ID as f, isSecretMarkerLike as fa, DEVICE_SETTINGS_CONTRIBUTION_METHODS as fi, evaluateCompositionField as fn, replacedFieldKeys as fr, StorageCleanupJobSchema as ft, CalendarPreferencesSchema as g, nodePin as ga, ForeignSecretMarkerError as gi, extractNestedAddonId as gn, resolveCoreBlockFiles as gr, TokenScopeSchema as gt, CREDENTIAL_TOKEN_AUDIENCE as h, mapSecretLeaves as ha, FilterRequiredError as hi, expressionContainsBuiltinCall as hn, resolveCoreBlockEntry as hr, StorageMigrationJobSchema as ht, AlertSchema as i, formatSecretScope as ia, DeviceFeature as ii, deviceManagerCapability as in, pickAppLinkHub as ir, RECORDING_SOURCE_CAMSTACK_ADDON as it, DEVICE_TOMBSTONE_RETENTION_MS as j, toSecretFieldView as ja, RecordNotFoundError as ji, isObjectInput as jn, storageCapability as jr, buildDeviceEnrollmentLink as jt, DEVICE_SAN_CREDENTIAL_PREFIX as k, sleep as ka, ReadinessTimeoutError as ki, isDefaultAppConnectionEndpoint as kn, splitTranslationRef as kr, batteryCapability as kt, CAP_NAMES_WITH_STATUS as l, isKeychainStoredField as la, BatchTooLargeError as li, enumerateInferenceDevices as ln, recordEntriesCapability as lr, ScopedTokenSchema as lt, CORE_BLOCK_ADDON_PREFIX as m, makeSecretMarker as ma, DeclarationRefusedError as mi, expandContainer as mn, resolveBucketMs as mr, StorageLocationTypeSchema as mt, AGENT_MDNS_TXT_KEYS as n, emitReadiness as na, disarmRoseMemory as ni, deviceExtensionCapability as nn, parseAcceleratorFactsJson as nr, PreferenceNamespaceSchema as nt, BatteryStatusSchema as o, hydrateSchema as oa, DeviceType as oi, deviceStateCapability as on, platformProbeCapability as or, RecordingStatusSchema as ot, CORE_BLOCKS_ADDON_ID as p, isSecretRefOwnedBy as pa, DEVICE_STATUS_METHOD as pi, evictionPolicyOfLocation as pn, resolveAppConnections as pr, StorageLocationModeSchema as pt, LOG_LEVEL_RANK as q, collectSecretConfigKeys as qi, metricsProviderCapability as qn, buildFfmpegArgs as qr, createDeviceExtensionProvider as qt, ALL_CAPABILITY_DEFINITIONS as r, expandCapMethods as ra, toExpressionValue as ri, deviceHistoryCapability as rn, parseStreamParamsFormPatch as rr, PreferenceValueSchema as rt, CAMERA_SWITCH_ORDER as s, isDeviceConfigCap as sa, errMsg as si, deviceStatusCapability as sn, procedureAuthKey as sr, STORAGE_ACCESS_FALLBACK as st, AGENT_MDNS_SERVICE_TYPE as t, emitDownForOwnedCaps as ta, createStatefulExpressionMemory as ti, deviceCredentialsCapability as tn, paletteFromStored as tr, PreferenceDeviceIdSchema as tt, CATALOG_LANGS as u, isSecretClear as ua, CALLER_STAMPED_CAPABILITIES as ui, enumerateItemArrayFields as un, recordsCapability as ur, ServerNameSchema as ut, CoreBlockSchema as v, normalizeSecretOwner as va, InvalidRecordError as vi, foldSnapshotByFunction as vn, resolveLocationMode as vr, UserRecordSchema as vt, DAY_NAMES as w, resolveCapMount as wa, RECORD_SWEEP_INTERVAL_MS as wi, isAlertEpisodeSeverity as wn, scoreRuntimes as wr, alertsCapability as wt, DATABASE_SNAPSHOT_SUFFIX as x, parseSecretRef as xa, RECORD_BATCH_MAX as xi, gbToBytes as xn, runtimeStatePolicyFor as xr, addonWidgetsCapability as xt, CredentialTokenClaimsSchema as y, parseJsonObject as ya, NoCallerError as yi, formatDeviceRevoker as yn, resolveMethodAuth as yr, addonPagesCapability as yt, FieldClaimSchema as z, UnknownRecordKindError as zi, localNetworkCapability as zn, userManagementCapability as zr, composerCapability as zt };
+export { PreferenceDeviceIdSchema as $, hydrateSchema as $i, planComposition as $n, DeviceType as $r, deviceExtensionCapability as $t, DEVICE_SAN_USER_PREFIX as A, TransactRefusedError as Ai, keychainAdminCapability as An, streamQualityLabel as Ar, buildDeviceSignatureMessage as At, HISTORY_ITEM_CATALOG as B, collectSecretConfigKeys as Bi, mayReadLocation as Bn, buildFfmpegArgs as Br, coreBlockComposition as Bt, DATA_STORE_DATABASES as C, toNodeId as Ca, RecordKindDeclarationSchema as Ci, isCollectionArrayMethod as Cn, splitTranslationRef as Cr, armRemovalReconcile as Ct, DEVICE_HISTORY_ENERGY_KEY as D, withoutCallerStamp as Da, RevConflictError as Di, isObjectInput as Dn, storageOccupancyCapability as Dr, batteryCapability as Dt, DEVICE_ENROLLMENT_TTL_MS as E, userError as Ea, RecordUniqueViolationError as Ei, isLocationEnabled as En, storageMigrationCapability as Er, bareAddonId as Et, DeviceTombstoneSchema as F, asNumber as Fi, localNetworkCapability as Fn, vectorDimFromBase64 as Fr, checkRoleAddress as Ft, KeychainResetRecordSchema as G, customAction as Gi, motionCapability as Gn, compositionItemFieldPath as Gr, dataStoreProviderCapability as Gt, HUB_MDNS_TXT_KEYS as H, collectSecretMarkerRefs as Hi, memoizePinnedFfmpeg as Hn, composedDeviceRef as Hr, coreBlockSourceKind as Ht, FIRST_LEVEL_MACRO_CLASSES as I, asString$1 as Ii, locationIconKey as In, vectorIndexDimConflictError as Ir, composerCapability as It, METHOD_ACCESS_MAP as J, emitDownForOwnedCaps as Ji, objectInputDeclaresAddonId as Jn, createStatefulExpressionMemory as Jr, decodeVectorBase64 as Jt, LOG_LEVEL_RANK as K, defineCustomActions as Ki, normalizeCoreBlockWrite as Kn, compositionSliceKey as Kr, databaseSnapshotCapability as Kt, FieldClaimModeSchema as L, assertTransactScope as Li, logDestinationCapability as Ln, vectorStoreCapability as Lr, compositionFieldKey as Lt, DataStoreDatabaseSchema as M, UnknownRecordKindError as Mi, legacyAutoLinkIds as Mn, userManagementCapability as Mr, calendarsCapability as Mt, DeclaredDevices as N, WELL_KNOWN_TAB_MAP as Ni, legacyModeOf as Nn, validateComposition as Nr, cameraGridLayoutCapability as Nt, DEVICE_NONCE_TTL_MS as O, EventCategory as Oa, SECRET_CLEAR as Oi, isVoidInput as On, storageProviderCapability as Or, buildCapabilityLookup as Ot, DeviceStatusSchema as P, asJsonObject as Pi, lifecycleJobSchema as Pn, validateCustomAddress as Pr, canonicalIconKey as Pt, PREFERENCES_MAX_VALUE_BYTES as Q, historyItemFieldPath as Qi, pickAppLinkHub as Qn, DeviceRole as Qr, deviceCredentialsCapability as Qt, FieldClaimSchema as R, assertValidDeclaration as Ri, logLevelAtMost as Rn, withLocationMode as Rr, compositionSourceRefs as Rt, DATABASE_SNAPSHOT_TIMEOUT_MS as S, sleep as Sa, ReadinessTimeoutError as Si, isArrayOutputSchema as Sn, snapshotCapability as Sr, alertsCapability as St, DERIVED_CAMERA_SILENCED_CAP_NAMES as T, transformSecretWrite as Ta, RecordTooLargeError as Ti, isDefaultAppConnectionEndpoint as Tn, storageCapability as Tr, backupCapability as Tt, KEYCHAIN_RESET_TRIGGER_ACTOR as U, collectZodSecretPaths as Ui, metricsProviderCapability as Un, composedDeviceStableId as Ur, coreBlocksCapability as Ut, HUB_MDNS_SERVICE_TYPE as V, collectSecretLeaves as Vi, mayWriteToLocation as Vn, cloneStatefulExpressionMemory as Vr, coreBlockIdFromAddonId as Vt, KeychainAuditEntrySchema as W, createEvent as Wi, modeMayWrite as Wn, compositionFeatureEnabled as Wr, createDeviceExtensionProvider as Wt, MOTION_CLOSE_AFTER_MS as X, expandCapMethods as Xi, parseAcceleratorFactsJson as Xn, toExpressionValue as Xr, deriveBatteryPresence as Xt, MINUTES_PER_DAY as Y, emitReadiness as Yi, objectInputDeclaresRequiredDeviceId as Yn, disarmRoseMemory as Yr, defineExtensionSlotProvider as Yt, NetworkTunnelStartedDataSchema as Z, formatSecretScope as Zi, parseStreamParamsFormPatch as Zn, DeviceFeature as Zr, describeComposableCaps as Zt, CatalogFileSchema as _, resolveCapMount as _a, RECORD_SWEEP_INTERVAL_MS as _i, gbToBytes as _n, scopesAllowDeviceCap as _r, addonPagesCapability as _t, BaseDevice as a, isSecretMarkerLike as aa, DEVICE_SETTINGS_CONTRIBUTION_METHODS as ai, enumerateInferenceDevices as an, reducePoints as ar, STORAGE_ACCESS_FALLBACK as at, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as b, secretTreeFromPaths as ba, RUNTIME_DEFAULTS as bi, isAlertEpisodeSeverity as bn, shortHostname as br, alertEpisodeId as bt, CAMSTACK_APP_LINK_ORIGIN as c, mapSecretLeaves as ca, FilterRequiredError as ci, evaluateCompositionField as cn, resolveBucketMs as cr, ServerNameSchema as ct, COMPOSED_ITEM_FIXED_FIELDS as d, normalizeSecretOwner as da, InvalidRecordError as di, expressionContainsBuiltinCall as dn, resolveHubAddressRoles as dr, StorageLocationModeSchema as dt, isDeviceConfigCap as ea, errMsg as ei, deviceHistoryCapability as en, platformProbeCapability as er, PreferenceNamespaceSchema as et, COMPOSER_RUNNER_ID as f, parseJsonObject as fa, NoCallerError as fi, extractNestedAddonId as fn, resolveLocationMode as fr, StorageLocationTypeSchema as ft, CalendarPreferencesSchema as g, recordSecretRef as ga, RECORD_DELETE_BATCH as gi, formatMinutes as gn, scopesAllowAddon as gr, UserRecordSchema as gt, CREDENTIAL_TOKEN_AUDIENCE as h, readinessKey as ha, RECORD_BATCH_MAX_BYTES as hi, formatDeviceRevoker as hn, runtimeStatePolicyFor as hr, UNATTRIBUTED_BUCKET_KEY as ht, AlertSchema as i, isSecretMarker as ia, DATAPLANE_SECRET_HEADER as ii, deviceStatusCapability as in, recordsCapability as ir, RecordingStatusSchema as it, DEVICE_TOMBSTONE_RETENTION_MS as j, UnindexedFilterError as ji, keychainCapability as jn, supportedRuntimes as jr, buildStreamParamsConfigSchema as jt, DEVICE_SAN_CREDENTIAL_PREFIX as k, StoredRecordKindDeclarationSchema as ki, kebabToCamel as kn, streamCatalogCapability as kr, buildDeviceEnrollmentLink as kt, CAP_NAMES_WITH_STATUS as l, nodePin as la, ForeignSecretMarkerError as li, evictionPolicyOfLocation as ln, resolveCoreBlockEntry as lr, SsoBridgeClaimsSchema as lt, CORE_BLOCK_ADDON_PREFIX as m, parseSecretRef as ma, RECORD_BATCH_MAX as mi, foldSnapshotByFunction as mn, resolveNotificationTapAddress as mr, TokenScopeSchema as mt, AGENT_MDNS_TXT_KEYS as n, isKeychainStoredField as na, BatchTooLargeError as ni, deviceRemovalHookCapability as nn, ptzAutotrackCapability as nr, RECORDING_SOURCE_CAMSTACK_ADDON as nt, BatteryStatusSchema as o, isSecretRefOwnedBy as oa, DEVICE_STATUS_METHOD as oi, enumerateItemArrayFields as on, replacedFieldKeys as or, STREAM_PROFILE_META as ot, CORE_BLOCKS_ADDON_ID as p, parseJsonUnknown as pa, PlaintextSecretError as pi, filesystemBrowseCapability as pn, resolveMethodAuth as pr, StorageMigrationJobSchema as pt, LegacyStorageLocationDefaultSchema as q, defineRecordKinds as qi, normalizeUnit as qn, compositionSourceKey as qr, declarationOwnerNodeId as qt, ALL_CAPABILITY_DEFINITIONS as r, isSecretClear as ra, CALLER_STAMPED_CAPABILITIES as ri, deviceStateCapability as rn, recordEntriesCapability as rr, ROOT_BUCKET_KEY as rt, CAMERA_SWITCH_ORDER as s, makeSecretMarker as sa, DeclarationRefusedError as si, enumerateSchemaFields as sn, resolveAppConnections as sr, ScopedTokenSchema as st, AGENT_MDNS_SERVICE_TYPE as t, isEvent as ta, BaseAddon as ti, deviceManagerCapability as tn, procedureAuthKey as tr, PreferenceValueSchema as tt, CATALOG_LANGS as u, normalizeNodeId as ua, HISTORY_DEFAULT_MIN_INTERVAL_MS as ui, expandContainer as un, resolveCoreBlockFiles as ur, StorageCleanupJobSchema as ut, CoreBlockSchema as v, resolveSecretMarkers as va, REDACTED_SECRET as vi, interpolate as vn, scoreRuntimes as vr, addonSettingsCapability as vt, DAY_NAMES as w, toSecretFieldView as wa, RecordNotFoundError as wi, isCredentialTokenPayload as wn, storageAdminCapability as wr, authProviderCapability as wt, DATABASE_SNAPSHOT_SUFFIX as x, secretTreeFromSchema as xa, ReadinessRegistry as xi, isAppLinkBase as xn, siteZoneKey as xr, alertEpisodePayload as xt, CredentialTokenClaimsSchema as y, scopeKey as ya, REMOVE_LEAF as yi, isAlertEpisodeOpen as yn, settingsStoreCapability as yr, addonWidgetsCapability as yt, HISTORY_CATALOG as z, buildSecretRef as zi, looseSchema as zn, COMPOSER_ADDON_ID as zr, coreBlockAddonId as zt };

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-o9TyZeYp.js");
+const require_wal_maintenance = require("./wal-maintenance-ByIgd_g9.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-DuO0D2H3.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-DkkPbYwt.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{hub-mdns-ciao-BDKiKV75.js → hub-mdns-ciao-C49WPQfd.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-iVUkxljP.js");
+const require_dist = require("./dist-DDVtA047.js");
 const require_x509_es = require("./x509.es-WtnRNyYS.js");
-const require_agent_https = require("./agent-https-D6a1IRPK.js");
+const require_agent_https = require("./agent-https-DDnP9ywM.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/{hub-mdns-ciao-CvXWbJub.mjs → hub-mdns-ciao-KIDDBuDn.mjs}

@@ -1,7 +1,7 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { Na as userError } from "./dist-OC-L50JY.mjs";
+import { Ea as userError } from "./dist-DfZKKnMP.mjs";
 import { f as X509Certificate$1 } from "./x509.es-BRiJgOvu.mjs";
-import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-CXMsY05a.mjs";
+import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-6j9JDvjh.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-iVUkxljP.js");
-const require_device_ca = require("./device-ca-D0KnLHMw.js");
+const require_dist = require("./dist-DDVtA047.js");
+const require_device_ca = require("./device-ca-CVO0N_Oz.js");
 const require_read_all_rows$1 = require("./read-all-rows-CVoO1ONM.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
@@ -26,21 +26,21 @@ const require_builtins_loki_logging_index = require("./builtins/loki-logging/ind
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_device_history_device_history_addon = require("./builtins/device-history/device-history.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-o9TyZeYp.js");
+const require_wal_maintenance = require("./wal-maintenance-ByIgd_g9.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_agent_https = require("./agent-https-D6a1IRPK.js");
-const require_constants = require("./constants-D--JWd55.js");
+const require_agent_https = require("./agent-https-DDnP9ywM.js");
+const require_constants = require("./constants-Bc-5tr1I.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_custom_action_registry = require("./custom-action-registry-MRyes5j0.js");
-const require_hub_mdns_ciao = require("./hub-mdns-ciao-BDKiKV75.js");
+const require_hub_mdns_ciao = require("./hub-mdns-ciao-C49WPQfd.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-DxkdJpWd.js");
+const require_restore_archive = require("./restore-archive-BXORpvel.js");
 const require_coral_accelerators = require("./coral-accelerators-BSVsBVzt.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { i as __require } from "./chunk-CNf5ZN-e.mjs";
-import { $n as objectInputDeclaresRequiredDeviceId, Cr as scopesAllowDeviceCap, Di as RUNTIME_DEFAULTS, Dn as isCollectionArrayMethod, Ea as scopeKey, En as isArrayOutputSchema, Fa as EventCategory$1, Hi as asNumber, Hn as logLevelAtMost, Mn as isVoidInput, Na as userError, Nn as kebabToCamel$1, Oi as ReadinessRegistry, Pa as withoutCallerStamp, Qn as objectInputDeclaresAddonId, Rn as lifecycleJobSchema, Rr as supportedRuntimes, Sa as readinessKey, Sn as interpolate, Sr as scopesAllowAddon, Ui as asString$1, Un as looseSchema, Vi as asJsonObject$1, Y as METHOD_ACCESS_MAP, Zi as createEvent$1, _ as CatalogFileSchema, ba as parseJsonUnknown, bt as addonSettingsCapability, di as DATAPLANE_SECRET_HEADER$1, ea as defineRecordKinds, fi as DEVICE_SETTINGS_CONTRIBUTION_METHODS, gn as extractNestedAddonId, jn as isObjectInput, ki as ReadinessTimeoutError, kr as splitTranslationRef, n as AGENT_MDNS_TXT_KEYS, pi as DEVICE_STATUS_METHOD, q as LOG_LEVEL_RANK, r as ALL_CAPABILITY_DEFINITIONS, ra as expandCapMethods, si as errMsg$1, sr as procedureAuthKey, t as AGENT_MDNS_SERVICE_TYPE, ta as emitDownForOwnedCaps, u as CATALOG_LANGS, ui as CALLER_STAMPED_CAPABILITIES$1, wa as resolveCapMount, ya as parseJsonObject, yr as resolveMethodAuth } from "./dist-OC-L50JY.mjs";
-import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-J9ZsyoFw.mjs";
+import { Cn as isCollectionArrayMethod, Cr as splitTranslationRef, Da as withoutCallerStamp, Dn as isObjectInput, Ea as userError, Fi as asNumber, Ii as asString$1, J as METHOD_ACCESS_MAP, Ji as emitDownForOwnedCaps, Jn as objectInputDeclaresAddonId, K as LOG_LEVEL_RANK, Oa as EventCategory$1, On as isVoidInput, Pi as asJsonObject$1, Pn as lifecycleJobSchema, Rn as logLevelAtMost, Si as ReadinessTimeoutError, Sn as isArrayOutputSchema, Wi as createEvent$1, Xi as expandCapMethods, Yn as objectInputDeclaresRequiredDeviceId, _ as CatalogFileSchema, _a as resolveCapMount, _r as scopesAllowDeviceCap, ai as DEVICE_SETTINGS_CONTRIBUTION_METHODS, bi as RUNTIME_DEFAULTS, ei as errMsg$1, fa as parseJsonObject, fn as extractNestedAddonId, gr as scopesAllowAddon, ha as readinessKey, ii as DATAPLANE_SECRET_HEADER$1, jr as supportedRuntimes, kn as kebabToCamel$1, n as AGENT_MDNS_TXT_KEYS, oi as DEVICE_STATUS_METHOD, pa as parseJsonUnknown, pr as resolveMethodAuth, qi as defineRecordKinds, r as ALL_CAPABILITY_DEFINITIONS, ri as CALLER_STAMPED_CAPABILITIES$1, t as AGENT_MDNS_SERVICE_TYPE, tr as procedureAuthKey, u as CATALOG_LANGS, vn as interpolate, vt as addonSettingsCapability, xi as ReadinessRegistry, ya as scopeKey, zn as looseSchema } from "./dist-DfZKKnMP.mjs";
+import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-Bxjub9X-.mjs";
 import { t as require_read_all_rows } from "./read-all-rows-TaPqdWNF.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
@@ -25,21 +25,21 @@ import { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index
 import NativeMetricsAddon, { a as NativeMetricsProvider, n as nodeProcReader, r as parseProcStat } from "./builtins/native-metrics/native-metrics.addon.mjs";
 import { DeviceHistoryAddon } from "./builtins/device-history/device-history.addon.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
-import { C as RecordsEngine, l as SqliteSettingsBackend } from "./wal-maintenance-DuO0D2H3.mjs";
+import { C as RecordsEngine, l as SqliteSettingsBackend } from "./wal-maintenance-DkkPbYwt.mjs";
 import { SqliteSettingsAddon } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
 import { StorageOrchestratorAddon, a as stripForwardedCaller, i as createHubCapForwardService, l as STORAGE_DRAIN_STATE_LEGACY, n as HUB_CAP_FWD_ACTION, o as buildStorageLocationRegistry, r as HUB_CAP_FWD_SERVICE, t as StorageOrchestratorService, u as storageOrchestratorRecordKinds } from "./builtins/storage-orchestrator/storage-orchestrator.addon.mjs";
 import "./builtins/storage-orchestrator/index.mjs";
-import { A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, o as createAgentHttpsRequest, p as pemDigest, r as agentHttpsPaths, s as describeHttpsLeaf, t as AgentHttpsInstallError, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-CXMsY05a.mjs";
-import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-lWkcQxVE.mjs";
+import { A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, o as createAgentHttpsRequest, p as pemDigest, r as agentHttpsPaths, s as describeHttpsLeaf, t as AgentHttpsInstallError, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-6j9JDvjh.mjs";
+import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-BUf0tYhG.mjs";
 import { $ as generateMeshKeyPair, A as setProcessMeshPeerTransportLookup, B as describeMeshLeaf, C as setProcessMeshTlsEnabler, D as getProcessPeerLeaf, E as getProcessNodeMeshTransport, F as setProcessMeshTlsListenerState, G as MeshCaKeeper, H as setProcessMeshCertificateRegistry, I as MESH_NODE_CERTIFICATES_COLLECTION, J as caFingerprint, K as getProcessMeshCaState, L as MESH_NODE_CERTIFICATES_COLUMNS, M as revokeMeshCertificate, N as getProcessMeshTlsListenerState, O as isProcessVerifiedMeshPeer, P as openMeshTlsWhenRevocationsLoaded, Q as generateMeshCa, R as MeshCertificateRegistry, S as ServiceBroker, SystemConfigAddon, T as emitProcessNodeRegistered, U as MeshCrl, V as getProcessMeshCertificateRegistry, W as processMeshCrl, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, _ as signPairingProof, _t as readCidrSetting, a as hubHostFromMeshAddress, at as AGENT_UI_UNLOCK_TTL_MS, b as TlsTcpTransporter, c as PAIRING_MAX_SESSIONS, ct as AGENT_UI_UNLOCK_VERSION, d as PAIRING_PROTOCOL, dt as mintAgentUiUnlockTicket, et as isValidAgentNodeId, f as PAIRING_TTL_MS, ft as parseAgentDashboardOrigins, g as keyFingerprintShort, gt as parseCidrList, h as describeCsr, ht as normalizeIp, i as AgentPairing, it as AGENT_DASHBOARD_ORIGINS_FIELD, j as renewMeshCertificate, k as onProcessNodeRegistered, l as PAIRING_PATHS, lt as UnlockTicketJtiStore, m as computePairingSas, mt as createCidrMatcher, n as HubPairing, nt as issueMeshLeafFromCsr, o as PAIRING_CODE_DIGITS, ot as AGENT_UI_UNLOCK_TYP, p as computePairingCommitment, pt as verifyAgentUiUnlockTicket, q as requireProcessMeshCa, r as PairingHttpError, rt as loadMeshCa, s as PAIRING_MAX_CODE_ATTEMPTS, st as AGENT_UI_UNLOCK_USE, tt as issueMeshLeafForNode, u as PAIRING_PIN_DIGITS, ut as isAllowedAgentDashboardReturnTo, v as verifyPairingProof, w as dropProcessPeer, x as Errors, y as MESH_TLS_PORT_HELLO_FIELD, z as RENEWAL_ABANDONED } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { C as isModelDownloaded, T as revisionWeightUrl, _ as downloadFile, a as startEventLoopStallMonitor, b as fetchJson, c as createAuthenticatedFileServer, d as resolveFilePath, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, u as parseTokenizedUrl, v as downloadModel, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-DZSCLBuT.mjs";
-import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-CvXWbJub.mjs";
+import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-KIDDBuDn.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Di9daRwI.mjs";
-import { _ as backupRecordStoresOf, c as BackupDecryptError, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-D1Uzojhc.mjs";
+import { _ as backupRecordStoresOf, c as BackupDecryptError, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-NvTeD4tg.mjs";
 import { r as nodeCoralFs, t as classifyCoralAccelerator } from "./coral-accelerators-DBlgWB8k.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";

package/dist/{restore-archive-DxkdJpWd.js → restore-archive-BXORpvel.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-iVUkxljP.js");
+const require_dist = require("./dist-DDVtA047.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");

package/dist/{restore-archive-D1Uzojhc.mjs → restore-archive-NvTeD4tg.mjs}

@@ -1,4 +1,4 @@
-import { N as DataStoreDatabaseSchema, ea as defineRecordKinds, x as DATABASE_SNAPSHOT_SUFFIX } from "./dist-OC-L50JY.mjs";
+import { M as DataStoreDatabaseSchema, qi as defineRecordKinds, x as DATABASE_SNAPSHOT_SUFFIX } from "./dist-DfZKKnMP.mjs";
 import { z } from "zod";
 import { createCipheriv, createDecipheriv, createHash, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";

package/dist/{retention-B3z_lBP1.js → retention-CAGXAgiQ.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-iVUkxljP.js");
+const require_dist = require("./dist-DDVtA047.js");
 //#region src/builtins/device-history/store/series-registry.ts
 function subjectIdOf(subject) {
 	return subject.kind === "device" ? `d:${subject.deviceId}` : `n:${subject.nodeId}`;

package/dist/{retention-DdVnmXXS.mjs → retention-Dn74ba1y.mjs}

@@ -1,4 +1,4 @@
-import { _i as HISTORY_DEFAULT_MIN_INTERVAL_MS, aa as historyItemFieldPath, oi as DeviceType } from "./dist-OC-L50JY.mjs";
+import { $r as DeviceType, Qi as historyItemFieldPath, ui as HISTORY_DEFAULT_MIN_INTERVAL_MS } from "./dist-DfZKKnMP.mjs";
 //#region src/builtins/device-history/store/series-registry.ts
 function subjectIdOf(subject) {
 	return subject.kind === "device" ? `d:${subject.deviceId}` : `n:${subject.nodeId}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.478",
+  "version": "1.2.480",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",
@@ -338,24 +338,6 @@
           }
         ]
       },
-      {
-        "id": "display-palette",
-        "category": "system",
-        "name": "Display Palette",
-        "icon": "assets/display-palette/icon.svg",
-        "color": "#0d9488",
-        "description": "Hub-only singleton that stores the cluster display palette (one colour or gradient per kind and mark) and serves it to admin, server-drawn media and the viewer.",
-        "entry": "./dist/builtins/display-palette/index.js",
-        "protected": true,
-        "execution": {
-          "placement": "hub-only"
-        },
-        "capabilities": [
-          {
-            "name": "display-palette"
-          }
-        ]
-      },
       {
         "id": "addon-pages-aggregator",
         "category": "system",

package/assets/display-palette/icon.svg

@@ -1,7 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="#0d9488" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
-  <circle cx="6.5" cy="8" r="2.5"/>
-  <circle cx="12" cy="6" r="2.5"/>
-  <circle cx="17.5" cy="8" r="2.5"/>
-  <circle cx="8" cy="14" r="2.5"/>
-  <circle cx="14.5" cy="15" r="2.5"/>
-</svg>

package/dist/builtins/display-palette/display-palette.addon.d.ts

@@ -1,12 +0,0 @@
-/**
-* Display palette builtin (D939). Hub singleton. An unreadable settings
-* row is `unknown`, never the bundled preset wearing a stored name.
-*/
-import { BaseAddon, type ProviderRegistration } from "@camstack/types";
-export declare class DisplayPaletteAddon extends BaseAddon {
-	readonly id = "display-palette";
-	protected onInitialize(): Promise<ProviderRegistration[]>;
-	private readPalette;
-	private writePalette;
-}
-export default DisplayPaletteAddon;