@camstack/system 1.2.482 → 1.2.484

package/dist/builtins/device-manager/device-meta-types.d.ts

@@ -185,7 +185,7 @@ export interface AddonStore {
 	nextDeviceId?: number;
 	/**
 	* Operator-curated location registry. Each entry is a free-form room/
-	* area label (e.g. "Cucina", "Garage") that drives the
+	* area label (e.g. "Kitchen", "Garage") that drives the
 	* autocomplete in the Device Info location editor. Devices reference
 	* these as plain strings via `PersistedDeviceMeta.location` — the
 	* registry is purely a suggestion list, NOT a foreign key. Removing a
@@ -202,7 +202,7 @@ export interface AddonStore {
 	* location is a label, not a row, so there is no record to hang an icon on.
 	*
 	* Keyed on the folded label rather than the operator's casing on purpose. A
-	* case-only rename (`cucina` → `Cucina`) is a real edit this repo supports,
+	* case-only rename (`kitchen` → `Kitchen`) is a real edit this repo supports,
 	* and a map keyed on the displayed spelling would silently orphan its entry
 	* on exactly that edit — the icon would vanish and nothing would say why.
 	*

package/dist/builtins/device-manager/device-online-fallback.d.ts

@@ -11,7 +11,7 @@
 * (its config schema rejects an empty blob), so no owner will ever publish a
 * slice contradicting the guess.
 *
-* Device 614 was reported `online: true` for a full day that way, while its
+* Device 105 was reported `online: true` for a full day that way, while its
 * provider logged `Failed to restore device` eight times. A device without
 * configuration cannot be online — the row is a leftover, not a camera. See
 * D376.

package/dist/builtins/hub-forwarder/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
-const require_formatter = require("../../formatter-DqAKDlvN.js");
+const require_dist = require("../../dist-k--OhKkO.js");
+const require_formatter = require("../../formatter-xbxeV4GD.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
 /**

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,5 +1,5 @@
-import { Ln as logDestinationCapability, ni as BaseAddon } from "../../dist-BIJXQo_j.mjs";
-import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
+import { Ln as logDestinationCapability, ni as BaseAddon } from "../../dist-BT_THdzJ.mjs";
+import { t as formatLogLine } from "../../formatter-DkYZ4LXp.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
 /**

package/dist/builtins/keychain/index.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
-const require_device_ca = require("../../device-ca-DgLZPn5R.js");
+const require_dist = require("../../dist-k--OhKkO.js");
+const require_device_ca = require("../../device-ca-BDPYXhkH.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
-const require_constants = require("../../constants-BVJrLycr.js");
+const require_constants = require("../../constants-71vf77HY.js");
 const require_platform_key_source = require("../../platform-key-source-Di7HrlGR.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/keychain/index.mjs

@@ -1,7 +1,7 @@
-import { An as keychainAdminCapability, G as KeychainResetRecordSchema, Ji as defineRecordKinds, Qi as formatSecretScope, U as KEYCHAIN_RESET_TRIGGER_ACTOR, W as KeychainAuditEntrySchema, fa as normalizeSecretOwner, ha as parseSecretRef, jn as keychainCapability, ka as EventCategory, ni as BaseAddon } from "../../dist-BIJXQo_j.mjs";
-import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-DKOZSFED.mjs";
+import { An as keychainAdminCapability, G as KeychainResetRecordSchema, Ji as defineRecordKinds, Qi as formatSecretScope, U as KEYCHAIN_RESET_TRIGGER_ACTOR, W as KeychainAuditEntrySchema, fa as normalizeSecretOwner, ha as parseSecretRef, jn as keychainCapability, ka as EventCategory, ni as BaseAddon } from "../../dist-BT_THdzJ.mjs";
+import { d as JWT_SIGNING_KEY_REF, n as DEVICE_CA_KEY_REF, p as SYSTEM_SECRET_OWNER } from "../../device-ca-bhz04X_N.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
-import { a as MESH_CA_KEY_REF } from "../../constants-xuLNi4a2.mjs";
+import { a as MESH_CA_KEY_REF } from "../../constants-B3FDrBIq.mjs";
 import { n as getPlatformKeychainKey } from "../../platform-key-source-BWlq0jjn.mjs";
 import { createCipheriv, createDecipheriv, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync } from "@camstack/types/node";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);
 let node_path = require("node:path");

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Gi as createEvent, Vn as mayWriteToLocation, it as RecordingStatusSchema, ka as EventCategory, ni as BaseAddon, nt as RECORDING_SOURCE_CAMSTACK_ADDON, ti as errMsg } from "../../dist-BIJXQo_j.mjs";
+import { Gi as createEvent, Vn as mayWriteToLocation, it as RecordingStatusSchema, ka as EventCategory, ni as BaseAddon, nt as RECORDING_SOURCE_CAMSTACK_ADDON, ti as errMsg } from "../../dist-BT_THdzJ.mjs";
 import * as fsp from "node:fs/promises";
 import path from "node:path";
 import { constants } from "node:fs";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,10 +3,10 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_ms$1 = require("../../ms-LB3giGoU.js");
-const require_device_ca = require("../../device-ca-DgLZPn5R.js");
+const require_device_ca = require("../../device-ca-BDPYXhkH.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,8 +1,8 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { $ as PreferenceDeviceIdSchema, At as buildDeviceSignatureMessage, Da as userError, E as DEVICE_ENROLLMENT_TTL_MS, Ji as defineRecordKinds, Nr as userManagementCapability, O as DEVICE_NONCE_TTL_MS, Q as PREFERENCES_MAX_VALUE_BYTES, Qt as deviceCredentialsCapability, aa as isSecretMarker, ca as makeSecretMarker, et as PreferenceNamespaceSchema, gt as UserRecordSchema, h as CREDENTIAL_TOKEN_AUDIENCE, hn as formatDeviceRevoker, kt as buildDeviceEnrollmentLink, lt as SsoBridgeClaimsSchema, mt as TokenScopeSchema, ni as BaseAddon, st as ScopedTokenSchema, tt as PreferenceValueSchema, wn as isCredentialTokenPayload, wt as authProviderCapability, y as CredentialTokenClaimsSchema } from "../../dist-BIJXQo_j.mjs";
+import { $ as PreferenceDeviceIdSchema, At as buildDeviceSignatureMessage, Da as userError, E as DEVICE_ENROLLMENT_TTL_MS, Ji as defineRecordKinds, Nr as userManagementCapability, O as DEVICE_NONCE_TTL_MS, Q as PREFERENCES_MAX_VALUE_BYTES, Qt as deviceCredentialsCapability, aa as isSecretMarker, ca as makeSecretMarker, et as PreferenceNamespaceSchema, gt as UserRecordSchema, h as CREDENTIAL_TOKEN_AUDIENCE, hn as formatDeviceRevoker, kt as buildDeviceEnrollmentLink, lt as SsoBridgeClaimsSchema, mt as TokenScopeSchema, ni as BaseAddon, st as ScopedTokenSchema, tt as PreferenceValueSchema, wn as isCredentialTokenPayload, wt as authProviderCapability, y as CredentialTokenClaimsSchema } from "../../dist-BT_THdzJ.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { t as require_ms } from "../../ms-CgH2OFlD.mjs";
-import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-DKOZSFED.mjs";
+import { _ as setProcessJwtSigningKey, a as importDevicePublicKey, c as rebuildDeviceCaCertificate, d as JWT_SIGNING_KEY_REF, g as processJwtSigningKey, h as loadJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, r as DEVICE_CA_SETTINGS_SECTION, s as loadDeviceCa, t as DEVICE_CA_FIELD, u as verifyDeviceSignature } from "../../device-ca-bhz04X_N.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
-const require_hub_mdns_ciao = require("../../hub-mdns-ciao-C3NJsOvK.js");
+const require_dist = require("../../dist-k--OhKkO.js");
+const require_hub_mdns_ciao = require("../../hub-mdns-ciao-CGXfhvTk.js");
 let zod = require("zod");
 let node_net = require("node:net");
 let node_os = require("node:os");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,5 +1,5 @@
-import { Fn as localNetworkCapability, Fr as validateCustomAddress, Ft as checkRoleAddress, H as HUB_MDNS_TXT_KEYS, Qn as pickAppLinkHub, Tn as isDefaultAppConnectionEndpoint, V as HUB_MDNS_SERVICE_TYPE, Z as NetworkTunnelStartedDataSchema, c as CAMSTACK_APP_LINK_ORIGIN, cr as resolveAppConnections, fr as resolveHubAddressRoles, hr as resolveNotificationTapAddress, ka as EventCategory, ni as BaseAddon, ti as errMsg, xn as isAppLinkBase, xr as shortHostname } from "../../dist-BIJXQo_j.mjs";
-import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-DMFXIlMY.mjs";
+import { Fn as localNetworkCapability, Fr as validateCustomAddress, Ft as checkRoleAddress, H as HUB_MDNS_TXT_KEYS, Qn as pickAppLinkHub, Tn as isDefaultAppConnectionEndpoint, V as HUB_MDNS_SERVICE_TYPE, Z as NetworkTunnelStartedDataSchema, c as CAMSTACK_APP_LINK_ORIGIN, cr as resolveAppConnections, fr as resolveHubAddressRoles, hr as resolveNotificationTapAddress, ka as EventCategory, ni as BaseAddon, ti as errMsg, xn as isAppLinkBase, xr as shortHostname } from "../../dist-BT_THdzJ.mjs";
+import { P as readLanHttpState, a as storeUploadedCertificate, d as servedHttpsLeafFingerprint, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, r as regenerateCertificate, t as createCiaoPublisher, v as writeExtraSans, w as ensureTlsCert } from "../../hub-mdns-ciao-DDgdvcQw.mjs";
 import { z } from "zod";
 import { isIP } from "node:net";
 import * as os$1 from "node:os";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 const require_log_read_filter = require("../../log-read-filter-Bi066jwU.js");
 let zod = require("zod");
 //#region src/builtins/loki-logging/loki-payload.ts

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Ln as logDestinationCapability, ni as BaseAddon } from "../../dist-BIJXQo_j.mjs";
+import { Ln as logDestinationCapability, ni as BaseAddon } from "../../dist-BT_THdzJ.mjs";
 import { n as compileLogFilter, o as lineMatches } from "../../log-read-filter-D7Ev3zm-.mjs";
 import { z } from "zod";
 //#region src/builtins/loki-logging/loki-payload.ts

package/dist/builtins/native-metrics/native-metrics.addon.d.ts

@@ -159,7 +159,7 @@ export default class NativeMetricsAddon extends BaseAddon<NativeMetricsConfig> {
 	* (nulling `ctx`) while the agent goes on to stop its other addons and the
 	* broker — so the tick resumed with no context, its catch block reached for
 	* `this.ctx.logger`, threw again, and the rejection of the timer callback
-	* killed `docker stop CamStack-Agent` with exit code 1 (little-unraid,
+	* killed `docker stop CamStack-Agent` with exit code 1 (agent-a,
 	* 2026-10-07 04:22Z). The ticks themselves now capture their context once
 	* and stand down when it is gone; this wrapper is the backstop.
 	*

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 let node_fs_promises = require("node:fs/promises");
 let node_util = require("node:util");
 let node_os = require("node:os");
@@ -2332,7 +2332,7 @@ async function readThreadTicks(pid, reader = nodeProcFsReader) {
 * and renders as a spike. That is not a hypothetical rounding concern now that
 * the process snapshot attributes each pid to a camera: it would charge one
 * camera for another camera's whole lifetime of CPU, in a chart built
-* specifically to answer "why is 617 worse than 615". `starttime` is the pid's
+* specifically to answer "why is 102 worse than 101". `starttime` is the pid's
 * incarnation number and it catches both directions.
 */
 function cpuSplitBetween(prev, next) {
@@ -2753,7 +2753,7 @@ var NativeMetricsAddon = class NativeMetricsAddon extends require_dist.BaseAddon
 	* (nulling `ctx`) while the agent goes on to stop its other addons and the
 	* broker — so the tick resumed with no context, its catch block reached for
 	* `this.ctx.logger`, threw again, and the rejection of the timer callback
-	* killed `docker stop CamStack-Agent` with exit code 1 (little-unraid,
+	* killed `docker stop CamStack-Agent` with exit code 1 (agent-a,
 	* 2026-10-07 04:22Z). The ticks themselves now capture their context once
 	* and stand down when it is gone; this wrapper is the backstop.
 	*

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Gi as createEvent, Un as metricsProviderCapability, ht as UNATTRIBUTED_BUCKET_KEY, ka as EventCategory, lr as resolveBucketMs, mn as foldSnapshotByFunction, ni as BaseAddon, or as reducePoints, rt as ROOT_BUCKET_KEY, ti as errMsg } from "../../dist-BIJXQo_j.mjs";
+import { Gi as createEvent, Un as metricsProviderCapability, ht as UNATTRIBUTED_BUCKET_KEY, ka as EventCategory, lr as resolveBucketMs, mn as foldSnapshotByFunction, ni as BaseAddon, or as reducePoints, rt as ROOT_BUCKET_KEY, ti as errMsg } from "../../dist-BT_THdzJ.mjs";
 import { access, readFile, readdir } from "node:fs/promises";
 import { promisify } from "node:util";
 import * as os$1 from "node:os";
@@ -2327,7 +2327,7 @@ async function readThreadTicks(pid, reader = nodeProcFsReader) {
 * and renders as a spike. That is not a hypothetical rounding concern now that
 * the process snapshot attributes each pid to a camera: it would charge one
 * camera for another camera's whole lifetime of CPU, in a chart built
-* specifically to answer "why is 617 worse than 615". `starttime` is the pid's
+* specifically to answer "why is 102 worse than 101". `starttime` is the pid's
 * incarnation number and it catches both directions.
 */
 function cpuSplitBetween(prev, next) {
@@ -2748,7 +2748,7 @@ var NativeMetricsAddon = class NativeMetricsAddon extends BaseAddon {
 	* (nulling `ctx`) while the agent goes on to stop its other addons and the
 	* broker — so the tick resumed with no context, its catch block reached for
 	* `this.ctx.logger`, threw again, and the rejection of the timer callback
-	* killed `docker stop CamStack-Agent` with exit code 1 (little-unraid,
+	* killed `docker stop CamStack-Agent` with exit code 1 (agent-a,
 	* 2026-10-07 04:22Z). The ticks themselves now capture their context once
 	* and stand down when it is gone; this wrapper is the backstop.
 	*

package/dist/builtins/native-metrics/thread-cpu-sampler.d.ts

@@ -91,7 +91,7 @@ export declare function readThreadTicks(pid: number, reader?: ProcFsReader): Pro
 * and renders as a spike. That is not a hypothetical rounding concern now that
 * the process snapshot attributes each pid to a camera: it would charge one
 * camera for another camera's whole lifetime of CPU, in a chart built
-* specifically to answer "why is 617 worse than 615". `starttime` is the pid's
+* specifically to answer "why is 102 worse than 101". `starttime` is the pid's
 * incarnation number and it catches both directions.
 */
 export declare function cpuSplitBetween(prev: ThreadTickSample, next: ThreadTickSample): ThreadCpuSplit | null;

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 const require_coral_accelerators = require("../../coral-accelerators-BSVsBVzt.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM, r as __exportAll } from "../../chunk-CNf5ZN-e.mjs";
-import { Xi as emitReadiness, Xn as parseAcceleratorFactsJson, an as enumerateInferenceDevices, er as platformProbeCapability, ka as EventCategory, ni as BaseAddon, ti as errMsg, yr as scoreRuntimes } from "../../dist-BIJXQo_j.mjs";
+import { Xi as emitReadiness, Xn as parseAcceleratorFactsJson, an as enumerateInferenceDevices, er as platformProbeCapability, ka as EventCategory, ni as BaseAddon, ti as errMsg, yr as scoreRuntimes } from "../../dist-BT_THdzJ.mjs";
 import { n as detectCoralAccelerator, r as nodeCoralFs } from "../../coral-accelerators-DBlgWB8k.mjs";
 import * as path$1 from "node:path";
 import { promisify } from "node:util";

package/dist/builtins/record-entries/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 //#region src/builtins/record-entries/entries-service.ts

package/dist/builtins/record-entries/index.mjs

@@ -1,4 +1,4 @@
-import { Ni as UnknownRecordKindError, _a as recordSecretRef, fi as InvalidRecordError, ir as recordEntriesCapability, la as mapSecretLeaves, ni as BaseAddon } from "../../dist-BIJXQo_j.mjs";
+import { Ni as UnknownRecordKindError, _a as recordSecretRef, fi as InvalidRecordError, ir as recordEntriesCapability, la as mapSecretLeaves, ni as BaseAddon } from "../../dist-BT_THdzJ.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 //#region src/builtins/record-entries/entries-service.ts

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { ka as EventCategory, ni as BaseAddon } from "../../dist-BIJXQo_j.mjs";
+import { ka as EventCategory, ni as BaseAddon } from "../../dist-BT_THdzJ.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 const require_snapshot_courtesy = require("../../snapshot-courtesy-D_C5-nC0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { Cr as snapshotCapability, Dt as batteryCapability, Et as bareAddonId, Hn as memoizePinnedFfmpeg, Qr as DeviceFeature, Xt as deriveBatteryPresence, ei as DeviceType, jr as streamQualityLabel, ka as EventCategory, ni as BaseAddon, o as BatteryStatusSchema, ti as errMsg, ua as nodePin } from "../../dist-BIJXQo_j.mjs";
+import { Cr as snapshotCapability, Dt as batteryCapability, Et as bareAddonId, Hn as memoizePinnedFfmpeg, Qr as DeviceFeature, Xt as deriveBatteryPresence, ei as DeviceType, jr as streamQualityLabel, ka as EventCategory, ni as BaseAddon, o as BatteryStatusSchema, ti as errMsg, ua as nodePin } from "../../dist-BT_THdzJ.mjs";
 import { i as renderCourtesyOverlayJpeg, n as courtesyCacheKey, r as renderCourtesyJpeg } from "../../snapshot-courtesy-CyFs1M3I.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/snapshot/snapshot-fatigue.d.ts

@@ -3,7 +3,7 @@
 *
 * The wrapper is polled — grids, cards, the media plane — and every miss used
 * to be followed by another ISAPI/CGI dial on the next poll. On a camera that
-* is already struggling ("Videocamera retro casa" answered HTTP 503 to 68
+* is already struggling ("Camera retro casa" answered HTTP 503 to 68
 * native dials in one hour on 2026-09-05) that is the load that keeps it
 * struggling. So a miss earns a rest window during which the native provider
 * is NOT dialled: the request falls through to the stream-broker frame grab

package/dist/builtins/snapshot/snapshot-link-url.d.ts

@@ -52,7 +52,7 @@ export interface ParsedSnapshotLink {
 	readonly width: number | undefined;
 }
 export interface ParseSnapshotLinkInput {
-	/** Handler-relative url, e.g. `/615.jpg?w=240&exp=…&sig=…`. */
+	/** Handler-relative url, e.g. `/101.jpg?w=240&exp=…&sig=…`. */
 	readonly url: string;
 	readonly secret: string;
 	readonly nowMs: number;

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { kr as storageProviderCapability, ni as BaseAddon, pn as filesystemBrowseCapability } from "../../dist-BIJXQo_j.mjs";
+import { kr as storageProviderCapability, ni as BaseAddon, pn as filesystemBrowseCapability } from "../../dist-BT_THdzJ.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/sqlite-storage/filter-compiler.d.ts

@@ -7,7 +7,7 @@
 * data-loss shapes:
 *
 *  - **A dropped predicate.** A field that is not a column of a structured
-*    table is skipped, so `{ deviceId: 615, kind: 'motion' }` can compile to
+*    table is skipped, so `{ deviceId: 101, kind: 'motion' }` can compile to
 *    `WHERE "deviceId" = ?` — on a SELECT that returns extra rows, on a DELETE
 *    it removes rows the caller meant to keep.
 *  - **No predicate at all.** An empty filter compiles to an empty WHERE,

package/dist/builtins/sqlite-storage/index.js

@@ -4,7 +4,7 @@ Object.defineProperties(exports, {
 });
 require("../../chunk-Cek0wNdY.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./filesystem-storage.addon.js");
-const require_wal_maintenance = require("../../wal-maintenance-CsGk4kYn.js");
+const require_wal_maintenance = require("../../wal-maintenance-C4cma95b.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./sqlite-settings.addon.js");
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/index.mjs

@@ -1,5 +1,5 @@
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./filesystem-storage.addon.mjs";
-import { A as SQLITE_MMAP_CEILING_BYTES, B as SQLITE_SLOW_CALL_MS, F as sqlitePageCacheKibFor, H as sqliteEngineStorm, I as SQLITE_ENGINE_STORM_WALL_SHARE, L as SQLITE_PROFILE_REPORT_FLOOR_MS, M as SQLITE_PAGE_CACHE_CEILING_KIB, N as SQLITE_PAGE_CACHE_FLOOR_KIB, P as sqliteMmapSizeFor, R as SQLITE_PROFILE_REPORT_INTERVAL_MS, V as SqliteOpProfiler, a as WalMaintenance, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_MMAP_FLOOR_BYTES, k as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, l as SqliteSettingsBackend, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SQLITE_PROFILE_TOP_N } from "../../wal-maintenance-DYAJwPWu.mjs";
+import { A as SQLITE_MMAP_CEILING_BYTES, B as SQLITE_SLOW_CALL_MS, F as sqlitePageCacheKibFor, H as sqliteEngineStorm, I as SQLITE_ENGINE_STORM_WALL_SHARE, L as SQLITE_PROFILE_REPORT_FLOOR_MS, M as SQLITE_PAGE_CACHE_CEILING_KIB, N as SQLITE_PAGE_CACHE_FLOOR_KIB, P as sqliteMmapSizeFor, R as SQLITE_PROFILE_REPORT_INTERVAL_MS, V as SqliteOpProfiler, a as WalMaintenance, i as WAL_MAINTENANCE_INTERVAL_MS, j as SQLITE_MMAP_FLOOR_BYTES, k as SQLITE_JOURNAL_SIZE_LIMIT_BYTES, l as SqliteSettingsBackend, n as WAL_HIGH_WATER_BYTES, r as WAL_IDLE_QUIET_MS, t as WAL_CHECKPOINT_BUSY_TIMEOUT_MS, z as SQLITE_PROFILE_TOP_N } from "../../wal-maintenance-CVDrL_BD.mjs";
 import { SqliteSettingsAddon } from "./sqlite-settings.addon.mjs";
 //#region src/builtins/sqlite-storage/config-store.ts
 var ConfigStore = class {

package/dist/builtins/sqlite-storage/prefix-range.d.ts

@@ -23,8 +23,8 @@
 * **It is also more CORRECT, which was not the goal.** `LIKE` treats `_` and
 * `%` in the PATTERN as wildcards, and the pattern here is built from an addon
 * id and a device id. `clearAddonDevice('a_b', …)` deleted `axb`'s rows too,
-* and `LIKE`'s ASCII case-folding meant `Recorder:615.` matched
-* `recorder:615.`. A byte range matches exactly the keys that start with the
+* and `LIKE`'s ASCII case-folding meant `Recorder:101.` matched
+* `recorder:101.`. A byte range matches exactly the keys that start with the
 * prefix and nothing else.
 *
 * **Why it can refuse.** SQLite's BINARY collation compares UTF-8 BYTES; JS

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 const require_retired_settings_keys = require("../../retired-settings-keys-DorakcxV.js");
-const require_wal_maintenance = require("../../wal-maintenance-CsGk4kYn.js");
+const require_wal_maintenance = require("../../wal-maintenance-C4cma95b.js");
 const require_sqlite_snapshot_protocol = require("../../sqlite-snapshot-protocol-B9OndqZv.js");
 const require_wal_checkpoint_policy = require("../../wal-checkpoint-policy-d2z2qPqx.js");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,6 +1,6 @@
-import { C as DATA_STORE_DATABASES, Et as bareAddonId, Gt as dataStoreProviderCapability, Kt as databaseSnapshotCapability, Ni as UnknownRecordKindError, Rr as vectorStoreCapability, S as DATABASE_SNAPSHOT_TIMEOUT_MS, Tr as storageAdminCapability, ar as recordsCapability, b as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, ci as DeclarationRefusedError, fa as normalizeSecretOwner, fi as InvalidRecordError, ji as TransactRefusedError, ni as BaseAddon, pi as NoCallerError, ti as errMsg, vi as RECORD_SWEEP_INTERVAL_MS, wi as RecordKindDeclarationSchema, x as DATABASE_SNAPSHOT_SUFFIX, xi as RUNTIME_DEFAULTS } from "../../dist-BIJXQo_j.mjs";
+import { C as DATA_STORE_DATABASES, Et as bareAddonId, Gt as dataStoreProviderCapability, Kt as databaseSnapshotCapability, Ni as UnknownRecordKindError, Rr as vectorStoreCapability, S as DATABASE_SNAPSHOT_TIMEOUT_MS, Tr as storageAdminCapability, ar as recordsCapability, b as DATABASE_SNAPSHOT_PARTIAL_SUFFIX, ci as DeclarationRefusedError, fa as normalizeSecretOwner, fi as InvalidRecordError, ji as TransactRefusedError, ni as BaseAddon, pi as NoCallerError, ti as errMsg, vi as RECORD_SWEEP_INTERVAL_MS, wi as RecordKindDeclarationSchema, x as DATABASE_SNAPSHOT_SUFFIX, xi as RUNTIME_DEFAULTS } from "../../dist-BT_THdzJ.mjs";
 import { r as retiredKeyStoreOf, t as purgeRetiredSettingsKeys } from "../../retired-settings-keys-CWp7ZSeA.mjs";
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, S as trustResult, T as callData, _ as collectTransferables, a as WalMaintenance, c as vectorProviderOfOwnedFile, d as CrossDatabaseTransactError, f as DatabaseBusyError, l as SqliteSettingsBackend, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callControl } from "../../wal-maintenance-DYAJwPWu.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, S as trustResult, T as callData, _ as collectTransferables, a as WalMaintenance, c as vectorProviderOfOwnedFile, d as CrossDatabaseTransactError, f as DatabaseBusyError, l as SqliteSettingsBackend, m as rehydrateError, o as createVectorIndex, p as DuplicatePlacementError, s as vectorProviderOf, u as CollectionPlacementError, v as isFileHostMessage, w as callControl } from "../../wal-maintenance-CVDrL_BD.mjs";
 import { r as isSnapshotWorkerMessage } from "../../sqlite-snapshot-protocol-2QaTouWV.mjs";
 import { a as isWorkerMessage, t as WAL_CHECKPOINT_LARGE_PASS_FRAMES } from "../../wal-checkpoint-policy-BahrTtyD.mjs";
 import { createRequire } from "node:module";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 const require_read_all_rows$1 = require("../../read-all-rows-CVoO1ONM.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Bn as mayReadLocation, Dr as storageMigrationCapability, Ea as transformSecretWrite, En as isLocationEnabled, Er as storageCapability, Ji as defineRecordKinds, Nn as legacyModeOf, Vi as collectSecretConfigKeys, Vn as mayWriteToLocation, Wn as modeMayWrite, _n as gbToBytes, aa as isSecretMarker, br as settingsStoreCapability, da as normalizeNodeId, dt as StorageLocationModeSchema, ft as StorageLocationTypeSchema, ka as EventCategory, ln as evictionPolicyOfLocation, ni as BaseAddon, pa as parseJsonObject, pr as resolveLocationMode, pt as StorageMigrationJobSchema, q as LegacyStorageLocationDefaultSchema, ut as StorageCleanupJobSchema, xa as secretTreeFromPaths, ya as resolveSecretMarkers, yi as REDACTED_SECRET, zr as withLocationMode } from "../../dist-BIJXQo_j.mjs";
+import { Bn as mayReadLocation, Dr as storageMigrationCapability, Ea as transformSecretWrite, En as isLocationEnabled, Er as storageCapability, Ji as defineRecordKinds, Nn as legacyModeOf, Vi as collectSecretConfigKeys, Vn as mayWriteToLocation, Wn as modeMayWrite, _n as gbToBytes, aa as isSecretMarker, br as settingsStoreCapability, da as normalizeNodeId, dt as StorageLocationModeSchema, ft as StorageLocationTypeSchema, ka as EventCategory, ln as evictionPolicyOfLocation, ni as BaseAddon, pa as parseJsonObject, pr as resolveLocationMode, pt as StorageMigrationJobSchema, q as LegacyStorageLocationDefaultSchema, ut as StorageCleanupJobSchema, xa as secretTreeFromPaths, ya as resolveSecretMarkers, yi as REDACTED_SECRET, zr as withLocationMode } from "../../dist-BT_THdzJ.mjs";
 import { t as require_read_all_rows } from "../../read-all-rows-TaPqdWNF.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
+const require_dist = require("../../dist-k--OhKkO.js");
 const require_safe_buffer$1 = require("../../safe-buffer-D3aoa-7X.js");
 const require_x509_es = require("../../x509.es-WtnRNyYS.js");
-const require_agent_https = require("../../agent-https-o3X-jkS7.js");
-const require_constants$8 = require("../../constants-BVJrLycr.js");
+const require_agent_https = require("../../agent-https-CW8aLMDL.js");
+const require_constants$8 = require("../../constants-71vf77HY.js");
 const require_src$1 = require("../../src-CnAqG6EF.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,9 +1,9 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Ki as customAction, ct as ServerNameSchema, ea as hydrateSchema, ni as BaseAddon, qi as defineCustomActions, ti as errMsg, xr as shortHostname } from "../../dist-BIJXQo_j.mjs";
+import { Ki as customAction, ct as ServerNameSchema, ea as hydrateSchema, ni as BaseAddon, qi as defineCustomActions, ti as errMsg, xr as shortHostname } from "../../dist-BT_THdzJ.mjs";
 import { t as require_safe_buffer } from "../../safe-buffer-B1OjL1I9.mjs";
 import { C as backdatedNotBefore, S as withUtcTimeEncoding, a as KeyUsageFlags, c as Pkcs10CertificateRequest, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, l as Pkcs10CertificateRequestGenerator, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension } from "../../x509.es-BRiJgOvu.mjs";
-import { B as setProcessAgentHttpsNames, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, R as AgentHttpsNames, V as systemConfigRecordKinds, u as isPrivateAddress, z as getProcessAgentHttpsNames } from "../../agent-https-doVPSeiy.mjs";
-import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-xuLNi4a2.mjs";
+import { B as setProcessAgentHttpsNames, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, R as AgentHttpsNames, V as systemConfigRecordKinds, u as isPrivateAddress, z as getProcessAgentHttpsNames } from "../../agent-https-DttPIFry.mjs";
+import { a as MESH_CA_KEY_REF, c as SERVER_AUTH_OID, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY, r as MESH_CA_COMMON_NAME, s as MESH_CA_VALIDITY_DAYS, t as CLIENT_AUTH_OID } from "../../constants-B3FDrBIq.mjs";
 import { t as require_src } from "../../src-hG4grMU4.mjs";
 import { z } from "zod";
 import { X509Certificate, createHash, createPrivateKey, randomBytes, randomInt, sign, timingSafeEqual, verify, webcrypto } from "node:crypto";

package/dist/builtins/winston-logging/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist--v3KMKa1.js");
-const require_formatter = require("../../formatter-DqAKDlvN.js");
+const require_dist = require("../../dist-k--OhKkO.js");
+const require_formatter = require("../../formatter-xbxeV4GD.js");
 const require_log_file_read_protocol = require("../../log-file-read-protocol-D0WcLbIV.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,5 +1,5 @@
-import { Ln as logDestinationCapability, ni as BaseAddon } from "../../dist-BIJXQo_j.mjs";
-import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
+import { Ln as logDestinationCapability, ni as BaseAddon } from "../../dist-BT_THdzJ.mjs";
+import { t as formatLogLine } from "../../formatter-DkYZ4LXp.mjs";
 import { a as LogFileIndexStore, i as serveRead, n as isFromReader, t as CancelBook } from "../../log-file-read-protocol-B7M3X3bT.mjs";
 import { createRequire } from "node:module";
 import * as path$1 from "node:path";

package/dist/{composition-sources-BrDtOpfE.mjs → composition-sources-DEsDonpg.mjs}

@@ -1,4 +1,4 @@
-import { Jr as compositionSourceKey, ti as errMsg } from "./dist-BIJXQo_j.mjs";
+import { Jr as compositionSourceKey, ti as errMsg } from "./dist-BT_THdzJ.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-BmhhDWIc.js → composition-sources-DqRPHdtw.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist--v3KMKa1.js");
+const require_dist = require("./dist-k--OhKkO.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{constants-BVJrLycr.js → constants-71vf77HY.js}

@@ -1,5 +1,5 @@
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
-var MESH_CA_KEY_REF = require("./dist--v3KMKa1.js").buildSecretRef({
+var MESH_CA_KEY_REF = require("./dist-k--OhKkO.js").buildSecretRef({
 	owner: "system",
 	scope: { kind: "global" },
 	fieldPath: "meshCaKey"

package/dist/{constants-xuLNi4a2.mjs → constants-B3FDrBIq.mjs}

@@ -1,4 +1,4 @@
-import { Bi as buildSecretRef } from "./dist-BIJXQo_j.mjs";
+import { Bi as buildSecretRef } from "./dist-BT_THdzJ.mjs";
 /** `secret://system/global/meshCaKey` — EC P-256 PKCS#8 PEM of the hub mesh CA. */
 var MESH_CA_KEY_REF = buildSecretRef({
 	owner: "system",

package/dist/{device-ca-DgLZPn5R.js → device-ca-BDPYXhkH.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist--v3KMKa1.js");
+const require_dist = require("./dist-k--OhKkO.js");
 const require_x509_es = require("./x509.es-WtnRNyYS.js");
 let node_crypto = require("node:crypto");
 //#region src/auth/jwt-signing-key.ts

package/dist/{device-ca-DKOZSFED.mjs → device-ca-bhz04X_N.mjs}

@@ -1,4 +1,4 @@
-import { A as DEVICE_SAN_USER_PREFIX, Bi as buildSecretRef, k as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-BIJXQo_j.mjs";
+import { A as DEVICE_SAN_USER_PREFIX, Bi as buildSecretRef, k as DEVICE_SAN_CREDENTIAL_PREFIX } from "./dist-BT_THdzJ.mjs";
 import { C as backdatedNotBefore, S as withUtcTimeEncoding, a as KeyUsageFlags, d as SubjectKeyIdentifierExtension, f as X509Certificate$1, m as cryptoProvider, n as BasicConstraintsExtension, o as KeyUsagesExtension, p as X509CertificateGenerator, r as ExtendedKeyUsageExtension, s as PemConverter, t as AuthorityKeyIdentifierExtension, u as SubjectAlternativeNameExtension } from "./x509.es-BRiJgOvu.mjs";
 import { X509Certificate, createPublicKey, randomBytes, verify, webcrypto } from "node:crypto";
 //#region src/auth/jwt-signing-key.ts