@camstack/system 1.2.482 → 1.2.484

package/dist/file-host-worker.js

@@ -1,5 +1,5 @@
 require("./chunk-Cek0wNdY.js");
-const require_wal_maintenance = require("./wal-maintenance-CsGk4kYn.js");
+const require_wal_maintenance = require("./wal-maintenance-C4cma95b.js");
 let node_worker_threads = require("node:worker_threads");
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/file-host-worker.mjs

@@ -1,4 +1,4 @@
-import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-DYAJwPWu.mjs";
+import { C as RecordsEngine, D as callVector, E as callRecords, O as controlTargetOf, T as callData, _ as collectTransferables, a as WalMaintenance, b as isFileHostWorkerData, h as serializeError, l as SqliteSettingsBackend, o as createVectorIndex, s as vectorProviderOf, w as callControl, x as trustInput, y as isFileHostRequest } from "./wal-maintenance-CVDrL_BD.mjs";
 import { parentPort, threadId, workerData } from "node:worker_threads";
 //#region src/builtins/sqlite-storage/file-host-worker.ts
 /**

package/dist/{formatter-B7qW8bPJ.mjs → formatter-DkYZ4LXp.mjs}

@@ -81,7 +81,7 @@ function buildBrand(entry) {
 /**
 * Build the optional device-context bracket. Returns `null` when the
 * line doesn't carry a device tag — renders as just the brand + message
-* without the second bracket. With a device tag: `salone` / `#42`.
+* without the second bracket. With a device tag: `hall` / `#42`.
 */
 function buildDeviceContext(entry) {
 	return resolveDevice(entry.tags);

package/dist/{formatter-DqAKDlvN.js → formatter-xbxeV4GD.js}

@@ -81,7 +81,7 @@ function buildBrand(entry) {
 /**
 * Build the optional device-context bracket. Returns `null` when the
 * line doesn't carry a device tag — renders as just the brand + message
-* without the second bracket. With a device tag: `salone` / `#42`.
+* without the second bracket. With a device tag: `hall` / `#42`.
 */
 function buildDeviceContext(entry) {
 	return resolveDevice(entry.tags);

package/dist/{hub-mdns-ciao-C3NJsOvK.js → hub-mdns-ciao-CGXfhvTk.js}

@@ -1,7 +1,7 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist--v3KMKa1.js");
+const require_dist = require("./dist-k--OhKkO.js");
 const require_x509_es = require("./x509.es-WtnRNyYS.js");
-const require_agent_https = require("./agent-https-o3X-jkS7.js");
+const require_agent_https = require("./agent-https-CW8aLMDL.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 let node_fs_promises = require("node:fs/promises");

package/dist/{hub-mdns-ciao-DMFXIlMY.mjs → hub-mdns-ciao-DDgdvcQw.mjs}

@@ -1,7 +1,7 @@
 import { o as __toESM } from "./chunk-CNf5ZN-e.mjs";
-import { Da as userError } from "./dist-BIJXQo_j.mjs";
+import { Da as userError } from "./dist-BT_THdzJ.mjs";
 import { f as X509Certificate$1 } from "./x509.es-BRiJgOvu.mjs";
-import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-doVPSeiy.mjs";
+import { D as reasonRequiresNewCa, E as evaluateExistingCert, F as readNameConstraints, N as permitsIdentity, _ as issueLeaf, b as collectCertIdentity, g as generateCa, j as isConstrainedCa, v as loadCa, y as localCaCommonName } from "./agent-https-DttPIFry.mjs";
 import { X509Certificate, createPrivateKey } from "node:crypto";
 import { writeOwnerOnlyFileSync } from "@camstack/types/node";
 import { mkdir, writeFile } from "node:fs/promises";

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist--v3KMKa1.js");
-const require_device_ca = require("./device-ca-DgLZPn5R.js");
+const require_dist = require("./dist-k--OhKkO.js");
+const require_device_ca = require("./device-ca-BDPYXhkH.js");
 const require_read_all_rows$1 = require("./read-all-rows-CVoO1ONM.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
@@ -9,7 +9,7 @@ const require_builtins_calendars_calendars_addon = require("./builtins/calendars
 require("./builtins/calendars/index.js");
 const require_builtins_composer_composer_addon = require("./builtins/composer/composer.addon.js");
 require("./builtins/composer/index.js");
-const require_formatter = require("./formatter-DqAKDlvN.js");
+const require_formatter = require("./formatter-xbxeV4GD.js");
 const require_builtins_console_logging_index = require("./builtins/console-logging/index.js");
 const require_prefix_walk = require("./prefix-walk-Dv6MLZlM.js");
 const require_builtins_core_blocks_core_blocks_addon = require("./builtins/core-blocks/core-blocks.addon.js");
@@ -26,21 +26,21 @@ const require_builtins_loki_logging_index = require("./builtins/loki-logging/ind
 const require_builtins_native_metrics_native_metrics_addon = require("./builtins/native-metrics/native-metrics.addon.js");
 const require_builtins_device_history_device_history_addon = require("./builtins/device-history/device-history.addon.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
-const require_wal_maintenance = require("./wal-maintenance-CsGk4kYn.js");
+const require_wal_maintenance = require("./wal-maintenance-C4cma95b.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");
 const require_builtins_sqlite_storage_index = require("./builtins/sqlite-storage/index.js");
 const require_builtins_storage_orchestrator_storage_orchestrator_addon = require("./builtins/storage-orchestrator/storage-orchestrator.addon.js");
 require("./builtins/storage-orchestrator/index.js");
-const require_agent_https = require("./agent-https-o3X-jkS7.js");
-const require_constants = require("./constants-BVJrLycr.js");
+const require_agent_https = require("./agent-https-CW8aLMDL.js");
+const require_constants = require("./constants-71vf77HY.js");
 const require_builtins_system_config_system_config_addon = require("./builtins/system-config/system-config.addon.js");
 require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_custom_action_registry = require("./custom-action-registry-MRyes5j0.js");
-const require_hub_mdns_ciao = require("./hub-mdns-ciao-C3NJsOvK.js");
+const require_hub_mdns_ciao = require("./hub-mdns-ciao-CGXfhvTk.js");
 const require_platform_key_source = require("./platform-key-source-Di7HrlGR.js");
 const require_resource_monitor = require("./resource-monitor-mio9dSCT.js");
-const require_restore_archive = require("./restore-archive-DpkdAuFf.js");
+const require_restore_archive = require("./restore-archive-B-GiglWt.js");
 const require_coral_accelerators = require("./coral-accelerators-BSVsBVzt.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
@@ -8362,7 +8362,7 @@ var STAGING_RESIDUE_MIN_AGE_MS = 30 * 6e4;
 *   npm error path …/.staging/install-14820-2026-08-07T12-28-28-875Z/package/package.json
 *
 * which the propagation then reported as `runtime dependency install failed`.
-* Observed on the Mac desktop agent and on little-unraid on 2026-08-07.
+* Observed on the Mac desktop agent and on agent-a on 2026-08-07.
 *
 * So a sweep only removes what cannot be live: not a tree this process is
 * building, and not one young enough to belong to anybody's in-flight install.
@@ -9836,7 +9836,7 @@ function isDirEntry(entry, parentDir) {
 *
 * Measured 2026-08-07/08 on the live cluster:
 *
-*   little-unraid  `@camstack/system.bak-pre-unshadow` — no package.json left,
+*   agent-a  `@camstack/system.bak-pre-unshadow` — no package.json left,
 *                  so not loadable, but the agent main process held five live
 *                  mappings of `better_sqlite3.node` out of it (D87).
 *   macmini        `@camstack/system.bak-pre-1272-1786129145` — still declares
@@ -19436,7 +19436,7 @@ var SocketChannel = class {
 	* `res` frame, or the socket's `close` (which drains `pending`) — so a peer
 	* that receives the request and then neither answers nor closes leaves the
 	* caller pending forever. That is a wedged handler, or a half-open socket
-	* after a child died without a clean teardown, and it is how camera 615 spent
+	* after a child died without a clean teardown, and it is how camera 101 spent
 	* 30+ minutes with every inference permit held by a call that was never
 	* coming back.
 	*/
@@ -22414,7 +22414,7 @@ function buildLinkChain(target, localResolver, hookup) {
 /**
 * Can libva initialise the VA driver on this node's render node? (D926)
 *
-* Measured 2026-10-23 (intel-1.2.509, hub + little-unraid): Intel's iHD 25.2.4
+* Measured 2026-10-23 (intel-1.2.509, hub + agent-a): Intel's iHD 25.2.4
 * exports only `__vaDriverInit_1_22`, the container's Ubuntu libva 2.20 looks
 * for `_1_20`, and `vaInitialize` failed — while the resolver kept offering
 * `qsv, vaapi`. Every session tried, failed and fell back to software: 722

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { i as __require } from "./chunk-CNf5ZN-e.mjs";
-import { Ci as ReadinessTimeoutError, Cn as isCollectionArrayMethod, Da as userError, Dn as isObjectInput, Fi as asJsonObject$1, Gi as createEvent$1, Ii as asNumber, J as METHOD_ACCESS_MAP, Ji as defineRecordKinds, Jn as objectInputDeclaresAddonId, K as LOG_LEVEL_RANK, Li as asString$1, Mr as supportedRuntimes, Oa as withoutCallerStamp, On as isVoidInput, Pn as lifecycleJobSchema, Rn as logLevelAtMost, Si as ReadinessRegistry, Sn as isArrayOutputSchema, Yi as emitDownForOwnedCaps, Yn as objectInputDeclaresRequiredDeviceId, Zi as expandCapMethods, _ as CatalogFileSchema, _r as scopesAllowAddon, ai as DATAPLANE_SECRET_HEADER$1, ba as scopeKey, fn as extractNestedAddonId, ga as readinessKey, ii as CALLER_STAMPED_CAPABILITIES$1, ka as EventCategory$1, kn as kebabToCamel$1, ma as parseJsonUnknown, mr as resolveMethodAuth, n as AGENT_MDNS_TXT_KEYS, nr as procedureAuthKey, oi as DEVICE_SETTINGS_CONTRIBUTION_METHODS, pa as parseJsonObject, r as ALL_CAPABILITY_DEFINITIONS, si as DEVICE_STATUS_METHOD, t as AGENT_MDNS_SERVICE_TYPE, ti as errMsg$1, u as CATALOG_LANGS, va as resolveCapMount, vn as interpolate, vr as scopesAllowDeviceCap, vt as addonSettingsCapability, wr as splitTranslationRef, xi as RUNTIME_DEFAULTS, zn as looseSchema } from "./dist-BIJXQo_j.mjs";
-import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-DKOZSFED.mjs";
+import { Ci as ReadinessTimeoutError, Cn as isCollectionArrayMethod, Da as userError, Dn as isObjectInput, Fi as asJsonObject$1, Gi as createEvent$1, Ii as asNumber, J as METHOD_ACCESS_MAP, Ji as defineRecordKinds, Jn as objectInputDeclaresAddonId, K as LOG_LEVEL_RANK, Li as asString$1, Mr as supportedRuntimes, Oa as withoutCallerStamp, On as isVoidInput, Pn as lifecycleJobSchema, Rn as logLevelAtMost, Si as ReadinessRegistry, Sn as isArrayOutputSchema, Yi as emitDownForOwnedCaps, Yn as objectInputDeclaresRequiredDeviceId, Zi as expandCapMethods, _ as CatalogFileSchema, _r as scopesAllowAddon, ai as DATAPLANE_SECRET_HEADER$1, ba as scopeKey, fn as extractNestedAddonId, ga as readinessKey, ii as CALLER_STAMPED_CAPABILITIES$1, ka as EventCategory$1, kn as kebabToCamel$1, ma as parseJsonUnknown, mr as resolveMethodAuth, n as AGENT_MDNS_TXT_KEYS, nr as procedureAuthKey, oi as DEVICE_SETTINGS_CONTRIBUTION_METHODS, pa as parseJsonObject, r as ALL_CAPABILITY_DEFINITIONS, si as DEVICE_STATUS_METHOD, t as AGENT_MDNS_SERVICE_TYPE, ti as errMsg$1, u as CATALOG_LANGS, va as resolveCapMount, vn as interpolate, vr as scopesAllowDeviceCap, vt as addonSettingsCapability, wr as splitTranslationRef, xi as RUNTIME_DEFAULTS, zn as looseSchema } from "./dist-BT_THdzJ.mjs";
+import { d as JWT_SIGNING_KEY_REF, f as JwtSigningKeyUnavailableError, g as processJwtSigningKey, i as generateDeviceCa, l as verifyDeviceLeaf, m as getProcessJwtSigningKeyState, n as DEVICE_CA_KEY_REF, o as issueDeviceLeaf, p as SYSTEM_SECRET_OWNER, s as loadDeviceCa, u as verifyDeviceSignature, v as staticJwtSigningKey } from "./device-ca-bhz04X_N.mjs";
 import { t as require_read_all_rows } from "./read-all-rows-TaPqdWNF.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
@@ -8,7 +8,7 @@ import { CalendarsAddon } from "./builtins/calendars/calendars.addon.mjs";
 import "./builtins/calendars/index.mjs";
 import { ComposerAddon } from "./builtins/composer/composer.addon.mjs";
 import "./builtins/composer/index.mjs";
-import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";
+import { t as formatLogLine } from "./formatter-DkYZ4LXp.mjs";
 import { ConsoleDestination, ConsoleLoggingAddon } from "./builtins/console-logging/index.mjs";
 import { t as loadPrefixed } from "./prefix-walk-DAOBSyH1.mjs";
 import { CoreBlocksAddon, o as createAddonSettingsStore } from "./builtins/core-blocks/core-blocks.addon.mjs";
@@ -25,21 +25,21 @@ import { LokiDestination, LokiLoggingAddon } from "./builtins/loki-logging/index
 import NativeMetricsAddon, { a as NativeMetricsProvider, n as nodeProcReader, r as parseProcStat } from "./builtins/native-metrics/native-metrics.addon.mjs";
 import { DeviceHistoryAddon } from "./builtins/device-history/device-history.addon.mjs";
 import { FilesystemStorageAddon, t as FilesystemStorageProvider } from "./builtins/sqlite-storage/filesystem-storage.addon.mjs";
-import { C as RecordsEngine, l as SqliteSettingsBackend } from "./wal-maintenance-DYAJwPWu.mjs";
+import { C as RecordsEngine, l as SqliteSettingsBackend } from "./wal-maintenance-CVDrL_BD.mjs";
 import { SqliteSettingsAddon } from "./builtins/sqlite-storage/sqlite-settings.addon.mjs";
 import { ConfigStore, DeviceStore } from "./builtins/sqlite-storage/index.mjs";
 import { StorageOrchestratorAddon, a as stripForwardedCaller, i as createHubCapForwardService, l as STORAGE_DRAIN_STATE_LEGACY, n as HUB_CAP_FWD_ACTION, o as buildStorageLocationRegistry, r as HUB_CAP_FWD_SERVICE, t as StorageOrchestratorService, u as storageOrchestratorRecordKinds } from "./builtins/storage-orchestrator/storage-orchestrator.addon.mjs";
 import "./builtins/storage-orchestrator/index.mjs";
-import { A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, o as createAgentHttpsRequest, p as pemDigest, r as agentHttpsPaths, s as describeHttpsLeaf, t as AgentHttpsInstallError, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-doVPSeiy.mjs";
-import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-xuLNi4a2.mjs";
+import { A as buildNameConstraintSet, B as setProcessAgentHttpsNames, C as LEAF_RENEWAL_WINDOW_DAYS, E as evaluateExistingCert, F as readNameConstraints, I as AGENT_HTTPS_NAMES_COLLECTION, L as AGENT_HTTPS_NAMES_COLUMNS, M as isLocalOnlyHostname, N as permitsIdentity, O as PERMITTED_DNS_SUFFIXES, P as permitsName, R as AgentHttpsNames, S as CA_VALIDITY_DAYS, T as SERVER_AUTH_OID, a as collectAgentNames, b as collectCertIdentity, c as installAgentHttps, d as issueAgentHttpsLeaf, f as loadAgentHttps, h as CA_COMMON_NAME, i as certificateNames, j as isConstrainedCa, k as PERMITTED_IP_RANGES, l as isContainerBridgeAddress, m as pinnedHttpsCaFingerprint, n as acceptAgentSans, o as createAgentHttpsRequest, p as pemDigest, r as agentHttpsPaths, s as describeHttpsLeaf, t as AgentHttpsInstallError, u as isPrivateAddress, w as MAX_LEAF_VALIDITY_DAYS, x as systemHostFacts, y as localCaCommonName, z as getProcessAgentHttpsNames } from "./agent-https-DttPIFry.mjs";
+import { a as MESH_CA_KEY_REF, i as MESH_CA_FIELD, n as DEFAULT_HUB_TLS_TCP_PORT, o as MESH_CA_SETTINGS_KEY } from "./constants-B3FDrBIq.mjs";
 import { $ as generateMeshKeyPair, A as setProcessMeshPeerTransportLookup, B as describeMeshLeaf, C as setProcessMeshTlsEnabler, D as getProcessPeerLeaf, E as getProcessNodeMeshTransport, F as setProcessMeshTlsListenerState, G as MeshCaKeeper, H as setProcessMeshCertificateRegistry, I as MESH_NODE_CERTIFICATES_COLLECTION, J as caFingerprint, K as getProcessMeshCaState, L as MESH_NODE_CERTIFICATES_COLUMNS, M as revokeMeshCertificate, N as getProcessMeshTlsListenerState, O as isProcessVerifiedMeshPeer, P as openMeshTlsWhenRevocationsLoaded, Q as generateMeshCa, R as MeshCertificateRegistry, S as ServiceBroker, SystemConfigAddon, T as emitProcessNodeRegistered, U as MeshCrl, V as getProcessMeshCertificateRegistry, W as processMeshCrl, X as createMeshCsrPem, Y as caFingerprintCompact, Z as exportMeshPrivateKeyPem, _ as signPairingProof, _t as readCidrSetting, a as hubHostFromMeshAddress, at as AGENT_UI_UNLOCK_TTL_MS, b as TlsTcpTransporter, c as PAIRING_MAX_SESSIONS, ct as AGENT_UI_UNLOCK_VERSION, d as PAIRING_PROTOCOL, dt as mintAgentUiUnlockTicket, et as isValidAgentNodeId, f as PAIRING_TTL_MS, ft as parseAgentDashboardOrigins, g as keyFingerprintShort, gt as parseCidrList, h as describeCsr, ht as normalizeIp, i as AgentPairing, it as AGENT_DASHBOARD_ORIGINS_FIELD, j as renewMeshCertificate, k as onProcessNodeRegistered, l as PAIRING_PATHS, lt as UnlockTicketJtiStore, m as computePairingSas, mt as createCidrMatcher, n as HubPairing, nt as issueMeshLeafFromCsr, o as PAIRING_CODE_DIGITS, ot as AGENT_UI_UNLOCK_TYP, p as computePairingCommitment, pt as verifyAgentUiUnlockTicket, q as requireProcessMeshCa, r as PairingHttpError, rt as loadMeshCa, s as PAIRING_MAX_CODE_ATTEMPTS, st as AGENT_UI_UNLOCK_USE, tt as issueMeshLeafForNode, u as PAIRING_PIN_DIGITS, ut as isAllowedAgentDashboardReturnTo, v as verifyPairingProof, w as dropProcessPeer, x as Errors, y as MESH_TLS_PORT_HELLO_FIELD, z as RENEWAL_ABANDONED } from "./builtins/system-config/system-config.addon.mjs";
 import "./builtins/system-config/index.mjs";
 import { WinstonDestination, WinstonLoggingAddon } from "./builtins/winston-logging/index.mjs";
 import { C as isModelDownloaded, T as revisionWeightUrl, _ as downloadFile, a as startEventLoopStallMonitor, b as fetchJson, c as createAuthenticatedFileServer, d as resolveFilePath, f as ModelDownloadService, g as deleteModelFromDisk, h as collectModelFiles, i as attributeStall, l as parseRangeHeader, m as adoptModelRevisions, n as STALL_REPORT_MS, o as createFileDataPlaneHandler, r as STALL_TICK_MS, s as contentTypeFor, t as CustomActionRegistry, u as parseTokenizedUrl, v as downloadModel, w as resolveFormatRevision, x as getModelFilePath, y as ensureModel } from "./custom-action-registry-DZSCLBuT.mjs";
-import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-DMFXIlMY.mjs";
+import { A as allFamiliesListenHost, C as caReplacementMarkerFile, D as replaceUnconstrainedLocalCa, E as reissueTlsLeaf, F as registerLanHttpHandler, M as bindPendingLanHttp, N as closeLanHttp, O as retirePreviousLocalCa, P as readLanHttpState, S as validateUploadedTls, T as loadTlsCert, _ as splitPemCertificates, a as storeUploadedCertificate, b as chainsToPublicRoot, c as leafFingerprintOf, d as servedHttpsLeafFingerprint, f as prepareBootTls, g as readTlsMode, h as readTlsAccessStatus, i as revertToGeneratedCertificate, j as applyLanHttp, k as DEFAULT_LAN_HTTP_PORT, l as registerHttpsListener, m as readExtraSans, n as applyCertificateToListener, o as useStoredUploadedCertificate, p as UPLOADED_CA_FILE, r as regenerateCertificate, s as clearHttpsListener, t as createCiaoPublisher, u as reloadHttpsListener, v as writeExtraSans, w as ensureTlsCert, x as checkUploadedCa, y as writeTlsMode } from "./hub-mdns-ciao-DDgdvcQw.mjs";
 import { n as getPlatformKeychainKey, r as setPlatformKeychainKey, t as clearPlatformKeychainKey } from "./platform-key-source-BWlq0jjn.mjs";
 import { n as getSinglePidStats, t as getPidStats } from "./resource-monitor-Di9daRwI.mjs";
-import { _ as backupRecordStoresOf, c as BackupDecryptError, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-DAEsvFY6.mjs";
+import { _ as backupRecordStoresOf, c as BackupDecryptError, f as generateBackupKeyPair, g as backupOrchestratorRecordKinds, h as readBackupEncryptionHeader, l as BackupKeyFormatError, r as prepareRestoreArchive, s as SystemBackupService, t as BackupKeyRequiredError, u as BackupKeyMismatchError } from "./restore-archive-z0XT2g29.mjs";
 import { r as nodeCoralFs, t as classifyCoralAccelerator } from "./coral-accelerators-DBlgWB8k.mjs";
 import { z } from "zod";
 import * as crypto$1 from "node:crypto";
@@ -8359,7 +8359,7 @@ var STAGING_RESIDUE_MIN_AGE_MS = 30 * 6e4;
 *   npm error path …/.staging/install-14820-2026-08-07T12-28-28-875Z/package/package.json
 *
 * which the propagation then reported as `runtime dependency install failed`.
-* Observed on the Mac desktop agent and on little-unraid on 2026-08-07.
+* Observed on the Mac desktop agent and on agent-a on 2026-08-07.
 *
 * So a sweep only removes what cannot be live: not a tree this process is
 * building, and not one young enough to belong to anybody's in-flight install.
@@ -9833,7 +9833,7 @@ function isDirEntry(entry, parentDir) {
 *
 * Measured 2026-08-07/08 on the live cluster:
 *
-*   little-unraid  `@camstack/system.bak-pre-unshadow` — no package.json left,
+*   agent-a  `@camstack/system.bak-pre-unshadow` — no package.json left,
 *                  so not loadable, but the agent main process held five live
 *                  mappings of `better_sqlite3.node` out of it (D87).
 *   macmini        `@camstack/system.bak-pre-1272-1786129145` — still declares
@@ -19433,7 +19433,7 @@ var SocketChannel = class {
 	* `res` frame, or the socket's `close` (which drains `pending`) — so a peer
 	* that receives the request and then neither answers nor closes leaves the
 	* caller pending forever. That is a wedged handler, or a half-open socket
-	* after a child died without a clean teardown, and it is how camera 615 spent
+	* after a child died without a clean teardown, and it is how camera 101 spent
 	* 30+ minutes with every inference permit held by a call that was never
 	* coming back.
 	*/
@@ -22411,7 +22411,7 @@ function buildLinkChain(target, localResolver, hookup) {
 /**
 * Can libva initialise the VA driver on this node's render node? (D926)
 *
-* Measured 2026-10-23 (intel-1.2.509, hub + little-unraid): Intel's iHD 25.2.4
+* Measured 2026-10-23 (intel-1.2.509, hub + agent-a): Intel's iHD 25.2.4
 * exports only `__vaDriverInit_1_22`, the container's Ubuntu libva 2.20 looks
 * for `_1_20`, and `vaInitialize` failed — while the resolver kept offering
 * `qsv, vaapi`. Every session tried, failed and fell back to software: 722

package/dist/kernel/addon-installer.d.ts

@@ -114,7 +114,7 @@ export interface StagingEntryAge {
 *   npm error path …/.staging/install-14820-2026-08-07T12-28-28-875Z/package/package.json
 *
 * which the propagation then reported as `runtime dependency install failed`.
-* Observed on the Mac desktop agent and on little-unraid on 2026-08-07.
+* Observed on the Mac desktop agent and on agent-a on 2026-08-07.
 *
 * So a sweep only removes what cannot be live: not a tree this process is
 * building, and not one young enough to belong to anybody's in-flight install.

package/dist/kernel/heap-watch.d.ts

@@ -242,7 +242,7 @@ export declare function reclaimIntervalMs(passesAtFloor: number, minIntervalMs?:
 * every UDS handshake and every cross-runner cap call is served on it, and a
 * live CPU profile of a boot put `(idle)` at 0.1%). The reclaim pass is a
 * stop-the-world ON that loop, and `took=` prices the PASS without ever pricing
-* what it delays. 590ms against a p99 of 4ms is a visible stall; the same 590ms
+* what it delays. 104ms against a p99 of 4ms is a visible stall; the same 104ms
 * against a p99 of 900ms is noise inside a queue that was already saturated.
 * Those are opposite conclusions, and until now the log could not tell them
 * apart.

package/dist/kernel/moleculer/trpc-links.d.ts

@@ -21,7 +21,7 @@ export interface LocalProviderResolver {
 	getByName(capabilityName: string): unknown | null;
 	/**
 	* The node this resolver's providers run on (e.g. `'hub'`, `'hub/model-studio'`,
-	* `'little-unraid/model-studio'`). When set, {@link localProviderLink} defers a
+	* `'agent-a/model-studio'`). When set, {@link localProviderLink} defers a
 	* call carrying an explicit `nodePin` to a DIFFERENT node instead of
 	* short-circuiting to a co-located provider — so the pin routes to the
 	* intended node (parent → `onUnownedCall` → CapRouteResolver). Symmetric to

package/dist/kernel/transport/socket-channel.d.ts

@@ -45,7 +45,7 @@ export declare class SocketChannel implements LocalChannel {
 	* `res` frame, or the socket's `close` (which drains `pending`) — so a peer
 	* that receives the request and then neither answers nor closes leaves the
 	* caller pending forever. That is a wedged handler, or a half-open socket
-	* after a child died without a clean teardown, and it is how camera 615 spent
+	* after a child died without a clean teardown, and it is how camera 101 spent
 	* 30+ minutes with every inference permit held by a call that was never
 	* coming back.
 	*/

package/dist/logging/formatter.d.ts

@@ -22,7 +22,7 @@
 *
 * Rendered examples:
 *   [hub/winston-logging]        71184  - 04/20/2026, 12:45:53 AM     INFO  Winston logging initialized
-*   [hub/provider-rtsp]          71184  - 04/20/2026, 12:46:01 AM     WARN  [salone] probe failed {err="timeout"}
+*   [hub/provider-rtsp]          71184  - 04/20/2026, 12:46:01 AM     WARN  [hall] probe failed {err="timeout"}
 *   [dev-agent-0/detection]      12345  - 04/20/2026, 12:47:15 AM     ERROR [cortile] no detector {codec=av1}
 */
 import type { LogEntry } from "@camstack/types";

package/dist/{restore-archive-DpkdAuFf.js → restore-archive-B-GiglWt.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist--v3KMKa1.js");
+const require_dist = require("./dist-k--OhKkO.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");

package/dist/{restore-archive-DAEsvFY6.mjs → restore-archive-z0XT2g29.mjs}

@@ -1,4 +1,4 @@
-import { Ji as defineRecordKinds, M as DataStoreDatabaseSchema, x as DATABASE_SNAPSHOT_SUFFIX } from "./dist-BIJXQo_j.mjs";
+import { Ji as defineRecordKinds, M as DataStoreDatabaseSchema, x as DATABASE_SNAPSHOT_SUFFIX } from "./dist-BT_THdzJ.mjs";
 import { z } from "zod";
 import { createCipheriv, createDecipheriv, createHash, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";

package/dist/{retention-DbunrLR4.mjs → retention-DFkmhjeH.mjs}

@@ -1,4 +1,4 @@
-import { $i as historyItemFieldPath, di as HISTORY_DEFAULT_MIN_INTERVAL_MS, ei as DeviceType } from "./dist-BIJXQo_j.mjs";
+import { $i as historyItemFieldPath, di as HISTORY_DEFAULT_MIN_INTERVAL_MS, ei as DeviceType } from "./dist-BT_THdzJ.mjs";
 //#region src/builtins/device-history/store/series-registry.ts
 function subjectIdOf(subject) {
 	return subject.kind === "device" ? `d:${subject.deviceId}` : `n:${subject.nodeId}`;

package/dist/{retention-C71dNCIh.js → retention-DR0_xRTy.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist--v3KMKa1.js");
+const require_dist = require("./dist-k--OhKkO.js");
 //#region src/builtins/device-history/store/series-registry.ts
 function subjectIdOf(subject) {
 	return subject.kind === "device" ? `d:${subject.deviceId}` : `n:${subject.nodeId}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.482",
+  "version": "1.2.484",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",
@@ -12,7 +12,12 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/camstack/server"
+    "url": "https://github.com/camstack/server.git",
+    "directory": "packages/system"
+  },
+  "homepage": "https://camstack-docs.zentik.app",
+  "bugs": {
+    "url": "https://github.com/camstack/server/issues"
   },
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",