@camstack/system 1.2.69 → 1.2.70

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,46 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D7wC-S4p.js");
+const require_dist = require("../../dist-DCLoJf2T.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");
 crypto$1 = require_chunk.__toESM(crypto$1, 1);
-/**
-* Scopes granted to a linked Home Assistant, derived from the tRPC paths the
-* component actually calls. `category:system [create]` was rejected: it would
-* hand `addons.installPackage` to a home-automation bridge.
-*/
-var HOME_ASSISTANT_OAUTH_INTEGRATION = {
-	integrationId: "homeassistant",
-	displayName: "Home Assistant",
-	requestedScopes: [
-		{
-			type: "category",
-			target: "device",
-			access: ["view", "create"]
-		},
-		{
-			type: "capability",
-			target: "device-manager",
-			access: ["view"]
-		},
-		{
-			type: "capability",
-			target: "device-state",
-			access: ["view"]
-		},
-		{
-			type: "capability",
-			target: "pipeline-orchestrator",
-			access: ["view", "create"]
-		}
-	],
-	allowedRedirectPrefixes: ["https://my.home-assistant.io/redirect/oauth"],
-	allowedPrivateHostPaths: ["/auth/external/callback"],
-	requiresPkce: true
-};
-//#endregion
 //#region src/auth/parse-record.ts
 function parseRecord(kind, schema, data) {
 	try {
@@ -6412,6 +6377,126 @@ var ScopedTokenManager = class {
 		}
 		return removed;
 	}
+};
+//#endregion
+//#region src/auth/user-manager.ts
+var USERS_COLLECTION$1 = "users";
+function parseUser(data) {
+	return parseRecord("user", require_dist.UserRecordSchema, data);
+}
+var UserManager = class {
+	storageAccess;
+	auth;
+	config;
+	constructor(storageAccess, auth, config) {
+		this.storageAccess = storageAccess;
+		this.auth = auth;
+		this.config = config;
+	}
+	get store() {
+		return this.storageAccess.getStore();
+	}
+	async create(input) {
+		if (await this.findByUsername(input.username)) throw new Error(`User with username "${input.username}" already exists`);
+		const passwordHash = await this.auth.hashPassword(input.password);
+		const now = Date.now();
+		const record = {
+			id: node_crypto.randomUUID(),
+			username: input.username,
+			passwordHash,
+			isAdmin: input.isAdmin ?? false,
+			allowedProviders: input.allowedProviders ?? "*",
+			allowedDevices: input.allowedDevices ?? {},
+			scopes: input.scopes ?? [],
+			createdAt: now,
+			updatedAt: now
+		};
+		await this.store.insert.mutate({
+			collection: USERS_COLLECTION$1,
+			record: {
+				id: record.id,
+				data: { ...record }
+			}
+		});
+		return record;
+	}
+	async findByUsername(username) {
+		const results = await this.store.query.query({
+			collection: USERS_COLLECTION$1,
+			filter: { where: { username } }
+		});
+		if (results.length === 0) return null;
+		return parseUser(results[0].data);
+	}
+	async findById(id) {
+		const results = await this.store.query.query({
+			collection: USERS_COLLECTION$1,
+			filter: { where: { id } }
+		});
+		if (results.length === 0) return null;
+		return parseUser(results[0].data);
+	}
+	async validateCredentials(username, password) {
+		const user = await this.findByUsername(username);
+		if (!user) return null;
+		return await this.auth.comparePassword(password, user.passwordHash) ? user : null;
+	}
+	async listAll() {
+		return (await this.store.query.query({ collection: USERS_COLLECTION$1 })).map((r) => {
+			const { passwordHash: _ph, ...rest } = parseUser(r.data);
+			return rest;
+		});
+	}
+	async update(id, data) {
+		const existing = await this.findById(id);
+		if (!existing) throw new Error(`User with id "${id}" not found`);
+		await this.store.update.mutate({
+			collection: USERS_COLLECTION$1,
+			id,
+			data: {
+				...existing,
+				...data,
+				updatedAt: Date.now()
+			}
+		});
+	}
+	async delete(id) {
+		await this.store.delete.mutate({
+			collection: USERS_COLLECTION$1,
+			key: id
+		});
+	}
+	async resetPassword(id, newPassword) {
+		const existing = await this.findById(id);
+		if (!existing) throw new Error(`User with id "${id}" not found`);
+		const passwordHash = await this.auth.hashPassword(newPassword);
+		await this.store.update.mutate({
+			collection: USERS_COLLECTION$1,
+			id,
+			data: {
+				...existing,
+				passwordHash,
+				updatedAt: Date.now()
+			}
+		});
+	}
+	async ensureAdminExists() {
+		const adminUsername = this.config.get("auth.adminUsername");
+		const adminPassword = this.config.get("auth.adminPassword");
+		if (!adminUsername || !adminPassword) return;
+		const existing = await this.findByUsername(adminUsername);
+		if (existing) {
+			if (!await this.auth.comparePassword(adminPassword, existing.passwordHash)) await this.resetPassword(existing.id, adminPassword);
+			return;
+		}
+		await this.create({
+			username: adminUsername,
+			password: adminPassword,
+			isAdmin: true,
+			allowedProviders: "*",
+			allowedDevices: {}
+		});
+	}
 }, i$2 = class extends Error {
 	constructor(e, t) {
 		super(e, t), this.name = "OTPError";
@@ -8718,126 +8803,6 @@ var TotpManager = class {
 	}
 };
 //#endregion
-//#region src/auth/user-manager.ts
-var USERS_COLLECTION$1 = "users";
-function parseUser(data) {
-	return parseRecord("user", require_dist.UserRecordSchema, data);
-}
-var UserManager = class {
-	storageAccess;
-	auth;
-	config;
-	constructor(storageAccess, auth, config) {
-		this.storageAccess = storageAccess;
-		this.auth = auth;
-		this.config = config;
-	}
-	get store() {
-		return this.storageAccess.getStore();
-	}
-	async create(input) {
-		if (await this.findByUsername(input.username)) throw new Error(`User with username "${input.username}" already exists`);
-		const passwordHash = await this.auth.hashPassword(input.password);
-		const now = Date.now();
-		const record = {
-			id: node_crypto.randomUUID(),
-			username: input.username,
-			passwordHash,
-			isAdmin: input.isAdmin ?? false,
-			allowedProviders: input.allowedProviders ?? "*",
-			allowedDevices: input.allowedDevices ?? {},
-			scopes: input.scopes ?? [],
-			createdAt: now,
-			updatedAt: now
-		};
-		await this.store.insert.mutate({
-			collection: USERS_COLLECTION$1,
-			record: {
-				id: record.id,
-				data: { ...record }
-			}
-		});
-		return record;
-	}
-	async findByUsername(username) {
-		const results = await this.store.query.query({
-			collection: USERS_COLLECTION$1,
-			filter: { where: { username } }
-		});
-		if (results.length === 0) return null;
-		return parseUser(results[0].data);
-	}
-	async findById(id) {
-		const results = await this.store.query.query({
-			collection: USERS_COLLECTION$1,
-			filter: { where: { id } }
-		});
-		if (results.length === 0) return null;
-		return parseUser(results[0].data);
-	}
-	async validateCredentials(username, password) {
-		const user = await this.findByUsername(username);
-		if (!user) return null;
-		return await this.auth.comparePassword(password, user.passwordHash) ? user : null;
-	}
-	async listAll() {
-		return (await this.store.query.query({ collection: USERS_COLLECTION$1 })).map((r) => {
-			const { passwordHash: _ph, ...rest } = parseUser(r.data);
-			return rest;
-		});
-	}
-	async update(id, data) {
-		const existing = await this.findById(id);
-		if (!existing) throw new Error(`User with id "${id}" not found`);
-		await this.store.update.mutate({
-			collection: USERS_COLLECTION$1,
-			id,
-			data: {
-				...existing,
-				...data,
-				updatedAt: Date.now()
-			}
-		});
-	}
-	async delete(id) {
-		await this.store.delete.mutate({
-			collection: USERS_COLLECTION$1,
-			key: id
-		});
-	}
-	async resetPassword(id, newPassword) {
-		const existing = await this.findById(id);
-		if (!existing) throw new Error(`User with id "${id}" not found`);
-		const passwordHash = await this.auth.hashPassword(newPassword);
-		await this.store.update.mutate({
-			collection: USERS_COLLECTION$1,
-			id,
-			data: {
-				...existing,
-				passwordHash,
-				updatedAt: Date.now()
-			}
-		});
-	}
-	async ensureAdminExists() {
-		const adminUsername = this.config.get("auth.adminUsername");
-		const adminPassword = this.config.get("auth.adminPassword");
-		if (!adminUsername || !adminPassword) return;
-		const existing = await this.findByUsername(adminUsername);
-		if (existing) {
-			if (!await this.auth.comparePassword(adminPassword, existing.passwordHash)) await this.resetPassword(existing.id, adminPassword);
-			return;
-		}
-		await this.create({
-			username: adminUsername,
-			password: adminPassword,
-			isAdmin: true,
-			allowedProviders: "*",
-			allowedDevices: {}
-		});
-	}
-};
-//#endregion
 //#region src/builtins/local-auth/auth-schema.ts
 var USERS_COLLECTION = "users";
 var API_KEYS_COLLECTION = "api_keys";
@@ -9658,22 +9623,14 @@ var LocalAuthAddon = class extends require_dist.BaseAddon {
 				return { valid: await this.totpManager.verify(input.userId, input.code) };
 			}
 		};
-		const homeAssistantOauth = { getDescriptor: async () => HOME_ASSISTANT_OAUTH_INTEGRATION };
-		this.ctx.logger.info("registered auth-provider + user-management + oauth-integration capabilities");
-		return [
-			{
-				capability: require_dist.authProviderCapability,
-				provider: authProvider
-			},
-			{
-				capability: require_dist.userManagementCapability,
-				provider: userMgmt
-			},
-			{
-				capability: require_dist.oauthIntegrationCapability,
-				provider: homeAssistantOauth
-			}
-		];
+		this.ctx.logger.info("registered auth-provider + user-management capabilities");
+		return [{
+			capability: require_dist.authProviderCapability,
+			provider: authProvider
+		}, {
+			capability: require_dist.userManagementCapability,
+			provider: userMgmt
+		}];
 	}
 	/**
 	* Drop auth rows that are dead but were never removed: scoped tokens past
@@ -9712,7 +9669,6 @@ var LocalAuthAddon = class extends require_dist.BaseAddon {
 //#endregion
 exports.ApiKeyManager = ApiKeyManager;
 exports.AuthManager = AuthManager;
-exports.HOME_ASSISTANT_OAUTH_INTEGRATION = HOME_ASSISTANT_OAUTH_INTEGRATION;
 exports.LocalAuthAddon = LocalAuthAddon;
 exports.default = LocalAuthAddon;
 exports.ScopedTokenManager = ScopedTokenManager;

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,43 +1,8 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Q as oauthIntegrationCapability, g as UserRecordSchema, lt as userManagementCapability, m as ScopedTokenSchema, pt as BaseAddon, r as ApiKeyRecordSchema, x as authProviderCapability } from "../../dist-C-QzFJ8v.mjs";
+import { ct as userManagementCapability, ft as BaseAddon, g as UserRecordSchema, m as ScopedTokenSchema, r as ApiKeyRecordSchema, x as authProviderCapability } from "../../dist-CnQXXnK1.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";
-/**
-* Scopes granted to a linked Home Assistant, derived from the tRPC paths the
-* component actually calls. `category:system [create]` was rejected: it would
-* hand `addons.installPackage` to a home-automation bridge.
-*/
-var HOME_ASSISTANT_OAUTH_INTEGRATION = {
-	integrationId: "homeassistant",
-	displayName: "Home Assistant",
-	requestedScopes: [
-		{
-			type: "category",
-			target: "device",
-			access: ["view", "create"]
-		},
-		{
-			type: "capability",
-			target: "device-manager",
-			access: ["view"]
-		},
-		{
-			type: "capability",
-			target: "device-state",
-			access: ["view"]
-		},
-		{
-			type: "capability",
-			target: "pipeline-orchestrator",
-			access: ["view", "create"]
-		}
-	],
-	allowedRedirectPrefixes: ["https://my.home-assistant.io/redirect/oauth"],
-	allowedPrivateHostPaths: ["/auth/external/callback"],
-	requiresPkce: true
-};
-//#endregion
 //#region src/auth/parse-record.ts
 function parseRecord(kind, schema, data) {
 	try {
@@ -6404,6 +6369,126 @@ var ScopedTokenManager = class {
 		}
 		return removed;
 	}
+};
+//#endregion
+//#region src/auth/user-manager.ts
+var USERS_COLLECTION$1 = "users";
+function parseUser(data) {
+	return parseRecord("user", UserRecordSchema, data);
+}
+var UserManager = class {
+	storageAccess;
+	auth;
+	config;
+	constructor(storageAccess, auth, config) {
+		this.storageAccess = storageAccess;
+		this.auth = auth;
+		this.config = config;
+	}
+	get store() {
+		return this.storageAccess.getStore();
+	}
+	async create(input) {
+		if (await this.findByUsername(input.username)) throw new Error(`User with username "${input.username}" already exists`);
+		const passwordHash = await this.auth.hashPassword(input.password);
+		const now = Date.now();
+		const record = {
+			id: crypto$2.randomUUID(),
+			username: input.username,
+			passwordHash,
+			isAdmin: input.isAdmin ?? false,
+			allowedProviders: input.allowedProviders ?? "*",
+			allowedDevices: input.allowedDevices ?? {},
+			scopes: input.scopes ?? [],
+			createdAt: now,
+			updatedAt: now
+		};
+		await this.store.insert.mutate({
+			collection: USERS_COLLECTION$1,
+			record: {
+				id: record.id,
+				data: { ...record }
+			}
+		});
+		return record;
+	}
+	async findByUsername(username) {
+		const results = await this.store.query.query({
+			collection: USERS_COLLECTION$1,
+			filter: { where: { username } }
+		});
+		if (results.length === 0) return null;
+		return parseUser(results[0].data);
+	}
+	async findById(id) {
+		const results = await this.store.query.query({
+			collection: USERS_COLLECTION$1,
+			filter: { where: { id } }
+		});
+		if (results.length === 0) return null;
+		return parseUser(results[0].data);
+	}
+	async validateCredentials(username, password) {
+		const user = await this.findByUsername(username);
+		if (!user) return null;
+		return await this.auth.comparePassword(password, user.passwordHash) ? user : null;
+	}
+	async listAll() {
+		return (await this.store.query.query({ collection: USERS_COLLECTION$1 })).map((r) => {
+			const { passwordHash: _ph, ...rest } = parseUser(r.data);
+			return rest;
+		});
+	}
+	async update(id, data) {
+		const existing = await this.findById(id);
+		if (!existing) throw new Error(`User with id "${id}" not found`);
+		await this.store.update.mutate({
+			collection: USERS_COLLECTION$1,
+			id,
+			data: {
+				...existing,
+				...data,
+				updatedAt: Date.now()
+			}
+		});
+	}
+	async delete(id) {
+		await this.store.delete.mutate({
+			collection: USERS_COLLECTION$1,
+			key: id
+		});
+	}
+	async resetPassword(id, newPassword) {
+		const existing = await this.findById(id);
+		if (!existing) throw new Error(`User with id "${id}" not found`);
+		const passwordHash = await this.auth.hashPassword(newPassword);
+		await this.store.update.mutate({
+			collection: USERS_COLLECTION$1,
+			id,
+			data: {
+				...existing,
+				passwordHash,
+				updatedAt: Date.now()
+			}
+		});
+	}
+	async ensureAdminExists() {
+		const adminUsername = this.config.get("auth.adminUsername");
+		const adminPassword = this.config.get("auth.adminPassword");
+		if (!adminUsername || !adminPassword) return;
+		const existing = await this.findByUsername(adminUsername);
+		if (existing) {
+			if (!await this.auth.comparePassword(adminPassword, existing.passwordHash)) await this.resetPassword(existing.id, adminPassword);
+			return;
+		}
+		await this.create({
+			username: adminUsername,
+			password: adminPassword,
+			isAdmin: true,
+			allowedProviders: "*",
+			allowedDevices: {}
+		});
+	}
 }, i$2 = class extends Error {
 	constructor(e, t) {
 		super(e, t), this.name = "OTPError";
@@ -8710,126 +8795,6 @@ var TotpManager = class {
 	}
 };
 //#endregion
-//#region src/auth/user-manager.ts
-var USERS_COLLECTION$1 = "users";
-function parseUser(data) {
-	return parseRecord("user", UserRecordSchema, data);
-}
-var UserManager = class {
-	storageAccess;
-	auth;
-	config;
-	constructor(storageAccess, auth, config) {
-		this.storageAccess = storageAccess;
-		this.auth = auth;
-		this.config = config;
-	}
-	get store() {
-		return this.storageAccess.getStore();
-	}
-	async create(input) {
-		if (await this.findByUsername(input.username)) throw new Error(`User with username "${input.username}" already exists`);
-		const passwordHash = await this.auth.hashPassword(input.password);
-		const now = Date.now();
-		const record = {
-			id: crypto$2.randomUUID(),
-			username: input.username,
-			passwordHash,
-			isAdmin: input.isAdmin ?? false,
-			allowedProviders: input.allowedProviders ?? "*",
-			allowedDevices: input.allowedDevices ?? {},
-			scopes: input.scopes ?? [],
-			createdAt: now,
-			updatedAt: now
-		};
-		await this.store.insert.mutate({
-			collection: USERS_COLLECTION$1,
-			record: {
-				id: record.id,
-				data: { ...record }
-			}
-		});
-		return record;
-	}
-	async findByUsername(username) {
-		const results = await this.store.query.query({
-			collection: USERS_COLLECTION$1,
-			filter: { where: { username } }
-		});
-		if (results.length === 0) return null;
-		return parseUser(results[0].data);
-	}
-	async findById(id) {
-		const results = await this.store.query.query({
-			collection: USERS_COLLECTION$1,
-			filter: { where: { id } }
-		});
-		if (results.length === 0) return null;
-		return parseUser(results[0].data);
-	}
-	async validateCredentials(username, password) {
-		const user = await this.findByUsername(username);
-		if (!user) return null;
-		return await this.auth.comparePassword(password, user.passwordHash) ? user : null;
-	}
-	async listAll() {
-		return (await this.store.query.query({ collection: USERS_COLLECTION$1 })).map((r) => {
-			const { passwordHash: _ph, ...rest } = parseUser(r.data);
-			return rest;
-		});
-	}
-	async update(id, data) {
-		const existing = await this.findById(id);
-		if (!existing) throw new Error(`User with id "${id}" not found`);
-		await this.store.update.mutate({
-			collection: USERS_COLLECTION$1,
-			id,
-			data: {
-				...existing,
-				...data,
-				updatedAt: Date.now()
-			}
-		});
-	}
-	async delete(id) {
-		await this.store.delete.mutate({
-			collection: USERS_COLLECTION$1,
-			key: id
-		});
-	}
-	async resetPassword(id, newPassword) {
-		const existing = await this.findById(id);
-		if (!existing) throw new Error(`User with id "${id}" not found`);
-		const passwordHash = await this.auth.hashPassword(newPassword);
-		await this.store.update.mutate({
-			collection: USERS_COLLECTION$1,
-			id,
-			data: {
-				...existing,
-				passwordHash,
-				updatedAt: Date.now()
-			}
-		});
-	}
-	async ensureAdminExists() {
-		const adminUsername = this.config.get("auth.adminUsername");
-		const adminPassword = this.config.get("auth.adminPassword");
-		if (!adminUsername || !adminPassword) return;
-		const existing = await this.findByUsername(adminUsername);
-		if (existing) {
-			if (!await this.auth.comparePassword(adminPassword, existing.passwordHash)) await this.resetPassword(existing.id, adminPassword);
-			return;
-		}
-		await this.create({
-			username: adminUsername,
-			password: adminPassword,
-			isAdmin: true,
-			allowedProviders: "*",
-			allowedDevices: {}
-		});
-	}
-};
-//#endregion
 //#region src/builtins/local-auth/auth-schema.ts
 var USERS_COLLECTION = "users";
 var API_KEYS_COLLECTION = "api_keys";
@@ -9650,22 +9615,14 @@ var LocalAuthAddon = class extends BaseAddon {
 				return { valid: await this.totpManager.verify(input.userId, input.code) };
 			}
 		};
-		const homeAssistantOauth = { getDescriptor: async () => HOME_ASSISTANT_OAUTH_INTEGRATION };
-		this.ctx.logger.info("registered auth-provider + user-management + oauth-integration capabilities");
-		return [
-			{
-				capability: authProviderCapability,
-				provider: authProvider
-			},
-			{
-				capability: userManagementCapability,
-				provider: userMgmt
-			},
-			{
-				capability: oauthIntegrationCapability,
-				provider: homeAssistantOauth
-			}
-		];
+		this.ctx.logger.info("registered auth-provider + user-management capabilities");
+		return [{
+			capability: authProviderCapability,
+			provider: authProvider
+		}, {
+			capability: userManagementCapability,
+			provider: userMgmt
+		}];
 	}
 	/**
 	* Drop auth rows that are dead but were never removed: scoped tokens past
@@ -9702,4 +9659,4 @@ var LocalAuthAddon = class extends BaseAddon {
 	}
 };
 //#endregion
-export { LocalAuthAddon, LocalAuthAddon as default, require_safe_buffer as a, require_ms as i, ScopedTokenManager as n, ApiKeyManager as o, AuthManager as r, HOME_ASSISTANT_OAUTH_INTEGRATION as s, UserManager as t };
+export { LocalAuthAddon, LocalAuthAddon as default, require_safe_buffer as a, require_ms as i, ScopedTokenManager as n, ApiKeyManager as o, AuthManager as r, UserManager as t };

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D7wC-S4p.js");
+const require_dist = require("../../dist-DCLoJf2T.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 //#region src/builtins/local-network/local-network.addon.ts

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { K as localNetworkCapability, pt as BaseAddon, zt as EventCategory } from "../../dist-C-QzFJ8v.mjs";
+import { K as localNetworkCapability, Rt as EventCategory, ft as BaseAddon } from "../../dist-CnQXXnK1.mjs";
 import * as os from "node:os";
 //#region src/builtins/local-network/local-network.addon.ts
 /**

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-D7wC-S4p.js");
+const require_dist = require("../../dist-DCLoJf2T.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { pt as BaseAddon, q as logDestinationCapability } from "../../dist-C-QzFJ8v.mjs";
+import { ft as BaseAddon, q as logDestinationCapability } from "../../dist-CnQXXnK1.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label