@camstack/types 1.2.372 → 1.2.374

package/dist/interfaces/addon.d.ts

@@ -564,6 +564,17 @@ export interface AddonContext<TConfig = Record<string, unknown>> {
          * it is absent.
          */
         readDeviceStoreBatch?(deviceIds: readonly number[]): Promise<ReadonlyMap<number, Record<string, unknown>>>;
+        /**
+         * The device ids this addon holds a per-device store for — ids only, no
+         * values. The read side of a fleet-wide pass over the standard per-device
+         * settings (D865): a caller that needs "every device with a config of
+         * mine" lists the ids, then reads them with `readDeviceStoreBatch`.
+         *
+         * OPTIONAL: only the door-backed view can answer it. A view that cannot
+         * must be absent, never an empty list — "none" and "cannot tell" are
+         * different answers.
+         */
+        listDeviceStoreIds?(): Promise<readonly number[]>;
         /**
          * Write a patch into the per-device store. Does NOT touch the
          * addon-level store. Keys preserved as in `writeAddonStore`.

package/dist/interfaces/config-ui.d.ts

@@ -52,7 +52,11 @@ export interface ConfigUISchema {
 export interface ConfigSection {
     readonly id: string;
     readonly title: string;
+    /** `"<namespace>:<key>"` of the translated `title` (D863); `title` stays the English text. */
+    readonly titleKey?: string;
     readonly description?: string;
+    /** `"<namespace>:<key>"` of the translated `description` (D863). */
+    readonly descriptionKey?: string;
     readonly style?: 'card' | 'accordion';
     readonly defaultCollapsed?: boolean;
     readonly columns?: 1 | 2 | 3 | 4;
@@ -123,7 +127,15 @@ export interface ConfigFieldModelApplicability {
 export interface ConfigFieldBase {
     readonly key: string;
     readonly label: string;
+    /**
+     * `"<namespace>:<key>"` of the translated `label` (D863). `label` stays the
+     * mandatory English text: the hub substitutes the catalog text when the
+     * request language has the key, and leaves `label` alone otherwise.
+     */
+    readonly labelKey?: string;
     readonly description?: string;
+    /** `"<namespace>:<key>"` of the translated `description` (D863). */
+    readonly descriptionKey?: string;
     readonly required?: boolean;
     readonly disabled?: boolean;
     readonly placeholder?: string;
@@ -638,6 +650,8 @@ export interface ConfigInfoField {
     type: 'info';
     key: string;
     label: string;
+    /** `"<namespace>:<key>"` of the translated `label` (D863). */
+    labelKey?: string;
     content: string;
     variant?: 'info' | 'warning' | 'success' | 'danger';
     /**
@@ -672,7 +686,9 @@ export interface ConfigObjectArrayField {
     type: 'object-array';
     key: string;
     label: string;
+    labelKey?: string;
     description?: string;
+    descriptionKey?: string;
     /**
      * Column definitions in render order. The `kind` hint controls cell
      * formatting:
@@ -686,6 +702,8 @@ export interface ConfigObjectArrayField {
     columns: ReadonlyArray<{
         readonly key: string;
         readonly label: string;
+        /** `"<namespace>:<key>"` of the translated `label` (D863). */
+        readonly labelKey?: string;
         readonly kind?: 'text' | 'monospace' | 'status' | 'duration' | 'timestamp';
         /** Optional fixed width hint (CSS values: '120px', '20%', etc). */
         readonly width?: string;
@@ -698,6 +716,8 @@ export interface ConfigObjectArrayField {
 export interface ConfigOption {
     value: string;
     label: string;
+    /** `"<namespace>:<key>"` of the translated `label` (D863). */
+    labelKey?: string;
     description?: string;
     icon?: string;
     /**

package/dist/keychain/secrets-access.d.ts

@@ -40,6 +40,12 @@ export interface KeychainTransport {
         readonly deleted: number;
     }>;
     getState(): Promise<KeychainState>;
+    /** The device-removed purge (D864) — the device manager's transport only. */
+    deleteDeviceScope?(input: {
+        readonly deviceId: number;
+    }): Promise<{
+        readonly refs: readonly string[];
+    }>;
 }
 export interface SecretsAccess {
     /** The owner every ref of this handle belongs to. */
@@ -65,6 +71,12 @@ export interface SecretsAccess {
      * forked addon has no way to state an identity the transport would accept.
      */
     readonly forOwner: ((owner: string) => SecretsAccess) | null;
+    /**
+     * The device manager only (D864): delete every value scoped `device/<id>`,
+     * whatever its owner, when the device is removed. The keychain refuses any
+     * other caller; absent where the transport has no such door.
+     */
+    readonly deleteDeviceScope?: (deviceId: number) => Promise<readonly string[]>;
 }
 export interface SecretsAccessOptions {
     readonly owner: string;

package/dist/node.js

@@ -21,8 +21,8 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_composition = require("./composition-DCYnv4I6.js");
-const require_err_msg = require("./err-msg-Dx2Kor0g.js");
+const require_composition = require("./composition-DIp0uE_b.js");
+const require_err_msg = require("./err-msg-Ls8Q6dHO.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 node_fs = __toESM(node_fs);

package/dist/node.mjs

@@ -1,5 +1,5 @@
-import { At as Fmp4BoxSplitter, Ct as FFMPEG_PATH_ENV, Dt as getFfmpegArtifact, Et as FFMPEG_RELEASE, Ot as getFfmpegDownloadUrl, P as compositionSourceKey, Pt as buildFfmpegArgs, Rt as isSoftwareDecode, Tt as ffmpegBinaryName, a as CUSTOMIZATION_BLOCK_NAME_PREFIX, kt as canonicalHash, wt as chooseFfmpegBinary } from "./composition-C-WpVYTX.mjs";
-import { t as errMsg } from "./err-msg-DX6i_MY4.mjs";
+import { At as Fmp4BoxSplitter, Ct as FFMPEG_PATH_ENV, Dt as getFfmpegArtifact, Et as FFMPEG_RELEASE, Ot as getFfmpegDownloadUrl, P as compositionSourceKey, Pt as buildFfmpegArgs, Rt as isSoftwareDecode, Tt as ffmpegBinaryName, a as CUSTOMIZATION_BLOCK_NAME_PREFIX, kt as canonicalHash, wt as chooseFfmpegBinary } from "./composition-EQ9Ok0Ee.mjs";
+import { t as errMsg } from "./err-msg-DLerKiVO.mjs";
 import { createHash, createHmac, randomUUID, timingSafeEqual } from "node:crypto";
 import * as fs from "node:fs";
 import { chmodSync, createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, unlinkSync, writeFileSync } from "node:fs";

package/dist/pipeline/face-rescore-schedule.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The cadence of the automatic whole-archive face rescore (D866).
+ *
+ * One cluster-wide knob in `pipeline-orchestrator`'s GLOBAL settings, read by
+ * `pipeline-analytics` over the hub-routed `addon-settings` cap on every tick.
+ * It lives here for the same reason the detail-crop convention does: the
+ * writer (orchestrator) and the reader (analytics) are different addons, they
+ * never import each other, and a key copied by hand is how a setting silently
+ * stops arriving.
+ */
+export declare const FACE_RESCORE_SECTION_ID = "face-rescore";
+export declare const FACE_RESCORE_INTERVAL_KEY = "faceRescoreIntervalMinutes";
+/** Slider bounds. `0` is "disabled"; anything in 1..9 is raised to `min`. */
+export declare const FACE_RESCORE_INTERVAL_FIELD: {
+    readonly min: 0;
+    readonly max: 1440;
+    readonly step: 5;
+    readonly default: 60;
+};
+/** The smallest period that actually runs; below it (but above 0) is clamped up. */
+export declare const FACE_RESCORE_INTERVAL_MIN_RUNNING = 10;
+/**
+ * Narrow a stored value to minutes. `0` ⇒ disabled; a positive value under
+ * {@link FACE_RESCORE_INTERVAL_MIN_RUNNING} is raised to it; junk or absent ⇒
+ * the default (an unreadable setting must not switch the job off nor storm it).
+ */
+export declare function readFaceRescoreIntervalMinutes(value: unknown): number;
+/** One hydrated section of an `addon-settings.getGlobalSettings` payload. */
+export interface FaceRescoreSettingsView {
+    readonly sections: readonly {
+        readonly fields: readonly unknown[];
+    }[];
+}
+/** The interval out of a hydrated payload; a `null` view (mid-boot) is the default. */
+export declare function pickFaceRescoreIntervalMinutes(view: FaceRescoreSettingsView | null): number;

package/dist/{sleep-DAX0-2v9.mjs → sleep-DRqxtc0C.mjs}

@@ -2922,6 +2922,13 @@ function createSecretsAccess(opts) {
 			return result.deleted;
 		},
 		state: () => opts.transport.getState(),
+		...opts.transport.deleteDeviceScope === void 0 ? {} : { deleteDeviceScope: async (deviceId) => {
+			const purge = opts.transport.deleteDeviceScope;
+			if (purge === void 0) return [];
+			const { refs } = await purge.call(opts.transport, { deviceId });
+			for (const ref of refs) drop(ref);
+			return refs;
+		} },
 		onChange(handler) {
 			handlers.add(handler);
 			return () => {
@@ -5803,6 +5810,60 @@ function isDeviceScopedCap(capName) {
 	return DEVICE_SCOPED_CAPS.has(capName);
 }
 //#endregion
+//#region src/i18n/camstack-error.ts
+/**
+* A user-facing error with a STABLE code (D863).
+*
+* `message` is always the English text, so every consumer that knows nothing
+* of codes (old clients, logs, the mesh) behaves exactly as before. The hub's
+* tRPC error formatter reads `code` + `params` and, when the request language
+* has a text for `server:<code>`, replaces the response `message`; the code
+* stays in the payload (`data.i18n`).
+*/
+/** Dotted lower-case code, e.g. `auth.invalid-credentials`. It is the key in the `server` catalog. */
+var ErrorCodeSchema = z.string().regex(/^[a-z][a-z0-9-]*(\.[a-z0-9-]+)+$/);
+/** What travels in the error payload next to the message. */
+var ErrorI18nPayloadSchema = z.object({
+	code: ErrorCodeSchema,
+	params: z.record(z.string(), z.union([z.string(), z.number()])).optional()
+});
+var CamstackError = class extends Error {
+	i18nCode;
+	i18nParams;
+	constructor(code, params, englishMessage) {
+		super(englishMessage);
+		this.name = "CamstackError";
+		this.i18nCode = code;
+		this.i18nParams = params;
+	}
+};
+/** `throw userError('device.not-found', { id }, 'Device 12 not found')` */
+function userError(code, params, englishFallback) {
+	return new CamstackError(code, params, englishFallback);
+}
+/**
+* Finds a code on `err` or anywhere down its `.cause` chain. Duck-typed on
+* the field so it survives a module boundary (self-contained addons).
+*/
+function readErrorI18n(err) {
+	let current = err;
+	for (let depth = 0; depth < 8; depth++) {
+		if (typeof current !== "object" || current === null) return null;
+		const code = Reflect.get(current, "i18nCode");
+		if (typeof code === "string") {
+			const parsed = ErrorI18nPayloadSchema.safeParse({
+				code,
+				params: Reflect.get(current, "i18nParams")
+			});
+			return parsed.success ? parsed.data : null;
+		}
+		const cause = Reflect.get(current, "cause");
+		if (cause === current) return null;
+		current = cause;
+	}
+	return null;
+}
+//#endregion
 //#region src/util/boot-recovery-backoff.ts
 /**
 * The ONE retry schedule for work that can fail simply because the node was
@@ -6034,4 +6095,4 @@ function sleepCancellable(ms, signal) {
 	});
 }
 //#endregion
-export { toNodeId as $, collectSecretMarkerRefs as $t, viewerUiCapability as A, collectKeychainStoredKeys as An, createSecretsAccess as At, HISTORY_DEFAULT_MIN_INTERVAL_MS as B, PEER_BYTES_STALL_MS as Bt, isZodSecret as C, isSecretClear as Cn, SubscribeAudioChunksResultSchema as Ct, RUNTIME_DEFAULTS as D, makeSecretMarker as Dn, selectAssignedProfileSlots as Dt, HF_REPO as E, isSecretMarkerLike as En, parseProfileBrokerId as Et, deviceCustomAction as F, AUDIO_CHUNK_FORMATS as Fn, registerKnownSecret as Ft, isDeviceConfigCap as G, DisposerChain as Gt, PROVIDER_PIN_FIELD as H, PeerBytesTicketSchema as Ht, adminUiCapability as I, audioChunkBytesPerSample as In, scrubKnownSecrets as It, resolveCapMount as J, mergeSecretStatePaths as Jt, method as K, BaseAddon as Kt, DEFAULT_RUNTIME_STATE_DURABILITY as L, expandAudioChunkToF32le as Ln, shortSecretRefHash as Lt, customAction as M, isKeychainStoredField as Mn, clearKnownSecrets as Mt, defineCustomActions as N, isSecretConfigField as Nn, forgetKnownSecret as Nt, RawStateResultSchema as O, toSecretFieldView as On, resolveSecretViewsIn as Ot, describeCustomActions as P, schemaDeclaresAnyField as Pn, knownSecretCount as Pt, readNodePin as Q, KeychainWriteRefusedError as Qt, DEVICE_SETTINGS_CONTRIBUTION_METHODS as R, isAudioChunkFormat as Rn, PEER_BYTES_CHUNK_BYTES as Rt, collectZodSecretPaths as S, classifySecretWrite as Sn, SubscribeAudioChunksInputSchema as St, HF_BASE_URL as T, isSecretMarker as Tn, makeSourceBrokerId as Tt, event as U, DATAPLANE_SECRET_HEADER as Ut, HISTORY_UNIT_LABELS as V, PEER_BYTES_TICKET_TTL_MS as Vt, expandCapMethods as W, SHARE_VIEW_KINDS as Wt, CAP_NODE_PIN_CONTEXT_KEY as X, secretTreeFromPaths as Xt, systemMethod as Y, parseSecretStatePath as Yt, nodePin as Z, secretTreeFromSchema as Zt, createEventBusSliceSource as _, collectHydratedFieldEntries as _n, ProfileRtspEntrySchema as _t, asJsonArray as a, formatSecretScope as an, scopeKey as at, createSliceHandle as b, resolveHydratedFieldValue as bn, StreamSourceEntrySchema$1 as bt, asString as c, normalizeSecretOwner as cn, BrokerStatsSchema as ct, parseJsonUnknown as d, createDurableState as dn, CamProfileSchema as dt, resolveSecretMarkers as en, MODEL_FORMATS as et, hfModelUrl as f, createEvent as fn, CamStreamKindSchema as ft, createDeviceProxy as g, WELL_KNOWN_TAB_MAP as gn, FrameHandleSchema as gt, isDeviceScopedCap as h, WELL_KNOWN_TABS as hn, DecodedAudioChunkSchema as ht, asBoolean as i, buildSecretRef as in, readinessKey as it, DEVICE_CHILDREN_BATCH_MAX as j, collectSecretConfigKeys as jn, MIN_SCRUBBED_LENGTH as jt, deviceOpsCapability as k, REDACTED_SECRET as kn, REVALIDATE_AFTER_MS as kt, parseJsonArray as l, parseSecretRef as ln, BrokerStatusSchema as lt, DEVICE_SCOPED_CAPS as m, isEvent as mn, CameraStreamSchema as mt, sleepCancellable as n, SECRET_REF_SCHEME as nn, ReadinessTimeoutError as nt, asJsonObject as o, globalSecretScope as on, AudioChunkFormatSchema as ot, BOOT_RECOVERY_BACKOFF_MS as p, emitReadiness as pn, CamStreamResolutionSchema as pt, optionalMethod as q, normalizeAddonInitResult as qt, maskUrlCredentials as r, arrayItemFieldPath as rn, emitDownForOwnedCaps as rt, asNumber as s, isSecretRef as sn, AudioStreamPickSchema as st, sleep as t, transformSecretWrite as tn, ReadinessRegistry as tt, parseJsonObject as u, normalizeNodeId as un, CAM_PROFILE_ORDER as ut, createLazyTrpcSource as v, collectHydratedFieldValues as vn, ProfileSlotSchema as vt, DEFAULT_TOKEN_EXPIRY as w, isSecretFieldView as wn, makeProfileBrokerId as wt, SECRET_META as x, SECRET_CLEAR as xn, StreamSourceSchema as xt, createMirrorSource as y, hydrateSchema as yn, ProfileSlotStatusSchema as yt, DEVICE_STATUS_METHOD as z, PEER_BYTES_MAX_OUTSTANDING as zt };
+export { resolveCapMount as $, mergeSecretStatePaths as $t, HF_BASE_URL as A, isSecretMarker as An, makeSourceBrokerId as At, deviceCustomAction as B, AUDIO_CHUNK_FORMATS as Bn, registerKnownSecret as Bt, createLazyTrpcSource as C, collectHydratedFieldValues as Cn, ProfileSlotSchema as Ct, collectZodSecretPaths as D, classifySecretWrite as Dn, SubscribeAudioChunksInputSchema as Dt, SECRET_META as E, SECRET_CLEAR as En, StreamSourceSchema as Et, viewerUiCapability as F, collectKeychainStoredKeys as Fn, createSecretsAccess as Ft, HISTORY_DEFAULT_MIN_INTERVAL_MS as G, PEER_BYTES_STALL_MS as Gt, DEFAULT_RUNTIME_STATE_DURABILITY as H, expandAudioChunkToF32le as Hn, shortSecretRefHash as Ht, DEVICE_CHILDREN_BATCH_MAX as I, collectSecretConfigKeys as In, MIN_SCRUBBED_LENGTH as It, event as J, DATAPLANE_SECRET_HEADER as Jt, HISTORY_UNIT_LABELS as K, PEER_BYTES_TICKET_TTL_MS as Kt, customAction as L, isKeychainStoredField as Ln, clearKnownSecrets as Lt, RUNTIME_DEFAULTS as M, makeSecretMarker as Mn, selectAssignedProfileSlots as Mt, RawStateResultSchema as N, toSecretFieldView as Nn, resolveSecretViewsIn as Nt, isZodSecret as O, isSecretClear as On, SubscribeAudioChunksResultSchema as Ot, deviceOpsCapability as P, REDACTED_SECRET as Pn, REVALIDATE_AFTER_MS as Pt, optionalMethod as Q, normalizeAddonInitResult as Qt, defineCustomActions as R, isSecretConfigField as Rn, forgetKnownSecret as Rt, createEventBusSliceSource as S, collectHydratedFieldEntries as Sn, ProfileRtspEntrySchema as St, createSliceHandle as T, resolveHydratedFieldValue as Tn, StreamSourceEntrySchema$1 as Tt, DEVICE_SETTINGS_CONTRIBUTION_METHODS as U, isAudioChunkFormat as Un, PEER_BYTES_CHUNK_BYTES as Ut, adminUiCapability as V, audioChunkBytesPerSample as Vn, scrubKnownSecrets as Vt, DEVICE_STATUS_METHOD as W, PEER_BYTES_MAX_OUTSTANDING as Wt, isDeviceConfigCap as X, DisposerChain as Xt, expandCapMethods as Y, SHARE_VIEW_KINDS as Yt, method as Z, BaseAddon as Zt, readErrorI18n as _, createEvent as _n, CamStreamKindSchema as _t, asJsonArray as a, resolveSecretMarkers as an, MODEL_FORMATS as at, isDeviceScopedCap as b, WELL_KNOWN_TABS as bn, DecodedAudioChunkSchema as bt, asString as c, arrayItemFieldPath as cn, emitDownForOwnedCaps as ct, parseJsonUnknown as d, globalSecretScope as dn, AudioChunkFormatSchema as dt, parseSecretStatePath as en, systemMethod as et, hfModelUrl as f, isSecretRef as fn, AudioStreamPickSchema as ft, ErrorI18nPayloadSchema as g, createDurableState as gn, CamProfileSchema as gt, ErrorCodeSchema as h, normalizeNodeId as hn, CAM_PROFILE_ORDER as ht, asBoolean as i, collectSecretMarkerRefs as in, toNodeId as it, HF_REPO as j, isSecretMarkerLike as jn, parseProfileBrokerId as jt, DEFAULT_TOKEN_EXPIRY as k, isSecretFieldView as kn, makeProfileBrokerId as kt, parseJsonArray as l, buildSecretRef as ln, readinessKey as lt, CamstackError as m, parseSecretRef as mn, BrokerStatusSchema as mt, sleepCancellable as n, secretTreeFromSchema as nn, nodePin as nt, asJsonObject as o, transformSecretWrite as on, ReadinessRegistry as ot, BOOT_RECOVERY_BACKOFF_MS as p, normalizeSecretOwner as pn, BrokerStatsSchema as pt, PROVIDER_PIN_FIELD as q, PeerBytesTicketSchema as qt, maskUrlCredentials as r, KeychainWriteRefusedError as rn, readNodePin as rt, asNumber as s, SECRET_REF_SCHEME as sn, ReadinessTimeoutError as st, sleep as t, secretTreeFromPaths as tn, CAP_NODE_PIN_CONTEXT_KEY as tt, parseJsonObject as u, formatSecretScope as un, scopeKey as ut, userError as v, emitReadiness as vn, CamStreamResolutionSchema as vt, createMirrorSource as w, hydrateSchema as wn, ProfileSlotStatusSchema as wt, createDeviceProxy as x, WELL_KNOWN_TAB_MAP as xn, FrameHandleSchema as xt, DEVICE_SCOPED_CAPS as y, isEvent as yn, CameraStreamSchema as yt, describeCustomActions as z, schemaDeclaresAnyField as zn, knownSecretCount as zt };

package/dist/{sleep-DnQ5WsMI.js → sleep-rqlHXgwb.js}

@@ -2922,6 +2922,13 @@ function createSecretsAccess(opts) {
 			return result.deleted;
 		},
 		state: () => opts.transport.getState(),
+		...opts.transport.deleteDeviceScope === void 0 ? {} : { deleteDeviceScope: async (deviceId) => {
+			const purge = opts.transport.deleteDeviceScope;
+			if (purge === void 0) return [];
+			const { refs } = await purge.call(opts.transport, { deviceId });
+			for (const ref of refs) drop(ref);
+			return refs;
+		} },
 		onChange(handler) {
 			handlers.add(handler);
 			return () => {
@@ -5803,6 +5810,60 @@ function isDeviceScopedCap(capName) {
 	return DEVICE_SCOPED_CAPS.has(capName);
 }
 //#endregion
+//#region src/i18n/camstack-error.ts
+/**
+* A user-facing error with a STABLE code (D863).
+*
+* `message` is always the English text, so every consumer that knows nothing
+* of codes (old clients, logs, the mesh) behaves exactly as before. The hub's
+* tRPC error formatter reads `code` + `params` and, when the request language
+* has a text for `server:<code>`, replaces the response `message`; the code
+* stays in the payload (`data.i18n`).
+*/
+/** Dotted lower-case code, e.g. `auth.invalid-credentials`. It is the key in the `server` catalog. */
+var ErrorCodeSchema = zod.z.string().regex(/^[a-z][a-z0-9-]*(\.[a-z0-9-]+)+$/);
+/** What travels in the error payload next to the message. */
+var ErrorI18nPayloadSchema = zod.z.object({
+	code: ErrorCodeSchema,
+	params: zod.z.record(zod.z.string(), zod.z.union([zod.z.string(), zod.z.number()])).optional()
+});
+var CamstackError = class extends Error {
+	i18nCode;
+	i18nParams;
+	constructor(code, params, englishMessage) {
+		super(englishMessage);
+		this.name = "CamstackError";
+		this.i18nCode = code;
+		this.i18nParams = params;
+	}
+};
+/** `throw userError('device.not-found', { id }, 'Device 12 not found')` */
+function userError(code, params, englishFallback) {
+	return new CamstackError(code, params, englishFallback);
+}
+/**
+* Finds a code on `err` or anywhere down its `.cause` chain. Duck-typed on
+* the field so it survives a module boundary (self-contained addons).
+*/
+function readErrorI18n(err) {
+	let current = err;
+	for (let depth = 0; depth < 8; depth++) {
+		if (typeof current !== "object" || current === null) return null;
+		const code = Reflect.get(current, "i18nCode");
+		if (typeof code === "string") {
+			const parsed = ErrorI18nPayloadSchema.safeParse({
+				code,
+				params: Reflect.get(current, "i18nParams")
+			});
+			return parsed.success ? parsed.data : null;
+		}
+		const cause = Reflect.get(current, "cause");
+		if (cause === current) return null;
+		current = cause;
+	}
+	return null;
+}
+//#endregion
 //#region src/util/boot-recovery-backoff.ts
 /**
 * The ONE retry schedule for work that can fail simply because the node was
@@ -6112,6 +6173,12 @@ Object.defineProperty(exports, "CameraStreamSchema", {
 		return CameraStreamSchema;
 	}
 });
+Object.defineProperty(exports, "CamstackError", {
+	enumerable: true,
+	get: function() {
+		return CamstackError;
+	}
+});
 Object.defineProperty(exports, "DATAPLANE_SECRET_HEADER", {
 	enumerable: true,
 	get: function() {
@@ -6166,6 +6233,18 @@ Object.defineProperty(exports, "DisposerChain", {
 		return DisposerChain;
 	}
 });
+Object.defineProperty(exports, "ErrorCodeSchema", {
+	enumerable: true,
+	get: function() {
+		return ErrorCodeSchema;
+	}
+});
+Object.defineProperty(exports, "ErrorI18nPayloadSchema", {
+	enumerable: true,
+	get: function() {
+		return ErrorI18nPayloadSchema;
+	}
+});
 Object.defineProperty(exports, "FrameHandleSchema", {
 	enumerable: true,
 	get: function() {
@@ -6784,6 +6863,12 @@ Object.defineProperty(exports, "parseSecretStatePath", {
 		return parseSecretStatePath;
 	}
 });
+Object.defineProperty(exports, "readErrorI18n", {
+	enumerable: true,
+	get: function() {
+		return readErrorI18n;
+	}
+});
 Object.defineProperty(exports, "readNodePin", {
 	enumerable: true,
 	get: function() {
@@ -6904,6 +6989,12 @@ Object.defineProperty(exports, "transformSecretWrite", {
 		return transformSecretWrite;
 	}
 });
+Object.defineProperty(exports, "userError", {
+	enumerable: true,
+	get: function() {
+		return userError;
+	}
+});
 Object.defineProperty(exports, "viewerUiCapability", {
 	enumerable: true,
 	get: function() {

package/dist/system/server-name.d.ts

@@ -0,0 +1,35 @@
+import { z } from 'zod';
+/**
+ * The hub's human name (D861): ONE `system-settings` row, `server.name`.
+ *
+ * Nothing writes it by itself. An unset name is not an error and not a stored
+ * default: every reader falls back to the machine hostname and says so with
+ * `isDefault: true`, so a consumer can tell a name somebody chose from one the
+ * hub made up.
+ */
+/** The `system-settings` key of the stored name. */
+export declare const SERVER_NAME_SETTING_KEY = "server.name";
+/** The longest a name may be, after trimming. */
+export declare const SERVER_NAME_MAX_LENGTH = 48;
+/** A name an operator may save: trimmed, 1-48 characters, no control characters. */
+export declare const ServerNameSchema: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
+/** What every reader gets: the name to show, and whether the hub chose it itself. */
+export declare const ServerNameInfoSchema: z.ZodObject<{
+    name: z.ZodString;
+    isDefault: z.ZodBoolean;
+}, z.core.$strip>;
+export type ServerNameInfo = z.infer<typeof ServerNameInfoSchema>;
+/** What an unset name shows when the hostname says nothing about the hub. */
+export declare const SERVER_NAME_FALLBACK = "CamStack";
+/**
+ * The hostname without its domain (`nas.lan.example` becomes `nas`). A hostname
+ * that names nothing (empty, `localhost`, a container id) yields
+ * {@link SERVER_NAME_FALLBACK}.
+ */
+export declare function shortHostname(hostname: string): string;
+/**
+ * Resolve a stored value (whatever the row held, `undefined` when unset) and the
+ * machine hostname into what readers show. A stored value that does not
+ * validate is treated as unset: a damaged row must not title the hub.
+ */
+export declare function resolveServerName(stored: unknown, hostname: string): ServerNameInfo;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/types",
-  "version": "1.2.372",
+  "version": "1.2.374",
   "description": "Shared types, interfaces, and model catalogs for the CamStack detection ecosystem",
   "keywords": [
     "camstack",