@camstack/addon-auth 1.2.120 → 1.2.121

package/dist/{dist-CqttAsPm.js → dist-B2Ca5n6z.js}

@@ -5359,7 +5359,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-Dk-BdnBf.mjs
+//#region ../types/dist/sleep-Bs3xPtSh.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -11984,6 +11984,24 @@ var GetStreamWithCodecInputSchema = object({
 });
 var RtpSourceSchema = object({
 	url: string(),
+	/**
+	* The SENTRY counterpart of {@link url} — the dial that asks for the stream
+	* WITHOUT asking for the camera — or `null` when this camera offers none.
+	*
+	* The broker answers it because the broker is the only thing that can:
+	* eligibility is `sentryEligible` (a BATTERY camera that DECLARES the signals
+	* cap), asked of facts only the broker holds. A consumer re-deriving it from
+	* cap bindings would be a second authority, and two authorities on the same
+	* question is how a composite camera ends up dialling a sleeping camera
+	* because its own copy of the rule was a release behind.
+	*
+	* `null` is a real answer and is never a live url in disguise: a consumer
+	* that silently fell back to {@link url} would perform exactly the wake this
+	* field exists to prevent. Only a PASSTHROUGH acquisition can offer one — a
+	* transcode hands back an egress the broker is feeding itself, which has no
+	* sentry counterpart.
+	*/
+	sentryUrl: string().nullable().optional(),
 	videoCodec: _enum(["H264", "H265"]),
 	audioCodec: string(),
 	resolution: object({
@@ -27369,6 +27387,114 @@ DeviceType.Light, DeviceType.Siren, DeviceType.Switch, method(object({
 	lastChangedAt: number()
 });
 /**
+* camera-grid-layout — the geometry of a COMPOSITE camera, on the camera's own
+* page.
+*
+* ## Why this is a capability and not an addon settings schema
+*
+* It was one, and it did not render. The addon declared the editor as a
+* `type: 'widget'` field inside its own `deviceSettingsSchema()`; the hub
+* returned that section correctly and `ConfigFormField` renders `type:'widget'`
+* perfectly well — and nothing ever asked camera-grid for it. The Cluster →
+* Pipeline → Device Overrides page interrogates a HAND-WRITTEN list of four
+* addons (`PIPELINE_CLUSTER_DEVICE_ADDONS`), whose own comment says an addon
+* not on it "falls off silently".
+*
+* Adding a fifth name to that list would have been the wrong fix twice over:
+* that page is per-camera DETECTION tuning, and a grid's geometry belongs
+* beside PTZ and motion zones on the camera itself — which is exactly where the
+* framework already puts a widget, when the widget is declared on a CAPABILITY.
+* `deviceConfig.ui` is the mechanism (`motion-zones`, `ptz`, `ptz-autotrack`
+* all use it): the framework emits the structural section and the widget
+* self-persists through the cap's own mutations.
+*
+* ## Why one addon may implement it
+*
+* It is a device-scoped NATIVE cap, registered by the grid camera device
+* itself. Nothing else declares a composite camera, so nothing else has a
+* layout — and the device-scoped route means the widget asks THE camera, not
+* "the camera-grid addon", which is what let the old custom-action pair be
+* reached only by a caller that already knew the addon id.
+*
+* ## The tab
+*
+* `streaming`, not a top-tab of its own. A grid's geometry IS what its stream
+* is, so the Streaming tab is where it belongs; a `grid` top-tab would need an
+* entry in `WELL_KNOWN_TAB_MAP` or the device page renders the raw id as the
+* label (measured on the robot camera, 2026-09-06 — a tab called "navigation"
+* next to "PTZ").
+*/
+/** A rectangle in normalized [0,1] coordinates of whatever contains it. */
+var GridNormalizedRectSchema = object({
+	x: number().min(0).max(1),
+	y: number().min(0).max(1),
+	width: number().gt(0).max(1),
+	height: number().gt(0).max(1)
+});
+/**
+* One source camera, the part of its picture taken, and where that part lands.
+*
+* Both rectangles are NORMALIZED (D519): a source camera can change resolution
+* — a profile switch, a firmware update, a substream that comes back different
+* — and a stored PIXEL rectangle would quietly start cutting the wrong region,
+* which is the class of bug nobody files.
+*/
+var GridLayoutCellSchema = object({
+	deviceId: number().int().positive(),
+	/** The part of the SOURCE taken, normalized against the source. */
+	source: GridNormalizedRectSchema,
+	/** Where it lands, normalized against the CANVAS. */
+	cell: GridNormalizedRectSchema
+});
+/**
+* Which profiles this grid can actually compose, and why not.
+*
+* A grid's `high` composes its sources' `high` and its `low` their `low`, so a
+* profile is on offer only when EVERY source can serve it. The refusal NAMES
+* the sources, because "this grid has no low" is not a finding — "615 has no
+* low" is, and it is the one an operator can act on.
+*/
+var GridProfileOfferSchema = object({
+	profile: _enum([
+		"high",
+		"mid",
+		"low"
+	]),
+	offered: boolean(),
+	/** Sources that cannot serve it. Empty when it is offered, or when there are no cells. */
+	missingSources: array(number().int().positive())
+});
+var GridLayoutViewSchema = object({
+	/** The persisted grid row this camera was declared from. */
+	instanceId: string(),
+	deviceId: number().int().nonnegative(),
+	name: string(),
+	/** The canvas the operator laid out — this grid's `high`. mid/low are scaled from it. */
+	width: number().int(),
+	height: number().int(),
+	fps: number().int(),
+	cells: array(GridLayoutCellSchema),
+	/** What the catalog will publish, and what it refuses to. Read-only. */
+	profiles: array(GridProfileOfferSchema)
+});
+var GridLayoutPatchSchema = object({
+	deviceId: number().int().nonnegative(),
+	name: string().min(1).max(160).optional(),
+	width: number().int().min(160).max(7680).optional(),
+	height: number().int().min(120).max(4320).optional(),
+	fps: number().int().min(1).max(60).optional(),
+	/**
+	* The whole cell list at once. A per-cell patch would need an ordering the
+	* editor does not have, and a half-applied layout is a picture nobody asked
+	* for.
+	*/
+	cells: array(GridLayoutCellSchema).max(16)
+});
+DeviceType.Camera, method(object({ deviceId: number().int().nonnegative() }), GridLayoutViewSchema.nullable(), { auth: "admin" }), method(GridLayoutPatchSchema, GridLayoutViewSchema, {
+	kind: "mutation",
+	auth: "admin"
+});
+/**
 * Motion-zones share the same MaskShape vocabulary as privacy-mask — the
 * on-camera motion-detection mask is a single `grid` region (a row-major
 * boolean cell lattice the camera's onboard VMD evaluates). Composing it as
@@ -32397,6 +32523,18 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"cameraGridLayout.getLayout": {
+		capName: "camera-grid-layout",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
+	"cameraGridLayout.saveLayout": {
+		capName: "camera-grid-layout",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"cameraStreams.getBrokerStreams": {
 		capName: "camera-streams",
 		capScope: "device",
@@ -38096,6 +38234,21 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"cameraGridLayout.getLayout": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cameraGridLayout.saveLayout": [{
+		name: "cells",
+		form: "object-array",
+		optional: false,
+		itemField: "deviceId"
+	}, {
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"cameraStreams.getBrokerStreams": [{
 		name: "deviceId",
 		form: "single",

package/dist/{dist-B5CqN9kh.mjs → dist-CpADMZ5r.mjs}

@@ -5359,7 +5359,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-Dk-BdnBf.mjs
+//#region ../types/dist/sleep-Bs3xPtSh.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -11984,6 +11984,24 @@ var GetStreamWithCodecInputSchema = object({
 });
 var RtpSourceSchema = object({
 	url: string(),
+	/**
+	* The SENTRY counterpart of {@link url} — the dial that asks for the stream
+	* WITHOUT asking for the camera — or `null` when this camera offers none.
+	*
+	* The broker answers it because the broker is the only thing that can:
+	* eligibility is `sentryEligible` (a BATTERY camera that DECLARES the signals
+	* cap), asked of facts only the broker holds. A consumer re-deriving it from
+	* cap bindings would be a second authority, and two authorities on the same
+	* question is how a composite camera ends up dialling a sleeping camera
+	* because its own copy of the rule was a release behind.
+	*
+	* `null` is a real answer and is never a live url in disguise: a consumer
+	* that silently fell back to {@link url} would perform exactly the wake this
+	* field exists to prevent. Only a PASSTHROUGH acquisition can offer one — a
+	* transcode hands back an egress the broker is feeding itself, which has no
+	* sentry counterpart.
+	*/
+	sentryUrl: string().nullable().optional(),
 	videoCodec: _enum(["H264", "H265"]),
 	audioCodec: string(),
 	resolution: object({
@@ -27369,6 +27387,114 @@ DeviceType.Light, DeviceType.Siren, DeviceType.Switch, method(object({
 	lastChangedAt: number()
 });
 /**
+* camera-grid-layout — the geometry of a COMPOSITE camera, on the camera's own
+* page.
+*
+* ## Why this is a capability and not an addon settings schema
+*
+* It was one, and it did not render. The addon declared the editor as a
+* `type: 'widget'` field inside its own `deviceSettingsSchema()`; the hub
+* returned that section correctly and `ConfigFormField` renders `type:'widget'`
+* perfectly well — and nothing ever asked camera-grid for it. The Cluster →
+* Pipeline → Device Overrides page interrogates a HAND-WRITTEN list of four
+* addons (`PIPELINE_CLUSTER_DEVICE_ADDONS`), whose own comment says an addon
+* not on it "falls off silently".
+*
+* Adding a fifth name to that list would have been the wrong fix twice over:
+* that page is per-camera DETECTION tuning, and a grid's geometry belongs
+* beside PTZ and motion zones on the camera itself — which is exactly where the
+* framework already puts a widget, when the widget is declared on a CAPABILITY.
+* `deviceConfig.ui` is the mechanism (`motion-zones`, `ptz`, `ptz-autotrack`
+* all use it): the framework emits the structural section and the widget
+* self-persists through the cap's own mutations.
+*
+* ## Why one addon may implement it
+*
+* It is a device-scoped NATIVE cap, registered by the grid camera device
+* itself. Nothing else declares a composite camera, so nothing else has a
+* layout — and the device-scoped route means the widget asks THE camera, not
+* "the camera-grid addon", which is what let the old custom-action pair be
+* reached only by a caller that already knew the addon id.
+*
+* ## The tab
+*
+* `streaming`, not a top-tab of its own. A grid's geometry IS what its stream
+* is, so the Streaming tab is where it belongs; a `grid` top-tab would need an
+* entry in `WELL_KNOWN_TAB_MAP` or the device page renders the raw id as the
+* label (measured on the robot camera, 2026-09-06 — a tab called "navigation"
+* next to "PTZ").
+*/
+/** A rectangle in normalized [0,1] coordinates of whatever contains it. */
+var GridNormalizedRectSchema = object({
+	x: number().min(0).max(1),
+	y: number().min(0).max(1),
+	width: number().gt(0).max(1),
+	height: number().gt(0).max(1)
+});
+/**
+* One source camera, the part of its picture taken, and where that part lands.
+*
+* Both rectangles are NORMALIZED (D519): a source camera can change resolution
+* — a profile switch, a firmware update, a substream that comes back different
+* — and a stored PIXEL rectangle would quietly start cutting the wrong region,
+* which is the class of bug nobody files.
+*/
+var GridLayoutCellSchema = object({
+	deviceId: number().int().positive(),
+	/** The part of the SOURCE taken, normalized against the source. */
+	source: GridNormalizedRectSchema,
+	/** Where it lands, normalized against the CANVAS. */
+	cell: GridNormalizedRectSchema
+});
+/**
+* Which profiles this grid can actually compose, and why not.
+*
+* A grid's `high` composes its sources' `high` and its `low` their `low`, so a
+* profile is on offer only when EVERY source can serve it. The refusal NAMES
+* the sources, because "this grid has no low" is not a finding — "615 has no
+* low" is, and it is the one an operator can act on.
+*/
+var GridProfileOfferSchema = object({
+	profile: _enum([
+		"high",
+		"mid",
+		"low"
+	]),
+	offered: boolean(),
+	/** Sources that cannot serve it. Empty when it is offered, or when there are no cells. */
+	missingSources: array(number().int().positive())
+});
+var GridLayoutViewSchema = object({
+	/** The persisted grid row this camera was declared from. */
+	instanceId: string(),
+	deviceId: number().int().nonnegative(),
+	name: string(),
+	/** The canvas the operator laid out — this grid's `high`. mid/low are scaled from it. */
+	width: number().int(),
+	height: number().int(),
+	fps: number().int(),
+	cells: array(GridLayoutCellSchema),
+	/** What the catalog will publish, and what it refuses to. Read-only. */
+	profiles: array(GridProfileOfferSchema)
+});
+var GridLayoutPatchSchema = object({
+	deviceId: number().int().nonnegative(),
+	name: string().min(1).max(160).optional(),
+	width: number().int().min(160).max(7680).optional(),
+	height: number().int().min(120).max(4320).optional(),
+	fps: number().int().min(1).max(60).optional(),
+	/**
+	* The whole cell list at once. A per-cell patch would need an ordering the
+	* editor does not have, and a half-applied layout is a picture nobody asked
+	* for.
+	*/
+	cells: array(GridLayoutCellSchema).max(16)
+});
+DeviceType.Camera, method(object({ deviceId: number().int().nonnegative() }), GridLayoutViewSchema.nullable(), { auth: "admin" }), method(GridLayoutPatchSchema, GridLayoutViewSchema, {
+	kind: "mutation",
+	auth: "admin"
+});
+/**
 * Motion-zones share the same MaskShape vocabulary as privacy-mask — the
 * on-camera motion-detection mask is a single `grid` region (a row-major
 * boolean cell lattice the camera's onboard VMD evaluates). Composing it as
@@ -32397,6 +32523,18 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"cameraGridLayout.getLayout": {
+		capName: "camera-grid-layout",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
+	"cameraGridLayout.saveLayout": {
+		capName: "camera-grid-layout",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"cameraStreams.getBrokerStreams": {
 		capName: "camera-streams",
 		capScope: "device",
@@ -38096,6 +38234,21 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"cameraGridLayout.getLayout": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cameraGridLayout.saveLayout": [{
+		name: "cells",
+		form: "object-array",
+		optional: false,
+		itemField: "deviceId"
+	}, {
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"cameraStreams.getBrokerStreams": [{
 		name: "deviceId",
 		form: "single",

package/dist/magic-link/auth-magic-link.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-CqttAsPm.js");
+const require_dist = require("../dist-B2Ca5n6z.js");
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.

package/dist/magic-link/auth-magic-link.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-B5CqN9kh.mjs";
+import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-CpADMZ5r.mjs";
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.

package/dist/oidc/auth-oidc.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-CqttAsPm.js");
+const require_dist = require("../dist-B2Ca5n6z.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 //#region node_modules/jose/dist/webapi/lib/buffer_utils.js

package/dist/oidc/auth-oidc.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-B5CqN9kh.mjs";
+import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-CpADMZ5r.mjs";
 import * as crypto$1 from "node:crypto";
 //#region node_modules/jose/dist/webapi/lib/buffer_utils.js
 var encoder = new TextEncoder();

package/dist/webauthn/{_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-B6F7cyn1.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-SS1wxZVd.mjs}

@@ -3,7 +3,7 @@ import "./dist-CYZr2fwk.mjs";
 var e = {
 	"@camstack/sdk": {
 		name: "@camstack/sdk",
-		version: "1.2.116",
+		version: "1.2.117",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.210",
+		version: "1.2.211",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.175",
+		version: "1.2.176",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",

package/dist/webauthn/auth-webauthn.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-CqttAsPm.js");
+const require_dist = require("../dist-B2Ca5n6z.js");
 let stream = require("stream");
 stream = require_chunk.__toESM(stream, 1);
 let http = require("http");

package/dist/webauthn/auth-webauthn.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, d as number, f as object, l as array, n as addonWidgetsSourceCapability, o as userPasskeysCapability, p as string, u as boolean } from "../dist-B5CqN9kh.mjs";
+import { a as loginMethodCapability, c as BaseAddon, d as number, f as object, l as array, n as addonWidgetsSourceCapability, o as userPasskeysCapability, p as string, u as boolean } from "../dist-CpADMZ5r.mjs";
 import { createRequire } from "node:module";
 import Stream from "stream";
 import http from "http";

package/dist/webauthn/{hostInit-B0tO7FTd.mjs → hostInit-DZ6LPJ5b.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.210",
+				version: "1.2.211",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -45,7 +45,7 @@ async function r() {
 				}
 			},
 			"@camstack/sdk": {
-				version: "1.2.116",
+				version: "1.2.117",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.175",
+				version: "1.2.176",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/webauthn/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-B6F7cyn1.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-SS1wxZVd.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-auth",
-  "version": "1.2.120",
+  "version": "1.2.121",
   "description": "Authentication bundle — magic-link, OIDC, and WebAuthn/passkey. Multi-entry npm package shipping 3 addons under a single bundle; each addon keeps its own id, capabilities, and runner.",
   "keywords": [
     "camstack",