@camstack/addon-auth 1.2.129 → 1.2.130

package/dist/{hub-browser-origin-lAiHaCMe.mjs → hub-browser-origin-B1o5vmQX.mjs}

@@ -16092,6 +16092,12 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	kind: "mutation",
 	auth: "admin"
 });
+var HUB_ADDRESS_ROLES = [
+	"appConnections",
+	"notificationTaps",
+	"internal",
+	"publicEndpoint"
+];
 /**
 * Transport bounds for AI capability methods.
 *
@@ -20271,7 +20277,13 @@ var NcAlarmModeDelaysListSchema = array(object({
 	* Absent = false (logged, not sent). Even when true it is not sent when that same sensor
 	* is the one that starts the entry delay — the entry-delay notification already names it.
 	*/
-	notifySensorRewatched: boolean().optional()
+	notifySensorRewatched: boolean().optional(),
+	/**
+	* D735: notify "ignored" when a sensor this arm bypassed really MOVED while armed (its own
+	* change time is after the arm) and set nothing off. Absent = false (logged, not sent). A
+	* re-sync, a recovery from `unavailable` or a duplicate is never announced, switch or not.
+	*/
+	notifySensorIgnored: boolean().optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 var NcAlarmModeDelaysEditListSchema = array(object({
 	mode: AlarmArmModeSchema,
@@ -20284,7 +20296,9 @@ var NcAlarmModeDelaysEditListSchema = array(object({
 	/** D706: set the switch, or `null` to clear it (back to the default, false). */
 	notifyDuringEntryDelay: boolean().nullable().optional(),
 	/** D706: set the switch, or `null` to clear it (back to the default, false). */
-	notifySensorRewatched: boolean().nullable().optional()
+	notifySensorRewatched: boolean().nullable().optional(),
+	/** D735: set the switch, or `null` to clear it (back to the default, false). */
+	notifySensorIgnored: boolean().nullable().optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
 var NcAlarmNonBlockingEditSchema = object({
@@ -30824,7 +30838,7 @@ var GetConnectionEndpointsResultSchema = object({
 	localPort: AdvertisedLocalPortSchema
 });
 /**
-* The address flagged for notification links. `baseUrl: null` = AUTO, which
+* The address flagged for notification taps (`notificationTaps`). `baseUrl: null` = AUTO, which
 * since D709 is the CamStack app link; `resolved` reports the effective value,
 * so the UI can show it either way.
 */
@@ -30859,8 +30873,8 @@ var ViewerEndpointsSchema = object({
 });
 /**
 * DEPRECATED compatibility shape of `getHubAddresses` (D729 amendment, kept
-* one release for addons built against it): `cluster` is the `agents` role,
-* `browser` the `signIn` role; `override` is the flagged address.
+* for addons built against it): `cluster` is the `internal` role, `browser`
+* the `publicEndpoint` role; `override` is the flagged address.
 */
 var HubAddressSnapshotSchema = object({
 	override: string().nullable(),
@@ -30876,15 +30890,11 @@ var HubAddressesSchema = object({
 	browser: HubAddressSnapshotSchema
 });
 /**
-* What an address is used for (`hub-address.ts`). `viewer` is many-valued;
-* `notifications`, `agents` and `signIn` are carried by at most one address.
+* What an address is used for (`hub-address.ts`, D734). `appConnections` is
+* many-valued; `notificationTaps`, `publicEndpoint` and `internal` are carried
+* by at most one address.
 */
-var HubAddressRoleSchema = _enum([
-	"viewer",
-	"notifications",
-	"agents",
-	"signIn"
-]);
+var HubAddressRoleSchema = _enum(HUB_ADDRESS_ROLES);
 var RoleSourceSchema = _enum([
 	"flagged",
 	"auto",
@@ -30898,8 +30908,8 @@ var HubAddressRoleResolutionSchema = object({
 	resolved: string().nullable(),
 	source: RoleSourceSchema
 });
-var HubViewerResolutionSchema = object({
-	/** The addresses flagged `viewer`, or empty = automatic. */
+var HubAppConnectionsResolutionSchema = object({
+	/** The addresses flagged `appConnections`, or empty = automatic. */
 	flagged: array(string()).readonly(),
 	/** What the apps race right now. */
 	resolved: array(string()).readonly(),
@@ -30919,10 +30929,10 @@ var HubAddressBookSchema = object({
 		eligible: array(HubAddressRoleSchema).readonly()
 	})).readonly(),
 	roles: object({
-		viewer: HubViewerResolutionSchema,
-		notifications: HubAddressRoleResolutionSchema,
-		agents: HubAddressRoleResolutionSchema,
-		signIn: HubAddressRoleResolutionSchema
+		appConnections: HubAppConnectionsResolutionSchema,
+		notificationTaps: HubAddressRoleResolutionSchema,
+		internal: HubAddressRoleResolutionSchema,
+		publicEndpoint: HubAddressRoleResolutionSchema
 	}),
 	/** The `hub=` an app link carries (D709), or null. */
 	appLinkHub: string().nullable()
@@ -30970,7 +30980,7 @@ method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(obje
 	*  tunnel always emits `https://` regardless. */
 	scheme: _enum(["http", "https"]).optional(),
 	/** Append the CamStack app link entry (`kind: 'app-link'`, D709) —
-	*  an address notification links can be flagged with, not a hub
+	*  an address notification taps can be flagged with, not a hub
 	*  route. Default `false`: racers and rankers never see it. */
 	includeAppLink: boolean().optional()
 }), GetConnectionEndpointsResultSchema), method(_void(), NotificationEndpointSchema), method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }), method(_void(), ViewerEndpointsSchema), method(object({ baseUrls: array(string()).readonly() }), ViewerEndpointsSchema, { kind: "mutation" }), method(object({ scheme: _enum(["http", "https"]).optional() }).optional(), HubAddressBookSchema), method(object({
@@ -48866,7 +48876,7 @@ var MB = 1024 * 1024;
 //#region src/hub-browser-origin.ts
 async function hubBrowserOrigin(localNetwork, logger) {
 	try {
-		return (await localNetwork.getAddresses.query()).roles.signIn.resolved;
+		return (await localNetwork.getAddresses.query()).roles.publicEndpoint.resolved;
 	} catch (err) {
 		logger.warn("hub address unavailable from local-network — using the localhost default", { meta: { error: err instanceof Error ? err.message : String(err) } });
 		return null;

package/dist/{hub-browser-origin-Cd5W-H0b.js → hub-browser-origin-C-u2l9VC.js}

@@ -16093,6 +16093,12 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	kind: "mutation",
 	auth: "admin"
 });
+var HUB_ADDRESS_ROLES = [
+	"appConnections",
+	"notificationTaps",
+	"internal",
+	"publicEndpoint"
+];
 /**
 * Transport bounds for AI capability methods.
 *
@@ -20272,7 +20278,13 @@ var NcAlarmModeDelaysListSchema = array(object({
 	* Absent = false (logged, not sent). Even when true it is not sent when that same sensor
 	* is the one that starts the entry delay — the entry-delay notification already names it.
 	*/
-	notifySensorRewatched: boolean().optional()
+	notifySensorRewatched: boolean().optional(),
+	/**
+	* D735: notify "ignored" when a sensor this arm bypassed really MOVED while armed (its own
+	* change time is after the arm) and set nothing off. Absent = false (logged, not sent). A
+	* re-sync, a recovery from `unavailable` or a duplicate is never announced, switch or not.
+	*/
+	notifySensorIgnored: boolean().optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 var NcAlarmModeDelaysEditListSchema = array(object({
 	mode: AlarmArmModeSchema,
@@ -20285,7 +20297,9 @@ var NcAlarmModeDelaysEditListSchema = array(object({
 	/** D706: set the switch, or `null` to clear it (back to the default, false). */
 	notifyDuringEntryDelay: boolean().nullable().optional(),
 	/** D706: set the switch, or `null` to clear it (back to the default, false). */
-	notifySensorRewatched: boolean().nullable().optional()
+	notifySensorRewatched: boolean().nullable().optional(),
+	/** D735: set the switch, or `null` to clear it (back to the default, false). */
+	notifySensorIgnored: boolean().nullable().optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
 var NcAlarmNonBlockingEditSchema = object({
@@ -30825,7 +30839,7 @@ var GetConnectionEndpointsResultSchema = object({
 	localPort: AdvertisedLocalPortSchema
 });
 /**
-* The address flagged for notification links. `baseUrl: null` = AUTO, which
+* The address flagged for notification taps (`notificationTaps`). `baseUrl: null` = AUTO, which
 * since D709 is the CamStack app link; `resolved` reports the effective value,
 * so the UI can show it either way.
 */
@@ -30860,8 +30874,8 @@ var ViewerEndpointsSchema = object({
 });
 /**
 * DEPRECATED compatibility shape of `getHubAddresses` (D729 amendment, kept
-* one release for addons built against it): `cluster` is the `agents` role,
-* `browser` the `signIn` role; `override` is the flagged address.
+* for addons built against it): `cluster` is the `internal` role, `browser`
+* the `publicEndpoint` role; `override` is the flagged address.
 */
 var HubAddressSnapshotSchema = object({
 	override: string().nullable(),
@@ -30877,15 +30891,11 @@ var HubAddressesSchema = object({
 	browser: HubAddressSnapshotSchema
 });
 /**
-* What an address is used for (`hub-address.ts`). `viewer` is many-valued;
-* `notifications`, `agents` and `signIn` are carried by at most one address.
+* What an address is used for (`hub-address.ts`, D734). `appConnections` is
+* many-valued; `notificationTaps`, `publicEndpoint` and `internal` are carried
+* by at most one address.
 */
-var HubAddressRoleSchema = _enum([
-	"viewer",
-	"notifications",
-	"agents",
-	"signIn"
-]);
+var HubAddressRoleSchema = _enum(HUB_ADDRESS_ROLES);
 var RoleSourceSchema = _enum([
 	"flagged",
 	"auto",
@@ -30899,8 +30909,8 @@ var HubAddressRoleResolutionSchema = object({
 	resolved: string().nullable(),
 	source: RoleSourceSchema
 });
-var HubViewerResolutionSchema = object({
-	/** The addresses flagged `viewer`, or empty = automatic. */
+var HubAppConnectionsResolutionSchema = object({
+	/** The addresses flagged `appConnections`, or empty = automatic. */
 	flagged: array(string()).readonly(),
 	/** What the apps race right now. */
 	resolved: array(string()).readonly(),
@@ -30920,10 +30930,10 @@ var HubAddressBookSchema = object({
 		eligible: array(HubAddressRoleSchema).readonly()
 	})).readonly(),
 	roles: object({
-		viewer: HubViewerResolutionSchema,
-		notifications: HubAddressRoleResolutionSchema,
-		agents: HubAddressRoleResolutionSchema,
-		signIn: HubAddressRoleResolutionSchema
+		appConnections: HubAppConnectionsResolutionSchema,
+		notificationTaps: HubAddressRoleResolutionSchema,
+		internal: HubAddressRoleResolutionSchema,
+		publicEndpoint: HubAddressRoleResolutionSchema
 	}),
 	/** The `hub=` an app link carries (D709), or null. */
 	appLinkHub: string().nullable()
@@ -30971,7 +30981,7 @@ method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(obje
 	*  tunnel always emits `https://` regardless. */
 	scheme: _enum(["http", "https"]).optional(),
 	/** Append the CamStack app link entry (`kind: 'app-link'`, D709) —
-	*  an address notification links can be flagged with, not a hub
+	*  an address notification taps can be flagged with, not a hub
 	*  route. Default `false`: racers and rankers never see it. */
 	includeAppLink: boolean().optional()
 }), GetConnectionEndpointsResultSchema), method(_void(), NotificationEndpointSchema), method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }), method(_void(), ViewerEndpointsSchema), method(object({ baseUrls: array(string()).readonly() }), ViewerEndpointsSchema, { kind: "mutation" }), method(object({ scheme: _enum(["http", "https"]).optional() }).optional(), HubAddressBookSchema), method(object({
@@ -48867,7 +48877,7 @@ var MB = 1024 * 1024;
 //#region src/hub-browser-origin.ts
 async function hubBrowserOrigin(localNetwork, logger) {
 	try {
-		return (await localNetwork.getAddresses.query()).roles.signIn.resolved;
+		return (await localNetwork.getAddresses.query()).roles.publicEndpoint.resolved;
 	} catch (err) {
 		logger.warn("hub address unavailable from local-network — using the localhost default", { meta: { error: err instanceof Error ? err.message : String(err) } });
 		return null;

package/dist/magic-link/auth-magic-link.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../chunk-Cek0wNdY.js");
-const require_hub_browser_origin = require("../hub-browser-origin-Cd5W-H0b.js");
+const require_hub_browser_origin = require("../hub-browser-origin-C-u2l9VC.js");
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.

package/dist/magic-link/auth-magic-link.addon.mjs

@@ -1,4 +1,4 @@
-import { a as buildAddonRouteProvider, c as errMsg, i as authProviderCapability, l as BaseAddon, n as addonRoutesCapability, o as loginMethodCapability, t as hubBrowserOrigin } from "../hub-browser-origin-lAiHaCMe.mjs";
+import { a as buildAddonRouteProvider, c as errMsg, i as authProviderCapability, l as BaseAddon, n as addonRoutesCapability, o as loginMethodCapability, t as hubBrowserOrigin } from "../hub-browser-origin-B1o5vmQX.mjs";
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.

package/dist/oidc/auth-oidc.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-Cek0wNdY.js");
-const require_hub_browser_origin = require("../hub-browser-origin-Cd5W-H0b.js");
+const require_hub_browser_origin = require("../hub-browser-origin-C-u2l9VC.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 //#region ../../node_modules/jose/dist/webapi/lib/buffer_utils.js

package/dist/oidc/auth-oidc.addon.mjs

@@ -1,4 +1,4 @@
-import { a as buildAddonRouteProvider, c as errMsg, i as authProviderCapability, l as BaseAddon, n as addonRoutesCapability, o as loginMethodCapability, t as hubBrowserOrigin } from "../hub-browser-origin-lAiHaCMe.mjs";
+import { a as buildAddonRouteProvider, c as errMsg, i as authProviderCapability, l as BaseAddon, n as addonRoutesCapability, o as loginMethodCapability, t as hubBrowserOrigin } from "../hub-browser-origin-B1o5vmQX.mjs";
 import * as crypto$1 from "node:crypto";
 //#region ../../node_modules/jose/dist/webapi/lib/buffer_utils.js
 var encoder = new TextEncoder(), decoder = new TextDecoder(), strictDecoder = new TextDecoder("utf-8", { fatal: !0 });

package/dist/webauthn/{_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-tSRn6o3N.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-v7lvfZM3.mjs}

@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.310",
+		version: "1.2.311",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.236",
+		version: "1.2.237",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",

package/dist/webauthn/auth-webauthn.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-Cek0wNdY.js");
-const require_hub_browser_origin = require("../hub-browser-origin-Cd5W-H0b.js");
+const require_hub_browser_origin = require("../hub-browser-origin-C-u2l9VC.js");
 let stream = require("stream");
 stream = require_chunk.__toESM(stream, 1);
 let http = require("http");

package/dist/webauthn/auth-webauthn.addon.mjs

@@ -1,4 +1,4 @@
-import { d as boolean, f as number, l as BaseAddon, m as string, o as loginMethodCapability, p as object, r as addonWidgetsSourceCapability, s as userPasskeysCapability, t as hubBrowserOrigin, u as array } from "../hub-browser-origin-lAiHaCMe.mjs";
+import { d as boolean, f as number, l as BaseAddon, m as string, o as loginMethodCapability, p as object, r as addonWidgetsSourceCapability, s as userPasskeysCapability, t as hubBrowserOrigin, u as array } from "../hub-browser-origin-B1o5vmQX.mjs";
 import { createRequire } from "node:module";
 import Stream from "stream";
 import http from "http";

package/dist/webauthn/{hostInit-BXYkXOBq.mjs → hostInit-DEFeGgRf.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.310",
+				version: "1.2.311",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.236",
+				version: "1.2.237",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/webauthn/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-tSRn6o3N.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-v7lvfZM3.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-auth",
-  "version": "1.2.129",
+  "version": "1.2.130",
   "description": "Authentication bundle — magic-link, OIDC, and WebAuthn/passkey. Multi-entry npm package shipping 3 addons under a single bundle; each addon keeps its own id, capabilities, and runner.",
   "keywords": [
     "camstack",