@camstack/addon-auth 1.2.99 → 1.2.101

package/dist/{dist-Cv6M4721.js → dist-BoTHwMVe.js}

@@ -16315,6 +16315,7 @@ var NcSystemEventKindSchema = _enum([
 	"addon-crash-loop",
 	"addon-update-available",
 	"server-update-available",
+	"wrapper-update-available",
 	"alarm-triggered",
 	"alarm-armed",
 	"alarm-disarmed",
@@ -19720,7 +19721,17 @@ var EventDensityBucketSchema = object({
 	bucketStart: number(),
 	motion: number().int(),
 	object: number().int(),
-	audio: number().int()
+	audio: number().int(),
+	/**
+	* Energy-weighted mean dBFS of the audio events in this bucket — the LEVEL,
+	* as opposed to `audio`, which is their COUNT (D431).
+	*
+	* ABSENT when the bucket holds no audio event. Absence means "nothing was
+	* measured", which is not the same claim as silence, and a lane that cannot
+	* tell them apart paints a quiet hour at full scale — which is exactly what
+	* the count-on-a-level-meter did.
+	*/
+	audioDbfs: number().optional()
 });
 /**
 * One camera's row in a `getEventDensityBatch` answer.
@@ -21821,6 +21832,53 @@ var ImageContractSchema = object({
 	/** One operator-grade sentence: this node runs image X; the contract says Y. */
 	message: string()
 });
+/**
+* The shell verdict (see {@link WrapperKindSchema}) with the proofs that
+* produced it.
+*
+* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
+* update is an ANNOUNCEMENT. The notification body carries the exact command
+* for a `docker` shell and says the app restarts into the new build for
+* `electron`, and that sentence is chosen from `kind` alone — a boolean
+* nothing reads is the defect this repo keeps paying for.
+*/
+var WrapperIdentitySchema = object({
+	kind: _enum([
+		"docker",
+		"electron",
+		"native",
+		"contradictory",
+		"unknown"
+	]),
+	/** Every probe that ran, in a stable order. Never empty. */
+	evidence: array(object({
+		/** Which probe this row reports. */
+		fact: _enum([
+			"dockerenv-file",
+			"proc-1-cgroup",
+			"platform",
+			"electron-app-version-env"
+		]),
+		/**
+		* `observed` — this process read it itself. `declared` — the shell told the
+		* process and nothing here can check it. Only the Electron app version is
+		* ever `declared`, and only because a child cannot see its parent.
+		*/
+		mode: _enum(["observed", "declared"]),
+		/** Did the probe support the fact it names? A `false` row is still evidence. */
+		holds: boolean(),
+		/** What was actually read, verbatim enough for an operator to argue with. */
+		detail: string()
+	})),
+	/**
+	* The version of the SHELL, when the shell has one it can state: the
+	* Electron app version it declared, or the baked seed closure that
+	* fingerprints a container / app bundle. `null` for `contradictory` and
+	* `unknown` — which version belongs to the shell is precisely what is not
+	* known there.
+	*/
+	currentVersion: string().nullable()
+});
 var ServerRollbackInfoSchema = object({
 	/** The version that failed (or was manually rolled back). */
 	fromVersion: string(),
@@ -21862,7 +21920,13 @@ var ServerPackageStatusSchema = object({
 	* Seed-vs-contract verdict (see {@link ImageContractSchema}). Optional for
 	* version skew: an older provider's payload simply omits it.
 	*/
-	imageContract: ImageContractSchema.optional()
+	imageContract: ImageContractSchema.optional(),
+	/**
+	* What this node runs INSIDE (see {@link WrapperIdentitySchema}). Optional
+	* for version skew: an older provider's payload simply omits it, and an
+	* absent wrapper is unknown — never `native`.
+	*/
+	wrapper: WrapperIdentitySchema.optional()
 });
 var ServerUpdateCheckResultSchema = object({
 	packageName: string(),
@@ -27922,7 +27986,23 @@ var RecordingRangeSchema = object({
 });
 var RecordingAvailabilitySchema = object({
 	deviceId: number(),
-	ranges: array(RecordingRangeSchema)
+	ranges: array(RecordingRangeSchema),
+	/**
+	* Every profile this camera has footage in — not only the one `ranges`
+	* describes (D433).
+	*
+	* `ranges` answers for ONE profile by design: the timeline is a single bar,
+	* and enumerating all of them triples the directory reads for a bar that
+	* would look identical. But the answer used to say nothing about that, so a
+	* caller asking "what can I export?" read the single preferred profile as
+	* the only one that exists — on this deployment every camera records `high`
+	* AND `low`, the low tree holding 14 GB for camera 615 alone, and the export
+	* UI could not see it.
+	*
+	* Cheap: it is the same shallow directory read the profile CHOICE already
+	* makes. Ask for a specific profile's ranges with the `profile` input.
+	*/
+	profilesWithFootage: array(string())
 });
 var RecordingDaysSchema = object({
 	deviceId: number(),
@@ -27948,7 +28028,11 @@ var RecordingDaysSchema = object({
 var RecordingAvailabilityForDeviceSchema = object({
 	deviceId: number(),
 	read: _enum(["read", "unreadable"]),
-	ranges: array(RecordingRangeSchema).readonly()
+	ranges: array(RecordingRangeSchema).readonly(),
+	/** Same field, same meaning, as the singular answer (D433). A row that
+	*  dropped it would tell a grid caller the archive holds one profile.
+	*  Empty on an `'unreadable'` row: nobody looked. */
+	profilesWithFootage: array(string()).readonly()
 });
 /**
 * One camera's row in a `getDaysWithRecordingsBatch` answer. Same rule as
@@ -28238,7 +28322,14 @@ var ReadWindowBytesResultSchema = discriminatedUnion("kind", [object({
 method(object({
 	deviceId: number(),
 	fromMs: number(),
-	toMs: number()
+	toMs: number(),
+	/**
+	* Answer for THIS profile instead of the preferred one (D433). Absent
+	* keeps the timeline's behaviour — one bar, one profile, one set of
+	* reads. `profilesWithFootage` on the answer says what may be asked
+	* for.
+	*/
+	profile: string().optional()
 }), RecordingAvailabilitySchema, {
 	kind: "query",
 	auth: "protected"

package/dist/{dist-B4csIGFJ.mjs → dist-ojq_iNdv.mjs}

@@ -16315,6 +16315,7 @@ var NcSystemEventKindSchema = _enum([
 	"addon-crash-loop",
 	"addon-update-available",
 	"server-update-available",
+	"wrapper-update-available",
 	"alarm-triggered",
 	"alarm-armed",
 	"alarm-disarmed",
@@ -19720,7 +19721,17 @@ var EventDensityBucketSchema = object({
 	bucketStart: number(),
 	motion: number().int(),
 	object: number().int(),
-	audio: number().int()
+	audio: number().int(),
+	/**
+	* Energy-weighted mean dBFS of the audio events in this bucket — the LEVEL,
+	* as opposed to `audio`, which is their COUNT (D431).
+	*
+	* ABSENT when the bucket holds no audio event. Absence means "nothing was
+	* measured", which is not the same claim as silence, and a lane that cannot
+	* tell them apart paints a quiet hour at full scale — which is exactly what
+	* the count-on-a-level-meter did.
+	*/
+	audioDbfs: number().optional()
 });
 /**
 * One camera's row in a `getEventDensityBatch` answer.
@@ -21821,6 +21832,53 @@ var ImageContractSchema = object({
 	/** One operator-grade sentence: this node runs image X; the contract says Y. */
 	message: string()
 });
+/**
+* The shell verdict (see {@link WrapperKindSchema}) with the proofs that
+* produced it.
+*
+* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
+* update is an ANNOUNCEMENT. The notification body carries the exact command
+* for a `docker` shell and says the app restarts into the new build for
+* `electron`, and that sentence is chosen from `kind` alone — a boolean
+* nothing reads is the defect this repo keeps paying for.
+*/
+var WrapperIdentitySchema = object({
+	kind: _enum([
+		"docker",
+		"electron",
+		"native",
+		"contradictory",
+		"unknown"
+	]),
+	/** Every probe that ran, in a stable order. Never empty. */
+	evidence: array(object({
+		/** Which probe this row reports. */
+		fact: _enum([
+			"dockerenv-file",
+			"proc-1-cgroup",
+			"platform",
+			"electron-app-version-env"
+		]),
+		/**
+		* `observed` — this process read it itself. `declared` — the shell told the
+		* process and nothing here can check it. Only the Electron app version is
+		* ever `declared`, and only because a child cannot see its parent.
+		*/
+		mode: _enum(["observed", "declared"]),
+		/** Did the probe support the fact it names? A `false` row is still evidence. */
+		holds: boolean(),
+		/** What was actually read, verbatim enough for an operator to argue with. */
+		detail: string()
+	})),
+	/**
+	* The version of the SHELL, when the shell has one it can state: the
+	* Electron app version it declared, or the baked seed closure that
+	* fingerprints a container / app bundle. `null` for `contradictory` and
+	* `unknown` — which version belongs to the shell is precisely what is not
+	* known there.
+	*/
+	currentVersion: string().nullable()
+});
 var ServerRollbackInfoSchema = object({
 	/** The version that failed (or was manually rolled back). */
 	fromVersion: string(),
@@ -21862,7 +21920,13 @@ var ServerPackageStatusSchema = object({
 	* Seed-vs-contract verdict (see {@link ImageContractSchema}). Optional for
 	* version skew: an older provider's payload simply omits it.
 	*/
-	imageContract: ImageContractSchema.optional()
+	imageContract: ImageContractSchema.optional(),
+	/**
+	* What this node runs INSIDE (see {@link WrapperIdentitySchema}). Optional
+	* for version skew: an older provider's payload simply omits it, and an
+	* absent wrapper is unknown — never `native`.
+	*/
+	wrapper: WrapperIdentitySchema.optional()
 });
 var ServerUpdateCheckResultSchema = object({
 	packageName: string(),
@@ -27922,7 +27986,23 @@ var RecordingRangeSchema = object({
 });
 var RecordingAvailabilitySchema = object({
 	deviceId: number(),
-	ranges: array(RecordingRangeSchema)
+	ranges: array(RecordingRangeSchema),
+	/**
+	* Every profile this camera has footage in — not only the one `ranges`
+	* describes (D433).
+	*
+	* `ranges` answers for ONE profile by design: the timeline is a single bar,
+	* and enumerating all of them triples the directory reads for a bar that
+	* would look identical. But the answer used to say nothing about that, so a
+	* caller asking "what can I export?" read the single preferred profile as
+	* the only one that exists — on this deployment every camera records `high`
+	* AND `low`, the low tree holding 14 GB for camera 615 alone, and the export
+	* UI could not see it.
+	*
+	* Cheap: it is the same shallow directory read the profile CHOICE already
+	* makes. Ask for a specific profile's ranges with the `profile` input.
+	*/
+	profilesWithFootage: array(string())
 });
 var RecordingDaysSchema = object({
 	deviceId: number(),
@@ -27948,7 +28028,11 @@ var RecordingDaysSchema = object({
 var RecordingAvailabilityForDeviceSchema = object({
 	deviceId: number(),
 	read: _enum(["read", "unreadable"]),
-	ranges: array(RecordingRangeSchema).readonly()
+	ranges: array(RecordingRangeSchema).readonly(),
+	/** Same field, same meaning, as the singular answer (D433). A row that
+	*  dropped it would tell a grid caller the archive holds one profile.
+	*  Empty on an `'unreadable'` row: nobody looked. */
+	profilesWithFootage: array(string()).readonly()
 });
 /**
 * One camera's row in a `getDaysWithRecordingsBatch` answer. Same rule as
@@ -28238,7 +28322,14 @@ var ReadWindowBytesResultSchema = discriminatedUnion("kind", [object({
 method(object({
 	deviceId: number(),
 	fromMs: number(),
-	toMs: number()
+	toMs: number(),
+	/**
+	* Answer for THIS profile instead of the preferred one (D433). Absent
+	* keeps the timeline's behaviour — one bar, one profile, one set of
+	* reads. `profilesWithFootage` on the answer says what may be asked
+	* for.
+	*/
+	profile: string().optional()
 }), RecordingAvailabilitySchema, {
 	kind: "query",
 	auth: "protected"

package/dist/magic-link/auth-magic-link.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-Cv6M4721.js");
+const require_dist = require("../dist-BoTHwMVe.js");
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.

package/dist/magic-link/auth-magic-link.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-B4csIGFJ.mjs";
+import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-ojq_iNdv.mjs";
 //#region src/magic-link/auth-magic-link.addon.ts
 /**
 * Magic-link authentication addon.

package/dist/oidc/auth-oidc.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-Cv6M4721.js");
+const require_dist = require("../dist-BoTHwMVe.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 //#region node_modules/jose/dist/webapi/lib/buffer_utils.js

package/dist/oidc/auth-oidc.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-B4csIGFJ.mjs";
+import { a as loginMethodCapability, c as BaseAddon, i as buildAddonRouteProvider, r as authProviderCapability, s as errMsg, t as addonRoutesCapability } from "../dist-ojq_iNdv.mjs";
 import * as crypto$1 from "node:crypto";
 //#region node_modules/jose/dist/webapi/lib/buffer_utils.js
 var encoder = new TextEncoder();

package/dist/webauthn/{_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-BNgTaJNA.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-I_Gns-Yt.mjs}

@@ -3,7 +3,7 @@ import "./dist-CYZr2fwk.mjs";
 var e = {
 	"@camstack/sdk": {
 		name: "@camstack/sdk",
-		version: "1.2.95",
+		version: "1.2.97",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -18,7 +18,7 @@ var e = {
 	},
 	"@camstack/types": {
 		name: "@camstack/types",
-		version: "1.2.175",
+		version: "1.2.177",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",
@@ -33,7 +33,7 @@ var e = {
 	},
 	"@camstack/ui-library": {
 		name: "@camstack/ui-library",
-		version: "1.2.143",
+		version: "1.2.145",
 		scope: ["default"],
 		loaded: !1,
 		from: "addon_auth_webauthn_widgets",

package/dist/webauthn/auth-webauthn.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-Cek0wNdY.js");
-const require_dist = require("../dist-Cv6M4721.js");
+const require_dist = require("../dist-BoTHwMVe.js");
 let stream = require("stream");
 stream = require_chunk.__toESM(stream, 1);
 let http = require("http");

package/dist/webauthn/auth-webauthn.addon.mjs

@@ -1,4 +1,4 @@
-import { a as loginMethodCapability, c as BaseAddon, d as number, f as object, l as array, n as addonWidgetsSourceCapability, o as userPasskeysCapability, p as string, u as boolean } from "../dist-B4csIGFJ.mjs";
+import { a as loginMethodCapability, c as BaseAddon, d as number, f as object, l as array, n as addonWidgetsSourceCapability, o as userPasskeysCapability, p as string, u as boolean } from "../dist-ojq_iNdv.mjs";
 import { createRequire } from "node:module";
 import Stream from "stream";
 import http from "http";

package/dist/webauthn/{hostInit-BvoY8GZN.mjs → hostInit-Dy8lL7a0.mjs}

@@ -36,7 +36,7 @@ async function r() {
 				}
 			},
 			"@camstack/types": {
-				version: "1.2.175",
+				version: "1.2.177",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -45,7 +45,7 @@ async function r() {
 				}
 			},
 			"@camstack/sdk": {
-				version: "1.2.95",
+				version: "1.2.97",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,
@@ -81,7 +81,7 @@ async function r() {
 				}
 			},
 			"@camstack/ui-library": {
-				version: "1.2.143",
+				version: "1.2.145",
 				scope: "default",
 				shareConfig: {
 					singleton: !0,

package/dist/webauthn/remoteEntry.js

@@ -30,7 +30,7 @@ async function d(e) {
 	}
 }
 async function f() {
-	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-BNgTaJNA.mjs")).catch((e) => {
+	return l ||= d(() => import("./_virtual_mf-localSharedImportMap___mfe_internal__addon_auth_webauthn_widgets-I_Gns-Yt.mjs")).catch((e) => {
 		throw l = void 0, e;
 	}), l;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-auth",
-  "version": "1.2.99",
+  "version": "1.2.101",
   "description": "Authentication bundle — magic-link, OIDC, and WebAuthn/passkey. Multi-entry npm package shipping 3 addons under a single bundle; each addon keeps its own id, capabilities, and runner.",
   "keywords": [
     "camstack",