@camstack/addon-decoder-ffmpeg 1.2.52 → 1.2.55

package/dist/index.js

@@ -7719,7 +7719,8 @@ var OpsLogReasonSchema = _enum([
 	"quota",
 	"manual",
 	"operator",
-	"maintenance"
+	"maintenance",
+	"orphaned-device"
 ]);
 /** One audit row, shared verbatim by both domains. */
 var OpsLogEntrySchema = object({
@@ -12880,10 +12881,39 @@ var DevicePersistConfigPayloadSchema = object({
 	deviceId: number(),
 	data: record(string(), unknown())
 });
+/** What a migration actually did, per switch. `unreachable` is a first-class
+*  answer: a camera that could not be asked is not a camera that was silenced. */
+var MigrateSwitchOutcomeSchema = _enum([
+	"off",
+	"on",
+	"not-offered",
+	"unreachable"
+]);
+var MigrateSwitchReportSchema = object({
+	deviceId: number(),
+	switchId: CameraSwitchIdSchema,
+	outcome: MigrateSwitchOutcomeSchema,
+	detail: string().optional()
+});
+var MigrateDeviceResultSchema = object({
+	sourceId: number(),
+	targetId: number(),
+	switches: array(MigrateSwitchReportSchema).readonly(),
+	/** Switches that could NOT be turned off on the source. Empty is the only
+	*  value meaning the replaced hardware is quiet. */
+	sourceStillLive: array(CameraSwitchIdSchema).readonly(),
+	swapped: boolean()
+});
 method(object({
 	addonId: string(),
 	stableId: string()
-}), object({ id: number() }), { kind: "mutation" }), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
+}), object({ id: number() }), { kind: "mutation" }), method(object({
+	sourceId: number(),
+	targetId: number()
+}), MigrateDeviceResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
 	deviceId: number(),
 	name: string()
 }), _void(), {
@@ -13358,6 +13388,35 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -13629,16 +13688,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -13806,7 +13868,13 @@ var ProfileRefInputSchema = object({
 	addonId: string(),
 	profileId: string()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string().optional(),
 	requestId: string()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -13817,7 +13885,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string().nullable()
@@ -30386,6 +30455,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.migrateDevice": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.persistConfig": {
 		capName: "device-manager",
 		capScope: "system",

package/dist/index.mjs

@@ -7715,7 +7715,8 @@ var OpsLogReasonSchema = _enum([
 	"quota",
 	"manual",
 	"operator",
-	"maintenance"
+	"maintenance",
+	"orphaned-device"
 ]);
 /** One audit row, shared verbatim by both domains. */
 var OpsLogEntrySchema = object({
@@ -12876,10 +12877,39 @@ var DevicePersistConfigPayloadSchema = object({
 	deviceId: number(),
 	data: record(string(), unknown())
 });
+/** What a migration actually did, per switch. `unreachable` is a first-class
+*  answer: a camera that could not be asked is not a camera that was silenced. */
+var MigrateSwitchOutcomeSchema = _enum([
+	"off",
+	"on",
+	"not-offered",
+	"unreachable"
+]);
+var MigrateSwitchReportSchema = object({
+	deviceId: number(),
+	switchId: CameraSwitchIdSchema,
+	outcome: MigrateSwitchOutcomeSchema,
+	detail: string().optional()
+});
+var MigrateDeviceResultSchema = object({
+	sourceId: number(),
+	targetId: number(),
+	switches: array(MigrateSwitchReportSchema).readonly(),
+	/** Switches that could NOT be turned off on the source. Empty is the only
+	*  value meaning the replaced hardware is quiet. */
+	sourceStillLive: array(CameraSwitchIdSchema).readonly(),
+	swapped: boolean()
+});
 method(object({
 	addonId: string(),
 	stableId: string()
-}), object({ id: number() }), { kind: "mutation" }), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
+}), object({ id: number() }), { kind: "mutation" }), method(object({
+	sourceId: number(),
+	targetId: number()
+}), MigrateDeviceResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
 	deviceId: number(),
 	name: string()
 }), _void(), {
@@ -13354,6 +13384,35 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -13625,16 +13684,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -13802,7 +13864,13 @@ var ProfileRefInputSchema = object({
 	addonId: string(),
 	profileId: string()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string().optional(),
 	requestId: string()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -13813,7 +13881,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string().nullable()
@@ -30382,6 +30451,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.migrateDevice": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.persistConfig": {
 		capName: "device-manager",
 		capScope: "system",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-decoder-ffmpeg",
-  "version": "1.2.52",
+  "version": "1.2.55",
   "description": "Standalone ffmpeg-subprocess decoder fallback addon for CamStack",
   "keywords": [
     "camstack",