@camstack/addon-matter-broker 0.2.51 → 0.2.54

package/dist/addon.js

@@ -7732,7 +7732,8 @@ var OpsLogReasonSchema = _enum([
 	"quota",
 	"manual",
 	"operator",
-	"maintenance"
+	"maintenance",
+	"orphaned-device"
 ]);
 /** One audit row, shared verbatim by both domains. */
 var OpsLogEntrySchema = object({
@@ -13093,10 +13094,39 @@ var DevicePersistConfigPayloadSchema = object({
 	deviceId: number(),
 	data: record(string$2(), unknown())
 });
+/** What a migration actually did, per switch. `unreachable` is a first-class
+*  answer: a camera that could not be asked is not a camera that was silenced. */
+var MigrateSwitchOutcomeSchema = _enum([
+	"off",
+	"on",
+	"not-offered",
+	"unreachable"
+]);
+var MigrateSwitchReportSchema = object({
+	deviceId: number(),
+	switchId: CameraSwitchIdSchema,
+	outcome: MigrateSwitchOutcomeSchema,
+	detail: string$2().optional()
+});
+var MigrateDeviceResultSchema = object({
+	sourceId: number(),
+	targetId: number(),
+	switches: array(MigrateSwitchReportSchema).readonly(),
+	/** Switches that could NOT be turned off on the source. Empty is the only
+	*  value meaning the replaced hardware is quiet. */
+	sourceStillLive: array(CameraSwitchIdSchema).readonly(),
+	swapped: boolean()
+});
 method(object({
 	addonId: string$2(),
 	stableId: string$2()
-}), object({ id: number() }), { kind: "mutation" }), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string$2(), unknown())), method(object({ deviceId: number() }), record(string$2(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
+}), object({ id: number() }), { kind: "mutation" }), method(object({
+	sourceId: number(),
+	targetId: number()
+}), MigrateDeviceResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string$2(), unknown())), method(object({ deviceId: number() }), record(string$2(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
 	deviceId: number(),
 	name: string$2()
 }), _void(), {
@@ -13571,6 +13601,35 @@ method(_void(), array(string$2()).readonly(), { auth: "admin" }), method(object(
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -13842,16 +13901,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string$2() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -14019,7 +14081,13 @@ var ProfileRefInputSchema = object({
 	addonId: string$2(),
 	profileId: string$2()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string$2().optional(),
 	requestId: string$2()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -14030,7 +14098,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string$2())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string$2().nullable()
@@ -34108,6 +34177,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.migrateDevice": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.persistConfig": {
 		capName: "device-manager",
 		capScope: "system",

package/dist/addon.mjs

@@ -7730,7 +7730,8 @@ var OpsLogReasonSchema = _enum([
 	"quota",
 	"manual",
 	"operator",
-	"maintenance"
+	"maintenance",
+	"orphaned-device"
 ]);
 /** One audit row, shared verbatim by both domains. */
 var OpsLogEntrySchema = object({
@@ -13091,10 +13092,39 @@ var DevicePersistConfigPayloadSchema = object({
 	deviceId: number(),
 	data: record(string$2(), unknown())
 });
+/** What a migration actually did, per switch. `unreachable` is a first-class
+*  answer: a camera that could not be asked is not a camera that was silenced. */
+var MigrateSwitchOutcomeSchema = _enum([
+	"off",
+	"on",
+	"not-offered",
+	"unreachable"
+]);
+var MigrateSwitchReportSchema = object({
+	deviceId: number(),
+	switchId: CameraSwitchIdSchema,
+	outcome: MigrateSwitchOutcomeSchema,
+	detail: string$2().optional()
+});
+var MigrateDeviceResultSchema = object({
+	sourceId: number(),
+	targetId: number(),
+	switches: array(MigrateSwitchReportSchema).readonly(),
+	/** Switches that could NOT be turned off on the source. Empty is the only
+	*  value meaning the replaced hardware is quiet. */
+	sourceStillLive: array(CameraSwitchIdSchema).readonly(),
+	swapped: boolean()
+});
 method(object({
 	addonId: string$2(),
 	stableId: string$2()
-}), object({ id: number() }), { kind: "mutation" }), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string$2(), unknown())), method(object({ deviceId: number() }), record(string$2(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
+}), object({ id: number() }), { kind: "mutation" }), method(object({
+	sourceId: number(),
+	targetId: number()
+}), MigrateDeviceResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string$2(), unknown())), method(object({ deviceId: number() }), record(string$2(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
 	deviceId: number(),
 	name: string$2()
 }), _void(), {
@@ -13569,6 +13599,35 @@ method(_void(), array(string$2()).readonly(), { auth: "admin" }), method(object(
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -13840,16 +13899,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string$2() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -14017,7 +14079,13 @@ var ProfileRefInputSchema = object({
 	addonId: string$2(),
 	profileId: string$2()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string$2().optional(),
 	requestId: string$2()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -14028,7 +14096,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string$2())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string$2().nullable()
@@ -34106,6 +34175,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.migrateDevice": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.persistConfig": {
 		capName: "device-manager",
 		capScope: "system",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-matter-broker",
-  "version": "0.2.51",
+  "version": "0.2.54",
   "description": "Matter broker addon for CamStack — owns a Matter fabric (commissioning + the long-lived controller) via the matter.js controller and brokers commissioned Matter nodes into CamStack",
   "keywords": [
     "camstack",