@camstack/addon-osd-manager 0.1.175 → 0.1.177

package/dist/index.js

@@ -5382,7 +5382,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-DXKLNFvA.mjs
+//#region ../types/dist/sleep-C16NCZR2.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -18398,6 +18398,12 @@ var filesystemBrowseCapability = {
 		})
 	}
 };
+var HUB_ADDRESS_ROLES = [
+	"appConnections",
+	"notificationTaps",
+	"internal",
+	"publicEndpoint"
+];
 /**
 * Transport bounds for AI capability methods.
 *
@@ -23449,7 +23455,13 @@ var NcAlarmModeDelaysListSchema = array(object({
 	* Absent = false (logged, not sent). Even when true it is not sent when that same sensor
 	* is the one that starts the entry delay — the entry-delay notification already names it.
 	*/
-	notifySensorRewatched: boolean().optional()
+	notifySensorRewatched: boolean().optional(),
+	/**
+	* D735: notify "ignored" when a sensor this arm bypassed really MOVED while armed (its own
+	* change time is after the arm) and set nothing off. Absent = false (logged, not sent). A
+	* re-sync, a recovery from `unavailable` or a duplicate is never announced, switch or not.
+	*/
+	notifySensorIgnored: boolean().optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 var NcAlarmModeDelaysEditListSchema = array(object({
 	mode: AlarmArmModeSchema,
@@ -23462,7 +23474,9 @@ var NcAlarmModeDelaysEditListSchema = array(object({
 	/** D706: set the switch, or `null` to clear it (back to the default, false). */
 	notifyDuringEntryDelay: boolean().nullable().optional(),
 	/** D706: set the switch, or `null` to clear it (back to the default, false). */
-	notifySensorRewatched: boolean().nullable().optional()
+	notifySensorRewatched: boolean().nullable().optional(),
+	/** D735: set the switch, or `null` to clear it (back to the default, false). */
+	notifySensorIgnored: boolean().nullable().optional()
 })).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
 var NcAlarmNonBlockingEditSchema = object({
@@ -33650,6 +33664,35 @@ var webrtcSessionCapability = {
 			alive: boolean()
 		})),
 		/**
+		* The viewer's downlink probe, for ONE live session (D733).
+		*
+		* The player measures `/adaptive-probe` after the session's first decoded
+		* frame (D635). It used to act on the reading itself, by opening a SECOND
+		* session with `hints.downlinkMbps` — every adaptive live open became two
+		* sessions, two ICE + DTLS handshakes and two server pipelines. It now
+		* hands the measurement to the session it already has; the provider picks
+		* the rung exactly as it would from an offer's hints (same viewport
+		* ceiling) and moves the session there — in place when the negotiated
+		* codec carries the new rendition, by the existing re-offer
+		* (`getSessionState.pendingRenegotiation`) when it cannot.
+		*
+		* A MEASUREMENT, never a tier: the client does not choose. A probe only
+		* raises the rung; lowering it stays the ladder's call on delivery.
+		* `held` answers why nothing moved (`not-adaptive`, `pinned`,
+		* `already-there`, `recorded`, …) — a client that gets ANY answer must not
+		* fall back to a reconnect; only a provider that does not know the method
+		* (an older hub) leaves the client its legacy second session.
+		*/
+		applyDownlinkProbe: method(object({
+			deviceId: number().int().nonnegative(),
+			sessionId: string(),
+			downlinkMbps: number().nonnegative()
+		}), object({
+			outcome: _enum(["switching", "held"]),
+			tier: CamProfileSchema.nullable(),
+			reason: string()
+		}), { kind: "mutation" }),
+		/**
 		* The SERVER's half of the stream-debug overlay, for one live session.
 		*
 		* The client can measure its own transport (`getStats()`); it cannot see
@@ -37878,7 +37921,8 @@ var ConnectionEndpointSchema = object({
 		"lan-ipv6",
 		"public",
 		"loopback",
-		"app-link"
+		"app-link",
+		"custom"
 	]),
 	/**
 	* Originating-interface kind — `lan`/`wifi`/`docker`/`vpn`/`other`/
@@ -37947,7 +37991,7 @@ var GetConnectionEndpointsResultSchema = object({
 	localPort: AdvertisedLocalPortSchema
 });
 /**
-* The address flagged for notification links. `baseUrl: null` = AUTO, which
+* The address flagged for notification taps (`notificationTaps`). `baseUrl: null` = AUTO, which
 * since D709 is the CamStack app link; `resolved` reports the effective value,
 * so the UI can show it either way.
 */
@@ -37981,13 +38025,12 @@ var ViewerEndpointsSchema = object({
 	resolved: array(string()).readonly()
 });
 /**
-* One audience's hub address (see `hub-address.ts`): the operator's stored
-* override, the address in use, and where it came from.
+* DEPRECATED compatibility shape of `getHubAddresses` (D729 amendment, kept
+* for addons built against it): `cluster` is the `internal` role, `browser`
+* the `publicEndpoint` role; `override` is the flagged address.
 */
 var HubAddressSnapshotSchema = object({
-	/** The operator's override, or null for automatic. */
 	override: string().nullable(),
-	/** The address in use, or null when nothing qualifies (never loopback). */
 	resolved: string().nullable(),
 	source: _enum([
 		"override",
@@ -37996,11 +38039,57 @@ var HubAddressSnapshotSchema = object({
 	])
 });
 var HubAddressesSchema = object({
-	/** "Hub address for agents" — agents' bundle/model pulls, LAN devices. */
 	cluster: HubAddressSnapshotSchema,
-	/** "Public address for sign-in links" — e-mail links, OIDC, WebAuthn, OAuth2. */
 	browser: HubAddressSnapshotSchema
 });
+/**
+* What an address is used for (`hub-address.ts`, D734). `appConnections` is
+* many-valued; `notificationTaps`, `publicEndpoint` and `internal` are carried
+* by at most one address.
+*/
+var HubAddressRoleSchema = _enum(HUB_ADDRESS_ROLES);
+var RoleSourceSchema = _enum([
+	"flagged",
+	"auto",
+	"none"
+]);
+/** One single-valued role: the flagged address, the one in use, and why. */
+var HubAddressRoleResolutionSchema = object({
+	/** The address carrying the flag, or null = automatic. */
+	flagged: string().nullable(),
+	/** The address in use, or null when nothing qualifies (never loopback). */
+	resolved: string().nullable(),
+	source: RoleSourceSchema
+});
+var HubAppConnectionsResolutionSchema = object({
+	/** The addresses flagged `appConnections`, or empty = automatic. */
+	flagged: array(string()).readonly(),
+	/** What the apps race right now. */
+	resolved: array(string()).readonly(),
+	source: RoleSourceSchema
+});
+var HubAddressBookSchema = object({
+	rows: array(ConnectionEndpointSchema.extend({
+		/** In the hub's detected palette right now. */
+		detected: boolean(),
+		/** Entered by the operator (removable). */
+		custom: boolean(),
+		/** The roles explicitly flagged on this address. */
+		flags: array(HubAddressRoleSchema).readonly(),
+		/** The roles this address serves right now — flagged or automatic. */
+		inUse: array(HubAddressRoleSchema).readonly(),
+		/** The roles this address may be flagged with. */
+		eligible: array(HubAddressRoleSchema).readonly()
+	})).readonly(),
+	roles: object({
+		appConnections: HubAppConnectionsResolutionSchema,
+		notificationTaps: HubAddressRoleResolutionSchema,
+		internal: HubAddressRoleResolutionSchema,
+		publicEndpoint: HubAddressRoleResolutionSchema
+	}),
+	/** The `hub=` an app link carries (D709), or null. */
+	appLinkHub: string().nullable()
+});
 var AllowedAddressesSchema = object({ 
 /**
 * Allowlist of interface addresses operators have explicitly opted
@@ -38091,19 +38180,18 @@ var localNetworkCapability = {
 			*  tunnel always emits `https://` regardless. */
 			scheme: _enum(["http", "https"]).optional(),
 			/** Append the CamStack app link entry (`kind: 'app-link'`, D709) —
-			*  an address notification links can be flagged with, not a hub
+			*  an address notification taps can be flagged with, not a hub
 			*  route. Default `false`: racers and rankers never see it. */
 			includeAppLink: boolean().optional()
 		}), GetConnectionEndpointsResultSchema),
 		/**
-		* The address notification links are flagged with. `baseUrl: null` means
-		* AUTO, which is the CamStack app link (D709): viewer taps go through
-		* `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the app. Any
-		* hub address the palette lists can be flagged instead; then viewer taps,
-		* attachment links and action buttons all use it. Signed media and
-		* buttons never use the app link — with it flagged (or AUTO) they keep
-		* the ranked hub ladder (a configured origin, a connected tunnel, then
-		* the LAN), never loopback.
+		* The `notificationTaps` role (D734): where TAPPING a notification opens.
+		* `baseUrl: null` means AUTO, which is the CamStack app link (D709): taps
+		* go through `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the
+		* app. Any hub address the palette lists can be flagged instead; then a
+		* tap opens that address. Only the tap: action buttons, attachment /
+		* media links and admin links follow the `publicEndpoint` role
+		* (`getAddresses().roles.publicEndpoint`), never this one.
 		*
 		* Why an explicit marker: the automatic ranking cannot know which of
 		* several reachable addresses the RECIPIENT can actually open. A link is
@@ -38113,46 +38201,80 @@ var localNetworkCapability = {
 		*/
 		getNotificationEndpoint: method(_void(), NotificationEndpointSchema),
 		/**
-		* Mark which endpoint notification artifacts use. `baseUrl: null` restores
-		* AUTO. The value is stored verbatim (not an index into the candidate
-		* list): interfaces come and go, and an index would silently re-point at a
-		* different address after a reboot.
+		* @deprecated Use `setAddressRole({ role: 'notificationTaps', … })`. It
+		* writes the same `notificationTaps` flag, with the same validation. `baseUrl: null` restores automatic; an
+		* address that is not detected becomes a custom address.
 		*/
 		setNotificationEndpoint: method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }),
 		/**
-		* The endpoints the SDK / viewer races for API access. Empty `baseUrls`
-		* means AUTO: every LAN IPv4 address plus the public tunnel, never IPv6,
-		* never mesh, never loopback. `resolved` is that set (or the operator's
-		* explicit subset) as it stands right now.
+		* The `appConnections` role as shipped apps read it: the flagged addresses
+		* (detected or custom), or empty for AUTO — every LAN IPv4 address plus
+		* the public tunnel, never IPv6, mesh, loopback or a custom address.
+		* `resolved` is the set as it stands right now; the custom ones in it are
+		* also in `getConnectionEndpoints`, which the apps filter by it.
 		*/
 		getViewerEndpoints: method(_void(), ViewerEndpointsSchema),
 		/**
-		* Replace the viewer race set. Empty `baseUrls` restores AUTO. Stored
-		* verbatim (not indices) so a temporarily-down tunnel is not silently
-		* dropped from the operator's choice.
+		* @deprecated Use `setAddressRole({ role: 'appConnections', … })`. It
+		* replaces the same `appConnections` flags.
+		* Empty `baseUrls` restores automatic.
 		*/
 		setViewerEndpoints: method(object({ baseUrls: array(string()).readonly() }), ViewerEndpointsSchema, { kind: "mutation" }),
 		/**
-		* The hub's address for each audience — agents (`cluster`) and sign-in
-		* links (`browser`) — as every consumer must read it: the operator's
-		* override when set, else the automatic pick from this cap's palette,
-		* never loopback. The ONE answer to "at which address is this hub
-		* reached?"; there is no environment variable for it.
+		* The Network page's Addresses table and every role's answer — the ONE
+		* reading of "which address is this hub reached at, for what": detected
+		* endpoints and custom addresses with their role flags, and per role the
+		* flagged address, the one in use and whether it is automatic. Agent
+		* deliveries and LAN devices read `roles.internal`; sign-in, OAuth2 and
+		* the notification centre's buttons / media / admin links read
+		* `roles.publicEndpoint`; nothing ranks the palette itself. `scheme` is
+		* the one the caller shows LAN rows in (as `getConnectionEndpoints`);
+		* `internal` and `publicEndpoint` are always resolved over the HTTPS
+		* palette.
 		*/
-		getHubAddresses: method(_void(), HubAddressesSchema),
+		getAddresses: method(object({ scheme: _enum(["http", "https"]).optional() }).optional(), HubAddressBookSchema),
+		/**
+		* Add a custom address. Validated: an http(s) origin with a host, no
+		* credentials, no path, never loopback — an invalid one is refused with
+		* the reason and nothing is stored. Adding an address that already exists
+		* only updates its label.
+		*/
+		addCustomAddress: method(object({
+			baseUrl: string(),
+			label: string().max(80)
+		}), HubAddressBookSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Remove a custom address. Its role flags go with it (those roles turn automatic). */
+		removeCustomAddress: method(object({ baseUrl: string() }), HubAddressBookSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/**
-		* Set or clear (`baseUrl: null`) one audience's override. Validated: an
-		* http(s) origin with a host, no credentials, no path, never loopback —
-		* an invalid value is refused with the reason, nothing is stored.
+		* Flag (`enabled: true`) or unflag an address for a role. For a
+		* single-valued role, flagging moves the flag off every other address.
+		* `baseUrl: null` returns the role to automatic. The address must be a row
+		* of the table (detected, custom, or the app link for `notificationTaps`);
+		* `publicEndpoint` on a plain-http address is refused unless
+		* `acceptInsecureHttp`, and never takes the app link.
 		*/
-		setHubAddress: method(object({
-			audience: _enum(["cluster", "browser"]),
-			baseUrl: string().nullable()
-		}), HubAddressesSchema, {
+		setAddressRole: method(object({
+			role: HubAddressRoleSchema,
+			baseUrl: string().nullable(),
+			enabled: boolean(),
+			acceptInsecureHttp: boolean().optional()
+		}), HubAddressBookSchema, {
 			kind: "mutation",
 			auth: "admin"
 		}),
 		/**
+		* @deprecated Read `getAddresses().roles.internal` / `.publicEndpoint`.
+		* Kept so an addon built against the D729 amendment keeps resolving:
+		* `cluster` = the `internal` role, `browser` = the `publicEndpoint` role.
+		*/
+		getHubAddresses: method(_void(), HubAddressesSchema),
+		/**
 		* Read the operator's allowlist. Empty = "auto" (no filter). Used
 		* by the admin UI's address selector to seed its checkbox state.
 		*/
@@ -49285,12 +49407,24 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.addCustomAddress": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.downloadCa": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.getAddresses": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.getAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
@@ -49345,6 +49479,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.removeCustomAddress": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"localNetwork.resetAllowlistToBestMatch": {
 		capName: "local-network",
 		capScope: "system",
@@ -49357,13 +49497,13 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"localNetwork.setAllowedAddresses": {
+	"localNetwork.setAddressRole": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
-	"localNetwork.setHubAddress": {
+	"localNetwork.setAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
@@ -53617,6 +53757,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"webrtcSession.applyDownlinkProbe": {
+		capName: "webrtc-session",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"webrtcSession.closeSession": {
 		capName: "webrtc-session",
 		capScope: "device",
@@ -57715,6 +57861,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"webrtcSession.applyDownlinkProbe": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"webrtcSession.closeSession": [{
 		name: "deviceId",
 		form: "single",