@camstack/addon-provider-homeassistant 1.2.160 → 1.2.161

package/dist/ha-export/ha-export.addon.js

@@ -3,8 +3,219 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 //#endregion
-const require_dist = require("../dist-l71G4EIk.js");
+const require_dist = require("../dist-C3T2aMHG.js");
 let node_crypto = require("node:crypto");
+/** The `BrokerInfo.kind` tag the Home Assistant provider stamps. */
+var HA_BROKER_KIND = "home-assistant";
+/**
+* Every Home Assistant broker currently registered, cluster-wide.
+*
+* Unpinned by design (see the module docblock) and filtered by `kind`, which is
+* the contract check that matters: whatever mix of providers answered the
+* union, only `home-assistant` brokers are ever exported to over Home
+* Assistant's transport.
+*/
+async function listHomeAssistantBrokers(query) {
+	return (await query({})).filter((broker) => broker.kind === HA_BROKER_KIND);
+}
+//#endregion
+//#region src/ha-export/camera-function-writes.ts
+/**
+* Performs the WRITE of a camera function on the authority that owns it.
+*
+* `deriveCameraFunctions`/`resolveCameraFunctionWrite` (`camera-functions.ts`)
+* decide; this module acts. It is the file that
+* `scripts/check-switch-successor-surfaces.ts` points to as the successor of the
+* deprecated pair `getCameraSwitches` / `setCameraSwitch` (D113 phase 4).
+*/
+async function applyCameraFunctionWrite(api, deviceId, write, sourceNodeId) {
+	switch (write.kind) {
+		case "device-disabled":
+			await api.deviceManager.setDisabled.mutate({
+				deviceId,
+				disabled: write.disabled
+			});
+			return;
+		case "wrapper-binding":
+			await api.deviceManager.setWrapperActive.mutate({
+				deviceId,
+				capName: write.capName,
+				wrapperAddonId: write.wrapperAddonId,
+				active: write.active
+			});
+			return;
+		case "recording-enabled": {
+			const config = await api.recordingArchive.getDeviceConfig.query({ deviceId });
+			await api.recordingArchive.setDeviceConfig.mutate({
+				deviceId,
+				config: {
+					...config,
+					enabled: write.enabled
+				}
+			});
+			return;
+		}
+		case "notification-mute":
+			await api.notificationRules.setDeviceMuted.mutate({
+				deviceId,
+				muted: write.muted
+			});
+			return;
+		case "camera-mask":
+			await api.privacyMask.setMask.mutate({
+				deviceId,
+				patch: { enabled: write.enabled }
+			});
+			return;
+		case "camera-audio":
+			await api.privacyMask.setAudioEnabled.mutate({
+				deviceId,
+				enabled: write.enabled
+			});
+			return;
+		case "broker-audio-mute":
+			if (sourceNodeId === null) throw new Error(`refusing an unrouted broker audio write for device ${String(deviceId)}: no source node`);
+			await api.streamBroker.setDeviceAudioMute.mutate({
+				deviceId,
+				muted: write.muted
+			}, require_dist.nodePin(sourceNodeId));
+			return;
+	}
+}
+//#endregion
+//#region src/ha-export/camera-functions.ts
+var DETECTION_CAP = "detection-pipeline";
+var AUDIO_ANALYSIS_CAP = "audio-analysis";
+/** The wrapper that WRITES the history: tracks, events and their media. */
+var PIPELINE_ANALYTICS_CAP = "pipeline-analytics";
+/** Render order: widest reach first, source before consumer. */
+var ORDER = [
+	"stream-broker",
+	"object-detection",
+	"privacy-mask",
+	"device-audio",
+	"broker-audio",
+	"audio-analysis",
+	"event-saving",
+	"recording",
+	"notifications"
+];
+var LABELS = {
+	"stream-broker": "Camera",
+	"object-detection": "Object detection & tracking",
+	"privacy-mask": "Privacy mask",
+	"device-audio": "Camera microphone",
+	"broker-audio": "Audio distribution",
+	"audio-analysis": "Audio detection & classification",
+	"event-saving": "Event saving",
+	recording: "Recording",
+	notifications: "Notifications"
+};
+/**
+* Which cap stands behind each wrapper-backed switch. A map instead of a
+* ternary: with three entries the ternary became a chain, and the next entry
+* would have silently landed on the wrong branch.
+*/
+var WRAPPER_CAP_BY_ID = {
+	"object-detection": DETECTION_CAP,
+	"audio-analysis": AUDIO_ANALYSIS_CAP,
+	"event-saving": PIPELINE_ANALYTICS_CAP
+};
+var UNAVAILABLE = {
+	available: false,
+	enabled: true
+};
+function resolveWrapper(capName, reads) {
+	if (reads.bindableCapNames === null || reads.wrappedCapNames === null) return UNAVAILABLE;
+	if (!reads.bindableCapNames.includes(capName)) return UNAVAILABLE;
+	if (reads.wrapperAddonIdByCap.get(capName) === void 0) return UNAVAILABLE;
+	return {
+		available: true,
+		enabled: reads.wrappedCapNames.includes(capName)
+	};
+}
+function resolveOne(id, reads) {
+	switch (id) {
+		case "stream-broker": return reads.deviceDisabled === null ? UNAVAILABLE : {
+			available: true,
+			enabled: !reads.deviceDisabled
+		};
+		case "object-detection": return resolveWrapper(DETECTION_CAP, reads);
+		case "audio-analysis": return resolveWrapper(AUDIO_ANALYSIS_CAP, reads);
+		case "event-saving": return resolveWrapper(PIPELINE_ANALYTICS_CAP, reads);
+		case "recording": return reads.recordingEnabled === null ? UNAVAILABLE : {
+			available: true,
+			enabled: reads.recordingEnabled
+		};
+		case "notifications": return reads.notificationsMuted === null ? UNAVAILABLE : {
+			available: true,
+			enabled: !reads.notificationsMuted
+		};
+		case "privacy-mask": return reads.privacy === null ? UNAVAILABLE : {
+			available: true,
+			enabled: reads.privacy.maskEnabled
+		};
+		case "device-audio": return reads.privacy === null || reads.privacy.audioEnabled === null ? UNAVAILABLE : {
+			available: true,
+			enabled: reads.privacy.audioEnabled
+		};
+		case "broker-audio": return reads.brokerAudioMuted === null ? UNAVAILABLE : {
+			available: true,
+			enabled: !reads.brokerAudioMuted
+		};
+	}
+}
+function deriveCameraFunctions(reads) {
+	return ORDER.map((id) => ({
+		id,
+		label: LABELS[id],
+		...resolveOne(id, reads)
+	}));
+}
+/** `null` = not available: the write must be REFUSED, not approximated. */
+function resolveCameraFunctionWrite(id, on, reads) {
+	if (!resolveOne(id, reads).available) return null;
+	switch (id) {
+		case "stream-broker": return {
+			kind: "device-disabled",
+			disabled: !on
+		};
+		case "object-detection":
+		case "audio-analysis":
+		case "event-saving": {
+			const capName = WRAPPER_CAP_BY_ID[id];
+			const wrapperAddonId = reads.wrapperAddonIdByCap.get(capName);
+			if (wrapperAddonId === void 0) return null;
+			return {
+				kind: "wrapper-binding",
+				capName,
+				wrapperAddonId,
+				active: on
+			};
+		}
+		case "recording": return {
+			kind: "recording-enabled",
+			enabled: on
+		};
+		case "notifications": return {
+			kind: "notification-mute",
+			muted: !on
+		};
+		case "privacy-mask": return {
+			kind: "camera-mask",
+			enabled: on
+		};
+		case "device-audio": return {
+			kind: "camera-audio",
+			enabled: on
+		};
+		case "broker-audio": return {
+			kind: "broker-audio-mute",
+			muted: !on
+		};
+	}
+}
+//#endregion
 //#region src/ha-export/topics.ts
 /**
 * The topic grammar. Every topic in the export is built HERE.
@@ -4125,223 +4336,26 @@ async function call(slice, capName, make) {
 	}
 	return { ok: true };
 }
-//#endregion
-//#region src/ha-export/camera-function-writes.ts
 /**
-* Performs the WRITE of a camera function on the authority that owns it.
+* The ONE derivation of "a signed, expiring URL".
 *
-* `deriveCameraFunctions`/`resolveCameraFunctionWrite` (`camera-functions.ts`)
-* decide; this module acts. It is the file that
-* `scripts/check-switch-successor-surfaces.ts` points to as the successor of the
-* deprecated pair `getCameraSwitches` / `setCameraSwitch` (D113 phase 4).
-*/
-async function applyCameraFunctionWrite(api, deviceId, write, sourceNodeId) {
-	switch (write.kind) {
-		case "device-disabled":
-			await api.deviceManager.setDisabled.mutate({
-				deviceId,
-				disabled: write.disabled
-			});
-			return;
-		case "wrapper-binding":
-			await api.deviceManager.setWrapperActive.mutate({
-				deviceId,
-				capName: write.capName,
-				wrapperAddonId: write.wrapperAddonId,
-				active: write.active
-			});
-			return;
-		case "recording-enabled": {
-			const config = await api.recordingArchive.getDeviceConfig.query({ deviceId });
-			await api.recordingArchive.setDeviceConfig.mutate({
-				deviceId,
-				config: {
-					...config,
-					enabled: write.enabled
-				}
-			});
-			return;
-		}
-		case "notification-mute":
-			await api.notificationRules.setDeviceMuted.mutate({
-				deviceId,
-				muted: write.muted
-			});
-			return;
-		case "camera-mask":
-			await api.privacyMask.setMask.mutate({
-				deviceId,
-				patch: { enabled: write.enabled }
-			});
-			return;
-		case "camera-audio":
-			await api.privacyMask.setAudioEnabled.mutate({
-				deviceId,
-				enabled: write.enabled
-			});
-			return;
-		case "broker-audio-mute":
-			if (sourceNodeId === null) throw new Error(`refusing an unrouted broker audio write for device ${String(deviceId)}: no source node`);
-			await api.streamBroker.setDeviceAudioMute.mutate({
-				deviceId,
-				muted: write.muted
-			}, require_dist.nodePin(sourceNodeId));
-			return;
-	}
-}
-//#endregion
-//#region src/ha-export/camera-functions.ts
-var DETECTION_CAP = "detection-pipeline";
-var AUDIO_ANALYSIS_CAP = "audio-analysis";
-/** The wrapper that WRITES the history: tracks, events and their media. */
-var PIPELINE_ANALYTICS_CAP = "pipeline-analytics";
-/** Render order: widest reach first, source before consumer. */
-var ORDER = [
-	"stream-broker",
-	"object-detection",
-	"privacy-mask",
-	"device-audio",
-	"broker-audio",
-	"audio-analysis",
-	"event-saving",
-	"recording",
-	"notifications"
-];
-var LABELS = {
-	"stream-broker": "Camera",
-	"object-detection": "Object detection & tracking",
-	"privacy-mask": "Privacy mask",
-	"device-audio": "Camera microphone",
-	"broker-audio": "Audio distribution",
-	"audio-analysis": "Audio detection & classification",
-	"event-saving": "Event saving",
-	recording: "Recording",
-	notifications: "Notifications"
-};
-/**
-* Which cap stands behind each wrapper-backed switch. A map instead of a
-* ternary: with three entries the ternary became a chain, and the next entry
-* would have silently landed on the wrong branch.
-*/
-var WRAPPER_CAP_BY_ID = {
-	"object-detection": DETECTION_CAP,
-	"audio-analysis": AUDIO_ANALYSIS_CAP,
-	"event-saving": PIPELINE_ANALYTICS_CAP
-};
-var UNAVAILABLE = {
-	available: false,
-	enabled: true
-};
-function resolveWrapper(capName, reads) {
-	if (reads.bindableCapNames === null || reads.wrappedCapNames === null) return UNAVAILABLE;
-	if (!reads.bindableCapNames.includes(capName)) return UNAVAILABLE;
-	if (reads.wrapperAddonIdByCap.get(capName) === void 0) return UNAVAILABLE;
-	return {
-		available: true,
-		enabled: reads.wrappedCapNames.includes(capName)
-	};
-}
-function resolveOne(id, reads) {
-	switch (id) {
-		case "stream-broker": return reads.deviceDisabled === null ? UNAVAILABLE : {
-			available: true,
-			enabled: !reads.deviceDisabled
-		};
-		case "object-detection": return resolveWrapper(DETECTION_CAP, reads);
-		case "audio-analysis": return resolveWrapper(AUDIO_ANALYSIS_CAP, reads);
-		case "event-saving": return resolveWrapper(PIPELINE_ANALYTICS_CAP, reads);
-		case "recording": return reads.recordingEnabled === null ? UNAVAILABLE : {
-			available: true,
-			enabled: reads.recordingEnabled
-		};
-		case "notifications": return reads.notificationsMuted === null ? UNAVAILABLE : {
-			available: true,
-			enabled: !reads.notificationsMuted
-		};
-		case "privacy-mask": return reads.privacy === null ? UNAVAILABLE : {
-			available: true,
-			enabled: reads.privacy.maskEnabled
-		};
-		case "device-audio": return reads.privacy === null || reads.privacy.audioEnabled === null ? UNAVAILABLE : {
-			available: true,
-			enabled: reads.privacy.audioEnabled
-		};
-		case "broker-audio": return reads.brokerAudioMuted === null ? UNAVAILABLE : {
-			available: true,
-			enabled: !reads.brokerAudioMuted
-		};
-	}
-}
-function deriveCameraFunctions(reads) {
-	return ORDER.map((id) => ({
-		id,
-		label: LABELS[id],
-		...resolveOne(id, reads)
-	}));
-}
-/** `null` = not available: the write must be REFUSED, not approximated. */
-function resolveCameraFunctionWrite(id, on, reads) {
-	if (!resolveOne(id, reads).available) return null;
-	switch (id) {
-		case "stream-broker": return {
-			kind: "device-disabled",
-			disabled: !on
-		};
-		case "object-detection":
-		case "audio-analysis":
-		case "event-saving": {
-			const capName = WRAPPER_CAP_BY_ID[id];
-			const wrapperAddonId = reads.wrapperAddonIdByCap.get(capName);
-			if (wrapperAddonId === void 0) return null;
-			return {
-				kind: "wrapper-binding",
-				capName,
-				wrapperAddonId,
-				active: on
-			};
-		}
-		case "recording": return {
-			kind: "recording-enabled",
-			enabled: on
-		};
-		case "notifications": return {
-			kind: "notification-mute",
-			muted: !on
-		};
-		case "privacy-mask": return {
-			kind: "camera-mask",
-			enabled: on
-		};
-		case "device-audio": return {
-			kind: "camera-audio",
-			enabled: on
-		};
-		case "broker-audio": return {
-			kind: "broker-audio-mute",
-			muted: !on
-		};
-	}
-}
-/**
-* The ONE derivation of "a signed, expiring URL".
-*
-* This repo mints unguessable, self-expiring links in three places now — the
-* notification artifact plane, the Home Assistant media plane, and the snapshot
-* link plane. The first two grew independently and are byte-identical logic
-* (`hmac(secret, "<id>:<exp>")`, expiry checked before a constant-time compare),
-* each restating the crypto locally because **addons never import each other**.
-*
-* That reason is real, and the conclusion drawn from it was wrong. Two copies of
-* a signing scheme is how one of them quietly ends up with a different TTL, a
-* different compare, or a missing expiry check, and nothing fails until a link
-* that should have died keeps working. The fix is the same one D52 applies to
-* crop geometry: one derivation, in a place every addon may depend on. A
-* framework package is exactly that place — `@camstack/types/node`, off the root
-* entry because `node:crypto` must never be traversed by a browser bundler.
-*
-* What this module deliberately does NOT decide: the TTL, the base URL, the
-* shape of `id`, and the access level of the route. Those are per-plane policy
-* and each caller states them where a reader can see them.
+* This repo mints unguessable, self-expiring links in three places now — the
+* notification artifact plane, the Home Assistant media plane, and the snapshot
+* link plane. The first two grew independently and are byte-identical logic
+* (`hmac(secret, "<id>:<exp>")`, expiry checked before a constant-time compare),
+* each restating the crypto locally because **addons never import each other**.
+*
+* That reason is real, and the conclusion drawn from it was wrong. Two copies of
+* a signing scheme is how one of them quietly ends up with a different TTL, a
+* different compare, or a missing expiry check, and nothing fails until a link
+* that should have died keeps working. The fix is the same one D52 applies to
+* crop geometry: one derivation, in a place every addon may depend on. A
+* framework package is exactly that place — `@camstack/types/node`, off the root
+* entry because `node:crypto` must never be traversed by a browser bundler.
+*
+* What this module deliberately does NOT decide: the TTL, the base URL, the
+* shape of `id`, and the access level of the route. Those are per-plane policy
+* and each caller states them where a reader can see them.
 */
 /**
 * The signature over `(id, expMs)`.
@@ -4531,6 +4545,23 @@ function brokerRefreshPatch(current, next) {
 		...membershipChanged ? { membership: next.membership } : {}
 	};
 }
+//#endregion
+//#region src/ha-export/node-reads.ts
+var UNREAD = {
+	footageUsedBytes: null,
+	footageFreePercent: null
+};
+function footageForNode(nodeId, usage) {
+	if (usage === null || usage.nodeId !== nodeId) return UNREAD;
+	const freePercents = (usage.locations ?? []).filter((loc) => loc.availableBytes !== null && loc.totalBytes !== null && loc.totalBytes > 0).map((loc) => loc.availableBytes / loc.totalBytes * 100);
+	return {
+		footageUsedBytes: usage.totalUsedBytes,
+		footageFreePercent: freePercents.length > 0 ? Math.min(...freePercents) : null
+	};
+}
+function shouldReadPackageStatus(node) {
+	return !node.isHub && node.isOnline;
+}
 /**
 * What a linked Home Assistant NEEDS to function — one entry per thing it
 * actually calls with this token, each named. Not a blast radius, not a
@@ -4821,6 +4852,54 @@ var ReachabilityReconciler = class {
 	}
 };
 //#endregion
+//#region src/ha-export/reconcile-fingerprint.ts
+function structureFingerprint(exported) {
+	return JSON.stringify([...exported.keys()].sort().map((key) => {
+		const entry = exported.get(key);
+		return [
+			key,
+			entry?.brokerIds,
+			entry?.plan
+		];
+	}));
+}
+/** Only an event-debounced pass with an unchanged structure may skip. */
+function shouldSkipAnnounce(reason, fingerprint, lastFingerprint) {
+	return reason === "structure-changed" && fingerprint === lastFingerprint;
+}
+//#endregion
+//#region src/ha-export/rule-triggers.ts
+function reduceOne(row) {
+	return {
+		ruleId: row.ruleId,
+		ruleName: row.ruleName,
+		deviceId: row.deviceId,
+		at: row.createdAt,
+		label: row.subject.label ?? row.subject.className,
+		status: row.status,
+		artifactId: row.artifactIds?.[0] ?? null
+	};
+}
+/**
+* Reduce a newest-first page of history rows.
+*
+* A rule missing from `rows` (never fired, or its last fire fell outside the
+* page this pass could afford) is simply absent from `byRule` — the caller
+* renders that as `unknown`, never as an invented value.
+*/
+function reduceLastTriggers(rows) {
+	const byRule = /* @__PURE__ */ new Map();
+	let overall = null;
+	for (const row of rows) {
+		if (overall === null) overall = reduceOne(row);
+		if (!byRule.has(row.ruleId)) byRule.set(row.ruleId, reduceOne(row));
+	}
+	return {
+		overall,
+		byRule
+	};
+}
+//#endregion
 //#region src/ha-export/state-projector.ts
 /**
 * Pipeline / notification-center output → `{topic, value}`.
@@ -5869,84 +5948,6 @@ function projectSynthetic(input, nowMs) {
 	return values;
 }
 //#endregion
-//#region src/ha-export/node-reads.ts
-var UNREAD = {
-	footageUsedBytes: null,
-	footageFreePercent: null
-};
-function footageForNode(nodeId, usage) {
-	if (usage === null || usage.nodeId !== nodeId) return UNREAD;
-	const freePercents = (usage.locations ?? []).filter((loc) => loc.availableBytes !== null && loc.totalBytes !== null && loc.totalBytes > 0).map((loc) => loc.availableBytes / loc.totalBytes * 100);
-	return {
-		footageUsedBytes: usage.totalUsedBytes,
-		footageFreePercent: freePercents.length > 0 ? Math.min(...freePercents) : null
-	};
-}
-function shouldReadPackageStatus(node) {
-	return !node.isHub && node.isOnline;
-}
-//#endregion
-//#region src/ha-export/rule-triggers.ts
-function reduceOne(row) {
-	return {
-		ruleId: row.ruleId,
-		ruleName: row.ruleName,
-		deviceId: row.deviceId,
-		at: row.createdAt,
-		label: row.subject.label ?? row.subject.className,
-		status: row.status,
-		artifactId: row.artifactIds?.[0] ?? null
-	};
-}
-/**
-* Reduce a newest-first page of history rows.
-*
-* A rule missing from `rows` (never fired, or its last fire fell outside the
-* page this pass could afford) is simply absent from `byRule` — the caller
-* renders that as `unknown`, never as an invented value.
-*/
-function reduceLastTriggers(rows) {
-	const byRule = /* @__PURE__ */ new Map();
-	let overall = null;
-	for (const row of rows) {
-		if (overall === null) overall = reduceOne(row);
-		if (!byRule.has(row.ruleId)) byRule.set(row.ruleId, reduceOne(row));
-	}
-	return {
-		overall,
-		byRule
-	};
-}
-//#endregion
-//#region src/ha-export/reconcile-fingerprint.ts
-function structureFingerprint(exported) {
-	return JSON.stringify([...exported.keys()].sort().map((key) => {
-		const entry = exported.get(key);
-		return [
-			key,
-			entry?.brokerIds,
-			entry?.plan
-		];
-	}));
-}
-/** Only an event-debounced pass with an unchanged structure may skip. */
-function shouldSkipAnnounce(reason, fingerprint, lastFingerprint) {
-	return reason === "structure-changed" && fingerprint === lastFingerprint;
-}
-/** The `BrokerInfo.kind` tag the Home Assistant provider stamps. */
-var HA_BROKER_KIND = "home-assistant";
-/**
-* Every Home Assistant broker currently registered, cluster-wide.
-*
-* Unpinned by design (see the module docblock) and filtered by `kind`, which is
-* the contract check that matters: whatever mix of providers answered the
-* union, only `home-assistant` brokers are ever exported to over Home
-* Assistant's transport.
-*/
-async function listHomeAssistantBrokers(query) {
-	return (await query({})).filter((broker) => broker.kind === HA_BROKER_KIND);
-}
-//#endregion
 //#region src/ha-export/ha-export.addon.ts
 /**
 * Native Home Assistant export — a custom component fed by HTTP push.
@@ -5996,8 +5997,6 @@ var DOORBELL_PULSE_MS = 5e3;
 * instant. Year 2000 predates every device this addon exports.
 */
 var MIN_PLAUSIBLE_TIMESTAMP_MS = Date.UTC(2e3, 0, 1);
-/** The hub's API port — where the data plane is reverse-proxied. */
-var HUB_API_PORT = 4443;
 /** One PTZ button press, as a relative move. */
 var PTZ_MOVE_BY_DIRECTION = {
 	up: { tilt: .1 },
@@ -7885,14 +7884,15 @@ var HaExportAddon = class extends require_dist.BaseAddon {
 			return;
 		}
 		try {
-			const { endpoints } = await this.ctx.api.localNetwork.getConnectionEndpoints.query({ port: HUB_API_PORT });
 			/**
-			* Lowest priority wins, loopback never: a link Home Assistant
-			* cannot open is worse than no image, because it renders as a
-			* broken entity rather than an empty one.
+			* Home Assistant is a LAN device pulling from the hub: the `agents`
+			* role (the address flagged "Agents" on the Network page, else the
+			* detected LAN address), never loopback — a link Home Assistant
+			* cannot open is worse than no image, because it renders as a broken
+			* entity rather than an empty one. Ranked by `local-network`, never here.
 			*/
-			const usable = [...endpoints].filter((endpoint) => endpoint.kind !== "loopback" && endpoint.plausible).sort((a, b) => a.priority - b.priority)[0];
-			this.mediaBaseUrl = usable?.baseUrl ?? null;
+			const { roles } = await this.ctx.api.localNetwork.getAddresses.query();
+			this.mediaBaseUrl = roles.agents.resolved;
 		} catch (err) {
 			this.mediaBaseUrl = null;
 			this.ctx.logger.debug("ha-export: could not resolve a media base URL", { meta: { error: errMsg(err) } });