@camstack/addon-tailscale 1.2.10 → 1.2.12

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-CwEZ_Wrh.js");
+const require_dist = require("../dist-GM5pUTqy.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { i as EventCategory, n as networkAccessCapability, r as BaseAddon, t as meshNetworkCapability } from "../dist-BB6_UnWs.mjs";
+import { i as EventCategory, n as networkAccessCapability, r as BaseAddon, t as meshNetworkCapability } from "../dist-DodL65lc.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-BB6_UnWs.mjs → dist-DodL65lc.mjs}

@@ -7534,12 +7534,11 @@ var RecordingConfigSchema = object({
 /**
 * Entity-relocation job state (storage entity-routing spec, Phase 4).
 *
-* One shape shared by the recorder's `relocateFootage` (segments) and
-* pipeline-analytics' `relocateMedia` (event media blobs) so the admin Data
-* page renders both movers with one component. Jobs are in-RAM (a restart
-* forgets them — re-running is safe by construction: copy-if-absent, delete
-* after verify) and each completed/failed run also lands one durable ops-log
-* row on the owning addon's surface.
+* One shape shared by the recorder and pipeline-analytics internal movers.
+* The public admin surface is `storage-migration`; child jobs remain in RAM
+* because copy-if-absent, verify, delete and index/row repoint are resumable.
+* Each completed/failed run also lands one durable ops-log row on its owning
+* addon surface.
 */
 var RelocateJobStateSchema = _enum([
 	"running",
@@ -7566,19 +7565,100 @@ var RelocateJobSchema = object({
 	finishedAt: number().nullable(),
 	error: string().nullable()
 });
+/** Profile-derived footage selection used only by the migration coordinator:
+* `recordings` owns high+mid; `recordingsLow` owns low. */
+var RelocateFootageClassSchema = _enum(["recordings", "recordingsLow"]);
 var RelocateFootageInputSchema = object({
-	deviceId: number().optional(),
 	fromLocationId: string(),
 	toLocationId: string(),
 	entities: array(_enum(["segments"])).optional(),
+	/** Limits relocation to the logical profile class. Omit only for the
+	* pre-orchestration compatibility path. */
+	footageClass: RelocateFootageClassSchema.optional(),
 	/** Copy throttle in MB/s (default 40) — the drain is a background chore,
 	*  never allowed to starve live writers. */
 	throttleMbps: number().min(1).max(1e3).optional()
 });
-var RelocateMediaInputSchema = object({
-	deviceId: number().optional(),
+/** Internal, lease-scoped participant operation. It is intentionally separate
+* from persistent recording settings: a migration never changes
+* `RecordingConfig.enabled` or camera wrapper bindings. */
+var StorageMigrationLeaseInputSchema = object({ leaseId: string().min(1) });
+var StorageMigrationFootageMoveInputSchema = RelocateFootageInputSchema.extend({ leaseId: string().min(1) });
+var StorageMigrationMediaMoveInputSchema = object({
 	toLocationId: string(),
 	throttleMbps: number().min(1).max(1e3).optional()
+}).extend({ leaseId: string().min(1) });
+/** The independently selectable logical storage classes. `recordings`
+* encompasses the high and mid segment profiles; `recordingsLow` is low
+* segments; `eventMedia` is post-analysis blobs. */
+var StorageMigrationClassSchema = _enum([
+	"recordings",
+	"recordingsLow",
+	"eventMedia"
+]);
+/** A destination is always an existing, fully-qualified location id. The
+* migration API intentionally never changes a source location's `basePath`:
+* callers create a new `<type>:<slug>` location, then select it here. */
+var StorageMigrationDestinationsSchema = object({
+	recordings: string().min(1).optional(),
+	recordingsLow: string().min(1).optional(),
+	eventMedia: string().min(1).optional()
+}).refine((value) => Object.keys(value).length > 0, { message: "select at least one storage class" });
+/** Shared input for planning and starting an orchestrated storage migration. */
+var StorageMigrationInputSchema = object({
+	destinations: StorageMigrationDestinationsSchema,
+	throttleMbps: number().min(1).max(1e3).optional()
+});
+/** The durable coordinator state machine. The only phase that changes default
+* locations is `repointing`, after every selected mover has completed and been
+* verified. */
+var StorageMigrationPhaseSchema = _enum([
+	"planning",
+	"pausing",
+	"moving",
+	"verifying",
+	"repointing",
+	"refreshing",
+	"resuming",
+	"done",
+	"failed",
+	"cancelled"
+]);
+var StorageMigrationParticipantSchema = _enum([
+	"pipeline",
+	"recorder",
+	"analytics"
+]);
+var StorageMigrationMoveSchema = object({
+	storageClass: StorageMigrationClassSchema,
+	fromLocationId: string(),
+	toLocationId: string(),
+	moverJobId: string().nullable(),
+	state: RelocateJobStateSchema.nullable(),
+	error: string().nullable()
+});
+var StorageMigrationJobSchema = object({
+	jobId: string(),
+	phase: StorageMigrationPhaseSchema,
+	destinations: StorageMigrationDestinationsSchema,
+	throttleMbps: number(),
+	moves: array(StorageMigrationMoveSchema),
+	pauseLeaseId: string().nullable(),
+	pausedParticipants: array(StorageMigrationParticipantSchema),
+	repointed: boolean(),
+	cancelRequested: boolean(),
+	startedAt: number(),
+	updatedAt: number(),
+	finishedAt: number().nullable(),
+	error: string().nullable()
+});
+var StorageMigrationPlanSchema = object({
+	destinations: StorageMigrationDestinationsSchema,
+	moves: array(object({
+		storageClass: StorageMigrationClassSchema,
+		fromLocationId: string(),
+		toLocationId: string()
+	}))
 });
 /**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
@@ -15971,13 +16051,19 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), method(object({ deviceId: number() }), EventPruneCountsSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(RelocateMediaInputSchema, object({ jobId: string() }), {
+}), method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({}), array(RelocateJobSchema).readonly(), {
-	kind: "query",
+}), method(StorageMigrationLeaseInputSchema, object({ resumed: literal(true) }), {
+	kind: "mutation",
 	auth: "admin"
-}), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+}), method(StorageMigrationLeaseInputSchema, object({ refreshed: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageMigrationMediaMoveInputSchema, object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ jobId: string() }), RelocateJobSchema.nullable(), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
 	kind: "mutation",
 	auth: "admin"
 }), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
@@ -17474,7 +17560,13 @@ var NodeInferenceDevicesSchema = object({
 	reachable: boolean(),
 	devices: array(NodeInferenceDeviceSchema).readonly()
 });
-method(object({
+method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageMigrationLeaseInputSchema, object({ resumed: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
 	deviceId: number(),
 	agentNodeId: string()
 }), object({ success: literal(true) }), {
@@ -18148,6 +18240,13 @@ method(object({ locationId: string() }), EvictableUsageSchema), method(object({
 	locationId: string(),
 	targetBytes: number().int().positive()
 }), EvictResultSchema, { kind: "mutation" });
+method(StorageMigrationInputSchema, StorageMigrationPlanSchema, { auth: "admin" }), method(StorageMigrationInputSchema, object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ jobId: string().optional() }), StorageMigrationJobSchema.nullable(), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+});
 var ProviderInfoSchema = discriminatedUnion("shouldSaveDiskSpace", [object({
 	providerId: string().min(1),
 	displayName: string().min(1),
@@ -18251,7 +18350,67 @@ var TerminalProfileInfoSchema = object({
 	label: string(),
 	description: string().optional()
 });
-method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalSessionInfoSchema).readonly(), { auth: "admin" }), method(object({
+/**
+* A durable operator-created Terminal instance. Profiles are templates; only
+* an instance declares a camera.
+*/
+var TerminalInstanceInfoSchema = object({
+	instanceId: string(),
+	cameraStableId: string(),
+	nodeId: string(),
+	profileId: string(),
+	profileLabel: string(),
+	name: string(),
+	enabled: boolean()
+});
+var TerminalLegacyCameraSchema = object({
+	stableId: string(),
+	nodeId: string(),
+	profileId: string(),
+	profileLabel: string(),
+	name: string(),
+	/** Only legacy monitor cameras can retain their historic stable identity. */
+	adoptable: boolean()
+});
+var TerminalOutputEventSchema = discriminatedUnion("kind", [object({
+	seq: number().int().positive(),
+	kind: literal("data"),
+	data: string()
+}), object({
+	seq: number().int().positive(),
+	kind: literal("exit"),
+	exitCode: number().int(),
+	signal: number().int().optional()
+})]);
+var TerminalOutputBatchSchema = object({
+	cursor: number().int().nonnegative(),
+	reset: boolean(),
+	snapshot: string().optional(),
+	events: array(TerminalOutputEventSchema).readonly()
+});
+method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalInstanceInfoSchema).readonly(), { auth: "admin" }), method(object({
+	targetNodeId: string().min(1),
+	profileId: string().min(1),
+	name: string().trim().min(1).max(160).optional()
+}), TerminalInstanceInfoSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ instanceId: string().min(1) }), _void(), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	instanceId: string().min(1),
+	enabled: boolean()
+}), TerminalInstanceInfoSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), array(TerminalLegacyCameraSchema).readonly(), { auth: "admin" }), method(object({
+	stableId: string().min(1),
+	name: string().trim().min(1).max(160).optional()
+}), TerminalInstanceInfoSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), array(TerminalSessionInfoSchema).readonly(), { auth: "admin" }), method(object({
 	profileId: string(),
 	cols: number().int().positive(),
 	rows: number().int().positive()
@@ -18265,6 +18424,26 @@ method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }),
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	sessionId: string(),
+	afterSeq: number().int().nonnegative(),
+	waitMs: number().int().min(0).max(2e3).default(0),
+	/**
+	* Wait when a just-opened session has no output yet. Kept opt-in so a
+	* browser's initial repaint remains immediate; the camera snapshot
+	* relay uses it to avoid encoding a blank startup frame.
+	*/
+	waitForOutput: boolean().optional()
+}), TerminalOutputBatchSchema, {
+	kind: "mutation",
+	auth: "admin",
+	timeoutMs: 15e3
+}), method(object({
+	sessionId: string(),
+	data: string().max(64 * 1024)
+}), _void(), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({ sessionId: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -20195,6 +20374,7 @@ var FaceInfoSchema = object({
 var FaceFilterEnum = _enum([
 	"unassigned",
 	"recognized",
+	"identified",
 	"all"
 ]);
 var MediaFileLiteSchema$1 = object({
@@ -20223,6 +20403,8 @@ method(_void(), array(IdentitySchema).readonly()), method(object({ name: string(
 	kind: "mutation",
 	auth: "admin"
 }), method(object({
+	/** Restrict to one camera. Absent keeps the cluster-wide gallery view. */
+	deviceId: number().int().optional(),
 	limit: number().int().positive().optional(),
 	filter: FaceFilterEnum.optional(),
 	/**
@@ -22049,6 +22231,10 @@ var OsdSourceSchema = discriminatedUnion("kind", [
 		capName: string().min(1).max(64),
 		/** Dot path inside the slice, e.g. `detected`, `value`, `mode`. */
 		valuePath: string().min(1).max(64)
+	}),
+	object({
+		kind: literal("latest-recognition"),
+		recognition: _enum(["person", "plate"])
 	})
 ]);
 var OsdSlotBindingSchema = object({
@@ -22154,6 +22340,15 @@ method(object({ deviceId: number().int() }), object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	sourceDeviceId: number().int(),
+	targetDeviceId: number().int()
+}), object({
+	copied: number().int().nonnegative(),
+	skipped: number().int().nonnegative()
+}), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number().int(),
 	slotId: string().min(1),
@@ -23039,13 +23234,19 @@ method(object({
 }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(RelocateFootageInputSchema, object({ jobId: string() }), {
+}), method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({}), array(RelocateJobSchema).readonly(), {
-	kind: "query",
+}), method(StorageMigrationLeaseInputSchema, object({ resumed: literal(true) }), {
+	kind: "mutation",
 	auth: "admin"
-}), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+}), method(StorageMigrationLeaseInputSchema, object({ refreshed: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageMigrationFootageMoveInputSchema, object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ jobId: string() }), RelocateJobSchema.nullable(), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
 	kind: "mutation",
 	auth: "admin"
 });
@@ -27167,6 +27368,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"osdManager.copyDeviceConfiguration": {
+		capName: "osd-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"osdManager.getConditionSupport": {
 		capName: "osd-manager",
 		capScope: "system",
@@ -27263,7 +27470,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineAnalytics.cancelMediaRelocate": {
+	"pipelineAnalytics.cancelStorageMigrationMove": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
@@ -27335,12 +27542,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.getMediaRelocateStatus": {
-		capName: "pipeline-analytics",
-		capScope: "device",
-		addonId: null,
-		access: "view"
-	},
 	"pipelineAnalytics.getMotionEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27377,6 +27578,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getStorageMigrationMoveStatus": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getTrack": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27455,6 +27662,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.pauseForStorageMigration": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.proposeRetrainAnnotations": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27485,7 +27698,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineAnalytics.relocateMedia": {
+	"pipelineAnalytics.refreshStorageLocationsForMigration": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
@@ -27497,6 +27710,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.resumeForStorageMigration": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.saveRetrainAnnotations": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27521,6 +27740,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.startStorageMigrationMove": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.wipeAllAnalytics": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27887,6 +28112,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.pauseForStorageMigration": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.rebalance": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -27911,6 +28142,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.resumeForStorageMigration": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.saveTemplate": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -28307,7 +28544,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"recording.cancelRelocate": {
+	"recording.cancelStorageMigrationMove": {
 		capName: "recording",
 		capScope: "system",
 		addonId: null,
@@ -28343,7 +28580,7 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"recording.getRelocateStatus": {
+	"recording.getStorageMigrationMoveStatus": {
 		capName: "recording",
 		capScope: "system",
 		addonId: null,
@@ -28367,6 +28604,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.pauseForStorageMigration": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recording.pruneFootage": {
 		capName: "recording",
 		capScope: "system",
@@ -28385,7 +28628,7 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"recording.relocateFootage": {
+	"recording.refreshStorageLocationsForMigration": {
 		capName: "recording",
 		capScope: "system",
 		addonId: null,
@@ -28409,12 +28652,24 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.resumeForStorageMigration": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recording.setDeviceConfig": {
 		capName: "recording",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"recording.startStorageMigrationMove": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recordingExport.cancelExport": {
 		capName: "recordingExport",
 		capScope: "system",
@@ -28805,6 +29060,30 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"storageMigration.cancel": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.plan": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"storageMigration.start": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.status": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageProvider.abortUpload": {
 		capName: "storage-provider",
 		capScope: "system",
@@ -29183,12 +29462,42 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.adoptLegacyMonitor": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"terminalSession.close": {
 		capName: "terminal-session",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.createInstance": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"terminalSession.deleteInstance": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"terminalSession.listInstances": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"terminalSession.listLegacyCameras": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"terminalSession.listProfiles": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -29207,12 +29516,30 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.pullOutput": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"terminalSession.resize": {
 		capName: "terminal-session",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.setInstanceEnabled": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"terminalSession.writeInput": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"toast.onToast": {
 		capName: "toast",
 		capScope: "system",

package/dist/{dist-CwEZ_Wrh.js → dist-GM5pUTqy.js}

@@ -7534,12 +7534,11 @@ var RecordingConfigSchema = object({
 /**
 * Entity-relocation job state (storage entity-routing spec, Phase 4).
 *
-* One shape shared by the recorder's `relocateFootage` (segments) and
-* pipeline-analytics' `relocateMedia` (event media blobs) so the admin Data
-* page renders both movers with one component. Jobs are in-RAM (a restart
-* forgets them — re-running is safe by construction: copy-if-absent, delete
-* after verify) and each completed/failed run also lands one durable ops-log
-* row on the owning addon's surface.
+* One shape shared by the recorder and pipeline-analytics internal movers.
+* The public admin surface is `storage-migration`; child jobs remain in RAM
+* because copy-if-absent, verify, delete and index/row repoint are resumable.
+* Each completed/failed run also lands one durable ops-log row on its owning
+* addon surface.
 */
 var RelocateJobStateSchema = _enum([
 	"running",
@@ -7566,19 +7565,100 @@ var RelocateJobSchema = object({
 	finishedAt: number().nullable(),
 	error: string().nullable()
 });
+/** Profile-derived footage selection used only by the migration coordinator:
+* `recordings` owns high+mid; `recordingsLow` owns low. */
+var RelocateFootageClassSchema = _enum(["recordings", "recordingsLow"]);
 var RelocateFootageInputSchema = object({
-	deviceId: number().optional(),
 	fromLocationId: string(),
 	toLocationId: string(),
 	entities: array(_enum(["segments"])).optional(),
+	/** Limits relocation to the logical profile class. Omit only for the
+	* pre-orchestration compatibility path. */
+	footageClass: RelocateFootageClassSchema.optional(),
 	/** Copy throttle in MB/s (default 40) — the drain is a background chore,
 	*  never allowed to starve live writers. */
 	throttleMbps: number().min(1).max(1e3).optional()
 });
-var RelocateMediaInputSchema = object({
-	deviceId: number().optional(),
+/** Internal, lease-scoped participant operation. It is intentionally separate
+* from persistent recording settings: a migration never changes
+* `RecordingConfig.enabled` or camera wrapper bindings. */
+var StorageMigrationLeaseInputSchema = object({ leaseId: string().min(1) });
+var StorageMigrationFootageMoveInputSchema = RelocateFootageInputSchema.extend({ leaseId: string().min(1) });
+var StorageMigrationMediaMoveInputSchema = object({
 	toLocationId: string(),
 	throttleMbps: number().min(1).max(1e3).optional()
+}).extend({ leaseId: string().min(1) });
+/** The independently selectable logical storage classes. `recordings`
+* encompasses the high and mid segment profiles; `recordingsLow` is low
+* segments; `eventMedia` is post-analysis blobs. */
+var StorageMigrationClassSchema = _enum([
+	"recordings",
+	"recordingsLow",
+	"eventMedia"
+]);
+/** A destination is always an existing, fully-qualified location id. The
+* migration API intentionally never changes a source location's `basePath`:
+* callers create a new `<type>:<slug>` location, then select it here. */
+var StorageMigrationDestinationsSchema = object({
+	recordings: string().min(1).optional(),
+	recordingsLow: string().min(1).optional(),
+	eventMedia: string().min(1).optional()
+}).refine((value) => Object.keys(value).length > 0, { message: "select at least one storage class" });
+/** Shared input for planning and starting an orchestrated storage migration. */
+var StorageMigrationInputSchema = object({
+	destinations: StorageMigrationDestinationsSchema,
+	throttleMbps: number().min(1).max(1e3).optional()
+});
+/** The durable coordinator state machine. The only phase that changes default
+* locations is `repointing`, after every selected mover has completed and been
+* verified. */
+var StorageMigrationPhaseSchema = _enum([
+	"planning",
+	"pausing",
+	"moving",
+	"verifying",
+	"repointing",
+	"refreshing",
+	"resuming",
+	"done",
+	"failed",
+	"cancelled"
+]);
+var StorageMigrationParticipantSchema = _enum([
+	"pipeline",
+	"recorder",
+	"analytics"
+]);
+var StorageMigrationMoveSchema = object({
+	storageClass: StorageMigrationClassSchema,
+	fromLocationId: string(),
+	toLocationId: string(),
+	moverJobId: string().nullable(),
+	state: RelocateJobStateSchema.nullable(),
+	error: string().nullable()
+});
+var StorageMigrationJobSchema = object({
+	jobId: string(),
+	phase: StorageMigrationPhaseSchema,
+	destinations: StorageMigrationDestinationsSchema,
+	throttleMbps: number(),
+	moves: array(StorageMigrationMoveSchema),
+	pauseLeaseId: string().nullable(),
+	pausedParticipants: array(StorageMigrationParticipantSchema),
+	repointed: boolean(),
+	cancelRequested: boolean(),
+	startedAt: number(),
+	updatedAt: number(),
+	finishedAt: number().nullable(),
+	error: string().nullable()
+});
+var StorageMigrationPlanSchema = object({
+	destinations: StorageMigrationDestinationsSchema,
+	moves: array(object({
+		storageClass: StorageMigrationClassSchema,
+		fromLocationId: string(),
+		toLocationId: string()
+	}))
 });
 /**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
@@ -15971,13 +16051,19 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), method(object({ deviceId: number() }), EventPruneCountsSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(RelocateMediaInputSchema, object({ jobId: string() }), {
+}), method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({}), array(RelocateJobSchema).readonly(), {
-	kind: "query",
+}), method(StorageMigrationLeaseInputSchema, object({ resumed: literal(true) }), {
+	kind: "mutation",
 	auth: "admin"
-}), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+}), method(StorageMigrationLeaseInputSchema, object({ refreshed: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageMigrationMediaMoveInputSchema, object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ jobId: string() }), RelocateJobSchema.nullable(), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
 	kind: "mutation",
 	auth: "admin"
 }), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
@@ -17474,7 +17560,13 @@ var NodeInferenceDevicesSchema = object({
 	reachable: boolean(),
 	devices: array(NodeInferenceDeviceSchema).readonly()
 });
-method(object({
+method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageMigrationLeaseInputSchema, object({ resumed: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
 	deviceId: number(),
 	agentNodeId: string()
 }), object({ success: literal(true) }), {
@@ -18148,6 +18240,13 @@ method(object({ locationId: string() }), EvictableUsageSchema), method(object({
 	locationId: string(),
 	targetBytes: number().int().positive()
 }), EvictResultSchema, { kind: "mutation" });
+method(StorageMigrationInputSchema, StorageMigrationPlanSchema, { auth: "admin" }), method(StorageMigrationInputSchema, object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ jobId: string().optional() }), StorageMigrationJobSchema.nullable(), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+});
 var ProviderInfoSchema = discriminatedUnion("shouldSaveDiskSpace", [object({
 	providerId: string().min(1),
 	displayName: string().min(1),
@@ -18251,7 +18350,67 @@ var TerminalProfileInfoSchema = object({
 	label: string(),
 	description: string().optional()
 });
-method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalSessionInfoSchema).readonly(), { auth: "admin" }), method(object({
+/**
+* A durable operator-created Terminal instance. Profiles are templates; only
+* an instance declares a camera.
+*/
+var TerminalInstanceInfoSchema = object({
+	instanceId: string(),
+	cameraStableId: string(),
+	nodeId: string(),
+	profileId: string(),
+	profileLabel: string(),
+	name: string(),
+	enabled: boolean()
+});
+var TerminalLegacyCameraSchema = object({
+	stableId: string(),
+	nodeId: string(),
+	profileId: string(),
+	profileLabel: string(),
+	name: string(),
+	/** Only legacy monitor cameras can retain their historic stable identity. */
+	adoptable: boolean()
+});
+var TerminalOutputEventSchema = discriminatedUnion("kind", [object({
+	seq: number().int().positive(),
+	kind: literal("data"),
+	data: string()
+}), object({
+	seq: number().int().positive(),
+	kind: literal("exit"),
+	exitCode: number().int(),
+	signal: number().int().optional()
+})]);
+var TerminalOutputBatchSchema = object({
+	cursor: number().int().nonnegative(),
+	reset: boolean(),
+	snapshot: string().optional(),
+	events: array(TerminalOutputEventSchema).readonly()
+});
+method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalInstanceInfoSchema).readonly(), { auth: "admin" }), method(object({
+	targetNodeId: string().min(1),
+	profileId: string().min(1),
+	name: string().trim().min(1).max(160).optional()
+}), TerminalInstanceInfoSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ instanceId: string().min(1) }), _void(), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	instanceId: string().min(1),
+	enabled: boolean()
+}), TerminalInstanceInfoSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), array(TerminalLegacyCameraSchema).readonly(), { auth: "admin" }), method(object({
+	stableId: string().min(1),
+	name: string().trim().min(1).max(160).optional()
+}), TerminalInstanceInfoSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), array(TerminalSessionInfoSchema).readonly(), { auth: "admin" }), method(object({
 	profileId: string(),
 	cols: number().int().positive(),
 	rows: number().int().positive()
@@ -18265,6 +18424,26 @@ method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }),
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	sessionId: string(),
+	afterSeq: number().int().nonnegative(),
+	waitMs: number().int().min(0).max(2e3).default(0),
+	/**
+	* Wait when a just-opened session has no output yet. Kept opt-in so a
+	* browser's initial repaint remains immediate; the camera snapshot
+	* relay uses it to avoid encoding a blank startup frame.
+	*/
+	waitForOutput: boolean().optional()
+}), TerminalOutputBatchSchema, {
+	kind: "mutation",
+	auth: "admin",
+	timeoutMs: 15e3
+}), method(object({
+	sessionId: string(),
+	data: string().max(64 * 1024)
+}), _void(), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({ sessionId: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -20195,6 +20374,7 @@ var FaceInfoSchema = object({
 var FaceFilterEnum = _enum([
 	"unassigned",
 	"recognized",
+	"identified",
 	"all"
 ]);
 var MediaFileLiteSchema$1 = object({
@@ -20223,6 +20403,8 @@ method(_void(), array(IdentitySchema).readonly()), method(object({ name: string(
 	kind: "mutation",
 	auth: "admin"
 }), method(object({
+	/** Restrict to one camera. Absent keeps the cluster-wide gallery view. */
+	deviceId: number().int().optional(),
 	limit: number().int().positive().optional(),
 	filter: FaceFilterEnum.optional(),
 	/**
@@ -22049,6 +22231,10 @@ var OsdSourceSchema = discriminatedUnion("kind", [
 		capName: string().min(1).max(64),
 		/** Dot path inside the slice, e.g. `detected`, `value`, `mode`. */
 		valuePath: string().min(1).max(64)
+	}),
+	object({
+		kind: literal("latest-recognition"),
+		recognition: _enum(["person", "plate"])
 	})
 ]);
 var OsdSlotBindingSchema = object({
@@ -22154,6 +22340,15 @@ method(object({ deviceId: number().int() }), object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	sourceDeviceId: number().int(),
+	targetDeviceId: number().int()
+}), object({
+	copied: number().int().nonnegative(),
+	skipped: number().int().nonnegative()
+}), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number().int(),
 	slotId: string().min(1),
@@ -23039,13 +23234,19 @@ method(object({
 }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(RelocateFootageInputSchema, object({ jobId: string() }), {
+}), method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({}), array(RelocateJobSchema).readonly(), {
-	kind: "query",
+}), method(StorageMigrationLeaseInputSchema, object({ resumed: literal(true) }), {
+	kind: "mutation",
 	auth: "admin"
-}), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+}), method(StorageMigrationLeaseInputSchema, object({ refreshed: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageMigrationFootageMoveInputSchema, object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ jobId: string() }), RelocateJobSchema.nullable(), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
 	kind: "mutation",
 	auth: "admin"
 });
@@ -27167,6 +27368,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"osdManager.copyDeviceConfiguration": {
+		capName: "osd-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"osdManager.getConditionSupport": {
 		capName: "osd-manager",
 		capScope: "system",
@@ -27263,7 +27470,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineAnalytics.cancelMediaRelocate": {
+	"pipelineAnalytics.cancelStorageMigrationMove": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
@@ -27335,12 +27542,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.getMediaRelocateStatus": {
-		capName: "pipeline-analytics",
-		capScope: "device",
-		addonId: null,
-		access: "view"
-	},
 	"pipelineAnalytics.getMotionEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27377,6 +27578,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getStorageMigrationMoveStatus": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getTrack": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27455,6 +27662,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.pauseForStorageMigration": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.proposeRetrainAnnotations": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27485,7 +27698,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineAnalytics.relocateMedia": {
+	"pipelineAnalytics.refreshStorageLocationsForMigration": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
@@ -27497,6 +27710,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.resumeForStorageMigration": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.saveRetrainAnnotations": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27521,6 +27740,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.startStorageMigrationMove": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.wipeAllAnalytics": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -27887,6 +28112,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.pauseForStorageMigration": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.rebalance": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -27911,6 +28142,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.resumeForStorageMigration": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.saveTemplate": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -28307,7 +28544,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"recording.cancelRelocate": {
+	"recording.cancelStorageMigrationMove": {
 		capName: "recording",
 		capScope: "system",
 		addonId: null,
@@ -28343,7 +28580,7 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"recording.getRelocateStatus": {
+	"recording.getStorageMigrationMoveStatus": {
 		capName: "recording",
 		capScope: "system",
 		addonId: null,
@@ -28367,6 +28604,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.pauseForStorageMigration": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recording.pruneFootage": {
 		capName: "recording",
 		capScope: "system",
@@ -28385,7 +28628,7 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"recording.relocateFootage": {
+	"recording.refreshStorageLocationsForMigration": {
 		capName: "recording",
 		capScope: "system",
 		addonId: null,
@@ -28409,12 +28652,24 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.resumeForStorageMigration": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recording.setDeviceConfig": {
 		capName: "recording",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"recording.startStorageMigrationMove": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recordingExport.cancelExport": {
 		capName: "recordingExport",
 		capScope: "system",
@@ -28805,6 +29060,30 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"storageMigration.cancel": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.plan": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"storageMigration.start": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.status": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageProvider.abortUpload": {
 		capName: "storage-provider",
 		capScope: "system",
@@ -29183,12 +29462,42 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.adoptLegacyMonitor": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"terminalSession.close": {
 		capName: "terminal-session",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.createInstance": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"terminalSession.deleteInstance": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"terminalSession.listInstances": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"terminalSession.listLegacyCameras": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"terminalSession.listProfiles": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -29207,12 +29516,30 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.pullOutput": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"terminalSession.resize": {
 		capName: "terminal-session",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.setInstanceEnabled": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"terminalSession.writeInput": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"toast.onToast": {
 		capName: "toast",
 		capScope: "system",

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-CwEZ_Wrh.js");
+const require_dist = require("../dist-GM5pUTqy.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 //#region src/ingress/tailscale-cli.ts

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { i as EventCategory, n as networkAccessCapability, r as BaseAddon } from "../dist-BB6_UnWs.mjs";
+import { i as EventCategory, n as networkAccessCapability, r as BaseAddon } from "../dist-DodL65lc.mjs";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.2.10",
+  "version": "1.2.12",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",