@camstack/addon-tailscale 1.2.39 → 1.2.42

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-DXDI20wF.js");
+const require_dist = require("../dist-XsZAD0zE.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-CNu9kGot.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-D1h1qkz3.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-CNu9kGot.mjs → dist-D1h1qkz3.mjs}

@@ -13635,6 +13635,50 @@ var NodeProcessSchema = object({
 	/** Wall-clock uptime (seconds). Parsed from `ps etime`. */
 	uptimeSec: number()
 });
+/**
+* One retained container-memory reading.
+*
+* `atMs` is the timestamp of the PROCESS snapshot taken in the same tick, not
+* a second clock: that is what makes "processes sum to X, container says Y"
+* subtractable per point rather than an eyeballed comparison of two series
+* sampled at different instants.
+*
+* A reduced window keeps the sample with the LARGEST `currentBytes` in each
+* bucket, WHOLE. Taking a per-field maximum would synthesise a row whose parts
+* never coexisted, and a mean would smear away the peak this exists to find.
+*/
+var ContainerMemoryPointSchema = object({
+	/** Which hierarchy answered, so a reading is never ambiguous. */
+	source: _enum(["cgroup-v2", "cgroup-v1"]),
+	/** `memory.current` (v2) / `memory.usage_in_bytes` (v1). Always known. */
+	currentBytes: number(),
+	/** The cgroup's ceiling. `null` = NO LIMIT — never a sentinel, never zero. */
+	limitBytes: number().nullable(),
+	/** Anonymous pages: the closest thing to "what the processes allocated". */
+	anonBytes: number().nullable(),
+	/** Page cache. Charged to the cgroup, owned by no process. */
+	fileBytes: number().nullable(),
+	/**
+	* Shared memory — and the field that explained the largest single surprise.
+	* The i915 driver backs GPU buffers with shmem, so an inference pool or a
+	* hardware-decode session holding DRM objects is charged HERE and appears
+	* nowhere in a `ps` scan.
+	*/
+	shmemBytes: number().nullable(),
+	/** Kernel slab charged to this cgroup. `null` on v1, which never publishes it. */
+	slabBytes: number().nullable(),
+	/**
+	* Shrinkable i915 GEM object bytes, from debugfs.
+	*
+	* **Host-wide across every DRM client, NOT cgroup-scoped.** It is not a
+	* component of `currentBytes` and must not be subtracted from it; it says
+	* what put the shmem there, where `shmemBytes` only says how much.
+	*
+	* `null` wherever debugfs is not mounted — which is inside every camstack
+	* container today — and on any node with no Intel GPU.
+	*/
+	gpuShmemBytes: number().nullable()
+}).extend({ atMs: number() });
 var DumpHeapSnapshotInputSchema = object({ 
 /** The addon whose runner should dump a heap snapshot. */
 addonId: string() });
@@ -13698,6 +13742,21 @@ var NodeLoadSeriesSchema = object({
 	/** One entry per function seen in the window, heaviest-first. */
 	series: array(LoadFunctionSeriesSchema).readonly(),
 	/**
+	* The CONTAINER's memory over the same window, oldest-first.
+	*
+	* Sits next to `series` rather than in a method of its own because the whole
+	* question is a subtraction: the per-process rows in `series` sum to one
+	* number and this one is another, and an operator who has to issue two calls
+	* to compare them will compare two different instants. Same reader, same
+	* `sinceMs`, same `bucketMs`, same timestamps.
+	*
+	* **EMPTY means ABSENT, never zero.** A node with no cgroup — a developer
+	* Mac, a bare-metal host, a container with the hierarchy hidden — reports no
+	* points at all. A zero here would be indistinguishable from a healthy
+	* container and is precisely the lie this field exists to avoid.
+	*/
+	containerMemory: array(ContainerMemoryPointSchema).readonly(),
+	/**
 	* Width of one returned bucket, in ms. Equals the sampling cadence when no
 	* reduction was needed — so a caller can always say what one point covers
 	* without having to know whether it was reduced.
@@ -23593,23 +23652,23 @@ DeviceType.Camera, method(object({ deviceId: number() }), object({
 	sdpOffer: string()
 }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number(),
 	sessionId: string(),
 	sdpAnswer: string()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number(),
 	sessionId: string()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number() }), object({ sessionId: string() }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number(),
 	/** Audio bytes for ONE frame, base64-encoded so the payload
@@ -23628,10 +23687,10 @@ DeviceType.Camera, method(object({ deviceId: number() }), object({
 	sequenceNumber: number().int()
 }), object({ accepted: boolean() }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), object({
 	deviceId: number(),
 	status: IntercomStatusSchema
@@ -25705,10 +25764,10 @@ DeviceType.Camera, DeviceType.Sensor, DeviceType.Switch, method(object({ deviceI
 * recording config. NOTE on events (source of truth, R5/C3): this cap carries
 * NO event surface — `getPlaybackManifest` returns playlist URLs only. Timeline
 * events (motion/object/audio) come from `pipelineAnalytics` (durable SQLite
-* rows); the recorder's internal EventMap markers are ephemeral in-RAM
-* annotations that are not exposed here and must not be treated as an event
-* feed. Event<->footage joins are by time, padded with the shared `EVENT_PAD_MS`
-* (`interfaces/recording-config.ts`).
+* rows) and are the ONLY event surface — the recorder has none. The in-RAM
+* playback markers it used to build were deleted on 2026-08-29 because nothing
+* ever read them. Event<->footage joins are by time, padded with the shared
+* `EVENT_PAD_MS` (`interfaces/recording-config.ts`).
 */
 var RecordingStatusSchema = object({
 	deviceId: number(),

package/dist/{dist-DXDI20wF.js → dist-XsZAD0zE.js}

@@ -13635,6 +13635,50 @@ var NodeProcessSchema = object({
 	/** Wall-clock uptime (seconds). Parsed from `ps etime`. */
 	uptimeSec: number()
 });
+/**
+* One retained container-memory reading.
+*
+* `atMs` is the timestamp of the PROCESS snapshot taken in the same tick, not
+* a second clock: that is what makes "processes sum to X, container says Y"
+* subtractable per point rather than an eyeballed comparison of two series
+* sampled at different instants.
+*
+* A reduced window keeps the sample with the LARGEST `currentBytes` in each
+* bucket, WHOLE. Taking a per-field maximum would synthesise a row whose parts
+* never coexisted, and a mean would smear away the peak this exists to find.
+*/
+var ContainerMemoryPointSchema = object({
+	/** Which hierarchy answered, so a reading is never ambiguous. */
+	source: _enum(["cgroup-v2", "cgroup-v1"]),
+	/** `memory.current` (v2) / `memory.usage_in_bytes` (v1). Always known. */
+	currentBytes: number(),
+	/** The cgroup's ceiling. `null` = NO LIMIT — never a sentinel, never zero. */
+	limitBytes: number().nullable(),
+	/** Anonymous pages: the closest thing to "what the processes allocated". */
+	anonBytes: number().nullable(),
+	/** Page cache. Charged to the cgroup, owned by no process. */
+	fileBytes: number().nullable(),
+	/**
+	* Shared memory — and the field that explained the largest single surprise.
+	* The i915 driver backs GPU buffers with shmem, so an inference pool or a
+	* hardware-decode session holding DRM objects is charged HERE and appears
+	* nowhere in a `ps` scan.
+	*/
+	shmemBytes: number().nullable(),
+	/** Kernel slab charged to this cgroup. `null` on v1, which never publishes it. */
+	slabBytes: number().nullable(),
+	/**
+	* Shrinkable i915 GEM object bytes, from debugfs.
+	*
+	* **Host-wide across every DRM client, NOT cgroup-scoped.** It is not a
+	* component of `currentBytes` and must not be subtracted from it; it says
+	* what put the shmem there, where `shmemBytes` only says how much.
+	*
+	* `null` wherever debugfs is not mounted — which is inside every camstack
+	* container today — and on any node with no Intel GPU.
+	*/
+	gpuShmemBytes: number().nullable()
+}).extend({ atMs: number() });
 var DumpHeapSnapshotInputSchema = object({ 
 /** The addon whose runner should dump a heap snapshot. */
 addonId: string() });
@@ -13698,6 +13742,21 @@ var NodeLoadSeriesSchema = object({
 	/** One entry per function seen in the window, heaviest-first. */
 	series: array(LoadFunctionSeriesSchema).readonly(),
 	/**
+	* The CONTAINER's memory over the same window, oldest-first.
+	*
+	* Sits next to `series` rather than in a method of its own because the whole
+	* question is a subtraction: the per-process rows in `series` sum to one
+	* number and this one is another, and an operator who has to issue two calls
+	* to compare them will compare two different instants. Same reader, same
+	* `sinceMs`, same `bucketMs`, same timestamps.
+	*
+	* **EMPTY means ABSENT, never zero.** A node with no cgroup — a developer
+	* Mac, a bare-metal host, a container with the hierarchy hidden — reports no
+	* points at all. A zero here would be indistinguishable from a healthy
+	* container and is precisely the lie this field exists to avoid.
+	*/
+	containerMemory: array(ContainerMemoryPointSchema).readonly(),
+	/**
 	* Width of one returned bucket, in ms. Equals the sampling cadence when no
 	* reduction was needed — so a caller can always say what one point covers
 	* without having to know whether it was reduced.
@@ -23593,23 +23652,23 @@ DeviceType.Camera, method(object({ deviceId: number() }), object({
 	sdpOffer: string()
 }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number(),
 	sessionId: string(),
 	sdpAnswer: string()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number(),
 	sessionId: string()
 }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number() }), object({ sessionId: string() }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number(),
 	/** Audio bytes for ONE frame, base64-encoded so the payload
@@ -23628,10 +23687,10 @@ DeviceType.Camera, method(object({ deviceId: number() }), object({
 	sequenceNumber: number().int()
 }), object({ accepted: boolean() }), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "protected"
 }), object({
 	deviceId: number(),
 	status: IntercomStatusSchema
@@ -25705,10 +25764,10 @@ DeviceType.Camera, DeviceType.Sensor, DeviceType.Switch, method(object({ deviceI
 * recording config. NOTE on events (source of truth, R5/C3): this cap carries
 * NO event surface — `getPlaybackManifest` returns playlist URLs only. Timeline
 * events (motion/object/audio) come from `pipelineAnalytics` (durable SQLite
-* rows); the recorder's internal EventMap markers are ephemeral in-RAM
-* annotations that are not exposed here and must not be treated as an event
-* feed. Event<->footage joins are by time, padded with the shared `EVENT_PAD_MS`
-* (`interfaces/recording-config.ts`).
+* rows) and are the ONLY event surface — the recorder has none. The in-RAM
+* playback markers it used to build were deleted on 2026-08-29 because nothing
+* ever read them. Event<->footage joins are by time, padded with the shared
+* `EVENT_PAD_MS` (`interfaces/recording-config.ts`).
 */
 var RecordingStatusSchema = object({
 	deviceId: number(),

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DXDI20wF.js");
+const require_dist = require("../dist-XsZAD0zE.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 //#region src/ingress/tailscale-cli.ts

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-CNu9kGot.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-D1h1qkz3.mjs";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.2.39",
+  "version": "1.2.42",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",