@camstack/addon-tailscale 1.2.52 → 1.2.55

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-BYSC8bJK.js");
+const require_dist = require("../dist-BmbP0N1f.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-COyLQeD1.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-DSSjHdog.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-BYSC8bJK.js → dist-BmbP0N1f.js}

@@ -7735,7 +7735,8 @@ var OpsLogReasonSchema = _enum([
 	"quota",
 	"manual",
 	"operator",
-	"maintenance"
+	"maintenance",
+	"orphaned-device"
 ]);
 /** One audit row, shared verbatim by both domains. */
 var OpsLogEntrySchema = object({
@@ -12766,10 +12767,39 @@ var DevicePersistConfigPayloadSchema = object({
 	deviceId: number(),
 	data: record(string(), unknown())
 });
+/** What a migration actually did, per switch. `unreachable` is a first-class
+*  answer: a camera that could not be asked is not a camera that was silenced. */
+var MigrateSwitchOutcomeSchema = _enum([
+	"off",
+	"on",
+	"not-offered",
+	"unreachable"
+]);
+var MigrateSwitchReportSchema = object({
+	deviceId: number(),
+	switchId: CameraSwitchIdSchema,
+	outcome: MigrateSwitchOutcomeSchema,
+	detail: string().optional()
+});
+var MigrateDeviceResultSchema = object({
+	sourceId: number(),
+	targetId: number(),
+	switches: array(MigrateSwitchReportSchema).readonly(),
+	/** Switches that could NOT be turned off on the source. Empty is the only
+	*  value meaning the replaced hardware is quiet. */
+	sourceStillLive: array(CameraSwitchIdSchema).readonly(),
+	swapped: boolean()
+});
 method(object({
 	addonId: string(),
 	stableId: string()
-}), object({ id: number() }), { kind: "mutation" }), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
+}), object({ id: number() }), { kind: "mutation" }), method(object({
+	sourceId: number(),
+	targetId: number()
+}), MigrateDeviceResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
 	deviceId: number(),
 	name: string()
 }), _void(), {
@@ -13244,6 +13274,35 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -13515,16 +13574,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -13692,7 +13754,13 @@ var ProfileRefInputSchema = object({
 	addonId: string(),
 	profileId: string()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string().optional(),
 	requestId: string()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -13703,7 +13771,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string().nullable()
@@ -30350,6 +30419,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.migrateDevice": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.persistConfig": {
 		capName: "device-manager",
 		capScope: "system",

package/dist/{dist-COyLQeD1.mjs → dist-DSSjHdog.mjs}

@@ -7735,7 +7735,8 @@ var OpsLogReasonSchema = _enum([
 	"quota",
 	"manual",
 	"operator",
-	"maintenance"
+	"maintenance",
+	"orphaned-device"
 ]);
 /** One audit row, shared verbatim by both domains. */
 var OpsLogEntrySchema = object({
@@ -12766,10 +12767,39 @@ var DevicePersistConfigPayloadSchema = object({
 	deviceId: number(),
 	data: record(string(), unknown())
 });
+/** What a migration actually did, per switch. `unreachable` is a first-class
+*  answer: a camera that could not be asked is not a camera that was silenced. */
+var MigrateSwitchOutcomeSchema = _enum([
+	"off",
+	"on",
+	"not-offered",
+	"unreachable"
+]);
+var MigrateSwitchReportSchema = object({
+	deviceId: number(),
+	switchId: CameraSwitchIdSchema,
+	outcome: MigrateSwitchOutcomeSchema,
+	detail: string().optional()
+});
+var MigrateDeviceResultSchema = object({
+	sourceId: number(),
+	targetId: number(),
+	switches: array(MigrateSwitchReportSchema).readonly(),
+	/** Switches that could NOT be turned off on the source. Empty is the only
+	*  value meaning the replaced hardware is quiet. */
+	sourceStillLive: array(CameraSwitchIdSchema).readonly(),
+	swapped: boolean()
+});
 method(object({
 	addonId: string(),
 	stableId: string()
-}), object({ id: number() }), { kind: "mutation" }), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
+}), object({ id: number() }), { kind: "mutation" }), method(object({
+	sourceId: number(),
+	targetId: number()
+}), MigrateDeviceResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(DeviceRegisterPayloadSchema, _void(), { kind: "mutation" }), method(DeviceRemovePayloadSchema, _void(), { kind: "mutation" }), method(DevicePersistConfigPayloadSchema, _void(), { kind: "mutation" }), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), record(string(), unknown())), method(object({ deviceId: number() }), DeviceMetaSchema.nullable()), method(object({
 	deviceId: number(),
 	name: string()
 }), _void(), {
@@ -13244,6 +13274,35 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -13515,16 +13574,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -13692,7 +13754,13 @@ var ProfileRefInputSchema = object({
 	addonId: string(),
 	profileId: string()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string().optional(),
 	requestId: string()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -13703,7 +13771,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string().nullable()
@@ -30350,6 +30419,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.migrateDevice": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.persistConfig": {
 		capName: "device-manager",
 		capScope: "system",

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-BYSC8bJK.js");
+const require_dist = require("../dist-BmbP0N1f.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 //#region src/ingress/tailscale-cli.ts

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-COyLQeD1.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-DSSjHdog.mjs";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.2.52",
+  "version": "1.2.55",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",