@camstack/addon-tailscale 1.2.53 → 1.2.55

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-BFbW-DND.js");
+const require_dist = require("../dist-BmbP0N1f.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-DCvDQ86T.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-DSSjHdog.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-BFbW-DND.js → dist-BmbP0N1f.js}

@@ -13274,6 +13274,35 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -13545,16 +13574,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -13722,7 +13754,13 @@ var ProfileRefInputSchema = object({
 	addonId: string(),
 	profileId: string()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string().optional(),
 	requestId: string()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -13733,7 +13771,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string().nullable()

package/dist/{dist-DCvDQ86T.mjs → dist-DSSjHdog.mjs}

@@ -13274,6 +13274,35 @@ method(_void(), array(string()).readonly(), { auth: "admin" }), method(object({
 	auth: "admin"
 });
 /**
+* Transport bounds for AI capability methods.
+*
+* Its own module because `llm.cap.ts` and `llm-runtime.cap.ts` already import
+* each other: declaring the constant in either one hands the other `undefined`
+* at module-init time, and an undefined `timeoutMs` silently falls back to the
+* kernel's 60 s default — the exact failure this constant exists to prevent,
+* reintroduced invisibly. Found by the guard, not by review.
+*/
+/**
+* Ceiling for a cap method that runs inference or loads a model.
+*
+* Deliberately far above anything the AI layer itself may wait for (a summary
+* asks 180 s by default, a rule may ask 600 s), because the TRANSPORT must
+* never be the layer that gives up first: when it does, the failure is
+* reported as a transport error for a model that was still thinking, naming
+* the wrong layer and hiding the real one.
+*
+* Measured 2026-09-03: a 6-image vision request needs 44.8 s warm and ~20 s
+* more on a cold model load. With no declaration every digest failed at
+* exactly 60 s and shipped without its text.
+*
+* A ceiling, not a budget. The AI layer's own timeouts (the rule's `timeoutMs`,
+* the profile's `timeoutMs` / `firstTokenTimeoutMs`) remain the things that
+* decide when to stop, because only they can say WHY.
+*/
+var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
+/** A multi-gigabyte download. An hour is not generous, it is honest. */
+var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
+/**
 * Shared LLM generate contracts — imported by BOTH `llm.cap.ts` (consumer
 * surface) and `llm-runtime.cap.ts` (node-side managed executor) so the two
 * caps stay wire-compatible without a circular cap→cap import.
@@ -13545,16 +13574,19 @@ method(LlmGenerateBaseInputSchema.extend({
 	timeoutMs: number().int().positive().optional()
 }), LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(object({}), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({}), LlmRuntimeStatusSchema, { auth: "admin" }), method(object({ model: ManagedModelRefSchema }), _void(), {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_MODEL_INSTALL_TIMEOUT_MS
 }), method(object({ file: string() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -13722,7 +13754,13 @@ var ProfileRefInputSchema = object({
 	addonId: string(),
 	profileId: string()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(GenerateVisionInputSchema, LlmGenerateResultSchema, {
+	kind: "mutation",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
+}), method(object({
 	addonId: string().optional(),
 	requestId: string()
 }), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
@@ -13733,7 +13771,8 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	auth: "admin"
 }), method(ProfileRefInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 }), method(ProfileRefInputSchema, array(string())), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string().nullable()

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-BFbW-DND.js");
+const require_dist = require("../dist-BmbP0N1f.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 //#region src/ingress/tailscale-cli.ts

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-DCvDQ86T.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-DSSjHdog.mjs";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.2.53",
+  "version": "1.2.55",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",