@camstack/addon-tailscale 1.2.93 → 1.2.94

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-CTEYUMoP.js");
+const require_dist = require("../dist-zVDTQPmu.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-DhBYDSGp.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-Cp75afkR.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-DhBYDSGp.mjs → dist-Cp75afkR.mjs}

@@ -16176,6 +16176,7 @@ var NcSystemEventKindSchema = _enum([
 	"addon-crash-loop",
 	"addon-update-available",
 	"server-update-available",
+	"wrapper-update-available",
 	"alarm-triggered",
 	"alarm-armed",
 	"alarm-disarmed",
@@ -21692,6 +21693,53 @@ var ImageContractSchema = object({
 	/** One operator-grade sentence: this node runs image X; the contract says Y. */
 	message: string()
 });
+/**
+* The shell verdict (see {@link WrapperKindSchema}) with the proofs that
+* produced it.
+*
+* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
+* update is an ANNOUNCEMENT. The notification body carries the exact command
+* for a `docker` shell and says the app restarts into the new build for
+* `electron`, and that sentence is chosen from `kind` alone — a boolean
+* nothing reads is the defect this repo keeps paying for.
+*/
+var WrapperIdentitySchema = object({
+	kind: _enum([
+		"docker",
+		"electron",
+		"native",
+		"contradictory",
+		"unknown"
+	]),
+	/** Every probe that ran, in a stable order. Never empty. */
+	evidence: array(object({
+		/** Which probe this row reports. */
+		fact: _enum([
+			"dockerenv-file",
+			"proc-1-cgroup",
+			"platform",
+			"electron-app-version-env"
+		]),
+		/**
+		* `observed` — this process read it itself. `declared` — the shell told the
+		* process and nothing here can check it. Only the Electron app version is
+		* ever `declared`, and only because a child cannot see its parent.
+		*/
+		mode: _enum(["observed", "declared"]),
+		/** Did the probe support the fact it names? A `false` row is still evidence. */
+		holds: boolean(),
+		/** What was actually read, verbatim enough for an operator to argue with. */
+		detail: string()
+	})),
+	/**
+	* The version of the SHELL, when the shell has one it can state: the
+	* Electron app version it declared, or the baked seed closure that
+	* fingerprints a container / app bundle. `null` for `contradictory` and
+	* `unknown` — which version belongs to the shell is precisely what is not
+	* known there.
+	*/
+	currentVersion: string().nullable()
+});
 var ServerRollbackInfoSchema = object({
 	/** The version that failed (or was manually rolled back). */
 	fromVersion: string(),
@@ -21733,7 +21781,13 @@ var ServerPackageStatusSchema = object({
 	* Seed-vs-contract verdict (see {@link ImageContractSchema}). Optional for
 	* version skew: an older provider's payload simply omits it.
 	*/
-	imageContract: ImageContractSchema.optional()
+	imageContract: ImageContractSchema.optional(),
+	/**
+	* What this node runs INSIDE (see {@link WrapperIdentitySchema}). Optional
+	* for version skew: an older provider's payload simply omits it, and an
+	* absent wrapper is unknown — never `native`.
+	*/
+	wrapper: WrapperIdentitySchema.optional()
 });
 var ServerUpdateCheckResultSchema = object({
 	packageName: string(),

package/dist/{dist-CTEYUMoP.js → dist-zVDTQPmu.js}

@@ -16176,6 +16176,7 @@ var NcSystemEventKindSchema = _enum([
 	"addon-crash-loop",
 	"addon-update-available",
 	"server-update-available",
+	"wrapper-update-available",
 	"alarm-triggered",
 	"alarm-armed",
 	"alarm-disarmed",
@@ -21692,6 +21693,53 @@ var ImageContractSchema = object({
 	/** One operator-grade sentence: this node runs image X; the contract says Y. */
 	message: string()
 });
+/**
+* The shell verdict (see {@link WrapperKindSchema}) with the proofs that
+* produced it.
+*
+* There is deliberately NO `canSelfUpdate` and no apply action: a wrapper
+* update is an ANNOUNCEMENT. The notification body carries the exact command
+* for a `docker` shell and says the app restarts into the new build for
+* `electron`, and that sentence is chosen from `kind` alone — a boolean
+* nothing reads is the defect this repo keeps paying for.
+*/
+var WrapperIdentitySchema = object({
+	kind: _enum([
+		"docker",
+		"electron",
+		"native",
+		"contradictory",
+		"unknown"
+	]),
+	/** Every probe that ran, in a stable order. Never empty. */
+	evidence: array(object({
+		/** Which probe this row reports. */
+		fact: _enum([
+			"dockerenv-file",
+			"proc-1-cgroup",
+			"platform",
+			"electron-app-version-env"
+		]),
+		/**
+		* `observed` — this process read it itself. `declared` — the shell told the
+		* process and nothing here can check it. Only the Electron app version is
+		* ever `declared`, and only because a child cannot see its parent.
+		*/
+		mode: _enum(["observed", "declared"]),
+		/** Did the probe support the fact it names? A `false` row is still evidence. */
+		holds: boolean(),
+		/** What was actually read, verbatim enough for an operator to argue with. */
+		detail: string()
+	})),
+	/**
+	* The version of the SHELL, when the shell has one it can state: the
+	* Electron app version it declared, or the baked seed closure that
+	* fingerprints a container / app bundle. `null` for `contradictory` and
+	* `unknown` — which version belongs to the shell is precisely what is not
+	* known there.
+	*/
+	currentVersion: string().nullable()
+});
 var ServerRollbackInfoSchema = object({
 	/** The version that failed (or was manually rolled back). */
 	fromVersion: string(),
@@ -21733,7 +21781,13 @@ var ServerPackageStatusSchema = object({
 	* Seed-vs-contract verdict (see {@link ImageContractSchema}). Optional for
 	* version skew: an older provider's payload simply omits it.
 	*/
-	imageContract: ImageContractSchema.optional()
+	imageContract: ImageContractSchema.optional(),
+	/**
+	* What this node runs INSIDE (see {@link WrapperIdentitySchema}). Optional
+	* for version skew: an older provider's payload simply omits it, and an
+	* absent wrapper is unknown — never `native`.
+	*/
+	wrapper: WrapperIdentitySchema.optional()
 });
 var ServerUpdateCheckResultSchema = object({
 	packageName: string(),

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-CTEYUMoP.js");
+const require_dist = require("../dist-zVDTQPmu.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 //#region src/ingress/tailscale-cli.ts

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-DhBYDSGp.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-Cp75afkR.mjs";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.2.93",
+  "version": "1.2.94",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",