@camstack/core 0.1.35 → 0.1.36

package/dist/index.mjs

@@ -31,7 +31,7 @@ import { promisify } from "node:util";
 import { errMsg, parseJsonObject } from "@camstack/types";
 import * as vm from "node:vm";
 import * as os from "node:os";
-//#region ../types/dist/index-BBVUwOlZ.mjs
+//#region ../types/dist/index-YnRVILXN.mjs
 var MODEL_FORMATS = [
 	"onnx",
 	"coreml",
@@ -4808,7 +4808,9 @@ var MeshPeerSchema = z.object({
 	id: z.string(),
 	/** Hostname / device name as shown in the mesh dashboard. */
 	hostname: z.string(),
-	/** Mesh IP(s). Multiple when the peer is dual-stacked. */
+	/** MagicDNS / mesh DNS name (e.g. `peer-foo.tail-abc.ts.net`). Empty when the provider doesn't support DNS or peer-side resolution is disabled. */
+	magicDns: z.string(),
+	/** Mesh IPv4 / IPv6 addresses combined. Multiple when dual-stacked. */
 	addresses: z.array(z.string()).readonly(),
 	/** Operating system reported by the peer (informational). */
 	os: z.string().optional(),
@@ -4817,7 +4819,36 @@ var MeshPeerSchema = z.object({
 	/** Last-seen timestamp (epoch ms). 0 when never seen. */
 	lastSeenMs: z.number(),
 	/** True for the row representing the current host. */
-	isSelf: z.boolean()
+	isSelf: z.boolean(),
+	/**
+	* Connection mode to this peer:
+	*   - `direct`: NAT-traversed P2P (UDP punched)
+	*   - `relay`: traffic relayed through provider edge (Tailscale DERP)
+	*   - `idle`: peer reachable but no recent traffic / handshake
+	*/
+	connection: z.enum([
+		"direct",
+		"relay",
+		"idle"
+	]),
+	/** DERP region / relay node identifier when `connection: relay`. Null otherwise. */
+	relay: z.string().nullable(),
+	/** Last successful handshake timestamp (epoch ms). 0 when never. */
+	lastHandshakeMs: z.number(),
+	/** Bytes received from this peer since the daemon started. */
+	rxBytes: z.number(),
+	/** Bytes transmitted to this peer since the daemon started. */
+	txBytes: z.number(),
+	/** ACL tags this peer carries (e.g. `["tag:server"]`). Empty when human-owned. */
+	tags: z.array(z.string()).readonly(),
+	/** True when the peer advertises itself as an exit-node candidate. */
+	exitNodeOption: z.boolean(),
+	/** Subnet routes the peer advertises (e.g. `["192.168.1.0/24"]`). */
+	advertisedRoutes: z.array(z.string()).readonly(),
+	/** Owner account login (e.g. `foo@example.com`). Null for tagged peers. */
+	userLogin: z.string().nullable(),
+	/** Pre-auth key / machine-key expiry (epoch ms). Null when keys don't expire. */
+	keyExpiry: z.number().nullable()
 });
 var MeshStatusSchema = z.object({
 	/** True when the host is joined and the daemon reports healthy. */
@@ -4831,7 +4862,37 @@ var MeshStatusSchema = z.object({
 	/** Every endpoint this provider exposes for the current host. */
 	endpoints: z.array(MeshEndpointSchema$1).readonly(),
 	/** Last error from the daemon, when not joined. */
-	error: z.string().optional()
+	error: z.string().optional(),
+	/**
+	* Tenant / tailnet / network display name (Tailscale = tailnet
+	* domain, Headscale = namespace, ZeroTier = network name). Empty
+	* pre-join. Per-provider semantics, common slot.
+	*/
+	tenantName: z.string(),
+	/**
+	* Mesh DNS suffix when the provider exposes peer-resolvable DNS
+	* (Tailscale MagicDNS, Headscale MagicDNS, …). Empty when the
+	* provider doesn't ship DNS (e.g. ZeroTier).
+	*/
+	magicDnsSuffix: z.string(),
+	/**
+	* Authenticated user / account login bound to this host. Null when
+	* the provider authenticates with a long-lived network token rather
+	* than a user account (e.g. ZeroTier API token).
+	*/
+	userLogin: z.string().nullable(),
+	/**
+	* Provider control-plane URL (Tailscale SaaS `https://login.tailscale.com`,
+	* self-hosted Headscale, ZeroTier Central, …). Empty when not
+	* applicable (rare).
+	*/
+	controlPlaneUrl: z.string(),
+	/**
+	* Machine-key / node-key expiry (epoch ms). Null when the provider
+	* doesn't rotate keys for the bound host. Operator-facing surface
+	* for "your access expires on …" banners.
+	*/
+	keyExpiry: z.number().nullable()
 });
 method(z.void(), MeshStatusSchema), method(z.object({
 	/** Provider-specific auth key. For Tailscale this is the
@@ -4843,7 +4904,7 @@ method(z.void(), MeshStatusSchema), method(z.object({
 /** Optional hostname override the host should advertise once joined. */
 hostname: z.string().optional() }), z.object({ 
 /** Authentication URL the operator should open in a browser. */
-loginUrl: z.string() }), { kind: "mutation" }), method(z.void(), z.object({ left: z.literal(true) }), { kind: "mutation" }), method(z.void(), z.object({ peers: z.array(MeshPeerSchema).readonly() })), method(z.object({ 
+loginUrl: z.string() }), { kind: "mutation" }), method(z.void(), z.object({ left: z.literal(true) }), { kind: "mutation" }), method(z.void(), z.object({ loggedOut: z.literal(true) }), { kind: "mutation" }), method(z.void(), z.object({ peers: z.array(MeshPeerSchema).readonly() })), method(z.object({ 
 /** Optional auth key — when provided, probes the key validity
 *  against the provider's API. Omit when already joined to
 *  just ping the daemon. */
@@ -4882,13 +4943,26 @@ var MeshProviderInfoSchema = z.object({
 	/** Active endpoints (mesh IP + MagicDNS + optional public Funnel). */
 	endpoints: z.array(MeshEndpointSchema).readonly(),
 	/** Last error reported by the provider. */
-	error: z.string().optional()
+	error: z.string().optional(),
+	/** Tenant / tailnet / network display name. Empty pre-join. */
+	tenantName: z.string(),
+	/** Mesh DNS suffix (e.g. tailXXXX.ts.net). Empty when not configured. */
+	magicDnsSuffix: z.string(),
+	/** Authenticated user / account login. Null for token-only providers. */
+	userLogin: z.string().nullable(),
+	/** Provider control-plane URL. */
+	controlPlaneUrl: z.string(),
+	/** Machine-key expiry (epoch ms). Null when keys don't rotate. */
+	keyExpiry: z.number().nullable()
 });
 method(z.void(), z.array(MeshProviderInfoSchema).readonly()), method(z.object({
 	addonId: z.string(),
 	authKey: z.string().min(8),
 	hostname: z.string().optional()
-}), z.object({ joined: z.literal(true) }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ success: z.literal(true) }), { kind: "mutation" });
+}), z.object({ joined: z.literal(true) }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ success: z.literal(true) }), { kind: "mutation" }), method(z.object({
+	addonId: z.string(),
+	hostname: z.string().optional()
+}), z.object({ loginUrl: z.string() }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ loggedOut: z.literal(true) }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ peers: z.array(MeshPeerSchema).readonly() }));
 var MethodAccessSchema = z.enum([
 	"view",
 	"create",
@@ -4975,6 +5049,13 @@ var UserSummarySchema = z.object({
 	allowedProviders: z.union([z.array(z.string()), z.literal("*")]),
 	allowedDevices: z.record(z.string(), z.union([z.array(z.string()), z.literal("*")])),
 	scopes: z.array(TokenScopeSchema).default([]),
+	/**
+	* True iff this user has a CONFIRMED TOTP enrollment. Surfaced on
+	* `listUsers` so the admin Users page can render the "Remove 2FA"
+	* action conditionally without firing one `getTotpStatus` query per
+	* row. Self-service enrollment lives on the user's profile page.
+	*/
+	totpEnabled: z.boolean().default(false),
 	createdAt: z.number(),
 	updatedAt: z.number()
 });
@@ -5237,6 +5318,12 @@ var NodeAddonInputSchema = z.object({
 	nodeId: z.string(),
 	addonId: z.string()
 });
+var NodeAddonEntrySchema = z.object({
+	id: z.string(),
+	status: z.string(),
+	version: z.string().optional(),
+	packageName: z.string().optional()
+});
 var SuccessSchema = z.object({ success: z.boolean() });
 var RestartProcessResultSchema = z.object({
 	success: z.boolean(),
@@ -5277,7 +5364,7 @@ method(z.void(), z.array(TopologyNodeSchema).readonly(), { auth: "admin" }), met
 }), RenameNodeResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(z.void(), z.record(z.string(), ClusterAddonStatusEntrySchema), { auth: "admin" }), method(z.object({
+}), method(z.void(), z.record(z.string(), ClusterAddonStatusEntrySchema), { auth: "admin" }), method(z.object({ nodeId: z.string() }), z.array(NodeAddonEntrySchema).readonly(), { auth: "admin" }), method(z.object({
 	nodeId: z.string(),
 	level: z.string()
 }), SuccessSchema, {