@camstack/core 0.1.35 → 0.1.37

package/dist/index.mjs

@@ -31,7 +31,7 @@ import { promisify } from "node:util";
 import { errMsg, parseJsonObject } from "@camstack/types";
 import * as vm from "node:vm";
 import * as os from "node:os";
-//#region ../types/dist/index-BBVUwOlZ.mjs
+//#region ../types/dist/index-Ce7RZWP4.mjs
 var MODEL_FORMATS = [
 	"onnx",
 	"coreml",
@@ -2648,10 +2648,30 @@ var LinkStateSchema = z.enum([
 	"linked",
 	"error"
 ]);
+var ExportSetupFieldSchema = z.object({
+	label: z.string(),
+	value: z.string(),
+	/** Mask the value by default + render a reveal toggle (client id, secrets). */
+	secret: z.boolean().optional()
+});
+var ExportSetupSchema = z.object({
+	/** A string to render as a scannable QR — HAP `X-HM://…` URI, a pairing URL, etc. Omitted when there's nothing to scan. */
+	qr: z.string().optional(),
+	/** Label/value rows shown with a copy button (HAP setup code, OAuth URLs, client id, linked-account count, …). */
+	fields: z.array(ExportSetupFieldSchema).readonly().optional(),
+	/** Free-form operator instructions rendered above the fields. */
+	note: z.string().optional()
+});
 var DeviceExportStatusSchema = z.object({
 	linkState: LinkStateSchema,
 	exposedDeviceCount: z.number(),
-	error: z.string().optional()
+	error: z.string().optional(),
+	/**
+	* Optional pairing/account info the panel renders in a generic
+	* "Setup" section. Addon-agnostic — the addon id identifies the
+	* export target, never an `ecosystem` key here.
+	*/
+	setup: ExportSetupSchema.optional()
 });
 var DeviceKindSchema = z.string();
 var ExposedDeviceSchema = z.object({
@@ -4808,7 +4828,9 @@ var MeshPeerSchema = z.object({
 	id: z.string(),
 	/** Hostname / device name as shown in the mesh dashboard. */
 	hostname: z.string(),
-	/** Mesh IP(s). Multiple when the peer is dual-stacked. */
+	/** MagicDNS / mesh DNS name (e.g. `peer-foo.tail-abc.ts.net`). Empty when the provider doesn't support DNS or peer-side resolution is disabled. */
+	magicDns: z.string(),
+	/** Mesh IPv4 / IPv6 addresses combined. Multiple when dual-stacked. */
 	addresses: z.array(z.string()).readonly(),
 	/** Operating system reported by the peer (informational). */
 	os: z.string().optional(),
@@ -4817,7 +4839,36 @@ var MeshPeerSchema = z.object({
 	/** Last-seen timestamp (epoch ms). 0 when never seen. */
 	lastSeenMs: z.number(),
 	/** True for the row representing the current host. */
-	isSelf: z.boolean()
+	isSelf: z.boolean(),
+	/**
+	* Connection mode to this peer:
+	*   - `direct`: NAT-traversed P2P (UDP punched)
+	*   - `relay`: traffic relayed through provider edge (Tailscale DERP)
+	*   - `idle`: peer reachable but no recent traffic / handshake
+	*/
+	connection: z.enum([
+		"direct",
+		"relay",
+		"idle"
+	]),
+	/** DERP region / relay node identifier when `connection: relay`. Null otherwise. */
+	relay: z.string().nullable(),
+	/** Last successful handshake timestamp (epoch ms). 0 when never. */
+	lastHandshakeMs: z.number(),
+	/** Bytes received from this peer since the daemon started. */
+	rxBytes: z.number(),
+	/** Bytes transmitted to this peer since the daemon started. */
+	txBytes: z.number(),
+	/** ACL tags this peer carries (e.g. `["tag:server"]`). Empty when human-owned. */
+	tags: z.array(z.string()).readonly(),
+	/** True when the peer advertises itself as an exit-node candidate. */
+	exitNodeOption: z.boolean(),
+	/** Subnet routes the peer advertises (e.g. `["192.168.1.0/24"]`). */
+	advertisedRoutes: z.array(z.string()).readonly(),
+	/** Owner account login (e.g. `foo@example.com`). Null for tagged peers. */
+	userLogin: z.string().nullable(),
+	/** Pre-auth key / machine-key expiry (epoch ms). Null when keys don't expire. */
+	keyExpiry: z.number().nullable()
 });
 var MeshStatusSchema = z.object({
 	/** True when the host is joined and the daemon reports healthy. */
@@ -4831,7 +4882,54 @@ var MeshStatusSchema = z.object({
 	/** Every endpoint this provider exposes for the current host. */
 	endpoints: z.array(MeshEndpointSchema$1).readonly(),
 	/** Last error from the daemon, when not joined. */
-	error: z.string().optional()
+	error: z.string().optional(),
+	/**
+	* Tenant / tailnet / network display name (Tailscale = tailnet
+	* domain, Headscale = namespace, ZeroTier = network name). Empty
+	* pre-join. Per-provider semantics, common slot.
+	*/
+	tenantName: z.string(),
+	/**
+	* Mesh DNS suffix when the provider exposes peer-resolvable DNS
+	* (Tailscale MagicDNS, Headscale MagicDNS, …). Empty when the
+	* provider doesn't ship DNS (e.g. ZeroTier).
+	*/
+	magicDnsSuffix: z.string(),
+	/**
+	* Authenticated user / account login bound to this host. Null when
+	* the provider authenticates with a long-lived network token rather
+	* than a user account (e.g. ZeroTier API token).
+	*/
+	userLogin: z.string().nullable(),
+	/**
+	* Provider control-plane URL (Tailscale SaaS `https://login.tailscale.com`,
+	* self-hosted Headscale, ZeroTier Central, …). Empty when not
+	* applicable (rare).
+	*/
+	controlPlaneUrl: z.string(),
+	/**
+	* Machine-key / node-key expiry (epoch ms). Null when the provider
+	* doesn't rotate keys for the bound host. Operator-facing surface
+	* for "your access expires on …" banners.
+	*/
+	keyExpiry: z.number().nullable(),
+	/**
+	* When the provider runs its OWN mesh daemon (e.g. the Tailscale
+	* client addon in `onboard` mode spawns a private `tailscaled`),
+	* this carries the local control-socket path. Companion addons that
+	* must drive the SAME daemon — chiefly `tailscale-ingress` for
+	* Serve/Funnel — read it to point their CLI at the right socket
+	* instead of the system default. Empty when the provider uses the
+	* host's system daemon (or doesn't have the concept).
+	*/
+	daemonSocket: z.string().optional(),
+	/**
+	* Path to the mesh CLI binary the provider downloaded for onboard
+	* mode. Companion addons reuse it so they don't need a system
+	* install when the operator chose a fully self-contained mesh.
+	* Empty in host mode.
+	*/
+	daemonCliPath: z.string().optional()
 });
 method(z.void(), MeshStatusSchema), method(z.object({
 	/** Provider-specific auth key. For Tailscale this is the
@@ -4843,7 +4941,7 @@ method(z.void(), MeshStatusSchema), method(z.object({
 /** Optional hostname override the host should advertise once joined. */
 hostname: z.string().optional() }), z.object({ 
 /** Authentication URL the operator should open in a browser. */
-loginUrl: z.string() }), { kind: "mutation" }), method(z.void(), z.object({ left: z.literal(true) }), { kind: "mutation" }), method(z.void(), z.object({ peers: z.array(MeshPeerSchema).readonly() })), method(z.object({ 
+loginUrl: z.string() }), { kind: "mutation" }), method(z.void(), z.object({ left: z.literal(true) }), { kind: "mutation" }), method(z.void(), z.object({ loggedOut: z.literal(true) }), { kind: "mutation" }), method(z.void(), z.object({ peers: z.array(MeshPeerSchema).readonly() })), method(z.object({ 
 /** Optional auth key — when provided, probes the key validity
 *  against the provider's API. Omit when already joined to
 *  just ping the daemon. */
@@ -4882,13 +4980,26 @@ var MeshProviderInfoSchema = z.object({
 	/** Active endpoints (mesh IP + MagicDNS + optional public Funnel). */
 	endpoints: z.array(MeshEndpointSchema).readonly(),
 	/** Last error reported by the provider. */
-	error: z.string().optional()
+	error: z.string().optional(),
+	/** Tenant / tailnet / network display name. Empty pre-join. */
+	tenantName: z.string(),
+	/** Mesh DNS suffix (e.g. tailXXXX.ts.net). Empty when not configured. */
+	magicDnsSuffix: z.string(),
+	/** Authenticated user / account login. Null for token-only providers. */
+	userLogin: z.string().nullable(),
+	/** Provider control-plane URL. */
+	controlPlaneUrl: z.string(),
+	/** Machine-key expiry (epoch ms). Null when keys don't rotate. */
+	keyExpiry: z.number().nullable()
 });
 method(z.void(), z.array(MeshProviderInfoSchema).readonly()), method(z.object({
 	addonId: z.string(),
 	authKey: z.string().min(8),
 	hostname: z.string().optional()
-}), z.object({ joined: z.literal(true) }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ success: z.literal(true) }), { kind: "mutation" });
+}), z.object({ joined: z.literal(true) }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ success: z.literal(true) }), { kind: "mutation" }), method(z.object({
+	addonId: z.string(),
+	hostname: z.string().optional()
+}), z.object({ loginUrl: z.string() }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ loggedOut: z.literal(true) }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ peers: z.array(MeshPeerSchema).readonly() }));
 var MethodAccessSchema = z.enum([
 	"view",
 	"create",
@@ -4975,6 +5086,13 @@ var UserSummarySchema = z.object({
 	allowedProviders: z.union([z.array(z.string()), z.literal("*")]),
 	allowedDevices: z.record(z.string(), z.union([z.array(z.string()), z.literal("*")])),
 	scopes: z.array(TokenScopeSchema).default([]),
+	/**
+	* True iff this user has a CONFIRMED TOTP enrollment. Surfaced on
+	* `listUsers` so the admin Users page can render the "Remove 2FA"
+	* action conditionally without firing one `getTotpStatus` query per
+	* row. Self-service enrollment lives on the user's profile page.
+	*/
+	totpEnabled: z.boolean().default(false),
 	createdAt: z.number(),
 	updatedAt: z.number()
 });
@@ -5237,6 +5355,12 @@ var NodeAddonInputSchema = z.object({
 	nodeId: z.string(),
 	addonId: z.string()
 });
+var NodeAddonEntrySchema = z.object({
+	id: z.string(),
+	status: z.string(),
+	version: z.string().optional(),
+	packageName: z.string().optional()
+});
 var SuccessSchema = z.object({ success: z.boolean() });
 var RestartProcessResultSchema = z.object({
 	success: z.boolean(),
@@ -5277,7 +5401,7 @@ method(z.void(), z.array(TopologyNodeSchema).readonly(), { auth: "admin" }), met
 }), RenameNodeResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(z.void(), z.record(z.string(), ClusterAddonStatusEntrySchema), { auth: "admin" }), method(z.object({
+}), method(z.void(), z.record(z.string(), ClusterAddonStatusEntrySchema), { auth: "admin" }), method(z.object({ nodeId: z.string() }), z.array(NodeAddonEntrySchema).readonly(), { auth: "admin" }), method(z.object({
 	nodeId: z.string(),
 	level: z.string()
 }), SuccessSchema, {
@@ -5487,6 +5611,21 @@ var AddonAutoUpdateSchema = ChannelWithInheritSchema;
 var RestartAddonResultSchema = z.unknown();
 var InstallPackageResultSchema = z.unknown();
 var ReloadPackagesResultSchema = z.unknown();
+var UpdateFrameworkPackageResultSchema = z.object({
+	packageName: z.string(),
+	fromVersion: z.string(),
+	toVersion: z.string(),
+	/** Ms-epoch the server scheduled its self-restart. */
+	restartingAt: z.number()
+});
+var FrameworkPackageStatusSchema = z.object({
+	packageName: z.string(),
+	currentVersion: z.string(),
+	latestVersion: z.string().nullable(),
+	hasUpdate: z.boolean(),
+	/** Optional manifest description for the row tooltip. */
+	description: z.string().optional()
+});
 var LogStreamEntrySchema = z.object({
 	timestamp: z.string(),
 	level: z.string(),
@@ -5518,21 +5657,43 @@ method(z.void(), z.array(AddonListItemSchema).readonly()), method(z.object({
 }), method(z.void(), ReloadPackagesResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(z.object({ query: z.string().optional() }), z.array(SearchResultSchema)), method(z.void(), z.array(PackageUpdateSchema).readonly(), { auth: "admin" }), method(z.object({
+}), method(z.object({ query: z.string().optional() }), z.array(SearchResultSchema)), method(z.object({ nodeId: z.string().optional() }), z.array(PackageUpdateSchema).readonly(), { auth: "admin" }), method(z.object({
 	name: z.string().min(1),
-	version: z.string().optional()
+	version: z.string().optional(),
+	nodeId: z.string().optional()
 }), z.unknown(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(z.object({ name: z.string().min(1) }), z.object({ rolledBackTo: z.string().nullable() }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(z.void(), z.unknown(), {
+}), method(z.object({ nodeId: z.string().optional() }), z.unknown(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(z.object({ confirm: z.literal(true) }), z.unknown(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(z.void(), z.object({
+	kind: z.enum([
+		"framework-update",
+		"manual",
+		"system"
+	]),
+	packageName: z.string().optional(),
+	fromVersion: z.string().optional(),
+	toVersion: z.string().optional(),
+	requestedBy: z.string().optional(),
+	requestedAt: z.number()
+}).nullable(), { auth: "admin" }), method(z.void(), z.array(FrameworkPackageStatusSchema).readonly(), { auth: "admin" }), method(z.object({ capName: z.string().min(1) }), z.array(z.object({
+	addonId: z.string(),
+	mode: z.enum(["singleton", "collection"]),
+	isActive: z.boolean()
+})).readonly()), method(z.object({
+	packageName: z.string().min(1),
+	version: z.string().optional()
+}), UpdateFrameworkPackageResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 }), method(z.object({ name: z.string() }), z.array(PackageVersionInfoSchema).readonly()), method(z.object({ addonId: z.string() }), RestartAddonResultSchema, {
 	kind: "mutation",
 	auth: "admin"