@camstack/core 0.1.36 → 0.1.38

package/dist/index.mjs

@@ -31,7 +31,7 @@ import { promisify } from "node:util";
 import { errMsg, parseJsonObject } from "@camstack/types";
 import * as vm from "node:vm";
 import * as os from "node:os";
-//#region ../types/dist/index-YnRVILXN.mjs
+//#region ../types/dist/index-CWhQOnm9.mjs
 var MODEL_FORMATS = [
 	"onnx",
 	"coreml",
@@ -2648,10 +2648,30 @@ var LinkStateSchema = z.enum([
 	"linked",
 	"error"
 ]);
+var ExportSetupFieldSchema = z.object({
+	label: z.string(),
+	value: z.string(),
+	/** Mask the value by default + render a reveal toggle (client id, secrets). */
+	secret: z.boolean().optional()
+});
+var ExportSetupSchema = z.object({
+	/** A string to render as a scannable QR — HAP `X-HM://…` URI, a pairing URL, etc. Omitted when there's nothing to scan. */
+	qr: z.string().optional(),
+	/** Label/value rows shown with a copy button (HAP setup code, OAuth URLs, client id, linked-account count, …). */
+	fields: z.array(ExportSetupFieldSchema).readonly().optional(),
+	/** Free-form operator instructions rendered above the fields. */
+	note: z.string().optional()
+});
 var DeviceExportStatusSchema = z.object({
 	linkState: LinkStateSchema,
 	exposedDeviceCount: z.number(),
-	error: z.string().optional()
+	error: z.string().optional(),
+	/**
+	* Optional pairing/account info the panel renders in a generic
+	* "Setup" section. Addon-agnostic — the addon id identifies the
+	* export target, never an `ecosystem` key here.
+	*/
+	setup: ExportSetupSchema.optional()
 });
 var DeviceKindSchema = z.string();
 var ExposedDeviceSchema = z.object({
@@ -3565,42 +3585,6 @@ method(z.object({
 	username: z.string(),
 	password: z.string()
 }), AuthResultSchema.nullable(), { kind: "mutation" }), method(z.object({ state: z.string() }), z.string()), method(z.record(z.string(), z.string()), AuthResultSchema, { kind: "mutation" }), method(z.object({ token: z.string() }), AuthResultSchema.nullable());
-var AuthProviderInfoSchema = z.object({
-	/** Stable id matching the addon id (used for `getLoginUrl({addonId,…})`). */
-	addonId: z.string(),
-	/**
-	* Per-instance id when one addon registers multiple "logical"
-	* providers (e.g. OIDC with Google + Microsoft + custom). The login
-	* URL becomes `/addon/${addonId}/${instanceId}/start` — handler reads
-	* `:instanceId` from the route. Empty/unset means the addon is a
-	* single-instance provider; the URL is `/addon/${addonId}/start`.
-	*/
-	instanceId: z.string().optional(),
-	/** Display label shown on the login button + admin row. */
-	displayName: z.string(),
-	/** Optional iconography hint (lucide-react icon name OR emoji). */
-	icon: z.string().optional(),
-	/** When true, the provider exposes a redirect-based login flow
-	*  (`getLoginUrl` returns a URL the browser navigates to). */
-	hasRedirectFlow: z.boolean(),
-	/** When true, the provider exposes a credential-form login flow
-	*  (`validateCredentials` accepts username + password). */
-	hasCredentialFlow: z.boolean(),
-	/** Provider kind, drives admin-UI hint dispatch (oidc / saml / totp / …). */
-	kind: z.string().optional(),
-	/** Operator-facing status string (e.g. "Connected to https://login.acme.com"). */
-	status: z.string().optional(),
-	/** When false, the provider is registered but disabled by config; the
-	*  UI surfaces it as inactive without enumerating it for login. */
-	enabled: z.boolean()
-});
-method(z.void(), z.array(AuthProviderInfoSchema).readonly()), method(z.object({
-	addonId: z.string(),
-	enabled: z.boolean()
-}), z.object({ success: z.literal(true) }), {
-	kind: "mutation",
-	auth: "admin"
-});
 var NetworkEndpointSchema = z.object({
 	url: z.string(),
 	hostname: z.string(),
@@ -3626,33 +3610,6 @@ var NetworkEndpointEntrySchema = NetworkEndpointSchema.extend({
 	sourcePort: z.number().optional()
 });
 method(z.void(), NetworkEndpointSchema, { kind: "mutation" }), method(z.void(), z.void(), { kind: "mutation" }), method(z.void(), NetworkEndpointSchema.nullable()), method(z.void(), NetworkAccessStatusSchema), method(z.void(), z.array(NetworkEndpointEntrySchema).readonly());
-var RemoteAccessEndpointSchema = z.object({
-	url: z.string(),
-	hostname: z.string(),
-	port: z.number(),
-	protocol: z.enum(["http", "https"])
-});
-var RemoteAccessProviderInfoSchema = z.object({
-	/** Stable id matching the addon id. */
-	addonId: z.string(),
-	/** Display label shown on the admin row — sourced from the addon manifest. */
-	displayName: z.string(),
-	/** When false, the provider is registered but disabled. */
-	enabled: z.boolean(),
-	/** True when the underlying tunnel/connection is up. */
-	connected: z.boolean(),
-	/** Public-facing endpoint, when connected. Null otherwise. */
-	endpoint: RemoteAccessEndpointSchema.nullable(),
-	/** Last error message (when connected=false), if available. */
-	error: z.string().optional()
-});
-method(z.void(), z.array(RemoteAccessProviderInfoSchema).readonly()), method(z.object({ addonId: z.string() }), RemoteAccessEndpointSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(z.object({ addonId: z.string() }), z.object({ success: z.literal(true) }), {
-	kind: "mutation",
-	auth: "admin"
-});
 var TurnServerSchema = z.object({
 	/** Single URL or list of URLs (e.g. "turn:turn.example.com:3478?transport=udp"). */
 	urls: z.union([z.string(), z.array(z.string())]),
@@ -3660,33 +3617,6 @@ var TurnServerSchema = z.object({
 	credential: z.string().optional()
 });
 method(z.void(), z.array(TurnServerSchema).readonly());
-var TurnProviderInfoSchema = z.object({
-	/** Stable id matching the addon id. */
-	addonId: z.string(),
-	/** Display label shown on the admin row — sourced from the addon manifest. */
-	displayName: z.string(),
-	/** When false, the provider is registered but disabled. */
-	enabled: z.boolean(),
-	/** Number of servers this provider is currently exposing. */
-	serverCount: z.number(),
-	/**
-	* Flat list of every TURN/STUN URL this provider currently exposes.
-	* One row per URL (multi-URL ICE server entries are flattened). The
-	* admin UI shows this in a compact per-provider list so operators
-	* can verify what's actually being negotiated without having to dig
-	* into the combined `getAllServers` output.
-	*/
-	urls: z.array(z.string()).readonly(),
-	/** Last fetch error (when serverCount=0 due to API failure), if any. */
-	error: z.string().optional()
-});
-method(z.void(), z.array(TurnProviderInfoSchema).readonly()), method(z.void(), z.array(TurnServerSchema).readonly()), method(z.object({
-	addonId: z.string(),
-	enabled: z.boolean()
-}), z.object({ success: z.literal(true) }), {
-	kind: "mutation",
-	auth: "admin"
-});
 var SnapshotImageSchema = z.object({
 	base64: z.string(),
 	contentType: z.string()
@@ -4783,7 +4713,7 @@ method(z.void(), ListResultSchema), method(z.void(), PreferredSchema), method(z.
 	*  tunnel always emits `https://` regardless. */
 	scheme: z.enum(["http", "https"]).optional()
 }), GetConnectionEndpointsResultSchema), method(z.void(), AllowedAddressesSchema), method(AllowedAddressesSchema, z.object({ success: z.literal(true) }), { kind: "mutation" }), method(z.void(), AllowedAddressesSchema, { kind: "mutation" });
-var MeshEndpointSchema$1 = z.object({
+var MeshEndpointSchema = z.object({
 	/** Stable identifier within the provider (e.g. `mesh-ipv4`, `magicdns`, `funnel`). */
 	id: z.string(),
 	/** Operator-facing label (e.g. "Mesh IPv4", "MagicDNS"). */
@@ -4860,7 +4790,7 @@ var MeshStatusSchema = z.object({
 	/** Number of peers visible to this host (excluding self). */
 	peerCount: z.number(),
 	/** Every endpoint this provider exposes for the current host. */
-	endpoints: z.array(MeshEndpointSchema$1).readonly(),
+	endpoints: z.array(MeshEndpointSchema).readonly(),
 	/** Last error from the daemon, when not joined. */
 	error: z.string().optional(),
 	/**
@@ -4892,7 +4822,24 @@ var MeshStatusSchema = z.object({
 	* doesn't rotate keys for the bound host. Operator-facing surface
 	* for "your access expires on …" banners.
 	*/
-	keyExpiry: z.number().nullable()
+	keyExpiry: z.number().nullable(),
+	/**
+	* When the provider runs its OWN mesh daemon (e.g. the Tailscale
+	* client addon in `onboard` mode spawns a private `tailscaled`),
+	* this carries the local control-socket path. Companion addons that
+	* must drive the SAME daemon — chiefly `tailscale-ingress` for
+	* Serve/Funnel — read it to point their CLI at the right socket
+	* instead of the system default. Empty when the provider uses the
+	* host's system daemon (or doesn't have the concept).
+	*/
+	daemonSocket: z.string().optional(),
+	/**
+	* Path to the mesh CLI binary the provider downloaded for onboard
+	* mode. Companion addons reuse it so they don't need a system
+	* install when the operator chose a fully self-contained mesh.
+	* Empty in host mode.
+	*/
+	daemonCliPath: z.string().optional()
 });
 method(z.void(), MeshStatusSchema), method(z.object({
 	/** Provider-specific auth key. For Tailscale this is the
@@ -4918,51 +4865,6 @@ authKey: z.string().optional() }), z.object({
 	/** Human-readable error when `ok: false`. */
 	error: z.string().optional()
 }), { kind: "mutation" });
-var MeshEndpointSchema = z.object({
-	id: z.string(),
-	label: z.string(),
-	scope: z.enum(["mesh", "public"]),
-	url: z.string(),
-	hostname: z.string(),
-	port: z.number(),
-	protocol: z.enum(["http", "https"])
-});
-var MeshProviderInfoSchema = z.object({
-	/** Stable id matching the addon id. */
-	addonId: z.string(),
-	/** Display label shown on the admin row — sourced from the addon manifest. */
-	displayName: z.string(),
-	/** True when the host is joined to this provider's mesh. */
-	joined: z.boolean(),
-	/** Local mesh IP (empty when not joined). */
-	meshIp: z.string(),
-	/** MagicDNS / mesh hostname (empty when not configured). */
-	magicDnsHostname: z.string(),
-	/** Peer count (excluding self). */
-	peerCount: z.number(),
-	/** Active endpoints (mesh IP + MagicDNS + optional public Funnel). */
-	endpoints: z.array(MeshEndpointSchema).readonly(),
-	/** Last error reported by the provider. */
-	error: z.string().optional(),
-	/** Tenant / tailnet / network display name. Empty pre-join. */
-	tenantName: z.string(),
-	/** Mesh DNS suffix (e.g. tailXXXX.ts.net). Empty when not configured. */
-	magicDnsSuffix: z.string(),
-	/** Authenticated user / account login. Null for token-only providers. */
-	userLogin: z.string().nullable(),
-	/** Provider control-plane URL. */
-	controlPlaneUrl: z.string(),
-	/** Machine-key expiry (epoch ms). Null when keys don't rotate. */
-	keyExpiry: z.number().nullable()
-});
-method(z.void(), z.array(MeshProviderInfoSchema).readonly()), method(z.object({
-	addonId: z.string(),
-	authKey: z.string().min(8),
-	hostname: z.string().optional()
-}), z.object({ joined: z.literal(true) }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ success: z.literal(true) }), { kind: "mutation" }), method(z.object({
-	addonId: z.string(),
-	hostname: z.string().optional()
-}), z.object({ loginUrl: z.string() }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ loggedOut: z.literal(true) }), { kind: "mutation" }), method(z.object({ addonId: z.string() }), z.object({ peers: z.array(MeshPeerSchema).readonly() }));
 var MethodAccessSchema = z.enum([
 	"view",
 	"create",
@@ -5574,6 +5476,21 @@ var AddonAutoUpdateSchema = ChannelWithInheritSchema;
 var RestartAddonResultSchema = z.unknown();
 var InstallPackageResultSchema = z.unknown();
 var ReloadPackagesResultSchema = z.unknown();
+var UpdateFrameworkPackageResultSchema = z.object({
+	packageName: z.string(),
+	fromVersion: z.string(),
+	toVersion: z.string(),
+	/** Ms-epoch the server scheduled its self-restart. */
+	restartingAt: z.number()
+});
+var FrameworkPackageStatusSchema = z.object({
+	packageName: z.string(),
+	currentVersion: z.string(),
+	latestVersion: z.string().nullable(),
+	hasUpdate: z.boolean(),
+	/** Optional manifest description for the row tooltip. */
+	description: z.string().optional()
+});
 var LogStreamEntrySchema = z.object({
 	timestamp: z.string(),
 	level: z.string(),
@@ -5605,21 +5522,50 @@ method(z.void(), z.array(AddonListItemSchema).readonly()), method(z.object({
 }), method(z.void(), ReloadPackagesResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(z.object({ query: z.string().optional() }), z.array(SearchResultSchema)), method(z.void(), z.array(PackageUpdateSchema).readonly(), { auth: "admin" }), method(z.object({
+}), method(z.object({ query: z.string().optional() }), z.array(SearchResultSchema)), method(z.object({ nodeId: z.string().optional() }), z.array(PackageUpdateSchema).readonly(), { auth: "admin" }), method(z.object({
 	name: z.string().min(1),
-	version: z.string().optional()
+	version: z.string().optional(),
+	nodeId: z.string().optional()
 }), z.unknown(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(z.object({ name: z.string().min(1) }), z.object({ rolledBackTo: z.string().nullable() }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(z.void(), z.unknown(), {
+}), method(z.object({ nodeId: z.string().optional() }), z.unknown(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(z.object({ confirm: z.literal(true) }), z.unknown(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(z.void(), z.object({
+	kind: z.enum([
+		"framework-update",
+		"manual",
+		"system"
+	]),
+	packageName: z.string().optional(),
+	fromVersion: z.string().optional(),
+	toVersion: z.string().optional(),
+	requestedBy: z.string().optional(),
+	requestedAt: z.number()
+}).nullable(), { auth: "admin" }), method(z.void(), z.array(FrameworkPackageStatusSchema).readonly(), { auth: "admin" }), method(z.object({ capName: z.string().min(1) }), z.array(z.object({
+	addonId: z.string(),
+	mode: z.enum(["singleton", "collection"]),
+	isActive: z.boolean()
+})).readonly()), method(z.object({
+	capName: z.string().min(1),
+	addonId: z.string().min(1),
+	enabled: z.boolean()
+}), z.object({ success: z.literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(z.object({
+	packageName: z.string().min(1),
+	version: z.string().optional()
+}), UpdateFrameworkPackageResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 }), method(z.object({ name: z.string() }), z.array(PackageVersionInfoSchema).readonly()), method(z.object({ addonId: z.string() }), RestartAddonResultSchema, {
 	kind: "mutation",
 	auth: "admin"