@camstack/system 1.2.117 → 1.2.118

package/dist/addon-utils.d.ts

@@ -14,7 +14,7 @@
  *
  * See memory: camstack_runner_ram_and_build_rootcause.
  */
-export { downloadFile, ensureModel, isModelDownloaded, deleteModelFromDisk, collectModelFiles, getModelFilePath, } from './download/model-downloader.js';
+export { downloadFile, ensureModel, isModelDownloaded, deleteModelFromDisk, collectModelFiles, getModelFilePath, type DownloadFileOptions, type DownloadRedirectPolicy, } from './download/model-downloader.js';
 export { ModelDownloadService } from './download/model-download-service.js';
 export { createFileDataPlaneHandler } from './http/file-data-plane.js';
 export { parseRangeHeader, contentTypeFor, type ByteRange, } from './http/authenticated-file-server.js';

package/dist/addon-utils.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("./chunk-Cek0wNdY.js");
-const require_file_data_plane = require("./file-data-plane-DUHPHa-Y.js");
+const require_file_data_plane = require("./file-data-plane-DO8KbxCe.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 exports.CustomActionRegistry = require_custom_action_registry.CustomActionRegistry;
 exports.ModelDownloadService = require_file_data_plane.ModelDownloadService;

package/dist/addon-utils.mjs

@@ -1,3 +1,3 @@
-import { c as collectModelFiles, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-CuE_hBli.mjs";
+import { c as collectModelFiles, f as ensureModel, h as isModelDownloaded, i as parseRangeHeader, l as deleteModelFromDisk, m as getModelFilePath, n as contentTypeFor, s as ModelDownloadService, t as createFileDataPlaneHandler, u as downloadFile } from "./file-data-plane-BhKdxJgf.mjs";
 import { t as CustomActionRegistry } from "./custom-action-registry-F__gp_VX.mjs";
 export { CustomActionRegistry, ModelDownloadService, collectModelFiles, contentTypeFor, createFileDataPlaneHandler, deleteModelFromDisk, downloadFile, ensureModel, getModelFilePath, isModelDownloaded, parseRangeHeader };

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, v as addonPagesCapability, vt as errMsg, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { Gt as EventCategory, v as addonPagesCapability, vt as errMsg, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, b as addonWidgetsCapability, vt as errMsg, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { Gt as EventCategory, b as addonWidgetsCapability, vt as errMsg, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, Mt as createEvent, n as AlertSchema, vt as errMsg, x as alertsCapability, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { Gt as EventCategory, Mt as createEvent, n as AlertSchema, vt as errMsg, x as alertsCapability, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { C as backupCapability, Gt as EventCategory, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { C as backupCapability, Gt as EventCategory, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { D as coreBlockAddonId, O as coreBlockIdFromAddonId, c as CoreBlockSchema, k as coreBlocksCapability, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, vt as errMsg, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { D as coreBlockAddonId, O as coreBlockIdFromAddonId, c as CoreBlockSchema, k as coreBlocksCapability, l as DeclaredDevices, o as CORE_BLOCKS_ADDON_ID, s as CORE_BLOCK_ADDON_PREFIX, vt as errMsg, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DET4YkAU.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-DHRXLMPn.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { Ct as DeviceFeature, E as buildStreamParamsConfigSchema, F as deviceStatusCapability, Gt as EventCategory, Lt as isDeviceConfigCap, N as deviceManagerCapability, Ot as WELL_KNOWN_TAB_MAP, P as deviceStateCapability, R as enumerateItemArrayFields, Tt as DeviceType, Wt as sleep, a as CAP_NAMES_WITH_STATUS, at as runtimeStatePolicyFor, et as normalizeUnit, nt as parseStreamParamsFormPatch, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, vt as errMsg, wt as DeviceRole, yt as BaseAddon, z as enumerateSchemaFields } from "../../dist-D4Vmj8iw.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys--aM_vGF9.mjs";
+import { Ct as DeviceFeature, E as buildStreamParamsConfigSchema, F as deviceStatusCapability, Gt as EventCategory, Lt as isDeviceConfigCap, N as deviceManagerCapability, Ot as WELL_KNOWN_TAB_MAP, P as deviceStateCapability, R as enumerateItemArrayFields, Tt as DeviceType, Wt as sleep, a as CAP_NAMES_WITH_STATUS, at as runtimeStatePolicyFor, et as normalizeUnit, nt as parseStreamParamsFormPatch, p as STREAM_PROFILE_META, t as ALL_CAPABILITY_DEFINITIONS, u as DeviceStatusSchema, vt as errMsg, wt as DeviceRole, yt as BaseAddon, z as enumerateSchemaFields } from "../../dist-DCTpBXm4.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-Czd76yLZ.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { G as isSameAddonId, Gt as EventCategory, I as doorbellCapability, Mt as createEvent, Tt as DeviceType, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { G as isSameAddonId, Gt as EventCategory, I as doorbellCapability, Mt as createEvent, Tt as DeviceType, vt as errMsg, w as bareAddonId, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, Mt as createEvent, vt as errMsg, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { Gt as EventCategory, Mt as createEvent, vt as errMsg, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { S as authProviderCapability, _ as UserRecordSchema, ht as userManagementCapability, m as ScopedTokenSchema, r as ApiKeyRecordSchema, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { S as authProviderCapability, _ as UserRecordSchema, ht as userManagementCapability, m as ScopedTokenSchema, r as ApiKeyRecordSchema, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.d.ts

@@ -39,6 +39,11 @@ interface LocalNetworkConfig {
      * different address after a reboot.
      */
     readonly notificationBaseUrl: string;
+    /**
+     * Base URLs the SDK / viewer should race. Empty = AUTO (LAN IPv4 + public
+     * tunnel). Stored verbatim, same contract as `notificationBaseUrl`.
+     */
+    readonly viewerBaseUrls: readonly string[];
     /** LAN HTTP listener. Default true — native apps skip the private cert. */
     readonly httpEnabled: boolean;
     /** Dedicated HTTP port. Must not equal the HTTPS listen port. */
@@ -70,6 +75,13 @@ export declare class LocalNetworkAddon extends BaseAddon<LocalNetworkConfig> {
      * rather than a link that 404s).
      */
     private resolveNotificationEndpoint;
+    private snapshotViewerEndpoints;
+    /**
+     * Palette shown in the Network tab: LAN IPv4, stable LAN IPv6, public,
+     * mesh. The viewer HTTP/WS race is a subset (`selectViewerEndpoints`) —
+     * IPv6 stays in this list because ICE/WebRTC gathers it regardless.
+     */
+    private buildAdvertisedEndpoints;
     protected onInitialize(): Promise<ProviderRegistration[]>;
     protected globalSettingsSchema(): import('@camstack/types').ConfigUISchema;
     protected onConfigChanged(): Promise<void>;
@@ -157,8 +169,8 @@ export declare function enumerateOsInterfaces(ifaces: NodeJS.Dict<readonly OsNet
  * allowlist = no-op (every interface passes); otherwise only entries
  * whose `address` matches an allowlist entry remain. IPv6 matches the
  * allowlisted /64 so a rotated privacy address does not hide the live
- * GUA. Loopback always survives so the SDK keeps `127.0.0.1` as the
- * last-resort fallback.
+ * GUA. Loopback is not an advertised client route and is not forced
+ * through.
  */
 export declare function applyAllowlist(interfaces: readonly LocalInterface[], allowed: readonly string[]): readonly LocalInterface[];
 /**
@@ -194,6 +206,16 @@ export interface LanHttpAdvertisement {
     readonly localHostname: string | null;
 }
 export declare function buildEndpoints(interfaces: readonly LocalInterface[], port: number, includeLoopback: boolean, ipv4Only: boolean, publicHostname: string, scheme?: 'http' | 'https', meshEndpoint?: MeshEndpointCache | null, lanHttp?: LanHttpAdvertisement | null): ConnectionEndpoint[];
+/** AUTO viewer race: LAN IPv4 + the public tunnel. Never IPv6, mesh, or loopback. */
+export declare function isDefaultViewerEndpoint(endpoint: ConnectionEndpoint): boolean;
+/**
+ * The URLs the SDK should race for API / viewer access.
+ *
+ * Empty `viewerBaseUrls` = AUTO (IPv4 + public tunnel). A non-empty list is
+ * the operator's pin; if none of those URLs are in the current palette,
+ * fall back to AUTO rather than racing an empty set.
+ */
+export declare function selectViewerEndpoints(endpoints: readonly ConnectionEndpoint[], viewerBaseUrls: readonly string[]): ConnectionEndpoint[];
 /**
  * First-boot heuristic: which addresses should the allowlist start
  * with? Includes LAN + Wi-Fi IPv4 addresses + plausible IPv6:

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 const require_lan_http_bind = require("../../lan-http-bind-DmgpFP6_.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");
@@ -200,6 +200,7 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 			allowedAddresses: [],
 			bootSeeded: false,
 			notificationBaseUrl: "",
+			viewerBaseUrls: [],
 			httpEnabled: true,
 			httpPort: require_lan_http_bind.DEFAULT_LAN_HTTP_PORT,
 			localHostname: ""
@@ -220,6 +221,31 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 		if (mesh !== null && mesh.host !== "") return `https://${mesh.host}:${mesh.port}`;
 		return null;
 	}
+	async snapshotViewerEndpoints() {
+		const selected = selectViewerEndpoints(await this.buildAdvertisedEndpoints(false, false, "http", (await this.resolveAdvertisedListenPort(null)).port), this.config.viewerBaseUrls);
+		return {
+			baseUrls: this.config.viewerBaseUrls,
+			resolved: selected.map((e) => e.baseUrl)
+		};
+	}
+	/**
+	* Palette shown in the Network tab: LAN IPv4, stable LAN IPv6, public,
+	* mesh. The viewer HTTP/WS race is a subset (`selectViewerEndpoints`) —
+	* IPv6 stays in this list because ICE/WebRTC gathers it regardless.
+	*/
+	async buildAdvertisedEndpoints(includeLoopback, ipv4Only, scheme, httpsPort) {
+		const allow = this.config.allowedAddresses;
+		const interfaces = applyAllowlist(this.enumerate(), allow);
+		await this.reconcileMeshEndpoint();
+		const httpState = require_lan_http_bind.readLanHttpState();
+		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, {
+			enabled: this.config.httpEnabled !== false,
+			listening: httpState.listening,
+			httpPort: this.resolvedHttpPort(),
+			httpsPort,
+			localHostname: this.config.localHostname || null
+		});
+	}
 	async onInitialize() {
 		if (!this.config.bootSeeded) {
 			const seed = autoSeedAllowlist(this.enumerate());
@@ -237,27 +263,16 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 			}),
 			getPreferred: async () => pickPreferred(applyAllowlist(this.enumerate(), this.config.allowedAddresses)),
 			getConnectionEndpoints: async (input) => {
-				const includeLoopback = input.includeLoopback ?? true;
-				const ipv4Only = input.ipv4Only ?? false;
+				const includeLoopback = input.includeLoopback ?? false;
 				const scheme = input.scheme ?? "http";
-				const allow = this.config.allowedAddresses;
-				const interfaces = applyAllowlist(this.enumerate(), allow);
 				const localPort = await this.resolveAdvertisedListenPort(input.port ?? null);
 				if (input.port !== void 0 && input.port !== localPort.port) this.ctx.logger.info("local-network: caller port hint overridden", { meta: {
 					hint: input.port,
 					advertised: localPort.port,
 					source: localPort.source
 				} });
-				await this.reconcileMeshEndpoint();
-				const httpState = require_lan_http_bind.readLanHttpState();
 				return {
-					endpoints: buildEndpoints(interfaces, localPort.port, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, {
-						enabled: this.config.httpEnabled !== false,
-						listening: httpState.listening,
-						httpPort: this.resolvedHttpPort(),
-						httpsPort: localPort.port,
-						localHostname: this.config.localHostname || null
-					}),
+					endpoints: await this.buildAdvertisedEndpoints(includeLoopback, input.ipv4Only ?? false, scheme, localPort.port),
 					localPort
 				};
 			},
@@ -273,6 +288,16 @@ var LocalNetworkAddon = class extends require_dist.BaseAddon {
 					resolved: this.resolveNotificationEndpoint()
 				};
 			},
+			getViewerEndpoints: async () => this.snapshotViewerEndpoints(),
+			setViewerEndpoints: async ({ baseUrls }) => {
+				const cleaned = [...new Set(baseUrls.filter((u) => u.length > 0))];
+				await this.updateGlobalSettings({ viewerBaseUrls: cleaned });
+				this.ctx.logger.info("local-network: viewer endpoints set", { meta: {
+					count: cleaned.length,
+					auto: cleaned.length === 0
+				} });
+				return this.snapshotViewerEndpoints();
+			},
 			getAllowedAddresses: async () => ({ addresses: this.config.allowedAddresses }),
 			resetAllowlistToBestMatch: async () => {
 				const seed = autoSeedAllowlist(this.enumerate());
@@ -675,12 +700,12 @@ function enumerateOsInterfaces(ifaces, ipv6Flags) {
 * allowlist = no-op (every interface passes); otherwise only entries
 * whose `address` matches an allowlist entry remain. IPv6 matches the
 * allowlisted /64 so a rotated privacy address does not hide the live
-* GUA. Loopback always survives so the SDK keeps `127.0.0.1` as the
-* last-resort fallback.
+* GUA. Loopback is not an advertised client route and is not forced
+* through.
 */
 function applyAllowlist(interfaces, allowed) {
 	if (allowed.length === 0) return interfaces;
-	return interfaces.filter((i) => i.kind === "loopback" || ipv6AllowlistMatches(i.address, allowed) || allowed.includes(i.address));
+	return interfaces.filter((i) => ipv6AllowlistMatches(i.address, allowed) || allowed.includes(i.address));
 }
 /**
 * Rank interfaces and pick the auto-selected outbound one. See the
@@ -775,6 +800,25 @@ function buildEndpoints(interfaces, port, includeLoopback, ipv4Only, publicHostn
 	});
 	return out.toSorted((a, b) => a.priority - b.priority);
 }
+/** AUTO viewer race: LAN IPv4 + the public tunnel. Never IPv6, mesh, or loopback. */
+function isDefaultViewerEndpoint(endpoint) {
+	if (endpoint.kind === "lan-ipv4") return true;
+	return endpoint.kind === "public" && endpoint.interfaceKind === "public";
+}
+/**
+* The URLs the SDK should race for API / viewer access.
+*
+* Empty `viewerBaseUrls` = AUTO (IPv4 + public tunnel). A non-empty list is
+* the operator's pin; if none of those URLs are in the current palette,
+* fall back to AUTO rather than racing an empty set.
+*/
+function selectViewerEndpoints(endpoints, viewerBaseUrls) {
+	const auto = endpoints.filter(isDefaultViewerEndpoint);
+	if (viewerBaseUrls.length === 0) return auto;
+	const wanted = new Set(viewerBaseUrls);
+	const explicit = endpoints.filter((e) => wanted.has(e.baseUrl));
+	return explicit.length > 0 ? explicit : auto;
+}
 /**
 * First-boot heuristic: which addresses should the allowlist start
 * with? Includes LAN + Wi-Fi IPv4 addresses + plausible IPv6:
@@ -912,10 +956,12 @@ exports.classifyKind = classifyKind;
 exports.enumerateOsInterfaces = enumerateOsInterfaces;
 exports.explainNonPlausible = explainNonPlausible;
 exports.ipv6Prefix64Key = ipv6Prefix64Key;
+exports.isDefaultViewerEndpoint = isDefaultViewerEndpoint;
 exports.isPlausibleAutoSeed = isPlausibleAutoSeed;
 exports.parseProcIfInet6 = parseProcIfInet6;
 exports.pickPreferred = pickPreferred;
 exports.prefixLen = prefixLen;
 exports.reconcileAllowlist = reconcileAllowlist;
 exports.resolveAdvertisedPort = resolveAdvertisedPort;
+exports.selectViewerEndpoints = selectViewerEndpoints;
 exports.shouldAdvertiseIpv6 = shouldAdvertiseIpv6;

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Gt as EventCategory, Y as localNetworkCapability, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { Gt as EventCategory, Y as localNetworkCapability, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import { c as readExtraSans, d as writeExtraSans, f as writeTlsMode, g as reissueTlsLeaf, l as readTlsAccessStatus, m as ensureTlsCert, o as readLanHttpState, p as validateUploadedTls, r as applyLanHttp, t as DEFAULT_LAN_HTTP_PORT, u as readTlsMode } from "../../lan-http-bind-jKrj6OjQ.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";
@@ -197,6 +197,7 @@ var LocalNetworkAddon = class extends BaseAddon {
 			allowedAddresses: [],
 			bootSeeded: false,
 			notificationBaseUrl: "",
+			viewerBaseUrls: [],
 			httpEnabled: true,
 			httpPort: DEFAULT_LAN_HTTP_PORT,
 			localHostname: ""
@@ -217,6 +218,31 @@ var LocalNetworkAddon = class extends BaseAddon {
 		if (mesh !== null && mesh.host !== "") return `https://${mesh.host}:${mesh.port}`;
 		return null;
 	}
+	async snapshotViewerEndpoints() {
+		const selected = selectViewerEndpoints(await this.buildAdvertisedEndpoints(false, false, "http", (await this.resolveAdvertisedListenPort(null)).port), this.config.viewerBaseUrls);
+		return {
+			baseUrls: this.config.viewerBaseUrls,
+			resolved: selected.map((e) => e.baseUrl)
+		};
+	}
+	/**
+	* Palette shown in the Network tab: LAN IPv4, stable LAN IPv6, public,
+	* mesh. The viewer HTTP/WS race is a subset (`selectViewerEndpoints`) —
+	* IPv6 stays in this list because ICE/WebRTC gathers it regardless.
+	*/
+	async buildAdvertisedEndpoints(includeLoopback, ipv4Only, scheme, httpsPort) {
+		const allow = this.config.allowedAddresses;
+		const interfaces = applyAllowlist(this.enumerate(), allow);
+		await this.reconcileMeshEndpoint();
+		const httpState = readLanHttpState();
+		return buildEndpoints(interfaces, httpsPort, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, {
+			enabled: this.config.httpEnabled !== false,
+			listening: httpState.listening,
+			httpPort: this.resolvedHttpPort(),
+			httpsPort,
+			localHostname: this.config.localHostname || null
+		});
+	}
 	async onInitialize() {
 		if (!this.config.bootSeeded) {
 			const seed = autoSeedAllowlist(this.enumerate());
@@ -234,27 +260,16 @@ var LocalNetworkAddon = class extends BaseAddon {
 			}),
 			getPreferred: async () => pickPreferred(applyAllowlist(this.enumerate(), this.config.allowedAddresses)),
 			getConnectionEndpoints: async (input) => {
-				const includeLoopback = input.includeLoopback ?? true;
-				const ipv4Only = input.ipv4Only ?? false;
+				const includeLoopback = input.includeLoopback ?? false;
 				const scheme = input.scheme ?? "http";
-				const allow = this.config.allowedAddresses;
-				const interfaces = applyAllowlist(this.enumerate(), allow);
 				const localPort = await this.resolveAdvertisedListenPort(input.port ?? null);
 				if (input.port !== void 0 && input.port !== localPort.port) this.ctx.logger.info("local-network: caller port hint overridden", { meta: {
 					hint: input.port,
 					advertised: localPort.port,
 					source: localPort.source
 				} });
-				await this.reconcileMeshEndpoint();
-				const httpState = readLanHttpState();
 				return {
-					endpoints: buildEndpoints(interfaces, localPort.port, includeLoopback, ipv4Only, this.publicHostname, scheme, this.meshEndpoint, {
-						enabled: this.config.httpEnabled !== false,
-						listening: httpState.listening,
-						httpPort: this.resolvedHttpPort(),
-						httpsPort: localPort.port,
-						localHostname: this.config.localHostname || null
-					}),
+					endpoints: await this.buildAdvertisedEndpoints(includeLoopback, input.ipv4Only ?? false, scheme, localPort.port),
 					localPort
 				};
 			},
@@ -270,6 +285,16 @@ var LocalNetworkAddon = class extends BaseAddon {
 					resolved: this.resolveNotificationEndpoint()
 				};
 			},
+			getViewerEndpoints: async () => this.snapshotViewerEndpoints(),
+			setViewerEndpoints: async ({ baseUrls }) => {
+				const cleaned = [...new Set(baseUrls.filter((u) => u.length > 0))];
+				await this.updateGlobalSettings({ viewerBaseUrls: cleaned });
+				this.ctx.logger.info("local-network: viewer endpoints set", { meta: {
+					count: cleaned.length,
+					auto: cleaned.length === 0
+				} });
+				return this.snapshotViewerEndpoints();
+			},
 			getAllowedAddresses: async () => ({ addresses: this.config.allowedAddresses }),
 			resetAllowlistToBestMatch: async () => {
 				const seed = autoSeedAllowlist(this.enumerate());
@@ -672,12 +697,12 @@ function enumerateOsInterfaces(ifaces, ipv6Flags) {
 * allowlist = no-op (every interface passes); otherwise only entries
 * whose `address` matches an allowlist entry remain. IPv6 matches the
 * allowlisted /64 so a rotated privacy address does not hide the live
-* GUA. Loopback always survives so the SDK keeps `127.0.0.1` as the
-* last-resort fallback.
+* GUA. Loopback is not an advertised client route and is not forced
+* through.
 */
 function applyAllowlist(interfaces, allowed) {
 	if (allowed.length === 0) return interfaces;
-	return interfaces.filter((i) => i.kind === "loopback" || ipv6AllowlistMatches(i.address, allowed) || allowed.includes(i.address));
+	return interfaces.filter((i) => ipv6AllowlistMatches(i.address, allowed) || allowed.includes(i.address));
 }
 /**
 * Rank interfaces and pick the auto-selected outbound one. See the
@@ -772,6 +797,25 @@ function buildEndpoints(interfaces, port, includeLoopback, ipv4Only, publicHostn
 	});
 	return out.toSorted((a, b) => a.priority - b.priority);
 }
+/** AUTO viewer race: LAN IPv4 + the public tunnel. Never IPv6, mesh, or loopback. */
+function isDefaultViewerEndpoint(endpoint) {
+	if (endpoint.kind === "lan-ipv4") return true;
+	return endpoint.kind === "public" && endpoint.interfaceKind === "public";
+}
+/**
+* The URLs the SDK should race for API / viewer access.
+*
+* Empty `viewerBaseUrls` = AUTO (IPv4 + public tunnel). A non-empty list is
+* the operator's pin; if none of those URLs are in the current palette,
+* fall back to AUTO rather than racing an empty set.
+*/
+function selectViewerEndpoints(endpoints, viewerBaseUrls) {
+	const auto = endpoints.filter(isDefaultViewerEndpoint);
+	if (viewerBaseUrls.length === 0) return auto;
+	const wanted = new Set(viewerBaseUrls);
+	const explicit = endpoints.filter((e) => wanted.has(e.baseUrl));
+	return explicit.length > 0 ? explicit : auto;
+}
 /**
 * First-boot heuristic: which addresses should the allowlist start
 * with? Includes LAN + Wi-Fi IPv4 addresses + plausible IPv6:
@@ -900,4 +944,4 @@ function readLinuxIpv6Flags() {
 	}
 }
 //#endregion
-export { ALLOWLIST_RECONCILE_INTERVAL_MS, LocalNetworkAddon, applyAllowlist, autoSeedAllowlist, buildEndpoints, classifyKind, enumerateOsInterfaces, explainNonPlausible, ipv6Prefix64Key, isPlausibleAutoSeed, parseProcIfInet6, pickPreferred, prefixLen, reconcileAllowlist, resolveAdvertisedPort, shouldAdvertiseIpv6 };
+export { ALLOWLIST_RECONCILE_INTERVAL_MS, LocalNetworkAddon, applyAllowlist, autoSeedAllowlist, buildEndpoints, classifyKind, enumerateOsInterfaces, explainNonPlausible, ipv6Prefix64Key, isDefaultViewerEndpoint, isPlausibleAutoSeed, parseProcIfInet6, pickPreferred, prefixLen, reconcileAllowlist, resolveAdvertisedPort, selectViewerEndpoints, shouldAdvertiseIpv6 };

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as metricsProviderCapability, Gt as EventCategory, Mt as createEvent, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { $ as metricsProviderCapability, Gt as EventCategory, Mt as createEvent, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_os = require("node:os");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Gt as EventCategory, L as enumerateInferenceDevices, Pt as emitReadiness, ct as scoreRuntimes, rt as platformProbeCapability, vt as errMsg, yt as BaseAddon } from "../../dist-D4Vmj8iw.mjs";
+import { Gt as EventCategory, L as enumerateInferenceDevices, Pt as emitReadiness, ct as scoreRuntimes, rt as platformProbeCapability, vt as errMsg, yt as BaseAddon } from "../../dist-DCTpBXm4.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as os from "node:os";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DMEGlqg6.js");
+const require_dist = require("../../dist-C2_1HCpW.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative