@camstack/system 1.2.353 → 1.2.355

package/dist/{dist-Cm556q2j.mjs → dist-OCi0K-iM.mjs}

@@ -7867,6 +7867,57 @@ var ClipSearchStrictnessSchema = z.enum([
 	"balanced",
 	"strict"
 ]);
+new Set([
+	{
+		id: "person",
+		name: "Person"
+	},
+	{
+		id: "vehicle",
+		name: "Vehicle"
+	},
+	{
+		id: "animal",
+		name: "Animal"
+	},
+	{
+		id: "package",
+		name: "Package"
+	}
+].map((l) => l.id));
+var COCO_TO_MACRO = {
+	mapping: {
+		person: "person",
+		bicycle: "vehicle",
+		car: "vehicle",
+		motorcycle: "vehicle",
+		airplane: "vehicle",
+		bus: "vehicle",
+		train: "vehicle",
+		truck: "vehicle",
+		boat: "vehicle",
+		bird: "animal",
+		cat: "animal",
+		dog: "animal",
+		horse: "animal",
+		sheep: "animal",
+		cow: "animal",
+		elephant: "animal",
+		bear: "animal",
+		zebra: "animal",
+		giraffe: "animal",
+		suitcase: "package",
+		backpack: "package",
+		handbag: "package"
+	},
+	preserveOriginal: false
+};
+/** Steps a root detector may declare it fills. */
+var FILLABLE_STEP_IDS = [
+	"animal-classifier",
+	"vehicle-classifier",
+	"package-detection"
+];
 var MODEL_FORMATS = [
 	"onnx",
 	"coreml",
@@ -8000,6 +8051,12 @@ var ModelLicenseRecordSchema = z.object({
 * `camstack/docs` → `/docs/detection/models`.
 */
 var ModelLicenseSchema = z.preprocess((value) => typeof value === "string" ? { weights: value } : value, ModelLicenseRecordSchema);
+/** One `fillsClassifierEffects` entry — see `ModelCatalogEntry.fillsClassifierEffects`. */
+var FillsClassifierEffectSchema = z.object({
+	stepId: z.enum(FILLABLE_STEP_IDS),
+	labelToEffect: z.record(z.string(), z.string()),
+	uncovered: z.array(z.string()).readonly()
+});
 var ModelCatalogEntrySchema = z.object({
 	id: z.string(),
 	name: z.string(),
@@ -8126,6 +8183,16 @@ var ModelCatalogEntrySchema = z.object({
 	*/
 	classMap: DetectionCatalogClassMapSchema.optional(),
 	/**
+	* The pipeline steps this ROOT detector already does the work of (D715):
+	* its labels name the effect the step exists to produce (`deer` for
+	* `animal-classifier`, `package` for `package-detection`). Derived from the
+	* labelmap by `deriveClassifierFills`, never hand-written; a COCO model
+	* declares none. Whether a declaration is honoured is the step's own
+	* `labelLink` policy (`resolveLabelLink`). `labelToEffect` values are in
+	* `FILLABLE_STEP_VOCABULARIES` (guard `check-label-link-vocabulary`).
+	*/
+	fillsClassifierEffects: z.array(FillsClassifierEffectSchema).readonly().optional(),
+	/**
 	* The model's CLIP feature-space contract (text encoder, dimension, vector
 	* index, token window, search floor) — see `clip-model.ts`. Present ONLY on a
 	* CLIP image encoder; its absence is what "not a CLIP model" means to the
@@ -14169,7 +14236,7 @@ var detectionPipelineCapability = {
 * This matters here more than anywhere else in the repo, because every provider
 * that knows a device's host knows its PASSWORD too: `{ host, port, username,
 * password }` sit in one object on Hikvision, Amcrest, Reolink and ONVIF alike,
-* and `http://admin:hunter2@192.168.x.x/` is a URL a browser accepts. The
+* and `http://admin:hunter2@192.168.60.139/` is a URL a browser accepts. The
 * camera's own page will ask for its own login. That is correct, and pre-
 * filling it is the operator's business, not ours.
 *
@@ -19213,51 +19280,6 @@ var notificationOutputCapability = {
 		})
 	}
 };
-new Set([
-	{
-		id: "person",
-		name: "Person"
-	},
-	{
-		id: "vehicle",
-		name: "Vehicle"
-	},
-	{
-		id: "animal",
-		name: "Animal"
-	},
-	{
-		id: "package",
-		name: "Package"
-	}
-].map((l) => l.id));
-var COCO_TO_MACRO = {
-	mapping: {
-		person: "person",
-		bicycle: "vehicle",
-		car: "vehicle",
-		motorcycle: "vehicle",
-		airplane: "vehicle",
-		bus: "vehicle",
-		train: "vehicle",
-		truck: "vehicle",
-		boat: "vehicle",
-		bird: "animal",
-		cat: "animal",
-		dog: "animal",
-		horse: "animal",
-		sheep: "animal",
-		cow: "animal",
-		elephant: "animal",
-		bear: "animal",
-		zebra: "animal",
-		giraffe: "animal",
-		suitcase: "package",
-		backpack: "package",
-		handbag: "package"
-	},
-	preserveOriginal: false
-};
 var AUDIO_MACRO_LABELS = [
 	{
 		id: "speech",
@@ -21164,8 +21186,9 @@ var NcRuleSchema = NcRuleInputSchema.extend({
 	disabledTargetIds: z.array(z.string()).default([])
 });
 /**
-* The state-summary SECTIONS (D647 / D698): the D637 kind groups that report a
-* still-true state. `backups-exports` and `alarm` are not sections — a completed
+* The state-summary SECTIONS (D647 / D698 / D708): the D637 kind groups that
+* report a still-true state. `addons` is the crash-looped addons only and
+* `addon-updates` the addons that are behind (D708 split them). `backups-exports` and `alarm` are not sections — a completed
 * job is not an open state, and the alarm stays instant.
 */
 var NcStateSummarySectionIdSchema = z.enum([
@@ -21177,6 +21200,7 @@ var NcStateSummarySectionIdSchema = z.enum([
 	"detection-blind",
 	"nodes",
 	"addons",
+	"addon-updates",
 	"updates"
 ]);
 /** One section of a previewed state summary. `unavailable` = its state could not be read. */
@@ -21671,7 +21695,19 @@ var NcAlarmModeDelaysSchema = z.object({
 	* When this mode may be armed. Absent / null = always allowed (same as a
 	* rule with no `schedule`). Evaluated with {@link isScheduleActive}.
 	*/
-	schedule: NcScheduleSchema.optional()
+	schedule: NcScheduleSchema.optional(),
+	/**
+	* D706: while this mode's ENTRY DELAY runs, do the alarm rules' own pushes go out (as an
+	* intrusion naming the locations)? Absent = false — the entry-delay notification is the
+	* only one, and the matches ride the triggered notification's mosaic (D705).
+	*/
+	notifyDuringEntryDelay: z.boolean().optional(),
+	/**
+	* D706: notify "watched again" when a sensor this arm bypassed closes and opens again.
+	* Absent = false (logged, not sent). Even when true it is not sent when that same sensor
+	* is the one that starts the entry delay — the entry-delay notification already names it.
+	*/
+	notifySensorRewatched: z.boolean().optional()
 });
 var NcAlarmModeDelaysListSchema = z.array(NcAlarmModeDelaysSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 /**
@@ -21686,7 +21722,11 @@ var NcAlarmModeDelaysEditSchema = z.object({
 	triggeredDurationSec: NcAlarmTriggeredSecSchema.nullable().optional(),
 	postTriggeredAction: NcAlarmPostTriggeredActionSchema.nullable().optional(),
 	/** Set a schedule, or `null` to clear (mode always allowed again). */
-	schedule: NcScheduleSchema.nullable().optional()
+	schedule: NcScheduleSchema.nullable().optional(),
+	/** D706: set the switch, or `null` to clear it (back to the default, false). */
+	notifyDuringEntryDelay: z.boolean().nullable().optional(),
+	/** D706: set the switch, or `null` to clear it (back to the default, false). */
+	notifySensorRewatched: z.boolean().nullable().optional()
 });
 var NcAlarmModeDelaysEditListSchema = z.array(NcAlarmModeDelaysEditSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
@@ -25601,7 +25641,8 @@ var PipelineModelOptionSchema = z.object({
 	group: ModelVariantGroupSchema.optional(),
 	legacy: z.boolean().optional(),
 	provider: ModelProviderIdSchema.optional(),
-	defaultConfidence: z.number().optional()
+	defaultConfidence: z.number().optional(),
+	fillsClassifierEffects: z.array(FillsClassifierEffectSchema).readonly().optional()
 });
 var ConfigFieldBridge = z.custom();
 var PipelineAddonSchemaSchema = z.object({
@@ -26630,6 +26671,22 @@ var MotionSourceEnum = z.enum([
 	"device-activity"
 ]);
 /**
+* What opened an on-motion detection SESSION: the motion source that passed the
+* camera's `motionSources` gate, and what raised it (the camera itself, or a
+* sensor the operator attached — D672). `sensorName` is the attached sensor's
+* device name as the orchestrator's camera-sensors resolution last read it;
+* absent when unknown or when the camera itself triggered.
+*
+* Carried on the session attach ONLY so the runner's `DetectionPhaseTransition`
+* can say what started the session (D672 rule 11, amended 2026-10-06). The
+* runner never decides anything on it.
+*/
+var SessionTriggerSchema = z.object({
+	source: MotionSourceEnum,
+	triggeredBy: MotionTriggeredBySchema,
+	sensorName: z.string().optional()
+});
+/**
 * List of motion sources active on a camera. Empty array is valid:
 * "no source" — happens for battery cams without firmware motion when
 * the operator hasn't opted into the SW analyzer (would hold the
@@ -26881,6 +26938,14 @@ var RunnerCameraConfigSchema = z.object({
 	*/
 	motionSources: MotionSourcesSchema.default(["analyzer"]),
 	/**
+	* What opened this attach, on a SESSION attach only (see
+	* {@link SessionTriggerSchema}). OPTIONAL with no default: absent on a
+	* standing attach, an occupancy burst, a re-dispatch with no motion event
+	* behind it, and every attach from an orchestrator older than the field — the
+	* runner then names no source on the phase event.
+	*/
+	sessionTrigger: SessionTriggerSchema.optional(),
+	/**
 	* WHICH root detector runs for this camera. The detection counterpart of
 	* {@link motionSources}, same shape and same discipline: a per-camera list
 	* of sources the system understands, vendor-agnostic, owned here.
@@ -31445,6 +31510,50 @@ var videoclipsCapability = {
 		})
 	}
 };
+/** The central link domain the viewer app claims (Universal Links / App Links). */
+var CAMSTACK_APP_LINK_ORIGIN = "https://camstack.zentik.app";
+/**
+* Reduce a base URL to the bare origin the central page accepts as `hub=`,
+* or `null` when it cannot be one: not http(s), carries credentials, or does
+* not parse. A path/query/fragment is dropped — the central page mounts the
+* viewer under the origin itself.
+*/
+function toAppLinkHubOrigin(baseUrl) {
+	let parsed;
+	try {
+		parsed = new URL(baseUrl);
+	} catch {
+		return null;
+	}
+	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+	if (parsed.username !== "" || parsed.password !== "") return null;
+	if (parsed.hostname === "") return null;
+	return parsed.origin;
+}
+/**
+* The hub address an app link carries as `hub=`, chosen from the hub's OWN
+* advertised palette so it always agrees with what the Network page lists:
+* the public tunnel first, then the mesh (Tailscale MagicDNS) — HTTPS only,
+* because the app and the hosted viewer reach it from off the LAN. `null`
+* when the hub advertises neither.
+*/
+function pickAppLinkHub(endpoints) {
+	const rank = (e) => {
+		if (e.kind !== "public" || !e.baseUrl.startsWith("https://")) return null;
+		if (e.interfaceKind === "public") return 0;
+		if (e.interfaceKind === "vpn") return 1;
+		return null;
+	};
+	return endpoints.flatMap((e) => {
+		const r = rank(e);
+		const origin = toAppLinkHubOrigin(e.baseUrl);
+		return r === null || origin === null ? [] : [{
+			r,
+			p: e.priority,
+			origin
+		}];
+	}).toSorted((a, b) => a.r - b.r || a.p - b.p)[0]?.origin ?? null;
+}
 /**
 * Optional client-side hints sent at session creation to help the provider
 * pick the best native source. All fields optional — a viewer that knows
@@ -36148,7 +36257,7 @@ var LocalInterfaceSchema = z.object({
 	name: z.string(),
 	family: z.enum(["IPv4", "IPv6"]),
 	address: z.string(),
-	/** CIDR shorthand (e.g. `192.168.x.x/24`). Empty when OS doesn't expose. */
+	/** CIDR shorthand (e.g. `192.168.10.10/24`). Empty when OS doesn't expose. */
 	cidr: z.string(),
 	/** OS netmask. Stable across calls so the SDK can hash on it. */
 	netmask: z.string(),
@@ -36202,7 +36311,8 @@ var ConnectionEndpointSchema = z.object({
 		"lan-ipv4",
 		"lan-ipv6",
 		"public",
-		"loopback"
+		"loopback",
+		"app-link"
 	]),
 	/**
 	* Originating-interface kind — `lan`/`wifi`/`docker`/`vpn`/`other`/
@@ -36271,15 +36381,27 @@ var GetConnectionEndpointsResultSchema = z.object({
 	localPort: AdvertisedLocalPortSchema
 });
 /**
-* The chosen outbound endpoint for notification artifacts. `baseUrl: null` =
-* AUTO (resolved from the candidate ranking at send time); `resolved` reports
-* what AUTO currently picks, so the UI can show the effective value either way.
+* The address flagged for notification links. `baseUrl: null` = AUTO, which
+* since D709 is the CamStack app link; `resolved` reports the effective value,
+* so the UI can show it either way.
 */
 var NotificationEndpointSchema = z.object({
 	/** The operator's explicit choice, or null for AUTO. */
 	baseUrl: z.string().nullable(),
-	/** What the ranking currently resolves to (null when nothing is reachable). */
-	resolved: z.string().nullable()
+	/**
+	* The effective flagged address: the explicit choice, else (AUTO) the
+	* CamStack app link `https://camstack.zentik.app` (D709). A pre-D709 hub
+	* answered the public tunnel / mesh here, or null.
+	*/
+	resolved: z.string().nullable(),
+	/**
+	* The hub origin an app link carries as `hub=` (D709): the hub's best
+	* public HTTPS address — the tunnel, then the mesh (Tailscale MagicDNS) —
+	* picked from this cap's own palette by `pickAppLinkHub`. `null` when the
+	* hub advertises neither; the app link is then minted without `hub=`.
+	* Absent on a pre-D709 hub.
+	*/
+	appLinkHub: z.string().nullable()
 });
 /**
 * The URLs the SDK / viewer should race for API access. `baseUrls` empty =
@@ -36347,7 +36469,7 @@ var localNetworkCapability = {
 		* every client a second authority on a socket only the hub binds. A viewer
 		* configured with a port-less public URL (`https://camstack.example.top`)
 		* infers 443 from the scheme, asks with 443, and was handed
-		* `https://192.168.x.x:443` for a hub listening on 4443. That candidate
+		* `https://192.168.10.9:443` for a hub listening on 4443. That candidate
 		* cannot ever answer, and losing its race reads in the log exactly like
 		* "the LAN was tried and it was slower" — so an operator sitting on his own
 		* WiFi stayed on the public tunnel for weeks, with the LAN candidate born
@@ -36380,13 +36502,21 @@ var localNetworkCapability = {
 			*  Pass `'https'` when the caller is itself loaded over HTTPS
 			*  to avoid mixed-content blocks in the browser. The public
 			*  tunnel always emits `https://` regardless. */
-			scheme: z.enum(["http", "https"]).optional()
+			scheme: z.enum(["http", "https"]).optional(),
+			/** Append the CamStack app link entry (`kind: 'app-link'`, D709) —
+			*  an address notification links can be flagged with, not a hub
+			*  route. Default `false`: racers and rankers never see it. */
+			includeAppLink: z.boolean().optional()
 		}), GetConnectionEndpointsResultSchema),
 		/**
-		* The endpoint OUTBOUND artifacts must be addressed by — notification
-		* attachment links and deep links. `baseUrl: null` means AUTO: the first
-		* public candidate (a configured origin, then a connected tunnel, then the
-		* LAN), never loopback.
+		* The address notification links are flagged with. `baseUrl: null` means
+		* AUTO, which is the CamStack app link (D709): viewer taps go through
+		* `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the app. Any
+		* hub address the palette lists can be flagged instead; then viewer taps,
+		* attachment links and action buttons all use it. Signed media and
+		* buttons never use the app link — with it flagged (or AUTO) they keep
+		* the ranked hub ladder (a configured origin, a connected tunnel, then
+		* the LAN), never loopback.
 		*
 		* Why an explicit marker: the automatic ranking cannot know which of
 		* several reachable addresses the RECIPIENT can actually open. A link is
@@ -36800,7 +36930,7 @@ var MeshPeerSchema = z.object({
 	tags: z.array(z.string()).readonly(),
 	/** True when the peer advertises itself as an exit-node candidate. */
 	exitNodeOption: z.boolean(),
-	/** Subnet routes the peer advertises (e.g. `["192.168.x.x/24"]`). */
+	/** Subnet routes the peer advertises (e.g. `["192.168.10.0/24"]`). */
 	advertisedRoutes: z.array(z.string()).readonly(),
 	/** Owner account login (e.g. `foo@example.com`). Null for tagged peers. */
 	userLogin: z.string().nullable(),
@@ -45213,7 +45343,8 @@ function expressionOutcome(source, read, now, stateful) {
 		value: null,
 		reason: `the expression failed: ${result.error}`,
 		fatal: false,
-		confirmed: true
+		confirmed: true,
+		expressionFailed: true
 	};
 	return {
 		state: staleReasons.length > 0 ? "stale" : "fresh",
@@ -58617,12 +58748,14 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 	{
 		id: "addons",
 		family: "system",
-		label: "Addons",
-		kinds: [
-			"addon-crash-loop",
-			"addon-update-available",
-			"addon-updated"
-		]
+		label: "Addons stopped",
+		kinds: ["addon-crash-loop"]
+	},
+	{
+		id: "addon-updates",
+		family: "system",
+		label: "Addon updates",
+		kinds: ["addon-update-available", "addon-updated"]
 	},
 	{
 		id: "updates",
@@ -58782,13 +58915,15 @@ var STATE_SUMMARY_SECTION_VARS = [
 	},
 	{
 		name: "summaryAddons",
-		label: "Summary: addons",
-		example: "@camstack/addon-recorder 1.2.3 → 1.2.4",
-		kinds: [
-			"addon-crash-loop",
-			"addon-update-available",
-			"addon-updated"
-		]
+		label: "Summary: addons stopped",
+		example: "hub — recorder stopped after repeated crashes",
+		kinds: ["addon-crash-loop"]
+	},
+	{
+		name: "summaryAddonUpdates",
+		label: "Summary: addon updates",
+		example: "hub:\n• @camstack/addon-recorder 1.2.3 → 1.2.4",
+		kinds: ["addon-update-available", "addon-updated"]
 	},
 	{
 		name: "summaryUpdates",
@@ -58872,6 +59007,7 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_BODY_ONLY],
 	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
+	([...RULE_TEXT], [...COMBINED_ALARM]),
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
 	([...RULE_TEXT], [...BATTERY, ...CONSUMABLE]),
 	([...RULE_TEXT], [...CONSUMABLE]),
@@ -59597,4 +59733,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { cameraGridLayoutCapability as $, ReadinessRegistry as $n, normalizeUnit as $t, RECORDING_SOURCE_CAMSTACK_ADDON as A, vectorIndexDimConflictError as An, formatMinutes as At, StorageMigrationJobSchema as B, compositionSliceKey as Bn, lifecycleJobSchema as Bt, FieldClaimSchema as C, storageOccupancyCapability as Cn, enumerateSchemaFields as Ct, METHOD_ACCESS_MAP as D, userManagementCapability as Dn, extractNestedAddonId as Dt, LocationIconIdSchema as E, streamQualityLabel as En, expandContainer as Et, STREAM_PROFILE_META as F, cloneStatefulExpressionMemory as Fn, isObjectInput as Ft, alertsCapability as G, DeviceFeature as Gn, looseSchema as Gt, addonPagesCapability as H, createStatefulExpressionMemory as Hn, locationIconKey as Ht, ScopedTokenSchema as I, composedDeviceRef as In, isVoidInput as It, bareAddonId as J, errMsg as Jn, memoizePinnedFfmpeg as Jt, authProviderCapability as K, DeviceRole as Kn, mayReadLocation as Kt, StorageCleanupJobSchema as L, composedDeviceStableId as Ln, kebabToCamel as Lt, RUNTIME_DEFAULTS as M, withLocationMode as Mn, isArrayOutputSchema as Mt, RecordingStatusSchema as N, COMPOSER_ADDON_ID as Nn, isCollectionArrayMethod as Nt, MINUTES_PER_DAY as O, validateComposition as On, filesystemBrowseCapability as Ot, STORAGE_ACCESS_FALLBACK as P, buildFfmpegArgs as Pn, isLocationEnabled as Pt, calendarsCapability as Q, DEVICE_STATUS_METHOD as Qn, normalizeCoreBlockWrite as Qt, StorageLocationModeSchema as R, compositionFeatureEnabled as Rn, legacyAutoLinkIds as Rt, FieldClaimModeSchema as S, storageMigrationCapability as Sn, enumerateItemArrayFields as St, LegacyStorageLocationDefaultSchema as T, streamCatalogCapability as Tn, evictionPolicyOfLocation as Tt, addonSettingsCapability as U, disarmRoseMemory as Un, logDestinationCapability as Ut, UserRecordSchema as V, compositionSourceKey as Vn, localNetworkCapability as Vt, addonWidgetsCapability as W, toExpressionValue as Wn, logLevelAtMost as Wt, buildCapabilityLookup as X, DATAPLANE_SECRET_HEADER as Xn, modeMayWrite as Xt, batteryCapability as Y, BaseAddon as Yn, metricsProviderCapability as Yt, buildStreamParamsConfigSchema as Z, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Zn, motionCapability as Zt, DAY_NAMES as _, scoreRuntimes as _n, scopeKey as _r, deviceExtensionCapability as _t, BatteryStatusSchema as a, procedureAuthKey as an, createEvent as ar, coreBlockComposition as at, DeviceStatusSchema as b, snapshotCapability as bn, EventCategory as br, deviceStatusCapability as bt, COMPOSED_ITEM_FIXED_FIELDS as c, replacedFieldKeys as cn, expandCapMethods as cr, coreBlocksCapability as ct, CORE_BLOCK_ADDON_PREFIX as d, resolveCoreBlockFiles as dn, isEvent as dr, databaseSnapshotCapability as dt, objectInputDeclaresAddonId as en, ReadinessTimeoutError as er, collectSecretConfigKeys as et, CalendarPreferencesSchema as f, resolveLocationMode as fn, nodePin as fr, declarationOwnerNodeId as ft, DATABASE_SNAPSHOT_TIMEOUT_MS as g, scopesAllowDeviceCap as gn, resolveCapMount as gr, describeComposableCaps as gt, DATABASE_SNAPSHOT_SUFFIX as h, scopesAllowAddon as hn, readinessKey as hr, deriveBatteryPresence as ht, BaseDevice as i, platformProbeCapability as in, asString$1 as ir, coreBlockAddonId as it, REDACTED_SECRET as j, vectorStoreCapability as jn, gbToBytes as jt, MOTION_CLOSE_AFTER_MS as k, vectorDimFromBase64 as kn, foldSnapshotByFunction as kt, COMPOSER_RUNNER_ID as l, resolveBucketMs as ln, hydrateSchema as lr, createDeviceExtensionProvider as lt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as m, runtimeStatePolicyFor as mn, parseJsonUnknown as mr, defineExtensionSlotProvider as mt, AlertSchema as n, parseStreamParamsFormPatch as nn, asJsonObject as nr, compositionFieldKey as nt, CAMERA_SWITCH_ORDER as o, ptzAutotrackCapability as on, emitDownForOwnedCaps as or, coreBlockIdFromAddonId as ot, CoreBlockSchema as p, resolveMethodAuth as pn, parseJsonObject as pr, decodeVectorBase64 as pt, backupCapability as q, DeviceType as qn, mayWriteToLocation as qt, ApiKeyRecordSchema as r, planComposition as rn, asNumber as rr, compositionSourceRefs as rt, CAP_NAMES_WITH_STATUS as s, reducePoints as sn, emitReadiness as sr, coreBlockSourceKind as st, ALL_CAPABILITY_DEFINITIONS as t, objectInputDeclaresRequiredDeviceId as tn, WELL_KNOWN_TAB_MAP as tr, composerCapability as tt, CORE_BLOCKS_ADDON_ID as u, resolveCoreBlockEntry as un, isDeviceConfigCap as ur, dataStoreProviderCapability as ut, DERIVED_CAMERA_SILENCED_CAP_NAMES as v, settingsStoreCapability as vn, sleep as vr, deviceManagerCapability as vt, LOG_LEVEL_RANK as w, storageProviderCapability as wn, evaluateCompositionField as wt, FIRST_LEVEL_MACRO_CLASSES as x, storageCapability as xn, enumerateInferenceDevices as xt, DeclaredDevices as y, siteZoneKey as yn, toNodeId as yr, deviceStateCapability as yt, StorageLocationTypeSchema as z, compositionItemFieldPath as zn, legacyModeOf as zt };
+export { calendarsCapability as $, DATAPLANE_SECRET_HEADER as $n, motionCapability as $t, MOTION_CLOSE_AFTER_MS as A, userManagementCapability as An, filesystemBrowseCapability as At, StorageLocationTypeSchema as B, composedDeviceStableId as Bn, legacyAutoLinkIds as Bt, FieldClaimModeSchema as C, snapshotCapability as Cn, EventCategory as Cr, enumerateItemArrayFields as Ct, LocationIconIdSchema as D, storageProviderCapability as Dn, expandContainer as Dt, LegacyStorageLocationDefaultSchema as E, storageOccupancyCapability as En, evictionPolicyOfLocation as Et, STORAGE_ACCESS_FALLBACK as F, withLocationMode as Fn, isCollectionArrayMethod as Ft, addonWidgetsCapability as G, createStatefulExpressionMemory as Gn, logDestinationCapability as Gt, UserRecordSchema as H, compositionItemFieldPath as Hn, lifecycleJobSchema as Ht, STREAM_PROFILE_META as I, COMPOSER_ADDON_ID as In, isLocationEnabled as It, backupCapability as J, DeviceFeature as Jn, mayReadLocation as Jt, alertsCapability as K, disarmRoseMemory as Kn, logLevelAtMost as Kt, ScopedTokenSchema as L, buildFfmpegArgs as Ln, isObjectInput as Lt, REDACTED_SECRET as M, vectorDimFromBase64 as Mn, formatMinutes as Mt, RUNTIME_DEFAULTS as N, vectorIndexDimConflictError as Nn, gbToBytes as Nt, METHOD_ACCESS_MAP as O, streamCatalogCapability as On, expressionContainsBuiltinCall as Ot, RecordingStatusSchema as P, vectorStoreCapability as Pn, isArrayOutputSchema as Pt, buildStreamParamsConfigSchema as Q, BaseAddon as Qn, modeMayWrite as Qt, StorageCleanupJobSchema as R, cloneStatefulExpressionMemory as Rn, isVoidInput as Rt, FIRST_LEVEL_MACRO_CLASSES as S, siteZoneKey as Sn, toNodeId as Sr, enumerateInferenceDevices as St, LOG_LEVEL_RANK as T, storageMigrationCapability as Tn, evaluateCompositionField as Tt, addonPagesCapability as U, compositionSliceKey as Un, localNetworkCapability as Ut, StorageMigrationJobSchema as V, compositionFeatureEnabled as Vn, legacyModeOf as Vt, addonSettingsCapability as W, compositionSourceKey as Wn, locationIconKey as Wt, batteryCapability as X, DeviceType as Xn, memoizePinnedFfmpeg as Xt, bareAddonId as Y, DeviceRole as Yn, mayWriteToLocation as Yt, buildCapabilityLookup as Z, errMsg as Zn, metricsProviderCapability as Zt, DATABASE_SNAPSHOT_TIMEOUT_MS as _, runtimeStatePolicyFor as _n, parseJsonUnknown as _r, describeComposableCaps as _t, BatteryStatusSchema as a, pickAppLinkHub as an, asJsonObject as ar, coreBlockAddonId as at, DeclaredDevices as b, scoreRuntimes as bn, scopeKey as br, deviceStateCapability as bt, CAP_NAMES_WITH_STATUS as c, procedureAuthKey as cn, createEvent as cr, coreBlockSourceKind as ct, CORE_BLOCKS_ADDON_ID as d, replacedFieldKeys as dn, expandCapMethods as dr, dataStoreProviderCapability as dt, normalizeCoreBlockWrite as en, DEVICE_SETTINGS_CONTRIBUTION_METHODS as er, cameraGridLayoutCapability as et, CORE_BLOCK_ADDON_PREFIX as f, resolveBucketMs as fn, hydrateSchema as fr, databaseSnapshotCapability as ft, DATABASE_SNAPSHOT_SUFFIX as g, resolveMethodAuth as gn, parseJsonObject as gr, deriveBatteryPresence as gt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as h, resolveLocationMode as hn, nodePin as hr, defineExtensionSlotProvider as ht, BaseDevice as i, parseStreamParamsFormPatch as in, WELL_KNOWN_TAB_MAP as ir, compositionSourceRefs as it, RECORDING_SOURCE_CAMSTACK_ADDON as j, validateComposition as jn, foldSnapshotByFunction as jt, MINUTES_PER_DAY as k, streamQualityLabel as kn, extractNestedAddonId as kt, COMPOSED_ITEM_FIXED_FIELDS as l, ptzAutotrackCapability as ln, emitDownForOwnedCaps as lr, coreBlocksCapability as lt, CoreBlockSchema as m, resolveCoreBlockFiles as mn, isEvent as mr, decodeVectorBase64 as mt, AlertSchema as n, objectInputDeclaresAddonId as nn, ReadinessRegistry as nr, composerCapability as nt, CAMERA_SWITCH_ORDER as o, planComposition as on, asNumber as or, coreBlockComposition as ot, CalendarPreferencesSchema as p, resolveCoreBlockEntry as pn, isDeviceConfigCap as pr, declarationOwnerNodeId as pt, authProviderCapability as q, toExpressionValue as qn, looseSchema as qt, ApiKeyRecordSchema as r, objectInputDeclaresRequiredDeviceId as rn, ReadinessTimeoutError as rr, compositionFieldKey as rt, CAMSTACK_APP_LINK_ORIGIN as s, platformProbeCapability as sn, asString$1 as sr, coreBlockIdFromAddonId as st, ALL_CAPABILITY_DEFINITIONS as t, normalizeUnit as tn, DEVICE_STATUS_METHOD as tr, collectSecretConfigKeys as tt, COMPOSER_RUNNER_ID as u, reducePoints as un, emitReadiness as ur, createDeviceExtensionProvider as ut, DAY_NAMES as v, scopesAllowAddon as vn, readinessKey as vr, deviceExtensionCapability as vt, FieldClaimSchema as w, storageCapability as wn, enumerateSchemaFields as wt, DeviceStatusSchema as x, settingsStoreCapability as xn, sleep as xr, deviceStatusCapability as xt, DERIVED_CAMERA_SILENCED_CAP_NAMES as y, scopesAllowDeviceCap as yn, resolveCapMount as yr, deviceManagerCapability as yt, StorageLocationModeSchema as z, composedDeviceRef as zn, kebabToCamel as zt };

package/dist/http/reverse-proxy.d.ts

@@ -1,4 +1,4 @@
-import { IncomingMessage, ServerResponse } from 'node:http';
+import { IncomingMessage, ServerResponse, OutgoingHttpHeaders } from 'node:http';
 export interface ReverseProxyOptions {
     /** Addon listener base, e.g. `http://127.0.0.1:54123`. */
     readonly baseUrl: string;
@@ -14,6 +14,16 @@ export interface ReverseProxyOptions {
      */
     readonly replayBody?: Buffer;
 }
+/**
+ * The upstream's response headers, minus the CORS policy, which belongs to the
+ * EDGE (D707). The hub stamps its allowlist verdict on `clientRes` with
+ * `setHeader` before hijacking, and Node merges those into `writeHead` — so an
+ * upstream `access-control-*` header would OVERRIDE the hub's answer: the
+ * authenticated file-server's `*` reached a refused origin this way. `Vary` is
+ * merged rather than replaced, so the edge's `Origin` survives an upstream
+ * `Accept-Encoding`.
+ */
+export declare function edgeOwnedResponseHeaders(upRes: IncomingMessage, clientRes: ServerResponse): OutgoingHttpHeaders;
 /** Reverse-proxy one request to an addon data-plane listener. Fire-and-forget:
  *  the caller must `reply.hijack()` (or otherwise stop the framework from also
  *  responding) before calling this, since we drive `clientRes` directly. */

package/dist/index.d.ts

@@ -55,7 +55,7 @@ export { createFileDataPlaneHandler } from './http/file-data-plane.js';
 export { allFamiliesListenHost, applyLanHttp, bindPendingLanHttp, closeLanHttp, DEFAULT_LAN_HTTP_PORT, readLanHttpState, registerLanHttpHandler, } from './http/lan-http-bind.js';
 export type { ReverseProxyOptions } from './http/reverse-proxy.js';
 export { proxyToUpstream } from './http/reverse-proxy.js';
-export type { ChildFanoutDelta, ChildFanoutRegistry, ChildFanoutSample, CrossNodeEventStats, EventFanoutMode, EventPlaneCounters, EventPlaneReader, EventPlaneSources, EventPlaneWindow, } from './kernel/event-plane-report.js';
+export type { ChildFanoutDelta, ChildFanoutRegistry, ChildFanoutSample, CrossNodeEventStats, EventPlaneCounters, EventPlaneReader, EventPlaneSources, EventPlaneWindow, } from './kernel/event-plane-report.js';
 export { createEventPlaneMeter, createEventPlaneReader, diffEventPlane, EVENT_PLANE_TOP_N, formatEventPlane, } from './kernel/event-plane-report.js';
 export type { SocketPeerDelta, SocketPeerSample, SocketPlaneBaseline, SocketPlaneCounters, SocketPlaneMeter, SocketPlaneReader, SocketPlaneRegistry, SocketPlaneRegistryChild, SocketPlaneSources, SocketPlaneWindow, } from './kernel/socket-plane-report.js';
 export { createSocketPlaneMeter, createSocketPlaneReader, diffSocketPlane, EMPTY_SOCKET_PLANE_BASELINE, formatSocketPlane, readSocketQueues, SOCKET_PLANE_TOP_N, SOCKET_QUEUE_TOP_N, } from './kernel/socket-plane-report.js';