@camstack/types 0.1.34 → 0.1.35

package/dist/{index-DS7418lf.js → index-BkSgJYP7.js}

@@ -5670,54 +5670,6 @@ const authProviderCapability = {
     validateToken: method(zod.z.object({ token: zod.z.string() }), AuthResultSchema.nullable())
   }
 };
-const AuthProviderInfoSchema = zod.z.object({
-  /** Stable id matching the addon id (used for `getLoginUrl({addonId,…})`). */
-  addonId: zod.z.string(),
-  /**
-   * Per-instance id when one addon registers multiple "logical"
-   * providers (e.g. OIDC with Google + Microsoft + custom). The login
-   * URL becomes `/addon/${addonId}/${instanceId}/start` — handler reads
-   * `:instanceId` from the route. Empty/unset means the addon is a
-   * single-instance provider; the URL is `/addon/${addonId}/start`.
-   */
-  instanceId: zod.z.string().optional(),
-  /** Display label shown on the login button + admin row. */
-  displayName: zod.z.string(),
-  /** Optional iconography hint (lucide-react icon name OR emoji). */
-  icon: zod.z.string().optional(),
-  /** When true, the provider exposes a redirect-based login flow
-   *  (`getLoginUrl` returns a URL the browser navigates to). */
-  hasRedirectFlow: zod.z.boolean(),
-  /** When true, the provider exposes a credential-form login flow
-   *  (`validateCredentials` accepts username + password). */
-  hasCredentialFlow: zod.z.boolean(),
-  /** Provider kind, drives admin-UI hint dispatch (oidc / saml / totp / …). */
-  kind: zod.z.string().optional(),
-  /** Operator-facing status string (e.g. "Connected to https://login.acme.com"). */
-  status: zod.z.string().optional(),
-  /** When false, the provider is registered but disabled by config; the
-   *  UI surfaces it as inactive without enumerating it for login. */
-  enabled: zod.z.boolean()
-});
-const authenticationCapability = {
-  name: "authentication",
-  scope: "system",
-  mode: "singleton",
-  methods: {
-    /** All registered auth providers, both enabled and disabled. */
-    listProviders: method(zod.z.void(), zod.z.array(AuthProviderInfoSchema).readonly()),
-    /**
-     * Toggle a provider's enabled flag. Disabled providers stay
-     * registered but aren't surfaced on the login page. The orchestrator
-     * persists the state in `addon-settings` so it survives restarts.
-     */
-    setProviderEnabled: method(
-      zod.z.object({ addonId: zod.z.string(), enabled: zod.z.boolean() }),
-      zod.z.object({ success: zod.z.literal(true) }),
-      { kind: "mutation", auth: "admin" }
-    )
-  }
-};
 const NetworkEndpointSchema = zod.z.object({
   url: zod.z.string(),
   hostname: zod.z.string(),
@@ -5746,7 +5698,6 @@ const networkAccessCapability = {
   name: "network-access",
   scope: "system",
   mode: "collection",
-  internal: true,
   providerKind: "ingress",
   methods: {
     start: method(zod.z.void(), NetworkEndpointSchema, { kind: "mutation" }),
@@ -5754,58 +5705,13 @@ const networkAccessCapability = {
     getEndpoint: method(zod.z.void(), NetworkEndpointSchema.nullable()),
     getStatus: method(zod.z.void(), NetworkAccessStatusSchema),
     /**
-     * Enumerate every active ingress entry. Default implementation (when
-     * the provider omits this method) is derived from `getEndpoint()` —
-     * see the remote-access orchestrator for the fallback path.
+     * Enumerate every active ingress entry. Providers that expose only a
+     * single endpoint may omit this method; callers fall back to
+     * `getEndpoint()` in that case.
      */
     listEndpoints: method(zod.z.void(), zod.z.array(NetworkEndpointEntrySchema).readonly())
   }
 };
-const RemoteAccessEndpointSchema = zod.z.object({
-  url: zod.z.string(),
-  hostname: zod.z.string(),
-  port: zod.z.number(),
-  protocol: zod.z.enum(["http", "https"])
-});
-const RemoteAccessProviderInfoSchema = zod.z.object({
-  /** Stable id matching the addon id. */
-  addonId: zod.z.string(),
-  /** Display label shown on the admin row — sourced from the addon manifest. */
-  displayName: zod.z.string(),
-  /** When false, the provider is registered but disabled. */
-  enabled: zod.z.boolean(),
-  /** True when the underlying tunnel/connection is up. */
-  connected: zod.z.boolean(),
-  /** Public-facing endpoint, when connected. Null otherwise. */
-  endpoint: RemoteAccessEndpointSchema.nullable(),
-  /** Last error message (when connected=false), if available. */
-  error: zod.z.string().optional()
-});
-const remoteAccessCapability = {
-  name: "remote-access",
-  scope: "system",
-  mode: "singleton",
-  methods: {
-    /** All registered remote-access providers + their live status. */
-    listProviders: method(zod.z.void(), zod.z.array(RemoteAccessProviderInfoSchema).readonly()),
-    /**
-     * Start a specific provider's tunnel. Per-provider config still
-     * lives on the addon's settings panel; this is just the on/off
-     * trigger so the admin UI can manage the lifecycle from one place.
-     */
-    startProvider: method(
-      zod.z.object({ addonId: zod.z.string() }),
-      RemoteAccessEndpointSchema,
-      { kind: "mutation", auth: "admin" }
-    ),
-    /** Stop a specific provider's tunnel (idempotent on already-stopped). */
-    stopProvider: method(
-      zod.z.object({ addonId: zod.z.string() }),
-      zod.z.object({ success: zod.z.literal(true) }),
-      { kind: "mutation", auth: "admin" }
-    )
-  }
-};
 const TurnServerSchema = zod.z.object({
   /** Single URL or list of URLs (e.g. "turn:turn.example.com:3478?transport=udp"). */
   urls: zod.z.union([zod.z.string(), zod.z.array(zod.z.string())]),
@@ -5828,48 +5734,6 @@ const turnProviderCapability = {
     )
   }
 };
-const TurnProviderInfoSchema = zod.z.object({
-  /** Stable id matching the addon id. */
-  addonId: zod.z.string(),
-  /** Display label shown on the admin row — sourced from the addon manifest. */
-  displayName: zod.z.string(),
-  /** When false, the provider is registered but disabled. */
-  enabled: zod.z.boolean(),
-  /** Number of servers this provider is currently exposing. */
-  serverCount: zod.z.number(),
-  /**
-   * Flat list of every TURN/STUN URL this provider currently exposes.
-   * One row per URL (multi-URL ICE server entries are flattened). The
-   * admin UI shows this in a compact per-provider list so operators
-   * can verify what's actually being negotiated without having to dig
-   * into the combined `getAllServers` output.
-   */
-  urls: zod.z.array(zod.z.string()).readonly(),
-  /** Last fetch error (when serverCount=0 due to API failure), if any. */
-  error: zod.z.string().optional()
-});
-const turnOrchestratorCapability = {
-  name: "turn-orchestrator",
-  scope: "system",
-  mode: "singleton",
-  methods: {
-    /** All registered TURN providers + per-provider stats. */
-    listProviders: method(zod.z.void(), zod.z.array(TurnProviderInfoSchema).readonly()),
-    /**
-     * Combined list of TURN/STUN servers from all ENABLED providers.
-     * Consumed by the WebRTC layer at session-creation time —
-     * implementations may fetch fresh short-lived credentials each
-     * call (e.g. Cloudflare API), so consumers SHOULD call per-session.
-     */
-    getAllServers: method(zod.z.void(), zod.z.array(TurnServerSchema).readonly()),
-    /** Toggle a provider's enabled flag. */
-    setProviderEnabled: method(
-      zod.z.object({ addonId: zod.z.string(), enabled: zod.z.boolean() }),
-      zod.z.object({ success: zod.z.literal(true) }),
-      { kind: "mutation", auth: "admin" }
-    )
-  }
-};
 const SnapshotImageSchema = zod.z.object({
   base64: zod.z.string(),
   contentType: zod.z.string()
@@ -7465,7 +7329,7 @@ const localNetworkCapability = {
     )
   }
 };
-const MeshEndpointSchema$1 = zod.z.object({
+const MeshEndpointSchema = zod.z.object({
   /** Stable identifier within the provider (e.g. `mesh-ipv4`, `magicdns`, `funnel`). */
   id: zod.z.string(),
   /** Operator-facing label (e.g. "Mesh IPv4", "MagicDNS"). */
@@ -7538,7 +7402,7 @@ const MeshStatusSchema = zod.z.object({
   /** Number of peers visible to this host (excluding self). */
   peerCount: zod.z.number(),
   /** Every endpoint this provider exposes for the current host. */
-  endpoints: zod.z.array(MeshEndpointSchema$1).readonly(),
+  endpoints: zod.z.array(MeshEndpointSchema).readonly(),
   /** Last error from the daemon, when not joined. */
   error: zod.z.string().optional(),
   // ── Account / tenant identity (generic across providers) ────────
@@ -7705,108 +7569,6 @@ const meshNetworkCapability = {
     // tabs driven by this cap.
   }
 };
-const MeshEndpointSchema = zod.z.object({
-  id: zod.z.string(),
-  label: zod.z.string(),
-  scope: zod.z.enum(["mesh", "public"]),
-  url: zod.z.string(),
-  hostname: zod.z.string(),
-  port: zod.z.number(),
-  protocol: zod.z.enum(["http", "https"])
-});
-const MeshProviderInfoSchema = zod.z.object({
-  /** Stable id matching the addon id. */
-  addonId: zod.z.string(),
-  /** Display label shown on the admin row — sourced from the addon manifest. */
-  displayName: zod.z.string(),
-  /** True when the host is joined to this provider's mesh. */
-  joined: zod.z.boolean(),
-  /** Local mesh IP (empty when not joined). */
-  meshIp: zod.z.string(),
-  /** MagicDNS / mesh hostname (empty when not configured). */
-  magicDnsHostname: zod.z.string(),
-  /** Peer count (excluding self). */
-  peerCount: zod.z.number(),
-  /** Active endpoints (mesh IP + MagicDNS + optional public Funnel). */
-  endpoints: zod.z.array(MeshEndpointSchema).readonly(),
-  /** Last error reported by the provider. */
-  error: zod.z.string().optional(),
-  // ── Generic identity fields mirrored from MeshStatus ─────────────
-  /** Tenant / tailnet / network display name. Empty pre-join. */
-  tenantName: zod.z.string(),
-  /** Mesh DNS suffix (e.g. tailXXXX.ts.net). Empty when not configured. */
-  magicDnsSuffix: zod.z.string(),
-  /** Authenticated user / account login. Null for token-only providers. */
-  userLogin: zod.z.string().nullable(),
-  /** Provider control-plane URL. */
-  controlPlaneUrl: zod.z.string(),
-  /** Machine-key expiry (epoch ms). Null when keys don't rotate. */
-  keyExpiry: zod.z.number().nullable()
-});
-const meshOrchestratorCapability = {
-  name: "mesh-orchestrator",
-  scope: "system",
-  mode: "singleton",
-  methods: {
-    /** All registered mesh-network providers + live status. */
-    listProviders: method(zod.z.void(), zod.z.array(MeshProviderInfoSchema).readonly()),
-    /**
-     * Join the mesh of a specific provider. Per-provider config still
-     * lives on its settings panel; the orchestrator forwards.
-     */
-    joinProvider: method(
-      zod.z.object({
-        addonId: zod.z.string(),
-        authKey: zod.z.string().min(8),
-        hostname: zod.z.string().optional()
-      }),
-      zod.z.object({ joined: zod.z.literal(true) }),
-      { kind: "mutation" }
-    ),
-    leaveProvider: method(
-      zod.z.object({ addonId: zod.z.string() }),
-      zod.z.object({ success: zod.z.literal(true) }),
-      { kind: "mutation" }
-    ),
-    /**
-     * Browser-redirect login flow. Forwards to the named provider's
-     * `mesh-network.startLogin` and returns the URL the daemon
-     * prints. UI opens it in a new tab, then polls `listProviders`
-     * for `joined: true`.
-     */
-    startLoginProvider: method(
-      zod.z.object({
-        addonId: zod.z.string(),
-        hostname: zod.z.string().optional()
-      }),
-      zod.z.object({ loginUrl: zod.z.string() }),
-      { kind: "mutation" }
-    ),
-    /**
-     * Sign out of the provider's account entirely (`mesh-network.logout`).
-     * Distinct from `leaveProvider` which only takes the host off-mesh;
-     * `logoutProvider` wipes credentials so the next start requires a
-     * fresh login.
-     */
-    logoutProvider: method(
-      zod.z.object({ addonId: zod.z.string() }),
-      zod.z.object({ loggedOut: zod.z.literal(true) }),
-      { kind: "mutation" }
-    ),
-    /**
-     * Per-provider peer list. Forwards to `mesh-network.listPeers` on
-     * the addressed provider. Separate from `listProviders` because
-     * peer payloads can be large on a heavily-populated tailnet —
-     * fetch only when the operator opens the Peers tab.
-     */
-    listProviderPeers: method(
-      zod.z.object({ addonId: zod.z.string() }),
-      zod.z.object({
-        peers: zod.z.array(MeshPeerSchema).readonly()
-      })
-    )
-  }
-};
 const MethodAccessSchema = zod.z.enum(["view", "create", "delete"]);
 const AllowedProviderSchema = zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]);
 const AllowedDevicesSchema = zod.z.record(zod.z.string(), zod.z.union([zod.z.literal("*"), zod.z.array(zod.z.string())]));
@@ -8699,6 +8461,29 @@ const addonsCapability = {
         isActive: zod.z.boolean()
       })).readonly()
     ),
+    /**
+     * Toggle a single collection-cap provider on/off. Generic write-side
+     * counterpart of `listCapabilityProviders` — drives the per-provider
+     * Enable/Disable affordance in admin pages (TURN servers, etc.)
+     * without needing a bespoke orchestrator cap.
+     *
+     * Reaches the hub's `CapabilityRegistry` directly:
+     * `enableCollectionProvider` / `disableCollectionProvider` flip the
+     * registry-level `disabledProviders` set. `getCollectionEntries`
+     * already filters disabled providers out, so a disabled provider
+     * drops out of every collection aggregate immediately. Only valid
+     * for `mode: 'collection'` caps — the registry no-ops + warns for
+     * singletons.
+     */
+    setCapabilityProviderEnabled: method(
+      zod.z.object({
+        capName: zod.z.string().min(1),
+        addonId: zod.z.string().min(1),
+        enabled: zod.z.boolean()
+      }),
+      zod.z.object({ success: zod.z.literal(true) }),
+      { kind: "mutation", auth: "admin" }
+    ),
     /**
      * Live-update one of the framework packages marked
      * `camstack.system: true` (`@camstack/types|kernel|core|sdk|ui-library`).
@@ -8837,7 +8622,6 @@ exports.AudioMetricsHistoryPointSchema = AudioMetricsHistoryPointSchema;
 exports.AudioMetricsHistorySchema = AudioMetricsHistorySchema;
 exports.AudioMetricsSnapshotSchema = AudioMetricsSnapshotSchema;
 exports.AudioPcmChunkSchema = AudioPcmChunkSchema;
-exports.AuthProviderInfoSchema = AuthProviderInfoSchema;
 exports.AuthResultSchema = AuthResultSchema;
 exports.AutoUpdateSettingsSchema = AutoUpdateSettingsSchema;
 exports.AvailableIntegrationTypeSchema = AvailableIntegrationTypeSchema;
@@ -8943,6 +8727,8 @@ exports.LogLevelSchema = LogLevelSchema$1;
 exports.LogStreamEntrySchema = LogStreamEntrySchema;
 exports.MODEL_FORMATS = MODEL_FORMATS;
 exports.MediaFileSchema = MediaFileSchema;
+exports.MeshPeerSchema = MeshPeerSchema;
+exports.MeshStatusSchema = MeshStatusSchema;
 exports.MethodAccessSchema = MethodAccessSchema;
 exports.MotionAnalysisResultSchema = MotionAnalysisResultSchema;
 exports.MotionEventSchema = MotionEventSchema;
@@ -8997,8 +8783,6 @@ exports.PtzPresetSchema = PtzPresetSchema;
 exports.QueryFilterSchema = QueryFilterSchema;
 exports.ReadChunkInputSchema = ReadChunkInputSchema;
 exports.RegisteredStreamSchema = RegisteredStreamSchema;
-exports.RemoteAccessEndpointSchema = RemoteAccessEndpointSchema;
-exports.RemoteAccessProviderInfoSchema = RemoteAccessProviderInfoSchema;
 exports.ReportMotionInputSchema = ReportMotionInputSchema;
 exports.RtpSourceSchema = RtpSourceSchema;
 exports.RtspRestreamEntrySchema = RtspRestreamEntrySchema;
@@ -9043,7 +8827,6 @@ exports.TopologyServiceSchema = TopologyServiceSchema;
 exports.TrackSchema = TrackSchema;
 exports.TrackStateSchema = TrackStateSchema;
 exports.TrackedDetectionSchema = TrackedDetectionSchema;
-exports.TurnProviderInfoSchema = TurnProviderInfoSchema;
 exports.TurnServerSchema = TurnServerSchema;
 exports.UnexposeInputSchema = UnexposeInputSchema;
 exports.UpdateIntegrationInputSchema = UpdateIntegrationInputSchema;
@@ -9083,7 +8866,6 @@ exports.audioAnalyzerCapability = audioAnalyzerCapability;
 exports.audioCodecCapability = audioCodecCapability;
 exports.audioMetricsCapability = audioMetricsCapability;
 exports.authProviderCapability = authProviderCapability;
-exports.authenticationCapability = authenticationCapability;
 exports.backupCapability = backupCapability;
 exports.batteryCapability = batteryCapability;
 exports.brightnessCapability = brightnessCapability;
@@ -9114,7 +8896,6 @@ exports.localNetworkCapability = localNetworkCapability;
 exports.logDestinationCapability = logDestinationCapability;
 exports.mapAudioLabelToMacro = mapAudioLabelToMacro;
 exports.meshNetworkCapability = meshNetworkCapability;
-exports.meshOrchestratorCapability = meshOrchestratorCapability;
 exports.method = method;
 exports.metricsProviderCapability = metricsProviderCapability;
 exports.motionCapability = motionCapability;
@@ -9137,7 +8918,6 @@ exports.ptzCapability = ptzCapability;
 exports.rebootCapability = rebootCapability;
 exports.recordingCapability = recordingCapability;
 exports.recordingEngineCapability = recordingEngineCapability;
-exports.remoteAccessCapability = remoteAccessCapability;
 exports.resolveDeviceProfile = resolveDeviceProfile;
 exports.restreamerCapability = restreamerCapability;
 exports.settingsStoreCapability = settingsStoreCapability;
@@ -9152,7 +8932,6 @@ exports.streamingEngineCapability = streamingEngineCapability;
 exports.switchCapability = switchCapability;
 exports.systemCapability = systemCapability;
 exports.toastCapability = toastCapability;
-exports.turnOrchestratorCapability = turnOrchestratorCapability;
 exports.turnProviderCapability = turnProviderCapability;
 exports.userManagementCapability = userManagementCapability;
 exports.userPasskeysCapability = userPasskeysCapability;
@@ -9162,4 +8941,4 @@ exports.webrtcSessionCapability = webrtcSessionCapability;
 exports.zoneAnalyticsCapability = zoneAnalyticsCapability;
 exports.zoneRulesCapability = zoneRulesCapability;
 exports.zonesCapability = zonesCapability;
-//# sourceMappingURL=index-DS7418lf.js.map
+//# sourceMappingURL=index-BkSgJYP7.js.map