@camstack/types 1.2.354 → 1.2.355

package/dist/addon.d.ts

@@ -40,10 +40,11 @@ export type { SliceEventBus, SliceHandleApi } from './device/device-state-handle
 export { DEVICE_SCOPED_CAPS, isDeviceScopedCap } from './generated/device-scoped-caps.js';
 export type { AddonDeclaration, AddonInitResult, ICamstackAddon, ProviderRegistration, } from './interfaces/addon.js';
 export { DATAPLANE_SECRET_HEADER } from './interfaces/addon-data-plane.js';
-export { emitReadiness } from './interfaces/event-bus.js';
+export { createEvent, emitReadiness } from './interfaces/event-bus.js';
 export { ReadinessRegistry, ReadinessTimeoutError, scopeKey, } from './readiness/readiness-registry.js';
 export { BOOT_RECOVERY_BACKOFF_MS } from './util/boot-recovery-backoff.js';
 export { errMsg } from './utils/err-msg.js';
+export { maskUrlCredentials } from './utils/mask-url.js';
 export { asJsonObject, asString, parseJsonUnknown } from './utils/json-safe.js';
 export { sleep } from './utils/sleep.js';
 export * from './keychain/index.js';

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-SgkKj2bk.js");
+const require_sleep = require("./sleep-BxOWTkUD.js");
 const require_event_category = require("./event-category-T43rdQWR.js");
 const require_err_msg = require("./err-msg-Dx2Kor0g.js");
 //#region src/generated/cap-input-defaults.ts
@@ -458,6 +458,7 @@ exports.classifySecretWrite = require_sleep.classifySecretWrite;
 exports.clearKnownSecrets = require_sleep.clearKnownSecrets;
 exports.collectZodSecretPaths = require_sleep.collectZodSecretPaths;
 exports.createDeviceProxy = require_sleep.createDeviceProxy;
+exports.createEvent = require_sleep.createEvent;
 exports.createEventBusSliceSource = require_sleep.createEventBusSliceSource;
 exports.createSecretsAccess = require_sleep.createSecretsAccess;
 exports.describeCustomActions = require_sleep.describeCustomActions;
@@ -479,6 +480,7 @@ exports.isSecretRef = require_sleep.isSecretRef;
 exports.isZodSecret = require_sleep.isZodSecret;
 exports.knownSecretCount = require_sleep.knownSecretCount;
 exports.makeSecretMarker = require_sleep.makeSecretMarker;
+exports.maskUrlCredentials = require_sleep.maskUrlCredentials;
 exports.nodePin = require_sleep.nodePin;
 exports.normalizeAddonInitResult = require_sleep.normalizeAddonInitResult;
 exports.normalizeSecretOwner = require_sleep.normalizeSecretOwner;

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $t as normalizeSecretOwner, A as adminUiCapability, At as PEER_BYTES_MAX_OUTSTANDING, C as deviceOpsCapability, Ct as clearKnownSecrets, Dt as scrubKnownSecrets, Et as registerKnownSecret, I as expandCapMethods, It as DisposerChain, Jt as arrayItemFieldPath, K as ReadinessRegistry, Lt as BaseAddon, Mt as PEER_BYTES_TICKET_TTL_MS, O as describeCustomActions, Ot as shortSecretRefHash, Pt as DATAPLANE_SECRET_HEADER, Qt as isSecretRef, Rt as normalizeAddonInitResult, St as MIN_SCRUBBED_LENGTH, T as DEVICE_CHILDREN_BATCH_MAX, Tt as knownSecretCount, U as nodePin, W as readNodePin, X as scopeKey, Xt as formatSecretScope, Yt as buildSecretRef, Zt as globalSecretScope, _n as isSecretMarkerLike, a as asJsonObject, b as collectZodSecretPaths, bt as REVALIDATE_AFTER_MS, d as BOOT_RECOVERY_BACKOFF_MS, en as parseSecretRef, f as DEVICE_SCOPED_CAPS, fn as SECRET_CLEAR, gn as isSecretMarker, h as createEventBusSliceSource, hn as isSecretFieldView, in as emitReadiness, jt as PEER_BYTES_STALL_MS, kt as PEER_BYTES_CHUNK_BYTES, m as createDeviceProxy, mn as isSecretClear, p as isDeviceScopedCap, pn as classifySecretWrite, q as ReadinessTimeoutError, qt as SECRET_REF_SCHEME, s as asString, t as sleep, u as parseJsonUnknown, vn as makeSecretMarker, w as viewerUiCapability, wt as forgetKnownSecret, x as isZodSecret, xt as createSecretsAccess, yn as toSecretFieldView, yt as resolveSecretViewsIn } from "./sleep-Tkp9dHXv.mjs";
+import { $t as isSecretRef, At as PEER_BYTES_CHUNK_BYTES, Ct as MIN_SCRUBBED_LENGTH, Dt as registerKnownSecret, E as DEVICE_CHILDREN_BATCH_MAX, Et as knownSecretCount, Ft as DATAPLANE_SECRET_HEADER, G as readNodePin, J as ReadinessTimeoutError, Jt as SECRET_REF_SCHEME, L as expandCapMethods, Lt as DisposerChain, Mt as PEER_BYTES_STALL_MS, Nt as PEER_BYTES_TICKET_TTL_MS, Ot as scrubKnownSecrets, Qt as globalSecretScope, Rt as BaseAddon, S as isZodSecret, St as createSecretsAccess, T as viewerUiCapability, Tt as forgetKnownSecret, W as nodePin, Xt as buildSecretRef, Yt as arrayItemFieldPath, Z as scopeKey, Zt as formatSecretScope, _n as isSecretMarker, an as emitReadiness, bn as toSecretFieldView, bt as resolveSecretViewsIn, c as asString, d as parseJsonUnknown, en as normalizeSecretOwner, f as BOOT_RECOVERY_BACKOFF_MS, g as createEventBusSliceSource, gn as isSecretFieldView, h as createDeviceProxy, hn as isSecretClear, in as createEvent, j as adminUiCapability, jt as PEER_BYTES_MAX_OUTSTANDING, k as describeCustomActions, kt as shortSecretRefHash, m as isDeviceScopedCap, mn as classifySecretWrite, o as asJsonObject, p as DEVICE_SCOPED_CAPS, pn as SECRET_CLEAR, q as ReadinessRegistry, r as maskUrlCredentials, t as sleep, tn as parseSecretRef, vn as isSecretMarkerLike, w as deviceOpsCapability, wt as clearKnownSecrets, x as collectZodSecretPaths, xt as REVALIDATE_AFTER_MS, yn as makeSecretMarker, zt as normalizeAddonInitResult } from "./sleep-BjDbnx6-.mjs";
 import { t as EventCategory } from "./event-category-C4hVnRo8.mjs";
 import { a as DeviceType, t as errMsg } from "./err-msg-DX6i_MY4.mjs";
 //#region src/generated/cap-input-defaults.ts
@@ -427,4 +427,4 @@ function isProviderOptionalMethodName(capName, method) {
 	return methods !== void 0 && methods.includes(method);
 }
 //#endregion
-export { BOOT_RECOVERY_BACKOFF_MS, BaseAddon, CAP_INPUT_DEFAULTS, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeviceType, DisposerChain, EventCategory, MIN_SCRUBBED_LENGTH, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, SECRET_CLEAR, SECRET_REF_SCHEME, adminUiCapability, arrayItemFieldPath, asJsonObject, asString, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectZodSecretPaths, createDeviceProxy, createEventBusSliceSource, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeSecretMarker, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretRef, readNodePin, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults };
+export { BOOT_RECOVERY_BACKOFF_MS, BaseAddon, CAP_INPUT_DEFAULTS, COLLECTION_ARRAY_METHODS, DATAPLANE_SECRET_HEADER, DEVICE_CHILDREN_BATCH_MAX, DEVICE_SCOPED_CAPS, DeviceType, DisposerChain, EventCategory, MIN_SCRUBBED_LENGTH, PEER_BYTES_CHUNK_BYTES, PEER_BYTES_MAX_OUTSTANDING, PEER_BYTES_STALL_MS, PEER_BYTES_TICKET_TTL_MS, PROVIDER_OPTIONAL_METHODS, REVALIDATE_AFTER_MS, ReadinessRegistry, ReadinessTimeoutError, SECRET_CLEAR, SECRET_REF_SCHEME, adminUiCapability, arrayItemFieldPath, asJsonObject, asString, buildSecretRef, classifySecretWrite, clearKnownSecrets, collectZodSecretPaths, createDeviceProxy, createEvent, createEventBusSliceSource, createSecretsAccess, describeCustomActions, deviceOpsCapability, emitReadiness, errMsg, expandCapMethods, forgetKnownSecret, formatSecretScope, globalSecretScope, isCollectionArrayMethodName, isDeviceScopedCap, isProviderOptionalMethodName, isSecretClear, isSecretFieldView, isSecretMarker, isSecretMarkerLike, isSecretRef, isZodSecret, knownSecretCount, makeSecretMarker, maskUrlCredentials, nodePin, normalizeAddonInitResult, normalizeSecretOwner, parseJsonUnknown, parseSecretRef, readNodePin, registerKnownSecret, resolveSecretViewsIn, scopeKey, scrubKnownSecrets, shortSecretRefHash, sleep, toSecretFieldView, viewerUiCapability, withCapInputDefaults };

package/dist/index.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-SgkKj2bk.js");
+const require_sleep = require("./sleep-BxOWTkUD.js");
 const require_event_category = require("./event-category-T43rdQWR.js");
 const require_composition = require("./composition-BLWAivB2.js");
 const require_node_color = require("./node-color.js");
@@ -78352,81 +78352,6 @@ function hfModelUrl(repo, path) {
 	return `https://huggingface.co/${repo}/resolve/main/${path}`;
 }
 //#endregion
-//#region src/utils/mask-url.ts
-/**
-* Names that, when used as URL query parameters, almost certainly carry
-* a secret. Matching is case-insensitive and anchored to the full param
-* name to avoid false positives like `user_id` (an entity reference, not
-* a credential) or `topic=password-reset` (a value happens to contain
-* the substring "password" but the param name is unrelated).
-*
-* Add new patterns here as we encounter cameras/APIs that leak through
-* the existing list.
-*/
-var CREDENTIAL_PARAM_PATTERNS = [
-	/^user$/i,
-	/^usr$/i,
-	/^username$/i,
-	/^password$/i,
-	/^pwd$/i,
-	/^pass$/i,
-	/^passwd$/i,
-	/^secret$/i,
-	/^token$/i,
-	/^auth$/i,
-	/^auth[_-]?token$/i,
-	/^bearer$/i,
-	/^api[_-]?key$/i,
-	/^access[_-]?token$/i,
-	/^refresh[_-]?token$/i,
-	/^bridge$/i,
-	/^code$/i,
-	/^state$/i,
-	/^challenge$/i,
-	/^link$/i
-];
-function isCredentialParam(name) {
-	return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
-}
-/**
-* Redact secrets we may surface in logs or telemetry:
-*   1. `userinfo` (`user:password@host`) — the classic RTSP shape.
-*   2. Query-string credential params (`?user=...&password=...`) — the
-*      Reolink RTMP shape and several HTTP-pushed-stream APIs.
-*
-* Returns the original string verbatim when the input is not a parseable
-* URL — a log helper must never throw. Param values are replaced with
-* `***` so an operator reading logs still sees WHICH credential was
-* present (useful for debugging "wrong password" issues) without
-* exposing the value.
-*
-* The credential-name match is case-insensitive but anchored to the
-* whole param name; values like `user_id=42` or `topic=password-reset`
-* are NOT masked (those are entity references, not credentials).
-*/
-function maskUrlCredentials(rawUrl) {
-	if (rawUrl.startsWith("/") && !rawUrl.startsWith("//")) {
-		const masked = maskUrlCredentials(`http://relative.invalid${rawUrl}`);
-		return masked.startsWith("http://relative.invalid") ? masked.slice(23) : rawUrl;
-	}
-	try {
-		const u = new URL(rawUrl);
-		let touched = false;
-		if (u.username || u.password) {
-			u.username = "";
-			u.password = "";
-			touched = true;
-		}
-		for (const key of Array.from(u.searchParams.keys())) if (isCredentialParam(key)) {
-			u.searchParams.set(key, "***");
-			touched = true;
-		}
-		return touched ? u.toString() : rawUrl;
-	} catch {
-		return rawUrl;
-	}
-}
-//#endregion
 //#region src/utils/pool-memory-watchdog.ts
 var MB = 1024 * 1024;
 var DEFAULT_POOL_MEMORY_POLICY = {
@@ -81512,7 +81437,7 @@ exports.makeSourceBrokerId = require_sleep.makeSourceBrokerId;
 exports.mapAudioLabelToMacro = mapAudioLabelToMacro;
 exports.markdownToHtmlLite = markdownToHtmlLite;
 exports.markdownToText = markdownToText;
-exports.maskUrlCredentials = maskUrlCredentials;
+exports.maskUrlCredentials = require_sleep.maskUrlCredentials;
 exports.matchDoAction = matchDoAction;
 exports.mayReadLocation = mayReadLocation;
 exports.mayWriteToLocation = mayWriteToLocation;

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { $ as BrokerStatsSchema, $t as normalizeSecretOwner, A as adminUiCapability, At as PEER_BYTES_MAX_OUTSTANDING, B as resolveCapMount, Bt as parseSecretStatePath, C as deviceOpsCapability, Cn as isKeychainStoredField, Ct as clearKnownSecrets, D as defineCustomActions, Dn as audioChunkBytesPerSample, Dt as scrubKnownSecrets, E as customAction, En as AUDIO_CHUNK_FORMATS, Et as registerKnownSecret, F as event, Ft as SHARE_VIEW_KINDS, G as toNodeId, Gt as resolveSecretMarkers, H as CAP_NODE_PIN_CONTEXT_KEY, Ht as secretTreeFromSchema, I as expandCapMethods, It as DisposerChain, J as emitDownForOwnedCaps, Jt as arrayItemFieldPath, K as ReadinessRegistry, Kt as transformSecretWrite, L as isDeviceConfigCap, Lt as BaseAddon, M as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Mt as PEER_BYTES_TICKET_TTL_MS, N as DEVICE_STATUS_METHOD, Nt as PeerBytesTicketSchema, O as describeCustomActions, On as expandAudioChunkToF32le, Ot as shortSecretRefHash, P as PROVIDER_PIN_FIELD, Pt as DATAPLANE_SECRET_HEADER, Q as AudioStreamPickSchema, Qt as isSecretRef, R as method, Rt as normalizeAddonInitResult, S as RawStateResultSchema, Sn as collectSecretConfigKeys, St as MIN_SCRUBBED_LENGTH, T as DEVICE_CHILDREN_BATCH_MAX, Tn as schemaDeclaresAnyField, Tt as knownSecretCount, U as nodePin, Ut as KeychainWriteRefusedError, V as systemMethod, Vt as secretTreeFromPaths, W as readNodePin, Wt as collectSecretMarkerRefs, X as scopeKey, Xt as formatSecretScope, Y as readinessKey, Yt as buildSecretRef, Z as AudioChunkFormatSchema, Zt as globalSecretScope, _ as createMirrorSource, _n as isSecretMarkerLike, _t as parseProfileBrokerId, a as asJsonObject, an as isEvent, at as CameraStreamSchema, b as collectZodSecretPaths, bn as REDACTED_SECRET, bt as REVALIDATE_AFTER_MS, c as parseJsonArray, cn as collectHydratedFieldEntries, ct as ProfileRtspEntrySchema, d as BOOT_RECOVERY_BACKOFF_MS, dn as resolveHydratedFieldValue, dt as StreamSourceEntrySchema, en as parseSecretRef, et as BrokerStatusSchema, f as DEVICE_SCOPED_CAPS, fn as SECRET_CLEAR, ft as StreamSourceSchema, g as createLazyTrpcSource, gn as isSecretMarker, gt as makeSourceBrokerId, h as createEventBusSliceSource, hn as isSecretFieldView, ht as makeProfileBrokerId, i as asJsonArray, in as emitReadiness, it as CamStreamResolutionSchema, j as DEFAULT_RUNTIME_STATE_DURABILITY, jt as PEER_BYTES_STALL_MS, k as deviceCustomAction, kn as isAudioChunkFormat, kt as PEER_BYTES_CHUNK_BYTES, l as parseJsonObject, ln as collectHydratedFieldValues, lt as ProfileSlotSchema, m as createDeviceProxy, mn as isSecretClear, mt as SubscribeAudioChunksResultSchema, n as sleepCancellable, nn as createDurableState, nt as CamProfileSchema, o as asNumber, on as WELL_KNOWN_TABS, ot as DecodedAudioChunkSchema, p as isDeviceScopedCap, pn as classifySecretWrite, pt as SubscribeAudioChunksInputSchema, q as ReadinessTimeoutError, qt as SECRET_REF_SCHEME, r as asBoolean, rn as createEvent, rt as CamStreamKindSchema, s as asString, sn as WELL_KNOWN_TAB_MAP, st as FrameHandleSchema, t as sleep, tn as normalizeNodeId, tt as CAM_PROFILE_ORDER, u as parseJsonUnknown, un as hydrateSchema, ut as ProfileSlotStatusSchema, v as createSliceHandle, vn as makeSecretMarker, vt as selectAssignedProfileSlots, w as viewerUiCapability, wn as isSecretConfigField, wt as forgetKnownSecret, x as isZodSecret, xn as collectKeychainStoredKeys, xt as createSecretsAccess, y as SECRET_META, yn as toSecretFieldView, yt as resolveSecretViewsIn, z as optionalMethod, zt as mergeSecretStatePaths } from "./sleep-Tkp9dHXv.mjs";
+import { $ as AudioStreamPickSchema, $t as isSecretRef, A as deviceCustomAction, An as isAudioChunkFormat, At as PEER_BYTES_CHUNK_BYTES, B as optionalMethod, Bt as mergeSecretStatePaths, C as RawStateResultSchema, Cn as collectSecretConfigKeys, Ct as MIN_SCRUBBED_LENGTH, D as customAction, Dn as AUDIO_CHUNK_FORMATS, Dt as registerKnownSecret, E as DEVICE_CHILDREN_BATCH_MAX, En as schemaDeclaresAnyField, Et as knownSecretCount, F as PROVIDER_PIN_FIELD, Ft as DATAPLANE_SECRET_HEADER, G as readNodePin, Gt as collectSecretMarkerRefs, H as systemMethod, Ht as secretTreeFromPaths, I as event, It as SHARE_VIEW_KINDS, J as ReadinessTimeoutError, Jt as SECRET_REF_SCHEME, K as toNodeId, Kt as resolveSecretMarkers, L as expandCapMethods, Lt as DisposerChain, M as DEFAULT_RUNTIME_STATE_DURABILITY, Mt as PEER_BYTES_STALL_MS, N as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Nt as PEER_BYTES_TICKET_TTL_MS, O as defineCustomActions, On as audioChunkBytesPerSample, Ot as scrubKnownSecrets, P as DEVICE_STATUS_METHOD, Pt as PeerBytesTicketSchema, Q as AudioChunkFormatSchema, Qt as globalSecretScope, R as isDeviceConfigCap, Rt as BaseAddon, S as isZodSecret, Sn as collectKeychainStoredKeys, St as createSecretsAccess, T as viewerUiCapability, Tn as isSecretConfigField, Tt as forgetKnownSecret, U as CAP_NODE_PIN_CONTEXT_KEY, Ut as secretTreeFromSchema, V as resolveCapMount, Vt as parseSecretStatePath, W as nodePin, Wt as KeychainWriteRefusedError, X as readinessKey, Xt as buildSecretRef, Y as emitDownForOwnedCaps, Yt as arrayItemFieldPath, Z as scopeKey, Zt as formatSecretScope, _ as createLazyTrpcSource, _n as isSecretMarker, _t as makeSourceBrokerId, a as asJsonArray, an as emitReadiness, at as CamStreamResolutionSchema, b as SECRET_META, bn as toSecretFieldView, bt as resolveSecretViewsIn, c as asString, cn as WELL_KNOWN_TAB_MAP, ct as FrameHandleSchema, d as parseJsonUnknown, dn as hydrateSchema, dt as ProfileSlotStatusSchema, en as normalizeSecretOwner, et as BrokerStatsSchema, f as BOOT_RECOVERY_BACKOFF_MS, fn as resolveHydratedFieldValue, ft as StreamSourceEntrySchema, g as createEventBusSliceSource, gn as isSecretFieldView, gt as makeProfileBrokerId, h as createDeviceProxy, hn as isSecretClear, ht as SubscribeAudioChunksResultSchema, i as asBoolean, in as createEvent, it as CamStreamKindSchema, j as adminUiCapability, jt as PEER_BYTES_MAX_OUTSTANDING, k as describeCustomActions, kn as expandAudioChunkToF32le, kt as shortSecretRefHash, l as parseJsonArray, ln as collectHydratedFieldEntries, lt as ProfileRtspEntrySchema, m as isDeviceScopedCap, mn as classifySecretWrite, mt as SubscribeAudioChunksInputSchema, n as sleepCancellable, nn as normalizeNodeId, nt as CAM_PROFILE_ORDER, o as asJsonObject, on as isEvent, ot as CameraStreamSchema, p as DEVICE_SCOPED_CAPS, pn as SECRET_CLEAR, pt as StreamSourceSchema, q as ReadinessRegistry, qt as transformSecretWrite, r as maskUrlCredentials, rn as createDurableState, rt as CamProfileSchema, s as asNumber, sn as WELL_KNOWN_TABS, st as DecodedAudioChunkSchema, t as sleep, tn as parseSecretRef, tt as BrokerStatusSchema, u as parseJsonObject, un as collectHydratedFieldValues, ut as ProfileSlotSchema, v as createMirrorSource, vn as isSecretMarkerLike, vt as parseProfileBrokerId, w as deviceOpsCapability, wn as isKeychainStoredField, wt as clearKnownSecrets, x as collectZodSecretPaths, xn as REDACTED_SECRET, xt as REVALIDATE_AFTER_MS, y as createSliceHandle, yn as makeSecretMarker, yt as selectAssignedProfileSlots, z as method, zt as normalizeAddonInitResult } from "./sleep-BjDbnx6-.mjs";
 import { i as publicEventCategories, n as OWNER_ONLY_EVENT_CATEGORIES, r as isOwnerOnlyEventCategory, t as EventCategory } from "./event-category-C4hVnRo8.mjs";
 import { $ as MAX_EXPRESSION_AST_NODES, A as compositionFeatureEnabled, At as Fmp4BoxSplitter, B as createStatefulExpressionMemory, Bt as pickVideoEncoder, C as CompositionTargetSchema, Ct as FFMPEG_PATH_ENV, D as MAX_COMPOSITION_ITEMS, E as MAX_COMPOSITION_FIELDS_PER_FEATURE, F as featureFieldEntries, Ft as buildInputArgs, G as createExpressionScope, H as evaluateStatefulExpressionCall, I as featureSources, It as buildVideoArgs, J as compileExpressionSafe, K as evaluateAst, L as fieldReads, Lt as invocationFromEncodeProfile, M as compositionReadKey, Mt as audioPlanFromEncodeProfile, N as compositionSliceKey, Nt as buildAudioArgs, O as composedDeviceRef, P as compositionSourceKey, Pt as buildFfmpegArgs, Q as EXPRESSION_IDENTIFIER_RE, R as EXPRESSION_INJECTED_NOW, Rt as isSoftwareDecode, S as CompositionSourceRefSchema, St as sliceChangedAt, T as MAX_COMPOSITION_FEATURES, U as toExpressionValue, V as evaluateExpressionSource, Vt as resolveStreamMaps, W as validateExpressionSource, X as tokenize, Y as parseExpression, Z as EXPRESSION_COMPILE_CACHE_CAPACITY, _ as CompositionItemEntrySchema, _t as SOURCE_DEVICE_TYPES, a as CUSTOMIZATION_BLOCK_NAME_PREFIX, at as EXPRESSION_BUILTINS, b as CompositionPassthroughFeatureSchema, bt as isSourceCap, c as CompositionCommandTargetSchema, ct as evaluateCount, d as CompositionFeatureSchema, dt as ExpressionEvalError, et as MAX_EXPRESSION_BINDINGS, f as CompositionFieldReadSchema, ft as ExpressionParseError, g as CompositionFromSourceSchema, gt as SOURCE_CAP_CHANGED_AT_FIELD, h as CompositionForwardCommandSchema, ht as SOURCE_CAP_ACTIVE_FIELD, i as COMPOSITION_ITEM_KEY_RE, it as RESERVED_BINDING_NAMES, j as compositionItemFieldPath, jt as AUDIO_PRESETS, k as composedDeviceStableId, kt as canonicalHash, l as CompositionExistingTargetSchema, lt as evaluateRose, m as CompositionFieldsFeatureSchema, mt as SOURCE_CAPS, n as COMPOSER_ADDON_ID, nt as MAX_EXPRESSION_EVAL_STEPS, o as CompositionBindingSchema, ot as EXPRESSION_BUILTIN_NAMES, p as CompositionFieldSourceSchema, pt as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, q as compileExpression, r as COMPOSITION_ITEM_ARRAY_PATH, rt as MAX_EXPRESSION_SOURCE_LENGTH, s as CompositionCodeSourceSchema, st as disarmRoseMemory, t as COMPOSED_DEVICE_STABLE_ID_PREFIX, tt as MAX_EXPRESSION_CALL_ARGS, u as CompositionExpressionSourceSchema, ut as isStatefulBuiltin, v as CompositionLiteralBindingSchema, vt as evaluateSensorEdge, w as MAX_COMPOSITION_CODE_LENGTH, x as CompositionSchema, xt as sliceActiveValue, y as CompositionNewTargetSchema, yt as evaluateSensorLevelEdge, z as cloneStatefulExpressionMemory, zt as logBannerArgs } from "./composition-Bzr7GwgP.mjs";
 import { NODE_COLOR_IDS, NodeColorIdSchema, assignNodeColorId } from "./node-color.mjs";
@@ -78351,81 +78351,6 @@ function hfModelUrl(repo, path) {
 	return `https://huggingface.co/${repo}/resolve/main/${path}`;
 }
 //#endregion
-//#region src/utils/mask-url.ts
-/**
-* Names that, when used as URL query parameters, almost certainly carry
-* a secret. Matching is case-insensitive and anchored to the full param
-* name to avoid false positives like `user_id` (an entity reference, not
-* a credential) or `topic=password-reset` (a value happens to contain
-* the substring "password" but the param name is unrelated).
-*
-* Add new patterns here as we encounter cameras/APIs that leak through
-* the existing list.
-*/
-var CREDENTIAL_PARAM_PATTERNS = [
-	/^user$/i,
-	/^usr$/i,
-	/^username$/i,
-	/^password$/i,
-	/^pwd$/i,
-	/^pass$/i,
-	/^passwd$/i,
-	/^secret$/i,
-	/^token$/i,
-	/^auth$/i,
-	/^auth[_-]?token$/i,
-	/^bearer$/i,
-	/^api[_-]?key$/i,
-	/^access[_-]?token$/i,
-	/^refresh[_-]?token$/i,
-	/^bridge$/i,
-	/^code$/i,
-	/^state$/i,
-	/^challenge$/i,
-	/^link$/i
-];
-function isCredentialParam(name) {
-	return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
-}
-/**
-* Redact secrets we may surface in logs or telemetry:
-*   1. `userinfo` (`user:password@host`) — the classic RTSP shape.
-*   2. Query-string credential params (`?user=...&password=...`) — the
-*      Reolink RTMP shape and several HTTP-pushed-stream APIs.
-*
-* Returns the original string verbatim when the input is not a parseable
-* URL — a log helper must never throw. Param values are replaced with
-* `***` so an operator reading logs still sees WHICH credential was
-* present (useful for debugging "wrong password" issues) without
-* exposing the value.
-*
-* The credential-name match is case-insensitive but anchored to the
-* whole param name; values like `user_id=42` or `topic=password-reset`
-* are NOT masked (those are entity references, not credentials).
-*/
-function maskUrlCredentials(rawUrl) {
-	if (rawUrl.startsWith("/") && !rawUrl.startsWith("//")) {
-		const masked = maskUrlCredentials(`http://relative.invalid${rawUrl}`);
-		return masked.startsWith("http://relative.invalid") ? masked.slice(23) : rawUrl;
-	}
-	try {
-		const u = new URL(rawUrl);
-		let touched = false;
-		if (u.username || u.password) {
-			u.username = "";
-			u.password = "";
-			touched = true;
-		}
-		for (const key of Array.from(u.searchParams.keys())) if (isCredentialParam(key)) {
-			u.searchParams.set(key, "***");
-			touched = true;
-		}
-		return touched ? u.toString() : rawUrl;
-	} catch {
-		return rawUrl;
-	}
-}
-//#endregion
 //#region src/utils/pool-memory-watchdog.ts
 var MB = 1024 * 1024;
 var DEFAULT_POOL_MEMORY_POLICY = {

package/dist/{sleep-Tkp9dHXv.mjs → sleep-BjDbnx6-.mjs}

@@ -5788,6 +5788,81 @@ function parseJsonArray(text) {
 	}
 }
 //#endregion
+//#region src/utils/mask-url.ts
+/**
+* Names that, when used as URL query parameters, almost certainly carry
+* a secret. Matching is case-insensitive and anchored to the full param
+* name to avoid false positives like `user_id` (an entity reference, not
+* a credential) or `topic=password-reset` (a value happens to contain
+* the substring "password" but the param name is unrelated).
+*
+* Add new patterns here as we encounter cameras/APIs that leak through
+* the existing list.
+*/
+var CREDENTIAL_PARAM_PATTERNS = [
+	/^user$/i,
+	/^usr$/i,
+	/^username$/i,
+	/^password$/i,
+	/^pwd$/i,
+	/^pass$/i,
+	/^passwd$/i,
+	/^secret$/i,
+	/^token$/i,
+	/^auth$/i,
+	/^auth[_-]?token$/i,
+	/^bearer$/i,
+	/^api[_-]?key$/i,
+	/^access[_-]?token$/i,
+	/^refresh[_-]?token$/i,
+	/^bridge$/i,
+	/^code$/i,
+	/^state$/i,
+	/^challenge$/i,
+	/^link$/i
+];
+function isCredentialParam(name) {
+	return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
+}
+/**
+* Redact secrets we may surface in logs or telemetry:
+*   1. `userinfo` (`user:password@host`) — the classic RTSP shape.
+*   2. Query-string credential params (`?user=...&password=...`) — the
+*      Reolink RTMP shape and several HTTP-pushed-stream APIs.
+*
+* Returns the original string verbatim when the input is not a parseable
+* URL — a log helper must never throw. Param values are replaced with
+* `***` so an operator reading logs still sees WHICH credential was
+* present (useful for debugging "wrong password" issues) without
+* exposing the value.
+*
+* The credential-name match is case-insensitive but anchored to the
+* whole param name; values like `user_id=42` or `topic=password-reset`
+* are NOT masked (those are entity references, not credentials).
+*/
+function maskUrlCredentials(rawUrl) {
+	if (rawUrl.startsWith("/") && !rawUrl.startsWith("//")) {
+		const masked = maskUrlCredentials(`http://relative.invalid${rawUrl}`);
+		return masked.startsWith("http://relative.invalid") ? masked.slice(23) : rawUrl;
+	}
+	try {
+		const u = new URL(rawUrl);
+		let touched = false;
+		if (u.username || u.password) {
+			u.username = "";
+			u.password = "";
+			touched = true;
+		}
+		for (const key of Array.from(u.searchParams.keys())) if (isCredentialParam(key)) {
+			u.searchParams.set(key, "***");
+			touched = true;
+		}
+		return touched ? u.toString() : rawUrl;
+	} catch {
+		return rawUrl;
+	}
+}
+//#endregion
 //#region src/utils/sleep.ts
 /**
 * Promise-based timer helpers — used everywhere the codebase needs to
@@ -5841,4 +5916,4 @@ function sleepCancellable(ms, signal) {
 	});
 }
 //#endregion
-export { BrokerStatsSchema as $, normalizeSecretOwner as $t, adminUiCapability as A, PEER_BYTES_MAX_OUTSTANDING as At, resolveCapMount as B, parseSecretStatePath as Bt, deviceOpsCapability as C, isKeychainStoredField as Cn, clearKnownSecrets as Ct, defineCustomActions as D, audioChunkBytesPerSample as Dn, scrubKnownSecrets as Dt, customAction as E, AUDIO_CHUNK_FORMATS as En, registerKnownSecret as Et, event as F, SHARE_VIEW_KINDS as Ft, toNodeId as G, resolveSecretMarkers as Gt, CAP_NODE_PIN_CONTEXT_KEY as H, secretTreeFromSchema as Ht, expandCapMethods as I, DisposerChain as It, emitDownForOwnedCaps as J, arrayItemFieldPath as Jt, ReadinessRegistry as K, transformSecretWrite as Kt, isDeviceConfigCap as L, BaseAddon as Lt, DEVICE_SETTINGS_CONTRIBUTION_METHODS as M, PEER_BYTES_TICKET_TTL_MS as Mt, DEVICE_STATUS_METHOD as N, PeerBytesTicketSchema as Nt, describeCustomActions as O, expandAudioChunkToF32le as On, shortSecretRefHash as Ot, PROVIDER_PIN_FIELD as P, DATAPLANE_SECRET_HEADER as Pt, AudioStreamPickSchema as Q, isSecretRef as Qt, method as R, normalizeAddonInitResult as Rt, RawStateResultSchema as S, collectSecretConfigKeys as Sn, MIN_SCRUBBED_LENGTH as St, DEVICE_CHILDREN_BATCH_MAX as T, schemaDeclaresAnyField as Tn, knownSecretCount as Tt, nodePin as U, KeychainWriteRefusedError as Ut, systemMethod as V, secretTreeFromPaths as Vt, readNodePin as W, collectSecretMarkerRefs as Wt, scopeKey as X, formatSecretScope as Xt, readinessKey as Y, buildSecretRef as Yt, AudioChunkFormatSchema as Z, globalSecretScope as Zt, createMirrorSource as _, isSecretMarkerLike as _n, parseProfileBrokerId as _t, asJsonObject as a, isEvent as an, CameraStreamSchema as at, collectZodSecretPaths as b, REDACTED_SECRET as bn, REVALIDATE_AFTER_MS as bt, parseJsonArray as c, collectHydratedFieldEntries as cn, ProfileRtspEntrySchema as ct, BOOT_RECOVERY_BACKOFF_MS as d, resolveHydratedFieldValue as dn, StreamSourceEntrySchema$1 as dt, parseSecretRef as en, BrokerStatusSchema as et, DEVICE_SCOPED_CAPS as f, SECRET_CLEAR as fn, StreamSourceSchema as ft, createLazyTrpcSource as g, isSecretMarker as gn, makeSourceBrokerId as gt, createEventBusSliceSource as h, isSecretFieldView as hn, makeProfileBrokerId as ht, asJsonArray as i, emitReadiness as in, CamStreamResolutionSchema as it, DEFAULT_RUNTIME_STATE_DURABILITY as j, PEER_BYTES_STALL_MS as jt, deviceCustomAction as k, isAudioChunkFormat as kn, PEER_BYTES_CHUNK_BYTES as kt, parseJsonObject as l, collectHydratedFieldValues as ln, ProfileSlotSchema as lt, createDeviceProxy as m, isSecretClear as mn, SubscribeAudioChunksResultSchema as mt, sleepCancellable as n, createDurableState as nn, CamProfileSchema as nt, asNumber as o, WELL_KNOWN_TABS as on, DecodedAudioChunkSchema as ot, isDeviceScopedCap as p, classifySecretWrite as pn, SubscribeAudioChunksInputSchema as pt, ReadinessTimeoutError as q, SECRET_REF_SCHEME as qt, asBoolean as r, createEvent as rn, CamStreamKindSchema as rt, asString as s, WELL_KNOWN_TAB_MAP as sn, FrameHandleSchema as st, sleep as t, normalizeNodeId as tn, CAM_PROFILE_ORDER as tt, parseJsonUnknown as u, hydrateSchema as un, ProfileSlotStatusSchema as ut, createSliceHandle as v, makeSecretMarker as vn, selectAssignedProfileSlots as vt, viewerUiCapability as w, isSecretConfigField as wn, forgetKnownSecret as wt, isZodSecret as x, collectKeychainStoredKeys as xn, createSecretsAccess as xt, SECRET_META as y, toSecretFieldView as yn, resolveSecretViewsIn as yt, optionalMethod as z, mergeSecretStatePaths as zt };
+export { AudioStreamPickSchema as $, isSecretRef as $t, deviceCustomAction as A, isAudioChunkFormat as An, PEER_BYTES_CHUNK_BYTES as At, optionalMethod as B, mergeSecretStatePaths as Bt, RawStateResultSchema as C, collectSecretConfigKeys as Cn, MIN_SCRUBBED_LENGTH as Ct, customAction as D, AUDIO_CHUNK_FORMATS as Dn, registerKnownSecret as Dt, DEVICE_CHILDREN_BATCH_MAX as E, schemaDeclaresAnyField as En, knownSecretCount as Et, PROVIDER_PIN_FIELD as F, DATAPLANE_SECRET_HEADER as Ft, readNodePin as G, collectSecretMarkerRefs as Gt, systemMethod as H, secretTreeFromPaths as Ht, event as I, SHARE_VIEW_KINDS as It, ReadinessTimeoutError as J, SECRET_REF_SCHEME as Jt, toNodeId as K, resolveSecretMarkers as Kt, expandCapMethods as L, DisposerChain as Lt, DEFAULT_RUNTIME_STATE_DURABILITY as M, PEER_BYTES_STALL_MS as Mt, DEVICE_SETTINGS_CONTRIBUTION_METHODS as N, PEER_BYTES_TICKET_TTL_MS as Nt, defineCustomActions as O, audioChunkBytesPerSample as On, scrubKnownSecrets as Ot, DEVICE_STATUS_METHOD as P, PeerBytesTicketSchema as Pt, AudioChunkFormatSchema as Q, globalSecretScope as Qt, isDeviceConfigCap as R, BaseAddon as Rt, isZodSecret as S, collectKeychainStoredKeys as Sn, createSecretsAccess as St, viewerUiCapability as T, isSecretConfigField as Tn, forgetKnownSecret as Tt, CAP_NODE_PIN_CONTEXT_KEY as U, secretTreeFromSchema as Ut, resolveCapMount as V, parseSecretStatePath as Vt, nodePin as W, KeychainWriteRefusedError as Wt, readinessKey as X, buildSecretRef as Xt, emitDownForOwnedCaps as Y, arrayItemFieldPath as Yt, scopeKey as Z, formatSecretScope as Zt, createLazyTrpcSource as _, isSecretMarker as _n, makeSourceBrokerId as _t, asJsonArray as a, emitReadiness as an, CamStreamResolutionSchema as at, SECRET_META as b, toSecretFieldView as bn, resolveSecretViewsIn as bt, asString as c, WELL_KNOWN_TAB_MAP as cn, FrameHandleSchema as ct, parseJsonUnknown as d, hydrateSchema as dn, ProfileSlotStatusSchema as dt, normalizeSecretOwner as en, BrokerStatsSchema as et, BOOT_RECOVERY_BACKOFF_MS as f, resolveHydratedFieldValue as fn, StreamSourceEntrySchema$1 as ft, createEventBusSliceSource as g, isSecretFieldView as gn, makeProfileBrokerId as gt, createDeviceProxy as h, isSecretClear as hn, SubscribeAudioChunksResultSchema as ht, asBoolean as i, createEvent as in, CamStreamKindSchema as it, adminUiCapability as j, PEER_BYTES_MAX_OUTSTANDING as jt, describeCustomActions as k, expandAudioChunkToF32le as kn, shortSecretRefHash as kt, parseJsonArray as l, collectHydratedFieldEntries as ln, ProfileRtspEntrySchema as lt, isDeviceScopedCap as m, classifySecretWrite as mn, SubscribeAudioChunksInputSchema as mt, sleepCancellable as n, normalizeNodeId as nn, CAM_PROFILE_ORDER as nt, asJsonObject as o, isEvent as on, CameraStreamSchema as ot, DEVICE_SCOPED_CAPS as p, SECRET_CLEAR as pn, StreamSourceSchema as pt, ReadinessRegistry as q, transformSecretWrite as qt, maskUrlCredentials as r, createDurableState as rn, CamProfileSchema as rt, asNumber as s, WELL_KNOWN_TABS as sn, DecodedAudioChunkSchema as st, sleep as t, parseSecretRef as tn, BrokerStatusSchema as tt, parseJsonObject as u, collectHydratedFieldValues as un, ProfileSlotSchema as ut, createMirrorSource as v, isSecretMarkerLike as vn, parseProfileBrokerId as vt, deviceOpsCapability as w, isKeychainStoredField as wn, clearKnownSecrets as wt, collectZodSecretPaths as x, REDACTED_SECRET as xn, REVALIDATE_AFTER_MS as xt, createSliceHandle as y, makeSecretMarker as yn, selectAssignedProfileSlots as yt, method as z, normalizeAddonInitResult as zt };

package/dist/{sleep-SgkKj2bk.js → sleep-BxOWTkUD.js}

@@ -5788,6 +5788,81 @@ function parseJsonArray(text) {
 	}
 }
 //#endregion
+//#region src/utils/mask-url.ts
+/**
+* Names that, when used as URL query parameters, almost certainly carry
+* a secret. Matching is case-insensitive and anchored to the full param
+* name to avoid false positives like `user_id` (an entity reference, not
+* a credential) or `topic=password-reset` (a value happens to contain
+* the substring "password" but the param name is unrelated).
+*
+* Add new patterns here as we encounter cameras/APIs that leak through
+* the existing list.
+*/
+var CREDENTIAL_PARAM_PATTERNS = [
+	/^user$/i,
+	/^usr$/i,
+	/^username$/i,
+	/^password$/i,
+	/^pwd$/i,
+	/^pass$/i,
+	/^passwd$/i,
+	/^secret$/i,
+	/^token$/i,
+	/^auth$/i,
+	/^auth[_-]?token$/i,
+	/^bearer$/i,
+	/^api[_-]?key$/i,
+	/^access[_-]?token$/i,
+	/^refresh[_-]?token$/i,
+	/^bridge$/i,
+	/^code$/i,
+	/^state$/i,
+	/^challenge$/i,
+	/^link$/i
+];
+function isCredentialParam(name) {
+	return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
+}
+/**
+* Redact secrets we may surface in logs or telemetry:
+*   1. `userinfo` (`user:password@host`) — the classic RTSP shape.
+*   2. Query-string credential params (`?user=...&password=...`) — the
+*      Reolink RTMP shape and several HTTP-pushed-stream APIs.
+*
+* Returns the original string verbatim when the input is not a parseable
+* URL — a log helper must never throw. Param values are replaced with
+* `***` so an operator reading logs still sees WHICH credential was
+* present (useful for debugging "wrong password" issues) without
+* exposing the value.
+*
+* The credential-name match is case-insensitive but anchored to the
+* whole param name; values like `user_id=42` or `topic=password-reset`
+* are NOT masked (those are entity references, not credentials).
+*/
+function maskUrlCredentials(rawUrl) {
+	if (rawUrl.startsWith("/") && !rawUrl.startsWith("//")) {
+		const masked = maskUrlCredentials(`http://relative.invalid${rawUrl}`);
+		return masked.startsWith("http://relative.invalid") ? masked.slice(23) : rawUrl;
+	}
+	try {
+		const u = new URL(rawUrl);
+		let touched = false;
+		if (u.username || u.password) {
+			u.username = "";
+			u.password = "";
+			touched = true;
+		}
+		for (const key of Array.from(u.searchParams.keys())) if (isCredentialParam(key)) {
+			u.searchParams.set(key, "***");
+			touched = true;
+		}
+		return touched ? u.toString() : rawUrl;
+	} catch {
+		return rawUrl;
+	}
+}
+//#endregion
 //#region src/utils/sleep.ts
 /**
 * Promise-based timer helpers — used everywhere the codebase needs to
@@ -6459,6 +6534,12 @@ Object.defineProperty(exports, "makeSourceBrokerId", {
 		return makeSourceBrokerId;
 	}
 });
+Object.defineProperty(exports, "maskUrlCredentials", {
+	enumerable: true,
+	get: function() {
+		return maskUrlCredentials;
+	}
+});
 Object.defineProperty(exports, "mergeSecretStatePaths", {
 	enumerable: true,
 	get: function() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/types",
-  "version": "1.2.354",
+  "version": "1.2.355",
   "description": "Shared types, interfaces, and model catalogs for the CamStack detection ecosystem",
   "keywords": [
     "camstack",