@camstack/types 1.2.354 → 1.2.356

package/dist/{composition-Bzr7GwgP.mjs → composition-C-WpVYTX.mjs}

@@ -812,6 +812,28 @@ var FFMPEG_ARTIFACTS = {
 		sha256: "021cd321ea169722cd2e4aca35884305449666a0d231d3378af7f87d6a5626e5",
 		sizeBytes: 37852180,
 		expectedHwaccels: ["videotoolbox"]
+	},
+	/**
+	* Windows x64 — the same jellyfin-ffmpeg release, GPL, from the project's
+	* own `win64-clang-gpl` leg (a flat zip: `ffmpeg.exe` + `ffprobe.exe`,
+	* statically linked, so nothing to install beside it). Hashed 2026-10-13.
+	*
+	* NOT executed: it was verified by reading the build's own configuration
+	* string out of the binary (`--enable-gpl --enable-version3 --enable-dxva2
+	* --enable-d3d11va --enable-d3d12va --enable-amf --enable-libvpl
+	* --enable-nvenc --enable-vulkan --enable-opencl`), which is the same
+	* codec/feature set as the linux build plus the Windows hwaccel API family.
+	* `expectedHwaccels` claims only what that string guarantees; the first real
+	* Windows node confirms it or trips the assertion, which is what it is for.
+	* AMF/NVENC/QSV are encoders and vendor runtimes (they need the GPU driver),
+	* so they are not claimed here.
+	*/
+	"win32-x64": {
+		url: `${BASE}/jellyfin-ffmpeg_${FFMPEG_RELEASE}_portable_win64-clang-gpl.zip`,
+		archiveFormat: "zip",
+		sha256: "4bb79f3d1e4092404eafe3fb3b0101e196f8eb00355201f60314e5ba21447b82",
+		sizeBytes: 67819203,
+		expectedHwaccels: ["d3d11va", "dxva2"]
 	}
 };
 /** The artifact for this node, or a refusal naming what was asked for. */

package/dist/{composition-BLWAivB2.js → composition-DCYnv4I6.js}

@@ -812,6 +812,28 @@ var FFMPEG_ARTIFACTS = {
 		sha256: "021cd321ea169722cd2e4aca35884305449666a0d231d3378af7f87d6a5626e5",
 		sizeBytes: 37852180,
 		expectedHwaccels: ["videotoolbox"]
+	},
+	/**
+	* Windows x64 — the same jellyfin-ffmpeg release, GPL, from the project's
+	* own `win64-clang-gpl` leg (a flat zip: `ffmpeg.exe` + `ffprobe.exe`,
+	* statically linked, so nothing to install beside it). Hashed 2026-10-13.
+	*
+	* NOT executed: it was verified by reading the build's own configuration
+	* string out of the binary (`--enable-gpl --enable-version3 --enable-dxva2
+	* --enable-d3d11va --enable-d3d12va --enable-amf --enable-libvpl
+	* --enable-nvenc --enable-vulkan --enable-opencl`), which is the same
+	* codec/feature set as the linux build plus the Windows hwaccel API family.
+	* `expectedHwaccels` claims only what that string guarantees; the first real
+	* Windows node confirms it or trips the assertion, which is what it is for.
+	* AMF/NVENC/QSV are encoders and vendor runtimes (they need the GPU driver),
+	* so they are not claimed here.
+	*/
+	"win32-x64": {
+		url: `${BASE}/jellyfin-ffmpeg_${FFMPEG_RELEASE}_portable_win64-clang-gpl.zip`,
+		archiveFormat: "zip",
+		sha256: "4bb79f3d1e4092404eafe3fb3b0101e196f8eb00355201f60314e5ba21447b82",
+		sizeBytes: 67819203,
+		expectedHwaccels: ["d3d11va", "dxva2"]
 	}
 };
 /** The artifact for this node, or a refusal naming what was asked for. */

package/dist/deps/archive-extract.d.ts

@@ -0,0 +1,11 @@
+export type ArchiveFormat = 'zip' | 'tar.gz' | 'tar.xz';
+export type ExecFile = (file: string, args: readonly string[]) => unknown;
+export interface ExtractDeps {
+    readonly platform: NodeJS.Platform;
+    readonly systemRoot: string | undefined;
+    readonly exec: ExecFile;
+    readonly extractZip: (archivePath: string, destDir: string) => void;
+}
+/** The tar to run: Windows' own bsdtar by absolute path, `tar` elsewhere. */
+export declare function tarExecutable(platform: NodeJS.Platform, systemRoot: string | undefined): string;
+export declare function extractArchive(archivePath: string, format: ArchiveFormat, destDir: string, overrides?: Partial<ExtractDeps>): void;

package/dist/deps/binary-downloader.d.ts

@@ -37,6 +37,15 @@ export interface DownloadOptions {
      */
     readonly sha256?: string;
 }
+/**
+ * Refuse an artifact that is not the one we pinned, and leave nothing behind.
+ *
+ * The failure is deliberately loud and terminal rather than a warning: a
+ * mismatch means the bytes are not what was verified, and "not what was
+ * verified" is the only state in which running this binary is worse than not
+ * having it. The partial file is removed so a retry cannot pick it up.
+ */
+export declare function verifySha256(file: string, expected: string | undefined, name: string, url: string): void;
 /**
  * Download a binary to the target directory.
  * Handles archives (zip, tar.gz, tar.xz) and raw binaries.

package/dist/deps/python-downloader.d.ts

@@ -1,6 +1,10 @@
 import type { IScopedLogger } from '../interfaces/logging.js';
 export declare const PYTHON_VERSION = "3.12.12";
 export declare function getPythonDownloadUrl(platform: string, arch: string): string;
+/** The SHA-256 the archive for this platform/arch must have. */
+export declare function getPythonSha256(platform: string, arch: string): string;
+/** The interpreter's path relative to the install root. */
+export declare function pythonInterpreterSegments(platform: string): readonly string[];
 /**
  * Ensure the embedded portable Python is available.
  *

package/dist/deps/zip-extract.d.ts

@@ -0,0 +1 @@
+export declare function extractZipArchive(archivePath: string, destDir: string): void;

package/dist/generated/addon-api.d.ts

@@ -11847,6 +11847,17 @@ export type AppRouter = TrpcCoreRouter<{
             };
             meta: object;
         }>;
+        extendShareToken: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
+            input: {
+                id: string;
+                ttlSec: number;
+            };
+            output: {
+                id: string;
+                expiresAt: number;
+            };
+            meta: object;
+        }>;
         revokeShareToken: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
             input: {
                 id: string;
@@ -12491,6 +12502,17 @@ export type AppRouter = TrpcCoreRouter<{
             };
             meta: object;
         }>;
+        extendShareToken: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
+            input: {
+                id: string;
+                ttlSec: number;
+            };
+            output: {
+                id: string;
+                expiresAt: number;
+            };
+            meta: object;
+        }>;
         revokeShareToken: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
             input: {
                 id: string;

package/dist/generated/addon-cap-facts.d.ts

@@ -0,0 +1,20 @@
+/**
+ * AUTO-GENERATED by scripts/generate-addon-cap-facts.ts — DO NOT EDIT.
+ *
+ * Schema-free capability facts for addon server code, so an addon never imports
+ * `ALL_CAPABILITY_DEFINITIONS` (the whole Zod schema graph, ~+100 MB heap per
+ * runner). See docs/decisions/adr-0028.md.
+ *
+ * Coverage: 1 advance-derived caps, 71 caps with 340 state leaves.
+ */
+/** A bindable scalar in a capability's runtime state. */
+export interface CapStateLeaf {
+    /** Dot path inside the cap's state slice. */
+    readonly path: string;
+    readonly valueType: 'number' | 'boolean' | 'string' | 'enum';
+    readonly enumValues?: readonly string[];
+}
+/** cap name -> the numeric state field whose strict advance IS the cap's one-shot event. */
+export declare const CAP_ADVANCE_FIELDS: Readonly<Record<string, string>>;
+/** cap name -> the bindable leaves of its runtime state (absent: none). */
+export declare const CAP_STATE_LEAVES: Readonly<Record<string, readonly CapStateLeaf[]>>;

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-SgkKj2bk.js");
+const require_sleep = require("./sleep-BFVY4_xY.js");
 const require_event_category = require("./event-category-T43rdQWR.js");
-const require_composition = require("./composition-BLWAivB2.js");
+const require_composition = require("./composition-DCYnv4I6.js");
 const require_node_color = require("./node-color.js");
 const require_err_msg = require("./err-msg-Dx2Kor0g.js");
 const require_enums = require("./enums.js");
@@ -5852,14 +5852,6 @@ function describeRootSupplies(supplies) {
 }
 //#endregion
 //#region src/types/models.ts
-var MODEL_FORMATS = [
-	"onnx",
-	"coreml",
-	"openvino",
-	"tflite",
-	"pt",
-	"gguf"
-];
 /**
 * Multi-file format payload.
 *
@@ -6296,7 +6288,7 @@ var ModelConvertMetadataSchema = zod.z.object({
 	classMap: DetectionCatalogClassMapSchema.optional()
 });
 var ConvertArtifactSchema = zod.z.object({
-	format: zod.z.enum(MODEL_FORMATS),
+	format: zod.z.enum(require_sleep.MODEL_FORMATS),
 	precision: zod.z.enum(["fp16", "int8"]).optional(),
 	sizeMB: zod.z.number(),
 	validated: zod.z.boolean(),
@@ -12306,7 +12298,7 @@ var ImportModelBundleResultSchema = zod.z.discriminatedUnion("kind", [zod.z.obje
 	distributed: zod.z.array(zod.z.object({
 		modelId: zod.z.string(),
 		nodeId: zod.z.string(),
-		format: zod.z.enum(MODEL_FORMATS),
+		format: zod.z.enum(require_sleep.MODEL_FORMATS),
 		ok: zod.z.boolean(),
 		error: zod.z.string().optional()
 	})).readonly()
@@ -18860,7 +18852,7 @@ var modelConvertCapability = {
 var ModelDistributeInputSchema = zod.z.object({
 	targetNodeId: zod.z.string(),
 	modelId: zod.z.string(),
-	format: zod.z.enum(MODEL_FORMATS),
+	format: zod.z.enum(require_sleep.MODEL_FORMATS),
 	entry: ModelCatalogEntrySchema
 });
 var ModelDistributeResultSchema = zod.z.object({
@@ -28530,7 +28522,7 @@ var pipelineExecutorCapability = {
 * (`recommend.ts`) are the TS face of the same data; these
 * schemas are what crosses the cap boundary.
 */
-var ModelFormatSchema$1 = zod.z.enum(MODEL_FORMATS);
+var ModelFormatSchema$1 = zod.z.enum(require_sleep.MODEL_FORMATS);
 /** Default least number of parallel sessions per device Auto tune keeps (D755). */
 var DEFAULT_MIN_SESSIONS_PER_DEVICE = 2;
 /** The operator's range for it. */
@@ -31310,7 +31302,7 @@ var NodeInferenceDeviceSchema = zod.z.object({
 	key: zod.z.string(),
 	backend: zod.z.string(),
 	device: zod.z.string(),
-	format: zod.z.enum(MODEL_FORMATS),
+	format: zod.z.enum(require_sleep.MODEL_FORMATS),
 	/** Whether the node's live probe reports the device as usable right now. */
 	available: zod.z.boolean(),
 	/**
@@ -43665,7 +43657,7 @@ includeCrops: zod.z.boolean().optional() }).optional(), zod.z.array(VehicleSchem
 };
 //#endregion
 //#region src/capabilities/platform-probe.cap.ts
-var ModelFormatSchema = zod.z.enum(MODEL_FORMATS);
+var ModelFormatSchema = zod.z.enum(require_sleep.MODEL_FORMATS);
 var HwAccelBackendInputSchema = zod.z.enum([
 	"videotoolbox",
 	"cuda",
@@ -51830,65 +51822,6 @@ function stateVocabularyFor(runtimeState, alarmStates = []) {
 	return [];
 }
 //#endregion
-//#region src/constants.ts
-var HF_REPO = "camstack/camstack-models";
-var HF_BASE_URL = `https://huggingface.co/${HF_REPO}/resolve/main`;
-/**
-* The ONE default session-JWT lifetime.
-*
-* There used to be three, and they disagreed: the `system-config` schema said
-* `30d`, `RUNTIME_DEFAULTS['auth.tokenExpiry']` said `7d`, and
-* `AuthManager.signToken` hardcoded `30d` as its own fallback. Because the
-* production signer (`AuthService extends AuthManager`, wired to
-* `ConfigManager`) resolves through `RUNTIME_DEFAULTS` BEFORE it can ever
-* reach the hardcoded fallback, the value actually in force was `7d` while
-* every surface an operator could read advertised `30d`.
-*
-* `30d` is the value the product documents and the one an operator decided on
-* (2026-07-17: the viewer's silent refresh rotates tokens long before expiry,
-* so a long lifetime only covers devices left unopened for weeks). It is
-* declared here once and imported by the schema, by the runtime defaults and
-* by the signer's fallback — a second default that disagrees with the first is
-* the same defect in miniature.
-*/
-var DEFAULT_TOKEN_EXPIRY = "30d";
-/**
-* Runtime defaults -- used by ConfigManager.get() for backward compatibility
-* until Plan B wires all runtime settings to the system_settings SQL table.
-*
-* Moved from @camstack/system/config-schema to @camstack/types so that
-* @camstack/system can reference it without a cross-package kernel import.
-*/
-var RUNTIME_DEFAULTS = {
-	"features.streaming": true,
-	"features.notifications": true,
-	"features.objectDetection": false,
-	"features.remoteAccess": true,
-	"features.agentCluster": false,
-	"features.smartHome": true,
-	"features.recordings": true,
-	"features.backup": true,
-	"features.repl": true,
-	"retention.detectionEventsDays": 30,
-	"retention.audioLevelsDays": 7,
-	"logging.level": "info",
-	"logging.retentionDays": 30,
-	"eventBus.ringBufferSize": 1e4,
-	"storage.provider": "sqlite-storage",
-	"storage.locations": {
-		data: "camstack-data/data",
-		media: "camstack-data/media",
-		recordings: "camstack-data/recordings",
-		cache: "/tmp/camstack-cache",
-		logs: "camstack-data/logs",
-		models: "camstack-data/models"
-	},
-	providers: [],
-	"ffmpeg.hwAccel": "auto",
-	"ffmpeg.threadCount": 0,
-	"auth.tokenExpiry": "30d"
-};
-//#endregion
 //#region src/device/accessory.ts
 /**
 * Accessory device helpers — shared across drivers.
@@ -78347,86 +78280,6 @@ function setNestedValue(obj, path, value) {
 	current[parts[parts.length - 1]] = value;
 }
 //#endregion
-//#region src/utils/hf-url.ts
-function hfModelUrl(repo, path) {
-	return `https://huggingface.co/${repo}/resolve/main/${path}`;
-}
-//#endregion
-//#region src/utils/mask-url.ts
-/**
-* Names that, when used as URL query parameters, almost certainly carry
-* a secret. Matching is case-insensitive and anchored to the full param
-* name to avoid false positives like `user_id` (an entity reference, not
-* a credential) or `topic=password-reset` (a value happens to contain
-* the substring "password" but the param name is unrelated).
-*
-* Add new patterns here as we encounter cameras/APIs that leak through
-* the existing list.
-*/
-var CREDENTIAL_PARAM_PATTERNS = [
-	/^user$/i,
-	/^usr$/i,
-	/^username$/i,
-	/^password$/i,
-	/^pwd$/i,
-	/^pass$/i,
-	/^passwd$/i,
-	/^secret$/i,
-	/^token$/i,
-	/^auth$/i,
-	/^auth[_-]?token$/i,
-	/^bearer$/i,
-	/^api[_-]?key$/i,
-	/^access[_-]?token$/i,
-	/^refresh[_-]?token$/i,
-	/^bridge$/i,
-	/^code$/i,
-	/^state$/i,
-	/^challenge$/i,
-	/^link$/i
-];
-function isCredentialParam(name) {
-	return CREDENTIAL_PARAM_PATTERNS.some((re) => re.test(name));
-}
-/**
-* Redact secrets we may surface in logs or telemetry:
-*   1. `userinfo` (`user:password@host`) — the classic RTSP shape.
-*   2. Query-string credential params (`?user=...&password=...`) — the
-*      Reolink RTMP shape and several HTTP-pushed-stream APIs.
-*
-* Returns the original string verbatim when the input is not a parseable
-* URL — a log helper must never throw. Param values are replaced with
-* `***` so an operator reading logs still sees WHICH credential was
-* present (useful for debugging "wrong password" issues) without
-* exposing the value.
-*
-* The credential-name match is case-insensitive but anchored to the
-* whole param name; values like `user_id=42` or `topic=password-reset`
-* are NOT masked (those are entity references, not credentials).
-*/
-function maskUrlCredentials(rawUrl) {
-	if (rawUrl.startsWith("/") && !rawUrl.startsWith("//")) {
-		const masked = maskUrlCredentials(`http://relative.invalid${rawUrl}`);
-		return masked.startsWith("http://relative.invalid") ? masked.slice(23) : rawUrl;
-	}
-	try {
-		const u = new URL(rawUrl);
-		let touched = false;
-		if (u.username || u.password) {
-			u.username = "";
-			u.password = "";
-			touched = true;
-		}
-		for (const key of Array.from(u.searchParams.keys())) if (isCredentialParam(key)) {
-			u.searchParams.set(key, "***");
-			touched = true;
-		}
-		return touched ? u.toString() : rawUrl;
-	} catch {
-		return rawUrl;
-	}
-}
-//#endregion
 //#region src/utils/pool-memory-watchdog.ts
 var MB = 1024 * 1024;
 var DEFAULT_POOL_MEMORY_POLICY = {
@@ -79136,7 +78989,7 @@ var RUNTIMES = [
 				value: "cuda",
 				label: "CUDA"
 			});
-			if (hw.gpu?.type === "amd") out.push({
+			if (hw.gpu?.type === "amd" && hw.platform === "linux") out.push({
 				value: "webgpu",
 				label: "WebGPU (AMD iGPU)"
 			});
@@ -79273,7 +79126,7 @@ function scoreRuntimes(hw) {
 		});
 	}
 	if (hw.gpu?.type === "amd") {
-		scores.push({
+		if (hw.platform === "linux") scores.push({
 			runtime: "python",
 			backend: "onnx",
 			format: "onnx",
@@ -79770,7 +79623,7 @@ exports.DEFAULT_RUNTIME_STATE_DURABILITY = require_sleep.DEFAULT_RUNTIME_STATE_D
 exports.DEFAULT_SESSION_PLACEMENT_POLICY = DEFAULT_SESSION_PLACEMENT_POLICY;
 exports.DEFAULT_SHARE_SOURCE = DEFAULT_SHARE_SOURCE;
 exports.DEFAULT_TIMELAPSE_PREVIEW_TEXT = DEFAULT_TIMELAPSE_PREVIEW_TEXT;
-exports.DEFAULT_TOKEN_EXPIRY = DEFAULT_TOKEN_EXPIRY;
+exports.DEFAULT_TOKEN_EXPIRY = require_sleep.DEFAULT_TOKEN_EXPIRY;
 exports.DERIVED_CAMERA_SILENCED_CAP_NAMES = DERIVED_CAMERA_SILENCED_CAP_NAMES;
 exports.DETAIL_CROP_PADDING_FIELD = DETAIL_CROP_PADDING_FIELD;
 exports.DETAIL_CROP_PADDING_KEY = DETAIL_CROP_PADDING_KEY;
@@ -79977,8 +79830,8 @@ exports.HAP_AUDIO_BASE = HAP_AUDIO_BASE;
 exports.HAP_AUDIO_BITRATE_KBPS = HAP_AUDIO_BITRATE_KBPS;
 exports.HAP_AUDIO_VBV_KBITS = HAP_AUDIO_VBV_KBITS;
 exports.HAP_KEYFRAME_INTERVAL_SEC = HAP_KEYFRAME_INTERVAL_SEC;
-exports.HF_BASE_URL = HF_BASE_URL;
-exports.HF_REPO = HF_REPO;
+exports.HF_BASE_URL = require_sleep.HF_BASE_URL;
+exports.HF_REPO = require_sleep.HF_REPO;
 exports.HOURS_PER_DAY = HOURS_PER_DAY;
 exports.HUB_ADDRESS_ROLES = HUB_ADDRESS_ROLES;
 exports.HUB_MDNS_QUERY_NAME = HUB_MDNS_QUERY_NAME;
@@ -80154,7 +80007,7 @@ exports.METHOD_DEVICE_SELECTORS = METHOD_DEVICE_SELECTORS;
 exports.MINUTES_PER_DAY = MINUTES_PER_DAY;
 exports.MIN_SCRUBBED_LENGTH = require_sleep.MIN_SCRUBBED_LENGTH;
 exports.MIN_SESSIONS_PER_DEVICE_RANGE = MIN_SESSIONS_PER_DEVICE_RANGE;
-exports.MODEL_FORMATS = MODEL_FORMATS;
+exports.MODEL_FORMATS = require_sleep.MODEL_FORMATS;
 exports.MODEL_HOSTING = MODEL_HOSTING;
 exports.MODEL_PROVIDER_IDS = MODEL_PROVIDER_IDS;
 exports.MOTION_CLOSE_AFTER_MS = MOTION_CLOSE_AFTER_MS;
@@ -80623,7 +80476,7 @@ exports.ROOT_CHILD_CONTAINMENT_MIN = ROOT_CHILD_CONTAINMENT_MIN;
 exports.ROOT_FACE_REFINE_INPUT_PX = ROOT_FACE_REFINE_INPUT_PX;
 exports.ROOT_FACE_REFINE_SCALE = ROOT_FACE_REFINE_SCALE;
 exports.ROOT_SUPPLIABLE_STEP_IDS = ROOT_SUPPLIABLE_STEP_IDS;
-exports.RUNTIME_DEFAULTS = RUNTIME_DEFAULTS;
+exports.RUNTIME_DEFAULTS = require_sleep.RUNTIME_DEFAULTS;
 exports.RUNTIME_STATE_POLICY = RUNTIME_STATE_POLICY;
 exports.RUNTIME_STATE_REFRESH_MISS_COOLDOWN_MS = RUNTIME_STATE_REFRESH_MISS_COOLDOWN_MS;
 exports.RUNTIME_TO_FORMAT = RUNTIME_TO_FORMAT;
@@ -81393,7 +81246,7 @@ exports.globalSecretScope = require_sleep.globalSecretScope;
 exports.hasModelBoundOverrides = hasModelBoundOverrides;
 exports.hasMotionTrigger = hasMotionTrigger;
 exports.hasUrlScheme = hasUrlScheme;
-exports.hfModelUrl = hfModelUrl;
+exports.hfModelUrl = require_sleep.hfModelUrl;
 exports.htmlToText = htmlToText;
 exports.hubAddressHostname = hubAddressHostname;
 exports.hubMotionNativeProvider = hubMotionNativeProvider;
@@ -81512,7 +81365,7 @@ exports.makeSourceBrokerId = require_sleep.makeSourceBrokerId;
 exports.mapAudioLabelToMacro = mapAudioLabelToMacro;
 exports.markdownToHtmlLite = markdownToHtmlLite;
 exports.markdownToText = markdownToText;
-exports.maskUrlCredentials = maskUrlCredentials;
+exports.maskUrlCredentials = require_sleep.maskUrlCredentials;
 exports.matchDoAction = matchDoAction;
 exports.mayReadLocation = mayReadLocation;
 exports.mayWriteToLocation = mayWriteToLocation;