@camstack/types 1.2.355 → 1.2.357

package/dist/capabilities/battery.cap.d.ts

@@ -19,6 +19,7 @@ export declare const BatteryStatusSchema: z.ZodObject<{
     sleeping: z.ZodBoolean;
     lastUpdated: z.ZodNumber;
     lastContactAt: z.ZodOptional<z.ZodNumber>;
+    lastFullRefreshAt: z.ZodOptional<z.ZodNumber>;
     binary: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type BatteryStatus = z.infer<typeof BatteryStatusSchema>;
@@ -89,6 +90,7 @@ export declare const batteryCapability: {
                     sleeping: z.ZodBoolean;
                     lastUpdated: z.ZodNumber;
                     lastContactAt: z.ZodOptional<z.ZodNumber>;
+                    lastFullRefreshAt: z.ZodOptional<z.ZodNumber>;
                     binary: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
             }, z.core.$strip>;
@@ -106,6 +108,7 @@ export declare const batteryCapability: {
             sleeping: z.ZodBoolean;
             lastUpdated: z.ZodNumber;
             lastContactAt: z.ZodOptional<z.ZodNumber>;
+            lastFullRefreshAt: z.ZodOptional<z.ZodNumber>;
             binary: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>;
         readonly kind: 'push';
@@ -136,6 +139,7 @@ export declare const batteryCapability: {
         sleeping: z.ZodBoolean;
         lastUpdated: z.ZodNumber;
         lastContactAt: z.ZodOptional<z.ZodNumber>;
+        lastFullRefreshAt: z.ZodOptional<z.ZodNumber>;
         binary: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>;
     /**

package/dist/{composition-Bzr7GwgP.mjs → composition-C-WpVYTX.mjs}

@@ -812,6 +812,28 @@ var FFMPEG_ARTIFACTS = {
 		sha256: "021cd321ea169722cd2e4aca35884305449666a0d231d3378af7f87d6a5626e5",
 		sizeBytes: 37852180,
 		expectedHwaccels: ["videotoolbox"]
+	},
+	/**
+	* Windows x64 — the same jellyfin-ffmpeg release, GPL, from the project's
+	* own `win64-clang-gpl` leg (a flat zip: `ffmpeg.exe` + `ffprobe.exe`,
+	* statically linked, so nothing to install beside it). Hashed 2026-10-13.
+	*
+	* NOT executed: it was verified by reading the build's own configuration
+	* string out of the binary (`--enable-gpl --enable-version3 --enable-dxva2
+	* --enable-d3d11va --enable-d3d12va --enable-amf --enable-libvpl
+	* --enable-nvenc --enable-vulkan --enable-opencl`), which is the same
+	* codec/feature set as the linux build plus the Windows hwaccel API family.
+	* `expectedHwaccels` claims only what that string guarantees; the first real
+	* Windows node confirms it or trips the assertion, which is what it is for.
+	* AMF/NVENC/QSV are encoders and vendor runtimes (they need the GPU driver),
+	* so they are not claimed here.
+	*/
+	"win32-x64": {
+		url: `${BASE}/jellyfin-ffmpeg_${FFMPEG_RELEASE}_portable_win64-clang-gpl.zip`,
+		archiveFormat: "zip",
+		sha256: "4bb79f3d1e4092404eafe3fb3b0101e196f8eb00355201f60314e5ba21447b82",
+		sizeBytes: 67819203,
+		expectedHwaccels: ["d3d11va", "dxva2"]
 	}
 };
 /** The artifact for this node, or a refusal naming what was asked for. */

package/dist/{composition-BLWAivB2.js → composition-DCYnv4I6.js}

@@ -812,6 +812,28 @@ var FFMPEG_ARTIFACTS = {
 		sha256: "021cd321ea169722cd2e4aca35884305449666a0d231d3378af7f87d6a5626e5",
 		sizeBytes: 37852180,
 		expectedHwaccels: ["videotoolbox"]
+	},
+	/**
+	* Windows x64 — the same jellyfin-ffmpeg release, GPL, from the project's
+	* own `win64-clang-gpl` leg (a flat zip: `ffmpeg.exe` + `ffprobe.exe`,
+	* statically linked, so nothing to install beside it). Hashed 2026-10-13.
+	*
+	* NOT executed: it was verified by reading the build's own configuration
+	* string out of the binary (`--enable-gpl --enable-version3 --enable-dxva2
+	* --enable-d3d11va --enable-d3d12va --enable-amf --enable-libvpl
+	* --enable-nvenc --enable-vulkan --enable-opencl`), which is the same
+	* codec/feature set as the linux build plus the Windows hwaccel API family.
+	* `expectedHwaccels` claims only what that string guarantees; the first real
+	* Windows node confirms it or trips the assertion, which is what it is for.
+	* AMF/NVENC/QSV are encoders and vendor runtimes (they need the GPU driver),
+	* so they are not claimed here.
+	*/
+	"win32-x64": {
+		url: `${BASE}/jellyfin-ffmpeg_${FFMPEG_RELEASE}_portable_win64-clang-gpl.zip`,
+		archiveFormat: "zip",
+		sha256: "4bb79f3d1e4092404eafe3fb3b0101e196f8eb00355201f60314e5ba21447b82",
+		sizeBytes: 67819203,
+		expectedHwaccels: ["d3d11va", "dxva2"]
 	}
 };
 /** The artifact for this node, or a refusal naming what was asked for. */

package/dist/deps/archive-extract.d.ts

@@ -0,0 +1,11 @@
+export type ArchiveFormat = 'zip' | 'tar.gz' | 'tar.xz';
+export type ExecFile = (file: string, args: readonly string[]) => unknown;
+export interface ExtractDeps {
+    readonly platform: NodeJS.Platform;
+    readonly systemRoot: string | undefined;
+    readonly exec: ExecFile;
+    readonly extractZip: (archivePath: string, destDir: string) => void;
+}
+/** The tar to run: Windows' own bsdtar by absolute path, `tar` elsewhere. */
+export declare function tarExecutable(platform: NodeJS.Platform, systemRoot: string | undefined): string;
+export declare function extractArchive(archivePath: string, format: ArchiveFormat, destDir: string, overrides?: Partial<ExtractDeps>): void;

package/dist/deps/binary-downloader.d.ts

@@ -37,6 +37,15 @@ export interface DownloadOptions {
      */
     readonly sha256?: string;
 }
+/**
+ * Refuse an artifact that is not the one we pinned, and leave nothing behind.
+ *
+ * The failure is deliberately loud and terminal rather than a warning: a
+ * mismatch means the bytes are not what was verified, and "not what was
+ * verified" is the only state in which running this binary is worse than not
+ * having it. The partial file is removed so a retry cannot pick it up.
+ */
+export declare function verifySha256(file: string, expected: string | undefined, name: string, url: string): void;
 /**
  * Download a binary to the target directory.
  * Handles archives (zip, tar.gz, tar.xz) and raw binaries.

package/dist/deps/python-downloader.d.ts

@@ -1,6 +1,10 @@
 import type { IScopedLogger } from '../interfaces/logging.js';
 export declare const PYTHON_VERSION = "3.12.12";
 export declare function getPythonDownloadUrl(platform: string, arch: string): string;
+/** The SHA-256 the archive for this platform/arch must have. */
+export declare function getPythonSha256(platform: string, arch: string): string;
+/** The interpreter's path relative to the install root. */
+export declare function pythonInterpreterSegments(platform: string): readonly string[];
 /**
  * Ensure the embedded portable Python is available.
  *

package/dist/deps/zip-extract.d.ts

@@ -0,0 +1 @@
+export declare function extractZipArchive(archivePath: string, destDir: string): void;

package/dist/generated/addon-api.d.ts

@@ -11847,6 +11847,17 @@ export type AppRouter = TrpcCoreRouter<{
             };
             meta: object;
         }>;
+        extendShareToken: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
+            input: {
+                id: string;
+                ttlSec: number;
+            };
+            output: {
+                id: string;
+                expiresAt: number;
+            };
+            meta: object;
+        }>;
         revokeShareToken: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
             input: {
                 id: string;
@@ -12491,6 +12502,17 @@ export type AppRouter = TrpcCoreRouter<{
             };
             meta: object;
         }>;
+        extendShareToken: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
+            input: {
+                id: string;
+                ttlSec: number;
+            };
+            output: {
+                id: string;
+                expiresAt: number;
+            };
+            meta: object;
+        }>;
         revokeShareToken: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
             input: {
                 id: string;

package/dist/generated/addon-cap-facts.d.ts

@@ -0,0 +1,20 @@
+/**
+ * AUTO-GENERATED by scripts/generate-addon-cap-facts.ts — DO NOT EDIT.
+ *
+ * Schema-free capability facts for addon server code, so an addon never imports
+ * `ALL_CAPABILITY_DEFINITIONS` (the whole Zod schema graph, ~+100 MB heap per
+ * runner). See docs/decisions/adr-0028.md.
+ *
+ * Coverage: 1 advance-derived caps, 71 caps with 341 state leaves.
+ */
+/** A bindable scalar in a capability's runtime state. */
+export interface CapStateLeaf {
+    /** Dot path inside the cap's state slice. */
+    readonly path: string;
+    readonly valueType: 'number' | 'boolean' | 'string' | 'enum';
+    readonly enumValues?: readonly string[];
+}
+/** cap name -> the numeric state field whose strict advance IS the cap's one-shot event. */
+export declare const CAP_ADVANCE_FIELDS: Readonly<Record<string, string>>;
+/** cap name -> the bindable leaves of its runtime state (absent: none). */
+export declare const CAP_STATE_LEAVES: Readonly<Record<string, readonly CapStateLeaf[]>>;

package/dist/index.js

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-BxOWTkUD.js");
+const require_sleep = require("./sleep-BFVY4_xY.js");
 const require_event_category = require("./event-category-T43rdQWR.js");
-const require_composition = require("./composition-BLWAivB2.js");
+const require_composition = require("./composition-DCYnv4I6.js");
 const require_node_color = require("./node-color.js");
 const require_err_msg = require("./err-msg-Dx2Kor0g.js");
 const require_enums = require("./enums.js");
@@ -5852,14 +5852,6 @@ function describeRootSupplies(supplies) {
 }
 //#endregion
 //#region src/types/models.ts
-var MODEL_FORMATS = [
-	"onnx",
-	"coreml",
-	"openvino",
-	"tflite",
-	"pt",
-	"gguf"
-];
 /**
 * Multi-file format payload.
 *
@@ -6296,7 +6288,7 @@ var ModelConvertMetadataSchema = zod.z.object({
 	classMap: DetectionCatalogClassMapSchema.optional()
 });
 var ConvertArtifactSchema = zod.z.object({
-	format: zod.z.enum(MODEL_FORMATS),
+	format: zod.z.enum(require_sleep.MODEL_FORMATS),
 	precision: zod.z.enum(["fp16", "int8"]).optional(),
 	sizeMB: zod.z.number(),
 	validated: zod.z.boolean(),
@@ -12306,7 +12298,7 @@ var ImportModelBundleResultSchema = zod.z.discriminatedUnion("kind", [zod.z.obje
 	distributed: zod.z.array(zod.z.object({
 		modelId: zod.z.string(),
 		nodeId: zod.z.string(),
-		format: zod.z.enum(MODEL_FORMATS),
+		format: zod.z.enum(require_sleep.MODEL_FORMATS),
 		ok: zod.z.boolean(),
 		error: zod.z.string().optional()
 	})).readonly()
@@ -18860,7 +18852,7 @@ var modelConvertCapability = {
 var ModelDistributeInputSchema = zod.z.object({
 	targetNodeId: zod.z.string(),
 	modelId: zod.z.string(),
-	format: zod.z.enum(MODEL_FORMATS),
+	format: zod.z.enum(require_sleep.MODEL_FORMATS),
 	entry: ModelCatalogEntrySchema
 });
 var ModelDistributeResultSchema = zod.z.object({
@@ -28530,7 +28522,7 @@ var pipelineExecutorCapability = {
 * (`recommend.ts`) are the TS face of the same data; these
 * schemas are what crosses the cap boundary.
 */
-var ModelFormatSchema$1 = zod.z.enum(MODEL_FORMATS);
+var ModelFormatSchema$1 = zod.z.enum(require_sleep.MODEL_FORMATS);
 /** Default least number of parallel sessions per device Auto tune keeps (D755). */
 var DEFAULT_MIN_SESSIONS_PER_DEVICE = 2;
 /** The operator's range for it. */
@@ -31310,7 +31302,7 @@ var NodeInferenceDeviceSchema = zod.z.object({
 	key: zod.z.string(),
 	backend: zod.z.string(),
 	device: zod.z.string(),
-	format: zod.z.enum(MODEL_FORMATS),
+	format: zod.z.enum(require_sleep.MODEL_FORMATS),
 	/** Whether the node's live probe reports the device as usable right now. */
 	available: zod.z.boolean(),
 	/**
@@ -37094,6 +37086,17 @@ var BatteryStatusSchema = zod.z.object({
 	*/
 	lastContactAt: zod.z.number().optional(),
 	/**
+	* Ms epoch of the last COMPLETE scheduled refresh — every fact the provider
+	* holds for the device (level, charging, link, device info, state slices) and
+	* its cached snapshot, read together. Absent = never since this slice was
+	* born. Unlike `lastUpdated` (any write, even a push of one field) this is
+	* the staleness an operator can trust: the provider owns the device fact and
+	* so owns the window on its age (D224, D847). Not a clock in the
+	* runtime-state-durability sense: it moves once per window and must survive
+	* a restart, or every restart would owe the camera a wake.
+	*/
+	lastFullRefreshAt: zod.z.number().optional(),
+	/**
 	* True when the source is a BINARY low-battery indicator (HA
 	* `binary_sensor` device_class=battery / `LOW_BAT`) that has no real
 	* charge level — `percentage` is then a coarse stand-in (100 = normal,
@@ -43665,7 +43668,7 @@ includeCrops: zod.z.boolean().optional() }).optional(), zod.z.array(VehicleSchem
 };
 //#endregion
 //#region src/capabilities/platform-probe.cap.ts
-var ModelFormatSchema = zod.z.enum(MODEL_FORMATS);
+var ModelFormatSchema = zod.z.enum(require_sleep.MODEL_FORMATS);
 var HwAccelBackendInputSchema = zod.z.enum([
 	"videotoolbox",
 	"cuda",
@@ -51830,65 +51833,6 @@ function stateVocabularyFor(runtimeState, alarmStates = []) {
 	return [];
 }
 //#endregion
-//#region src/constants.ts
-var HF_REPO = "camstack/camstack-models";
-var HF_BASE_URL = `https://huggingface.co/${HF_REPO}/resolve/main`;
-/**
-* The ONE default session-JWT lifetime.
-*
-* There used to be three, and they disagreed: the `system-config` schema said
-* `30d`, `RUNTIME_DEFAULTS['auth.tokenExpiry']` said `7d`, and
-* `AuthManager.signToken` hardcoded `30d` as its own fallback. Because the
-* production signer (`AuthService extends AuthManager`, wired to
-* `ConfigManager`) resolves through `RUNTIME_DEFAULTS` BEFORE it can ever
-* reach the hardcoded fallback, the value actually in force was `7d` while
-* every surface an operator could read advertised `30d`.
-*
-* `30d` is the value the product documents and the one an operator decided on
-* (2026-07-17: the viewer's silent refresh rotates tokens long before expiry,
-* so a long lifetime only covers devices left unopened for weeks). It is
-* declared here once and imported by the schema, by the runtime defaults and
-* by the signer's fallback — a second default that disagrees with the first is
-* the same defect in miniature.
-*/
-var DEFAULT_TOKEN_EXPIRY = "30d";
-/**
-* Runtime defaults -- used by ConfigManager.get() for backward compatibility
-* until Plan B wires all runtime settings to the system_settings SQL table.
-*
-* Moved from @camstack/system/config-schema to @camstack/types so that
-* @camstack/system can reference it without a cross-package kernel import.
-*/
-var RUNTIME_DEFAULTS = {
-	"features.streaming": true,
-	"features.notifications": true,
-	"features.objectDetection": false,
-	"features.remoteAccess": true,
-	"features.agentCluster": false,
-	"features.smartHome": true,
-	"features.recordings": true,
-	"features.backup": true,
-	"features.repl": true,
-	"retention.detectionEventsDays": 30,
-	"retention.audioLevelsDays": 7,
-	"logging.level": "info",
-	"logging.retentionDays": 30,
-	"eventBus.ringBufferSize": 1e4,
-	"storage.provider": "sqlite-storage",
-	"storage.locations": {
-		data: "camstack-data/data",
-		media: "camstack-data/media",
-		recordings: "camstack-data/recordings",
-		cache: "/tmp/camstack-cache",
-		logs: "camstack-data/logs",
-		models: "camstack-data/models"
-	},
-	providers: [],
-	"ffmpeg.hwAccel": "auto",
-	"ffmpeg.threadCount": 0,
-	"auth.tokenExpiry": "30d"
-};
-//#endregion
 //#region src/device/accessory.ts
 /**
 * Accessory device helpers — shared across drivers.
@@ -78347,11 +78291,6 @@ function setNestedValue(obj, path, value) {
 	current[parts[parts.length - 1]] = value;
 }
 //#endregion
-//#region src/utils/hf-url.ts
-function hfModelUrl(repo, path) {
-	return `https://huggingface.co/${repo}/resolve/main/${path}`;
-}
-//#endregion
 //#region src/utils/pool-memory-watchdog.ts
 var MB = 1024 * 1024;
 var DEFAULT_POOL_MEMORY_POLICY = {
@@ -79061,7 +79000,7 @@ var RUNTIMES = [
 				value: "cuda",
 				label: "CUDA"
 			});
-			if (hw.gpu?.type === "amd") out.push({
+			if (hw.gpu?.type === "amd" && hw.platform === "linux") out.push({
 				value: "webgpu",
 				label: "WebGPU (AMD iGPU)"
 			});
@@ -79198,7 +79137,7 @@ function scoreRuntimes(hw) {
 		});
 	}
 	if (hw.gpu?.type === "amd") {
-		scores.push({
+		if (hw.platform === "linux") scores.push({
 			runtime: "python",
 			backend: "onnx",
 			format: "onnx",
@@ -79695,7 +79634,7 @@ exports.DEFAULT_RUNTIME_STATE_DURABILITY = require_sleep.DEFAULT_RUNTIME_STATE_D
 exports.DEFAULT_SESSION_PLACEMENT_POLICY = DEFAULT_SESSION_PLACEMENT_POLICY;
 exports.DEFAULT_SHARE_SOURCE = DEFAULT_SHARE_SOURCE;
 exports.DEFAULT_TIMELAPSE_PREVIEW_TEXT = DEFAULT_TIMELAPSE_PREVIEW_TEXT;
-exports.DEFAULT_TOKEN_EXPIRY = DEFAULT_TOKEN_EXPIRY;
+exports.DEFAULT_TOKEN_EXPIRY = require_sleep.DEFAULT_TOKEN_EXPIRY;
 exports.DERIVED_CAMERA_SILENCED_CAP_NAMES = DERIVED_CAMERA_SILENCED_CAP_NAMES;
 exports.DETAIL_CROP_PADDING_FIELD = DETAIL_CROP_PADDING_FIELD;
 exports.DETAIL_CROP_PADDING_KEY = DETAIL_CROP_PADDING_KEY;
@@ -79902,8 +79841,8 @@ exports.HAP_AUDIO_BASE = HAP_AUDIO_BASE;
 exports.HAP_AUDIO_BITRATE_KBPS = HAP_AUDIO_BITRATE_KBPS;
 exports.HAP_AUDIO_VBV_KBITS = HAP_AUDIO_VBV_KBITS;
 exports.HAP_KEYFRAME_INTERVAL_SEC = HAP_KEYFRAME_INTERVAL_SEC;
-exports.HF_BASE_URL = HF_BASE_URL;
-exports.HF_REPO = HF_REPO;
+exports.HF_BASE_URL = require_sleep.HF_BASE_URL;
+exports.HF_REPO = require_sleep.HF_REPO;
 exports.HOURS_PER_DAY = HOURS_PER_DAY;
 exports.HUB_ADDRESS_ROLES = HUB_ADDRESS_ROLES;
 exports.HUB_MDNS_QUERY_NAME = HUB_MDNS_QUERY_NAME;
@@ -80079,7 +80018,7 @@ exports.METHOD_DEVICE_SELECTORS = METHOD_DEVICE_SELECTORS;
 exports.MINUTES_PER_DAY = MINUTES_PER_DAY;
 exports.MIN_SCRUBBED_LENGTH = require_sleep.MIN_SCRUBBED_LENGTH;
 exports.MIN_SESSIONS_PER_DEVICE_RANGE = MIN_SESSIONS_PER_DEVICE_RANGE;
-exports.MODEL_FORMATS = MODEL_FORMATS;
+exports.MODEL_FORMATS = require_sleep.MODEL_FORMATS;
 exports.MODEL_HOSTING = MODEL_HOSTING;
 exports.MODEL_PROVIDER_IDS = MODEL_PROVIDER_IDS;
 exports.MOTION_CLOSE_AFTER_MS = MOTION_CLOSE_AFTER_MS;
@@ -80548,7 +80487,7 @@ exports.ROOT_CHILD_CONTAINMENT_MIN = ROOT_CHILD_CONTAINMENT_MIN;
 exports.ROOT_FACE_REFINE_INPUT_PX = ROOT_FACE_REFINE_INPUT_PX;
 exports.ROOT_FACE_REFINE_SCALE = ROOT_FACE_REFINE_SCALE;
 exports.ROOT_SUPPLIABLE_STEP_IDS = ROOT_SUPPLIABLE_STEP_IDS;
-exports.RUNTIME_DEFAULTS = RUNTIME_DEFAULTS;
+exports.RUNTIME_DEFAULTS = require_sleep.RUNTIME_DEFAULTS;
 exports.RUNTIME_STATE_POLICY = RUNTIME_STATE_POLICY;
 exports.RUNTIME_STATE_REFRESH_MISS_COOLDOWN_MS = RUNTIME_STATE_REFRESH_MISS_COOLDOWN_MS;
 exports.RUNTIME_TO_FORMAT = RUNTIME_TO_FORMAT;
@@ -81318,7 +81257,7 @@ exports.globalSecretScope = require_sleep.globalSecretScope;
 exports.hasModelBoundOverrides = hasModelBoundOverrides;
 exports.hasMotionTrigger = hasMotionTrigger;
 exports.hasUrlScheme = hasUrlScheme;
-exports.hfModelUrl = hfModelUrl;
+exports.hfModelUrl = require_sleep.hfModelUrl;
 exports.htmlToText = htmlToText;
 exports.hubAddressHostname = hubAddressHostname;
 exports.hubMotionNativeProvider = hubMotionNativeProvider;

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import { $ as AudioStreamPickSchema, $t as isSecretRef, A as deviceCustomAction, An as isAudioChunkFormat, At as PEER_BYTES_CHUNK_BYTES, B as optionalMethod, Bt as mergeSecretStatePaths, C as RawStateResultSchema, Cn as collectSecretConfigKeys, Ct as MIN_SCRUBBED_LENGTH, D as customAction, Dn as AUDIO_CHUNK_FORMATS, Dt as registerKnownSecret, E as DEVICE_CHILDREN_BATCH_MAX, En as schemaDeclaresAnyField, Et as knownSecretCount, F as PROVIDER_PIN_FIELD, Ft as DATAPLANE_SECRET_HEADER, G as readNodePin, Gt as collectSecretMarkerRefs, H as systemMethod, Ht as secretTreeFromPaths, I as event, It as SHARE_VIEW_KINDS, J as ReadinessTimeoutError, Jt as SECRET_REF_SCHEME, K as toNodeId, Kt as resolveSecretMarkers, L as expandCapMethods, Lt as DisposerChain, M as DEFAULT_RUNTIME_STATE_DURABILITY, Mt as PEER_BYTES_STALL_MS, N as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Nt as PEER_BYTES_TICKET_TTL_MS, O as defineCustomActions, On as audioChunkBytesPerSample, Ot as scrubKnownSecrets, P as DEVICE_STATUS_METHOD, Pt as PeerBytesTicketSchema, Q as AudioChunkFormatSchema, Qt as globalSecretScope, R as isDeviceConfigCap, Rt as BaseAddon, S as isZodSecret, Sn as collectKeychainStoredKeys, St as createSecretsAccess, T as viewerUiCapability, Tn as isSecretConfigField, Tt as forgetKnownSecret, U as CAP_NODE_PIN_CONTEXT_KEY, Ut as secretTreeFromSchema, V as resolveCapMount, Vt as parseSecretStatePath, W as nodePin, Wt as KeychainWriteRefusedError, X as readinessKey, Xt as buildSecretRef, Y as emitDownForOwnedCaps, Yt as arrayItemFieldPath, Z as scopeKey, Zt as formatSecretScope, _ as createLazyTrpcSource, _n as isSecretMarker, _t as makeSourceBrokerId, a as asJsonArray, an as emitReadiness, at as CamStreamResolutionSchema, b as SECRET_META, bn as toSecretFieldView, bt as resolveSecretViewsIn, c as asString, cn as WELL_KNOWN_TAB_MAP, ct as FrameHandleSchema, d as parseJsonUnknown, dn as hydrateSchema, dt as ProfileSlotStatusSchema, en as normalizeSecretOwner, et as BrokerStatsSchema, f as BOOT_RECOVERY_BACKOFF_MS, fn as resolveHydratedFieldValue, ft as StreamSourceEntrySchema, g as createEventBusSliceSource, gn as isSecretFieldView, gt as makeProfileBrokerId, h as createDeviceProxy, hn as isSecretClear, ht as SubscribeAudioChunksResultSchema, i as asBoolean, in as createEvent, it as CamStreamKindSchema, j as adminUiCapability, jt as PEER_BYTES_MAX_OUTSTANDING, k as describeCustomActions, kn as expandAudioChunkToF32le, kt as shortSecretRefHash, l as parseJsonArray, ln as collectHydratedFieldEntries, lt as ProfileRtspEntrySchema, m as isDeviceScopedCap, mn as classifySecretWrite, mt as SubscribeAudioChunksInputSchema, n as sleepCancellable, nn as normalizeNodeId, nt as CAM_PROFILE_ORDER, o as asJsonObject, on as isEvent, ot as CameraStreamSchema, p as DEVICE_SCOPED_CAPS, pn as SECRET_CLEAR, pt as StreamSourceSchema, q as ReadinessRegistry, qt as transformSecretWrite, r as maskUrlCredentials, rn as createDurableState, rt as CamProfileSchema, s as asNumber, sn as WELL_KNOWN_TABS, st as DecodedAudioChunkSchema, t as sleep, tn as parseSecretRef, tt as BrokerStatusSchema, u as parseJsonObject, un as collectHydratedFieldValues, ut as ProfileSlotSchema, v as createMirrorSource, vn as isSecretMarkerLike, vt as parseProfileBrokerId, w as deviceOpsCapability, wn as isKeychainStoredField, wt as clearKnownSecrets, x as collectZodSecretPaths, xn as REDACTED_SECRET, xt as REVALIDATE_AFTER_MS, y as createSliceHandle, yn as makeSecretMarker, yt as selectAssignedProfileSlots, z as method, zt as normalizeAddonInitResult } from "./sleep-BjDbnx6-.mjs";
+import { $ as ReadinessRegistry, $t as transformSecretWrite, A as viewerUiCapability, An as isKeychainStoredField, At as clearKnownSecrets, B as PROVIDER_PIN_FIELD, Bt as PeerBytesTicketSchema, C as isZodSecret, Cn as isSecretMarker, Ct as makeSourceBrokerId, D as RUNTIME_DEFAULTS, Dn as REDACTED_SECRET, Dt as REVALIDATE_AFTER_MS, E as HF_REPO, En as toSecretFieldView, Et as resolveSecretViewsIn, F as deviceCustomAction, Fn as expandAudioChunkToF32le, Ft as shortSecretRefHash, G as optionalMethod, Gt as normalizeAddonInitResult, H as expandCapMethods, Ht as SHARE_VIEW_KINDS, I as adminUiCapability, In as isAudioChunkFormat, It as PEER_BYTES_CHUNK_BYTES, J as CAP_NODE_PIN_CONTEXT_KEY, Jt as secretTreeFromPaths, K as resolveCapMount, Kt as mergeSecretStatePaths, L as DEFAULT_RUNTIME_STATE_DURABILITY, Lt as PEER_BYTES_MAX_OUTSTANDING, M as customAction, Mn as schemaDeclaresAnyField, Mt as knownSecretCount, N as defineCustomActions, Nn as AUDIO_CHUNK_FORMATS, Nt as registerKnownSecret, O as RawStateResultSchema, On as collectKeychainStoredKeys, Ot as createSecretsAccess, P as describeCustomActions, Pn as audioChunkBytesPerSample, Pt as scrubKnownSecrets, Q as MODEL_FORMATS, Qt as resolveSecretMarkers, R as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Rt as PEER_BYTES_STALL_MS, S as collectZodSecretPaths, Sn as isSecretFieldView, St as makeProfileBrokerId, T as HF_BASE_URL, Tn as makeSecretMarker, Tt as selectAssignedProfileSlots, U as isDeviceConfigCap, Ut as DisposerChain, V as event, Vt as DATAPLANE_SECRET_HEADER, W as method, Wt as BaseAddon, X as readNodePin, Xt as KeychainWriteRefusedError, Y as nodePin, Yt as secretTreeFromSchema, Z as toNodeId, Zt as collectSecretMarkerRefs, _ as createEventBusSliceSource, _n as hydrateSchema, _t as ProfileSlotStatusSchema, a as asJsonArray, an as isSecretRef, at as AudioStreamPickSchema, b as createSliceHandle, bn as classifySecretWrite, bt as SubscribeAudioChunksInputSchema, c as asString, cn as normalizeNodeId, ct as CAM_PROFILE_ORDER, d as parseJsonUnknown, dn as emitReadiness, dt as CamStreamResolutionSchema, en as SECRET_REF_SCHEME, et as ReadinessTimeoutError, f as hfModelUrl, fn as isEvent, ft as CameraStreamSchema, g as createDeviceProxy, gn as collectHydratedFieldValues, gt as ProfileSlotSchema, h as isDeviceScopedCap, hn as collectHydratedFieldEntries, ht as ProfileRtspEntrySchema, i as asBoolean, in as globalSecretScope, it as AudioChunkFormatSchema, j as DEVICE_CHILDREN_BATCH_MAX, jn as isSecretConfigField, jt as forgetKnownSecret, k as deviceOpsCapability, kn as collectSecretConfigKeys, kt as MIN_SCRUBBED_LENGTH, l as parseJsonArray, ln as createDurableState, lt as CamProfileSchema, m as DEVICE_SCOPED_CAPS, mn as WELL_KNOWN_TAB_MAP, mt as FrameHandleSchema, n as sleepCancellable, nn as buildSecretRef, nt as readinessKey, o as asJsonObject, on as normalizeSecretOwner, ot as BrokerStatsSchema, p as BOOT_RECOVERY_BACKOFF_MS, pn as WELL_KNOWN_TABS, pt as DecodedAudioChunkSchema, q as systemMethod, qt as parseSecretStatePath, r as maskUrlCredentials, rn as formatSecretScope, rt as scopeKey, s as asNumber, sn as parseSecretRef, st as BrokerStatusSchema, t as sleep, tn as arrayItemFieldPath, tt as emitDownForOwnedCaps, u as parseJsonObject, un as createEvent, ut as CamStreamKindSchema, v as createLazyTrpcSource, vn as resolveHydratedFieldValue, vt as StreamSourceEntrySchema, w as DEFAULT_TOKEN_EXPIRY, wn as isSecretMarkerLike, wt as parseProfileBrokerId, x as SECRET_META, xn as isSecretClear, xt as SubscribeAudioChunksResultSchema, y as createMirrorSource, yn as SECRET_CLEAR, yt as StreamSourceSchema, z as DEVICE_STATUS_METHOD, zt as PEER_BYTES_TICKET_TTL_MS } from "./sleep-vWTnHq9G.mjs";
 import { i as publicEventCategories, n as OWNER_ONLY_EVENT_CATEGORIES, r as isOwnerOnlyEventCategory, t as EventCategory } from "./event-category-C4hVnRo8.mjs";
-import { $ as MAX_EXPRESSION_AST_NODES, A as compositionFeatureEnabled, At as Fmp4BoxSplitter, B as createStatefulExpressionMemory, Bt as pickVideoEncoder, C as CompositionTargetSchema, Ct as FFMPEG_PATH_ENV, D as MAX_COMPOSITION_ITEMS, E as MAX_COMPOSITION_FIELDS_PER_FEATURE, F as featureFieldEntries, Ft as buildInputArgs, G as createExpressionScope, H as evaluateStatefulExpressionCall, I as featureSources, It as buildVideoArgs, J as compileExpressionSafe, K as evaluateAst, L as fieldReads, Lt as invocationFromEncodeProfile, M as compositionReadKey, Mt as audioPlanFromEncodeProfile, N as compositionSliceKey, Nt as buildAudioArgs, O as composedDeviceRef, P as compositionSourceKey, Pt as buildFfmpegArgs, Q as EXPRESSION_IDENTIFIER_RE, R as EXPRESSION_INJECTED_NOW, Rt as isSoftwareDecode, S as CompositionSourceRefSchema, St as sliceChangedAt, T as MAX_COMPOSITION_FEATURES, U as toExpressionValue, V as evaluateExpressionSource, Vt as resolveStreamMaps, W as validateExpressionSource, X as tokenize, Y as parseExpression, Z as EXPRESSION_COMPILE_CACHE_CAPACITY, _ as CompositionItemEntrySchema, _t as SOURCE_DEVICE_TYPES, a as CUSTOMIZATION_BLOCK_NAME_PREFIX, at as EXPRESSION_BUILTINS, b as CompositionPassthroughFeatureSchema, bt as isSourceCap, c as CompositionCommandTargetSchema, ct as evaluateCount, d as CompositionFeatureSchema, dt as ExpressionEvalError, et as MAX_EXPRESSION_BINDINGS, f as CompositionFieldReadSchema, ft as ExpressionParseError, g as CompositionFromSourceSchema, gt as SOURCE_CAP_CHANGED_AT_FIELD, h as CompositionForwardCommandSchema, ht as SOURCE_CAP_ACTIVE_FIELD, i as COMPOSITION_ITEM_KEY_RE, it as RESERVED_BINDING_NAMES, j as compositionItemFieldPath, jt as AUDIO_PRESETS, k as composedDeviceStableId, kt as canonicalHash, l as CompositionExistingTargetSchema, lt as evaluateRose, m as CompositionFieldsFeatureSchema, mt as SOURCE_CAPS, n as COMPOSER_ADDON_ID, nt as MAX_EXPRESSION_EVAL_STEPS, o as CompositionBindingSchema, ot as EXPRESSION_BUILTIN_NAMES, p as CompositionFieldSourceSchema, pt as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, q as compileExpression, r as COMPOSITION_ITEM_ARRAY_PATH, rt as MAX_EXPRESSION_SOURCE_LENGTH, s as CompositionCodeSourceSchema, st as disarmRoseMemory, t as COMPOSED_DEVICE_STABLE_ID_PREFIX, tt as MAX_EXPRESSION_CALL_ARGS, u as CompositionExpressionSourceSchema, ut as isStatefulBuiltin, v as CompositionLiteralBindingSchema, vt as evaluateSensorEdge, w as MAX_COMPOSITION_CODE_LENGTH, x as CompositionSchema, xt as sliceActiveValue, y as CompositionNewTargetSchema, yt as evaluateSensorLevelEdge, z as cloneStatefulExpressionMemory, zt as logBannerArgs } from "./composition-Bzr7GwgP.mjs";
+import { $ as MAX_EXPRESSION_AST_NODES, A as compositionFeatureEnabled, At as Fmp4BoxSplitter, B as createStatefulExpressionMemory, Bt as pickVideoEncoder, C as CompositionTargetSchema, Ct as FFMPEG_PATH_ENV, D as MAX_COMPOSITION_ITEMS, E as MAX_COMPOSITION_FIELDS_PER_FEATURE, F as featureFieldEntries, Ft as buildInputArgs, G as createExpressionScope, H as evaluateStatefulExpressionCall, I as featureSources, It as buildVideoArgs, J as compileExpressionSafe, K as evaluateAst, L as fieldReads, Lt as invocationFromEncodeProfile, M as compositionReadKey, Mt as audioPlanFromEncodeProfile, N as compositionSliceKey, Nt as buildAudioArgs, O as composedDeviceRef, P as compositionSourceKey, Pt as buildFfmpegArgs, Q as EXPRESSION_IDENTIFIER_RE, R as EXPRESSION_INJECTED_NOW, Rt as isSoftwareDecode, S as CompositionSourceRefSchema, St as sliceChangedAt, T as MAX_COMPOSITION_FEATURES, U as toExpressionValue, V as evaluateExpressionSource, Vt as resolveStreamMaps, W as validateExpressionSource, X as tokenize, Y as parseExpression, Z as EXPRESSION_COMPILE_CACHE_CAPACITY, _ as CompositionItemEntrySchema, _t as SOURCE_DEVICE_TYPES, a as CUSTOMIZATION_BLOCK_NAME_PREFIX, at as EXPRESSION_BUILTINS, b as CompositionPassthroughFeatureSchema, bt as isSourceCap, c as CompositionCommandTargetSchema, ct as evaluateCount, d as CompositionFeatureSchema, dt as ExpressionEvalError, et as MAX_EXPRESSION_BINDINGS, f as CompositionFieldReadSchema, ft as ExpressionParseError, g as CompositionFromSourceSchema, gt as SOURCE_CAP_CHANGED_AT_FIELD, h as CompositionForwardCommandSchema, ht as SOURCE_CAP_ACTIVE_FIELD, i as COMPOSITION_ITEM_KEY_RE, it as RESERVED_BINDING_NAMES, j as compositionItemFieldPath, jt as AUDIO_PRESETS, k as composedDeviceStableId, kt as canonicalHash, l as CompositionExistingTargetSchema, lt as evaluateRose, m as CompositionFieldsFeatureSchema, mt as SOURCE_CAPS, n as COMPOSER_ADDON_ID, nt as MAX_EXPRESSION_EVAL_STEPS, o as CompositionBindingSchema, ot as EXPRESSION_BUILTIN_NAMES, p as CompositionFieldSourceSchema, pt as DEFAULT_FIRST_SIGHTING_FRESHNESS_MS, q as compileExpression, r as COMPOSITION_ITEM_ARRAY_PATH, rt as MAX_EXPRESSION_SOURCE_LENGTH, s as CompositionCodeSourceSchema, st as disarmRoseMemory, t as COMPOSED_DEVICE_STABLE_ID_PREFIX, tt as MAX_EXPRESSION_CALL_ARGS, u as CompositionExpressionSourceSchema, ut as isStatefulBuiltin, v as CompositionLiteralBindingSchema, vt as evaluateSensorEdge, w as MAX_COMPOSITION_CODE_LENGTH, x as CompositionSchema, xt as sliceActiveValue, y as CompositionNewTargetSchema, yt as evaluateSensorLevelEdge, z as cloneStatefulExpressionMemory, zt as logBannerArgs } from "./composition-C-WpVYTX.mjs";
 import { NODE_COLOR_IDS, NodeColorIdSchema, assignNodeColorId } from "./node-color.mjs";
 import { a as DeviceType, i as DeviceRole, n as ChargingStatus, r as DeviceFeature, t as errMsg } from "./err-msg-DX6i_MY4.mjs";
 import { EventSourceType } from "./enums.mjs";
@@ -5851,14 +5851,6 @@ function describeRootSupplies(supplies) {
 }
 //#endregion
 //#region src/types/models.ts
-var MODEL_FORMATS = [
-	"onnx",
-	"coreml",
-	"openvino",
-	"tflite",
-	"pt",
-	"gguf"
-];
 /**
 * Multi-file format payload.
 *
@@ -37093,6 +37085,17 @@ var BatteryStatusSchema = z.object({
 	*/
 	lastContactAt: z.number().optional(),
 	/**
+	* Ms epoch of the last COMPLETE scheduled refresh — every fact the provider
+	* holds for the device (level, charging, link, device info, state slices) and
+	* its cached snapshot, read together. Absent = never since this slice was
+	* born. Unlike `lastUpdated` (any write, even a push of one field) this is
+	* the staleness an operator can trust: the provider owns the device fact and
+	* so owns the window on its age (D224, D847). Not a clock in the
+	* runtime-state-durability sense: it moves once per window and must survive
+	* a restart, or every restart would owe the camera a wake.
+	*/
+	lastFullRefreshAt: z.number().optional(),
+	/**
 	* True when the source is a BINARY low-battery indicator (HA
 	* `binary_sensor` device_class=battery / `LOW_BAT`) that has no real
 	* charge level — `percentage` is then a coarse stand-in (100 = normal,
@@ -51829,65 +51832,6 @@ function stateVocabularyFor(runtimeState, alarmStates = []) {
 	return [];
 }
 //#endregion
-//#region src/constants.ts
-var HF_REPO = "camstack/camstack-models";
-var HF_BASE_URL = `https://huggingface.co/${HF_REPO}/resolve/main`;
-/**
-* The ONE default session-JWT lifetime.
-*
-* There used to be three, and they disagreed: the `system-config` schema said
-* `30d`, `RUNTIME_DEFAULTS['auth.tokenExpiry']` said `7d`, and
-* `AuthManager.signToken` hardcoded `30d` as its own fallback. Because the
-* production signer (`AuthService extends AuthManager`, wired to
-* `ConfigManager`) resolves through `RUNTIME_DEFAULTS` BEFORE it can ever
-* reach the hardcoded fallback, the value actually in force was `7d` while
-* every surface an operator could read advertised `30d`.
-*
-* `30d` is the value the product documents and the one an operator decided on
-* (2026-07-17: the viewer's silent refresh rotates tokens long before expiry,
-* so a long lifetime only covers devices left unopened for weeks). It is
-* declared here once and imported by the schema, by the runtime defaults and
-* by the signer's fallback — a second default that disagrees with the first is
-* the same defect in miniature.
-*/
-var DEFAULT_TOKEN_EXPIRY = "30d";
-/**
-* Runtime defaults -- used by ConfigManager.get() for backward compatibility
-* until Plan B wires all runtime settings to the system_settings SQL table.
-*
-* Moved from @camstack/system/config-schema to @camstack/types so that
-* @camstack/system can reference it without a cross-package kernel import.
-*/
-var RUNTIME_DEFAULTS = {
-	"features.streaming": true,
-	"features.notifications": true,
-	"features.objectDetection": false,
-	"features.remoteAccess": true,
-	"features.agentCluster": false,
-	"features.smartHome": true,
-	"features.recordings": true,
-	"features.backup": true,
-	"features.repl": true,
-	"retention.detectionEventsDays": 30,
-	"retention.audioLevelsDays": 7,
-	"logging.level": "info",
-	"logging.retentionDays": 30,
-	"eventBus.ringBufferSize": 1e4,
-	"storage.provider": "sqlite-storage",
-	"storage.locations": {
-		data: "camstack-data/data",
-		media: "camstack-data/media",
-		recordings: "camstack-data/recordings",
-		cache: "/tmp/camstack-cache",
-		logs: "camstack-data/logs",
-		models: "camstack-data/models"
-	},
-	providers: [],
-	"ffmpeg.hwAccel": "auto",
-	"ffmpeg.threadCount": 0,
-	"auth.tokenExpiry": "30d"
-};
-//#endregion
 //#region src/device/accessory.ts
 /**
 * Accessory device helpers — shared across drivers.
@@ -78346,11 +78290,6 @@ function setNestedValue(obj, path, value) {
 	current[parts[parts.length - 1]] = value;
 }
 //#endregion
-//#region src/utils/hf-url.ts
-function hfModelUrl(repo, path) {
-	return `https://huggingface.co/${repo}/resolve/main/${path}`;
-}
-//#endregion
 //#region src/utils/pool-memory-watchdog.ts
 var MB = 1024 * 1024;
 var DEFAULT_POOL_MEMORY_POLICY = {
@@ -79060,7 +78999,7 @@ var RUNTIMES = [
 				value: "cuda",
 				label: "CUDA"
 			});
-			if (hw.gpu?.type === "amd") out.push({
+			if (hw.gpu?.type === "amd" && hw.platform === "linux") out.push({
 				value: "webgpu",
 				label: "WebGPU (AMD iGPU)"
 			});
@@ -79197,7 +79136,7 @@ function scoreRuntimes(hw) {
 		});
 	}
 	if (hw.gpu?.type === "amd") {
-		scores.push({
+		if (hw.platform === "linux") scores.push({
 			runtime: "python",
 			backend: "onnx",
 			format: "onnx",

package/dist/node.d.ts

@@ -1,6 +1,8 @@
 export type { PlatformInfo } from './deps/binary-downloader.js';
 export { buildBinaryPath, downloadBinary, ensureBinary, findInPath, getPlatformInfo, } from './deps/binary-downloader.js';
 export { ensureFfmpeg } from './deps/ffmpeg-downloader.js';
+export type { OwnerOnlyDeps } from './util/owner-only-file.js';
+export { icaclsArgs, mkdirOwnerOnlySync, OwnerOnlyError, restrictDirToOwnerSync, restrictFileToOwnerSync, writeOwnerOnlyFileSync, } from './util/owner-only-file.js';
 export { FFMPEG_RELEASE, getFfmpegArtifact, getFfmpegDownloadUrl } from './deps/ffmpeg-artifacts.js';
 export { probeFfmpegBinary, parseFfmpegCapabilities, type FfmpegBinaryCapabilities, } from './ffmpeg/binary-capabilities.js';
 export { ensurePython, getPythonDownloadUrl, installPythonPackages, installPythonRequirements, PYTHON_VERSION, } from './deps/python-downloader.js';