@camstack/types 1.2.355 → 1.2.357

package/dist/{sleep-BjDbnx6-.mjs → sleep-vWTnHq9G.mjs}

@@ -3821,6 +3821,23 @@ function emitDownForOwnedCaps(registry, owned) {
 	for (const { capName, scope } of owned) registry.emitDown(capName, scope);
 }
 //#endregion
+//#region src/types/model-formats.ts
+/**
+* The model weight formats a catalog entry can ship. Schema-free on purpose:
+* `types/models.ts` builds Zod schemas from it, but a runner-closure consumer
+* (the model downloader in `@camstack/system`) needs only the list and must
+* reach it through `@camstack/types/addon` without building the cap schema
+* graph (D28).
+*/
+var MODEL_FORMATS = [
+	"onnx",
+	"coreml",
+	"openvino",
+	"tflite",
+	"pt",
+	"gguf"
+];
+//#endregion
 //#region src/cap-call-context.ts
 /**
 * Per-call node pinning for `ctx.api` capability calls.
@@ -4337,6 +4354,65 @@ var deviceOpsCapability = {
 	}
 };
 //#endregion
+//#region src/constants.ts
+var HF_REPO = "camstack/camstack-models";
+var HF_BASE_URL = `https://huggingface.co/${HF_REPO}/resolve/main`;
+/**
+* The ONE default session-JWT lifetime.
+*
+* There used to be three, and they disagreed: the `system-config` schema said
+* `30d`, `RUNTIME_DEFAULTS['auth.tokenExpiry']` said `7d`, and
+* `AuthManager.signToken` hardcoded `30d` as its own fallback. Because the
+* production signer (`AuthService extends AuthManager`, wired to
+* `ConfigManager`) resolves through `RUNTIME_DEFAULTS` BEFORE it can ever
+* reach the hardcoded fallback, the value actually in force was `7d` while
+* every surface an operator could read advertised `30d`.
+*
+* `30d` is the value the product documents and the one an operator decided on
+* (2026-07-17: the viewer's silent refresh rotates tokens long before expiry,
+* so a long lifetime only covers devices left unopened for weeks). It is
+* declared here once and imported by the schema, by the runtime defaults and
+* by the signer's fallback — a second default that disagrees with the first is
+* the same defect in miniature.
+*/
+var DEFAULT_TOKEN_EXPIRY = "30d";
+/**
+* Runtime defaults -- used by ConfigManager.get() for backward compatibility
+* until Plan B wires all runtime settings to the system_settings SQL table.
+*
+* Moved from @camstack/system/config-schema to @camstack/types so that
+* @camstack/system can reference it without a cross-package kernel import.
+*/
+var RUNTIME_DEFAULTS = {
+	"features.streaming": true,
+	"features.notifications": true,
+	"features.objectDetection": false,
+	"features.remoteAccess": true,
+	"features.agentCluster": false,
+	"features.smartHome": true,
+	"features.recordings": true,
+	"features.backup": true,
+	"features.repl": true,
+	"retention.detectionEventsDays": 30,
+	"retention.audioLevelsDays": 7,
+	"logging.level": "info",
+	"logging.retentionDays": 30,
+	"eventBus.ringBufferSize": 1e4,
+	"storage.provider": "sqlite-storage",
+	"storage.locations": {
+		data: "camstack-data/data",
+		media: "camstack-data/media",
+		recordings: "camstack-data/recordings",
+		cache: "/tmp/camstack-cache",
+		logs: "camstack-data/logs",
+		models: "camstack-data/models"
+	},
+	providers: [],
+	"ffmpeg.hwAccel": "auto",
+	"ffmpeg.threadCount": 0,
+	"auth.tokenExpiry": "30d"
+};
+//#endregion
 //#region src/device/zod-secret.ts
 /**
 * Secret declaration on a Zod config schema (D783).
@@ -5728,6 +5804,11 @@ var BOOT_RECOVERY_BACKOFF_MS = [
 	90 * 6e4
 ];
 //#endregion
+//#region src/utils/hf-url.ts
+function hfModelUrl(repo, path) {
+	return `https://huggingface.co/${repo}/resolve/main/${path}`;
+}
+//#endregion
 //#region src/utils/json-safe.ts
 /**
 * Type-safe JSON parsing helpers.
@@ -5916,4 +5997,4 @@ function sleepCancellable(ms, signal) {
 	});
 }
 //#endregion
-export { AudioStreamPickSchema as $, isSecretRef as $t, deviceCustomAction as A, isAudioChunkFormat as An, PEER_BYTES_CHUNK_BYTES as At, optionalMethod as B, mergeSecretStatePaths as Bt, RawStateResultSchema as C, collectSecretConfigKeys as Cn, MIN_SCRUBBED_LENGTH as Ct, customAction as D, AUDIO_CHUNK_FORMATS as Dn, registerKnownSecret as Dt, DEVICE_CHILDREN_BATCH_MAX as E, schemaDeclaresAnyField as En, knownSecretCount as Et, PROVIDER_PIN_FIELD as F, DATAPLANE_SECRET_HEADER as Ft, readNodePin as G, collectSecretMarkerRefs as Gt, systemMethod as H, secretTreeFromPaths as Ht, event as I, SHARE_VIEW_KINDS as It, ReadinessTimeoutError as J, SECRET_REF_SCHEME as Jt, toNodeId as K, resolveSecretMarkers as Kt, expandCapMethods as L, DisposerChain as Lt, DEFAULT_RUNTIME_STATE_DURABILITY as M, PEER_BYTES_STALL_MS as Mt, DEVICE_SETTINGS_CONTRIBUTION_METHODS as N, PEER_BYTES_TICKET_TTL_MS as Nt, defineCustomActions as O, audioChunkBytesPerSample as On, scrubKnownSecrets as Ot, DEVICE_STATUS_METHOD as P, PeerBytesTicketSchema as Pt, AudioChunkFormatSchema as Q, globalSecretScope as Qt, isDeviceConfigCap as R, BaseAddon as Rt, isZodSecret as S, collectKeychainStoredKeys as Sn, createSecretsAccess as St, viewerUiCapability as T, isSecretConfigField as Tn, forgetKnownSecret as Tt, CAP_NODE_PIN_CONTEXT_KEY as U, secretTreeFromSchema as Ut, resolveCapMount as V, parseSecretStatePath as Vt, nodePin as W, KeychainWriteRefusedError as Wt, readinessKey as X, buildSecretRef as Xt, emitDownForOwnedCaps as Y, arrayItemFieldPath as Yt, scopeKey as Z, formatSecretScope as Zt, createLazyTrpcSource as _, isSecretMarker as _n, makeSourceBrokerId as _t, asJsonArray as a, emitReadiness as an, CamStreamResolutionSchema as at, SECRET_META as b, toSecretFieldView as bn, resolveSecretViewsIn as bt, asString as c, WELL_KNOWN_TAB_MAP as cn, FrameHandleSchema as ct, parseJsonUnknown as d, hydrateSchema as dn, ProfileSlotStatusSchema as dt, normalizeSecretOwner as en, BrokerStatsSchema as et, BOOT_RECOVERY_BACKOFF_MS as f, resolveHydratedFieldValue as fn, StreamSourceEntrySchema$1 as ft, createEventBusSliceSource as g, isSecretFieldView as gn, makeProfileBrokerId as gt, createDeviceProxy as h, isSecretClear as hn, SubscribeAudioChunksResultSchema as ht, asBoolean as i, createEvent as in, CamStreamKindSchema as it, adminUiCapability as j, PEER_BYTES_MAX_OUTSTANDING as jt, describeCustomActions as k, expandAudioChunkToF32le as kn, shortSecretRefHash as kt, parseJsonArray as l, collectHydratedFieldEntries as ln, ProfileRtspEntrySchema as lt, isDeviceScopedCap as m, classifySecretWrite as mn, SubscribeAudioChunksInputSchema as mt, sleepCancellable as n, normalizeNodeId as nn, CAM_PROFILE_ORDER as nt, asJsonObject as o, isEvent as on, CameraStreamSchema as ot, DEVICE_SCOPED_CAPS as p, SECRET_CLEAR as pn, StreamSourceSchema as pt, ReadinessRegistry as q, transformSecretWrite as qt, maskUrlCredentials as r, createDurableState as rn, CamProfileSchema as rt, asNumber as s, WELL_KNOWN_TABS as sn, DecodedAudioChunkSchema as st, sleep as t, parseSecretRef as tn, BrokerStatusSchema as tt, parseJsonObject as u, collectHydratedFieldValues as un, ProfileSlotSchema as ut, createMirrorSource as v, isSecretMarkerLike as vn, parseProfileBrokerId as vt, deviceOpsCapability as w, isKeychainStoredField as wn, clearKnownSecrets as wt, collectZodSecretPaths as x, REDACTED_SECRET as xn, REVALIDATE_AFTER_MS as xt, createSliceHandle as y, makeSecretMarker as yn, selectAssignedProfileSlots as yt, method as z, normalizeAddonInitResult as zt };
+export { ReadinessRegistry as $, transformSecretWrite as $t, viewerUiCapability as A, isKeychainStoredField as An, clearKnownSecrets as At, PROVIDER_PIN_FIELD as B, PeerBytesTicketSchema as Bt, isZodSecret as C, isSecretMarker as Cn, makeSourceBrokerId as Ct, RUNTIME_DEFAULTS as D, REDACTED_SECRET as Dn, REVALIDATE_AFTER_MS as Dt, HF_REPO as E, toSecretFieldView as En, resolveSecretViewsIn as Et, deviceCustomAction as F, expandAudioChunkToF32le as Fn, shortSecretRefHash as Ft, optionalMethod as G, normalizeAddonInitResult as Gt, expandCapMethods as H, SHARE_VIEW_KINDS as Ht, adminUiCapability as I, isAudioChunkFormat as In, PEER_BYTES_CHUNK_BYTES as It, CAP_NODE_PIN_CONTEXT_KEY as J, secretTreeFromPaths as Jt, resolveCapMount as K, mergeSecretStatePaths as Kt, DEFAULT_RUNTIME_STATE_DURABILITY as L, PEER_BYTES_MAX_OUTSTANDING as Lt, customAction as M, schemaDeclaresAnyField as Mn, knownSecretCount as Mt, defineCustomActions as N, AUDIO_CHUNK_FORMATS as Nn, registerKnownSecret as Nt, RawStateResultSchema as O, collectKeychainStoredKeys as On, createSecretsAccess as Ot, describeCustomActions as P, audioChunkBytesPerSample as Pn, scrubKnownSecrets as Pt, MODEL_FORMATS as Q, resolveSecretMarkers as Qt, DEVICE_SETTINGS_CONTRIBUTION_METHODS as R, PEER_BYTES_STALL_MS as Rt, collectZodSecretPaths as S, isSecretFieldView as Sn, makeProfileBrokerId as St, HF_BASE_URL as T, makeSecretMarker as Tn, selectAssignedProfileSlots as Tt, isDeviceConfigCap as U, DisposerChain as Ut, event as V, DATAPLANE_SECRET_HEADER as Vt, method as W, BaseAddon as Wt, readNodePin as X, KeychainWriteRefusedError as Xt, nodePin as Y, secretTreeFromSchema as Yt, toNodeId as Z, collectSecretMarkerRefs as Zt, createEventBusSliceSource as _, hydrateSchema as _n, ProfileSlotStatusSchema as _t, asJsonArray as a, isSecretRef as an, AudioStreamPickSchema as at, createSliceHandle as b, classifySecretWrite as bn, SubscribeAudioChunksInputSchema as bt, asString as c, normalizeNodeId as cn, CAM_PROFILE_ORDER as ct, parseJsonUnknown as d, emitReadiness as dn, CamStreamResolutionSchema as dt, SECRET_REF_SCHEME as en, ReadinessTimeoutError as et, hfModelUrl as f, isEvent as fn, CameraStreamSchema as ft, createDeviceProxy as g, collectHydratedFieldValues as gn, ProfileSlotSchema as gt, isDeviceScopedCap as h, collectHydratedFieldEntries as hn, ProfileRtspEntrySchema as ht, asBoolean as i, globalSecretScope as in, AudioChunkFormatSchema as it, DEVICE_CHILDREN_BATCH_MAX as j, isSecretConfigField as jn, forgetKnownSecret as jt, deviceOpsCapability as k, collectSecretConfigKeys as kn, MIN_SCRUBBED_LENGTH as kt, parseJsonArray as l, createDurableState as ln, CamProfileSchema as lt, DEVICE_SCOPED_CAPS as m, WELL_KNOWN_TAB_MAP as mn, FrameHandleSchema as mt, sleepCancellable as n, buildSecretRef as nn, readinessKey as nt, asJsonObject as o, normalizeSecretOwner as on, BrokerStatsSchema as ot, BOOT_RECOVERY_BACKOFF_MS as p, WELL_KNOWN_TABS as pn, DecodedAudioChunkSchema as pt, systemMethod as q, parseSecretStatePath as qt, maskUrlCredentials as r, formatSecretScope as rn, scopeKey as rt, asNumber as s, parseSecretRef as sn, BrokerStatusSchema as st, sleep as t, arrayItemFieldPath as tn, emitDownForOwnedCaps as tt, parseJsonObject as u, createEvent as un, CamStreamKindSchema as ut, createLazyTrpcSource as v, resolveHydratedFieldValue as vn, StreamSourceEntrySchema$1 as vt, DEFAULT_TOKEN_EXPIRY as w, isSecretMarkerLike as wn, parseProfileBrokerId as wt, SECRET_META as x, isSecretClear as xn, SubscribeAudioChunksResultSchema as xt, createMirrorSource as y, SECRET_CLEAR as yn, StreamSourceSchema as yt, DEVICE_STATUS_METHOD as z, PEER_BYTES_TICKET_TTL_MS as zt };

package/dist/types/model-formats.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The model weight formats a catalog entry can ship. Schema-free on purpose:
+ * `types/models.ts` builds Zod schemas from it, but a runner-closure consumer
+ * (the model downloader in `@camstack/system`) needs only the list and must
+ * reach it through `@camstack/types/addon` without building the cap schema
+ * graph (D28).
+ */
+export declare const MODEL_FORMATS: readonly ['onnx', 'coreml', 'openvino', 'tflite', 'pt', 'gguf'];
+export type ModelFormat = (typeof MODEL_FORMATS)[number];

package/dist/types/models.d.ts

@@ -1,8 +1,10 @@
 import { z } from 'zod';
 import type { ClassMapDefinition, LabelDefinition } from './labels.js';
 import type { PostprocessorType } from './pipeline-step.js';
-export declare const MODEL_FORMATS: readonly ['onnx', 'coreml', 'openvino', 'tflite', 'pt', 'gguf'];
-export type ModelFormat = (typeof MODEL_FORMATS)[number];
+import { MODEL_FORMATS } from './model-formats.js';
+import type { ModelFormat } from './model-formats.js';
+export { MODEL_FORMATS };
+export type { ModelFormat };
 export type ModelOutputFormat = 'yolo' | 'ssd' | 'embedding' | 'classification' | 'ocr' | 'segmentation';
 /**
  * Multi-file format payload.

package/dist/util/owner-only-file.d.ts

@@ -0,0 +1,28 @@
+export declare class OwnerOnlyError extends Error {
+    readonly target: string;
+    constructor(target: string, detail: string);
+}
+/** Everything the Windows branch touches, injectable so a Mac can test it. */
+export interface OwnerOnlyDeps {
+    readonly platform: NodeJS.Platform;
+    readonly exec: (file: string, args: readonly string[]) => void;
+    /** `DOMAIN\\user` or `user` — the principal that keeps access. */
+    readonly principal: () => string;
+    readonly systemRoot: string | undefined;
+}
+/** The icacls argv for one path: no inheritance, owner + SYSTEM only. */
+export declare function icaclsArgs(target: string, principal: string, isDirectory: boolean): readonly string[];
+/** Restrict an existing file to its owner (chmod 0600 / owner+SYSTEM ACL). */
+export declare function restrictFileToOwnerSync(target: string, overrides?: Partial<OwnerOnlyDeps>): void;
+/** Restrict an existing directory to its owner (chmod 0700 / owner+SYSTEM, inherited). */
+export declare function restrictDirToOwnerSync(target: string, overrides?: Partial<OwnerOnlyDeps>): void;
+/** Create `dir` (and parents) readable by its owner only. */
+export declare function mkdirOwnerOnlySync(dir: string, overrides?: Partial<OwnerOnlyDeps>): void;
+/**
+ * Atomically write a secret-bearing file that only its owner can read.
+ *
+ * Order matters: the temp file is created EMPTY, restricted, and only then
+ * given its content, so there is no moment at which the secret exists under a
+ * permissive ACL. The rename carries the (already restricted) ACL with it.
+ */
+export declare function writeOwnerOnlyFileSync(target: string, data: string | Uint8Array, overrides?: Partial<OwnerOnlyDeps>): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/types",
-  "version": "1.2.355",
+  "version": "1.2.357",
   "description": "Shared types, interfaces, and model catalogs for the CamStack detection ecosystem",
   "keywords": [
     "camstack",