@camstack/types 1.2.442 → 1.2.444

package/dist/{sleep-BpwNJ1Su.js → sleep-UXDHn-oJ.js}

@@ -6055,76 +6055,6 @@ var MODEL_FORMATS = [
 	"pt",
 	"gguf"
 ];
-//#endregion
-//#region src/cap-call-context.ts
-/**
-* Per-call node pinning for `ctx.api` capability calls.
-*
-* A capability call normally resolves to its DEFAULT provider — a `singleton`
-* cap resolves to the hub, a device-scoped cap to the device's owning node. To
-* query a SPECIFIC node's provider instead (e.g. a remote agent's own
-* in-process `platform-probe` hardware, which the hub cannot probe), pin the
-* call to that node.
-*
-* The nodeId rides OUT-OF-BAND in the tRPC call context (NOT in the validated
-* method args), so capability method signatures stay `nodeId`-free — node
-* targeting is a property of the CALL, not of the method. The transport lifts
-* it from `op.context` onto the `CapCallInput.nodeId` field (`ipcParentLink`),
-* and the hub parent's `onUnownedCall` passes it to the `CapRouteResolver`,
-* which classifies a pinned agent node as `agent-child-forward`
-* (`$agent-cap-fwd.forward` → the agent's in-process provider).
-*
-* Usage at a call site:
-*
-*   await api.platformProbe.getCapabilities.query(undefined, nodePin(nodeId))
-*/
-/** tRPC `op.context` key carrying a per-call node pin. */
-var CAP_NODE_PIN_CONTEXT_KEY = "__camstackNodePin";
-/**
-* Build the tRPC request options that pin a single capability call to `nodeId`.
-* Pass as the second argument to `.query(input, …)` / `.mutate(input, …)`.
-*
-* ## The id is normalised here, and it has to be
-*
-* A forked addon reads its own node from `ctx.kernel.localNodeId`, and inside a
-* worker that value is a RUNNER id — `hub/export-hap`, not `hub`. Routing
-* compares a pin against real node ids, so such a pin matches nothing and the
-* call fails with `no provider registered for cap "…"`. The local-first
-* resolver already guarded against this (`localNodeId.split('/')[0]`), which
-* made the hazard invisible: unpinned calls worked, and only an explicit pin —
-* the thing you reach for when you specifically need THIS node — silently
-* addressed a node that does not exist.
-*
-* Cost of it being missing: `addon-export-hap` pinned `decoder.getInfo` to its
-* own node to read the host's hardware-decode backend. It never once answered,
-* so every HomeKit egress transcode decoded in SOFTWARE — including 4K H.265 —
-* while D67's whole premise was that the decoder addon is the authority on
-* hardware. The warn said `decoding in SOFTWARE` and read as "this node has no
-* hardware", which was false.
-*
-* Normalising in the ONE constructor fixes every caller at once, which is why
-* it is here and not at the call sites.
-*/
-function nodePin(nodeId) {
-	return { context: { [CAP_NODE_PIN_CONTEXT_KEY]: toNodeId(nodeId) } };
-}
-/**
-* A runner id is `<nodeId>/<addonId>`; a node id has no slash. Taking the head
-* is idempotent, so passing an already-clean id costs nothing.
-*/
-function toNodeId(idOrRunnerId) {
-	const head = idOrRunnerId.split("/")[0];
-	return head === void 0 || head.length === 0 ? idOrRunnerId : head;
-}
-/**
-* Read a per-call node pin out of a tRPC `op.context` (transport side).
-* Returns the pinned nodeId, or `undefined` when no pin is present.
-*/
-function readNodePin(context) {
-	if (context === null || typeof context !== "object") return void 0;
-	const value = Reflect.get(context, CAP_NODE_PIN_CONTEXT_KEY);
-	return typeof value === "string" ? value : void 0;
-}
 zod.z.object({
 	field: zod.z.string().min(1),
 	on: zod.z.literal("advance")
@@ -6146,6 +6076,7 @@ var HISTORY_UNIT_LABELS = {
 	ppm: "ppm",
 	ppb: "ppb",
 	"µg/m³": "µg/m³",
+	L: "L",
 	hPa: "hPa",
 	count: "count",
 	ratio: "ratio",
@@ -6342,6 +6273,141 @@ function isDeviceConfigCap(def) {
 	return def?.deviceConfig !== void 0;
 }
 //#endregion
+//#region src/cap-call-context.ts
+/**
+* Per-call node pinning for `ctx.api` capability calls.
+*
+* A capability call normally resolves to its DEFAULT provider — a `singleton`
+* cap resolves to the hub, a device-scoped cap to the device's owning node. To
+* query a SPECIFIC node's provider instead (e.g. a remote agent's own
+* in-process `platform-probe` hardware, which the hub cannot probe), pin the
+* call to that node.
+*
+* The nodeId rides OUT-OF-BAND in the tRPC call context (NOT in the validated
+* method args), so capability method signatures stay `nodeId`-free — node
+* targeting is a property of the CALL, not of the method. The transport lifts
+* it from `op.context` onto the `CapCallInput.nodeId` field (`ipcParentLink`),
+* and the hub parent's `onUnownedCall` passes it to the `CapRouteResolver`,
+* which classifies a pinned agent node as `agent-child-forward`
+* (`$agent-cap-fwd.forward` → the agent's in-process provider).
+*
+* Usage at a call site:
+*
+*   await api.platformProbe.getCapabilities.query(undefined, nodePin(nodeId))
+*/
+/** tRPC `op.context` key carrying a per-call node pin. */
+var CAP_NODE_PIN_CONTEXT_KEY = "__camstackNodePin";
+/**
+* Build the tRPC request options that pin a single capability call to `nodeId`.
+* Pass as the second argument to `.query(input, …)` / `.mutate(input, …)`.
+*
+* ## The id is normalised here, and it has to be
+*
+* A forked addon reads its own node from `ctx.kernel.localNodeId`, and inside a
+* worker that value is a RUNNER id — `hub/export-hap`, not `hub`. Routing
+* compares a pin against real node ids, so such a pin matches nothing and the
+* call fails with `no provider registered for cap "…"`. The local-first
+* resolver already guarded against this (`localNodeId.split('/')[0]`), which
+* made the hazard invisible: unpinned calls worked, and only an explicit pin —
+* the thing you reach for when you specifically need THIS node — silently
+* addressed a node that does not exist.
+*
+* Cost of it being missing: `addon-export-hap` pinned `decoder.getInfo` to its
+* own node to read the host's hardware-decode backend. It never once answered,
+* so every HomeKit egress transcode decoded in SOFTWARE — including 4K H.265 —
+* while D67's whole premise was that the decoder addon is the authority on
+* hardware. The warn said `decoding in SOFTWARE` and read as "this node has no
+* hardware", which was false.
+*
+* Normalising in the ONE constructor fixes every caller at once, which is why
+* it is here and not at the call sites.
+*/
+function nodePin(nodeId) {
+	return { context: { [CAP_NODE_PIN_CONTEXT_KEY]: toNodeId(nodeId) } };
+}
+/**
+* A runner id is `<nodeId>/<addonId>`; a node id has no slash. Taking the head
+* is idempotent, so passing an already-clean id costs nothing.
+*/
+function toNodeId(idOrRunnerId) {
+	const head = idOrRunnerId.split("/")[0];
+	return head === void 0 || head.length === 0 ? idOrRunnerId : head;
+}
+/**
+* Read a per-call node pin out of a tRPC `op.context` (transport side).
+* Returns the pinned nodeId, or `undefined` when no pin is present.
+*/
+function readNodePin(context) {
+	if (context === null || typeof context !== "object") return void 0;
+	const value = Reflect.get(context, CAP_NODE_PIN_CONTEXT_KEY);
+	return typeof value === "string" ? value : void 0;
+}
+//#endregion
+//#region src/capabilities/addon-pages-source.cap.ts
+/**
+* `addon-pages-source` — collection cap exposing per-provider raw page
+* declarations. Every addon that contributes a UI page registers a
+* provider here. The hub-side singleton aggregator (`addon-pages` cap,
+* see `addon-pages.cap.ts`) walks this collection, stamps versioned
+* `bundleUrl` values, and returns the enriched `AddonPageInfo[]` list
+* that admin-ui consumes.
+*
+* The split exists because the public listing has a different output
+* shape than the per-provider raw declarations, and we want both ends
+* to flow through codegen instead of relying on a hand-written wrapper.
+*/
+var AddonPageDeclarationSchema = zod.z.object({
+	id: zod.z.string(),
+	label: zod.z.string(),
+	icon: zod.z.string(),
+	path: zod.z.string(),
+	/**
+	* Module Federation remote name — must match the `name` field on the
+	* page addon's `federation()` plugin config. Used by admin-ui's
+	* `<AddonPageLoader>` to call `loadRemote('<remoteName>/page')`.
+	* Conventionally `addon_<id>_page` (snake_case; MF names cannot
+	* contain hyphens).
+	*/
+	remoteName: zod.z.string(),
+	/**
+	* Bundle filename inside the addon's `dist/` dir served at
+	* `/api/addon-pages/<addonId>/<bundle>`. With Module Federation this
+	* is always `'remoteEntry.js'`; the value is kept on the metadata so
+	* the static-file route can compute an mtime-based cache-buster URL
+	* without a separate filesystem stat.
+	*/
+	bundle: zod.z.string(),
+	/**
+	* Sidebar section this page docks into. Well-known ids: `'detection'`,
+	* `'cluster'`, `'administration'` — the page renders inside that group.
+	* Any OTHER string creates (or joins) a custom section rendered after
+	* the built-in groups; its label comes from `sectionLabel` (first
+	* declaration wins), falling back to the id. Absent → the legacy
+	* "Addon Pages" group.
+	*/
+	section: zod.z.string().optional(),
+	/** Display label for a CUSTOM `section` id (ignored for well-known ids). */
+	sectionLabel: zod.z.string().optional()
+});
+var addonPagesSourceCapability = {
+	name: "addon-pages-source",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: { 
+	/**
+	* `internal: true` did not gate the mount (see the 2026-08-26 note on
+	* `data-store-provider`) — this was reachable on the AppRouter by ANY
+	* authenticated session at the default `auth: 'protected'`. The only
+	* consumer, the `addon-pages-aggregator` builtin, reads it via
+	* `ctx.capabilities.getCollection('addon-pages-source')` — LOCAL-PROCESS
+	* only, never tRPC (per `ctx.capabilities` seeing only the local
+	* process). The public, enriched listing admin-ui actually consumes is
+	* the separate `addon-pages` cap, unaffected by this change.
+	*/
+listPages: method(zod.z.void(), zod.z.array(AddonPageDeclarationSchema).readonly(), { auth: "admin" }) }
+};
+//#endregion
 //#region src/capabilities/admin-ui.cap.ts
 var StaticDirOutputSchema$1 = zod.z.object({ staticDir: zod.z.string() });
 var VersionOutputSchema$1 = zod.z.object({ version: zod.z.string() });
@@ -6475,6 +6541,29 @@ function withoutCallerStamp(input) {
 */
 var DEVICE_CHILDREN_BATCH_MAX = 256;
 //#endregion
+//#region src/capabilities/pipeline-step-input.ts
+/**
+* The pipeline step-input shape and the run-result bridge, in a module that
+* imports nothing but zod and types.
+*
+* WHY A SEPARATE FILE (addon footprint, D28): both were declared in
+* `pipeline-executor.cap.ts`, whose import evaluates the whole executor schema
+* graph. An addon that only needs these two (the benchmark's `runPipelineTest`
+* action) paid ~130 MB of heap at load. `pipeline-executor.cap.ts` re-exports
+* them, so every existing import keeps working; addon server code takes them
+* from `@camstack/types/addon`.
+*/
+var PipelineStepInputSchema = zod.z.lazy(() => zod.z.object({
+	addonId: zod.z.string(),
+	modelId: zod.z.string().optional(),
+	enabled: zod.z.boolean().default(true),
+	children: zod.z.array(PipelineStepInputSchema).optional(),
+	settings: zod.z.record(zod.z.string(), zod.z.unknown()).optional(),
+	jumpDeviceKey: zod.z.string().optional()
+}));
+/** Typed bridge to the recursive `FrameResult` graph; validation is structural. */
+var PipelineRunResultBridge = zod.z.custom();
+//#endregion
 //#region src/capabilities/viewer-ui.cap.ts
 var StaticDirOutputSchema = zod.z.object({ staticDir: zod.z.string() });
 var VersionOutputSchema = zod.z.object({ version: zod.z.string() });
@@ -6755,6 +6844,7 @@ var CAP_NAMES = Object.freeze([
 	"network-link",
 	"network-quality",
 	"node-certificates",
+	"node-removal-hook",
 	"nodes",
 	"notification-output",
 	"notification-rules",
@@ -6765,6 +6855,7 @@ var CAP_NAMES = Object.freeze([
 	"osd",
 	"osd-manager",
 	"pet-feeder",
+	"pet-fountain",
 	"pipeline-analytics",
 	"pipeline-executor",
 	"pipeline-orchestrator",
@@ -8045,6 +8136,56 @@ var CAP_STATE_LEAVES = Object.freeze({
 			"valueType": "number"
 		}
 	],
+	"pet-fountain": [
+		{
+			"path": "waterLevel",
+			"valueType": "number"
+		},
+		{
+			"path": "waterVolume",
+			"valueType": "number"
+		},
+		{
+			"path": "empty",
+			"valueType": "boolean"
+		},
+		{
+			"path": "pumpRunning",
+			"valueType": "boolean"
+		},
+		{
+			"path": "pumpIntervalEnabled",
+			"valueType": "boolean"
+		},
+		{
+			"path": "pumpOnTime",
+			"valueType": "number"
+		},
+		{
+			"path": "pumpOffTime",
+			"valueType": "number"
+		},
+		{
+			"path": "lastDrink",
+			"valueType": "number"
+		},
+		{
+			"path": "currentHourDrink",
+			"valueType": "number"
+		},
+		{
+			"path": "last24hDrink",
+			"valueType": "number"
+		},
+		{
+			"path": "todayDrink",
+			"valueType": "number"
+		},
+		{
+			"path": "error",
+			"valueType": "string"
+		}
+	],
 	"power-meter": [
 		{
 			"path": "power",
@@ -9270,6 +9411,14 @@ function createDeviceProxy(api, binding, opts) {
 		setVolume: (input) => dispatch("pet-feeder", "petFeeder", "setVolume", "mutation", input),
 		getStatus: (input) => dispatch("pet-feeder", "petFeeder", "getStatus", "query", input)
 	};
+	const petFountainInterface = {
+		setPump: (input) => dispatch("pet-fountain", "petFountain", "setPump", "mutation", input),
+		setPumpInterval: (input) => dispatch("pet-fountain", "petFountain", "setPumpInterval", "mutation", input),
+		setPumpOnMinutes: (input) => dispatch("pet-fountain", "petFountain", "setPumpOnMinutes", "mutation", input),
+		setPumpOffMinutes: (input) => dispatch("pet-fountain", "petFountain", "setPumpOffMinutes", "mutation", input),
+		resetDailyConsumption: (input) => dispatch("pet-fountain", "petFountain", "resetDailyConsumption", "mutation", input),
+		getStatus: (input) => dispatch("pet-fountain", "petFountain", "getStatus", "query", input)
+	};
 	const pipelineAnalyticsInterface = {
 		getActiveTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getActiveTracks", "query", input),
 		getTrack: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getTrack", "query", input),
@@ -9738,6 +9887,7 @@ function createDeviceProxy(api, binding, opts) {
 			notifier: createSliceHandle(stateSource, binding.deviceId, "notifier"),
 			numericSensor: createSliceHandle(stateSource, binding.deviceId, "numeric-sensor"),
 			petFeeder: createSliceHandle(stateSource, binding.deviceId, "pet-feeder"),
+			petFountain: createSliceHandle(stateSource, binding.deviceId, "pet-fountain"),
 			powerMeter: createSliceHandle(stateSource, binding.deviceId, "power-meter"),
 			presence: createSliceHandle(stateSource, binding.deviceId, "presence"),
 			pressureSensor: createSliceHandle(stateSource, binding.deviceId, "pressure-sensor"),
@@ -9828,6 +9978,7 @@ function createDeviceProxy(api, binding, opts) {
 		...bound("numeric-sensor") ? { numericSensor: numericSensorInterface } : {},
 		...bound("osd") ? { osd: osdInterface } : {},
 		...bound("pet-feeder") ? { petFeeder: petFeederInterface } : {},
+		...bound("pet-fountain") ? { petFountain: petFountainInterface } : {},
 		...bound("pipeline-analytics") ? { pipelineAnalytics: pipelineAnalyticsInterface } : {},
 		...bound("power-meter") ? { powerMeter: powerMeterInterface } : {},
 		...bound("presence") ? { presence: presenceInterface } : {},
@@ -9891,7 +10042,7 @@ function createDeviceProxy(api, binding, opts) {
 * can answer "may a rule actuate this?" without importing the schema barrel
 * (~144MB RSS per runner, D28).
 *
-* Coverage: 96 device-scoped capabilities.
+* Coverage: 97 device-scoped capabilities.
 */
 var DEVICE_SCOPED_CAPS = new Set([
 	"accessories",
@@ -9957,6 +10108,7 @@ var DEVICE_SCOPED_CAPS = new Set([
 	"numeric-sensor",
 	"osd",
 	"pet-feeder",
+	"pet-fountain",
 	"pipeline-analytics",
 	"power-meter",
 	"presence",
@@ -10295,6 +10447,12 @@ Object.defineProperty(exports, "AUDIO_CHUNK_FORMATS", {
 		return AUDIO_CHUNK_FORMATS;
 	}
 });
+Object.defineProperty(exports, "AddonPageDeclarationSchema", {
+	enumerable: true,
+	get: function() {
+		return AddonPageDeclarationSchema;
+	}
+});
 Object.defineProperty(exports, "AudioChunkFormatSchema", {
 	enumerable: true,
 	get: function() {
@@ -10601,6 +10759,18 @@ Object.defineProperty(exports, "PeerBytesTicketSchema", {
 		return PeerBytesTicketSchema;
 	}
 });
+Object.defineProperty(exports, "PipelineRunResultBridge", {
+	enumerable: true,
+	get: function() {
+		return PipelineRunResultBridge;
+	}
+});
+Object.defineProperty(exports, "PipelineStepInputSchema", {
+	enumerable: true,
+	get: function() {
+		return PipelineStepInputSchema;
+	}
+});
 Object.defineProperty(exports, "PlaintextSecretError", {
 	enumerable: true,
 	get: function() {
@@ -10919,6 +11089,12 @@ Object.defineProperty(exports, "WELL_KNOWN_TAB_MAP", {
 		return WELL_KNOWN_TAB_MAP;
 	}
 });
+Object.defineProperty(exports, "addonPagesSourceCapability", {
+	enumerable: true,
+	get: function() {
+		return addonPagesSourceCapability;
+	}
+});
 Object.defineProperty(exports, "addonSliceHandleApi", {
 	enumerable: true,
 	get: function() {

package/dist/types/agent-pipeline-settings.d.ts

@@ -66,8 +66,8 @@ export interface AgentPipelineSettings {
      * Placement capabilities (placement-model-design §6) — the per-node record
      * that replaced the four flat orchestrator lists (`enabledNodes`,
      * `enabledDecoderNodes`, `enabledAudioNodes`, `remoteSourcingNodes`). Each
-     * flag is optional; an absent flag inherits the node default (`hub` →
-     * capable, every other node → not). The orchestrator derives its
+     * flag is optional; an absent flag is ON for every node (only an
+     * explicit `false` turns a role off). The orchestrator derives its
      * enabled-node sets from these flags across the cluster.
      */
     readonly detect?: boolean;

package/dist/utils/oauth-landing.d.ts

@@ -12,7 +12,7 @@
  */
 /** The admin-ui route the hub's OAuth completions land on (relative to its mount). */
 export declare const OAUTH_LANDING_PATH = "/sso-complete";
-export declare const OAUTH_LANDING_REASONS: readonly ['access_denied', 'invalid_state', 'invalid_request', 'unknown_broker', 'not_configured', 'exchange_failed', 'no_refresh_token', 'unavailable', 'unknown'];
+export declare const OAUTH_LANDING_REASONS: readonly ['access_denied', 'invalid_state', 'invalid_request', 'unknown_broker', 'not_configured', 'exchange_failed', 'no_authorization_code', 'no_refresh_token', 'unavailable', 'unknown'];
 export type OauthLandingReason = (typeof OAUTH_LANDING_REASONS)[number];
 export declare function isOauthLandingReason(value: unknown): value is OauthLandingReason;
 export interface OauthLandingOutcome {

package/dist/vendor-login-proxy/flow-trace.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Names-only trace of one proxied login request (D955). A sign-in that loses a parameter on
+ * the way (an OAuth extension, a hidden field) is invisible in the page flow; this says WHICH
+ * request still carried it. Everything here is a NAME, a count, a status or a boolean: no
+ * query value, form value, cookie value or attempt id ever leaves this module.
+ */
+/** The most trace lines one login attempt writes; an attempt lives minutes, this is a backstop. */
+export declare const FLOW_TRACE_MAX_LINES = 200;
+export interface FlowTraceInput {
+    readonly attemptId: string;
+    readonly method: string;
+    readonly upstreamHost: string;
+    readonly upstreamPath: string;
+    readonly requestSearch: string;
+    /** The raw urlencoded request body of a form POST, or null. */
+    readonly formBody: string | null;
+    readonly contentType: string | undefined;
+    readonly status: number;
+    readonly location: string | null;
+    readonly setCookies: readonly string[];
+    readonly cookieHeader: string | undefined;
+}
+/** A short stable label for the attempt: enough to group lines, useless as a capability. */
+export declare function attemptLabel(attemptId: string): string;
+/** Distinct parameter names of a `?a=1&b=2` string (or of a urlencoded body), in order. */
+export declare function paramNames(query: string): string[];
+export declare function hasOa2(names: readonly string[]): boolean;
+/** The `meta` of one trace line. Values: never. */
+export declare function flowTraceMeta(input: FlowTraceInput): Record<string, string | number | boolean>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/types",
-  "version": "1.2.442",
+  "version": "1.2.444",
   "description": "Shared types, interfaces, and model catalogs for the CamStack detection ecosystem",
   "keywords": [
     "camstack",