@trillboards/edge-sdk 0.2.24 → 0.2.26

package/dist/ConnectorCameraClient.d.ts

@@ -0,0 +1,79 @@
+import { type HttpPoster } from './AudienceAnalyzeClient';
+import type { CameraFeedConfig } from './config';
+import type { DiscoveredCamera } from './discovery';
+/**
+ * ConnectorCameraClient — registers the feeds this machine found, using THIS
+ * machine's own connector credential, and turns the answer into `cameras[]`.
+ *
+ * This is the consumer of `connector.key` and the producer for
+ * `POST /v2/earner/connectors/cameras`. Without it the unattended path stops one
+ * step short of useful: the machine has an identity, and no feeds, and no device
+ * tokens — so `auto-sense` finds no `cameras[]` and exits through its no-feeds
+ * path while the installer reports success. A human would still have to run the
+ * interactive camera setup, which is the exact step this whole feature removes.
+ *
+ * WHAT IT SENDS, AND WHAT IT DOES NOT. The body carries only a stable
+ * `cameraKey` per feed plus a display name — never the RTSP URL and never the
+ * recorder credentials. Those stay on this machine: the server mints one screen
+ * + device token per `cameraKey`, and the URLs are matched back to the returned
+ * tokens locally, below. That preserves the property the interactive setup
+ * already has and is worth selling — the connection details never leave the
+ * venue on this path.
+ *
+ * The owner is NOT in the body. It comes from the credential server-side.
+ */
+export interface ConnectorCameraClientOptions {
+    apiBaseUrl: string;
+    /** This machine's connector credential (`connector.key`). */
+    connectorKey: string;
+    timeoutMs?: number;
+}
+/** One feed as the server needs to see it — no URL, no credentials. */
+export interface RegisterCameraInput {
+    cameraKey: string;
+    name?: string;
+    brand?: string;
+    latitude?: number;
+    longitude?: number;
+}
+export interface RegisteredCamera {
+    screenId: string;
+    deviceId: string;
+    deviceToken: string;
+    cameraKey: string;
+    name: string;
+    isReRegistration?: boolean;
+}
+export interface RegisterResult {
+    ok: boolean;
+    cameras?: RegisteredCamera[];
+    error?: string;
+    /** Same taxonomy as EnrollClient — see there for why it matters. */
+    kind?: 'auth' | 'network' | 'server' | 'invalid';
+}
+/** The server caps a single registration call; mirrors MAX_CAMERAS_PER_CALL. */
+export declare const MAX_CAMERAS_PER_CALL = 64;
+export declare class ConnectorCameraClient {
+    private readonly endpoint;
+    private readonly connectorKey;
+    private readonly timeoutMs;
+    private readonly poster;
+    constructor(options: ConnectorCameraClientOptions, poster?: HttpPoster);
+    registerCameras(cameras: RegisterCameraInput[]): Promise<RegisterResult>;
+}
+/**
+ * Join the server's answer back to the LOCAL stream URLs, producing the
+ * `cameras[]` the connector runs on.
+ *
+ * Matching is by `cameraKey` and ONLY by `cameraKey` — never by name and never
+ * by array position. Names are truncated server-side (200 chars) so two feeds
+ * differing only past that point would collapse onto one screen, and the server
+ * is free to return fewer rows than were sent. `cameraKey` is the deterministic
+ * idempotency key both sides already agree on.
+ *
+ * A returned camera with no local match is DROPPED rather than guessed at: a
+ * feed configured with the wrong URL would sense the wrong room, which is worse
+ * than a feed that is absent and visibly missing from the camera board.
+ */
+export declare function buildCameraFeeds(registered: RegisteredCamera[], discovered: DiscoveredCamera[]): CameraFeedConfig[];
+//# sourceMappingURL=ConnectorCameraClient.d.ts.map

package/dist/ConnectorCameraClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectorCameraClient.d.ts","sourceRoot":"","sources":["../src/ConnectorCameraClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,uEAAuE;AACvE,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;CAClD;AAED,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;gBAExB,OAAO,EAAE,4BAA4B,EAAE,MAAM,GAAE,UAA8B;IAUnF,eAAe,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;CAmE/E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,gBAAgB,EAAE,EAC9B,UAAU,EAAE,gBAAgB,EAAE,GAC7B,gBAAgB,EAAE,CAiBpB"}

package/dist/ConnectorCameraClient.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectorCameraClient = exports.MAX_CAMERAS_PER_CALL = void 0;
+exports.buildCameraFeeds = buildCameraFeeds;
+const AudienceAnalyzeClient_1 = require("./AudienceAnalyzeClient");
+/** The server caps a single registration call; mirrors MAX_CAMERAS_PER_CALL. */
+exports.MAX_CAMERAS_PER_CALL = 64;
+class ConnectorCameraClient {
+    constructor(options, poster = AudienceAnalyzeClient_1.defaultHttpPoster) {
+        if (!options?.apiBaseUrl)
+            throw new Error('ConnectorCameraClient requires an apiBaseUrl');
+        if (!options?.connectorKey)
+            throw new Error('ConnectorCameraClient requires a connectorKey');
+        const base = options.apiBaseUrl.replace(/\/+$/, '');
+        this.endpoint = `${base}/v2/earner/connectors/cameras`;
+        this.connectorKey = options.connectorKey;
+        this.timeoutMs = options.timeoutMs ?? 60000;
+        this.poster = poster;
+    }
+    async registerCameras(cameras) {
+        if (!Array.isArray(cameras) || cameras.length === 0) {
+            return { ok: false, error: 'registerCameras() requires at least one camera', kind: 'invalid' };
+        }
+        if (cameras.length > exports.MAX_CAMERAS_PER_CALL) {
+            return {
+                ok: false,
+                error: `registerCameras() accepts at most ${exports.MAX_CAMERAS_PER_CALL} cameras per call`,
+                kind: 'invalid',
+            };
+        }
+        let response;
+        try {
+            response = await this.poster(this.endpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    Accept: 'application/json',
+                    Authorization: `Bearer ${this.connectorKey}`,
+                },
+                timeoutMs: this.timeoutMs,
+            }, JSON.stringify({ cameras }));
+        }
+        catch (err) {
+            return {
+                ok: false,
+                error: `camera registration failed: ${err?.message ?? 'unknown error'}`,
+                kind: 'network',
+            };
+        }
+        let parsed = null;
+        try {
+            parsed = JSON.parse(response.body);
+        }
+        catch {
+            parsed = null;
+        }
+        const code = response.statusCode;
+        if (code < 200 || code >= 300) {
+            const kind = code === 401 || code === 403 ? 'auth' : code === 400 ? 'invalid' : 'server';
+            return {
+                ok: false,
+                error: parsed?.error || `camera registration failed (HTTP ${code})`,
+                kind,
+            };
+        }
+        const list = Array.isArray(parsed?.cameras) ? parsed.cameras : [];
+        // A 2xx that carries no tokens is a failure, not an empty success — treating
+        // it as success would write a `cameras[]` with no credentials and the defect
+        // would surface much later as a feed that never posts.
+        if (list.length === 0 || list.some((c) => !c?.deviceToken || !c?.screenId)) {
+            return {
+                ok: false,
+                error: 'registration response did not contain device tokens for every camera',
+                kind: 'server',
+            };
+        }
+        return { ok: true, cameras: list };
+    }
+}
+exports.ConnectorCameraClient = ConnectorCameraClient;
+/**
+ * Join the server's answer back to the LOCAL stream URLs, producing the
+ * `cameras[]` the connector runs on.
+ *
+ * Matching is by `cameraKey` and ONLY by `cameraKey` — never by name and never
+ * by array position. Names are truncated server-side (200 chars) so two feeds
+ * differing only past that point would collapse onto one screen, and the server
+ * is free to return fewer rows than were sent. `cameraKey` is the deterministic
+ * idempotency key both sides already agree on.
+ *
+ * A returned camera with no local match is DROPPED rather than guessed at: a
+ * feed configured with the wrong URL would sense the wrong room, which is worse
+ * than a feed that is absent and visibly missing from the camera board.
+ */
+function buildCameraFeeds(registered, discovered) {
+    const byKey = new Map(discovered.map((d) => [d.cameraKey, d]));
+    const feeds = [];
+    for (const cam of registered) {
+        const local = byKey.get(cam.cameraKey);
+        if (!local?.rtspUrl)
+            continue;
+        feeds.push({
+            name: cam.name || local.name,
+            screenId: cam.screenId,
+            deviceToken: cam.deviceToken,
+            rtspUrl: local.rtspUrl,
+            sourceType: local.source === 'channel-range' ? 'recorder' : 'direct_url',
+            channelKey: cam.cameraKey,
+            transport: 'tcp',
+        });
+    }
+    return feeds;
+}
+//# sourceMappingURL=ConnectorCameraClient.js.map

package/dist/ConnectorCameraClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectorCameraClient.js","sourceRoot":"","sources":["../src/ConnectorCameraClient.ts"],"names":[],"mappings":";;;AAiKA,4CAoBC;AArLD,mEAA6E;AA2D7E,gFAAgF;AACnE,QAAA,oBAAoB,GAAG,EAAE,CAAC;AAEvC,MAAa,qBAAqB;IAMhC,YAAY,OAAqC,EAAE,SAAqB,yCAAiB;QACvF,IAAI,CAAC,OAAO,EAAE,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,EAAE,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,GAAG,IAAI,+BAA+B,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAM,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAA8B;QAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,4BAAoB,EAAE,CAAC;YAC1C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,qCAAqC,4BAAoB,mBAAmB;gBACnF,IAAI,EAAE,SAAS;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,QAA8C,CAAC;QACnD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAC1B,IAAI,CAAC,QAAQ,EACb;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,IAAI,CAAC,YAAY,EAAE;iBAC7C;gBACD,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,EACD,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,+BAAgC,GAAa,EAAE,OAAO,IAAI,eAAe,EAAE;gBAClF,IAAI,EAAE,SAAS;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,GAAmC,IAAI,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAA4B,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC;QACjC,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAC9B,MAAM,IAAI,GACR,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC9E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAG,MAAM,EAAE,KAAgB,IAAI,oCAAoC,IAAI,GAAG;gBAC/E,IAAI;aACL,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAE,MAAO,CAAC,OAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,6EAA6E;QAC7E,6EAA6E;QAC7E,uDAAuD;QACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC3E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,sEAAsE;gBAC7E,IAAI,EAAE,QAAQ;aACf,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;CACF;AAnFD,sDAmFC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,gBAAgB,CAC9B,UAA8B,EAC9B,UAA8B;IAE9B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,OAAO;YAAE,SAAS;QAC9B,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI;YAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY;YACxE,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/EdgeAgent.js

@@ -44,7 +44,7 @@ const edge_ads_1 = require("@trillboards/edge-ads");
 const CommandRouter_1 = require("./CommandRouter");
 const config_1 = require("./config");
 const dataDir_1 = require("./dataDir");
-const SDK_VERSION = '0.2.24';
+const SDK_VERSION = '0.2.26';
 class EdgeAgent extends events_1.EventEmitter {
     constructor(config, deps) {
         super();

package/dist/EnrollClient.d.ts

@@ -0,0 +1,81 @@
+import { type HttpPoster } from './AudienceAnalyzeClient';
+/**
+ * EnrollClient — UNATTENDED first-boot provisioning.
+ *
+ * Exchanges a FLEET enrollment credential (issued once in the portal, shipped
+ * inside the MDM/Intune/SCCM package) for THIS MACHINE's own connector
+ * credential, via `POST {apiBaseUrl}/v2/earner/connectors/enroll`.
+ *
+ * WHY THIS EXISTS. Every other path to a working connector needs a human at the
+ * machine: `pair --code` needs an 8-character claim code typed in, and `setup`
+ * needs a code read off this screen and typed into a browser on another. Neither
+ * can be automated, so before this there was no way to deploy to N machines.
+ *
+ * WHAT COMES BACK, AND WHAT DOES NOT. The response carries a `connectorKey`
+ * scoped to camera registration for one account — NOT the fleet credential, and
+ * NOT any device token. Device tokens are still minted per camera feed, later,
+ * when the cameras this machine finds are registered. That split is deliberate:
+ * the credential that ends up sitting on 200 store PCs must not be able to
+ * enroll a 201st machine.
+ *
+ * THE FLEET CREDENTIAL IS CONSUMED, NOT KEPT. The caller writes `connectorKey`
+ * into the config and DELETES the enrollment file — see `runEnroll` in cli.ts.
+ * A bootstrap credential that outlives its bootstrap is just a credential.
+ *
+ * Auth is `Authorization: Bearer <enrollment token>` — the same platform-key
+ * header the Partner API and the CTV SDK use. Unlike `PairClient`, this request
+ * IS authenticated; unlike `AudienceAnalyzeClient`, it carries no device token,
+ * because at first boot this machine has no device identity yet. That is the
+ * whole point of the exchange.
+ *
+ * Uses the same built-in-http poster as its siblings (no extra dep → survives
+ * bundling; trivially mockable in tests).
+ */
+export interface EnrollClientOptions {
+    /** Base URL, e.g. https://api.trillboards.com (no trailing slash needed). */
+    apiBaseUrl: string;
+    /** Request timeout in ms. Default: 30000. */
+    timeoutMs?: number;
+}
+export interface EnrollRequest {
+    /** The fleet enrollment credential from the MDM package. */
+    enrollmentToken: string;
+    /** This machine's stable fingerprint — `hostFingerprint()` in cli.ts. */
+    machineId: string;
+    /** Free-text install label, e.g. "Store 0417". Optional. */
+    siteLabel?: string;
+    hostname?: string;
+    platform?: string;
+    connectorVersion?: string;
+}
+export interface EnrollResult {
+    ok: boolean;
+    /** Present only when ok. */
+    connectorId?: string;
+    connectorKey?: string;
+    siteLabel?: string | null;
+    reEnrollment?: boolean;
+    remainingEnrollments?: number | null;
+    error?: string;
+    /**
+     * Classification, so the installer wrapper can tell an operator-fixable
+     * problem from a wait-and-retry one WITHOUT parsing prose:
+     *
+     *   'auth'    the credential is wrong, expired, revoked or exhausted. A human
+     *             must issue a new one — retrying forever cannot help, and a
+     *             connector that retries a dead credential every 60s across 200
+     *             stores is a self-inflicted DDoS.
+     *   'network' unreachable / timed out. Retry.
+     *   'server'  5xx or an unparseable body. Retry.
+     *   'invalid' this machine sent something malformed. A bug, not a retry.
+     */
+    kind?: 'auth' | 'network' | 'server' | 'invalid';
+}
+export declare class EnrollClient {
+    private readonly endpoint;
+    private readonly timeoutMs;
+    private readonly poster;
+    constructor(options: EnrollClientOptions, poster?: HttpPoster);
+    enroll(req: EnrollRequest): Promise<EnrollResult>;
+}
+//# sourceMappingURL=EnrollClient.d.ts.map

package/dist/EnrollClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnrollClient.d.ts","sourceRoot":"","sources":["../src/EnrollClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;;;OAWG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;CAClD;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;gBAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,GAAE,UAA8B;IAU1E,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;CAqFxD"}

package/dist/EnrollClient.js

@@ -0,0 +1,97 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnrollClient = void 0;
+const AudienceAnalyzeClient_1 = require("./AudienceAnalyzeClient");
+class EnrollClient {
+    constructor(options, poster = AudienceAnalyzeClient_1.defaultHttpPoster) {
+        if (!options?.apiBaseUrl) {
+            throw new Error('EnrollClient requires an apiBaseUrl');
+        }
+        const base = options.apiBaseUrl.replace(/\/+$/, '');
+        this.endpoint = `${base}/v2/earner/connectors/enroll`;
+        this.timeoutMs = options.timeoutMs ?? 30000;
+        this.poster = poster;
+    }
+    async enroll(req) {
+        const token = (req?.enrollmentToken ?? '').trim();
+        if (!token) {
+            return { ok: false, error: 'enroll() requires a non-empty enrollmentToken', kind: 'invalid' };
+        }
+        if (!req?.machineId) {
+            return { ok: false, error: 'enroll() requires a machineId', kind: 'invalid' };
+        }
+        const body = { machineId: req.machineId };
+        if (req.siteLabel)
+            body.siteLabel = req.siteLabel;
+        if (req.hostname)
+            body.hostname = req.hostname;
+        if (req.platform)
+            body.platform = req.platform;
+        if (req.connectorVersion)
+            body.connectorVersion = req.connectorVersion;
+        let response;
+        try {
+            response = await this.poster(this.endpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    Accept: 'application/json',
+                    Authorization: `Bearer ${token}`,
+                },
+                timeoutMs: this.timeoutMs,
+            }, JSON.stringify(body));
+        }
+        catch (err) {
+            return {
+                ok: false,
+                error: `enrollment request failed: ${err?.message ?? 'unknown error'}`,
+                kind: 'network',
+            };
+        }
+        let parsed = null;
+        try {
+            parsed = JSON.parse(response.body);
+        }
+        catch {
+            parsed = null;
+        }
+        const code = response.statusCode;
+        if (code < 200 || code >= 300) {
+            // 401/403 is terminal: the credential is wrong, spent, expired or revoked.
+            // The server deliberately does not say WHICH — see consumeKeyUse — so the
+            // connector cannot tell either, and must not retry as if it could.
+            const kind = code === 401 || code === 403
+                ? 'auth'
+                : code === 400
+                    ? 'invalid'
+                    : 'server';
+            const message = parsed?.error
+                || parsed?.message
+                || `enrollment failed (HTTP ${code})`;
+            return { ok: false, error: message, kind };
+        }
+        const connectorKey = typeof parsed?.connectorKey === 'string' ? parsed.connectorKey : '';
+        const connectorId = typeof parsed?.connectorId === 'string' ? parsed.connectorId : '';
+        if (!connectorKey || !connectorId) {
+            // A 2xx that carries no credential is the ingestion-endpoint trap in
+            // reverse: treating it as success would leave a "provisioned" machine with
+            // nothing to authenticate with, and the failure would only surface much
+            // later as a camera that never registers.
+            return {
+                ok: false,
+                error: 'enrollment response did not contain a connector credential',
+                kind: 'server',
+            };
+        }
+        return {
+            ok: true,
+            connectorId,
+            connectorKey,
+            siteLabel: parsed?.siteLabel ?? null,
+            reEnrollment: parsed?.reEnrollment === true,
+            remainingEnrollments: typeof parsed?.remainingEnrollments === 'number' ? parsed.remainingEnrollments : null,
+        };
+    }
+}
+exports.EnrollClient = EnrollClient;
+//# sourceMappingURL=EnrollClient.js.map

package/dist/EnrollClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnrollClient.js","sourceRoot":"","sources":["../src/EnrollClient.ts"],"names":[],"mappings":";;;AAAA,mEAA6E;AA8E7E,MAAa,YAAY;IAKvB,YAAY,OAA4B,EAAE,SAAqB,yCAAiB;QAC9E,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,GAAG,IAAI,8BAA8B,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAM,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAkB;QAC7B,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAChF,CAAC;QAED,MAAM,IAAI,GAA2B,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAClE,IAAI,GAAG,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAClD,IAAI,GAAG,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC/C,IAAI,GAAG,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC/C,IAAI,GAAG,CAAC,gBAAgB;YAAE,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAEvE,IAAI,QAA8C,CAAC;QACnD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAC1B,IAAI,CAAC,QAAQ,EACb;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;gBACD,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,EACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,8BAA+B,GAAa,EAAE,OAAO,IAAI,eAAe,EAAE;gBACjF,IAAI,EAAE,SAAS;aAChB,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,GAAmC,IAAI,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAA4B,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC;QACjC,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;YAC9B,2EAA2E;YAC3E,0EAA0E;YAC1E,mEAAmE;YACnE,MAAM,IAAI,GAAyB,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;gBAC7D,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,IAAI,KAAK,GAAG;oBACZ,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,QAAQ,CAAC;YACf,MAAM,OAAO,GAAI,MAAM,EAAE,KAAgB;mBACnC,MAAM,EAAE,OAAkB;mBAC3B,2BAA2B,IAAI,GAAG,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,YAAY,GAAG,OAAO,MAAM,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,WAAW,GAAG,OAAO,MAAM,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,qEAAqE;YACrE,2EAA2E;YAC3E,wEAAwE;YACxE,0CAA0C;YAC1C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,4DAA4D;gBACnE,IAAI,EAAE,QAAQ;aACf,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,WAAW;YACX,YAAY;YACZ,SAAS,EAAG,MAAM,EAAE,SAAoB,IAAI,IAAI;YAChD,YAAY,EAAE,MAAM,EAAE,YAAY,KAAK,IAAI;YAC3C,oBAAoB,EAClB,OAAO,MAAM,EAAE,oBAAoB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI;SACxF,CAAC;IACJ,CAAC;CACF;AApGD,oCAoGC"}

package/dist/SetupSessionClient.d.ts

@@ -27,6 +27,8 @@ export interface SetupCommand {
     port?: number;
     brandHint?: string;
     channelHint?: number;
+    /** Operator-typed RTSP stream path, tried first in the brand-candidate walk. */
+    pathHint?: string;
     credentials?: {
         username: string;
         password: string;

package/dist/SetupSessionClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SetupSessionClient.d.ts","sourceRoot":"","sources":["../src/SetupSessionClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE;QACV,IAAI,EAAE,6BAA6B,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,IAAI,CAAC;IACT,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB;;;;;WAKG;QACH,YAAY,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAChE,YAAY,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAClE,OAAO,EAAE,KAAK,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,EAAE,MAAM,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC;YACpB,UAAU,EAAE,MAAM,CAAC;YACnB,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,UAAU,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;YACvC,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,SAAS,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;SAC3B,CAAC,CAAC;KACJ,GAAG,IAAI,CAAC;CACV;AAED,qBAAa,wBAAyB,SAAQ,KAAK;;CAIlD;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,aAAa,CAAuB;gBAG1C,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EACjF,MAAM,CAAC,EAAE,UAAU;IAQrB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,WAAW;YAQL,IAAI;IA+BlB,+CAA+C;IACzC,KAAK,CAAC,IAAI,GAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAgBrG,kDAAkD;IAClD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAKhD,cAAc,IAAI,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAIvG,IAAI,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAUlC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,gBAAgB,CAAC,OAAO,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzF,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3E"}
+{"version":3,"file":"SetupSessionClient.d.ts","sourceRoot":"","sources":["../src/SetupSessionClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE;QACV,IAAI,EAAE,6BAA6B,CAAC;QACpC,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,IAAI,CAAC;IACT,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE;QACN,UAAU,EAAE,MAAM,CAAC;QACnB;;;;;WAKG;QACH,YAAY,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAChE,YAAY,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,kBAAkB,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAClE,OAAO,EAAE,KAAK,CAAC;YACb,IAAI,EAAE,MAAM,CAAC;YACb,QAAQ,EAAE,MAAM,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC;YACpB,UAAU,EAAE,MAAM,CAAC;YACnB,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,UAAU,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;YACvC,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,SAAS,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;SAC3B,CAAC,CAAC;KACJ,GAAG,IAAI,CAAC;CACV;AAED,qBAAa,wBAAyB,SAAQ,KAAK;;CAIlD;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,aAAa,CAAuB;gBAG1C,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EACjF,MAAM,CAAC,EAAE,UAAU;IAQrB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,WAAW;YAQL,IAAI;IA+BlB,+CAA+C;IACzC,KAAK,CAAC,IAAI,GAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAgBrG,kDAAkD;IAClD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI;IAKhD,cAAc,IAAI,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAIvG,IAAI,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAUlC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,gBAAgB,CAAC,OAAO,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzF,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3E"}

package/dist/SetupSessionClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"SetupSessionClient.js","sourceRoot":"","sources":["../src/SetupSessionClient.ts"],"names":[],"mappings":";;;AAAA,mEAA6E;AAsE7E,MAAa,wBAAyB,SAAQ,KAAK;IACjD;QACE,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACnE,CAAC;CACF;AAJD,4DAIC;AAED,MAAa,kBAAkB;IAQ7B,YACE,OAAiF,EACjF,MAAmB;QALb,cAAS,GAAkB,IAAI,CAAC;QAChC,kBAAa,GAAkB,IAAI,CAAC;QAM1C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAM,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,yCAAiB,CAAC;IAC5C,CAAC;IAEO,GAAG,CAAC,IAAY;QACtB,OAAO,GAAG,IAAI,CAAC,UAAU,4BAA4B,IAAI,EAAE,CAAC;IAC9D,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACzF,OAAO;YACL,iBAAiB,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE;YAC5D,yBAAyB,EAAE,IAAI,CAAC,WAAW;SAC5C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,MAAsB,EACtB,IAAY,EACZ,IAAa,EACb,EAAE,MAAM,GAAG,IAAI,KAA2B,EAAE;QAE5C,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvE,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACpE,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EACd,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC9C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC;QACF,IAAI,MAAM,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAChE,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,iBAAiB,GAAG,CAAC,UAAU,MAAO,MAAM,CAAC,KAAgB,IAAK,MAAM,CAAC,OAAkB,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACrI,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,KAAK,CAAC,OAAyD,EAAE;QACrE,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAC1B,MAAM,EACN,OAAO,EACP;YACE,iBAAiB,EAAE,IAAI,CAAC,WAAW;YACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;SAC5C,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAyD,CAAC;QAC3D,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,kDAAkD;IAClD,MAAM,CAAC,SAAiB,EAAE,aAAqB;QAC7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAU,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO;YACtB,UAAU,EAAG,GAAG,CAAC,UAA8C,IAAI,IAAI;YACvE,OAAO,EAAG,GAAG,CAAC,OAAwC,IAAI,IAAI;YAC9D,MAAM,EAAG,GAAG,CAAC,MAAsC,IAAI,IAAI;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAe;QAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAwD;QAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAkB,EAAE,SAAkB;QACxD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;CACF;AAjHD,gDAiHC"}
+{"version":3,"file":"SetupSessionClient.js","sourceRoot":"","sources":["../src/SetupSessionClient.ts"],"names":[],"mappings":";;;AAAA,mEAA6E;AAwE7E,MAAa,wBAAyB,SAAQ,KAAK;IACjD;QACE,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACnE,CAAC;CACF;AAJD,4DAIC;AAED,MAAa,kBAAkB;IAQ7B,YACE,OAAiF,EACjF,MAAmB;QALb,cAAS,GAAkB,IAAI,CAAC;QAChC,kBAAa,GAAkB,IAAI,CAAC;QAM1C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAM,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,yCAAiB,CAAC;IAC5C,CAAC;IAEO,GAAG,CAAC,IAAY;QACtB,OAAO,GAAG,IAAI,CAAC,UAAU,4BAA4B,IAAI,EAAE,CAAC;IAC9D,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACzF,OAAO;YACL,iBAAiB,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE;YAC5D,yBAAyB,EAAE,IAAI,CAAC,WAAW;SAC5C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,MAAsB,EACtB,IAAY,EACZ,IAAa,EACb,EAAE,MAAM,GAAG,IAAI,KAA2B,EAAE;QAE5C,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvE,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACpE,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EACd,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC9C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC;QACF,IAAI,MAAM,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAChE,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,iBAAiB,GAAG,CAAC,UAAU,MAAO,MAAM,CAAC,KAAgB,IAAK,MAAM,CAAC,OAAkB,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACrI,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,KAAK,CAAC,OAAyD,EAAE;QACrE,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAC1B,MAAM,EACN,OAAO,EACP;YACE,iBAAiB,EAAE,IAAI,CAAC,WAAW;YACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;SAC5C,EACD,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAyD,CAAC;QAC3D,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,kDAAkD;IAClD,MAAM,CAAC,SAAiB,EAAE,aAAqB;QAC7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAU,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO;YACtB,UAAU,EAAG,GAAG,CAAC,UAA8C,IAAI,IAAI;YACvE,OAAO,EAAG,GAAG,CAAC,OAAwC,IAAI,IAAI;YAC9D,MAAM,EAAG,GAAG,CAAC,MAAsC,IAAI,IAAI;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAe;QAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAwD;QAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAkB,EAAE,SAAkB;QACxD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;CACF;AAjHD,gDAiHC"}

package/dist/cli.d.ts

@@ -26,4 +26,53 @@ export declare function configWritePermissionMessage(resolvedConfigPath: string)
 export declare function writePairedConfig(resolvedConfigPath: string, serialized: string, writeFile?: (p: string, data: string, opts: {
     mode: number;
 }) => void): void;
+/** Show a credential's SHAPE without showing the credential. */
+export declare function maskConnectorKey(key: string | undefined | null): string;
+/**
+ * Read the enrollment token for an unattended install, in precedence order.
+ *
+ * 1. `--enrollment-token <value>` — for a scripted/manual run.
+ * 2. `TRILLBOARDS_ENROLLMENT_TOKEN` — the Docker/systemd path.
+ * 3. `--enrollment-file <path>` / the default bootstrap file next to the config
+ *    — what the Windows installer writes from `/ENROLLMENT_TOKEN=`.
+ *
+ * The FILE is the preferred form for MDM and the reason this function exists:
+ * an argument shows up in the process table and an env var is inherited by every
+ * child process, while a file can be read once and DELETED. That deletion is not
+ * hygiene, it is the design — the fleet credential must not outlive the
+ * bootstrap, or every store PC keeps something that can enroll more machines.
+ */
+export declare function readEnrollmentToken(args: string[], configPath: string, env?: NodeJS.ProcessEnv, readFile?: (p: string) => string, exists?: (p: string) => boolean): {
+    token: string | null;
+    source: 'flag' | 'env' | 'file' | null;
+    filePath: string | null;
+};
+/**
+ * UNATTENDED first-boot provisioning — the MDM/Intune/SCCM path.
+ *
+ *   trillboards-edge enroll [--enrollment-token T | --enrollment-file P]
+ *                           [--site "Store 0417"] [--config PATH] [--api-base URL]
+ *
+ * Exchanges the FLEET enrollment credential shipped in the deployment package
+ * for THIS MACHINE's own connector credential and writes it to the config. No
+ * human touches the machine, which is the entire point: `pair` needs a code
+ * typed in and `setup` needs a code read off the screen, so neither can be
+ * automated across N stores.
+ *
+ * IDEMPOTENT BY DESIGN. Re-running on an already-enrolled machine is safe and
+ * FREE — the server keys on `machineId` and does not spend another use of the
+ * bounded fleet credential. MDM re-pushes packages; if a re-push cost a use, a
+ * 200-use credential would die partway through a 200-store rollout.
+ *
+ * ON SUCCESS THE ENROLLMENT FILE IS DELETED. See readEnrollmentToken.
+ *
+ * Exit codes (the install wrappers branch on these — keep stable, and note they
+ * mirror `pair`'s so a wrapper can treat the two paths alike):
+ *   0  enrolled (or already enrolled), config written
+ *   1  the credential was rejected — wrong, expired, revoked or exhausted. A
+ *      human must issue a new one; retrying cannot help.
+ *   4  no enrollment token was supplied at all (not an unattended install)
+ *   6  network/server failure — the credential is UNSPENT. Retry later.
+ */
+export declare function runEnroll(args: string[]): Promise<void>;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAkcA;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAKvD;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAW/E;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,kBAAkB,EAAE,MAAM,EAC1B,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,KAAK,IAC/B,GAChC,IAAI,CAWN"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAscA;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAKvD;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAW/E;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,kBAAkB,EAAE,MAAM,EAC1B,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,KAAK,IAC/B,GAChC,IAAI,CAWN;AAUD,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CASvE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAA2C,EACpE,MAAM,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAiC,GACvD;IAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAyB3F;AAgGD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA+K7D"}