@trillboards/edge-sdk 0.2.3 → 0.2.6

package/dist/modelIntegrity.js

@@ -0,0 +1,165 @@
+"use strict";
+/**
+ * Is this file actually an ONNX model?
+ *
+ * THE FAILURE THIS PREVENTS
+ * -------------------------------------------------------------------------
+ * `models.trillboards.com` was never provisioned. The `trillboards.com` zone
+ * has no `models` record, so the name is caught by the `*.trillboards.com`
+ * wildcard A-alias and answered by the application ALB, which returns the
+ * marketing SPA's `index.html` — HTTP **200**, `content-type: text/html`,
+ * 2490 bytes — for every path under it.
+ *
+ * Every consumer of that URL treated 200 as success and, at most, checked a
+ * SIZE FLOOR:
+ *
+ *   deploy/docker/Dockerfile.{cpu,cuda,openvino}  `if (size < 1000) reject`
+ *   scripts/download-models.sh                    `curl -f` (does not fail on 200)
+ *   src/cli.ts / src/init.ts                      statusCode !== 200 only
+ *   src/diagnose.ts                               `size === 0` only
+ *
+ * 2490 > 1000, so every one of them accepted a web page as a model, wrote it
+ * to `blazeface.onnx`, and reported success — `download-models` printed
+ * `[OK] blazeface.onnx (0.0 MB)` and `diagnose` reported `ONNX Models: pass`.
+ * At runtime onnxruntime then throws `Protobuf parsing failed`, the camera
+ * subsystem reports ERROR, and the operator has been told everything is fine.
+ *
+ * A size floor cannot distinguish a model from a web page and never will. The
+ * check has to be on the CONTENT.
+ *
+ * WHAT IS CHECKED
+ * -------------------------------------------------------------------------
+ * An ONNX file is a serialized `ModelProto`. Protobuf encodes field 1
+ * (`ir_version`, a varint) as tag byte `0x08`, so every real ONNX model begins
+ * with `0x08`. HTML begins with `<` (0x3C). The two are decisive and cheap.
+ *
+ * Deliberately reports WHAT it found rather than a bare "invalid": an operator
+ * who is told "this is an HTML page, the model host is serving a web page" can
+ * act, where "invalid model" sends them looking at their disk.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyModelBytes = classifyModelBytes;
+exports.inspectModelFile = inspectModelFile;
+exports.assertOnnxModel = assertOnnxModel;
+const fs = __importStar(require("fs"));
+/** Protobuf tag for `ModelProto.ir_version` (field 1, varint) — every ONNX file starts here. */
+const ONNX_FIRST_BYTE = 0x08;
+/**
+ * Smallest plausible ONNX model. Not a substitute for the magic-byte check —
+ * it only catches a truncated write that happens to start correctly.
+ */
+const MIN_MODEL_BYTES = 1024;
+/** Classify a model file's leading bytes. Pure — takes the buffer, touches no disk. */
+function classifyModelBytes(buf, totalBytes) {
+    if (totalBytes === 0) {
+        return { valid: false, detected: 'empty', bytes: 0, reason: 'file is empty' };
+    }
+    // Check HTML BEFORE the size floor: an HTML error page is the failure we are
+    // actually here for, and saying "too small" about a web page sends the reader
+    // to the wrong place.
+    const head = buf.subarray(0, Math.min(buf.length, 512)).toString('utf8').trimStart().toLowerCase();
+    if (head.startsWith('<!doctype') || head.startsWith('<html') || head.startsWith('<?xml')) {
+        return {
+            valid: false,
+            detected: 'html',
+            bytes: totalBytes,
+            reason: `served an HTML page (${totalBytes} bytes), not a model — the model host is ` +
+                'answering with a web page. Nothing was downloaded.',
+        };
+    }
+    if (buf.length > 0 && buf[0] !== ONNX_FIRST_BYTE) {
+        return {
+            valid: false,
+            detected: 'not-onnx',
+            bytes: totalBytes,
+            reason: `does not begin with the ONNX ModelProto tag 0x${ONNX_FIRST_BYTE.toString(16)} ` +
+                `(found 0x${buf[0].toString(16).padStart(2, '0')}) — this is not an ONNX model`,
+        };
+    }
+    if (totalBytes < MIN_MODEL_BYTES) {
+        return {
+            valid: false,
+            detected: 'truncated',
+            bytes: totalBytes,
+            reason: `only ${totalBytes} bytes — truncated or incomplete`,
+        };
+    }
+    return { valid: true, bytes: totalBytes };
+}
+/** Classify a model file on disk. Returns `{valid:false}` rather than throwing for a missing file. */
+function inspectModelFile(filePath) {
+    let fd;
+    try {
+        const size = fs.statSync(filePath).size;
+        const buf = Buffer.alloc(Math.min(size, 512));
+        if (buf.length > 0) {
+            fd = fs.openSync(filePath, 'r');
+            fs.readSync(fd, buf, 0, buf.length, 0);
+        }
+        return classifyModelBytes(buf, size);
+    }
+    catch (err) {
+        return {
+            valid: false,
+            reason: `unreadable (${err instanceof Error ? err.message : String(err)})`,
+        };
+    }
+    finally {
+        if (fd !== undefined)
+            fs.closeSync(fd);
+    }
+}
+/**
+ * Throw unless `filePath` is a real ONNX model, DELETING it if it is not.
+ *
+ * Deleting is the point. A rejected download that stays on disk is worse than
+ * no download at all: the next `download-models` run sees the file, prints
+ * `[SKIP] (already exists)`, and the bad bytes become permanent.
+ */
+function assertOnnxModel(filePath, label = filePath) {
+    const result = inspectModelFile(filePath);
+    if (result.valid)
+        return;
+    try {
+        if (fs.existsSync(filePath))
+            fs.unlinkSync(filePath);
+    }
+    catch {
+        /* best effort — the throw below is what matters */
+    }
+    throw new Error(`${label}: ${result.reason ?? 'not a valid ONNX model'}`);
+}
+//# sourceMappingURL=modelIntegrity.js.map

package/dist/modelIntegrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelIntegrity.js","sourceRoot":"","sources":["../src/modelIntegrity.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBH,gDAyCC;AAGD,4CAkBC;AASD,0CASC;AArGD,uCAAyB;AAEzB,gGAAgG;AAChG,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,CAAC;AAW7B,uFAAuF;AACvF,SAAgB,kBAAkB,CAAC,GAAW,EAAE,UAAkB;IAChE,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChF,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,sBAAsB;IACtB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;IACnG,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzF,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU;YACjB,MAAM,EACJ,wBAAwB,UAAU,2CAA2C;gBAC7E,oDAAoD;SACvD,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,eAAe,EAAE,CAAC;QACjD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,UAAU;YACjB,MAAM,EACJ,iDAAiD,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG;gBAChF,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,+BAA+B;SAClF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,QAAQ,UAAU,kCAAkC;SAC7D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC5C,CAAC;AAED,sGAAsG;AACtG,SAAgB,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAChC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,eAAe,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;SAC3E,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,QAAgB,EAAE,KAAK,GAAG,QAAQ;IAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO;IACzB,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,MAAM,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC,CAAC;AAC5E,CAAC"}

package/dist/pairVerify.d.ts

@@ -0,0 +1,100 @@
+import { type HttpPoster } from './AudienceAnalyzeClient';
+/**
+ * pairVerify — the "honest pairing" helpers behind `trillboards-edge pair` and
+ * the new `verify-connection` subcommand.
+ *
+ * Motivated by two field failures where the pairing surface LIED about success:
+ *   - Hiten (Windows, 16-ch NVR): pairing "succeeded" while the TrillboardsEdge
+ *     scheduled task was never registered — 16 screens, zero frames, hours of
+ *     CloudWatch archaeology.
+ *   - Rushi (macOS): an EACCES from an admin-owned config dir was misreported
+ *     as "Double-check the code (codes expire)" (#8200).
+ *
+ * Three jobs, all pure/injectable so they unit-test without network or shell:
+ *   1. classifyPairFailure — map a pair() failure (thrown transport error OR a
+ *      non-2xx response) to an owner-grade failure class + copy. NEVER tells
+ *      the operator to re-check a code unless the SERVER rejected the code.
+ *   2. verifyApiConnection — one authenticated round-trip after pairing
+ *      (GET /v2/earner/cameras/sensing-profile with a paired device token,
+ *      mirroring SensingProfileClient's auth headers) so "connected" is proven,
+ *      not assumed. Distinguishes network vs auth vs server failures.
+ *   3. pairing log — a small rolling transcript under the platform log dir so
+ *      "send diagnostics" has something to send. Never logs codes or tokens.
+ */
+export type PairFailureKind = 'network' | 'rate_limited' | 'bad_code' | 'server';
+export interface PairFailure {
+    kind: PairFailureKind;
+    /** Owner-grade explanation + next step. */
+    message: string;
+}
+/** True when an error thrown by the HTTP transport is a connectivity failure. */
+export declare function isNetworkError(err: unknown): boolean;
+/**
+ * Classify a pairing failure. `thrown` is an error from the transport (the
+ * request never completed); `statusCode`/`error` come from a completed non-2xx
+ * response. The copy rules:
+ *   - Only a SERVER code rejection (400/404/410) may mention the code.
+ *   - Connectivity problems say the code is still valid (it was never spent).
+ */
+export declare function classifyPairFailure(input: {
+    thrown?: unknown;
+    statusCode?: number;
+    error?: string;
+}): PairFailure;
+export type VerifyKind = 'verified' | 'network' | 'auth' | 'server' | 'no_config';
+export interface VerifyResult {
+    ok: boolean;
+    kind: VerifyKind;
+    /** Owner-grade explanation (empty when ok). */
+    message: string;
+    /** HTTP status of the probe, when a response was received. */
+    statusCode?: number;
+}
+/** The minimal slice of trillboards.config.json that verification needs. */
+export interface VerifiableConfig {
+    apiBaseUrl: string;
+    /** First available per-feed device token (one feed = one token = one screen). */
+    deviceToken: string;
+    /** Display name of the feed the token belongs to (for the success line). */
+    feedName: string;
+}
+/**
+ * Extract the API base + one device token from a written config file. Accepts
+ * both shapes (multi-feed `cameras: []` and the single-camera back-compat
+ * top-level `deviceToken`), mirroring pair.command's count_feeds_missing_rtsp.
+ * Returns null when the file is missing/unreadable or holds no token.
+ */
+export declare function readVerifiableConfig(configPath: string): VerifiableConfig | null;
+/**
+ * Prove the pairing works end-to-end: an authenticated GET of this feed's
+ * sensing profile. Same endpoint + device-auth headers as
+ * SensingProfileClient.fetchProfile (deviceRequestAuth validates the token +
+ * nonce + timestamp) — but unlike that best-effort fetch, this one DISTINGUISHES
+ * failure classes, because the whole point is telling the operator the truth.
+ */
+export declare function verifyApiConnection(config: VerifiableConfig, poster?: HttpPoster): Promise<VerifyResult>;
+/**
+ * Platform log dir, matching where the installers already put logs:
+ *   macOS   ~/Library/Logs/Trillboards            (postinstall creates it)
+ *   Windows %LOCALAPPDATA%\Trillboards\logs
+ *   other   ~/.trillboards/logs                   (Docker/systemd installs)
+ * Injectable platform/env for tests.
+ */
+export declare function defaultLogDir(platform?: NodeJS.Platform, env?: NodeJS.ProcessEnv, homedir?: string): string;
+/**
+ * Append timestamped lines to the rolling pairing log. Fully best-effort: a
+ * logging failure must never fail pairing. Returns the log file path (for the
+ * "details saved to …" hint) or null when the write failed.
+ * NEVER pass claim codes or device tokens in `lines`.
+ */
+export declare function appendPairLog(logDir: string, lines: string | string[]): string | null;
+/**
+ * Exit-code contract (the install wrappers branch on these — keep stable):
+ *   0  verified — config present, API reachable, token accepted
+ *   2  network  — config present but Trillboards is unreachable from here
+ *   3  auth     — API reachable but the saved pairing was rejected
+ *   4  no usable config (missing file / no device token)
+ *   5  server   — API responded with an unexpected status
+ */
+export declare function runVerifyConnection(args: string[]): Promise<void>;
+//# sourceMappingURL=pairVerify.d.ts.map

package/dist/pairVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairVerify.d.ts","sourceRoot":"","sources":["../src/pairVerify.ts"],"names":[],"mappings":"AAIA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,cAAc,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;CACjB;AAcD,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAKpD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,WAAW,CA+Cd;AAID,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElF,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CA0BhF;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,gBAAgB,EACxB,MAAM,GAAE,UAA8B,GACrC,OAAO,CAAC,YAAY,CAAC,CAgDvB;AAQD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,OAAO,GAAE,MAAqB,GAC7B,MAAM,CAOR;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAmBrF;AAID;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCvE"}

package/dist/pairVerify.js

@@ -0,0 +1,296 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isNetworkError = isNetworkError;
+exports.classifyPairFailure = classifyPairFailure;
+exports.readVerifiableConfig = readVerifiableConfig;
+exports.verifyApiConnection = verifyApiConnection;
+exports.defaultLogDir = defaultLogDir;
+exports.appendPairLog = appendPairLog;
+exports.runVerifyConnection = runVerifyConnection;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const AudienceAnalyzeClient_1 = require("./AudienceAnalyzeClient");
+const NETWORK_ERRNO = new Set([
+    'ENOTFOUND',
+    'EAI_AGAIN',
+    'ECONNREFUSED',
+    'ECONNRESET',
+    'ETIMEDOUT',
+    'EHOSTUNREACH',
+    'ENETUNREACH',
+    'ENETDOWN',
+    'EPIPE',
+]);
+/** True when an error thrown by the HTTP transport is a connectivity failure. */
+function isNetworkError(err) {
+    const e = err;
+    if (!e)
+        return false;
+    if (e.code && NETWORK_ERRNO.has(e.code))
+        return true;
+    return /timed out|network|getaddrinfo|socket hang up/i.test(String(e.message ?? ''));
+}
+/**
+ * Classify a pairing failure. `thrown` is an error from the transport (the
+ * request never completed); `statusCode`/`error` come from a completed non-2xx
+ * response. The copy rules:
+ *   - Only a SERVER code rejection (400/404/410) may mention the code.
+ *   - Connectivity problems say the code is still valid (it was never spent).
+ */
+function classifyPairFailure(input) {
+    if (input.thrown !== undefined) {
+        if (isNetworkError(input.thrown)) {
+            const code = input.thrown?.code;
+            return {
+                kind: 'network',
+                message: `This computer can't reach Trillboards right now` +
+                    (code ? ` (${code})` : '') +
+                    `.\nCheck this machine's internet connection (Wi-Fi/ethernet, firewall, captive portal),\n` +
+                    `then run pairing again. Your code was NOT used — it stays valid until it expires.`,
+            };
+        }
+        const msg = input.thrown instanceof Error ? input.thrown.message : String(input.thrown);
+        return {
+            kind: 'server',
+            message: `Pairing hit an unexpected error: ${msg}\n` +
+                `Try again in a minute. Your code was NOT used.`,
+        };
+    }
+    const status = input.statusCode ?? 0;
+    if (status === 429) {
+        return {
+            kind: 'rate_limited',
+            message: `Too many pairing attempts from this network — wait a minute, then try again.\n` +
+                `Your code stays valid until it expires.`,
+        };
+    }
+    if (status === 400 || status === 404 || status === 410) {
+        return {
+            kind: 'bad_code',
+            message: `That code wasn't recognized — it may have expired (codes last about 30 minutes)\n` +
+                `or have a typo. Get a fresh code from the portal and try again.` +
+                (input.error ? `\n(Server said: ${input.error})` : ''),
+        };
+    }
+    return {
+        kind: 'server',
+        message: `Trillboards had a hiccup (HTTP ${status || '?'}). This is not a code problem —\n` +
+            `wait a minute and try again. Your code stays valid until it expires.` +
+            (input.error ? `\n(Server said: ${input.error})` : ''),
+    };
+}
+/**
+ * Extract the API base + one device token from a written config file. Accepts
+ * both shapes (multi-feed `cameras: []` and the single-camera back-compat
+ * top-level `deviceToken`), mirroring pair.command's count_feeds_missing_rtsp.
+ * Returns null when the file is missing/unreadable or holds no token.
+ */
+function readVerifiableConfig(configPath) {
+    let raw;
+    try {
+        raw = fs.readFileSync(configPath, 'utf8');
+    }
+    catch {
+        return null;
+    }
+    try {
+        const cfg = JSON.parse(raw);
+        const apiBaseUrl = String(cfg.apiBaseUrl || 'https://api.trillboards.com');
+        const cameras = Array.isArray(cfg.cameras) ? cfg.cameras : [];
+        const withToken = cameras.find((c) => c && typeof c.deviceToken === 'string' && c.deviceToken);
+        if (withToken) {
+            return {
+                apiBaseUrl,
+                deviceToken: String(withToken.deviceToken),
+                feedName: String(withToken.name || withToken.screenId || 'camera'),
+            };
+        }
+        if (typeof cfg.deviceToken === 'string' && cfg.deviceToken) {
+            return { apiBaseUrl, deviceToken: cfg.deviceToken, feedName: 'camera' };
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Prove the pairing works end-to-end: an authenticated GET of this feed's
+ * sensing profile. Same endpoint + device-auth headers as
+ * SensingProfileClient.fetchProfile (deviceRequestAuth validates the token +
+ * nonce + timestamp) — but unlike that best-effort fetch, this one DISTINGUISHES
+ * failure classes, because the whole point is telling the operator the truth.
+ */
+async function verifyApiConnection(config, poster = AudienceAnalyzeClient_1.defaultHttpPoster) {
+    const base = config.apiBaseUrl.replace(/\/+$/, '');
+    const endpoint = `${base}/v2/earner/cameras/sensing-profile`;
+    const headers = {
+        Accept: 'application/json',
+        'X-Device-Token': config.deviceToken,
+        'X-Trillboard-Device-Token': config.deviceToken,
+        'X-Device-Timestamp': String(Date.now()),
+        'X-Device-Nonce': (0, crypto_1.randomUUID)(),
+    };
+    let result;
+    try {
+        result = await poster(endpoint, { method: 'GET', headers, timeoutMs: 15000 }, '');
+    }
+    catch (err) {
+        const code = err?.code;
+        return {
+            ok: false,
+            kind: 'network',
+            message: `Paired and saved, but this computer can't reach Trillboards right now` +
+                (code ? ` (${code})` : '') +
+                `.\nYour pairing is SAVED — fix this machine's internet connection and run the\n` +
+                `pairing helper again. You will NOT need a new code.`,
+        };
+    }
+    if (result.statusCode >= 200 && result.statusCode < 300) {
+        return { ok: true, kind: 'verified', message: '', statusCode: result.statusCode };
+    }
+    if (result.statusCode === 401 || result.statusCode === 403) {
+        return {
+            ok: false,
+            kind: 'auth',
+            statusCode: result.statusCode,
+            message: `Trillboards rejected this machine's saved pairing (HTTP ${result.statusCode}).\n` +
+                `The pairing may have been revoked. Generate a fresh code in the portal and pair again.`,
+        };
+    }
+    return {
+        ok: false,
+        kind: 'server',
+        statusCode: result.statusCode,
+        message: `Paired and saved, but the connection check got HTTP ${result.statusCode} from Trillboards.\n` +
+            `Your pairing is SAVED — wait a minute and run the pairing helper again.`,
+    };
+}
+// ─── 3. Rolling pairing log ──────────────────────────────────────────────────
+/** Rotate at 512 KB, keep one previous generation — enough for diagnostics. */
+const LOG_MAX_BYTES = 512 * 1024;
+const LOG_FILE = 'pairing.log';
+/**
+ * Platform log dir, matching where the installers already put logs:
+ *   macOS   ~/Library/Logs/Trillboards            (postinstall creates it)
+ *   Windows %LOCALAPPDATA%\Trillboards\logs
+ *   other   ~/.trillboards/logs                   (Docker/systemd installs)
+ * Injectable platform/env for tests.
+ */
+function defaultLogDir(platform = process.platform, env = process.env, homedir = os.homedir()) {
+    if (platform === 'darwin')
+        return path.join(homedir, 'Library', 'Logs', 'Trillboards');
+    if (platform === 'win32') {
+        const localAppData = env.LOCALAPPDATA || path.join(homedir, 'AppData', 'Local');
+        return path.join(localAppData, 'Trillboards', 'logs');
+    }
+    return path.join(homedir, '.trillboards', 'logs');
+}
+/**
+ * Append timestamped lines to the rolling pairing log. Fully best-effort: a
+ * logging failure must never fail pairing. Returns the log file path (for the
+ * "details saved to …" hint) or null when the write failed.
+ * NEVER pass claim codes or device tokens in `lines`.
+ */
+function appendPairLog(logDir, lines) {
+    try {
+        fs.mkdirSync(logDir, { recursive: true });
+        const file = path.join(logDir, LOG_FILE);
+        try {
+            const st = fs.statSync(file);
+            if (st.size > LOG_MAX_BYTES)
+                fs.renameSync(file, `${file}.1`);
+        }
+        catch {
+            /* first write */
+        }
+        const stamp = new Date().toISOString();
+        const text = (Array.isArray(lines) ? lines : [lines])
+            .map((l) => `[${stamp}] ${l}`)
+            .join('\n');
+        fs.appendFileSync(file, text + '\n');
+        return file;
+    }
+    catch {
+        return null;
+    }
+}
+// ─── CLI entry: `trillboards-edge verify-connection` ─────────────────────────
+/**
+ * Exit-code contract (the install wrappers branch on these — keep stable):
+ *   0  verified — config present, API reachable, token accepted
+ *   2  network  — config present but Trillboards is unreachable from here
+ *   3  auth     — API reachable but the saved pairing was rejected
+ *   4  no usable config (missing file / no device token)
+ *   5  server   — API responded with an unexpected status
+ */
+async function runVerifyConnection(args) {
+    const cfgIdx = args.indexOf('--config');
+    const configPath = cfgIdx >= 0 && args[cfgIdx + 1] ? args[cfgIdx + 1] : 'trillboards.config.json';
+    const asJson = args.includes('--json');
+    const resolved = path.resolve(configPath);
+    const cfg = readVerifiableConfig(resolved);
+    if (!cfg) {
+        if (asJson)
+            console.log(JSON.stringify({ ok: false, kind: 'no_config' }));
+        else
+            console.error(`No paired config with a device token at: ${resolved}`);
+        process.exit(4);
+        return;
+    }
+    const res = await verifyApiConnection(cfg);
+    appendPairLog(defaultLogDir(), `verify-connection: ${res.kind}${res.statusCode ? ` (HTTP ${res.statusCode})` : ''}`);
+    if (asJson) {
+        console.log(JSON.stringify({ ok: res.ok, kind: res.kind, statusCode: res.statusCode ?? null }));
+    }
+    else if (res.ok) {
+        console.log(`Connected to Trillboards — pairing for "${cfg.feedName}" is valid.`);
+    }
+    else {
+        console.error(res.message);
+    }
+    const exitByKind = {
+        verified: 0,
+        network: 2,
+        auth: 3,
+        server: 5,
+        no_config: 4,
+    };
+    process.exit(exitByKind[res.kind]);
+}
+//# sourceMappingURL=pairVerify.js.map

package/dist/pairVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairVerify.js","sourceRoot":"","sources":["../src/pairVerify.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDA,wCAKC;AASD,kDAmDC;AA8BD,oDA0BC;AASD,kDAmDC;AAeD,sCAWC;AAQD,sCAmBC;AAYD,kDAgCC;AA1UD,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,mCAAoC;AACpC,mEAA6E;AAmC7E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,WAAW;IACX,WAAW;IACX,cAAc;IACd,YAAY;IACZ,WAAW;IACX,cAAc;IACd,aAAa;IACb,UAAU;IACV,OAAO;CACR,CAAC,CAAC;AAEH,iFAAiF;AACjF,SAAgB,cAAc,CAAC,GAAY;IACzC,MAAM,CAAC,GAAG,GAAwE,CAAC;IACnF,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,+CAA+C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,KAInC;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAI,KAAK,CAAC,MAAgC,EAAE,IAAI,CAAC;YAC3D,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,OAAO,EACL,iDAAiD;oBACjD,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1B,2FAA2F;oBAC3F,mFAAmF;aACtF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxF,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,oCAAoC,GAAG,IAAI;gBAC3C,gDAAgD;SACnD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,OAAO,EACL,gFAAgF;gBAChF,yCAAyC;SAC5C,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,OAAO,EACL,mFAAmF;gBACnF,iEAAiE;gBACjE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,OAAO,EACL,kCAAkC,MAAM,IAAI,GAAG,mCAAmC;YAClF,sEAAsE;YACtE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAwBD;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,UAAkB;IACrD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,6BAA6B,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,OAA0C,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC;QAC/F,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,UAAU;gBACV,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC;gBAC1C,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,IAAI,QAAQ,CAAC;aACnE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAC3D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,mBAAmB,CACvC,MAAwB,EACxB,SAAqB,yCAAiB;IAEtC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,GAAG,IAAI,oCAAoC,CAAC;IAC7D,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,gBAAgB,EAAE,MAAM,CAAC,WAAW;QACpC,2BAA2B,EAAE,MAAM,CAAC,WAAW;QAC/C,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,gBAAgB,EAAE,IAAA,mBAAU,GAAE;KAC/B,CAAC;IAEF,IAAI,MAA4C,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS;YACf,OAAO,EACL,uEAAuE;gBACvE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1B,iFAAiF;gBACjF,qDAAqD;SACxD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EACL,2DAA2D,MAAM,CAAC,UAAU,MAAM;gBAClF,wFAAwF;SAC3F,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EACL,uDAAuD,MAAM,CAAC,UAAU,sBAAsB;YAC9F,yEAAyE;KAC5E,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,+EAA+E;AAC/E,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC;AACjC,MAAM,QAAQ,GAAG,aAAa,CAAC;AAE/B;;;;;;GAMG;AACH,SAAgB,aAAa,CAC3B,WAA4B,OAAO,CAAC,QAAQ,EAC5C,MAAyB,OAAO,CAAC,GAAG,EACpC,UAAkB,EAAE,CAAC,OAAO,EAAE;IAE9B,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACvF,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,MAAc,EAAE,KAAwB;IACpE,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC,IAAI,GAAG,aAAa;gBAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF;;;;;;;GAOG;AACI,KAAK,UAAU,mBAAmB,CAAC,IAAc;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,UAAU,GACd,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACjF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE1C,MAAM,GAAG,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;;YACrE,OAAO,CAAC,KAAK,CAAC,4CAA4C,QAAQ,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC3C,aAAa,CAAC,aAAa,EAAE,EAAE,sBAAsB,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrH,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;SAAM,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,2CAA2C,GAAG,CAAC,QAAQ,aAAa,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,UAAU,GAA+B;QAC7C,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,CAAC;KACb,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/qrScanner.d.ts

@@ -0,0 +1,33 @@
+/**
+ * qrScanner — decode a Trillboards claim code from a QR image so the connector's
+ * `pair` flow can be driven by SCANNING the portal's Install-step QR instead of
+ * hand-typing the code. The portal renders that QR via `<QrCodeDisplay
+ * value={claimCode} />`, so the QR payload IS the raw claim code — we return it
+ * verbatim and let PairClient.normalizeClaimCode canonicalize it.
+ *
+ * Pure-JS and only reached via cli.ts's lazy `require('./qrScanner')` inside the
+ * `pair --qr` branch, so the common `pair --code` entrypoint (the macOS/edge
+ * "cloud-sense" installer surface) never pulls in the image-decode deps. Supports
+ * PNG (a screenshot / "save image" of the portal QR) and JPEG (a phone photo).
+ */
+export interface DecodedImage {
+    /** RGBA pixels, 4 bytes per pixel. */
+    data: Uint8ClampedArray;
+    width: number;
+    height: number;
+}
+/**
+ * Decode a PNG or JPEG buffer to RGBA pixels, or null for an unsupported format
+ * (sniffed by magic bytes, not file extension, so a mislabeled file still works).
+ */
+export declare function decodeImageToRgba(buf: Buffer): DecodedImage | null;
+/** Decode the QR payload from an image buffer, or null if unsupported / no QR found. */
+export declare function decodeQrFromImageBuffer(buf: Buffer): string | null;
+/**
+ * Read an image file (a PNG/JPEG screenshot or photo of the portal's claim-code
+ * QR) and return the embedded claim code. Throws a clear, owner-facing error for
+ * a missing file, an unsupported format, or an image with no QR — so the CLI can
+ * print actionable guidance instead of a stack trace.
+ */
+export declare function decodeClaimCodeFromImageFile(filePath: string): Promise<string>;
+//# sourceMappingURL=qrScanner.d.ts.map

package/dist/qrScanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrScanner.d.ts","sourceRoot":"","sources":["../src/qrScanner.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAaD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAUlE;AAED,wFAAwF;AACxF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKlE;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAepF"}