@trillboards/edge-sdk 0.2.53 → 0.2.55

package/dist/OnvifClient.d.ts

@@ -11,12 +11,20 @@ import { type HttpPoster } from './AudienceAnalyzeClient';
  *   GetStreamUri         → the actual per-profile RTSP URL (no more guessed
  *     /Streaming/Channels/101 paths)
  *
- * Deliberately dependency-free: WS-UsernameToken digest auth + regex XML
- * extraction, following the discovery.ts precedent (parseProbeMatches) — a
- * full SOAP/XML stack is overkill for three fixed calls and would bloat the
+ * Deliberately dependency-free: WS-UsernameToken digest auth, HTTP Digest, and
+ * regex XML extraction, following the discovery.ts precedent (parseProbeMatches)
+ * — a full SOAP/XML stack is overkill for three fixed calls and would bloat the
  * self-contained installer. Transport is the same injectable poster the other
  * clients use (unit tests never touch the network).
  *
+ * TWO AUTH SCHEMES, TWO ENDPOINTS, AND BOTH MUST KEEP WORKING. WS-Security at
+ * `/onvif/device_service` is what the installed base speaks. AXIS OS 12 speaks
+ * HTTP Digest at `/onvif/services` and refuses the former. Neither is a
+ * successor to the other, so this client sends WS-Security ALWAYS, answers a
+ * Digest challenge when one arrives, and tries the alternate path only when the
+ * first one evaluated no credential (or evaluated one without naming a scheme).
+ * See the Digest block below for the lockout budget that shape is protecting.
+ *
  * AUTH-SAFETY: callers (ChannelProber) MUST treat an auth failure here as a
  * circuit-breaker signal for the whole host — recorders lock accounts after a
  * handful of bad logins (Hikvision ~5), and locking the owner's own NVR is a
@@ -39,6 +47,68 @@ export declare class OnvifError extends Error {
     kind: OnvifFailure;
     constructor(kind: OnvifFailure, message: string);
 }
+/**
+ * Something the DEVICE told us that is true but unusable, recorded rather than
+ * thrown. `getStreamUri` still returns the URI it was given — a warning must
+ * never turn a working camera into a failed one — but when that URI then
+ * produces no media, the prober can NAME the reason instead of reporting a
+ * generic timeout.
+ */
+export interface OnvifStreamUriWarning {
+    kind: 'rtsp_port_equals_onvif_http_port';
+    profileToken: string;
+    advertisedPort: number;
+    onvifHttpPort: number;
+    message: string;
+}
+export interface DigestChallenge {
+    realm: string;
+    nonce: string;
+    /** `auth` when the server offers it; null when it offers only qop forms we do not implement. */
+    qop: 'auth' | null;
+    /** Every qop token the server offered, verbatim, so an unsupported one can be named. */
+    offeredQop: string[];
+    opaque: string | null;
+    /** Raw, as sent. Unsupported values are rejected by `buildDigestAuthorization`, not here. */
+    algorithm: string;
+}
+/**
+ * Parse a `WWW-Authenticate` header into the Digest challenge, or null when the
+ * server did not offer Digest.
+ *
+ * Tolerant on purpose: the header may arrive as an array (Node repeats it),
+ * values may be quoted or bare, and a server may offer several schemes in one
+ * header (`Basic realm="x", Digest realm="y", nonce="z"`). Parameters are
+ * FIRST-WINS from the point `Digest` appears, so a `Basic` section that follows
+ * cannot overwrite the Digest realm with its own.
+ */
+export declare function parseDigestChallenge(header: string | string[] | undefined | null): DigestChallenge | null;
+/**
+ * The `Authorization: Digest …` value for one request, or null when the
+ * challenge asks for something we do not implement (an unknown algorithm, or
+ * `auth-int` as the only qop). Null is a REPORTABLE condition, never a silent
+ * skip — the caller turns it into a named auth error.
+ */
+export declare function buildDigestAuthorization(opts: {
+    username: string;
+    password: string;
+    method: string;
+    /** Request-URI: path + query, exactly as it appears on the request line. */
+    uri: string;
+    challenge: DigestChallenge;
+    nc?: string;
+    cnonce?: string;
+}): string | null;
+/**
+ * ONVIF device-service paths, in the order they are tried.
+ *
+ * `/onvif/device_service` is the conventional path and stays FIRST so no
+ * working recorder changes behaviour. `/onvif/services` is what AXIS OS 12
+ * serves. The fallback is bounded by `canFallBackEndpoint` — it is spent only
+ * when the first path evaluated no credential, or evaluated one without ever
+ * telling us which scheme it wanted.
+ */
+export declare const ONVIF_DEVICE_SERVICE_PATHS: readonly ["/onvif/device_service", "/onvif/services"];
 export interface OnvifClientOptions {
     host: string;
     /** ONVIF HTTP port. Default 80 (cheap DVRs often use 8899 — callers try both). */
@@ -67,9 +137,52 @@ export declare class OnvifClient {
     private readonly poster;
     /** Media service endpoint discovered via GetServices (falls back to device). */
     private mediaXAddr;
+    /** Device-service path proven to answer on this device. Learned once. */
+    private deviceServicePath;
+    /** Cached Digest challenge, so later calls authenticate in ONE request. */
+    private digestChallenge;
+    /** Digest nonce-count, incremented per authenticated request per RFC 7616. */
+    private digestNc;
+    /**
+     * Whether this device has ever answered a request with a Digest challenge.
+     * Gates the endpoint fallback: once the device has told us its scheme and
+     * refused our answer, the credential is wrong and further paths are wasted
+     * login attempts against a lockout budget.
+     */
+    private digestAttempted;
+    private streamUriWarnings;
     constructor(options: OnvifClientOptions, poster?: HttpPoster);
+    /** The device-service endpoint: the proven path, else the conventional one. */
     deviceEndpoint(): string;
+    private endpointFor;
+    /**
+     * Things the device advertised that are true but unusable. Empty is the
+     * normal case; a caller reads this only to explain a failure it already has.
+     */
+    getStreamUriWarnings(): OnvifStreamUriWarning[];
+    /** One POST, with WS-Security always and Digest when we hold a challenge. */
+    private post;
+    /** Answer a challenge for `endpoint`, or null when we cannot satisfy it. */
+    private authorizationFor;
     private soap;
+    /**
+     * May we spend an attempt on the NEXT device-service path after `err`?
+     *
+     * The whole point is to not turn one rejected login into four. Two cases
+     * qualify, and nothing else:
+     *   `not_onvif` — a non-2xx that never evaluated a credential (a 404 from a
+     *     device that serves ONVIF somewhere else is exactly this).
+     *   `auth` BEFORE any Digest challenge — the device refused us without ever
+     *     saying which scheme it wanted, which is what AXIS OS 12 does to a
+     *     WS-Security-only POST. The alternate path may negotiate properly.
+     *
+     * `auth` AFTER a challenge was answered means the CREDENTIAL is wrong, and no
+     * other path will change that. `unreachable` and `fault` are properties of the
+     * host and of a working endpoint respectively — neither is a wrong path.
+     */
+    private canFallBackEndpoint;
+    /** A device-service call, trying the alternate ONVIF path when it is safe. */
+    private deviceSoap;
     /** Stable physical identity (the channelKey backbone). */
     getDeviceInformation(): Promise<OnvifDeviceInfo>;
     /** Resolve the media service endpoint (GetServices; fall back to device path). */
@@ -79,5 +192,24 @@ export declare class OnvifClient {
     getProfiles(): Promise<OnvifProfile[]>;
     /** The ACTUAL RTSP URI for one profile (no guessed brand paths). */
     getStreamUri(profileToken: string): Promise<string | null>;
+    /**
+     * Record — never repair — an advertised RTSP port that cannot be right.
+     *
+     * A device reached through a port-forward advertises whatever its own config
+     * says, and a forwarder that maps HTTP and RTSP to different external ports
+     * makes that advertisement wrong. Measured on the Axis Virtual Loan Tool
+     * (2026-08-18): ONVIF was served on external port 12095 and the stream URI
+     * advertised `rtsp://…:12095/…`, while media was actually on 32095. The tell
+     * is exact — the advertised RTSP port EQUALS the port we are speaking ONVIF
+     * HTTP on, and one socket does not serve both protocols.
+     *
+     * We do not guess the real port. 32095 is not derivable from 12095, and a
+     * connector that silently sweeps ports is worse than one that says the
+     * advertised port did not serve media: the sweep turns one clear finding into
+     * a slow scan that can trip a recorder's rate limits and still be wrong. The
+     * URI is returned exactly as advertised; this note only lets the prober name
+     * the cause if that URI then produces nothing.
+     */
+    private noteStreamUriPort;
 }
 //# sourceMappingURL=OnvifClient.d.ts.map

package/dist/OnvifClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OnvifClient.d.ts","sourceRoot":"","sources":["../src/OnvifClient.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,GAAG,OAAO,CAAC;AAE1E,qBAAa,UAAW,SAAQ,KAAK;IACnC,IAAI,EAAE,YAAY,CAAC;gBACP,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM;CAIhD;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,MAAwB,EAClC,OAAO,GAAE,MAAiC,GACzC,MAAM,CAeR;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAO3C;AAWD;;qEAEqE;AACrE,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CASnD;AAED,+EAA+E;AAC/E,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGpE;AAED,mEAAmE;AACnE,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAShE;AAOD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,gFAAgF;IAChF,OAAO,CAAC,UAAU,CAAuB;gBAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,UAAU;IAS5D,cAAc,IAAI,MAAM;YAIV,IAAI;IAgClB,0DAA0D;IACpD,oBAAoB,IAAI,OAAO,CAAC,eAAe,CAAC;IAatD,kFAAkF;YACpE,iBAAiB;IA2B/B,OAAO,CAAC,WAAW;IAWnB,gDAAgD;IAC1C,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAiB5C,oEAAoE;IAC9D,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAoBjE"}
+{"version":3,"file":"OnvifClient.d.ts","sourceRoot":"","sources":["../src/OnvifClient.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,GAAG,OAAO,CAAC;AAE1E,qBAAa,UAAW,SAAQ,KAAK;IACnC,IAAI,EAAE,YAAY,CAAC;gBACP,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM;CAIhD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,kCAAkC,CAAC;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AA2BD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,wFAAwF;IACxF,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;CACnB;AAiBD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,GAC3C,eAAe,GAAG,IAAI,CAqCxB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,eAAe,CAAC;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,GAAG,IAAI,CA+BhB;AAeD;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,uDAAwD,CAAC;AAEhG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,MAAwB,EAClC,OAAO,GAAE,MAAiC,GACzC,MAAM,CAeR;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAO3C;AAWD;;qEAEqE;AACrE,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CASnD;AAED,+EAA+E;AAC/E,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGpE;AAED,mEAAmE;AACnE,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAShE;AAOD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,gFAAgF;IAChF,OAAO,CAAC,UAAU,CAAuB;IACzC,yEAAyE;IACzE,OAAO,CAAC,iBAAiB,CAAuB;IAChD,2EAA2E;IAC3E,OAAO,CAAC,eAAe,CAAgC;IACvD,8EAA8E;IAC9E,OAAO,CAAC,QAAQ,CAAK;IACrB;;;;;OAKG;IACH,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,iBAAiB,CAA+B;gBAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,EAAE,UAAU;IAS5D,+EAA+E;IAC/E,cAAc,IAAI,MAAM;IAIxB,OAAO,CAAC,WAAW;IAInB;;;OAGG;IACH,oBAAoB,IAAI,qBAAqB,EAAE;IAI/C,6EAA6E;YAC/D,IAAI;IAgBlB,4EAA4E;IAC5E,OAAO,CAAC,gBAAgB;YAoBV,IAAI;IA8DlB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,mBAAmB;IAM3B,8EAA8E;YAChE,UAAU;IAmBxB,0DAA0D;IACpD,oBAAoB,IAAI,OAAO,CAAC,eAAe,CAAC;IAYtD,kFAAkF;YACpE,iBAAiB;IA0B/B,OAAO,CAAC,WAAW;IAWnB,gDAAgD;IAC1C,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAiB5C,oEAAoE;IAC9D,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAsBhE;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,iBAAiB;CAkB1B"}

package/dist/OnvifClient.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OnvifClient = exports.OnvifError = void 0;
+exports.OnvifClient = exports.ONVIF_DEVICE_SERVICE_PATHS = exports.OnvifError = void 0;
+exports.parseDigestChallenge = parseDigestChallenge;
+exports.buildDigestAuthorization = buildDigestAuthorization;
 exports.buildUsernameToken = buildUsernameToken;
 exports.escapeXml = escapeXml;
 exports.decodeXmlEntities = decodeXmlEntities;
@@ -15,6 +17,130 @@ class OnvifError extends Error {
     }
 }
 exports.OnvifError = OnvifError;
+/** Quote a Digest parameter value per RFC 7616 §3.4. */
+function quoteDigest(value) {
+    return String(value).replace(/([\\"])/g, '\\$1');
+}
+/** The hash for a Digest `algorithm`, or null when we do not implement it. */
+function digestHashFor(algorithm) {
+    const base = String(algorithm || 'MD5').replace(/-sess$/i, '').toUpperCase();
+    // MD5 here is the PROTOCOL's mandated construction, not a security choice of
+    // ours: an ONVIF device that offers MD5 accepts nothing else.
+    if (base === 'MD5')
+        return (input) => (0, crypto_1.createHash)('md5').update(input, 'utf8').digest('hex');
+    if (base === 'SHA-256')
+        return (input) => (0, crypto_1.createHash)('sha256').update(input, 'utf8').digest('hex');
+    return null;
+}
+/**
+ * Parse a `WWW-Authenticate` header into the Digest challenge, or null when the
+ * server did not offer Digest.
+ *
+ * Tolerant on purpose: the header may arrive as an array (Node repeats it),
+ * values may be quoted or bare, and a server may offer several schemes in one
+ * header (`Basic realm="x", Digest realm="y", nonce="z"`). Parameters are
+ * FIRST-WINS from the point `Digest` appears, so a `Basic` section that follows
+ * cannot overwrite the Digest realm with its own.
+ */
+function parseDigestChallenge(header) {
+    const raw = Array.isArray(header) ? header.join(', ') : header;
+    if (!raw)
+        return null;
+    const start = /(^|[\s,])Digest\s+/i.exec(raw);
+    if (!start)
+        return null;
+    const params = raw.slice(start.index + start[0].length);
+    const found = new Map();
+    const re = /([A-Za-z][A-Za-z0-9_-]*)\s*=\s*(?:"((?:[^"\\]|\\.)*)"|([^,\s]*))/g;
+    let m;
+    while ((m = re.exec(params)) !== null) {
+        const key = m[1].toLowerCase();
+        if (found.has(key))
+            continue; // first wins
+        const value = m[2] !== undefined ? m[2].replace(/\\(.)/g, '$1') : (m[3] ?? '');
+        found.set(key, value);
+    }
+    const realm = found.get('realm');
+    const nonce = found.get('nonce');
+    // A challenge without a nonce cannot be answered. Treat it as "no Digest
+    // offered" rather than inventing one — a wrong Authorization header would
+    // spend a login attempt to learn nothing.
+    if (realm === undefined || !nonce)
+        return null;
+    const offeredQop = (found.get('qop') ?? '')
+        .split(',')
+        .map((q) => q.trim().toLowerCase())
+        .filter(Boolean);
+    return {
+        realm,
+        nonce,
+        qop: offeredQop.includes('auth') ? 'auth' : null,
+        offeredQop,
+        opaque: found.get('opaque') ?? null,
+        algorithm: found.get('algorithm') ?? 'MD5',
+    };
+}
+/**
+ * The `Authorization: Digest …` value for one request, or null when the
+ * challenge asks for something we do not implement (an unknown algorithm, or
+ * `auth-int` as the only qop). Null is a REPORTABLE condition, never a silent
+ * skip — the caller turns it into a named auth error.
+ */
+function buildDigestAuthorization(opts) {
+    const { challenge } = opts;
+    const hash = digestHashFor(challenge.algorithm);
+    if (!hash)
+        return null;
+    // The server offered qop values, but none we implement (e.g. only auth-int).
+    if (challenge.offeredQop.length > 0 && challenge.qop === null)
+        return null;
+    const nc = opts.nc ?? '00000001';
+    const cnonce = opts.cnonce ?? (0, crypto_1.randomBytes)(8).toString('hex');
+    const isSess = /-sess$/i.test(challenge.algorithm);
+    let ha1 = hash(`${opts.username}:${challenge.realm}:${opts.password}`);
+    if (isSess)
+        ha1 = hash(`${ha1}:${challenge.nonce}:${cnonce}`);
+    const ha2 = hash(`${opts.method}:${opts.uri}`);
+    const response = challenge.qop
+        ? hash(`${ha1}:${challenge.nonce}:${nc}:${cnonce}:${challenge.qop}:${ha2}`)
+        : hash(`${ha1}:${challenge.nonce}:${ha2}`);
+    const parts = [
+        `username="${quoteDigest(opts.username)}"`,
+        `realm="${quoteDigest(challenge.realm)}"`,
+        `nonce="${quoteDigest(challenge.nonce)}"`,
+        `uri="${quoteDigest(opts.uri)}"`,
+        `response="${response}"`,
+    ];
+    if (challenge.algorithm)
+        parts.push(`algorithm=${challenge.algorithm}`);
+    if (challenge.qop) {
+        parts.push(`qop=${challenge.qop}`, `nc=${nc}`, `cnonce="${quoteDigest(cnonce)}"`);
+    }
+    if (challenge.opaque !== null)
+        parts.push(`opaque="${quoteDigest(challenge.opaque)}"`);
+    return `Digest ${parts.join(', ')}`;
+}
+/** Read one header case-insensitively out of a poster response. */
+function headerOf(headers, name) {
+    if (!headers)
+        return undefined;
+    const wanted = name.toLowerCase();
+    for (const key of Object.keys(headers)) {
+        if (key.toLowerCase() === wanted)
+            return headers[key];
+    }
+    return undefined;
+}
+/**
+ * ONVIF device-service paths, in the order they are tried.
+ *
+ * `/onvif/device_service` is the conventional path and stays FIRST so no
+ * working recorder changes behaviour. `/onvif/services` is what AXIS OS 12
+ * serves. The fallback is bounded by `canFallBackEndpoint` — it is spent only
+ * when the first path evaluated no credential, or evaluated one without ever
+ * telling us which scheme it wanted.
+ */
+exports.ONVIF_DEVICE_SERVICE_PATHS = ['/onvif/device_service', '/onvif/services'];
 /** Build the WS-Security UsernameToken header (PasswordDigest per ONVIF core). */
 function buildUsernameToken(username, password, nonceRaw = (0, crypto_1.randomBytes)(16), created = new Date().toISOString()) {
     const digest = (0, crypto_1.createHash)('sha1')
@@ -79,6 +205,20 @@ class OnvifClient {
     constructor(options, poster) {
         /** Media service endpoint discovered via GetServices (falls back to device). */
         this.mediaXAddr = null;
+        /** Device-service path proven to answer on this device. Learned once. */
+        this.deviceServicePath = null;
+        /** Cached Digest challenge, so later calls authenticate in ONE request. */
+        this.digestChallenge = null;
+        /** Digest nonce-count, incremented per authenticated request per RFC 7616. */
+        this.digestNc = 0;
+        /**
+         * Whether this device has ever answered a request with a Digest challenge.
+         * Gates the endpoint fallback: once the device has told us its scheme and
+         * refused our answer, the credential is wrong and further paths are wasted
+         * login attempts against a lockout budget.
+         */
+        this.digestAttempted = false;
+        this.streamUriWarnings = [];
         this.host = options.host;
         this.port = options.port ?? 80;
         this.username = options.username;
@@ -86,21 +226,91 @@ class OnvifClient {
         this.timeoutMs = options.timeoutMs ?? 5000;
         this.poster = poster ?? AudienceAnalyzeClient_1.defaultHttpPoster;
     }
+    /** The device-service endpoint: the proven path, else the conventional one. */
     deviceEndpoint() {
-        return `http://${this.host}:${this.port}/onvif/device_service`;
+        return this.endpointFor(this.deviceServicePath ?? exports.ONVIF_DEVICE_SERVICE_PATHS[0]);
     }
-    async soap(endpoint, body) {
-        let res;
+    endpointFor(path) {
+        return `http://${this.host}:${this.port}${path}`;
+    }
+    /**
+     * Things the device advertised that are true but unusable. Empty is the
+     * normal case; a caller reads this only to explain a failure it already has.
+     */
+    getStreamUriWarnings() {
+        return [...this.streamUriWarnings];
+    }
+    /** One POST, with WS-Security always and Digest when we hold a challenge. */
+    async post(endpoint, xml, authorization) {
+        const headers = {
+            'Content-Type': 'application/soap+xml; charset=utf-8',
+        };
+        if (authorization)
+            headers.Authorization = authorization;
         try {
-            res = await this.poster(endpoint, {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/soap+xml; charset=utf-8' },
-                timeoutMs: this.timeoutMs,
-            }, envelope(buildUsernameToken(this.username, this.password), body));
+            return await this.poster(endpoint, { method: 'POST', headers, timeoutMs: this.timeoutMs }, xml);
         }
         catch (err) {
             throw new OnvifError('unreachable', `ONVIF ${endpoint} unreachable: ${err.message}`);
         }
+    }
+    /** Answer a challenge for `endpoint`, or null when we cannot satisfy it. */
+    authorizationFor(endpoint, challenge) {
+        let uri = endpoint;
+        try {
+            const u = new URL(endpoint);
+            uri = `${u.pathname}${u.search}`;
+        }
+        catch {
+            /* keep the raw endpoint — a device that gave us an unparseable one is
+               already broken, and a wrong uri only costs this one attempt */
+        }
+        this.digestNc += 1;
+        return buildDigestAuthorization({
+            username: this.username,
+            password: this.password,
+            method: 'POST',
+            uri,
+            challenge,
+            nc: this.digestNc.toString(16).padStart(8, '0'),
+        });
+    }
+    async soap(endpoint, body) {
+        // A fresh envelope per attempt: WS-Security carries a nonce and a
+        // `wsu:Created` timestamp, and replaying a stale one is itself a rejection.
+        const envelopeXml = () => envelope(buildUsernameToken(this.username, this.password), body);
+        // Pre-emptive Digest once the device has challenged us: without it EVERY
+        // call costs two round trips.
+        let authorization = this.digestChallenge
+            ? this.authorizationFor(endpoint, this.digestChallenge)
+            : null;
+        let res = await this.post(endpoint, envelopeXml(), authorization);
+        if (res.statusCode === 401) {
+            // Re-parse: the nonce rotates, and `stale=true` means precisely "retry
+            // with this new one". Both land here identically.
+            const challenge = parseDigestChallenge(headerOf(res.headers, 'www-authenticate'));
+            if (challenge) {
+                this.digestChallenge = challenge;
+                this.digestNc = 0;
+                this.digestAttempted = true;
+                authorization = this.authorizationFor(endpoint, challenge);
+                if (!authorization) {
+                    const wanted = challenge.offeredQop.length
+                        ? `qop=${challenge.offeredQop.join(',')} algorithm=${challenge.algorithm}`
+                        : `algorithm=${challenge.algorithm}`;
+                    throw new OnvifError('auth', `ONVIF requires an HTTP Digest form this connector does not implement (${wanted}). ` +
+                        'Supported: MD5, MD5-sess, SHA-256, SHA-256-sess with qop=auth or no qop.');
+                }
+                res = await this.post(endpoint, envelopeXml(), authorization);
+            }
+            else if (/\bBasic\b/i.test(String(headerOf(res.headers, 'www-authenticate') ?? ''))) {
+                // Answering this would put the password on the wire in cleartext —
+                // weaker than the UsernameToken digest already sent. Name it instead.
+                throw new OnvifError('auth', 'ONVIF auth rejected (HTTP 401). The device offers only HTTP Basic, which this ' +
+                    'connector will not use because it sends the password in cleartext. Enable ' +
+                    'Digest or WS-Security (ONVIF UsernameToken) on the device.');
+            }
+        }
         // 401/403 → bad creds. Many recorders return 400 + a NotAuthorized SOAP
         // fault instead — treat both as the auth circuit-breaker signal.
         if (res.statusCode === 401 || res.statusCode === 403) {
@@ -117,9 +327,52 @@ class OnvifClient {
         }
         return res.body;
     }
+    /**
+     * May we spend an attempt on the NEXT device-service path after `err`?
+     *
+     * The whole point is to not turn one rejected login into four. Two cases
+     * qualify, and nothing else:
+     *   `not_onvif` — a non-2xx that never evaluated a credential (a 404 from a
+     *     device that serves ONVIF somewhere else is exactly this).
+     *   `auth` BEFORE any Digest challenge — the device refused us without ever
+     *     saying which scheme it wanted, which is what AXIS OS 12 does to a
+     *     WS-Security-only POST. The alternate path may negotiate properly.
+     *
+     * `auth` AFTER a challenge was answered means the CREDENTIAL is wrong, and no
+     * other path will change that. `unreachable` and `fault` are properties of the
+     * host and of a working endpoint respectively — neither is a wrong path.
+     */
+    canFallBackEndpoint(err) {
+        if (err.kind === 'not_onvif')
+            return true;
+        if (err.kind === 'auth')
+            return !this.digestAttempted;
+        return false;
+    }
+    /** A device-service call, trying the alternate ONVIF path when it is safe. */
+    async deviceSoap(body) {
+        if (this.deviceServicePath)
+            return this.soap(this.endpointFor(this.deviceServicePath), body);
+        let firstError = null;
+        for (const path of exports.ONVIF_DEVICE_SERVICE_PATHS) {
+            try {
+                const xml = await this.soap(this.endpointFor(path), body);
+                this.deviceServicePath = path; // learned: every later call goes straight here
+                return xml;
+            }
+            catch (err) {
+                const onvifErr = err instanceof OnvifError ? err : new OnvifError('fault', err.message);
+                if (!firstError)
+                    firstError = onvifErr;
+                if (!this.canFallBackEndpoint(onvifErr))
+                    throw onvifErr;
+            }
+        }
+        throw firstError ?? new OnvifError('not_onvif', 'ONVIF device service did not answer');
+    }
     /** Stable physical identity (the channelKey backbone). */
     async getDeviceInformation() {
-        const xml = await this.soap(this.deviceEndpoint(), '<GetDeviceInformation xmlns="http://www.onvif.org/ver10/device/wsdl"/>');
+        const xml = await this.deviceSoap('<GetDeviceInformation xmlns="http://www.onvif.org/ver10/device/wsdl"/>');
         return {
             manufacturer: xmlTag(xml, 'Manufacturer'),
             model: xmlTag(xml, 'Model'),
@@ -132,7 +385,7 @@ class OnvifClient {
         if (this.mediaXAddr)
             return this.mediaXAddr;
         try {
-            const xml = await this.soap(this.deviceEndpoint(), '<GetServices xmlns="http://www.onvif.org/ver10/device/wsdl"><IncludeCapability>false</IncludeCapability></GetServices>');
+            const xml = await this.deviceSoap('<GetServices xmlns="http://www.onvif.org/ver10/device/wsdl"><IncludeCapability>false</IncludeCapability></GetServices>');
             for (const svc of xmlTags(xml, 'Service')) {
                 const ns = xmlTag(svc, 'Namespace') || '';
                 if (ns.includes('/media/')) {
@@ -197,6 +450,7 @@ class OnvifClient {
         // Rewrite the advertised host (NAT-advertised internals) but keep path/port.
         try {
             const u = new URL(uri);
+            this.noteStreamUriPort(profileToken, u);
             u.hostname = this.host;
             return u.toString();
         }
@@ -204,6 +458,44 @@ class OnvifClient {
             return uri;
         }
     }
+    /**
+     * Record — never repair — an advertised RTSP port that cannot be right.
+     *
+     * A device reached through a port-forward advertises whatever its own config
+     * says, and a forwarder that maps HTTP and RTSP to different external ports
+     * makes that advertisement wrong. Measured on the Axis Virtual Loan Tool
+     * (2026-08-18): ONVIF was served on external port 12095 and the stream URI
+     * advertised `rtsp://…:12095/…`, while media was actually on 32095. The tell
+     * is exact — the advertised RTSP port EQUALS the port we are speaking ONVIF
+     * HTTP on, and one socket does not serve both protocols.
+     *
+     * We do not guess the real port. 32095 is not derivable from 12095, and a
+     * connector that silently sweeps ports is worse than one that says the
+     * advertised port did not serve media: the sweep turns one clear finding into
+     * a slow scan that can trip a recorder's rate limits and still be wrong. The
+     * URI is returned exactly as advertised; this note only lets the prober name
+     * the cause if that URI then produces nothing.
+     */
+    noteStreamUriPort(profileToken, u) {
+        if (!/^rtsps?:$/i.test(u.protocol))
+            return;
+        const advertisedPort = u.port ? Number(u.port) : 554;
+        if (!Number.isFinite(advertisedPort) || advertisedPort !== this.port)
+            return;
+        if (this.streamUriWarnings.some((w) => w.profileToken === profileToken))
+            return;
+        this.streamUriWarnings.push({
+            kind: 'rtsp_port_equals_onvif_http_port',
+            profileToken,
+            advertisedPort,
+            onvifHttpPort: this.port,
+            message: `ONVIF advertised RTSP on port ${advertisedPort}, which is the same port this device ` +
+                'answers ONVIF HTTP on — one port cannot serve both. This is the signature of a ' +
+                'port-forward (NAT, or a remote loan/demo tool) that maps HTTP and RTSP to different ' +
+                'external ports, so the advertised port is the HTTP mapping. Enter the RTSP port ' +
+                'explicitly; it cannot be derived from the HTTP one.',
+        });
+    }
 }
 exports.OnvifClient = OnvifClient;
 //# sourceMappingURL=OnvifClient.js.map

package/dist/OnvifClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"OnvifClient.js","sourceRoot":"","sources":["../src/OnvifClient.ts"],"names":[],"mappings":";;;AA6DA,gDAoBC;AAED,8BAOC;AAcD,8CASC;AAGD,wBAGC;AAGD,0BASC;AAnID,mCAAiD;AACjD,mEAA6E;AA0C7E,MAAa,UAAW,SAAQ,KAAK;IAEnC,YAAY,IAAkB,EAAE,OAAe;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAND,gCAMC;AAWD,kFAAkF;AAClF,SAAgB,kBAAkB,CAChC,QAAgB,EAChB,QAAgB,EAChB,WAAmB,IAAA,oBAAW,EAAC,EAAE,CAAC,EAClC,UAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAE1C,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,MAAM,CAAC;SAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;SAC9F,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpB,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,CACL,gDAAgD;QAChD,iGAAiG;QACjG,iGAAiG;QACjG,sCAAsC,SAAS,CAAC,QAAQ,CAAC,kBAAkB;QAC3E,0HAA0H;QAC1H,GAAG,MAAM,kBAAkB;QAC3B,6HAA6H,QAAQ,eAAe;QACpJ,gBAAgB,OAAO,gEAAgE,CACxF,CAAC;AACJ,CAAC;AAED,SAAgB,SAAS,CAAC,CAAS;IACjC,OAAO,MAAM,CAAC,CAAC,CAAC;SACb,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY;IAC5C,OAAO,CACL,wCAAwC;QACxC,gEAAgE;QAChE,MAAM;QACN,WAAW,IAAI,wBAAwB,CACxC,CAAC;AACJ,CAAC;AAED;;qEAEqE;AACrE,SAAgB,iBAAiB,CAAC,CAAS;IACzC,OAAO,CAAC;SACL,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SAC/E,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SACrE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,qCAAqC;AAClE,CAAC;AAED,+EAA+E;AAC/E,SAAgB,MAAM,CAAC,GAAW,EAAE,SAAiB;IACnD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,uBAAuB,SAAS,0CAA0C,SAAS,GAAG,CAAC,CAAC,CAAC;IACxH,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,mEAAmE;AACnE,SAAgB,OAAO,CAAC,GAAW,EAAE,SAAiB;IACpD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,uBAAuB,SAAS,gDAAgD,SAAS,GAAG,EAC5F,GAAG,CACJ,CAAC;IACF,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,UAAkB,EAAE,IAAY;IAC9C,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAED,MAAa,WAAW;IAUtB,YAAY,OAA2B,EAAE,MAAmB;QAH5D,gFAAgF;QACxE,eAAU,GAAkB,IAAI,CAAC;QAGvC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAK,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,yCAAiB,CAAC;IAC5C,CAAC;IAED,cAAc;QACZ,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,uBAAuB,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAAY;QAC/C,IAAI,GAAyC,CAAC;QAC9C,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CACrB,QAAQ,EACR;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,qCAAqC,EAAE;gBAClE,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,EACD,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CACjE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,SAAS,QAAQ,iBAAkB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,wEAAwE;QACxE,iEAAiE;QACjE,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YACrD,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,6BAA6B,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,uDAAuD,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAClD,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,gCAAgC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,qBAAqB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,oBAAoB;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CACzB,IAAI,CAAC,cAAc,EAAE,EACrB,wEAAwE,CACzE,CAAC;QACF,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC;YACzC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;YAC3B,YAAY,EAAE,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC;YACzC,eAAe,EAAE,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,iBAAiB;QAC7B,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CACzB,IAAI,CAAC,cAAc,EAAE,EACrB,wHAAwH,CACzH,CAAC;YACF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;gBAC1C,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBACnC,IAAI,KAAK,EAAE,CAAC;wBACV,kEAAkE;wBAClE,yDAAyD;wBACzD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;wBAC1C,OAAO,IAAI,CAAC,UAAU,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAkB,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,GAAG,CAAC,CAAC,kBAAkB;YACtE,2CAA2C;QAC7C,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,sBAAsB,CAAC;QACzE,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEO,WAAW,CAAC,KAAa;QAC/B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,sBAAsB,CAAC;QAChE,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,WAAW;QACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,8DAA8D,CAAC,CAAC;QACnG,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK;gBACL,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;gBACxB,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CACzB,KAAK,EACL,8DAA8D;YAC5D,qFAAqF;YACrF,0GAA0G;YAC1G,iBAAiB,SAAS,CAAC,YAAY,CAAC,gCAAgC,CAC3E,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,6EAA6E;QAC7E,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;CACF;AAnJD,kCAmJC"}
+{"version":3,"file":"OnvifClient.js","sourceRoot":"","sources":["../src/OnvifClient.ts"],"names":[],"mappings":";;;AAwIA,oDAuCC;AAQD,4DAwCC;AAoCD,gDAoBC;AAED,8BAOC;AAcD,8CASC;AAGD,wBAGC;AAGD,0BASC;AAzUD,mCAAiD;AACjD,mEAA6E;AAkD7E,MAAa,UAAW,SAAQ,KAAK;IAEnC,YAAY,IAAkB,EAAE,OAAe;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAND,gCAMC;AAsDD,wDAAwD;AACxD,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,6EAA6E;IAC7E,8DAA8D;IAC9D,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mBAAU,EAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5F,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,oBAAoB,CAClC,MAA4C;IAE5C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,EAAE,GAAG,mEAAmE,CAAC;IAC/E,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,aAAa;QAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/E,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,yEAAyE;IACzE,0EAA0E;IAC1E,0CAA0C;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SACxC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,OAAO;QACL,KAAK;QACL,KAAK;QACL,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAChD,UAAU;QACV,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI;QACnC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,KAAK;KAC3C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB,CAAC,IASxC;IACC,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,6EAA6E;IAC7E,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE3E,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,UAAU,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAEnD,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM;QAAE,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG;QAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,KAAK,IAAI,EAAE,IAAI,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3E,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;IAE7C,MAAM,KAAK,GAAG;QACZ,aAAa,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG;QAC1C,UAAU,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG;QACzC,UAAU,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG;QACzC,QAAQ,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QAChC,aAAa,QAAQ,GAAG;KACzB,CAAC;IACF,IAAI,SAAS,CAAC,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IACxE,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvF,OAAO,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,mEAAmE;AACnE,SAAS,QAAQ,CACf,OAAkE,EAClE,IAAY;IAEZ,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACU,QAAA,0BAA0B,GAAG,CAAC,uBAAuB,EAAE,iBAAiB,CAAU,CAAC;AAWhG,kFAAkF;AAClF,SAAgB,kBAAkB,CAChC,QAAgB,EAChB,QAAgB,EAChB,WAAmB,IAAA,oBAAW,EAAC,EAAE,CAAC,EAClC,UAAkB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAE1C,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,MAAM,CAAC;SAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;SAC9F,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpB,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,CACL,gDAAgD;QAChD,iGAAiG;QACjG,iGAAiG;QACjG,sCAAsC,SAAS,CAAC,QAAQ,CAAC,kBAAkB;QAC3E,0HAA0H;QAC1H,GAAG,MAAM,kBAAkB;QAC3B,6HAA6H,QAAQ,eAAe;QACpJ,gBAAgB,OAAO,gEAAgE,CACxF,CAAC;AACJ,CAAC;AAED,SAAgB,SAAS,CAAC,CAAS;IACjC,OAAO,MAAM,CAAC,CAAC,CAAC;SACb,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY;IAC5C,OAAO,CACL,wCAAwC;QACxC,gEAAgE;QAChE,MAAM;QACN,WAAW,IAAI,wBAAwB,CACxC,CAAC;AACJ,CAAC;AAED;;qEAEqE;AACrE,SAAgB,iBAAiB,CAAC,CAAS;IACzC,OAAO,CAAC;SACL,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SAC/E,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SACrE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,qCAAqC;AAClE,CAAC;AAED,+EAA+E;AAC/E,SAAgB,MAAM,CAAC,GAAW,EAAE,SAAiB;IACnD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,uBAAuB,SAAS,0CAA0C,SAAS,GAAG,CAAC,CAAC,CAAC;IACxH,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,mEAAmE;AACnE,SAAgB,OAAO,CAAC,GAAW,EAAE,SAAiB;IACpD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,uBAAuB,SAAS,gDAAgD,SAAS,GAAG,EAC5F,GAAG,CACJ,CAAC;IACF,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,UAAkB,EAAE,IAAY;IAC9C,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAED,MAAa,WAAW;IAwBtB,YAAY,OAA2B,EAAE,MAAmB;QAjB5D,gFAAgF;QACxE,eAAU,GAAkB,IAAI,CAAC;QACzC,yEAAyE;QACjE,sBAAiB,GAAkB,IAAI,CAAC;QAChD,2EAA2E;QACnE,oBAAe,GAA2B,IAAI,CAAC;QACvD,8EAA8E;QACtE,aAAQ,GAAG,CAAC,CAAC;QACrB;;;;;WAKG;QACK,oBAAe,GAAG,KAAK,CAAC;QACxB,sBAAiB,GAA4B,EAAE,CAAC;QAGtD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAK,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,yCAAiB,CAAC;IAC5C,CAAC;IAED,+EAA+E;IAC/E,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,IAAI,kCAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;;OAGG;IACH,oBAAoB;QAClB,OAAO,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IAED,6EAA6E;IACrE,KAAK,CAAC,IAAI,CAChB,QAAgB,EAChB,GAAW,EACX,aAA4B;QAE5B,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,qCAAqC;SACtD,CAAC;QACF,IAAI,aAAa;YAAE,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QAClG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,SAAS,QAAQ,iBAAkB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED,4EAA4E;IACpE,gBAAgB,CAAC,QAAgB,EAAE,SAA0B;QACnE,IAAI,GAAG,GAAG,QAAQ,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5B,GAAG,GAAG,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP;6EACiE;QACnE,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,OAAO,wBAAwB,CAAC;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,MAAM;YACd,GAAG;YACH,SAAS;YACT,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAAY;QAC/C,kEAAkE;QAClE,4EAA4E;QAC5E,MAAM,WAAW,GAAG,GAAW,EAAE,CAC/B,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAEnE,yEAAyE;QACzE,8BAA8B;QAC9B,IAAI,aAAa,GAAG,IAAI,CAAC,eAAe;YACtC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,eAAe,CAAC;YACvD,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,aAAa,CAAC,CAAC;QAElE,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAC3B,uEAAuE;YACvE,kDAAkD;YAClD,MAAM,SAAS,GAAG,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAClF,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;gBACjC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAClB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC5B,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM;wBACxC,CAAC,CAAC,OAAO,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,SAAS,CAAC,SAAS,EAAE;wBAC1E,CAAC,CAAC,aAAa,SAAS,CAAC,SAAS,EAAE,CAAC;oBACvC,MAAM,IAAI,UAAU,CAClB,MAAM,EACN,yEAAyE,MAAM,KAAK;wBAClF,0EAA0E,CAC7E,CAAC;gBACJ,CAAC;gBACD,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,aAAa,CAAC,CAAC;YAChE,CAAC;iBAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBACtF,mEAAmE;gBACnE,sEAAsE;gBACtE,MAAM,IAAI,UAAU,CAClB,MAAM,EACN,gFAAgF;oBAC9E,4EAA4E;oBAC5E,4DAA4D,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,iEAAiE;QACjE,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YACrD,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,6BAA6B,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,uDAAuD,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAClD,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,gCAAgC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,qBAAqB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,mBAAmB,CAAC,GAAe;QACzC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,UAAU,CAAC,IAAY;QACnC,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC;QAE7F,IAAI,UAAU,GAAsB,IAAI,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,kCAA0B,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC1D,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,+CAA+C;gBAC9E,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,QAAQ,GACZ,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;gBACpF,IAAI,CAAC,UAAU;oBAAE,UAAU,GAAG,QAAQ,CAAC;gBACvC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC;oBAAE,MAAM,QAAQ,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,MAAM,UAAU,IAAI,IAAI,UAAU,CAAC,WAAW,EAAE,qCAAqC,CAAC,CAAC;IACzF,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,oBAAoB;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAC/B,wEAAwE,CACzE,CAAC;QACF,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC;YACzC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;YAC3B,YAAY,EAAE,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC;YACzC,eAAe,EAAE,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,iBAAiB;QAC7B,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAC/B,wHAAwH,CACzH,CAAC;YACF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;gBAC1C,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBACnC,IAAI,KAAK,EAAE,CAAC;wBACV,kEAAkE;wBAClE,yDAAyD;wBACzD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;wBAC1C,OAAO,IAAI,CAAC,UAAU,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAkB,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,GAAG,CAAC,CAAC,kBAAkB;YACtE,2CAA2C;QAC7C,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,sBAAsB,CAAC;QACzE,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEO,WAAW,CAAC,KAAa;QAC/B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,sBAAsB,CAAC;QAChE,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,WAAW;QACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,8DAA8D,CAAC,CAAC;QACnG,MAAM,GAAG,GAAmB,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK;gBACL,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC;gBACxB,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CACzB,KAAK,EACL,8DAA8D;YAC5D,qFAAqF;YACrF,0GAA0G;YAC1G,iBAAiB,SAAS,CAAC,YAAY,CAAC,gCAAgC,CAC3E,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,6EAA6E;QAC7E,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YACxC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACK,iBAAiB,CAAC,YAAoB,EAAE,CAAM;QACpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,OAAO;QAC3C,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO;QAC7E,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC;YAAE,OAAO;QAChF,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,kCAAkC;YACxC,YAAY;YACZ,cAAc;YACd,aAAa,EAAE,IAAI,CAAC,IAAI;YACxB,OAAO,EACL,iCAAiC,cAAc,uCAAuC;gBACtF,iFAAiF;gBACjF,sFAAsF;gBACtF,kFAAkF;gBAClF,qDAAqD;SACxD,CAAC,CAAC;IACL,CAAC;CACF;AA/TD,kCA+TC"}

package/dist/diagnose.d.ts

@@ -31,7 +31,7 @@ export interface DiagnosticReport {
         skipped: number;
     };
 }
-declare const SDK_VERSION = "0.2.53";
+declare const SDK_VERSION = "0.2.55";
 declare function checkNodeVersion(): CheckResult;
 declare function checkPlatform(): CheckResult;
 declare function checkMemory(): CheckResult;

package/dist/diagnose.js

@@ -63,7 +63,7 @@ const localNetworkAccess_1 = require("./localNetworkAccess");
 // ---------------------------------------------------------------------------
 // SDK version — mirrors package.json; kept in sync by CI
 // ---------------------------------------------------------------------------
-const SDK_VERSION = '0.2.53';
+const SDK_VERSION = '0.2.55';
 exports._SDK_VERSION = SDK_VERSION;
 // ---------------------------------------------------------------------------
 // ANSI helpers (no external deps)