camstack 1.1.18 → 1.1.20

package/dist/{chunk-2EOZGJYA.js → chunk-VL5TLTQF.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-BiDFW0E7.mjs
+// ../types/dist/sleep-CZDdRBua.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -15539,7 +15539,16 @@ var DecoderStatsSchema = external_exports.object({
   inputFps: external_exports.number(),
   outputFps: external_exports.number(),
   avgDecodeTimeMs: external_exports.number(),
-  droppedFrames: external_exports.number()
+  droppedFrames: external_exports.number(),
+  /**
+  * Pull-mode adaptive-fps telemetry (optional — only pull sessions run the
+  * lag-driven controller; push sessions omit these). `lagMs` is the EWMA of
+  * the decoder's real-time drift (rising = falling behind live); `adaptiveFps`
+  * is the current lag-throttled emit rate (≤ `effectiveFps` ceiling).
+  */
+  lagMs: external_exports.number().optional(),
+  effectiveFps: external_exports.number().optional(),
+  adaptiveFps: external_exports.number().optional()
 });
 var DecoderSessionConfigSchema = external_exports.object({
   codec: external_exports.string(),
@@ -15580,7 +15589,15 @@ var DecoderSessionConfigSchema = external_exports.object({
   *   other — `pullFrames` returns nothing for an `'shm'` session and
   *   `pullHandles` returns nothing for a `'callback'` session.
   */
-  frameSink: external_exports.enum(["callback", "shm"]).default("callback")
+  frameSink: external_exports.enum(["callback", "shm"]).default("callback"),
+  /**
+  * Per-camera decoder DEBUG facility. When `true`, a pull-mode session emits
+  * a throttled (~1Hz) structured `decoder debug` line (effective/adaptive fps,
+  * real-time lag, dropped-frame delta, avg decode time, hwaccel). Mirrors the
+  * stream-broker's `streamingDebug` gate — off by default so production logs
+  * stay quiet and the emit path pays zero per-frame cost when disabled.
+  */
+  debug: external_exports.boolean().optional()
 });
 var VideoEncodeSchema = external_exports.object({
   codec: external_exports.enum([
@@ -18137,6 +18154,67 @@ var coverCapability = {
   */
   runtimeState: CoverStatusSchema
 };
+var DayNightModeSchema = external_exports.enum([
+  "auto",
+  "day",
+  "night",
+  "schedule"
+]);
+var NormalizedRangeSchema$1 = external_exports.object({
+  min: external_exports.number(),
+  max: external_exports.number(),
+  step: external_exports.number()
+});
+var DayNightStatusSchema = external_exports.object({
+  mode: DayNightModeSchema,
+  /** IR-cut trigger sensitivity, NORMALIZED 0–100 (higher = switches to night sooner). */
+  sensitivity: external_exports.number().optional(),
+  /** Delay before the IR-cut filter flips, in seconds. */
+  switchDelaySec: external_exports.number().optional(),
+  lastFetchedAt: external_exports.number()
+});
+var DayNightOptionsSchema = external_exports.object({
+  /** Modes this camera accepts. Empty → the camera has no configurable day/night mode. */
+  modes: external_exports.array(DayNightModeSchema),
+  supportsSensitivity: external_exports.boolean(),
+  /** Present when `supportsSensitivity` — the normalized 0–100 range. */
+  sensitivity: NormalizedRangeSchema$1.optional(),
+  supportsSwitchDelay: external_exports.boolean(),
+  /** Present when `supportsSwitchDelay` — the allowed delay range in seconds. */
+  switchDelaySec: NormalizedRangeSchema$1.optional()
+});
+var DayNightSettingsPatchSchema = external_exports.object({
+  mode: DayNightModeSchema.optional(),
+  sensitivity: external_exports.number().optional(),
+  switchDelaySec: external_exports.number().optional()
+});
+var dayNightCapability = {
+  name: "day-night",
+  scope: "device",
+  deviceNative: true,
+  mode: "singleton",
+  deviceTypes: [DeviceType.Camera],
+  deviceConfig: { ui: {
+    kind: "derived-form",
+    builderId: "day-night",
+    tab: "image"
+  } },
+  methods: {
+    getOptions: method(external_exports.object({ deviceId: external_exports.number() }), DayNightOptionsSchema),
+    setSettings: method(external_exports.object({
+      deviceId: external_exports.number(),
+      settings: DayNightSettingsPatchSchema
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    })
+  },
+  status: {
+    schema: DayNightStatusSchema,
+    kind: "poll"
+  },
+  runtimeState: DayNightStatusSchema
+};
 var SourceInfoSchema = external_exports.object({
   /** Live dispatch key — mutable when the source system allows rename. */
   id: external_exports.string(),
@@ -18579,6 +18657,107 @@ var imageCapability = {
   */
   runtimeState: ImageStatusSchema
 };
+var ImageRotateSchema = external_exports.enum([
+  "0",
+  "90",
+  "180",
+  "270"
+]);
+var WhiteBalanceModeSchema = external_exports.enum(["auto", "manual"]);
+var ExposureModeSchema = external_exports.enum(["auto", "manual"]);
+var BacklightModeSchema = external_exports.enum([
+  "off",
+  "blc",
+  "wdr",
+  "hlc"
+]);
+var NormalizedRangeSchema = external_exports.object({
+  min: external_exports.number(),
+  max: external_exports.number(),
+  step: external_exports.number()
+});
+var ImageSettingsStatusSchema = external_exports.object({
+  /** Normalized 0–100. */
+  brightness: external_exports.number().optional(),
+  /** Normalized 0–100. */
+  contrast: external_exports.number().optional(),
+  /** Normalized 0–100. */
+  saturation: external_exports.number().optional(),
+  /** Normalized 0–100. */
+  sharpness: external_exports.number().optional(),
+  mirror: external_exports.boolean().optional(),
+  flip: external_exports.boolean().optional(),
+  rotate: ImageRotateSchema.optional(),
+  whiteBalance: WhiteBalanceModeSchema.optional(),
+  /** Manual white-balance warmth, NORMALIZED 0–100. Meaningful only when `whiteBalance === 'manual'`. */
+  warmth: external_exports.number().optional(),
+  exposureMode: ExposureModeSchema.optional(),
+  backlightMode: BacklightModeSchema.optional(),
+  lastFetchedAt: external_exports.number()
+});
+var ImageSettingsOptionsSchema = external_exports.object({
+  supportsBrightness: external_exports.boolean(),
+  brightness: NormalizedRangeSchema.optional(),
+  supportsContrast: external_exports.boolean(),
+  contrast: NormalizedRangeSchema.optional(),
+  supportsSaturation: external_exports.boolean(),
+  saturation: NormalizedRangeSchema.optional(),
+  supportsSharpness: external_exports.boolean(),
+  sharpness: NormalizedRangeSchema.optional(),
+  supportsMirror: external_exports.boolean(),
+  supportsFlip: external_exports.boolean(),
+  /** Supported rotation values. Empty → rotation not configurable. */
+  rotateOptions: external_exports.array(ImageRotateSchema),
+  /** Supported white-balance modes. Empty → white-balance not configurable. */
+  whiteBalanceModes: external_exports.array(WhiteBalanceModeSchema),
+  supportsWarmth: external_exports.boolean(),
+  /** Present when `supportsWarmth` — the normalized 0–100 range. */
+  warmth: NormalizedRangeSchema.optional(),
+  /** Supported exposure modes. Empty → exposure not configurable. */
+  exposureModes: external_exports.array(ExposureModeSchema),
+  /** Supported backlight modes. Empty → backlight-compensation not configurable. */
+  backlightModes: external_exports.array(BacklightModeSchema)
+});
+var ImageSettingsPatchSchema = external_exports.object({
+  brightness: external_exports.number().optional(),
+  contrast: external_exports.number().optional(),
+  saturation: external_exports.number().optional(),
+  sharpness: external_exports.number().optional(),
+  mirror: external_exports.boolean().optional(),
+  flip: external_exports.boolean().optional(),
+  rotate: ImageRotateSchema.optional(),
+  whiteBalance: WhiteBalanceModeSchema.optional(),
+  warmth: external_exports.number().optional(),
+  exposureMode: ExposureModeSchema.optional(),
+  backlightMode: BacklightModeSchema.optional()
+});
+var imageSettingsCapability = {
+  name: "image-settings",
+  scope: "device",
+  deviceNative: true,
+  mode: "singleton",
+  deviceTypes: [DeviceType.Camera],
+  deviceConfig: { ui: {
+    kind: "derived-form",
+    builderId: "image-settings",
+    tab: "image"
+  } },
+  methods: {
+    getOptions: method(external_exports.object({ deviceId: external_exports.number() }), ImageSettingsOptionsSchema),
+    setSettings: method(external_exports.object({
+      deviceId: external_exports.number(),
+      settings: ImageSettingsPatchSchema
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    })
+  },
+  status: {
+    schema: ImageSettingsStatusSchema,
+    kind: "poll"
+  },
+  runtimeState: ImageSettingsStatusSchema
+};
 var LawnMowerActivitySchema = external_exports.enum([
   "idle",
   "mowing",
@@ -19555,6 +19734,16 @@ var RunnerCameraConfigSchema = external_exports.object({
   * this gate is bypassed.
   */
   onboardMotionDrivesAnalyzer: external_exports.boolean().default(true),
+  /**
+  * Master toggle for the occupancy re-check. When `false` (DEFAULT) the runner
+  * never arms the periodic recheck timer, regardless of `occupancyRecheckSec` —
+  * this is off by default because the recheck re-subscribes a detection session
+  * every N seconds while `watching`, a major source of pull-decoder re-dial
+  * churn (each cycle creates+tears a session → RTSP re-dial → latency). The
+  * `occupancyRecheckSec` / `occupancyRecheckFrames` sliders only take effect
+  * (and only render) when this is enabled.
+  */
+  occupancyRecheckEnabled: external_exports.boolean().default(false),
   occupancyRecheckSec: external_exports.number().min(occupancyRecheckSecField.min).max(occupancyRecheckSecField.max).default(occupancyRecheckSecField.default),
   occupancyRecheckFrames: external_exports.number().min(occupancyRecheckFramesField.min).max(occupancyRecheckFramesField.max).default(occupancyRecheckFramesField.default),
   /**
@@ -19590,6 +19779,8 @@ var RunnerCameraDeviceUIFields = [
     default: motionFpsField.default,
     showValue: true,
     unit: "fps",
+    nullable: true,
+    nullLabel: "Default",
     showWhen: {
       field: "motionSources",
       includes: "analyzer"
@@ -19604,7 +19795,9 @@ var RunnerCameraDeviceUIFields = [
     step: detectionFpsField.step,
     default: detectionFpsField.default,
     showValue: true,
-    unit: "fps"
+    unit: "fps",
+    nullable: true,
+    nullLabel: "Default"
   },
   {
     key: "motionCooldownMs",
@@ -19617,7 +19810,9 @@ var RunnerCameraDeviceUIFields = [
     default: motionCooldownMsField.default,
     showValue: true,
     unit: "s",
-    displayScale: 1e3
+    displayScale: 1e3,
+    nullable: true,
+    nullLabel: "Default"
   },
   {
     key: "onboardMotionDrivesAnalyzer",
@@ -19630,17 +19825,29 @@ var RunnerCameraDeviceUIFields = [
       includes: "onboard"
     }
   },
+  {
+    key: "occupancyRecheckEnabled",
+    type: "boolean",
+    style: "checkbox",
+    label: "Occupancy re-check",
+    description: "Periodically re-sample a few frames during the watching phase to confirm the scene is truly empty (catches stationary objects motion-gating would miss). Off by default \u2014 it adds decoder re-dial churn.",
+    default: false
+  },
   {
     key: "occupancyRecheckSec",
     type: "slider",
     label: "Occupancy re-check interval",
-    description: "How often (in seconds) the runner re-samples a few frames to confirm the scene is truly empty during the watching phase. 0 = disabled.",
+    description: "How often (in seconds) the runner re-samples a few frames to confirm the scene is truly empty during the watching phase.",
     min: occupancyRecheckSecField.min,
     max: occupancyRecheckSecField.max,
     step: occupancyRecheckSecField.step,
     default: occupancyRecheckSecField.default,
     showValue: true,
-    unit: "s"
+    unit: "s",
+    showWhen: {
+      field: "occupancyRecheckEnabled",
+      equals: true
+    }
   },
   {
     key: "occupancyRecheckFrames",
@@ -19651,7 +19858,11 @@ var RunnerCameraDeviceUIFields = [
     max: occupancyRecheckFramesField.max,
     step: occupancyRecheckFramesField.step,
     default: occupancyRecheckFramesField.default,
-    showValue: true
+    showValue: true,
+    showWhen: {
+      field: "occupancyRecheckEnabled",
+      equals: true
+    }
   }
 ];
 var RunnerLocalLoadSchema = external_exports.object({
@@ -22155,7 +22366,7 @@ var audioCodecCapability = {
   name: "audio-codec",
   scope: "system",
   mode: "singleton",
-  preferredProvider: "audio-codec-ffmpeg",
+  preferredProvider: "decoder-nodeav",
   methods: {
     /** Probe the local runtime and return the supported codec matrix. */
     listSupportedCodecs: method(external_exports.void(), external_exports.array(AudioCodecInfoSchema).readonly()),
@@ -22667,14 +22878,16 @@ var decoderCapability = {
   name: "decoder",
   scope: "system",
   mode: "singleton",
-  preferredProvider: "decoder-ffmpeg",
+  preferredProvider: "decoder-nodeav",
   methods: {
     supportsCodec: method(external_exports.object({ codec: external_exports.string() }), external_exports.boolean()),
     getInfo: method(external_exports.void(), external_exports.object({
       id: external_exports.string(),
       name: external_exports.string(),
       isPullMode: external_exports.boolean().optional(),
-      priority: external_exports.number().optional()
+      priority: external_exports.number().optional(),
+      hwaccel: external_exports.string().optional(),
+      probedBestHwaccel: external_exports.string().optional()
     })),
     createSession: method(DecoderSessionConfigSchema, external_exports.object({
       sessionId: external_exports.string(),
@@ -29738,6 +29951,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "dayNight.getOptions": {
+    capName: "day-night",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
+  "dayNight.setSettings": {
+    capName: "day-night",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "decoder.createSession": {
     capName: "decoder",
     capScope: "system",
@@ -30668,6 +30893,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "imageSettings.getOptions": {
+    capName: "image-settings",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
+  "imageSettings.setSettings": {
+    capName: "image-settings",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "integrations.create": {
     capName: "integrations",
     capScope: "system",
@@ -33400,6 +33637,10 @@ async function resolveHubFromDiscovered(nodes, httpsPort = DEFAULT_HUB_HTTPS_POR
   }
   return null;
 }
+async function filterHubNodes(nodes, httpsPort = DEFAULT_HUB_HTTPS_PORT) {
+  const verdicts = await Promise.all(nodes.map((n) => probeHttps(n.address, httpsPort)));
+  return nodes.filter((_, i) => verdicts[i] === true);
+}
 function parsePacket(text) {
   const parts = text.split("|");
   if (parts.length !== PACKET_FIELD_COUNT) return null;
@@ -33464,49 +33705,40 @@ async function runDiscover(args) {
   const group = typeof values["multicast-group"] === "string" ? values["multicast-group"] : void 0;
   const filterLabel = namespace ? `namespace "${namespace}"` : "all namespaces";
   console.log(
-    `[camstack] Listening for camstack nodes on ${filterLabel} (multicast ${group ?? DEFAULT_MULTICAST_GROUP}:${udpPort ?? DEFAULT_UDP_PORT}, ${(timeoutMs ?? 6e3) / 1e3}s)\u2026`
+    `[camstack] Listening for camstack hubs on ${filterLabel} (multicast ${group ?? DEFAULT_MULTICAST_GROUP}:${udpPort ?? DEFAULT_UDP_PORT}, ${(timeoutMs ?? 6e3) / 1e3}s)\u2026`
   );
-  const nodes = await discoverNodes({
+  const discovered = await discoverNodes({
     ...namespace !== void 0 ? { namespace } : {},
     ...timeoutMs !== void 0 ? { timeoutMs } : {},
     ...udpPort !== void 0 ? { udpPort } : {},
     ...group !== void 0 ? { multicastGroup: group } : {}
   });
+  const hubs = await filterHubNodes(discovered);
   if (values.json === true) {
-    console.log(JSON.stringify(nodes, null, 2));
+    console.log(JSON.stringify(hubs, null, 2));
     return;
   }
-  if (nodes.length === 0) {
+  if (hubs.length === 0) {
     console.log(
-      "[camstack] No nodes responded. Verify the hub is running with a matching namespace + that you are on the same LAN."
+      "[camstack] No hubs responded. Verify the hub is running with a matching namespace + that you are on the same LAN."
     );
     return;
   }
-  console.log(`[camstack] Found ${nodes.length} node(s):`);
-  const idWidth = Math.max(...nodes.map((n) => n.nodeID.length));
-  const nsWidth = Math.max(...nodes.map((n) => n.namespace.length));
-  for (const n of nodes) {
+  console.log(`[camstack] Found ${hubs.length} hub(s):`);
+  const idWidth = Math.max(...hubs.map((n) => n.nodeID.length));
+  const nsWidth = Math.max(...hubs.map((n) => n.namespace.length));
+  for (const n of hubs) {
     console.log(
-      `  \u2022 ${n.nodeID.padEnd(idWidth)}  ${n.address}  ns=${n.namespace.padEnd(nsWidth)}  (moleculer tcp :${n.tcpPort})`
+      `  \u2022 ${n.nodeID.padEnd(idWidth)}  ${n.address}  ns=${n.namespace.padEnd(nsWidth)}  (https :${DEFAULT_HUB_HTTPS_PORT})`
     );
-  }
-  if (namespace) {
-    const hub = await resolveHubFromDiscovered(nodes);
-    if (hub) {
-      console.log(``);
-      console.log(`[camstack] Hub HTTPS surface: https://${hub.address}:${hub.port}`);
-      console.log(`[camstack]   \u2192 camstack login -s https://${hub.address}:${hub.port}`);
-    } else {
-      console.log(``);
-      console.log(
-        `[camstack] No node responded on default HTTPS port ${DEFAULT_HUB_HTTPS_PORT}. Pass --server manually.`
-      );
-    }
+    console.log(`      \u2192 camstack login -s https://${n.address}:${DEFAULT_HUB_HTTPS_PORT}`);
   }
 }
 
 export {
+  DEFAULT_HUB_HTTPS_PORT,
   discoverNodes,
   resolveHubFromDiscovered,
+  filterHubNodes,
   runDiscover
 };

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-2EOZGJYA.js";
+} from "./chunk-VL5TLTQF.js";
 import "./chunk-K3NQKI34.js";
 
 // src/cli.ts
@@ -137,8 +137,59 @@ function runSetup(args) {
 
 // src/commands/deploy.ts
 import { execSync } from "child_process";
+import { randomBytes } from "crypto";
 import * as fs2 from "fs";
 import * as path2 from "path";
+
+// src/http/hub-http.ts
+import * as http from "http";
+import * as https from "https";
+import { Buffer as Buffer2 } from "buffer";
+var insecureHubAgent = new https.Agent({ rejectUnauthorized: false, keepAlive: false });
+var DEFAULT_TIMEOUT_MS = 3e4;
+function hubRequest(url, opts = {}) {
+  const parsed = new URL(url);
+  const isHttps = parsed.protocol === "https:";
+  const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  return new Promise((resolve4, reject) => {
+    const requestOptions = {
+      protocol: parsed.protocol,
+      hostname: parsed.hostname,
+      port: parsed.port || (isHttps ? 443 : 80),
+      path: `${parsed.pathname}${parsed.search}`,
+      method: opts.method ?? "GET",
+      headers: { ...opts.headers },
+      timeout: timeoutMs,
+      ...isHttps ? { agent: insecureHubAgent } : {}
+    };
+    const onResponse = (res) => {
+      const chunks = [];
+      res.on("data", (chunk) => chunks.push(chunk));
+      res.on("end", () => {
+        const buffer = Buffer2.concat(chunks);
+        const status = res.statusCode ?? 0;
+        resolve4({
+          ok: status >= 200 && status < 300,
+          status,
+          statusText: res.statusMessage ?? "",
+          headers: res.headers,
+          text: () => Promise.resolve(buffer.toString("utf8")),
+          json: () => Promise.resolve().then(() => JSON.parse(buffer.toString("utf8")))
+        });
+      });
+      res.on("error", reject);
+    };
+    const req = isHttps ? https.request(requestOptions, onResponse) : http.request(requestOptions, onResponse);
+    req.on("error", reject);
+    req.on("timeout", () => {
+      req.destroy(new Error(`Hub request to ${parsed.host} timed out after ${timeoutMs}ms`));
+    });
+    if (opts.body !== void 0) req.write(opts.body);
+    req.end();
+  });
+}
+
+// src/commands/deploy.ts
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -167,7 +218,7 @@ async function withNetworkRetry(fn, opts) {
 async function verifyHubHealthy(serverUrl, opts) {
   for (let attempt = 1; attempt <= opts.attempts; attempt++) {
     try {
-      const res = await fetch(`${serverUrl}/health`, { signal: AbortSignal.timeout(5e3) });
+      const res = await hubRequest(`${serverUrl}/health`, { timeoutMs: 5e3 });
       if (res.ok) {
         const body = await res.json().catch(() => ({}));
         if (body.ok === true) return true;
@@ -326,7 +377,7 @@ function packAddon(addonDir) {
 }
 async function fetchOnlineAgents(serverUrl, token) {
   const url = `${serverUrl}/trpc/nodes.topology?input=${encodeURIComponent('{"json":null}')}`;
-  const res = await fetch(url, {
+  const res = await hubRequest(url, {
     headers: { Authorization: `Bearer ${token}` }
   });
   if (!res.ok) {
@@ -341,15 +392,36 @@ async function fetchOnlineAgents(serverUrl, token) {
 async function uploadToTarget(args) {
   const { serverUrl, token, tgzPath, nodeId, addonId } = args;
   const fileBuffer = fs2.readFileSync(tgzPath);
-  const formData = new FormData();
-  const blob = new Blob([fileBuffer], { type: "application/gzip" });
-  formData.append("file", blob, path2.basename(tgzPath));
-  if (nodeId) formData.append("nodeId", nodeId);
-  if (addonId) formData.append("addonId", addonId);
-  const response = await fetch(`${serverUrl}/api/addons/upload`, {
+  const boundary = `----camstackcli${randomBytes(16).toString("hex")}`;
+  const CRLF = "\r\n";
+  const parts = [
+    Buffer.from(
+      `--${boundary}${CRLF}Content-Disposition: form-data; name="file"; filename="${path2.basename(tgzPath)}"${CRLF}Content-Type: application/gzip${CRLF}${CRLF}`
+    ),
+    fileBuffer,
+    Buffer.from(CRLF)
+  ];
+  const appendField = (name, value) => {
+    parts.push(
+      Buffer.from(
+        `--${boundary}${CRLF}Content-Disposition: form-data; name="${name}"${CRLF}${CRLF}${value}${CRLF}`
+      )
+    );
+  };
+  if (nodeId) appendField("nodeId", nodeId);
+  if (addonId) appendField("addonId", addonId);
+  parts.push(Buffer.from(`--${boundary}--${CRLF}`));
+  const body = Buffer.concat(parts);
+  const response = await hubRequest(`${serverUrl}/api/addons/upload`, {
     method: "POST",
-    headers: { Authorization: `Bearer ${token}` },
-    body: formData
+    headers: {
+      Authorization: `Bearer ${token}`,
+      "Content-Type": `multipart/form-data; boundary=${boundary}`,
+      "Content-Length": String(body.length)
+    },
+    body,
+    // Large tarballs + a hub that may be mid-bounce — give it room.
+    timeoutMs: 12e4
   });
   const result = toDeployResult(await response.json().catch(() => ({})));
   if (!response.ok) {
@@ -557,7 +629,7 @@ async function askSelect(message, options) {
 async function callTrpcMutation(url, authorization, payload, isPayload) {
   const headers = { "Content-Type": "application/json" };
   if (authorization) headers["Authorization"] = authorization;
-  const res = await fetch(url, {
+  const res = await hubRequest(url, {
     method: "POST",
     headers,
     body: JSON.stringify({ "0": { json: payload } })
@@ -608,7 +680,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered } = await import("./discover-HWCPQL6X.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-3WTX7YIA.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);
@@ -619,41 +691,36 @@ async function resolveServerInteractive(presetNamespace) {
     }
     const hub = await resolveHubFromDiscovered(filtered);
     if (!hub) {
-      spinner4.stop(`Found ${filtered.length} node(s) but none responded on HTTPS :4443.`);
+      spinner4.stop(`Found ${filtered.length} node(s) but none served the hub API on HTTPS :4443.`);
       throw new Error("Pass --server explicitly if the hub uses a non-default port.");
     }
     spinner4.stop(`Hub: ${hub.nodeID} @ https://${hub.address}:${hub.port}`);
     return `https://${hub.address}:${hub.port}`;
   }
   const spinner3 = clack.spinner();
-  spinner3.start("Scanning LAN for camstack nodes (UDP multicast)");
+  spinner3.start("Discovering camstack hub on LAN (UDP multicast)");
   const all = await discoverNodes({});
-  if (all.length === 0) {
-    spinner3.stop("No camstack nodes responded on LAN.");
+  const hubs = await filterHubNodes(all);
+  if (hubs.length === 0) {
+    spinner3.stop("No camstack hub responded on LAN.");
     throw new Error("Either pass --server or verify the hub is running on the same network.");
   }
-  spinner3.stop(`Found ${all.length} node(s).`);
+  if (hubs.length === 1) {
+    const only = hubs[0];
+    spinner3.stop(`Hub: ${only.nodeID} @ https://${only.address}:${DEFAULT_HUB_HTTPS_PORT}`);
+    return `https://${only.address}:${DEFAULT_HUB_HTTPS_PORT}`;
+  }
+  spinner3.stop(`Found ${hubs.length} hubs.`);
   const chosen = await askSelect(
     "Select a hub to log into",
-    all.map((n) => ({
-      value: `${n.address}|${n.tcpPort}|${n.nodeID}|${n.namespace}`,
+    hubs.map((n) => ({
+      value: `${n.address}|${n.nodeID}`,
       label: `${n.nodeID}  ${n.address}  (ns: ${n.namespace || "(none)"})`,
-      hint: `tcp :${n.tcpPort}`
+      hint: `https :${DEFAULT_HUB_HTTPS_PORT}`
     }))
   );
-  const [addr, , nodeID] = chosen.split("|");
-  const chosenNode = all.find((n) => n.address === addr && n.nodeID === nodeID);
-  const probeSpinner = clack.spinner();
-  probeSpinner.start(`Probing https://${chosenNode.address}:4443`);
-  const probed = await resolveHubFromDiscovered([chosenNode]);
-  if (!probed) {
-    probeSpinner.stop(
-      `Node ${chosenNode.nodeID} at ${chosenNode.address} did not respond on HTTPS :4443.`
-    );
-    throw new Error("Pass --server explicitly if the hub uses a non-default port.");
-  }
-  probeSpinner.stop(`Reachable at https://${probed.address}:${probed.port}`);
-  return `https://${probed.address}:${probed.port}`;
+  const [addr] = chosen.split("|");
+  return `https://${addr}:${DEFAULT_HUB_HTTPS_PORT}`;
 }
 var BACK_SENTINEL = "__back__";
 async function askWithBack(label, defaultValue) {
@@ -822,13 +889,10 @@ async function whoamiCommand(opts) {
   console.log("");
   console.log(`[camstack] Pinging ${session.server}/api/auth/whoami\u2026`);
   try {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), 3e3);
-    const res = await fetch(`${session.server}/api/auth/whoami`, {
+    const res = await hubRequest(`${session.server}/api/auth/whoami`, {
       headers: { Authorization: `Bearer ${session.token}` },
-      signal: controller.signal
+      timeoutMs: 3e3
     });
-    clearTimeout(timer);
     if (res.status === 401) {
       clearSession(session.server);
       console.error(`[camstack] \u2717 Token rejected by server (revoked / expired).`);
@@ -1230,7 +1294,7 @@ function printLine(e, addonId) {
 async function fetchLogs(server, token, addonId, limit) {
   const input = encodeURIComponent(JSON.stringify({ json: { addonId, limit } }));
   const url = `${server}/trpc/addons.getLogs?input=${input}`;
-  const res = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });
+  const res = await hubRequest(url, { headers: { Authorization: `Bearer ${token}` } });
   if (!res.ok) {
     const text2 = await res.text().catch(() => "");
     throw new Error(`getLogs HTTP ${res.status}: ${text2.slice(0, 200)}`);
@@ -1408,12 +1472,13 @@ function buildCommands() {
       help: () => [
         "Usage: camstack login [options]",
         "",
-        "Default flow (no flags): scans the LAN for camstack nodes via UDP multicast,",
-        "  prompts you to pick one (arrow-key list), then user + password.",
+        "Default flow (no flags): auto-discovers the hub on the LAN via UDP multicast",
+        "  (hub-only \u2014 agents never surface), then prompts for user + password. When a",
+        "  single hub is found it is used automatically; multiple hubs show a picker.",
         "",
-        "Options:",
+        "Options (all optional):",
         "  -s, --server <url>     Skip discovery, use this URL directly ($CAMSTACK_SERVER)",
-        "  -n, --namespace <ns>   Skip the interactive picker \u2014 auto-resolves the hub for this namespace ($CAMSTACK_NAMESPACE)",
+        "  -n, --namespace <ns>   Filter discovery to this cluster namespace ($CAMSTACK_NAMESPACE)",
         "  -u, --username <name>  Username (skips prompt)",
         "  -p, --password <pwd>   Password (skips prompt \u2014 prefer letting the CLI prompt)",
         `  --token-name <name>    Name shown server-side (default: camstack-cli@${os4.hostname()})`
@@ -1421,12 +1486,13 @@ function buildCommands() {
     },
     {
       name: "discover",
-      summary: "Probe the LAN for camstack hubs/agents via UDP multicast",
+      summary: "Probe the LAN for camstack hubs via UDP multicast",
       run: runDiscover,
       help: () => [
         "Usage: camstack discover [options]",
         "",
-        "With no flags: lists every camstack node visible on the LAN (any namespace).",
+        "With no flags: lists every camstack HUB visible on the LAN (any namespace).",
+        "  Agents are never listed \u2014 only nodes serving the hub HTTPS API on :4443.",
         "",
         "Options:",
         "  -n, --namespace <ns>      Filter results to one namespace ($CAMSTACK_NAMESPACE)",
@@ -1590,7 +1656,12 @@ async function runLogin(args) {
       namespace: { type: "string", short: "n" },
       username: { type: "string", short: "u" },
       password: { type: "string", short: "p" },
-      "token-name": { type: "string" }
+      "token-name": { type: "string" },
+      // Accepted-and-ignored: `--no-verify` is a `deploy`-only flag (skip the
+      // post-deploy health gate). Login has no verify step, but operators
+      // muscle-memory it in — we swallow it here so `camstack login --no-verify`
+      // never errors with "Unknown option --no-verify".
+      "no-verify": { type: "boolean" }
     },
     false
   );
@@ -1712,9 +1783,6 @@ function optionalString(values, key, outKey) {
   return { [outKey ?? key]: v };
 }
 async function main() {
-  if (!process.env.CAMSTACK_STRICT_TLS) {
-    process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
-  }
   maybeNotifyUpdate("camstack", pkgVersion);
   const argv = process.argv.slice(2);
   const commands = buildCommands();

package/dist/{discover-HWCPQL6X.js → discover-3WTX7YIA.js}

@@ -1,12 +1,16 @@
 #!/usr/bin/env node
 import {
+  DEFAULT_HUB_HTTPS_PORT,
   discoverNodes,
+  filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-2EOZGJYA.js";
+} from "./chunk-VL5TLTQF.js";
 import "./chunk-K3NQKI34.js";
 export {
+  DEFAULT_HUB_HTTPS_PORT,
   discoverNodes,
+  filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.1.18",
+  "version": "1.1.20",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",