camstack 1.2.191 → 1.2.192

package/dist/cli.js

@@ -37,7 +37,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-AZI5I6X5.js");
+  await import("./launcher-PJJ7PTWL.js");
 }
 
 // src/commands/agent.ts
@@ -82,7 +82,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-AZI5I6X5.js");
+  await import("./launcher-PJJ7PTWL.js");
 }
 
 // src/commands/setup.ts
@@ -14773,7 +14773,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-BxjU_fJM.mjs
+// ../types/dist/sleep-yKL5gfrH.mjs
 var AUDIO_CHUNK_FORMATS = [
   "f32le",
   "pcmu",
@@ -18584,10 +18584,12 @@ var AddonRoutesScopeSchema = external_exports.object({
   type: external_exports.literal("addon-routes"),
   access: external_exports.array(MethodAccessSchema).min(1)
 });
+var PreferencesSelfScopeSchema = external_exports.object({ type: external_exports.literal("preferences-self") });
 var CredentialScopeSchema = external_exports.union([
   external_exports.literal("*"),
   ShareViewScopeSchema,
   AddonRoutesScopeSchema,
+  PreferencesSelfScopeSchema,
   TokenScopeSchema
 ]);
 var CREDENTIAL_TOKEN_KIND = "credential";
@@ -18597,6 +18599,58 @@ var CredentialTokenClaimsSchema = external_exports.object({
   jti: external_exports.string().min(16),
   scopes: external_exports.array(CredentialScopeSchema).min(1)
 });
+var PREFERENCES_NAMESPACE_PATTERN = /^[a-z][a-z0-9.-]{0,63}$/;
+var PREFERENCES_MAX_VALUE_BYTES = 256 * 1024;
+var PreferenceNamespaceSchema = external_exports.string().regex(PREFERENCES_NAMESPACE_PATTERN);
+var PreferenceValueSchema = external_exports.record(external_exports.string(), external_exports.unknown());
+var PreferenceDeviceIdSchema = external_exports.string().min(1).max(64);
+var PreferenceRowSchema = external_exports.object({
+  namespace: PreferenceNamespaceSchema,
+  value: PreferenceValueSchema,
+  /** Starts at 1, +1 on every write of this namespace. A delete ends the row and its count. */
+  revision: external_exports.number().int().positive(),
+  updatedAt: external_exports.number().int(),
+  /** The client id the last writer sent; `null` when it sent none. */
+  updatedByDevice: PreferenceDeviceIdSchema.nullable()
+});
+var PreferencesGetInputSchema = external_exports.object({
+  /** Absent: every namespace the caller holds. */
+  namespaces: external_exports.array(PreferenceNamespaceSchema).max(32).optional()
+});
+var PreferencesGetOutputSchema = external_exports.object({ rows: external_exports.array(PreferenceRowSchema) });
+var PreferencesPutInputSchema = external_exports.object({
+  namespace: PreferenceNamespaceSchema,
+  value: PreferenceValueSchema,
+  /**
+  * The revision the edit was based on. Absent: last write wins. `0`: the
+  * namespace must not exist yet. Any other value that is not the current
+  * revision answers `conflict` and writes nothing.
+  */
+  baseRevision: external_exports.number().int().nonnegative().optional(),
+  deviceId: PreferenceDeviceIdSchema.optional()
+});
+var PreferencesPutOutputSchema = external_exports.discriminatedUnion("status", [external_exports.object({
+  status: external_exports.literal("saved"),
+  row: PreferenceRowSchema
+}), external_exports.object({
+  status: external_exports.literal("conflict"),
+  current: PreferenceRowSchema.nullable()
+})]);
+var PreferencesDeleteInputSchema = external_exports.object({ namespace: PreferenceNamespaceSchema });
+var PreferencesDeleteOutputSchema = external_exports.object({
+  /** `false` when the namespace did not exist. */
+  deleted: external_exports.boolean()
+});
+var PreferencesChangedSinceInputSchema = external_exports.object({
+  /** The revision the client holds per namespace; a namespace it does not list is new to it. */
+  revisionByNamespace: external_exports.record(PreferenceNamespaceSchema, external_exports.number().int().nonnegative()).refine((map2) => Object.keys(map2).length <= 32, { message: `at most 32 namespaces` })
+});
+var PreferencesChangedSinceOutputSchema = external_exports.object({
+  /** Every row whose revision differs from the client's, and every row it did not list. */
+  rows: external_exports.array(PreferenceRowSchema),
+  /** Namespaces the client listed that no longer exist. */
+  deleted: external_exports.array(PreferenceNamespaceSchema)
+});
 var AppFlowPurposeSchema = external_exports.enum(["new-session", "step-up"]);
 var AppPageLangSchema = external_exports.enum(["en", "it"]);
 var APP_FLOW_REFUSAL_MESSAGES = {
@@ -46576,27 +46630,30 @@ var llmRuntimeCapability = {
     })
   }
 };
-var LlmProfileKindSchema = external_exports.enum([
-  "openai-compatible",
-  "openai",
-  "anthropic",
-  "google",
-  "managed-local",
-  "apple-foundation"
-]);
+var LLM_PROFILE_KIND_PATTERN = /^[a-z0-9][a-z0-9-]{0,63}$/;
+var LlmProfileKindSchema = external_exports.string().regex(LLM_PROFILE_KIND_PATTERN, "a kind id is lower-case letters, digits and dashes");
+var LlmModelFeaturesSchema = external_exports.object({
+  vision: external_exports.boolean(),
+  tools: external_exports.boolean(),
+  streaming: external_exports.boolean()
+});
+var LlmModelInfoSchema = external_exports.object({
+  id: external_exports.string(),
+  label: external_exports.string().optional(),
+  contextLength: external_exports.number().int().positive().optional(),
+  features: LlmModelFeaturesSchema.partial().optional()
+});
+var LlmProviderConfigSchema = external_exports.record(external_exports.string(), external_exports.unknown());
 var LlmProfileSchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
+  /** The provider-declared kind (`LlmProfileKindDescriptor.kind`). */
   kind: LlmProfileKindSchema,
   /** Stamped by the provider — keeps the fanned catalog routable. */
   addonId: external_exports.string(),
   enabled: external_exports.boolean(),
   /** Vendor model id, or the managed runtime's loaded model. */
   model: external_exports.string(),
-  /** Required for openai-compatible; override for cloud kinds. */
-  baseUrl: external_exports.string().optional(),
-  /** ConfigUISchema type:'password' — never round-trips (spec §5). */
-  apiKey: external_exports.string().optional(),
   /** Vision on/off. A vision call against a `false` profile is REFUSED, never
   *  degraded to text — that shipped once and produced a confident answer to a
   *  question about a picture nobody sent. */
@@ -46604,15 +46661,11 @@ var LlmProfileSchema = external_exports.object({
   temperature: external_exports.number().min(0).max(2).optional(),
   /** Nucleus sampling. Every wire we speak has it. */
   topP: external_exports.number().min(0).max(1).optional(),
-  /** Top-k sampling. Carried only by the wires that have it — NEITHER OpenAI
-  *  wire does, and the client drops it there (measured: the request body gets
-  *  `top_p` and no `top_k`). The profile editor hides the field wherever it
-  *  would change nothing; `KINDS_WITH_TOP_K` is the single owner of that list. */
+  /** Top-k sampling. Carried only by the wires that have it — a kind offers the
+  *  field in its editor only when its descriptor lists it in `profileFields`. */
   topK: external_exports.number().int().positive().optional(),
   maxTokens: external_exports.number().int().positive().optional(),
-  /** Prompt context window. Advisory for cloud kinds (they enforce their own);
-  *  for `managed-local` it is the llama.cpp `--ctx-size` the runtime starts
-  *  the model with, so it is the one field that changes a PROCESS. */
+  /** Prompt context window. Advisory for cloud kinds (they enforce their own). */
   contextLength: external_exports.number().int().positive().optional(),
   /** Default system prompt. A caller's `system` REPLACES it (never appends —
   *  two system prompts fighting is worse than either alone). */
@@ -46638,26 +46691,76 @@ var LlmProfileSchema = external_exports.object({
   *  library; the REGISTRY of callable tools is ours and is empty in v1, so a
   *  `true` here buys the wiring, not behaviour, until tools are registered. */
   toolsEnabled: external_exports.boolean().default(false),
-  extraHeaders: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  /** kind === 'managed-local' only (spec §4). */
-  runtime: ManagedRuntimeConfigSchema.optional(),
-  /**
-  * kind === 'apple-foundation' only: WHERE it runs — the only thing there is
-  * to configure (no key, no URL, no download; `model` is `apple-system`).
-  * `supportsVision` on such a row is stamped by the provider from the node's
-  * reported `imageInput`, never taken from the operator (D62).
-  */
-  appleFoundation: external_exports.object({ nodeId: external_exports.string() }).optional()
+  /** Everything the kind's provider owns (endpoint, key, node, runtime…). */
+  providerConfig: LlmProviderConfigSchema.default({})
+});
+var LlmProfileFieldSchema = external_exports.enum([
+  "temperature",
+  "topP",
+  "topK",
+  "maxTokens",
+  "contextLength",
+  "systemPrompt",
+  "timeoutMs",
+  "connectTimeoutMs",
+  "firstTokenTimeoutMs",
+  "idleTimeoutMs",
+  "retry",
+  "toolsEnabled"
+]);
+var LlmProviderWidgetSchema = external_exports.object({
+  id: external_exports.string(),
+  placement: external_exports.enum(["connection", "model"]),
+  /** `providerConfig` keys this widget must fill before the profile can be saved. */
+  requires: external_exports.array(external_exports.string()).optional()
 });
 var ConfigSchemaPassthrough$3 = external_exports.unknown();
 var LlmProfileKindDescriptorSchema = external_exports.object({
   kind: LlmProfileKindSchema,
   label: external_exports.string(),
+  /** A generic icon name (`cloud`, `plug`, `cpu`) — never a glyph or a logo. */
   icon: external_exports.string(),
   /** Stamped by each provider so the concat-fanned catalog stays routable. */
   addonId: external_exports.string(),
-  configSchema: ConfigSchemaPassthrough$3
+  /** The provider's own fields (`providerConfig`); `password` fields are keychain-held. */
+  connectionSchema: ConfigSchemaPassthrough$3,
+  /** Provider fields that belong under "Advanced" (extra headers, runtime tuning). */
+  advancedSchema: ConfigSchemaPassthrough$3.optional(),
+  /** The kind's defaults; a model from `listModels` may override any of them. */
+  features: LlmModelFeaturesSchema,
+  /** `false` = the provider stamps `supportsVision` itself (from what a node reports). */
+  visionEditable: external_exports.boolean(),
+  /** Where the model list comes from: `listModels`, `staticModels`, or nowhere. */
+  modelCatalog: external_exports.enum([
+    "fetch",
+    "static",
+    "none"
+  ]),
+  staticModels: external_exports.array(LlmModelInfoSchema).optional(),
+  /** The common fields that mean something on this kind's wire. */
+  profileFields: external_exports.array(LlmProfileFieldSchema),
+  providerWidgets: external_exports.array(LlmProviderWidgetSchema).optional()
+});
+var LlmListModelsInputSchema = external_exports.object({
+  addonId: external_exports.string(),
+  kind: LlmProfileKindSchema,
+  profileId: external_exports.string().optional(),
+  connection: LlmProviderConfigSchema.optional()
 });
+var LlmListModelsErrorCodeSchema = external_exports.enum([
+  "auth",
+  "network",
+  "unsupported",
+  "invalid"
+]);
+var LlmListModelsResultSchema = external_exports.discriminatedUnion("ok", [external_exports.object({
+  ok: external_exports.literal(true),
+  models: external_exports.array(LlmModelInfoSchema)
+}), external_exports.object({
+  ok: external_exports.literal(false),
+  code: LlmListModelsErrorCodeSchema,
+  message: external_exports.string()
+})]);
 var LlmDefaultSelectorSchema = external_exports.union([external_exports.object({ consumer: external_exports.string() }), external_exports.object({ purpose: external_exports.enum(["text", "vision"]) })]);
 var LlmDefaultSchema = external_exports.object({
   selector: LlmDefaultSelectorSchema,
@@ -46777,8 +46880,17 @@ var llmCapability = {
       auth: "admin",
       timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
     }),
-    /** Live vendor enumeration (GET /models etc.). */
-    listModels: method(ProfileRefInputSchema, external_exports.array(external_exports.string())),
+    /**
+    * The models a kind offers, for a SAVED profile or an unsaved draft
+    * (`connection`). A mutation, not a query: a draft may carry a key, and a
+    * query's input travels in the URL. Admin: it dials whatever endpoint the
+    * draft names and may resolve a stored key to do it. The answer never
+    * carries a secret — failures are a typed result, never a throw.
+    */
+    listModels: method(LlmListModelsInputSchema, LlmListModelsResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
     getDefaults: method(external_exports.object({}), external_exports.array(LlmDefaultSchema)),
     setDefault: method(external_exports.object({
       selector: LlmDefaultSelectorSchema,
@@ -70044,26 +70156,6 @@ var ApiKeySummarySchema = external_exports.object({
   createdAt: external_exports.number(),
   lastUsedAt: external_exports.number().optional()
 });
-var ScopedTokenSummarySchema = external_exports.object({
-  id: external_exports.string(),
-  userId: external_exports.string(),
-  name: external_exports.string(),
-  tokenPrefix: external_exports.string(),
-  scopes: external_exports.array(TokenScopeSchema),
-  expiresAt: external_exports.number().nullish(),
-  lastUsedAt: external_exports.number().nullish(),
-  createdAt: external_exports.number()
-});
-var CreateScopedTokenInputSchema = external_exports.object({
-  userId: external_exports.string(),
-  name: external_exports.string(),
-  scopes: external_exports.array(TokenScopeSchema),
-  expiresAt: external_exports.number().optional()
-});
-var CreateScopedTokenResultSchema = external_exports.object({
-  token: external_exports.string(),
-  record: ScopedTokenSummarySchema
-});
 var OauthSessionSummarySchema = external_exports.object({
   id: external_exports.string(),
   userId: external_exports.string(),
@@ -70150,18 +70242,6 @@ var userManagementCapability = {
       auth: "admin",
       access: "delete"
     }),
-    createScopedToken: method(CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, {
-      kind: "mutation",
-      auth: "admin",
-      access: "create"
-    }),
-    revokeScopedToken: method(external_exports.object({ id: external_exports.string() }), external_exports.object({ success: external_exports.literal(true) }), {
-      kind: "mutation",
-      auth: "admin",
-      access: "delete"
-    }),
-    validateScopedToken: method(external_exports.object({ token: external_exports.string() }), ScopedTokenSummarySchema.nullable(), { access: "view" }),
-    listScopedTokens: method(external_exports.object({ userId: external_exports.string() }), external_exports.array(ScopedTokenSummarySchema), { auth: "admin" }),
     setupTotp: method(external_exports.object({ userId: external_exports.string() }), TotpSetupResultSchema, {
       kind: "mutation",
       auth: "admin",
@@ -74839,7 +74919,7 @@ var METHOD_ACCESS_MAP = Object.freeze({
     capName: "llm",
     capScope: "system",
     addonId: null,
-    access: "view"
+    access: "create"
   },
   "llm.listNodeModels": {
     capName: "llm",
@@ -79503,12 +79583,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "userManagement.createScopedToken": {
-    capName: "user-management",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
   "userManagement.createUser": {
     capName: "user-management",
     capScope: "system",
@@ -79557,12 +79631,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "userManagement.listScopedTokens": {
-    capName: "user-management",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
   "userManagement.listUsers": {
     capName: "user-management",
     capScope: "system",
@@ -79617,12 +79685,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "delete"
   },
-  "userManagement.revokeScopedToken": {
-    capName: "user-management",
-    capScope: "system",
-    addonId: null,
-    access: "delete"
-  },
   "userManagement.setupTotp": {
     capName: "user-management",
     capScope: "system",
@@ -79653,12 +79715,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "userManagement.validateScopedToken": {
-    capName: "user-management",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
   "userManagement.verifyTotp": {
     capName: "user-management",
     capScope: "system",
@@ -86154,7 +86210,7 @@ function isLoginPayload(value) {
 function revocationFor(session) {
   if (session.tokenId) {
     return {
-      procedure: "userManagement.revokeScopedToken",
+      procedure: "auth.revokeToken",
       input: { id: session.tokenId },
       bearer: "fresh"
     };