camstack 1.2.58 → 1.2.60

package/dist/{chunk-NEA5DJLZ.js → chunk-ARTM5NDU.js}

@@ -22053,6 +22053,38 @@ var NodeProcessSchema = external_exports.object({
   /** Wall-clock uptime (seconds). Parsed from `ps etime`. */
   uptimeSec: external_exports.number()
 });
+var ContainerMemoryPointSchema = external_exports.object({
+  /** Which hierarchy answered, so a reading is never ambiguous. */
+  source: external_exports.enum(["cgroup-v2", "cgroup-v1"]),
+  /** `memory.current` (v2) / `memory.usage_in_bytes` (v1). Always known. */
+  currentBytes: external_exports.number(),
+  /** The cgroup's ceiling. `null` = NO LIMIT — never a sentinel, never zero. */
+  limitBytes: external_exports.number().nullable(),
+  /** Anonymous pages: the closest thing to "what the processes allocated". */
+  anonBytes: external_exports.number().nullable(),
+  /** Page cache. Charged to the cgroup, owned by no process. */
+  fileBytes: external_exports.number().nullable(),
+  /**
+  * Shared memory — and the field that explained the largest single surprise.
+  * The i915 driver backs GPU buffers with shmem, so an inference pool or a
+  * hardware-decode session holding DRM objects is charged HERE and appears
+  * nowhere in a `ps` scan.
+  */
+  shmemBytes: external_exports.number().nullable(),
+  /** Kernel slab charged to this cgroup. `null` on v1, which never publishes it. */
+  slabBytes: external_exports.number().nullable(),
+  /**
+  * Shrinkable i915 GEM object bytes, from debugfs.
+  *
+  * **Host-wide across every DRM client, NOT cgroup-scoped.** It is not a
+  * component of `currentBytes` and must not be subtracted from it; it says
+  * what put the shmem there, where `shmemBytes` only says how much.
+  *
+  * `null` wherever debugfs is not mounted — which is inside every camstack
+  * container today — and on any node with no Intel GPU.
+  */
+  gpuShmemBytes: external_exports.number().nullable()
+}).extend({ atMs: external_exports.number() });
 var DumpHeapSnapshotInputSchema = external_exports.object({
   /** The addon whose runner should dump a heap snapshot. */
   addonId: external_exports.string()
@@ -22102,6 +22134,21 @@ var NodeLoadSeriesSchema = external_exports.object({
   /** One entry per function seen in the window, heaviest-first. */
   series: external_exports.array(LoadFunctionSeriesSchema).readonly(),
   /**
+  * The CONTAINER's memory over the same window, oldest-first.
+  *
+  * Sits next to `series` rather than in a method of its own because the whole
+  * question is a subtraction: the per-process rows in `series` sum to one
+  * number and this one is another, and an operator who has to issue two calls
+  * to compare them will compare two different instants. Same reader, same
+  * `sinceMs`, same `bucketMs`, same timestamps.
+  *
+  * **EMPTY means ABSENT, never zero.** A node with no cgroup — a developer
+  * Mac, a bare-metal host, a container with the hierarchy hidden — reports no
+  * points at all. A zero here would be indistinguishable from a healthy
+  * container and is precisely the lie this field exists to avoid.
+  */
+  containerMemory: external_exports.array(ContainerMemoryPointSchema).readonly(),
+  /**
   * Width of one returned bucket, in ms. Equals the sampling cadence when no
   * reduction was needed — so a caller can always say what one point covers
   * without having to know whether it was reduced.
@@ -33082,6 +33129,33 @@ var intercomCapability = {
   deviceNative: true,
   mode: "singleton",
   deviceTypes: [DeviceType.Camera],
+  /**
+  * **Auth tier: `protected` on every method — deliberate, and load-bearing.**
+  *
+  * Talking through a camera is an OPERATE action, not a CONFIGURE one. This
+  * cap has no configuration surface at all: all six methods open, feed and
+  * close one live audio session against one `deviceId`. That is the same
+  * authority as `ptz.move` or `snapshot.getSnapshot`, both `protected` — and
+  * the opposite of `ptz.savePreset` / `snapshot.invalidateCache`, which are
+  * `admin` because they change what the device IS.
+  *
+  * `protected` does not mean ungated: `protectedProcedure` runs the
+  * `METHOD_ACCESS_MAP` scope check, and every method here is `scope: 'device'`
+  * with `access: 'create'` and a `deviceId` in its input. So a caller needs a
+  * grant that covers THAT camera at `create` — a `camera-viewer` (`view`
+  * only) still cannot talk, and a grant on camera 5 cannot talk through
+  * camera 7.
+  *
+  * Every method was `auth: 'admin'` from the initial commit, which made the
+  * cap unreachable by every non-admin principal — `adminProcedure` throws
+  * `FORBIDDEN: Admin required` BEFORE the scope check runs, so the scope
+  * machinery generated for this cap (`METHOD_ACCESS_MAP`,
+  * `DEVICE_SCOPED_CAPS`, `METHOD_DEVICE_SELECTORS`) was complete and dead. The
+  * `camera-operator` scope preset has promised "PTZ control, intercom,
+  * snapshots" since that same commit; the promise could not be kept. Recorded
+  * as D289; `scripts/check-scope-preset-promises.ts` now fails the build if a
+  * preset promises a cap no row of that preset can reach.
+  */
   methods: {
     /**
     * Open a server-side WebRTC audio-only session. Returns an SDP
@@ -33094,7 +33168,7 @@ var intercomCapability = {
       sdpOffer: external_exports.string()
     }), {
       kind: "mutation",
-      auth: "admin"
+      auth: "protected"
     }),
     handleAnswer: method(external_exports.object({
       deviceId: external_exports.number(),
@@ -33102,7 +33176,7 @@ var intercomCapability = {
       sdpAnswer: external_exports.string()
     }), external_exports.void(), {
       kind: "mutation",
-      auth: "admin"
+      auth: "protected"
     }),
     /** Close explicitly. Server also auto-closes on 30s idle. */
     stopSession: method(external_exports.object({
@@ -33110,7 +33184,7 @@ var intercomCapability = {
       sessionId: external_exports.string()
     }), external_exports.void(), {
       kind: "mutation",
-      auth: "admin"
+      auth: "protected"
     }),
     /**
     * Open a raw-PCM talk session (no WebRTC SDP plumbing). Used by
@@ -33123,7 +33197,7 @@ var intercomCapability = {
     */
     startTalkSession: method(external_exports.object({ deviceId: external_exports.number() }), external_exports.object({ sessionId: external_exports.string() }), {
       kind: "mutation",
-      auth: "admin"
+      auth: "protected"
     }),
     /**
     * Push one chunk of talk-back audio onto the active talk session.
@@ -33158,12 +33232,12 @@ var intercomCapability = {
       sequenceNumber: external_exports.number().int()
     }), external_exports.object({ accepted: external_exports.boolean() }), {
       kind: "mutation",
-      auth: "admin"
+      auth: "protected"
     }),
     /** Close the raw-PCM talk session. Idempotent. */
     endTalkSession: method(external_exports.object({ deviceId: external_exports.number() }), external_exports.void(), {
       kind: "mutation",
-      auth: "admin"
+      auth: "protected"
     })
   },
   events: { onStatusChanged: { data: external_exports.object({

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-NEA5DJLZ.js";
+} from "./chunk-ARTM5NDU.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-AL5IQ6H2.js");
+  await import("./launcher-CL4LHR6D.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-AL5IQ6H2.js");
+  await import("./launcher-CL4LHR6D.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-2O7WGGRD.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-UFN2BYNO.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-2O7WGGRD.js → discover-UFN2BYNO.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-NEA5DJLZ.js";
+} from "./chunk-ARTM5NDU.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,