@camstack/addon-cloudflare 1.1.27 → 1.1.28

package/dist/{dist-Ck9DoDhU.mjs → dist-Cp3DWi9N.mjs}

@@ -7327,6 +7327,62 @@ var RecordingConfigSchema = object({
 	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 });
 /**
+* Ops-log — the durable, append-only operations audit shared by the
+* recordings and events management surfaces.
+*
+* ONE row shape is reused for both domains so a single "Activity" view can
+* merge the recorder's DurableState ring (recordings ops-log) and the
+* pipeline-analytics SQLite collection (events ops-log). Each row records a
+* management operation, WHY it ran (reason), and its measurable effect
+* (itemsAffected + bytesReclaimed). Writes are best-effort — a failed log must
+* never fail the operation it records.
+*/
+/** Which management domain the operation belongs to. */
+var OpsLogDomainSchema = _enum(["recording", "events"]);
+/** The kind of management operation performed. */
+var OpsLogOpSchema = _enum([
+	"prune",
+	"manual-delete",
+	"rescan",
+	"retention-run"
+]);
+/** Why the operation ran. */
+var OpsLogReasonSchema = _enum([
+	"retention",
+	"quota",
+	"manual",
+	"operator"
+]);
+/** One audit row, shared verbatim by both domains. */
+var OpsLogEntrySchema = object({
+	/** Unique row id. */
+	id: string(),
+	/** Epoch ms the operation completed. */
+	at: number(),
+	domain: OpsLogDomainSchema,
+	op: OpsLogOpSchema,
+	reason: OpsLogReasonSchema,
+	/** The camera the op targeted; null for a cluster/global op. */
+	deviceId: number().nullable(),
+	/** Node that performed the op (the log carries nodeId — no cross-node aggregation). */
+	nodeId: string(),
+	/** Buckets / rows deleted (op-specific unit). */
+	itemsAffected: number(),
+	/** Bytes reclaimed by the op (0 when not measurable). */
+	bytesReclaimed: number(),
+	/** Free-text detail (e.g. "floor moved to <ts>"); null when none. */
+	detail: string().nullable(),
+	/** Who/what triggered the op. */
+	actor: string()
+});
+/** Shared query input for the per-domain `listOpsLog` cap methods. */
+var OpsLogQueryInputSchema = object({
+	/** Restrict to a single camera; omit for every row. */
+	deviceId: number().optional(),
+	/** Max rows returned, newest-first. */
+	limit: number().int().min(1).max(1e3).optional()
+});
+/**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
 * storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
 * so the persisted record schema and the consumer-facing cap can both consume it
@@ -16165,6 +16221,26 @@ var TrackCascadeCountsSchema = object({
 	/** Per-track CLIP search vectors removed (best-effort). */
 	embeddings: number().int()
 });
+/** Event-store footprint for one camera. */
+var EventStoreDeviceFootprintSchema = object({
+	deviceId: number(),
+	/** Persisted event rows (motion + object + audio) for the camera. */
+	rows: number().int(),
+	/** Event-owned media bytes on disk for the camera. */
+	bytes: number().int()
+});
+/** Aggregate event-store footprint: global totals + per-camera breakdown. */
+var EventStoreFootprintSchema = object({
+	totalRows: number().int(),
+	totalBytes: number().int(),
+	devices: array(EventStoreDeviceFootprintSchema).readonly()
+});
+/** Per-kind counts returned by the event-prune / device-delete mutations. */
+var EventPruneCountsSchema = object({
+	motion: number().int(),
+	object: number().int(),
+	audio: number().int()
+});
 DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).readonly()), method(object({
 	deviceId: number(),
 	trackId: string()
@@ -16228,6 +16304,21 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({}), EventStoreFootprintSchema, {
+	kind: "query",
+	auth: "admin"
+}), method(object({
+	olderThanMs: number(),
+	reason: OpsLogReasonSchema.optional()
+}), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ deviceId: number() }), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
 }), method(object({
 	eventId: string(),
 	kind: MediaFileKindEnum.optional()
@@ -19484,13 +19575,29 @@ method(object({
 }), method(object({ deviceId: number() }), RecordingStatusSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), object({
+}), method(object({
+	deviceId: number(),
+	reason: OpsLogReasonSchema.optional()
+}), object({
 	floorMs: number().nullable(),
 	deletedBuckets: number().int(),
 	reclaimedBytes: number().int()
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	deviceId: number(),
+	fromMs: number().optional(),
+	toMs: number().optional()
+}), object({
+	deletedBuckets: number().int(),
+	reclaimedBytes: number().int()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
 });
 /**
 * `recordingExport` cap — render a footage time range into a single downloadable
@@ -22612,6 +22719,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineAnalytics.deleteDeviceEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineAnalytics.deleteTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22642,6 +22755,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getEventStoreFootprint": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getKeyEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22684,6 +22803,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listOpsLog": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listRecentTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22696,6 +22821,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.pruneEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.pruneEventsBefore": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -23458,6 +23589,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.deleteFootprint": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"recording.getAvailability": {
 		capName: "recording",
 		capScope: "system",
@@ -23488,6 +23625,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.listOpsLog": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"recording.locateSegment": {
 		capName: "recording",
 		capScope: "system",

package/dist/{dist-C9Tfy1_h.js → dist-DMo00v-O.js}

@@ -7327,6 +7327,62 @@ var RecordingConfigSchema = object({
 	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 });
 /**
+* Ops-log — the durable, append-only operations audit shared by the
+* recordings and events management surfaces.
+*
+* ONE row shape is reused for both domains so a single "Activity" view can
+* merge the recorder's DurableState ring (recordings ops-log) and the
+* pipeline-analytics SQLite collection (events ops-log). Each row records a
+* management operation, WHY it ran (reason), and its measurable effect
+* (itemsAffected + bytesReclaimed). Writes are best-effort — a failed log must
+* never fail the operation it records.
+*/
+/** Which management domain the operation belongs to. */
+var OpsLogDomainSchema = _enum(["recording", "events"]);
+/** The kind of management operation performed. */
+var OpsLogOpSchema = _enum([
+	"prune",
+	"manual-delete",
+	"rescan",
+	"retention-run"
+]);
+/** Why the operation ran. */
+var OpsLogReasonSchema = _enum([
+	"retention",
+	"quota",
+	"manual",
+	"operator"
+]);
+/** One audit row, shared verbatim by both domains. */
+var OpsLogEntrySchema = object({
+	/** Unique row id. */
+	id: string(),
+	/** Epoch ms the operation completed. */
+	at: number(),
+	domain: OpsLogDomainSchema,
+	op: OpsLogOpSchema,
+	reason: OpsLogReasonSchema,
+	/** The camera the op targeted; null for a cluster/global op. */
+	deviceId: number().nullable(),
+	/** Node that performed the op (the log carries nodeId — no cross-node aggregation). */
+	nodeId: string(),
+	/** Buckets / rows deleted (op-specific unit). */
+	itemsAffected: number(),
+	/** Bytes reclaimed by the op (0 when not measurable). */
+	bytesReclaimed: number(),
+	/** Free-text detail (e.g. "floor moved to <ts>"); null when none. */
+	detail: string().nullable(),
+	/** Who/what triggered the op. */
+	actor: string()
+});
+/** Shared query input for the per-domain `listOpsLog` cap methods. */
+var OpsLogQueryInputSchema = object({
+	/** Restrict to a single camera; omit for every row. */
+	deviceId: number().optional(),
+	/** Max rows returned, newest-first. */
+	limit: number().int().min(1).max(1e3).optional()
+});
+/**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
 * storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
 * so the persisted record schema and the consumer-facing cap can both consume it
@@ -16165,6 +16221,26 @@ var TrackCascadeCountsSchema = object({
 	/** Per-track CLIP search vectors removed (best-effort). */
 	embeddings: number().int()
 });
+/** Event-store footprint for one camera. */
+var EventStoreDeviceFootprintSchema = object({
+	deviceId: number(),
+	/** Persisted event rows (motion + object + audio) for the camera. */
+	rows: number().int(),
+	/** Event-owned media bytes on disk for the camera. */
+	bytes: number().int()
+});
+/** Aggregate event-store footprint: global totals + per-camera breakdown. */
+var EventStoreFootprintSchema = object({
+	totalRows: number().int(),
+	totalBytes: number().int(),
+	devices: array(EventStoreDeviceFootprintSchema).readonly()
+});
+/** Per-kind counts returned by the event-prune / device-delete mutations. */
+var EventPruneCountsSchema = object({
+	motion: number().int(),
+	object: number().int(),
+	audio: number().int()
+});
 DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).readonly()), method(object({
 	deviceId: number(),
 	trackId: string()
@@ -16228,6 +16304,21 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({}), EventStoreFootprintSchema, {
+	kind: "query",
+	auth: "admin"
+}), method(object({
+	olderThanMs: number(),
+	reason: OpsLogReasonSchema.optional()
+}), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ deviceId: number() }), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
 }), method(object({
 	eventId: string(),
 	kind: MediaFileKindEnum.optional()
@@ -19484,13 +19575,29 @@ method(object({
 }), method(object({ deviceId: number() }), RecordingStatusSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), object({
+}), method(object({
+	deviceId: number(),
+	reason: OpsLogReasonSchema.optional()
+}), object({
 	floorMs: number().nullable(),
 	deletedBuckets: number().int(),
 	reclaimedBytes: number().int()
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	deviceId: number(),
+	fromMs: number().optional(),
+	toMs: number().optional()
+}), object({
+	deletedBuckets: number().int(),
+	reclaimedBytes: number().int()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
 });
 /**
 * `recordingExport` cap — render a footage time range into a single downloadable
@@ -22612,6 +22719,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineAnalytics.deleteDeviceEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineAnalytics.deleteTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22642,6 +22755,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getEventStoreFootprint": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getKeyEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22684,6 +22803,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listOpsLog": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listRecentTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22696,6 +22821,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.pruneEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.pruneEventsBefore": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -23458,6 +23589,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.deleteFootprint": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"recording.getAvailability": {
 		capName: "recording",
 		capScope: "system",
@@ -23488,6 +23625,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.listOpsLog": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"recording.locateSegment": {
 		capName: "recording",
 		capScope: "system",

package/dist/tunnel/cloudflare-tunnel.addon.js

@@ -21,7 +21,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-C9Tfy1_h.js");
+const require_dist = require("../dist-DMo00v-O.js");
 let node_path = require("node:path");
 node_path = __toESM(node_path);
 let node_crypto = require("node:crypto");

package/dist/tunnel/cloudflare-tunnel.addon.mjs

@@ -1,4 +1,4 @@
-import { a as BaseAddon, c as boolean, d as number, f as object, m as EventCategory, n as defineCustomActions, o as _enum, p as string, r as networkAccessCapability, s as array, t as customAction, u as literal } from "../dist-Ck9DoDhU.mjs";
+import { a as BaseAddon, c as boolean, d as number, f as object, m as EventCategory, n as defineCustomActions, o as _enum, p as string, r as networkAccessCapability, s as array, t as customAction, u as literal } from "../dist-Cp3DWi9N.mjs";
 import * as path from "node:path";
 import { randomUUID } from "node:crypto";
 import { spawn } from "node:child_process";

package/dist/turn/cloudflare-turn.addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_dist = require("../dist-C9Tfy1_h.js");
+const require_dist = require("../dist-DMo00v-O.js");
 //#region src/turn/cloudflare-turn.ts
 /**
 * Cloudflare returns ICE servers in several flavours depending on which

package/dist/turn/cloudflare-turn.addon.mjs

@@ -1,4 +1,4 @@
-import { a as BaseAddon, c as boolean, d as number, f as object, i as turnProviderCapability, l as discriminatedUnion, n as defineCustomActions, p as string, t as customAction, u as literal } from "../dist-Ck9DoDhU.mjs";
+import { a as BaseAddon, c as boolean, d as number, f as object, i as turnProviderCapability, l as discriminatedUnion, n as defineCustomActions, p as string, t as customAction, u as literal } from "../dist-Cp3DWi9N.mjs";
 //#region src/turn/cloudflare-turn.ts
 /**
 * Cloudflare returns ICE servers in several flavours depending on which

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-cloudflare",
-  "version": "1.1.27",
+  "version": "1.1.28",
   "description": "Cloudflare bundle — Tunnel (network-access) + TURN relay (turn-provider). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",