@camstack/addon-pipeline-orchestrator 1.1.50 → 1.1.52

package/dist/index.js

@@ -29,7 +29,7 @@ node_fs = __toESM(node_fs);
 let node_path = require("node:path");
 node_path = __toESM(node_path);
 let node_url = require("node:url");
-//#region ../types/dist/event-category-H4AVePnn.mjs
+//#region ../types/dist/event-category-D4HJq7Mw.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -182,6 +182,11 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/** Runner-sampled scrub thumbnail (~1/5 s/camera). Telemetry (D8): a lost
 	*  thumb is a scrub gap the recorder's keyframe backfill covers. */
 	EventCategory["RecordingThumbSampled"] = "recording.thumb-sampled";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
 	EventCategory["DetectionEvent"] = "detection.event";
 	EventCategory["SessionTrackNew"] = "session.track.new";
 	EventCategory["SessionTrackExpired"] = "session.track.expired";
@@ -471,6 +476,25 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
 	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaKey?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
 	* Fired by `addon-post-analysis` whenever a gallery face row changes:
 	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
 	* `'unassigned'` its identity link changed, `'deleted'` the row was
@@ -5209,6 +5233,25 @@ function _instanceof(cls, params = {}) {
 	};
 	return inst;
 }
+//#endregion
+//#region ../../node_modules/zod/v4/classic/compat.js
+/** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
+var ZodIssueCode = {
+	invalid_type: "invalid_type",
+	too_big: "too_big",
+	too_small: "too_small",
+	invalid_format: "invalid_format",
+	not_multiple_of: "not_multiple_of",
+	unrecognized_keys: "unrecognized_keys",
+	invalid_union: "invalid_union",
+	invalid_key: "invalid_key",
+	invalid_element: "invalid_element",
+	invalid_value: "invalid_value",
+	custom: "custom"
+};
+/** @deprecated Do not use. Stub definition, only included for zod-to-json-schema compatibility. */
+var ZodFirstPartyTypeKind;
+ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 Object.fromEntries([
 	{
 		id: "overview",
@@ -7794,6 +7837,62 @@ var RecordingConfigSchema = object({
 	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 });
 /**
+* Ops-log — the durable, append-only operations audit shared by the
+* recordings and events management surfaces.
+*
+* ONE row shape is reused for both domains so a single "Activity" view can
+* merge the recorder's DurableState ring (recordings ops-log) and the
+* pipeline-analytics SQLite collection (events ops-log). Each row records a
+* management operation, WHY it ran (reason), and its measurable effect
+* (itemsAffected + bytesReclaimed). Writes are best-effort — a failed log must
+* never fail the operation it records.
+*/
+/** Which management domain the operation belongs to. */
+var OpsLogDomainSchema = _enum(["recording", "events"]);
+/** The kind of management operation performed. */
+var OpsLogOpSchema = _enum([
+	"prune",
+	"manual-delete",
+	"rescan",
+	"retention-run"
+]);
+/** Why the operation ran. */
+var OpsLogReasonSchema = _enum([
+	"retention",
+	"quota",
+	"manual",
+	"operator"
+]);
+/** One audit row, shared verbatim by both domains. */
+var OpsLogEntrySchema = object({
+	/** Unique row id. */
+	id: string(),
+	/** Epoch ms the operation completed. */
+	at: number(),
+	domain: OpsLogDomainSchema,
+	op: OpsLogOpSchema,
+	reason: OpsLogReasonSchema,
+	/** The camera the op targeted; null for a cluster/global op. */
+	deviceId: number().nullable(),
+	/** Node that performed the op (the log carries nodeId — no cross-node aggregation). */
+	nodeId: string(),
+	/** Buckets / rows deleted (op-specific unit). */
+	itemsAffected: number(),
+	/** Bytes reclaimed by the op (0 when not measurable). */
+	bytesReclaimed: number(),
+	/** Free-text detail (e.g. "floor moved to <ts>"); null when none. */
+	detail: string().nullable(),
+	/** Who/what triggered the op. */
+	actor: string()
+});
+/** Shared query input for the per-domain `listOpsLog` cap methods. */
+var OpsLogQueryInputSchema = object({
+	/** Restrict to a single camera; omit for every row. */
+	deviceId: number().optional(),
+	/** Max rows returned, newest-first. */
+	limit: number().int().min(1).max(1e3).optional()
+});
+/**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
 * storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
 * so the persisted record schema and the consumer-facing cap can both consume it
@@ -13424,7 +13523,11 @@ array(ZoneRuleSchema).readonly();
 * Extend the enum here when a new gating consumer comes online (audio
 * gating, alert filtering, …) — no other surface needs to change.
 */
-var ZoneRuleStageEnum = _enum(["motion", "detection"]);
+var ZoneRuleStageEnum = _enum([
+	"motion",
+	"detection",
+	"package"
+]);
 /**
 * Zone rules capability — per-camera CRUD over the {@link ZoneRule}
 * arrays that decide how each pipeline stage uses the polygon zones.
@@ -13468,16 +13571,25 @@ var zoneRulesCapability = {
 		})
 	},
 	/**
-	* Runtime-state slice — both stages mirrored together so consumers
+	* Runtime-state slice — every stage mirrored together so consumers
 	* see one reactive handle (`device.state.zoneRules.value`) instead
-	* of two. Bulk-replace mutations on either stage write the full
-	* `{motion, detection}` shape, so subscribers always get the
+	* of one per stage. Bulk-replace mutations on any stage write the full
+	* `{motion, detection, package}` shape, so subscribers always get the
 	* complete current set. Consumers that only care about one stage
 	* just read the matching property.
+	*
+	* `package` backs the package-drop detector — a package zone is a
+	* `ZoneRule` on the `'package'` stage referencing drawn polygons
+	* (see docs/superpowers/specs/2026-07-17-package-zones-design.md §3.1).
+	* The orchestrator provider writes this stage as a first-class slice
+	* (Phase 4): every mutation mirrors the full `{motion, detection,
+	* package}` shape, so consumers read the current package rules directly
+	* off `device.state.zoneRules.value.package`.
 	*/
 	runtimeState: object({
 		motion: array(ZoneRuleSchema).readonly(),
-		detection: array(ZoneRuleSchema).readonly()
+		detection: array(ZoneRuleSchema).readonly(),
+		package: array(ZoneRuleSchema).readonly()
 	})
 };
 var ProviderStatusSchema = object({
@@ -16726,6 +16838,7 @@ var EventKindIconSchema = _enum([
 	"smoke",
 	"water",
 	"button",
+	"package",
 	"generic"
 ]);
 var EventKindCategorySchema = _enum([
@@ -16733,7 +16846,8 @@ var EventKindCategorySchema = _enum([
 	"audio",
 	"detection",
 	"sensor",
-	"custom"
+	"custom",
+	"package"
 ]);
 var EventKindDescriptorSchema = object({
 	/** Stable kind id (e.g. 'motion', 'person', 'contact'). */
@@ -17074,6 +17188,26 @@ var TrackCascadeCountsSchema = object({
 	/** Per-track CLIP search vectors removed (best-effort). */
 	embeddings: number().int()
 });
+/** Event-store footprint for one camera. */
+var EventStoreDeviceFootprintSchema = object({
+	deviceId: number(),
+	/** Persisted event rows (motion + object + audio) for the camera. */
+	rows: number().int(),
+	/** Event-owned media bytes on disk for the camera. */
+	bytes: number().int()
+});
+/** Aggregate event-store footprint: global totals + per-camera breakdown. */
+var EventStoreFootprintSchema = object({
+	totalRows: number().int(),
+	totalBytes: number().int(),
+	devices: array(EventStoreDeviceFootprintSchema).readonly()
+});
+/** Per-kind counts returned by the event-prune / device-delete mutations. */
+var EventPruneCountsSchema = object({
+	motion: number().int(),
+	object: number().int(),
+	audio: number().int()
+});
 DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).readonly()), method(object({
 	deviceId: number(),
 	trackId: string()
@@ -17137,6 +17271,21 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({}), EventStoreFootprintSchema, {
+	kind: "query",
+	auth: "admin"
+}), method(object({
+	olderThanMs: number(),
+	reason: OpsLogReasonSchema.optional()
+}), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ deviceId: number() }), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
 }), method(object({
 	eventId: string(),
 	kind: MediaFileKindEnum.optional()
@@ -20581,13 +20730,131 @@ method(object({
 }), method(object({ deviceId: number() }), RecordingStatusSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), object({
+}), method(object({
+	deviceId: number(),
+	reason: OpsLogReasonSchema.optional()
+}), object({
 	floorMs: number().nullable(),
 	deletedBuckets: number().int(),
 	reclaimedBytes: number().int()
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	deviceId: number(),
+	fromMs: number().optional(),
+	toMs: number().optional()
+}), object({
+	deletedBuckets: number().int(),
+	reclaimedBytes: number().int()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
+});
+/**
+* `recordingExport` cap — render a footage time range into a single downloadable
+* MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
+* bounded lifetime with a durable history, auto-expiry, and optional
+* delete-after-download.
+*
+* Like `recording` this is a `scope:'system', mode:'singleton'` cap: the
+* recorder self-gates so exactly ONE node (the designated `recordingNodeId`,
+* default `hub`) registers it. Device-scoped methods carry `deviceId` in their
+* input and dispatch to that single provider; the render runs on the node that
+* owns the footage (no cross-node segment transfer). Download rides the
+* framework addon data-plane. State persists in a DurableState blob (NOT
+* SQLite); history rows survive file deletion for audit.
+*/
+/** Playback-speed multiplier for the render (1 = realtime). */
+var ExportSpeedSchema = number().min(.25).max(32);
+/** Timelapse cadence — sample one source frame per `everyMs`, output at `outputFps`. */
+var ExportTimelapseSchema = object({
+	everyMs: number().int().positive(),
+	outputFps: number().int().min(1).max(60).optional()
+});
+/**
+* Render options. `speed` and `timelapse` are mutually exclusive. `includeAudio`
+* is honoured only for a realtime-ish speed (0.5–2×); timelapse is always
+* silent. `maxLifeMs` bounds how long the finished file is kept;
+* `deleteAfterDownload` removes it shortly after the first complete download.
+*/
+var ExportOptionsSchema = object({
+	speed: ExportSpeedSchema.optional(),
+	timelapse: ExportTimelapseSchema.optional(),
+	includeAudio: boolean(),
+	maxLifeMs: number().int().positive(),
+	deleteAfterDownload: boolean(),
+	title: string().max(200).optional()
+}).superRefine((v, ctx) => {
+	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "speed and timelapse are mutually exclusive",
+		path: ["timelapse"]
+	});
+});
+var ExportStateSchema = _enum([
+	"queued",
+	"rendering",
+	"ready",
+	"failed",
+	"expired",
+	"deleted"
+]);
+/** One export job / history row. */
+var ExportRecordSchema = object({
+	id: string(),
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema,
+	state: ExportStateSchema,
+	/** 0–100 while rendering; null otherwise. */
+	progressPct: number().nullable(),
+	/** File size once ready; null before. */
+	fileBytes: number().nullable(),
+	expiresAt: number(),
+	deleteAfterDownload: boolean(),
+	/** Epoch of the first complete download; null until then. */
+	downloadedAt: number().nullable(),
+	createdAt: number(),
+	/** User id/name that requested the export. */
+	createdBy: string(),
+	/** Failure reason when state is 'failed'; null otherwise. */
+	error: string().nullable()
+});
+/** Candidate download URLs (LAN first, then operator extra hosts). */
+var ExportDownloadSchema = object({
+	url: string(),
+	endpoints: array(string())
+});
+method(object({
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema
+}), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ deviceId: number().optional() }), array(ExportRecordSchema), {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportDownloadSchema, {
+	kind: "query",
+	auth: "protected"
 });
 /**
 * One publishable camera stream as its OWNING PROVIDER describes it — the same
@@ -23607,6 +23874,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineAnalytics.deleteDeviceEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineAnalytics.deleteTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -23637,6 +23910,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getEventStoreFootprint": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getKeyEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -23679,6 +23958,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listOpsLog": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listRecentTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -23691,6 +23976,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.pruneEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.pruneEventsBefore": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -24453,6 +24744,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.deleteFootprint": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"recording.getAvailability": {
 		capName: "recording",
 		capScope: "system",
@@ -24483,6 +24780,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.listOpsLog": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"recording.locateSegment": {
 		capName: "recording",
 		capScope: "system",
@@ -24513,6 +24816,42 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordingExport.cancelExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.createExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.deleteExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordingExport.getDownloadUrl": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.getExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.listExports": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -32059,6 +32398,14 @@ var SessionDispatchController = class {
 * since rules drive runtime filtering and a bad payload would silently
 * widen the operator's intended scope.
 */
+/**
+* Every zone-rule stage, in the declared enum order. The unified device-state
+* mirror carries ONE key per stage so a single reactive handle
+* (`device.state.zoneRules.value`) covers every consumer. Derived from the cap
+* enum so a new stage (audio gating, alert filtering, …) is picked up here with
+* no edit — the mirror stays exhaustive over the widened discriminator.
+*/
+var ALL_STAGES = ZoneRuleStageEnum.options;
 /** Settings store key for stage rules. Kept under a single nested
 *  object so a future stage just adds another property without
 *  reshuffling the schema. */
@@ -32080,7 +32427,8 @@ var RulesArraySchema = array(ZoneRuleSchema);
 */
 var ZoneRulesBlockSchema = object({
 	motion: unknown().optional(),
-	detection: unknown().optional()
+	detection: unknown().optional(),
+	package: unknown().optional()
 }).passthrough();
 var ZoneRulesProvider = class {
 	ctx;
@@ -32175,15 +32523,7 @@ var ZoneRulesProvider = class {
 			...prev,
 			[stage]: rules
 		}));
-		const otherStage = stage === "motion" ? "detection" : "motion";
-		const otherRules = perDevice.get(otherStage) ?? await this.loadRules(deviceId, otherStage);
-		const sliceValue = stage === "motion" ? {
-			motion: rules,
-			detection: otherRules
-		} : {
-			motion: otherRules,
-			detection: rules
-		};
+		const sliceValue = await this.buildSliceValue(deviceId, perDevice);
 		try {
 			await (await this.ctx.fetchDevice(deviceId)).deviceState.setCapSlice({
 				capName: ZONE_RULES_CAP_NAME,
@@ -32200,6 +32540,22 @@ var ZoneRulesProvider = class {
 		}
 		this.ctx.onRulesChanged?.(deviceId, stage, rules);
 	}
+	/**
+	* Assemble the unified `{motion, detection, package}` mirror value from every
+	* stage's current rules. The stage just written is already in `perDevice`;
+	* siblings resolve from the cache when present, else a lazy store read (which
+	* also warms the cache). Iterates {@link ALL_STAGES} so it stays exhaustive
+	* over the cap's stage discriminator without a per-stage branch.
+	*/
+	async buildSliceValue(deviceId, perDevice) {
+		const slice = {
+			motion: [],
+			detection: [],
+			package: []
+		};
+		for (const s of ALL_STAGES) slice[s] = perDevice.get(s) ?? await this.loadRules(deviceId, s);
+		return slice;
+	}
 };
 //#endregion
 //#region src/zones-provider.ts