@camstack/addon-pipeline-orchestrator 1.2.324 → 1.2.325

package/dist/index.js

@@ -5418,7 +5418,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-DAX0-2v9.mjs
+//#region ../types/dist/sleep-DRqxtc0C.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8758,6 +8758,10 @@ method(object({ deviceId: number() }), array(StreamSourceEntrySchema)), method(o
 	kind: "mutation",
 	auth: "admin"
 }), method(object({ deviceId: number() }), unknown().nullable()), method(object({ deviceId: number() }), RawStateResultSchema.nullable(), { auth: "protected" });
+object({
+	code: string().regex(/^[a-z][a-z0-9-]*(\.[a-z0-9-]+)+$/),
+	params: record(string(), union([string(), number()])).optional()
+});
 /**
 * Promise-based timer helpers — used everywhere the codebase needs to
 * wait, back off, or schedule a retry. Before these helpers landed, each
@@ -8783,7 +8787,7 @@ function sleep(ms) {
 	return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
 }
 //#endregion
-//#region ../types/dist/err-msg-DX6i_MY4.mjs
+//#region ../types/dist/err-msg-DLerKiVO.mjs
 var DeviceType = /* @__PURE__ */ function(DeviceType) {
 	DeviceType["Camera"] = "camera";
 	DeviceType["Hub"] = "hub";
@@ -9033,6 +9037,22 @@ var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
 	DeviceRole["Nightvision"] = "nightvision";
 	DeviceRole["PrivacyMask"] = "privacy-mask";
 	DeviceRole["Doorbell"] = "doorbell";
+	/** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
+	DeviceRole["CoverBlind"] = "cover-blind";
+	/** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
+	DeviceRole["CoverShutter"] = "cover-shutter";
+	/** Exterior awning. HA `device_class: awning`. */
+	DeviceRole["CoverAwning"] = "cover-awning";
+	/** Curtain / drape. HA `device_class: curtain`. */
+	DeviceRole["CoverCurtain"] = "cover-curtain";
+	/** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
+	DeviceRole["CoverGarage"] = "cover-garage";
+	/** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
+	DeviceRole["CoverGate"] = "cover-gate";
+	/** Door. HA `device_class: door`. A security actuator: exports gate it. */
+	DeviceRole["CoverDoor"] = "cover-door";
+	/** Window. HA `device_class: window`. */
+	DeviceRole["CoverWindow"] = "cover-window";
 	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
 	*  real Switch device for UI rendering / export adapters. */
 	DeviceRole["BinaryHelper"] = "binary-helper";
@@ -9113,7 +9133,7 @@ function errMsg$2(err) {
 	return String(err);
 }
 //#endregion
-//#region ../types/dist/composition-C-WpVYTX.mjs
+//#region ../types/dist/composition-EQ9Ok0Ee.mjs
 /**
 * The ffmpeg build every CamStack node downloads, per platform and arch.
 *
@@ -13251,7 +13271,8 @@ var ConvertResultSchema = object({
 	})).readonly()
 });
 _enum(["new-session", "step-up"]);
-_enum(["en", "it"]);
+/** The languages the hub's app landing pages are written in (D858). */
+var AppPageLangSchema = _enum(["en", "it"]);
 /** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
 var AppLoginPathSchema = discriminatedUnion("kind", [object({ kind: literal("native") }), object({
 	kind: literal("browser"),
@@ -13748,7 +13769,9 @@ var ConfigTabDeclarationSchema = object({
 var ConfigSectionWithValuesSchema = object({
 	id: string(),
 	title: string(),
+	titleKey: string().optional(),
 	description: string().optional(),
+	descriptionKey: string().optional(),
 	style: _enum(["card", "accordion"]).optional(),
 	defaultCollapsed: boolean().optional(),
 	columns: union([
@@ -17031,6 +17054,9 @@ method(object({
 }), method(object({ refs: RefListSchema }), KeychainResolveResultSchema, { auth: "admin" }), method(object({ refs: RefListSchema }), object({ deleted: number().int() }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ deviceId: number().int() }), object({ refs: array(string()).readonly() }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({}), array(KeychainSecretMetaSchema).readonly(), { auth: "admin" }), method(object({}), KeychainStateSchema, { auth: "admin" });
 /**
 * device-history — the ONE mechanism for numeric history (D850).
@@ -38434,6 +38460,38 @@ var DeviceRegisterPayloadSchema = object({
 	*  omits it and the keyword backstop applies. */
 	secretConfigPaths: array(string()).optional()
 });
+/** One deleted device, kept by device-manager so an addon that missed the
+*  deletion can still learn of it (D865). Written by the delete path ONLY. */
+var DeviceTombstoneSchema = object({
+	deviceId: number().int().positive(),
+	/** Epoch ms the device was deleted. */
+	deletedAt: number(),
+	/** The addon that owned the device when it was deleted. */
+	providerAddonId: string()
+});
+/** Data held for one device that device-manager no longer knows. */
+var OrphanDeviceDataSchema = object({
+	deviceId: number().int().positive(),
+	/** Rows/files per store (`<addonId>:<store>`). */
+	stores: record(string(), number().int().nonnegative())
+});
+var CleanupDeletedDevicesResultSchema = object({
+	/**
+	* `skipped` — the absence check could not be trusted (a device-list read
+	* failed or the two reads disagreed); nothing was listed or deleted.
+	* `dry-run` — `devices` is what a confirmed run would delete.
+	* `cleaned` — `devices` is what was deleted.
+	*/
+	status: _enum([
+		"skipped",
+		"dry-run",
+		"cleaned"
+	]),
+	reason: string().nullable(),
+	devices: array(OrphanDeviceDataSchema),
+	/** Implementers that could not be asked (their stores are not in `devices`). */
+	unreachable: array(string())
+});
 var DeviceRemovePayloadSchema = object({ deviceId: number() });
 var DevicePersistConfigPayloadSchema = object({
 	deviceId: number(),
@@ -38672,6 +38730,9 @@ method(object({
 }), method(object({ deviceId: number() }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ sinceMs: number() }), array(DeviceTombstoneSchema).readonly(), { auth: "admin" }), method(object({ confirm: boolean() }), CleanupDeletedDevicesResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({ integrationId: string() }), object({ removed: number() }), {
 	kind: "mutation",
 	auth: "admin"
@@ -39134,6 +39195,72 @@ method(object({
 	auth: "admin"
 });
 /**
+* `device-removal-hook` — the reliable way an addon learns a device was DELETED,
+* so it can delete what it keeps for that device (D865).
+*
+* ## Why an event was not enough
+*
+* `DeviceUnregistered` is telemetry and may be dropped (D8, D11). An addon that
+* hung its per-device clean-up on it left durable garbage whenever the event was
+* lost, the addon was down, or it was restarting at that moment — footage,
+* analytics rows and settings of device 4483 outlived the device. Loss of this
+* signal corrupts durable state, so it travels by RPC with a recorded fact
+* behind it (D8: "if loss would corrupt durable state, use RPC plus a reconcile").
+*
+* ## The three pieces
+*
+* 1. device-manager records a TOMBSTONE per deleted device
+*    (`deviceManager.listDeletedSince`). The tombstone is written by the delete
+*    path only — a device that is unregistered, offline or whose provider is
+*    restarting is NOT deleted and gets none.
+* 2. After a delete, device-manager calls `onDeviceRemoved` on EVERY provider of
+*    this collection, one by one, with bounded retries, logged.
+* 3. An implementer that was down asks `deviceManager.listDeletedSince` at start
+*    (and periodically) and runs its own `onDeviceRemoved` for each tombstone it
+*    may have missed. Reconcile is driven by tombstones, never by "the device is
+*    not in the current list": a failed or partial list read must not destroy data.
+*
+* ## Contract for an implementer
+*
+* - **Idempotent.** It is called again by a retry, by a reconcile and by the
+*   admin cleanup of data that predates tombstones. A device with nothing left
+*   answers zero counts.
+* - **One key per store** in `counts`, deleted rows/files per store, so the log
+*   line and the admin dry run can say where the data was.
+* - **Training datasets are NOT device data** and are never deleted by a hook.
+* - **Per-device SETTINGS are not hooked.** Configuration lives in the standard
+*   per-device store (`ctx.settings.*DeviceStore`), which device-manager clears
+*   for every addon centrally at delete time. This hook is for device DATA
+*   that is not settings: footage, event media, analytics rows, history.
+* - A provider that cannot tell is allowed to throw; the caller retries it.
+*
+* `listDeviceData` is the read side of the admin "Clean data of deleted devices"
+* action: which device ids this addon holds data for, and how much per store. It
+* never deletes. device-manager decides which of those ids are absent from the
+* fleet, from TWO consistent reads of the device list (D49).
+*/
+/** What a hook is told about the deletion. */
+var DeviceRemovedInputSchema = object({
+	deviceId: number().int().positive(),
+	/** Epoch ms the device was deleted (the tombstone's `deletedAt`). */
+	deletedAt: number(),
+	/** The addon that owned the device, as device-manager last knew it. */
+	providerAddonId: string()
+});
+/** Rows/files/refs deleted, per store this implementer owns. */
+var DeviceRemovedResultSchema = object({ counts: record(string(), number().int().nonnegative()) });
+/** One (store, device) pair an implementer holds data for. */
+var DeviceDataEntrySchema = object({
+	store: string(),
+	deviceId: number().int().positive(),
+	/** Rows (or files) held for the device in the store. */
+	count: number().int().nonnegative()
+});
+method(DeviceRemovedInputSchema, DeviceRemovedResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), array(DeviceDataEntrySchema).readonly(), { auth: "admin" });
+/**
 * `failure-contribution` — the capability an addon reports its OWN losses
 * through, per camera, with the denominator attached. It stores nothing.
 *
@@ -64702,6 +64829,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"deviceManager.cleanupDeletedDevicesData": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.createDevice": {
 		capName: "device-manager",
 		capScope: "system",
@@ -64882,6 +65015,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.listDeletedSince": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listDeviceIdsByCaps": {
 		capName: "device-manager",
 		capScope: "system",
@@ -65290,6 +65429,18 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"deviceRemovalHook.listDeviceData": {
+		capName: "device-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"deviceRemovalHook.onDeviceRemoved": {
+		capName: "device-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceState.claimFields": {
 		capName: "device-state",
 		capScope: "system",
@@ -65722,6 +65873,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"keychain.deleteDeviceScope": {
+		capName: "keychain",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"keychain.getState": {
 		capName: "keychain",
 		capScope: "system",
@@ -71762,6 +71919,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceRemovalHook.onDeviceRemoved": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceState.claimFields": [{
 		name: "deviceId",
 		form: "single",
@@ -71951,6 +72113,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"keychain.deleteDeviceScope": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"lawnMowerControl.dock": [{
 		name: "deviceId",
 		form: "single",
@@ -74299,6 +74466,8 @@ new Set([
 	"audio-tools",
 	"audio-silence"
 ]);
+AppPageLangSchema.options;
+record(string().min(1), string());
 /**
 * TimelapseRule — the STANDALONE scheduled timelapse producer's rule model.
 *
@@ -76000,6 +76169,25 @@ var DETAIL_CROP_PADDING_FIELD = {
 	default: DEFAULT_DETAIL_CROP_CONVENTION.paddingRatio
 };
 /**
+* The cadence of the automatic whole-archive face rescore (D866).
+*
+* One cluster-wide knob in `pipeline-orchestrator`'s GLOBAL settings, read by
+* `pipeline-analytics` over the hub-routed `addon-settings` cap on every tick.
+* It lives here for the same reason the detail-crop convention does: the
+* writer (orchestrator) and the reader (analytics) are different addons, they
+* never import each other, and a key copied by hand is how a setting silently
+* stops arriving.
+*/
+var FACE_RESCORE_SECTION_ID = "face-rescore";
+var FACE_RESCORE_INTERVAL_KEY = "faceRescoreIntervalMinutes";
+/** Slider bounds. `0` is "disabled"; anything in 1..9 is raised to `min`. */
+var FACE_RESCORE_INTERVAL_FIELD = {
+	min: 0,
+	max: 1440,
+	step: 5,
+	default: 60
+};
+/**
 * THE native-frame **lease** knobs — hold depth, RAM budget, demand window and
 * subject-tile budget for the decode worker's native-resolution retention.
 *
@@ -83763,67 +83951,20 @@ function buildRunnerConfig(base, overrides) {
 		preRollInferenceFrames: config.preRollInferenceFrames
 	};
 }
-var DEVICE_FEATURES_SPEC = {
-	collection: "pipeline-orchestrator:device-features",
-	columns: [
-		{
-			name: "deviceId",
-			type: "TEXT",
-			primaryKey: true,
-			notNull: true
-		},
-		(
-		/** The feature name list, verbatim. */
-		{
-			name: "features",
-			type: "JSON",
-			notNull: true
-		}),
-		{
-			name: "updatedAt",
-			type: "INTEGER",
-			notNull: true
-		}
-	],
-	writeMode: "write-behind",
-	keyOf: (row) => String(row.deviceId),
-	toValue: (row) => ({
-		features: [...row.features],
-		updatedAt: row.updatedAt
-	}),
-	fromRecord: (key, data) => {
-		const deviceId = Number(key);
-		const raw = data["features"];
-		if (!Number.isFinite(deviceId) || !Array.isArray(raw)) return null;
-		const features = raw.filter((f) => typeof f === "string");
-		if (features.length === 0) return null;
-		const updatedAt = Number(data["updatedAt"]);
-		return {
-			deviceId,
-			features,
-			updatedAt: Number.isFinite(updatedAt) ? updatedAt : 0,
-			restored: true
-		};
-	},
-	deviceIdOf: (row) => row.deviceId
-};
+//#endregion
+//#region src/device-features-mirror.ts
+/** The per-device settings key a device's mirrored features live under. */
+var DEVICE_FEATURES_KEY = "deviceFeatures";
 var DeviceFeaturesMirror = class {
 	/** Process-local fallback, used only when no store was supplied. */
 	local = /* @__PURE__ */ new Map();
-	durable;
+	settings;
 	logger;
 	now;
 	constructor(deps) {
 		this.logger = deps.logger;
 		this.now = deps.now ?? (() => Date.now());
-		this.durable = deps.store === void 0 ? null : new DurableLedger({
-			spec: DEVICE_FEATURES_SPEC,
-			store: deps.store,
-			logger: deps.logger
-		});
-	}
-	static declare(store) {
-		return DurableLedger.declare(store, DEVICE_FEATURES_SPEC);
+		this.settings = deps.settings ?? null;
 	}
 	/**
 	* Seed the mirror from the last session. Call once at boot, after `declare`
@@ -83831,13 +83972,29 @@ var DeviceFeaturesMirror = class {
 	* already there when the first read fails.
 	*/
 	async hydrate() {
-		if (this.durable === null) return 0;
-		const rows = await this.durable.load();
-		this.logger.info("device-features mirror restored", { meta: { devices: rows.length } });
-		return rows.length;
+		const settings = this.settings;
+		if (settings === null) return 0;
+		const list = settings.listDeviceStoreIds;
+		if (list !== void 0) {
+			const ids = await list.call(settings);
+			const batch = settings.readDeviceStoreBatch;
+			const blobs = batch === void 0 ? new Map(await Promise.all(ids.map(async (id) => [id, await settings.readDeviceStore(id)]))) : await batch.call(settings, ids);
+			for (const [deviceId, blob] of blobs) {
+				const row = rowOf(deviceId, blob[DEVICE_FEATURES_KEY]);
+				if (row !== null) this.local.set(deviceId, row);
+			}
+		}
+		this.logger.info("device-features mirror restored", { meta: { devices: this.local.size } });
+		return this.local.size;
 	}
 	held(deviceId) {
-		return this.durable === null ? this.local.get(deviceId) : this.durable.get(String(deviceId));
+		return this.local.get(deviceId);
+	}
+	async persist(deviceId, features, updatedAt) {
+		await this.settings?.writeDeviceStore(deviceId, { [DEVICE_FEATURES_KEY]: {
+			features: [...features],
+			updatedAt
+		} });
 	}
 	remember(deviceId, features) {
 		const row = {
@@ -83846,20 +84003,19 @@ var DeviceFeaturesMirror = class {
 			updatedAt: this.now(),
 			restored: false
 		};
-		if (this.durable === null) {
-			this.local.set(deviceId, row);
-			return;
-		}
-		const held = this.durable.get(String(deviceId));
+		const held = this.local.get(deviceId);
+		this.local.set(deviceId, row);
 		if (held !== void 0 && !held.restored && sameFeatures(held.features, features)) return;
-		this.durable.put(row);
+		this.persist(deviceId, features, row.updatedAt).catch((err) => {
+			this.logger.warn("device-features mirror not persisted", {
+				tags: { deviceId },
+				meta: { error: err instanceof Error ? err.message : String(err) }
+			});
+		});
 	}
 	drop(deviceId) {
-		if (this.durable === null) {
-			this.local.delete(deviceId);
-			return;
-		}
-		this.durable.forget(String(deviceId));
+		this.local.delete(deviceId);
+		this.settings?.writeDeviceStore(deviceId, { [DEVICE_FEATURES_KEY]: void 0 });
 	}
 	/**
 	* Resolve a device's features, preferring a fresh read but never letting a
@@ -83908,7 +84064,7 @@ var DeviceFeaturesMirror = class {
 		this.drop(deviceId);
 		return [];
 	}
-	/** Drop a device's mirror — call when the device is removed. */
+	/** Drop a device's mirror. (A removed device's settings are cleared centrally, D865.) */
 	forget(deviceId) {
 		this.drop(deviceId);
 	}
@@ -83919,6 +84075,20 @@ function sameFeatures(a, b) {
 	const held = new Set(a);
 	return b.every((f) => held.has(f));
 }
+function rowOf(deviceId, raw) {
+	if (typeof raw !== "object" || raw === null) return null;
+	const features = Reflect.get(raw, "features");
+	if (!Array.isArray(features)) return null;
+	const kept = features.filter((f) => typeof f === "string");
+	if (kept.length === 0) return null;
+	const updatedAt = Number(Reflect.get(raw, "updatedAt"));
+	return {
+		deviceId,
+		features: kept,
+		updatedAt: Number.isFinite(updatedAt) ? updatedAt : 0,
+		restored: true
+	};
+}
 //#endregion
 //#region src/onboard-forwarding-reconcile.ts
 /** The `detectionSources` member that means "this camera's own firmware". */
@@ -84077,9 +84247,10 @@ var DetectionWiringController = class {
 	featuresMirror;
 	constructor(deps) {
 		this.deps = deps;
+		const settings = deps.persistFeatures === true ? deps.ctx().settings : void 0;
 		this.featuresMirror = new DeviceFeaturesMirror({
 			logger: deps.logger,
-			...deps.featuresStore !== void 0 ? { store: deps.featuresStore } : {}
+			...settings !== void 0 ? { settings } : {}
 		});
 	}
 	/**
@@ -84088,8 +84259,7 @@ var DetectionWiringController = class {
 	* that would have needed it.
 	*/
 	async hydrateFeaturesMirror() {
-		if (this.deps.featuresStore === void 0) return;
-		await DeviceFeaturesMirror.declare(this.deps.featuresStore);
+		if (this.deps.persistFeatures !== true) return;
 		await this.featuresMirror.hydrate();
 	}
 	/** `activeDetections.get(deviceId)`. */
@@ -94387,7 +94557,7 @@ async function buildOrchestratorControllers(deps) {
 	reconcile.scheduleReconcile();
 	const detectionWiring = new DetectionWiringController({
 		ctx: () => deps.ctx(),
-		featuresStore: deps.ctx().api.settingsStore,
+		persistFeatures: true,
 		ledger,
 		placement,
 		audio,
@@ -94607,6 +94777,24 @@ function buildGlobalSettingsSections(options) {
 				default: DEFAULT_DETAIL_CROP_CONVENTION.square
 			}]
 		},
+		{
+			id: FACE_RESCORE_SECTION_ID,
+			title: "Face suggestions",
+			tab: "pipeline",
+			description: "How often the people suggestions on unassigned faces are refreshed against the current gallery. The job only runs when the gallery or the set of unassigned faces changed since the last run; otherwise it does nothing.",
+			fields: [{
+				key: FACE_RESCORE_INTERVAL_KEY,
+				type: "slider",
+				label: "Suggestion refresh interval",
+				description: "0 = off (use the Recompute suggestions button). Values from 1 to 9 run every 10 minutes. The first run happens one interval after the addon starts.",
+				min: FACE_RESCORE_INTERVAL_FIELD.min,
+				max: FACE_RESCORE_INTERVAL_FIELD.max,
+				step: FACE_RESCORE_INTERVAL_FIELD.step,
+				default: FACE_RESCORE_INTERVAL_FIELD.default,
+				showValue: true,
+				unit: "min"
+			}]
+		},
 		{
 			id: NATIVE_LEASE_SECTION_ID,
 			title: "Native frame lease",