@camstack/addon-pipeline 1.2.12 → 1.2.13

package/dist/audio-analyzer/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-B89zyHyl.js");
+const require_dist = require("../dist-BUd2xSjP.js");
 const require_node_topology_platform = require("../node-topology-platform-CFZ7F4xW.js");
 const require_model_download_service_Cp9f4dk6 = require("../model-download-service-Cp9f4dk6-fsdDExML.js");
 let node_fs = require("node:fs");

package/dist/audio-analyzer/index.mjs

@@ -1,5 +1,5 @@
 import { i as downloadFile, l as __require } from "../model-download-service-Cp9f4dk6-WO-foD7W.mjs";
-import { D as mapAudioLabelToMacro, H as BaseAddon, V as errMsg, _ as audioAnalysisCapability, d as HF_BASE_URL, n as AUDIO_BACKEND_CHOICES, o as DEFAULT_AUDIO_ANALYZER_CONFIG, q as hydrateSchema, v as audioAnalyzerCapability } from "../dist-DMiEnBkk.mjs";
+import { D as mapAudioLabelToMacro, H as BaseAddon, V as errMsg, _ as audioAnalysisCapability, d as HF_BASE_URL, n as AUDIO_BACKEND_CHOICES, o as DEFAULT_AUDIO_ANALYZER_CONFIG, q as hydrateSchema, v as audioAnalyzerCapability } from "../dist-DuI0Ypuu.mjs";
 import { t as pickNodePlatformArch } from "../node-topology-platform-BkR_k6WT.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/detection-pipeline/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-B89zyHyl.js");
-const require_step_definitions = require("../step-definitions-DLgHGq8f.js");
+const require_dist = require("../dist-BUd2xSjP.js");
+const require_step_definitions = require("../step-definitions-Ck4_6GKK.js");
 const require_node_topology_platform = require("../node-topology-platform-CFZ7F4xW.js");
 const require_model_download_service_Cp9f4dk6 = require("../model-download-service-Cp9f4dk6-fsdDExML.js");
 let node_child_process = require("node:child_process");

package/dist/detection-pipeline/index.mjs

@@ -1,6 +1,6 @@
 import { a as ensureModel, l as __require, o as isModelDownloaded, r as deleteModelFromDisk } from "../model-download-service-Cp9f4dk6-WO-foD7W.mjs";
-import { C as detectionPipelineCapability, H as BaseAddon, I as runtimeDevices$1, K as createEvent, M as pipelineExecutorCapability, T as evaluateZoneRules, V as errMsg, Z as parseJsonUnknown, ct as object, dt as union, et as sleep, ft as EventCategory, h as YAMNET_TO_MACRO, j as nodePin, nt as array, q as hydrateSchema, s as DEVICE_BACKEND_TO_FORMAT, t as APPLE_SA_TO_MACRO, ut as string, w as enumerateInferenceDevices, x as defaultDeviceFor$1, z as supportedRuntimes$1 } from "../dist-DMiEnBkk.mjs";
-import { a as getStepDefinition, i as getStep, n as ALL_STEPS, o as resolveModelForFormat, r as getDefaultModelForFormat, t as ALL_PIPELINE_STEPS } from "../step-definitions-NeFJ6mFi.mjs";
+import { C as detectionPipelineCapability, H as BaseAddon, I as runtimeDevices$1, K as createEvent, M as pipelineExecutorCapability, T as evaluateZoneRules, V as errMsg, Z as parseJsonUnknown, ct as object, dt as union, et as sleep, ft as EventCategory, h as YAMNET_TO_MACRO, j as nodePin, nt as array, q as hydrateSchema, s as DEVICE_BACKEND_TO_FORMAT, t as APPLE_SA_TO_MACRO, ut as string, w as enumerateInferenceDevices, x as defaultDeviceFor$1, z as supportedRuntimes$1 } from "../dist-DuI0Ypuu.mjs";
+import { a as getStepDefinition, i as getStep, n as ALL_STEPS, o as resolveModelForFormat, r as getDefaultModelForFormat, t as ALL_PIPELINE_STEPS } from "../step-definitions-DqNWVeYB.mjs";
 import { t as pickNodePlatformArch } from "../node-topology-platform-BkR_k6WT.mjs";
 import { spawn } from "node:child_process";
 import sharp from "sharp";

package/dist/{dist-B89zyHyl.js → dist-BUd2xSjP.js}

@@ -15542,6 +15542,55 @@ method(object({
 	password: string()
 }), AuthResultSchema.nullable(), { kind: "mutation" }), method(object({ state: string() }), string()), method(record(string(), string()), AuthResultSchema, { kind: "mutation" }), method(object({ token: string() }), AuthResultSchema.nullable());
 /**
+* A live terminal session hosted by the provider addon. Output and input do
+* NOT flow through the capability — they use the addon data plane
+* (`GET /addon/terminal/<id>/out` SSE, `POST /addon/terminal/<id>/in`) because
+* terminal output must be ordered and lossless. The event bus is telemetry and
+* may drop chunks ([D8]), and a dropped chunk desynchronises the vt parser
+* permanently until a full repaint. The capability owns only lifecycle.
+*/
+var TerminalSessionInfoSchema = object({
+	/** Opaque session id minted by the provider on `openSession`. */
+	sessionId: string(),
+	/** The pre-declared profile this session runs (never a free-form command). */
+	profileId: string(),
+	/** Human-readable profile label for the UI session list. */
+	label: string(),
+	cols: number().int().positive(),
+	rows: number().int().positive(),
+	/** ms-epoch the session's pty was spawned. */
+	startedAt: number()
+});
+/**
+* A profile the operator may open — a pre-declared, allowlisted program
+* (`monitor` → `btm`). The capability accepts only these ids; a free-form
+* command string would be remote code execution as the server's user, so it is
+* deliberately not part of the contract.
+*/
+var TerminalProfileInfoSchema = object({
+	profileId: string(),
+	label: string(),
+	description: string().optional()
+});
+method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalSessionInfoSchema).readonly(), { auth: "admin" }), method(object({
+	profileId: string(),
+	cols: number().int().positive(),
+	rows: number().int().positive()
+}), TerminalSessionInfoSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	sessionId: string(),
+	cols: number().int().positive(),
+	rows: number().int().positive()
+}), _void(), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ sessionId: string() }), _void(), {
+	kind: "mutation",
+	auth: "admin"
+});
+/**
 * Orchestrator-side destination metadata. The orchestrator computes
 * `id = <addonId>:<subId>` from its provider lookup so consumers
 * (admin UI, restore flow) see one canonical key.
@@ -26916,6 +26965,36 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.close": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"terminalSession.listProfiles": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"terminalSession.listSessions": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"terminalSession.openSession": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"terminalSession.resize": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"toast.onToast": {
 		capName: "toast",
 		capScope: "system",

package/dist/{dist-DMiEnBkk.mjs → dist-DuI0Ypuu.mjs}

@@ -15542,6 +15542,55 @@ method(object({
 	password: string()
 }), AuthResultSchema.nullable(), { kind: "mutation" }), method(object({ state: string() }), string()), method(record(string(), string()), AuthResultSchema, { kind: "mutation" }), method(object({ token: string() }), AuthResultSchema.nullable());
 /**
+* A live terminal session hosted by the provider addon. Output and input do
+* NOT flow through the capability — they use the addon data plane
+* (`GET /addon/terminal/<id>/out` SSE, `POST /addon/terminal/<id>/in`) because
+* terminal output must be ordered and lossless. The event bus is telemetry and
+* may drop chunks ([D8]), and a dropped chunk desynchronises the vt parser
+* permanently until a full repaint. The capability owns only lifecycle.
+*/
+var TerminalSessionInfoSchema = object({
+	/** Opaque session id minted by the provider on `openSession`. */
+	sessionId: string(),
+	/** The pre-declared profile this session runs (never a free-form command). */
+	profileId: string(),
+	/** Human-readable profile label for the UI session list. */
+	label: string(),
+	cols: number().int().positive(),
+	rows: number().int().positive(),
+	/** ms-epoch the session's pty was spawned. */
+	startedAt: number()
+});
+/**
+* A profile the operator may open — a pre-declared, allowlisted program
+* (`monitor` → `btm`). The capability accepts only these ids; a free-form
+* command string would be remote code execution as the server's user, so it is
+* deliberately not part of the contract.
+*/
+var TerminalProfileInfoSchema = object({
+	profileId: string(),
+	label: string(),
+	description: string().optional()
+});
+method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalSessionInfoSchema).readonly(), { auth: "admin" }), method(object({
+	profileId: string(),
+	cols: number().int().positive(),
+	rows: number().int().positive()
+}), TerminalSessionInfoSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	sessionId: string(),
+	cols: number().int().positive(),
+	rows: number().int().positive()
+}), _void(), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ sessionId: string() }), _void(), {
+	kind: "mutation",
+	auth: "admin"
+});
+/**
 * Orchestrator-side destination metadata. The orchestrator computes
 * `id = <addonId>:<subId>` from its provider lookup so consumers
 * (admin UI, restore flow) see one canonical key.
@@ -26916,6 +26965,36 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.close": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"terminalSession.listProfiles": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"terminalSession.listSessions": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"terminalSession.openSession": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"terminalSession.resize": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"toast.onToast": {
 		capName: "toast",
 		capScope: "system",

package/dist/{fmp4-keyframes-BzTPoPVn.js → fmp4-keyframes-5s8T9Mng.js}

@@ -6631,12 +6631,16 @@ function readTrack(file, segment) {
 	});
 }
 /**
-* Demux a recorded LOW `.m4s` segment and return its sync samples plus the
-* WebCodecs decoder config, or null if the segment carries no video / no
-* decodable keyframe. `segmentStartMs` anchors keyframe timestamps to absolute
-* epoch ms; the first sample's cts is the zero reference.
+* Demux a recorded `.m4s` fragment and return ALL its samples (sync + delta) in
+* decode order plus the WebCodecs decoder config, or null if the segment
+* carries no video / no decodable sample. `segmentStartMs` anchors each sample's
+* `ts` to absolute epoch ms; the first sample's cts is the zero reference.
+*
+* No decode, no ffmpeg — byte copies only. This is the general form used by the
+* recorded-playback demux; {@link extractKeyframes} filters its output to sync
+* samples for the scrub-pack service.
 */
-async function extractKeyframes(segment, segmentStartMs) {
+async function extractSamples(segment, segmentStartMs) {
 	const file = import_mp4box_all.createFile();
 	const ready = await readTrack(file, segment);
 	if (!ready) return null;
@@ -6647,10 +6651,10 @@ async function extractKeyframes(segment, segmentStartMs) {
 	file.onSamples = (_id, _user, samples) => {
 		for (const s of samples) {
 			if (firstCts === null) firstCts = s.cts;
-			if (!s.is_sync) continue;
 			const ts = segmentStartMs + Math.round((s.cts - firstCts) / s.timescale * 1e3);
 			collected.push({
 				ts,
+				isSync: s.is_sync,
 				data: new Uint8Array(s.data)
 			});
 		}
@@ -6664,7 +6668,26 @@ async function extractKeyframes(segment, segmentStartMs) {
 	return collected.length > 0 ? {
 		codec,
 		description,
-		keyframes: collected
+		samples: collected
+	} : null;
+}
+/**
+* Demux a recorded LOW `.m4s` segment and return its sync samples plus the
+* WebCodecs decoder config, or null if the segment carries no video / no
+* decodable keyframe. `segmentStartMs` anchors keyframe timestamps to absolute
+* epoch ms; the first sample's cts is the zero reference.
+*/
+async function extractKeyframes(segment, segmentStartMs) {
+	const extracted = await extractSamples(segment, segmentStartMs);
+	if (!extracted) return null;
+	const keyframes = extracted.samples.filter((s) => s.isSync).map((s) => ({
+		ts: s.ts,
+		data: s.data
+	}));
+	return keyframes.length > 0 ? {
+		codec: extracted.codec,
+		description: extracted.description,
+		keyframes
 	} : null;
 }
 //#endregion
@@ -6674,3 +6697,15 @@ Object.defineProperty(exports, "extractKeyframes", {
 		return extractKeyframes;
 	}
 });
+Object.defineProperty(exports, "extractSamples", {
+	enumerable: true,
+	get: function() {
+		return extractSamples;
+	}
+});
+Object.defineProperty(exports, "require_mp4box_all", {
+	enumerable: true,
+	get: function() {
+		return require_mp4box_all;
+	}
+});

package/dist/{fmp4-keyframes-qOgJBjMO.mjs → fmp4-keyframes-CV0X1mGy.mjs}

@@ -1,7 +1,6 @@
 import { c as __commonJSMin, u as __toESM } from "./model-download-service-Cp9f4dk6-WO-foD7W.mjs";
-//#endregion
-//#region src/recorder/scrub/fmp4-keyframes.ts
-var import_mp4box_all = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports) => {
+//#region ../../node_modules/mp4box/dist/mp4box.all.js
+var require_mp4box_all = /* @__PURE__ */ __commonJSMin(((exports) => {
 	var Log = (function() {
 		var start = /* @__PURE__ */ new Date();
 		var LOG_LEVEL_ERROR = 4;
@@ -6566,7 +6565,10 @@ var import_mp4box_all = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin((
 		return file;
 	};
 	if (typeof exports !== "undefined") exports.createFile = MP4Box.createFile;
-})))());
+}));
+//#endregion
+//#region src/recorder/scrub/fmp4-keyframes.ts
+var import_mp4box_all = /* @__PURE__ */ __toESM(require_mp4box_all());
 /**
 * Normalize an RFC 6381 codec string for WebCodecs HEVC. Apple/WebKit
 * WebCodecs only accepts the `hvc1.*` fourcc — a `hev1.*` string (what mp4box
@@ -6629,12 +6631,16 @@ function readTrack(file, segment) {
 	});
 }
 /**
-* Demux a recorded LOW `.m4s` segment and return its sync samples plus the
-* WebCodecs decoder config, or null if the segment carries no video / no
-* decodable keyframe. `segmentStartMs` anchors keyframe timestamps to absolute
-* epoch ms; the first sample's cts is the zero reference.
+* Demux a recorded `.m4s` fragment and return ALL its samples (sync + delta) in
+* decode order plus the WebCodecs decoder config, or null if the segment
+* carries no video / no decodable sample. `segmentStartMs` anchors each sample's
+* `ts` to absolute epoch ms; the first sample's cts is the zero reference.
+*
+* No decode, no ffmpeg — byte copies only. This is the general form used by the
+* recorded-playback demux; {@link extractKeyframes} filters its output to sync
+* samples for the scrub-pack service.
 */
-async function extractKeyframes(segment, segmentStartMs) {
+async function extractSamples(segment, segmentStartMs) {
 	const file = import_mp4box_all.createFile();
 	const ready = await readTrack(file, segment);
 	if (!ready) return null;
@@ -6645,10 +6651,10 @@ async function extractKeyframes(segment, segmentStartMs) {
 	file.onSamples = (_id, _user, samples) => {
 		for (const s of samples) {
 			if (firstCts === null) firstCts = s.cts;
-			if (!s.is_sync) continue;
 			const ts = segmentStartMs + Math.round((s.cts - firstCts) / s.timescale * 1e3);
 			collected.push({
 				ts,
+				isSync: s.is_sync,
 				data: new Uint8Array(s.data)
 			});
 		}
@@ -6662,8 +6668,27 @@ async function extractKeyframes(segment, segmentStartMs) {
 	return collected.length > 0 ? {
 		codec,
 		description,
-		keyframes: collected
+		samples: collected
+	} : null;
+}
+/**
+* Demux a recorded LOW `.m4s` segment and return its sync samples plus the
+* WebCodecs decoder config, or null if the segment carries no video / no
+* decodable keyframe. `segmentStartMs` anchors keyframe timestamps to absolute
+* epoch ms; the first sample's cts is the zero reference.
+*/
+async function extractKeyframes(segment, segmentStartMs) {
+	const extracted = await extractSamples(segment, segmentStartMs);
+	if (!extracted) return null;
+	const keyframes = extracted.samples.filter((s) => s.isSync).map((s) => ({
+		ts: s.ts,
+		data: s.data
+	}));
+	return keyframes.length > 0 ? {
+		codec: extracted.codec,
+		description: extracted.description,
+		keyframes
 	} : null;
 }
 //#endregion
-export { extractKeyframes as t };
+export { extractSamples as n, require_mp4box_all as r, extractKeyframes as t };

package/dist/motion-wasm/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-B89zyHyl.js");
+const require_dist = require("../dist-BUd2xSjP.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 //#region src/motion-wasm/wasm-motion-detector.ts

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { A as motionDetectionCapability, G as DeviceType, H as BaseAddon, T as evaluateZoneRules, q as hydrateSchema } from "../dist-DMiEnBkk.mjs";
+import { A as motionDetectionCapability, G as DeviceType, H as BaseAddon, T as evaluateZoneRules, q as hydrateSchema } from "../dist-DuI0Ypuu.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
 //#region src/motion-wasm/wasm-motion-detector.ts

package/dist/pipeline-runner/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-B89zyHyl.js");
+const require_dist = require("../dist-BUd2xSjP.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_worker_protocol = require("../worker-protocol-DextwlTX.js");
-const require_step_definitions = require("../step-definitions-DLgHGq8f.js");
+const require_step_definitions = require("../step-definitions-Ck4_6GKK.js");
 let node_child_process = require("node:child_process");
 let node_url = require("node:url");
 let sharp = require("sharp");

package/dist/pipeline-runner/index.mjs

@@ -1,8 +1,8 @@
-import { H as BaseAddon, K as createEvent, N as pipelineRunnerCapability, S as defineCustomActions, V as errMsg, at as lazy, b as customAction, ct as object, ft as EventCategory, j as nodePin, nt as array, rt as boolean, s as DEVICE_BACKEND_TO_FORMAT, st as number, tt as _enum, ut as string } from "../dist-DMiEnBkk.mjs";
+import { H as BaseAddon, K as createEvent, N as pipelineRunnerCapability, S as defineCustomActions, V as errMsg, at as lazy, b as customAction, ct as object, ft as EventCategory, j as nodePin, nt as array, rt as boolean, s as DEVICE_BACKEND_TO_FORMAT, st as number, tt as _enum, ut as string } from "../dist-DuI0Ypuu.mjs";
 import { n as profileForStreamId, t as isRemoteRestream } from "../remote-restream-BeHi78PZ.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { t as isWorkerReply } from "../worker-protocol-D7RzZIla.mjs";
-import { a as getStepDefinition } from "../step-definitions-NeFJ6mFi.mjs";
+import { a as getStepDefinition } from "../step-definitions-DqNWVeYB.mjs";
 import { fork } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import sharp from "sharp";

package/dist/recorder/index.js

@@ -1,8 +1,8 @@
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-B89zyHyl.js");
+const require_dist = require("../dist-BUd2xSjP.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_model_download_service_Cp9f4dk6 = require("../model-download-service-Cp9f4dk6-fsdDExML.js");
-const require_fmp4_keyframes = require("../fmp4-keyframes-BzTPoPVn.js");
+const require_fmp4_keyframes = require("../fmp4-keyframes-5s8T9Mng.js");
 let node_child_process = require("node:child_process");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
@@ -2310,7 +2310,7 @@ function startSegmentWatcher(deps) {
 }
 //#endregion
 //#region src/recorder/addon/ffmpeg-args.ts
-/** ffmpeg argv: pull RTSP (TCP), copy video / transcode audio to AAC, write
+/** ffmpeg argv: pull RTSP (TCP), copy video / transcode audio to Opus, write
 *  fragmented-mp4 segments named by epoch seconds FLAT under `outDir`, plus a
 *  rolling `live.m3u8` playlist. The recorder segment-watcher tails the
 *  playlist and hands each finalized flat file to `SegmentStore.onFinalized`,
@@ -2329,7 +2329,9 @@ function buildPassthroughArgs(a) {
 		"copy",
 		...a.videoCodec === "H265" ? ["-tag:v", "hvc1"] : [],
 		"-c:a",
-		"aac",
+		"libopus",
+		"-b:a",
+		"48k",
 		"-f",
 		"segment",
 		"-segment_time",
@@ -3017,8 +3019,12 @@ var ScrubPackService = class {
 		this.inflight.set(key, run);
 		return run;
 	}
+	resolveCacheDir() {
+		const c = this.deps.cacheDir;
+		return typeof c === "function" ? c() : c;
+	}
 	cachePath(deviceId, windowStartMs) {
-		return node_path.default.join(this.deps.cacheDir, String(deviceId), utcDay(windowStartMs), `${windowStartMs}.pack`);
+		return node_path.default.join(this.resolveCacheDir(), String(deviceId), utcDay(windowStartMs), `${windowStartMs}.pack`);
 	}
 	async getOrBuildInner(deviceId, windowStartMs) {
 		const now = (this.deps.now ?? Date.now)();
@@ -3095,14 +3101,15 @@ var ScrubPackService = class {
 	/** Remove per-device day directories older than the retention horizon. */
 	async prune(retentionDays) {
 		const cutoff = (this.deps.now ?? Date.now)() - retentionDays * 864e5;
+		const cacheDir = this.resolveCacheDir();
 		let deviceDirs = [];
 		try {
-			deviceDirs = await node_fs.promises.readdir(this.deps.cacheDir);
+			deviceDirs = await node_fs.promises.readdir(cacheDir);
 		} catch {
 			return;
 		}
 		for (const dev of deviceDirs) {
-			const devPath = node_path.default.join(this.deps.cacheDir, dev);
+			const devPath = node_path.default.join(cacheDir, dev);
 			let days = [];
 			try {
 				days = await node_fs.promises.readdir(devPath);
@@ -3597,7 +3604,7 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 					const abs = this.resolveSegmentAbsPath(row);
 					return new Uint8Array(await node_fs.promises.readFile(abs));
 				},
-				cacheDir: node_path.default.join(this.ctx.dataDir, "scrub-packs"),
+				cacheDir: () => this.resolveScrubCacheRoot(),
 				logger: this.ctx.logger.child("ScrubPacks")
 			});
 			this.scrubPackService = scrubService;
@@ -3731,6 +3738,10 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 			this.ctx.logger.warn("recorder: no recordings storage locations resolved — index not hydrated");
 			return;
 		}
+		node_fs.promises.rm(node_path.default.join(this.ctx.dataDir, "scrub-packs"), {
+			recursive: true,
+			force: true
+		}).catch(() => {});
 		try {
 			await this.controller?.start();
 		} catch (err) {
@@ -4020,6 +4031,23 @@ var RecorderV2Addon = class extends require_dist.BaseAddon {
 		return node_path.default.join(loc.root, row.path);
 	}
 	/**
+	* Cache root for the scrub packs — a hidden `.scrub-packs` dir UNDER a
+	* recordings storage root (the `recordingsLow` location the packs derive from,
+	* else the first resolved location). Packs are a regenerable keyframe cache of
+	* the LOW segments; keeping them beside the recordings (a top-level mount, NOT
+	* backed up) — instead of in `addons-data` — keeps the backup perimeter pure
+	* operator state so it can be tarred whole with no exclusion list. See ADR-0027.
+	*
+	* Resolved lazily: `resolvedLocations` is only populated in `onHubReachable`,
+	* after the ScrubPackService is constructed in `onInitialize`. getOrBuild/prune
+	* run only at request time / on a delayed timer, by when locations are ready.
+	*/
+	resolveScrubCacheRoot() {
+		const loc = this.resolvedLocations.find((l) => l.type === "recordingsLow") ?? this.resolvedLocations[0];
+		if (loc === void 0) return node_path.default.join(this.ctx.dataDir, "scrub-packs");
+		return node_path.default.join(loc.root, ".scrub-packs");
+	}
+	/**
 	* Scrub-pack request handler: `GET /<deviceId>/<windowStartSec>` →
 	* `application/octet-stream` pack | 204 (no footage) | 400 (bad path / window
 	* not aligned to `SCRUB_WINDOW_MS`) | 500. Immutable (fully past) windows carry

package/dist/recorder/index.mjs

@@ -1,7 +1,7 @@
 import { n as createFileDataPlaneHandler, s as parseRangeHeader, t as contentTypeFor } from "../model-download-service-Cp9f4dk6-WO-foD7W.mjs";
-import { $ as selectAssignedProfileSlots, F as recordingExportCapability, G as DeviceType, H as BaseAddon, L as storageEvictableCapability, P as recordingCapability, V as errMsg, c as EVENT_PAD_MS, f as OpsLogEntrySchema, ft as EventCategory, j as nodePin, k as migrateConfigToBands, lt as record, nt as array, p as RecordingConfigSchema, q as hydrateSchema, u as ExportRecordSchema, ut as string } from "../dist-DMiEnBkk.mjs";
+import { $ as selectAssignedProfileSlots, F as recordingExportCapability, G as DeviceType, H as BaseAddon, L as storageEvictableCapability, P as recordingCapability, V as errMsg, c as EVENT_PAD_MS, f as OpsLogEntrySchema, ft as EventCategory, j as nodePin, k as migrateConfigToBands, lt as record, nt as array, p as RecordingConfigSchema, q as hydrateSchema, u as ExportRecordSchema, ut as string } from "../dist-DuI0Ypuu.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
-import { t as extractKeyframes } from "../fmp4-keyframes-qOgJBjMO.mjs";
+import { t as extractKeyframes } from "../fmp4-keyframes-CV0X1mGy.mjs";
 import { spawn } from "node:child_process";
 import { createReadStream, promises, realpathSync } from "node:fs";
 import path from "node:path";
@@ -2308,7 +2308,7 @@ function startSegmentWatcher(deps) {
 }
 //#endregion
 //#region src/recorder/addon/ffmpeg-args.ts
-/** ffmpeg argv: pull RTSP (TCP), copy video / transcode audio to AAC, write
+/** ffmpeg argv: pull RTSP (TCP), copy video / transcode audio to Opus, write
 *  fragmented-mp4 segments named by epoch seconds FLAT under `outDir`, plus a
 *  rolling `live.m3u8` playlist. The recorder segment-watcher tails the
 *  playlist and hands each finalized flat file to `SegmentStore.onFinalized`,
@@ -2327,7 +2327,9 @@ function buildPassthroughArgs(a) {
 		"copy",
 		...a.videoCodec === "H265" ? ["-tag:v", "hvc1"] : [],
 		"-c:a",
-		"aac",
+		"libopus",
+		"-b:a",
+		"48k",
 		"-f",
 		"segment",
 		"-segment_time",
@@ -3015,8 +3017,12 @@ var ScrubPackService = class {
 		this.inflight.set(key, run);
 		return run;
 	}
+	resolveCacheDir() {
+		const c = this.deps.cacheDir;
+		return typeof c === "function" ? c() : c;
+	}
 	cachePath(deviceId, windowStartMs) {
-		return path.join(this.deps.cacheDir, String(deviceId), utcDay(windowStartMs), `${windowStartMs}.pack`);
+		return path.join(this.resolveCacheDir(), String(deviceId), utcDay(windowStartMs), `${windowStartMs}.pack`);
 	}
 	async getOrBuildInner(deviceId, windowStartMs) {
 		const now = (this.deps.now ?? Date.now)();
@@ -3093,14 +3099,15 @@ var ScrubPackService = class {
 	/** Remove per-device day directories older than the retention horizon. */
 	async prune(retentionDays) {
 		const cutoff = (this.deps.now ?? Date.now)() - retentionDays * 864e5;
+		const cacheDir = this.resolveCacheDir();
 		let deviceDirs = [];
 		try {
-			deviceDirs = await promises.readdir(this.deps.cacheDir);
+			deviceDirs = await promises.readdir(cacheDir);
 		} catch {
 			return;
 		}
 		for (const dev of deviceDirs) {
-			const devPath = path.join(this.deps.cacheDir, dev);
+			const devPath = path.join(cacheDir, dev);
 			let days = [];
 			try {
 				days = await promises.readdir(devPath);
@@ -3595,7 +3602,7 @@ var RecorderV2Addon = class extends BaseAddon {
 					const abs = this.resolveSegmentAbsPath(row);
 					return new Uint8Array(await promises.readFile(abs));
 				},
-				cacheDir: path.join(this.ctx.dataDir, "scrub-packs"),
+				cacheDir: () => this.resolveScrubCacheRoot(),
 				logger: this.ctx.logger.child("ScrubPacks")
 			});
 			this.scrubPackService = scrubService;
@@ -3729,6 +3736,10 @@ var RecorderV2Addon = class extends BaseAddon {
 			this.ctx.logger.warn("recorder: no recordings storage locations resolved — index not hydrated");
 			return;
 		}
+		promises.rm(path.join(this.ctx.dataDir, "scrub-packs"), {
+			recursive: true,
+			force: true
+		}).catch(() => {});
 		try {
 			await this.controller?.start();
 		} catch (err) {
@@ -4018,6 +4029,23 @@ var RecorderV2Addon = class extends BaseAddon {
 		return path.join(loc.root, row.path);
 	}
 	/**
+	* Cache root for the scrub packs — a hidden `.scrub-packs` dir UNDER a
+	* recordings storage root (the `recordingsLow` location the packs derive from,
+	* else the first resolved location). Packs are a regenerable keyframe cache of
+	* the LOW segments; keeping them beside the recordings (a top-level mount, NOT
+	* backed up) — instead of in `addons-data` — keeps the backup perimeter pure
+	* operator state so it can be tarred whole with no exclusion list. See ADR-0027.
+	*
+	* Resolved lazily: `resolvedLocations` is only populated in `onHubReachable`,
+	* after the ScrubPackService is constructed in `onInitialize`. getOrBuild/prune
+	* run only at request time / on a delayed timer, by when locations are ready.
+	*/
+	resolveScrubCacheRoot() {
+		const loc = this.resolvedLocations.find((l) => l.type === "recordingsLow") ?? this.resolvedLocations[0];
+		if (loc === void 0) return path.join(this.ctx.dataDir, "scrub-packs");
+		return path.join(loc.root, ".scrub-packs");
+	}
+	/**
 	* Scrub-pack request handler: `GET /<deviceId>/<windowStartSec>` →
 	* `application/octet-stream` pack | 204 (no footage) | 400 (bad path / window
 	* not aligned to `SCRUB_WINDOW_MS`) | 500. Immutable (fully past) windows carry

package/dist/{step-definitions-DLgHGq8f.js → step-definitions-Ck4_6GKK.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-B89zyHyl.js");
+const require_dist = require("./dist-BUd2xSjP.js");
 //#region src/detection-pipeline/registry/model-catalogs.ts
 var HF_REPO = "camstack/camstack-models";
 var HF_SCRYPTED = "scrypted/plugin-models";

package/dist/{step-definitions-NeFJ6mFi.mjs → step-definitions-DqNWVeYB.mjs}

@@ -1,4 +1,4 @@
-import { E as hfModelUrl, a as COCO_TO_MACRO, i as COCO_80_LABELS, r as AUDIO_MACRO_LABELS } from "./dist-DMiEnBkk.mjs";
+import { E as hfModelUrl, a as COCO_TO_MACRO, i as COCO_80_LABELS, r as AUDIO_MACRO_LABELS } from "./dist-DuI0Ypuu.mjs";
 //#region src/detection-pipeline/registry/model-catalogs.ts
 var HF_REPO = "camstack/camstack-models";
 var HF_SCRYPTED = "scrypted/plugin-models";