@camstack/addon-pipeline 1.2.131 → 1.2.133

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (36) hide show
  1. package/dist/{addon-utils-DCQ5AP_v.js → addon-utils-FV2O25id.js} +1 -1
  2. package/dist/audio-analyzer/index.js +3 -3
  3. package/dist/audio-analyzer/index.mjs +2 -2
  4. package/dist/detection-pipeline/index.js +5 -5
  5. package/dist/detection-pipeline/index.mjs +3 -3
  6. package/dist/{dist-DO0UVhOk.mjs → dist-7Uc6NdFm.mjs} +736 -67
  7. package/dist/{dist-CqoMNE1e.js → dist-DsnZUYTs.js} +753 -66
  8. package/dist/{event-loop-stall-monitor-eM7_yYfn.js → event-loop-stall-monitor-D86J6d2c.js} +1 -1
  9. package/dist/{event-loop-stall-monitor-D0Juf7Dn.mjs → event-loop-stall-monitor-XzDMVU9d.mjs} +1 -1
  10. package/dist/{lazy-sharp-BGrpS8yi.js → lazy-sharp-UzEUL79V.js} +1 -1
  11. package/dist/motion-wasm/index.js +2 -2
  12. package/dist/motion-wasm/index.mjs +1 -1
  13. package/dist/pipeline-runner/index.js +4 -4
  14. package/dist/pipeline-runner/index.mjs +3 -3
  15. package/dist/{process-memory-Bac3FuG6.mjs → process-memory-Ci90-zF_.mjs} +1 -1
  16. package/dist/{process-memory-xAPjvSw9.js → process-memory-Co59RQIK.js} +1 -1
  17. package/dist/recorder/index.js +677 -99
  18. package/dist/recorder/index.mjs +676 -98
  19. package/dist/{segment-demux-js-skhsAZx6.mjs → segment-demux-js-0NZ9TXro.mjs} +1 -1
  20. package/dist/{segment-demux-js-Cu0oDMUL.js → segment-demux-js-DKcc0bxA.js} +1 -1
  21. package/dist/session-decode/decode-worker-child.js +195 -13
  22. package/dist/session-decode/decode-worker-child.mjs +194 -12
  23. package/dist/stream-broker/_stub.js +2 -2
  24. package/dist/stream-broker/{_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-DGQkDEYw.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-Dqj2f3H7.mjs} +3 -3
  25. package/dist/stream-broker/_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_types__loadShare__.js-CVBnNONy.mjs +26 -0
  26. package/dist/stream-broker/{_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_ui_mf_2_library__loadShare__.js-CQKwHIHI.mjs → _virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_ui_mf_2_library__loadShare__.js-77rGxv1J.mjs} +1 -1
  27. package/dist/stream-broker/demux-worker-child.js +1 -1
  28. package/dist/stream-broker/demux-worker-child.mjs +1 -1
  29. package/dist/stream-broker/{hostInit-D7FwwZgj.mjs → hostInit-DnwyBL4I.mjs} +3 -3
  30. package/dist/stream-broker/index.js +2 -2
  31. package/dist/stream-broker/index.mjs +2 -2
  32. package/dist/stream-broker/remoteEntry.js +1 -1
  33. package/dist/{worker-protocol-_Ujvj1hl.mjs → worker-protocol-CMDUAqvX.mjs} +12 -6
  34. package/dist/{worker-protocol-G3HXTY8z.js → worker-protocol-DzRUHIcM.js} +12 -6
  35. package/package.json +1 -1
  36. package/dist/stream-broker/_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_types__loadShare__.js-Bme2OZQp.mjs +0 -26
@@ -8494,6 +8494,74 @@ var OpsLogQueryInputSchema = object({
8494
8494
  /** Max rows returned, newest-first. */
8495
8495
  limit: number().int().min(1).max(1e3).optional()
8496
8496
  });
8497
+ var LabelDefinitionSchema = object({
8498
+ id: string(),
8499
+ name: string(),
8500
+ category: string().optional(),
8501
+ description: string().optional(),
8502
+ icon: string().optional()
8503
+ });
8504
+ /** Detection-macro targets a catalog `classMap` may resolve to. */
8505
+ var CLASS_MAP_MACRO_TARGETS = [
8506
+ "person",
8507
+ "vehicle",
8508
+ "animal",
8509
+ "package"
8510
+ ];
8511
+ /**
8512
+ * Le macro classi di PRIMO LIVELLO: quelle che un object detector emette e che
8513
+ * un operatore può selezionare.
8514
+ *
8515
+ * Sono le tre offerte dallo step `object-detection`
8516
+ * (`addon-pipeline/src/detection-pipeline/registry/step-definitions.ts`,
8517
+ * `enabledMacroClasses`). `package` sta in {@link CLASS_MAP_MACRO_TARGETS} e in
8518
+ * `MACRO_LABELS` — è una macro vera — ma NON qui: appartiene allo step
8519
+ * `package-detection`, la cui abilitazione è guidata dalle zone, e offrire la
8520
+ * stessa parola due volte ha già fatto accendere a un operatore il proxy COCO
8521
+ * (suitcase/backpack/handbag) lasciando spento il detector dedicato.
8522
+ *
8523
+ * UNA lista. Prima di oggi le stesse tre erano scritte a mano nell'offerta
8524
+ * dello step e una seconda volta come union `FirstLevelMacro`
8525
+ * (`types/detection.ts`); una terza copia per il trigger di registrazione
8526
+ * (`RecordingTriggers.objectClasses`) avrebbe reso invisibile la divergenza
8527
+ * successiva.
8528
+ */
8529
+ var FIRST_LEVEL_MACRO_CLASSES = [
8530
+ "person",
8531
+ "vehicle",
8532
+ "animal"
8533
+ ];
8534
+ /**
8535
+ * True quando `value` è una macro di primo livello. Type guard, non cast: un
8536
+ * `className` che arriva dal bus è una stringa qualunque finché non passa di
8537
+ * qui.
8538
+ */
8539
+ function isFirstLevelMacroClass(value) {
8540
+ return FIRST_LEVEL_MACRO_CLASSES.some((macro) => macro === value);
8541
+ }
8542
+ /**
8543
+ * Wire schema for a per-model CATALOG classMap override
8544
+ * (`ModelCatalogEntry.classMap` / `ModelConvertMetadata.classMap`) —
8545
+ * restricted to {@link CLASS_MAP_MACRO_TARGETS}, the only macros the
8546
+ * detection pipeline executor actually routes.
8547
+ *
8548
+ * This is deliberately a DIFFERENT, narrower shape than the general-purpose
8549
+ * `ClassMapDefinition` interface above (e.g. `IDetectionAddon.getClassMap()`
8550
+ * and the audio `YAMNET_TO_MACRO` catalog both use macro targets outside this
8551
+ * enum) — the two used to share the name `ClassMapDefinition`/
8552
+ * `ClassMapDefinitionSchema`, which made the schema-type-twin guard
8553
+ * (`scripts/check-schema-type-twins.ts`) flag them as a duplicated shape. They
8554
+ * are not: it is two different concepts colliding on a name. Keep this type
8555
+ * under its own name rather than reusing `ClassMapDefinition` — reusing it
8556
+ * would either narrow every `ClassMapDefinition` consumer to the four
8557
+ * detection macros (breaking `YAMNET_TO_MACRO`) or drop the validation this
8558
+ * schema exists for (see the "rejects a classMap whose target is not a
8559
+ * detection macro" test in `model-catalog-schema.test.ts`).
8560
+ */
8561
+ var DetectionCatalogClassMapSchema = object({
8562
+ mapping: record(string(), _enum(CLASS_MAP_MACRO_TARGETS)),
8563
+ preserveOriginal: boolean()
8564
+ });
8497
8565
  /**
8498
8566
  * THE canonical event-clip pad: the time window a single-timestamp analytics
8499
8567
  * event expands to when joined with footage (clip window = `[timestamp - preMs,
@@ -8535,10 +8603,55 @@ var RecordingStorageModeSchema = _enum([
8535
8603
  "events",
8536
8604
  "continuous"
8537
8605
  ]);
8606
+ /**
8607
+ * Le macro classi che possono aprire una finestra di registrazione — le stesse
8608
+ * tre offerte dallo step `object-detection`, da UNA lista
8609
+ * ({@link FIRST_LEVEL_MACRO_CLASSES}).
8610
+ */
8611
+ var RecordingObjectTriggerClassSchema = _enum(FIRST_LEVEL_MACRO_CLASSES);
8612
+ /**
8613
+ * True quando `values` non ripete un elemento.
8614
+ *
8615
+ * Un duplicato non è innocuo: ogni voce di `objectClasses` / `sensorDeviceIds`
8616
+ * diventa una SORGENTE in `bandTriggerSources`, e la stessa sorgente due volte
8617
+ * conterebbe due volte le sue finestre in `segmentMissedByMs`.
8618
+ */
8619
+ var noDuplicates = (values) => new Set(values).size === values.length;
8538
8620
  /** Which detectors trigger an `events`-mode band. */
8539
8621
  var RecordingTriggersSchema = object({
8540
8622
  motion: boolean().optional(),
8541
- audioThresholdDbfs: number().optional()
8623
+ audioThresholdDbfs: number().optional(),
8624
+ /**
8625
+ * Le macro classi la cui detection apre una finestra. ASSENTE = la sorgente
8626
+ * non è ascoltata; un array VUOTO è rifiutato, perché "banda events, trigger
8627
+ * object acceso, nessuna classe" è la stessa forma "abilitata e non registra
8628
+ * nulla, per sempre" contro cui è scritto `eventsBandCanEverDemand`.
8629
+ *
8630
+ * Il segnale letto è GIÀ FILTRATO: solo detection `source: 'pipeline'`, cioè
8631
+ * quelle che hanno attraversato `enabledMacroClasses`, i
8632
+ * `minConfidence<Macro>` e il full-frame guard. L'AI a bordo camera
8633
+ * (`source: 'onboard'`) non attraversa nessuno di quei gate e NON apre
8634
+ * finestre — vedi `recorder/object-trigger.ts`.
8635
+ */
8636
+ objectClasses: array(RecordingObjectTriggerClassSchema).min(1).refine(noDuplicates, { message: "objectClasses must not repeat a class" }).optional(),
8637
+ /**
8638
+ * I device LINKED il cui FRONTE ALTO apre una finestra. Assente = la sorgente
8639
+ * non è ascoltata; un array vuoto è rifiutato per la stessa ragione di
8640
+ * `objectClasses`.
8641
+ *
8642
+ * Sono id di device SORGENTE, non camere: la banda li nomina, quindi il
8643
+ * percorso caldo (`DeviceStateChanged`, a ritmo di bus su tutta la flotta)
8644
+ * non fa RPC. L'OFFERTA da cui l'operatore li sceglie è un'altra domanda, e
8645
+ * si risolve con `deviceManager.getLinkedDevices` + `getBindingsBatch` per
8646
+ * device (D12) — mai un elenco globale di cap.
8647
+ *
8648
+ * Cosa vuol dire "alto" dipende dal TIPO di device e non è deciso qui:
8649
+ * `SOURCE_CAP_ACTIVE_FIELD` (`catalogs/sensor-active-state.ts`) è LA tabella,
8650
+ * la stessa che il virtual-doorbell usa dal 2026-08-05. Ed è il FRONTE, non
8651
+ * il livello: un contatto trovato già aperto al riavvio del runner non fa
8652
+ * registrare.
8653
+ */
8654
+ sensorDeviceIds: array(number().int().positive()).min(1).max(16).refine(noDuplicates, { message: "sensorDeviceIds must not repeat a device" }).optional()
8542
8655
  });
8543
8656
  /**
8544
8657
  * Mode of a single recording band — the recorder per-band vocabulary.
@@ -9064,41 +9177,6 @@ var DecoderSessionConfigSchema = object({
9064
9177
  */
9065
9178
  debug: boolean().optional()
9066
9179
  });
9067
- var LabelDefinitionSchema = object({
9068
- id: string(),
9069
- name: string(),
9070
- category: string().optional(),
9071
- description: string().optional(),
9072
- icon: string().optional()
9073
- });
9074
- /**
9075
- * Wire schema for a per-model CATALOG classMap override
9076
- * (`ModelCatalogEntry.classMap` / `ModelConvertMetadata.classMap`) —
9077
- * restricted to {@link CLASS_MAP_MACRO_TARGETS}, the only macros the
9078
- * detection pipeline executor actually routes.
9079
- *
9080
- * This is deliberately a DIFFERENT, narrower shape than the general-purpose
9081
- * `ClassMapDefinition` interface above (e.g. `IDetectionAddon.getClassMap()`
9082
- * and the audio `YAMNET_TO_MACRO` catalog both use macro targets outside this
9083
- * enum) — the two used to share the name `ClassMapDefinition`/
9084
- * `ClassMapDefinitionSchema`, which made the schema-type-twin guard
9085
- * (`scripts/check-schema-type-twins.ts`) flag them as a duplicated shape. They
9086
- * are not: it is two different concepts colliding on a name. Keep this type
9087
- * under its own name rather than reusing `ClassMapDefinition` — reusing it
9088
- * would either narrow every `ClassMapDefinition` consumer to the four
9089
- * detection macros (breaking `YAMNET_TO_MACRO`) or drop the validation this
9090
- * schema exists for (see the "rejects a classMap whose target is not a
9091
- * detection macro" test in `model-catalog-schema.test.ts`).
9092
- */
9093
- var DetectionCatalogClassMapSchema = object({
9094
- mapping: record(string(), _enum([
9095
- "person",
9096
- "vehicle",
9097
- "animal",
9098
- "package"
9099
- ])),
9100
- preserveOriginal: boolean()
9101
- });
9102
9180
  var MODEL_FORMATS = [
9103
9181
  "onnx",
9104
9182
  "coreml",
@@ -17360,7 +17438,23 @@ var NcHistoryEntrySchema = object({
17360
17438
  updatedAt: number(),
17361
17439
  /** Failure detail — present on a `dead` row. */
17362
17440
  error: string().optional(),
17363
- subject: NcHistorySubjectSchema
17441
+ subject: NcHistorySubjectSchema,
17442
+ /**
17443
+ * Ids of the artefacts (still, then gif, then clip) this row's successful
17444
+ * delivery indexed in the artefact library — a REFERENCE, never the bytes
17445
+ * (an artefact is often megabytes; this row is durable JSON rewritten on
17446
+ * every delivery attempt). Absent on a row still pending/dead, a row
17447
+ * delivered before this field shipped, or a wiring with no artefact index.
17448
+ *
17449
+ * Resolve one to a fetchable URL with `resolveArtifactUrl` — an id
17450
+ * outlives any one URL's TTL, so a caller mints a fresh link on demand
17451
+ * rather than trusting one frozen at delivery time. `resolveArtifactUrl`
17452
+ * also answers `null` for an id whose artefact has since expired past the
17453
+ * retained shelf's own age bound — the degrade a caller (the Home
17454
+ * Assistant export) must render as "no image right now", never as a
17455
+ * broken link.
17456
+ */
17457
+ artifactIds: array(string().min(1)).optional()
17364
17458
  });
17365
17459
  /**
17366
17460
  * Query filter for `getHistory` (spec §4.2). Every field is a narrowing
@@ -17587,7 +17681,7 @@ method(object({}), object({ rules: array(NcRuleSchema) }), { auth: "admin" }), m
17587
17681
  }), method(object({}), object({
17588
17682
  catalog: array(NcConditionDescriptorSchema),
17589
17683
  taxonomy: NcTaxonomySchema.optional()
17590
- })), method(object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), object({ entries: array(NcHistoryEntrySchema) }), { auth: "admin" }), method(object({}), object({ snoozes: array(NcSnoozeSchema) }), { caller: "required" }), method(object({ snooze: NcSnoozeInputSchema }), object({ snooze: NcSnoozeSchema }), {
17684
+ })), method(object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), object({ entries: array(NcHistoryEntrySchema) }), { auth: "admin" }), method(object({ artifactId: string().min(1) }), object({ url: string().nullable() }), { auth: "admin" }), method(object({}), object({ snoozes: array(NcSnoozeSchema) }), { caller: "required" }), method(object({ snooze: NcSnoozeInputSchema }), object({ snooze: NcSnoozeSchema }), {
17591
17685
  kind: "mutation",
17592
17686
  caller: "required"
17593
17687
  }), method(object({ snoozeId: string() }), object({ success: literal(true) }), {
@@ -23103,7 +23197,7 @@ var lifecycleJobSchema = object({
23103
23197
  * `useAddonsOnAddonLogs`, etc. flow through the same codegen pipeline
23104
23198
  * as every other cap.
23105
23199
  */
23106
- var LogLevelSchema$1 = _enum([
23200
+ var LogLevelSchema$2 = _enum([
23107
23201
  "debug",
23108
23202
  "info",
23109
23203
  "warn",
@@ -23310,7 +23404,7 @@ var CustomActionInputSchema = object({
23310
23404
  method(_void(), array(AddonListItemSchema).readonly()), method(object({
23311
23405
  addonId: string(),
23312
23406
  limit: number().min(1).max(500).default(100),
23313
- level: LogLevelSchema$1.optional()
23407
+ level: LogLevelSchema$2.optional()
23314
23408
  }), array(LogQueryEntrySchema)), method(_void(), array(InstalledPackageSchema).readonly()), method(object({
23315
23409
  packageName: string(),
23316
23410
  version: string().optional()
@@ -23408,7 +23502,7 @@ method(_void(), array(AddonListItemSchema).readonly()), method(object({
23408
23502
  auth: "admin"
23409
23503
  }), method(object({
23410
23504
  addonId: string(),
23411
- level: LogLevelSchema$1.optional()
23505
+ level: LogLevelSchema$2.optional()
23412
23506
  }), LogStreamEntrySchema, { kind: "subscription" });
23413
23507
  object({
23414
23508
  /** Carbon dioxide concentration in ppm. */
@@ -24469,6 +24563,35 @@ var FaceFilterEnum = _enum([
24469
24563
  "identified",
24470
24564
  "all"
24471
24565
  ]);
24566
+ /**
24567
+ * What a `listRecentFaces` page is ORDERED BY.
24568
+ *
24569
+ * - `timestamp` — when the face was seen. The historical (and default) order.
24570
+ * - `suggestionConfidence` — {@link FaceInfo.suggestedMatchScore}, the peak
24571
+ * cosine of the face's SUGGESTED identity. This is the "review by certainty"
24572
+ * order: it puts the suggestions an operator can confirm with one tap at the
24573
+ * top, and it is the reason this enum exists — a client that ranked a capped
24574
+ * page client-side was ranking the newest N, never the most certain N.
24575
+ *
24576
+ * A row with NO suggestion (`suggestedMatchScore` absent — a legacy row, an
24577
+ * auto-assigned face, or a face below the suggestion band) has no certainty to
24578
+ * compare. Under `suggestionConfidence` it sorts **LAST, in BOTH directions**
24579
+ * — flipping the direction reorders the rows that HAVE a certainty and never
24580
+ * floods the page with the ones that do not. `addon-post-analysis`'s
24581
+ * `store/face-sort.ts` is the single implementation, tiebreaks newest-first
24582
+ * then by faceId, and is what makes this a total order instead of the
24583
+ * backend's NULL-collation accident.
24584
+ */
24585
+ var FaceSortFieldEnum = _enum(["timestamp", "suggestionConfidence"]);
24586
+ var FaceSortDirectionEnum = _enum(["asc", "desc"]);
24587
+ /** One suggested group of look-alike UNASSIGNED faces. Ids only — an embedding
24588
+ * never leaves the server. */
24589
+ var FaceClusterSchema = object({
24590
+ faceIds: array(string()).readonly(),
24591
+ representativeFaceId: string(),
24592
+ size: number().int(),
24593
+ cohesion: number()
24594
+ });
24472
24595
  var MediaFileLiteSchema$1 = object({
24473
24596
  key: string(),
24474
24597
  kind: string(),
@@ -24515,24 +24638,72 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
24515
24638
  kind: "mutation",
24516
24639
  auth: "admin"
24517
24640
  }), method(object({
24518
- /** Restrict to one camera. Absent keeps the cluster-wide gallery view. */
24641
+ /**
24642
+ * Restrict to ONE camera. Absent keeps the cluster-wide gallery view.
24643
+ *
24644
+ * The legacy single-camera form, kept verbatim for every caller that
24645
+ * already sends it. A caller that wants a SET sends {@link deviceIds}
24646
+ * instead — never both: `deviceIds` is the authority whenever it is
24647
+ * present, and this field is then ignored rather than unioned, so
24648
+ * there is exactly one answer to "which cameras did I ask for".
24649
+ */
24519
24650
  deviceId: number().int().optional(),
24651
+ /**
24652
+ * Restrict to a SET of cameras — the review UI's camera filter, which
24653
+ * until now had to fetch the cluster-wide page and drop rows in the
24654
+ * client (so the `limit` it asked for was spent on cameras it was
24655
+ * about to discard).
24656
+ *
24657
+ * An **empty array reads NOTHING** — `[]` is an empty page, never
24658
+ * "every camera". A request for no devices is a request, not an
24659
+ * omission; same contract as `deviceManager.listFleet` and
24660
+ * `pipelineAnalytics.listRecentTracks`.
24661
+ *
24662
+ * Absent (`undefined`) is the omission, and keeps the cluster-wide view.
24663
+ */
24664
+ deviceIds: array(number().int()).optional(),
24520
24665
  limit: number().int().positive().optional(),
24521
24666
  filter: FaceFilterEnum.optional(),
24522
24667
  /**
24523
- * Inline the base64 crop on every row. Default `true` — the existing
24524
- * behaviour, kept so no caller breaks.
24668
+ * Window lower bound on {@link FaceInfo.timestamp}, INCLUSIVE.
24669
+ * Absent means no lower bound.
24670
+ */
24671
+ since: number().int().optional(),
24672
+ /**
24673
+ * Window upper bound on {@link FaceInfo.timestamp}, INCLUSIVE.
24674
+ * Absent means no upper bound.
24675
+ */
24676
+ until: number().int().optional(),
24677
+ /**
24678
+ * Order the page by time or by suggestion certainty. Default
24679
+ * `'timestamp'` — the historical order, unchanged for every caller
24680
+ * that does not ask.
24525
24681
  *
24526
- * Set `false` once the caller renders {@link FaceInfo.cropUrl}: that
24527
- * drops ~2.87 MiB per 500-row page to a few KiB of metadata and lets
24528
- * the browser cache the images.
24682
+ * See {@link FaceSortFieldEnum} for what a row with no suggestion
24683
+ * does under `'suggestionConfidence'`.
24529
24684
  *
24530
- * **This is an INPUT field, so it does not reach the addon until the
24531
- * next train.** The hub router validates cap inputs against its own
24532
- * compiled Zod, which strips a key it does not know verified today
24533
- * on the OUTPUT side, where an additive field DOES arrive immediately
24534
- * (`Track.hasFace`). Until the train ships, sending `false` is
24535
- * harmless and simply keeps the crops inline.
24685
+ * Cost note: `'timestamp'` is served by the `(deviceId, timestamp)`
24686
+ * index and stops reading as soon as `limit` rows have PASSED the
24687
+ * filter. `'suggestionConfidence'` cannot stop earlythe most
24688
+ * certain row may be the oldest so it walks the window. Narrow it
24689
+ * with {@link since} / {@link until}.
24690
+ */
24691
+ sortBy: FaceSortFieldEnum.optional(),
24692
+ /** Sort direction for {@link sortBy}. Default `'desc'`. */
24693
+ sortDirection: FaceSortDirectionEnum.optional(),
24694
+ /**
24695
+ * Inline the base64 crop on every row.
24696
+ *
24697
+ * Default `false` since the 2026-08-25 inversion — see
24698
+ * `include-crops-default.ts`, which is the ONE place that resolves
24699
+ * this for every gallery, and which records why the inline shape had
24700
+ * to become the one you ASK for (60 457 ms → UDS timeout at 500 rows).
24701
+ * The doc here used to still say `true`; it was wrong, and a leftover
24702
+ * that describes the old design reads as permission to rely on it.
24703
+ *
24704
+ * Nothing loses its image: the row carries {@link FaceInfo.cropUrl},
24705
+ * which the browser fetches off the `event-media` plane in parallel,
24706
+ * cached and ETagged.
24536
24707
  */
24537
24708
  includeCrops: boolean().optional()
24538
24709
  }).optional(), array(FaceInfoSchema).readonly()), method(object({
@@ -24568,13 +24739,39 @@ includeCrops: boolean().optional() }).optional(), array(IdentitySchema).readonly
24568
24739
  }), method(object({
24569
24740
  threshold: number().min(0).max(1).optional(),
24570
24741
  minClusterSize: number().int().min(2).optional(),
24571
- limit: number().int().positive().optional()
24572
- }).optional(), array(object({
24573
- faceIds: array(string()).readonly(),
24574
- representativeFaceId: string(),
24575
- size: number().int(),
24576
- cohesion: number()
24577
- })).readonly());
24742
+ /**
24743
+ * Cap on the number of CLUSTERS returned. Renamed from `limit`,
24744
+ * which read as though it bounded the work — it never did.
24745
+ *
24746
+ * Wins over {@link limit} when both are sent.
24747
+ */
24748
+ maxClusters: number().int().positive().optional(),
24749
+ /**
24750
+ * @deprecated Ambiguous name for {@link maxClusters} — it cuts the
24751
+ * RESULT, not the scan. Kept so existing callers keep working; send
24752
+ * `maxClusters` (and, if you care about cost, {@link maxFacesScanned}).
24753
+ */
24754
+ limit: number().int().positive().optional(),
24755
+ /**
24756
+ * Cap on the number of unassigned faces READ AND CLUSTERED — the
24757
+ * POOL, not the result.
24758
+ *
24759
+ * This is the knob {@link maxClusters} was mistaken for. Clustering
24760
+ * used to read every unassigned face on the hub no matter what the
24761
+ * caller asked for, because the only bound cut the finished clusters
24762
+ * afterwards; a UI showing a window of 100 paid for a scan of the
24763
+ * whole corpus, on an addon whose disk is under contention.
24764
+ *
24765
+ * The pool is the NEWEST matching faces first — the same order the
24766
+ * gallery shows — so a bound here shortens the horizon, it does not
24767
+ * sample it randomly.
24768
+ *
24769
+ * Default: 1 000 (`FACE_SWEEP_PAGE`, exactly one store page). Chosen
24770
+ * so the live corpus — 372 face rows — is unaffected while the
24771
+ * unbounded scan can never come back as the table grows.
24772
+ */
24773
+ maxFacesScanned: number().int().positive().optional()
24774
+ }).optional(), array(FaceClusterSchema).readonly());
24578
24775
  /**
24579
24776
  * Fan-control cap. Models HA `fan.*` entity-specific surfaces:
24580
24777
  * speed percentage, preset modes, ceiling-fan direction, and
@@ -27374,6 +27571,39 @@ var ReadGopBytesResultSchema = object({
27374
27571
  /** Media ms the returned fragment covers. */
27375
27572
  gopDurMs: number()
27376
27573
  });
27574
+ /**
27575
+ * A time WINDOW of one finalized segment, cut by byte range — the multi-GOP
27576
+ * twin of {@link ReadGopBytesResultSchema}'s single instant. Built for the
27577
+ * replay clip's `recording` source (`docs/design/plans/2026-08-26-replay-clip-su-pipeline.md`):
27578
+ * a replay needs several seconds of native pixels, not one frame.
27579
+ *
27580
+ * `ok.data` is standalone-demuxable, same as a GOP read. `ok.reachesRequestedEnd`
27581
+ * is `false` when the returned bytes were cut short by the read's own safety
27582
+ * byte cap before covering `[fromMs, toMs)` — a truncation, reported, not a
27583
+ * silently shorter answer. `spans-multiple-segments` is a REFUSAL, not a
27584
+ * degradation: a window whose end falls past the covering segment would need
27585
+ * bytes stitched from a second segment file (its own `ftyp`+`moov`), which is
27586
+ * not one standalone-demuxable stream — the caller's answer is to request a
27587
+ * shorter window or one aligned to a single segment, not to receive spliced
27588
+ * bytes nothing has proven decodable.
27589
+ */
27590
+ var ReadWindowBytesResultSchema = discriminatedUnion("kind", [object({
27591
+ kind: literal("ok"),
27592
+ data: _instanceof(Uint8Array),
27593
+ /** Absolute epoch ms of the returned bytes' first sample — at or before
27594
+ * the requested `fromMs` (anchored on the nearest keyframe). */
27595
+ gopStartMs: number(),
27596
+ /** Media ms the returned bytes cover, from `gopStartMs`. */
27597
+ gopDurMs: number(),
27598
+ /** `false` ⇒ the safety byte cap cut the read short before it reached
27599
+ * the requested `toMs`; the caller got fewer frames than asked for. */
27600
+ reachesRequestedEnd: boolean()
27601
+ }), object({
27602
+ kind: literal("spans-multiple-segments"),
27603
+ /** Where the covering segment's own footage runs out — informational,
27604
+ * not a retry hint (retrying the same window would refuse again). */
27605
+ segmentEndMs: number()
27606
+ })]);
27377
27607
  var recordingCapability = {
27378
27608
  name: "recording",
27379
27609
  scope: "system",
@@ -27453,6 +27683,21 @@ var recordingCapability = {
27453
27683
  kind: "query",
27454
27684
  auth: "admin"
27455
27685
  }),
27686
+ /** Read a WINDOW `[fromMs, toMs)` of segment `startMs`, by mfra byte
27687
+ * range — the multi-GOP twin of `readGopBytes`. Refuses (does not
27688
+ * degrade) when the window runs past the covering segment. Used by the
27689
+ * replay clip's `recording` source to fetch several seconds of native
27690
+ * footage for its single ffmpeg decode pass. */
27691
+ readWindowBytes: method(object({
27692
+ deviceId: number(),
27693
+ profile: string(),
27694
+ startMs: number(),
27695
+ fromMs: number(),
27696
+ toMs: number()
27697
+ }), ReadWindowBytesResultSchema, {
27698
+ kind: "query",
27699
+ auth: "admin"
27700
+ }),
27456
27701
  setDeviceConfig: method(object({
27457
27702
  deviceId: number(),
27458
27703
  config: RecordingConfigSchema
@@ -28408,6 +28653,211 @@ var SetSiteLocationInputSchema = object({
28408
28653
  latitude: number().min(-90).max(90),
28409
28654
  longitude: number().min(-180).max(180)
28410
28655
  }).nullable();
28656
+ /**
28657
+ * One `(procedure, user-agent, ip, principal)` tuple of the HTTP request
28658
+ * census. `principal` is the DERIVED identity (`apocaliss92 (admin)`,
28659
+ * `scoped:1a2b3c4d (scoped-token)`, `anonymous`) that the tRPC error log
28660
+ * already prints - never a token, never an `Authorization` header.
28661
+ */
28662
+ var RequestCensusGroupSchema = object({
28663
+ procedure: string(),
28664
+ userAgent: string(),
28665
+ ip: string(),
28666
+ principal: string(),
28667
+ calls: number(),
28668
+ perMin: number()
28669
+ });
28670
+ /**
28671
+ * A procedure's TOTAL over the window, across every caller.
28672
+ *
28673
+ * This block, not the group list, is what answers "did these calls arrive over
28674
+ * HTTP at all". A total far BELOW what a store-side census counted over the
28675
+ * same window excludes the HTTP plane, which is a result, not a failure.
28676
+ */
28677
+ var RequestCensusProcedureSchema = object({
28678
+ procedure: string(),
28679
+ calls: number(),
28680
+ perMin: number()
28681
+ });
28682
+ /**
28683
+ * The census as an operator sees it.
28684
+ *
28685
+ * `persisted` is the honest answer to "will this survive the restart I am
28686
+ * about to do": the arm deadline is written to `system-settings` so a window
28687
+ * armed now can measure the NEXT boot, and a write that failed must not look
28688
+ * like one that succeeded.
28689
+ */
28690
+ var RequestCensusStatusSchema = object({
28691
+ armed: boolean(),
28692
+ /** How long the current - or just-closed - window collected, in ms. */
28693
+ elapsedMs: number(),
28694
+ /** The window actually armed, after the server clamped the request. */
28695
+ windowMs: number(),
28696
+ /** Epoch ms the window closes at. 0 when disarmed. */
28697
+ armedUntilMs: number(),
28698
+ httpRequests: number(),
28699
+ batchedRequests: number(),
28700
+ /**
28701
+ * Procedure invocations. Higher than `httpRequests` whenever tRPC batching
28702
+ * is in play (`?batch=1` carries several procedures in one request); this is
28703
+ * the number comparable with a store-side call count.
28704
+ */
28705
+ procedureCalls: number(),
28706
+ /**
28707
+ * tRPC WebSocket connections opened during the window. NOT calls - the WS
28708
+ * transport resolves one context per connection - but the number that says
28709
+ * whether a plane this census cannot see was busy while HTTP was quiet.
28710
+ */
28711
+ wsConnections: number(),
28712
+ distinctGroups: number(),
28713
+ /** Calls counted in the totals whose group attribution was shed at the
28714
+ * cardinality bound. */
28715
+ unattributedCalls: number(),
28716
+ procedures: array(RequestCensusProcedureSchema).readonly(),
28717
+ groups: array(RequestCensusGroupSchema).readonly()
28718
+ }).extend({ persisted: boolean() });
28719
+ /** Severity vocabulary. Mirrors `LogLevel` in `interfaces/logging.ts`. */
28720
+ var LogLevelSchema$1 = _enum([
28721
+ "debug",
28722
+ "info",
28723
+ "warn",
28724
+ "error"
28725
+ ]);
28726
+ /**
28727
+ * The diagnostics that can be ARMED for a window. Exactly one today.
28728
+ *
28729
+ * A diagnostic is anything whose cost is only worth paying while a question is
28730
+ * open. It never persists as a boolean: see {@link DiagnosticWindowSchema}.
28731
+ */
28732
+ var DiagnosticIdSchema = _enum(["request-census"]);
28733
+ /**
28734
+ * The layers of the level hierarchy, general → specific. The most specific
28735
+ * layer that carries an explicit value wins.
28736
+ *
28737
+ * `component` is DECLARED and not yet resolvable: the per-component channels
28738
+ * are a later slice of the same plan, and a `levelSource` enum that has to
28739
+ * grow later would force every consumer of this document to change with it.
28740
+ * Nothing returns `component` today.
28741
+ */
28742
+ var LoggingScopeKindSchema = _enum([
28743
+ "cluster",
28744
+ "node",
28745
+ "component"
28746
+ ]);
28747
+ /** Where an effective level came from. `default` = nothing is set anywhere. */
28748
+ var LoggingLevelSourceSchema = _enum([
28749
+ "default",
28750
+ "cluster",
28751
+ "node",
28752
+ "component"
28753
+ ]);
28754
+ /**
28755
+ * One layer of the hierarchy as it actually STANDS.
28756
+ *
28757
+ * `level: null` is the whole reason this array is returned: it is the
28758
+ * difference between "this node is at `info` because I decided it" and
28759
+ * "...because it inherits". An operator who clears an override believing they
28760
+ * are clearing an inherited value has been handed the same defect as the two
28761
+ * contradicting knobs this document exists to remove, moved one floor up.
28762
+ */
28763
+ var LoggingLevelLayerSchema = object({
28764
+ scope: LoggingScopeKindSchema,
28765
+ /** The node this layer speaks for; `null` on the cluster layer. */
28766
+ nodeId: string().nullable(),
28767
+ /** Explicitly set here, or `null` when this layer inherits. */
28768
+ level: LogLevelSchema$1.nullable()
28769
+ });
28770
+ /** What a line is judged against, and WHICH layer decided it. */
28771
+ var LoggingEffectiveSchema = object({
28772
+ level: LogLevelSchema$1,
28773
+ levelSource: LoggingLevelSourceSchema
28774
+ });
28775
+ /** Every layer, general → specific. Never collapsed into the effective value. */
28776
+ var LoggingExplicitSchema = object({ layers: array(LoggingLevelLayerSchema).readonly() });
28777
+ /**
28778
+ * An armed diagnostic, with its DEADLINE.
28779
+ *
28780
+ * The shape of ADR-0244: what is stored is a deadline and never a flag, so a
28781
+ * diagnostic somebody forgot expires by itself, and a boot-window measurement
28782
+ * survives the restart it exists to measure. `remainingMs` is 0 whenever
28783
+ * `armed` is false — a window is never reported as slightly expired.
28784
+ */
28785
+ var DiagnosticWindowSchema = object({
28786
+ id: DiagnosticIdSchema,
28787
+ armed: boolean(),
28788
+ /** Epoch ms the window closes at. 0 when disarmed. */
28789
+ armedUntilMs: number(),
28790
+ /** Ms left before it expires on its own. 0 when disarmed. */
28791
+ remainingMs: number(),
28792
+ /** Whether the stored deadline is the one the live diagnostic is running —
28793
+ * i.e. whether this window would survive a restart. */
28794
+ persisted: boolean()
28795
+ });
28796
+ /**
28797
+ * `armMs: 0` DISARMS. Any positive value arms for that long, clamped by the
28798
+ * server — there is no maximum here on purpose: a bound repeated in a schema
28799
+ * is a second knob that disagrees with the first the day one of them moves.
28800
+ */
28801
+ var DiagnosticWindowPatchSchema = object({
28802
+ id: DiagnosticIdSchema,
28803
+ armMs: number().int().min(0),
28804
+ /** Cadence of the diagnostic's aggregated report line. Clamped by the server. */
28805
+ reportEveryMs: number().int().positive().optional()
28806
+ });
28807
+ /**
28808
+ * A PATCH, and patches MERGE.
28809
+ *
28810
+ * A field absent from the patch is left exactly as it was — arming a
28811
+ * diagnostic never resets a level, and setting a level never disarms a window.
28812
+ * The provider must not reconstruct the document as `{ ...snapshot, ...patch }`:
28813
+ * `setAll` already merges, and rebuilding the object is how an absent field
28814
+ * turns into an erased one.
28815
+ */
28816
+ var LoggingSettingsPatchSchema = object({
28817
+ /**
28818
+ * Absent leaves the level untouched. `null` CLEARS the explicit value at the
28819
+ * addressed scope so it inherits again. A value sets it.
28820
+ */
28821
+ level: LogLevelSchema$1.nullable().optional(),
28822
+ /**
28823
+ * Only the diagnostics NAMED here change. An armed window that is not listed
28824
+ * keeps running — a patch is never a full replacement.
28825
+ */
28826
+ diagnostics: array(DiagnosticWindowPatchSchema).readonly().optional()
28827
+ });
28828
+ /**
28829
+ * Which LAYER of the hierarchy is addressed. Absent = the cluster layer.
28830
+ *
28831
+ * Deliberately NOT called `nodeId`: that key is reserved on every cap method
28832
+ * input — the generated router strips it and uses it to resolve the PROVIDER
28833
+ * on that node (`resolveProvider(cap, nodeId, …)`). A document about
28834
+ * `agent-1` addressed as `nodeId` would be forwarded to agent-1 and answered
28835
+ * by an agent that holds no cluster document at all. The hub is the single
28836
+ * authority over the whole hierarchy and answers for every layer, so the
28837
+ * layer selector needs a name the transport does not already own.
28838
+ */
28839
+ var GetLoggingSettingsInputSchema = object({ scopeNodeId: string().optional() });
28840
+ var SetLoggingSettingsInputSchema = object({
28841
+ scopeNodeId: string().optional(),
28842
+ patch: LoggingSettingsPatchSchema
28843
+ });
28844
+ /**
28845
+ * The whole document, as read and as returned after every write.
28846
+ *
28847
+ * `persisted: false` means the settings store could not be read or written.
28848
+ * The in-memory mirror still governs behaviour and is unchanged by the
28849
+ * failure — a read that fails neither switches a level nor disarms a window
28850
+ * (D49) — but the operator is told that what they are looking at would not
28851
+ * survive a restart.
28852
+ */
28853
+ var LoggingSettingsStateSchema = object({
28854
+ /** The layer this document was read at. `null` = the cluster layer. */
28855
+ scopeNodeId: string().nullable(),
28856
+ effective: LoggingEffectiveSchema,
28857
+ explicit: LoggingExplicitSchema,
28858
+ activeWindows: array(DiagnosticWindowSchema).readonly(),
28859
+ persisted: boolean()
28860
+ });
28411
28861
  method(_void(), FeatureManifestSchema), method(_void(), HealthStatusSchema), method(_void(), FeatureManifestSchema), method(_void(), array(NetworkAddressSchema).readonly()), method(_void(), unknown().nullable(), { auth: "admin" }), method(record(string(), unknown()), _null(), {
28412
28862
  kind: "mutation",
28413
28863
  auth: "admin"
@@ -28420,6 +28870,9 @@ method(_void(), FeatureManifestSchema), method(_void(), HealthStatusSchema), met
28420
28870
  }), method(_void(), SiteLocationStatusSchema, {
28421
28871
  kind: "mutation",
28422
28872
  auth: "admin"
28873
+ }), method(_void(), RequestCensusStatusSchema, { auth: "admin" }), method(GetLoggingSettingsInputSchema, LoggingSettingsStateSchema, { auth: "admin" }), method(SetLoggingSettingsInputSchema, LoggingSettingsStateSchema, {
28874
+ kind: "mutation",
28875
+ auth: "admin"
28423
28876
  });
28424
28877
  object({
28425
28878
  /** True when the device's tamper switch / case-open contact is
@@ -29048,6 +29501,146 @@ DeviceType.Camera, method(object({
29048
29501
  detection: array(ZoneRuleSchema).readonly(),
29049
29502
  package: array(ZoneRuleSchema).readonly()
29050
29503
  });
29504
+ /**
29505
+ * LA tabella "quale booleano di questo tipo di device conta come ALTO", e il
29506
+ * valutatore puro del suo FRONTE.
29507
+ *
29508
+ * Viveva dentro il builtin virtual-doorbell
29509
+ * (`@camstack/system` — `builtins/doorbell/trigger-engine.ts`) e i suoi
29510
+ * predicati erano privati al modulo. Il recorder ne ha bisogno per il trigger
29511
+ * `RecordingTriggers.sensorDeviceIds`: copiarla avrebbe creato la SECONDA
29512
+ * tabella, che diverge alla prima cap aggiunta e il cui sintomo — "il sensore
29513
+ * fa suonare il campanello ma non registra" — è esattamente D62. Quindi si
29514
+ * SPOSTA qui e il doorbell la ri-esporta.
29515
+ *
29516
+ * ⚠ NON è `DEVICE_STATE_READERS` (`catalogs/device-state-vocabulary.ts`), e le
29517
+ * due non vanno unificate: quella risponde a "qual è la PAROLA di stato per una
29518
+ * regola" (e include `presence`, `cover`, `alarm-panel`), questa a "qual è il
29519
+ * booleano il cui FRONTE conta". Vocabolari deliberatamente diversi.
29520
+ */
29521
+ /**
29522
+ * Known binary / switch source caps → the boolean slice field whose
29523
+ * false→true rise counts as ACTIVE. Every entry is "fire on active".
29524
+ * Sensors whose "active" reading is not a plain boolean (presence's string
29525
+ * state, connectivity's connected flag) are deliberately excluded — a
29526
+ * reconnect is not a doorbell press, and it is not a recording either.
29527
+ */
29528
+ var SOURCE_CAP_ACTIVE_FIELD = {
29529
+ contact: "entryOpen",
29530
+ binary: "on",
29531
+ switch: "on",
29532
+ motion: "detected",
29533
+ flood: "flooded",
29534
+ gas: "detected",
29535
+ smoke: "detected",
29536
+ "carbon-monoxide": "detected",
29537
+ vibration: "detected",
29538
+ tamper: "tampered"
29539
+ };
29540
+ /**
29541
+ * The same caps → the slice field carrying the ms-epoch timestamp of the
29542
+ * last transition. Every source cap MUST appear here (guarded by a spec):
29543
+ * without a transition timestamp the evaluator cannot tell a genuine rise
29544
+ * from a boot-time hydration when the FIRST slice it ever sees is already
29545
+ * active, and errs towards silence — swallowing the rise.
29546
+ *
29547
+ * These timestamps are UPSTREAM ones, not ingest ones: the Home Assistant
29548
+ * provider derives them from `state.last_changed`, so they survive our own
29549
+ * restarts and correctly read as "hours ago" for a state that has been
29550
+ * active for hours. `motion` names its rise timestamp `lastDetectedAt`.
29551
+ */
29552
+ var SOURCE_CAP_CHANGED_AT_FIELD = {
29553
+ contact: "lastChangedAt",
29554
+ binary: "lastChangedAt",
29555
+ switch: "lastChangedAt",
29556
+ motion: "lastDetectedAt",
29557
+ flood: "lastChangedAt",
29558
+ gas: "lastChangedAt",
29559
+ smoke: "lastChangedAt",
29560
+ "carbon-monoxide": "lastChangedAt",
29561
+ vibration: "lastChangedAt",
29562
+ tamper: "lastChangedAt"
29563
+ };
29564
+ /** True when a cap is a recognised binary/switch source. */
29565
+ function isSourceCap(capName) {
29566
+ return Object.prototype.hasOwnProperty.call(SOURCE_CAP_ACTIVE_FIELD, capName);
29567
+ }
29568
+ /** Extract the "active" boolean a source cap's slice carries, or null when
29569
+ * the cap is unknown or the field is missing / non-boolean. */
29570
+ function sliceActiveValue(capName, slice) {
29571
+ const field = SOURCE_CAP_ACTIVE_FIELD[capName];
29572
+ if (field === void 0) return null;
29573
+ const raw = slice[field];
29574
+ return typeof raw === "boolean" ? raw : null;
29575
+ }
29576
+ /** Ms-epoch transition timestamp a source cap's slice carries, or null when
29577
+ * it is absent, non-numeric or the zero "never observed" sentinel. */
29578
+ function sliceChangedAt(capName, slice) {
29579
+ const field = SOURCE_CAP_CHANGED_AT_FIELD[capName];
29580
+ if (field === void 0) return null;
29581
+ const raw = slice[field];
29582
+ if (typeof raw !== "number" || !Number.isFinite(raw) || raw <= 0) return null;
29583
+ return raw;
29584
+ }
29585
+ /**
29586
+ * How recent a source's own transition timestamp must be for a FIRST
29587
+ * sighting that is already active to count as a genuine rise rather than a
29588
+ * hydration of long-standing state.
29589
+ */
29590
+ var DEFAULT_FIRST_SIGHTING_FRESHNESS_MS = 3e4;
29591
+ /**
29592
+ * IL fronte. Puro: nessun orologio proprio, nessuna memoria — il chiamante
29593
+ * porta `prior`, `nowMs` e il proprio `startedAtMs`.
29594
+ *
29595
+ * Il caso della PRIMA slice già attiva è trattato esplicitamente e vale come
29596
+ * fronte solo se il timestamp UPSTREAM della transizione è posteriore a
29597
+ * `startedAtMs` **e** entro `firstSightingFreshnessMs`. Entrambe le metà
29598
+ * servono: la sola freschezza scatterebbe su un'idratazione al boot di uno
29599
+ * stato flippato pochi secondi prima del riavvio, e il solo "dopo che abbiamo
29600
+ * iniziato" scatterebbe, su un processo di lunga vita, per una sorgente
29601
+ * adottata oggi il cui stato è cambiato ieri. Il caso ambiguo ERRA VERSO IL
29602
+ * SILENZIO e lo dichiara (`baseline-seeded-stale-active`).
29603
+ */
29604
+ function evaluateSensorEdge(input) {
29605
+ const value = sliceActiveValue(input.capName, input.slice);
29606
+ if (value === null) return {
29607
+ edge: "none",
29608
+ value: null,
29609
+ reason: isSourceCap(input.capName) ? "non-boolean-value" : "unknown-cap"
29610
+ };
29611
+ if (input.prior === void 0) {
29612
+ if (!value) return {
29613
+ edge: "none",
29614
+ value,
29615
+ reason: "baseline-seeded-inactive"
29616
+ };
29617
+ const changedAt = sliceChangedAt(input.capName, input.slice);
29618
+ const floor = Math.max(input.startedAtMs, input.nowMs - input.firstSightingFreshnessMs);
29619
+ if (changedAt === null || changedAt < floor) return {
29620
+ edge: "none",
29621
+ value,
29622
+ reason: "baseline-seeded-stale-active"
29623
+ };
29624
+ return {
29625
+ edge: "rising",
29626
+ value: true
29627
+ };
29628
+ }
29629
+ if (input.prior === value) return {
29630
+ edge: "none",
29631
+ value,
29632
+ reason: "no-change"
29633
+ };
29634
+ if (!value) return {
29635
+ edge: "none",
29636
+ value,
29637
+ reason: "falling-edge"
29638
+ };
29639
+ return {
29640
+ edge: "rising",
29641
+ value: true
29642
+ };
29643
+ }
29051
29644
  var HF_BASE_URL = `https://huggingface.co/camstack/camstack-models/resolve/main`;
29052
29645
  /**
29053
29646
  * Accessory device helpers — shared across drivers.
@@ -29088,9 +29681,6 @@ var AccessoryKind = {
29088
29681
  PrivacyMask: DeviceRole.PrivacyMask
29089
29682
  };
29090
29683
  AccessoryKind.Siren, AccessoryKind.Floodlight, AccessoryKind.Spotlight, AccessoryKind.PirSensor, AccessoryKind.Chime, AccessoryKind.Autotrack, AccessoryKind.Nightvision, AccessoryKind.PrivacyMask;
29091
- DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
29092
- new Set(Object.values(DeviceType));
29093
- DeviceFeature.BatteryOperated;
29094
29684
  /**
29095
29685
  * THE derivation. One crop rectangle, one presence verdict — see D52 for why
29096
29686
  * this repo insists a derived value has exactly one implementation.
@@ -29109,6 +29699,9 @@ function deriveBatteryPresence(input) {
29109
29699
  const budget = input.unreachableAfterMs ?? 216e5;
29110
29700
  return input.nowMs - lastContactAt > budget ? "unreachable" : "sleeping";
29111
29701
  }
29702
+ DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
29703
+ new Set(Object.values(DeviceType));
29704
+ DeviceFeature.BatteryOperated;
29112
29705
  Object.freeze({
29113
29706
  "accessories.setChildHidden": {
29114
29707
  capName: "accessories",
@@ -32014,6 +32607,12 @@ Object.freeze({
32014
32607
  addonId: null,
32015
32608
  access: "view"
32016
32609
  },
32610
+ "notificationRules.resolveArtifactUrl": {
32611
+ capName: "notification-rules",
32612
+ capScope: "system",
32613
+ addonId: null,
32614
+ access: "view"
32615
+ },
32017
32616
  "notificationRules.setAlarmConfig": {
32018
32617
  capName: "notification-rules",
32019
32618
  capScope: "system",
@@ -33418,6 +34017,12 @@ Object.freeze({
33418
34017
  addonId: null,
33419
34018
  access: "view"
33420
34019
  },
34020
+ "recording.readWindowBytes": {
34021
+ capName: "recording",
34022
+ capScope: "system",
34023
+ addonId: null,
34024
+ access: "view"
34025
+ },
33421
34026
  "recording.refreshStorageLocationsForMigration": {
33422
34027
  capName: "recording",
33423
34028
  capScope: "system",
@@ -34258,6 +34863,18 @@ Object.freeze({
34258
34863
  addonId: null,
34259
34864
  access: "create"
34260
34865
  },
34866
+ "system.getLoggingSettings": {
34867
+ capName: "system",
34868
+ capScope: "system",
34869
+ addonId: null,
34870
+ access: "view"
34871
+ },
34872
+ "system.getRequestCensus": {
34873
+ capName: "system",
34874
+ capScope: "system",
34875
+ addonId: null,
34876
+ access: "view"
34877
+ },
34261
34878
  "system.getRetentionConfig": {
34262
34879
  capName: "system",
34263
34880
  capScope: "system",
@@ -34288,6 +34905,12 @@ Object.freeze({
34288
34905
  addonId: null,
34289
34906
  access: "view"
34290
34907
  },
34908
+ "system.setLoggingSettings": {
34909
+ capName: "system",
34910
+ capScope: "system",
34911
+ addonId: null,
34912
+ access: "create"
34913
+ },
34291
34914
  "system.setRetentionConfig": {
34292
34915
  capName: "system",
34293
34916
  capScope: "system",
@@ -35443,6 +36066,10 @@ Object.freeze({
35443
36066
  name: "deviceId",
35444
36067
  form: "single",
35445
36068
  optional: true
36069
+ }, {
36070
+ name: "deviceIds",
36071
+ form: "array",
36072
+ optional: true
35446
36073
  }],
35447
36074
  "fanControl.setDirection": [{
35448
36075
  name: "deviceId",
@@ -36248,6 +36875,11 @@ Object.freeze({
36248
36875
  form: "single",
36249
36876
  optional: false
36250
36877
  }],
36878
+ "recording.readWindowBytes": [{
36879
+ name: "deviceId",
36880
+ form: "single",
36881
+ optional: false
36882
+ }],
36251
36883
  "recording.relocateFootage": [{
36252
36884
  name: "deviceId",
36253
36885
  form: "single",
@@ -37268,6 +37900,7 @@ var NATIVE_LEASE_BUDGET_KEY = "nativeLeaseBudgetMb";
37268
37900
  var NATIVE_LEASE_ACTIVITY_KEY = "nativeLeaseActivityMs";
37269
37901
  var NATIVE_LEASE_ADMISSION_KEY = "nativeLeaseAdmission";
37270
37902
  var NATIVE_LEASE_TILE_BUDGET_KEY = "nativeTileBudgetMb";
37903
+ var NATIVE_LEASE_SCENE_BUDGET_KEY = "nativeSceneBudgetMb";
37271
37904
  /**
37272
37905
  * WHICH delivered frames the decode worker retains a native copy of.
37273
37906
  *
@@ -37362,7 +37995,38 @@ var NativeLeaseSettingsSchema = object({
37362
37995
  * fallback — i.e. the pre-2026-08-13 miss profile. Set it there only to
37363
37996
  * reproduce that.
37364
37997
  */
37365
- tileBudgetMb: number().int().min(0).max(1024)
37998
+ tileBudgetMb: number().int().min(0).max(1024),
37999
+ /**
38000
+ * RAM ceiling per decode worker, in MB, for the SCENE TILES — one
38001
+ * JPEG-encoded copy of the WHOLE native frame, cut in the same instant as the
38002
+ * subject tiles, on frames that detected something.
38003
+ *
38004
+ * It exists because a subject tile cannot answer a FULL-FRAME request:
38005
+ * containment is strict by design, so the native `keyFrame`, the detail
38006
+ * plane's `frameJpeg` rung and the display-crop fallback had no rung at all
38007
+ * below the hold. Measured on the live cluster: 23.3% of key-frame captures
38008
+ * missed, 95.7% of them with `worker-lease-gone` — the raster released one
38009
+ * frame-time after delivery, with the request only p50 367 ms behind it.
38010
+ *
38011
+ * Sizing, and why this is a budget and not a duration: a scene tile is
38012
+ * ~1.5-2.5 MB at 4K (against ~23.75 MB for the raster it was cut from and
38013
+ * ~60-120 KB for a subject tile), and it is cut ~0.4 times a second per busy
38014
+ * camera — only detection-bearing frames get one. 48 MB is therefore ~20-30
38015
+ * frames, i.e. the store's 30 s TTL binds at the steady state and the budget
38016
+ * binds only through a detection burst, where it still covers well past the
38017
+ * measured p90 ask age of 4.3 s. Holding the RASTERS for the same window
38018
+ * would be ~498 MB per camera and ~6 GB at peak concurrency — the OOM this
38019
+ * whole shape exists to avoid.
38020
+ *
38021
+ * A SEPARATE ceiling from `tileBudgetMb` on purpose: a scene tile is ~20× a
38022
+ * subject tile, so one shared budget would let a busy camera's key frames
38023
+ * evict the face/plate tiles the recognisers depend on. Two budgets make that
38024
+ * impossible rather than unlikely. `0` DISABLES scene tiles and restores the
38025
+ * pre-existing behaviour, where a late full-frame request had nothing but the
38026
+ * ≤640 RAM raster — which the `keyFrame` gate rejects, so in practice it had
38027
+ * nothing.
38028
+ */
38029
+ sceneBudgetMb: number().int().min(0).max(1024)
37366
38030
  });
37367
38031
  /**
37368
38032
  * The values in force when the operator has set nothing.
@@ -37378,12 +38042,14 @@ var DEFAULT_NATIVE_LEASE_SETTINGS = {
37378
38042
  budgetMb: 1024,
37379
38043
  activityMs: 15e3,
37380
38044
  tileBudgetMb: 64,
38045
+ sceneBudgetMb: 48,
37381
38046
  admission: "inferred"
37382
38047
  };
37383
38048
  DEFAULT_NATIVE_LEASE_SETTINGS.holdFrames;
37384
38049
  DEFAULT_NATIVE_LEASE_SETTINGS.budgetMb;
37385
38050
  DEFAULT_NATIVE_LEASE_SETTINGS.activityMs;
37386
38051
  DEFAULT_NATIVE_LEASE_SETTINGS.tileBudgetMb;
38052
+ DEFAULT_NATIVE_LEASE_SETTINGS.sceneBudgetMb;
37387
38053
  DEFAULT_NATIVE_LEASE_SETTINGS.admission;
37388
38054
  /**
37389
38055
  * Parse one knob, reporting `null` for absent, junk, out-of-bounds — AND for a
@@ -37432,12 +38098,14 @@ function readNativeLeaseOverride(config) {
37432
38098
  const activityMs = readKnob("activityMs", config[NATIVE_LEASE_ACTIVITY_KEY]);
37433
38099
  const admission = readAdmissionKnob(config[NATIVE_LEASE_ADMISSION_KEY]);
37434
38100
  const tileBudgetMb = readKnob("tileBudgetMb", config[NATIVE_LEASE_TILE_BUDGET_KEY]);
38101
+ const sceneBudgetMb = readKnob("sceneBudgetMb", config[NATIVE_LEASE_SCENE_BUDGET_KEY]);
37435
38102
  return {
37436
38103
  ...holdFrames === null ? {} : { holdFrames },
37437
38104
  ...budgetMb === null ? {} : { budgetMb },
37438
38105
  ...activityMs === null ? {} : { activityMs },
37439
38106
  ...admission === null ? {} : { admission },
37440
- ...tileBudgetMb === null ? {} : { tileBudgetMb }
38107
+ ...tileBudgetMb === null ? {} : { tileBudgetMb },
38108
+ ...sceneBudgetMb === null ? {} : { sceneBudgetMb }
37441
38109
  };
37442
38110
  }
37443
38111
  function isHydratedField(entry) {
@@ -37448,7 +38116,8 @@ var LEASE_KEYS = [
37448
38116
  NATIVE_LEASE_BUDGET_KEY,
37449
38117
  NATIVE_LEASE_ACTIVITY_KEY,
37450
38118
  NATIVE_LEASE_ADMISSION_KEY,
37451
- NATIVE_LEASE_TILE_BUDGET_KEY
38119
+ NATIVE_LEASE_TILE_BUDGET_KEY,
38120
+ NATIVE_LEASE_SCENE_BUDGET_KEY
37452
38121
  ];
37453
38122
  /**
37454
38123
  * Extract the operator's lease overrides from an
@@ -38254,6 +38923,12 @@ Object.defineProperty(exports, "DEFAULT_EVENTS_BAND_BUFFER_SEC", {
38254
38923
  return DEFAULT_EVENTS_BAND_BUFFER_SEC;
38255
38924
  }
38256
38925
  });
38926
+ Object.defineProperty(exports, "DEFAULT_FIRST_SIGHTING_FRESHNESS_MS", {
38927
+ enumerable: true,
38928
+ get: function() {
38929
+ return DEFAULT_FIRST_SIGHTING_FRESHNESS_MS;
38930
+ }
38931
+ });
38257
38932
  Object.defineProperty(exports, "DEFAULT_NATIVE_LEASE_SETTINGS", {
38258
38933
  enumerable: true,
38259
38934
  get: function() {
@@ -38530,6 +39205,12 @@ Object.defineProperty(exports, "errMsg", {
38530
39205
  return errMsg;
38531
39206
  }
38532
39207
  });
39208
+ Object.defineProperty(exports, "evaluateSensorEdge", {
39209
+ enumerable: true,
39210
+ get: function() {
39211
+ return evaluateSensorEdge;
39212
+ }
39213
+ });
38533
39214
  Object.defineProperty(exports, "evaluateZoneRules", {
38534
39215
  enumerable: true,
38535
39216
  get: function() {
@@ -38566,6 +39247,12 @@ Object.defineProperty(exports, "isEvent", {
38566
39247
  return isEvent;
38567
39248
  }
38568
39249
  });
39250
+ Object.defineProperty(exports, "isFirstLevelMacroClass", {
39251
+ enumerable: true,
39252
+ get: function() {
39253
+ return isFirstLevelMacroClass;
39254
+ }
39255
+ });
38569
39256
  Object.defineProperty(exports, "isSoftwareDecode", {
38570
39257
  enumerable: true,
38571
39258
  get: function() {