@camstack/addon-pipeline 1.2.287 → 1.2.288

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (32) hide show
  1. package/dist/audio-analyzer/index.js +2 -2
  2. package/dist/audio-analyzer/index.mjs +2 -2
  3. package/dist/{default-detection-model-COWU8Rz0.js → default-detection-model-D5kMByfZ.js} +1 -1
  4. package/dist/{default-detection-model-GPkHN13Q.mjs → default-detection-model-DTvsx_iX.mjs} +1 -1
  5. package/dist/detection-pipeline/index.js +4 -4
  6. package/dist/detection-pipeline/index.mjs +4 -4
  7. package/dist/{dist-DiLFfaYv.js → dist-CegiJ2Pw.js} +269 -9
  8. package/dist/{dist-B0wh1O_e.mjs → dist-mEtwupOP.mjs} +258 -10
  9. package/dist/motion-wasm/index.js +1 -1
  10. package/dist/motion-wasm/index.mjs +1 -1
  11. package/dist/{node-UjSfDx5h.mjs → node-B8p-rV9H.mjs} +1 -1
  12. package/dist/{node-Beq3CXsJ.js → node-C8jhiPW2.js} +1 -1
  13. package/dist/pipeline-runner/index.js +3 -3
  14. package/dist/pipeline-runner/index.mjs +3 -3
  15. package/dist/{process-memory-CU-Vka6-.mjs → process-memory-C5bRH8-t.mjs} +1 -1
  16. package/dist/{process-memory-hlScqZ3l.js → process-memory-lPbJ1ta2.js} +1 -1
  17. package/dist/recorder/index.js +201 -69
  18. package/dist/recorder/index.mjs +201 -69
  19. package/dist/{segment-demux-js-CbeSistI.mjs → segment-demux-js-BP5vqRPY.mjs} +1 -1
  20. package/dist/{segment-demux-js-Cd4K5AFm.js → segment-demux-js-Dv1EPPdH.js} +1 -1
  21. package/dist/stream-broker/_stub.js +2 -2
  22. package/dist/stream-broker/{_virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-BN28nLCx.mjs → _virtual_mf-localSharedImportMap___mfe_internal__addon_stream_broker_widgets-BqjkSRCu.mjs} +2 -2
  23. package/dist/stream-broker/_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_types__loadShare__.js-DqcT4fRG.mjs +26 -0
  24. package/dist/stream-broker/{_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_ui_mf_2_library__loadShare__.js-6yZguAUw.mjs → _virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_ui_mf_2_library__loadShare__.js-DCbVs3IC.mjs} +1 -1
  25. package/dist/stream-broker/demux-worker-child.js +1 -1
  26. package/dist/stream-broker/demux-worker-child.mjs +1 -1
  27. package/dist/stream-broker/{hostInit-2Mi5oqGe.mjs → hostInit-C4EuFQ_w.mjs} +2 -2
  28. package/dist/stream-broker/index.js +47 -59
  29. package/dist/stream-broker/index.mjs +47 -59
  30. package/dist/stream-broker/remoteEntry.js +1 -1
  31. package/package.json +1 -1
  32. package/dist/stream-broker/_virtual_mf___mfe_internal__addon_stream_broker_widgets__loadShare___mf_0_camstack_mf_1_types__loadShare__.js-DVp8RDes.mjs +0 -26
@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../chunk-emK7D4bc.js");
6
- const require_dist = require("../dist-DiLFfaYv.js");
7
- const require_process_memory = require("../process-memory-hlScqZ3l.js");
6
+ const require_dist = require("../dist-CegiJ2Pw.js");
7
+ const require_process_memory = require("../process-memory-lPbJ1ta2.js");
8
8
  let node_fs = require("node:fs");
9
9
  node_fs = require_chunk.__toESM(node_fs);
10
10
  let node_path = require("node:path");
@@ -1,6 +1,6 @@
1
1
  import { n as __require } from "../chunk-DnnnRqeS.mjs";
2
- import { B as audioAnalyzerCapability, Jt as errMsg, Mn as EventCategory, Rt as resolvePoolMemoryPolicy, dn as hydrateSchema, hn as nodePin, ht as mapAudioLabelToMacro, k as PoolMemoryWatchdog, n as AUDIO_BACKEND_CHOICES, on as audioChunkBytesPerSample, tn as BaseAddon, u as DEFAULT_AUDIO_ANALYZER_CONFIG, un as expandAudioChunkToF32le, w as HF_BASE_URL, z as audioAnalysisCapability } from "../dist-B0wh1O_e.mjs";
3
- import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-CU-Vka6-.mjs";
2
+ import { A as PoolMemoryWatchdog, Bt as resolvePoolMemoryPolicy, H as audioAnalyzerCapability, Pn as EventCategory, T as HF_BASE_URL, V as audioAnalysisCapability, Xt as errMsg, _n as nodePin, _t as mapAudioLabelToMacro, cn as audioChunkBytesPerSample, d as DEFAULT_AUDIO_ANALYZER_CONFIG, fn as expandAudioChunkToF32le, n as AUDIO_BACKEND_CHOICES, pn as hydrateSchema, rn as BaseAddon } from "../dist-mEtwupOP.mjs";
3
+ import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-C5bRH8-t.mjs";
4
4
  import * as fs from "node:fs";
5
5
  import * as path$1 from "node:path";
6
6
  import { downloadFile } from "@camstack/system/addon-utils";
@@ -1,4 +1,4 @@
1
- const require_dist = require("./dist-DiLFfaYv.js");
1
+ const require_dist = require("./dist-CegiJ2Pw.js");
2
2
  let node_crypto = require("node:crypto");
3
3
  //#region src/detection-pipeline/pipeline/landmark-precision-gate.ts
4
4
  /**
@@ -1,4 +1,4 @@
1
- import { V as audioKindId, c as COCO_80_LABELS, l as COCO_TO_MACRO, r as AUDIO_MACRO_LABELS, ut as hfModelUrl } from "./dist-B0wh1O_e.mjs";
1
+ import { U as audioKindId, ft as hfModelUrl, l as COCO_80_LABELS, r as AUDIO_MACRO_LABELS, u as COCO_TO_MACRO } from "./dist-mEtwupOP.mjs";
2
2
  import { randomUUID } from "node:crypto";
3
3
  //#region src/detection-pipeline/pipeline/landmark-precision-gate.ts
4
4
  /**
@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
3
3
  [Symbol.toStringTag]: { value: "Module" }
4
4
  });
5
5
  const require_chunk = require("../chunk-emK7D4bc.js");
6
- const require_dist = require("../dist-DiLFfaYv.js");
7
- const require_node = require("../node-Beq3CXsJ.js");
8
- const require_default_detection_model = require("../default-detection-model-COWU8Rz0.js");
6
+ const require_dist = require("../dist-CegiJ2Pw.js");
7
+ const require_node = require("../node-C8jhiPW2.js");
8
+ const require_default_detection_model = require("../default-detection-model-D5kMByfZ.js");
9
9
  const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
10
- const require_process_memory = require("../process-memory-hlScqZ3l.js");
10
+ const require_process_memory = require("../process-memory-lPbJ1ta2.js");
11
11
  let node_os = require("node:os");
12
12
  node_os = require_chunk.__toESM(node_os);
13
13
  let node_fs = require("node:fs");
@@ -1,9 +1,9 @@
1
1
  import { n as __require } from "../chunk-DnnnRqeS.mjs";
2
- import { $ as detectionPipelineCapability, An as string, Bt as runtimeDevices$1, Dn as object, Gt as supportedRuntimes$1, Jt as errMsg, L as YAMNET_TO_MACRO, Mn as EventCategory, Ot as pipelineExecutorCapability, Pt as resolveClusterStepModelId, Rt as resolvePoolMemoryPolicy, St as overlayClusterStepSettings, Tt as pickClusterStepSettings, Y as defaultDeviceFor$1, _ as DEVICE_BACKEND_TO_FORMAT, d as DEFAULT_CLUSTER_STEP_MODELS, dn as hydrateSchema, dt as inferModelProvider, f as DEFAULT_CLUSTER_STEP_SETTINGS, gn as parseJsonUnknown, hn as nodePin, it as evaluateZoneRules, jn as union, k as PoolMemoryWatchdog, nt as enumerateInferenceDevices, pt as loadContributionCapability, sn as createEvent, t as APPLE_SA_TO_MACRO, tn as BaseAddon, wt as pickClusterStepModels, xn as array, yn as sleep } from "../dist-B0wh1O_e.mjs";
3
- import { s as readProcessCost } from "../node-UjSfDx5h.mjs";
4
- import { a as localFrameRegistry, c as ALL_STEPS, d as getStepDefinition, f as resolveModelForFormat, l as getDefaultModelForFormat, n as resolveDefaultDetectionModel, p as landmarkPrecisionVerdict, r as macroGateVerdict, s as ALL_PIPELINE_STEPS, u as getStep } from "../default-detection-model-GPkHN13Q.mjs";
2
+ import { A as PoolMemoryWatchdog, At as pipelineExecutorCapability, Bt as resolvePoolMemoryPolicy, Cn as array, Dt as pickClusterStepSettings, Et as pickClusterStepModels, Ht as runtimeDevices$1, It as resolveClusterStepModelId, Mn as string, Nn as union, Pn as EventCategory, Xt as errMsg, Z as defaultDeviceFor$1, _n as nodePin, f as DEFAULT_CLUSTER_STEP_MODELS, ht as loadContributionCapability, it as enumerateInferenceDevices, kn as object, ln as createEvent, ot as evaluateZoneRules, p as DEFAULT_CLUSTER_STEP_SETTINGS, pn as hydrateSchema, pt as inferModelProvider, qt as supportedRuntimes$1, rn as BaseAddon, t as APPLE_SA_TO_MACRO, tt as detectionPipelineCapability, v as DEVICE_BACKEND_TO_FORMAT, vn as parseJsonUnknown, wt as overlayClusterStepSettings, xn as sleep, z as YAMNET_TO_MACRO } from "../dist-mEtwupOP.mjs";
3
+ import { s as readProcessCost } from "../node-B8p-rV9H.mjs";
4
+ import { a as localFrameRegistry, c as ALL_STEPS, d as getStepDefinition, f as resolveModelForFormat, l as getDefaultModelForFormat, n as resolveDefaultDetectionModel, p as landmarkPrecisionVerdict, r as macroGateVerdict, s as ALL_PIPELINE_STEPS, u as getStep } from "../default-detection-model-DTvsx_iX.mjs";
5
5
  import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
6
- import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-CU-Vka6-.mjs";
6
+ import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-C5bRH8-t.mjs";
7
7
  import * as os from "node:os";
8
8
  import * as fs from "node:fs";
9
9
  import * as path$1 from "node:path";
@@ -5360,7 +5360,7 @@ var ZodIssueCode = {
5360
5360
  var ZodFirstPartyTypeKind;
5361
5361
  ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
5362
5362
  //#endregion
5363
- //#region ../types/dist/sleep-i3eUVc-d.mjs
5363
+ //#region ../types/dist/sleep-COWaSCAi.mjs
5364
5364
  /**
5365
5365
  * The audio chunk plane's byte format, and the ONE expansion from a coded
5366
5366
  * window to float samples (D455).
@@ -8740,6 +8740,24 @@ object({
8740
8740
  unreachable: number()
8741
8741
  })
8742
8742
  });
8743
+ /** The wire shape of {@link PeerBytesTicket} — see the type for what it is. */
8744
+ var PeerBytesTicketSchema = object({
8745
+ /** `http://127.0.0.1:<port>/<token>`. One `GET` takes it. */
8746
+ url: string().min(1),
8747
+ /**
8748
+ * The HOST node this URL means something on — the hub or a named agent,
8749
+ * never a runner. {@link AddonPeerBytes.open} compares it to its own and
8750
+ * refuses `cross-node` by name when they differ, without dialling.
8751
+ */
8752
+ hostNodeId: string().min(1),
8753
+ expiresAtMs: number().int().nonnegative(),
8754
+ /**
8755
+ * What the producer DECLARED the body to be, when it knows — `null` when it
8756
+ * does not. Never `0` for unknown (D393): a consumer sizing a bound off this
8757
+ * must be able to tell "the producer did not say" from "the body is empty".
8758
+ */
8759
+ declaredBytes: number().int().nonnegative().nullable()
8760
+ });
8743
8761
  /**
8744
8762
  * Adoption job — the background form of `device-adoption.adopt`.
8745
8763
  *
@@ -27316,6 +27334,7 @@ _enum([
27316
27334
  "sleeping",
27317
27335
  "camera-refused",
27318
27336
  "no-keyframe",
27337
+ "decode-failed",
27319
27338
  "no-catalog-row",
27320
27339
  "unsupported",
27321
27340
  "unknown-device",
@@ -27572,6 +27591,27 @@ var ClipPlaybackSchema = object({
27572
27591
  */
27573
27592
  var ClipWakeSchema = _enum(["authorised"]);
27574
27593
  /**
27594
+ * Hard ceiling on ONE {@link videoclipsCapability.methods.offerClipBytes}
27595
+ * transfer — ten times {@link VIDEOCLIPS_MAX_READ_BYTES}, and the reasoning is
27596
+ * not "ten times more comfortable".
27597
+ *
27598
+ * The inline bound is set by what is HELD: a base64 envelope is the payload at
27599
+ * ~1.33× in the provider AND the same again in the caller, so 50 MiB of clip
27600
+ * is ~133 MiB of heap across two processes. Over `peerBytes` the consumer
27601
+ * holds one socket chunk at a time and writes straight through to the export
27602
+ * file, so its contribution is flat whatever the clip weighs. What is left is
27603
+ * the PRODUCER's own copy, and that is a property of how each provider makes a
27604
+ * clip rather than of this transport: Hikvision's fetch writes to a scratch
27605
+ * FILE and offers it (nothing is held), Reolink's cmd-5 transfer is collected
27606
+ * in memory and offered from there (one copy, the one it already had).
27607
+ *
27608
+ * So this number bounds the worst provider, not the transport, and it is named
27609
+ * separately so that lifting it is a statement about a provider rather than
27610
+ * about clips. Above it the provider REFUSES with the size in the message and
27611
+ * never truncates: half a video is worse than an honest refusal.
27612
+ */
27613
+ var VIDEOCLIPS_MAX_OFFER_BYTES = 500 * 1024 * 1024;
27614
+ /**
27575
27615
  * A clip's finished bytes, inline — the twin of `recordingExport.readExportBytes`.
27576
27616
  *
27577
27617
  * `bytes` is the DECODED length, so nobody infers it from the base64 length,
@@ -27603,6 +27643,32 @@ var ClipBytesSchema = object({
27603
27643
  durationMs: number().positive().optional()
27604
27644
  });
27605
27645
  /**
27646
+ * Where a clip's finished bytes can be TAKEN (D613) — the answer to
27647
+ * {@link videoclipsCapability.methods.offerClipBytes}.
27648
+ *
27649
+ * Everything {@link ClipBytesSchema} carries except the bytes themselves, plus
27650
+ * the one-shot ticket that leads to them. The metadata is answered BEFORE the
27651
+ * transfer on purpose: a consumer learns which twin it got, what to call the
27652
+ * file and how long the clip runs without having to read a byte, so a decision
27653
+ * it would make on that metadata (a wrong twin, an implausible duration) costs
27654
+ * no transfer at all.
27655
+ */
27656
+ var ClipBytesOfferSchema = object({
27657
+ /**
27658
+ * One shot, seconds-long, loopback, on the PROVIDER's own host. Open it with
27659
+ * `ctx.peerBytes.open(...)`, which refuses a ticket from another node by
27660
+ * name rather than dialling a port that means something else here.
27661
+ */
27662
+ ticket: PeerBytesTicketSchema,
27663
+ contentType: string(),
27664
+ /** Suggested filename, extension included. */
27665
+ name: string(),
27666
+ /** Which twin was actually served — see {@link ClipBytesSchema.served}. */
27667
+ served: CamProfileSchema,
27668
+ /** See {@link ClipBytesSchema.durationMs}. Absent when nothing measured it. */
27669
+ durationMs: number().positive().optional()
27670
+ });
27671
+ /**
27606
27672
  * Where a clip's STREAM can be dialled (D597) — the answer to
27607
27673
  * {@link videoclipsCapability.methods.dialClipStream}.
27608
27674
  *
@@ -27678,6 +27744,73 @@ var ClipStreamDialSchema = object({
27678
27744
  /** Why `servedAudio` is `none` although sound was asked for. */
27679
27745
  audioReason: ClipStreamAudioReasonSchema.optional()
27680
27746
  });
27747
+ /**
27748
+ * The playback rates a clip can be DELIVERED at, ascending, always with `1`.
27749
+ *
27750
+ * These are the BROKER's: it re-paces frames it has already demuxed — the
27751
+ * `MonotonicClock` divides source elapsed time by the factor and the pacer
27752
+ * pushes that much faster — so the domain is the recorded one, {0} ∪ [0.25, 4],
27753
+ * and this is the discrete ladder drawn from it. `1.5` is in it because a
27754
+ * re-pacer has no reason to refuse it.
27755
+ *
27756
+ * `8` and `16` are deliberately NOT here. They are the CAMERA's own
27757
+ * `<playSpeed>` (Reolink cmd-5 replay), a different mechanism, still unwired
27758
+ * (D597, D600) — a rate change there costs a new dial and a new stream, and
27759
+ * the camera's 8x would need a resample the clip audio path has no decoder
27760
+ * for. Offering them today accepts a rate and delivers 1x, which is the whole
27761
+ * defect this list exists to end (D612). When `playSpeed` IS wired its rates
27762
+ * join THIS array — a second list elsewhere is the second authority D62
27763
+ * forbids.
27764
+ *
27765
+ * Every entry must survive the broker's `clampPlaybackRate` unchanged: a set
27766
+ * that offers what the clamp then moves is the same lie one step later.
27767
+ */
27768
+ var CLIP_BROKER_PACED_RATES = [
27769
+ .25,
27770
+ .5,
27771
+ 1,
27772
+ 1.5,
27773
+ 2,
27774
+ 4
27775
+ ];
27776
+ /**
27777
+ * What a surface may DRAW for this provider's clips — the answer to
27778
+ * {@link videoclipsCapability.methods.getPlaybackOptions} (D612).
27779
+ *
27780
+ * The envelope is a PROVIDER fact, not a clip fact, and that is measured, not
27781
+ * assumed: the broker's `chooseClipPath` reads exactly two inputs — whether
27782
+ * `dialClipStream` and `readClipBytes` are wired — and both are constants of
27783
+ * the broker's own closure over the provider's methods. The `profile` it is
27784
+ * handed is explicitly not read. So every clip of a provider is served the
27785
+ * same way, and a per-clip channel carried a value that could not vary. The
27786
+ * per-clip `clipTransport` server message was removed for exactly that reason.
27787
+ *
27788
+ * Queried per camera, before a clip is picked, so a control is rendered or
27789
+ * DISABLED rather than offered and refused at play time (D62: a disabled
27790
+ * control reads as unavailable, one that undoes the gesture reads as broken).
27791
+ */
27792
+ var ClipPlaybackOptionsSchema = object({
27793
+ /**
27794
+ * How this provider's clips reach the player. `stream` is the provider's
27795
+ * forward-only fMP4 (D597); `file` is one bounded by-handle fetch of the
27796
+ * whole clip, `stbl` indexed (D575).
27797
+ */
27798
+ transport: _enum(["stream", "file"]),
27799
+ /** `forward` = only ahead of the playhead. `free` = anywhere. */
27800
+ seek: _enum(["forward", "free"]),
27801
+ /** Frame-step BACKWARD is meaningful. Forward always is. */
27802
+ stepBack: boolean(),
27803
+ /** Whether the scrub gesture is served, as opposed to refused by name. */
27804
+ scrub: boolean(),
27805
+ /**
27806
+ * The rates that can be delivered, ascending, always containing `1`. The
27807
+ * viewer draws its picker from this and from nothing else — a constant it
27808
+ * keeps instead is the second authority that produced the defect: `8` and
27809
+ * `16` were offered, the broker clamped them to `4`, and no line anywhere
27810
+ * said so. `0` is not a member: pause is the absence of a rate.
27811
+ */
27812
+ rates: array(number().positive()).min(1).readonly()
27813
+ });
27681
27814
  var ClipSourceAvailabilitySchema = object({
27682
27815
  state: _enum([
27683
27816
  "ok",
@@ -27856,14 +27989,18 @@ var videoclipsCapability = {
27856
27989
  *
27857
27990
  * `getClipPlayback` is the right answer for a player: it hands back a URL
27858
27991
  * on a plane the hub serves `access:'authenticated'`, which a browser and a
27859
- * viewer session satisfy. It is the wrong answer for another ADDON. There
27860
- * is no addon→addon byte transport in this framework — `AddonDataPlane`
27861
- * only lets an addon SERVE, on `127.0.0.1` behind a per-listener secret
27862
- * only the hub may present — so a recorder that wants a camera's clip
27863
- * cannot fetch that URL. This method is the one seam that exists for it,
27864
- * and it is deliberately the same shape (and the same bound) as
27865
- * `recordingExport.readExportBytes`, which exists for the mirror-image
27866
- * reason.
27992
+ * viewer session satisfy. It is the wrong answer for another ADDON: the
27993
+ * hub's proxy in front of that plane takes only a user credential, which
27994
+ * an addon does not hold, so a recorder that wants a camera's clip cannot
27995
+ * fetch that URL. This method is the shape that answer forced — the same
27996
+ * one (and the same bound) as `recordingExport.readExportBytes`.
27997
+ *
27998
+ * **It is no longer the only seam.** Until D613 there was no addon→addon
27999
+ * byte transport at all; there is now
28000
+ * ({@link offerClipBytes}, over `ctx.peerBytes`), it holds nothing on
28001
+ * either side, and it is what a clip EXPORT uses. This method remains for
28002
+ * a consumer that genuinely wants the bytes in hand, and as the named
28003
+ * fallback for a provider not yet redeployed.
27867
28004
  *
27868
28005
  * Routing needs no `provider` pin: the id is source-prefixed and
27869
28006
  * self-contained, so `device-collection-dispatch.ts` rule 3 hands the call
@@ -27930,6 +28067,65 @@ var videoclipsCapability = {
27930
28067
  auth: "protected"
27931
28068
  }),
27932
28069
  /**
28070
+ * Where this clip's finished bytes can be TAKEN — the by-handle read a
28071
+ * clip EXPORT pulls, over the addon→addon byte transport (D613).
28072
+ *
28073
+ * This is {@link readClipBytes} with the envelope removed. Same gates,
28074
+ * same vocabulary, same completion rules, same `served` contract — the
28075
+ * only difference is that the bytes travel over a one-shot loopback
28076
+ * socket instead of inside a base64 field, so neither side holds the
28077
+ * payload whole and the 50 MiB refusal on a long `high` twin stops
28078
+ * existing. The bound that remains is
28079
+ * {@link VIDEOCLIPS_MAX_OFFER_BYTES}, and it bounds the PRODUCER's own
28080
+ * copy rather than the transport.
28081
+ *
28082
+ * **The ticket is loopback and same-host.** A provider on an agent mints a
28083
+ * URL that means nothing on the hub, and `ctx.peerBytes.open` refuses it
28084
+ * `cross-node` by name rather than dialling whatever else holds that port
28085
+ * here. A consumer that can be on the other side of a node boundary from
28086
+ * its provider must be able to read that refusal and say so; it must not
28087
+ * treat it as "no bytes".
28088
+ *
28089
+ * **A ticket is a one-shot bearer credential with a seconds-long life.**
28090
+ * Take it immediately, never persist it, never log its `url`. An untaken
28091
+ * ticket costs the provider one map entry until its TTL, and outstanding
28092
+ * tickets are bounded — which is also what makes a per-frame misuse of
28093
+ * this method refuse by name rather than work slowly (D9/D18: this is a
28094
+ * by-handle fetch of finished media, not a frame pipe).
28095
+ *
28096
+ * Optional on the provider for the same reason `readClipBytes` is: a
28097
+ * source with no camera socket behind it has no bytes. A provider that
28098
+ * predates this method answers `NOT_IMPLEMENTED`, and a consumer may fall
28099
+ * back to `readClipBytes` — but it says so in the log, with the deploy
28100
+ * hint, because that fallback re-imposes the 50 MiB refusal and an
28101
+ * operator who sees `too-large-to-transfer` after this shipped is looking
28102
+ * at a stale addon, not at a clip that cannot be exported.
28103
+ */
28104
+ offerClipBytes: optionalMethod(object({
28105
+ deviceId: number(),
28106
+ clipId: string().min(1),
28107
+ /** WHICH provider holds the bytes — see `readClipBytes.provider`. */
28108
+ provider: string().min(1),
28109
+ /** Which twin — `low | mid` → the sub file, `high` → the main twin. */
28110
+ profile: CamProfileSchema.optional(),
28111
+ /**
28112
+ * The CALLER's byte bound, so an over-size clip is refused before the
28113
+ * camera is touched rather than after. Capped by
28114
+ * {@link VIDEOCLIPS_MAX_OFFER_BYTES} whatever is passed; absent means
28115
+ * that ceiling.
28116
+ */
28117
+ maxBytes: number().int().positive().optional(),
28118
+ /**
28119
+ * The operator's authorisation to wake a sleeping camera for this
28120
+ * read. Absent — the default — means a sleeping standalone battery
28121
+ * camera is REFUSED by name, before any session is opened.
28122
+ */
28123
+ wake: ClipWakeSchema.optional()
28124
+ }), ClipBytesOfferSchema, {
28125
+ kind: "query",
28126
+ auth: "protected"
28127
+ }),
28128
+ /**
27933
28129
  * Where this clip's STREAM can be dialled (D597) — the forward-only
27934
28130
  * fMP4 the provider writes from the first muxed byte, for the broker to
27935
28131
  * play through the same WebRTC session as recorded footage, with the
@@ -27966,6 +28162,36 @@ var videoclipsCapability = {
27966
28162
  }), ClipStreamDialSchema, {
27967
28163
  kind: "query",
27968
28164
  auth: "protected"
28165
+ }),
28166
+ /**
28167
+ * What a surface may DRAW for this provider's clips: the rates it can be
28168
+ * played at, whether scrub is served, how far a position may be moved,
28169
+ * and whether a backward frame-step means anything (D612).
28170
+ *
28171
+ * **The only authority.** The per-clip `clipTransport` server message
28172
+ * that used to carry the same answer was removed: the broker's transport
28173
+ * choice reads nothing that varies per clip, so the clip level had no
28174
+ * information the provider does not already have, and two channels that
28175
+ * can disagree are worse than one (D62).
28176
+ *
28177
+ * Asked per camera and per provider, so it must stay CHEAP — it is a
28178
+ * statement about wiring, answered from a constant, never a call to the
28179
+ * camera. A provider answers with one of {@link CLIP_PLAYBACK_OPTIONS}
28180
+ * and never composes an envelope of its own.
28181
+ *
28182
+ * Optional, and absence is load-bearing: a provider that has not answered
28183
+ * has not restricted anything, and a viewer reads it as the freedom it
28184
+ * always had. See D612 on the rollout order that absence implies.
28185
+ */
28186
+ getPlaybackOptions: optionalMethod(object({
28187
+ deviceId: number(),
28188
+ /** WHICH provider to ask — the `addonId` a {@link ClipSourceSchema}
28189
+ * row carries. Required for the same reason `listClips` requires it:
28190
+ * a collection cap has no "the bound one" to resolve to (D554). */
28191
+ provider: string().min(1)
28192
+ }), ClipPlaybackOptionsSchema, {
28193
+ kind: "query",
28194
+ auth: "protected"
27969
28195
  })
27970
28196
  }
27971
28197
  };
@@ -45077,6 +45303,12 @@ Object.freeze({
45077
45303
  addonId: null,
45078
45304
  access: "view"
45079
45305
  },
45306
+ "videoclips.getPlaybackOptions": {
45307
+ capName: "videoclips",
45308
+ capScope: "device",
45309
+ addonId: null,
45310
+ access: "view"
45311
+ },
45080
45312
  "videoclips.listClips": {
45081
45313
  capName: "videoclips",
45082
45314
  capScope: "device",
@@ -45089,6 +45321,12 @@ Object.freeze({
45089
45321
  addonId: null,
45090
45322
  access: "view"
45091
45323
  },
45324
+ "videoclips.offerClipBytes": {
45325
+ capName: "videoclips",
45326
+ capScope: "device",
45327
+ addonId: null,
45328
+ access: "view"
45329
+ },
45092
45330
  "videoclips.readClipBytes": {
45093
45331
  capName: "videoclips",
45094
45332
  capScope: "device",
@@ -47135,6 +47373,11 @@ Object.freeze({
47135
47373
  form: "single",
47136
47374
  optional: false
47137
47375
  }],
47376
+ "videoclips.getPlaybackOptions": [{
47377
+ name: "deviceId",
47378
+ form: "single",
47379
+ optional: false
47380
+ }],
47138
47381
  "videoclips.listClips": [{
47139
47382
  name: "deviceId",
47140
47383
  form: "single",
@@ -47145,6 +47388,11 @@ Object.freeze({
47145
47388
  form: "single",
47146
47389
  optional: false
47147
47390
  }],
47391
+ "videoclips.offerClipBytes": [{
47392
+ name: "deviceId",
47393
+ form: "single",
47394
+ optional: false
47395
+ }],
47148
47396
  "videoclips.readClipBytes": [{
47149
47397
  name: "deviceId",
47150
47398
  form: "single",
@@ -48957,6 +49205,12 @@ Object.defineProperty(exports, "CAM_PROFILE_ORDER", {
48957
49205
  return CAM_PROFILE_ORDER;
48958
49206
  }
48959
49207
  });
49208
+ Object.defineProperty(exports, "CLIP_BROKER_PACED_RATES", {
49209
+ enumerable: true,
49210
+ get: function() {
49211
+ return CLIP_BROKER_PACED_RATES;
49212
+ }
49213
+ });
48960
49214
  Object.defineProperty(exports, "CLIP_STILL_REASON_CODE_HEADER", {
48961
49215
  enumerable: true,
48962
49216
  get: function() {
@@ -49173,6 +49427,12 @@ Object.defineProperty(exports, "RingBuffer", {
49173
49427
  return RingBuffer;
49174
49428
  }
49175
49429
  });
49430
+ Object.defineProperty(exports, "VIDEOCLIPS_MAX_OFFER_BYTES", {
49431
+ enumerable: true,
49432
+ get: function() {
49433
+ return VIDEOCLIPS_MAX_OFFER_BYTES;
49434
+ }
49435
+ });
49176
49436
  Object.defineProperty(exports, "VISIT_MERGE_GAP_MS", {
49177
49437
  enumerable: true,
49178
49438
  get: function() {