@camstack/addon-provider-hikvision 1.2.24 → 1.2.27

package/README.md

@@ -35,4 +35,3 @@ The probe runs once per camera lifetime (after the first successful `publishToBr
 ## References
 
 - ISAPI Service v2 & v3 specs (Hikvision ISAPI doc package — vendor download).
-- Scrypted Hikvision plugin — `plugins/hikvision/src/` in the [Scrypted](https://github.com/koush/scrypted) repository (port reference for endpoint patterns + alarm-stream parsing).

package/dist/addon.js

@@ -6,7 +6,7 @@ let node_crypto = require("node:crypto");
 let node_http = require("node:http");
 let node_https = require("node:https");
 let node_os = require("node:os");
-//#region ../types/dist/event-category-Bxo5yJjt.mjs
+//#region ../types/dist/event-category-C0lyLd5U.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -23,9 +23,10 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemRestartCompleted"] = "system.restart-completed";
 	/**
 	* A newer addon or server-root package version was found by the
-	* authoritative registry check. Emitted once per
-	* `(target, packageName, currentVersion, latestVersion)` transition; repeated
-	* polling of the same result is deduplicated by the checker.
+	* authoritative registry check. Emitted once when any observed
+	* `latestVersion` changes (or a package/node first appears behind);
+	* the payload carries the full currently-available list. Repeated
+	* polling of the same latests is silent.
 	*/
 	EventCategory["UpdateAvailable"] = "update.available";
 	/**
@@ -7543,6 +7544,10 @@ var RecordingBandSchema = object({
 	preBufferSec: number().min(0).optional(),
 	postBufferSec: number().min(0).optional()
 });
+({
+	preBufferSec: 10,
+	postBufferSec: 30
+}).postBufferSec * 1e3;
 /**
 * Per-device retention overrides. Every field is optional; an unset or `0`
 * value inherits the node-wide recorder default. Only footage-lifetime limits
@@ -7590,6 +7595,12 @@ var RecordingConfigSchema = object({
 	/** DERIVED summary of `bands`, stamped by the recorder on every save.
 	*  Authoring it has no effect — see {@link RecordingStorageModeSchema}. */
 	mode: RecordingStorageModeSchema.optional(),
+	/**
+	* Which assigned broker slots to record. Absent / empty = {@link
+	* DEFAULT_RECORDING_PROFILES} (`high`+`low`) intersected with the
+	* camera's currently assigned slots — never `mid` unless the operator
+	* picks it, and never a slot the broker has not assigned.
+	*/
 	profiles: array(CamProfileSchema).optional(),
 	segmentSeconds: number().int().positive().optional(),
 	/**
@@ -7670,7 +7681,11 @@ var RelocateFootageInputSchema = object({
 	profiles: array(string()).optional(),
 	/** Copy throttle in MB/s (default 40) — the drain is a background chore,
 	*  never allowed to starve live writers. */
-	throttleMbps: number().min(1).max(1e3).optional()
+	throttleMbps: number().min(1).max(1e3).optional(),
+	/** Move only segments whose startMs is >= this. Absent = the whole source
+	*  pile. Used when a full drain is too expensive and the operator only
+	*  wants the recent window on the new disk. */
+	sinceMs: number().int().optional()
 });
 /** Internal, lease-scoped participant operation. It is intentionally separate
 * from persistent recording settings: a migration never changes
@@ -14729,6 +14744,9 @@ var NcSystemEventKindSchema = _enum([
 	"alarm-disarmed",
 	"alarm-arming",
 	"alarm-arm-refused",
+	"addon-updated",
+	"server-updated",
+	"export-completed",
 	"camera-online",
 	"camera-offline",
 	"camera-disabled",
@@ -16622,13 +16640,19 @@ var RetrainStatusSchema = _enum([
 * "never marked" from "already trained" must read `retrainStatus`.
 *
 * `debug` does NOT pin; it is attention, not durability.
+*
+* `favourited` IS a BOOLEAN pin (durability bit), not a retrain lifecycle.
+* A favourited track is skipped by retention the same way `staging` is, but
+* it does not enter `none|staging|trained` and has no staging budget.
 */
 var TrackFlagFields = {
 	/** Operator marked this track as training material — i.e. `retrainStatus` is
 	*  `'staging'`. */
 	markForTrain: boolean().optional(),
 	/** Operator marked this track for diagnostic attention. */
-	debug: boolean().optional()
+	debug: boolean().optional(),
+	/** Operator favourited this track. Pins it against pruning. */
+	favourited: boolean().optional()
 };
 /**
 * The lifecycle field itself, on the READ surfaces only (`Track`, `KeyEvent`).
@@ -16653,6 +16677,7 @@ var TrackFlagsSchema = object({
 	trackId: string(),
 	markForTrain: boolean(),
 	debug: boolean(),
+	favourited: boolean(),
 	/** The lifecycle state the boolean was derived from. Required here (unlike on
 	*  a track row) because this shape is only ever produced by the write body,
 	*  which always knows it — and a surface that has just written needs to render
@@ -17285,6 +17310,12 @@ var TrackCascadeCountsSchema = object({
 	/** Per-track CLIP search vectors removed (best-effort). */
 	embeddings: number().int()
 });
+/** Disk-wins reconcile: media rows whose blobs are gone, then empty tracks. */
+var DiskReconcileCountsSchema = object({
+	mediaDropped: number().int(),
+	tracks: number().int(),
+	events: number().int()
+});
 /** Event-store footprint for one camera. */
 var EventStoreDeviceFootprintSchema = object({
 	deviceId: number(),
@@ -17461,6 +17492,9 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), method(object({ deviceId: number() }), TrackCascadeCountsSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ deviceId: number() }), DiskReconcileCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number(),
 	trackIds: array(string()).min(1)
@@ -19011,6 +19045,24 @@ var CameraStatusDegradationSchema = object({
 *
 * See spec: `docs/superpowers/specs/2026-06-24-camera-status-aggregator-cap.md`
 */
+var DiskReconcileJobSchema = object({
+	state: _enum([
+		"idle",
+		"running",
+		"done",
+		"error"
+	]),
+	total: number().int().nonnegative(),
+	completed: number().int().nonnegative(),
+	currentDeviceId: number().int().nullable(),
+	failed: array(number().int()).readonly(),
+	mediaDropped: number().int().nonnegative(),
+	tracks: number().int().nonnegative(),
+	events: number().int().nonnegative(),
+	startedAtMs: number().int().nullable(),
+	finishedAtMs: number().int().nullable(),
+	error: string().nullable()
+});
 var CameraStatusSchema = object({
 	deviceId: number(),
 	assignment: CameraAssignmentStatusSchema,
@@ -19242,7 +19294,10 @@ method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
 }), CameraSwitchGroupSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), CameraStatusSchema), method(object({ deviceIds: array(number()).optional() }), array(CameraStatusSchema).readonly()), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
+}), method(object({ deviceId: number() }), CameraStatusSchema), method(object({ deviceIds: array(number()).optional() }), array(CameraStatusSchema).readonly()), method(_void(), DiskReconcileJobSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), DiskReconcileJobSchema, { auth: "admin" }), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
 	name: string(),
 	description: string().optional(),
 	config: CameraPipelineConfigSchema
@@ -19745,7 +19800,14 @@ targets: array(object({
 				"sleeping",
 				"unreachable",
 				"waking"
-			]).nullable()
+			]).nullable(),
+			/** A battery camera (whatever its current state). An AWAKE battery
+			*  camera is deliberately NOT recaptured on the poll cadence — every
+			*  capture is a camera hit that would keep it out of sleep — so its
+			*  cached frame legitimately ages past the currency ceiling while
+			*  nothing is streaming. A surface must keep painting it (a fresh
+			*  frame is captured at each wake), not blank to "unavailable". */
+			battery: boolean()
 		})))
 	},
 	status: {
@@ -20442,8 +20504,28 @@ var ClipSchema = object({
 		startMs: number(),
 		endMs: number()
 	}),
-	/** Thumbnail URL (lazy; e.g. analytics `getEventMedia`). Never inlined. */
-	thumbnail: string().optional()
+	/**
+	* Lazy thumbnail URL, never inlined.
+	*
+	* Recording-derived clips (events-mode keep-window, and the prepared
+	* continuous event+fragment visit) MUST use the snapshot of the **main
+	* event of the interval** — `getEventMedia({ eventId, kind: 'snapshot' })`
+	* of the event that owns `kind` (object > motion > audio). Do not extract
+	* a keyframe from the recorded segments. Other providers (onboard, HKSV)
+	* mint their own stills.
+	*/
+	thumbnail: string().optional(),
+	/** Analytics event ids that overlap this visit. Empty on footage-only clips.
+	*  The default provider's visit grain puts many motion heartbeats on one clip
+	*  instead of minting one clip per marker. */
+	eventIds: array(string()).optional(),
+	/** Intra-visit footage holes (GOP rolls, discarded segments) still shorter
+	*  than `VISIT_MERGE_GAP_MS`. Playback concatenates around them; the timeline
+	*  bar keeps showing them via `recording.getAvailability`. */
+	holes: array(object({
+		startMs: number(),
+		endMs: number()
+	})).optional()
 });
 var ClipPlaybackSchema = object({
 	/** HLS master URL through the hub data-plane (Range + token in path). */
@@ -26862,7 +26944,9 @@ var ExportOptionsSchema = object({
 	includeAudio: boolean(),
 	maxLifeMs: number().int().positive(),
 	deleteAfterDownload: boolean(),
-	title: string().max(200).optional()
+	title: string().max(200).optional(),
+	/** Notification-output target ids to ping when this export becomes ready. */
+	notifyTargetIds: array(string().min(1)).max(20).optional()
 }).superRefine((v, ctx) => {
 	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
 		code: ZodIssueCode.custom,
@@ -26921,10 +27005,18 @@ var ExportBytesSchema = object({
 });
 method(object({
 	deviceId: number(),
-	profile: string(),
+	/** @deprecated Prefer `profiles`. Kept so timelapse/notifiers keep working. */
+	profile: string().optional(),
+	profiles: array(string()).min(1).optional(),
 	fromMs: number(),
 	toMs: number(),
 	options: ExportOptionsSchema
+}).superRefine((v, ctx) => {
+	if ((v.profiles !== void 0 && v.profiles.length > 0 ? v.profiles : v.profile !== void 0 ? [v.profile] : []).length < 1) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "pass profiles[] (min 1) or legacy profile",
+		path: ["profiles"]
+	});
 }), ExportRecordSchema, {
 	kind: "mutation",
 	auth: "protected"
@@ -30079,15 +30171,6 @@ var BaseDeviceProvider = class extends BaseAddon {
 			labels: ["probe not implemented"]
 		};
 	}
-	/**
-	* Top-level devices restored at once in {@link onRestoreDevices}.
-	*
-	* Four covers the fleets this ships to without turning a boot into a burst a
-	* camera NVR answers with a refusal. A provider whose upstream is a single
-	* session with a serial command channel (a Baichuan hub, an NVR that
-	* serialises ISAPI) should lower it; nothing needs to raise it.
-	*/
-	restoreConcurrency = 4;
 	async restoreDevices(savedDevices) {
 		await this.onRestoreDevices(savedDevices);
 		if (savedDevices.length > 0) this.ctx.logger.info(`Restored ${savedDevices.length} ${this.providerName} device(s)`);
@@ -30142,14 +30225,7 @@ var BaseDeviceProvider = class extends BaseAddon {
 				});
 			}
 		};
-		let nextTopLevel = 0;
-		await Promise.all(Array.from({ length: Math.min(Math.max(1, this.restoreConcurrency), topLevel.length) }, async () => {
-			for (;;) {
-				const saved = topLevel[nextTopLevel++];
-				if (saved === void 0) return;
-				await restoreOne(saved);
-			}
-		}));
+		await Promise.all(topLevel.map((saved) => restoreOne(saved)));
 		const childRows = savedDevices.filter((s) => s.parentDeviceId !== null);
 		for (const saved of childRows) {
 			const Class = this.deviceClasses[saved.type];
@@ -33553,6 +33629,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.reconcileFromDisk": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.refreshStorageLocationsForMigration": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -33955,6 +34037,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getReconcileFromDiskStatus": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.listAgentSettings": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -33979,6 +34067,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.reconcileFromDisk": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.removeAgentSettings": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -36970,6 +37064,11 @@ Object.freeze({
 		form: "single",
 		optional: true
 	}],
+	"pipelineAnalytics.reconcileFromDisk": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineAnalytics.restageRetrainTrack": [{
 		name: "deviceId",
 		form: "single",
@@ -40690,7 +40789,7 @@ async function pumpAlarmStream(stream, boundary, handlers, idleTimeoutMs = ALARM
 			for (const block of parts.blocks) {
 				const parsed = parseMultipartBlock(block);
 				if (!parsed) continue;
-				if (parsed.contentType.startsWith("application/xml") || parsed.contentType.startsWith("text/xml")) {
+				if (parsed.contentType.startsWith("application/xml") || parsed.contentType.startsWith("text/xml") || looksLikeAlertXml(parsed.bodyText)) {
 					const ev = parseAlertXml(parsed.bodyText);
 					if (ev) handlers.onEvent(ev);
 				}
@@ -40722,14 +40821,24 @@ function splitOnBoundary(buf, dashBoundary) {
 		tail
 	};
 }
+function looksLikeAlertXml(text) {
+	return text.includes("<eventType>") || text.includes("EventNotificationAlert");
+}
 function parseMultipartBlock(block) {
-	let start = 0;
-	while (start < block.length && (block[start] === 13 || block[start] === 10)) start++;
-	const headerEnd = findHeaderEnd(block, start);
-	if (headerEnd < 0) return null;
-	const headerBlob = Buffer.from(block.subarray(start, headerEnd)).toString("utf8");
-	const bodyStart = headerEnd + 4;
-	const bodySlice = block.subarray(bodyStart);
+	const headerEnd = findHeaderEnd(block, 0);
+	let headerBlob = "";
+	let bodySlice;
+	if (headerEnd >= 0) {
+		headerBlob = Buffer.from(block.subarray(0, headerEnd)).toString("utf8");
+		bodySlice = block.subarray(headerEnd + 4);
+	} else {
+		const raw = Buffer.from(block).toString("utf8");
+		if (!looksLikeAlertXml(raw)) return null;
+		return {
+			contentType: "",
+			bodyText: raw.replace(/\r?\n--$/m, "").trim()
+		};
+	}
 	const headers = {};
 	for (const line of headerBlob.split(/\r?\n/)) {
 		const idx = line.indexOf(":");
@@ -40745,6 +40854,28 @@ function findHeaderEnd(buf, from) {
 	for (let i = from; i + 3 < buf.length; i++) if (buf[i] === 13 && buf[i + 1] === 10 && buf[i + 2] === 13 && buf[i + 3] === 10) return i;
 	return -1;
 }
+/**
+* Event types that imply onboard motion. Compared after `eventType`
+* is lowercased. Some firmwares emit `regionExit`, others
+* `regionexiting` — accept both.
+*/
+function isHikvisionMotionAlarmType(type) {
+	switch (type) {
+		case "vmd":
+		case "motiondetection":
+		case "linedetection":
+		case "fielddetection":
+		case "regionentrance":
+		case "regionexit":
+		case "regionexiting":
+		case "attendedbaggage":
+		case "unattendedbaggage": return true;
+		default: return false;
+	}
+}
+function isHikvisionSmartAlarmType(type) {
+	return type !== "vmd" && type !== "motiondetection" && isHikvisionMotionAlarmType(type);
+}
 function parseAlertXml(xml) {
 	const type = extractTag(xml, "eventType");
 	if (!type) return null;
@@ -44405,7 +44536,7 @@ var HikvisionCamera = class HikvisionCamera extends BaseDevice {
 	handleAlarmEvent(ev) {
 		const camStreamId = this.resolveAlarmCamStreamId(ev.channelId);
 		const isMotion = ev.type === "vmd" || ev.type === "motiondetection";
-		const isSmart = ev.type === "linedetection" || ev.type === "fielddetection" || ev.type === "regionentrance" || ev.type === "regionexiting" || ev.type === "attendedbaggage" || ev.type === "unattendedbaggage";
+		const isSmart = isHikvisionSmartAlarmType(ev.type);
 		if (isMotion) {
 			this.handleMotionEvent(ev, camStreamId);
 			return;
@@ -44415,7 +44546,17 @@ var HikvisionCamera = class HikvisionCamera extends BaseDevice {
 			this.handleMotionEvent(ev, camStreamId);
 			return;
 		}
-		this.ctx.logger.debug("hikvision: unhandled alarm event", {
+		if (ev.type === "videoloss") {
+			this.ctx.logger.debug("hikvision: unhandled alarm event", {
+				tags: { deviceId: this.id },
+				meta: {
+					type: ev.type,
+					state: ev.state
+				}
+			});
+			return;
+		}
+		this.ctx.logger.info("hikvision: unhandled alarm event", {
 			tags: { deviceId: this.id },
 			meta: {
 				type: ev.type,

package/dist/addon.mjs

@@ -7,7 +7,7 @@ import { networkInterfaces } from "node:os";
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 //#endregion
-//#region ../types/dist/event-category-Bxo5yJjt.mjs
+//#region ../types/dist/event-category-C0lyLd5U.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -24,9 +24,10 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemRestartCompleted"] = "system.restart-completed";
 	/**
 	* A newer addon or server-root package version was found by the
-	* authoritative registry check. Emitted once per
-	* `(target, packageName, currentVersion, latestVersion)` transition; repeated
-	* polling of the same result is deduplicated by the checker.
+	* authoritative registry check. Emitted once when any observed
+	* `latestVersion` changes (or a package/node first appears behind);
+	* the payload carries the full currently-available list. Repeated
+	* polling of the same latests is silent.
 	*/
 	EventCategory["UpdateAvailable"] = "update.available";
 	/**
@@ -7544,6 +7545,10 @@ var RecordingBandSchema = object({
 	preBufferSec: number().min(0).optional(),
 	postBufferSec: number().min(0).optional()
 });
+({
+	preBufferSec: 10,
+	postBufferSec: 30
+}).postBufferSec * 1e3;
 /**
 * Per-device retention overrides. Every field is optional; an unset or `0`
 * value inherits the node-wide recorder default. Only footage-lifetime limits
@@ -7591,6 +7596,12 @@ var RecordingConfigSchema = object({
 	/** DERIVED summary of `bands`, stamped by the recorder on every save.
 	*  Authoring it has no effect — see {@link RecordingStorageModeSchema}. */
 	mode: RecordingStorageModeSchema.optional(),
+	/**
+	* Which assigned broker slots to record. Absent / empty = {@link
+	* DEFAULT_RECORDING_PROFILES} (`high`+`low`) intersected with the
+	* camera's currently assigned slots — never `mid` unless the operator
+	* picks it, and never a slot the broker has not assigned.
+	*/
 	profiles: array(CamProfileSchema).optional(),
 	segmentSeconds: number().int().positive().optional(),
 	/**
@@ -7671,7 +7682,11 @@ var RelocateFootageInputSchema = object({
 	profiles: array(string()).optional(),
 	/** Copy throttle in MB/s (default 40) — the drain is a background chore,
 	*  never allowed to starve live writers. */
-	throttleMbps: number().min(1).max(1e3).optional()
+	throttleMbps: number().min(1).max(1e3).optional(),
+	/** Move only segments whose startMs is >= this. Absent = the whole source
+	*  pile. Used when a full drain is too expensive and the operator only
+	*  wants the recent window on the new disk. */
+	sinceMs: number().int().optional()
 });
 /** Internal, lease-scoped participant operation. It is intentionally separate
 * from persistent recording settings: a migration never changes
@@ -14730,6 +14745,9 @@ var NcSystemEventKindSchema = _enum([
 	"alarm-disarmed",
 	"alarm-arming",
 	"alarm-arm-refused",
+	"addon-updated",
+	"server-updated",
+	"export-completed",
 	"camera-online",
 	"camera-offline",
 	"camera-disabled",
@@ -16623,13 +16641,19 @@ var RetrainStatusSchema = _enum([
 * "never marked" from "already trained" must read `retrainStatus`.
 *
 * `debug` does NOT pin; it is attention, not durability.
+*
+* `favourited` IS a BOOLEAN pin (durability bit), not a retrain lifecycle.
+* A favourited track is skipped by retention the same way `staging` is, but
+* it does not enter `none|staging|trained` and has no staging budget.
 */
 var TrackFlagFields = {
 	/** Operator marked this track as training material — i.e. `retrainStatus` is
 	*  `'staging'`. */
 	markForTrain: boolean().optional(),
 	/** Operator marked this track for diagnostic attention. */
-	debug: boolean().optional()
+	debug: boolean().optional(),
+	/** Operator favourited this track. Pins it against pruning. */
+	favourited: boolean().optional()
 };
 /**
 * The lifecycle field itself, on the READ surfaces only (`Track`, `KeyEvent`).
@@ -16654,6 +16678,7 @@ var TrackFlagsSchema = object({
 	trackId: string(),
 	markForTrain: boolean(),
 	debug: boolean(),
+	favourited: boolean(),
 	/** The lifecycle state the boolean was derived from. Required here (unlike on
 	*  a track row) because this shape is only ever produced by the write body,
 	*  which always knows it — and a surface that has just written needs to render
@@ -17286,6 +17311,12 @@ var TrackCascadeCountsSchema = object({
 	/** Per-track CLIP search vectors removed (best-effort). */
 	embeddings: number().int()
 });
+/** Disk-wins reconcile: media rows whose blobs are gone, then empty tracks. */
+var DiskReconcileCountsSchema = object({
+	mediaDropped: number().int(),
+	tracks: number().int(),
+	events: number().int()
+});
 /** Event-store footprint for one camera. */
 var EventStoreDeviceFootprintSchema = object({
 	deviceId: number(),
@@ -17462,6 +17493,9 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), method(object({ deviceId: number() }), TrackCascadeCountsSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({ deviceId: number() }), DiskReconcileCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number(),
 	trackIds: array(string()).min(1)
@@ -19012,6 +19046,24 @@ var CameraStatusDegradationSchema = object({
 *
 * See spec: `docs/superpowers/specs/2026-06-24-camera-status-aggregator-cap.md`
 */
+var DiskReconcileJobSchema = object({
+	state: _enum([
+		"idle",
+		"running",
+		"done",
+		"error"
+	]),
+	total: number().int().nonnegative(),
+	completed: number().int().nonnegative(),
+	currentDeviceId: number().int().nullable(),
+	failed: array(number().int()).readonly(),
+	mediaDropped: number().int().nonnegative(),
+	tracks: number().int().nonnegative(),
+	events: number().int().nonnegative(),
+	startedAtMs: number().int().nullable(),
+	finishedAtMs: number().int().nullable(),
+	error: string().nullable()
+});
 var CameraStatusSchema = object({
 	deviceId: number(),
 	assignment: CameraAssignmentStatusSchema,
@@ -19243,7 +19295,10 @@ method(StorageMigrationLeaseInputSchema, object({ paused: literal(true) }), {
 }), CameraSwitchGroupSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), CameraStatusSchema), method(object({ deviceIds: array(number()).optional() }), array(CameraStatusSchema).readonly()), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
+}), method(object({ deviceId: number() }), CameraStatusSchema), method(object({ deviceIds: array(number()).optional() }), array(CameraStatusSchema).readonly()), method(_void(), DiskReconcileJobSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), DiskReconcileJobSchema, { auth: "admin" }), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
 	name: string(),
 	description: string().optional(),
 	config: CameraPipelineConfigSchema
@@ -19746,7 +19801,14 @@ targets: array(object({
 				"sleeping",
 				"unreachable",
 				"waking"
-			]).nullable()
+			]).nullable(),
+			/** A battery camera (whatever its current state). An AWAKE battery
+			*  camera is deliberately NOT recaptured on the poll cadence — every
+			*  capture is a camera hit that would keep it out of sleep — so its
+			*  cached frame legitimately ages past the currency ceiling while
+			*  nothing is streaming. A surface must keep painting it (a fresh
+			*  frame is captured at each wake), not blank to "unavailable". */
+			battery: boolean()
 		})))
 	},
 	status: {
@@ -20443,8 +20505,28 @@ var ClipSchema = object({
 		startMs: number(),
 		endMs: number()
 	}),
-	/** Thumbnail URL (lazy; e.g. analytics `getEventMedia`). Never inlined. */
-	thumbnail: string().optional()
+	/**
+	* Lazy thumbnail URL, never inlined.
+	*
+	* Recording-derived clips (events-mode keep-window, and the prepared
+	* continuous event+fragment visit) MUST use the snapshot of the **main
+	* event of the interval** — `getEventMedia({ eventId, kind: 'snapshot' })`
+	* of the event that owns `kind` (object > motion > audio). Do not extract
+	* a keyframe from the recorded segments. Other providers (onboard, HKSV)
+	* mint their own stills.
+	*/
+	thumbnail: string().optional(),
+	/** Analytics event ids that overlap this visit. Empty on footage-only clips.
+	*  The default provider's visit grain puts many motion heartbeats on one clip
+	*  instead of minting one clip per marker. */
+	eventIds: array(string()).optional(),
+	/** Intra-visit footage holes (GOP rolls, discarded segments) still shorter
+	*  than `VISIT_MERGE_GAP_MS`. Playback concatenates around them; the timeline
+	*  bar keeps showing them via `recording.getAvailability`. */
+	holes: array(object({
+		startMs: number(),
+		endMs: number()
+	})).optional()
 });
 var ClipPlaybackSchema = object({
 	/** HLS master URL through the hub data-plane (Range + token in path). */
@@ -26863,7 +26945,9 @@ var ExportOptionsSchema = object({
 	includeAudio: boolean(),
 	maxLifeMs: number().int().positive(),
 	deleteAfterDownload: boolean(),
-	title: string().max(200).optional()
+	title: string().max(200).optional(),
+	/** Notification-output target ids to ping when this export becomes ready. */
+	notifyTargetIds: array(string().min(1)).max(20).optional()
 }).superRefine((v, ctx) => {
 	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
 		code: ZodIssueCode.custom,
@@ -26922,10 +27006,18 @@ var ExportBytesSchema = object({
 });
 method(object({
 	deviceId: number(),
-	profile: string(),
+	/** @deprecated Prefer `profiles`. Kept so timelapse/notifiers keep working. */
+	profile: string().optional(),
+	profiles: array(string()).min(1).optional(),
 	fromMs: number(),
 	toMs: number(),
 	options: ExportOptionsSchema
+}).superRefine((v, ctx) => {
+	if ((v.profiles !== void 0 && v.profiles.length > 0 ? v.profiles : v.profile !== void 0 ? [v.profile] : []).length < 1) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "pass profiles[] (min 1) or legacy profile",
+		path: ["profiles"]
+	});
 }), ExportRecordSchema, {
 	kind: "mutation",
 	auth: "protected"
@@ -30080,15 +30172,6 @@ var BaseDeviceProvider = class extends BaseAddon {
 			labels: ["probe not implemented"]
 		};
 	}
-	/**
-	* Top-level devices restored at once in {@link onRestoreDevices}.
-	*
-	* Four covers the fleets this ships to without turning a boot into a burst a
-	* camera NVR answers with a refusal. A provider whose upstream is a single
-	* session with a serial command channel (a Baichuan hub, an NVR that
-	* serialises ISAPI) should lower it; nothing needs to raise it.
-	*/
-	restoreConcurrency = 4;
 	async restoreDevices(savedDevices) {
 		await this.onRestoreDevices(savedDevices);
 		if (savedDevices.length > 0) this.ctx.logger.info(`Restored ${savedDevices.length} ${this.providerName} device(s)`);
@@ -30143,14 +30226,7 @@ var BaseDeviceProvider = class extends BaseAddon {
 				});
 			}
 		};
-		let nextTopLevel = 0;
-		await Promise.all(Array.from({ length: Math.min(Math.max(1, this.restoreConcurrency), topLevel.length) }, async () => {
-			for (;;) {
-				const saved = topLevel[nextTopLevel++];
-				if (saved === void 0) return;
-				await restoreOne(saved);
-			}
-		}));
+		await Promise.all(topLevel.map((saved) => restoreOne(saved)));
 		const childRows = savedDevices.filter((s) => s.parentDeviceId !== null);
 		for (const saved of childRows) {
 			const Class = this.deviceClasses[saved.type];
@@ -33554,6 +33630,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.reconcileFromDisk": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.refreshStorageLocationsForMigration": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -33956,6 +34038,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getReconcileFromDiskStatus": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.listAgentSettings": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -33980,6 +34068,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.reconcileFromDisk": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.removeAgentSettings": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -36971,6 +37065,11 @@ Object.freeze({
 		form: "single",
 		optional: true
 	}],
+	"pipelineAnalytics.reconcileFromDisk": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineAnalytics.restageRetrainTrack": [{
 		name: "deviceId",
 		form: "single",
@@ -40691,7 +40790,7 @@ async function pumpAlarmStream(stream, boundary, handlers, idleTimeoutMs = ALARM
 			for (const block of parts.blocks) {
 				const parsed = parseMultipartBlock(block);
 				if (!parsed) continue;
-				if (parsed.contentType.startsWith("application/xml") || parsed.contentType.startsWith("text/xml")) {
+				if (parsed.contentType.startsWith("application/xml") || parsed.contentType.startsWith("text/xml") || looksLikeAlertXml(parsed.bodyText)) {
 					const ev = parseAlertXml(parsed.bodyText);
 					if (ev) handlers.onEvent(ev);
 				}
@@ -40723,14 +40822,24 @@ function splitOnBoundary(buf, dashBoundary) {
 		tail
 	};
 }
+function looksLikeAlertXml(text) {
+	return text.includes("<eventType>") || text.includes("EventNotificationAlert");
+}
 function parseMultipartBlock(block) {
-	let start = 0;
-	while (start < block.length && (block[start] === 13 || block[start] === 10)) start++;
-	const headerEnd = findHeaderEnd(block, start);
-	if (headerEnd < 0) return null;
-	const headerBlob = Buffer.from(block.subarray(start, headerEnd)).toString("utf8");
-	const bodyStart = headerEnd + 4;
-	const bodySlice = block.subarray(bodyStart);
+	const headerEnd = findHeaderEnd(block, 0);
+	let headerBlob = "";
+	let bodySlice;
+	if (headerEnd >= 0) {
+		headerBlob = Buffer.from(block.subarray(0, headerEnd)).toString("utf8");
+		bodySlice = block.subarray(headerEnd + 4);
+	} else {
+		const raw = Buffer.from(block).toString("utf8");
+		if (!looksLikeAlertXml(raw)) return null;
+		return {
+			contentType: "",
+			bodyText: raw.replace(/\r?\n--$/m, "").trim()
+		};
+	}
 	const headers = {};
 	for (const line of headerBlob.split(/\r?\n/)) {
 		const idx = line.indexOf(":");
@@ -40746,6 +40855,28 @@ function findHeaderEnd(buf, from) {
 	for (let i = from; i + 3 < buf.length; i++) if (buf[i] === 13 && buf[i + 1] === 10 && buf[i + 2] === 13 && buf[i + 3] === 10) return i;
 	return -1;
 }
+/**
+* Event types that imply onboard motion. Compared after `eventType`
+* is lowercased. Some firmwares emit `regionExit`, others
+* `regionexiting` — accept both.
+*/
+function isHikvisionMotionAlarmType(type) {
+	switch (type) {
+		case "vmd":
+		case "motiondetection":
+		case "linedetection":
+		case "fielddetection":
+		case "regionentrance":
+		case "regionexit":
+		case "regionexiting":
+		case "attendedbaggage":
+		case "unattendedbaggage": return true;
+		default: return false;
+	}
+}
+function isHikvisionSmartAlarmType(type) {
+	return type !== "vmd" && type !== "motiondetection" && isHikvisionMotionAlarmType(type);
+}
 function parseAlertXml(xml) {
 	const type = extractTag(xml, "eventType");
 	if (!type) return null;
@@ -44406,7 +44537,7 @@ var HikvisionCamera = class HikvisionCamera extends BaseDevice {
 	handleAlarmEvent(ev) {
 		const camStreamId = this.resolveAlarmCamStreamId(ev.channelId);
 		const isMotion = ev.type === "vmd" || ev.type === "motiondetection";
-		const isSmart = ev.type === "linedetection" || ev.type === "fielddetection" || ev.type === "regionentrance" || ev.type === "regionexiting" || ev.type === "attendedbaggage" || ev.type === "unattendedbaggage";
+		const isSmart = isHikvisionSmartAlarmType(ev.type);
 		if (isMotion) {
 			this.handleMotionEvent(ev, camStreamId);
 			return;
@@ -44416,7 +44547,17 @@ var HikvisionCamera = class HikvisionCamera extends BaseDevice {
 			this.handleMotionEvent(ev, camStreamId);
 			return;
 		}
-		this.ctx.logger.debug("hikvision: unhandled alarm event", {
+		if (ev.type === "videoloss") {
+			this.ctx.logger.debug("hikvision: unhandled alarm event", {
+				tags: { deviceId: this.id },
+				meta: {
+					type: ev.type,
+					state: ev.state
+				}
+			});
+			return;
+		}
+		this.ctx.logger.info("hikvision: unhandled alarm event", {
 			tags: { deviceId: this.id },
 			meta: {
 				type: ev.type,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-hikvision",
-  "version": "1.2.24",
+  "version": "1.2.27",
   "description": "Hikvision camera device provider addon for CamStack — ISAPI over HTTP(S) with digest auth (snapshot, alarm stream, RTSP discovery)",
   "keywords": [
     "camstack",