@camstack/system 1.2.353 → 1.2.355

package/dist/{dist-CXVXFdJX.js → dist-BWicEEVA.js}

@@ -7867,6 +7867,57 @@ var ClipSearchStrictnessSchema = zod.z.enum([
 	"balanced",
 	"strict"
 ]);
+new Set([
+	{
+		id: "person",
+		name: "Person"
+	},
+	{
+		id: "vehicle",
+		name: "Vehicle"
+	},
+	{
+		id: "animal",
+		name: "Animal"
+	},
+	{
+		id: "package",
+		name: "Package"
+	}
+].map((l) => l.id));
+var COCO_TO_MACRO = {
+	mapping: {
+		person: "person",
+		bicycle: "vehicle",
+		car: "vehicle",
+		motorcycle: "vehicle",
+		airplane: "vehicle",
+		bus: "vehicle",
+		train: "vehicle",
+		truck: "vehicle",
+		boat: "vehicle",
+		bird: "animal",
+		cat: "animal",
+		dog: "animal",
+		horse: "animal",
+		sheep: "animal",
+		cow: "animal",
+		elephant: "animal",
+		bear: "animal",
+		zebra: "animal",
+		giraffe: "animal",
+		suitcase: "package",
+		backpack: "package",
+		handbag: "package"
+	},
+	preserveOriginal: false
+};
+/** Steps a root detector may declare it fills. */
+var FILLABLE_STEP_IDS = [
+	"animal-classifier",
+	"vehicle-classifier",
+	"package-detection"
+];
 var MODEL_FORMATS = [
 	"onnx",
 	"coreml",
@@ -8000,6 +8051,12 @@ var ModelLicenseRecordSchema = zod.z.object({
 * `camstack/docs` → `/docs/detection/models`.
 */
 var ModelLicenseSchema = zod.z.preprocess((value) => typeof value === "string" ? { weights: value } : value, ModelLicenseRecordSchema);
+/** One `fillsClassifierEffects` entry — see `ModelCatalogEntry.fillsClassifierEffects`. */
+var FillsClassifierEffectSchema = zod.z.object({
+	stepId: zod.z.enum(FILLABLE_STEP_IDS),
+	labelToEffect: zod.z.record(zod.z.string(), zod.z.string()),
+	uncovered: zod.z.array(zod.z.string()).readonly()
+});
 var ModelCatalogEntrySchema = zod.z.object({
 	id: zod.z.string(),
 	name: zod.z.string(),
@@ -8126,6 +8183,16 @@ var ModelCatalogEntrySchema = zod.z.object({
 	*/
 	classMap: DetectionCatalogClassMapSchema.optional(),
 	/**
+	* The pipeline steps this ROOT detector already does the work of (D715):
+	* its labels name the effect the step exists to produce (`deer` for
+	* `animal-classifier`, `package` for `package-detection`). Derived from the
+	* labelmap by `deriveClassifierFills`, never hand-written; a COCO model
+	* declares none. Whether a declaration is honoured is the step's own
+	* `labelLink` policy (`resolveLabelLink`). `labelToEffect` values are in
+	* `FILLABLE_STEP_VOCABULARIES` (guard `check-label-link-vocabulary`).
+	*/
+	fillsClassifierEffects: zod.z.array(FillsClassifierEffectSchema).readonly().optional(),
+	/**
 	* The model's CLIP feature-space contract (text encoder, dimension, vector
 	* index, token window, search floor) — see `clip-model.ts`. Present ONLY on a
 	* CLIP image encoder; its absence is what "not a CLIP model" means to the
@@ -14169,7 +14236,7 @@ var detectionPipelineCapability = {
 * This matters here more than anywhere else in the repo, because every provider
 * that knows a device's host knows its PASSWORD too: `{ host, port, username,
 * password }` sit in one object on Hikvision, Amcrest, Reolink and ONVIF alike,
-* and `http://admin:hunter2@192.168.x.x/` is a URL a browser accepts. The
+* and `http://admin:hunter2@192.168.60.139/` is a URL a browser accepts. The
 * camera's own page will ask for its own login. That is correct, and pre-
 * filling it is the operator's business, not ours.
 *
@@ -19213,51 +19280,6 @@ var notificationOutputCapability = {
 		})
 	}
 };
-new Set([
-	{
-		id: "person",
-		name: "Person"
-	},
-	{
-		id: "vehicle",
-		name: "Vehicle"
-	},
-	{
-		id: "animal",
-		name: "Animal"
-	},
-	{
-		id: "package",
-		name: "Package"
-	}
-].map((l) => l.id));
-var COCO_TO_MACRO = {
-	mapping: {
-		person: "person",
-		bicycle: "vehicle",
-		car: "vehicle",
-		motorcycle: "vehicle",
-		airplane: "vehicle",
-		bus: "vehicle",
-		train: "vehicle",
-		truck: "vehicle",
-		boat: "vehicle",
-		bird: "animal",
-		cat: "animal",
-		dog: "animal",
-		horse: "animal",
-		sheep: "animal",
-		cow: "animal",
-		elephant: "animal",
-		bear: "animal",
-		zebra: "animal",
-		giraffe: "animal",
-		suitcase: "package",
-		backpack: "package",
-		handbag: "package"
-	},
-	preserveOriginal: false
-};
 var AUDIO_MACRO_LABELS = [
 	{
 		id: "speech",
@@ -21164,8 +21186,9 @@ var NcRuleSchema = NcRuleInputSchema.extend({
 	disabledTargetIds: zod.z.array(zod.z.string()).default([])
 });
 /**
-* The state-summary SECTIONS (D647 / D698): the D637 kind groups that report a
-* still-true state. `backups-exports` and `alarm` are not sections — a completed
+* The state-summary SECTIONS (D647 / D698 / D708): the D637 kind groups that
+* report a still-true state. `addons` is the crash-looped addons only and
+* `addon-updates` the addons that are behind (D708 split them). `backups-exports` and `alarm` are not sections — a completed
 * job is not an open state, and the alarm stays instant.
 */
 var NcStateSummarySectionIdSchema = zod.z.enum([
@@ -21177,6 +21200,7 @@ var NcStateSummarySectionIdSchema = zod.z.enum([
 	"detection-blind",
 	"nodes",
 	"addons",
+	"addon-updates",
 	"updates"
 ]);
 /** One section of a previewed state summary. `unavailable` = its state could not be read. */
@@ -21671,7 +21695,19 @@ var NcAlarmModeDelaysSchema = zod.z.object({
 	* When this mode may be armed. Absent / null = always allowed (same as a
 	* rule with no `schedule`). Evaluated with {@link isScheduleActive}.
 	*/
-	schedule: NcScheduleSchema.optional()
+	schedule: NcScheduleSchema.optional(),
+	/**
+	* D706: while this mode's ENTRY DELAY runs, do the alarm rules' own pushes go out (as an
+	* intrusion naming the locations)? Absent = false — the entry-delay notification is the
+	* only one, and the matches ride the triggered notification's mosaic (D705).
+	*/
+	notifyDuringEntryDelay: zod.z.boolean().optional(),
+	/**
+	* D706: notify "watched again" when a sensor this arm bypassed closes and opens again.
+	* Absent = false (logged, not sent). Even when true it is not sent when that same sensor
+	* is the one that starts the entry delay — the entry-delay notification already names it.
+	*/
+	notifySensorRewatched: zod.z.boolean().optional()
 });
 var NcAlarmModeDelaysListSchema = zod.z.array(NcAlarmModeDelaysSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 /**
@@ -21686,7 +21722,11 @@ var NcAlarmModeDelaysEditSchema = zod.z.object({
 	triggeredDurationSec: NcAlarmTriggeredSecSchema.nullable().optional(),
 	postTriggeredAction: NcAlarmPostTriggeredActionSchema.nullable().optional(),
 	/** Set a schedule, or `null` to clear (mode always allowed again). */
-	schedule: NcScheduleSchema.nullable().optional()
+	schedule: NcScheduleSchema.nullable().optional(),
+	/** D706: set the switch, or `null` to clear it (back to the default, false). */
+	notifyDuringEntryDelay: zod.z.boolean().nullable().optional(),
+	/** D706: set the switch, or `null` to clear it (back to the default, false). */
+	notifySensorRewatched: zod.z.boolean().nullable().optional()
 });
 var NcAlarmModeDelaysEditListSchema = zod.z.array(NcAlarmModeDelaysEditSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 /** One switch of the alarm table: put ONE device on, or take it off, ONE mode's list. */
@@ -25601,7 +25641,8 @@ var PipelineModelOptionSchema = zod.z.object({
 	group: ModelVariantGroupSchema.optional(),
 	legacy: zod.z.boolean().optional(),
 	provider: ModelProviderIdSchema.optional(),
-	defaultConfidence: zod.z.number().optional()
+	defaultConfidence: zod.z.number().optional(),
+	fillsClassifierEffects: zod.z.array(FillsClassifierEffectSchema).readonly().optional()
 });
 var ConfigFieldBridge = zod.z.custom();
 var PipelineAddonSchemaSchema = zod.z.object({
@@ -26630,6 +26671,22 @@ var MotionSourceEnum = zod.z.enum([
 	"device-activity"
 ]);
 /**
+* What opened an on-motion detection SESSION: the motion source that passed the
+* camera's `motionSources` gate, and what raised it (the camera itself, or a
+* sensor the operator attached — D672). `sensorName` is the attached sensor's
+* device name as the orchestrator's camera-sensors resolution last read it;
+* absent when unknown or when the camera itself triggered.
+*
+* Carried on the session attach ONLY so the runner's `DetectionPhaseTransition`
+* can say what started the session (D672 rule 11, amended 2026-10-06). The
+* runner never decides anything on it.
+*/
+var SessionTriggerSchema = zod.z.object({
+	source: MotionSourceEnum,
+	triggeredBy: MotionTriggeredBySchema,
+	sensorName: zod.z.string().optional()
+});
+/**
 * List of motion sources active on a camera. Empty array is valid:
 * "no source" — happens for battery cams without firmware motion when
 * the operator hasn't opted into the SW analyzer (would hold the
@@ -26881,6 +26938,14 @@ var RunnerCameraConfigSchema = zod.z.object({
 	*/
 	motionSources: MotionSourcesSchema.default(["analyzer"]),
 	/**
+	* What opened this attach, on a SESSION attach only (see
+	* {@link SessionTriggerSchema}). OPTIONAL with no default: absent on a
+	* standing attach, an occupancy burst, a re-dispatch with no motion event
+	* behind it, and every attach from an orchestrator older than the field — the
+	* runner then names no source on the phase event.
+	*/
+	sessionTrigger: SessionTriggerSchema.optional(),
+	/**
 	* WHICH root detector runs for this camera. The detection counterpart of
 	* {@link motionSources}, same shape and same discipline: a per-camera list
 	* of sources the system understands, vendor-agnostic, owned here.
@@ -31445,6 +31510,50 @@ var videoclipsCapability = {
 		})
 	}
 };
+/** The central link domain the viewer app claims (Universal Links / App Links). */
+var CAMSTACK_APP_LINK_ORIGIN = "https://camstack.zentik.app";
+/**
+* Reduce a base URL to the bare origin the central page accepts as `hub=`,
+* or `null` when it cannot be one: not http(s), carries credentials, or does
+* not parse. A path/query/fragment is dropped — the central page mounts the
+* viewer under the origin itself.
+*/
+function toAppLinkHubOrigin(baseUrl) {
+	let parsed;
+	try {
+		parsed = new URL(baseUrl);
+	} catch {
+		return null;
+	}
+	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+	if (parsed.username !== "" || parsed.password !== "") return null;
+	if (parsed.hostname === "") return null;
+	return parsed.origin;
+}
+/**
+* The hub address an app link carries as `hub=`, chosen from the hub's OWN
+* advertised palette so it always agrees with what the Network page lists:
+* the public tunnel first, then the mesh (Tailscale MagicDNS) — HTTPS only,
+* because the app and the hosted viewer reach it from off the LAN. `null`
+* when the hub advertises neither.
+*/
+function pickAppLinkHub(endpoints) {
+	const rank = (e) => {
+		if (e.kind !== "public" || !e.baseUrl.startsWith("https://")) return null;
+		if (e.interfaceKind === "public") return 0;
+		if (e.interfaceKind === "vpn") return 1;
+		return null;
+	};
+	return endpoints.flatMap((e) => {
+		const r = rank(e);
+		const origin = toAppLinkHubOrigin(e.baseUrl);
+		return r === null || origin === null ? [] : [{
+			r,
+			p: e.priority,
+			origin
+		}];
+	}).toSorted((a, b) => a.r - b.r || a.p - b.p)[0]?.origin ?? null;
+}
 /**
 * Optional client-side hints sent at session creation to help the provider
 * pick the best native source. All fields optional — a viewer that knows
@@ -36148,7 +36257,7 @@ var LocalInterfaceSchema = zod.z.object({
 	name: zod.z.string(),
 	family: zod.z.enum(["IPv4", "IPv6"]),
 	address: zod.z.string(),
-	/** CIDR shorthand (e.g. `192.168.x.x/24`). Empty when OS doesn't expose. */
+	/** CIDR shorthand (e.g. `192.168.10.10/24`). Empty when OS doesn't expose. */
 	cidr: zod.z.string(),
 	/** OS netmask. Stable across calls so the SDK can hash on it. */
 	netmask: zod.z.string(),
@@ -36202,7 +36311,8 @@ var ConnectionEndpointSchema = zod.z.object({
 		"lan-ipv4",
 		"lan-ipv6",
 		"public",
-		"loopback"
+		"loopback",
+		"app-link"
 	]),
 	/**
 	* Originating-interface kind — `lan`/`wifi`/`docker`/`vpn`/`other`/
@@ -36271,15 +36381,27 @@ var GetConnectionEndpointsResultSchema = zod.z.object({
 	localPort: AdvertisedLocalPortSchema
 });
 /**
-* The chosen outbound endpoint for notification artifacts. `baseUrl: null` =
-* AUTO (resolved from the candidate ranking at send time); `resolved` reports
-* what AUTO currently picks, so the UI can show the effective value either way.
+* The address flagged for notification links. `baseUrl: null` = AUTO, which
+* since D709 is the CamStack app link; `resolved` reports the effective value,
+* so the UI can show it either way.
 */
 var NotificationEndpointSchema = zod.z.object({
 	/** The operator's explicit choice, or null for AUTO. */
 	baseUrl: zod.z.string().nullable(),
-	/** What the ranking currently resolves to (null when nothing is reachable). */
-	resolved: zod.z.string().nullable()
+	/**
+	* The effective flagged address: the explicit choice, else (AUTO) the
+	* CamStack app link `https://camstack.zentik.app` (D709). A pre-D709 hub
+	* answered the public tunnel / mesh here, or null.
+	*/
+	resolved: zod.z.string().nullable(),
+	/**
+	* The hub origin an app link carries as `hub=` (D709): the hub's best
+	* public HTTPS address — the tunnel, then the mesh (Tailscale MagicDNS) —
+	* picked from this cap's own palette by `pickAppLinkHub`. `null` when the
+	* hub advertises neither; the app link is then minted without `hub=`.
+	* Absent on a pre-D709 hub.
+	*/
+	appLinkHub: zod.z.string().nullable()
 });
 /**
 * The URLs the SDK / viewer should race for API access. `baseUrls` empty =
@@ -36347,7 +36469,7 @@ var localNetworkCapability = {
 		* every client a second authority on a socket only the hub binds. A viewer
 		* configured with a port-less public URL (`https://camstack.example.top`)
 		* infers 443 from the scheme, asks with 443, and was handed
-		* `https://192.168.x.x:443` for a hub listening on 4443. That candidate
+		* `https://192.168.10.9:443` for a hub listening on 4443. That candidate
 		* cannot ever answer, and losing its race reads in the log exactly like
 		* "the LAN was tried and it was slower" — so an operator sitting on his own
 		* WiFi stayed on the public tunnel for weeks, with the LAN candidate born
@@ -36380,13 +36502,21 @@ var localNetworkCapability = {
 			*  Pass `'https'` when the caller is itself loaded over HTTPS
 			*  to avoid mixed-content blocks in the browser. The public
 			*  tunnel always emits `https://` regardless. */
-			scheme: zod.z.enum(["http", "https"]).optional()
+			scheme: zod.z.enum(["http", "https"]).optional(),
+			/** Append the CamStack app link entry (`kind: 'app-link'`, D709) —
+			*  an address notification links can be flagged with, not a hub
+			*  route. Default `false`: racers and rankers never see it. */
+			includeAppLink: zod.z.boolean().optional()
 		}), GetConnectionEndpointsResultSchema),
 		/**
-		* The endpoint OUTBOUND artifacts must be addressed by — notification
-		* attachment links and deep links. `baseUrl: null` means AUTO: the first
-		* public candidate (a configured origin, then a connected tunnel, then the
-		* LAN), never loopback.
+		* The address notification links are flagged with. `baseUrl: null` means
+		* AUTO, which is the CamStack app link (D709): viewer taps go through
+		* `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the app. Any
+		* hub address the palette lists can be flagged instead; then viewer taps,
+		* attachment links and action buttons all use it. Signed media and
+		* buttons never use the app link — with it flagged (or AUTO) they keep
+		* the ranked hub ladder (a configured origin, a connected tunnel, then
+		* the LAN), never loopback.
 		*
 		* Why an explicit marker: the automatic ranking cannot know which of
 		* several reachable addresses the RECIPIENT can actually open. A link is
@@ -36800,7 +36930,7 @@ var MeshPeerSchema = zod.z.object({
 	tags: zod.z.array(zod.z.string()).readonly(),
 	/** True when the peer advertises itself as an exit-node candidate. */
 	exitNodeOption: zod.z.boolean(),
-	/** Subnet routes the peer advertises (e.g. `["192.168.x.x/24"]`). */
+	/** Subnet routes the peer advertises (e.g. `["192.168.10.0/24"]`). */
 	advertisedRoutes: zod.z.array(zod.z.string()).readonly(),
 	/** Owner account login (e.g. `foo@example.com`). Null for tagged peers. */
 	userLogin: zod.z.string().nullable(),
@@ -45213,7 +45343,8 @@ function expressionOutcome(source, read, now, stateful) {
 		value: null,
 		reason: `the expression failed: ${result.error}`,
 		fatal: false,
-		confirmed: true
+		confirmed: true,
+		expressionFailed: true
 	};
 	return {
 		state: staleReasons.length > 0 ? "stale" : "fresh",
@@ -58617,12 +58748,14 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
 	{
 		id: "addons",
 		family: "system",
-		label: "Addons",
-		kinds: [
-			"addon-crash-loop",
-			"addon-update-available",
-			"addon-updated"
-		]
+		label: "Addons stopped",
+		kinds: ["addon-crash-loop"]
+	},
+	{
+		id: "addon-updates",
+		family: "system",
+		label: "Addon updates",
+		kinds: ["addon-update-available", "addon-updated"]
 	},
 	{
 		id: "updates",
@@ -58782,13 +58915,15 @@ var STATE_SUMMARY_SECTION_VARS = [
 	},
 	{
 		name: "summaryAddons",
-		label: "Summary: addons",
-		example: "@camstack/addon-recorder 1.2.3 → 1.2.4",
-		kinds: [
-			"addon-crash-loop",
-			"addon-update-available",
-			"addon-updated"
-		]
+		label: "Summary: addons stopped",
+		example: "hub — recorder stopped after repeated crashes",
+		kinds: ["addon-crash-loop"]
+	},
+	{
+		name: "summaryAddonUpdates",
+		label: "Summary: addon updates",
+		example: "hub:\n• @camstack/addon-recorder 1.2.3 → 1.2.4",
+		kinds: ["addon-update-available", "addon-updated"]
 	},
 	{
 		name: "summaryUpdates",
@@ -58872,6 +59007,7 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_BODY_ONLY],
 	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
+	([...RULE_TEXT], [...COMBINED_ALARM]),
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
 	([...RULE_TEXT], [...BATTERY, ...CONSUMABLE]),
 	([...RULE_TEXT], [...CONSUMABLE]),
@@ -59639,6 +59775,12 @@ Object.defineProperty(exports, "CAMERA_SWITCH_ORDER", {
 		return CAMERA_SWITCH_ORDER;
 	}
 });
+Object.defineProperty(exports, "CAMSTACK_APP_LINK_ORIGIN", {
+	enumerable: true,
+	get: function() {
+		return CAMSTACK_APP_LINK_ORIGIN;
+	}
+});
 Object.defineProperty(exports, "CAP_NAMES_WITH_STATUS", {
 	enumerable: true,
 	get: function() {
@@ -60257,6 +60399,12 @@ Object.defineProperty(exports, "expandContainer", {
 		return expandContainer;
 	}
 });
+Object.defineProperty(exports, "expressionContainsBuiltinCall", {
+	enumerable: true,
+	get: function() {
+		return expressionContainsBuiltinCall;
+	}
+});
 Object.defineProperty(exports, "extractNestedAddonId", {
 	enumerable: true,
 	get: function() {
@@ -60473,6 +60621,12 @@ Object.defineProperty(exports, "parseStreamParamsFormPatch", {
 		return parseStreamParamsFormPatch;
 	}
 });
+Object.defineProperty(exports, "pickAppLinkHub", {
+	enumerable: true,
+	get: function() {
+		return pickAppLinkHub;
+	}
+});
 Object.defineProperty(exports, "planComposition", {
 	enumerable: true,
 	get: function() {