@camstack/system 1.2.420 → 1.2.422

package/dist/{dist-C0wYvAHC.mjs → dist-CHsJCqrf.mjs}

@@ -718,7 +718,7 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	return EventCategory;
 }({});
 //#endregion
-//#region ../types/dist/sleep-vWTnHq9G.mjs
+//#region ../types/dist/sleep-BBF1iXUi.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -7338,6 +7338,15 @@ z.discriminatedUnion("type", [
 		message: z.string()
 	})
 ]);
+/** Every status, in the order a summary lists them. */
+var RETRAIN_REVIEW_STATUSES = [
+	"unchanged",
+	"adjusted",
+	"reclassified",
+	"added",
+	"removed",
+	"model-error"
+];
 /**
 * What the gate decided about a birth, from the CALLER's point of view.
 *
@@ -12004,6 +12013,16 @@ var BrokerClientsSchema = z.object({
 	/** Total encoded + raw-RTP callback subscriber count (sum of `encoded[].length`). */
 	encodedSubscribers: z.number()
 });
+/**
+* How many people are watching one camera LIVE right now — see
+* `getLiveViewerCounts`. A camera with nobody watching is absent from the list
+* (so `viewers` is always at least 1): the listing carries the cameras that
+* have viewers, never a row of zeros.
+*/
+var LiveViewerCountSchema = z.object({
+	deviceId: z.number().int().nonnegative(),
+	viewers: z.number().int().positive()
+});
 z.enum([
 	"reconnecting",
 	"sleeping",
@@ -12487,6 +12506,24 @@ var streamBrokerCapability = {
 			auth: "admin"
 		}),
 		listClients: method(z.object({ brokerId: z.string() }), BrokerClientsSchema),
+		/**
+		* People watching each camera LIVE right now, for every camera at once —
+		* cheap enough to poll (a walk of the live session maps, no I/O).
+		*
+		* Counts EXTERNAL viewers only: WebRTC sessions of a viewer kind
+		* (`webrtc-browser` / `-mobile` / `-whep`, `alexa`, `homekit`) that are on
+		* the live edge, plus RTSP restream clients from outside that are playing.
+		* The system's own consumers are never counted: the detection decoder, the
+		* recorder, snapshots, the prebuffer hold, audio analysis, and the RTSP
+		* dials an agent's derived broker makes. One WebRTC session or RTSP
+		* connection is one viewer, so two tabs on one camera read 2.
+		*
+		* The count is read off the live session maps at call time, so a session
+		* that ends — cleanly or by the peer vanishing — stops counting with no
+		* counter to leak. It covers the sessions THIS provider serves; a node
+		* with its own stream-broker is asked with a `nodeId` pin.
+		*/
+		getLiveViewerCounts: method(z.void(), z.array(LiveViewerCountSchema).readonly()),
 		killClient: method(z.object({
 			brokerId: z.string(),
 			channel: z.enum(["rtsp", "audio"]),
@@ -15096,6 +15133,38 @@ var BulkRecordSchema = z.object({
 	data: z.record(z.string(), z.unknown())
 });
 /**
+* One write inside a {@link settingsStoreCapability.methods.transact} call.
+* Only the three that a "replace this set, bump that revision" write needs.
+*/
+var TransactOpSchema = z.discriminatedUnion("op", [
+	z.object({
+		op: z.literal("deleteWhere"),
+		collection: z.string(),
+		filter: MutationFilterSchema
+	}),
+	z.object({
+		op: z.literal("insertMany"),
+		collection: z.string(),
+		records: z.array(BulkRecordSchema).readonly()
+	}),
+	z.object({
+		op: z.literal("update"),
+		collection: z.string(),
+		id: z.string(),
+		data: z.record(z.string(), z.unknown())
+	})
+]);
+/**
+* The precondition of a transaction: the row `key` of `collection` must hold
+* `equals` in `column`, read INSIDE the transaction.
+*/
+var TransactGuardSchema = z.object({
+	collection: z.string(),
+	key: z.string(),
+	column: z.string(),
+	equals: z.unknown()
+});
+/**
 * Column declaration for a structured (SQL-backed) collection.
 *
 * Logical types — the backend translates each to the matching SQLite
@@ -15320,6 +15389,36 @@ id: z.union([z.string(), z.number()]) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Several writes, ONE transaction, behind an optional precondition.
+		*
+		* The multi-collection twin of {@link insertMany}: a write that has to move
+		* a set of rows in one collection AND a revision in another cannot be
+		* expressed as separate calls without a window in which a reader (or a
+		* crash) sees half of it. The retrain annotation save replaces a frame's
+		* rows, its dismissed set and its revision this way.
+		*
+		* `guard`, when given, is read inside the transaction: if the row is
+		* missing or its column differs from `equals`, NOTHING is written and the
+		* answer is `{ applied: false, current }` with what was found — the
+		* compare-and-set a revisioned write needs, with no second reader able to
+		* slip between the check and the writes.
+		*
+		* **All or nothing**, like {@link insertMany}: a throw in any op rolls the
+		* whole call back. Ops run in the order given (delete before insert to
+		* replace a set). `namespace` applies to every collection named.
+		*/
+		transact: method(z.object({
+			namespace: z.string().optional(),
+			guard: TransactGuardSchema.optional(),
+			ops: z.array(TransactOpSchema).readonly()
+		}), z.object({
+			applied: z.boolean(),
+			current: z.unknown().optional()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Update an existing record by ID. */
 		update: method(z.object({
 			namespace: z.string().optional(),
@@ -15604,6 +15703,18 @@ id: z.union([z.string(), z.number()]) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/** Several writes in ONE transaction behind an optional guard; see the door. */
+		transact: method(z.object({
+			namespace: z.string().optional(),
+			guard: TransactGuardSchema.optional(),
+			ops: z.array(TransactOpSchema).readonly()
+		}), z.object({
+			applied: z.boolean(),
+			current: z.unknown().optional()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Update an existing record by ID. */
 		update: method(z.object({
 			namespace: z.string().optional(),
@@ -26285,6 +26396,56 @@ var RetrainBboxSchema = z.object({
 	h: z.number()
 });
 /**
+* What a box LOOKED LIKE when it was offered, snapshotted at the moment the
+* operator accepted it. The saved row keeps only the final rectangle; this is
+* the other half of the pair, and the pair is what says whether the operator
+* accepted, nudged, relabelled or replaced a proposal (`retrain-review.ts`).
+*
+* `ref` names the proposal inside its frame: `pipeline:<trackId>` for a box the
+* live pipeline drew, `assist:<n>` for the n-th box of a detector or LLM run,
+* and anything unique for an operator-drawn box (`operator:<n>`). Re-derived
+* pipeline boxes carry the same ref every time, which is what lets a dismissal
+* stay dismissed.
+*/
+var RetrainOriginSchema = z.object({
+	source: RetrainAnnotationSourceSchema,
+	ref: z.string().min(1),
+	bbox: RetrainBboxSchema,
+	macroClass: RetrainMacroClassSchema,
+	label: z.string().optional(),
+	score: z.number().optional(),
+	modelId: z.string().optional()
+});
+/**
+* A proposal the operator deleted. Durable on the frame, so a deleted pipeline
+* box does not come back as a draft every time the frame is reopened, and so
+* the deletion itself is a recorded fact rather than an absence.
+*/
+var RetrainDismissedSchema = z.object({
+	ref: z.string().min(1),
+	snapshot: RetrainOriginSchema
+});
+/** What the operator did with a proposal (see `retrain-review.ts`). */
+var RetrainReviewStatusSchema = z.enum(RETRAIN_REVIEW_STATUSES);
+var RetrainBoxReviewSchema = z.object({
+	ref: z.string(),
+	savedId: z.string().optional(),
+	status: RetrainReviewStatusSchema,
+	/** The baseline was re-derived, not snapshotted (a pre-origin row). */
+	approximate: z.boolean(),
+	origin: RetrainOriginSchema.optional(),
+	iou: z.number().optional()
+});
+var RetrainFrameReviewSchema = z.object({
+	boxes: z.array(RetrainBoxReviewSchema).readonly(),
+	summary: z.object({
+		counts: z.record(RetrainReviewStatusSchema, z.number().int()),
+		total: z.number().int(),
+		changed: z.number().int(),
+		approximate: z.boolean()
+	})
+});
+/**
 * One annotated subject.
 *
 * `bbox` is normalised against the full frame, ALWAYS. The per-model shapes
@@ -26308,6 +26469,9 @@ var RetrainAnnotationSchema = z.object({
 	/** Which model proposed this box — or, on a `model_error`, drew the phantom. */
 	assistModelId: z.string().optional(),
 	assistScore: z.number().optional(),
+	/** The proposal this box started from, snapshotted at accept time. `null` on
+	*  a row saved before origins existed; absent on a draft nobody snapshotted. */
+	origin: RetrainOriginSchema.nullable().optional(),
 	exportedInBatch: z.string().optional(),
 	createdAt: z.number()
 });
@@ -26400,7 +26564,19 @@ var RetrainFrameSchema = z.object({
 	*  empty when nothing the track store holds can be placed on it. */
 	pipelineBoxes: z.array(RetrainPipelineBoxSchema).readonly().optional(),
 	/** The named collections this frame belongs to. Present on list answers. */
-	collectionIds: z.array(z.string()).readonly().optional()
+	collectionIds: z.array(z.string()).readonly().optional(),
+	/** Bumped by every annotation save. A save that names a stale
+	*  `expectedRevision` is refused, so two surfaces cannot overwrite each other. */
+	revision: z.number().int().optional(),
+	/** Proposals the operator deleted — never re-seeded as drafts. */
+	dismissed: z.array(RetrainDismissedSchema).readonly().optional(),
+	/** What the operator did with the proposals, computed by the server. */
+	review: RetrainFrameReviewSchema.optional(),
+	/** The frame's pixels over the admin data plane (full size). Fetch with the
+	*  admin bearer token; relative to the hub root. */
+	imageUrl: z.string().optional(),
+	/** The same, as a ~480 px thumbnail for grids. */
+	thumbnailUrl: z.string().optional()
 });
 /** Why a copy-on-select could not be honoured — named, never a silent skip. */
 var RetrainCopyRefusalSchema = z.enum([
@@ -27943,6 +28119,11 @@ var pipelineAnalyticsCapability = {
 		/**
 		* The pixels of ONE copied frame, base64.
 		*
+		* @deprecated Use `RetrainFrame.imageUrl` / `thumbnailUrl` (the admin
+		* `retrain-frame` data plane, D613). A base64 envelope holds the frame
+		* whole in the producer AND the caller, and a grid of tiles paid that for
+		* every tile. Kept for one release for callers that cannot fetch a URL.
+		*
 		* Through the cap rather than a data plane because it is genuinely one
 		* frame at a time, on demand, at human speed — the shape D9/D18 permit
 		* (what they forbid is frames crossing a boundary at frame RATE). The
@@ -28005,18 +28186,59 @@ var pipelineAnalyticsCapability = {
 		* Refuses a macro class typed into `label` or `subLabel` — the tiers are
 		* separate and the guard is at the WRITE, because a mixed taxonomy cannot
 		* be un-mixed by reading it.
+		*
+		* ATOMIC and REVISIONED: the replaced rows, the frame's `dismissed` set and
+		* its `revision` move in one transaction, guarded by the revision the
+		* caller saw. A stale `expectedRevision` writes nothing and throws
+		* `retrain-revision-conflict` (parse it with `parseRetrainRevisionConflict`);
+		* the UI and an MCP agent no longer overwrite each other silently.
 		*/
 		saveRetrainAnnotations: method(z.object({
 			deviceId: z.number(),
 			/** The frame's track, when it has one — checked against the frame. */
 			trackId: z.string().optional(),
 			frameId: z.string(),
-			annotations: z.array(RetrainAnnotationDraftSchema)
+			annotations: z.array(RetrainAnnotationDraftSchema),
+			/** The frame's `revision` the caller saw. A different current revision
+			*  refuses the save with a `retrain-revision-conflict` error
+			*  (`parseRetrainRevisionConflict`). Absent ⇒ last write wins. */
+			expectedRevision: z.number().int().optional(),
+			/** The proposals the operator deleted. Absent ⇒ keep the frame's
+			*  current set; present ⇒ replace it (an empty array un-dismisses). */
+			dismissed: z.array(RetrainDismissedSchema).optional()
 		}), z.array(RetrainAnnotationSchema).readonly(), {
 			kind: "mutation",
 			auth: "admin"
 		}),
 		/**
+		* Give annotations saved BEFORE origins existed the origin a caller
+		* reconstructed for them (the MCP `track_review_backfill_origin` tool
+		* matches each row to the pipeline box it equals).
+		*
+		* Writes `origin` and nothing else: ids, creation time and the export stamp
+		* are untouched (a re-save through `saveRetrainAnnotations` would reset all
+		* three). A row that already has an origin is SKIPPED — a snapshot taken at
+		* accept time is evidence, a reconstruction is a guess. Atomic and
+		* revision-guarded like the save; bumps the frame's `revision`.
+		*/
+		backfillRetrainOrigins: method(z.object({
+			deviceId: z.number(),
+			trackId: z.string().optional(),
+			frameId: z.string(),
+			expectedRevision: z.number().int().optional(),
+			origins: z.array(z.object({
+				annotationId: z.string(),
+				origin: RetrainOriginSchema
+			})).min(1).max(500)
+		}), z.object({
+			updated: z.number().int(),
+			skipped: z.number().int(),
+			revision: z.number().int()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
 		* Finish with a track: `staging → trained`. **The only writer of that
 		* state** — D81 shipped the column with it deliberately unreachable.
 		*
@@ -31304,6 +31526,12 @@ var CameraStepOverridePatchSchema = z.object({
 	settings: z.record(z.string(), z.unknown()).readonly().optional()
 });
 var CameraStepSettingsSchema = z.record(z.string(), z.record(z.string(), z.unknown()).readonly());
+/** The three root-detector choices a camera has (D507: at most one root). */
+var CameraDetectionSourceSchema = z.enum([
+	"pipeline",
+	"onboard",
+	"none"
+]);
 var CameraPipelineSettingsSchema = z.object({
 	stepToggles: z.record(z.string(), z.boolean()).optional(),
 	stepSettings: CameraStepSettingsSchema.optional(),
@@ -32232,6 +32460,41 @@ var pipelineOrchestratorCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Where this camera's first-level detections come from: this node's own
+		* root step (`pipeline`), the camera's onboard detector alone (`onboard`),
+		* or no root detector (`none`). A camera runs at most one root detector
+		* (D507), so there is no "both". Read from the camera's stored
+		* `detectionSources` — the one authority; `explicit` is false while the
+		* operator has never picked and the default stands.
+		*/
+		getCameraDetectionSource: method(z.object({ deviceId: z.number() }), z.object({
+			source: CameraDetectionSourceSchema,
+			explicit: z.boolean(),
+			onboard: z.object({
+				/** The camera has an onboard detector this system can read. */
+				available: z.boolean(),
+				/** What its detections carry — a camera with no box cannot be a root step. */
+				geometry: z.enum([
+					"boxed",
+					"while-streaming",
+					"flag-only",
+					"unknown"
+				])
+			})
+		})),
+		/**
+		* Pick where this camera's detections come from. Writes `detectionSources`
+		* and arms (or disarms) the vendor's boxed sub-stream that the choice
+		* drives. Refuses `onboard` on a camera with no onboard detector.
+		*/
+		setCameraDetectionSource: method(z.object({
+			deviceId: z.number(),
+			source: CameraDetectionSourceSchema
+		}), z.object({ success: z.literal(true) }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Read every per-(node,device) override map for a device. Null when device has no overrides. */
 		getCameraStepOverrides: method(z.object({ deviceId: z.number() }), z.record(z.string(), z.record(z.string(), z.record(z.string(), CameraStepOverridePatchSchema))).nullable()),
 		/**
@@ -42089,7 +42352,14 @@ var TopologyNodeSchema = z.object({
 	* completed a mutual-TLS handshake, `clear` otherwise. Absent for the hub,
 	* for offline rows and when the hub cannot tell.
 	*/
-	meshTransport: z.enum(["tls", "clear"]).optional()
+	meshTransport: z.enum(["tls", "clear"]).optional(),
+	/**
+	* Whether the hub holds this online AGENT's capability registration (its
+	* `registerNode` manifest). `false` = online in the mesh but not ready: the
+	* hub dropped the registration on a disconnect only it saw and the agent has
+	* not re-sent it. Absent for the hub and offline rows.
+	*/
+	capabilitiesRegistered: z.boolean().optional()
 });
 var CapUsageEdgeSchema = z.object({
 	callerAddonId: z.string(),
@@ -52801,6 +53071,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"dataStoreProvider.transact": {
+		capName: "data-store-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"dataStoreProvider.update": {
 		capName: "data-store-provider",
 		capScope: "system",
@@ -55645,6 +55921,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.backfillRetrainOrigins": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.cancelRelocateMedia": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -56425,6 +56707,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getCameraDetectionSource": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getCameraMetrics": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -56653,6 +56941,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setCameraDetectionSource": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.setCameraPipelineForAgent": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -57625,6 +57919,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"settingsStore.transact": {
+		capName: "settings-store",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"settingsStore.update": {
 		capName: "settings-store",
 		capScope: "system",
@@ -58105,6 +58405,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"streamBroker.getLiveViewerCounts": {
+		capName: "stream-broker",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"streamBroker.getPreBufferInfo": {
 		capName: "stream-broker",
 		capScope: "system",
@@ -62205,6 +62511,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineAnalytics.backfillRetrainOrigins": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineAnalytics.clearTrackRelation": [{
 		name: "deviceId",
 		form: "single",
@@ -62510,6 +62821,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineOrchestrator.getCameraDetectionSource": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineOrchestrator.getCameraMetrics": [{
 		name: "deviceId",
 		form: "single",
@@ -62570,6 +62886,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineOrchestrator.setCameraDetectionSource": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineOrchestrator.setCameraPipelineForAgent": [{
 		name: "deviceId",
 		form: "single",