@trillboards/edge-sdk 0.2.3 → 0.2.6

package/dist/AudienceAnalyzeClient.js

@@ -0,0 +1,246 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultHttpPoster = exports.AudienceAnalyzeClient = void 0;
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const url_1 = require("url");
+const crypto_1 = require("crypto");
+class AudienceAnalyzeClient {
+    constructor(options, poster) {
+        if (!options.apiBaseUrl) {
+            throw new Error('apiBaseUrl is required for AudienceAnalyzeClient');
+        }
+        if (!options.deviceToken) {
+            throw new Error('deviceToken is required for AudienceAnalyzeClient');
+        }
+        const base = options.apiBaseUrl.replace(/\/+$/, '');
+        this.endpoint = `${base}/v2/earner/audience-analyze`;
+        this.deviceToken = options.deviceToken;
+        this.screenId = options.screenId;
+        this.fingerprint = options.fingerprint;
+        this.timeoutMs = options.timeoutMs ?? 30000;
+        this.imageWidth = options.imageWidth;
+        this.imageHeight = options.imageHeight;
+        this.poster = poster ?? exports.defaultHttpPoster;
+    }
+    /** The resolved POST URL (exposed for assertions / logging). */
+    getEndpoint() {
+        return this.endpoint;
+    }
+    authHeaders() {
+        return {
+            'Content-Type': 'application/json',
+            Accept: 'application/json',
+            // Device-request auth + replay guard (see middleware/deviceRequestAuth.js).
+            'X-Device-Token': this.deviceToken,
+            'X-Trillboard-Device-Token': this.deviceToken,
+            'X-Device-Timestamp': String(Date.now()),
+            'X-Device-Nonce': (0, crypto_1.randomUUID)(),
+        };
+    }
+    /**
+     * POST a JPEG frame for cloud audience analysis. Returns the parsed response.
+     */
+    async analyze(request) {
+        if (!request?.jpeg || request.jpeg.length === 0) {
+            throw new Error('analyze() requires a non-empty jpeg buffer');
+        }
+        const capturedAt = request.capturedAt ?? Date.now();
+        const imageBase64 = request.jpeg.toString('base64');
+        const payload = {
+            imageBase64,
+            capturedAt,
+            ...(this.screenId ? { screenId: this.screenId } : {}),
+            ...(this.fingerprint ? { fingerprint: this.fingerprint } : {}),
+            ...(this.imageWidth ? { imageWidth: this.imageWidth } : {}),
+            ...(this.imageHeight ? { imageHeight: this.imageHeight } : {}),
+            ...(request.captureMode ? { captureMode: request.captureMode } : {}),
+            ...(request.extra || {}),
+        };
+        const body = JSON.stringify(payload);
+        const result = await this.poster(this.endpoint, { method: 'POST', headers: this.authHeaders(), timeoutMs: this.timeoutMs }, body);
+        let parsed = null;
+        try {
+            parsed = result.body ? JSON.parse(result.body) : null;
+        }
+        catch {
+            parsed = null;
+        }
+        return {
+            statusCode: result.statusCode,
+            ok: result.statusCode >= 200 && result.statusCode < 300,
+            body: parsed,
+            rawBody: result.body,
+        };
+    }
+    /**
+     * POST a PRE-ANALYZED structured result (computed ON-DEVICE by
+     * LiteRtVlmProvider) to the same audience-analyze endpoint. The server detects
+     * `preAnalyzed`, SKIPS the cloud VLM, and ingests the result directly —
+     * forcing provenance `local_connector` server-side so it drives the
+     * operator's Sense-Anything routes but is gated out of the sold bidstream.
+     * Same device-token auth + replay guard as analyze().
+     *
+     * EVIDENCE FRAME (optional): when `jpeg` (raw bytes) or `imageBase64` (already
+     * base64) is supplied, the SAME JPEG the on-device VLM analyzed is included as
+     * `imageBase64` ALONGSIDE `preAnalyzed`. The server uploads it and attaches it
+     * to any alert the result fires. The caller decides WHETHER to attach it — the
+     * connector only sends a frame for alert-worthy observations (see
+     * localSensing.ts), so this method just forwards what it's given. When neither
+     * is passed, NO `imageBase64` is sent (results-only, privacy-preserving
+     * default for empty/uninteresting scenes).
+     */
+    async analyzePreAnalyzed(preAnalyzed, request = {}) {
+        if (!preAnalyzed || typeof preAnalyzed !== 'object') {
+            throw new Error('analyzePreAnalyzed() requires a structured result object');
+        }
+        const capturedAt = request.capturedAt ?? Date.now();
+        // Attach the evidence frame ONLY when one was supplied (an alert-worthy
+        // frame). Prefer raw bytes (encode here, mirroring analyze()); accept a
+        // pre-encoded string too. An empty buffer / empty string is treated as "no
+        // frame" so we never send a blank imageBase64.
+        let imageBase64;
+        if (request.jpeg && request.jpeg.length > 0) {
+            imageBase64 = request.jpeg.toString('base64');
+        }
+        else if (typeof request.imageBase64 === 'string' && request.imageBase64.length > 0) {
+            imageBase64 = request.imageBase64;
+        }
+        const payload = {
+            preAnalyzed,
+            capturedAt,
+            ...(imageBase64 ? { imageBase64 } : {}),
+            ...(this.screenId ? { screenId: this.screenId } : {}),
+            ...(this.fingerprint ? { fingerprint: this.fingerprint } : {}),
+            ...(request.captureMode ? { captureMode: request.captureMode } : {}),
+            ...(request.extra || {}),
+        };
+        const result = await this.poster(this.endpoint, { method: 'POST', headers: this.authHeaders(), timeoutMs: this.timeoutMs }, JSON.stringify(payload));
+        let parsed = null;
+        try {
+            parsed = result.body ? JSON.parse(result.body) : null;
+        }
+        catch {
+            parsed = null;
+        }
+        return {
+            statusCode: result.statusCode,
+            ok: result.statusCode >= 200 && result.statusCode < 300,
+            body: parsed,
+            rawBody: result.body,
+        };
+    }
+    /**
+     * POST a FRAMELESS camera-health beacon. This is used when the connector can
+     * pair but cannot open the RTSP stream, so the portal can show "Camera login
+     * failed" / "not reachable" instead of looking like the connector is absent.
+     */
+    async reportCameraHealth(cameraHealth) {
+        if (!cameraHealth || typeof cameraHealth !== 'object') {
+            throw new Error('reportCameraHealth() requires a cameraHealth object');
+        }
+        const payload = {
+            cameraHealth,
+            ...(this.screenId ? { screenId: this.screenId } : {}),
+            ...(this.fingerprint ? { fingerprint: this.fingerprint } : {}),
+        };
+        const result = await this.poster(this.endpoint, {
+            method: 'POST',
+            headers: this.authHeaders(),
+            timeoutMs: this.timeoutMs,
+        }, JSON.stringify(payload));
+        return parseAnalyzeResponse(result);
+    }
+}
+exports.AudienceAnalyzeClient = AudienceAnalyzeClient;
+function parseAnalyzeResponse(result) {
+    let parsed = null;
+    try {
+        parsed = result.body ? JSON.parse(result.body) : null;
+    }
+    catch {
+        parsed = null;
+    }
+    return {
+        statusCode: result.statusCode,
+        ok: result.statusCode >= 200 && result.statusCode < 300,
+        body: parsed,
+        rawBody: result.body,
+    };
+}
+/**
+ * Default transport using Node's built-in http/https. No third-party deps so it
+ * survives bundling into a single self-contained binary.
+ */
+const defaultHttpPoster = (url, options, body) => {
+    return new Promise((resolve, reject) => {
+        let parsed;
+        try {
+            parsed = new url_1.URL(url);
+        }
+        catch (err) {
+            reject(new Error(`Invalid audience-analyze URL: ${err.message}`));
+            return;
+        }
+        const mod = parsed.protocol === 'https:' ? https : http;
+        const bodyBuffer = Buffer.from(body, 'utf-8');
+        const req = mod.request(url, {
+            method: options.method,
+            headers: {
+                ...options.headers,
+                'Content-Length': String(bodyBuffer.length),
+            },
+            timeout: options.timeoutMs,
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (chunk) => chunks.push(chunk));
+            res.on('end', () => {
+                resolve({
+                    statusCode: res.statusCode || 0,
+                    body: Buffer.concat(chunks).toString('utf-8'),
+                });
+            });
+        });
+        req.on('error', (err) => reject(err));
+        req.on('timeout', () => {
+            req.destroy(new Error('audience-analyze request timed out'));
+        });
+        req.write(bodyBuffer);
+        req.end();
+    });
+};
+exports.defaultHttpPoster = defaultHttpPoster;
+//# sourceMappingURL=AudienceAnalyzeClient.js.map

package/dist/AudienceAnalyzeClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AudienceAnalyzeClient.js","sourceRoot":"","sources":["../src/AudienceAnalyzeClient.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAC7B,6CAA+B;AAC/B,6BAA0B;AAC1B,mCAAoC;AAmGpC,MAAa,qBAAqB;IAUhC,YAAY,OAAqC,EAAE,MAAmB;QACpE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,GAAG,IAAI,6BAA6B,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAM,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,yBAAiB,CAAC;IAC5C,CAAC;IAED,gEAAgE;IAChE,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,WAAW;QACjB,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;YAC1B,4EAA4E;YAC5E,gBAAgB,EAAE,IAAI,CAAC,WAAW;YAClC,2BAA2B,EAAE,IAAI,CAAC,WAAW;YAC7C,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACxC,gBAAgB,EAAE,IAAA,mBAAU,GAAE;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAA+B;QAC3C,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEpD,MAAM,OAAO,GAA4B;YACvC,WAAW;YACX,UAAU;YACV,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACzB,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,QAAQ,EACb,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC1E,IAAI,CACL,CAAC;QAEF,IAAI,MAAM,GAAmC,IAAI,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,EAAE,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,GAAG;YACvD,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,MAAM,CAAC,IAAI;SACrB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,kBAAkB,CACtB,WAAoC,EACpC,UAQI,EAAE;QAEN,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpD,wEAAwE;QACxE,wEAAwE;QACxE,2EAA2E;QAC3E,+CAA+C;QAC/C,IAAI,WAA+B,CAAC;QACpC,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrF,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACpC,CAAC;QACD,MAAM,OAAO,GAA4B;YACvC,WAAW;YACX,UAAU;YACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACzB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,QAAQ,EACb,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAC1E,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;QAEF,IAAI,MAAM,GAAmC,IAAI,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,EAAE,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,GAAG;YACvD,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,MAAM,CAAC,IAAI;SACrB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,YAAgC;QACvD,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAA4B;YACvC,YAAY;YACZ,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,IAAI,CAAC,QAAQ,EACb;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,EACD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;QAEF,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;CACF;AAjMD,sDAiMC;AAED,SAAS,oBAAoB,CAAC,MAA4C;IACxE,IAAI,MAAM,GAAmC,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,EAAE,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,GAAG;QACvD,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,MAAM,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACI,MAAM,iBAAiB,GAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAClE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,SAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE9C,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CACrB,GAAG,EACH;YACE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE;gBACP,GAAG,OAAO,CAAC,OAAO;gBAClB,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;aAC5C;YACD,OAAO,EAAE,OAAO,CAAC,SAAS;SAC3B,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,OAAO,CAAC;oBACN,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;iBAC9C,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AA3CW,QAAA,iBAAiB,qBA2C5B"}

package/dist/ChannelProber.d.ts

@@ -0,0 +1,150 @@
+import { spawn } from 'child_process';
+import type { HttpPoster } from './AudienceAnalyzeClient';
+/**
+ * ChannelProber — validate a recorder's channels BEFORE any screen exists.
+ * The engine behind the setup-session `probe` command, built NVR-SAFE per the
+ * adversarial review of the onboarding redesign:
+ *
+ *   AUTH CIRCUIT-BREAKER: ONVIF and RTSP can use different auth realms. An
+ *   ONVIF rejection therefore falls back to exactly ONE bounded RTSP proof;
+ *   an RTSP 401 then stops the host. This avoids false "wrong password" errors
+ *   without fanning bad credentials across channels (≤2 auth touches/host).
+ *
+ *   SESSION-SLOT SAFETY: consumer NVRs cap concurrent RTSP pulls (main stream
+ *   often 1-2) and a 16-way fan-out can evict the recorder's own live view.
+ *   Per-host concurrency is capped (default 1) and SUBSTREAM is tried first.
+ *
+ *   REAL ENUMERATION: with ONVIF creds accepted, channels come from
+ *   GetProfiles + GetStreamUri (actual URIs — no path guessing, the Hiten
+ *   /Streaming/Channels/101 assumption bug). Without ONVIF, a widened
+ *   brand-candidate library covers the US SMB installed base, walking
+ *   channels until MAX_CONSECUTIVE_DEAD in a row (no hand-typed counts).
+ *
+ *   STABLE IDENTITY: channelKey = `onvif:<serial>:<sourceToken>` when the
+ *   device exposes a serial (survives DHCP), else `nvr:<sha1(host:port:ch)>`
+ *   — this becomes the server-side cameraKey, making re-onboarding reuse the
+ *   same screens (the junk-camera fix). Names are NEVER part of the key.
+ *
+ * Every validated channel returns a small JPEG thumbnail (the wizard's "you
+ * can SEE it works" moment); every failure carries a failureClass the portal
+ * maps to a concrete action — including `rtsp_forbidden` (ONVIF creds OK but
+ * RTSP denied: the account lacks live-view permission; re-typing the password
+ * forever, which is what the generic copy caused, can never fix it).
+ */
+export type ProbeStatus = 'validated' | 'failed' | 'empty';
+export type ProbeFailureClass = 'rtsp_auth' | 'rtsp_forbidden' | 'rtsp_unreachable' | 'rtsp_timeout' | 'bad_path' | 'nvr_busy' | 'no_frames' | 'decode_error' | 'empty_channel';
+type RtspTransport = 'tcp' | 'udp';
+export interface ChannelProbeResult {
+    channelKey: string;
+    status: ProbeStatus;
+    failureClass?: ProbeFailureClass;
+    message?: string;
+    name?: string;
+    brand?: string;
+    sourceType?: 'recorder' | 'direct_url';
+    host: string;
+    port: number;
+    channel?: number;
+    serial?: string;
+    profileToken?: string;
+    /** RTSP path WITHOUT credentials/host — the server stores only this. */
+    pathTemplate?: string;
+    transport?: 'tcp' | 'udp';
+    thumbnailBase64?: string;
+}
+export interface ProbeTarget {
+    host: string;
+    port?: number;
+    onvifPort?: number;
+    username: string;
+    password: string;
+    brandHint?: string;
+    channelHint?: number;
+}
+export interface ProbeOptions {
+    ffmpegPath?: string;
+    /** Per-host concurrent RTSP grabs. Default 1 (legacy recorder session-slot safety). */
+    concurrency?: number;
+    /** Per-grab budget. Default 6s connect+frame. */
+    grabTimeoutMs?: number;
+    /** Hard budget for the whole host probe. Default 90s (first-pass SLO). */
+    totalBudgetMs?: number;
+    /** Stop walking brand-candidate channels after N consecutive dead. Default 4. */
+    maxConsecutiveDead?: number;
+    /** Max channels to walk without ONVIF enumeration. Default 32. */
+    maxChannels?: number;
+    poster?: HttpPoster;
+    spawner?: typeof spawn;
+    onResult?: (r: ChannelProbeResult) => void | Promise<void>;
+}
+/** Stable, name-free channel identity → the server-side cameraKey. */
+export declare function channelKeyFor(parts: {
+    serial?: string | null;
+    sourceToken?: string | null;
+    profileToken?: string | null;
+    host: string;
+    port: number;
+    channel?: number;
+}): string;
+/**
+ * Brand RTSP path candidates, SUBSTREAM FIRST (cheaper session slot; good
+ * enough for validation), widened to the US SMB installed base per the
+ * product review (Hikvision/Dahua/Reolink alone missed Lorex/Swann/XMeye-class
+ * recorders — exactly what gas stations bought retail).
+ */
+export declare function normalizeRecorderBrandHint(brand: string | undefined): string | undefined;
+export declare function brandPathCandidates(brand: string | undefined, ch: number, credentials?: {
+    username: string;
+    password: string;
+}): string[];
+/** Remove XM query credentials before a probe result leaves the connector. */
+export declare function credentialFreePathTemplate(pathValue: string, brand: string | undefined): string;
+/** Restore a credential-free path recipe while writing the local-only config. */
+export declare function materializeCredentialPathTemplate(pathTemplate: string, username: string, password: string): string;
+/** Percent-encode credentials into an rtsp:// URL (the Hiten `pass@123` class). */
+export declare function buildRtspUrl(host: string, port: number, path: string, username: string, password: string): string;
+/** Inject creds into an ONVIF-returned rtsp URI (they usually come credless). */
+export declare function injectCreds(uri: string, username: string, password: string): string;
+/** Strip credentials+host → the storable path template. */
+export declare function pathTemplateOf(uri: string): string;
+export declare function directStreamChannelKey(streamUrl: string): string;
+export declare function sanitizeRtspUrlForLog(text: string): string;
+export interface FrameGrab {
+    ok: boolean;
+    failureClass?: ProbeFailureClass;
+    message?: string;
+    jpegBase64?: string;
+}
+export interface TransportFrameGrab extends FrameGrab {
+    transport?: RtspTransport;
+}
+/**
+ * Grab ONE frame (downscaled JPEG) from an RTSP URL via the bundled ffmpeg.
+ * `-timeout` (µs) is the rtsp demuxer's socket timeout — NOT `-rw_timeout`
+ * (the #7946 regression). Classification reads ffmpeg's stderr.
+ */
+export declare function grabOneFrame(rtspUrl: string, { ffmpegPath, timeoutMs, spawner, transport, }?: {
+    ffmpegPath?: string;
+    timeoutMs?: number;
+    spawner?: typeof spawn;
+    transport?: RtspTransport;
+}): Promise<FrameGrab>;
+export declare function grabOneFrameAnyTransport(rtspUrl: string, opts: {
+    ffmpegPath?: string;
+    timeoutMs?: number;
+    spawner?: typeof spawn;
+}): Promise<TransportFrameGrab>;
+/** Map ffmpeg's stderr to a failure class the portal can act on. */
+export declare function classifyFfmpegStderr(stderr: string): {
+    failureClass: ProbeFailureClass;
+    message: string;
+};
+/**
+ * Probe one recorder. Streams results via opts.onResult as channels settle and
+ * returns the full list. NEVER throws for per-channel problems — only for
+ * programmer errors; credential rejection yields a single `rtsp_auth` result
+ * for the host (the circuit-breaker contract).
+ */
+export declare function probeHost(target: ProbeTarget, opts?: ProbeOptions): Promise<ChannelProbeResult[]>;
+export {};
+//# sourceMappingURL=ChannelProber.d.ts.map

package/dist/ChannelProber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChannelProber.d.ts","sourceRoot":"","sources":["../src/ChannelProber.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAMtC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAG1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE3D,MAAM,MAAM,iBAAiB,GACzB,WAAW,GACX,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,UAAU,GACV,UAAU,GACV,WAAW,GACX,cAAc,GACd,eAAe,CAAC;AAEpB,KAAK,aAAa,GAAG,KAAK,GAAG,KAAK,CAAC;AAMnC,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;IACpB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,sEAAsE;AACtE,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAOT;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CA+CxF;AAMD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,EAAE,EAAE,MAAM,EACV,WAAW,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnD,MAAM,EAAE,CA6HV;AAED,8EAA8E;AAC9E,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAM/F;AAED,iFAAiF;AACjF,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,CAIR;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKjH;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASnF;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAOlD;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAc1D;AA0DD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IACnD,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAQD;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,EACE,UAAU,EACV,SAAiB,EACjB,OAAe,EACf,SAAiB,GAClB,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,aAAa,CAAA;CAAO,GACrG,OAAO,CAAC,SAAS,CAAC,CAuEpB;AAWD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CAAE,GACxE,OAAO,CAAC,kBAAkB,CAAC,CAmB7B;AAED,oEAAoE;AACpE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,YAAY,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA8BzG;AAqCD;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CA0U3G"}