@trillboards/edge-sdk 0.2.3 → 0.2.6

package/deploy/windows/install-update.ps1

@@ -0,0 +1,101 @@
+<#
+  Validates a staged connector, stops the running copy, swaps bin/lib, registers
+  the new hidden task, and restores the previous runnable version on failure.
+#>
+[CmdletBinding()]
+param(
+  [Parameter(Mandatory = $true)][string]$InstallDir,
+  [Parameter(Mandatory = $true)][string]$StagingDir
+)
+
+$ErrorActionPreference = "Stop"
+$previousDir = Join-Path $InstallDir ".previous"
+$parts = @("bin", "lib")
+$movedPrevious = New-Object System.Collections.Generic.List[string]
+$movedStaged = New-Object System.Collections.Generic.List[string]
+
+function Assert-ConnectorVersion([string]$Root) {
+  $node = Join-Path $Root "bin\node.exe"
+  $cli = Join-Path $Root "lib\edge-sdk\dist\cli.js"
+  if (-not (Test-Path $node) -or -not (Test-Path $cli)) {
+    throw "The staged connector is incomplete."
+  }
+
+  $oldPath = $env:PATH
+  $oldNodePath = $env:NODE_PATH
+  try {
+    $env:PATH = "$(Join-Path $Root 'bin');$oldPath"
+    $env:NODE_PATH = Join-Path $Root "lib\node_modules"
+    $version = (& $node $cli version 2>&1 | Out-String).Trim()
+    if ($LASTEXITCODE -ne 0 -or $version -notmatch 'edge-sdk v') {
+      throw "Connector version check failed: $version"
+    }
+    Write-Host "Validated $version"
+  } finally {
+    $env:PATH = $oldPath
+    $env:NODE_PATH = $oldNodePath
+  }
+}
+
+function Register-Connector([string]$Root) {
+  $register = Join-Path $Root "bin\register-task.ps1"
+  & $register -InstallDir $InstallDir -Mode "auto-sense"
+  if ($LASTEXITCODE -ne 0) { throw "Scheduled-task registration failed." }
+}
+
+try {
+  Assert-ConnectorVersion $StagingDir
+  & (Join-Path $StagingDir "bin\stop-existing.ps1") -InstallDir $InstallDir
+
+  if (Test-Path $previousDir) { Remove-Item -Recurse -Force $previousDir }
+  New-Item -ItemType Directory -Force -Path $InstallDir, $previousDir | Out-Null
+
+  foreach ($part in $parts) {
+    $active = Join-Path $InstallDir $part
+    if (Test-Path $active) {
+      Move-Item -LiteralPath $active -Destination (Join-Path $previousDir $part)
+      $movedPrevious.Add($part)
+    }
+  }
+  foreach ($part in $parts) {
+    $staged = Join-Path $StagingDir $part
+    if (-not (Test-Path $staged)) { throw "Staged connector is missing $part." }
+    Move-Item -LiteralPath $staged -Destination (Join-Path $InstallDir $part)
+    $movedStaged.Add($part)
+  }
+
+  Assert-ConnectorVersion $InstallDir
+  Register-Connector $InstallDir
+  if (Test-Path (Join-Path $InstallDir "trillboards.config.json")) {
+    Start-ScheduledTask -TaskName "TrillboardsEdge" -ErrorAction Stop
+  }
+
+  Remove-Item -Recurse -Force $previousDir -ErrorAction SilentlyContinue
+  Remove-Item -Recurse -Force $StagingDir -ErrorAction SilentlyContinue
+  Write-Host "Trillboards Edge update installed successfully."
+} catch {
+  $failure = $_
+  try {
+    $stopScript = Join-Path $InstallDir "bin\stop-existing.ps1"
+    if (Test-Path $stopScript) { & $stopScript -InstallDir $InstallDir }
+  } catch {}
+
+  foreach ($part in $movedStaged) {
+    Remove-Item -Recurse -Force (Join-Path $InstallDir $part) -ErrorAction SilentlyContinue
+  }
+  foreach ($part in $movedPrevious) {
+    $backup = Join-Path $previousDir $part
+    if (Test-Path $backup) {
+      Move-Item -LiteralPath $backup -Destination (Join-Path $InstallDir $part)
+    }
+  }
+  if ($movedPrevious.Count -gt 0) {
+    try {
+      Register-Connector $InstallDir
+      if (Test-Path (Join-Path $InstallDir "trillboards.config.json")) {
+        Start-ScheduledTask -TaskName "TrillboardsEdge" -ErrorAction SilentlyContinue
+      }
+    } catch {}
+  }
+  throw "Trillboards Edge update failed and the previous version was restored: $($failure.Exception.Message)"
+}

package/deploy/windows/installer.nsi

@@ -0,0 +1,138 @@
+; installer.nsi — Trillboards Edge on-device (local-sense) CCTV connector (Windows).
+; Per-user, no-admin install (RequestExecutionLevel user) that mirrors the
+; home-domain macOS .pkg: lays down the self-contained tree under
+; %LOCALAPPDATA%\Trillboards\edge, registers a per-user Scheduled Task that
+; runs local-first auto-sense at logon, installs the model supplied by the outer
+; signed customer package, verifies local AI, then opens first-run pairing.
+;
+; The release workflow Authenticode-signs and verifies the finished executable
+; with Azure Trusted Signing before publishing it to the customer CDN.
+;
+; Driven by build-windows.ps1 with:
+;   makensis /DPAYLOAD_DIR=<stage>\Trillboards\edge /DAPP_VERSION=<ver> /DOUT_FILE=<exe> installer.nsi
+
+!ifndef PAYLOAD_DIR
+  !error "PAYLOAD_DIR not defined (pass /DPAYLOAD_DIR=...)"
+!endif
+!ifndef APP_VERSION
+  !define APP_VERSION "0.0.0"
+!endif
+!ifndef OUT_FILE
+  !define OUT_FILE "TrillboardsEdgeSetup.exe"
+!endif
+
+!define APP_NAME "Trillboards Edge - CCTV Connector"
+!define TASK_NAME "TrillboardsEdge"
+!define LITERT_TASK_NAME "TrillboardsLiteRtLm"
+
+Var ModelSource
+
+Name "${APP_NAME}"
+OutFile "${OUT_FILE}"
+Unicode True
+RequestExecutionLevel user                 ; per-user, no admin/UAC
+InstallDir "$LOCALAPPDATA\Trillboards\edge"
+SetCompressor /SOLID lzma
+ShowInstDetails show
+BrandingText "Trillboards"
+
+!include "MUI2.nsh"
+!include "FileFunc.nsh"
+
+!define MUI_ABORTWARNING
+!define MUI_WELCOMEPAGE_TITLE "Connect your camera to Trillboards"
+!define MUI_WELCOMEPAGE_TEXT "This installs the Trillboards camera connector and private local AI included with it. Camera pairing opens after both are installed and verified. Cloud inference stays off unless explicitly enabled."
+!insertmacro MUI_PAGE_WELCOME
+!insertmacro MUI_PAGE_INSTFILES
+
+; Finish page: launch the native Windows Forms setup app through wscript. The
+; setup engine and its cmd wrapper run with CreateNoWindow, so no console flashes.
+!define MUI_FINISHPAGE_RUN "$INSTDIR\bin\trillboards-setup.vbs"
+!define MUI_FINISHPAGE_RUN_TEXT "Set up my CCTV cameras now"
+!define MUI_FINISHPAGE_TEXT "The connector and private local AI are installed. Continue in the Trillboards CCTV Setup app to pair your cameras."
+!insertmacro MUI_PAGE_FINISH
+
+!insertmacro MUI_UNPAGE_CONFIRM
+!insertmacro MUI_UNPAGE_INSTFILES
+!insertmacro MUI_LANGUAGE "English"
+
+Function .onInit
+  ; The SFX launcher supplies a process-scoped environment value so paths with
+  ; spaces are unambiguous. Keep the command-line option as an engineering and
+  ; recovery fallback.
+  ReadEnvStr $ModelSource "TRILLBOARDS_BUNDLED_MODEL_PATH"
+  ${If} $ModelSource == ""
+    ${GetParameters} $0
+    ${GetOptions} $0 "/MODEL_SOURCE=" $ModelSource
+  ${EndIf}
+  ${If} $ModelSource == ""
+    MessageBox MB_ICONSTOP|MB_OK "This installer is missing its included local AI model. Download the complete Trillboards CCTV installer and try again."
+    Abort
+  ${EndIf}
+FunctionEnd
+
+Section "Install"
+  ; Copy and validate beside the live install first. install-update.ps1 then
+  ; stops the task, swaps bin/lib atomically, verifies again, and restores the
+  ; previous runnable version if registration fails. The root-level camera
+  ; config is never moved or overwritten.
+  RMDir /r "$INSTDIR\.update-staging"
+  SetOutPath "$INSTDIR\.update-staging"
+  File /r "${PAYLOAD_DIR}\*"
+
+  InitPluginsDir
+  File /oname=$PLUGINSDIR\install-update.ps1 "${PAYLOAD_DIR}\bin\install-update.ps1"
+  DetailPrint "Validating and updating the background connector..."
+  nsExec::ExecToLog 'powershell -NoProfile -ExecutionPolicy Bypass -File "$PLUGINSDIR\install-update.ps1" -InstallDir "$INSTDIR" -StagingDir "$INSTDIR\.update-staging"'
+  Pop $0
+  ${If} $0 != 0
+    MessageBox MB_ICONSTOP|MB_OK "Trillboards CCTV setup could not be updated safely. Your previous connector was restored. Please retry the installer."
+    Abort
+  ${EndIf}
+  SetOutPath "$INSTDIR"
+
+  ; The outer signed self-extractor passes its checksum-pinned model here. This
+  ; is synchronous and required: pairing is never offered while AI is absent or
+  ; still downloading in the background.
+  ${IfNot} ${FileExists} "$ModelSource"
+    MessageBox MB_ICONSTOP|MB_OK "The local AI model included with this installer could not be found. Download a fresh Trillboards CCTV installer."
+    Abort
+  ${EndIf}
+  DetailPrint "Installing and verifying private local AI..."
+  nsExec::ExecToLog '"$WINDIR\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -File "$INSTDIR\bin\setup-litertlm.ps1" -BundledModelPath "$ModelSource" -RequireBundledModel'
+  Pop $0
+  ${If} $0 != 0
+    MessageBox MB_ICONSTOP|MB_OK "Private local AI could not be installed. Camera pairing has not started. Download a fresh installer or contact Trillboards support."
+    Abort
+  ${EndIf}
+  DetailPrint "Private local AI is installed and healthy."
+
+  ; Start Menu shortcuts.
+  CreateDirectory "$SMPROGRAMS\Trillboards"
+  CreateShortcut "$SMPROGRAMS\Trillboards\Trillboards CCTV Setup.lnk" "$WINDIR\System32\wscript.exe" '$\"$INSTDIR\bin\trillboards-setup.vbs$\"'
+  CreateShortcut "$SMPROGRAMS\Trillboards\Uninstall Trillboards Edge.lnk" "$INSTDIR\uninstall.exe"
+
+  ; Uninstaller + Add/Remove Programs entry (per-user hive).
+  WriteUninstaller "$INSTDIR\uninstall.exe"
+  WriteRegStr HKCU "Software\Microsoft\Windows\CurrentVersion\Uninstall\TrillboardsEdge" "DisplayName" "${APP_NAME}"
+  WriteRegStr HKCU "Software\Microsoft\Windows\CurrentVersion\Uninstall\TrillboardsEdge" "UninstallString" "$\"$INSTDIR\uninstall.exe$\""
+  WriteRegStr HKCU "Software\Microsoft\Windows\CurrentVersion\Uninstall\TrillboardsEdge" "DisplayVersion" "${APP_VERSION}"
+  WriteRegStr HKCU "Software\Microsoft\Windows\CurrentVersion\Uninstall\TrillboardsEdge" "Publisher" "Trillboards"
+  WriteRegDWORD HKCU "Software\Microsoft\Windows\CurrentVersion\Uninstall\TrillboardsEdge" "NoModify" 1
+  WriteRegDWORD HKCU "Software\Microsoft\Windows\CurrentVersion\Uninstall\TrillboardsEdge" "NoRepair" 1
+SectionEnd
+
+Section "Uninstall"
+  ; Stop + remove the background tasks (connector + litert-lm serve).
+  nsExec::ExecToLog 'powershell -NoProfile -ExecutionPolicy Bypass -File "$INSTDIR\bin\stop-existing.ps1" -InstallDir "$INSTDIR"'
+  nsExec::ExecToLog 'schtasks /End /TN "${TASK_NAME}"'
+  nsExec::ExecToLog 'schtasks /Delete /F /TN "${TASK_NAME}"'
+  nsExec::ExecToLog 'schtasks /End /TN "${LITERT_TASK_NAME}"'
+  nsExec::ExecToLog 'schtasks /Delete /F /TN "${LITERT_TASK_NAME}"'
+  Delete "$SMPROGRAMS\Trillboards\Pair a camera.lnk"
+  Delete "$SMPROGRAMS\Trillboards\Trillboards CCTV Setup.lnk"
+  Delete "$SMPROGRAMS\Trillboards\Uninstall Trillboards Edge.lnk"
+  RMDir "$SMPROGRAMS\Trillboards"
+  RMDir /r "$INSTDIR"
+  DeleteRegKey HKCU "Software\Microsoft\Windows\CurrentVersion\Uninstall\TrillboardsEdge"
+SectionEnd

package/deploy/windows/register-litertlm-task.ps1

@@ -0,0 +1,42 @@
+<#
+  register-litertlm-task.ps1 — register the per-user Scheduled Task that runs the
+  LiteRT-LM on-device VLM server (Gemma 4 E2B) at logon, with crash-restart.
+  Per-user + Interactive logon type → NO admin/UAC (mirrors the macOS
+  com.trillboards.litertlm LaunchAgent: KeepAlive=true + ThrottleInterval=30).
+  The connector's LiteRtVlmProvider talks to the OpenAI-compatible endpoint on
+  127.0.0.1:<Port>. Invoked by setup-litertlm.ps1.
+#>
+param(
+  [Parameter(Mandatory = $true)][string]$LitertLmPath,
+  [string]$Port = "9379"
+)
+$ErrorActionPreference = "Stop"
+
+$TaskName = "TrillboardsLiteRtLm"
+$UserId = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+# litert-lm serve --host 127.0.0.1 --port <port>  (loopback only — the connector
+# is local; never expose the model server off-box).
+$argument = 'serve --host 127.0.0.1 --port ' + $Port
+$Action  = New-ScheduledTaskAction  -Execute $LitertLmPath -Argument $argument
+$Trigger = New-ScheduledTaskTrigger -AtLogOn -User $UserId
+# RestartCount/Interval == the plist's ThrottleInterval crash-loop guard (e.g.
+# while the ~2.4 GB model is still importing on first run); Zero time limit ==
+# the always-on KeepAlive serve endpoint.
+$Settings = New-ScheduledTaskSettingsSet -RestartCount 3 -RestartInterval (New-TimeSpan -Minutes 1) `
+  -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable `
+  -ExecutionTimeLimit ([TimeSpan]::Zero)
+$Principal = New-ScheduledTaskPrincipal -UserId $UserId -LogonType Interactive -RunLevel Limited
+
+Unregister-ScheduledTask -TaskName $TaskName -Confirm:$false -ErrorAction SilentlyContinue
+Register-ScheduledTask -TaskName $TaskName -Action $Action -Trigger $Trigger -Settings $Settings `
+  -Principal $Principal -Description "Trillboards LiteRT-LM - on-device Gemma VLM server (:$Port)" | Out-Null
+
+$registered = Get-ScheduledTask -TaskName $TaskName -ErrorAction SilentlyContinue
+if (-not $registered) {
+  Write-Error "Scheduled task '$TaskName' did NOT register (Get-ScheduledTask found nothing)."
+  exit 1
+}
+
+# Start it now (don't wait for the next logon) so first-run sensing has a server.
+Start-ScheduledTask -TaskName $TaskName
+Write-Host "Registered scheduled task '$TaskName' (litert-lm serve on :$Port, restarts on failure)."

package/deploy/windows/register-task.ps1

@@ -0,0 +1,44 @@
+<#
+  register-task.ps1 — register the per-user Scheduled Task that runs the
+  Trillboards local-first connector at logon (with crash-restart). Per-user +
+  Interactive logon type so NO admin/UAC is required (mirrors the home-domain,
+  no-sudo macOS LaunchAgent). Invoked by the NSIS installer post-copy.
+#>
+param(
+  [Parameter(Mandatory = $true)][string]$InstallDir,
+  # Default to auto-sense: use on-device Gemma (LiteRT-LM) and wait locally while
+  # the model is provisioning. cloud-sense remains an explicit operator choice.
+  [ValidateSet("auto-sense", "local-sense", "cloud-sense")][string]$Mode = "auto-sense"
+)
+$ErrorActionPreference = "Stop"
+
+$TaskName = "TrillboardsEdge"
+$UserId = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+$taskHost = Join-Path $InstallDir "bin\trillboards-edge-task.vbs"
+$wscript = Join-Path $env:WINDIR "System32\wscript.exe"
+
+# wscript owns the task lifetime, launches the connector with window style 0,
+# waits for it, and returns its exit code. Task Scheduler can therefore restart
+# crashes without exposing cmd.exe or PowerShell to the customer.
+$argument = '"' + $taskHost + '" "' + $Mode + '"'
+$Action = New-ScheduledTaskAction -Execute $wscript -Argument $argument -WorkingDirectory $InstallDir
+$Trigger = New-ScheduledTaskTrigger -AtLogOn -User $UserId
+$Settings = New-ScheduledTaskSettingsSet -RestartCount 99 -RestartInterval (New-TimeSpan -Minutes 1) `
+  -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -StartWhenAvailable `
+  -ExecutionTimeLimit ([TimeSpan]::Zero)   # no time limit — sensing runs continuously
+$Principal = New-ScheduledTaskPrincipal -UserId $UserId -LogonType Interactive -RunLevel Limited
+
+Unregister-ScheduledTask -TaskName $TaskName -Confirm:$false -ErrorAction SilentlyContinue
+Register-ScheduledTask -TaskName $TaskName -Action $Action -Trigger $Trigger -Settings $Settings `
+  -Principal $Principal -Description "Trillboards Edge - CCTV $Mode connector" | Out-Null
+
+# VERIFY the registration landed instead of trusting Register-ScheduledTask's
+# silence — a silently-missing task is exactly how a real 16-camera install
+# ended up paired with zero frames (the pairing helper then claimed success).
+# Callers (installer.nsi, trillboards-pair.cmd's self-repair) branch on our
+# exit code, so fail LOUDLY here.
+$registered = Get-ScheduledTask -TaskName $TaskName -ErrorAction SilentlyContinue
+if (-not $registered) {
+  throw "Scheduled task '$TaskName' did NOT register (Get-ScheduledTask found nothing)."
+}
+Write-Host "Registered scheduled task '$TaskName' (runs $Mode at logon, restarts on failure)."

package/deploy/windows/run-connector.ps1

@@ -0,0 +1,69 @@
+<#
+  Hidden connector supervisor. It merges stdout/stderr into one pipe and owns
+  the log file, allowing size-based rotation while the connector runs 24/7.
+#>
+[CmdletBinding()]
+param(
+  [Parameter(Mandatory = $true)][string]$InstallDir,
+  [ValidateSet("auto-sense", "local-sense", "cloud-sense")][string]$Mode = "auto-sense"
+)
+
+$ErrorActionPreference = "Stop"
+$logDir = Join-Path $InstallDir "logs"
+$logPath = Join-Path $logDir "connector.log"
+$launcher = Join-Path $InstallDir "bin\trillboards-edge.cmd"
+$configPath = Join-Path $InstallDir "trillboards.config.json"
+$maxLogBytes = 5MB
+New-Item -ItemType Directory -Force -Path $logDir | Out-Null
+
+function Move-ConnectorLogs {
+  if (Test-Path "$logPath.3") { Remove-Item -Force "$logPath.3" }
+  for ($index = 2; $index -ge 1; $index--) {
+    $source = "$logPath.$index"
+    $target = "$logPath.$($index + 1)"
+    if (Test-Path $source) { Move-Item -Force $source $target }
+  }
+  if (Test-Path $logPath) { Move-Item -Force $logPath "$logPath.1" }
+}
+
+if ((Test-Path $logPath) -and (Get-Item $logPath).Length -ge $maxLogBytes) {
+  Move-ConnectorLogs
+}
+
+$writer = $null
+$process = $null
+try {
+  $writer = New-Object System.IO.StreamWriter($logPath, $true, (New-Object System.Text.UTF8Encoding($false)))
+  $writer.AutoFlush = $true
+
+  $startInfo = New-Object System.Diagnostics.ProcessStartInfo
+  $startInfo.FileName = $env:ComSpec
+  $startInfo.Arguments = '/d /s /c ""' + $launcher + '" ' + $Mode + ' --config "' + $configPath + '" 2>&1"'
+  $startInfo.WorkingDirectory = $InstallDir
+  $startInfo.UseShellExecute = $false
+  $startInfo.CreateNoWindow = $true
+  $startInfo.RedirectStandardOutput = $true
+
+  $process = New-Object System.Diagnostics.Process
+  $process.StartInfo = $startInfo
+  if (-not $process.Start()) { throw "The Trillboards connector did not start." }
+
+  while (-not $process.StandardOutput.EndOfStream) {
+    $line = $process.StandardOutput.ReadLine()
+    if ($null -eq $line) { continue }
+    $writer.WriteLine($line)
+    if ($writer.BaseStream.Length -ge $maxLogBytes) {
+      $writer.Dispose()
+      $writer = $null
+      Move-ConnectorLogs
+      $writer = New-Object System.IO.StreamWriter($logPath, $true, (New-Object System.Text.UTF8Encoding($false)))
+      $writer.AutoFlush = $true
+    }
+  }
+
+  $process.WaitForExit()
+  exit $process.ExitCode
+} finally {
+  if ($null -ne $writer) { $writer.Dispose() }
+  if ($null -ne $process) { $process.Dispose() }
+}