camstack 1.2.66 → 1.2.68

package/dist/{chunk-EJO2K6FH.js → chunk-6X7D7D4Y.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-bm0x6zZF.mjs
+// ../types/dist/sleep-BS40IUZZ.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -21237,6 +21237,80 @@ var embeddingEncoderCapability = {
     getInfo: method(external_exports.void(), EmbeddingInfoSchema, { auth: "admin" })
   }
 };
+var FailureReasonCountSchema = external_exports.object({
+  /**
+  * Why the attempt did not land, in the contributor's own vocabulary —
+  * `worker-lease-gone`, `queue-overflow`, `timeout`, `empty-read`. The same
+  * strings that already appear in this repo's logs and, where one exists, the
+  * same string the per-track `previewMissReason` records (D276): a second
+  * vocabulary for the same loss would make the row and the counter
+  * un-joinable.
+  */
+  reason: external_exports.string(),
+  count: external_exports.number().int().nonnegative()
+});
+var FailureContributionSchema = external_exports.object({
+  /**
+  * The failing path — `enrichment-crop`, `inference`, `plate-ocr`,
+  * `person-over-vehicle`. Free text, for the reason `load-contribution` keeps
+  * `unit` free: the families are owned by different addons and a shared enum
+  * is a central list that rots invisibly.
+  */
+  family: external_exports.string(),
+  /**
+  * The NUMERIC device id — the same value every log line carries as
+  * `tags.deviceId`. Never nullable and never absent: a contributor that
+  * cannot name the camera must not emit the entry, because a fleet total
+  * cannot answer the only question anybody asks of this surface.
+  */
+  deviceId: external_exports.number().int().positive(),
+  /**
+  * A second dimension inside the family: the model / step id for an inference
+  * timeout, so "which camera AND which model" is one read. Absent when the
+  * family has a single variant.
+  */
+  variant: external_exports.string().optional(),
+  /**
+  * Epoch ms this counter started — the INCARNATION MARKER. A consumer
+  * differencing two reads must drop the interval when it changes, because the
+  * counter restarted from zero in a respawned runner. Same discipline as
+  * `LoadContribution.startedAtMs`.
+  */
+  sinceMs: external_exports.number(),
+  /** Epoch ms it was read. `atMs - sinceMs` is the interval this covers. */
+  atMs: external_exports.number(),
+  /**
+  * THE DENOMINATOR — every attempt on this path for this camera in the
+  * window. A failure count published without it is the mistake this schema
+  * exists to make impossible.
+  */
+  attempts: external_exports.number().int().nonnegative(),
+  /** Attempts that landed. `attempts - succeeded` is the loss. */
+  succeeded: external_exports.number().int().nonnegative(),
+  /** The loss, partitioned. Sums to `attempts - succeeded`. */
+  reasons: external_exports.array(FailureReasonCountSchema).readonly()
+});
+var failureContributionCapability = {
+  name: "failure-contribution",
+  scope: "system",
+  mode: "collection",
+  internal: true,
+  methods: {
+    /**
+    * This addon's per-camera failure counters, read live from bounded in-RAM
+    * state it already keeps. Inert: no persistence, no sampling, no timer.
+    *
+    * READING NEVER RESETS. The counters are CUMULATIVE since `sinceMs`, and a
+    * consumer that wants a rate differences two reads. A draining read would
+    * make two operators with the page open each destroy half of the other's
+    * numbers, and `load-contribution` already settled the same question the
+    * same way for `cpuSeconds`.
+    */
+    list: method(external_exports.void(), external_exports.array(FailureContributionSchema).readonly())
+  },
+  /** In-process only — enumerated through `addons.listCapabilityProviders`. */
+  mount: { kind: "skip" }
+};
 var DirEntrySchema = external_exports.object({
   name: external_exports.string(),
   path: external_exports.string()
@@ -21775,145 +21849,6 @@ var llmCapability = {
     })
   }
 };
-var LogChannelApplyResultSchema = external_exports.object({
-  /** How many declared channels are armed in this process after the call. */
-  armed: external_exports.number().int().min(0),
-  /**
-  * Names the document armed that this process does not declare. Reported
-  * rather than swallowed: a name here is either a typo or an addon that has
-  * not booted, and both deserve a line instead of silence.
-  */
-  unknown: external_exports.array(external_exports.string()).readonly()
-});
-var logChannelsCapability = {
-  name: "log-channels",
-  scope: "system",
-  mode: "collection",
-  internal: true,
-  methods: {
-    /** The channels this addon declares. Inert: no value, no state. */
-    list: method(external_exports.void(), external_exports.array(LogChannelDescriptorSchema).readonly()),
-    /**
-    * Refresh this process's mirror from the document's FULL set of armed
-    * windows.
-    *
-    * Full and not incremental on purpose: the document is the authority, so a
-    * channel it does not name is disarmed here. An incremental apply would
-    * let a disarm get lost in transit and leave a channel running that
-    * nobody can see is running.
-    */
-    apply: method(external_exports.object({ windows: external_exports.array(LogChannelWindowSchema).readonly() }), LogChannelApplyResultSchema, { kind: "mutation" })
-  },
-  /** In-process only — enumerated through `addons.listCapabilityProviders`. */
-  mount: { kind: "skip" }
-};
-var LogLevelSchema = external_exports.enum([
-  "debug",
-  "info",
-  "warn",
-  "error"
-]);
-var LogEntrySchema = external_exports.object({
-  timestamp: external_exports.date(),
-  level: LogLevelSchema,
-  scope: external_exports.array(external_exports.string()),
-  message: external_exports.string(),
-  meta: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
-  tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
-});
-var logDestinationCapability = {
-  name: "log-destination",
-  scope: "system",
-  mode: "collection",
-  internal: true,
-  methods: {
-    write: method(LogEntrySchema, external_exports.void(), { kind: "mutation" }),
-    query: method(external_exports.object({
-      scope: external_exports.array(external_exports.string()).optional(),
-      level: LogLevelSchema.optional(),
-      since: external_exports.date().optional(),
-      until: external_exports.date().optional(),
-      limit: external_exports.number().optional(),
-      tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
-    }), external_exports.array(LogEntrySchema).readonly())
-  },
-  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "skip" }
-};
-var FailureReasonCountSchema = external_exports.object({
-  /**
-  * Why the attempt did not land, in the contributor's own vocabulary —
-  * `worker-lease-gone`, `queue-overflow`, `timeout`, `empty-read`. The same
-  * strings that already appear in this repo's logs and, where one exists, the
-  * same string the per-track `previewMissReason` records (D276): a second
-  * vocabulary for the same loss would make the row and the counter
-  * un-joinable.
-  */
-  reason: external_exports.string(),
-  count: external_exports.number().int().nonnegative()
-});
-var FailureContributionSchema = external_exports.object({
-  /**
-  * The failing path — `enrichment-crop`, `inference`, `plate-ocr`,
-  * `person-over-vehicle`. Free text, for the reason `load-contribution` keeps
-  * `unit` free: the families are owned by different addons and a shared enum
-  * is a central list that rots invisibly.
-  */
-  family: external_exports.string(),
-  /**
-  * The NUMERIC device id — the same value every log line carries as
-  * `tags.deviceId`. Never nullable and never absent: a contributor that
-  * cannot name the camera must not emit the entry, because a fleet total
-  * cannot answer the only question anybody asks of this surface.
-  */
-  deviceId: external_exports.number().int().positive(),
-  /**
-  * A second dimension inside the family: the model / step id for an inference
-  * timeout, so "which camera AND which model" is one read. Absent when the
-  * family has a single variant.
-  */
-  variant: external_exports.string().optional(),
-  /**
-  * Epoch ms this counter started — the INCARNATION MARKER. A consumer
-  * differencing two reads must drop the interval when it changes, because the
-  * counter restarted from zero in a respawned runner. Same discipline as
-  * `LoadContribution.startedAtMs`.
-  */
-  sinceMs: external_exports.number(),
-  /** Epoch ms it was read. `atMs - sinceMs` is the interval this covers. */
-  atMs: external_exports.number(),
-  /**
-  * THE DENOMINATOR — every attempt on this path for this camera in the
-  * window. A failure count published without it is the mistake this schema
-  * exists to make impossible.
-  */
-  attempts: external_exports.number().int().nonnegative(),
-  /** Attempts that landed. `attempts - succeeded` is the loss. */
-  succeeded: external_exports.number().int().nonnegative(),
-  /** The loss, partitioned. Sums to `attempts - succeeded`. */
-  reasons: external_exports.array(FailureReasonCountSchema).readonly()
-});
-var failureContributionCapability = {
-  name: "failure-contribution",
-  scope: "system",
-  mode: "collection",
-  internal: true,
-  methods: {
-    /**
-    * This addon's per-camera failure counters, read live from bounded in-RAM
-    * state it already keeps. Inert: no persistence, no sampling, no timer.
-    *
-    * READING NEVER RESETS. The counters are CUMULATIVE since `sinceMs`, and a
-    * consumer that wants a rate differences two reads. A draining read would
-    * make two operators with the page open each destroy half of the other's
-    * numbers, and `load-contribution` already settled the same question the
-    * same way for `cpuSeconds`.
-    */
-    list: method(external_exports.void(), external_exports.array(FailureContributionSchema).readonly())
-  },
-  /** In-process only — enumerated through `addons.listCapabilityProviders`. */
-  mount: { kind: "skip" }
-};
 var LOAD_CONTRIBUTION_ROLES = [
   "decode",
   "transcode",
@@ -21993,6 +21928,71 @@ var loadContributionCapability = {
   /** In-process only — enumerated through `addons.listCapabilityProviders`. */
   mount: { kind: "skip" }
 };
+var LogChannelApplyResultSchema = external_exports.object({
+  /** How many declared channels are armed in this process after the call. */
+  armed: external_exports.number().int().min(0),
+  /**
+  * Names the document armed that this process does not declare. Reported
+  * rather than swallowed: a name here is either a typo or an addon that has
+  * not booted, and both deserve a line instead of silence.
+  */
+  unknown: external_exports.array(external_exports.string()).readonly()
+});
+var logChannelsCapability = {
+  name: "log-channels",
+  scope: "system",
+  mode: "collection",
+  internal: true,
+  methods: {
+    /** The channels this addon declares. Inert: no value, no state. */
+    list: method(external_exports.void(), external_exports.array(LogChannelDescriptorSchema).readonly()),
+    /**
+    * Refresh this process's mirror from the document's FULL set of armed
+    * windows.
+    *
+    * Full and not incremental on purpose: the document is the authority, so a
+    * channel it does not name is disarmed here. An incremental apply would
+    * let a disarm get lost in transit and leave a channel running that
+    * nobody can see is running.
+    */
+    apply: method(external_exports.object({ windows: external_exports.array(LogChannelWindowSchema).readonly() }), LogChannelApplyResultSchema, { kind: "mutation" })
+  },
+  /** In-process only — enumerated through `addons.listCapabilityProviders`. */
+  mount: { kind: "skip" }
+};
+var LogLevelSchema = external_exports.enum([
+  "debug",
+  "info",
+  "warn",
+  "error"
+]);
+var LogEntrySchema = external_exports.object({
+  timestamp: external_exports.date(),
+  level: LogLevelSchema,
+  scope: external_exports.array(external_exports.string()),
+  message: external_exports.string(),
+  meta: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
+});
+var logDestinationCapability = {
+  name: "log-destination",
+  scope: "system",
+  mode: "collection",
+  internal: true,
+  methods: {
+    write: method(LogEntrySchema, external_exports.void(), { kind: "mutation" }),
+    query: method(external_exports.object({
+      scope: external_exports.array(external_exports.string()).optional(),
+      level: LogLevelSchema.optional(),
+      since: external_exports.date().optional(),
+      until: external_exports.date().optional(),
+      limit: external_exports.number().optional(),
+      tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
+    }), external_exports.array(LogEntrySchema).readonly())
+  },
+  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+  mount: { kind: "skip" }
+};
 var LoginStageEnum = external_exports.enum(["primary", "second-factor"]);
 var RedirectLoginMethodSchema = external_exports.object({
   kind: external_exports.literal("redirect"),
@@ -26081,13 +26081,18 @@ var MediaFileKindEnum = external_exports.enum([
   "keyFrameSmall",
   "thumbnailSmall"
 ]);
-var MediaFileSchema = external_exports.object({
+var MediaFileRefSchema = external_exports.object({
   key: external_exports.string(),
   kind: MediaFileKindEnum,
-  base64: external_exports.string(),
   sizeBytes: external_exports.number(),
   timestamp: external_exports.number()
 });
+var MediaFileSchema = MediaFileRefSchema.extend({
+  /** `/addon/<addonId>/event-media/<encoded stored key>`. Always present. */
+  url: external_exports.string(),
+  /** @deprecated Transitional — see the schema docblock. Use {@link url}. */
+  base64: external_exports.string()
+});
 var MediaFileInfoSchema = MediaFileSchema.omit({ base64: true });
 var RetrainMacroClassSchema = external_exports.enum([
   "person",
@@ -26394,6 +26399,25 @@ var EventStoreFootprintSchema = external_exports.object({
   totalBytes: external_exports.number().int(),
   devices: external_exports.array(EventStoreDeviceFootprintSchema).readonly()
 });
+var EventMediaKindFootprintSchema = external_exports.object({
+  kind: MediaFileKindEnum,
+  /** Media rows of this kind. */
+  rows: external_exports.number().int(),
+  /** Bytes on disk held by those rows. */
+  bytes: external_exports.number().int()
+});
+var EventMediaKindBreakdownSchema = external_exports.object({
+  /** Every media row in scope, from one unfiltered aggregate. */
+  totalRows: external_exports.number().int(),
+  /** Every media byte in scope, from that same aggregate. */
+  totalBytes: external_exports.number().int(),
+  /** Per-kind footprint, ordered by bytes descending. */
+  kinds: external_exports.array(EventMediaKindFootprintSchema).readonly(),
+  /** `totalRows` minus the summed `kinds` rows — see the schema note. */
+  unaccountedRows: external_exports.number().int(),
+  /** `totalBytes` minus the summed `kinds` bytes — see the schema note. */
+  unaccountedBytes: external_exports.number().int()
+});
 var EventPruneCountsSchema = external_exports.object({
   motion: external_exports.number().int(),
   object: external_exports.number().int(),
@@ -26749,6 +26773,22 @@ var pipelineAnalyticsCapability = {
       auth: "admin"
     }),
     /**
+    * The same media footprint, broken down by {@link MediaFileKind} instead of
+    * by camera — fleet-wide, or for one camera with `deviceId`.
+    *
+    * Separate from {@link getEventStoreFootprint} rather than a field on it:
+    * the two answer different questions on different axes, the per-camera one
+    * is what the management table renders on every open, and nothing should
+    * pay for a per-kind pass to draw it. See
+    * {@link EventMediaKindBreakdownSchema} for why `unaccounted*` exists —
+    * `kinds` is enumerated, `totalBytes` is not, and the gap must be visible
+    * to anyone sizing a deletion against it.
+    */
+    getEventMediaFootprintByKind: method(external_exports.object({ deviceId: external_exports.number().int().optional() }), EventMediaKindBreakdownSchema, {
+      kind: "query",
+      auth: "admin"
+    }),
+    /**
     * Cluster-wide prune of events older than `olderThanMs` (exclusive) across
     * every camera, deleting each event's media in lockstep. Logged to the
     * events ops-log with `reason` (default `'retention'`). Returns the summed
@@ -27153,6 +27193,26 @@ var pipelineAnalyticsCapability = {
       deviceId: external_exports.number()
     }), external_exports.array(MediaFileInfoSchema).readonly()),
     /**
+    * What media an EVENT has, without any of it — the twin `getEventMedia`
+    * never had.
+    *
+    * `listTrackMedia` above got this treatment because a track's media is
+    * 5-8 MB. An event's is worse per row, not better: an old-style event owns
+    * a `crop` AND a native-resolution `fullFrameBoxed`, and the track DETAIL
+    * modal — the one surface that legitimately shows the big kinds — unions
+    * both listings to build its filmstrip. It then renders every tile from
+    * the `event-media` plane by key and throws the bytes away. Measured on
+    * the live hub: one event's `fullFrameBoxed` is 2 824 077 B, base64'd to
+    * ~3.8 MB, allocated whole in hub-main's heap, for a list of keys.
+    *
+    * Same `deviceId` authorization subject as `getEventMedia`, and the same
+    * rows — this is a projection of that method, never a different question.
+    */
+    listEventMedia: method(external_exports.object({
+      eventId: external_exports.string(),
+      deviceId: external_exports.number()
+    }), external_exports.array(MediaFileInfoSchema).readonly()),
+    /**
     * Search object events by text query using CLIP cosine similarity.
     * Encodes `text` via the `embedding-encoder` cap, queries the
     * `ObjectEmbeddingStore` with optional prefilters, ranks all matching
@@ -29472,6 +29532,20 @@ var storageCapability = {
     listProviders: method(external_exports.void(), external_exports.array(ProviderListEntrySchema).readonly()),
     testConfig: method(external_exports.object({
       providerId: external_exports.string(),
+      /**
+      * The location this config is an UNSAVED edit of, when there is one.
+      *
+      * `listLocations` replaces every declared secret with the redaction
+      * sentinel, so the edit modal's form state holds the sentinel for any
+      * credential the operator did not retype — and posting that here
+      * without a way to resolve it makes the provider try to authenticate
+      * as `__camstack_redacted__` and report the operator's own working
+      * password as wrong. Given this id, the orchestrator restores each
+      * sentinel from the stored config (same rule as `upsertLocation`)
+      * before dispatching. Omitted by the "Add location" wizard, where
+      * every value was typed just now and nothing is stored yet.
+      */
+      locationId: external_exports.string().optional(),
       config: external_exports.record(external_exports.string(), external_exports.unknown())
     }), external_exports.object({
       ok: external_exports.boolean(),
@@ -32593,7 +32667,7 @@ var FaceClusterSchema = external_exports.object({
 var MediaFileLiteSchema$1 = external_exports.object({
   key: external_exports.string(),
   kind: external_exports.string(),
-  base64: external_exports.string(),
+  url: external_exports.string(),
   sizeBytes: external_exports.number(),
   timestamp: external_exports.number()
 });
@@ -35486,7 +35560,7 @@ var PlateInfoSchema = external_exports.object({
 var MediaFileLiteSchema = external_exports.object({
   key: external_exports.string(),
   kind: external_exports.string(),
-  base64: external_exports.string(),
+  url: external_exports.string(),
   sizeBytes: external_exports.number(),
   timestamp: external_exports.number()
 });
@@ -41932,6 +42006,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.getEventMediaFootprintByKind": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.getEventStoreFootprint": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -42028,6 +42108,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.listEventMedia": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.listGroups": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -45591,6 +45677,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineAnalytics.getEventMediaFootprintByKind": [{
+    name: "deviceId",
+    form: "single",
+    optional: true
+  }],
   "pipelineAnalytics.getGroup": [{
     name: "deviceId",
     form: "single",
@@ -45651,6 +45742,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "array",
     optional: false
   }],
+  "pipelineAnalytics.listEventMedia": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
   "pipelineAnalytics.listGroups": [{
     name: "deviceIds",
     form: "array",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-EJO2K6FH.js";
+} from "./chunk-6X7D7D4Y.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-EJVL74UN.js");
+  await import("./launcher-H2LQYCEY.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-EJVL74UN.js");
+  await import("./launcher-H2LQYCEY.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-4BY6AQ3K.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-ABTN33LN.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-4BY6AQ3K.js → discover-ABTN33LN.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-EJO2K6FH.js";
+} from "./chunk-6X7D7D4Y.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,