camstack 1.2.67 → 1.2.68

package/dist/{chunk-MYPVHFJL.js → chunk-6X7D7D4Y.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-ot6dTHCA.mjs
+// ../types/dist/sleep-BS40IUZZ.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -26399,6 +26399,25 @@ var EventStoreFootprintSchema = external_exports.object({
   totalBytes: external_exports.number().int(),
   devices: external_exports.array(EventStoreDeviceFootprintSchema).readonly()
 });
+var EventMediaKindFootprintSchema = external_exports.object({
+  kind: MediaFileKindEnum,
+  /** Media rows of this kind. */
+  rows: external_exports.number().int(),
+  /** Bytes on disk held by those rows. */
+  bytes: external_exports.number().int()
+});
+var EventMediaKindBreakdownSchema = external_exports.object({
+  /** Every media row in scope, from one unfiltered aggregate. */
+  totalRows: external_exports.number().int(),
+  /** Every media byte in scope, from that same aggregate. */
+  totalBytes: external_exports.number().int(),
+  /** Per-kind footprint, ordered by bytes descending. */
+  kinds: external_exports.array(EventMediaKindFootprintSchema).readonly(),
+  /** `totalRows` minus the summed `kinds` rows — see the schema note. */
+  unaccountedRows: external_exports.number().int(),
+  /** `totalBytes` minus the summed `kinds` bytes — see the schema note. */
+  unaccountedBytes: external_exports.number().int()
+});
 var EventPruneCountsSchema = external_exports.object({
   motion: external_exports.number().int(),
   object: external_exports.number().int(),
@@ -26754,6 +26773,22 @@ var pipelineAnalyticsCapability = {
       auth: "admin"
     }),
     /**
+    * The same media footprint, broken down by {@link MediaFileKind} instead of
+    * by camera — fleet-wide, or for one camera with `deviceId`.
+    *
+    * Separate from {@link getEventStoreFootprint} rather than a field on it:
+    * the two answer different questions on different axes, the per-camera one
+    * is what the management table renders on every open, and nothing should
+    * pay for a per-kind pass to draw it. See
+    * {@link EventMediaKindBreakdownSchema} for why `unaccounted*` exists —
+    * `kinds` is enumerated, `totalBytes` is not, and the gap must be visible
+    * to anyone sizing a deletion against it.
+    */
+    getEventMediaFootprintByKind: method(external_exports.object({ deviceId: external_exports.number().int().optional() }), EventMediaKindBreakdownSchema, {
+      kind: "query",
+      auth: "admin"
+    }),
+    /**
     * Cluster-wide prune of events older than `olderThanMs` (exclusive) across
     * every camera, deleting each event's media in lockstep. Logged to the
     * events ops-log with `reason` (default `'retention'`). Returns the summed
@@ -29497,6 +29532,20 @@ var storageCapability = {
     listProviders: method(external_exports.void(), external_exports.array(ProviderListEntrySchema).readonly()),
     testConfig: method(external_exports.object({
       providerId: external_exports.string(),
+      /**
+      * The location this config is an UNSAVED edit of, when there is one.
+      *
+      * `listLocations` replaces every declared secret with the redaction
+      * sentinel, so the edit modal's form state holds the sentinel for any
+      * credential the operator did not retype — and posting that here
+      * without a way to resolve it makes the provider try to authenticate
+      * as `__camstack_redacted__` and report the operator's own working
+      * password as wrong. Given this id, the orchestrator restores each
+      * sentinel from the stored config (same rule as `upsertLocation`)
+      * before dispatching. Omitted by the "Add location" wizard, where
+      * every value was typed just now and nothing is stored yet.
+      */
+      locationId: external_exports.string().optional(),
       config: external_exports.record(external_exports.string(), external_exports.unknown())
     }), external_exports.object({
       ok: external_exports.boolean(),
@@ -41957,6 +42006,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.getEventMediaFootprintByKind": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.getEventStoreFootprint": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -45622,6 +45677,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineAnalytics.getEventMediaFootprintByKind": [{
+    name: "deviceId",
+    form: "single",
+    optional: true
+  }],
   "pipelineAnalytics.getGroup": [{
     name: "deviceId",
     form: "single",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-MYPVHFJL.js";
+} from "./chunk-6X7D7D4Y.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-5FCVBL5M.js");
+  await import("./launcher-H2LQYCEY.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-5FCVBL5M.js");
+  await import("./launcher-H2LQYCEY.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-PJINOUDH.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-ABTN33LN.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-PJINOUDH.js → discover-ABTN33LN.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-MYPVHFJL.js";
+} from "./chunk-6X7D7D4Y.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,

package/dist/{launcher-5FCVBL5M.js → launcher-H2LQYCEY.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-Keu5TDO7.js
-var require_dist_Keu5TDO7 = __commonJS({
-  "../system/dist/dist-Keu5TDO7.js"(exports) {
+// ../system/dist/dist-CCIBlacf.js
+var require_dist_CCIBlacf = __commonJS({
+  "../system/dist/dist-CCIBlacf.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -37094,6 +37094,25 @@ var require_dist_Keu5TDO7 = __commonJS({
       totalBytes: zod.z.number().int(),
       devices: zod.z.array(EventStoreDeviceFootprintSchema).readonly()
     });
+    var EventMediaKindFootprintSchema = zod.z.object({
+      kind: MediaFileKindEnum,
+      /** Media rows of this kind. */
+      rows: zod.z.number().int(),
+      /** Bytes on disk held by those rows. */
+      bytes: zod.z.number().int()
+    });
+    var EventMediaKindBreakdownSchema = zod.z.object({
+      /** Every media row in scope, from one unfiltered aggregate. */
+      totalRows: zod.z.number().int(),
+      /** Every media byte in scope, from that same aggregate. */
+      totalBytes: zod.z.number().int(),
+      /** Per-kind footprint, ordered by bytes descending. */
+      kinds: zod.z.array(EventMediaKindFootprintSchema).readonly(),
+      /** `totalRows` minus the summed `kinds` rows — see the schema note. */
+      unaccountedRows: zod.z.number().int(),
+      /** `totalBytes` minus the summed `kinds` bytes — see the schema note. */
+      unaccountedBytes: zod.z.number().int()
+    });
     var EventPruneCountsSchema = zod.z.object({
       motion: zod.z.number().int(),
       object: zod.z.number().int(),
@@ -37449,6 +37468,22 @@ var require_dist_Keu5TDO7 = __commonJS({
           auth: "admin"
         }),
         /**
+        * The same media footprint, broken down by {@link MediaFileKind} instead of
+        * by camera — fleet-wide, or for one camera with `deviceId`.
+        *
+        * Separate from {@link getEventStoreFootprint} rather than a field on it:
+        * the two answer different questions on different axes, the per-camera one
+        * is what the management table renders on every open, and nothing should
+        * pay for a per-kind pass to draw it. See
+        * {@link EventMediaKindBreakdownSchema} for why `unaccounted*` exists —
+        * `kinds` is enumerated, `totalBytes` is not, and the gap must be visible
+        * to anyone sizing a deletion against it.
+        */
+        getEventMediaFootprintByKind: method(zod.z.object({ deviceId: zod.z.number().int().optional() }), EventMediaKindBreakdownSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
         * Cluster-wide prune of events older than `olderThanMs` (exclusive) across
         * every camera, deleting each event's media in lockstep. Logged to the
         * events ops-log with `reason` (default `'retention'`). Returns the summed
@@ -40047,6 +40082,20 @@ var require_dist_Keu5TDO7 = __commonJS({
         listProviders: method(zod.z.void(), zod.z.array(ProviderListEntrySchema).readonly()),
         testConfig: method(zod.z.object({
           providerId: zod.z.string(),
+          /**
+          * The location this config is an UNSAVED edit of, when there is one.
+          *
+          * `listLocations` replaces every declared secret with the redaction
+          * sentinel, so the edit modal's form state holds the sentinel for any
+          * credential the operator did not retype — and posting that here
+          * without a way to resolve it makes the provider try to authenticate
+          * as `__camstack_redacted__` and report the operator's own working
+          * password as wrong. Given this id, the orchestrator restores each
+          * sentinel from the stored config (same rule as `upsertLocation`)
+          * before dispatching. Omitted by the "Add location" wizard, where
+          * every value was typed just now and nothing is stored yet.
+          */
+          locationId: zod.z.string().optional(),
           config: zod.z.record(zod.z.string(), zod.z.unknown())
         }), zod.z.object({
           ok: zod.z.boolean(),
@@ -53273,6 +53322,12 @@ var require_dist_Keu5TDO7 = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getEventMediaFootprintByKind": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getEventStoreFootprint": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -56938,6 +56993,11 @@ var require_dist_Keu5TDO7 = __commonJS({
         form: "single",
         optional: false
       }],
+      "pipelineAnalytics.getEventMediaFootprintByKind": [{
+        name: "deviceId",
+        form: "single",
+        optional: true
+      }],
       "pipelineAnalytics.getGroup": [{
         name: "deviceId",
         form: "single",
@@ -59147,7 +59207,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -59966,7 +60026,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -60060,7 +60120,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -60957,11 +61017,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-BBohF-eC.js
-var require_retired_settings_keys_BBohF_eC = __commonJS({
-  "../system/dist/retired-settings-keys-BBohF-eC.js"(exports) {
+// ../system/dist/retired-settings-keys-BxV3e2Km.js
+var require_retired_settings_keys_BxV3e2Km = __commonJS({
+  "../system/dist/retired-settings-keys-BxV3e2Km.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -63175,8 +63235,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
-    var require_retired_settings_keys = require_retired_settings_keys_BBohF_eC();
+    var require_dist10 = require_dist_CCIBlacf();
+    var require_retired_settings_keys = require_retired_settings_keys_BxV3e2Km();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -67989,7 +68049,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -68126,7 +68186,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -68316,7 +68376,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -76129,7 +76189,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -76694,7 +76754,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var node_fs_promises = __require("fs/promises");
     var node_child_process = __require("child_process");
     var node_util = __require("util");
@@ -79316,7 +79376,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -80432,8 +80492,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
-    var require_retired_settings_keys = require_retired_settings_keys_BBohF_eC();
+    var require_dist10 = require_dist_CCIBlacf();
+    var require_retired_settings_keys = require_retired_settings_keys_BxV3e2Km();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
     var node_module = __require("module");
@@ -82812,7 +82872,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -83795,10 +83855,21 @@ var require_storage_orchestrator_addon = __commonJS({
         declareCollection: async (input) => (await engine()).declareCollection(input)
       };
     }
-    var EMPTY_SECRET_KEYS = /* @__PURE__ */ new Set();
+    var FRAMEWORK_CONFIG_KEYS = /* @__PURE__ */ new Set([
+      "basePath",
+      "readOnly",
+      "maxUsedGb",
+      "minFreePercent"
+    ]);
     function secretKeysOfProviderInfo(info) {
       return require_dist10.collectSecretConfigKeys(info.configSchema);
     }
+    function secretKeysForConfig(config, declared) {
+      if (declared !== void 0) return declared;
+      const out = /* @__PURE__ */ new Set();
+      for (const key of Object.keys(config)) if (!FRAMEWORK_CONFIG_KEYS.has(key)) out.add(key);
+      return out;
+    }
     function redactLocationConfig(config, secretKeys) {
       if (secretKeys.size === 0) return config;
       let touched = false;
@@ -84784,7 +84855,7 @@ var require_storage_orchestrator_addon = __commonJS({
           listLocationDeclarations: async () => service.listDeclarations(),
           upsertLocation: async (input) => {
             const stored = service.getLocationById(input.id);
-            const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId));
+            const config = restoreRedactedSecrets(input.config, stored?.config, this.secretKeysFor(input.providerId, stored?.config ?? {}));
             const saved = service.upsertLocation(config === input.config ? input : {
               ...input,
               config
@@ -84817,11 +84888,14 @@ var require_storage_orchestrator_addon = __commonJS({
               } });
             });
           },
-          testConfig: async ({ providerId, config }) => {
+          testConfig: async ({ providerId, locationId, config }) => {
+            const stored = locationId === void 0 ? void 0 : service.getLocationById(locationId);
+            const base = stored?.providerId === providerId ? stored.config : void 0;
+            const resolved = restoreRedactedSecrets(config, base, this.secretKeysFor(providerId, base ?? {}));
             const providers = getProviders();
             for (const p of providers) try {
               if ((await p.getProviderInfo()).providerId !== providerId) continue;
-              return p.testLocation({ config });
+              return p.testLocation({ config: resolved });
             } catch (err) {
               return {
                 ok: false,
@@ -85141,13 +85215,21 @@ var require_storage_orchestrator_addon = __commonJS({
         }
         return out;
       }
-      /** Declared secret config keys for a provider; empty when unknown. */
-      secretKeysFor(providerId) {
-        return this.secretKeysByProvider.get(providerId) ?? EMPTY_SECRET_KEYS;
+      /**
+      * What the provider's own schema declared secret, or `undefined` when this
+      * node has never heard from that provider. The distinction is the whole
+      * point — see `secretKeysForConfig`, which fails CLOSED on `undefined`.
+      */
+      declaredSecretKeys(providerId) {
+        return this.secretKeysByProvider.get(providerId);
+      }
+      /** Which keys of a given stored config must never leave this process. */
+      secretKeysFor(providerId, config) {
+        return secretKeysForConfig(config, this.declaredSecretKeys(providerId));
       }
       /** A location with its provider's declared secrets replaced by the sentinel. */
       redacted(location) {
-        return redactLocation(location, this.secretKeysFor(location.providerId));
+        return redactLocation(location, this.secretKeysFor(location.providerId, location.config));
       }
       /**
       * Is this location backed by a provider that serves a genuine local
@@ -85387,7 +85469,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -103448,7 +103530,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -105391,9 +105473,9 @@ var require_event_category_BaEgqJNv = __commonJS({
   }
 });
 
-// ../types/dist/sleep-C3AniWy-.js
-var require_sleep_C3AniWy = __commonJS({
-  "../types/dist/sleep-C3AniWy-.js"(exports) {
+// ../types/dist/sleep-D5821NGq.js
+var require_sleep_D5821NGq = __commonJS({
+  "../types/dist/sleep-D5821NGq.js"(exports) {
     "use strict";
     var require_event_category = require_event_category_BaEgqJNv();
     var zod = require_zod();
@@ -108084,6 +108166,7 @@ var require_sleep_C3AniWy = __commonJS({
           deleteTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "deleteTracks", "mutation", input),
           setTrackFlags: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "setTrackFlags", "mutation", input),
           getEventStoreFootprint: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getEventStoreFootprint", "query", input),
+          getEventMediaFootprintByKind: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getEventMediaFootprintByKind", "query", input),
           pruneEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "pruneEvents", "mutation", input),
           deleteDeviceEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "deleteDeviceEvents", "mutation", input),
           pauseForStorageMigration: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "pauseForStorageMigration", "mutation", input),
@@ -109060,7 +109143,7 @@ var require_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_C3AniWy();
+    var require_sleep = require_sleep_D5821NGq();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -115942,12 +116025,12 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-DYv4ZPo2.js
-var require_manifest_system_deps_DYv4ZPo2 = __commonJS({
-  "../system/dist/manifest-system-deps-DYv4ZPo2.js"(exports) {
+// ../system/dist/manifest-system-deps-alrkBKVQ.js
+var require_manifest_system_deps_alrkBKVQ = __commonJS({
+  "../system/dist/manifest-system-deps-alrkBKVQ.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
-    require_dist_Keu5TDO7();
+    require_dist_CCIBlacf();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var _camstack_types_node = require_node();
@@ -127976,7 +128059,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_Keu5TDO7();
+    var require_dist10 = require_dist_CCIBlacf();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -128002,7 +128085,7 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_file_data_plane = require_file_data_plane_DO8KbxCe();
     var require_tls$1 = require_tls_BxQlomxd();
-    var require_manifest_system_deps = require_manifest_system_deps_DYv4ZPo2();
+    var require_manifest_system_deps = require_manifest_system_deps_alrkBKVQ();
     var require_resource_monitor = require_resource_monitor_CdnzxBLP();
     var require_custom_action_registry = require_custom_action_registry_jY0NOZK8();
     var zod = require_zod();
@@ -208826,7 +208909,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_event_category = require_event_category_BaEgqJNv();
-    var require_sleep = require_sleep_C3AniWy();
+    var require_sleep = require_sleep_D5821NGq();
     var require_canonical_hash = require_canonical_hash_DNV8S5ET();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
@@ -222975,6 +223058,25 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       totalBytes: zod.z.number().int(),
       devices: zod.z.array(EventStoreDeviceFootprintSchema).readonly()
     });
+    var EventMediaKindFootprintSchema = zod.z.object({
+      kind: MediaFileKindEnum,
+      /** Media rows of this kind. */
+      rows: zod.z.number().int(),
+      /** Bytes on disk held by those rows. */
+      bytes: zod.z.number().int()
+    });
+    var EventMediaKindBreakdownSchema = zod.z.object({
+      /** Every media row in scope, from one unfiltered aggregate. */
+      totalRows: zod.z.number().int(),
+      /** Every media byte in scope, from that same aggregate. */
+      totalBytes: zod.z.number().int(),
+      /** Per-kind footprint, ordered by bytes descending. */
+      kinds: zod.z.array(EventMediaKindFootprintSchema).readonly(),
+      /** `totalRows` minus the summed `kinds` rows — see the schema note. */
+      unaccountedRows: zod.z.number().int(),
+      /** `totalBytes` minus the summed `kinds` bytes — see the schema note. */
+      unaccountedBytes: zod.z.number().int()
+    });
     var EventPruneCountsSchema = zod.z.object({
       motion: zod.z.number().int(),
       object: zod.z.number().int(),
@@ -223330,6 +223432,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
           auth: "admin"
         }),
         /**
+        * The same media footprint, broken down by {@link MediaFileKind} instead of
+        * by camera — fleet-wide, or for one camera with `deviceId`.
+        *
+        * Separate from {@link getEventStoreFootprint} rather than a field on it:
+        * the two answer different questions on different axes, the per-camera one
+        * is what the management table renders on every open, and nothing should
+        * pay for a per-kind pass to draw it. See
+        * {@link EventMediaKindBreakdownSchema} for why `unaccounted*` exists —
+        * `kinds` is enumerated, `totalBytes` is not, and the gap must be visible
+        * to anyone sizing a deletion against it.
+        */
+        getEventMediaFootprintByKind: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int().optional() }), EventMediaKindBreakdownSchema, {
+          kind: "query",
+          auth: "admin"
+        }),
+        /**
         * Cluster-wide prune of events older than `olderThanMs` (exclusive) across
         * every camera, deleting each event's media in lockstep. Logged to the
         * events ops-log with `reason` (default `'retention'`). Returns the summed
@@ -226092,6 +226210,20 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         listProviders: require_sleep.method(zod.z.void(), zod.z.array(ProviderListEntrySchema).readonly()),
         testConfig: require_sleep.method(zod.z.object({
           providerId: zod.z.string(),
+          /**
+          * The location this config is an UNSAVED edit of, when there is one.
+          *
+          * `listLocations` replaces every declared secret with the redaction
+          * sentinel, so the edit modal's form state holds the sentinel for any
+          * credential the operator did not retype — and posting that here
+          * without a way to resolve it makes the provider try to authenticate
+          * as `__camstack_redacted__` and report the operator's own working
+          * password as wrong. Given this id, the orchestrator restores each
+          * sentinel from the stored config (same rule as `upsertLocation`)
+          * before dispatching. Omitted by the "Add location" wizard, where
+          * every value was typed just now and nothing is stored yet.
+          */
+          locationId: zod.z.string().optional(),
           config: zod.z.record(zod.z.string(), zod.z.unknown())
         }), zod.z.object({
           ok: zod.z.boolean(),
@@ -242263,6 +242395,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.getEventMediaFootprintByKind": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.getEventStoreFootprint": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -246186,6 +246324,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "pipelineAnalytics.getEventMediaFootprintByKind": [{
+        name: "deviceId",
+        form: "single",
+        optional: true
+      }],
       "pipelineAnalytics.getGroup": [{
         name: "deviceId",
         form: "single",
@@ -251291,6 +251434,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.MaskShapeKindSchema = MaskShapeKindSchema;
     exports.MaskShapeSchema = MaskShapeSchema;
     exports.MediaFileInfoSchema = MediaFileInfoSchema;
+    exports.MediaFileKindEnum = MediaFileKindEnum;
     exports.MediaFileRefSchema = MediaFileRefSchema;
     exports.MediaFileSchema = MediaFileSchema;
     exports.MediaPlayerRepeatSchema = MediaPlayerRepeatSchema;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "camstack",
-  "version": "1.2.67",
+  "version": "1.2.68",
   "description": "CLI tool for managing and running CamStack server",
   "keywords": [
     "camstack",