camstack 1.2.67 → 1.2.69

package/dist/{chunk-MYPVHFJL.js → chunk-VBTD2AIS.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-ot6dTHCA.mjs
+// ../types/dist/sleep-DcA-CgqX.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -15787,6 +15787,20 @@ var RelocateJobSchema = external_exports.object({
   * in its row, not in its name, so `MediaRelocateEngine` never reconciles one.
   */
   rowsReconciled: external_exports.number().int().nonnegative().optional(),
+  /**
+  * Rows this run FORGOT because the file they name is not on disk.
+  *
+  * The mover derived the path from the row's own fields and `stat`ed it; an
+  * ENOENT there is a per-path confirmation that the segment is gone (D296),
+  * and the durable row is dropped through the same channel eviction uses. It
+  * is reported for the same reason `rowsReconciled` is: this is a durable
+  * mutation nobody asked for, and a migration that quietly erases hour rows is
+  * the same failure as one that quietly skips them (D295).
+  *
+  * The production drain of 2026-08-30 would have reported 11 074 here — the
+  * ledger claimed 5.65 GB of footage that no longer existed.
+  */
+  rowsForgotten: external_exports.number().int().nonnegative().optional(),
   startedAt: external_exports.number(),
   finishedAt: external_exports.number().nullable(),
   error: external_exports.string().nullable()
@@ -15994,6 +16008,71 @@ var RelocateResidueSchema = external_exports.object({
   segments: external_exports.number().int().nonnegative(),
   bytes: external_exports.number().int().nonnegative()
 }).nullable();
+var LedgerWalkInputSchema = external_exports.object({
+  locationId: external_exports.string().min(1),
+  /** Forget the confirmed-absent rows, rather than only counting them. */
+  apply: external_exports.boolean().optional(),
+  /** Narrow to one camera. */
+  deviceId: external_exports.number().int().positive().optional(),
+  /** Narrow to these recording profiles; empty/absent = every profile. */
+  profiles: external_exports.array(external_exports.string().min(1)).optional()
+});
+var LedgerWalkRefusalSchema = external_exports.enum([
+  "location-unknown",
+  "source-writable",
+  "no-ledger",
+  "archive-unreadable",
+  "anchor-absent",
+  "anchor-unreadable",
+  "anchor-moved"
+]);
+var LedgerWalkSkipReasonSchema = external_exports.enum([
+  "live-tail",
+  "listing-error",
+  "path-mismatch",
+  "durable-refused"
+]);
+var LedgerWalkSkipCountsSchema = external_exports.object({
+  "live-tail": external_exports.number().int().nonnegative(),
+  "listing-error": external_exports.number().int().nonnegative(),
+  "path-mismatch": external_exports.number().int().nonnegative(),
+  "durable-refused": external_exports.number().int().nonnegative()
+});
+var LedgerWalkDeviceReportSchema = external_exports.object({
+  deviceId: external_exports.number().int(),
+  hoursWalked: external_exports.number().int().nonnegative(),
+  hoursMissing: external_exports.number().int().nonnegative(),
+  ghostSegments: external_exports.number().int().nonnegative(),
+  ghostBytes: external_exports.number().int().nonnegative(),
+  forgottenSegments: external_exports.number().int().nonnegative(),
+  orphanFiles: external_exports.number().int().nonnegative()
+});
+var LedgerWalkReportSchema = external_exports.object({
+  locationId: external_exports.string(),
+  applied: external_exports.boolean(),
+  refused: LedgerWalkRefusalSchema.nullable(),
+  archiveSegments: external_exports.number().int().nonnegative().nullable(),
+  archiveBytes: external_exports.number().int().nonnegative().nullable(),
+  hoursClaimed: external_exports.number().int().nonnegative(),
+  hoursWalked: external_exports.number().int().nonnegative(),
+  hoursMissing: external_exports.number().int().nonnegative(),
+  /** `readdir` calls issued — the cost, stated in the unit that is paid. */
+  listings: external_exports.number().int().nonnegative(),
+  segmentsClaimed: external_exports.number().int().nonnegative(),
+  ghostSegments: external_exports.number().int().nonnegative(),
+  ghostBytes: external_exports.number().int().nonnegative(),
+  ghostHoursWhole: external_exports.number().int().nonnegative(),
+  forgottenSegments: external_exports.number().int().nonnegative(),
+  forgottenBytes: external_exports.number().int().nonnegative(),
+  /** Files under a claimed hour that no durable row names. Never deleted. */
+  orphanFiles: external_exports.number().int().nonnegative(),
+  orphanSample: external_exports.array(external_exports.string()).readonly(),
+  hoursSkipped: external_exports.number().int().nonnegative(),
+  skippedByReason: LedgerWalkSkipCountsSchema,
+  /** The walk stopped at its per-pass hour bound with claims unwalked. */
+  bounded: external_exports.boolean(),
+  byDevice: external_exports.array(LedgerWalkDeviceReportSchema).readonly()
+});
 var RelocatableMediaCountSchema = external_exports.object({ rows: external_exports.number().int().nonnegative() }).nullable();
 var RelocatableMediaCountInputSchema = external_exports.object({
   toLocationId: external_exports.string().min(1),
@@ -26303,13 +26382,15 @@ var ListGroupsPageSchema = external_exports.object({
   groups: external_exports.array(AnalyticsGroupRecordSchema).readonly(),
   nextCursor: external_exports.string().nullable()
 });
+var KEY_EVENTS_DEFAULT_LIMIT = 50;
+var KEY_EVENTS_MAX_LIMIT = 200;
 var KeyEventQueryInput = external_exports.object({
   deviceId: external_exports.number(),
   /** Window lower bound (track firstSeen ≥ since). */
   since: external_exports.number(),
   /** Window upper bound (track firstSeen ≤ until). */
   until: external_exports.number(),
-  limit: external_exports.number().int().min(1).max(200).default(50),
+  limit: external_exports.number().int().min(1).max(KEY_EVENTS_MAX_LIMIT).default(KEY_EVENTS_DEFAULT_LIMIT),
   /** Drop tracks scoring below this importance. */
   minImportance: external_exports.number().min(0).max(1).optional(),
   /** Restrict to a single class (e.g. 'person'). */
@@ -26331,6 +26412,21 @@ var KeyEventSchema = external_exports.object({
   ...TrackFlagFields,
   ...TrackRetrainFields
 });
+var KeyEventBatchQueryInput = external_exports.object({
+  deviceIds: external_exports.array(external_exports.number()).min(1).max(200),
+  since: external_exports.number(),
+  until: external_exports.number(),
+  /** Applied PER CAMERA, exactly as `getKeyEvents.limit` is — never a total
+  *  across the set, which would let a busy camera starve a quiet one of its
+  *  rows and change what the merged feed contains. */
+  limit: external_exports.number().int().min(1).max(KEY_EVENTS_MAX_LIMIT).default(KEY_EVENTS_DEFAULT_LIMIT),
+  minImportance: external_exports.number().min(0).max(1).optional(),
+  classFilter: external_exports.string().optional()
+});
+var KeyEventsForDeviceSchema = external_exports.object({
+  deviceId: external_exports.number(),
+  events: external_exports.array(KeyEventSchema).readonly()
+});
 var TrackedDetectionSchema = external_exports.object({
   trackId: external_exports.string(),
   className: external_exports.string(),
@@ -26399,6 +26495,25 @@ var EventStoreFootprintSchema = external_exports.object({
   totalBytes: external_exports.number().int(),
   devices: external_exports.array(EventStoreDeviceFootprintSchema).readonly()
 });
+var EventMediaKindFootprintSchema = external_exports.object({
+  kind: MediaFileKindEnum,
+  /** Media rows of this kind. */
+  rows: external_exports.number().int(),
+  /** Bytes on disk held by those rows. */
+  bytes: external_exports.number().int()
+});
+var EventMediaKindBreakdownSchema = external_exports.object({
+  /** Every media row in scope, from one unfiltered aggregate. */
+  totalRows: external_exports.number().int(),
+  /** Every media byte in scope, from that same aggregate. */
+  totalBytes: external_exports.number().int(),
+  /** Per-kind footprint, ordered by bytes descending. */
+  kinds: external_exports.array(EventMediaKindFootprintSchema).readonly(),
+  /** `totalRows` minus the summed `kinds` rows — see the schema note. */
+  unaccountedRows: external_exports.number().int(),
+  /** `totalBytes` minus the summed `kinds` bytes — see the schema note. */
+  unaccountedBytes: external_exports.number().int()
+});
 var EventPruneCountsSchema = external_exports.object({
   motion: external_exports.number().int(),
   object: external_exports.number().int(),
@@ -26606,6 +26721,21 @@ var pipelineAnalyticsCapability = {
     * scored on-read (no write). Degrades to `[]` on error.
     */
     getKeyEvents: method(KeyEventQueryInput, external_exports.array(KeyEventSchema).readonly()),
+    /**
+    * The same ranking, for a SET of cameras, in one round trip.
+    *
+    * The Detection Intelligence events feed asks this of every selected
+    * camera and re-asks on a 30s timer. Fanned out client-side that is N
+    * round trips — browser → hub → post-analysis — for N independent,
+    * already-indexed store queries. Batched, the queries are unchanged and
+    * run concurrently INSIDE the owner; only the transport collapses.
+    *
+    * Deliberately per-device rather than pre-merged: `limit` stays per
+    * camera (a total would let a busy camera starve a quiet one), and a
+    * caller that renders one camera's lane needs to know which camera a row
+    * came from. `getKeyEvents` stays for single-device callers.
+    */
+    getKeyEventsBatch: method(KeyEventBatchQueryInput, external_exports.array(KeyEventsForDeviceSchema).readonly()),
     /** Server-side bucketed event counts for the 24-hour timeline.
     *  Returns one entry per non-empty bucket; empty buckets are omitted. */
     getEventDensity: method(external_exports.object({
@@ -26754,6 +26884,22 @@ var pipelineAnalyticsCapability = {
       auth: "admin"
     }),
     /**
+    * The same media footprint, broken down by {@link MediaFileKind} instead of
+    * by camera — fleet-wide, or for one camera with `deviceId`.
+    *
+    * Separate from {@link getEventStoreFootprint} rather than a field on it:
+    * the two answer different questions on different axes, the per-camera one
+    * is what the management table renders on every open, and nothing should
+    * pay for a per-kind pass to draw it. See
+    * {@link EventMediaKindBreakdownSchema} for why `unaccounted*` exists —
+    * `kinds` is enumerated, `totalBytes` is not, and the gap must be visible
+    * to anyone sizing a deletion against it.
+    */
+    getEventMediaFootprintByKind: method(external_exports.object({ deviceId: external_exports.number().int().optional() }), EventMediaKindBreakdownSchema, {
+      kind: "query",
+      auth: "admin"
+    }),
+    /**
     * Cluster-wide prune of events older than `olderThanMs` (exclusive) across
     * every camera, deleting each event's media in lockstep. Logged to the
     * events ops-log with `reason` (default `'retention'`). Returns the summed
@@ -29497,6 +29643,20 @@ var storageCapability = {
     listProviders: method(external_exports.void(), external_exports.array(ProviderListEntrySchema).readonly()),
     testConfig: method(external_exports.object({
       providerId: external_exports.string(),
+      /**
+      * The location this config is an UNSAVED edit of, when there is one.
+      *
+      * `listLocations` replaces every declared secret with the redaction
+      * sentinel, so the edit modal's form state holds the sentinel for any
+      * credential the operator did not retype — and posting that here
+      * without a way to resolve it makes the provider try to authenticate
+      * as `__camstack_redacted__` and report the operator's own working
+      * password as wrong. Given this id, the orchestrator restores each
+      * sentinel from the stored config (same rule as `upsertLocation`)
+      * before dispatching. Omitted by the "Add location" wizard, where
+      * every value was typed just now and nothing is stored yet.
+      */
+      locationId: external_exports.string().optional(),
       config: external_exports.record(external_exports.string(), external_exports.unknown())
     }), external_exports.object({
       ok: external_exports.boolean(),
@@ -36665,6 +36825,23 @@ var recordingCapability = {
       kind: "query",
       auth: "admin"
     }),
+    /**
+    * Does this location's LEDGER tell the truth about its disk? (D319)
+    *
+    * One `readdir` per claimed hour, diffed both ways: durable rows whose file
+    * is not there, and files no durable row names. `apply` defaults to FALSE —
+    * the report is the product, and the dry run is how an operator
+    * sanity-checks the destructive run before authorising it.
+    *
+    * REFUSES a source that is still a write target: a listing of a live
+    * location is a lower bound, which is not the strong evidence that lets
+    * this pass forget without a budget. A live location is reconciled by the
+    * mover, under D318's bound.
+    */
+    reconcileLedgerAgainstDisk: method(LedgerWalkInputSchema, LedgerWalkReportSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
     /** Cancel a running or queued relocate job. A queued job never runs. */
     cancelRelocateJob: method(external_exports.object({ jobId: external_exports.string() }), external_exports.object({ cancelled: external_exports.boolean() }), {
       kind: "mutation",
@@ -36964,6 +37141,10 @@ var SceneMonitorStatusSchema = external_exports.object({
   monitors: external_exports.array(SceneMonitorSchema),
   lastFetchedAt: external_exports.number()
 });
+var SceneMonitorStatusForDeviceSchema = external_exports.object({
+  deviceId: external_exports.number(),
+  status: SceneMonitorStatusSchema.nullable()
+});
 var sceneMonitorCapability = {
   name: "scene-monitor",
   scope: "device",
@@ -36973,6 +37154,22 @@ var sceneMonitorCapability = {
   deviceTypes: [DeviceType.Camera],
   methods: {
     listScenes: method(external_exports.object({ deviceId: external_exports.number() }), SceneMonitorStatusSchema),
+    /**
+    * The same answer, for a SET of cameras, in one round trip.
+    *
+    * `/scenes` renders every camera and re-reads them on a 30s safety-net
+    * poll behind the push slice. Fanned out client-side that was one query
+    * per camera — 29 round trips through the browser, the hub and the
+    * post-analysis runner every 30 seconds to read an in-memory map the
+    * owner had already merged. The work is unchanged (`statusFor` per
+    * device, all in-process at the owner); what collapses is the transport.
+    *
+    * A camera that cannot answer still gets a row, with `status: null` —
+    * see {@link SceneMonitorStatusForDeviceSchema}. Never fewer rows than
+    * ids: a caller that asked for twenty-nine and got twenty-seven cannot
+    * tell which two are missing, or that any are.
+    */
+    listScenesBatch: method(external_exports.object({ deviceIds: external_exports.array(external_exports.number()).min(1).max(200) }), external_exports.array(SceneMonitorStatusForDeviceSchema).readonly()),
     createScene: method(external_exports.object({
       deviceId: external_exports.number(),
       label: external_exports.string(),
@@ -38542,6 +38739,11 @@ var CameraOccupancySnapshotSchema = external_exports.object({
   *  than as repeated tracks/events. */
   stationaryObjects: external_exports.array(StationaryObjectSchema).readonly().optional()
 });
+var CameraOccupancySnapshotForDeviceSchema = external_exports.object({
+  deviceId: external_exports.number(),
+  read: external_exports.enum(["read", "unreadable"]),
+  snapshot: CameraOccupancySnapshotSchema.nullable()
+});
 var HistoryResolutionEnum = external_exports.enum([
   "minute",
   "5min",
@@ -38571,6 +38773,20 @@ var zoneAnalyticsCapability = {
     *  (no inference result emitted since boot or since binding was
     *  activated). */
     getCurrentSnapshot: method(external_exports.object({ deviceId: external_exports.number() }), CameraOccupancySnapshotSchema.nullable()),
+    /**
+    * The same snapshot, for a SET of cameras, in one round trip.
+    *
+    * The Events page's Stationary section polls this every 15s for every
+    * selected camera. Fanned out client-side that is one query per camera to
+    * read a `Map.get` at the owner — the answer costs nothing, the round trip
+    * costs everything. Batched, N transports become one and the per-device
+    * work is unchanged.
+    *
+    * Every requested deviceId gets a row, tagged `read` — see
+    * {@link CameraOccupancySnapshotForDeviceSchema}. A camera the owner could
+    * not answer for is `'unreadable'`, never an empty reading.
+    */
+    getCurrentSnapshotBatch: method(external_exports.object({ deviceIds: external_exports.array(external_exports.number()).min(1).max(200) }), external_exports.array(CameraOccupancySnapshotForDeviceSchema).readonly()),
     /** Time-series object count inside one zone. `className` optional —
     *  omit to count every class in the zone. */
     getZoneHistory: method(external_exports.object({
@@ -41957,6 +42173,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.getEventMediaFootprintByKind": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.getEventStoreFootprint": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -41975,6 +42197,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.getKeyEventsBatch": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.getMotionEvents": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -43151,6 +43379,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "recording.reconcileLedgerAgainstDisk": {
+    capName: "recording",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "recording.refreshStorageLocationsForMigration": {
     capName: "recording",
     capScope: "system",
@@ -43277,6 +43511,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "sceneMonitor.listScenesBatch": {
+    capName: "scene-monitor",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "sceneMonitor.recheckNow": {
     capName: "scene-monitor",
     capScope: "device",
@@ -44633,6 +44873,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "zoneAnalytics.getCurrentSnapshotBatch": {
+    capName: "zone-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "zoneAnalytics.getUnzonedHistory": {
     capName: "zone-analytics",
     capScope: "device",
@@ -45622,6 +45868,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineAnalytics.getEventMediaFootprintByKind": [{
+    name: "deviceId",
+    form: "single",
+    optional: true
+  }],
   "pipelineAnalytics.getGroup": [{
     name: "deviceId",
     form: "single",
@@ -45632,6 +45883,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineAnalytics.getKeyEventsBatch": [{
+    name: "deviceIds",
+    form: "array",
+    optional: false
+  }],
   "pipelineAnalytics.getMotionEvents": [{
     name: "deviceId",
     form: "single",
@@ -46072,6 +46328,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "recording.reconcileLedgerAgainstDisk": [{
+    name: "deviceId",
+    form: "single",
+    optional: true
+  }],
   "recording.relocateFootage": [{
     name: "deviceId",
     form: "single",
@@ -46137,6 +46398,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "sceneMonitor.listScenesBatch": [{
+    name: "deviceIds",
+    form: "array",
+    optional: false
+  }],
   "sceneMonitor.recheckNow": [{
     name: "deviceId",
     form: "single",
@@ -46398,6 +46664,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "zoneAnalytics.getCurrentSnapshotBatch": [{
+    name: "deviceIds",
+    form: "array",
+    optional: false
+  }],
   "zoneAnalytics.getUnzonedHistory": [{
     name: "deviceId",
     form: "single",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-MYPVHFJL.js";
+} from "./chunk-VBTD2AIS.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-5FCVBL5M.js");
+  await import("./launcher-INC5TETK.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-5FCVBL5M.js");
+  await import("./launcher-INC5TETK.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-PJINOUDH.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-4S4WTMPM.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-PJINOUDH.js → discover-4S4WTMPM.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-MYPVHFJL.js";
+} from "./chunk-VBTD2AIS.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,