camstack 1.2.83 → 1.2.85

package/dist/{chunk-U3YITXU5.js → chunk-Y3OL5WYZ.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-C1mz-ocE.mjs
+// ../types/dist/sleep-B195W080.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -17875,6 +17875,68 @@ var LocationStatSchema = external_exports.object({
   fileCount: external_exports.number(),
   present: external_exports.boolean()
 });
+var BackupRunStateSchema = external_exports.enum([
+  "queued",
+  "running",
+  "succeeded",
+  "failed",
+  "cancelled"
+]);
+var BackupRunPhaseSchema = external_exports.enum([
+  "queued",
+  "building",
+  "uploading",
+  "done"
+]);
+var BackupRunSchema = external_exports.object({
+  /** Stable run id — the handle `backup.cancel` takes. */
+  id: external_exports.string(),
+  state: BackupRunStateSchema,
+  phase: BackupRunPhaseSchema,
+  /**
+  * Resolved destination location ids. Empty while queued (targets are
+  * resolved when the run starts, against the then-current policies).
+  */
+  destinationIds: external_exports.array(external_exports.string()).readonly(),
+  label: external_exports.string().optional(),
+  /** ms-epoch when the run was submitted (trigger call / schedule fire). */
+  requestedAt: external_exports.number(),
+  /** ms-epoch when the run left the queue and started building. */
+  startedAt: external_exports.number().optional(),
+  /** ms-epoch when the run reached a terminal state. */
+  finishedAt: external_exports.number().optional(),
+  /** Compressed bytes of the staging archive written so far. */
+  stagedBytes: external_exports.number(),
+  /** Final staged archive size, once the build phase completes. */
+  archiveSizeBytes: external_exports.number().optional(),
+  /** Bytes pushed to the destination currently uploading. */
+  uploadedBytes: external_exports.number(),
+  /** Destinations where the archive fully landed (uploaded + indexed). */
+  completedDestinationIds: external_exports.array(external_exports.string()).readonly(),
+  /** Destinations that failed during the fan-out. */
+  failedDestinationIds: external_exports.array(external_exports.string()).readonly(),
+  /** Failure message when `state === 'failed'`. */
+  error: external_exports.string().optional(),
+  /**
+  * 1-based place in the execution queue — 1 = runs next. Present only
+  * while `state === 'queued'`. Stamped by the orchestrator from the
+  * queue's OWN pending order, never derived from timestamps, so the
+  * UI cannot show an order the executor will not honour.
+  */
+  queuePosition: external_exports.number().int().min(1).optional()
+});
+var BackupTriggerResultSchema = external_exports.object({
+  /** The run this trigger mapped to — poll it via `listRuns`, stop it via `cancel`. */
+  runId: external_exports.string(),
+  /** True when the run waited behind an in-flight run instead of starting immediately. */
+  queued: external_exports.boolean(),
+  /** True when this trigger was coalesced onto an identical already-queued run. */
+  joined: external_exports.boolean(),
+  /** True when the run was cancelled before completing every destination. */
+  cancelled: external_exports.boolean(),
+  /** One entry per destination the archive landed at (partial on cancel). */
+  entries: external_exports.array(BackupEntrySchema).readonly()
+});
 var BackupScheduleSchema = external_exports.object({
   /** Stable id. Generated by the orchestrator on first upsert if absent. */
   id: external_exports.string(),
@@ -17911,6 +17973,11 @@ var backupCapability = {
     * Trigger a backup. Without `destinations` the orchestrator fans
     * out to every destination flagged as enabled in the routing
     * config; with it, only the listed addons receive the archive.
+    *
+    * At most ONE backup run executes at a time — the source tree and
+    * the staging disk are shared by every run, so a second trigger
+    * while one is in flight is enqueued (or joined onto an identical
+    * queued run) and the result says so. See D342.
     */
     trigger: method(external_exports.object({
       /** Subset of registered `backup-destination` addon ids to write to. */
@@ -17924,7 +17991,30 @@ var backupCapability = {
       * retention (manual runs).
       */
       retentionCount: external_exports.number().int().min(1).max(1e3).optional()
-    }).optional(), external_exports.array(BackupEntrySchema).readonly(), {
+    }).optional(), BackupTriggerResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Every run the orchestrator knows about, in EXECUTION order: the
+    * running run first, then queued runs in the exact order they will
+    * execute (each with `queuePosition`, 1 = next), then the bounded
+    * finished history newest-first. Only one run executes at a time
+    * (D342) — the queued section IS the line. Each run carries live
+    * phase + byte counters so a runaway build is visible in seconds,
+    * not via `du`.
+    */
+    listRuns: method(external_exports.void(), external_exports.array(BackupRunSchema).readonly(), { auth: "admin" }),
+    /**
+    * Stop a backup run. Mirrors `storage-migration.cancel` semantics:
+    * id in, `{ cancelled }` out — `false` when the run is unknown or
+    * already terminal. A QUEUED run is removed before it ever starts;
+    * the RUNNING run has its tar/upload stream actually aborted, the
+    * half-written staging archive is deleted, and the in-flight
+    * destination upload is aborted server-side (partial discarded).
+    * Destinations that already completed keep their archive.
+    */
+    cancel: method(external_exports.object({ runId: external_exports.string() }), external_exports.object({ cancelled: external_exports.boolean() }), {
       kind: "mutation",
       auth: "admin"
     }),
@@ -18664,6 +18754,38 @@ var streamBrokerCapability = {
       auth: "admin"
     }),
     /**
+    * The HARDWARE behind a device number was replaced
+    * (`deviceManager.migrateDevice`). Forget every piece of broker state that
+    * described the old box, so the next catalog pull derives everything from
+    * the camera that is actually there:
+    *
+    *  - every `derived:*` stream definition — a derived is authored against a
+    *    specific profile layout, and against the wrong hardware its feeder
+    *    respawns forever (observed at attempt 2732 on the live hub,
+    *    2026-09-01);
+    *  - the profile-slot assignment entry, PURGED (not unassigned — unassign
+    *    marks the slot manual, which would pin the stale choice instead of
+    *    letting `computeInitialAssignment` re-derive it);
+    *  - the probe snapshots (`<deviceId>/…` — probed codec/resolution of the
+    *    old hardware);
+    *  - the persisted RTSP token rows for the device's brokers (keyed
+    *    `<deviceId>/<camStreamId>`; the stream ids change with the hardware,
+    *    so the rows are dead URLs).
+    *
+    * An RPC, deliberately — an event is telemetry and may be dropped (D8),
+    * and a dropped forget leaves a feeder respawning against a stream that
+    * does not exist.
+    */
+    forgetDeviceHardware: method(external_exports.object({ deviceId: external_exports.number().int().nonnegative() }), external_exports.object({
+      derivedStreamsDeleted: external_exports.array(external_exports.string()).readonly(),
+      assignmentsPurged: external_exports.boolean(),
+      probeSnapshotsDropped: external_exports.number().int().nonnegative(),
+      rtspTokenRowsDeleted: external_exports.number().int().nonnegative()
+    }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
     * Render a short GIF or MP4 from the broker's PRE-BUFFER around an instant.
     *
     * The pre-buffer is the only source that already holds the seconds BEFORE
@@ -20279,6 +20401,35 @@ var deviceProviderCapability = {
       name: external_exports.string(),
       type: external_exports.string()
     }))),
+    /**
+    * Tear down and reconstruct ONE device in place from its persisted rows —
+    * touching no other device this provider owns.
+    *
+    * The primitive `deviceManager.migrateDevice` uses to flush the two
+    * migrated numbers: after `swapIds` the runner's live instance still
+    * carries the PRE-swap numeric id (baked into the object, its native-cap
+    * registrations and its log tags), and a live object cannot be renumbered.
+    * Before this method the only flush was restarting the whole owning addon
+    * — which took every camera the provider owns down with it (28 devices
+    * for one migrated camera, measured 2026-09-04, and the morning of the
+    * same day ~27 devices' native caps did not come back on their own).
+    *
+    * Keyed by `stableId`, deliberately: the numeric id is exactly the thing
+    * that changes. The reply carries the id the device answers on NOW.
+    * Implemented once in `BaseDeviceProvider` — decommission the live
+    * instance (if any), then re-create from the persisted row: the same
+    * teardown/rehydrate pair every graceful shutdown + boot already uses.
+    * An RPC, never an event: a dropped event would leave the runner writing
+    * against the wrong camera (D8).
+    *
+    * Construction can dial hardware, and the migrated source is
+    * characteristically dead — the timeout covers a full activate window
+    * rather than the 60 s default.
+    */
+    reloadDevice: method(external_exports.object({ stableId: external_exports.string() }), external_exports.object({ deviceId: external_exports.number() }), {
+      kind: "mutation",
+      timeoutMs: 3 * 6e4
+    }),
     supportsDiscovery: method(external_exports.object({}), external_exports.boolean()),
     /**
     * Run a network scan. `params` carries optional provider-specific scan
@@ -20599,13 +20750,21 @@ var deviceManagerCapability = {
     * `sourceStillLive` names what stayed live; empty is the only value that
     * means the old hardware is quiet. The migration proceeds either way —
     * refusing would refuse the case this exists for.
+    *
+    * **Safe to retry.** A duplicate call while a migration involving either
+    * device is in flight is REFUSED, never queued; a repeat of a swap that
+    * already completed (matched against the `addonId`/`stableId` fingerprint
+    * the swap left on the rows, within 15 min) is a no-op returning the
+    * original report. A blind re-run can no longer silently undo the
+    * migration it retried.
     */
     migrateDevice: method(external_exports.object({
       sourceId: external_exports.number(),
       targetId: external_exports.number()
     }), MigrateDeviceResultSchema, {
       kind: "mutation",
-      auth: "admin"
+      auth: "admin",
+      timeoutMs: 12 * 6e4
     }),
     /** Register a device in the DB + in-memory registry. Called by DeviceManagerApi.register(). */
     registerDevice: method(DeviceRegisterPayloadSchema, external_exports.void(), { kind: "mutation" }),
@@ -39768,6 +39927,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "backup.cancel": {
+    capName: "backup",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "backup.delete": {
     capName: "backup",
     capScope: "system",
@@ -39810,6 +39975,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "backup.listRuns": {
+    capName: "backup",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "backup.listSchedules": {
     capName: "backup",
     capScope: "system",
@@ -41010,6 +41181,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "deviceProvider.reloadDevice": {
+    capName: "device-provider",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "deviceProvider.start": {
     capName: "device-provider",
     capScope: "system",
@@ -44376,6 +44553,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "streamBroker.forgetDeviceHardware": {
+    capName: "stream-broker",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
   "streamBroker.getAllRtspEntries": {
     capName: "stream-broker",
     capScope: "system",
@@ -46834,6 +47017,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "streamBroker.forgetDeviceHardware": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
   "streamBroker.getDeviceAudioMute": [{
     name: "deviceId",
     form: "single",

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runDiscover
-} from "./chunk-U3YITXU5.js";
+} from "./chunk-Y3OL5WYZ.js";
 import "./chunk-LMMQX4CK.js";
 
 // src/cli.ts
@@ -38,7 +38,7 @@ async function runServe(args) {
     ...typeof values.data === "string" ? { data: values.data } : {}
   };
   Object.assign(process.env, buildServeEnv(opts));
-  await import("./launcher-FITGLHP4.js");
+  await import("./launcher-6T2UFXIG.js");
 }
 
 // src/commands/agent.ts
@@ -83,7 +83,7 @@ async function runAgent(args) {
     ...typeof values.port === "string" ? { port: values.port } : {}
   };
   Object.assign(process.env, buildAgentEnv(opts));
-  await import("./launcher-FITGLHP4.js");
+  await import("./launcher-6T2UFXIG.js");
 }
 
 // src/commands/setup.ts
@@ -1130,7 +1130,7 @@ function isUnknown(_value) {
   return true;
 }
 async function resolveServerInteractive(presetNamespace) {
-  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-F573GVRC.js");
+  const { discoverNodes, resolveHubFromDiscovered, filterHubNodes, DEFAULT_HUB_HTTPS_PORT } = await import("./discover-PPTEAP5N.js");
   if (presetNamespace) {
     const spinner4 = clack.spinner();
     spinner4.start(`Discovering hub on LAN (namespace "${presetNamespace}")`);

package/dist/{discover-F573GVRC.js → discover-PPTEAP5N.js}

@@ -5,7 +5,7 @@ import {
   filterHubNodes,
   resolveHubFromDiscovered,
   runDiscover
-} from "./chunk-U3YITXU5.js";
+} from "./chunk-Y3OL5WYZ.js";
 import "./chunk-LMMQX4CK.js";
 export {
   DEFAULT_HUB_HTTPS_PORT,