Mitchell R 991c2f0cd5 feat(onvif-events): PullPoint subscription for all ONVIF cameras ... New kiosk/src/onvif_events.rs: for each ONVIF camera in the bundle, creates a PullPoint subscription, polls every 3s, parses NotificationMessage XML into structured JSON (topic + source key/values + data key/values + timestamp), and POSTs to /api/kiosk/event with source_type=onvif + camera_id. Forwards ALL event topics: motion, ANPR (LicensePlateRecognition), line crossing, intrusion, digital input, analytics, tamper — everything the camera exposes. Node-RED sorts what matters. Subscription lifecycle: - CreatePullPointSubscription with 60s InitialTerminationTime - Renew every 55s before timeout - Unsubscribe on bundle change / shutdown - Auto-resubscribe on pull/renew failure (30s backoff) - Generation tracking via Weak<()> so old workers self-terminate when start() is called with a new bundle WSSE PasswordDigest auth for SOAP calls — same scheme the server's onvif.ts uses. sha1 crate added. BundleCamera extended with onvif_host/port/username/password_encrypted fields (server already ships them; kiosk just wasn't deserializing). Gated by BF_ENABLE_ONVIF_EVENTS=1. Enabled by default in the pi-gen image env file. TODO: cluster-key-based decryption of onvif_password_encrypted. For now relies on the RTSP URI having plaintext credentials embedded (which the ONVIF import path already ensures via rtspWithCredentials).		2026-05-21 12:03:30 +02:00
..
service-admin-http	feat(cameras): sync entity name on rename + ONVIF device name from GetDeviceInformation	2026-05-21 11:57:38 +02:00
service-api-http	feat(harden): hardware-bound at-rest encryption of kiosk state files	2026-05-21 11:34:29 +02:00
service-coordinator-ws	feat(harden): hardware-bound at-rest encryption of kiosk state files	2026-05-21 11:34:29 +02:00
service-store	feat(onvif-events): PullPoint subscription for all ONVIF cameras	2026-05-21 12:03:30 +02:00