@camstack/addon-export-alexa 1.2.108 → 1.2.109

package/dist/export-alexa.addon.mjs

@@ -1,5 +1,5 @@
 import * as crypto$1 from "node:crypto";
-//#region ../types/dist/event-category-ZyX6jcse.mjs
+//#region ../types/dist/event-category-BVDXG4tB.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -616,6 +616,20 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	* pull-reconcile from the provider's `getStatus` on reconnect. */
 	EventCategory["MeshNetworkChanged"] = "network.mesh.changed";
 	EventCategory["BackupCompleted"] = "backup.completed";
+	/**
+	* A whole backup RUN finished — every destination attempted, win or lose.
+	*
+	* `backup.completed` fires once per DESTINATION, which is the right grain for
+	* a progress UI and the wrong one for a notification: an operator with three
+	* destinations would be told three times. And a run where two of three
+	* destinations succeeded is not a clean success — a single "backup
+	* completed" that hid the failed one would be a lie, so the count of each is
+	* carried here and the message says both.
+	*
+	* Emitted by the backup orchestrator only after the destination loop, so a
+	* run that dies during the BUILD phase produces no completion at all.
+	*/
+	EventCategory["BackupRunCompleted"] = "backup.run-completed";
 	EventCategory["BackupRestored"] = "backup.restored";
 	EventCategory["NotificationDispatched"] = "notification.dispatched";
 	EventCategory["NotificationFailed"] = "notification.failed";
@@ -5346,7 +5360,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-DBKu2-U5.mjs
+//#region ../types/dist/sleep-DEuj7E3j.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -7533,6 +7547,28 @@ var EncodeProfileSchema = object({
 	outputArgs: array(string()).optional()
 });
 /**
+* THE target rule: which of two sizes serves a consumer better.
+*
+* "Prefer at or above the target so the consumer downscales instead of
+* upscaling; among those the SMALLEST, because the extra pixels are thrown
+* away and the decode is not; among the rest the LARGEST, because it is the
+* closest we can get." One sentence, and until now it was written twice — once
+* here in lines, once in `stream-selection.ts` in pixels, for the same two
+* exporters. The two agreed, which is luck, not a property.
+*
+* The `size` is whatever measure the caller ranks by: the cap ranks by LINES
+* (a consumer's requirement is stated in p), the RTSP picker by PIXELS (it
+* compares entries of possibly different aspect). The rule is the same either
+* way and the measure is the caller's business.
+*
+* Returns a sort delta: negative when `a` should come first.
+*/
+function compareToTarget(a, b, target) {
+	const aReaches = a >= target;
+	if (aReaches !== b >= target) return aReaches ? -1 : 1;
+	return aReaches ? a - b : b - a;
+}
+/**
 * The shape every live egress starts from: H.264 Baseline 3.1 at 720p25.
 * Baseline because it is the one profile every consumer in this repo decodes
 * (Echo, iOS, an old browser); 3.1 because that is what the SDPs advertise.
@@ -9447,6 +9483,47 @@ var LogChannelWindowSchema = object({
 	/** `null` = every camera. A non-empty list narrows to those numeric ids. */
 	deviceIds: array(number().int()).readonly().nullable()
 });
+/**
+* Shared stream-selection picker for export addons.
+*
+* Both `addon-export-alexa` and `addon-export-hap` resolve the
+* operator's `streamPreference` setting against the broker's RTSP
+* entries before dialling a camera. Each addon used to roll its own:
+* Alexa had `pickPreferredRtspEntry` under `handlers/`, HAP had an
+* inline `"prefer /mid, then /high, then first"` chain inside its
+* camera-streams mapper. The chains drifted (Alexa honoured
+* `streamPreference`, HAP didn't; only Alexa got the smart
+* resolution-targeted auto-pick) and the cross-addon import rule
+* blocks deduping in either direction.
+*
+* Lifting the picker into `@camstack/types` lets every exporter call
+* the same code path with the consumer's target resolution baked into
+* the call site — Alexa passes 1280×720, HomeKit passes 1920×1080,
+* the picker handles the rest.
+*
+* Selection algorithm:
+*   - pref === '<profile>' → profile-keyed entries (from
+*                         `getProfileRtspEntries`) match on `e.profile`;
+*                         legacy raw entries match on the brokerId
+*                         suffix (`brokerId` ENDS WITH `/${pref}`, shape
+*                         `${deviceId}/${camStreamId}`). Addons store the
+*                         bare profile/camStream id in their
+*                         `ExportDeviceSettings.streamPreference`. Falls
+*                         back to 'auto' when no enabled entry matches
+*                         either way.
+*   - pref === 'auto'   → when `targetResolution` is given, pick the
+*                         entry whose source resolution is closest to
+*                         it (prefer ≥ target so the consumer
+*                         downscales instead of upscaling). Without a
+*                         target, fall back to first-enabled. If no
+*                         entry advertises a resolution at all
+*                         (broker hasn't probed yet), also fall back
+*                         to first-enabled so cold start still serves.
+*
+* Returns `null` when nothing is publishable — callers fold that into
+* the consumer's "no stream" error (Alexa: STREAM_TYPE_UNSUPPORTED;
+* HAP: a thrown error inside `startFfmpegForSession`).
+*/
 function pickPreferredRtspEntry(entries, pref, deviceId, options = {}) {
 	if (entries.length === 0) return null;
 	const prefix = `${deviceId}/`;
@@ -9476,30 +9553,23 @@ function pickPreferredRtspEntry(entries, pref, deviceId, options = {}) {
 	return toPicked(eligible[0]);
 }
 /**
-* Pick the entry whose `resolution` is closest to `target`. Prefer
-* entries ≥ target (downscale is cheap at the consumer; upscale is
-* lossy). Among the rest pick the LARGEST still ≤ target so the
-* consumer gets the best feasible quality. "Closeness" is the
-* `width × height` pixel delta.
+* Pick the entry whose `resolution` is closest to `target`, by the ONE target
+* rule ({@link compareToTarget}): prefer at or above the target so the consumer
+* downscales instead of upscaling; among those the smallest; among the rest the
+* largest.
+*
+* This function used to implement that rule itself, in pixels, while
+* `rankStreams` implemented it again in lines — the same sentence written twice
+* for the same two exporters, agreeing by luck rather than by construction.
+* Only the MEASURE is this picker's own: it compares whole pixel counts because
+* its entries can differ in aspect, where the cap's requirement is stated in p.
 */
 function pickClosestResolution(entries, target) {
 	const targetPixels = target.width * target.height;
-	let bestAbove;
-	let bestBelow;
-	for (const e of entries) {
-		if (e.resolution === void 0) continue;
-		const pixels = e.resolution.width * e.resolution.height;
-		if (pixels >= targetPixels) {
-			if (!bestAbove || pixels < bestAbove.pixels) bestAbove = {
-				entry: e,
-				pixels
-			};
-		} else if (!bestBelow || pixels > bestBelow.pixels) bestBelow = {
-			entry: e,
-			pixels
-		};
-	}
-	return bestAbove?.entry ?? bestBelow?.entry;
+	return [...entries.flatMap((entry) => entry.resolution === void 0 ? [] : [{
+		entry,
+		pixels: entry.resolution.width * entry.resolution.height
+	}])].sort((a, b) => compareToTarget(a.pixels, b.pixels, targetPixels))[0]?.entry;
 }
 var MODEL_FORMATS = [
 	"onnx",
@@ -11713,6 +11783,58 @@ method(ListInputSchema, array(BrokerInfoSchema$1)), method(GetInputSchema, Broke
 	auth: "admin"
 }), method(GetStateInputSchema, unknown().nullable()), method(_void(), RegistryStatusSchema);
 DeviceType.Camera;
+/**
+* The signals a device can emit to WAKE its own stream.
+*
+* A camera whose stream is built on demand sleeps until something asks for it,
+* and "something" cannot be a consumer that is merely attached — a Frigate-style
+* puller holds a session open for ever, and treating that as demand would keep
+* a battery camera awake for ever, which is the whole thing the battery is for
+* (D173). So the wake has to come from the CAMERA: an event it noticed by
+* itself, with no stream running.
+*
+* ## The vocabulary is the PROVIDER'S, not ours
+*
+* Like `consumables`, this cap declares no vocabulary of its own. A provider
+* names each signal with a `code` it chooses and a `label` an operator reads.
+* Reolink offers motion and camera-native detection; another provider may offer
+* a tamper, a doorbell press, a PIR, or something no camera in this fleet has
+* yet. A fixed enum here would mean every new signal is a framework release.
+*
+* It is deliberately NOT derived from the caps a device already binds. Whether
+* a camera CAN push firmware motion is expressed by `motionSources` containing
+* `'onboard'`, and whether it does AI on-camera by the `native-object-detection`
+* binding — but both answer "what drives the detection pipeline", which is a
+* different question from "what may wake a sleeping stream". A camera can do
+* the first and not be trusted with the second, and the operator picks per
+* camera. Two questions, two authorities.
+*
+* ## Availability is not permission
+*
+* `listSignals` says what the device CAN emit. Whether a given signal actually
+* wakes the stream is the operator's per-camera choice, held by the broker
+* alongside the cooldown — see the stream-broker cap's wake settings. A
+* provider declaring a signal is not a provider enabling it.
+*/
+/** One signal a device can emit. */
+var StreamSignalSchema = object({
+	/** Stable id chosen by the provider, e.g. `'motion'`, `'person'`, `'tamper'`. */
+	code: string().min(1),
+	/** What an operator reads in the picker. The provider's own wording. */
+	label: string().min(1),
+	/**
+	* Whether the provider recommends this signal ON when a camera is first set
+	* up. A provider knows which of its signals are cheap and reliable; an
+	* operator should not have to discover that by trial. Reolink recommends
+	* both of its own.
+	*/
+	recommended: boolean()
+});
+object({
+	signals: array(StreamSignalSchema),
+	lastFetchedAt: number()
+});
+Object.values(DeviceType), method(_void(), array(StreamSignalSchema).readonly());
 /** Stream delivery format. (Relocated from the retired `streaming-engine` cap.) */
 var StreamFormatSchema = _enum([
 	"webrtc",
@@ -12109,6 +12231,22 @@ var EgressTranscodeSchema = object({
 	camStreamId: string().nullable()
 });
 method(object({
+	deviceId: number().int().nonnegative(),
+	/** The provider's signal code. */
+	code: string().min(1),
+	/** Ms epoch. Absent ⇒ now. */
+	at: number().optional()
+}), object({
+	/** Whether the broker acted on it, and if not, why. */
+	accepted: boolean(),
+	reason: _enum([
+		"woke",
+		"hold-extended",
+		"not-enabled",
+		"no-consumer",
+		"unknown-code"
+	])
+}), { kind: "mutation" }), method(object({
 	deviceId: number().int().nonnegative(),
 	camStreamId: string().min(1),
 	kind: CamStreamKindSchema,
@@ -12363,6 +12501,16 @@ var PickStreamRequirementsSchema = object({
 	acceptCodecs: array(StreamCodecSchema).readonly().optional(),
 	/** Minimum vertical resolution. Streams shorter than this are dropped. */
 	minHeight: number().int().positive().optional(),
+	/**
+	* Maximum vertical resolution. Streams TALLER than this are dropped.
+	*
+	* A consumer can have a ceiling as real as its floor: Alexa documents
+	* 480p to 1080p, and a 4K stream is as unusable to an Echo as a 360p one.
+	* Without this the ceiling had to be re-implemented by every caller — and
+	* one caller implementing it privately is how a second scoring authority
+	* gets born.
+	*/
+	maxHeight: number().int().positive().optional(),
 	/** Minimum horizontal resolution. */
 	minWidth: number().int().positive().optional(),
 	/**
@@ -12379,7 +12527,22 @@ var PickStreamRequirementsSchema = object({
 	* transcoded" guard: if the device is already serving the consumer's
 	* codec end-to-end, there's nothing to optimise.
 	*/
-	requireSiblingCodec: array(StreamCodecSchema).readonly().optional()
+	requireSiblingCodec: array(StreamCodecSchema).readonly().optional(),
+	/**
+	* Whether a stream the consumer CANNOT decode may still be picked, on the
+	* understanding that it will be transcoded.
+	*
+	* Default `false` — today's behaviour, and the right one for a bypass
+	* question ("is there a stream I can forward untouched?"). Set `true` to
+	* ask the larger question: "what is the best stream for me, transcoding if
+	* I must?" A stream that satisfies `acceptCodecs` always outranks one that
+	* does not, so a passthrough is never lost to a transcode; the answer says
+	* which it is in {@link PickedCamStreamSchema.transcodes}.
+	*
+	* This is what lets one picker serve both the bypass and the full source
+	* choice, instead of a consumer scoring privately when the bypass misses.
+	*/
+	allowTranscode: boolean().optional()
 }).readonly();
 var PickStreamPreferencesSchema = object({
 	/**
@@ -12393,12 +12556,32 @@ var PickStreamPreferencesSchema = object({
 	* picks the tallest stream; `'lowest'` picks the shortest (used by
 	* memory-constrained consumers / Apple Home guest sessions).
 	*/
-	resolutionPreference: _enum(["highest", "lowest"]).optional()
+	resolutionPreference: _enum(["highest", "lowest"]).optional(),
+	/**
+	* The height the consumer actually wants to DELIVER.
+	*
+	* Not a constraint — an ordering. With it set, the SMALLEST stream at or
+	* above the target wins, and only if nothing reaches it does the tallest
+	* take over. Pulling 1296 lines to draw 720 on a 1280x800 Echo panel costs
+	* a decode and buys nothing, and `resolutionPreference: 'highest'` cannot
+	* express that: it says "as big as possible", which is a different wish.
+	*
+	* Ignored when absent, so every existing caller keeps its ordering.
+	*/
+	targetHeight: number().int().positive().optional()
 }).readonly();
 var PickedCamStreamSchema = object({
 	camStreamId: string(),
 	codec: string().optional(),
 	resolution: CamStreamResolutionSchema.optional(),
+	/**
+	* Whether serving this stream requires a decode + re-encode.
+	*
+	* `false` is a stream the consumer can take as it stands. Only ever `true`
+	* when the caller asked for it with `allowTranscode`, so a caller that did
+	* not ask cannot be handed a cost it never agreed to pay.
+	*/
+	transcodes: boolean(),
 	/** One-line explanation of why this stream won — for logs / debug UI. */
 	reason: string()
 });
@@ -16634,6 +16817,8 @@ var NcSystemEventKindSchema = _enum([
 	"device-enabled",
 	"device-battery-low",
 	"device-battery-normal",
+	"device-consumable-low",
+	"device-consumable-normal",
 	"stream-online",
 	"stream-offline",
 	"node-online",
@@ -16652,6 +16837,7 @@ var NcSystemEventKindSchema = _enum([
 	"addon-updated",
 	"server-updated",
 	"export-completed",
+	"backup-completed",
 	"camera-online",
 	"camera-offline",
 	"camera-disabled",
@@ -23909,10 +24095,28 @@ DeviceType.Camera, method(object({ deviceId: number().int().nonnegative() }), ar
 }), boolean()), method(object({
 	deviceId: number().int().nonnegative(),
 	sessionId: string()
-}), object({ pendingRenegotiation: object({
-	target: WebrtcStreamTargetSchema,
-	epoch: number()
-}).nullable() }));
+}), object({
+	pendingRenegotiation: object({
+		target: WebrtcStreamTargetSchema,
+		epoch: number()
+	}).nullable(),
+	/**
+	* Whether the session still EXISTS.
+	*
+	* A consumer that holds a resource for the life of a session needs to
+	* be able to ask, because a session does not always end the way it
+	* began. Measured on this hub 2026-09-13: an Echo that got stuck never
+	* sent `SessionDisconnected`, so the Alexa exporter's
+	* `releaseEgressTranscode` never ran, and a 2304x1296 HEVC to 720p
+	* H.264 transcode kept running for NOBODY for more than twenty
+	* minutes. The WebRTC session had logged `WebRTC session closed`
+	* minutes earlier — the broker knew; the holder had no way to ask.
+	*
+	* `false` for a session id the provider has never heard of, which is
+	* the same answer as "it ended": either way nothing is holding it up.
+	*/
+	alive: boolean()
+}));
 object({
 	/** All accessory children of the parent. */
 	childDeviceIds: array(number()).readonly(),
@@ -36416,6 +36620,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"streamBroker.reportStreamSignal": {
+		capName: "stream-broker",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"streamBroker.restartProfile": {
 		capName: "stream-broker",
 		capScope: "system",
@@ -36500,6 +36710,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"streamSignals.listSignals": {
+		capName: "stream-signals",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"switch.setState": {
 		capName: "switch",
 		capScope: "device",
@@ -38872,6 +39088,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"streamBroker.reportStreamSignal": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"streamBroker.restartProfile": [{
 		name: "deviceId",
 		form: "single",
@@ -39702,7 +39923,7 @@ async function acquireAlexaEgress(input) {
 			profile: sourceProfile
 		},
 		encode: ALEXA_EGRESS_PROFILE,
-		rateControl: "relaxed",
+		rateControl: "tight",
 		publishLocally: true,
 		tag: `alexa/${sessionId}`
 	});
@@ -39726,6 +39947,7 @@ async function acquireAlexaEgress(input) {
 		meta: {
 			pipelineKey: transcode.pipelineKey,
 			camStreamId,
+			sourceProfile: input.sourceProfile,
 			encoder: transcode.encoder,
 			decodeHwAccel: transcode.decodeHwAccel ?? "software"
 		}
@@ -39759,6 +39981,512 @@ async function releaseAlexaEgress(input) {
 	}
 }
 //#endregion
+//#region src/egress/egress-handle-reaper.ts
+/**
+* Which handles should be released now.
+*
+* A session the broker says is GONE is reclaimed. A session it could not be
+* asked about is KEPT — a read that failed is not evidence of death, and
+* releasing a live session's transcode would black out a working stream to
+* save a process (D393, read in the direction that destroys work).
+*/
+async function reapDeadEgressHandles(input) {
+	const dead = [];
+	for (const handle of input.held) if (await input.isAlive(handle) === false) dead.push(handle);
+	return dead;
+}
+/** How often the sweep runs. Well under the minute Amazon requires a session
+*  to survive, so a genuinely dead one is not transcoding for long. */
+var EGRESS_REAP_INTERVAL_MS = 3e4;
+function logReaped(logger, handle) {
+	logger?.warn("alexa egress: session is GONE — reclaiming the transcode it still held", {
+		tags: { deviceId: handle.deviceId },
+		meta: {
+			sessionId: handle.sessionId,
+			pipelineKey: handle.pipelineKey,
+			reason: "no SessionDisconnected directive"
+		}
+	});
+}
+//#endregion
+//#region src/egress/alexa-source-pick.ts
+/** Amazon's documented ceiling. */
+var ALEXA_MAX_LINES = 1080;
+/**
+* Which profile slot serves `camStreamId`, or `null` when none does — a read
+* that failed is `null` too, and the caller keeps its previous behaviour
+* rather than guessing a slot from an error (D393).
+*/
+async function profileForCamStream(input) {
+	try {
+		const slots = await input.api.streamBroker.listAllProfileSlots.query();
+		for (const slot of slots) {
+			if (slot.deviceId !== input.deviceId) continue;
+			if (slot.sourceCamStreamId !== input.camStreamId) continue;
+			if (slot.profile === "high" || slot.profile === "mid" || slot.profile === "low") return slot.profile;
+		}
+		return null;
+	} catch (err) {
+		input.logger?.warn("alexa rtc-session: could not read the profile slots", {
+			tags: { deviceId: input.deviceId },
+			meta: { error: errMsg(err) }
+		});
+		return null;
+	}
+}
+//#endregion
+//#region src/handlers/endpoint-id.ts
+var SEPARATOR = "__";
+function parseCameraEndpointId(raw) {
+	if (!raw.includes(SEPARATOR)) {
+		const id = parseNonNegativeInt(raw);
+		if (id === null) return {
+			kind: "invalid",
+			reason: `not a numeric deviceId: ${raw}`
+		};
+		return {
+			kind: "camera",
+			deviceId: id
+		};
+	}
+	const [head, tail, ...rest] = raw.split(SEPARATOR);
+	if (head === void 0 || tail === void 0 || rest.length > 0) return {
+		kind: "invalid",
+		reason: `unexpected segments in endpointId: ${raw}`
+	};
+	const parent = parseNonNegativeInt(head);
+	if (parent === null) return {
+		kind: "invalid",
+		reason: `parent segment not numeric: ${raw}`
+	};
+	if (tail === "autotrack") return {
+		kind: "autotrack",
+		parentDeviceId: parent
+	};
+	if (tail === "privacy") return {
+		kind: "privacy",
+		parentDeviceId: parent
+	};
+	if (tail === "alarm") return {
+		kind: "alarm-panel",
+		deviceId: parent
+	};
+	const child = parseNonNegativeInt(tail);
+	if (child === null) return {
+		kind: "invalid",
+		reason: `child segment not numeric and not 'autotrack'/'privacy'/'alarm': ${raw}`
+	};
+	return {
+		kind: "child",
+		parentDeviceId: parent,
+		childDeviceId: child
+	};
+}
+function parseNonNegativeInt(s) {
+	if (!/^\d+$/.test(s)) return null;
+	const n = Number.parseInt(s, 10);
+	if (!Number.isFinite(n) || n < 0) return null;
+	return n;
+}
+//#endregion
+//#region src/handlers/error-envelope.ts
+/**
+* Shared Alexa `Alexa/ErrorResponse` envelope builder.
+*
+* Lives in its own module so every handler (and the directive router)
+* can emit its own namespace-appropriate error without circular imports.
+*/
+object({ event: object({
+	header: object({
+		namespace: literal("Alexa"),
+		name: literal("ErrorResponse"),
+		messageId: string(),
+		payloadVersion: literal("3")
+	}),
+	payload: object({
+		type: string(),
+		message: string()
+	})
+}) });
+function errorEnvelope(header, type, message) {
+	return { event: {
+		header: {
+			namespace: "Alexa",
+			name: "ErrorResponse",
+			messageId: header.messageId,
+			payloadVersion: "3"
+		},
+		payload: {
+			type,
+			message
+		}
+	} };
+}
+//#endregion
+//#region src/handlers/types.ts
+/**
+* Zod schemas for the subset of the Alexa Smart Home directive surface
+* that we actually parse hub-side. The Smart Home Skill API ships
+* thousands of optional fields per namespace — we only validate what
+* we read; everything else passes through as `unknown`.
+*
+* Reference: https://developer.amazon.com/en-US/docs/alexa/smarthome/smart-home-skill-api-message-reference.html
+*/
+/** A directive header carries namespace + name + token + correlation id. */
+var DirectiveHeaderSchema = object({
+	namespace: string(),
+	name: string(),
+	payloadVersion: string(),
+	messageId: string(),
+	correlationToken: string().optional()
+});
+/** Scope carries the bearer token Alexa minted via our OAuth provider. */
+var BearerScopeSchema = object({
+	type: literal("BearerToken"),
+	token: string()
+});
+/** Endpoint reference inside a directive payload. */
+var EndpointRefSchema = object({
+	endpointId: string(),
+	scope: BearerScopeSchema.optional(),
+	cookie: record(string(), string()).optional()
+});
+var DiscoveryDirectiveSchema = object({
+	header: DirectiveHeaderSchema.extend({
+		namespace: literal("Alexa.Discovery"),
+		name: literal("Discover")
+	}),
+	payload: object({ scope: BearerScopeSchema })
+});
+/** Envelope wrapping a directive on the Alexa→skill wire. */
+var DirectiveRequestSchema = object({ directive: object({
+	header: DirectiveHeaderSchema,
+	endpoint: EndpointRefSchema.optional(),
+	payload: unknown().optional()
+}) });
+var InitializeCameraStreamsPayloadSchema = object({ cameraStreams: array(object({
+	protocol: string(),
+	resolution: object({
+		width: number(),
+		height: number()
+	}).optional(),
+	authorizationType: string().optional(),
+	videoCodec: string().optional(),
+	audioCodec: string().optional()
+})).optional() });
+var InitiateSessionWithOfferPayloadSchema = object({
+	sessionId: string(),
+	offer: object({
+		format: string().optional(),
+		value: string()
+	})
+});
+var SessionDisconnectedPayloadSchema = object({ sessionId: string() });
+var SetModePayloadSchema = object({ mode: string() });
+//#endregion
+//#region src/handlers/rtc-session.ts
+var InitiateSessionWithOfferDirectiveSchema = object({
+	endpoint: EndpointRefSchema,
+	payload: InitiateSessionWithOfferPayloadSchema
+});
+var SessionDisconnectedDirectiveSchema = object({
+	endpoint: EndpointRefSchema,
+	payload: SessionDisconnectedPayloadSchema
+});
+/**
+* Live egress handles, keyed by `<deviceId>/<sessionId>`.
+*
+* The primitive's refcount has no lease TTL: a holder that vanishes without
+* releasing leaks a child until the broker restarts (D67). This handler is a
+* holder, so it keeps the one piece of state that lets it not be that holder —
+* the `pipelineKey` its `SessionDisconnected` has to release.
+*
+* A module-level map is right here because the directive handlers are free
+* functions called per directive; the entry is written on a successful acquire
+* and deleted on the release path, both of which are the same tick as the
+* directive that owns it.
+*/
+var EGRESS_HANDLES = /* @__PURE__ */ new Map();
+function egressHandleKey(deviceId, sessionId) {
+	return `${deviceId}/${sessionId}`;
+}
+/** Every handle currently held, for the sweep. */
+function heldEgressHandles() {
+	const held = [];
+	for (const [key, pipelineKey] of EGRESS_HANDLES) {
+		const slash = key.indexOf("/");
+		if (slash <= 0) continue;
+		const deviceId = Number.parseInt(key.slice(0, slash), 10);
+		if (!Number.isFinite(deviceId)) continue;
+		held.push({
+			deviceId,
+			sessionId: key.slice(slash + 1),
+			pipelineKey
+		});
+	}
+	return held;
+}
+/** Drop a handle the sweep reclaimed, so it is not reaped twice. */
+function forgetEgressHandle(handle) {
+	EGRESS_HANDLES.delete(egressHandleKey(handle.deviceId, handle.sessionId));
+}
+var WEBRTC_PROFILE_NAMES = [
+	"high",
+	"mid",
+	"low"
+];
+function resolveWebrtcTarget(pref) {
+	if (pref === "auto") return void 0;
+	if (WEBRTC_PROFILE_NAMES.includes(pref)) return {
+		kind: "profile",
+		profile: pref
+	};
+	return {
+		kind: "cam-stream",
+		camStreamId: pref
+	};
+}
+async function handleInitiateSessionWithOffer(header, endpointRaw, payloadRaw, deps, _callerIdentity) {
+	const parsed = InitiateSessionWithOfferDirectiveSchema.safeParse({
+		endpoint: endpointRaw,
+		payload: payloadRaw ?? {}
+	});
+	if (!parsed.success) return errorEnvelope(header, "INVALID_DIRECTIVE", `payload validation failed: ${parsed.error.message}`);
+	const endpoint = parsed.data.endpoint;
+	const payload = parsed.data.payload;
+	const parsedId = parseCameraEndpointId(endpoint.endpointId);
+	if (parsedId.kind !== "camera") return errorEnvelope(header, "INVALID_DIRECTIVE", `endpointId ${endpoint.endpointId} is not a camera`);
+	const deviceId = parsedId.deviceId;
+	const sessionId = payload.sessionId;
+	const log = deps.logger.withTags({
+		deviceId,
+		sessionId
+	});
+	const sdpOffer = payload.offer.value;
+	if (sdpOffer.length === 0) return errorEnvelope(header, "INVALID_DIRECTIVE", "offer.value is empty");
+	const api = deps.ctx.api;
+	const exposedEntry = deps.listExposed().find((e) => e.deviceId === deviceId);
+	const pinnedProfile = (() => {
+		const pref = exposedEntry?.settings?.streamPreference;
+		if (pref === "low" || pref === "mid" || pref === "high") return pref;
+	})();
+	const allowTranscode = exposedEntry?.settings?.allowTranscode !== false;
+	const scored = pinnedProfile === void 0 ? await api.cameraStreams.pickStream.query({
+		deviceId,
+		requirements: {
+			acceptCodecs: ["h264"],
+			minHeight: 480,
+			maxHeight: ALEXA_MAX_LINES,
+			excludeDerived: true,
+			allowTranscode
+		},
+		preferences: { targetHeight: 720 }
+	}).catch((err) => {
+		log.warn("alexa rtc-session: pickStream threw — falling back to the high slot", {
+			tags: { deviceId },
+			meta: { error: err instanceof Error ? err.message : String(err) }
+		});
+		return null;
+	}) : null;
+	const scoredProfile = scored === null ? null : await profileForCamStream({
+		api,
+		deviceId,
+		camStreamId: scored.camStreamId,
+		logger: log
+	});
+	const sourceProfile = pinnedProfile ?? scoredProfile ?? "high";
+	if (pinnedProfile === void 0) log.info("alexa rtc-session: source scored against the Echo requirements", {
+		tags: { deviceId },
+		meta: {
+			chosen: sourceProfile,
+			scored: scored === null ? "none-eligible" : scored.reason,
+			camStreamId: scored?.camStreamId ?? null,
+			slot: scoredProfile ?? (scored === null ? null : "no-slot"),
+			height: scored?.resolution?.height ?? null,
+			transcodes: scored?.transcodes ?? null,
+			allowTranscode
+		}
+	});
+	let derivedTarget;
+	/**
+	* The primitive's release handle, when this session acquired one. Recorded so
+	* `SessionDisconnected` can release it: a refcount whose holder disappears is
+	* the one gap D67 leaves open, and the least this handler can do is not BE
+	* that holder.
+	*/
+	let egressPipelineKey = null;
+	const picked = await api.cameraStreams.pickStream.query({
+		deviceId,
+		requirements: {
+			acceptCodecs: ["h264"],
+			minHeight: 480,
+			excludeDerived: true,
+			requireSiblingCodec: ["h265", "hevc"]
+		}
+	}).catch((err) => {
+		log.warn("alexa rtc-session: cameraStreams.pickStream threw — falling back to transcode", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		return null;
+	});
+	if (picked) {
+		log.info("alexa rtc-session: bypassing transcode via cameraStreams.pickStream", { meta: {
+			sourceProfile,
+			selectedCamStreamId: picked.camStreamId,
+			reason: picked.reason
+		} });
+		derivedTarget = {
+			kind: "cam-stream",
+			camStreamId: picked.camStreamId
+		};
+	} else try {
+		const acquired = await acquireAlexaEgress({
+			api,
+			deviceId,
+			sourceProfile,
+			sessionId,
+			logger: log
+		});
+		egressPipelineKey = acquired.pipelineKey;
+		EGRESS_HANDLES.set(egressHandleKey(deviceId, sessionId), acquired.pipelineKey);
+		derivedTarget = {
+			kind: "cam-stream",
+			camStreamId: acquired.camStreamId
+		};
+	} catch (err) {
+		log.warn("alexa rtc-session: egress acquire failed, falling back to streamPreference target", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		derivedTarget = resolveWebrtcTarget(exposedEntry?.settings?.streamPreference ?? "auto");
+	}
+	try {
+		const result = await api.webrtcSession.handleOffer.mutate({
+			deviceId,
+			sdpOffer,
+			sessionId,
+			target: derivedTarget,
+			relayOnly: false,
+			nonTrickle: true,
+			disableTurn: true,
+			disableIpv6: true,
+			consumerAttribution: {
+				kind: "alexa",
+				sessionId
+			}
+		});
+		log.info("alexa rtc-session: AnswerGenerated", { meta: {
+			returnedSessionId: result.sessionId,
+			sdpAnswerLen: result.sdpAnswer.length
+		} });
+		return { event: {
+			header: {
+				namespace: "Alexa.RTCSessionController",
+				name: "AnswerGeneratedForSession",
+				messageId: header.messageId,
+				correlationToken: header.correlationToken,
+				payloadVersion: "3"
+			},
+			endpoint: { endpointId: endpoint.endpointId },
+			payload: { answer: {
+				format: payload.offer.format ?? "SDP",
+				value: result.sdpAnswer
+			} }
+		} };
+	} catch (err) {
+		const message = err instanceof Error ? err.message : String(err);
+		const mSectionSummary = (() => {
+			const lines = sdpOffer.split(/\r?\n/);
+			const sections = [];
+			let current = null;
+			for (const raw of lines) {
+				const line = raw.trim();
+				if (line.startsWith("m=")) {
+					if (current) sections.push(current);
+					current = {
+						mid: null,
+						kind: line.split(" ")[0]?.slice(2) ?? "unknown",
+						direction: null,
+						codecs: []
+					};
+				} else if (current) {
+					if (line.startsWith("a=mid:")) current.mid = line.slice(6);
+					else if (/^a=(sendonly|recvonly|sendrecv|inactive)$/.test(line)) current.direction = line.slice(2);
+					else if (line.startsWith("a=rtpmap:")) current.codecs.push(line.slice(9));
+				}
+			}
+			if (current) sections.push(current);
+			return sections;
+		})();
+		log.warn("alexa rtc-session: handleOffer failed", { meta: {
+			error: message,
+			offerLen: sdpOffer.length,
+			mSections: mSectionSummary,
+			offerSdp: sdpOffer
+		} });
+		if (egressPipelineKey !== null) {
+			EGRESS_HANDLES.delete(egressHandleKey(deviceId, sessionId));
+			await releaseAlexaEgress({
+				api,
+				deviceId,
+				pipelineKey: egressPipelineKey,
+				logger: log
+			});
+		}
+		return errorEnvelope(header, "INTERNAL_ERROR", `webrtc-session.handleOffer failed: ${message}`);
+	}
+}
+async function handleSessionDisconnected(header, endpointRaw, payloadRaw, deps, _callerIdentity) {
+	const parsed = SessionDisconnectedDirectiveSchema.safeParse({
+		endpoint: endpointRaw,
+		payload: payloadRaw ?? {}
+	});
+	if (!parsed.success) return errorEnvelope(header, "INVALID_DIRECTIVE", `payload validation failed: ${parsed.error.message}`);
+	const endpoint = parsed.data.endpoint;
+	const parsedId = parseCameraEndpointId(endpoint.endpointId);
+	if (parsedId.kind === "camera") {
+		const handleKey = egressHandleKey(parsedId.deviceId, parsed.data.payload.sessionId);
+		const pipelineKey = EGRESS_HANDLES.get(handleKey);
+		if (pipelineKey !== void 0) {
+			EGRESS_HANDLES.delete(handleKey);
+			await releaseAlexaEgress({
+				api: deps.ctx.api,
+				deviceId: parsedId.deviceId,
+				pipelineKey,
+				logger: deps.logger
+			});
+		}
+		try {
+			await deps.ctx.api.webrtcSession.closeSession.mutate({
+				deviceId: parsedId.deviceId,
+				sessionId: parsed.data.payload.sessionId
+			});
+		} catch (err) {
+			deps.logger.warn("alexa rtc-session: closeSession threw on disconnect (continuing to ack)", {
+				tags: {
+					deviceId: parsedId.deviceId,
+					sessionId: parsed.data.payload.sessionId
+				},
+				meta: { error: err instanceof Error ? err.message : String(err) }
+			});
+		}
+	}
+	const disconnectedDeviceId = parsedId.kind === "camera" ? parsedId.deviceId : void 0;
+	deps.logger.info("alexa rtc-session: SessionDisconnected", {
+		tags: {
+			sessionId: parsed.data.payload.sessionId,
+			...disconnectedDeviceId !== void 0 ? { deviceId: disconnectedDeviceId } : {}
+		},
+		meta: { endpointId: endpoint.endpointId }
+	});
+	return { event: {
+		header: {
+			namespace: "Alexa",
+			name: "Response",
+			messageId: header.messageId,
+			correlationToken: header.correlationToken,
+			payloadVersion: "3"
+		},
+		endpoint: { endpointId: endpoint.endpointId },
+		payload: {}
+	} };
+}
+//#endregion
 //#region src/handlers/security-panel-arm-state.ts
 /**
 * The panel modes behind each Alexa arm state, PRIMARY first — the mirror of
@@ -40189,101 +40917,6 @@ function buildAlarmPanelEndpoint(input) {
 	};
 }
 //#endregion
-//#region src/handlers/error-envelope.ts
-/**
-* Shared Alexa `Alexa/ErrorResponse` envelope builder.
-*
-* Lives in its own module so every handler (and the directive router)
-* can emit its own namespace-appropriate error without circular imports.
-*/
-object({ event: object({
-	header: object({
-		namespace: literal("Alexa"),
-		name: literal("ErrorResponse"),
-		messageId: string(),
-		payloadVersion: literal("3")
-	}),
-	payload: object({
-		type: string(),
-		message: string()
-	})
-}) });
-function errorEnvelope(header, type, message) {
-	return { event: {
-		header: {
-			namespace: "Alexa",
-			name: "ErrorResponse",
-			messageId: header.messageId,
-			payloadVersion: "3"
-		},
-		payload: {
-			type,
-			message
-		}
-	} };
-}
-//#endregion
-//#region src/handlers/types.ts
-/**
-* Zod schemas for the subset of the Alexa Smart Home directive surface
-* that we actually parse hub-side. The Smart Home Skill API ships
-* thousands of optional fields per namespace — we only validate what
-* we read; everything else passes through as `unknown`.
-*
-* Reference: https://developer.amazon.com/en-US/docs/alexa/smarthome/smart-home-skill-api-message-reference.html
-*/
-/** A directive header carries namespace + name + token + correlation id. */
-var DirectiveHeaderSchema = object({
-	namespace: string(),
-	name: string(),
-	payloadVersion: string(),
-	messageId: string(),
-	correlationToken: string().optional()
-});
-/** Scope carries the bearer token Alexa minted via our OAuth provider. */
-var BearerScopeSchema = object({
-	type: literal("BearerToken"),
-	token: string()
-});
-/** Endpoint reference inside a directive payload. */
-var EndpointRefSchema = object({
-	endpointId: string(),
-	scope: BearerScopeSchema.optional(),
-	cookie: record(string(), string()).optional()
-});
-var DiscoveryDirectiveSchema = object({
-	header: DirectiveHeaderSchema.extend({
-		namespace: literal("Alexa.Discovery"),
-		name: literal("Discover")
-	}),
-	payload: object({ scope: BearerScopeSchema })
-});
-/** Envelope wrapping a directive on the Alexa→skill wire. */
-var DirectiveRequestSchema = object({ directive: object({
-	header: DirectiveHeaderSchema,
-	endpoint: EndpointRefSchema.optional(),
-	payload: unknown().optional()
-}) });
-var InitializeCameraStreamsPayloadSchema = object({ cameraStreams: array(object({
-	protocol: string(),
-	resolution: object({
-		width: number(),
-		height: number()
-	}).optional(),
-	authorizationType: string().optional(),
-	videoCodec: string().optional(),
-	audioCodec: string().optional()
-})).optional() });
-var InitiateSessionWithOfferPayloadSchema = object({
-	sessionId: string(),
-	offer: object({
-		format: string().optional(),
-		value: string()
-	})
-});
-var SessionDisconnectedPayloadSchema = object({ sessionId: string() });
-var SetModePayloadSchema = object({ mode: string() });
-//#endregion
 //#region src/handlers/discovery.ts
 var discoveryPayloadSchema = DiscoveryDirectiveSchema.shape.payload;
 /** Devices built at once in `handleDiscovery` — latency-bound tRPC reads, so
@@ -40492,60 +41125,6 @@ function discoveryResponse(header, endpoints) {
 	} };
 }
 //#endregion
-//#region src/handlers/endpoint-id.ts
-var SEPARATOR = "__";
-function parseCameraEndpointId(raw) {
-	if (!raw.includes(SEPARATOR)) {
-		const id = parseNonNegativeInt(raw);
-		if (id === null) return {
-			kind: "invalid",
-			reason: `not a numeric deviceId: ${raw}`
-		};
-		return {
-			kind: "camera",
-			deviceId: id
-		};
-	}
-	const [head, tail, ...rest] = raw.split(SEPARATOR);
-	if (head === void 0 || tail === void 0 || rest.length > 0) return {
-		kind: "invalid",
-		reason: `unexpected segments in endpointId: ${raw}`
-	};
-	const parent = parseNonNegativeInt(head);
-	if (parent === null) return {
-		kind: "invalid",
-		reason: `parent segment not numeric: ${raw}`
-	};
-	if (tail === "autotrack") return {
-		kind: "autotrack",
-		parentDeviceId: parent
-	};
-	if (tail === "privacy") return {
-		kind: "privacy",
-		parentDeviceId: parent
-	};
-	if (tail === "alarm") return {
-		kind: "alarm-panel",
-		deviceId: parent
-	};
-	const child = parseNonNegativeInt(tail);
-	if (child === null) return {
-		kind: "invalid",
-		reason: `child segment not numeric and not 'autotrack'/'privacy'/'alarm': ${raw}`
-	};
-	return {
-		kind: "child",
-		parentDeviceId: parent,
-		childDeviceId: child
-	};
-}
-function parseNonNegativeInt(s) {
-	if (!/^\d+$/.test(s)) return null;
-	const n = Number.parseInt(s, 10);
-	if (!Number.isFinite(n) || n < 0) return null;
-	return n;
-}
-//#endregion
 //#region src/handlers/brightness-controller.ts
 var SetBrightnessDirectiveSchema = object({
 	header: object({
@@ -41122,254 +41701,6 @@ async function collectChildProperties(api, childDeviceId, properties, timeOfSamp
 	});
 }
 //#endregion
-//#region src/handlers/rtc-session.ts
-var InitiateSessionWithOfferDirectiveSchema = object({
-	endpoint: EndpointRefSchema,
-	payload: InitiateSessionWithOfferPayloadSchema
-});
-var SessionDisconnectedDirectiveSchema = object({
-	endpoint: EndpointRefSchema,
-	payload: SessionDisconnectedPayloadSchema
-});
-/**
-* Live egress handles, keyed by `<deviceId>/<sessionId>`.
-*
-* The primitive's refcount has no lease TTL: a holder that vanishes without
-* releasing leaks a child until the broker restarts (D67). This handler is a
-* holder, so it keeps the one piece of state that lets it not be that holder —
-* the `pipelineKey` its `SessionDisconnected` has to release.
-*
-* A module-level map is right here because the directive handlers are free
-* functions called per directive; the entry is written on a successful acquire
-* and deleted on the release path, both of which are the same tick as the
-* directive that owns it.
-*/
-var EGRESS_HANDLES = /* @__PURE__ */ new Map();
-function egressHandleKey(deviceId, sessionId) {
-	return `${deviceId}/${sessionId}`;
-}
-var WEBRTC_PROFILE_NAMES = [
-	"high",
-	"mid",
-	"low"
-];
-function resolveWebrtcTarget(pref) {
-	if (pref === "auto") return void 0;
-	if (WEBRTC_PROFILE_NAMES.includes(pref)) return {
-		kind: "profile",
-		profile: pref
-	};
-	return {
-		kind: "cam-stream",
-		camStreamId: pref
-	};
-}
-async function handleInitiateSessionWithOffer(header, endpointRaw, payloadRaw, deps, _callerIdentity) {
-	const parsed = InitiateSessionWithOfferDirectiveSchema.safeParse({
-		endpoint: endpointRaw,
-		payload: payloadRaw ?? {}
-	});
-	if (!parsed.success) return errorEnvelope(header, "INVALID_DIRECTIVE", `payload validation failed: ${parsed.error.message}`);
-	const endpoint = parsed.data.endpoint;
-	const payload = parsed.data.payload;
-	const parsedId = parseCameraEndpointId(endpoint.endpointId);
-	if (parsedId.kind !== "camera") return errorEnvelope(header, "INVALID_DIRECTIVE", `endpointId ${endpoint.endpointId} is not a camera`);
-	const deviceId = parsedId.deviceId;
-	const sessionId = payload.sessionId;
-	const log = deps.logger.withTags({
-		deviceId,
-		sessionId
-	});
-	const sdpOffer = payload.offer.value;
-	if (sdpOffer.length === 0) return errorEnvelope(header, "INVALID_DIRECTIVE", "offer.value is empty");
-	const api = deps.ctx.api;
-	const exposedEntry = deps.listExposed().find((e) => e.deviceId === deviceId);
-	const explicitSourceProfile = exposedEntry?.settings?.sourceProfile;
-	const mappedFromPreference = (() => {
-		const pref = exposedEntry?.settings?.streamPreference;
-		if (pref === "low" || pref === "mid" || pref === "high") return pref;
-	})();
-	const sourceProfile = explicitSourceProfile ?? mappedFromPreference ?? "high";
-	let derivedTarget;
-	/**
-	* The primitive's release handle, when this session acquired one. Recorded so
-	* `SessionDisconnected` can release it: a refcount whose holder disappears is
-	* the one gap D67 leaves open, and the least this handler can do is not BE
-	* that holder.
-	*/
-	let egressPipelineKey = null;
-	const picked = await api.cameraStreams.pickStream.query({
-		deviceId,
-		requirements: {
-			acceptCodecs: ["h264"],
-			minHeight: 480,
-			excludeDerived: true,
-			requireSiblingCodec: ["h265", "hevc"]
-		}
-	}).catch((err) => {
-		log.warn("alexa rtc-session: cameraStreams.pickStream threw — falling back to transcode", { meta: { error: err instanceof Error ? err.message : String(err) } });
-		return null;
-	});
-	if (picked) {
-		log.info("alexa rtc-session: bypassing transcode via cameraStreams.pickStream", { meta: {
-			sourceProfile,
-			selectedCamStreamId: picked.camStreamId,
-			reason: picked.reason
-		} });
-		derivedTarget = {
-			kind: "cam-stream",
-			camStreamId: picked.camStreamId
-		};
-	} else try {
-		const acquired = await acquireAlexaEgress({
-			api,
-			deviceId,
-			sourceProfile,
-			sessionId,
-			logger: log
-		});
-		egressPipelineKey = acquired.pipelineKey;
-		EGRESS_HANDLES.set(egressHandleKey(deviceId, sessionId), acquired.pipelineKey);
-		derivedTarget = {
-			kind: "cam-stream",
-			camStreamId: acquired.camStreamId
-		};
-	} catch (err) {
-		log.warn("alexa rtc-session: egress acquire failed, falling back to streamPreference target", { meta: { error: err instanceof Error ? err.message : String(err) } });
-		derivedTarget = resolveWebrtcTarget(exposedEntry?.settings?.streamPreference ?? "auto");
-	}
-	try {
-		const result = await api.webrtcSession.handleOffer.mutate({
-			deviceId,
-			sdpOffer,
-			sessionId,
-			target: derivedTarget,
-			relayOnly: false,
-			nonTrickle: true,
-			disableTurn: true,
-			disableIpv6: true,
-			consumerAttribution: {
-				kind: "alexa",
-				sessionId
-			}
-		});
-		log.info("alexa rtc-session: AnswerGenerated", { meta: {
-			returnedSessionId: result.sessionId,
-			sdpAnswerLen: result.sdpAnswer.length
-		} });
-		return { event: {
-			header: {
-				namespace: "Alexa.RTCSessionController",
-				name: "AnswerGeneratedForSession",
-				messageId: header.messageId,
-				correlationToken: header.correlationToken,
-				payloadVersion: "3"
-			},
-			endpoint: { endpointId: endpoint.endpointId },
-			payload: { answer: {
-				format: payload.offer.format ?? "SDP",
-				value: result.sdpAnswer
-			} }
-		} };
-	} catch (err) {
-		const message = err instanceof Error ? err.message : String(err);
-		const mSectionSummary = (() => {
-			const lines = sdpOffer.split(/\r?\n/);
-			const sections = [];
-			let current = null;
-			for (const raw of lines) {
-				const line = raw.trim();
-				if (line.startsWith("m=")) {
-					if (current) sections.push(current);
-					current = {
-						mid: null,
-						kind: line.split(" ")[0]?.slice(2) ?? "unknown",
-						direction: null,
-						codecs: []
-					};
-				} else if (current) {
-					if (line.startsWith("a=mid:")) current.mid = line.slice(6);
-					else if (/^a=(sendonly|recvonly|sendrecv|inactive)$/.test(line)) current.direction = line.slice(2);
-					else if (line.startsWith("a=rtpmap:")) current.codecs.push(line.slice(9));
-				}
-			}
-			if (current) sections.push(current);
-			return sections;
-		})();
-		log.warn("alexa rtc-session: handleOffer failed", { meta: {
-			error: message,
-			offerLen: sdpOffer.length,
-			mSections: mSectionSummary,
-			offerSdp: sdpOffer
-		} });
-		if (egressPipelineKey !== null) {
-			EGRESS_HANDLES.delete(egressHandleKey(deviceId, sessionId));
-			await releaseAlexaEgress({
-				api,
-				deviceId,
-				pipelineKey: egressPipelineKey,
-				logger: log
-			});
-		}
-		return errorEnvelope(header, "INTERNAL_ERROR", `webrtc-session.handleOffer failed: ${message}`);
-	}
-}
-async function handleSessionDisconnected(header, endpointRaw, payloadRaw, deps, _callerIdentity) {
-	const parsed = SessionDisconnectedDirectiveSchema.safeParse({
-		endpoint: endpointRaw,
-		payload: payloadRaw ?? {}
-	});
-	if (!parsed.success) return errorEnvelope(header, "INVALID_DIRECTIVE", `payload validation failed: ${parsed.error.message}`);
-	const endpoint = parsed.data.endpoint;
-	const parsedId = parseCameraEndpointId(endpoint.endpointId);
-	if (parsedId.kind === "camera") {
-		const handleKey = egressHandleKey(parsedId.deviceId, parsed.data.payload.sessionId);
-		const pipelineKey = EGRESS_HANDLES.get(handleKey);
-		if (pipelineKey !== void 0) {
-			EGRESS_HANDLES.delete(handleKey);
-			await releaseAlexaEgress({
-				api: deps.ctx.api,
-				deviceId: parsedId.deviceId,
-				pipelineKey,
-				logger: deps.logger
-			});
-		}
-		try {
-			await deps.ctx.api.webrtcSession.closeSession.mutate({
-				deviceId: parsedId.deviceId,
-				sessionId: parsed.data.payload.sessionId
-			});
-		} catch (err) {
-			deps.logger.warn("alexa rtc-session: closeSession threw on disconnect (continuing to ack)", {
-				tags: {
-					deviceId: parsedId.deviceId,
-					sessionId: parsed.data.payload.sessionId
-				},
-				meta: { error: err instanceof Error ? err.message : String(err) }
-			});
-		}
-	}
-	const disconnectedDeviceId = parsedId.kind === "camera" ? parsedId.deviceId : void 0;
-	deps.logger.info("alexa rtc-session: SessionDisconnected", {
-		tags: {
-			sessionId: parsed.data.payload.sessionId,
-			...disconnectedDeviceId !== void 0 ? { deviceId: disconnectedDeviceId } : {}
-		},
-		meta: { endpointId: endpoint.endpointId }
-	});
-	return { event: {
-		header: {
-			namespace: "Alexa",
-			name: "Response",
-			messageId: header.messageId,
-			correlationToken: header.correlationToken,
-			payloadVersion: "3"
-		},
-		endpoint: { endpointId: endpoint.endpointId },
-		payload: {}
-	} };
-}
-//#endregion
 //#region src/handlers/security-panel.ts
 var ArmPayloadSchema = object({ armState: _enum([
 	"ARMED_STAY",
@@ -43417,6 +43748,11 @@ var ExportAlexaAddon = class extends BaseAddon {
 			});
 		});
 		this.ctx.addDisposer(async () => offTunnelStarted());
+		const reaper = setInterval(() => {
+			this.reapDeadEgressHandles();
+		}, EGRESS_REAP_INTERVAL_MS);
+		reaper.unref?.();
+		this.ctx.addDisposer(async () => clearInterval(reaper));
 		this.ctx.logger.info("export-alexa: initialized", { meta: {
 			exposedCount: this.config.exposed.length,
 			skillMode: this.config.skillMode,
@@ -44071,6 +44407,37 @@ var ExportAlexaAddon = class extends BaseAddon {
 			]
 		}] });
 	}
+	/**
+	* One sweep: ask the broker which held sessions are still alive, and release
+	* the transcodes the dead ones are still holding.
+	*/
+	async reapDeadEgressHandles() {
+		const held = heldEgressHandles();
+		if (held.length === 0) return;
+		const dead = await reapDeadEgressHandles({
+			held,
+			isAlive: async (handle) => {
+				try {
+					return (await this.ctx.api.webrtcSession.getSessionState.query({
+						deviceId: handle.deviceId,
+						sessionId: handle.sessionId
+					})).alive;
+				} catch {
+					return null;
+				}
+			}
+		});
+		for (const handle of dead) {
+			logReaped(this.ctx.logger, handle);
+			forgetEgressHandle(handle);
+			await releaseAlexaEgress({
+				api: this.ctx.api,
+				deviceId: handle.deviceId,
+				pipelineKey: handle.pipelineKey,
+				logger: this.ctx.logger
+			}).catch(() => {});
+		}
+	}
 	async buildDeviceSettingsContribution(deviceId) {
 		if (!await this.isCameraDevice(deviceId)) return null;
 		const entry = this.findEntry(deviceId);
@@ -44078,6 +44445,7 @@ var ExportAlexaAddon = class extends BaseAddon {
 		const enabled = entry !== null;
 		const enabledKey = `alexa:${deviceId}:enabled`;
 		const streamPreferenceKey = `alexa:${deviceId}:streamPreference`;
+		const allowTranscodeKey = `alexa:${deviceId}:allowTranscode`;
 		const linkedCount = this.config.linkedAccounts.length;
 		return {
 			tabs: [{
@@ -44123,6 +44491,19 @@ var ExportAlexaAddon = class extends BaseAddon {
 							equals: true
 						},
 						immediate: true
+					},
+					{
+						type: "boolean",
+						key: allowTranscodeKey,
+						label: "Allow transcoding for Alexa",
+						description: "Let the hub re-encode this camera for the Echo when no stream is directly usable. Off means only a stream Alexa can take as-is (H.264, 480p-1080p) is offered — cheaper, but a camera that publishes only H.265, or only a small sub-stream, will not be streamable to Alexa at all.",
+						style: "switch",
+						value: settings.allowTranscode !== false,
+						showWhen: {
+							field: enabledKey,
+							equals: true
+						},
+						immediate: true
 					}
 				]
 			}]
@@ -44142,26 +44523,17 @@ var ExportAlexaAddon = class extends BaseAddon {
 		const idStr = String(deviceId);
 		const current = this.findEntry(deviceId);
 		const wasEnabled = current !== null;
-		const sourceProfileKey = `alexa:${deviceId}:sourceProfile`;
-		if (sourceProfileKey in patch) {
-			if (!wasEnabled) return { success: true };
-			const currentSettings = current?.settings ?? DEFAULT_DEVICE_SETTINGS;
-			const sourceProfileRaw = patch[sourceProfileKey];
-			const sourceProfile = sourceProfileRaw === "mid" ? "mid" : sourceProfileRaw === "low" ? "low" : "high";
-			await this.patchEntrySettings(deviceId, {
-				...currentSettings,
-				sourceProfile
-			});
-			return { success: true };
-		}
 		const enabledKey = `alexa:${deviceId}:enabled`;
 		const streamPreferenceKey = `alexa:${deviceId}:streamPreference`;
+		const allowTranscodeKey = `alexa:${deviceId}:allowTranscode`;
 		const enabledValue = enabledKey in patch ? Boolean(patch[enabledKey]) : wasEnabled;
 		const streamPreferenceRaw = streamPreferenceKey in patch ? patch[streamPreferenceKey] : current?.settings?.streamPreference;
 		const streamPreference = typeof streamPreferenceRaw === "string" && streamPreferenceRaw.trim().length > 0 ? streamPreferenceRaw : "auto";
+		const allowTranscode = allowTranscodeKey in patch ? Boolean(patch[allowTranscodeKey]) : current?.settings?.allowTranscode !== false;
 		const nextSettings = {
 			...current?.settings ?? DEFAULT_DEVICE_SETTINGS,
-			streamPreference
+			streamPreference,
+			allowTranscode
 		};
 		if (!enabledValue) {
 			if (wasEnabled) await this.unexposeDevice(idStr);
@@ -44173,13 +44545,22 @@ var ExportAlexaAddon = class extends BaseAddon {
 			return { success: true };
 		}
 		const currentPref = current?.settings?.streamPreference ?? "auto";
+		const currentAllow = current?.settings?.allowTranscode !== false;
 		await this.patchEntrySettings(deviceId, nextSettings);
-		if (currentPref !== streamPreference) {
-			this.ctx.logger.info("export-alexa: streamPreference changed — refreshing exposure", { meta: {
-				deviceId,
-				from: currentPref,
-				to: streamPreference
-			} });
+		if (currentPref !== streamPreference || currentAllow !== allowTranscode) {
+			this.ctx.logger.info("export-alexa: source settings changed — refreshing exposure", {
+				tags: { deviceId },
+				meta: {
+					streamPreference: {
+						from: currentPref,
+						to: streamPreference
+					},
+					allowTranscode: {
+						from: currentAllow,
+						to: allowTranscode
+					}
+				}
+			});
 			try {
 				await this.unexposeDevice(idStr);
 				await this.exposeDevice(idStr);