@camstack/addon-export-hap 1.2.132 → 1.2.139

package/dist/hap-export.addon.js

@@ -90670,6 +90670,153 @@ function createClipThumbnailMinter(input) {
 	};
 }
 //#endregion
+//#region src/hksv/recording-active.ts
+/**
+* `true`/`false` as HomeKit holds it, or `null` when this accessory does not
+* offer recording at all.
+*/
+function readHomekitRecordingActive(accessories) {
+	for (const accessory of accessories) {
+		const service = accessory.getService(import_dist.Service.CameraRecordingManagement);
+		if (service === void 0) continue;
+		const value = service.getCharacteristic(import_dist.Characteristic.Active).value;
+		if (typeof value === "number") return value === 1;
+		if (typeof value === "boolean") return value;
+		return null;
+	}
+	return null;
+}
+/**
+* One sentence for the settings page: what HomeKit says, or why it was never
+* asked.
+*
+* The cost stays in the text even though the switch is gone. It is still the
+* operator's to understand — a camera recording here runs a permanent ffmpeg —
+* and a status line that reported only the state would have quietly dropped
+* the one number that decides whether to turn it on.
+*/
+function describeHomekitRecording(active, lastBuild) {
+	if (active === true) return "HomeKit is recording this camera. Turn it off in the Home app (Camera settings → “Stream”), not here — iOS owns this switch and keeps it across reboots. While it is on, this camera runs a permanent prebuffer (~0.7% of one CPU core on the copy branch).";
+	if (active === false) return "This camera offers recording and HomeKit has it off. Turn it on in the Home app (Camera settings → “Stream and Allow Recording”); it needs iCloud+ and a home hub. Nothing runs here until you do.";
+	if (lastBuild !== null && !lastBuild.advertised) return `Recording is not offered for this camera: ${lastBuild.detail ?? "the accessory could not advertise it"}.`;
+	return "Not known yet — this camera’s accessory has not published its recording service in this process. It appears once the accessory is built.";
+}
+//#endregion
+//#region src/hksv/recording-source.ts
+/** The tallest frame the recording path will hold in its prebuffer. */
+var MAX_RECORDING_HEIGHT = 1080;
+/** HKSV takes H.264 only — AAC audio and H.264 video, no negotiation. */
+var RECORDABLE_CODEC = "h264";
+/**
+* Pick the slot the recording child pulls.
+*
+* Deliberately NOT `pickPreferredRtspEntry`: that picker resolves the operator's
+* LIVE preference and, on `auto`, steers by the resolution iOS negotiated for a
+* live session — neither is a fact about recording, and on 615 it selects `mid`,
+* a 10 fps slot. Recording has one criterion, applied here and nowhere else:
+* the largest copyable frame that does not exceed {@link MAX_RECORDING_HEIGHT}.
+*/
+function pickRecordingSource(entries, options = {}) {
+	const enabled = entries.filter((e) => e.enabled);
+	if (enabled.length === 0) return {
+		ok: false,
+		refusal: "no-enabled-stream"
+	};
+	const h264 = enabled.filter((e) => normaliseCodec(e.codec) === RECORDABLE_CODEC);
+	const pool = h264.length > 0 ? h264 : options.allowTranscode === true ? enabled : [];
+	if (pool.length === 0) return {
+		ok: false,
+		refusal: "no-h264-stream"
+	};
+	const transcode = h264.length === 0;
+	const sized = pool.filter(hasUsableResolution);
+	if (sized.length === 0) return {
+		ok: false,
+		refusal: "no-resolution"
+	};
+	const withinCeiling = sized.filter((e) => height(e) <= MAX_RECORDING_HEIGHT);
+	const within = withinCeiling.length > 0;
+	const best = [...within ? withinCeiling : sized].sort((a, b) => within ? height(b) - height(a) : height(a) - height(b))[0];
+	if (best === void 0 || best.resolution === void 0) return {
+		ok: false,
+		refusal: "no-resolution"
+	};
+	return {
+		ok: true,
+		source: {
+			brokerId: best.brokerId,
+			profile: best.profile ?? best.brokerId,
+			transcode,
+			url: best.url,
+			mutedUrl: best.mutedUrl,
+			width: best.resolution.width,
+			height: best.resolution.height
+		}
+	};
+}
+/** A one-line reason for the log — silence about a withdrawn service reads as a bug. */
+function refusalReason(refusal) {
+	switch (refusal) {
+		case "no-enabled-stream": return "the camera has no enabled RTSP profile";
+		case "no-h264-stream": return "every enabled profile is H.265 — HKSV takes H.264 only, and a permanent transcode costs 128x a copy";
+		case "no-resolution": return "no enabled profile declares a resolution, so nothing honest could be advertised";
+	}
+}
+function height(entry) {
+	return entry.resolution?.height ?? 0;
+}
+function hasUsableResolution(entry) {
+	const r = entry.resolution;
+	return r !== void 0 && r.width > 0 && r.height > 0;
+}
+/** Publishers spell H.265 four ways; the same normalisation the broker uses. */
+function normaliseCodec(codec) {
+	return (codec ?? "").toLowerCase().replace(/[.\s-]/g, "");
+}
+//#endregion
+//#region src/hksv/recordability-token.ts
+/** No slot is recordable. A real answer, and a fingerprint-moving one. */
+var RECORDABILITY_NONE = "rec:none";
+/**
+* The slot HKSV would record from, as a fingerprint token.
+*
+* `null` when `entries` is null — the profiles could not be read, which is not
+* a claim about the camera.
+*/
+function recordabilityToken(entries, options = {}) {
+	if (entries === null) return null;
+	const choice = pickRecordingSource(entries, options);
+	return choice.ok ? `rec:${choice.source.profile}${choice.source.transcode ? "+x" : ""}` : RECORDABILITY_NONE;
+}
+var TOKEN_SUFFIX = /\|(rec:[^|]*)$/;
+/**
+* Attach the recording token to a device-shape fingerprint.
+*
+* On an unreadable read the persisted token is carried forward — but only onto
+* the base it was persisted against. If the device's SHAPE also changed, that
+* change is a rebuild in its own right and the token has nothing to say about
+* it; inventing one there would advertise a recording slot nobody read.
+*/
+function withRecordabilityToken(input) {
+	if (input.token !== null) return `${input.base}|${input.token}`;
+	const carried = input.persisted?.match(TOKEN_SUFFIX);
+	if (carried === null || carried === void 0) return input.base;
+	return carried.input?.slice(0, carried.index) === input.base ? `${input.base}|${carried[1]}` : input.base;
+}
+/**
+* What this camera could record, as one fingerprint token.
+*
+* There used to be an `rec:off` here, for a per-camera switch of ours. That
+* switch is gone (D589): whether HomeKit RECORDS is HomeKit's own persisted
+* characteristic, it does not change the accessory's shape, and a rebuild is
+* about shape. What still belongs here is the CAPABILITY — which slot, and
+* whether serving it means running an encoder — because those are two
+* different accessories to build.
+*/
+function recordabilityTokenFor(input) {
+	return recordabilityToken(input.entries, { allowTranscode: input.allowTranscode !== false });
+}
+//#endregion
 //#region src/hksv/videoclips-plane.ts
 /**
 * The two data-plane routes behind the HomeKit clip source.
@@ -90932,8 +91079,9 @@ function createHksvClipPlanes(deps) {
 *
 * ## The source EXISTS because of HomeKit, and is not a switch
 *
-* A camera has this source because it is exported to HomeKit AND HomeKit
-* recording is on for it; turn either off and the row is gone (D550, D569 § 5).
+* A camera has this source because it is exported to HomeKit and HomeKit has
+* not said no to recording it; un-export it, or switch recording off in the
+* Home app, and the row is gone (D550, D569 § 5, D589).
 * There is deliberately no enable control of its own — a knob over somebody
 * else's decision is D62's defect. `keepClips` is NOT that gate either: it
 * governs the TEE, and the clips already kept remain the truth about this
@@ -90980,7 +91128,7 @@ function createHksvVideoclipsProvider(deps) {
 	*/
 	async function measure(deviceId) {
 		const facts = deps.describeCamera(deviceId);
-		if (!facts.exported || !facts.recording) return null;
+		if (!facts.exported || facts.homekitRecording === false) return null;
 		const catalog = await deps.readCatalog(deviceId);
 		return {
 			availability: availabilityFor(facts, catalog),
@@ -106335,6 +106483,72 @@ function buildRecordingOptions(input) {
 	};
 }
 //#endregion
+//#region src/hksv/recording-invocation.ts
+/**
+* The resolution the accessory may advertise, which is the one it can deliver.
+*
+* A copy is advertised at its source size whatever that is — there is no
+* encoder to resize with, and advertising a size we cannot produce is the
+* "stream that does not match its own advertisement" defect in miniature.
+* A transcode above the ceiling is fitted down, because with an encoder in the
+* pipeline the 6.35 MB 4K fragment is a choice rather than a fact, and iOS
+* renders HKSV clips at 1080p regardless.
+*/
+function recordingOutput(source) {
+	if (!source.transcode || source.height <= 1080) return {
+		width: source.width,
+		height: source.height,
+		scaled: false
+	};
+	return {
+		width: Math.max(2, Math.round(source.width * MAX_RECORDING_HEIGHT / source.height / 2) * 2),
+		height: MAX_RECORDING_HEIGHT,
+		scaled: true
+	};
+}
+/** The invocation, minus the sink and sidecar the child owns. */
+function buildRecordingInvocation(input) {
+	const { source } = input;
+	const audio = input.audioActive ? {
+		kind: "encode",
+		codec: "aac",
+		bitrateKbps: 32,
+		sampleRateHz: HKSV_AUDIO_SAMPLE_RATE_HZ,
+		channels: 1
+	} : { kind: "none" };
+	const out = recordingOutput(source);
+	const video = source.transcode ? {
+		kind: "encode",
+		encoder: "libx264",
+		preset: "veryfast",
+		profile: "main",
+		level: "4.0",
+		pixelFormat: "yuv420p",
+		forceKeyFramesSeconds: Math.max(1, Math.round(input.fragmentMs / 1e3)),
+		bf: 0,
+		...out.scaled ? { scale: {
+			mode: "fit",
+			width: out.width,
+			height: out.height
+		} } : {}
+	} : { kind: "copy" };
+	return {
+		logLevel: "error",
+		decodeHwAccel: source.transcode ? input.decodeHwAccel : null,
+		input: {
+			url: input.audioActive ? source.url : source.mutedUrl,
+			rtspTransport: "tcp",
+			...source.transcode && input.decodeInputArgs !== void 0 && input.decodeInputArgs.length > 0 ? { extraArgs: input.decodeInputArgs } : {},
+			analyzeDurationUs: 1e6,
+			probeSizeBytes: 1e6
+		},
+		video,
+		audio,
+		threadCount: 0,
+		outputArgs: []
+	};
+}
+//#endregion
 //#region src/hksv/fragment-source.ts
 /**
 * How far back the prebuffer ring reaches.
@@ -106502,6 +106716,7 @@ var HksvFragmentSource = class {
 				meta: {
 					brokerId: this.input.source.brokerId,
 					resolution: `${this.input.source.width}x${this.input.source.height}`,
+					branch: this.input.source.transcode ? "transcode" : "copy",
 					fragmentMs: this.input.fragmentMs,
 					audioActive: this.audioActive,
 					windowMs: PREBUFFER_WINDOW_MS
@@ -106566,27 +106781,13 @@ var HksvFragmentSource = class {
 	* takes AAC only — which the same measurement priced at 0.4 % of a core.
 	*/
 	buildInvocation() {
-		const audio = this.audioActive ? {
-			kind: "encode",
-			codec: "aac",
-			bitrateKbps: 32,
-			sampleRateHz: HKSV_AUDIO_SAMPLE_RATE_HZ,
-			channels: 1
-		} : { kind: "none" };
-		return {
-			logLevel: "error",
-			decodeHwAccel: null,
-			input: {
-				url: this.audioActive ? this.input.source.url : this.input.source.mutedUrl,
-				rtspTransport: "tcp",
-				analyzeDurationUs: 1e6,
-				probeSizeBytes: 1e6
-			},
-			video: { kind: "copy" },
-			audio,
-			threadCount: 0,
-			outputArgs: []
-		};
+		return buildRecordingInvocation({
+			source: this.input.source,
+			audioActive: this.audioActive,
+			fragmentMs: this.input.fragmentMs,
+			decodeHwAccel: this.input.decodeHwAccel ?? null,
+			...this.input.decodeInputArgs === void 0 ? {} : { decodeInputArgs: this.input.decodeInputArgs }
+		});
 	}
 };
 //#endregion
@@ -106946,74 +107147,6 @@ var HksvRecordingDelegate = class {
 	}
 };
 //#endregion
-//#region src/hksv/recording-source.ts
-/** The tallest frame the recording path will hold in its prebuffer. */
-var MAX_RECORDING_HEIGHT = 1080;
-/** HKSV takes H.264 only — AAC audio and H.264 video, no negotiation. */
-var RECORDABLE_CODEC = "h264";
-/**
-* Pick the slot the recording child pulls.
-*
-* Deliberately NOT `pickPreferredRtspEntry`: that picker resolves the operator's
-* LIVE preference and, on `auto`, steers by the resolution iOS negotiated for a
-* live session — neither is a fact about recording, and on 615 it selects `mid`,
-* a 10 fps slot. Recording has one criterion, applied here and nowhere else:
-* the largest copyable frame that does not exceed {@link MAX_RECORDING_HEIGHT}.
-*/
-function pickRecordingSource(entries) {
-	const enabled = entries.filter((e) => e.enabled);
-	if (enabled.length === 0) return {
-		ok: false,
-		refusal: "no-enabled-stream"
-	};
-	const h264 = enabled.filter((e) => normaliseCodec(e.codec) === RECORDABLE_CODEC);
-	if (h264.length === 0) return {
-		ok: false,
-		refusal: "no-h264-stream"
-	};
-	const sized = h264.filter(hasUsableResolution);
-	if (sized.length === 0) return {
-		ok: false,
-		refusal: "no-resolution"
-	};
-	const withinCeiling = sized.filter((e) => height(e) <= MAX_RECORDING_HEIGHT);
-	const best = [...withinCeiling.length > 0 ? withinCeiling : sized].sort((a, b) => withinCeiling.length > 0 ? height(b) - height(a) : height(a) - height(b))[0];
-	if (best === void 0 || best.resolution === void 0) return {
-		ok: false,
-		refusal: "no-resolution"
-	};
-	return {
-		ok: true,
-		source: {
-			brokerId: best.brokerId,
-			profile: best.profile ?? best.brokerId,
-			url: best.url,
-			mutedUrl: best.mutedUrl,
-			width: best.resolution.width,
-			height: best.resolution.height
-		}
-	};
-}
-/** A one-line reason for the log — silence about a withdrawn service reads as a bug. */
-function refusalReason(refusal) {
-	switch (refusal) {
-		case "no-enabled-stream": return "the camera has no enabled RTSP profile";
-		case "no-h264-stream": return "every enabled profile is H.265 — HKSV takes H.264 only, and a permanent transcode costs 128x a copy";
-		case "no-resolution": return "no enabled profile declares a resolution, so nothing honest could be advertised";
-	}
-}
-function height(entry) {
-	return entry.resolution?.height ?? 0;
-}
-function hasUsableResolution(entry) {
-	const r = entry.resolution;
-	return r !== void 0 && r.width > 0 && r.height > 0;
-}
-/** Publishers spell H.265 four ways; the same normalisation the broker uses. */
-function normaliseCodec(codec) {
-	return (codec ?? "").toLowerCase().replace(/[.\s-]/g, "");
-}
-//#endregion
 //#region src/hksv/build-recording.ts
 /**
 * Assemble HomeKit Secure Video for one camera — the ADVERTISEMENT and the
@@ -107065,7 +107198,7 @@ async function buildHksvRecording(input) {
 		note("profiles-unreadable", "cameraStreams.getProfileRtspEntries could not be read");
 		return null;
 	}
-	const choice = pickRecordingSource(entries);
+	const choice = pickRecordingSource(entries, { allowTranscode: bctx.options.hapDeviceSettings?.allowTranscode !== false });
 	if (!choice.ok) {
 		log.info("export-hap: HKSV withheld — no recordable stream", { meta: {
 			refusal: choice.refusal,
@@ -107075,9 +107208,10 @@ async function buildHksvRecording(input) {
 		return null;
 	}
 	const source = choice.source;
+	const decodeHwAccel = source.transcode ? await resolveDecodeHwAccel(bctx, log) : null;
 	const gopMs = await readSourceGopMs(bctx, source.width, source.height);
-	const fragmentLengthMs = deriveFragmentLengthMs(gopMs);
-	if (fragmentLengthMs === null) {
+	const fragmentLengthMs = source.transcode ? HKSV_FRAGMENT_LENGTHS_MS[0] : deriveFragmentLengthMs(gopMs);
+	if (fragmentLengthMs === void 0 || fragmentLengthMs === null) {
 		log.warn("export-hap: HKSV withheld — the camera key-frame interval is longer than any fragment length we advertise", { meta: {
 			gopMs,
 			brokerId: source.brokerId
@@ -107088,9 +107222,10 @@ async function buildHksvRecording(input) {
 	const parsedProfile = CamProfileSchema.safeParse(source.profile);
 	const recordedProfile = parsedProfile.success ? parsedProfile.data : null;
 	const fps = resolveFps(input.fpsByProfile, source.profile);
+	const out = recordingOutput(source);
 	const options = buildRecordingOptions({
-		width: source.width,
-		height: source.height,
+		width: out.width,
+		height: out.height,
 		fps,
 		fragmentLengthMs
 	});
@@ -107100,8 +107235,8 @@ async function buildHksvRecording(input) {
 		logger: log,
 		deviceId: numericDeviceId,
 		store: clipStore,
-		width: source.width,
-		height: source.height,
+		width: out.width,
+		height: out.height,
 		fragmentMs: fragmentLengthMs,
 		...recordedProfile === null ? {} : { profile: recordedProfile }
 	});
@@ -107120,14 +107255,21 @@ async function buildHksvRecording(input) {
 			spawnFn: node_child_process.spawn,
 			source,
 			fragmentMs,
-			audioActive
+			audioActive,
+			decodeHwAccel: decodeHwAccel?.hwaccel ?? null,
+			...decodeHwAccel === null || decodeHwAccel.extraInputArgs.length === 0 ? {} : { decodeInputArgs: decodeHwAccel.extraInputArgs }
 		})
 	});
 	const advertisedResolution = options.video.resolutions[0];
 	log.info("export-hap: HKSV ADVERTISED — recording is offered for this camera", { meta: {
 		brokerId: source.brokerId,
 		profile: source.profile,
-		resolution: `${source.width}x${source.height}`,
+		resolution: `${out.width}x${out.height}`,
+		branch: source.transcode ? "transcode" : "copy",
+		...source.transcode ? {
+			sourceResolution: `${source.width}x${source.height}`,
+			decodeHwAccel: decodeHwAccel?.hwaccel ?? "software"
+		} : {},
 		measuredFps: fps,
 		advertisedFps: advertisedResolution?.[2] ?? null,
 		fragmentLengthMs,
@@ -107142,6 +107284,27 @@ async function buildHksvRecording(input) {
 		dispose: () => delegate.dispose()
 	};
 }
+/**
+* The `-hwaccel` value for a transcoding prebuffer, and the flags that travel
+* with it.
+*
+* Software is a legitimate answer and is always NAMED: a camera that quietly
+* stopped using the GPU and one that never had it look identical in a CPU
+* graph, and on this branch the difference is most of a core, permanently.
+*/
+async function resolveDecodeHwAccel(bctx, log) {
+	const decision = selectHwDecode({
+		transcode: true,
+		reading: await probeDecoderHwaccel({
+			source: decoderInfoSourceFromContext(bctx.ctx),
+			log,
+			memo: bctx.options.decodeMemos.reading
+		}),
+		platform: process.platform
+	});
+	if (decision.kind === "software") log.warn("export-hap: HKSV will transcode in SOFTWARE — this costs most of a core, permanently", { meta: { reason: decision.reason } });
+	return decision;
+}
 /** `cameraStreams.getProfileRtspEntries`, or `null` when the cap is unreachable. */
 async function readProfileEntries(bctx) {
 	try {
@@ -108137,13 +108300,12 @@ async function buildCameraAccessory(input) {
 		bctx,
 		streamingOptions: streams.streamingOptions
 	}));
-	const recordingEnabled = options.hapDeviceSettings.hksvRecording === true;
 	let recordingAudioActive = true;
-	const recording = recordingEnabled ? await buildHksvRecording({
+	const recording = await buildHksvRecording({
 		bctx,
 		fpsByProfile: advertisedVideo.fpsByProfile,
 		isAudioActive: () => recordingAudioActive
-	}) : null;
+	});
 	const controller = new (isDoorbell ? import_dist.DoorbellController : import_dist.CameraController)({
 		delegate: streams.delegate,
 		streamingOptions: streams.streamingOptions,
@@ -108386,23 +108548,13 @@ function syncStateToJson(map) {
 * capabilities bound to it — restricting coverage by type is precisely what
 * confined this exporter to cameras for its first three rounds.
 */
-var DEFAULT_DEVICE_SETTINGS = {
-	streamPreference: "auto",
-	hksvRecording: true
-};
 /**
-* ON unless explicitly switched off — operator decision 2026-08-08 (flipped
-* from the launch default of off). ABSENT must resolve to ON or the flip is a
-* lie for every entry persisted before the field existed, so every read goes
-* through this one resolver (`!== false`), never a scattered `=== true`. The
-* cost that made off-by-default look prudent is measured and small on the only
-* branch the recorder accepts (copy: 0.7 % of a core / ~30 MB RSS, D84), and a
-* camera the recorder cannot copy refuses recording with a logged reason
-* rather than paying for a transcode.
+* What an entry with no stored settings is read as — and what a camera
+* exported TODAY is built from. Exported so a spec can assert the one thing
+* that matters about it: it must resolve to NOT recording, or "off by default"
+* is true only for cameras exposed before the flip.
 */
-function resolveHksvRecording(settings) {
-	return settings?.hksvRecording !== false;
-}
+var DEFAULT_DEVICE_SETTINGS = { streamPreference: "auto" };
 /**
 * Whether this camera offers Apple's NEW camera service alongside the classic
 * one — `camera-multi-tier-rtp-stream-management` (0x8031), where HEVC and 4K
@@ -108445,11 +108597,11 @@ var EXPORT_HAP_ADDON_ID = "export-hap";
 * stays and says the copies are off, which is D62's other half: an off switch
 * is REPORTED off, never made to look like a broken camera.
 */
-function describeHksvCamera(entry, lastBuild) {
+function describeHksvCamera(entry, lastBuild, homekitRecording) {
 	const isCamera = entry !== null && entry.mapperKind === "camera";
 	return {
 		exported: isCamera,
-		recording: isCamera && resolveHksvRecording(entry.settings),
+		homekitRecording: isCamera ? homekitRecording : null,
 		keepingClips: isCamera && resolveKeepHomekitClips(entry.settings),
 		lastBuild
 	};
@@ -108693,7 +108845,7 @@ var ExportHapAddon = class extends BaseAddon {
 		const clipsProvider = createHksvVideoclipsProvider({
 			logger: this.ctx.logger.child("hksv-clips"),
 			addonId: EXPORT_HAP_ADDON_ID,
-			describeCamera: (deviceId) => describeHksvCamera(this.findEntry(deviceId), this.hksvBuilds.lastFor(deviceId)),
+			describeCamera: (deviceId) => describeHksvCamera(this.findEntry(deviceId), this.hksvBuilds.lastFor(deviceId), readHomekitRecordingActive(this.exposed.get(String(deviceId))?.accessories ?? [])),
 			readCatalog: async (deviceId) => await this.hksvClipStore?.listCatalog(deviceId) ?? { kind: "no-root" },
 			locationRefusal: () => this.hksvClipLocation?.lastRefusal ?? null,
 			mediaUrl: (deviceId, stem) => this.hksvClipUrl("media", deviceId, stem),
@@ -108849,7 +109001,6 @@ var ExportHapAddon = class extends BaseAddon {
 				},
 				hapDeviceSettings: {
 					streamPreference: entrySettings.streamPreference ?? "auto",
-					hksvRecording: resolveHksvRecording(entrySettings),
 					keepHomekitClips: resolveKeepHomekitClips(entrySettings),
 					multiTierService: resolveMultiTierService(entrySettings),
 					allowTranscode: entrySettings.allowTranscode !== false
@@ -108930,15 +109081,40 @@ var ExportHapAddon = class extends BaseAddon {
 				features: device.features
 			});
 			const persisted = syncStateFromJson(this.config.exportSyncState).get(deviceId)?.fingerprint;
+			const withToken = withRecordabilityToken({
+				base: fresh,
+				token: await this.readRecordabilityToken(deviceId, device.type),
+				persisted
+			});
 			return resolveExportFingerprint({
 				ready: device.probed ?? false,
-				fresh,
+				fresh: withToken,
 				persisted
 			});
 		} catch {
 			return null;
 		}
 	}
+	/**
+	* The slot HKSV would record this camera from, for the fingerprint.
+	*
+	* `null` — do not move the fingerprint — for anything that is not a camera
+	* (a switch has no recording decision, and stamping a constant on it would
+	* republish every non-camera accessory once for nothing) and for a camera
+	* whose profiles could not be read right now.
+	*/
+	async readRecordabilityToken(deviceId, type) {
+		if (pickMapperKind(type) !== "camera") return null;
+		try {
+			const entries = await (await this.ctx.fetchDevice(deviceId)).cameraStreams?.getProfileRtspEntries({});
+			return recordabilityTokenFor({
+				allowTranscode: this.findEntry(deviceId)?.settings?.allowTranscode !== false,
+				entries: entries ?? null
+			});
+		} catch {
+			return null;
+		}
+	}
 	/** Persist a device's current export fingerprint into `exportSyncState`
 	*  (best-effort; called after a successful attach). */
 	async persistFingerprint(deviceId, fingerprint) {
@@ -109204,7 +109380,6 @@ var ExportHapAddon = class extends BaseAddon {
 		const enabled = entry !== null;
 		const enabledKey = `hap:${deviceId}:enabled`;
 		const streamPreferenceKey = `hap:${deviceId}:streamPreference`;
-		const hksvKey = `hap:${deviceId}:hksvRecording`;
 		const multiTierKey = `hap:${deviceId}:multiTierService`;
 		const useBridgeKey = `hap:${deviceId}:useBridge`;
 		const allowTranscodeKey = `hap:${deviceId}:allowTranscode`;
@@ -109255,17 +109430,14 @@ var ExportHapAddon = class extends BaseAddon {
 				immediate: true
 			},
 			{
-				type: "boolean",
-				key: hksvKey,
+				type: "info",
+				key: `hap:${deviceId}:hksvRecordingStatus`,
 				label: "HomeKit recording (Secure Video)",
-				description: "Offer “Stream and Allow Recording” in iOS Home. Requires iCloud+ and a home hub. Keeps a continuous 8s prebuffer for this camera (~0.7% of one CPU core, H.264 sources only).",
-				style: "switch",
-				value: resolveHksvRecording(settings),
+				content: describeHomekitRecording(readHomekitRecordingActive(this.exposed.get(String(deviceId))?.accessories ?? []), this.hksvBuilds.lastFor(deviceId)),
 				showWhen: {
 					field: enabledKey,
 					equals: true
-				},
-				immediate: true
+				}
 			},
 			{
 				type: "boolean",
@@ -109288,7 +109460,7 @@ var ExportHapAddon = class extends BaseAddon {
 				style: "switch",
 				value: resolveKeepHomekitClips(settings),
 				showWhen: {
-					field: hksvKey,
+					field: enabledKey,
 					equals: true
 				},
 				immediate: true
@@ -109388,7 +109560,6 @@ var ExportHapAddon = class extends BaseAddon {
 		const wasEnabled = this.exposed.has(deviceIdStr);
 		const enabledKey = `hap:${deviceId}:enabled`;
 		const streamPreferenceKey = `hap:${deviceId}:streamPreference`;
-		const hksvKey = `hap:${deviceId}:hksvRecording`;
 		const useBridgeKey = `hap:${deviceId}:useBridge`;
 		const allowTranscodeKey = `hap:${deviceId}:allowTranscode`;
 		const multiTierKey = `hap:${deviceId}:multiTierService`;
@@ -109397,7 +109568,6 @@ var ExportHapAddon = class extends BaseAddon {
 		const enabledValue = enabledKey in patch ? Boolean(patch[enabledKey]) : wasEnabled;
 		const streamPreferenceRaw = streamPreferenceKey in patch ? patch[streamPreferenceKey] : current?.settings?.streamPreference;
 		const streamPreference = typeof streamPreferenceRaw === "string" && streamPreferenceRaw.trim().length > 0 ? streamPreferenceRaw : "auto";
-		const hksvRecording = hksvKey in patch ? Boolean(patch[hksvKey]) : resolveHksvRecording(current?.settings);
 		const useBridge = useBridgeKey in patch ? Boolean(patch[useBridgeKey]) : current?.settings?.useBridge !== false;
 		const allowTranscode = allowTranscodeKey in patch ? Boolean(patch[allowTranscodeKey]) : current?.settings?.allowTranscode !== false;
 		const multiTierService = multiTierKey in patch ? Boolean(patch[multiTierKey]) : resolveMultiTierService(current?.settings);
@@ -109409,7 +109579,6 @@ var ExportHapAddon = class extends BaseAddon {
 		const nextSettings = {
 			...current?.settings ?? DEFAULT_DEVICE_SETTINGS,
 			streamPreference,
-			hksvRecording,
 			useBridge,
 			allowTranscode,
 			multiTierService,
@@ -109426,7 +109595,6 @@ var ExportHapAddon = class extends BaseAddon {
 			return { success: true };
 		}
 		const currentPref = current?.settings?.streamPreference ?? "auto";
-		const currentHksv = resolveHksvRecording(current?.settings);
 		const currentKeepClips = resolveKeepHomekitClips(current?.settings);
 		const mapperKind = current?.mapperKind ?? "generic";
 		const wasBridged = shouldBridge({
@@ -109438,16 +109606,12 @@ var ExportHapAddon = class extends BaseAddon {
 			useBridge
 		});
 		await this.updateEntrySettings(deviceIdStr, nextSettings);
-		if (currentPref !== streamPreference || currentHksv !== hksvRecording || currentKeepClips !== keepClips || wasBridged !== willBridge) {
+		if (currentPref !== streamPreference || currentKeepClips !== keepClips || wasBridged !== willBridge) {
 			log.info("export-hap: per-camera export settings changed — refreshing accessory", { meta: {
 				streamPreference: {
 					from: currentPref,
 					to: streamPreference
 				},
-				hksvRecording: {
-					from: currentHksv,
-					to: hksvRecording
-				},
 				keepClips: {
 					from: currentKeepClips,
 					to: keepClips
@@ -109534,6 +109698,7 @@ function errMsg(err) {
 }
 //#endregion
 exports.DEFAULT_CLIP_RETENTION_DAYS = DEFAULT_CLIP_RETENTION_DAYS;
+exports.DEFAULT_DEVICE_SETTINGS = DEFAULT_DEVICE_SETTINGS;
 exports.EXPORT_HAP_ADDON_ID = EXPORT_HAP_ADDON_ID;
 exports.ExportHapAddon = ExportHapAddon;
 exports.default = ExportHapAddon;
@@ -109543,7 +109708,6 @@ exports.describeHksvCamera = describeHksvCamera;
 exports.initHapStorage = initHapStorage;
 exports.publishStandalone = publishStandalone;
 exports.resolveClipRetentionDays = resolveClipRetentionDays;
-exports.resolveHksvRecording = resolveHksvRecording;
 exports.resolveKeepHomekitClips = resolveKeepHomekitClips;
 exports.resolveMultiTierService = resolveMultiTierService;
 exports.unpublishAccessory = unpublishAccessory;

package/dist/hap-export.addon.mjs

@@ -90660,6 +90660,153 @@ function createClipThumbnailMinter(input) {
 	};
 }
 //#endregion
+//#region src/hksv/recording-active.ts
+/**
+* `true`/`false` as HomeKit holds it, or `null` when this accessory does not
+* offer recording at all.
+*/
+function readHomekitRecordingActive(accessories) {
+	for (const accessory of accessories) {
+		const service = accessory.getService(import_dist.Service.CameraRecordingManagement);
+		if (service === void 0) continue;
+		const value = service.getCharacteristic(import_dist.Characteristic.Active).value;
+		if (typeof value === "number") return value === 1;
+		if (typeof value === "boolean") return value;
+		return null;
+	}
+	return null;
+}
+/**
+* One sentence for the settings page: what HomeKit says, or why it was never
+* asked.
+*
+* The cost stays in the text even though the switch is gone. It is still the
+* operator's to understand — a camera recording here runs a permanent ffmpeg —
+* and a status line that reported only the state would have quietly dropped
+* the one number that decides whether to turn it on.
+*/
+function describeHomekitRecording(active, lastBuild) {
+	if (active === true) return "HomeKit is recording this camera. Turn it off in the Home app (Camera settings → “Stream”), not here — iOS owns this switch and keeps it across reboots. While it is on, this camera runs a permanent prebuffer (~0.7% of one CPU core on the copy branch).";
+	if (active === false) return "This camera offers recording and HomeKit has it off. Turn it on in the Home app (Camera settings → “Stream and Allow Recording”); it needs iCloud+ and a home hub. Nothing runs here until you do.";
+	if (lastBuild !== null && !lastBuild.advertised) return `Recording is not offered for this camera: ${lastBuild.detail ?? "the accessory could not advertise it"}.`;
+	return "Not known yet — this camera’s accessory has not published its recording service in this process. It appears once the accessory is built.";
+}
+//#endregion
+//#region src/hksv/recording-source.ts
+/** The tallest frame the recording path will hold in its prebuffer. */
+var MAX_RECORDING_HEIGHT = 1080;
+/** HKSV takes H.264 only — AAC audio and H.264 video, no negotiation. */
+var RECORDABLE_CODEC = "h264";
+/**
+* Pick the slot the recording child pulls.
+*
+* Deliberately NOT `pickPreferredRtspEntry`: that picker resolves the operator's
+* LIVE preference and, on `auto`, steers by the resolution iOS negotiated for a
+* live session — neither is a fact about recording, and on 615 it selects `mid`,
+* a 10 fps slot. Recording has one criterion, applied here and nowhere else:
+* the largest copyable frame that does not exceed {@link MAX_RECORDING_HEIGHT}.
+*/
+function pickRecordingSource(entries, options = {}) {
+	const enabled = entries.filter((e) => e.enabled);
+	if (enabled.length === 0) return {
+		ok: false,
+		refusal: "no-enabled-stream"
+	};
+	const h264 = enabled.filter((e) => normaliseCodec(e.codec) === RECORDABLE_CODEC);
+	const pool = h264.length > 0 ? h264 : options.allowTranscode === true ? enabled : [];
+	if (pool.length === 0) return {
+		ok: false,
+		refusal: "no-h264-stream"
+	};
+	const transcode = h264.length === 0;
+	const sized = pool.filter(hasUsableResolution);
+	if (sized.length === 0) return {
+		ok: false,
+		refusal: "no-resolution"
+	};
+	const withinCeiling = sized.filter((e) => height(e) <= MAX_RECORDING_HEIGHT);
+	const within = withinCeiling.length > 0;
+	const best = [...within ? withinCeiling : sized].sort((a, b) => within ? height(b) - height(a) : height(a) - height(b))[0];
+	if (best === void 0 || best.resolution === void 0) return {
+		ok: false,
+		refusal: "no-resolution"
+	};
+	return {
+		ok: true,
+		source: {
+			brokerId: best.brokerId,
+			profile: best.profile ?? best.brokerId,
+			transcode,
+			url: best.url,
+			mutedUrl: best.mutedUrl,
+			width: best.resolution.width,
+			height: best.resolution.height
+		}
+	};
+}
+/** A one-line reason for the log — silence about a withdrawn service reads as a bug. */
+function refusalReason(refusal) {
+	switch (refusal) {
+		case "no-enabled-stream": return "the camera has no enabled RTSP profile";
+		case "no-h264-stream": return "every enabled profile is H.265 — HKSV takes H.264 only, and a permanent transcode costs 128x a copy";
+		case "no-resolution": return "no enabled profile declares a resolution, so nothing honest could be advertised";
+	}
+}
+function height(entry) {
+	return entry.resolution?.height ?? 0;
+}
+function hasUsableResolution(entry) {
+	const r = entry.resolution;
+	return r !== void 0 && r.width > 0 && r.height > 0;
+}
+/** Publishers spell H.265 four ways; the same normalisation the broker uses. */
+function normaliseCodec(codec) {
+	return (codec ?? "").toLowerCase().replace(/[.\s-]/g, "");
+}
+//#endregion
+//#region src/hksv/recordability-token.ts
+/** No slot is recordable. A real answer, and a fingerprint-moving one. */
+var RECORDABILITY_NONE = "rec:none";
+/**
+* The slot HKSV would record from, as a fingerprint token.
+*
+* `null` when `entries` is null — the profiles could not be read, which is not
+* a claim about the camera.
+*/
+function recordabilityToken(entries, options = {}) {
+	if (entries === null) return null;
+	const choice = pickRecordingSource(entries, options);
+	return choice.ok ? `rec:${choice.source.profile}${choice.source.transcode ? "+x" : ""}` : RECORDABILITY_NONE;
+}
+var TOKEN_SUFFIX = /\|(rec:[^|]*)$/;
+/**
+* Attach the recording token to a device-shape fingerprint.
+*
+* On an unreadable read the persisted token is carried forward — but only onto
+* the base it was persisted against. If the device's SHAPE also changed, that
+* change is a rebuild in its own right and the token has nothing to say about
+* it; inventing one there would advertise a recording slot nobody read.
+*/
+function withRecordabilityToken(input) {
+	if (input.token !== null) return `${input.base}|${input.token}`;
+	const carried = input.persisted?.match(TOKEN_SUFFIX);
+	if (carried === null || carried === void 0) return input.base;
+	return carried.input?.slice(0, carried.index) === input.base ? `${input.base}|${carried[1]}` : input.base;
+}
+/**
+* What this camera could record, as one fingerprint token.
+*
+* There used to be an `rec:off` here, for a per-camera switch of ours. That
+* switch is gone (D589): whether HomeKit RECORDS is HomeKit's own persisted
+* characteristic, it does not change the accessory's shape, and a rebuild is
+* about shape. What still belongs here is the CAPABILITY — which slot, and
+* whether serving it means running an encoder — because those are two
+* different accessories to build.
+*/
+function recordabilityTokenFor(input) {
+	return recordabilityToken(input.entries, { allowTranscode: input.allowTranscode !== false });
+}
+//#endregion
 //#region src/hksv/videoclips-plane.ts
 /**
 * The two data-plane routes behind the HomeKit clip source.
@@ -90922,8 +91069,9 @@ function createHksvClipPlanes(deps) {
 *
 * ## The source EXISTS because of HomeKit, and is not a switch
 *
-* A camera has this source because it is exported to HomeKit AND HomeKit
-* recording is on for it; turn either off and the row is gone (D550, D569 § 5).
+* A camera has this source because it is exported to HomeKit and HomeKit has
+* not said no to recording it; un-export it, or switch recording off in the
+* Home app, and the row is gone (D550, D569 § 5, D589).
 * There is deliberately no enable control of its own — a knob over somebody
 * else's decision is D62's defect. `keepClips` is NOT that gate either: it
 * governs the TEE, and the clips already kept remain the truth about this
@@ -90970,7 +91118,7 @@ function createHksvVideoclipsProvider(deps) {
 	*/
 	async function measure(deviceId) {
 		const facts = deps.describeCamera(deviceId);
-		if (!facts.exported || !facts.recording) return null;
+		if (!facts.exported || facts.homekitRecording === false) return null;
 		const catalog = await deps.readCatalog(deviceId);
 		return {
 			availability: availabilityFor(facts, catalog),
@@ -106325,6 +106473,72 @@ function buildRecordingOptions(input) {
 	};
 }
 //#endregion
+//#region src/hksv/recording-invocation.ts
+/**
+* The resolution the accessory may advertise, which is the one it can deliver.
+*
+* A copy is advertised at its source size whatever that is — there is no
+* encoder to resize with, and advertising a size we cannot produce is the
+* "stream that does not match its own advertisement" defect in miniature.
+* A transcode above the ceiling is fitted down, because with an encoder in the
+* pipeline the 6.35 MB 4K fragment is a choice rather than a fact, and iOS
+* renders HKSV clips at 1080p regardless.
+*/
+function recordingOutput(source) {
+	if (!source.transcode || source.height <= 1080) return {
+		width: source.width,
+		height: source.height,
+		scaled: false
+	};
+	return {
+		width: Math.max(2, Math.round(source.width * MAX_RECORDING_HEIGHT / source.height / 2) * 2),
+		height: MAX_RECORDING_HEIGHT,
+		scaled: true
+	};
+}
+/** The invocation, minus the sink and sidecar the child owns. */
+function buildRecordingInvocation(input) {
+	const { source } = input;
+	const audio = input.audioActive ? {
+		kind: "encode",
+		codec: "aac",
+		bitrateKbps: 32,
+		sampleRateHz: HKSV_AUDIO_SAMPLE_RATE_HZ,
+		channels: 1
+	} : { kind: "none" };
+	const out = recordingOutput(source);
+	const video = source.transcode ? {
+		kind: "encode",
+		encoder: "libx264",
+		preset: "veryfast",
+		profile: "main",
+		level: "4.0",
+		pixelFormat: "yuv420p",
+		forceKeyFramesSeconds: Math.max(1, Math.round(input.fragmentMs / 1e3)),
+		bf: 0,
+		...out.scaled ? { scale: {
+			mode: "fit",
+			width: out.width,
+			height: out.height
+		} } : {}
+	} : { kind: "copy" };
+	return {
+		logLevel: "error",
+		decodeHwAccel: source.transcode ? input.decodeHwAccel : null,
+		input: {
+			url: input.audioActive ? source.url : source.mutedUrl,
+			rtspTransport: "tcp",
+			...source.transcode && input.decodeInputArgs !== void 0 && input.decodeInputArgs.length > 0 ? { extraArgs: input.decodeInputArgs } : {},
+			analyzeDurationUs: 1e6,
+			probeSizeBytes: 1e6
+		},
+		video,
+		audio,
+		threadCount: 0,
+		outputArgs: []
+	};
+}
+//#endregion
 //#region src/hksv/fragment-source.ts
 /**
 * How far back the prebuffer ring reaches.
@@ -106492,6 +106706,7 @@ var HksvFragmentSource = class {
 				meta: {
 					brokerId: this.input.source.brokerId,
 					resolution: `${this.input.source.width}x${this.input.source.height}`,
+					branch: this.input.source.transcode ? "transcode" : "copy",
 					fragmentMs: this.input.fragmentMs,
 					audioActive: this.audioActive,
 					windowMs: PREBUFFER_WINDOW_MS
@@ -106556,27 +106771,13 @@ var HksvFragmentSource = class {
 	* takes AAC only — which the same measurement priced at 0.4 % of a core.
 	*/
 	buildInvocation() {
-		const audio = this.audioActive ? {
-			kind: "encode",
-			codec: "aac",
-			bitrateKbps: 32,
-			sampleRateHz: HKSV_AUDIO_SAMPLE_RATE_HZ,
-			channels: 1
-		} : { kind: "none" };
-		return {
-			logLevel: "error",
-			decodeHwAccel: null,
-			input: {
-				url: this.audioActive ? this.input.source.url : this.input.source.mutedUrl,
-				rtspTransport: "tcp",
-				analyzeDurationUs: 1e6,
-				probeSizeBytes: 1e6
-			},
-			video: { kind: "copy" },
-			audio,
-			threadCount: 0,
-			outputArgs: []
-		};
+		return buildRecordingInvocation({
+			source: this.input.source,
+			audioActive: this.audioActive,
+			fragmentMs: this.input.fragmentMs,
+			decodeHwAccel: this.input.decodeHwAccel ?? null,
+			...this.input.decodeInputArgs === void 0 ? {} : { decodeInputArgs: this.input.decodeInputArgs }
+		});
 	}
 };
 //#endregion
@@ -106936,74 +107137,6 @@ var HksvRecordingDelegate = class {
 	}
 };
 //#endregion
-//#region src/hksv/recording-source.ts
-/** The tallest frame the recording path will hold in its prebuffer. */
-var MAX_RECORDING_HEIGHT = 1080;
-/** HKSV takes H.264 only — AAC audio and H.264 video, no negotiation. */
-var RECORDABLE_CODEC = "h264";
-/**
-* Pick the slot the recording child pulls.
-*
-* Deliberately NOT `pickPreferredRtspEntry`: that picker resolves the operator's
-* LIVE preference and, on `auto`, steers by the resolution iOS negotiated for a
-* live session — neither is a fact about recording, and on 615 it selects `mid`,
-* a 10 fps slot. Recording has one criterion, applied here and nowhere else:
-* the largest copyable frame that does not exceed {@link MAX_RECORDING_HEIGHT}.
-*/
-function pickRecordingSource(entries) {
-	const enabled = entries.filter((e) => e.enabled);
-	if (enabled.length === 0) return {
-		ok: false,
-		refusal: "no-enabled-stream"
-	};
-	const h264 = enabled.filter((e) => normaliseCodec(e.codec) === RECORDABLE_CODEC);
-	if (h264.length === 0) return {
-		ok: false,
-		refusal: "no-h264-stream"
-	};
-	const sized = h264.filter(hasUsableResolution);
-	if (sized.length === 0) return {
-		ok: false,
-		refusal: "no-resolution"
-	};
-	const withinCeiling = sized.filter((e) => height(e) <= MAX_RECORDING_HEIGHT);
-	const best = [...withinCeiling.length > 0 ? withinCeiling : sized].sort((a, b) => withinCeiling.length > 0 ? height(b) - height(a) : height(a) - height(b))[0];
-	if (best === void 0 || best.resolution === void 0) return {
-		ok: false,
-		refusal: "no-resolution"
-	};
-	return {
-		ok: true,
-		source: {
-			brokerId: best.brokerId,
-			profile: best.profile ?? best.brokerId,
-			url: best.url,
-			mutedUrl: best.mutedUrl,
-			width: best.resolution.width,
-			height: best.resolution.height
-		}
-	};
-}
-/** A one-line reason for the log — silence about a withdrawn service reads as a bug. */
-function refusalReason(refusal) {
-	switch (refusal) {
-		case "no-enabled-stream": return "the camera has no enabled RTSP profile";
-		case "no-h264-stream": return "every enabled profile is H.265 — HKSV takes H.264 only, and a permanent transcode costs 128x a copy";
-		case "no-resolution": return "no enabled profile declares a resolution, so nothing honest could be advertised";
-	}
-}
-function height(entry) {
-	return entry.resolution?.height ?? 0;
-}
-function hasUsableResolution(entry) {
-	const r = entry.resolution;
-	return r !== void 0 && r.width > 0 && r.height > 0;
-}
-/** Publishers spell H.265 four ways; the same normalisation the broker uses. */
-function normaliseCodec(codec) {
-	return (codec ?? "").toLowerCase().replace(/[.\s-]/g, "");
-}
-//#endregion
 //#region src/hksv/build-recording.ts
 /**
 * Assemble HomeKit Secure Video for one camera — the ADVERTISEMENT and the
@@ -107055,7 +107188,7 @@ async function buildHksvRecording(input) {
 		note("profiles-unreadable", "cameraStreams.getProfileRtspEntries could not be read");
 		return null;
 	}
-	const choice = pickRecordingSource(entries);
+	const choice = pickRecordingSource(entries, { allowTranscode: bctx.options.hapDeviceSettings?.allowTranscode !== false });
 	if (!choice.ok) {
 		log.info("export-hap: HKSV withheld — no recordable stream", { meta: {
 			refusal: choice.refusal,
@@ -107065,9 +107198,10 @@ async function buildHksvRecording(input) {
 		return null;
 	}
 	const source = choice.source;
+	const decodeHwAccel = source.transcode ? await resolveDecodeHwAccel(bctx, log) : null;
 	const gopMs = await readSourceGopMs(bctx, source.width, source.height);
-	const fragmentLengthMs = deriveFragmentLengthMs(gopMs);
-	if (fragmentLengthMs === null) {
+	const fragmentLengthMs = source.transcode ? HKSV_FRAGMENT_LENGTHS_MS[0] : deriveFragmentLengthMs(gopMs);
+	if (fragmentLengthMs === void 0 || fragmentLengthMs === null) {
 		log.warn("export-hap: HKSV withheld — the camera key-frame interval is longer than any fragment length we advertise", { meta: {
 			gopMs,
 			brokerId: source.brokerId
@@ -107078,9 +107212,10 @@ async function buildHksvRecording(input) {
 	const parsedProfile = CamProfileSchema.safeParse(source.profile);
 	const recordedProfile = parsedProfile.success ? parsedProfile.data : null;
 	const fps = resolveFps(input.fpsByProfile, source.profile);
+	const out = recordingOutput(source);
 	const options = buildRecordingOptions({
-		width: source.width,
-		height: source.height,
+		width: out.width,
+		height: out.height,
 		fps,
 		fragmentLengthMs
 	});
@@ -107090,8 +107225,8 @@ async function buildHksvRecording(input) {
 		logger: log,
 		deviceId: numericDeviceId,
 		store: clipStore,
-		width: source.width,
-		height: source.height,
+		width: out.width,
+		height: out.height,
 		fragmentMs: fragmentLengthMs,
 		...recordedProfile === null ? {} : { profile: recordedProfile }
 	});
@@ -107110,14 +107245,21 @@ async function buildHksvRecording(input) {
 			spawnFn: spawn,
 			source,
 			fragmentMs,
-			audioActive
+			audioActive,
+			decodeHwAccel: decodeHwAccel?.hwaccel ?? null,
+			...decodeHwAccel === null || decodeHwAccel.extraInputArgs.length === 0 ? {} : { decodeInputArgs: decodeHwAccel.extraInputArgs }
 		})
 	});
 	const advertisedResolution = options.video.resolutions[0];
 	log.info("export-hap: HKSV ADVERTISED — recording is offered for this camera", { meta: {
 		brokerId: source.brokerId,
 		profile: source.profile,
-		resolution: `${source.width}x${source.height}`,
+		resolution: `${out.width}x${out.height}`,
+		branch: source.transcode ? "transcode" : "copy",
+		...source.transcode ? {
+			sourceResolution: `${source.width}x${source.height}`,
+			decodeHwAccel: decodeHwAccel?.hwaccel ?? "software"
+		} : {},
 		measuredFps: fps,
 		advertisedFps: advertisedResolution?.[2] ?? null,
 		fragmentLengthMs,
@@ -107132,6 +107274,27 @@ async function buildHksvRecording(input) {
 		dispose: () => delegate.dispose()
 	};
 }
+/**
+* The `-hwaccel` value for a transcoding prebuffer, and the flags that travel
+* with it.
+*
+* Software is a legitimate answer and is always NAMED: a camera that quietly
+* stopped using the GPU and one that never had it look identical in a CPU
+* graph, and on this branch the difference is most of a core, permanently.
+*/
+async function resolveDecodeHwAccel(bctx, log) {
+	const decision = selectHwDecode({
+		transcode: true,
+		reading: await probeDecoderHwaccel({
+			source: decoderInfoSourceFromContext(bctx.ctx),
+			log,
+			memo: bctx.options.decodeMemos.reading
+		}),
+		platform: process.platform
+	});
+	if (decision.kind === "software") log.warn("export-hap: HKSV will transcode in SOFTWARE — this costs most of a core, permanently", { meta: { reason: decision.reason } });
+	return decision;
+}
 /** `cameraStreams.getProfileRtspEntries`, or `null` when the cap is unreachable. */
 async function readProfileEntries(bctx) {
 	try {
@@ -108127,13 +108290,12 @@ async function buildCameraAccessory(input) {
 		bctx,
 		streamingOptions: streams.streamingOptions
 	}));
-	const recordingEnabled = options.hapDeviceSettings.hksvRecording === true;
 	let recordingAudioActive = true;
-	const recording = recordingEnabled ? await buildHksvRecording({
+	const recording = await buildHksvRecording({
 		bctx,
 		fpsByProfile: advertisedVideo.fpsByProfile,
 		isAudioActive: () => recordingAudioActive
-	}) : null;
+	});
 	const controller = new (isDoorbell ? import_dist.DoorbellController : import_dist.CameraController)({
 		delegate: streams.delegate,
 		streamingOptions: streams.streamingOptions,
@@ -108376,23 +108538,13 @@ function syncStateToJson(map) {
 * capabilities bound to it — restricting coverage by type is precisely what
 * confined this exporter to cameras for its first three rounds.
 */
-var DEFAULT_DEVICE_SETTINGS = {
-	streamPreference: "auto",
-	hksvRecording: true
-};
 /**
-* ON unless explicitly switched off — operator decision 2026-08-08 (flipped
-* from the launch default of off). ABSENT must resolve to ON or the flip is a
-* lie for every entry persisted before the field existed, so every read goes
-* through this one resolver (`!== false`), never a scattered `=== true`. The
-* cost that made off-by-default look prudent is measured and small on the only
-* branch the recorder accepts (copy: 0.7 % of a core / ~30 MB RSS, D84), and a
-* camera the recorder cannot copy refuses recording with a logged reason
-* rather than paying for a transcode.
+* What an entry with no stored settings is read as — and what a camera
+* exported TODAY is built from. Exported so a spec can assert the one thing
+* that matters about it: it must resolve to NOT recording, or "off by default"
+* is true only for cameras exposed before the flip.
 */
-function resolveHksvRecording(settings) {
-	return settings?.hksvRecording !== false;
-}
+var DEFAULT_DEVICE_SETTINGS = { streamPreference: "auto" };
 /**
 * Whether this camera offers Apple's NEW camera service alongside the classic
 * one — `camera-multi-tier-rtp-stream-management` (0x8031), where HEVC and 4K
@@ -108435,11 +108587,11 @@ var EXPORT_HAP_ADDON_ID = "export-hap";
 * stays and says the copies are off, which is D62's other half: an off switch
 * is REPORTED off, never made to look like a broken camera.
 */
-function describeHksvCamera(entry, lastBuild) {
+function describeHksvCamera(entry, lastBuild, homekitRecording) {
 	const isCamera = entry !== null && entry.mapperKind === "camera";
 	return {
 		exported: isCamera,
-		recording: isCamera && resolveHksvRecording(entry.settings),
+		homekitRecording: isCamera ? homekitRecording : null,
 		keepingClips: isCamera && resolveKeepHomekitClips(entry.settings),
 		lastBuild
 	};
@@ -108683,7 +108835,7 @@ var ExportHapAddon = class extends BaseAddon {
 		const clipsProvider = createHksvVideoclipsProvider({
 			logger: this.ctx.logger.child("hksv-clips"),
 			addonId: EXPORT_HAP_ADDON_ID,
-			describeCamera: (deviceId) => describeHksvCamera(this.findEntry(deviceId), this.hksvBuilds.lastFor(deviceId)),
+			describeCamera: (deviceId) => describeHksvCamera(this.findEntry(deviceId), this.hksvBuilds.lastFor(deviceId), readHomekitRecordingActive(this.exposed.get(String(deviceId))?.accessories ?? [])),
 			readCatalog: async (deviceId) => await this.hksvClipStore?.listCatalog(deviceId) ?? { kind: "no-root" },
 			locationRefusal: () => this.hksvClipLocation?.lastRefusal ?? null,
 			mediaUrl: (deviceId, stem) => this.hksvClipUrl("media", deviceId, stem),
@@ -108839,7 +108991,6 @@ var ExportHapAddon = class extends BaseAddon {
 				},
 				hapDeviceSettings: {
 					streamPreference: entrySettings.streamPreference ?? "auto",
-					hksvRecording: resolveHksvRecording(entrySettings),
 					keepHomekitClips: resolveKeepHomekitClips(entrySettings),
 					multiTierService: resolveMultiTierService(entrySettings),
 					allowTranscode: entrySettings.allowTranscode !== false
@@ -108920,15 +109071,40 @@ var ExportHapAddon = class extends BaseAddon {
 				features: device.features
 			});
 			const persisted = syncStateFromJson(this.config.exportSyncState).get(deviceId)?.fingerprint;
+			const withToken = withRecordabilityToken({
+				base: fresh,
+				token: await this.readRecordabilityToken(deviceId, device.type),
+				persisted
+			});
 			return resolveExportFingerprint({
 				ready: device.probed ?? false,
-				fresh,
+				fresh: withToken,
 				persisted
 			});
 		} catch {
 			return null;
 		}
 	}
+	/**
+	* The slot HKSV would record this camera from, for the fingerprint.
+	*
+	* `null` — do not move the fingerprint — for anything that is not a camera
+	* (a switch has no recording decision, and stamping a constant on it would
+	* republish every non-camera accessory once for nothing) and for a camera
+	* whose profiles could not be read right now.
+	*/
+	async readRecordabilityToken(deviceId, type) {
+		if (pickMapperKind(type) !== "camera") return null;
+		try {
+			const entries = await (await this.ctx.fetchDevice(deviceId)).cameraStreams?.getProfileRtspEntries({});
+			return recordabilityTokenFor({
+				allowTranscode: this.findEntry(deviceId)?.settings?.allowTranscode !== false,
+				entries: entries ?? null
+			});
+		} catch {
+			return null;
+		}
+	}
 	/** Persist a device's current export fingerprint into `exportSyncState`
 	*  (best-effort; called after a successful attach). */
 	async persistFingerprint(deviceId, fingerprint) {
@@ -109194,7 +109370,6 @@ var ExportHapAddon = class extends BaseAddon {
 		const enabled = entry !== null;
 		const enabledKey = `hap:${deviceId}:enabled`;
 		const streamPreferenceKey = `hap:${deviceId}:streamPreference`;
-		const hksvKey = `hap:${deviceId}:hksvRecording`;
 		const multiTierKey = `hap:${deviceId}:multiTierService`;
 		const useBridgeKey = `hap:${deviceId}:useBridge`;
 		const allowTranscodeKey = `hap:${deviceId}:allowTranscode`;
@@ -109245,17 +109420,14 @@ var ExportHapAddon = class extends BaseAddon {
 				immediate: true
 			},
 			{
-				type: "boolean",
-				key: hksvKey,
+				type: "info",
+				key: `hap:${deviceId}:hksvRecordingStatus`,
 				label: "HomeKit recording (Secure Video)",
-				description: "Offer “Stream and Allow Recording” in iOS Home. Requires iCloud+ and a home hub. Keeps a continuous 8s prebuffer for this camera (~0.7% of one CPU core, H.264 sources only).",
-				style: "switch",
-				value: resolveHksvRecording(settings),
+				content: describeHomekitRecording(readHomekitRecordingActive(this.exposed.get(String(deviceId))?.accessories ?? []), this.hksvBuilds.lastFor(deviceId)),
 				showWhen: {
 					field: enabledKey,
 					equals: true
-				},
-				immediate: true
+				}
 			},
 			{
 				type: "boolean",
@@ -109278,7 +109450,7 @@ var ExportHapAddon = class extends BaseAddon {
 				style: "switch",
 				value: resolveKeepHomekitClips(settings),
 				showWhen: {
-					field: hksvKey,
+					field: enabledKey,
 					equals: true
 				},
 				immediate: true
@@ -109378,7 +109550,6 @@ var ExportHapAddon = class extends BaseAddon {
 		const wasEnabled = this.exposed.has(deviceIdStr);
 		const enabledKey = `hap:${deviceId}:enabled`;
 		const streamPreferenceKey = `hap:${deviceId}:streamPreference`;
-		const hksvKey = `hap:${deviceId}:hksvRecording`;
 		const useBridgeKey = `hap:${deviceId}:useBridge`;
 		const allowTranscodeKey = `hap:${deviceId}:allowTranscode`;
 		const multiTierKey = `hap:${deviceId}:multiTierService`;
@@ -109387,7 +109558,6 @@ var ExportHapAddon = class extends BaseAddon {
 		const enabledValue = enabledKey in patch ? Boolean(patch[enabledKey]) : wasEnabled;
 		const streamPreferenceRaw = streamPreferenceKey in patch ? patch[streamPreferenceKey] : current?.settings?.streamPreference;
 		const streamPreference = typeof streamPreferenceRaw === "string" && streamPreferenceRaw.trim().length > 0 ? streamPreferenceRaw : "auto";
-		const hksvRecording = hksvKey in patch ? Boolean(patch[hksvKey]) : resolveHksvRecording(current?.settings);
 		const useBridge = useBridgeKey in patch ? Boolean(patch[useBridgeKey]) : current?.settings?.useBridge !== false;
 		const allowTranscode = allowTranscodeKey in patch ? Boolean(patch[allowTranscodeKey]) : current?.settings?.allowTranscode !== false;
 		const multiTierService = multiTierKey in patch ? Boolean(patch[multiTierKey]) : resolveMultiTierService(current?.settings);
@@ -109399,7 +109569,6 @@ var ExportHapAddon = class extends BaseAddon {
 		const nextSettings = {
 			...current?.settings ?? DEFAULT_DEVICE_SETTINGS,
 			streamPreference,
-			hksvRecording,
 			useBridge,
 			allowTranscode,
 			multiTierService,
@@ -109416,7 +109585,6 @@ var ExportHapAddon = class extends BaseAddon {
 			return { success: true };
 		}
 		const currentPref = current?.settings?.streamPreference ?? "auto";
-		const currentHksv = resolveHksvRecording(current?.settings);
 		const currentKeepClips = resolveKeepHomekitClips(current?.settings);
 		const mapperKind = current?.mapperKind ?? "generic";
 		const wasBridged = shouldBridge({
@@ -109428,16 +109596,12 @@ var ExportHapAddon = class extends BaseAddon {
 			useBridge
 		});
 		await this.updateEntrySettings(deviceIdStr, nextSettings);
-		if (currentPref !== streamPreference || currentHksv !== hksvRecording || currentKeepClips !== keepClips || wasBridged !== willBridge) {
+		if (currentPref !== streamPreference || currentKeepClips !== keepClips || wasBridged !== willBridge) {
 			log.info("export-hap: per-camera export settings changed — refreshing accessory", { meta: {
 				streamPreference: {
 					from: currentPref,
 					to: streamPreference
 				},
-				hksvRecording: {
-					from: currentHksv,
-					to: hksvRecording
-				},
 				keepClips: {
 					from: currentKeepClips,
 					to: keepClips
@@ -109523,4 +109687,4 @@ function errMsg(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
-export { DEFAULT_CLIP_RETENTION_DAYS, EXPORT_HAP_ADDON_ID, ExportHapAddon, ExportHapAddon as default, describeHksvCamera, unpublishAccessory as i, initHapStorage as n, publishStandalone as r, resolveClipRetentionDays, resolveHksvRecording, resolveKeepHomekitClips, resolveMultiTierService, deriveUsername as t };
+export { DEFAULT_CLIP_RETENTION_DAYS, DEFAULT_DEVICE_SETTINGS, EXPORT_HAP_ADDON_ID, ExportHapAddon, ExportHapAddon as default, describeHksvCamera, unpublishAccessory as i, initHapStorage as n, publishStandalone as r, resolveClipRetentionDays, resolveKeepHomekitClips, resolveMultiTierService, deriveUsername as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-export-hap",
-  "version": "1.2.132",
+  "version": "1.2.139",
   "description": "HomeKit (HAP) exporter for CamStack devices. Publishes each exposed device as its own HomeKit accessory: cameras and doorbells with SRTP streaming, HomeKit Secure Video, motion, two-way audio, PTZ and battery; switches, lights, locks and sensors through a capability→service table.",
   "keywords": [
     "camstack",