@camstack/addon-export-hap 1.2.27 → 1.2.29

package/dist/hap-export.addon.js

@@ -84,7 +84,7 @@ function carryForward(base, existing, keys) {
 	return out;
 }
 //#endregion
-//#region ../types/dist/event-category-Cv9dO26A.mjs
+//#region ../types/dist/event-category-Bxo5yJjt.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -291,6 +291,33 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["PipelineCameraAssigned"] = "pipeline.camera-assigned";
 	EventCategory["PipelineCameraUnassigned"] = "pipeline.camera-unassigned";
 	/**
+	* A node the orchestrator would otherwise place cameras on has NO usable
+	* inference device: the operator enabled one or more accelerators there and
+	* the live probe reports every one of them unavailable. Emitted once per
+	* TRANSITION into that state (never per dispatch), and the node is dropped
+	* from the placement candidate set for as long as it holds.
+	*
+	* This exists because the state was previously invisible: little-unraid
+	* absorbed 283k inference errors in a day while still being handed cameras,
+	* and nothing in the system said so.
+	*
+	* A node with no accelerators configured at all is NOT this — its devices
+	* are `disabled`, not `unavailable`, and the runner's default CPU pool
+	* serves it exactly as before.
+	*/
+	EventCategory["PipelineNodeInferenceUnavailable"] = "pipeline.node-inference-unavailable";
+	/**
+	* A camera has an OPEN detection session and has produced no detection at
+	* all for longer than the blind threshold — the camera is being decoded and
+	* inferred and is returning nothing. Emitted once per transition into blind,
+	* per camera.
+	*
+	* The failure it reports: a 1h43 detection blackout on the entrance camera
+	* that nobody noticed, because "a camera that detects nothing" and "a quiet
+	* camera" produce byte-identical silence.
+	*/
+	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
+	/**
 	* Per-camera pipeline config was mutated by the orchestrator
 	* (3-level settings change via `setAgentAddonDefaults` /
 	* `setCameraStepToggle` / `setCameraPipelineForAgent` or a
@@ -3082,6 +3109,9 @@ function handlePipeResult(left, next, ctx) {
 		fallback: left.fallback
 	}, ctx);
 }
+var $ZodPreprocess = /*@__PURE__*/ $constructor("$ZodPreprocess", (inst, def) => {
+	$ZodPipe.init(inst, def);
+});
 var $ZodReadonly = /*@__PURE__*/ $constructor("$ZodReadonly", (inst, def) => {
 	$ZodType.init(inst, def);
 	defineLazy(inst._zod, "propValues", () => def.innerType._zod.propValues);
@@ -5267,6 +5297,10 @@ function pipe(in_, out) {
 		out
 	});
 }
+var ZodPreprocess = /*@__PURE__*/ $constructor("ZodPreprocess", (inst, def) => {
+	ZodPipe.init(inst, def);
+	$ZodPreprocess.init(inst, def);
+});
 var ZodReadonly = /*@__PURE__*/ $constructor("ZodReadonly", (inst, def) => {
 	$ZodReadonly.init(inst, def);
 	ZodType.init(inst, def);
@@ -5325,6 +5359,13 @@ function _instanceof(cls, params = {}) {
 	};
 	return inst;
 }
+function preprocess(fn, schema) {
+	return new ZodPreprocess({
+		type: "pipe",
+		in: transform(fn),
+		out: schema
+	});
+}
 //#endregion
 //#region ../../node_modules/zod/v4/classic/compat.js
 /** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
@@ -7601,7 +7642,7 @@ import { errMsg } from '@camstack/types'
 * Extract a human-readable message from an unknown error value.
 * Replaces the ubiquitous `errMsg(err)` pattern.
 */
-function errMsg$12(err) {
+function errMsg$15(err) {
 	if (err instanceof Error) return err.message;
 	if (typeof err === "string") return err;
 	return String(err);
@@ -11494,6 +11535,8 @@ var QueryFilterSchema = object({
 	where: record(string(), unknown()).optional(),
 	whereIn: record(string(), array(unknown())).optional(),
 	whereBetween: record(string(), tuple([unknown(), unknown()])).optional(),
+	/** NULL-safe exclusion: matches rows whose field is NULL OR != the value. */
+	whereNot: record(string(), unknown()).optional(),
 	orderBy: object({
 		field: string(),
 		direction: _enum(["asc", "desc"])
@@ -11513,7 +11556,8 @@ var QueryFilterSchema = object({
 var MutationFilterSchema = object({
 	where: record(string(), unknown()).optional(),
 	whereIn: record(string(), array(unknown())).optional(),
-	whereBetween: record(string(), tuple([unknown(), unknown()])).optional()
+	whereBetween: record(string(), tuple([unknown(), unknown()])).optional(),
+	whereNot: record(string(), unknown()).optional()
 });
 /** A single stored record: `{ id, data }`. */
 var SettingsRecordSchema = object({
@@ -12951,6 +12995,17 @@ var LlmImageSchema = object({
 	bytes: _instanceof(Uint8Array),
 	mimeType: string()
 });
+/**
+* Retry policy. `enabled: false` is NOT the same as `maxAttempts: 1` in intent —
+* the flag is what a consumer table flips, the count is what the operator tunes.
+* A retry doubles the wall time of a call, so the two gates that run inside a
+* notification's budget keep it off (see `CONSUMER_RETRY_POLICY` in addon-ai).
+*/
+var LlmRetryPolicySchema = object({
+	enabled: boolean().default(false),
+	/** Total attempts INCLUDING the first. 1 = no retry. */
+	maxAttempts: number().int().min(1).max(5).default(1)
+});
 var LlmGenerateBaseInputSchema = object({
 	/** Collection routing (the notification-output posture). */
 	addonId: string().optional(),
@@ -12965,7 +13020,28 @@ var LlmGenerateBaseInputSchema = object({
 	jsonSchema: record(string(), unknown()).optional(),
 	/** Per-call override of the profile default. */
 	maxTokens: number().int().positive().optional(),
-	temperature: number().optional()
+	temperature: number().optional(),
+	/** Per-call override of the profile default (nucleus sampling). */
+	topP: number().min(0).max(1).optional(),
+	/** Per-call override of the profile default (top-k sampling). */
+	topK: number().int().positive().optional(),
+	/** Per-call override of `profile.timeoutMs` — the total generation bound. */
+	timeoutMs: number().int().positive().optional(),
+	/** Per-call override; beats both the consumer table and the profile. */
+	retry: LlmRetryPolicySchema.optional(),
+	/**
+	* Caller-minted id that makes this generation CANCELLABLE.
+	*
+	* Without it a caller that stops waiting cannot stop the work: the gates race
+	* the call against 8 s and free their own slot when the timer wins, while the
+	* generation upstream keeps running to `profile.timeoutMs` — 60 s by default,
+	* on a single-threaded local model. The per-camera bound then counts WAITS,
+	* not generations, and the real load is unbounded.
+	*
+	* `AbortSignal` cannot cross a process boundary; an id can. Pass one here and
+	* `llm.cancel({ requestId })` tears the socket down.
+	*/
+	requestId: string().optional()
 });
 /**
 * `llm-runtime` — node-side managed llama.cpp executor (spec §4). Registered
@@ -12978,6 +13054,18 @@ var LlmGenerateBaseInputSchema = object({
 * Resource ceiling = llama-server flags + idleStopMinutes ONLY (no RSS
 * watchdog — operator decision #3).
 */
+/**
+* A companion artifact that MUST land beside the main GGUF: the `mmproj`
+* projector of a vision model, or shards 2..N of a split GGUF. Carried on the
+* REF rather than looked up at install time, so what the operator approved in
+* the preview is exactly what the node downloads.
+*/
+var ManagedModelExtraFileSchema = object({
+	url: string(),
+	filename: string(),
+	sizeBytes: number(),
+	sha256: string().optional()
+});
 var ManagedModelRefSchema = discriminatedUnion("kind", [
 	object({
 		kind: literal("catalog"),
@@ -12986,7 +13074,11 @@ var ManagedModelRefSchema = discriminatedUnion("kind", [
 	object({
 		kind: literal("url"),
 		url: string(),
-		sha256: string().optional()
+		sha256: string().optional(),
+		/** Picker/status label; the file basename when absent. */
+		label: string().optional(),
+		sizeBytes: number().optional(),
+		extraFiles: array(ManagedModelExtraFileSchema).optional()
 	}),
 	object({
 		kind: literal("path"),
@@ -13004,13 +13096,82 @@ var ManagedRuntimeConfigSchema = object({
 	gpuLayers: number().int().default(0),
 	/** Default: cpus-2, clamped ≥1 (resolved node-side). */
 	threads: number().int().optional(),
-	/** Concurrent slots. */
+	/** Concurrent slots (`--parallel`). */
 	parallel: number().int().default(1),
+	/** Logical batch size (`-b`). Larger = faster prompt ingest, more RAM. */
+	batchSize: number().int().positive().optional(),
+	/** Physical batch / micro-batch (`-ub`). */
+	ubatchSize: number().int().positive().optional(),
+	/**
+	* `--flash-attn`. Cuts KV-cache memory on the backends that implement it and
+	* is a no-op elsewhere, so it is offered rather than assumed.
+	*/
+	flashAttention: boolean().default(false),
+	/**
+	* `--mlock`. Pins the weights in RAM so the OS cannot page them out mid
+	* inference. Costs the full model size in resident memory — which is exactly
+	* what the RAM budget is counting.
+	*/
+	mlock: boolean().default(false),
+	/**
+	* `--no-mmap`. Reads the whole GGUF up front instead of mapping it. Slower to
+	* start, but avoids the page-fault stalls a network or spinning-disk model
+	* store produces on every first token.
+	*/
+	noMmap: boolean().default(false),
+	/** `--cache-type-k` / `--cache-type-v` — quantising the KV cache is the
+	*  cheapest way to fit a longer context in the same RAM. */
+	cacheTypeK: _enum([
+		"f32",
+		"f16",
+		"q8_0",
+		"q5_1",
+		"q5_0",
+		"q4_1",
+		"q4_0"
+	]).optional(),
+	cacheTypeV: _enum([
+		"f32",
+		"f16",
+		"q8_0",
+		"q5_1",
+		"q5_0",
+		"q4_1",
+		"q4_0"
+	]).optional(),
+	/**
+	* Escape hatch for llama-server flags this schema does NOT model — `--jinja`
+	* (which most vision chat templates need and some language-only models
+	* dislike), `--cont-batching`, `--rope-scaling`, …
+	*
+	* It is NOT a second place to set the flags above. A token that collides
+	* with a typed field is REJECTED at start, naming the field that owns it
+	* (`assertNoOwnedFlags`), because two knobs writing the same argv is exactly
+	* the "two switches that disagree" failure this repo has already shipped
+	* twice (D62).
+	*/
+	extraArgs: array(string()).default([]),
 	/** Else lazy: first generate boots it. */
 	autoStart: boolean().default(false),
 	/** 0 = never; frees RAM after quiet periods. */
 	idleStopMinutes: number().int().default(30)
 });
+/**
+* Where a multi-GB install currently is. A single 0..1 fraction cannot answer
+* "is it stuck?" for an install that is three files (shards + mmproj) followed
+* by a sha256 pass over 22 GB — during which the fraction sat at 1.0 and the
+* node looked hung. Phase + file + bytes is the smallest shape that does.
+*/
+var LlmDownloadProgressSchema = object({
+	phase: _enum(["downloading", "verifying"]),
+	/** The artifact currently moving, e.g. `mmproj-F16.gguf`. */
+	file: string(),
+	fileIndex: number().int(),
+	fileCount: number().int(),
+	/** Across the WHOLE install, not the current file. */
+	downloadedBytes: number(),
+	totalBytes: number().optional()
+});
 var LlmRuntimeStatusSchema = object({
 	/** Status is ALWAYS node-qualified. */
 	nodeId: string(),
@@ -13027,6 +13188,8 @@ var LlmRuntimeStatusSchema = object({
 	modelPath: string().optional(),
 	modelId: string().optional(),
 	downloadProgress: number().min(0).max(1).optional(),
+	/** Detail behind `downloadProgress`; present for the same lifetime. */
+	download: LlmDownloadProgressSchema.optional(),
 	lastError: string().optional(),
 	crashesInWindow: number(),
 	/** Child RSS (sampled best-effort). */
@@ -13037,7 +13200,14 @@ var LlmNodeModelSchema = object({
 	file: string(),
 	sizeBytes: number(),
 	catalogId: string().optional(),
-	installedAt: number().optional()
+	installedAt: number().optional(),
+	/**
+	* Absolute path on the node. Present so a file that is on disk but matches
+	* no catalog entry — a custom Hugging Face install, or a GGUF the operator
+	* copied in by hand — is still SELECTABLE, as a `{kind:'path'}` ref. Without
+	* it the picker could list such a file and do nothing with it.
+	*/
+	path: string().optional()
 });
 var LlmRuntimeDiskUsageSchema = object({
 	nodeId: string(),
@@ -13093,10 +13263,47 @@ var LlmProfileSchema = object({
 	baseUrl: string().optional(),
 	/** ConfigUISchema type:'password' — never round-trips (spec §5). */
 	apiKey: string().optional(),
+	/** Vision on/off. A vision call against a `false` profile is REFUSED, never
+	*  degraded to text — that shipped once and produced a confident answer to a
+	*  question about a picture nobody sent. */
 	supportsVision: boolean(),
 	temperature: number().min(0).max(2).optional(),
+	/** Nucleus sampling. Every wire we speak has it. */
+	topP: number().min(0).max(1).optional(),
+	/** Top-k sampling. Carried only by the wires that have it — NEITHER OpenAI
+	*  wire does, and the client drops it there (measured: the request body gets
+	*  `top_p` and no `top_k`). The profile editor hides the field wherever it
+	*  would change nothing; `KINDS_WITH_TOP_K` is the single owner of that list. */
+	topK: number().int().positive().optional(),
 	maxTokens: number().int().positive().optional(),
+	/** Prompt context window. Advisory for cloud kinds (they enforce their own);
+	*  for `managed-local` it is the llama.cpp `--ctx-size` the runtime starts
+	*  the model with, so it is the one field that changes a PROCESS. */
+	contextLength: number().int().positive().optional(),
+	/** Default system prompt. A caller's `system` REPLACES it (never appends —
+	*  two system prompts fighting is worse than either alone). */
+	systemPrompt: string().optional(),
+	/** Total generation bound — the only one a unary call has. */
 	timeoutMs: number().int().positive().default(6e4),
+	/** The TCP handshake only — "is the port even open". NOT the wait for
+	*  response headers: on the LM Studio / llama-server wire those are written
+	*  once the model has finished loading, so they belong to the bound below. */
+	connectTimeoutMs: number().int().positive().default(1e4),
+	/** Accepted, but no output yet — response headers included, because a cold
+	*  GPU load is exactly what happens before them. */
+	firstTokenTimeoutMs: number().int().positive().default(12e4),
+	/** Output started then stopped. */
+	idleTimeoutMs: number().int().positive().default(6e4),
+	/** Profile-level default. The per-consumer table and a per-call override
+	*  both beat it — see `resolveRetryPolicy`. */
+	retry: LlmRetryPolicySchema.default({
+		enabled: false,
+		maxAttempts: 1
+	}),
+	/** Whether this profile may use tools. The tool-call plumbing rides the
+	*  library; the REGISTRY of callable tools is ours and is empty in v1, so a
+	*  `true` here buys the wiring, not behaviour, until tools are registered. */
+	toolsEnabled: boolean().default(false),
 	extraHeaders: record(string(), string()).optional(),
 	/** kind === 'managed-local' only (spec §4). */
 	runtime: ManagedRuntimeConfigSchema.optional()
@@ -13146,6 +13353,36 @@ var ManagedModelCatalogEntrySchema = object({
 	/** Vision models: companion projector file. */
 	mmprojUrl: string().optional()
 });
+/**
+* The outcome of turning one operator-typed Hugging Face reference into a
+* download plan. A RESULT, never a throw: "this repo has 24 quantizations and
+* I will not pick for you" is a normal answer the UI has to render, not an
+* exception.
+*
+* `candidates` is the whole reason the refusal is usable — every string in it
+* is a tag that resolves when pasted back as `<org>/<repo>:<TAG>`.
+*/
+var HfModelResolutionSchema = discriminatedUnion("ok", [object({
+	ok: literal(true),
+	/** Ready to hand to `installModel` unchanged. */
+	model: ManagedModelRefSchema,
+	label: string(),
+	repo: string(),
+	quantization: string(),
+	purpose: _enum(["text", "vision"]),
+	totalBytes: number(),
+	/** mmproj + shards, for the preview: an operator approving 23 GB should
+	*  see that 0.9 GB of it is a projector they did not name. */
+	extraFilenames: array(string())
+}), object({
+	ok: literal(false),
+	code: string(),
+	message: string(),
+	candidates: array(string()).optional(),
+	/** Set when the refusal was only the ceiling: re-calling with
+	*  `maxBytes: requiredBytes` is the operator's explicit override. */
+	requiredBytes: number().optional()
+})]);
 var LlmRuntimeNodeSchema = object({
 	nodeId: string(),
 	reachable: boolean(),
@@ -13158,7 +13395,10 @@ var ProfileRefInputSchema = object({
 	addonId: string(),
 	profileId: string()
 });
-method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
+method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }), method(object({
+	addonId: string().optional(),
+	requestId: string()
+}), _void(), { kind: "mutation" }), method(object({}), array(LlmProfileKindDescriptorSchema)), method(object({}), array(LlmProfileSchema)), method(object({ profile: LlmProfileSchema }), LlmProfileSchema, {
 	kind: "mutation",
 	auth: "admin"
 }), method(ProfileRefInputSchema, _void(), {
@@ -13179,6 +13419,15 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }
 	consumer: string().optional(),
 	profileId: string().optional()
 }), array(LlmUsageRollupSchema)), method(object({}), array(ManagedModelCatalogEntrySchema)), method(object({}), array(LlmRuntimeNodeSchema)), method(object({ nodeId: string() }), array(LlmNodeModelSchema)), method(object({
+	/** `https://huggingface.co/<org>/<repo>/resolve/main/<f>.gguf`,
+	*  `<org>/<repo>/<f>.gguf`, `<org>/<repo>` or `<org>/<repo>:<QUANT>`. */
+	ref: string(),
+	/** Explicit ceiling override, in bytes. Absent = the built-in ceiling. */
+	maxBytes: number().positive().optional()
+}), HfModelResolutionSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
 	nodeId: string(),
 	model: ManagedModelRefSchema
 }), _void(), {
@@ -14788,6 +15037,8 @@ var NcSystemEventKindSchema = _enum([
 	"stream-offline",
 	"node-online",
 	"node-offline",
+	"node-inference-unavailable",
+	"detection-blind",
 	"addon-update-available",
 	"server-update-available",
 	"alarm-triggered",
@@ -14849,7 +15100,16 @@ var NcScheduleSchema = object({
 });
 /** Fuzzy plate matcher — OCR noise makes exact match useless (spec row 12/13). */
 var NcPlateMatcherSchema = object({
-	values: array(string().min(1)).min(1),
+	/**
+	* Plate texts (or gallery vehicle names) to match. EMPTY = **any plate the
+	* pipeline could read** — the plate half of "no selection = no narrowing",
+	* and the switch that says this rule is about vehicles that were IDENTIFIED
+	* rather than merely seen. A subject carrying no plate still fails.
+	*
+	* The `.min(1)` this used to carry made that state unauthorable; nothing has
+	* ever persisted an empty list, so widening it cannot change an existing rule.
+	*/
+	values: array(string().min(1)),
 	/** Max Levenshtein distance after normalization (uppercase alphanumeric). */
 	maxDistance: number().int().min(0).max(3).default(1)
 });
@@ -14883,28 +15143,36 @@ var NcOccupancyConditionSchema = object({
 /**
 * Audio condition (IMMEDIATE trigger) — a rule on SOUND, not on a picture.
 *
-* Operator-approved vocabulary (2026-08-12, option A — the same one the
-* reference notifier uses, so an operator moving between them re-uses what
-* they already know): a rule matches when, over a sampling window of
-* `samplingSeconds`, at least `hitPercent`% of the audio samples in that
-* window are HITS. A sample is a hit when it satisfies BOTH present filters:
-*
-*  - `dbThreshold` — its level is at or above this many dBFS (see
-*    {@link NC_AUDIO_DBFS_FLOOR}: negative-going, `0` = full scale);
-*  - `labels` — the classifier put at least one of these labels on it.
-*
-* Both are OPTIONAL and independent, which is the point of the shape: a
-* loudness rule ("something loud at 3am") needs no model to be right, and a
-* label rule ("a dog barked") needs no threshold. **Fail-closed when NEITHER
-* is given** — a window in which every sample is trivially a hit would fire on
-* silence, so the engine refuses such a condition rather than notifying on
-* nothing (the schema cannot express "at least one of" without becoming a
-* ZodEffects the cap path would have to special-case).
-*
-* `hitPercent` is over the samples the window actually HOLDS, and the window
-* must be FULL before it can match — a window that has been open for two
-* seconds of its ten is 100% of nothing, and firing on it would make
-* `samplingSeconds` decorative.
+* **TWO EXCLUSIVE MODES** (operator decision 2026-08-14, D157). Which one a
+* rule is in is not a stored field — it is WHICH FILTER the rule carries, so
+* there is no second switch that can disagree with the first and every rule
+* authored before the decision migrates for free (`audioModeOf`):
+*
+*  - **LABEL mode — `labels` present.** The rule fires on the FIRST frame the
+*    classifier labels with one of them. No window, no percentage:
+*    `hitPercent` and `samplingSeconds` are ignored, and the rule's own
+*    `throttle` cooldown is the only brake. The per-label confidence floor is
+*    the analyzer's (`classificationMinScore`, per device) — a label only
+*    reaches this condition if the classifier was already confident enough.
+*  - **LEVEL mode — `dbThreshold` present, no labels.** The sampling window IS
+*    the condition: at least `hitPercent`% of the samples over
+*    `samplingSeconds` must be at or above `dbThreshold` dBFS (see
+*    {@link NC_AUDIO_DBFS_FLOOR}: negative-going, `0` = full scale). The window
+*    must be FULL before it can match — a window open for two of its ten
+*    seconds is 100% of nothing.
+*
+* **Why label mode has no window.** It had one, and it never fired: the
+* analyzer emits ~1 audio frame per second but YAMNet only LABELS one to three
+* of them per episode, even through continuous crying. The measured maximum
+* `hitPercent` over the whole live history was 40 — under the shipped default
+* of 60, so a label rule could not fire at all, ever. A percentage of frames is
+* the wrong question to ask of a sparse classifier.
+*
+* **Fail-closed when NEITHER is given** — every sample would be a trivial hit
+* and the rule would fire on silence. The schema cannot express "exactly one
+* of" without becoming a ZodEffects the cap path would have to special-case, so
+* the exclusivity is enforced where every editor writes (`patchAudio`) and a
+* legacy rule carrying both resolves to LABEL (the mode that fires).
 *
 * Labels are the audio macro classes (`AUDIO_MACRO_LABELS` / the NC taxonomy's
 * `audio-*` ids). Both spellings are accepted — the matcher normalizes the
@@ -14912,13 +15180,13 @@ var NcOccupancyConditionSchema = object({
 * an operator who typed `dog` mean the same thing.
 */
 var NcAudioConditionSchema = object({
-	/** Audio macro labels; absent = any sound (level-only rule). */
+	/** LABEL MODE: audio macro labels. Present ⇒ fires on the first labelled frame. */
 	labels: array(string().min(1)).min(1).optional(),
-	/** Level floor in dBFS (negative-going, `0` = full scale); absent = any level. */
+	/** LEVEL MODE: floor in dBFS (negative-going, `0` = full scale). */
 	dbThreshold: number().min(-96).max(0).optional(),
-	/** Percentage of the window's samples that must be hits (1–100). */
+	/** LEVEL MODE ONLY: percentage of the window's samples that must be hits (1–100). */
 	hitPercent: number().int().min(1).max(100).default(60),
-	/** Length of the sampling window in seconds. */
+	/** LEVEL MODE ONLY: length of the sampling window in seconds. */
 	samplingSeconds: number().int().min(1).max(300).default(10)
 });
 /**
@@ -15056,13 +15324,81 @@ var NcRuleActionsSchema = object({
 	*/
 	buttons: array(NcRuleNotificationButtonSchema).max(8).optional()
 });
+/**
+* "This rule applies only while `deviceId` is in one of `states`."
+*
+* The states are the DEVICE's own vocabulary — `AlarmState` for a panel,
+* `on`/`off` for a switch — not a normalised set, because normalising would
+* make the condition lie about devices whose states have no equivalent.
+*
+* An unreadable state does NOT match: see the engine's fail-closed gate. A
+* condition that fired on "I could not read it" would be worse than no gate.
+*/
+var NcDeviceStateConditionSchema = object({
+	deviceId: number().int(),
+	/** Any of these matches. */
+	states: array(string().min(1)).min(1)
+});
+/**
+* "This rule applies only while scene `sceneId` is `matched` / `diverged`."
+*
+* A GATE, not a trigger. `occupancy` and `audio` each DISCRIMINATE their rule —
+* carrying one makes the rule fire on that subject and nothing else. Scene is
+* the other shape entirely, the `deviceState` shape: it narrows a rule that
+* already has a trigger ("tell me about a person at the front door, but only
+* while the bin is still out"). That is why it composes with every delivery
+* instead of owning one, and why no new `NcDelivery` member and no new subject
+* kind exist for it — see D159.
+*
+* ── Identity ───────────────────────────────────────────────────────────────
+* `sceneId` is `SceneMonitor.id`, a `randomUUID()` minted by `createScene` —
+* globally unique, so it needs no device to disambiguate it. `deviceId` is
+* carried as a HINT for the editor and for the log line, never as part of the
+* lookup key: a rule whose hint drifted must still gate correctly.
+*
+* ── Which boolean ──────────────────────────────────────────────────────────
+* `latched` ABSENT means "whatever the scene itself says" — `SceneMonitor.emit`
+* already declares which boolean drives notification rules, and a second knob
+* that could disagree with it is exactly the D62 failure. Set it only to
+* override one rule against the scene's own default.
+*
+*  - LIVE reading (`emit`/`latched` resolve to live): passes iff
+*    `verdict === requiredState`. `unknown` — no reference for this light, view
+*    shifted, no snapshot — passes NEITHER. A scene that cannot judge is not
+*    evidence, in either direction.
+*  - LATCHED reading: passes iff `latched === (requiredState === 'diverged')`.
+*    The latch is a durable fact about the past ("it has diverged since I armed
+*    it"), so a camera that has gone dark does not clear it — that is the whole
+*    reason the operator asked for a latch.
+*
+* The gate reads an in-memory mirror (`NcSceneStateCache`) refreshed OFF the
+* event path, never the cap: D49. A mirror that has never loaded, or a scene it
+* does not carry, reads absent and the rule does NOT fire — fail closed, and
+* said out loud in the log rather than dropped in silence.
+*/
+var NcSceneConditionSchema = object({
+	/** `SceneMonitor.id` — the uuid the cap mints. The whole lookup key. */
+	sceneId: string().min(1),
+	/** The camera the scene lives on. A hint for the editor and the log line. */
+	deviceId: number().int().optional(),
+	/** The state the scene must be in for the rule to fire. */
+	requiredState: _enum(["matched", "diverged"]),
+	/**
+	* Read the LATCH (`true`) or the LIVE verdict (`false`). Absent = follow the
+	* scene's own `emit` field, which is the only place that decision belongs.
+	*/
+	latched: boolean().optional()
+});
 var NcConditionsSchema = object({
 	/** Gate on ANOTHER device's current state (the alarm armed, a switch on). */
-	deviceState: object({
-		deviceId: number().int(),
-		/** Any of these matches. */
-		states: array(string().min(1)).min(1)
-	}).optional(),
+	deviceState: NcDeviceStateConditionSchema.optional(),
+	/**
+	* Gate on a SCENE's state — "only while the bin is still out". Composes with
+	* every trigger (detection, occupancy, audio, sensor, package, track-end);
+	* unlike `occupancy`/`audio` it discriminates nothing. See
+	* {@link NcSceneCondition} and D159.
+	*/
+	scene: NcSceneConditionSchema.optional(),
 	/** Device scope — absent = all devices. */
 	devices: array(number()).optional(),
 	/** Detector class names (any overlap with the record's class set). */
@@ -15088,18 +15424,47 @@ var NcConditionsSchema = object({
 	*/
 	labelEquals: array(string().min(1)).optional(),
 	/**
-	* Identity matcher. P1 boundary: matched against the record's collapsed
-	* `label` (the identity display name propagated by the face pipeline) —
-	* identity-ID matching rides in P2 when identity ids reach the record.
+	* KNOWN FACES — the rule's identity scope, and the switch that says the rule
+	* is about recognised people at all.
+	*
+	* Three states, and the empty one is the point:
+	*
+	* | value | meaning |
+	* | --- | --- |
+	* | absent | the rule does not care who it is; an unrecognised person matches |
+	* | `[]` | **only known faces** — any identity in the gallery, nobody in particular |
+	* | a list | only these identities |
+	*
+	* `[]` is the repo-wide "no selection = no narrowing" reading (an absent
+	* `devices` list is every device), applied one level down: the operator has
+	* turned the face scope ON and narrowed it to nothing, which is every known
+	* face. No second field states the same thing — a switch that can disagree
+	* with the list under it is worse than no switch (D62).
+	*
+	* MEMBERS ARE FACE-GALLERY `Identity.id`s (uuid), not display names. A name is
+	* renameable, and a rule authored on "Gianluca" went silently dark the moment
+	* the operator fixed the spelling. The id reaches the record on
+	* `LabelAttribution.identityId`; the name is what the editor shows and what
+	* `{{label}}` renders.
+	*
+	* Rules written before this carry NAMES, and are resolved to ids lazily at
+	* load (`NcRuleStore.load`) against the live gallery — a name nothing answers
+	* for is left as it stands and reported, never dropped. The engine also
+	* accepts a display-name hit as a compatibility leg, so a rule whose
+	* migration could not resolve keeps matching exactly what it matched before.
 	*/
 	identities: array(string().min(1)).optional(),
-	/** Fuzzy plate matcher against the record's `label` (plate text). */
+	/**
+	* KNOWN PLATES / VEHICLES — the plate mirror of {@link identities}, including
+	* the empty-list reading: `values: []` is "any plate the OCR could read",
+	* a non-empty list is those plates (fuzzily). See {@link NcPlateMatcherSchema}.
+	*/
 	plates: NcPlateMatcherSchema.optional(),
 	/**
-	* Identity EXCLUDE — mirror of {@link identities} with `notIn` semantics.
-	* Same P1 boundary: matched against the record's collapsed `label` (the
-	* identity display name). A record with NO label passes (nothing to
-	* exclude), unlike the include variant which fails on an absent label.
+	* Identity EXCLUDE — mirror of {@link identities} with `notIn` semantics, and
+	* the same id members and the same lazy name→id migration. A record with NO
+	* identity passes (nothing to exclude), unlike the include variant which
+	* fails on an unrecognised subject. An EMPTY list excludes nobody.
 	*/
 	identitiesExclude: array(string().min(1)).optional(),
 	/**
@@ -15491,7 +15856,80 @@ var NcRuleInputSchema = object({
 	* a rule that predates the gate must keep delivering byte-for-byte as it
 	* did, and absent is the only way to say that without a migration.
 	*/
-	confirm: NcConfirmSchema.optional()
+	confirm: NcConfirmSchema.optional(),
+	/**
+	* WAIT for face/plate recognition before saying anything.
+	*
+	* A notification's TEXT is frozen at enqueue and its media is re-resolved at
+	* send; the identity is neither. A face is confirmed after `confirmFrames`
+	* agreeing observations — p50 **11.4 s** after the track was first seen,
+	* measured on this hub — and an `immediate` rule enqueues on the first object
+	* event, seconds before that. So "Gianluca è arrivato" is unsayable on the
+	* immediate path, and no amount of media re-resolution fixes a sentence.
+	*
+	* Only two honest answers exist, and this flag picks between them. It has
+	* effect ONLY on a rule that declares a recognition scope
+	* ({@link NcConditions.identities} or {@link NcConditions.plates}) — on any
+	* other rule there is nothing to wait for and the flag is inert.
+	*
+	* | value | what happens |
+	* | --- | --- |
+	* | `true` | the rule stops firing on the object event and fires at TRACK CLOSE instead, once, with the name — later, and complete |
+	* | absent / `false` | it fires at once WITHOUT the name, and if recognition lands before the track closes a SECOND, "…is Gianluca" notification follows (one per track, per rule, per target) |
+	*
+	* `.optional()` and deliberately NOT `.default()`: a Zod default does not run
+	* on the addon cap path, and absent has to keep meaning exactly what every
+	* rule authored before this field meant.
+	*
+	* The cost of `true` is stated here because the editor states it too: a rule
+	* that waits also inherits track-close SEMANTICS — its `zones` condition
+	* tests every zone the track visited and a `crossing` condition can no longer
+	* be satisfied, because a closed track carries no crossing.
+	*/
+	waitForEnhancement: boolean().optional(),
+	/**
+	* GROUP a burst of subjects into ONE notification that grows.
+	*
+	* Seconds of quiet after the last matching subject before the burst is
+	* considered over. While it is open, the first subject enqueues immediately —
+	* **exactly as today, with no added latency** — and every real growth (a new
+	* subject, or a name confirmed on one already in it) REPLACES that
+	* notification with an updated one naming everybody. The push carries the
+	* group's own coalescing tag, so the phone replaces rather than stacks.
+	*
+	* `0` / absent = off, and off is today's behaviour byte for byte.
+	*
+	* ### Why an idle cutoff and not a window
+	*
+	* The measured seven-person arrival on device 590 spans 110 s with every
+	* internal gap under 30 s. A 12 s fixed window cuts it into three groups; an
+	* idle cutoff holds it as one and ends it when the arrival actually ends.
+	* 30 is Frigate's shipped value for the same decision.
+	*
+	* ### What it replaces
+	*
+	* The blind cooldown, which collapses a burst by DISCARDING it. Measured on
+	* device 615 / *Persona su Uscio* over six days: 116 qualifying tracks → 74
+	* notifications, **44 (37.9%) suppressed outright**, 23 of them overlapping a
+	* track that did fire and 7 carrying a confirmed identity nobody heard about.
+	* A group collapses the same volume by MERGING, so the cooldown becomes a
+	* budget over GROUPS — which is what it always meant — and a growth is never
+	* throttled by the window its own first member spent.
+	*
+	* ### Interaction with {@link waitForEnhancement}
+	*
+	* They compose, and the order matters. `waitForEnhancement` defers the rule to
+	* TRACK CLOSE, so with both set the group is opened by the first member to
+	* CLOSE — already carrying its name — and grows as later members close. That
+	* is later, and complete. With grouping alone the group opens on the first
+	* object event and picks up names as they are confirmed, through the growth
+	* path. Neither combination fires twice for one subject.
+	*
+	* `.optional()` and deliberately NOT `.default()`: a Zod default does not run
+	* on the addon cap path, so absent must keep meaning what it meant before this
+	* field existed.
+	*/
+	groupIdleSec: number().int().min(0).max(600).optional()
 });
 /**
 * Partial patch for `updateRule` — any subset of the input fields, plus the
@@ -15598,6 +16036,7 @@ var NcConditionDescriptorSchema = object({
 		"occupancy",
 		"audio",
 		"deviceState",
+		"scene",
 		"systemEvent"
 	]),
 	operator: _enum([
@@ -16003,7 +16442,87 @@ var MethodAccessSchema = _enum([
 var AllowedProviderSchema = union([literal("*"), array(string())]);
 var AllowedDevicesSchema = record(string(), union([literal("*"), array(string())]));
 var CapScopeSchema = _enum(["device", "system"]);
-var TokenScopeSchema = discriminatedUnion("type", [
+/**
+* DeviceSelector (scope model v3 — 2026-08-12).
+*
+* A `device` grant no longer carries a frozen list of deviceIds. It carries
+* a SELECTOR the matcher resolves against the live fleet, so the grant can be
+* DYNAMIC: a `types:['camera']` selector automatically covers a camera added
+* AFTER the grant was minted — no re-grant, no re-login.
+*
+*   - `all`       — every device in the deployment. The broad viewer/operator
+*     lever without a `category` grant (a `category` grant also covers device
+*     caps that carry no deviceId; `all` is specifically the device set).
+*   - `ids`       — an explicit deviceId list. This is what a v2 `device:[…]`
+*     grant migrates to (see {@link TokenScopeSchema}); STATIC — a new camera
+*     is NOT covered until the grant is edited.
+*   - `types`     — every device of a `DeviceType` (e.g. every `camera`).
+*     DYNAMIC. A device that changes type, or a new device of the type,
+*     re-resolves on the next request.
+*   - `locations` — every device whose operator-assigned `location` label is
+*     in the set (e.g. "Garden", "Front door"). DYNAMIC. A device with a
+*     null/unset location matches NO `locations` selector.
+*/
+var DeviceSelectorSchema = discriminatedUnion("kind", [
+	object({ kind: literal("all") }),
+	object({
+		kind: literal("ids"),
+		ids: array(number().int()).min(1)
+	}),
+	object({
+		kind: literal("types"),
+		types: array(_enum(DeviceType)).min(1)
+	}),
+	object({
+		kind: literal("locations"),
+		locations: array(string().min(1)).min(1)
+	})
+]);
+var DeviceTokenScopeSchema = object({
+	type: literal("device"),
+	/** The device SET this grant covers — resolved against the live fleet. */
+	selector: DeviceSelectorSchema,
+	access: array(MethodAccessSchema).min(1),
+	/**
+	* Whether a grant on a PARENT device transparently covers its accessory
+	* CHILDREN (siren / floodlight / PIR) via the persisted-parentage walk.
+	* Direction is parent → children ONLY.
+	*
+	* Absent → the matcher DERIVES it from the access flavour: `view`
+	* inherits (a camera viewer sees the camera's accessories), `create` /
+	* `delete` do NOT (actuating/removing a child is an explicit act the
+	* operator must grant on the child, not inherit from the parent). Set it
+	* explicitly to override that default per grant.
+	*/
+	includeLinked: boolean().optional()
+});
+/**
+* v2 → v3 lazy migration. A pre-v3 `device` grant carried
+* `targets: string[]` (stringified deviceIds); it rewrites to the equivalent
+* `selector: {kind:'ids', ids}`. Applied as a `preprocess` so it runs on
+* EVERY parse path — stored records AND the JWT-carried scope arrays
+* normalised at the request boundary ({@link normalizeTokenScopes} in
+* `device-selector.ts`). Chosen over a one-time DB migration because a
+* migration cannot reach a JWT already in a client's hands; parse-time
+* migration covers both without a flag day. No cast — the raw object is read
+* through `Reflect.get` (its static type is `unknown`).
+*/
+function migrateLegacyTokenScope(raw) {
+	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return raw;
+	if (Reflect.get(raw, "type") !== "device") return raw;
+	if (Reflect.get(raw, "selector") !== void 0) return raw;
+	const targets = Reflect.get(raw, "targets");
+	if (!Array.isArray(targets)) return raw;
+	return {
+		type: "device",
+		selector: {
+			kind: "ids",
+			ids: targets.map((t) => typeof t === "string" ? Number(t) : t).filter((n) => typeof n === "number" && Number.isInteger(n))
+		},
+		access: Reflect.get(raw, "access")
+	};
+}
+var TokenScopeSchema = preprocess(migrateLegacyTokenScope, discriminatedUnion("type", [
 	object({
 		type: literal("category"),
 		target: CapScopeSchema,
@@ -16019,18 +16538,8 @@ var TokenScopeSchema = discriminatedUnion("type", [
 		target: string(),
 		access: array(MethodAccessSchema).min(1)
 	}),
-	object({
-		type: literal("device"),
-		/**
-		* One or more deviceIds (serialised as strings for wire-format
-		* consistency with the rest of the union). Matcher accepts if
-		* `input.deviceId` ∈ `targets`. Array shape avoids the row-explosion
-		* of one scope-per-device when granting access to a set of cameras.
-		*/
-		targets: array(string()).min(1),
-		access: array(MethodAccessSchema).min(1)
-	})
-]);
+	DeviceTokenScopeSchema
+]));
 object({
 	id: string(),
 	username: string(),
@@ -16347,7 +16856,7 @@ var TrackEnvelopeSchema = object({
 * `snapshots[]` references — megabytes across a page of tracks. `slim`
 * keeps every scalar the list surfaces actually render (ids, class(es),
 * label / audioLabels / importance enrichment, firstSeen/lastSeen, state,
-* zonesVisited, bestEventId, envelope, hasFace) and returns `positions` /
+* zonesVisited, bestEventId, envelope, hasFace, hasRider) and returns `positions` /
 * `snapshots` as EMPTY arrays — detail views re-fetch the full row via
 * `getTrack`. Mirrors the event-store `projection` convention
 * (`getObjectEvents` et al.).
@@ -16483,7 +16992,21 @@ union([literal(1), literal(2)]);
 var LabelAttributionSchema = object({
 	stepId: string(),
 	modelId: string().optional(),
-	decidedAt: number()
+	decidedAt: number(),
+	/**
+	* The GALLERY id behind a recognised tier-2 label — a face-gallery
+	* `Identity.id` or a plate-gallery `Vehicle.id` (both `randomUUID`).
+	*
+	* The text alone is a DISPLAY NAME, and a display name is renameable: a
+	* notification rule authored on "Gianluca" stopped matching the moment the
+	* operator fixed the spelling in the gallery, and nothing said so. The id is
+	* the thing that does not move, so it is what a rule matches on
+	* (`NcConditions.identities`) and the text is what a human is shown.
+	*
+	* Absent when the label names no gallery row — a plate the OCR read but no
+	* vehicle claims, a sub-class, a species, any tier-1 value.
+	*/
+	identityId: string().optional()
 });
 /**
 * The TIERED label model (roadmap 4g), spread into `TrackSchema` and
@@ -16620,6 +17143,28 @@ var TrackSchema = object({
 	* `=== true` and render nothing otherwise, never infer "no face".
 	*/
 	hasFace: boolean().optional(),
+	/**
+	* This subject CONTAINS a folded rider — a person the rider-pairing step
+	* ([D34](../decisions/adr-0034.md)) removed from the frame BEFORE the tracker,
+	* so the passage is tracked once and as a VEHICLE.
+	*
+	* It exists because the fold's record was dishonest. D34 and the code both
+	* said "the person is not lost — it is reported so both entities stay on the
+	* record"; in fact the pair went into a per-processor RAM field behind an
+	* accessor nobody called, and every durable surface said `vehicle`, full
+	* stop. This is the composition note that makes the row true.
+	*
+	* A COMPOSITION, never a class and never a label. "This vehicle contains a
+	* person" is not an answer to "what is this" — both label tiers would refuse
+	* a macro token anyway (D89), and correctly. Nothing here changes what the
+	* subject IS: a cyclist stays one vehicle track, occupancy still counts one,
+	* and a `person` rule still does not fire for someone cycling past.
+	*
+	* **Absent ≠ false**, exactly like {@link hasFace}: every row written before
+	* the column, and every hub that predates the field, omits it. Test
+	* `=== true` and render nothing otherwise — never infer "no rider".
+	*/
+	hasRider: boolean().optional(),
 	...TrackFlagFields,
 	...TrackRetrainFields
 });
@@ -16969,7 +17514,10 @@ var RecentTracksQueryInput = object({
 	*  Encodes the (lastSeen, trackId) sort position — treat as opaque. */
 	cursor: string().optional(),
 	/** See {@link TrackProjectionSchema}. Default `full`. */
-	projection: TrackProjectionSchema.optional()
+	projection: TrackProjectionSchema.optional(),
+	/** Include stationary-promoted rows (parked objects). Default false: the
+	*  feed lists passages; parking records live on the stationary registry. */
+	includeStationary: boolean().optional()
 });
 var RecentTracksPageSchema = object({
 	/** Merged page, ordered by (`lastSeen` DESC, `trackId` DESC). */
@@ -17187,7 +17735,11 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	zone: TrackZoneFilterSchema.optional(),
 	/** See {@link TrackProjectionSchema}. Default `full` (backward
 	*  compatible — omitting the field keeps today's exact behaviour). */
-	projection: TrackProjectionSchema.optional()
+	projection: TrackProjectionSchema.optional(),
+	/** Include stationary-promoted rows (parked objects handed to the
+	*  stationary registry). Default false: the timeline lists passages,
+	*  not parking records (operator decision, 2026-08-15). */
+	includeStationary: boolean().optional()
 }), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
@@ -17351,11 +17903,16 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	auth: "admin"
 }), method(object({
 	eventId: string(),
-	kind: MediaFileKindEnum.optional()
+	kind: MediaFileKindEnum.optional(),
+	deviceId: number()
+}), array(MediaFileSchema).readonly()), method(object({
+	trackId: string(),
+	kinds: array(MediaFileKindEnum).optional(),
+	deviceId: number()
 }), array(MediaFileSchema).readonly()), method(object({
 	trackId: string(),
-	kinds: array(MediaFileKindEnum).optional()
-}), array(MediaFileSchema).readonly()), method(object({ trackId: string() }), array(MediaFileInfoSchema).readonly()), method(SearchObjectEventsInput, array(ScoredObjectEventSchema).readonly()), method(object({}), WipeObjectEmbeddingsResultSchema, {
+	deviceId: number()
+}), array(MediaFileInfoSchema).readonly()), method(SearchObjectEventsInput, array(ScoredObjectEventSchema).readonly()), method(object({}), WipeObjectEmbeddingsResultSchema, {
 	kind: "mutation",
 	auth: "admin"
 }), method(RebuildObjectEmbeddingsInput, RebuildObjectEmbeddingsResultSchema, {
@@ -18015,6 +18572,17 @@ var maxSessionHoldMsField = {
 	default: 12e4,
 	step: 5e3
 };
+/**
+* Quiet period that closes an `audioMode: 'on-motion'` audio window. Floor of
+* 5s so a rearm can never degenerate into per-event stream churn; default 90s
+* comfortably outlives the gap between two PIR wakes on a battery camera.
+*/
+var audioMotionWindowMsField = {
+	min: 5e3,
+	max: 6e5,
+	default: 9e4,
+	step: 5e3
+};
 var motionFpsField = {
 	min: 1,
 	max: 30,
@@ -18046,7 +18614,7 @@ var detectionFpsField = {
 var occupancyRecheckSecField = {
 	min: 0,
 	max: 300,
-	default: 30,
+	default: 300,
 	step: 5
 };
 var occupancyRecheckFramesField = {
@@ -18191,6 +18759,27 @@ var RunnerCameraConfigSchema = object({
 	* resolved `CameraDetectionConfig`.
 	*/
 	maxSessionHoldMs: number().min(maxSessionHoldMsField.min).max(maxSessionHoldMsField.max).optional(),
+	/**
+	* Orchestrator-side quiet period (ms) that closes an `audioMode:
+	* 'on-motion'` audio window, measured from the LAST motion event.
+	*
+	* This exists because the falling edge cannot be relied on. Camera-native
+	* providers emit motion as a RISING EDGE ONLY (Reolink's Baichuan push and
+	* its email-push SMTP path both emit `detected: true` and never the
+	* counterpart); only the frame-diff analyzer emits falls. So on an
+	* onboard-only camera a window that closed only on `detected: false` never
+	* closed at all, and `on-motion` silently behaved as `always-on` — on a
+	* battery camera, the one failure mode the mode exists to prevent.
+	*
+	* Every motion event rearms this timer WITHOUT restarting the stream, so a
+	* burst of re-fires costs nothing. A falling edge, when one does arrive,
+	* still closes earlier via `motionCooldownMs` — whichever comes first wins.
+	*
+	* Not consumed by the runner: carried here so it shares the per-camera
+	* device-settings surface with `motionCooldownMs`, exactly like
+	* `maxSessionHoldMs`.
+	*/
+	audioMotionWindowMs: number().min(audioMotionWindowMsField.min).max(audioMotionWindowMsField.max).optional(),
 	motionFps: number().min(motionFpsField.min).max(motionFpsField.max).default(motionFpsField.default),
 	detectionFps: number().min(detectionFpsField.min).max(detectionFpsField.max).default(detectionFpsField.default),
 	motionStreamId: string(),
@@ -18286,7 +18875,7 @@ var RunnerCameraConfigSchema = object({
 	*/
 	inferenceDevices: array(RunnerInferenceDeviceSchema).readonly().optional()
 });
-motionFpsField.min, motionFpsField.max, motionFpsField.step, motionFpsField.default, detectionFpsField.min, detectionFpsField.max, detectionFpsField.step, detectionFpsField.default, motionCooldownMsField.min, motionCooldownMsField.max, motionCooldownMsField.step, motionCooldownMsField.default, maxSessionHoldMsField.min, maxSessionHoldMsField.max, maxSessionHoldMsField.step, maxSessionHoldMsField.default, occupancyRecheckSecField.min, occupancyRecheckSecField.max, occupancyRecheckSecField.step, occupancyRecheckSecField.default, occupancyRecheckFramesField.min, occupancyRecheckFramesField.max, occupancyRecheckFramesField.step, occupancyRecheckFramesField.default;
+motionFpsField.min, motionFpsField.max, motionFpsField.step, motionFpsField.default, detectionFpsField.min, detectionFpsField.max, detectionFpsField.step, detectionFpsField.default, motionCooldownMsField.min, motionCooldownMsField.max, motionCooldownMsField.step, motionCooldownMsField.default, maxSessionHoldMsField.min, maxSessionHoldMsField.max, maxSessionHoldMsField.step, maxSessionHoldMsField.default, audioMotionWindowMsField.min, audioMotionWindowMsField.max, audioMotionWindowMsField.step, audioMotionWindowMsField.default, occupancyRecheckSecField.min, occupancyRecheckSecField.max, occupancyRecheckSecField.step, occupancyRecheckSecField.default, occupancyRecheckFramesField.min, occupancyRecheckFramesField.max, occupancyRecheckFramesField.step, occupancyRecheckFramesField.default;
 /**
 * Runtime load summary returned by `getLocalLoad`. Used by the orchestrator's
 * load-balancing levels (L2 capacity-based, L3 hardware-aware) to decide
@@ -19302,7 +19891,16 @@ targets: array(object({
 	/** A sleeping battery camera: the frame is deliberately stale and will
 	*  NOT refresh in the background. A surface should say so rather than
 	*  present it as current. */
-	sleeping: boolean()
+	sleeping: boolean(),
+	/** Current device state rendered over the cached frame. State images
+	*  remain authoritative even when their photographic background is
+	*  old; null means the link must carry a current camera frame. */
+	stateReason: _enum([
+		"disabled",
+		"sleeping",
+		"unreachable",
+		"waking"
+	]).nullable()
 })));
 /**
 * `sso-bridge` — internal hub-only cap that lets SSO-style auth
@@ -20659,7 +21257,11 @@ object({
 	precision: number().int().min(0).max(10).optional()
 });
 DeviceType.Sensor;
-object({
+/**
+* Ambient illuminance reading in lux. Drives Home Assistant `sensor`
+* entries with `device_class: illuminance`.
+*/
+var AmbientLightSensorStatusSchema = object({
 	/** Current illuminance in lux (lx). */
 	lux: number().min(0),
 	/** Ms epoch when the slice was last updated. */
@@ -20824,6 +21426,25 @@ var BatteryStatusSchema = object({
 	/** Ms epoch of the last observation. Lets consumers reason about freshness. */
 	lastUpdated: number(),
 	/**
+	* Ms epoch of the last time the device PROVED it was reachable — a
+	* completed firmware round-trip, an observed wake, or an inbound push
+	* (firmware event, email). `0`/absent = never since this slice was born.
+	*
+	* This is the ONLY input that separates "asleep" from "gone", and it is
+	* fed exclusively by PASSIVE signals: nothing may write it by reaching
+	* for the radio, because a poll that confirms reachability is the same
+	* poll that drains the battery. See {@link deriveBatteryPresence} — the
+	* single derivation every consumer must use; no surface computes its own.
+	*
+	* It is deliberately NOT a clock in the
+	* `scripts/check-runtime-state-durability.ts` sense: it is the
+	* observation itself, and it is the only thing a 30-hour silence is
+	* visible in. Writers quantise it (see `CONTACT_WRITE_QUANTUM_MS` in the
+	* Reolink provider) so a value that means "recently" cannot cost a
+	* SQLite commit per round-trip.
+	*/
+	lastContactAt: number().optional(),
+	/**
 	* True when the source is a BINARY low-battery indicator (HA
 	* `binary_sensor` device_class=battery / `LOW_BAT`) that has no real
 	* charge level — `percentage` is then a coarse stand-in (100 = normal,
@@ -20932,7 +21553,11 @@ DeviceType.Camera, method(object({ deviceId: number() }), CameraCredentialsSchem
 	kind: "query",
 	auth: "admin"
 });
-object({
+/**
+* Carbon-monoxide alarm sensor. Drives Home Assistant `binary_sensor`
+* entries with `device_class: carbon_monoxide`. Push-driven.
+*/
+var CarbonMonoxideStatusSchema = object({
 	detected: boolean(),
 	/** Ms epoch of the last transition. 0 if never observed. */
 	lastChangedAt: number()
@@ -21220,7 +21845,19 @@ Object.values(DeviceType), method(object({
 	kind: "mutation",
 	auth: "admin"
 }), ConsumablesStatusSchema.extend({ lastFetchedAt: number() });
-object({
+/**
+* Door / window / opening / garage / valve contact sensor. Boolean
+* "is the entry currently open" with the timestamp of the last
+* transition. Drives Home Assistant `binary_sensor` entries whose
+* `device_class` is `door`, `window`, `opening`, `garage`, or
+* `garage_door` — and any future native integration that needs
+* the same semantics.
+*
+* Push-driven: providers update the slice on transition events from
+* the upstream source (HA WebSocket `state_changed`, ZWave
+* `notification` …). Consumers read the slice; no polling.
+*/
+var ContactStatusSchema = object({
 	/** True when the entry is open; false when closed. */
 	entryOpen: boolean(),
 	/** Ms epoch of the last open↔closed transition. 0 if never observed. */
@@ -21819,7 +22456,15 @@ object({
 	deviceId: number(),
 	status: FeatureProbeStatusSchema
 });
-object({
+/**
+* Water leak / moisture sensor. Boolean "is liquid currently
+* detected" with the timestamp of the last transition. Drives Home
+* Assistant `binary_sensor` entries with `device_class: moisture`,
+* and any future native flood sensor.
+*
+* Push-driven from the upstream source.
+*/
+var FloodStatusSchema = object({
 	/** True when leak is currently detected. */
 	flooded: boolean(),
 	/** Ms epoch of the last flooded↔dry transition. 0 if never observed. */
@@ -21873,7 +22518,15 @@ DeviceType.Humidifier, method(object({
 	kind: "mutation",
 	auth: "admin"
 });
-object({
+/**
+* Single-metric humidity reading. Drives Home Assistant `sensor`
+* entries with `device_class: humidity`.
+*
+* Unit normalisation: percent. The canonical display unit (`%`) is a
+* descriptor constant in the UI (ROLE_DESCRIPTOR), not stored in
+* `sourceInfo`.
+*/
+var HumiditySensorStatusSchema = object({
 	/** Current relative humidity, 0..100. */
 	percent: number().min(0).max(100),
 	/** Ms epoch when the slice was last updated. */
@@ -22495,7 +23148,7 @@ method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(obje
 	*  tunnel always emits `https://` regardless. */
 	scheme: _enum(["http", "https"]).optional()
 }), GetConnectionEndpointsResultSchema), method(_void(), NotificationEndpointSchema), method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }), method(_void(), AllowedAddressesSchema), method(AllowedAddressesSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), AllowedAddressesSchema, { kind: "mutation" });
-object({
+var LockControlStatusSchema = object({
 	/** Lifecycle state of the lock. `jammed` means the motor reported
 	*  failure to reach the target — operator intervention required. */
 	state: _enum([
@@ -22833,7 +23486,19 @@ authKey: string().optional() }), object({
 	/** Human-readable error when `ok: false`. */
 	error: string().optional()
 }), { kind: "mutation" });
-object({
+/**
+* Hardware / firmware motion sensor cap — binary detected state plus
+* a timestamp of the last observation. Distinct from
+* `motion-detection.cap.ts` which owns the LOCAL ML motion pipeline;
+* `motion` is the lightweight readout from on-camera motion (Reolink
+* `GetMdState`, Baichuan push `type: motion`, ONVIF analytics).
+*
+* Native-motion providers also fan out to `detection.camera-native`
+* with `source: 'onboard'` so cross-cutting system services
+* (alert-center, advanced-notifier) can subscribe once and receive
+* motion from every camera.
+*/
+var MotionStatusSchema = object({
 	detected: boolean(),
 	/** Ms epoch of the last detected-true observation. Null if never detected. */
 	lastDetectedAt: number().nullable(),
@@ -23945,7 +24610,7 @@ var GpsLocationSchema = object({
 	/** Reported accuracy in meters (lower = better). */
 	accuracyMeters: number().nonnegative()
 });
-object({
+var PresenceStatusSchema = object({
 	/** `home` / `not_home` / any user-defined zone name. */
 	state: string(),
 	/** Optional textual location label (zone name, city, address). Null
@@ -24361,7 +25026,7 @@ method(object({
 	toMs: number()
 }), RecordingAvailabilitySchema, {
 	kind: "query",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number(),
 	fromMs: number(),
@@ -24369,14 +25034,14 @@ method(object({
 	tzOffsetMinutes: number()
 }), RecordingDaysSchema, {
 	kind: "query",
-	auth: "admin"
+	auth: "protected"
 }), method(object({
 	deviceId: number(),
 	fromMs: number(),
 	toMs: number()
 }), RecordingManifestSchema, {
 	kind: "query",
-	auth: "admin"
+	auth: "protected"
 }), method(object({}), RecordingStorageUsageSchema, {
 	kind: "query",
 	auth: "admin"
@@ -24666,14 +25331,77 @@ method(object({
 * thing except the comparator: `similarity` (CLIP cosine at the same ROI coords
 * vs condition-tagged references) and `llm` (vision-LLM judgment over the crop).
 *
-* D14 device-config archetype (`deviceConfig.ui.kind:'widget'`) — the framework
-* derives the device-detail contribution; the provider carries NO hand-written
-* settings-contribution methods. `status.kind:'push'` — the engine pushes on
-* every hysteresis flip / availability change; consumers never poll.
+* **No `deviceConfig`, deliberately.** This shipped as the D14 widget archetype,
+* which put a "Scenes" tab on one camera's detail page. That is the wrong shape
+* for the thing: a scene is a standing question about the property ("is the bin
+* still out"), and the operator's question is "which of my scenes have tripped",
+* across every camera at once — not "what does camera 617 think". Buried one
+* camera deep it also could not be found. The surface is now a top-level admin
+* page (`/scenes`, `pages/Scenes.tsx`) that lists every scene on every camera and
+* picks the camera inside the create flow, the same shape Events and Faces have.
+*
+* The consequence to keep in mind: `host/scene-monitor-editor` is gone from
+* `HOST_WIDGETS` too. `scripts/check-host-widget-resolves.ts` asserts BOTH
+* directions, so a registration nobody declares fails exactly as loudly as a
+* declaration nobody registers. The editor is imported directly by the page.
+*
+* `status.kind:'push'` — the engine pushes on every hysteresis flip /
+* availability change; consumers never poll.
 */
-/** Extensible condition tag. Seeded 'day' | 'night'; open by design so more can
-*  be added without a wire break (matching falls back to any-condition refs). */
+/** Extensible condition tag. Seeded 'day' | 'ir' (the two variants the operator
+*  captures) plus 'night' | 'dawn' | 'dusk' from the resolver's sun-times band.
+*  Open by design so more can be added without a wire break.
+*
+*  Matching does NOT fall back across conditions: cross-condition cosines are
+*  not comparable, so "I have never seen this scene in this light" is reported
+*  as `unknown`, never guessed. A day reference scored against an IR frame
+*  collapses the cosine and would latch a false alarm every single night. */
 var SceneConditionSchema = string();
+/**
+* What a scene does when the CURRENT light has no reference of its own.
+*
+* The lighting variants are not equally likely to exist. Almost every operator
+* captures daylight and then never stands outside at 22:00 to capture IR, and a
+* scene that is only ever going to be asked about a daytime question ("is the
+* bin still on the kerb at 08:00") does not need a night reference at all. The
+* night half must therefore be OPTIONAL, and optional means the scene keeps
+* working without it rather than degrading into a permanent complaint.
+*
+* - `skip` (default) — the check in that light is not made. Not a verdict, not
+*   an alarm, not even an `unknown`: the live state simply stays whatever the
+*   last covered light left it at, the latch is untouched, and the hysteresis
+*   run is neither spent nor cleared. The scene resumes by itself at first
+*   light. This is the only behaviour under which "I never captured IR" is a
+*   configuration choice instead of a nightly fault.
+* - `judge-anyway` — score against the OTHER conditions' references. Available
+*   for cameras whose IR frame is close enough to daylight (a floodlit
+*   driveway, an always-white-light doorbell), and wrong for everything else:
+*   cross-condition cosines are not comparable, so a day reference against a
+*   true IR frame collapses and the scene reports a theft at 21:40.
+*
+* Never applies when the scene has NO comparable reference at all — that is
+* "not armed yet", it is reported as `no-reference-for-condition`, and silence
+* there would hide a scene the operator never finished setting up.
+*/
+var SceneUncoveredPolicySchema = _enum(["skip", "judge-anyway"]);
+/** `matched` = the baseline is what we see; `diverged` = it demonstrably is not;
+*  `unknown` = we cannot judge (no reference for this condition, encoder model
+*  changed, view shifted, no snapshot). `unknown` is a real value, not a null,
+*  and never counts toward hysteresis in either direction. */
+var SceneVerdictSchema = _enum([
+	"matched",
+	"diverged",
+	"unknown"
+]);
+/** Why a scene cannot judge. Named, because this feature's failure mode is
+*  silence that reads as "nothing has happened". */
+var SceneUnavailableSchema = _enum([
+	"no-reference-for-condition",
+	"view-shifted",
+	"no-vision-profile",
+	"encoder-model-changed",
+	"no-snapshot"
+]);
 /** One captured reference — condition-tagged, model-version-gated. `embedding`
 *  is `number[]` (Float32Array does NOT survive MsgPack/UDS). */
 var SceneReferenceSchema = object({
@@ -24681,7 +25409,14 @@ var SceneReferenceSchema = object({
 	modelId: string(),
 	condition: SceneConditionSchema,
 	capturedAt: number(),
-	thumbnailMediaId: string().optional()
+	thumbnailMediaId: string().optional(),
+	/** Whole-frame (downscaled) embedding captured alongside the ROI crop. The
+	*  anti-view-shift anchor: a bumped camera, a PTZ preset or a re-aim makes the
+	*  normalized rect frame a different piece of world, and the scene would
+	*  diverge forever with a perfectly plausible cosine. Checked LAZILY, only
+	*  when hysteresis is about to flip — one extra encode per candidate
+	*  transition, not per poll. */
+	anchorEmbedding: array(number()).optional()
 });
 var SceneMonitorStateSchema = object({
 	id: string(),
@@ -24703,6 +25438,28 @@ var SceneCheckSchema = discriminatedUnion("mode", [object({
 	profileId: string().optional(),
 	hysteresisCount: number().int().positive()
 })]);
+var SCENE_DEFAULT_ANCHOR_THRESHOLD = .85;
+/** Night is OPTIONAL. A scene with only a daylight reference sits the IR hours
+*  out in silence rather than reporting a fault every night. */
+var SCENE_DEFAULT_UNCOVERED_POLICY = "skip";
+/**
+* Vision-model adjudication of a candidate flip. Field names deliberately
+* mirror `NcConfirmSchema` so an operator meets one vocabulary, not two.
+*
+* `onTimeout` defaults to **'hold'**, the OPPOSITE of `NcConfirmGate`'s
+* fail-open: a notification suppressed is the worse error there, but a vision
+* model that timed out has not told us the bin is gone, and a latch is a
+* stateful claim that costs the operator a trip to reset.
+*/
+var SceneConfirmSchema = object({
+	enabled: boolean().default(false),
+	prompt: string().min(1).max(1e3),
+	profileId: string().optional(),
+	timeoutMs: number().int().min(1e3).max(2e4).default(8e3),
+	maxImagePx: number().int().min(64).max(2048).default(448),
+	/** What a timeout / unavailable model means for the PENDING flip. */
+	onTimeout: _enum(["flip", "hold"]).default("hold")
+});
 var SceneMonitorSchema = object({
 	id: string(),
 	label: string(),
@@ -24721,7 +25478,56 @@ var SceneMonitorSchema = object({
 	lastConfidence: number().nullable(),
 	currentCondition: SceneConditionSchema.nullable(),
 	availability: _enum(["ok", "unavailable"]),
-	unavailableReason: string().nullable()
+	unavailableReason: string().nullable(),
+	/** Which state is "the initial screen". `null` until the first capture. */
+	baselineStateId: string().nullable(),
+	/** Which boolean drives notification rules and any export. */
+	emit: _enum(["latched", "live"]).default("latched"),
+	/** Live: does the region match the baseline RIGHT NOW. */
+	verdict: SceneVerdictSchema,
+	/** Has it been `diverged` at least once since `armedAt` — the operator's boolean. */
+	latched: boolean(),
+	/** Last reset (or creation). */
+	armedAt: number(),
+	divergedAt: number().nullable(),
+	restoredAt: number().nullable(),
+	/** A check is only COUNTED when the device has been quiet this long. Motion
+	*  during the window DISCARDS the observation — a car pulling up in front of
+	*  the bin must not be able to spend hysteresis credit. */
+	quietSeconds: number().int().min(0).max(3600).default(60),
+	/** An observation only advances the pending count when it is at least this
+	*  far from the previously counted one, so N agreeing checks span real time
+	*  rather than N adjacent polls inside one occlusion. */
+	minObservationSpacingSec: number().int().min(0).max(3600).default(120),
+	/** Vision-model adjudication of a candidate flip. Similarity primary only. */
+	confirm: SceneConfirmSchema.optional(),
+	/** Whole-frame anchor cosine below which a flip is REFUSED as `view-shifted`. */
+	anchorThreshold: number().min(0).max(1).default(SCENE_DEFAULT_ANCHOR_THRESHOLD),
+	/** Clear the latch on its own when the scene matches again? Default false —
+	*  `restoredAt` and the `scene-restored` edge are recorded regardless, so an
+	*  automation can react to the bin coming back without the operator's own
+	*  alarm silently clearing itself. */
+	autoRestore: boolean().default(false),
+	/** What to do when the current light has no reference of its own. See
+	*  {@link SceneUncoveredPolicySchema} — the default makes night OPTIONAL. */
+	onUncoveredCondition: SceneUncoveredPolicySchema.default(SCENE_DEFAULT_UNCOVERED_POLICY),
+	/**
+	* The light whose checks are currently being SAT OUT under
+	* `onUncoveredCondition: 'skip'` — `null` when the scene is checking normally.
+	*
+	* Engine-reported and advisory only: it moves no verdict, no latch and no
+	* hysteresis. It exists so the card can say *"night (IR) — checks paused,
+	* nothing captured in this light"* in the same calm voice as the coverage
+	* line, because the alternative is a scene that silently stops answering
+	* after sunset with nothing anywhere saying why. A skipped check must never
+	* read as a broken one.
+	*/
+	suspendedCondition: SceneConditionSchema.nullable().default(null),
+	/** Named cause when `verdict === 'unknown'`. */
+	unavailable: SceneUnavailableSchema.nullable(),
+	/** Conditions that have at least one comparable reference — the coverage line
+	*  ("day ✓ · ir ✓ · dusk ✗") that turns a silent fallback into a visible fact. */
+	coveredConditions: array(SceneConditionSchema)
 });
 var SceneMonitorStatusSchema = object({
 	monitors: array(SceneMonitorSchema),
@@ -24754,7 +25560,15 @@ DeviceType.Camera, method(object({ deviceId: number() }), SceneMonitorStatusSche
 			"both"
 		]).optional(),
 		checkIntervalSec: number().optional(),
-		check: SceneCheckSchema.optional()
+		check: SceneCheckSchema.optional(),
+		emit: _enum(["latched", "live"]).optional(),
+		quietSeconds: number().int().min(0).max(3600).optional(),
+		minObservationSpacingSec: number().int().min(0).max(3600).optional(),
+		anchorThreshold: number().min(0).max(1).optional(),
+		autoRestore: boolean().optional(),
+		onUncoveredCondition: SceneUncoveredPolicySchema.optional(),
+		/** `null` clears the vision-model adjudicator. */
+		confirm: SceneConfirmSchema.nullable().optional()
 	})
 }), _void(), {
 	kind: "mutation",
@@ -24791,6 +25605,14 @@ DeviceType.Camera, method(object({ deviceId: number() }), SceneMonitorStatusSche
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	deviceId: number(),
+	monitorId: string(),
+	/** Defaults to TRUE at the provider seam — see `SCENE_RESET_RECAPTURES`. */
+	recapture: boolean().optional()
+}), _void(), {
+	kind: "mutation",
+	auth: "admin"
 });
 /**
 * Per-stage gating mode applied to the zones a rule references.
@@ -24905,7 +25727,16 @@ DeviceType.Script, method(object({
 	kind: "mutation",
 	auth: "admin"
 });
-object({
+/**
+* Smoke alarm sensor — boolean "is smoke currently detected" with
+* timestamp of the last transition. Drives Home Assistant
+* `binary_sensor` entries with `device_class: smoke`.
+*
+* Push-driven: a smoke event is critical, so the slice updates
+* immediately on the upstream signal. Auto-clearing back to false is
+* provider-controlled (some alarms latch until manually reset).
+*/
+var SmokeStatusSchema = object({
 	detected: boolean(),
 	/** Ms epoch of the last transition. 0 if never observed. */
 	lastChangedAt: number()
@@ -24944,6 +25775,16 @@ var CamStreamDescriptorSchema = object({
 	/** Transport-specific opaque metadata (e.g. rfc4571 SDP). */
 	metadata: record(string(), unknown()).optional()
 });
+object({
+	/** The descriptors as last built from a real camera response. Never a guess:
+	*  a failed or refused build writes NOTHING, so a restored catalog is always
+	*  one the camera itself once produced. */
+	descriptors: array(CamStreamDescriptorSchema),
+	/** Ms epoch of the build that produced {@link descriptors}. Lets the wake
+	*  path decide whether the camera's own awake window is worth spending on a
+	*  re-read. */
+	lastFetchedAt: number()
+});
 DeviceType.Camera, method(object({ deviceId: number().int().nonnegative() }), array(CamStreamDescriptorSchema).readonly());
 /** One of the camera's stream profiles. */
 var StreamProfileSchema = _enum([
@@ -25099,12 +25940,64 @@ var NetworkAddressSchema = object({
 	family: string(),
 	internal: boolean()
 });
+/**
+* Provenance of the site coordinates, and the whole reason this is not just two
+* numbers.
+*
+*   - `operator-set` — a human typed it, or accepted a detection. Authoritative;
+*     nothing overwrites it.
+*   - `derived-from-ip` — the hub geolocated its own public IP once, because a
+*     default that is right to a few kilometres beats the coarse UTC clock split
+*     the sun-times consumers otherwise fall back to.
+*
+* The UI shows which one it is. An operator who cannot tell a guess from their
+* own input will eventually trust the guess.
+*/
+var SiteLocationSourceSchema = _enum(["operator-set", "derived-from-ip"]);
+/**
+* The read shape: the location plus the honest state of the one-shot derivation.
+*
+* `derivationAttemptedAt` is what makes the "one call, ever" contract
+* inspectable. When it is set and `location` is null, the geo-IP lookup ran and
+* failed; the hub will NOT try again on its own — the fallback is declared
+* (consumers degrade to their own last resort) and the operator either types the
+* coordinates or presses detect.
+*/
+var SiteLocationStatusSchema = object({
+	location: object({
+		/** WGS84 decimal degrees. */
+		latitude: number().min(-90).max(90),
+		longitude: number().min(-180).max(180),
+		source: SiteLocationSourceSchema,
+		/** Epoch ms the value was last written. */
+		updatedAt: number(),
+		/**
+		* Human-readable place the geo-IP service reported ("Napoli, IT"). Display
+		* only — never parsed, never matched on. Absent for an operator-typed value.
+		*/
+		label: string().optional()
+	}).nullable(),
+	derivationAttemptedAt: number().nullable(),
+	/** Why the last derivation failed, for the UI to show instead of a shrug. */
+	derivationError: string().nullable()
+});
+/** `null` clears the location and re-arms nothing — the derivation stays spent. */
+var SetSiteLocationInputSchema = object({
+	latitude: number().min(-90).max(90),
+	longitude: number().min(-180).max(180)
+}).nullable();
 method(_void(), FeatureManifestSchema), method(_void(), HealthStatusSchema), method(_void(), FeatureManifestSchema), method(_void(), array(NetworkAddressSchema).readonly()), method(_void(), unknown().nullable(), { auth: "admin" }), method(record(string(), unknown()), _null(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(_void(), _void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(_void(), SiteLocationStatusSchema), method(SetSiteLocationInputSchema, SiteLocationStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), SiteLocationStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
 });
 object({
 	/** True when the device's tamper switch / case-open contact is
@@ -25114,7 +26007,23 @@ object({
 	lastChangedAt: number()
 });
 DeviceType.Sensor;
-object({
+/**
+* Single-metric temperature reading. Drives Home Assistant `sensor`
+* entries with `device_class: temperature` and any future native
+* thermometer.
+*
+* Unit normalisation: providers convert to Celsius before storing.
+* The slice value is always Celsius so cross-cap aggregators
+* (climate-control's `currentTemp`, energy analytics) can compose
+* without per-source unit fixups. The canonical display unit (`°C`) is
+* a descriptor constant in the UI (ROLE_DESCRIPTOR), not stored in
+* `sourceInfo`.
+*
+* Status `lastFetchedAt` lets staleness-aware consumers detect a
+* frozen feed (provider hung) distinct from a "temperature hasn't
+* changed" steady state.
+*/
+var TemperatureSensorStatusSchema = object({
 	/** Current temperature in Celsius. */
 	celsius: number(),
 	/** Ms epoch when the slice was last updated (push or poll). */
@@ -27834,6 +28743,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"llm.cancel": {
+		capName: "llm",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"llm.deleteModel": {
 		capName: "llm",
 		capScope: "system",
@@ -27918,6 +28833,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"llm.resolveModelRef": {
+		capName: "llm",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"llm.setDefault": {
 		capName: "llm",
 		capScope: "system",
@@ -30084,6 +31005,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"sceneMonitor.resetScene": {
+		capName: "scene-monitor",
+		capScope: "device",
+		addonId: null,
+		access: "delete"
+	},
 	"sceneMonitor.updateScene": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -30762,6 +31689,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"system.detectSiteLocation": {
+		capName: "system",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"system.featureFlags": {
 		capName: "system",
 		capScope: "system",
@@ -30780,6 +31713,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"system.getSiteLocation": {
+		capName: "system",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"system.health": {
 		capName: "system",
 		capScope: "system",
@@ -30804,6 +31743,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"system.setSiteLocation": {
+		capName: "system",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"terminalSession.adoptLegacyMonitor": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -31375,6 +32320,1704 @@ Object.freeze({
 		access: "create"
 	}
 });
+Object.freeze({
+	"accessories.setChildHidden": [{
+		name: "childDeviceId",
+		form: "single",
+		optional: false
+	}, {
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"addonSettings.getDeviceSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"addonSettings.updateDeviceSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"alarmPanel.arm": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"alarmPanel.disarm": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"alarmPanel.trigger": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"audioAnalysis.resolveDeviceSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"audioAnalyzer.classify": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"audioMetrics.getCurrentSnapshot": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"audioMetrics.getHistory": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"automationControl.disable": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"automationControl.enable": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"automationControl.trigger": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"battery.wakeForStream": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"brightness.setBrightness": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"button.press": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cameraCredentials.getCredentials": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cameraStreams.getBrokerStreams": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cameraStreams.getCameraStreams": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cameraStreams.getProfileRtspEntries": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cameraStreams.getRtspEntries": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cameraStreams.pickStream": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"climateControl.setFanMode": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"climateControl.setMode": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"climateControl.setPreset": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"climateControl.setSwingHorizontal": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"climateControl.setSwingVertical": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"climateControl.setTarget": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"climateControl.setTargetHumidity": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"climateControl.setTargetRange": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"color.setColor": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"consumables.reset": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"control.setValue": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cover.close": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cover.open": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cover.setPosition": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cover.setTiltPosition": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"cover.stop": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dayNight.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"dayNight.setSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"decoder.createSession": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"deviceAdoption.release": [{
+		name: "camDeviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceAdoption.resync": [{
+		name: "camDeviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceDiscovery.adoptDevice": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceDiscovery.listDiscovered": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceDiscovery.refreshDiscovery": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceDiscovery.releaseDevice": [{
+		name: "childDeviceId",
+		form: "single",
+		optional: false
+	}, {
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.adoptionRelease": [{
+		name: "camDeviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.adoptionResync": [{
+		name: "camDeviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.applyInitialMeta": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}, {
+		name: "linkDeviceId",
+		form: "single",
+		optional: true
+	}],
+	"deviceManager.disable": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.enable": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getBindings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getChildren": [{
+		name: "parentDeviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getConfigSchema": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getDevice": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getDeviceAggregate": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getDeviceLiveInfoAggregate": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getDeviceSettingsAggregate": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getDeviceStatusAggregate": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getDeviceStatusAggregateBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
+	"deviceManager.getLinkedDevices": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getSettingsSchema": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getStreamProfileMap": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getStreamSources": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.getWireableFields": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.loadConfig": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.loadMeta": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.loadRuntimeState": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.persistConfig": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.probeStreams": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.registerDevice": [{
+		name: "parentDeviceId",
+		form: "single",
+		optional: true
+	}],
+	"deviceManager.remove": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.removeDevice": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.runDeviceAction": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setChildLayout": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setDisabled": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setDisplay": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setIntegrationId": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setLinkDeviceId": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}, {
+		name: "linkDeviceId",
+		form: "single",
+		optional: true
+	}],
+	"deviceManager.setLocation": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setMetadata": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setName": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setPrimaryChildEntityId": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setRole": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setStreamProfileMap": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setType": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.setWrapperActive": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.testField": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.updateConfig": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.updateDeviceField": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceManager.updateDeviceFieldsBatch": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceOps.getConfigEntries": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceOps.getRawState": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceOps.getSettingsSchema": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceOps.getStreamSources": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceOps.removeDevice": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceOps.runAction": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceOps.setConfig": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceState.getCapSlice": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceState.getSnapshot": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"deviceState.setCapSlice": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"events.getEventClipUrl": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"events.getEvents": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"events.getEventThumbnail": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"faceGallery.getFaceByTrack": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"faceGallery.listRecentFaces": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"fanControl.setDirection": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"fanControl.setOscillating": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"fanControl.setPercentage": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"fanControl.setPreset": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"humidifier.setMode": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"humidifier.setOn": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"humidifier.setTargetHumidity": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"imageSettings.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"imageSettings.setSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"intercom.endTalkSession": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"intercom.handleAnswer": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"intercom.pushTalkAudio": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"intercom.startSession": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"intercom.startTalkSession": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"intercom.stopSession": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"lawnMowerControl.dock": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"lawnMowerControl.pause": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"lawnMowerControl.startMowing": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"lockControl.lock": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"lockControl.open": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"lockControl.unlock": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.next": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.pause": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.play": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.playMedia": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.previous": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.seek": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.selectSource": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.setMute": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.setRepeat": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.setShuffle": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.setVolume": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"mediaPlayer.stop": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"motion.isDetected": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"motionDetection.analyze": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"motionDetection.removeCamera": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"motionTrigger.setMotionTrigger": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"motionZones.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"motionZones.setZone": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"nativeObjectDetection.setEnabled": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"networkQuality.getDeviceStats": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"networkQuality.reportClientStats": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"notificationRules.setDeviceMuted": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"notifier.cancel": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"notifier.send": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"osd.setOverlay": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"osdManager.clearSlotBinding": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"osdManager.copyDeviceConfiguration": [{
+		name: "sourceDeviceId",
+		form: "single",
+		optional: false
+	}, {
+		name: "targetDeviceId",
+		form: "single",
+		optional: false
+	}],
+	"osdManager.getDeviceOsd": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"osdManager.getSourceCatalog": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"osdManager.previewSlot": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"osdManager.renderDevice": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"osdManager.setSlotBinding": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.callPet": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.cancelFeed": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.feed": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.markFoodReplenished": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.playSound": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.resetDesiccant": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.setChildLock": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.setFeedSound": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.setIndicatorLight": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"petFeeder.setVolume": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.clearTracks": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.completeRetrainTrack": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.deleteDeviceEvents": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.deleteTracks": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.deselectRetrainFrame": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getActiveTracks": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getAudioEvents": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getEventDensity": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getEventMedia": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getKeyEvents": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getMotionEvents": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getObjectEvents": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getRetrainExportUrl": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
+	"pipelineAnalytics.getSensorEvents": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getTrack": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getTrackMedia": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.getTrainingExportSummary": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
+	"pipelineAnalytics.getTrainingExportUrl": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
+	"pipelineAnalytics.listEventKinds": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.listEventKindsBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
+	"pipelineAnalytics.listOpsLog": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"pipelineAnalytics.listRecentTracks": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
+	"pipelineAnalytics.listRetrainStaging": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
+	"pipelineAnalytics.listTrackMedia": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.listTracks": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.proposeRetrainAnnotations": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.pruneEventsBefore": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.pruneTracksBefore": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.rebuildObjectEmbeddings": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"pipelineAnalytics.restageRetrainTrack": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.saveRetrainAnnotations": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.searchObjectEvents": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"pipelineAnalytics.selectRetrainFrames": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.setTrackFlags": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineAnalytics.wipeAllAnalytics": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineExecutor.runPipeline": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"pipelineExecutor.runPipelineBatch": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"pipelineOrchestrator.assignAudio": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.assignPipeline": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.getAudioAssignment": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.getCameraMetrics": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.getCameraSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.getCameraStatus": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.getCameraStatuses": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
+	"pipelineOrchestrator.getCameraStepOverrides": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.getCameraSwitches": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.getPipelineAssignment": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.getPipelineDevicePin": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.resolvePipeline": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.setCameraPipelineForAgent": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.setCameraStepOverride": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.setCameraStepToggle": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.setCameraSwitch": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.setPipelineDevicePin": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.unassignAudio": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineOrchestrator.unassignPipeline": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.attachCamera": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.detachCamera": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.getCameraMetrics": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.reportMotion": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.runDetailSubtree": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.runStatelessStep": [{
+		name: "sourceDeviceId",
+		form: "single",
+		optional: false
+	}],
+	"plateGallery.getPlateByTrack": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"plateGallery.listPlates": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"privacyMask.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"privacyMask.setAudioEnabled": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"privacyMask.setMask": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.continuousMove": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.deletePreset": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.getPosition": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.getPresets": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.goHome": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.goToPreset": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.move": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.savePreset": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.setAutofocus": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptz.stop": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptzAutotrack.getSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptzAutotrack.getStatus": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptzAutotrack.setEnabled": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"ptzAutotrack.setSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"reboot.reboot": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.deleteFootprint": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.getAvailability": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.getDaysWithRecordings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.getDeviceConfig": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.getPlaybackManifest": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.listOpsLog": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"recording.locateSegment": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.pruneFootage": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.readGopBytes": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.readSegmentBytes": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.relocateFootage": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"recording.renderClip": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.renderGif": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.rescanStorage": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.setDeviceConfig": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recording.startStorageMigrationMove": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"recordingExport.createExport": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"recordingExport.listExports": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
+	"sceneMonitor.captureReference": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"sceneMonitor.createScene": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"sceneMonitor.deleteReference": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"sceneMonitor.deleteScene": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"sceneMonitor.listScenes": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"sceneMonitor.recheckNow": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"sceneMonitor.resetScene": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"sceneMonitor.updateScene": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"scriptRunner.run": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"scriptRunner.stop": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"snapshot.getSnapshot": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"snapshot.getSnapshotLinks": [{
+		name: "targets",
+		form: "object-array",
+		optional: false,
+		itemField: "deviceId"
+	}],
+	"snapshot.getSnapshotOverview": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
+	"snapshot.invalidateCache": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.acquireEgressTranscode": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.assignProfile": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.getDeviceAudioMute": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.getStreamWithCodec": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.produceEventMedia": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.publishCameraStream": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.renderPreBufferClip": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.restartProfile": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.retractCameraStream": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.setDeviceAudioMute": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamBroker.unassignProfile": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamCatalog.getCatalog": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamParams.getConfigSchema": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamParams.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"streamParams.setProfile": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"switch.setState": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"vacuumControl.locate": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"vacuumControl.pause": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"vacuumControl.returnToBase": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"vacuumControl.setFanSpeed": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"vacuumControl.start": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"vacuumControl.stop": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"valve.close": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"valve.open": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"valve.setPosition": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"valve.stop": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"videoclips.getClipPlayback": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"videoclips.listClips": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"waterHeater.setAway": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"waterHeater.setOperationMode": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"waterHeater.setTargetTemp": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"webrtcSession.addIceCandidate": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"webrtcSession.closeSession": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"webrtcSession.createSession": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"webrtcSession.getIceCandidates": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"webrtcSession.getSessionState": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"webrtcSession.handleAnswer": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"webrtcSession.handleOffer": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"webrtcSession.hasAdaptiveBitrate": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"webrtcSession.listStreams": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zoneAnalytics.getCameraHistory": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zoneAnalytics.getCurrentSnapshot": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zoneAnalytics.getUnzonedHistory": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zoneAnalytics.getZoneHistory": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zoneRules.listRules": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zoneRules.setRules": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zones.addZone": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zones.listZones": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zones.removeZone": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"zones.updateZone": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}]
+});
 Object.freeze({
 	"broker": "broker",
 	"device-export": "device-export",
@@ -32094,7 +34737,7 @@ var Fmp4FragmentChild = class {
 				meta: {
 					sourceId: this.args.sourceId,
 					decodeHwAccel: requested,
-					error: errMsg$12(err)
+					error: errMsg$15(err)
 				}
 			});
 			this.killChild();
@@ -32273,7 +34916,7 @@ var Fmp4FragmentChild = class {
 				tags: { deviceId: this.args.deviceId },
 				meta: {
 					sourceId: this.args.sourceId,
-					error: errMsg$12(err)
+					error: errMsg$15(err)
 				}
 			});
 		}
@@ -78618,7 +81261,7 @@ function clearPairingFiles(accessoryUuid, logger) {
 }
 //#endregion
 //#region src/hap-setup-uri.ts
-function errMsg$11(e) {
+function errMsg$14(e) {
 	return e instanceof Error ? e.message : String(e);
 }
 /**
@@ -78645,11 +81288,79 @@ function firstExposedAccessorySetupUri(exposed, logger) {
 		try {
 			return first.setupURI();
 		} catch (err) {
-			logger.debug("export-hap: setupURI failed on first exposed accessory", { meta: { error: errMsg$11(err) } });
+			logger.debug("export-hap: setupURI failed on first exposed accessory", { meta: { error: errMsg$14(err) } });
 			return;
 		}
 	}
 }
+//#endregion
+//#region src/mappers/builders/accessory-info.ts
+/**
+* `Service.AccessoryInformation` — the manufacturer / model / firmware /
+* serial block every HomeKit accessory carries.
+*
+* One implementation for both accessory shapes (camera and generic): the
+* fields come from the device's own metadata either way, and a second copy
+* would be a second answer to "what serial does this device publish".
+* Metadata is best-effort — a device that cannot answer still publishes.
+*/
+async function populateAccessoryInfo(accessory, proxy, displayName, modelFallback) {
+	const info = accessory.getService(import_dist.Service.AccessoryInformation);
+	if (!info) return;
+	try {
+		const device = await proxy.deviceManager?.getDevice({});
+		const metadata = readMetadata(device);
+		info.setCharacteristic(import_dist.Characteristic.Name, device?.name ?? displayName);
+		info.setCharacteristic(import_dist.Characteristic.Manufacturer, stringOr(metadata?.manufacturer, "CamStack"));
+		info.setCharacteristic(import_dist.Characteristic.Model, stringOr(metadata?.model, modelFallback));
+		info.setCharacteristic(import_dist.Characteristic.FirmwareRevision, stringOr(metadata?.firmware, "0.0.0"));
+		info.setCharacteristic(import_dist.Characteristic.SerialNumber, stringOr(metadata?.sn, `camstack-${proxy.deviceId}`));
+	} catch {}
+}
+/** The four fields this module reads, or `null` — the device record's
+*  `metadata` is an open bag and nothing else here depends on its shape. */
+function readMetadata(device) {
+	const metadata = device?.metadata;
+	if (metadata === null || typeof metadata !== "object") return {};
+	const entries = new Map(Object.entries(metadata));
+	return {
+		model: stringOrNull(entries.get("model")),
+		manufacturer: stringOrNull(entries.get("manufacturer")),
+		firmware: stringOrNull(entries.get("firmware")),
+		sn: stringOrNull(entries.get("sn"))
+	};
+}
+function stringOrNull(value) {
+	return typeof value === "string" ? value : null;
+}
+function stringOr(value, fallback) {
+	return typeof value === "string" && value.length > 0 ? value : fallback;
+}
+//#endregion
+//#region src/mappers/builders/generic/characteristic-update.ts
+/**
+* Parse `status` with the capability's OWN Zod schema and turn it into
+* characteristic writes.
+*
+* Duck-typing the payload here would be the second source of truth about what a
+* cap reports; the schema is the first and only one. A payload that does not
+* match yields NO updates — never a partial or invented value — and the caller
+* logs the drop, because a sensor that silently stops moving is
+* indistinguishable from a sensor that never changed.
+*
+* Rows `.pick()` only the fields they read, so a provider omitting a timestamp
+* cannot silence a sensor.
+*/
+function reader(schema, toUpdates) {
+	return (status) => {
+		const parsed = schema.safeParse(status);
+		return parsed.success ? toUpdates(parsed.data) : [];
+	};
+}
+/** Push every update onto `service`. */
+function applyUpdates(service, updates) {
+	for (const update of updates) service.updateCharacteristic(update.characteristic, update.value);
+}
 /**
 * hap-nodejs' `checkName` regex, verbatim.
 *
@@ -78786,6 +81497,92 @@ function titleCase(raw) {
 	return raw.split(/[-_\s]+/u).filter((part) => part.length > 0).map((part) => part.charAt(0).toUpperCase() + part.slice(1)).join(" ");
 }
 //#endregion
+//#region src/mappers/builders/service-label.ts
+/**
+* The ONE place a secondary service on the camera accessory gets its label.
+*
+* A "secondary service" here is a Switch or Lightbulb published alongside the
+* camera on the same accessory — the privacy switch, each accessory child
+* (siren, floodlight), each PTZ action. iOS Home renders these as their own
+* controls, and the operator has seen them as "Interruttore 1", "Interruttore
+* 2" through three separate rounds of fixes.
+*
+* ## Why `Name` alone cannot rename anything
+*
+* Two facts about hap-nodejs 2.1.7, both measured against the installed copy
+* rather than reasoned about:
+*
+*  1. `accessory.addService(Type, displayName, subtype)` ALREADY writes
+*     `displayName` to `Characteristic.Name` (`Service` constructor). So every
+*     round of this bug — including the one that moved the label onto
+*     `ConfiguredName` — shipped with `Name` correctly set. "iOS had no name
+*     to render" was never true.
+*  2. The mDNS configuration number (`c#`) is a sha1 over
+*     `internalHAPRepresentation(false)`, which OMITS characteristic VALUES.
+*     Changing the string in `Name` therefore does not bump `c#`, a paired
+*     controller gets no signal to re-read `/accessories`, and the name it
+*     cached at first enumeration stands forever.
+*
+* `Name` is also declared `pr` only — paired read, no write, no notify. It is
+* the seed a controller seeds its database from once; it is not a channel.
+*
+* ## Why `ConfiguredName`
+*
+* `ConfiguredName` (`000000E3`) is declared `pr | pw | ev` — the only name
+* characteristic a controller may write and may subscribe to. It is what iOS
+* 16+ reads for a service the user can rename, and adding it CHANGES the
+* accessory structure, so `c#` does bump and the controller re-reads.
+*
+* It was removed once because hap-nodejs logged
+*
+* ```
+* Characteristic not in required or optional characteristic section for
+* service Switch. Adding anyway.
+* ```
+*
+* That line is a WARNING, not a rejection: `Service.getCharacteristic` calls
+* `addCharacteristic` unconditionally and only then emits the warning. The
+* characteristic was always present and always published. hap-nodejs'
+* per-service optional lists simply predate `ConfiguredName` being valid on
+* any service.
+*
+* Registering it with {@link Service.addOptionalCharacteristic} first takes
+* the branch above the warning, so the accessory still builds with ZERO
+* characteristic warnings — which is what `service-naming.spec.ts` asserts.
+*
+* ## Scope: EVERY service, including the sensors
+*
+* An earlier round applied this to Switch- and Lightbulb-shaped services only,
+* on the theory that `Service.MotionSensor` and `Service.Battery` are not
+* separately named tiles in iOS Home and that naming them would be a guess.
+*
+* That theory was never measured, and it had a cost: it left services on the
+* accessory whose name a paired controller could never be told about, and it
+* made "did `ConfiguredName` fix the operator's 'Interruttore N'?" unanswerable
+* — a negative result on a partial application proves nothing about the
+* mechanism. Every service this addon publishes now carries both
+* characteristics, on the camera accessory and on the generic one.
+*
+* The reasoning above is mechanism, not measurement: it says why `Name` alone
+* CANNOT work and why `ConfiguredName` is the only characteristic that can. It
+* does not prove iOS renders it on every service shape. That is an observation
+* only a re-paired controller can make — and after a change like this one, the
+* controller must be re-paired, because a cached accessory database is exactly
+* what the whole mechanism is about.
+*/
+/**
+* Publish `name` as both the immutable `Name` and the controller-visible
+* `ConfiguredName` of `service`.
+*
+* `name` must already be HAP-valid — build it with `service-names.ts`, which
+* cannot return a string hap-nodejs' `checkName` would warn about.
+*/
+function applyServiceLabel(service, name) {
+	service.setCharacteristic(import_dist.Characteristic.Name, name);
+	if (!service.optionalCharacteristics.some((characteristic) => characteristic.UUID === import_dist.Characteristic.ConfiguredName.UUID)) service.addOptionalCharacteristic(import_dist.Characteristic.ConfiguredName);
+	service.setCharacteristic(import_dist.Characteristic.ConfiguredName, name);
+}
+//#endregion
 //#region src/mappers/builders/battery.ts
 /**
 * Battery builder — surfaces a battery-operated camera's power state
@@ -78795,34 +81592,56 @@ function titleCase(raw) {
 * subscribes to the runtime-state slice so iOS Home reflects level /
 * charging changes pushed by the firmware without a poll loop.
 *
+* The status→characteristic mapping is {@link batteryCharacteristicUpdates},
+* exported because the generic (non-camera) export path publishes the same
+* `Service.Battery` from the same cap — one derivation, two accessory shapes.
+*
+* Skipped silently when the `battery` cap is not bound — caller checks
+* cap presence before invoking this builder (see `camera-accessory.ts`).
+*/
+var LOW_BATTERY_THRESHOLD_PCT = 20;
+/**
 * Mapping:
 *  - `BatteryStatus.percentage` (0..100) → `Characteristic.BatteryLevel`
 *  - `BatteryStatus.charging`:
 *      `'none'` → `ChargingState.NOT_CHARGING`
 *      `'dc' | 'solar'` → `ChargingState.CHARGING`
 *  - `percentage <= LOW_BATTERY_THRESHOLD_PCT` → `StatusLowBattery.LOW`
-*
-* Skipped silently when the `battery` cap is not bound — caller checks
-* cap presence before invoking this builder (see `camera-accessory.ts`).
 */
-var LOW_BATTERY_THRESHOLD_PCT = 20;
+var batteryCharacteristicUpdates = reader(BatteryStatusSchema.pick({ percentage: true }).extend({ charging: BatteryStatusSchema.shape.charging.optional() }), (status) => {
+	const pct = Math.max(0, Math.min(100, Math.round(status.percentage)));
+	return [
+		{
+			characteristic: import_dist.Characteristic.BatteryLevel,
+			value: pct
+		},
+		...status.charging === void 0 ? [] : [{
+			characteristic: import_dist.Characteristic.ChargingState,
+			value: status.charging === "none" ? import_dist.Characteristic.ChargingState.NOT_CHARGING : import_dist.Characteristic.ChargingState.CHARGING
+		}],
+		{
+			characteristic: import_dist.Characteristic.StatusLowBattery,
+			value: pct <= LOW_BATTERY_THRESHOLD_PCT ? import_dist.Characteristic.StatusLowBattery.BATTERY_LEVEL_LOW : import_dist.Characteristic.StatusLowBattery.BATTERY_LEVEL_NORMAL
+		}
+	];
+});
 async function buildBattery(bctx) {
 	const { ctx, accessory, proxy, numericDeviceId, displayName } = bctx;
 	const log = ctx.logger.withTags({ deviceId: numericDeviceId });
-	const service = accessory.addService(import_dist.Service.Battery, hapServiceName([displayName], `Camera ${numericDeviceId}`));
+	const label = hapServiceName([displayName], `Camera ${numericDeviceId}`);
+	const service = accessory.addService(import_dist.Service.Battery, label);
+	applyServiceLabel(service, label);
 	try {
 		const status = await proxy.battery?.getStatus({});
-		if (status) applyToService(service, status);
+		if (status !== void 0 && status !== null) applyToService(service, status);
 	} catch (err) {
-		log.debug("export-hap: battery getStatus hydrate failed (non-fatal)", { meta: { error: errMsg$10(err) } });
+		log.debug("export-hap: battery getStatus hydrate failed (non-fatal)", { meta: { error: errMsg$13(err) } });
 	}
 	const unsubscribes = [];
 	if (proxy.state.battery) {
 		const unsub = proxy.state.battery.subscribe((value) => {
 			if (!value) return;
-			const status = value;
-			if (typeof status.percentage !== "number") return;
-			applyToService(service, status);
+			applyToService(service, value);
 		});
 		unsubscribes.push(unsub);
 	}
@@ -78833,14 +81652,9 @@ async function buildBattery(bctx) {
 	} };
 }
 function applyToService(service, status) {
-	const pct = Math.max(0, Math.min(100, Math.round(status.percentage)));
-	service.updateCharacteristic(import_dist.Characteristic.BatteryLevel, pct);
-	const chargingState = status.charging === "none" ? import_dist.Characteristic.ChargingState.NOT_CHARGING : import_dist.Characteristic.ChargingState.CHARGING;
-	service.updateCharacteristic(import_dist.Characteristic.ChargingState, chargingState);
-	const lowBattery = pct <= LOW_BATTERY_THRESHOLD_PCT ? import_dist.Characteristic.StatusLowBattery.BATTERY_LEVEL_LOW : import_dist.Characteristic.StatusLowBattery.BATTERY_LEVEL_NORMAL;
-	service.updateCharacteristic(import_dist.Characteristic.StatusLowBattery, lowBattery);
+	applyUpdates(service, batteryCharacteristicUpdates(status));
 }
-function errMsg$10(err) {
+function errMsg$13(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
@@ -89592,7 +92406,7 @@ var VIDEO_LOOPBACK_RCVBUF_BYTES = 8 * 1024 * 1024;
 * not burst size.
 */
 var AUDIO_LOOPBACK_RCVBUF_BYTES = 1024 * 1024;
-function errMsg$9(err) {
+function errMsg$12(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 /**
@@ -89607,13 +92421,13 @@ function applyReceiveBuffer(socket, requestedBytes) {
 	try {
 		socket.setRecvBufferSize(requestedBytes);
 	} catch (err) {
-		error = errMsg$9(err);
+		error = errMsg$12(err);
 	}
 	let effectiveBytes = null;
 	try {
 		effectiveBytes = socket.getRecvBufferSize();
 	} catch (err) {
-		if (error === null) error = errMsg$9(err);
+		if (error === null) error = errMsg$12(err);
 	}
 	return {
 		requestedBytes,
@@ -89873,20 +92687,20 @@ function buildCameraStreamingDelegate(bctx, advertised) {
 		delegate: {
 			handleSnapshotRequest(request, callback) {
 				handleSnapshot(bctx, request).then((buf) => callback(void 0, buf)).catch((err) => {
-					log.warn("export-hap: snapshot failed", { meta: { error: errMsg$8(err) } });
-					callback(err instanceof Error ? err : new Error(errMsg$8(err)));
+					log.warn("export-hap: snapshot failed", { meta: { error: errMsg$11(err) } });
+					callback(err instanceof Error ? err : new Error(errMsg$11(err)));
 				});
 			},
 			prepareStream(request, callback) {
 				prepareStream(request, sessions, bctx).then((resp) => callback(void 0, resp)).catch((err) => {
-					log.warn("export-hap: prepareStream failed", { meta: { error: errMsg$8(err) } });
-					callback(err instanceof Error ? err : new Error(errMsg$8(err)));
+					log.warn("export-hap: prepareStream failed", { meta: { error: errMsg$11(err) } });
+					callback(err instanceof Error ? err : new Error(errMsg$11(err)));
 				});
 			},
 			handleStreamRequest(request, callback) {
 				handleStreamRequest(request, sessions, bctx, advertised).then(() => callback()).catch((err) => {
-					log.warn("export-hap: handleStreamRequest failed", { meta: { error: errMsg$8(err) } });
-					callback(err instanceof Error ? err : new Error(errMsg$8(err)));
+					log.warn("export-hap: handleStreamRequest failed", { meta: { error: errMsg$11(err) } });
+					callback(err instanceof Error ? err : new Error(errMsg$11(err)));
 				});
 			}
 		},
@@ -90002,7 +92816,7 @@ async function prepareStream(request, sessions, bctx) {
 		closeSocket(audioUdp);
 		closeSocket(videoLoopUdp);
 		closeSocket(audioLoopUdp);
-		throw new Error(`export-hap: outbound SrtpSession init failed: ${errMsg$8(err)}`, { cause: err });
+		throw new Error(`export-hap: outbound SrtpSession init failed: ${errMsg$11(err)}`, { cause: err });
 	}
 	let upstreamAudioSrtp = null;
 	try {
@@ -90016,7 +92830,7 @@ async function prepareStream(request, sessions, bctx) {
 			profile: import_src.ProtectionProfileAes128CmHmacSha1_80
 		});
 	} catch (err) {
-		bctx.ctx.logger.withTags({ deviceId: bctx.numericDeviceId }).warn("export-hap: SrtpSession init failed (upstream audio decrypt disabled)", { meta: { error: errMsg$8(err) } });
+		bctx.ctx.logger.withTags({ deviceId: bctx.numericDeviceId }).warn("export-hap: SrtpSession init failed (upstream audio decrypt disabled)", { meta: { error: errMsg$11(err) } });
 	}
 	const videoSsrc = randomSsrc();
 	const audioSsrc = randomSsrc();
@@ -90133,7 +92947,7 @@ async function prepareStream(request, sessions, bctx) {
 	});
 	audioUdp.on("message", (packet, rinfo) => {
 		handleIncomingAudioRtp(session, packet, rinfo.address, bctx).catch((err) => {
-			bctx.ctx.logger.withTags({ deviceId: bctx.numericDeviceId }).debug("export-hap: incoming-audio handler error (dropped)", { meta: { error: errMsg$8(err) } });
+			bctx.ctx.logger.withTags({ deviceId: bctx.numericDeviceId }).debug("export-hap: incoming-audio handler error (dropped)", { meta: { error: errMsg$11(err) } });
 		});
 	});
 	logLoopbackBuffer(tagLog, request.sessionID, "video", videoLoop.buffer);
@@ -90329,7 +93143,7 @@ function readControllerRtcp(session, leg, packet, log) {
 	} catch (err) {
 		drop(session, "inbound-rtcp-decrypt-failed");
 		storeReceiverReports(session, leg, recordUnreadableRtcp(tally));
-		logUnreadableRtcp(session, leg, `decrypt: ${errMsg$8(err)}`, log);
+		logUnreadableRtcp(session, leg, `decrypt: ${errMsg$11(err)}`, log);
 		return;
 	}
 	const outcome = ingestDecryptedRtcp(plaintext, tally);
@@ -91095,7 +93909,7 @@ async function handleIncomingAudioRtp(session, packet, sourceAddress, bctx) {
 		session.upstreamRtpDecryptFailures += 1;
 		if (session.upstreamRtpDecryptFailures % 100 === 1) log.debug("export-hap: SRTP decrypt failed (rate-limited)", { meta: {
 			failures: session.upstreamRtpDecryptFailures,
-			error: errMsg$8(err)
+			error: errMsg$11(err)
 		} });
 		return;
 	}
@@ -91109,7 +93923,7 @@ async function handleIncomingAudioRtp(session, packet, sourceAddress, bctx) {
 		rtpPayloadType = parsedRtp.header.payloadType;
 	} catch (err) {
 		drop(session, "upstream-parse-failed");
-		log.debug("export-hap: RTP parse failed after decrypt", { meta: { error: errMsg$8(err) } });
+		log.debug("export-hap: RTP parse failed after decrypt", { meta: { error: errMsg$11(err) } });
 		return;
 	}
 	const negotiatedAudioPt = session.lastStartParams?.audioPt;
@@ -91133,7 +93947,7 @@ async function handleIncomingAudioRtp(session, packet, sourceAddress, bctx) {
 	if (session.intercomTalkSessionId === null) {
 		session.intercomTalkSessionId = "";
 		const opened = await openIntercomTalkSession(bctx).catch((err) => {
-			log.warn("export-hap: intercom.startTalkSession failed", { meta: { error: errMsg$8(err) } });
+			log.warn("export-hap: intercom.startTalkSession failed", { meta: { error: errMsg$11(err) } });
 			return null;
 		});
 		if (opened) {
@@ -91160,7 +93974,7 @@ async function handleIncomingAudioRtp(session, packet, sourceAddress, bctx) {
 		drop(session, "upstream-push-failed");
 		log.debug("export-hap: intercom.pushTalkAudio failed (will re-open on next frame)", { meta: {
 			sequenceNumber: session.intercomPcmSequence,
-			error: errMsg$8(err)
+			error: errMsg$11(err)
 		} });
 		session.intercomTalkSessionId = null;
 	}
@@ -91192,7 +94006,7 @@ async function closeIntercomTalkSession(session, bctx) {
 	} catch (err) {
 		log.debug("export-hap: intercom.endTalkSession failed (continuing)", { meta: {
 			sessionId,
-			error: errMsg$8(err)
+			error: errMsg$11(err)
 		} });
 	}
 }
@@ -91217,7 +94031,7 @@ function closeSocket(udp) {
 function randomSsrc() {
 	return Math.floor(Math.random() * 2147483646) + 1 | 0;
 }
-function errMsg$8(err) {
+function errMsg$11(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
@@ -91301,14 +94115,14 @@ async function buildDoorbell(input) {
 			}
 			log.info("export-hap: doorbell SINGLE_PRESS pushed to HomeKit", { meta: { ...delivery } });
 		} catch (err) {
-			log.warn("export-hap: ringDoorbell() failed", { meta: { error: errMsg$7(err) } });
+			log.warn("export-hap: ringDoorbell() failed", { meta: { error: errMsg$10(err) } });
 		}
 	});
 	return { async dispose() {
 		unsubscribe();
 	} };
 }
-function errMsg$7(err) {
+function errMsg$10(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
@@ -91348,13 +94162,15 @@ var RESET_DEBOUNCE_MS = 5e3;
 */
 async function buildMotionSensor(bctx, existing = null) {
 	const { ctx, accessory, proxy, numericDeviceId, displayName } = bctx;
-	const motionService = existing ?? accessory.addService(import_dist.Service.MotionSensor, hapServiceName([displayName], `Camera ${numericDeviceId}`));
+	const label = hapServiceName([displayName], `Camera ${numericDeviceId}`);
+	const motionService = existing ?? accessory.addService(import_dist.Service.MotionSensor, label);
+	applyServiceLabel(motionService, label);
 	motionService.setCharacteristic(import_dist.Characteristic.MotionDetected, false);
 	try {
 		const detected = await proxy.motion?.isDetected({});
 		if (typeof detected === "boolean") motionService.updateCharacteristic(import_dist.Characteristic.MotionDetected, detected);
 	} catch (err) {
-		ctx.logger.withTags({ deviceId: numericDeviceId }).debug("export-hap: initial motion hydrate failed (non-fatal)", { meta: { error: errMsg$6(err) } });
+		ctx.logger.withTags({ deviceId: numericDeviceId }).debug("export-hap: initial motion hydrate failed (non-fatal)", { meta: { error: errMsg$9(err) } });
 	}
 	let resetTimer = null;
 	const armReset = () => {
@@ -91388,82 +94204,10 @@ async function buildMotionSensor(bctx, existing = null) {
 		}
 	} };
 }
-function errMsg$6(err) {
+function errMsg$9(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
-//#region src/mappers/builders/service-label.ts
-/**
-* The ONE place a secondary service on the camera accessory gets its label.
-*
-* A "secondary service" here is a Switch or Lightbulb published alongside the
-* camera on the same accessory — the privacy switch, each accessory child
-* (siren, floodlight), each PTZ action. iOS Home renders these as their own
-* controls, and the operator has seen them as "Interruttore 1", "Interruttore
-* 2" through three separate rounds of fixes.
-*
-* ## Why `Name` alone cannot rename anything
-*
-* Two facts about hap-nodejs 2.1.7, both measured against the installed copy
-* rather than reasoned about:
-*
-*  1. `accessory.addService(Type, displayName, subtype)` ALREADY writes
-*     `displayName` to `Characteristic.Name` (`Service` constructor). So every
-*     round of this bug — including the one that moved the label onto
-*     `ConfiguredName` — shipped with `Name` correctly set. "iOS had no name
-*     to render" was never true.
-*  2. The mDNS configuration number (`c#`) is a sha1 over
-*     `internalHAPRepresentation(false)`, which OMITS characteristic VALUES.
-*     Changing the string in `Name` therefore does not bump `c#`, a paired
-*     controller gets no signal to re-read `/accessories`, and the name it
-*     cached at first enumeration stands forever.
-*
-* `Name` is also declared `pr` only — paired read, no write, no notify. It is
-* the seed a controller seeds its database from once; it is not a channel.
-*
-* ## Why `ConfiguredName`
-*
-* `ConfiguredName` (`000000E3`) is declared `pr | pw | ev` — the only name
-* characteristic a controller may write and may subscribe to. It is what iOS
-* 16+ reads for a service the user can rename, and adding it CHANGES the
-* accessory structure, so `c#` does bump and the controller re-reads.
-*
-* It was removed once because hap-nodejs logged
-*
-* ```
-* Characteristic not in required or optional characteristic section for
-* service Switch. Adding anyway.
-* ```
-*
-* That line is a WARNING, not a rejection: `Service.getCharacteristic` calls
-* `addCharacteristic` unconditionally and only then emits the warning. The
-* characteristic was always present and always published. hap-nodejs'
-* per-service optional lists simply predate `ConfiguredName` being valid on
-* any service.
-*
-* Registering it with {@link Service.addOptionalCharacteristic} first takes
-* the branch above the warning, so the accessory still builds with ZERO
-* characteristic warnings — which is what `service-naming.spec.ts` asserts.
-*
-* ## Scope
-*
-* Switch- and Lightbulb-shaped services only. `Service.MotionSensor` on a
-* camera accessory is not a separately named tile in iOS Home, so giving it a
-* writable name would be a guess, and this module does not guess.
-*/
-/**
-* Publish `name` as both the immutable `Name` and the controller-visible
-* `ConfiguredName` of `service`.
-*
-* `name` must already be HAP-valid — build it with `service-names.ts`, which
-* cannot return a string hap-nodejs' `checkName` would warn about.
-*/
-function applyServiceLabel(service, name) {
-	service.setCharacteristic(import_dist.Characteristic.Name, name);
-	if (!service.optionalCharacteristics.some((characteristic) => characteristic.UUID === import_dist.Characteristic.ConfiguredName.UUID)) service.addOptionalCharacteristic(import_dist.Characteristic.ConfiguredName);
-	service.setCharacteristic(import_dist.Characteristic.ConfiguredName, name);
-}
-//#endregion
 //#region src/mappers/builders/privacy-switch.ts
 /**
 * Privacy-mask switch builder — turns the camstack `privacy-mask` cap's
@@ -91491,7 +94235,7 @@ async function buildPrivacySwitch(bctx) {
 		const status = await proxy.privacyMask?.getStatus({});
 		if (status && typeof status.enabled === "boolean") service.updateCharacteristic(import_dist.Characteristic.On, status.enabled);
 	} catch (err) {
-		log.debug("export-hap: privacy-mask getStatus hydrate failed (non-fatal)", { meta: { error: errMsg$5(err) } });
+		log.debug("export-hap: privacy-mask getStatus hydrate failed (non-fatal)", { meta: { error: errMsg$8(err) } });
 	}
 	service.getCharacteristic(import_dist.Characteristic.On).onSet(async (value) => {
 		const enabled = value === true;
@@ -91500,7 +94244,7 @@ async function buildPrivacySwitch(bctx) {
 		} catch (err) {
 			log.warn("export-hap: privacy-mask setMask failed", { meta: {
 				enabled,
-				error: errMsg$5(err)
+				error: errMsg$8(err)
 			} });
 		}
 	});
@@ -91518,7 +94262,7 @@ async function buildPrivacySwitch(bctx) {
 		} catch {}
 	} };
 }
-function errMsg$5(err) {
+function errMsg$8(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
@@ -91609,7 +94353,7 @@ async function buildPtz(bctx) {
 			} catch (err) {
 				log.warn("export-hap: ptz.goToPreset failed", { meta: {
 					presetId: preset.id,
-					error: errMsg$4(err)
+					error: errMsg$7(err)
 				} });
 			}
 			armReset(() => service.updateCharacteristic(import_dist.Characteristic.On, false), MOMENTARY_RESET_MS);
@@ -91627,14 +94371,14 @@ async function buildPtz(bctx) {
 					try {
 						await proxy.ptz?.stop({});
 					} catch (err) {
-						log.debug("export-hap: ptz.stop failed (non-fatal)", { meta: { error: errMsg$4(err) } });
+						log.debug("export-hap: ptz.stop failed (non-fatal)", { meta: { error: errMsg$7(err) } });
 					}
 					service.updateCharacteristic(import_dist.Characteristic.On, false);
 				}, options.ptzPulseMs);
 			} catch (err) {
 				log.warn("export-hap: ptz.continuousMove failed", { meta: {
 					dir: dir.label,
-					error: errMsg$4(err)
+					error: errMsg$7(err)
 				} });
 				service.updateCharacteristic(import_dist.Characteristic.On, false);
 			}
@@ -91657,7 +94401,7 @@ async function readPresets(bctx) {
 			name: p.name
 		}));
 	} catch (err) {
-		ctx.logger.withTags({ deviceId: numericDeviceId }).debug("export-hap: ptz.getPresets failed (non-fatal)", { meta: { error: errMsg$4(err) } });
+		ctx.logger.withTags({ deviceId: numericDeviceId }).debug("export-hap: ptz.getPresets failed (non-fatal)", { meta: { error: errMsg$7(err) } });
 		return [];
 	}
 }
@@ -91672,7 +94416,7 @@ async function tryBuildAutotrack(bctx) {
 		const status = await proxy.ptzAutotrack.getStatus({});
 		if (status && typeof status.enabled === "boolean") service.updateCharacteristic(import_dist.Characteristic.On, status.enabled);
 	} catch (err) {
-		log.debug("export-hap: ptzAutotrack.getStatus failed (non-fatal)", { meta: { error: errMsg$4(err) } });
+		log.debug("export-hap: ptzAutotrack.getStatus failed (non-fatal)", { meta: { error: errMsg$7(err) } });
 	}
 	service.getCharacteristic(import_dist.Characteristic.On).onSet(async (value) => {
 		const enabled = value === true;
@@ -91681,13 +94425,13 @@ async function tryBuildAutotrack(bctx) {
 		} catch (err) {
 			log.warn("export-hap: ptzAutotrack.setEnabled failed", { meta: {
 				enabled,
-				error: errMsg$4(err)
+				error: errMsg$7(err)
 			} });
 		}
 	});
 	return { async dispose() {} };
 }
-function errMsg$4(err) {
+function errMsg$7(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
@@ -92718,13 +95462,13 @@ async function buildChildSwitch(bctx, subtype, deviceType) {
 		const switchStatus = await proxy.switch?.getStatus({});
 		if (switchStatus && typeof switchStatus.on === "boolean") service.updateCharacteristic(import_dist.Characteristic.On, switchStatus.on);
 	} catch (err) {
-		log.debug("export-hap: child switch.getStatus failed (non-fatal)", { meta: { error: errMsg$3(err) } });
+		log.debug("export-hap: child switch.getStatus failed (non-fatal)", { meta: { error: errMsg$6(err) } });
 	}
 	if (useLightbulb) try {
 		const status = await proxy.brightness?.getStatus({});
 		if (status && typeof status.percentage === "number") service.updateCharacteristic(import_dist.Characteristic.Brightness, status.percentage);
 	} catch (err) {
-		log.debug("export-hap: child brightness.getStatus failed (non-fatal)", { meta: { error: errMsg$3(err) } });
+		log.debug("export-hap: child brightness.getStatus failed (non-fatal)", { meta: { error: errMsg$6(err) } });
 	}
 	if (hasSwitch) service.getCharacteristic(import_dist.Characteristic.On).onSet(async (value) => {
 		const on = value === true;
@@ -92733,7 +95477,7 @@ async function buildChildSwitch(bctx, subtype, deviceType) {
 		} catch (err) {
 			log.warn("export-hap: child switch.setState failed", { meta: {
 				on,
-				error: errMsg$3(err)
+				error: errMsg$6(err)
 			} });
 		}
 	});
@@ -92745,7 +95489,7 @@ async function buildChildSwitch(bctx, subtype, deviceType) {
 		} catch (err) {
 			log.warn("export-hap: child brightness.setBrightness failed", { meta: {
 				percentage,
-				error: errMsg$3(err)
+				error: errMsg$6(err)
 			} });
 		}
 	});
@@ -92768,7 +95512,7 @@ async function buildChildSwitch(bctx, subtype, deviceType) {
 		} catch {}
 	} };
 }
-function errMsg$3(err) {
+function errMsg$6(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
@@ -92795,7 +95539,7 @@ async function buildChildServicesFor(input) {
 		for (const h of handles) try {
 			await h.dispose();
 		} catch (err) {
-			ctx.logger.withTags({ deviceId: parentNumericId }).debug("export-hap: child service dispose failed (continuing)", { meta: { error: errMsg$2(err) } });
+			ctx.logger.withTags({ deviceId: parentNumericId }).debug("export-hap: child service dispose failed (continuing)", { meta: { error: errMsg$5(err) } });
 		}
 	} };
 }
@@ -92811,7 +95555,7 @@ async function listChildren(ctx, parentNumericId) {
 			features: Array.isArray(c.features) ? c.features.filter((f) => typeof f === "string") : []
 		}));
 	} catch (err) {
-		ctx.logger.withTags({ deviceId: parentNumericId }).debug("export-hap: deviceManager.getChildren failed (non-fatal)", { meta: { error: errMsg$2(err) } });
+		ctx.logger.withTags({ deviceId: parentNumericId }).debug("export-hap: deviceManager.getChildren failed (non-fatal)", { meta: { error: errMsg$5(err) } });
 		return [];
 	}
 }
@@ -92827,10 +95571,76 @@ function asDeviceType(raw) {
 	for (const value of Object.values(DeviceType)) if (value === lower) return value;
 	return DeviceType.Generic;
 }
-function errMsg$2(err) {
+function errMsg$5(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
+//#region src/mappers/kind.ts
+/**
+* Which orchestrator a device gets, which device types the picker offers, and
+* what a device's HomeKit accessory is called on the wire.
+*
+* Separate from `index.ts` (the factory registry) only so the orchestrators can
+* import the uuid convention without importing the registry that imports them.
+*/
+var SUPPORTED_MAPPER_KINDS = ["camera", "generic"];
+/**
+* The device types the Export picker offers, and the answer to the cap's
+* `listSupportedDeviceKinds`.
+*
+* A UI FILTER, nothing more. Whether a device actually exports anything is
+* decided by its capabilities (`rowsForCaps` in the capability table) — the
+* doctrine the HA exporter writes down, and the thing that confined the
+* previous exporter to cameras when it was ignored.
+*
+* Tier A: the types whose HomeKit services exist today and need no
+* feature-dependent shape. `cover`, `climate`, `fan`, `valve`, `humidifier`,
+* `water-heater`, `alarm-panel`, `button` and `media-player` are deliberately
+* absent — each needs a service whose semantics the table cannot yet honour,
+* and offering the tab before the mapping exists is how an operator gets an
+* accessory that pairs and does nothing.
+*/
+var HAP_EXPORTABLE_DEVICE_TYPES = [
+	DeviceType.Camera,
+	DeviceType.Light,
+	DeviceType.Switch,
+	DeviceType.Siren,
+	DeviceType.Sensor,
+	DeviceType.Lock,
+	DeviceType.Presence,
+	DeviceType.Generic
+];
+/**
+* Resolve the orchestrator for a device from its TYPE.
+*
+* `null` means "no Export tab": the picker must not offer a type no
+* orchestrator can build. An UNKNOWN type (the device-manager read failed) maps
+* to `camera` — that is what every entry persisted before this function existed
+* carries, and a transient API failure must never re-shape an exposed camera.
+*/
+function pickMapperKind(deviceType) {
+	if (deviceType === null || deviceType === void 0 || deviceType.length === 0) return "camera";
+	if (deviceType === DeviceType.Camera) return "camera";
+	return HAP_EXPORTABLE_DEVICE_TYPES.find((type) => type === deviceType) === void 0 ? null : "generic";
+}
+/**
+* The deterministic HAP accessory UUID for a device.
+*
+* One function, because three call sites depend on the answer agreeing: the
+* orchestrator that builds the accessory, `unexposeDevice` (which wipes
+* hap-nodejs' pairing blobs by uuid, on a device whose mapper is already gone)
+* and the export sync state that records it.
+*
+* The camera namespace is FROZEN — every camera paired to date derives its MAC
+* from `sha256("camstack:hap:" + uuid)` of this exact string, and changing it
+* would make every paired camera a stranger. Generic devices get their own
+* namespace so a switch and a camera that happen to share a device id are not
+* the same HomeKit accessory.
+*/
+function accessoryUuidFor(kind, deviceId) {
+	return import_dist.uuid.generate(kind === "camera" ? `camstack:camera:${deviceId}` : `camstack:device:${deviceId}`);
+}
+//#endregion
 //#region src/mappers/camera-accessory.ts
 /**
 * Camera accessory orchestrator — given a camstack deviceId, builds one
@@ -92863,9 +95673,9 @@ async function buildCameraAccessory(input) {
 	const capNames = new Set(proxy.binding?.entries.map((e) => e.capName) ?? []);
 	const isDoorbell = capNames.has("doorbell");
 	const category = isDoorbell ? import_dist.Categories.VIDEO_DOORBELL : import_dist.Categories.IP_CAMERA;
-	const accessory = new import_dist.Accessory(displayName, import_dist.uuid.generate(`camstack:camera:${numericId}`));
+	const accessory = new import_dist.Accessory(displayName, accessoryUuidFor("camera", numericId));
 	accessory.category = category;
-	await populateAccessoryInfo(accessory, proxy, displayName);
+	await populateAccessoryInfo(accessory, proxy, displayName, "Camera");
 	const bctx = {
 		ctx,
 		accessory,
@@ -92923,55 +95733,462 @@ async function buildCameraAccessory(input) {
 			for (const h of handles) try {
 				await h.dispose();
 			} catch (err) {
-				log.debug("export-hap: builder dispose failed (continuing)", { meta: { error: errMsg$1(err) } });
+				log.debug("export-hap: builder dispose failed (continuing)", { meta: { error: errMsg$4(err) } });
 			}
 			try {
 				await streams.dispose();
 			} catch (err) {
-				log.debug("export-hap: streams dispose failed", { meta: { error: errMsg$1(err) } });
+				log.debug("export-hap: streams dispose failed", { meta: { error: errMsg$4(err) } });
 			}
 		}
 	};
 }
-async function populateAccessoryInfo(accessory, proxy, displayName) {
-	const info = accessory.getService(import_dist.Service.AccessoryInformation);
-	if (!info) return;
+function errMsg$4(err) {
+	return err instanceof Error ? err.message : String(err);
+}
+//#endregion
+//#region src/mappers/builders/generic/lock.ts
+/**
+* `lock-control` → `Service.LockMechanism`.
+*
+* Not a sensor row: HomeKit models a lock as two characteristics, a CURRENT
+* state the accessory owns and a TARGET state the controller writes, and the
+* cap's five states do not map onto either one alone.
+*
+* ```
+*  cap state    LockCurrentState   LockTargetState
+*  locked       SECURED            SECURED
+*  unlocked     UNSECURED          UNSECURED
+*  locking      UNKNOWN            SECURED      (in flight — do not claim SECURED)
+*  unlocking    UNKNOWN            UNSECURED
+*  jammed       JAMMED             unchanged    (the controller's intent stands)
+* ```
+*
+* Reporting SECURED while the bolt is still moving is the failure worth naming:
+* iOS renders the lock as closed, the operator walks away, and the motor stalls
+* behind them. `UNKNOWN` is the honest answer for an in-flight transition.
+*
+* `open` (the cap's third method, for locks with a latch/buzzer) has no HomeKit
+* counterpart on this service and is deliberately not wired — a Switch that
+* silently buzzes a door open would be a second knob nobody asked for.
+*/
+var SUBTYPE = "lock-control";
+var readLock = reader(LockControlStatusSchema.pick({ state: true }), (status) => {
+	const current = status.state === "locked" ? import_dist.Characteristic.LockCurrentState.SECURED : status.state === "unlocked" ? import_dist.Characteristic.LockCurrentState.UNSECURED : status.state === "jammed" ? import_dist.Characteristic.LockCurrentState.JAMMED : import_dist.Characteristic.LockCurrentState.UNKNOWN;
+	const target = status.state === "locked" || status.state === "locking" ? import_dist.Characteristic.LockTargetState.SECURED : status.state === "unlocked" || status.state === "unlocking" ? import_dist.Characteristic.LockTargetState.UNSECURED : null;
+	return [{
+		characteristic: import_dist.Characteristic.LockCurrentState,
+		value: current
+	}, ...target === null ? [] : [{
+		characteristic: import_dist.Characteristic.LockTargetState,
+		value: target
+	}]];
+});
+async function buildLockMechanism(bctx) {
+	const { ctx, accessory, proxy, numericDeviceId, displayName } = bctx;
+	const log = ctx.logger.withTags({ deviceId: numericDeviceId });
+	const label = hapServiceName([displayName], `Lock ${numericDeviceId}`);
+	const service = accessory.addService(import_dist.Service.LockMechanism, label, SUBTYPE);
+	applyServiceLabel(service, label);
+	const apply = (status, source) => {
+		const updates = readLock(status);
+		if (updates.length === 0) {
+			log.debug("export-hap: lock status did not match the cap schema — no update", { meta: { source } });
+			return;
+		}
+		applyUpdates(service, updates);
+	};
 	try {
-		const device = await proxy.deviceManager?.getDevice({});
-		const metadata = device?.metadata ?? null;
-		info.setCharacteristic(import_dist.Characteristic.Name, device?.name ?? displayName);
-		info.setCharacteristic(import_dist.Characteristic.Manufacturer, stringOr(metadata?.manufacturer, "CamStack"));
-		info.setCharacteristic(import_dist.Characteristic.Model, stringOr(metadata?.model, "Camera"));
-		info.setCharacteristic(import_dist.Characteristic.FirmwareRevision, stringOr(metadata?.firmware, "0.0.0"));
-		info.setCharacteristic(import_dist.Characteristic.SerialNumber, stringOr(metadata?.sn, `camstack-${proxy.deviceId}`));
-	} catch {}
+		const status = await proxy.lockControl?.getStatus({});
+		if (status !== void 0 && status !== null) apply(status, "getStatus");
+	} catch (err) {
+		log.debug("export-hap: lock getStatus hydrate failed (non-fatal)", { meta: { error: errMsg$3(err) } });
+	}
+	service.getCharacteristic(import_dist.Characteristic.LockTargetState).onSet(async (value) => {
+		const secure = value === import_dist.Characteristic.LockTargetState.SECURED;
+		try {
+			if (secure) await proxy.lockControl?.lock({});
+			else await proxy.lockControl?.unlock({});
+		} catch (err) {
+			log.warn("export-hap: lock command failed", { meta: {
+				secure,
+				error: errMsg$3(err)
+			} });
+		}
+	});
+	const unsubscribe = proxy.state.lockControl?.subscribe((value) => {
+		if (value === void 0 || value === null) return;
+		apply(value, "slice");
+	}) ?? null;
+	return { async dispose() {
+		try {
+			unsubscribe?.();
+		} catch {}
+	} };
 }
-function stringOr(value, fallback) {
-	return typeof value === "string" && value.length > 0 ? value : fallback;
+function errMsg$3(err) {
+	return err instanceof Error ? err.message : String(err);
+}
+//#endregion
+//#region src/mappers/builders/generic/sensor-service.ts
+async function buildSensorService(input) {
+	const { bctx, spec, name, subtype } = input;
+	const { ctx, accessory, proxy, numericDeviceId } = bctx;
+	const log = ctx.logger.withTags({ deviceId: numericDeviceId });
+	const label = hapServiceName([name], spec.label);
+	const service = spec.addService(accessory, label, subtype);
+	applyServiceLabel(service, label);
+	const apply = (status, source) => {
+		const updates = spec.read(status);
+		if (updates.length === 0) {
+			log.debug("export-hap: sensor status did not match the cap schema — no update", { meta: {
+				subtype,
+				source
+			} });
+			return;
+		}
+		applyUpdates(service, updates);
+	};
+	try {
+		const status = await spec.getStatus(proxy);
+		if (status !== void 0 && status !== null) apply(status, "getStatus");
+	} catch (err) {
+		log.debug("export-hap: sensor getStatus hydrate failed (non-fatal)", { meta: {
+			subtype,
+			error: errMsg$2(err)
+		} });
+	}
+	const unsubscribe = spec.subscribe(proxy, (value) => {
+		if (value === void 0 || value === null) return;
+		apply(value, "slice");
+	});
+	return { async dispose() {
+		try {
+			unsubscribe?.();
+		} catch {}
+	} };
+}
+function errMsg$2(err) {
+	return err instanceof Error ? err.message : String(err);
+}
+//#endregion
+//#region src/mappers/builders/generic/cap-service-table.ts
+/**
+* The capability→HomeKit-service TABLE for non-camera devices.
+*
+* This is the whole coverage decision for the generic export path, and it is
+* deliberately a table rather than a `switch` on `DeviceType`. The doctrine is
+* the one the Home Assistant exporter already writes down: *coverage is decided
+* by a device's capabilities, not its type — restricting the picker by type is
+* what confined the previous exporter to cameras.* A `DeviceType` here is only
+* ever a UI filter (`HAP_EXPORTABLE_DEVICE_TYPES`) or an icon
+* (`ACCESSORY_CATEGORY_BY_TYPE`); it never decides whether something exports.
+*
+* The shape mirrors `CAP_ENTITY_MAP` in
+* `packages/addon-provider-homeassistant/src/ha-export/entity-catalog.ts` so
+* the two can be unified later — one row per capability, keyed by the cap name
+* exactly as it appears in `proxy.binding.entries[].capName`.
+*
+* ## Reading a status
+*
+* Every row parses the cap's OWN Zod status schema rather than duck-typing the
+* payload, and it `.pick()`s only the fields it reads: a provider that omits a
+* timestamp must not silence a sensor, and a provider that sends the wrong
+* shape must not write a garbage characteristic. A parse that fails yields no
+* updates, and the builder that owns the service logs the drop — silence reads
+* as "the sensor never changed".
+*
+* ## Tier
+*
+* Tier A only: the caps whose HomeKit service exists today and needs no
+* feature-dependent shape (`cover` needs `cover-positionable`, `climate-control`
+* needs the dual-setpoint split, `alarm-panel` must survive a refused `arm`).
+* Those are a separate task; adding a row here must never mean adding a service
+* whose semantics this file cannot fully honour.
+*/
+/** HomeKit's floor for `CurrentAmbientLightLevel`; 0 lux is out of range. */
+var MIN_LUX = 1e-4;
+var SENSOR_SPECS = {
+	contact: {
+		label: "Contact",
+		addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.ContactSensor, name, subtype),
+		getStatus: (proxy) => proxy.contact?.getStatus({}),
+		subscribe: (proxy, onValue) => proxy.state.contact?.subscribe(onValue) ?? null,
+		read: reader(ContactStatusSchema.pick({ entryOpen: true }), (status) => [{
+			characteristic: import_dist.Characteristic.ContactSensorState,
+			value: status.entryOpen ? import_dist.Characteristic.ContactSensorState.CONTACT_NOT_DETECTED : import_dist.Characteristic.ContactSensorState.CONTACT_DETECTED
+		}])
+	},
+	motion: {
+		label: "Motion",
+		addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.MotionSensor, name, subtype),
+		getStatus: (proxy) => proxy.motion?.getStatus({}),
+		subscribe: (proxy, onValue) => proxy.state.motion?.subscribe(onValue) ?? null,
+		read: reader(MotionStatusSchema.pick({ detected: true }), (status) => [{
+			characteristic: import_dist.Characteristic.MotionDetected,
+			value: status.detected
+		}])
+	},
+	presence: {
+		label: "Presence",
+		addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.OccupancySensor, name, subtype),
+		getStatus: (proxy) => proxy.presence?.getStatus({}),
+		subscribe: (proxy, onValue) => proxy.state.presence?.subscribe(onValue) ?? null,
+		read: reader(PresenceStatusSchema.pick({ state: true }), (status) => [{
+			characteristic: import_dist.Characteristic.OccupancyDetected,
+			value: status.state === "home" ? import_dist.Characteristic.OccupancyDetected.OCCUPANCY_DETECTED : import_dist.Characteristic.OccupancyDetected.OCCUPANCY_NOT_DETECTED
+		}])
+	},
+	smoke: {
+		label: "Smoke",
+		addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.SmokeSensor, name, subtype),
+		getStatus: (proxy) => proxy.smoke?.getStatus({}),
+		subscribe: (proxy, onValue) => proxy.state.smoke?.subscribe(onValue) ?? null,
+		read: reader(SmokeStatusSchema.pick({ detected: true }), (status) => [{
+			characteristic: import_dist.Characteristic.SmokeDetected,
+			value: status.detected ? import_dist.Characteristic.SmokeDetected.SMOKE_DETECTED : import_dist.Characteristic.SmokeDetected.SMOKE_NOT_DETECTED
+		}])
+	},
+	"carbon-monoxide": {
+		label: "Carbon monoxide",
+		addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.CarbonMonoxideSensor, name, subtype),
+		getStatus: (proxy) => proxy.carbonMonoxide?.getStatus({}),
+		subscribe: (proxy, onValue) => proxy.state.carbonMonoxide?.subscribe(onValue) ?? null,
+		read: reader(CarbonMonoxideStatusSchema.pick({ detected: true }), (status) => [{
+			characteristic: import_dist.Characteristic.CarbonMonoxideDetected,
+			value: status.detected ? import_dist.Characteristic.CarbonMonoxideDetected.CO_LEVELS_ABNORMAL : import_dist.Characteristic.CarbonMonoxideDetected.CO_LEVELS_NORMAL
+		}])
+	},
+	flood: {
+		label: "Leak",
+		addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.LeakSensor, name, subtype),
+		getStatus: (proxy) => proxy.flood?.getStatus({}),
+		subscribe: (proxy, onValue) => proxy.state.flood?.subscribe(onValue) ?? null,
+		read: reader(FloodStatusSchema.pick({ flooded: true }), (status) => [{
+			characteristic: import_dist.Characteristic.LeakDetected,
+			value: status.flooded ? import_dist.Characteristic.LeakDetected.LEAK_DETECTED : import_dist.Characteristic.LeakDetected.LEAK_NOT_DETECTED
+		}])
+	},
+	"temperature-sensor": {
+		label: "Temperature",
+		addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.TemperatureSensor, name, subtype),
+		getStatus: (proxy) => proxy.temperatureSensor?.getStatus({}),
+		subscribe: (proxy, onValue) => proxy.state.temperatureSensor?.subscribe(onValue) ?? null,
+		read: reader(TemperatureSensorStatusSchema.pick({ celsius: true }), (status) => [{
+			characteristic: import_dist.Characteristic.CurrentTemperature,
+			value: status.celsius
+		}])
+	},
+	"humidity-sensor": {
+		label: "Humidity",
+		addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.HumiditySensor, name, subtype),
+		getStatus: (proxy) => proxy.humiditySensor?.getStatus({}),
+		subscribe: (proxy, onValue) => proxy.state.humiditySensor?.subscribe(onValue) ?? null,
+		read: reader(HumiditySensorStatusSchema.pick({ percent: true }), (status) => [{
+			characteristic: import_dist.Characteristic.CurrentRelativeHumidity,
+			value: status.percent
+		}])
+	},
+	"ambient-light-sensor": {
+		label: "Light level",
+		addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.LightSensor, name, subtype),
+		getStatus: (proxy) => proxy.ambientLightSensor?.getStatus({}),
+		subscribe: (proxy, onValue) => proxy.state.ambientLightSensor?.subscribe(onValue) ?? null,
+		read: reader(AmbientLightSensorStatusSchema.pick({ lux: true }), (status) => [{
+			characteristic: import_dist.Characteristic.CurrentAmbientLightLevel,
+			value: Math.max(MIN_LUX, status.lux)
+		}])
+	}
+};
+/**
+* The `battery` row reads like a sensor but writes three characteristics from
+* one status, and the camera path publishes the SAME service from the same cap.
+* The derivation therefore lives once, in `battery.ts`, and both callers read
+* it from there.
+*/
+var BATTERY_SPEC = {
+	label: "Battery",
+	addService: (accessory, name, subtype) => accessory.addService(import_dist.Service.Battery, name, subtype),
+	getStatus: (proxy) => proxy.battery?.getStatus({}),
+	subscribe: (proxy, onValue) => proxy.state.battery?.subscribe(onValue) ?? null,
+	read: batteryCharacteristicUpdates
+};
+function sensorRow(capName, spec) {
+	return {
+		caps: [capName],
+		label: spec.label,
+		build: ({ bctx, name }) => buildSensorService({
+			bctx,
+			spec,
+			name,
+			subtype: capName
+		})
+	};
+}
+/**
+* THE table. Order matters only for one thing: the first row that matches a
+* device decides the accessory's category when the device's own type does not.
+*/
+var HAP_CAP_SERVICES = [
+	{
+		caps: ["switch", "brightness"],
+		label: "Power",
+		build: ({ bctx, name, deviceType }) => buildChildSwitch({
+			...bctx,
+			displayName: name
+		}, "switch", deviceType)
+	},
+	{
+		caps: ["lock-control"],
+		label: "Lock",
+		build: ({ bctx, name }) => buildLockMechanism({
+			...bctx,
+			displayName: name
+		})
+	},
+	{
+		caps: ["battery"],
+		label: BATTERY_SPEC.label,
+		build: ({ bctx, name }) => buildSensorService({
+			bctx,
+			spec: BATTERY_SPEC,
+			name,
+			subtype: "battery"
+		})
+	},
+	...Object.entries(SENSOR_SPECS).map(([capName, spec]) => sensorRow(capName, spec))
+];
+/**
+* The rows a device's bound capabilities select, in table order.
+*
+* A row matches when ANY of its caps is bound: a lamp with `switch` but no
+* `brightness` is still a Lightbulb-shaped row, and the builder degrades on its
+* own.
+*/
+function rowsForCaps(capNames) {
+	return HAP_CAP_SERVICES.filter((row) => row.caps.some((cap) => capNames.has(cap)));
+}
+/**
+* The HomeKit accessory category per camstack device type — the icon iOS Home
+* draws and nothing else. Absent = `OTHER`, which is a valid accessory that
+* simply gets the generic tile.
+*
+* This is NOT a coverage decision. `HAP_EXPORTABLE_DEVICE_TYPES` (in
+* `mappers/index.ts`) filters the picker; whether a device exports anything is
+* decided by `rowsForCaps`.
+*/
+var ACCESSORY_CATEGORY_BY_TYPE = {
+	[DeviceType.Switch]: import_dist.Categories.SWITCH,
+	[DeviceType.Light]: import_dist.Categories.LIGHTBULB,
+	[DeviceType.Siren]: import_dist.Categories.SWITCH,
+	[DeviceType.Lock]: import_dist.Categories.DOOR_LOCK,
+	[DeviceType.Sensor]: import_dist.Categories.SENSOR,
+	[DeviceType.Presence]: import_dist.Categories.SENSOR
+};
+function accessoryCategoryFor(deviceType) {
+	return ACCESSORY_CATEGORY_BY_TYPE[deviceType] ?? import_dist.Categories.OTHER;
+}
+//#endregion
+//#region src/mappers/generic-accessory.ts
+/**
+* Generic accessory orchestrator — every camstack device that is NOT a camera.
+*
+* Same three steps as the camera orchestrator, and deliberately nothing more:
+*  1. resolve the typed `DeviceProxy`,
+*  2. select rows from the capability→service table with the device's BOUND
+*     capabilities (never its type — see `builders/generic/cap-service-table.ts`),
+*  3. let each row add its service to one `Accessory`.
+*
+* It publishes standalone, like the camera path: one accessory, one mDNS
+* advertisement, one pairing, the shared setup code. This addon is not a
+* bridge — that decision predates this file and is not re-litigated here.
+*
+* ## It REFUSES rather than publishing an empty tile
+*
+* A device whose capabilities select no row throws. The alternative is an
+* accessory carrying nothing but `AccessoryInformation`: it pairs, it appears
+* in the Home app, it does nothing, and the operator has no way to tell that
+* from a broken integration. The Export tab is gated on the same question
+* (`hap-export.addon.ts`), so reaching this throw means the device changed
+* shape between the tab rendering and the toggle landing.
+*/
+async function buildGenericAccessory(input) {
+	const { ctx, deviceId, displayName, options } = input;
+	const numericId = Number.parseInt(deviceId, 10);
+	if (!Number.isFinite(numericId)) throw new Error(`export-hap: cannot map device '${deviceId}' — id is not numeric`);
+	const log = ctx.logger.withTags({ deviceId: numericId });
+	const proxy = await ctx.fetchDevice(numericId);
+	const capNames = new Set(proxy.binding?.entries.map((e) => e.capName) ?? []);
+	const rows = rowsForCaps(capNames);
+	if (rows.length === 0) throw new Error(`export-hap: device ${numericId} carries no capability HomeKit can export (bound: ${[...capNames].toSorted().join(", ") || "none"})`);
+	const deviceType = await resolveDeviceType(proxy);
+	const accessory = new import_dist.Accessory(displayName, accessoryUuidFor("generic", numericId));
+	accessory.category = accessoryCategoryFor(deviceType);
+	await populateAccessoryInfo(accessory, proxy, displayName, "Accessory");
+	const bctx = {
+		ctx,
+		accessory,
+		proxy,
+		numericDeviceId: numericId,
+		displayName,
+		options
+	};
+	const handles = [];
+	for (const row of rows) {
+		const name = rows.length === 1 ? displayName : row.label;
+		handles.push(await row.build({
+			bctx,
+			name,
+			deviceType
+		}));
+	}
+	log.info("export-hap: built generic accessory", { meta: {
+		deviceType,
+		services: rows.map((row) => row.caps[0]).join(",")
+	} });
+	return {
+		accessory,
+		accessories: [accessory],
+		async dispose() {
+			for (const handle of handles) try {
+				await handle.dispose();
+			} catch (err) {
+				log.debug("export-hap: generic builder dispose failed (continuing)", { meta: { error: errMsg$1(err) } });
+			}
+		}
+	};
+}
+/**
+* The device's own type, or `Generic`.
+*
+* Used ONLY where one capability has two HomeKit shapes — a siren's
+* `brightness` is alarm volume, not luminosity — and for the accessory's icon.
+* `Generic` is the safe reading: it is the shape `child-switch.ts` already
+* treats as "a lamp if it dims, a switch otherwise".
+*/
+async function resolveDeviceType(proxy) {
+	try {
+		const device = await proxy.deviceManager?.getDevice({});
+		const raw = typeof device?.type === "string" ? device.type.toLowerCase() : "";
+		return Object.values(DeviceType).find((value) => value === raw) ?? DeviceType.Generic;
+	} catch {
+		return DeviceType.Generic;
+	}
 }
 function errMsg$1(err) {
 	return err instanceof Error ? err.message : String(err);
 }
 //#endregion
 //#region src/mappers/index.ts
-var SUPPORTED_MAPPER_KINDS = ["camera"];
-var REGISTRY = { camera: buildCameraAccessory };
+var REGISTRY = {
+	camera: buildCameraAccessory,
+	generic: buildGenericAccessory
+};
 function getMapperFactory(kind) {
 	const factory = REGISTRY[kind];
 	if (!factory) throw new Error(`export-hap: no mapper registered for kind '${kind}'`);
 	return factory;
 }
-/**
-* Resolve the best-fit mapper kind. With Round 2, the operator just
-* picks a camera and the orchestrator does the rest — the single
-* `camera` kind is returned unconditionally. We keep the function
-* signature for backwards-compat with the addon's existing
-* `exposeDevice` flow and to leave room for future device types (NVR,
-* climate sensor, ...).
-*/
-function pickMapperKind(_capabilities) {
-	return "camera";
-}
 //#endregion
 //#region src/mappers/builders/stream-hwaccel-memo.ts
 /**
@@ -93109,8 +96326,8 @@ function syncStateToJson(map) {
 //#endregion
 //#region src/hap-export.addon.ts
 /**
-* HomeKit (HAP) export addon — publishes a single HAP bridge process
-* that exposes selected camstack devices as HomeKit accessories.
+* HomeKit (HAP) export addon — publishes selected camstack devices as
+* standalone HomeKit accessories.
 *
 * Operator flow:
 *   1. Install + enable the addon (hub-only, group `export-hap`).
@@ -93121,10 +96338,10 @@ function syncStateToJson(map) {
 *   3. The setup URI (`X-HM://…`) is logged AND surfaced via the
 *      `getStatus` cap method so the wizard UI can render the QR.
 *   4. Operator opens iOS Home → + → scan QR → enter pincode.
-*   5. Operator hits "Expose to HomeKit" on individual camstack
-*      devices; the addon attaches a MotionSensor accessory (MVP)
-*      to the bridge and persists the choice via the same
-*      `updateGlobalSettings` path.
+*   5. Operator hits "Expose to HomeKit" on individual camstack devices.
+*      Each exposed device is published as its OWN accessory with its own
+*      mDNS advertisement, sharing one setup code — cameras cannot be
+*      bridged, so nothing is.
 *
 * Exception — the hap-nodejs library's own `HAPStorage` lives under
 * `ctx.dataDir/hap-store/`. That directory is library-internal: the
@@ -93133,23 +96350,20 @@ function syncStateToJson(map) {
 * I/O for addon-owned data") explicitly scopes itself to OUR own data;
 * library-managed blobs are out of scope.
 *
-* Round 2 scope: full camera bridge. `exposeDevice({deviceId})` builds
-* one HomeKit Accessory per camstack camera with auto-detected feature
-* services driven by the device's capability binding:
-*   - `camera-streams` cap → CameraRTPStreamManagement via ffmpeg
-*   - `intercom` cap → Microphone + Speaker (audio bridge wiring is a
-*     Round 3 follow-up — services are declared so iOS Home shows the
-*     talk-back button, but PCM upload is not yet routed)
-*   - `doorbell` cap → DoorbellController + Doorbell service
-*   - `motion-detection` cap → MotionSensor service
-*   - `ptz` cap → preset switches + 4 directional momentary switches
-*   - `ptz-autotrack` cap → stateful "Autotrack" switch
-* Children (siren, floodlight, spotlight, …) become independent
-* accessories under the same Bridge — see `mappers/child-accessory.ts`.
-*
-* What's deferred to Round 3+: cam→browser audio Opus transcode,
-* intercom upload bridge, HomeKit Secure Video, recording, native
-* H.264 stream tap (currently uses RTSP + ffmpeg copy).
+* ## Two accessory shapes, one rule about coverage
+*
+* `exposeDevice({deviceId})` resolves the device's TYPE to a mapper kind
+* (`mappers/kind.ts`) and hands off:
+*
+*  - a camera → `mappers/camera-accessory.ts`: streams, HKSV recording,
+*    doorbell, motion, intercom, PTZ, battery, privacy and every accessory
+*    child, all as services on one accessory;
+*  - anything else → `mappers/generic-accessory.ts`, driven by the
+*    capability→service table in `mappers/builders/generic/`.
+*
+* The type only picks the SHAPE. What a device publishes is decided by the
+* capabilities bound to it — restricting coverage by type is precisely what
+* confined this exporter to cameras for its first three rounds.
 */
 var DEFAULT_DEVICE_SETTINGS = {
 	streamPreference: "auto",
@@ -93192,7 +96406,6 @@ var DEFAULT_CONFIG = {
 	fixedPin: "",
 	interfaceName: "",
 	ptzPulseMs: 400,
-	hksvPreview: false,
 	identity: {
 		username: "",
 		pincode: "",
@@ -93308,7 +96521,7 @@ var ExportHapAddon = class extends BaseAddon {
 						...setup ? { setup } : {}
 					};
 				},
-				listSupportedDeviceKinds: async () => [...SUPPORTED_MAPPER_KINDS],
+				listSupportedDeviceKinds: async () => [...HAP_EXPORTABLE_DEVICE_TYPES],
 				listExposedDevices: async () => Array.from(this.exposed.entries()).map(([deviceId, m]) => {
 					const entry = this.config.exposed.find((e) => e.deviceId === deviceId);
 					return {
@@ -93393,9 +96606,10 @@ var ExportHapAddon = class extends BaseAddon {
 			log.debug("export-hap: device already exposed — refreshing capabilities");
 			await this.detachMapper(deviceId);
 		}
-		const mapperKind = pickMapperKind(capabilities);
-		if (!mapperKind) throw new Error(`export-hap: no mapper for capabilities ${JSON.stringify(capabilities ?? [])}`);
-		const displayName = await this.resolveDisplayName(deviceId);
+		const summary = await this.fetchDeviceSummary(numericId);
+		const mapperKind = pickMapperKind(summary?.type);
+		if (!mapperKind) throw new Error(`export-hap: device ${numericId} has type '${summary?.type ?? "unknown"}', which HomeKit export does not support`);
+		const displayName = summary?.name ?? `Device ${deviceId}`;
 		const previous = this.config.exposed.find((e) => e.deviceId === deviceId);
 		const baseEntry = carryForward({
 			deviceId,
@@ -93425,10 +96639,11 @@ var ExportHapAddon = class extends BaseAddon {
 	async unexposeDevice(deviceId, options = {}) {
 		const numericId = Number.parseInt(deviceId, 10);
 		const log = this.ctx.logger.withTags({ deviceId: numericId });
+		const mapperKind = this.findEntry(numericId)?.mapperKind ?? "camera";
 		await this.detachMapper(deviceId);
 		const next = this.config.exposed.filter((e) => e.deviceId !== deviceId);
 		if (next.length !== this.config.exposed.length) await this.updateGlobalSettings({ exposed: next });
-		if (options.clearPairing !== false) clearPairingFiles(import_dist.uuid.generate(`camstack:camera:${numericId}`), this.ctx.logger);
+		if (options.clearPairing !== false) clearPairingFiles(accessoryUuidFor(mapperKind, numericId), this.ctx.logger);
 		await this.forgetFingerprint(numericId);
 		log.info("export-hap: unexposed device");
 	}
@@ -93478,10 +96693,10 @@ var ExportHapAddon = class extends BaseAddon {
 	/** Pending rebuild timers per deviceId — used to debounce. Cleared
 	*  on detach so stale timers can't republish a removed accessory. */
 	pendingRebuildTimers = /* @__PURE__ */ new Map();
-	/** Deterministic HAP accessory UUID for a device (matches `buildCameraAccessory`
-	*  and `unexposeDevice`). */
+	/** Deterministic HAP accessory UUID for a device — the same one the
+	*  orchestrator built it with (`mappers/kind.ts`). */
 	hapAccessoryUuid(deviceId) {
-		return import_dist.uuid.generate(`camstack:camera:${deviceId}`);
+		return accessoryUuidFor(this.findEntry(deviceId)?.mapperKind ?? "camera", deviceId);
 	}
 	/**
 	* Export fingerprint of a device from its PERSISTED features + type
@@ -93640,31 +96855,79 @@ var ExportHapAddon = class extends BaseAddon {
 			log.warn("export-hap: reconcile rebuild failed", { meta: { error: errMsg(err) } });
 		}
 	}
-	async resolveDisplayName(deviceId) {
-		const numeric = Number.parseInt(deviceId, 10);
-		if (!Number.isFinite(numeric)) return `Device ${deviceId}`;
+	/**
+	* The device's name and type, or `null` when the registry cannot answer.
+	*
+	* `null` is NOT "no such device" — it also covers a transient API failure,
+	* and every caller treats it as "keep doing what was already being done"
+	* rather than re-shaping an exposed accessory on incomplete information.
+	*/
+	async fetchDeviceSummary(deviceId) {
+		if (!Number.isFinite(deviceId)) return null;
+		try {
+			const device = await this.ctx.api.deviceManager?.getDevice.query({ deviceId });
+			if (!device) return null;
+			return {
+				name: device.name,
+				type: device.type
+			};
+		} catch (err) {
+			this.ctx.logger.withTags({ deviceId }).debug("export-hap: deviceManager.getDevice failed", { meta: { error: errMsg(err) } });
+			return null;
+		}
+	}
+	/**
+	* Which accessory shape this device would get, or `null` for "no Export tab".
+	*
+	* Two questions, in this order, because they fail differently:
+	*  1. the TYPE — a type with no orchestrator is refused outright;
+	*  2. for a non-camera, the CAPABILITIES — a device carrying nothing the
+	*     table maps would publish an accessory that pairs and does nothing, and
+	*     the operator cannot tell that from a broken integration.
+	*
+	* A camera skips (2): the camera orchestrator has always published on type
+	* alone, and adding a cap gate here would be a new way for an existing camera
+	* to lose its Export tab. A registry that cannot answer at all also resolves
+	* to `camera`, which is what every persisted entry predating this method
+	* carries.
+	*/
+	async resolveExportKind(deviceId) {
+		const summary = await this.fetchDeviceSummary(deviceId);
+		const kind = pickMapperKind(summary?.type);
+		if (kind === null) return null;
+		if (kind === "camera") return "camera";
 		try {
-			const device = await this.ctx.api.deviceManager?.getDevice.query({ deviceId: numeric });
-			if (device?.name) return device.name;
+			const proxy = await this.ctx.fetchDevice(deviceId);
+			const capNames = new Set(proxy.binding?.entries.map((entry) => entry.capName) ?? []);
+			if (rowsForCaps(capNames).length > 0) return "generic";
+			this.ctx.logger.withTags({ deviceId }).debug("export-hap: no Export tab — no mapped caps", { meta: {
+				type: summary?.type,
+				caps: [...capNames].toSorted().join(",")
+			} });
+			return null;
 		} catch (err) {
-			this.ctx.logger.withTags({ deviceId: numeric }).debug("export-hap: deviceManager.getDevice failed", { meta: { error: errMsg(err) } });
+			this.ctx.logger.withTags({ deviceId }).debug("export-hap: no Export tab — capability read failed", { meta: {
+				type: summary?.type,
+				error: errMsg(err)
+			} });
+			return null;
 		}
-		return `Device ${deviceId}`;
 	}
 	globalSettingsSchema() {
 		return this.schema({ sections: [{
 			id: "export-hap",
 			title: "HomeKit Export",
-			description: "Publishes a HomeKit bridge. After the addon boots, scan the pairing QR (or enter the setup code) from the Exported devices panel in the iOS Home app. After pairing, mark individual devices as \"Expose to HomeKit\" on each device's settings page.",
+			description: "Publishes each exposed device as its own HomeKit accessory, sharing one setup code. Mark a device \"Expose to HomeKit\" on its settings page, then add it in the iOS Home app (+ → Add Accessory) and enter the setup code shown there.",
 			columns: 1,
 			fields: [
 				this.field({
 					type: "text",
 					key: "bridgeName",
-					label: "Bridge name",
-					description: "Name shown in iOS Home and in the Bonjour advertisement.",
+					label: "Installation name",
+					description: "Legacy. Every exposed device is published STANDALONE, under its own camstack device name — HomeKit cameras cannot be bridged, so nothing is bridged. This string only seeds the identity generated on first boot and is not shown in iOS Home.",
 					default: DEFAULT_CONFIG.bridgeName,
-					requiresRestart: true
+					requiresRestart: true,
+					placement: { tab: "advanced" }
 				}),
 				this.field({
 					type: "number",
@@ -93700,21 +96963,13 @@ var ExportHapAddon = class extends BaseAddon {
 					description: "Duration of a single pan/tilt momentary command issued by the PTZ direction switches in Apple Home. Lower = finer steps; higher = bigger sweeps per tap. Defaults to 400ms.",
 					default: DEFAULT_CONFIG.ptzPulseMs,
 					placement: { tab: "advanced" }
-				}),
-				this.field({
-					type: "boolean",
-					key: "hksvPreview",
-					label: "HKSV Developer Preview (experimental)",
-					description: "Advertise Apple's HomeKit Secure Video Developer Preview services — HEVC streaming and the WebRTC stream-management surface — alongside the classic camera profile. Apple published this specification on 2026-06-03 and no shipping controller is known to negotiate it yet. Leave off unless you are testing against a preview build: advertising unknown services to a paired controller can disturb the classic path that works today.",
-					default: DEFAULT_CONFIG.hksvPreview,
-					requiresRestart: true,
-					placement: { tab: "advanced" }
 				})
 			]
 		}] });
 	}
 	async buildDeviceSettingsContribution(deviceId) {
-		if (!await this.isCameraDevice(deviceId)) return null;
+		const kind = await this.resolveExportKind(deviceId);
+		if (kind === null) return null;
 		const entry = this.findEntry(deviceId);
 		const settings = entry?.settings ?? DEFAULT_DEVICE_SETTINGS;
 		const enabled = entry !== null;
@@ -93731,6 +96986,32 @@ var ExportHapAddon = class extends BaseAddon {
 		} catch (err) {
 			this.ctx.logger.withTags({ deviceId }).debug("export-hap: setupURI failed for per-device contribution", { meta: { error: errMsg(err) } });
 		}
+		const cameraFields = kind !== "camera" ? [] : [{
+			type: "select",
+			key: streamPreferenceKey,
+			label: "Source stream (HomeKit)",
+			description: "Which camstack profile slot HomeKit pulls. Auto = the broker picks the slot closest to 1080p at session start.",
+			options: HAP_STREAM_PREFERENCE_OPTIONS,
+			required: true,
+			value: settings.streamPreference,
+			showWhen: {
+				field: enabledKey,
+				equals: true
+			},
+			immediate: true
+		}, {
+			type: "boolean",
+			key: hksvKey,
+			label: "HomeKit recording (Secure Video)",
+			description: "Offer “Stream and Allow Recording” in iOS Home. Requires iCloud+ and a home hub. Keeps a continuous 8s prebuffer for this camera (~0.7% of one CPU core, H.264 sources only).",
+			style: "switch",
+			value: resolveHksvRecording(settings),
+			showWhen: {
+				field: enabledKey,
+				equals: true
+			},
+			immediate: true
+		}];
 		return {
 			tabs: [{
 				id: "export",
@@ -93741,7 +97022,7 @@ var ExportHapAddon = class extends BaseAddon {
 			sections: [{
 				id: "export-hap",
 				title: "HomeKit Export",
-				description: "Mirror this camera into the HomeKit bridge so iOS Home can pair with it.",
+				description: kind === "camera" ? "Publish this camera as its own HomeKit accessory so iOS Home can pair with it." : "Publish this device as its own HomeKit accessory. Its capabilities decide which controls iOS Home shows.",
 				tab: "export",
 				columns: 1,
 				order: 10,
@@ -93757,7 +97038,7 @@ var ExportHapAddon = class extends BaseAddon {
 						type: "qr-code",
 						key: "__hap-pair-qr",
 						label: paired ? "Pairing QR (already paired)" : "Pairing QR",
-						caption: paired ? `Already paired with at least one device. Scan from another iPhone / iPad to add it there too. Setup code: ${this.config.identity.pincode}.` : `Scan with the iOS Camera app to pair this camera in HomeKit. Setup code: ${this.config.identity.pincode}.`,
+						caption: paired ? `Already paired with at least one device. Scan from another iPhone / iPad to add it there too. Setup code: ${this.config.identity.pincode}.` : `Scan with the iOS Camera app to pair this accessory in HomeKit. Setup code: ${this.config.identity.pincode}.`,
 						value: qrValue,
 						size: 192,
 						alt: `HomeKit pairing QR for ${name}`,
@@ -93770,38 +97051,12 @@ var ExportHapAddon = class extends BaseAddon {
 						type: "boolean",
 						key: enabledKey,
 						label: "Expose to HomeKit",
-						description: "Toggle to publish this camera onto the HAP bridge.",
+						description: "Toggle to publish this device as a HomeKit accessory.",
 						style: "switch",
 						value: enabled,
 						immediate: true
 					},
-					{
-						type: "select",
-						key: streamPreferenceKey,
-						label: "Source stream (HomeKit)",
-						description: "Which camstack profile slot HomeKit pulls. Auto = the broker picks the slot closest to 1080p at session start.",
-						options: HAP_STREAM_PREFERENCE_OPTIONS,
-						required: true,
-						value: settings.streamPreference,
-						showWhen: {
-							field: enabledKey,
-							equals: true
-						},
-						immediate: true
-					},
-					{
-						type: "boolean",
-						key: hksvKey,
-						label: "HomeKit recording (Secure Video)",
-						description: "Offer “Stream and Allow Recording” in iOS Home. Requires iCloud+ and a home hub. Keeps a continuous 8s prebuffer for this camera (~0.7% of one CPU core, H.264 sources only).",
-						style: "switch",
-						value: resolveHksvRecording(settings),
-						showWhen: {
-							field: enabledKey,
-							equals: true
-						},
-						immediate: true
-					}
+					...cameraFields
 				]
 			}]
 		};
@@ -93867,23 +97122,6 @@ var ExportHapAddon = class extends BaseAddon {
 		}
 		return { success: true };
 	}
-	/**
-	* Camera-only gate — HomeKit export only knows how to mirror cameras
-	* today. Mirrors the snapshot addon's source-side filter so the
-	* device-details page doesn't render an "Export" tab on lights /
-	* switches / sensors.
-	*/
-	async isCameraDevice(deviceId) {
-		const api = this.ctx.api;
-		if (!api.deviceManager) return true;
-		try {
-			const dev = await api.deviceManager.getDevice.query({ deviceId });
-			if (!dev) return true;
-			return dev.type === DeviceType.Camera;
-		} catch {
-			return true;
-		}
-	}
 	findEntry(deviceId) {
 		const id = String(deviceId);
 		return this.config.exposed.find((e) => e.deviceId === id) ?? null;