@camstack/addon-import-alexa 0.2.195 → 0.2.197

package/dist/addon.js

@@ -48,1194 +48,6 @@ node_fs = __toESM(node_fs, 1);
 let node_child_process = require("node:child_process");
 require("node:zlib");
 let node_url = require("node:url");
-//#region ../types/dist/event-category-78tcBemo.mjs
-var EventCategory = /* @__PURE__ */ function(EventCategory) {
-	EventCategory["SystemBoot"] = "system.boot";
-	EventCategory["SystemAddonsReady"] = "system.addons-ready";
-	EventCategory["SystemRestarting"] = "system.restarting";
-	/**
-	* Fired exactly once after the hub finishes booting following a
-	* restart that was triggered by `RestartCoordinator` (today: framework
-	* live-update). Payload is the marker that was on disk at boot
-	* (`PendingRestartMarkerPayload`); admin UI listens for it to display a
-	* success toast describing what changed.
-	*
-	* Spec: docs/superpowers/specs/2026-05-14-framework-live-update-design.md
-	*/
-	EventCategory["SystemRestartCompleted"] = "system.restart-completed";
-	/**
-	* The hub reissued its own TLS certificate at boot (`ensureTlsCert`).
-	* Emitted only when the material on disk actually changed, so an
-	* operator who trusted the old certificate by hand is told rather than
-	* discovering it as a browser error. Payload `TlsCertChangedPayload`.
-	*
-	* Rule: docs/decisions/adr-0227-*.md
-	*/
-	EventCategory["SystemTlsCertChanged"] = "system.tls-cert-changed";
-	/**
-	* A newer addon or server-root package version was found by the
-	* authoritative registry check. Emitted once when any observed
-	* `latestVersion` changes (or a package/node first appears behind);
-	* the payload carries the full currently-available list. Repeated
-	* polling of the same latests is silent.
-	*/
-	EventCategory["UpdateAvailable"] = "update.available";
-	/**
-	* Readiness transition for a capability provider. Every producer emits
-	* this event on `onInitialize` completion, `onDestroy`, and
-	* `$node.reconnect`; every consumer that needs to gate on a cross-process
-	* cap subscribes via the kernel's readiness module (`awaitReady` /
-	* `onReadyState`) instead of polling. Payload is
-	* `SystemReadyStatePayload` — see event-bus.ts.
-	*/
-	EventCategory["SystemReadyState"] = "system.ready-state";
-	EventCategory["AddonStarted"] = "addon.started";
-	EventCategory["AddonStopped"] = "addon.stopped";
-	EventCategory["AddonRestarted"] = "addon.restarted";
-	EventCategory["AddonUpdated"] = "addon.updated";
-	EventCategory["AddonInstalled"] = "addon.installed";
-	EventCategory["AddonUninstalled"] = "addon.uninstalled";
-	EventCategory["AddonCrashed"] = "addon.crashed";
-	/**
-	* A RUNNER the D6 crash circuit-breaker gave up on — terminal.
-	*
-	* `AddonCrashed` is the routine, self-healing fact ("it crashed; it is being
-	* respawned"); this is the one that never resolves itself. Emitted exactly
-	* once per trip, by `process-service.ts`, carrying the node, the runner, the
-	* addons it hosted and the crash count that tripped the breaker.
-	*
-	* It exists because a runner marked terminally `failed` used to be SILENT:
-	* on 2026-08-18 the `recorder` runner died of three unhandled ffmpeg spawn
-	* errors, the breaker stopped respawning it (correctly), `/health` kept
-	* returning 200, and fleet-wide recording was gone for 3h15 before the
-	* operator's phone told him. The Notification Center's system-event intake
-	* consumes this category and maps it to the `addon-crash-loop` kind.
-	*/
-	EventCategory["AddonRunnerFailed"] = "addon.runner-failed";
-	/**
-	* A runner whose addon refused to start with a typed reason (D877) - parked
-	* in `refused`, never counted by the crash breaker, retried on operator
-	* action. One event per refusal.
-	*/
-	EventCategory["AddonRunnerRefused"] = "addon.runner-refused";
-	/**
-	* A runner settled on a state (D877): `running` (READY), `crashed`, `failed` or
-	* `refused`. In-process telemetry for the boot check (re-evaluate while any
-	* runner is still pending) and the alert centre (close a recovered runner).
-	*/
-	EventCategory["ProcessStateChanged"] = "process.state-changed";
-	/**
-	* The node's one-shot runner boot check (D877): planned runners against the
-	* process service, `degraded` when any is failed, refused or missing. The
-	* alert centre turns it into one critical alert.
-	*/
-	EventCategory["SystemRunnerCheck"] = "system.runner-check";
-	/**
-	* An alert EPISODE opened or closed, emitted by the alert centre for alerts
-	* of severity `critical` or `error` (`AlertEpisodePayload`). The alert
-	* centre sends no notification of its own: Notification Center turns this
-	* into the `alert-critical` / `alert-error` / `alert-critical-resolved`
-	* system-event kinds, and reconciles from the alerts store because a bus
-	* event may be dropped (D8, D11).
-	*/
-	EventCategory["AlertEpisode"] = "alert.episode";
-	EventCategory["AddonError"] = "addon.error";
-	EventCategory["AddonPageReady"] = "addon.page-ready";
-	EventCategory["AddonWidgetReady"] = "addon.widget-ready";
-	/**
-	* Addon failed to load (import or initialize). Emitted by the kernel's
-	* AddonHealthMonitor only AFTER the boot grace period ends — failures
-	* during the first 5 minutes are silently retried without alerting
-	* (slow-starting addons must have time to come up). Post-grace, this
-	* event is emitted exactly once per failure-streak; AlertCenter
-	* consumes it to create a persistent operator-visible alert.
-	*
-	* Payload: `{ packageName, addonId?, error: { message, stack }, retryCount, nextRetryAt }`.
-	*/
-	EventCategory["AddonLoadFailed"] = "addon.load-failed";
-	/**
-	* A keychain value was stored or removed (D787). Carries the ref, its
-	* owner and the new version — NEVER the value. A process holding the ref
-	* drops its cached copy and the owning `BaseAddon` re-resolves its config.
-	* Telemetry (D8): a process that misses it still revalidates by version.
-	*/
-	EventCategory["KeychainChanged"] = "keychain.changed";
-	/**
-	* Addon recovered from a previous failure. Emitted when an addon
-	* transitions from `failed` back to `healthy` (typically via the
-	* monitor's auto-retry loop, or after manual `addons.retryLoad`).
-	* AlertCenter dismisses the corresponding `AddonLoadFailed` alert
-	* on this event.
-	*/
-	EventCategory["AddonLoadRecovered"] = "addon.load-recovered";
-	/**
-	* An addon is RUNNING although its installed package is below what the
-	* running server requires (`camstack.requires.addons` of the server, or the
-	* addon's own `requires.server`). Raised once per streak by the unsupported-
-	* addon tracker, on the hub and on agents; AlertCenter turns it into one
-	* operator alert per node and package. The addon is never held back for it.
-	*
-	* Payload: `{ packageName, addonId, nodeId, installedVersion, requiredMinimum, serverVersion, unmet }`.
-	*/
-	EventCategory["AddonUnsupportedVersion"] = "addon.unsupported-version";
-	/**
-	* The package of an {@link AddonUnsupportedVersion} alert reached a supported
-	* version, or is no longer installed on the node. AlertCenter dismisses the matching alert.
-	*
-	* Payload: `{ packageName, addonId, nodeId }`.
-	*/
-	EventCategory["AddonUnsupportedResolved"] = "addon.unsupported-resolved";
-	/**
-	* Monitor scheduled the next retry for a failed addon. Transient —
-	* surfaced to the UI for live-updating the "next retry in Ns"
-	* countdown on the Addons page row, NOT persisted as an alert.
-	*/
-	EventCategory["AddonRetryScheduled"] = "addon.retry-scheduled";
-	/**
-	* A liveness invariant of this node is false — it has no devices, every
-	* camera is offline, or a camera that was recording has stopped producing
-	* segments. Emitted by the `liveness-monitor` builtin, once per fault (the
-	* `findingId` is stable across ticks), only after its boot grace period.
-	* AlertCenter raises a persistent operator-visible alert.
-	*
-	* It exists because on 2026-08-03 the hub ran four hours with zero devices
-	* and zero recordings while every surface stayed quiet.
-	*
-	* Payload: `{ findingId, severity, title, message, deviceId? }`.
-	*/
-	EventCategory["SystemLivenessFailed"] = "system.liveness-failed";
-	/**
-	* A previously reported liveness fault is true again. AlertCenter dismisses
-	* the matching `SystemLivenessFailed` alert.
-	*
-	* Payload: `{ findingId }`.
-	*/
-	EventCategory["SystemLivenessRecovered"] = "system.liveness-recovered";
-	/**
-	* Monitor is attempting to reload a failed addon NOW. UI uses this
-	* to show a spinner during the retry attempt. Same transient nature
-	* as AddonRetryScheduled.
-	*/
-	EventCategory["AddonRetryAttempting"] = "addon.retry-attempting";
-	EventCategory["DeviceRegistered"] = "device.registered";
-	EventCategory["DeviceUnregistered"] = "device.unregistered";
-	EventCategory["DeviceEnabled"] = "device.enabled";
-	EventCategory["DeviceDisabled"] = "device.disabled";
-	EventCategory["DeviceSettingsUpdated"] = "device.settings-updated";
-	/**
-	* Emitted when the set of native capability providers bound to a device
-	* changes — e.g. an addon registers a new native cap via
-	* `DeviceContext.registerNativeCap`, or all native bindings for a device
-	* are cleared on removal. Hub consumers re-resolve device-proxy routes
-	* when this fires.
-	*/
-	EventCategory["DeviceBindingsChanged"] = "device.bindings-changed";
-	/**
-	* Emitted when the operator-organisational meta surface changes
-	* (`name` / `location` / `disabled`). Payload: `{deviceId, field,
-	* value}`. Live consumers (UI device list, alert center) react
-	* without polling. Distinct from `DeviceSettingsUpdated` which
-	* fires on hardware-config changes (host/port/credentials/etc).
-	*/
-	EventCategory["DeviceMetaChanged"] = "device.meta-changed";
-	/**
-	* Emitted by `BaseDevice.updateSourceInfo()` after a successful patch
-	* to the device's upstream-system identity / rendering envelope. The
-	* full new SourceInfo travels in the payload so cross-process listeners
-	* (UI, export adapters) don't need to re-read the meta blob.
-	*
-	* Payload: `{deviceId, sourceInfo}`.
-	*
-	* Distinct from `DeviceMetaChanged` which covers the operator-edited
-	* surface (`name` / `location` / `disabled`). The two share the
-	* persistence layer (both ride on `device-manager.setMetadata` for
-	* SourceInfo, or `setName`/`setLocation`/`setDisabled` for the meta
-	* fields) but consumers care about different subsets.
-	*/
-	EventCategory["DeviceSourceInfoChanged"] = "device.source-info-changed";
-	/**
-	* Emitted by DeviceStreamWiringService after a successful
-	* `stream-broker.registerDeviceStreams` call. Payload includes
-	* deviceId — consumers look up the full registered device info via
-	* `brokerManager.getRegisteredDevice(deviceId)`.
-	*
-	* Replaces the legacy `StreamRouterService.onDeviceRegistered` callback.
-	*/
-	EventCategory["DeviceStreamsRegistered"] = "device.streams-registered";
-	/**
-	* Device-level "fully provisioned" signal — the EXPORT trigger. Emitted once
-	* a device's persisted export-relevant shape (its `DeviceFeature` set) is
-	* established or changes, carrying `{deviceId, fingerprint, generation}`.
-	* Export adapters (Alexa / HAP) react to THIS instead of the chatty per-cap
-	* `DeviceBindingsChanged`, turning a boot's incomplete→complete trickle into
-	* one clean delta. `fingerprint` is `canonicalDeviceFingerprint(shape)`.
-	*
-	* Spec: docs/superpowers/specs/2026-06-01-alexa-hap-export-reconciler-design.md
-	*/
-	EventCategory["DeviceProvisioned"] = "device.provisioned";
-	/**
-	* Fires once when a device's initial feature-probe completes successfully
-	* (lastProbedAt 0→>0); exported shape is now stable. Telemetry (may be
-	* dropped) — consumers MUST also gate on the device record's `probed` flag.
-	*/
-	EventCategory["DeviceReady"] = "device.ready";
-	EventCategory["IntegrationEnabled"] = "integration.enabled";
-	EventCategory["IntegrationDisabled"] = "integration.disabled";
-	EventCategory["IntegrationDeleted"] = "integration.deleted";
-	/** Emitted when a broker connection's status flips (connected /
-	*  disconnected / error). Carries `{ brokerId, status, error? }`. */
-	EventCategory["BrokerStatusChanged"] = "broker.status-changed";
-	/** Emitted for every subscription-matched message routed by a
-	*  broker provider. Carries `{ brokerId, subscriptionId, key, payload }`.
-	*  Consumers filter by `brokerId` + `subscriptionId` in the handler. */
-	EventCategory["BrokerMessage"] = "broker.message";
-	EventCategory["ProviderStarted"] = "provider.started";
-	EventCategory["ProviderStopped"] = "provider.stopped";
-	EventCategory["ProcessCrashed"] = "process.crashed";
-	EventCategory["ProcessRestartScheduled"] = "process.restart_scheduled";
-	EventCategory["ProcessRestarted"] = "process.restarted";
-	/**
-	* The SET of storage locations changed — one was created, edited, enabled,
-	* disabled or deleted through the location instances or the forced-delete action.
-	*
-	* Telemetry, not a transaction (D8/D11): every consumer that re-resolves on
-	* it must also converge on its own periodic path, because a dropped event
-	* must not leave a node writing to yesterday's disk set forever. It exists
-	* because there was NO signal at all — an operator who added a second
-	* recordings disk in the admin UI got nothing, and the recorder kept its
-	* resolved locations until something else happened to re-resolve them
-	* (D387). Payload `StorageLocationsChangedPayload`.
-	*/
-	EventCategory["StorageLocationsChanged"] = "storage.locations-changed";
-	EventCategory["RecordingStarted"] = "recording.started";
-	EventCategory["RecordingStopped"] = "recording.stopped";
-	EventCategory["RecordingError"] = "recording.error";
-	EventCategory["RecordingHealthDegraded"] = "recording.health.degraded";
-	/** Recording enabled but no segment finalized for the NC stall window. */
-	EventCategory["RecordingHealthStalled"] = "recording.health.stalled";
-	/** Recovery from {@link RecordingHealthStalled}. */
-	EventCategory["RecordingHealthOk"] = "recording.health.ok";
-	EventCategory["RecordingStorageCritical"] = "recording.storage.critical";
-	/** Free space on a storage location crossed the warn bar. */
-	EventCategory["StorageLocationLow"] = "storage.location.low";
-	/** Free space at/under the critical bar, or capacity probe failed (`null`). */
-	EventCategory["StorageLocationCritical"] = "storage.location.critical";
-	/** Recovery from low/critical on a storage location. */
-	EventCategory["StorageLocationOk"] = "storage.location.ok";
-	EventCategory["RecordingSegmentWritten"] = "recording.segment.written";
-	EventCategory["RecordingPolicyFallback"] = "recording.policy.fallback";
-	EventCategory["RecordingRetentionCompleted"] = "recording.retention.completed";
-	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
-	*  progress bar the client reconciles via `recordingExport.getExport`. */
-	EventCategory["RecordingExportProgress"] = "recording.export.progress";
-	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
-	EventCategory["RecordingExportFailed"] = "recording.export.failed";
-	EventCategory["DetectionEvent"] = "detection.event";
-	EventCategory["SessionTrackNew"] = "session.track.new";
-	EventCategory["SessionTrackExpired"] = "session.track.expired";
-	EventCategory["BenchmarkProgress"] = "benchmark.progress";
-	EventCategory["PlatformProbePhase"] = "platform-probe.phase";
-	EventCategory["PipelineProgress"] = "pipeline.progress";
-	/** Per-frame execution trace emitted by the pipeline executor for live observability. */
-	EventCategory["PipelineTrace"] = "pipeline.trace";
-	/**
-	* Raw inference output emitted by `addon-pipeline-runner` after running the
-	* detection pipeline on a frame. Carries the `FrameResult` (with
-	* `detections[]`, `width`/`height`, timing debug) — never the frame
-	* buffer itself. Hub-side consumers (analysis pipeline, class filters,
-	* notifications) subscribe to this and re-emit `detection.result` after
-	* post-processing.
-	*/
-	EventCategory["PipelineInferenceResult"] = "pipeline.inference-result";
-	/**
-	* Camera lifecycle event emitted by `addon-pipeline-orchestrator` when it
-	* assigns or unassigns a camera to/from an agent. Carries no frame data;
-	* pure observability for UI dashboards and metrics consumers.
-	*/
-	EventCategory["PipelineCameraAssigned"] = "pipeline.camera-assigned";
-	EventCategory["PipelineCameraUnassigned"] = "pipeline.camera-unassigned";
-	/**
-	* A node the orchestrator would otherwise place cameras on has NO usable
-	* inference device: the operator enabled one or more accelerators there and
-	* the live probe reports every one of them unavailable. Emitted once per
-	* TRANSITION into that state (never per dispatch), and the node is dropped
-	* from the placement candidate set for as long as it holds.
-	*
-	* This exists because the state was previously invisible: agent-a
-	* absorbed 283k inference errors in a day while still being handed cameras,
-	* and nothing in the system said so.
-	*
-	* A node with no accelerators configured at all is NOT this — its devices
-	* are `disabled`, not `unavailable`, and the runner's default CPU pool
-	* serves it exactly as before.
-	*/
-	EventCategory["PipelineNodeInferenceUnavailable"] = "pipeline.node-inference-unavailable";
-	/**
-	* A camera has an OPEN detection session and has produced no detection at
-	* all for longer than the blind threshold — the camera is being decoded and
-	* inferred and is returning nothing. Emitted once per transition into blind,
-	* per camera.
-	*
-	* The failure it reports: a 1h43 detection blackout on the entrance camera
-	* that nobody noticed, because "a camera that detects nothing" and "a quiet
-	* camera" produce byte-identical silence.
-	*/
-	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
-	/**
-	* A camera's motion source has fired constantly with no subject for an hour
-	* (motion duty or session count over the bar, zero detections) — it is not
-	* blind, its motion zones or sensitivity want tuning (D907). Paired with
-	* {@link PipelineMotionCalm}.
-	*/
-	EventCategory["PipelineMotionNoisy"] = "pipeline.motion-noisy";
-	/** The recovery edge of {@link PipelineMotionNoisy}: the motion fell back, or a detection arrived. */
-	EventCategory["PipelineMotionCalm"] = "pipeline.motion-calm";
-	/**
-	* A camera's package LLM confirm has failed closed three times in a row
-	* (D931, 2026-10-26). One edge per camera until
-	* {@link PipelinePackageLlmAnswered}.
-	*/
-	EventCategory["PipelinePackageLlmSilent"] = "pipeline.package-llm-silent";
-	/** The recovery edge of {@link PipelinePackageLlmSilent}: a confirm returned yes or no. */
-	EventCategory["PipelinePackageLlmAnswered"] = "pipeline.package-llm-answered";
-	/**
-	* Per-camera pipeline config was mutated by the orchestrator
-	* (a settings change via `setAgentInferenceDevices` /
-	* `setCameraStepToggle` / `setCameraStepSettings`). Orchestrator
-	* subscribes to its own emission to hot-reload the assigned runner
-	* via `attachCamera` so the next frame executes against the new
-	* engine/steps without waiting for a rebalance or the next
-	* `DeviceStreamsRegistered` cycle.
-	*/
-	EventCategory["PipelineCameraUpdated"] = "pipeline.camera-updated";
-	/**
-	* The cluster camera-source OWNER changed (`clusterRoles.ingestNode`).
-	* Emitted by addon-pipeline-orchestrator whenever it (re)derives node
-	* capabilities — at boot, on agent online/offline, and on an ingest-node
-	* flip. Carries the resolved `ownerNodeId`. The stream-broker consumes it to
-	* keep its ingest-owner-gate decision current WITHOUT a per-`ensureBroker`
-	* cross-process `getIngestOwner` query (push the authority's decision instead
-	* of polling it on the hot path). Idempotent state — re-emitted on every
-	* topology change, so a dropped event self-heals on the next one (plus the
-	* broker's long backstop reconcile query).
-	*/
-	EventCategory["PipelineIngestOwnerChanged"] = "pipeline.ingest-owner-changed";
-	/**
-	* Periodic snapshot of per-node pipeline-runner load
-	* (`RunnerLocalLoad`). Emitted ~1Hz by every runner so UI dashboards
-	* subscribe instead of polling `pipelineRunner.getLocalLoad`.
-	* `nodeId` carried in the payload + on `event.source.nodeId`.
-	*/
-	EventCategory["PipelineRunnerLoadSnapshot"] = "pipeline.runner-load-snapshot";
-	/**
-	* Periodic snapshot of per-camera pipeline metrics (`CameraMetrics`
-	* + `deviceId` + `nodeId`). Emitted ~1Hz by every runner for each
-	* attached camera. UI subscribes to drive overlay phase / fps /
-	* inference time without polling `getCameraMetrics`.
-	*/
-	EventCategory["PipelineCameraMetricsSnapshot"] = "pipeline.camera-metrics-snapshot";
-	/**
-	* Periodic snapshot of stream-broker per-broker statistics (input
-	* fps, decoded fps, bitrate, codec). Emitted ~1Hz by every
-	* stream-broker process for each active broker so the UI can drive
-	* the Stream / Cluster dashboards without polling
-	* `streamBroker.listAllProfileSlots` and friends.
-	*/
-	EventCategory["StreamBrokerMetricsSnapshot"] = "stream-broker.metrics-snapshot";
-	/**
-	* Cap event fired by `stream-broker` when a profile slot enters
-	* "demanded" state — a cam stream has been assigned and at least one
-	* consumer (RTSP restream, decoded subscriber, WebRTC session, …) is
-	* present. Camera-provider addons (Reolink Baichuan push, …)
-	* subscribe to this category to start their underlying transport
-	* lazily. Payload: `{ deviceId, camStreamId, profile }`.
-	*/
-	EventCategory["StreamBrokerOnCamStreamDemand"] = "stream-broker.onCamStreamDemand";
-	/**
-	* Cap event fired by `stream-broker` when the last consumer leaves a
-	* previously-demanded cam stream. Providers tear down their
-	* underlying transport on receipt. Payload: `{ deviceId, camStreamId }`.
-	*/
-	EventCategory["StreamBrokerOnCamStreamIdle"] = "stream-broker.onCamStreamIdle";
-	/**
-	* Cap event fired by `stream-broker` when a broker fails to dial a
-	* managed-loopback source (today: `pull-rfc4571`) and the publisher
-	* needs to refresh the cached URL. The lib's TCP server idle-tears-down
-	* on its own schedule, so a re-publish with a fresh `host:port` is the
-	* only way to keep the broker dialable. Camera providers (Reolink
-	* Baichuan native, …) subscribe and respond by re-running their publish
-	* pipeline.
-	* Payload: `{ deviceId, camStreamId, brokerId }`.
-	*/
-	EventCategory["StreamBrokerOnRequestStreamSourceRefresh"] = "stream-broker.onRequestStreamSourceRefresh";
-	/**
-	* A camera provider changed a device's stream parameters (codec /
-	* resolution / bitrate / a stream added or removed). A LOW-LATENCY NUDGE
-	* for the stream-broker's catalog reconcile: it carries NO authoritative
-	* data — the broker re-PULLS that device's `stream-catalog` cap on receipt
-	* (the 30s reconcile poll is the backstop if this nudge is dropped). Emitted
-	* by providers from `stream-params.setProfile`. Payload: `{ deviceId }`.
-	*/
-	EventCategory["StreamParamsChanged"] = "stream-params.changed";
-	/**
-	* Generic per-device runtime-state change. Fired by `device-manager`
-	* whenever a persisted slice in any cap's `runtimeState` shape
-	* mutates. Payload: `{deviceId, capName, slice}`. Subscribers are
-	* the `deviceState` cap router (cross-process listeners) and the
-	* deviceProxy reactive bindings (`device.state.<capName>.value`).
-	* Cap-specific events (`battery.onStatusChanged`, …) still fire
-	* — they're authoritative for callers that want a typed payload
-	* without filtering on `capName`.
-	*/
-	EventCategory["DeviceStateChanged"] = "device.state-changed";
-	/**
-	* The NATIVE shadow of a cap a composition has claimed fields of moved
-	* (D663). Payload: `{ deviceId, capName, native }` — what the provider
-	* wrote, BEFORE the owned fields are overlaid. Owner-only (D224): it is for
-	* the composer's native self-reads, and the public event routers refuse it
-	* (`isOwnerOnlyEventCategory`) so no consumer surface ever shows a second
-	* truth beside the merged `DeviceStateChanged.slice`. Emitted only under a
-	* `replace` claim, one per native write of that cap.
-	*/
-	EventCategory["DeviceNativeShadowChanged"] = "device.native-shadow-changed";
-	/**
-	* Frame occupancy for a camera CHANGED — a tracked object was gained or
-	* lost. Carries `{ deviceId, totalObjects, byClass, zones }`.
-	*
-	* Emitted only on a change, so a steady scene is silent. It exists so a
-	* client can stop polling `zoneAnalytics.getCurrentSnapshot`: that was the
-	* one live badge with no push signal at all, and it cost a request every
-	* four seconds per visible camera.
-	*
-	* Like every event it is telemetry and may be dropped ([D8]) — a consumer
-	* keeps a slow reconcile rather than trusting it alone.
-	*/
-	EventCategory["ZoneAnalyticsOccupancyChanged"] = "zone-analytics.occupancy-changed";
-	/**
-	* Cap event fired by every device that registers the `battery`
-	* capability. Mirrors the cap definition's `onStatusChanged`. Carries
-	* `{ deviceId, status: BatteryStatus }`. Subscribers (alert center,
-	* snapshot wrapper, UI) react to charge/sleep transitions without
-	* polling `batteryCapability.getStatus`.
-	*/
-	EventCategory["BatteryOnStatusChanged"] = "battery.onStatusChanged";
-	/**
-	* Cap event fired by every device that registers the `network-link`
-	* capability. Mirrors the cap definition's `onStatusChanged`. Carries
-	* `{ deviceId, status: NetworkLinkStatus }` — a link switch or a signal
-	* reading that moved.
-	*/
-	EventCategory["NetworkLinkOnStatusChanged"] = "network-link.onStatusChanged";
-	/**
-	* Emitted by the battery cap provider WHEN `wakeForStream` enters the
-	* "wake in progress" window — between the Baichuan wake-up issue and
-	* the camera's first dialed-back RTP packet. The stream-broker
-	* manager subscribes to flip the per-broker placeholder reason to
-	* `'waking'` so viewers see a labelled "WAKING UP" tile instead of
-	* the generic `'reconnecting'` frame. Carries `{ deviceId }`. The
-	* complementary "wake complete" signal is the existing
-	* `BatteryOnStatusChanged { sleeping: false }` event.
-	*/
-	EventCategory["BatteryOnWakeStarted"] = "battery.onWakeStarted";
-	/**
-	* Cap event fired by every device that registers the `doorbell`
-	* capability. Mirrors `doorbellCapability.events.onPressed`. Carries
-	* `{ deviceId, timestamp }`. Operators consuming the UI subscribe
-	* here to render transient ring toasts and a "Recent presses" row
-	* on the device detail page.
-	*/
-	EventCategory["DoorbellOnPressed"] = "doorbell.onPressed";
-	/** Mirrors `runningStateCapability.events.onStarted`. */
-	EventCategory["RunningStarted"] = "running.started";
-	/** Mirrors `runningStateCapability.events.onFinished`. */
-	EventCategory["RunningFinished"] = "running.finished";
-	/** Mirrors `deviceRunsCapability.events.onRunOpened` - a durable run record opened. */
-	EventCategory["DeviceRunOpened"] = "device-run.opened";
-	/** Mirrors `deviceRunsCapability.events.onRunClosed` - a durable run record closed. */
-	EventCategory["DeviceRunClosed"] = "device-run.closed";
-	/**
-	* Cap event fired by every device that registers the `event-emitter`
-	* capability. Mirrors `eventEmitterCapability.events.onEvent`. Carries
-	* `{ deviceId, eventType, data, timestamp, seq }` — the device's EXACT
-	* declared event verbatim (NO normalization). Subscribers (UI event
-	* stream, advanced-notifier rules) react to fired events without
-	* holding a cap reference.
-	*/
-	EventCategory["EventEmitted"] = "event-emitter.event";
-	/**
-	* Periodic snapshot of the per-node detection-pipeline engine
-	* registry (loaded engines, models resident, in-use cameras, idle
-	* TTL). Emitted ~0.2Hz (every 5 s) by every detection-pipeline
-	* process. The Engines tab subscribes to drive its inventory view
-	* without polling `pipelineExecutor.listLoadedEngines`.
-	*/
-	EventCategory["PipelineEngineMetricsSnapshot"] = "pipeline.engine-metrics-snapshot";
-	/**
-	* Per-node detection-engine runtime-provisioning transition. Emitted by
-	* the detection-pipeline provider on every state change of its lazy
-	* engine-provisioning machine (idle → installing → verifying → ready,
-	* or → failed with a `nextRetryAt`). Payload is the
-	* `EngineProvisioningState` snapshot; `event.source.nodeId` carries the
-	* node. The Pipeline page subscribes to drive a live "installing
-	* OpenVINO… / ready" indicator per node without polling
-	* `pipelineExecutor.getEngineProvisioning`. Telemetry-grade (D8): the UI
-	* also reads the cap snapshot on mount / reconnect. Phase 2.
-	*/
-	EventCategory["PipelineEngineProvisioning"] = "pipeline.engine-provisioning";
-	/**
-	* Cluster topology snapshot. Carries the same payload returned by
-	* `nodes.topology` (every reachable node + addons + processes).
-	* Emitted by the hub on any agent / addon lifecycle change
-	* (debounced) plus a periodic safety net. Replaces UI polling on
-	* `nodes.topology` — admin-ui dashboards subscribe to drive the
-	* cluster view directly from the event payload.
-	*/
-	EventCategory["ClusterTopologySnapshot"] = "cluster.topology-snapshot";
-	/**
-	* Periodic per-node system metrics snapshot (CPU / memory / GPU /
-	* disk / network). Emitted ~0.2 Hz by the metrics-provider addon
-	* for each node. Drives the dashboard SystemStatus / ProcessResources
-	* widgets without polling `metricsProvider.getCurrent`.
-	*/
-	EventCategory["MetricsNodeResourcesSnapshot"] = "metrics.node-resources-snapshot";
-	/**
-	* Periodic per-node process-tree snapshot (camstack-related pids
-	* with root / managed / system classification). Emitted ~0.2 Hz by
-	* the metrics-provider addon. Drives the Cluster → Processes tab
-	* without polling `metricsProvider.listNodeProcesses`.
-	*/
-	EventCategory["MetricsNodeProcessesSnapshot"] = "metrics.node-processes-snapshot";
-	/**
-	* Capability binding change event emitted by `addon-pipeline-orchestrator`
-	* when a user changes which addon implements a cap on a node. Subscribed
-	* by every kernel process to update its local `preferredProviderRegistry`
-	* so future capability lookups respect the new binding.
-	*/
-	/**
-	* A capability binding was changed for a node — addon X now provides
-	* capability `cap` on node `nodeId`. Lives under the generic
-	* `capability.*` namespace because capability bindings are a kernel-
-	* level concept used by many addons, not strictly pipeline-scoped.
-	*/
-	EventCategory["CapabilityBindingChanged"] = "capability.binding-changed";
-	EventCategory["ModelDownloadProgress"] = "model.download.progress";
-	EventCategory["AgentRegistered"] = "agent.registered";
-	EventCategory["AgentUnregistered"] = "agent.unregistered";
-	EventCategory["AgentOnline"] = "agent.online";
-	EventCategory["AgentOffline"] = "agent.offline";
-	/** Forked worker process (e.g. hub/pipeline) connected to the broker. */
-	EventCategory["WorkerOnline"] = "worker.online";
-	/** Forked worker process disconnected from the broker. */
-	EventCategory["WorkerOffline"] = "worker.offline";
-	EventCategory["AgentTaskDispatched"] = "agent.task.dispatched";
-	EventCategory["AgentTaskAssigned"] = "agent.task.assigned";
-	EventCategory["AgentTrpcConnected"] = "agent.trpc.connected";
-	EventCategory["AgentWsConnected"] = "agent.ws.connected";
-	EventCategory["AgentWsDisconnected"] = "agent.ws.disconnected";
-	EventCategory["AgentBackupActivated"] = "agent.backup.activated";
-	EventCategory["OrchestrationSettingsUpdated"] = "orchestration.settings-updated";
-	EventCategory["MotionAnalysis"] = "detection.motion-analysis";
-	/** All raw motion zones from CCL before minArea filter — for UI debug overlay. */
-	EventCategory["MotionZonesRaw"] = "detection.motion-zones-raw";
-	/**
-	* Per-camera motion phase transition (`watching ↔ active`) emitted
-	* by the runner. Mirrors the `motion.onMotionChanged` cap event
-	* surface — payload `MotionOnMotionChangedPayload` carries
-	* `{deviceId, detected, timestamp, source, regions?}`. Subscribers
-	* include addons that need to react to motion state without
-	* polling the runtime-state mirror.
-	*/
-	EventCategory["MotionOnMotionChanged"] = "motion.on-motion-changed";
-	EventCategory["DetectionResult"] = "detection.result";
-	EventCategory["DetectionRaw"] = "detection.raw";
-	EventCategory["DetectionCameraNative"] = "detection.camera-native";
-	/**
-	* Canonical per-chunk live audio pipeline output. Payload is
-	* `PipelineAudioInferenceResultPayload` carrying a full `AudioResult`
-	* (level + detections + debug). Lives on the pipeline.* namespace
-	* alongside `pipeline.inference-result` (video) for symmetry.
-	*/
-	EventCategory["PipelineAudioInferenceResult"] = "pipeline.audio-inference-result";
-	EventCategory["DetectionPhaseTransition"] = "detection.phase-transition";
-	/**
-	* A camera provider's RAW onboard motion push (D673): the `MotionOnMotionChanged`
-	* data shape without `triggeredBy`, built by `providerMotionEvent`. Its one
-	* consumer is the orchestrator's camera-sensors bridge, which re-emits the
-	* camera's EFFECTIVE onboard motion as `MotionOnMotionChanged` (a pass-through
-	* for a camera with no attached sensor). Providers must not emit
-	* `MotionOnMotionChanged` themselves; `scripts/check-onboard-motion-emitters.ts`
-	* keeps it so (camera-grid is a named, deferred exception).
-	*/
-	EventCategory["ProviderMotion"] = "provider.motion";
-	EventCategory["ProviderDetection"] = "provider.detection";
-	EventCategory["EnrichmentEmbeddingStored"] = "enrichment.embedding.stored";
-	EventCategory["EnrichmentSceneStateChanged"] = "enrichment.scene.state-changed";
-	EventCategory["EnrichmentActivitySummary"] = "enrichment.activity.summary";
-	/**
-	* Unified track-lifecycle event: ONE category carrying `phase:
-	* 'start' | 'update' | 'end'` with a rich, typed
-	* `PipelineAnalyticsTrackLifecyclePayload`. Supersedes the thin
-	* `PipelineAnalyticsTrackStarted` / `PipelineAnalyticsTrackEnded`
-	* pair — a consumer subscribes once and branches on `phase`.
-	*/
-	EventCategory["PipelineAnalyticsTrackLifecycle"] = "pipeline-analytics.track-lifecycle";
-	/**
-	* @deprecated Superseded by {@link PipelineAnalyticsTrackLifecycle}
-	* (`phase:'start'`). Kept as a soft alias — no known subscribers.
-	*/
-	EventCategory["PipelineAnalyticsTrackStarted"] = "pipeline-analytics.track-started";
-	/**
-	* @deprecated Superseded by {@link PipelineAnalyticsTrackLifecycle}
-	* (`phase:'end'`). Kept as a soft alias — no known subscribers.
-	*/
-	EventCategory["PipelineAnalyticsTrackEnded"] = "pipeline-analytics.track-ended";
-	EventCategory["PipelineAnalyticsDetectionEvent"] = "pipeline-analytics.detection-event";
-	EventCategory["PipelineAnalyticsFrameTracked"] = "pipeline-analytics.frame-tracked";
-	/**
-	* Fired by `addon-post-analysis` when a parked (stationary) object appears
-	* (a track was promoted to a stationary-registry entry) or departs (the
-	* object moved / was removed). Telemetry (D8): lossy, drives a UI refresh of
-	* the dedicated "Stationary" section — never the live event feed. Payload:
-	* `{ deviceId, entryId, className, phase:'appeared'|'departed', timestamp, observedAt, zones }`.
-	*/
-	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
-	/**
-	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
-	* a package zone — a newly-appeared stationary object of a package class
-	* that cleared the class / zone / dwell / size gates. Payload:
-	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
-	* entryId, className, zoneIds, keyFrameMediaId?, bbox, timestamp }`.
-	* Telemetry (D8): the durable record is the `package-events` store row;
-	* this bus topic drives notifier rules + live UI. See
-	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
-	*/
-	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
-	/**
-	* Fired by `addon-post-analysis` when a previously-delivered package
-	* leaves its zone (the stationary entry departed — moved or swept).
-	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
-	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
-	* Telemetry (D8). See package-zones-design §5.2.
-	*/
-	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
-	/**
-	* Fired by `addon-post-analysis` whenever a gallery face row changes:
-	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
-	* `'unassigned'` its identity link changed, `'deleted'` the row was
-	* removed. Telemetry semantics (D8): a lost event only delays a refresh,
-	* never a correctness issue. Payload `PipelineAnalyticsFaceGalleryChangedPayload`.
-	*/
-	EventCategory["PipelineAnalyticsFaceGalleryChanged"] = "pipeline-analytics.face-gallery-changed";
-	/**
-	* Fired by `addon-post-analysis` whenever a gallery plate row changes:
-	* `kind:'buffered'` a new read was persisted (`PlateRecognizer.onTrackEnd`),
-	* `'assigned'` / `'unassigned'` its vehicle link changed
-	* (`PlateGalleryProvider`), `'deleted'` the row was removed. Telemetry
-	* semantics (D8): a lost event only delays a refresh, never a correctness
-	* issue. Payload `PipelineAnalyticsPlateGalleryChangedPayload`.
-	*/
-	EventCategory["PipelineAnalyticsPlateGalleryChanged"] = "pipeline-analytics.plate-gallery-changed";
-	EventCategory["CameraStreamsProfileSlotsChanged"] = "camera-streams.onProfileSlotsChanged";
-	/**
-	* Stream-broker health watchdog. Per-broker (deviceId/profile) emission.
-	* `stream.offline` fires after STREAM_STALE_TIMEOUT_MS without an encoded
-	* packet on an active broker. `stream.online` fires on first packet
-	* after a stale gap (or on initial first packet). Payload includes
-	* the assigned camStreamId as `profileKey`.
-	*/
-	EventCategory["StreamOnline"] = "stream.online";
-	EventCategory["StreamOffline"] = "stream.offline";
-	EventCategory["NetworkTunnelStarted"] = "network.tunnel.started";
-	EventCategory["NetworkTunnelStopped"] = "network.tunnel.stopped";
-	/** Fired by the `local-network` cap when the host's interface set
-	*  changes (new IP from DHCP, VPN connect, docker bridge added). */
-	EventCategory["LocalNetworkChanged"] = "network.local.changed";
-	/**
-	* Fired by a `mesh-network` provider (Tailscale, …) when its
-	* mesh-reachable host changes (join / leave / MagicDNS or 100.x IP
-	* change). Lets `local-network` fold the mesh endpoint into its
-	* connection-endpoint list without a cross-package import. Payload
-	* carries the preferred host (`host: ''` = no longer reachable),
-	* the hub port, and the scheme. Telemetry-grade (D8): consumers
-	* pull-reconcile from the provider's `getStatus` on reconnect. */
-	EventCategory["MeshNetworkChanged"] = "network.mesh.changed";
-	EventCategory["BackupCompleted"] = "backup.completed";
-	/**
-	* A whole backup RUN finished — every destination attempted, win or lose.
-	*
-	* `backup.completed` fires once per DESTINATION, which is the right grain for
-	* a progress UI and the wrong one for a notification: an operator with three
-	* destinations would be told three times. And a run where two of three
-	* destinations succeeded is not a clean success — a single "backup
-	* completed" that hid the failed one would be a lie, so the count of each is
-	* carried here and the message says both.
-	*
-	* Emitted by the backup orchestrator only after the destination loop, so a
-	* run that dies during the BUILD phase produces no completion at all.
-	*/
-	EventCategory["BackupRunCompleted"] = "backup.run-completed";
-	EventCategory["BackupRestored"] = "backup.restored";
-	EventCategory["NotificationDispatched"] = "notification.dispatched";
-	EventCategory["NotificationFailed"] = "notification.failed";
-	/**
-	* A notification rule that cannot work (D905): its stored row does not load,
-	* or it still names a device / delivery target the prune CONFIRMED deleted.
-	* One edge per rule per distinct set of reasons; never on an unanswered read.
-	*/
-	EventCategory["NotificationRuleBroken"] = "notification.rule-broken";
-	/** The clear of {@link NotificationRuleBroken}: the rule loads and names nothing deleted. */
-	EventCategory["NotificationRuleRepaired"] = "notification.rule-repaired";
-	/** A migration failed or was blocked; the Alert Center re-reads the ledger. */
-	EventCategory["MigrationFailed"] = "migration.failed";
-	/** A migration applied or a failure cleared; the Alert Center re-reads the ledger. */
-	EventCategory["MigrationApplied"] = "migration.applied";
-	EventCategory["DeviceUpdated"] = "device.updated";
-	/**
-	* Transport-level connectivity. Emitted by the device driver when
-	* the underlying control socket actually connects / disconnects
-	* (Baichuan TCP, ONVIF probe response, RTSP DESCRIBE, …) — NOT for
-	* power-state transitions on a battery camera. For battery wake /
-	* doze cycles see `DeviceAwake` / `DeviceSleeping`.
-	*/
-	EventCategory["DeviceOnline"] = "device.online";
-	/**
-	* Stream-broker watchdog — emitted when no encoded packet has been
-	* received for STREAM_STALE_TIMEOUT_MS on an active broker (rtsp or
-	* push). Paired with DeviceOnline which fires on first packet after
-	* a stale gap. Payload: DeviceStreamHealthPayload.
-	*/
-	EventCategory["DeviceOffline"] = "device.offline";
-	/**
-	* Battery cam woke up — physical power-state transition reported
-	* by the device firmware. Distinct from `DeviceOnline` so a UI panel
-	* watching power state doesn't flap on every UDP socket reconnect.
-	*/
-	EventCategory["DeviceAwake"] = "device.awake";
-	/**
-	* Battery cam went to sleep. See `DeviceAwake`.
-	*/
-	EventCategory["DeviceSleeping"] = "device.sleeping";
-	EventCategory["RetentionCleanup"] = "retention.cleanup";
-	/**
-	* Legacy bulk-update progress snapshot (payload `BulkUpdateState`). No longer
-	* emitted — F3 removed the coordinator that produced it; "Update all" now runs
-	* as one lifecycle engine job (`AddonsJobProgress`/`AddonsJobLog`). Retained
-	* (with `BulkUpdateState`) only to avoid regenerating the event maps; removed
-	* in F4 once live bulk progress is re-implemented over the engine events.
-	*/
-	EventCategory["AddonsBulkUpdateProgress"] = "addons.bulk-update-progress";
-	EventCategory["AddonsJobProgress"] = "addons.job-progress";
-	EventCategory["AddonsJobLog"] = "addons.job-log";
-	/**
-	* A container's child visibility toggled (hidden/shown). Emitted by the
-	* `accessories` cap when a child device is hidden or revealed.
-	* Payload: `{ deviceId, childDeviceId, hidden }`.
-	*/
-	EventCategory["AccessoriesChildVisibilityChanged"] = "accessories.onChildVisibilityChanged";
-	/**
-	* A container's child set changed (children added/removed/reordered).
-	* Payload: `{ deviceId, childDeviceIds, hiddenChildIds }`.
-	*/
-	EventCategory["AccessoriesChanged"] = "accessories.onAccessoriesChanged";
-	/**
-	* An action run started or ended. Emitted by the `actions` surface.
-	* Payload: `ActionRunChanged` (`{ actionId, runId, isRunning, outcome?, lastRunAt, lastError }`).
-	*/
-	EventCategory["ActionsRunChanged"] = "actions.onRunChanged";
-	/**
-	* Progress update from a running model conversion job.
-	* Payload: `{ kind: 'model-convert', phase, sessionId?, pct?, detail? }`.
-	* Emitted by `addon-model-studio` on the converting node.
-	*/
-	EventCategory["ModelConvertProgress"] = "model-convert.progress";
-	return EventCategory;
-}({});
-//#endregion
-//#region ../types/dist/device-type-D1fH5kaC.mjs
-/**
-import { errMsg } from '@camstack/types'
-* Extract a human-readable message from an unknown error value.
-* Replaces the ubiquitous `errMsg(err)` pattern.
-*/
-function errMsg(err) {
-	if (err instanceof Error) return err.message;
-	if (typeof err === "string") return err;
-	return String(err);
-}
-var DeviceType = /* @__PURE__ */ function(DeviceType) {
-	DeviceType["Camera"] = "camera";
-	DeviceType["Hub"] = "hub";
-	DeviceType["Light"] = "light";
-	DeviceType["Siren"] = "siren";
-	DeviceType["Switch"] = "switch";
-	DeviceType["Sensor"] = "sensor";
-	DeviceType["Thermostat"] = "thermostat";
-	/** Air-conditioner / heat-pump climate device (HVAC) — shares the
-	*  `climate-control` cap surface with `Thermostat` but renders a
-	*  dedicated AC-appropriate control UI (mode chips, fan speed,
-	*  independent vertical/horizontal swing). Sources: native Gree, and
-	*  reusable by other AC integrations. */
-	DeviceType["Climate"] = "climate";
-	DeviceType["Button"] = "button";
-	/** Generic stateless event emitter — carries a device's EXACT declared
-	*  event vocabulary verbatim (no normalization). Installed with the
-	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
-	*  HA bus events (e.g. `zha_event`, generic). */
-	DeviceType["EventEmitter"] = "event-emitter";
-	/** Firmware/software update entity — current vs available version,
-	*  updatable flag, update state, and an install action. Installed with
-	*  the `update` cap. Sources: Homematic firmware-update channels (and
-	*  reusable by other providers, e.g. HA `update.*` entities). */
-	DeviceType["Update"] = "update";
-	DeviceType["Generic"] = "generic";
-	/** Generic notification delivery target (HA `notify.<service>`, future
-	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
-	*  endpoint; the `notifier` cap defines the send surface. */
-	DeviceType["Notifier"] = "notifier";
-	/** Pre-recorded action sequence with optional parameters
-	*  (HA `script.*`). Runnable via `script-runner` cap. */
-	DeviceType["Script"] = "script";
-	/** Automation rule (HA `automation.*`) — enable/disable + manual
-	*  trigger surface exposed via `automation-control` cap. */
-	DeviceType["Automation"] = "automation";
-	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
-	DeviceType["Lock"] = "lock";
-	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
-	*  `valve.*`). `cover` cap with sub-roles for variant. */
-	DeviceType["Cover"] = "cover";
-	/** Pipe / water / gas valve with open/close/stop and optional
-	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
-	*  modelled on the same open/closed lifecycle. */
-	DeviceType["Valve"] = "valve";
-	/** Humidifier / dehumidifier with on/off + target humidity + mode
-	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
-	*  modelled on the same target / mode lifecycle. */
-	DeviceType["Humidifier"] = "humidifier";
-	/** Water heater / boiler with target temperature + operation mode +
-	*  away mode (HA `water_heater.*`). `water-heater` cap — a
-	*  climate-family actuator. */
-	DeviceType["WaterHeater"] = "water-heater";
-	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
-	DeviceType["Fan"] = "fan";
-	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
-	*  the camera surface — those use `Camera`. `media-player` cap. */
-	DeviceType["MediaPlayer"] = "media-player";
-	/** Security panel / alarm system (HA `alarm_control_panel.*`).
-	*  `alarm-panel` cap. */
-	DeviceType["AlarmPanel"] = "alarm-panel";
-	/** Generic user-settable input (HA `number` / `input_number` / `select`
-	*  / `input_select` / `text` / `input_text` / `input_datetime`).
-	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
-	*  TextControl / DateTimeControl. */
-	DeviceType["Control"] = "control";
-	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
-	*  `presence` cap. */
-	DeviceType["Presence"] = "presence";
-	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
-	*  `weather` cap. */
-	DeviceType["Weather"] = "weather";
-	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
-	DeviceType["Vacuum"] = "vacuum";
-	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
-	*  `lawn-mower-control` cap. */
-	DeviceType["LawnMower"] = "lawn-mower";
-	/** Physical HA device group — parent container for entity-children
-	*  adopted from a single HA device entry. Not renderable as a
-	*  standalone device; exists only to anchor child entities. */
-	DeviceType["Container"] = "container";
-	/** Single still-image entity (HA `image.*`). Read-only display of an
-	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
-	DeviceType["Image"] = "image";
-	/** Smart pet feeder — cloud-connected food dispenser with a bowl food
-	*  level, battery, desiccant life, feeding state and manual-feed /
-	*  call-pet / maintenance actions. Installed with the `pet-feeder` cap;
-	*  dual-hopper models (D4S/D4SH) expose per-hopper portions. Sources:
-	*  native PetKit (`nodepetkit` `FeederDevice`), reusable by other feeder
-	*  integrations sharing the same food/desiccant/hopper surface. */
-	DeviceType["PetFeeder"] = "pet-feeder";
-	/** Pet water fountain — tank level, water drunk, pump and its duty cycle.
-	*  Installed with the `pet-fountain` cap. Reaches CamStack as loose entities
-	*  of a container and is BUILT as a composed device (D967). */
-	DeviceType["PetFountain"] = "pet-fountain";
-	/** Built-in dishwasher — program lifecycle, door / remote-start gates,
-	*  salt and rinse-aid levels. Installed with the `dishwasher` cap.
-	*  Sources: native Bosch Home Connect, reusable by similar integrations.
-	*  A plug-built dishwasher carries running-state and power instead. */
-	DeviceType["Dishwasher"] = "dishwasher";
-	/** Washing machine. A plug-built one is running while its power stays
-	*  above a threshold. No program cap — that surface is the dishwasher's. */
-	DeviceType["Washer"] = "washer";
-	/** A dumb plug-in stove or heater: a switch (and, with a meter, a power
-	*  reading) that only runs while the plug is on. Built from a smart plug;
-	*  the `timed-run` cap switches it off again after a chosen time. */
-	DeviceType["Heater"] = "heater";
-	/** Tumble dryer. Same plug-built running surface as {@link Washer}. */
-	DeviceType["Dryer"] = "dryer";
-	/** The physical bridge box of a vendor ecosystem (Velux KLF-200, and later
-	*  other radio-to-IP bridges). It carries the box's own facts (firmware,
-	*  address, connection state) and the actions the box really supports
-	*  (`reboot`, `device-admin-link`). Products are NOT its children — they are
-	*  adopted beside it — and its connection settings stay on the integration. */
-	DeviceType["Gateway"] = "gateway";
-	return DeviceType;
-}({});
-var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
-	DeviceFeature["BatteryOperated"] = "battery-operated";
-	DeviceFeature["Rebootable"] = "rebootable";
-	/**
-	* Device supports an on-demand re-sync of its derived spec with its
-	* upstream source — drives the generic Re-sync button. The owning
-	* provider implements the action via the `device-adoption.resync` cap.
-	*/
-	DeviceFeature["Resyncable"] = "resyncable";
-	DeviceFeature["NativeSnapshot"] = "native-snapshot";
-	DeviceFeature["DoorbellButton"] = "doorbell-button";
-	DeviceFeature["TwoWayAudio"] = "two-way-audio";
-	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
-	/**
-	* Camera supports the on-firmware autotrack subsystem (subject-
-	* following). Distinct from `PanTiltZoom` because not every PTZ
-	* camera ships autotrack — the admin UI uses this flag to gate
-	* the autotrack toggle / settings card without re-deriving from
-	* the cap registry. Mirrors `ptz-autotrack` cap registration:
-	* driver sets this feature when probe confirms the firmware
-	* surface, and registers the cap in the same code path.
-	*/
-	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
-	/**
-	* Accessory exposes a "trigger on motion" toggle — the parent camera's
-	* motion detection automatically activates this device. Mirrors
-	* `motion-trigger` cap registration: drivers set this feature in the
-	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
-	*
-	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
-	* fast scalar without binding fetch), notifier rules, and `listAll`
-	* filters that want "all devices with on-motion behaviour".
-	*/
-	DeviceFeature["MotionTrigger"] = "motion-trigger";
-	/** Light supports rgb-triplet color via `color` cap. */
-	DeviceFeature["LightColorRgb"] = "light-color-rgb";
-	/** Light supports HSV color via `color` cap. */
-	DeviceFeature["LightColorHsv"] = "light-color-hsv";
-	/** Light supports color-temperature (mired) via `color` cap. */
-	DeviceFeature["LightColorMired"] = "light-color-mired";
-	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
-	*  targetHigh). Gates the range slider UI. */
-	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
-	/** Thermostat exposes target humidity and/or current humidity
-	*  readings. Gates the humidity controls. */
-	DeviceFeature["ClimateHumidity"] = "climate-humidity";
-	/** Thermostat exposes a fan-mode selector. */
-	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
-	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
-	DeviceFeature["ClimatePreset"] = "climate-preset";
-	/** Thermostat exposes a vertical louver swing toggle. Gates the
-	*  vertical-swing switch in the climate UI. Independent of horizontal. */
-	DeviceFeature["ClimateSwingVertical"] = "climate-swing-vertical";
-	/** Thermostat exposes a horizontal louver swing toggle. Gates the
-	*  horizontal-swing switch in the climate UI. Independent of vertical. */
-	DeviceFeature["ClimateSwingHorizontal"] = "climate-swing-horizontal";
-	/** Cover exposes intermediate position control (0..100). Gates the
-	*  position slider UI. */
-	DeviceFeature["CoverPositionable"] = "cover-positionable";
-	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
-	DeviceFeature["CoverTilt"] = "cover-tilt";
-	/** Cover has a real stop: `stop` halts the travel in place. Gates the stop
-	*  control in exporters; a provider whose `stop` is a no-op never declares it. */
-	DeviceFeature["CoverStoppable"] = "cover-stoppable";
-	/** Valve exposes intermediate position control (0..100). Gates the
-	*  position slider / drag surface UI. */
-	DeviceFeature["ValvePositionable"] = "valve-positionable";
-	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
-	DeviceFeature["FanSpeed"] = "fan-speed";
-	/** Fan exposes a preset mode selector. */
-	DeviceFeature["FanPreset"] = "fan-preset";
-	/** Fan exposes blade direction (forward/reverse) — typical of
-	*  ceiling fans. */
-	DeviceFeature["FanDirection"] = "fan-direction";
-	/** Fan exposes an oscillation toggle. */
-	DeviceFeature["FanOscillating"] = "fan-oscillating";
-	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
-	*  field on the UI lock-controls panel. */
-	DeviceFeature["LockPinRequired"] = "lock-pin-required";
-	/** Lock supports a latch-release ("open door") action distinct from
-	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
-	*  `supported_features`. Gates the Open Door button in the UI. */
-	DeviceFeature["LockOpen"] = "lock-open";
-	/** Media player exposes a seek-to-position surface. */
-	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
-	/** Media player exposes a volume-level setter. */
-	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
-	/** Media player exposes a mute toggle distinct from volume=0. */
-	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
-	/** Media player exposes a shuffle toggle. */
-	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
-	/** Media player exposes a repeat mode (off / all / one). */
-	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
-	/** Media player exposes a source / input selector. */
-	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
-	/** Media player exposes a play-arbitrary-media surface (URL / id). */
-	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
-	/** Media player exposes next-track. */
-	DeviceFeature["MediaPlayerNext"] = "media-player-next";
-	/** Media player exposes previous-track. */
-	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
-	/** Media player exposes stop distinct from pause. */
-	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
-	/** Media player exposes volume up / down in steps (an infrared TV has no level). */
-	DeviceFeature["MediaPlayerVolumeStep"] = "media-player-volume-step";
-	/** Media player exposes channel up / down in steps. */
-	DeviceFeature["MediaPlayerChannelStep"] = "media-player-channel-step";
-	/** Media player exposes power on / off. */
-	DeviceFeature["MediaPlayerPower"] = "media-player-power";
-	/** Alarm panel requires a PIN code on arm/disarm. */
-	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
-	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
-	*  addition to a textual location. */
-	DeviceFeature["PresenceGps"] = "presence-gps";
-	/** Notifier accepts an inline / URL image attachment. */
-	DeviceFeature["NotifierImage"] = "notifier-image";
-	/** Notifier accepts a priority hint (high/normal/low). */
-	DeviceFeature["NotifierPriority"] = "notifier-priority";
-	/** Notifier accepts a free-form `data` payload for platform-specific
-	*  fields. */
-	DeviceFeature["NotifierData"] = "notifier-data";
-	/** Notifier supports interactive action buttons / callbacks. */
-	DeviceFeature["NotifierActions"] = "notifier-actions";
-	/** Notifier supports per-call recipient targeting (multi-user). */
-	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
-	/** Script runner accepts a variables map on each run invocation. */
-	DeviceFeature["ScriptVariables"] = "script-variables";
-	/** Automation `trigger` accepts a skipCondition flag — fires the
-	*  automation's actions while bypassing its condition block. */
-	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
-	/** Robot vacuum exposes a live cleaning map (image child). Gates the
-	*  map tile in the vacuum UI. */
-	DeviceFeature["VacuumHasMap"] = "vacuum-has-map";
-	/** Robot vacuum exposes AI obstacle-detection toggles. Gates the AI
-	*  switches group. */
-	DeviceFeature["VacuumHasAi"] = "vacuum-has-ai";
-	/** Robot mower exposes a live mowing map (SVG image child). Gates the
-	*  mower map tile. */
-	DeviceFeature["MowerHasMap"] = "mower-has-map";
-	/** Robot mower exposes targeted mowing (all-area / zones / edges /
-	*  spots) — gates the Mow action + map selectors. */
-	DeviceFeature["MowerHasTargetedMowing"] = "mower-has-targeted-mowing";
-	return DeviceFeature;
-}({});
-/**
-* Semantic role a device plays within its parent. Populated by driver
-* addons when creating accessory devices (Reolink siren/floodlight/
-* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
-* admin UI to pick icons, labels, and widgets — a `Switch` with
-* `role: Floodlight` renders as a bulb with a brightness slider,
-* whereas a `Switch` with `role: Siren` renders as a klaxon.
-*
-* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
-* sqlite as a nullable TEXT column — old rows keep working unchanged.
-*/
-var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
-	DeviceRole["Siren"] = "siren";
-	DeviceRole["Floodlight"] = "floodlight";
-	DeviceRole["Spotlight"] = "spotlight";
-	DeviceRole["PirSensor"] = "pir-sensor";
-	DeviceRole["Chime"] = "chime";
-	DeviceRole["Autotrack"] = "autotrack";
-	DeviceRole["Nightvision"] = "nightvision";
-	DeviceRole["PrivacyMask"] = "privacy-mask";
-	DeviceRole["Doorbell"] = "doorbell";
-	/** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
-	DeviceRole["CoverBlind"] = "cover-blind";
-	/** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
-	DeviceRole["CoverShutter"] = "cover-shutter";
-	/** Exterior awning. HA `device_class: awning`. */
-	DeviceRole["CoverAwning"] = "cover-awning";
-	/** Curtain / drape. HA `device_class: curtain`. */
-	DeviceRole["CoverCurtain"] = "cover-curtain";
-	/** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
-	DeviceRole["CoverGarage"] = "cover-garage";
-	/** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
-	DeviceRole["CoverGate"] = "cover-gate";
-	/** Door. HA `device_class: door`. A security actuator: exports gate it. */
-	DeviceRole["CoverDoor"] = "cover-door";
-	/** Window. HA `device_class: window`. */
-	DeviceRole["CoverWindow"] = "cover-window";
-	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
-	*  real Switch device for UI rendering / export adapters. */
-	DeviceRole["BinaryHelper"] = "binary-helper";
-	/** A smart plug: a `switch` whose source says it is an outlet (HA
-	*  `device_class: outlet`). The Alexa export shows it as a SMARTPLUG. */
-	DeviceRole["Outlet"] = "outlet";
-	/** Generic motion / occupancy / moving event source. Distinct from
-	*  the camera accessory PirSensor role: that one is a camera child;
-	*  this is a standalone HA / 3rd-party motion sensor. */
-	DeviceRole["MotionSensor"] = "motion-sensor";
-	DeviceRole["ContactSensor"] = "contact-sensor";
-	DeviceRole["LeakSensor"] = "leak-sensor";
-	DeviceRole["SmokeSensor"] = "smoke-sensor";
-	DeviceRole["COSensor"] = "co-sensor";
-	DeviceRole["GasSensor"] = "gas-sensor";
-	DeviceRole["TamperSensor"] = "tamper-sensor";
-	DeviceRole["VibrationSensor"] = "vibration-sensor";
-	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
-	DeviceRole["SoundSensor"] = "sound-sensor";
-	/** Fallback for `binary_sensor` without a known `device_class`. */
-	DeviceRole["BinarySensor"] = "binary-sensor";
-	DeviceRole["TemperatureSensor"] = "temperature-sensor";
-	DeviceRole["HumiditySensor"] = "humidity-sensor";
-	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
-	DeviceRole["PressureSensor"] = "pressure-sensor";
-	/** Wind speed or direction (weather-station `wind-sensor` cap). */
-	DeviceRole["WindSensor"] = "wind-sensor";
-	/** Rain accumulation or rate (weather-station `rain-sensor` cap). */
-	DeviceRole["RainSensor"] = "rain-sensor";
-	/** UV index (weather-station `uv-sensor` cap). */
-	DeviceRole["UvSensor"] = "uv-sensor";
-	/** Solar irradiance W/m² (weather-station `solar-radiation-sensor` cap).
-	*  Distinct from AmbientLightSensor (lux). */
-	DeviceRole["SolarRadiationSensor"] = "solar-radiation-sensor";
-	/** Soil moisture % (garden/weather `soil-moisture-sensor` cap). */
-	DeviceRole["SoilMoistureSensor"] = "soil-moisture-sensor";
-	DeviceRole["PowerSensor"] = "power-sensor";
-	DeviceRole["EnergySensor"] = "energy-sensor";
-	DeviceRole["VoltageSensor"] = "voltage-sensor";
-	DeviceRole["CurrentSensor"] = "current-sensor";
-	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
-	/** Battery level (numeric % via `sensor` OR low-bool via
-	*  `binary_sensor` — the cap distinguishes via the value type). */
-	DeviceRole["BatterySensor"] = "battery-sensor";
-	/** Fallback for `sensor` numeric without a known `device_class`. */
-	DeviceRole["NumericSensor"] = "numeric-sensor";
-	/** String / enum state (HA `sensor` with `state_class: enum` or
-	*  `attributes.options`). */
-	DeviceRole["EnumSensor"] = "enum-sensor";
-	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
-	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
-	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
-	DeviceRole["DateTimeSensor"] = "datetime-sensor";
-	/** Last-resort fallback when nothing else matches. */
-	DeviceRole["GenericSensor"] = "generic-sensor";
-	DeviceRole["NumericControl"] = "numeric-control";
-	DeviceRole["SelectControl"] = "select-control";
-	DeviceRole["TextControl"] = "text-control";
-	DeviceRole["DateTimeControl"] = "datetime-control";
-	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
-	*  rich features (image, priority, channel routing). */
-	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
-	/** Chat / messaging service (HA `notify.telegram_*`,
-	*  `notify.discord_*`, etc.). */
-	DeviceRole["MessagingNotifier"] = "messaging-notifier";
-	/** Email-based delivery (HA `notify.smtp`, etc.). */
-	DeviceRole["EmailNotifier"] = "email-notifier";
-	/** Fallback when the notifier service name doesn't match a known
-	*  pattern. */
-	DeviceRole["GenericNotifier"] = "generic-notifier";
-	/** Emits a pulse train (infrared or RF) on request — the `ir-transmitter`
-	*  cap. A `DeviceType.Generic` device. */
-	DeviceRole["IrTransmitter"] = "ir-transmitter";
-	return DeviceRole;
-}({});
-//#endregion
 //#region ../../node_modules/zod/v4/core/core.js
 var _a$1;
 function $constructor(name, initializer, params) {
@@ -6056,12 +4868,1200 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../../node_modules/zod/v4/classic/coerce.js
-function number(params) {
-	return /* @__PURE__ */ _coercedNumber(ZodNumber, params);
+//#region ../../node_modules/zod/v4/classic/coerce.js
+function number(params) {
+	return /* @__PURE__ */ _coercedNumber(ZodNumber, params);
+}
+//#endregion
+//#region ../types/dist/event-category-78tcBemo.mjs
+var EventCategory = /* @__PURE__ */ function(EventCategory) {
+	EventCategory["SystemBoot"] = "system.boot";
+	EventCategory["SystemAddonsReady"] = "system.addons-ready";
+	EventCategory["SystemRestarting"] = "system.restarting";
+	/**
+	* Fired exactly once after the hub finishes booting following a
+	* restart that was triggered by `RestartCoordinator` (today: framework
+	* live-update). Payload is the marker that was on disk at boot
+	* (`PendingRestartMarkerPayload`); admin UI listens for it to display a
+	* success toast describing what changed.
+	*
+	* Spec: docs/superpowers/specs/2026-05-14-framework-live-update-design.md
+	*/
+	EventCategory["SystemRestartCompleted"] = "system.restart-completed";
+	/**
+	* The hub reissued its own TLS certificate at boot (`ensureTlsCert`).
+	* Emitted only when the material on disk actually changed, so an
+	* operator who trusted the old certificate by hand is told rather than
+	* discovering it as a browser error. Payload `TlsCertChangedPayload`.
+	*
+	* Rule: docs/decisions/adr-0227-*.md
+	*/
+	EventCategory["SystemTlsCertChanged"] = "system.tls-cert-changed";
+	/**
+	* A newer addon or server-root package version was found by the
+	* authoritative registry check. Emitted once when any observed
+	* `latestVersion` changes (or a package/node first appears behind);
+	* the payload carries the full currently-available list. Repeated
+	* polling of the same latests is silent.
+	*/
+	EventCategory["UpdateAvailable"] = "update.available";
+	/**
+	* Readiness transition for a capability provider. Every producer emits
+	* this event on `onInitialize` completion, `onDestroy`, and
+	* `$node.reconnect`; every consumer that needs to gate on a cross-process
+	* cap subscribes via the kernel's readiness module (`awaitReady` /
+	* `onReadyState`) instead of polling. Payload is
+	* `SystemReadyStatePayload` — see event-bus.ts.
+	*/
+	EventCategory["SystemReadyState"] = "system.ready-state";
+	EventCategory["AddonStarted"] = "addon.started";
+	EventCategory["AddonStopped"] = "addon.stopped";
+	EventCategory["AddonRestarted"] = "addon.restarted";
+	EventCategory["AddonUpdated"] = "addon.updated";
+	EventCategory["AddonInstalled"] = "addon.installed";
+	EventCategory["AddonUninstalled"] = "addon.uninstalled";
+	EventCategory["AddonCrashed"] = "addon.crashed";
+	/**
+	* A RUNNER the D6 crash circuit-breaker gave up on — terminal.
+	*
+	* `AddonCrashed` is the routine, self-healing fact ("it crashed; it is being
+	* respawned"); this is the one that never resolves itself. Emitted exactly
+	* once per trip, by `process-service.ts`, carrying the node, the runner, the
+	* addons it hosted and the crash count that tripped the breaker.
+	*
+	* It exists because a runner marked terminally `failed` used to be SILENT:
+	* on 2026-08-18 the `recorder` runner died of three unhandled ffmpeg spawn
+	* errors, the breaker stopped respawning it (correctly), `/health` kept
+	* returning 200, and fleet-wide recording was gone for 3h15 before the
+	* operator's phone told him. The Notification Center's system-event intake
+	* consumes this category and maps it to the `addon-crash-loop` kind.
+	*/
+	EventCategory["AddonRunnerFailed"] = "addon.runner-failed";
+	/**
+	* A runner whose addon refused to start with a typed reason (D877) - parked
+	* in `refused`, never counted by the crash breaker, retried on operator
+	* action. One event per refusal.
+	*/
+	EventCategory["AddonRunnerRefused"] = "addon.runner-refused";
+	/**
+	* A runner settled on a state (D877): `running` (READY), `crashed`, `failed` or
+	* `refused`. In-process telemetry for the boot check (re-evaluate while any
+	* runner is still pending) and the alert centre (close a recovered runner).
+	*/
+	EventCategory["ProcessStateChanged"] = "process.state-changed";
+	/**
+	* The node's one-shot runner boot check (D877): planned runners against the
+	* process service, `degraded` when any is failed, refused or missing. The
+	* alert centre turns it into one critical alert.
+	*/
+	EventCategory["SystemRunnerCheck"] = "system.runner-check";
+	/**
+	* An alert EPISODE opened or closed, emitted by the alert centre for alerts
+	* of severity `critical` or `error` (`AlertEpisodePayload`). The alert
+	* centre sends no notification of its own: Notification Center turns this
+	* into the `alert-critical` / `alert-error` / `alert-critical-resolved`
+	* system-event kinds, and reconciles from the alerts store because a bus
+	* event may be dropped (D8, D11).
+	*/
+	EventCategory["AlertEpisode"] = "alert.episode";
+	EventCategory["AddonError"] = "addon.error";
+	EventCategory["AddonPageReady"] = "addon.page-ready";
+	EventCategory["AddonWidgetReady"] = "addon.widget-ready";
+	/**
+	* Addon failed to load (import or initialize). Emitted by the kernel's
+	* AddonHealthMonitor only AFTER the boot grace period ends — failures
+	* during the first 5 minutes are silently retried without alerting
+	* (slow-starting addons must have time to come up). Post-grace, this
+	* event is emitted exactly once per failure-streak; AlertCenter
+	* consumes it to create a persistent operator-visible alert.
+	*
+	* Payload: `{ packageName, addonId?, error: { message, stack }, retryCount, nextRetryAt }`.
+	*/
+	EventCategory["AddonLoadFailed"] = "addon.load-failed";
+	/**
+	* A keychain value was stored or removed (D787). Carries the ref, its
+	* owner and the new version — NEVER the value. A process holding the ref
+	* drops its cached copy and the owning `BaseAddon` re-resolves its config.
+	* Telemetry (D8): a process that misses it still revalidates by version.
+	*/
+	EventCategory["KeychainChanged"] = "keychain.changed";
+	/**
+	* Addon recovered from a previous failure. Emitted when an addon
+	* transitions from `failed` back to `healthy` (typically via the
+	* monitor's auto-retry loop, or after manual `addons.retryLoad`).
+	* AlertCenter dismisses the corresponding `AddonLoadFailed` alert
+	* on this event.
+	*/
+	EventCategory["AddonLoadRecovered"] = "addon.load-recovered";
+	/**
+	* An addon is RUNNING although its installed package is below what the
+	* running server requires (`camstack.requires.addons` of the server, or the
+	* addon's own `requires.server`). Raised once per streak by the unsupported-
+	* addon tracker, on the hub and on agents; AlertCenter turns it into one
+	* operator alert per node and package. The addon is never held back for it.
+	*
+	* Payload: `{ packageName, addonId, nodeId, installedVersion, requiredMinimum, serverVersion, unmet }`.
+	*/
+	EventCategory["AddonUnsupportedVersion"] = "addon.unsupported-version";
+	/**
+	* The package of an {@link AddonUnsupportedVersion} alert reached a supported
+	* version, or is no longer installed on the node. AlertCenter dismisses the matching alert.
+	*
+	* Payload: `{ packageName, addonId, nodeId }`.
+	*/
+	EventCategory["AddonUnsupportedResolved"] = "addon.unsupported-resolved";
+	/**
+	* Monitor scheduled the next retry for a failed addon. Transient —
+	* surfaced to the UI for live-updating the "next retry in Ns"
+	* countdown on the Addons page row, NOT persisted as an alert.
+	*/
+	EventCategory["AddonRetryScheduled"] = "addon.retry-scheduled";
+	/**
+	* A liveness invariant of this node is false — it has no devices, every
+	* camera is offline, or a camera that was recording has stopped producing
+	* segments. Emitted by the `liveness-monitor` builtin, once per fault (the
+	* `findingId` is stable across ticks), only after its boot grace period.
+	* AlertCenter raises a persistent operator-visible alert.
+	*
+	* It exists because on 2026-08-03 the hub ran four hours with zero devices
+	* and zero recordings while every surface stayed quiet.
+	*
+	* Payload: `{ findingId, severity, title, message, deviceId? }`.
+	*/
+	EventCategory["SystemLivenessFailed"] = "system.liveness-failed";
+	/**
+	* A previously reported liveness fault is true again. AlertCenter dismisses
+	* the matching `SystemLivenessFailed` alert.
+	*
+	* Payload: `{ findingId }`.
+	*/
+	EventCategory["SystemLivenessRecovered"] = "system.liveness-recovered";
+	/**
+	* Monitor is attempting to reload a failed addon NOW. UI uses this
+	* to show a spinner during the retry attempt. Same transient nature
+	* as AddonRetryScheduled.
+	*/
+	EventCategory["AddonRetryAttempting"] = "addon.retry-attempting";
+	EventCategory["DeviceRegistered"] = "device.registered";
+	EventCategory["DeviceUnregistered"] = "device.unregistered";
+	EventCategory["DeviceEnabled"] = "device.enabled";
+	EventCategory["DeviceDisabled"] = "device.disabled";
+	EventCategory["DeviceSettingsUpdated"] = "device.settings-updated";
+	/**
+	* Emitted when the set of native capability providers bound to a device
+	* changes — e.g. an addon registers a new native cap via
+	* `DeviceContext.registerNativeCap`, or all native bindings for a device
+	* are cleared on removal. Hub consumers re-resolve device-proxy routes
+	* when this fires.
+	*/
+	EventCategory["DeviceBindingsChanged"] = "device.bindings-changed";
+	/**
+	* Emitted when the operator-organisational meta surface changes
+	* (`name` / `location` / `disabled`). Payload: `{deviceId, field,
+	* value}`. Live consumers (UI device list, alert center) react
+	* without polling. Distinct from `DeviceSettingsUpdated` which
+	* fires on hardware-config changes (host/port/credentials/etc).
+	*/
+	EventCategory["DeviceMetaChanged"] = "device.meta-changed";
+	/**
+	* Emitted by `BaseDevice.updateSourceInfo()` after a successful patch
+	* to the device's upstream-system identity / rendering envelope. The
+	* full new SourceInfo travels in the payload so cross-process listeners
+	* (UI, export adapters) don't need to re-read the meta blob.
+	*
+	* Payload: `{deviceId, sourceInfo}`.
+	*
+	* Distinct from `DeviceMetaChanged` which covers the operator-edited
+	* surface (`name` / `location` / `disabled`). The two share the
+	* persistence layer (both ride on `device-manager.setMetadata` for
+	* SourceInfo, or `setName`/`setLocation`/`setDisabled` for the meta
+	* fields) but consumers care about different subsets.
+	*/
+	EventCategory["DeviceSourceInfoChanged"] = "device.source-info-changed";
+	/**
+	* Emitted by DeviceStreamWiringService after a successful
+	* `stream-broker.registerDeviceStreams` call. Payload includes
+	* deviceId — consumers look up the full registered device info via
+	* `brokerManager.getRegisteredDevice(deviceId)`.
+	*
+	* Replaces the legacy `StreamRouterService.onDeviceRegistered` callback.
+	*/
+	EventCategory["DeviceStreamsRegistered"] = "device.streams-registered";
+	/**
+	* Device-level "fully provisioned" signal — the EXPORT trigger. Emitted once
+	* a device's persisted export-relevant shape (its `DeviceFeature` set) is
+	* established or changes, carrying `{deviceId, fingerprint, generation}`.
+	* Export adapters (Alexa / HAP) react to THIS instead of the chatty per-cap
+	* `DeviceBindingsChanged`, turning a boot's incomplete→complete trickle into
+	* one clean delta. `fingerprint` is `canonicalDeviceFingerprint(shape)`.
+	*
+	* Spec: docs/superpowers/specs/2026-06-01-alexa-hap-export-reconciler-design.md
+	*/
+	EventCategory["DeviceProvisioned"] = "device.provisioned";
+	/**
+	* Fires once when a device's initial feature-probe completes successfully
+	* (lastProbedAt 0→>0); exported shape is now stable. Telemetry (may be
+	* dropped) — consumers MUST also gate on the device record's `probed` flag.
+	*/
+	EventCategory["DeviceReady"] = "device.ready";
+	EventCategory["IntegrationEnabled"] = "integration.enabled";
+	EventCategory["IntegrationDisabled"] = "integration.disabled";
+	EventCategory["IntegrationDeleted"] = "integration.deleted";
+	/** Emitted when a broker connection's status flips (connected /
+	*  disconnected / error). Carries `{ brokerId, status, error? }`. */
+	EventCategory["BrokerStatusChanged"] = "broker.status-changed";
+	/** Emitted for every subscription-matched message routed by a
+	*  broker provider. Carries `{ brokerId, subscriptionId, key, payload }`.
+	*  Consumers filter by `brokerId` + `subscriptionId` in the handler. */
+	EventCategory["BrokerMessage"] = "broker.message";
+	EventCategory["ProviderStarted"] = "provider.started";
+	EventCategory["ProviderStopped"] = "provider.stopped";
+	EventCategory["ProcessCrashed"] = "process.crashed";
+	EventCategory["ProcessRestartScheduled"] = "process.restart_scheduled";
+	EventCategory["ProcessRestarted"] = "process.restarted";
+	/**
+	* The SET of storage locations changed — one was created, edited, enabled,
+	* disabled or deleted through the location instances or the forced-delete action.
+	*
+	* Telemetry, not a transaction (D8/D11): every consumer that re-resolves on
+	* it must also converge on its own periodic path, because a dropped event
+	* must not leave a node writing to yesterday's disk set forever. It exists
+	* because there was NO signal at all — an operator who added a second
+	* recordings disk in the admin UI got nothing, and the recorder kept its
+	* resolved locations until something else happened to re-resolve them
+	* (D387). Payload `StorageLocationsChangedPayload`.
+	*/
+	EventCategory["StorageLocationsChanged"] = "storage.locations-changed";
+	EventCategory["RecordingStarted"] = "recording.started";
+	EventCategory["RecordingStopped"] = "recording.stopped";
+	EventCategory["RecordingError"] = "recording.error";
+	EventCategory["RecordingHealthDegraded"] = "recording.health.degraded";
+	/** Recording enabled but no segment finalized for the NC stall window. */
+	EventCategory["RecordingHealthStalled"] = "recording.health.stalled";
+	/** Recovery from {@link RecordingHealthStalled}. */
+	EventCategory["RecordingHealthOk"] = "recording.health.ok";
+	EventCategory["RecordingStorageCritical"] = "recording.storage.critical";
+	/** Free space on a storage location crossed the warn bar. */
+	EventCategory["StorageLocationLow"] = "storage.location.low";
+	/** Free space at/under the critical bar, or capacity probe failed (`null`). */
+	EventCategory["StorageLocationCritical"] = "storage.location.critical";
+	/** Recovery from low/critical on a storage location. */
+	EventCategory["StorageLocationOk"] = "storage.location.ok";
+	EventCategory["RecordingSegmentWritten"] = "recording.segment.written";
+	EventCategory["RecordingPolicyFallback"] = "recording.policy.fallback";
+	EventCategory["RecordingRetentionCompleted"] = "recording.retention.completed";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
+	EventCategory["DetectionEvent"] = "detection.event";
+	EventCategory["SessionTrackNew"] = "session.track.new";
+	EventCategory["SessionTrackExpired"] = "session.track.expired";
+	EventCategory["BenchmarkProgress"] = "benchmark.progress";
+	EventCategory["PlatformProbePhase"] = "platform-probe.phase";
+	EventCategory["PipelineProgress"] = "pipeline.progress";
+	/** Per-frame execution trace emitted by the pipeline executor for live observability. */
+	EventCategory["PipelineTrace"] = "pipeline.trace";
+	/**
+	* Raw inference output emitted by `addon-pipeline-runner` after running the
+	* detection pipeline on a frame. Carries the `FrameResult` (with
+	* `detections[]`, `width`/`height`, timing debug) — never the frame
+	* buffer itself. Hub-side consumers (analysis pipeline, class filters,
+	* notifications) subscribe to this and re-emit `detection.result` after
+	* post-processing.
+	*/
+	EventCategory["PipelineInferenceResult"] = "pipeline.inference-result";
+	/**
+	* Camera lifecycle event emitted by `addon-pipeline-orchestrator` when it
+	* assigns or unassigns a camera to/from an agent. Carries no frame data;
+	* pure observability for UI dashboards and metrics consumers.
+	*/
+	EventCategory["PipelineCameraAssigned"] = "pipeline.camera-assigned";
+	EventCategory["PipelineCameraUnassigned"] = "pipeline.camera-unassigned";
+	/**
+	* A node the orchestrator would otherwise place cameras on has NO usable
+	* inference device: the operator enabled one or more accelerators there and
+	* the live probe reports every one of them unavailable. Emitted once per
+	* TRANSITION into that state (never per dispatch), and the node is dropped
+	* from the placement candidate set for as long as it holds.
+	*
+	* This exists because the state was previously invisible: agent-a
+	* absorbed 283k inference errors in a day while still being handed cameras,
+	* and nothing in the system said so.
+	*
+	* A node with no accelerators configured at all is NOT this — its devices
+	* are `disabled`, not `unavailable`, and the runner's default CPU pool
+	* serves it exactly as before.
+	*/
+	EventCategory["PipelineNodeInferenceUnavailable"] = "pipeline.node-inference-unavailable";
+	/**
+	* A camera has an OPEN detection session and has produced no detection at
+	* all for longer than the blind threshold — the camera is being decoded and
+	* inferred and is returning nothing. Emitted once per transition into blind,
+	* per camera.
+	*
+	* The failure it reports: a 1h43 detection blackout on the entrance camera
+	* that nobody noticed, because "a camera that detects nothing" and "a quiet
+	* camera" produce byte-identical silence.
+	*/
+	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
+	/**
+	* A camera's motion source has fired constantly with no subject for an hour
+	* (motion duty or session count over the bar, zero detections) — it is not
+	* blind, its motion zones or sensitivity want tuning (D907). Paired with
+	* {@link PipelineMotionCalm}.
+	*/
+	EventCategory["PipelineMotionNoisy"] = "pipeline.motion-noisy";
+	/** The recovery edge of {@link PipelineMotionNoisy}: the motion fell back, or a detection arrived. */
+	EventCategory["PipelineMotionCalm"] = "pipeline.motion-calm";
+	/**
+	* A camera's package LLM confirm has failed closed three times in a row
+	* (D931, 2026-10-26). One edge per camera until
+	* {@link PipelinePackageLlmAnswered}.
+	*/
+	EventCategory["PipelinePackageLlmSilent"] = "pipeline.package-llm-silent";
+	/** The recovery edge of {@link PipelinePackageLlmSilent}: a confirm returned yes or no. */
+	EventCategory["PipelinePackageLlmAnswered"] = "pipeline.package-llm-answered";
+	/**
+	* Per-camera pipeline config was mutated by the orchestrator
+	* (a settings change via `setAgentInferenceDevices` /
+	* `setCameraStepToggle` / `setCameraStepSettings`). Orchestrator
+	* subscribes to its own emission to hot-reload the assigned runner
+	* via `attachCamera` so the next frame executes against the new
+	* engine/steps without waiting for a rebalance or the next
+	* `DeviceStreamsRegistered` cycle.
+	*/
+	EventCategory["PipelineCameraUpdated"] = "pipeline.camera-updated";
+	/**
+	* The cluster camera-source OWNER changed (`clusterRoles.ingestNode`).
+	* Emitted by addon-pipeline-orchestrator whenever it (re)derives node
+	* capabilities — at boot, on agent online/offline, and on an ingest-node
+	* flip. Carries the resolved `ownerNodeId`. The stream-broker consumes it to
+	* keep its ingest-owner-gate decision current WITHOUT a per-`ensureBroker`
+	* cross-process `getIngestOwner` query (push the authority's decision instead
+	* of polling it on the hot path). Idempotent state — re-emitted on every
+	* topology change, so a dropped event self-heals on the next one (plus the
+	* broker's long backstop reconcile query).
+	*/
+	EventCategory["PipelineIngestOwnerChanged"] = "pipeline.ingest-owner-changed";
+	/**
+	* Periodic snapshot of per-node pipeline-runner load
+	* (`RunnerLocalLoad`). Emitted ~1Hz by every runner so UI dashboards
+	* subscribe instead of polling `pipelineRunner.getLocalLoad`.
+	* `nodeId` carried in the payload + on `event.source.nodeId`.
+	*/
+	EventCategory["PipelineRunnerLoadSnapshot"] = "pipeline.runner-load-snapshot";
+	/**
+	* Periodic snapshot of per-camera pipeline metrics (`CameraMetrics`
+	* + `deviceId` + `nodeId`). Emitted ~1Hz by every runner for each
+	* attached camera. UI subscribes to drive overlay phase / fps /
+	* inference time without polling `getCameraMetrics`.
+	*/
+	EventCategory["PipelineCameraMetricsSnapshot"] = "pipeline.camera-metrics-snapshot";
+	/**
+	* Periodic snapshot of stream-broker per-broker statistics (input
+	* fps, decoded fps, bitrate, codec). Emitted ~1Hz by every
+	* stream-broker process for each active broker so the UI can drive
+	* the Stream / Cluster dashboards without polling
+	* `streamBroker.listAllProfileSlots` and friends.
+	*/
+	EventCategory["StreamBrokerMetricsSnapshot"] = "stream-broker.metrics-snapshot";
+	/**
+	* Cap event fired by `stream-broker` when a profile slot enters
+	* "demanded" state — a cam stream has been assigned and at least one
+	* consumer (RTSP restream, decoded subscriber, WebRTC session, …) is
+	* present. Camera-provider addons (Reolink Baichuan push, …)
+	* subscribe to this category to start their underlying transport
+	* lazily. Payload: `{ deviceId, camStreamId, profile }`.
+	*/
+	EventCategory["StreamBrokerOnCamStreamDemand"] = "stream-broker.onCamStreamDemand";
+	/**
+	* Cap event fired by `stream-broker` when the last consumer leaves a
+	* previously-demanded cam stream. Providers tear down their
+	* underlying transport on receipt. Payload: `{ deviceId, camStreamId }`.
+	*/
+	EventCategory["StreamBrokerOnCamStreamIdle"] = "stream-broker.onCamStreamIdle";
+	/**
+	* Cap event fired by `stream-broker` when a broker fails to dial a
+	* managed-loopback source (today: `pull-rfc4571`) and the publisher
+	* needs to refresh the cached URL. The lib's TCP server idle-tears-down
+	* on its own schedule, so a re-publish with a fresh `host:port` is the
+	* only way to keep the broker dialable. Camera providers (Reolink
+	* Baichuan native, …) subscribe and respond by re-running their publish
+	* pipeline.
+	* Payload: `{ deviceId, camStreamId, brokerId }`.
+	*/
+	EventCategory["StreamBrokerOnRequestStreamSourceRefresh"] = "stream-broker.onRequestStreamSourceRefresh";
+	/**
+	* A camera provider changed a device's stream parameters (codec /
+	* resolution / bitrate / a stream added or removed). A LOW-LATENCY NUDGE
+	* for the stream-broker's catalog reconcile: it carries NO authoritative
+	* data — the broker re-PULLS that device's `stream-catalog` cap on receipt
+	* (the 30s reconcile poll is the backstop if this nudge is dropped). Emitted
+	* by providers from `stream-params.setProfile`. Payload: `{ deviceId }`.
+	*/
+	EventCategory["StreamParamsChanged"] = "stream-params.changed";
+	/**
+	* Generic per-device runtime-state change. Fired by `device-manager`
+	* whenever a persisted slice in any cap's `runtimeState` shape
+	* mutates. Payload: `{deviceId, capName, slice}`. Subscribers are
+	* the `deviceState` cap router (cross-process listeners) and the
+	* deviceProxy reactive bindings (`device.state.<capName>.value`).
+	* Cap-specific events (`battery.onStatusChanged`, …) still fire
+	* — they're authoritative for callers that want a typed payload
+	* without filtering on `capName`.
+	*/
+	EventCategory["DeviceStateChanged"] = "device.state-changed";
+	/**
+	* The NATIVE shadow of a cap a composition has claimed fields of moved
+	* (D663). Payload: `{ deviceId, capName, native }` — what the provider
+	* wrote, BEFORE the owned fields are overlaid. Owner-only (D224): it is for
+	* the composer's native self-reads, and the public event routers refuse it
+	* (`isOwnerOnlyEventCategory`) so no consumer surface ever shows a second
+	* truth beside the merged `DeviceStateChanged.slice`. Emitted only under a
+	* `replace` claim, one per native write of that cap.
+	*/
+	EventCategory["DeviceNativeShadowChanged"] = "device.native-shadow-changed";
+	/**
+	* Frame occupancy for a camera CHANGED — a tracked object was gained or
+	* lost. Carries `{ deviceId, totalObjects, byClass, zones }`.
+	*
+	* Emitted only on a change, so a steady scene is silent. It exists so a
+	* client can stop polling `zoneAnalytics.getCurrentSnapshot`: that was the
+	* one live badge with no push signal at all, and it cost a request every
+	* four seconds per visible camera.
+	*
+	* Like every event it is telemetry and may be dropped ([D8]) — a consumer
+	* keeps a slow reconcile rather than trusting it alone.
+	*/
+	EventCategory["ZoneAnalyticsOccupancyChanged"] = "zone-analytics.occupancy-changed";
+	/**
+	* Cap event fired by every device that registers the `battery`
+	* capability. Mirrors the cap definition's `onStatusChanged`. Carries
+	* `{ deviceId, status: BatteryStatus }`. Subscribers (alert center,
+	* snapshot wrapper, UI) react to charge/sleep transitions without
+	* polling `batteryCapability.getStatus`.
+	*/
+	EventCategory["BatteryOnStatusChanged"] = "battery.onStatusChanged";
+	/**
+	* Cap event fired by every device that registers the `network-link`
+	* capability. Mirrors the cap definition's `onStatusChanged`. Carries
+	* `{ deviceId, status: NetworkLinkStatus }` — a link switch or a signal
+	* reading that moved.
+	*/
+	EventCategory["NetworkLinkOnStatusChanged"] = "network-link.onStatusChanged";
+	/**
+	* Emitted by the battery cap provider WHEN `wakeForStream` enters the
+	* "wake in progress" window — between the Baichuan wake-up issue and
+	* the camera's first dialed-back RTP packet. The stream-broker
+	* manager subscribes to flip the per-broker placeholder reason to
+	* `'waking'` so viewers see a labelled "WAKING UP" tile instead of
+	* the generic `'reconnecting'` frame. Carries `{ deviceId }`. The
+	* complementary "wake complete" signal is the existing
+	* `BatteryOnStatusChanged { sleeping: false }` event.
+	*/
+	EventCategory["BatteryOnWakeStarted"] = "battery.onWakeStarted";
+	/**
+	* Cap event fired by every device that registers the `doorbell`
+	* capability. Mirrors `doorbellCapability.events.onPressed`. Carries
+	* `{ deviceId, timestamp }`. Operators consuming the UI subscribe
+	* here to render transient ring toasts and a "Recent presses" row
+	* on the device detail page.
+	*/
+	EventCategory["DoorbellOnPressed"] = "doorbell.onPressed";
+	/** Mirrors `runningStateCapability.events.onStarted`. */
+	EventCategory["RunningStarted"] = "running.started";
+	/** Mirrors `runningStateCapability.events.onFinished`. */
+	EventCategory["RunningFinished"] = "running.finished";
+	/** Mirrors `deviceRunsCapability.events.onRunOpened` - a durable run record opened. */
+	EventCategory["DeviceRunOpened"] = "device-run.opened";
+	/** Mirrors `deviceRunsCapability.events.onRunClosed` - a durable run record closed. */
+	EventCategory["DeviceRunClosed"] = "device-run.closed";
+	/**
+	* Cap event fired by every device that registers the `event-emitter`
+	* capability. Mirrors `eventEmitterCapability.events.onEvent`. Carries
+	* `{ deviceId, eventType, data, timestamp, seq }` — the device's EXACT
+	* declared event verbatim (NO normalization). Subscribers (UI event
+	* stream, advanced-notifier rules) react to fired events without
+	* holding a cap reference.
+	*/
+	EventCategory["EventEmitted"] = "event-emitter.event";
+	/**
+	* Periodic snapshot of the per-node detection-pipeline engine
+	* registry (loaded engines, models resident, in-use cameras, idle
+	* TTL). Emitted ~0.2Hz (every 5 s) by every detection-pipeline
+	* process. The Engines tab subscribes to drive its inventory view
+	* without polling `pipelineExecutor.listLoadedEngines`.
+	*/
+	EventCategory["PipelineEngineMetricsSnapshot"] = "pipeline.engine-metrics-snapshot";
+	/**
+	* Per-node detection-engine runtime-provisioning transition. Emitted by
+	* the detection-pipeline provider on every state change of its lazy
+	* engine-provisioning machine (idle → installing → verifying → ready,
+	* or → failed with a `nextRetryAt`). Payload is the
+	* `EngineProvisioningState` snapshot; `event.source.nodeId` carries the
+	* node. The Pipeline page subscribes to drive a live "installing
+	* OpenVINO… / ready" indicator per node without polling
+	* `pipelineExecutor.getEngineProvisioning`. Telemetry-grade (D8): the UI
+	* also reads the cap snapshot on mount / reconnect. Phase 2.
+	*/
+	EventCategory["PipelineEngineProvisioning"] = "pipeline.engine-provisioning";
+	/**
+	* Cluster topology snapshot. Carries the same payload returned by
+	* `nodes.topology` (every reachable node + addons + processes).
+	* Emitted by the hub on any agent / addon lifecycle change
+	* (debounced) plus a periodic safety net. Replaces UI polling on
+	* `nodes.topology` — admin-ui dashboards subscribe to drive the
+	* cluster view directly from the event payload.
+	*/
+	EventCategory["ClusterTopologySnapshot"] = "cluster.topology-snapshot";
+	/**
+	* Periodic per-node system metrics snapshot (CPU / memory / GPU /
+	* disk / network). Emitted ~0.2 Hz by the metrics-provider addon
+	* for each node. Drives the dashboard SystemStatus / ProcessResources
+	* widgets without polling `metricsProvider.getCurrent`.
+	*/
+	EventCategory["MetricsNodeResourcesSnapshot"] = "metrics.node-resources-snapshot";
+	/**
+	* Periodic per-node process-tree snapshot (camstack-related pids
+	* with root / managed / system classification). Emitted ~0.2 Hz by
+	* the metrics-provider addon. Drives the Cluster → Processes tab
+	* without polling `metricsProvider.listNodeProcesses`.
+	*/
+	EventCategory["MetricsNodeProcessesSnapshot"] = "metrics.node-processes-snapshot";
+	/**
+	* Capability binding change event emitted by `addon-pipeline-orchestrator`
+	* when a user changes which addon implements a cap on a node. Subscribed
+	* by every kernel process to update its local `preferredProviderRegistry`
+	* so future capability lookups respect the new binding.
+	*/
+	/**
+	* A capability binding was changed for a node — addon X now provides
+	* capability `cap` on node `nodeId`. Lives under the generic
+	* `capability.*` namespace because capability bindings are a kernel-
+	* level concept used by many addons, not strictly pipeline-scoped.
+	*/
+	EventCategory["CapabilityBindingChanged"] = "capability.binding-changed";
+	EventCategory["ModelDownloadProgress"] = "model.download.progress";
+	EventCategory["AgentRegistered"] = "agent.registered";
+	EventCategory["AgentUnregistered"] = "agent.unregistered";
+	EventCategory["AgentOnline"] = "agent.online";
+	EventCategory["AgentOffline"] = "agent.offline";
+	/** Forked worker process (e.g. hub/pipeline) connected to the broker. */
+	EventCategory["WorkerOnline"] = "worker.online";
+	/** Forked worker process disconnected from the broker. */
+	EventCategory["WorkerOffline"] = "worker.offline";
+	EventCategory["AgentTaskDispatched"] = "agent.task.dispatched";
+	EventCategory["AgentTaskAssigned"] = "agent.task.assigned";
+	EventCategory["AgentTrpcConnected"] = "agent.trpc.connected";
+	EventCategory["AgentWsConnected"] = "agent.ws.connected";
+	EventCategory["AgentWsDisconnected"] = "agent.ws.disconnected";
+	EventCategory["AgentBackupActivated"] = "agent.backup.activated";
+	EventCategory["OrchestrationSettingsUpdated"] = "orchestration.settings-updated";
+	EventCategory["MotionAnalysis"] = "detection.motion-analysis";
+	/** All raw motion zones from CCL before minArea filter — for UI debug overlay. */
+	EventCategory["MotionZonesRaw"] = "detection.motion-zones-raw";
+	/**
+	* Per-camera motion phase transition (`watching ↔ active`) emitted
+	* by the runner. Mirrors the `motion.onMotionChanged` cap event
+	* surface — payload `MotionOnMotionChangedPayload` carries
+	* `{deviceId, detected, timestamp, source, regions?}`. Subscribers
+	* include addons that need to react to motion state without
+	* polling the runtime-state mirror.
+	*/
+	EventCategory["MotionOnMotionChanged"] = "motion.on-motion-changed";
+	EventCategory["DetectionResult"] = "detection.result";
+	EventCategory["DetectionRaw"] = "detection.raw";
+	EventCategory["DetectionCameraNative"] = "detection.camera-native";
+	/**
+	* Canonical per-chunk live audio pipeline output. Payload is
+	* `PipelineAudioInferenceResultPayload` carrying a full `AudioResult`
+	* (level + detections + debug). Lives on the pipeline.* namespace
+	* alongside `pipeline.inference-result` (video) for symmetry.
+	*/
+	EventCategory["PipelineAudioInferenceResult"] = "pipeline.audio-inference-result";
+	EventCategory["DetectionPhaseTransition"] = "detection.phase-transition";
+	/**
+	* A camera provider's RAW onboard motion push (D673): the `MotionOnMotionChanged`
+	* data shape without `triggeredBy`, built by `providerMotionEvent`. Its one
+	* consumer is the orchestrator's camera-sensors bridge, which re-emits the
+	* camera's EFFECTIVE onboard motion as `MotionOnMotionChanged` (a pass-through
+	* for a camera with no attached sensor). Providers must not emit
+	* `MotionOnMotionChanged` themselves; `scripts/check-onboard-motion-emitters.ts`
+	* keeps it so (camera-grid is a named, deferred exception).
+	*/
+	EventCategory["ProviderMotion"] = "provider.motion";
+	EventCategory["ProviderDetection"] = "provider.detection";
+	EventCategory["EnrichmentEmbeddingStored"] = "enrichment.embedding.stored";
+	EventCategory["EnrichmentSceneStateChanged"] = "enrichment.scene.state-changed";
+	EventCategory["EnrichmentActivitySummary"] = "enrichment.activity.summary";
+	/**
+	* Unified track-lifecycle event: ONE category carrying `phase:
+	* 'start' | 'update' | 'end'` with a rich, typed
+	* `PipelineAnalyticsTrackLifecyclePayload`. Supersedes the thin
+	* `PipelineAnalyticsTrackStarted` / `PipelineAnalyticsTrackEnded`
+	* pair — a consumer subscribes once and branches on `phase`.
+	*/
+	EventCategory["PipelineAnalyticsTrackLifecycle"] = "pipeline-analytics.track-lifecycle";
+	/**
+	* @deprecated Superseded by {@link PipelineAnalyticsTrackLifecycle}
+	* (`phase:'start'`). Kept as a soft alias — no known subscribers.
+	*/
+	EventCategory["PipelineAnalyticsTrackStarted"] = "pipeline-analytics.track-started";
+	/**
+	* @deprecated Superseded by {@link PipelineAnalyticsTrackLifecycle}
+	* (`phase:'end'`). Kept as a soft alias — no known subscribers.
+	*/
+	EventCategory["PipelineAnalyticsTrackEnded"] = "pipeline-analytics.track-ended";
+	EventCategory["PipelineAnalyticsDetectionEvent"] = "pipeline-analytics.detection-event";
+	EventCategory["PipelineAnalyticsFrameTracked"] = "pipeline-analytics.frame-tracked";
+	/**
+	* Fired by `addon-post-analysis` when a parked (stationary) object appears
+	* (a track was promoted to a stationary-registry entry) or departs (the
+	* object moved / was removed). Telemetry (D8): lossy, drives a UI refresh of
+	* the dedicated "Stationary" section — never the live event feed. Payload:
+	* `{ deviceId, entryId, className, phase:'appeared'|'departed', timestamp, observedAt, zones }`.
+	*/
+	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
+	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaId?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
+	* Fired by `addon-post-analysis` whenever a gallery face row changes:
+	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
+	* `'unassigned'` its identity link changed, `'deleted'` the row was
+	* removed. Telemetry semantics (D8): a lost event only delays a refresh,
+	* never a correctness issue. Payload `PipelineAnalyticsFaceGalleryChangedPayload`.
+	*/
+	EventCategory["PipelineAnalyticsFaceGalleryChanged"] = "pipeline-analytics.face-gallery-changed";
+	/**
+	* Fired by `addon-post-analysis` whenever a gallery plate row changes:
+	* `kind:'buffered'` a new read was persisted (`PlateRecognizer.onTrackEnd`),
+	* `'assigned'` / `'unassigned'` its vehicle link changed
+	* (`PlateGalleryProvider`), `'deleted'` the row was removed. Telemetry
+	* semantics (D8): a lost event only delays a refresh, never a correctness
+	* issue. Payload `PipelineAnalyticsPlateGalleryChangedPayload`.
+	*/
+	EventCategory["PipelineAnalyticsPlateGalleryChanged"] = "pipeline-analytics.plate-gallery-changed";
+	EventCategory["CameraStreamsProfileSlotsChanged"] = "camera-streams.onProfileSlotsChanged";
+	/**
+	* Stream-broker health watchdog. Per-broker (deviceId/profile) emission.
+	* `stream.offline` fires after STREAM_STALE_TIMEOUT_MS without an encoded
+	* packet on an active broker. `stream.online` fires on first packet
+	* after a stale gap (or on initial first packet). Payload includes
+	* the assigned camStreamId as `profileKey`.
+	*/
+	EventCategory["StreamOnline"] = "stream.online";
+	EventCategory["StreamOffline"] = "stream.offline";
+	EventCategory["NetworkTunnelStarted"] = "network.tunnel.started";
+	EventCategory["NetworkTunnelStopped"] = "network.tunnel.stopped";
+	/** Fired by the `local-network` cap when the host's interface set
+	*  changes (new IP from DHCP, VPN connect, docker bridge added). */
+	EventCategory["LocalNetworkChanged"] = "network.local.changed";
+	/**
+	* Fired by a `mesh-network` provider (Tailscale, …) when its
+	* mesh-reachable host changes (join / leave / MagicDNS or 100.x IP
+	* change). Lets `local-network` fold the mesh endpoint into its
+	* connection-endpoint list without a cross-package import. Payload
+	* carries the preferred host (`host: ''` = no longer reachable),
+	* the hub port, and the scheme. Telemetry-grade (D8): consumers
+	* pull-reconcile from the provider's `getStatus` on reconnect. */
+	EventCategory["MeshNetworkChanged"] = "network.mesh.changed";
+	EventCategory["BackupCompleted"] = "backup.completed";
+	/**
+	* A whole backup RUN finished — every destination attempted, win or lose.
+	*
+	* `backup.completed` fires once per DESTINATION, which is the right grain for
+	* a progress UI and the wrong one for a notification: an operator with three
+	* destinations would be told three times. And a run where two of three
+	* destinations succeeded is not a clean success — a single "backup
+	* completed" that hid the failed one would be a lie, so the count of each is
+	* carried here and the message says both.
+	*
+	* Emitted by the backup orchestrator only after the destination loop, so a
+	* run that dies during the BUILD phase produces no completion at all.
+	*/
+	EventCategory["BackupRunCompleted"] = "backup.run-completed";
+	EventCategory["BackupRestored"] = "backup.restored";
+	EventCategory["NotificationDispatched"] = "notification.dispatched";
+	EventCategory["NotificationFailed"] = "notification.failed";
+	/**
+	* A notification rule that cannot work (D905): its stored row does not load,
+	* or it still names a device / delivery target the prune CONFIRMED deleted.
+	* One edge per rule per distinct set of reasons; never on an unanswered read.
+	*/
+	EventCategory["NotificationRuleBroken"] = "notification.rule-broken";
+	/** The clear of {@link NotificationRuleBroken}: the rule loads and names nothing deleted. */
+	EventCategory["NotificationRuleRepaired"] = "notification.rule-repaired";
+	/** A migration failed or was blocked; the Alert Center re-reads the ledger. */
+	EventCategory["MigrationFailed"] = "migration.failed";
+	/** A migration applied or a failure cleared; the Alert Center re-reads the ledger. */
+	EventCategory["MigrationApplied"] = "migration.applied";
+	EventCategory["DeviceUpdated"] = "device.updated";
+	/**
+	* Transport-level connectivity. Emitted by the device driver when
+	* the underlying control socket actually connects / disconnects
+	* (Baichuan TCP, ONVIF probe response, RTSP DESCRIBE, …) — NOT for
+	* power-state transitions on a battery camera. For battery wake /
+	* doze cycles see `DeviceAwake` / `DeviceSleeping`.
+	*/
+	EventCategory["DeviceOnline"] = "device.online";
+	/**
+	* Stream-broker watchdog — emitted when no encoded packet has been
+	* received for STREAM_STALE_TIMEOUT_MS on an active broker (rtsp or
+	* push). Paired with DeviceOnline which fires on first packet after
+	* a stale gap. Payload: DeviceStreamHealthPayload.
+	*/
+	EventCategory["DeviceOffline"] = "device.offline";
+	/**
+	* Battery cam woke up — physical power-state transition reported
+	* by the device firmware. Distinct from `DeviceOnline` so a UI panel
+	* watching power state doesn't flap on every UDP socket reconnect.
+	*/
+	EventCategory["DeviceAwake"] = "device.awake";
+	/**
+	* Battery cam went to sleep. See `DeviceAwake`.
+	*/
+	EventCategory["DeviceSleeping"] = "device.sleeping";
+	EventCategory["RetentionCleanup"] = "retention.cleanup";
+	/**
+	* Legacy bulk-update progress snapshot (payload `BulkUpdateState`). No longer
+	* emitted — F3 removed the coordinator that produced it; "Update all" now runs
+	* as one lifecycle engine job (`AddonsJobProgress`/`AddonsJobLog`). Retained
+	* (with `BulkUpdateState`) only to avoid regenerating the event maps; removed
+	* in F4 once live bulk progress is re-implemented over the engine events.
+	*/
+	EventCategory["AddonsBulkUpdateProgress"] = "addons.bulk-update-progress";
+	EventCategory["AddonsJobProgress"] = "addons.job-progress";
+	EventCategory["AddonsJobLog"] = "addons.job-log";
+	/**
+	* A container's child visibility toggled (hidden/shown). Emitted by the
+	* `accessories` cap when a child device is hidden or revealed.
+	* Payload: `{ deviceId, childDeviceId, hidden }`.
+	*/
+	EventCategory["AccessoriesChildVisibilityChanged"] = "accessories.onChildVisibilityChanged";
+	/**
+	* A container's child set changed (children added/removed/reordered).
+	* Payload: `{ deviceId, childDeviceIds, hiddenChildIds }`.
+	*/
+	EventCategory["AccessoriesChanged"] = "accessories.onAccessoriesChanged";
+	/**
+	* An action run started or ended. Emitted by the `actions` surface.
+	* Payload: `ActionRunChanged` (`{ actionId, runId, isRunning, outcome?, lastRunAt, lastError }`).
+	*/
+	EventCategory["ActionsRunChanged"] = "actions.onRunChanged";
+	/**
+	* Progress update from a running model conversion job.
+	* Payload: `{ kind: 'model-convert', phase, sessionId?, pct?, detail? }`.
+	* Emitted by `addon-model-studio` on the converting node.
+	*/
+	EventCategory["ModelConvertProgress"] = "model-convert.progress";
+	return EventCategory;
+}({});
+//#endregion
+//#region ../types/dist/device-type-D1fH5kaC.mjs
+/**
+import { errMsg } from '@camstack/types'
+* Extract a human-readable message from an unknown error value.
+* Replaces the ubiquitous `errMsg(err)` pattern.
+*/
+function errMsg(err) {
+	if (err instanceof Error) return err.message;
+	if (typeof err === "string") return err;
+	return String(err);
 }
+var DeviceType = /* @__PURE__ */ function(DeviceType) {
+	DeviceType["Camera"] = "camera";
+	DeviceType["Hub"] = "hub";
+	DeviceType["Light"] = "light";
+	DeviceType["Siren"] = "siren";
+	DeviceType["Switch"] = "switch";
+	DeviceType["Sensor"] = "sensor";
+	DeviceType["Thermostat"] = "thermostat";
+	/** Air-conditioner / heat-pump climate device (HVAC) — shares the
+	*  `climate-control` cap surface with `Thermostat` but renders a
+	*  dedicated AC-appropriate control UI (mode chips, fan speed,
+	*  independent vertical/horizontal swing). Sources: native Gree, and
+	*  reusable by other AC integrations. */
+	DeviceType["Climate"] = "climate";
+	DeviceType["Button"] = "button";
+	/** Generic stateless event emitter — carries a device's EXACT declared
+	*  event vocabulary verbatim (no normalization). Installed with the
+	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
+	*  HA bus events (e.g. `zha_event`, generic). */
+	DeviceType["EventEmitter"] = "event-emitter";
+	/** Firmware/software update entity — current vs available version,
+	*  updatable flag, update state, and an install action. Installed with
+	*  the `update` cap. Sources: Homematic firmware-update channels (and
+	*  reusable by other providers, e.g. HA `update.*` entities). */
+	DeviceType["Update"] = "update";
+	DeviceType["Generic"] = "generic";
+	/** Generic notification delivery target (HA `notify.<service>`, future
+	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
+	*  endpoint; the `notifier` cap defines the send surface. */
+	DeviceType["Notifier"] = "notifier";
+	/** Pre-recorded action sequence with optional parameters
+	*  (HA `script.*`). Runnable via `script-runner` cap. */
+	DeviceType["Script"] = "script";
+	/** Automation rule (HA `automation.*`) — enable/disable + manual
+	*  trigger surface exposed via `automation-control` cap. */
+	DeviceType["Automation"] = "automation";
+	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
+	DeviceType["Lock"] = "lock";
+	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
+	*  `valve.*`). `cover` cap with sub-roles for variant. */
+	DeviceType["Cover"] = "cover";
+	/** Pipe / water / gas valve with open/close/stop and optional
+	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
+	*  modelled on the same open/closed lifecycle. */
+	DeviceType["Valve"] = "valve";
+	/** Humidifier / dehumidifier with on/off + target humidity + mode
+	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
+	*  modelled on the same target / mode lifecycle. */
+	DeviceType["Humidifier"] = "humidifier";
+	/** Water heater / boiler with target temperature + operation mode +
+	*  away mode (HA `water_heater.*`). `water-heater` cap — a
+	*  climate-family actuator. */
+	DeviceType["WaterHeater"] = "water-heater";
+	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
+	DeviceType["Fan"] = "fan";
+	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
+	*  the camera surface — those use `Camera`. `media-player` cap. */
+	DeviceType["MediaPlayer"] = "media-player";
+	/** Security panel / alarm system (HA `alarm_control_panel.*`).
+	*  `alarm-panel` cap. */
+	DeviceType["AlarmPanel"] = "alarm-panel";
+	/** Generic user-settable input (HA `number` / `input_number` / `select`
+	*  / `input_select` / `text` / `input_text` / `input_datetime`).
+	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
+	*  TextControl / DateTimeControl. */
+	DeviceType["Control"] = "control";
+	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
+	*  `presence` cap. */
+	DeviceType["Presence"] = "presence";
+	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
+	*  `weather` cap. */
+	DeviceType["Weather"] = "weather";
+	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
+	DeviceType["Vacuum"] = "vacuum";
+	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
+	*  `lawn-mower-control` cap. */
+	DeviceType["LawnMower"] = "lawn-mower";
+	/** Physical HA device group — parent container for entity-children
+	*  adopted from a single HA device entry. Not renderable as a
+	*  standalone device; exists only to anchor child entities. */
+	DeviceType["Container"] = "container";
+	/** Single still-image entity (HA `image.*`). Read-only display of an
+	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
+	DeviceType["Image"] = "image";
+	/** Smart pet feeder — cloud-connected food dispenser with a bowl food
+	*  level, battery, desiccant life, feeding state and manual-feed /
+	*  call-pet / maintenance actions. Installed with the `pet-feeder` cap;
+	*  dual-hopper models (D4S/D4SH) expose per-hopper portions. Sources:
+	*  native PetKit (`nodepetkit` `FeederDevice`), reusable by other feeder
+	*  integrations sharing the same food/desiccant/hopper surface. */
+	DeviceType["PetFeeder"] = "pet-feeder";
+	/** Pet water fountain — tank level, water drunk, pump and its duty cycle.
+	*  Installed with the `pet-fountain` cap. Reaches CamStack as loose entities
+	*  of a container and is BUILT as a composed device (D967). */
+	DeviceType["PetFountain"] = "pet-fountain";
+	/** Built-in dishwasher — program lifecycle, door / remote-start gates,
+	*  salt and rinse-aid levels. Installed with the `dishwasher` cap.
+	*  Sources: native Bosch Home Connect, reusable by similar integrations.
+	*  A plug-built dishwasher carries running-state and power instead. */
+	DeviceType["Dishwasher"] = "dishwasher";
+	/** Washing machine. A plug-built one is running while its power stays
+	*  above a threshold. No program cap — that surface is the dishwasher's. */
+	DeviceType["Washer"] = "washer";
+	/** A dumb plug-in stove or heater: a switch (and, with a meter, a power
+	*  reading) that only runs while the plug is on. Built from a smart plug;
+	*  the `timed-run` cap switches it off again after a chosen time. */
+	DeviceType["Heater"] = "heater";
+	/** Tumble dryer. Same plug-built running surface as {@link Washer}. */
+	DeviceType["Dryer"] = "dryer";
+	/** The physical bridge box of a vendor ecosystem (Velux KLF-200, and later
+	*  other radio-to-IP bridges). It carries the box's own facts (firmware,
+	*  address, connection state) and the actions the box really supports
+	*  (`reboot`, `device-admin-link`). Products are NOT its children — they are
+	*  adopted beside it — and its connection settings stay on the integration. */
+	DeviceType["Gateway"] = "gateway";
+	return DeviceType;
+}({});
+var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
+	DeviceFeature["BatteryOperated"] = "battery-operated";
+	DeviceFeature["Rebootable"] = "rebootable";
+	/**
+	* Device supports an on-demand re-sync of its derived spec with its
+	* upstream source — drives the generic Re-sync button. The owning
+	* provider implements the action via the `device-adoption.resync` cap.
+	*/
+	DeviceFeature["Resyncable"] = "resyncable";
+	DeviceFeature["NativeSnapshot"] = "native-snapshot";
+	DeviceFeature["DoorbellButton"] = "doorbell-button";
+	DeviceFeature["TwoWayAudio"] = "two-way-audio";
+	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
+	/**
+	* Camera supports the on-firmware autotrack subsystem (subject-
+	* following). Distinct from `PanTiltZoom` because not every PTZ
+	* camera ships autotrack — the admin UI uses this flag to gate
+	* the autotrack toggle / settings card without re-deriving from
+	* the cap registry. Mirrors `ptz-autotrack` cap registration:
+	* driver sets this feature when probe confirms the firmware
+	* surface, and registers the cap in the same code path.
+	*/
+	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
+	/**
+	* Accessory exposes a "trigger on motion" toggle — the parent camera's
+	* motion detection automatically activates this device. Mirrors
+	* `motion-trigger` cap registration: drivers set this feature in the
+	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
+	*
+	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
+	* fast scalar without binding fetch), notifier rules, and `listAll`
+	* filters that want "all devices with on-motion behaviour".
+	*/
+	DeviceFeature["MotionTrigger"] = "motion-trigger";
+	/** Light supports rgb-triplet color via `color` cap. */
+	DeviceFeature["LightColorRgb"] = "light-color-rgb";
+	/** Light supports HSV color via `color` cap. */
+	DeviceFeature["LightColorHsv"] = "light-color-hsv";
+	/** Light supports color-temperature (mired) via `color` cap. */
+	DeviceFeature["LightColorMired"] = "light-color-mired";
+	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
+	*  targetHigh). Gates the range slider UI. */
+	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
+	/** Thermostat exposes target humidity and/or current humidity
+	*  readings. Gates the humidity controls. */
+	DeviceFeature["ClimateHumidity"] = "climate-humidity";
+	/** Thermostat exposes a fan-mode selector. */
+	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
+	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
+	DeviceFeature["ClimatePreset"] = "climate-preset";
+	/** Thermostat exposes a vertical louver swing toggle. Gates the
+	*  vertical-swing switch in the climate UI. Independent of horizontal. */
+	DeviceFeature["ClimateSwingVertical"] = "climate-swing-vertical";
+	/** Thermostat exposes a horizontal louver swing toggle. Gates the
+	*  horizontal-swing switch in the climate UI. Independent of vertical. */
+	DeviceFeature["ClimateSwingHorizontal"] = "climate-swing-horizontal";
+	/** Cover exposes intermediate position control (0..100). Gates the
+	*  position slider UI. */
+	DeviceFeature["CoverPositionable"] = "cover-positionable";
+	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
+	DeviceFeature["CoverTilt"] = "cover-tilt";
+	/** Cover has a real stop: `stop` halts the travel in place. Gates the stop
+	*  control in exporters; a provider whose `stop` is a no-op never declares it. */
+	DeviceFeature["CoverStoppable"] = "cover-stoppable";
+	/** Valve exposes intermediate position control (0..100). Gates the
+	*  position slider / drag surface UI. */
+	DeviceFeature["ValvePositionable"] = "valve-positionable";
+	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
+	DeviceFeature["FanSpeed"] = "fan-speed";
+	/** Fan exposes a preset mode selector. */
+	DeviceFeature["FanPreset"] = "fan-preset";
+	/** Fan exposes blade direction (forward/reverse) — typical of
+	*  ceiling fans. */
+	DeviceFeature["FanDirection"] = "fan-direction";
+	/** Fan exposes an oscillation toggle. */
+	DeviceFeature["FanOscillating"] = "fan-oscillating";
+	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
+	*  field on the UI lock-controls panel. */
+	DeviceFeature["LockPinRequired"] = "lock-pin-required";
+	/** Lock supports a latch-release ("open door") action distinct from
+	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
+	*  `supported_features`. Gates the Open Door button in the UI. */
+	DeviceFeature["LockOpen"] = "lock-open";
+	/** Media player exposes a seek-to-position surface. */
+	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
+	/** Media player exposes a volume-level setter. */
+	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
+	/** Media player exposes a mute toggle distinct from volume=0. */
+	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
+	/** Media player exposes a shuffle toggle. */
+	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
+	/** Media player exposes a repeat mode (off / all / one). */
+	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
+	/** Media player exposes a source / input selector. */
+	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
+	/** Media player exposes a play-arbitrary-media surface (URL / id). */
+	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
+	/** Media player exposes next-track. */
+	DeviceFeature["MediaPlayerNext"] = "media-player-next";
+	/** Media player exposes previous-track. */
+	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
+	/** Media player exposes stop distinct from pause. */
+	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
+	/** Media player exposes volume up / down in steps (an infrared TV has no level). */
+	DeviceFeature["MediaPlayerVolumeStep"] = "media-player-volume-step";
+	/** Media player exposes channel up / down in steps. */
+	DeviceFeature["MediaPlayerChannelStep"] = "media-player-channel-step";
+	/** Media player exposes power on / off. */
+	DeviceFeature["MediaPlayerPower"] = "media-player-power";
+	/** Alarm panel requires a PIN code on arm/disarm. */
+	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
+	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
+	*  addition to a textual location. */
+	DeviceFeature["PresenceGps"] = "presence-gps";
+	/** Notifier accepts an inline / URL image attachment. */
+	DeviceFeature["NotifierImage"] = "notifier-image";
+	/** Notifier accepts a priority hint (high/normal/low). */
+	DeviceFeature["NotifierPriority"] = "notifier-priority";
+	/** Notifier accepts a free-form `data` payload for platform-specific
+	*  fields. */
+	DeviceFeature["NotifierData"] = "notifier-data";
+	/** Notifier supports interactive action buttons / callbacks. */
+	DeviceFeature["NotifierActions"] = "notifier-actions";
+	/** Notifier supports per-call recipient targeting (multi-user). */
+	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
+	/** Script runner accepts a variables map on each run invocation. */
+	DeviceFeature["ScriptVariables"] = "script-variables";
+	/** Automation `trigger` accepts a skipCondition flag — fires the
+	*  automation's actions while bypassing its condition block. */
+	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
+	/** Robot vacuum exposes a live cleaning map (image child). Gates the
+	*  map tile in the vacuum UI. */
+	DeviceFeature["VacuumHasMap"] = "vacuum-has-map";
+	/** Robot vacuum exposes AI obstacle-detection toggles. Gates the AI
+	*  switches group. */
+	DeviceFeature["VacuumHasAi"] = "vacuum-has-ai";
+	/** Robot mower exposes a live mowing map (SVG image child). Gates the
+	*  mower map tile. */
+	DeviceFeature["MowerHasMap"] = "mower-has-map";
+	/** Robot mower exposes targeted mowing (all-area / zones / edges /
+	*  spots) — gates the Mow action + map selectors. */
+	DeviceFeature["MowerHasTargetedMowing"] = "mower-has-targeted-mowing";
+	return DeviceFeature;
+}({});
+/**
+* Semantic role a device plays within its parent. Populated by driver
+* addons when creating accessory devices (Reolink siren/floodlight/
+* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
+* admin UI to pick icons, labels, and widgets — a `Switch` with
+* `role: Floodlight` renders as a bulb with a brightness slider,
+* whereas a `Switch` with `role: Siren` renders as a klaxon.
+*
+* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
+* sqlite as a nullable TEXT column — old rows keep working unchanged.
+*/
+var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
+	DeviceRole["Siren"] = "siren";
+	DeviceRole["Floodlight"] = "floodlight";
+	DeviceRole["Spotlight"] = "spotlight";
+	DeviceRole["PirSensor"] = "pir-sensor";
+	DeviceRole["Chime"] = "chime";
+	DeviceRole["Autotrack"] = "autotrack";
+	DeviceRole["Nightvision"] = "nightvision";
+	DeviceRole["PrivacyMask"] = "privacy-mask";
+	DeviceRole["Doorbell"] = "doorbell";
+	/** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
+	DeviceRole["CoverBlind"] = "cover-blind";
+	/** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
+	DeviceRole["CoverShutter"] = "cover-shutter";
+	/** Exterior awning. HA `device_class: awning`. */
+	DeviceRole["CoverAwning"] = "cover-awning";
+	/** Curtain / drape. HA `device_class: curtain`. */
+	DeviceRole["CoverCurtain"] = "cover-curtain";
+	/** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
+	DeviceRole["CoverGarage"] = "cover-garage";
+	/** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
+	DeviceRole["CoverGate"] = "cover-gate";
+	/** Door. HA `device_class: door`. A security actuator: exports gate it. */
+	DeviceRole["CoverDoor"] = "cover-door";
+	/** Window. HA `device_class: window`. */
+	DeviceRole["CoverWindow"] = "cover-window";
+	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
+	*  real Switch device for UI rendering / export adapters. */
+	DeviceRole["BinaryHelper"] = "binary-helper";
+	/** A smart plug: a `switch` whose source says it is an outlet (HA
+	*  `device_class: outlet`). The Alexa export shows it as a SMARTPLUG. */
+	DeviceRole["Outlet"] = "outlet";
+	/** Generic motion / occupancy / moving event source. Distinct from
+	*  the camera accessory PirSensor role: that one is a camera child;
+	*  this is a standalone HA / 3rd-party motion sensor. */
+	DeviceRole["MotionSensor"] = "motion-sensor";
+	DeviceRole["ContactSensor"] = "contact-sensor";
+	DeviceRole["LeakSensor"] = "leak-sensor";
+	DeviceRole["SmokeSensor"] = "smoke-sensor";
+	DeviceRole["COSensor"] = "co-sensor";
+	DeviceRole["GasSensor"] = "gas-sensor";
+	DeviceRole["TamperSensor"] = "tamper-sensor";
+	DeviceRole["VibrationSensor"] = "vibration-sensor";
+	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
+	DeviceRole["SoundSensor"] = "sound-sensor";
+	/** Fallback for `binary_sensor` without a known `device_class`. */
+	DeviceRole["BinarySensor"] = "binary-sensor";
+	DeviceRole["TemperatureSensor"] = "temperature-sensor";
+	DeviceRole["HumiditySensor"] = "humidity-sensor";
+	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
+	DeviceRole["PressureSensor"] = "pressure-sensor";
+	/** Wind speed or direction (weather-station `wind-sensor` cap). */
+	DeviceRole["WindSensor"] = "wind-sensor";
+	/** Rain accumulation or rate (weather-station `rain-sensor` cap). */
+	DeviceRole["RainSensor"] = "rain-sensor";
+	/** UV index (weather-station `uv-sensor` cap). */
+	DeviceRole["UvSensor"] = "uv-sensor";
+	/** Solar irradiance W/m² (weather-station `solar-radiation-sensor` cap).
+	*  Distinct from AmbientLightSensor (lux). */
+	DeviceRole["SolarRadiationSensor"] = "solar-radiation-sensor";
+	/** Soil moisture % (garden/weather `soil-moisture-sensor` cap). */
+	DeviceRole["SoilMoistureSensor"] = "soil-moisture-sensor";
+	DeviceRole["PowerSensor"] = "power-sensor";
+	DeviceRole["EnergySensor"] = "energy-sensor";
+	DeviceRole["VoltageSensor"] = "voltage-sensor";
+	DeviceRole["CurrentSensor"] = "current-sensor";
+	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
+	/** Battery level (numeric % via `sensor` OR low-bool via
+	*  `binary_sensor` — the cap distinguishes via the value type). */
+	DeviceRole["BatterySensor"] = "battery-sensor";
+	/** Fallback for `sensor` numeric without a known `device_class`. */
+	DeviceRole["NumericSensor"] = "numeric-sensor";
+	/** String / enum state (HA `sensor` with `state_class: enum` or
+	*  `attributes.options`). */
+	DeviceRole["EnumSensor"] = "enum-sensor";
+	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
+	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
+	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
+	DeviceRole["DateTimeSensor"] = "datetime-sensor";
+	/** Last-resort fallback when nothing else matches. */
+	DeviceRole["GenericSensor"] = "generic-sensor";
+	DeviceRole["NumericControl"] = "numeric-control";
+	DeviceRole["SelectControl"] = "select-control";
+	DeviceRole["TextControl"] = "text-control";
+	DeviceRole["DateTimeControl"] = "datetime-control";
+	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
+	*  rich features (image, priority, channel routing). */
+	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
+	/** Chat / messaging service (HA `notify.telegram_*`,
+	*  `notify.discord_*`, etc.). */
+	DeviceRole["MessagingNotifier"] = "messaging-notifier";
+	/** Email-based delivery (HA `notify.smtp`, etc.). */
+	DeviceRole["EmailNotifier"] = "email-notifier";
+	/** Fallback when the notifier service name doesn't match a known
+	*  pattern. */
+	DeviceRole["GenericNotifier"] = "generic-notifier";
+	/** Emits a pulse train (infrared or RF) on request — the `ir-transmitter`
+	*  cap. A `DeviceType.Generic` device. */
+	DeviceRole["IrTransmitter"] = "ir-transmitter";
+	return DeviceRole;
+}({});
 //#endregion
-//#region ../types/dist/sleep-AEnTN3b4.mjs
+//#region ../types/dist/sleep-CQP-REJp.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6425,6 +6425,59 @@ Object.fromEntries([
 function isValuelessField(field) {
 	return field.type === "separator" || field.type === "info" || field.type === "qr-code" || field.type === "button" || field.type === "object-array" || field.type === "widget" || field.type === "addon-action-button" || field.type === "device-action-button" || field.type === "account-sign-in" || field.type === "secret-presence";
 }
+/**
+* Base collector: flatten a hydrated `ConfigUISchemaWithValues` into
+* `key → { value, default }`, recursing through `group` and `sub-tabs`
+* layout fields. Keeping `value` and `default` SEPARATE (rather than
+* pre-resolving) lets callers both read the effective value AND detect
+* overrides (`value` differs from `default`). Structural over `unknown`;
+* malformed input yields an empty map, never throws.
+*/
+function collectHydratedFieldEntries(schema) {
+	const out = /* @__PURE__ */ new Map();
+	if (typeof schema !== "object" || schema === null) return out;
+	const sections = schema.sections;
+	if (!Array.isArray(sections)) return out;
+	for (const section of sections) if (typeof section === "object" && section !== null) collectFieldEntriesInto(section.fields, out);
+	return out;
+}
+/** Recursive field walker for {@link collectHydratedFieldEntries}. */
+function collectFieldEntriesInto(fields, into) {
+	if (!Array.isArray(fields)) return;
+	for (const field of fields) {
+		if (typeof field !== "object" || field === null) continue;
+		const type = field.type;
+		if (type === "group") {
+			collectFieldEntriesInto(field.fields, into);
+			continue;
+		}
+		if (type === "sub-tabs") {
+			const tabs = field.tabs;
+			if (Array.isArray(tabs)) {
+				for (const tab of tabs) if (typeof tab === "object" && tab !== null) collectFieldEntriesInto(tab.fields, into);
+			}
+			continue;
+		}
+		const key = field.key;
+		if (typeof key !== "string" || key.length === 0) continue;
+		if (!("value" in field)) continue;
+		into.set(key, {
+			value: field.value,
+			default: field.default
+		});
+	}
+}
+/**
+* Flatten a hydrated settings payload into `key → EFFECTIVE value`
+* (`value ?? default`). The read-side inverse of `hydrateSchema` for the
+* common "just give me the resolved values" case. Built on
+* {@link collectHydratedFieldEntries}.
+*/
+function collectHydratedFieldValues(schema) {
+	const out = /* @__PURE__ */ new Map();
+	for (const [key, entry] of collectHydratedFieldEntries(schema)) out.set(key, entry.value ?? entry.default);
+	return out;
+}
 function hydrateSchema(schema, values, options = {}) {
 	return {
 		...schema.tabs ? { tabs: [...schema.tabs] } : {},
@@ -6762,7 +6815,7 @@ function switchRecordsOverMigrationApi(api) {
 		};
 	} };
 }
-function integrationRowsApiOver(api) {
+function integrationRowsApiOver$1(api) {
 	return {
 		list: async () => (await api.integrations.list({})).integrations,
 		readLegacyIntegrationRows: (input) => api.legacyRows.read(input),
@@ -7664,6 +7717,21 @@ var SCOPED_SETTINGS_SCOPES = [
 	"device-defaults",
 	"node"
 ];
+/** The one refusal of a key a scope did not declare. */
+function assertDeclaredKeys(keys, declared) {
+	const undeclared = keys.filter((key) => !declared.has(key));
+	if (undeclared.length > 0) throw new Error(`scoped settings: [${undeclared.join(", ")}] not declared for this scope (declared: [${[...declared].join(", ")}])`);
+}
+/** Build the handle over an addon's scoped read, write and unset. */
+function createScopedSettings(deps) {
+	return {
+		async get() {
+			return deps.schema.parse(await deps.read());
+		},
+		patch: (patch) => deps.write(Object.fromEntries(Object.entries(patch))),
+		unset: (keys) => deps.unset(keys)
+	};
+}
 /** A write to a secret path could not be stored in the keychain, so it was refused. */
 var KeychainWriteRefusedError = class extends Error {
 	fieldPath;
@@ -8239,7 +8307,16 @@ function createHandle(raw, opts) {
 				return blob;
 			}
 		},
-		writeAddonStore: writeAddon
+		writeAddonStore: writeAddon,
+		removeClearedKeys: (keys) => serialize("addon", async () => {
+			const stored = await readStoredAddonBlob(raw);
+			index.seen("addon", stored);
+			const removable = keys.filter((key) => collectSecretMarkerRefs(stored[key]).length === 0);
+			if (removable.length === 0) return;
+			const patch = Object.fromEntries(removable.map((key) => [key, void 0]));
+			await raw.writeAddonStore(patch);
+			index.wrote("addon", patch);
+		})
 	};
 }
 /** The context the addon sees, plus the private raw view and write outcome. */
@@ -8570,7 +8647,7 @@ var BaseAddon = class {
 			seq: 1e3,
 			initialBody: spec.initialBody
 		})], (a) => registrySwitchPortsOver({
-			api: integrationRowsApiOver(a),
+			api: integrationRowsApiOver$1(a),
 			records: switchRecordsOverMigrationApi(a),
 			kind: spec.kind
 		})).bind(api);
@@ -8784,6 +8861,151 @@ var BaseAddon = class {
 		}
 	}
 	/**
+	* Hook: values layered over the stored ones when the FORM of one scope is served
+	* ({@link getScopedSettings}) — a preview that derives dependent options without writing.
+	* Never applied to {@link ScopedSettings.get} or to a write. `null` ⇒ no overlay.
+	*/
+	async scopedSettingsOverlay(_scope, _cap, _nodeId) {
+		return null;
+	}
+	/**
+	* Hook: a write of one scope changed stored values (not called when the store reports no change,
+	* e.g. the write-back of a stored secret). `keys` are the bare field keys of the write, node keys included.
+	*/
+	async onScopedSettingsChanged(_scope, _cap, _keys) {}
+	/** Typed handle over the CLUSTER settings `cap` declares (`clusterSettingsSchema`). */
+	clusterSettings(cap, schema) {
+		return this.scopedHandle("cluster", cap, schema);
+	}
+	/** Typed handle over the fleet defaults of the per-device settings `cap` declares. */
+	deviceDefaults(cap, schema) {
+		return this.scopedHandle("device-defaults", cap, schema);
+	}
+	/**
+	* Typed handle over the settings `cap` owns PER NODE. `nodeId` omitted ⇒ the local node. A node
+	* with no row yields the schema defaults — never a bare-key fallback.
+	*/
+	nodeSettings(cap, schema, nodeId) {
+		return this.scopedHandle("node", cap, schema, nodeId);
+	}
+	/**
+	* {@link state} for a value that is kept per node: stored under `<key>@<nodeId>`, and the
+	* settings store carries `nodeId` in the row data (D986 §1), so a forgotten node's rows go in one
+	* central delete. `nodeId` omitted ⇒ the local node.
+	*/
+	nodeState(key, schema, fallback, nodeId) {
+		this._declaredStateKeys.add(key);
+		return createDurableState({
+			key: nodeScopedKey(key, nodeId ?? this._ctx?.kernel?.localNodeId ?? ""),
+			schema,
+			fallback,
+			read: async () => this.resolveStoredSecrets(await this.readAddonStoreWithRetry()),
+			write: async (patch) => {
+				await this._ctx?.settings?.writeAddonStore(patch);
+			},
+			onParseError: (k, e) => this._ctx?.logger?.warn?.(`durable-state: stored "${k}" failed validation — using fallback`, { meta: {
+				addonId: this._ctx?.id,
+				key: k,
+				error: String(e)
+			} })
+		});
+	}
+	/** The loaded schema `cap` declares for `scope`, or `null`. */
+	async declaredScopedSchema(scope, cap) {
+		await this.loadScopedSchemas(cap);
+		return this.loadedScopedSchemas(cap).find((entry) => entry.scope === scope)?.schema ?? null;
+	}
+	async requireScopedSchema(scope, cap) {
+		const schema = await this.declaredScopedSchema(scope, cap);
+		if (schema === null) throw new Error(`${this.constructor.name}: cap "${cap}" declares no ${scope} settings`);
+		return schema;
+	}
+	scopedKeys(schema) {
+		return new Set(schema.sections.flatMap((section) => collectValueFieldKeys(section.fields)));
+	}
+	/** `store` narrowed to the keys `schema` declares. */
+	narrowToScope(store, schema) {
+		const keys = this.scopedKeys(schema);
+		return Object.fromEntries(Object.entries(store).filter(([key]) => keys.has(key)));
+	}
+	scopedHandle(scope, cap, schema, nodeId) {
+		return createScopedSettings({
+			schema,
+			read: async () => {
+				const declared = await this.requireScopedSchema(scope, cap);
+				const stored = this.narrowToScope(await this.resolveGlobalStore(nodeId, cap), declared);
+				const effective = collectHydratedFieldValues(hydrateSchema(declared, stored));
+				return {
+					...Object.fromEntries([...effective].filter(([, value]) => value !== void 0)),
+					...stored
+				};
+			},
+			write: (patch) => this.writeScoped(scope, cap, patch, nodeId),
+			unset: (keys) => this.unsetScoped(scope, cap, keys, nodeId)
+		});
+	}
+	/** The one write path of the scoped API: declared keys only, then the global patch. */
+	async writeScoped(scope, cap, patch, nodeId) {
+		assertDeclaredKeys(Object.keys(patch), this.scopedKeys(await this.requireScopedSchema(scope, cap)));
+		if (await this.applyGlobalPatch(patch, scope === "node" ? nodeId : void 0, cap)) await this.onScopedSettingsChanged(scope, cap, Object.keys(patch));
+	}
+	/**
+	* Remove declared keys of one scope. A secret goes through {@link clearSecrets} — its keychain
+	* value is released exactly as there — and the emptied row is then removed; every other key is
+	* removed by an `undefined` patch (which a secret transform would read as "keep").
+	*/
+	async unsetScoped(scope, cap, keys, nodeId) {
+		assertDeclaredKeys(keys, this.scopedKeys(await this.requireScopedSchema(scope, cap)));
+		const target = scope === "node" ? nodeId : void 0;
+		const tree = this.addonSecretTree();
+		const secretKeys = keys.filter((key) => tree.has(key));
+		const plainKeys = keys.filter((key) => !tree.has(key));
+		let changed = false;
+		if (plainKeys.length > 0) {
+			const patch = Object.fromEntries(plainKeys.map((key) => [key, void 0]));
+			changed = await this.applyGlobalPatch(patch, target, cap) || changed;
+		}
+		if (secretKeys.length > 0) {
+			await this.clearSecretKeys(secretKeys, target, cap);
+			const node = normalizeNodeId(target ?? this._ctx?.kernel?.localNodeId);
+			const rows = secretKeys.map((key) => scope === "node" ? nodeScopedKey(key, node) : key);
+			if (this._secretSettings !== null) await this._secretSettings.removeClearedKeys(rows);
+			else await this._ctx?.settings?.writeAddonStore(Object.fromEntries(rows.map((row) => [row, void 0])));
+			changed = true;
+		}
+		if (changed) await this.onScopedSettingsChanged(scope, cap, [...keys]);
+	}
+	/**
+	* The hydrated form of one scope of one capability's settings (any
+	* {@link scopedSettingsOverlay} applied), or `null` when the capability declares nothing there.
+	*/
+	async getScopedSettings(scope, cap, nodeId) {
+		const schema = await this.declaredScopedSchema(scope, cap);
+		if (schema === null) return null;
+		const stored = this.narrowToScope(await this.readRawProjectedStore(nodeId, cap), schema);
+		const overlay = await this.scopedSettingsOverlay(scope, cap, nodeId);
+		return hydrateSchema(schema, overlay ? await this.overlayKeepingMarkers(stored, overlay) : stored, { inlineSecretsAsViews: true });
+	}
+	/** The OPERATOR's write of declared keys of one scope (D787 secret semantics). */
+	async updateScopedSettings(scope, cap, patch, nodeId) {
+		this._operatorWriteDepth++;
+		try {
+			await this.writeScoped(scope, cap, patch, nodeId);
+		} finally {
+			this._operatorWriteDepth--;
+		}
+	}
+	/**
+	* The effective values (`stored ?? default`) of one scope, a secret as its `set` view — never
+	* its value. `null` when the capability declares nothing for the scope.
+	*/
+	async readScopedValues(scope, cap, nodeId) {
+		const schema = await this.declaredScopedSchema(scope, cap);
+		if (schema === null) return null;
+		const form = hydrateSchema(schema, this.narrowToScope(await this.readRawProjectedStore(nodeId, cap), schema), { inlineSecretsAsViews: true });
+		return Object.fromEntries([...collectHydratedFieldValues(form)].filter(([, value]) => value !== void 0));
+	}
+	/**
 	* What the create wizard and the integration edit page render for one instance: the addon's
 	* per-instance schema when it declares one, else its global schema (what they always showed).
 	*/
@@ -8935,6 +9157,9 @@ var BaseAddon = class {
 	* a keychain (an older kernel) it writes `''`, as such code always did.
 	*/
 	async clearSecrets(keys, nodeId) {
+		await this.clearSecretKeys(keys, nodeId);
+	}
+	async clearSecretKeys(keys, nodeId, cap) {
 		const tree = this.addonSecretTree();
 		const keychain = this._ctx?.secrets !== void 0;
 		const stored = keychain ? await this.readAddonStoreWithRetry() : {};
@@ -8947,25 +9172,27 @@ var BaseAddon = class {
 			const keychainStored = tree.has(key) || collectSecretMarkerRefs(stored[key]).length > 0;
 			patch[key] = keychain && keychainStored ? SECRET_CLEAR : "";
 		}
-		await this.applyGlobalPatch(patch, nodeId);
+		await this.applyGlobalPatch(patch, nodeId, cap);
 	}
-	async applyGlobalPatch(barePatch, nodeId) {
-		await this.loadScopedSchemas();
-		const keys = this.perNodeKeys();
+	/** Resolves `true` when the write changed stored values. */
+	async applyGlobalPatch(barePatch, nodeId, cap) {
+		await this.loadScopedSchemas(cap);
+		const keys = this.perNodeKeys(cap);
 		const localNode = normalizeNodeId(this._ctx?.kernel?.localNodeId);
 		const target = normalizeNodeId(nodeId ?? this._ctx?.kernel?.localNodeId);
 		const scoped = keys.size > 0 ? scopePatch(barePatch, keys, target) : barePatch;
 		const handle = this._secretSettings;
 		if (handle !== null) {
 			const { changed } = await handle.writeAddonStore(scoped);
-			if (!changed) return;
+			if (!changed) return false;
 		} else await this._ctx?.settings?.writeAddonStore(scoped);
-		if (target !== localNode) return;
+		if (target !== localNode) return true;
 		await this.resolveConfig();
 		await this.onConfigChanged();
 		this.emitLifecycle(EventCategory.AddonUpdated, { level: "global" });
 		const legacy = this.globalSettingsSchema();
 		this.maybeAutoRestart(Object.keys(barePatch), [...legacy === null ? [] : [legacy], ...this.loadedScopedSchemas().map((entry) => entry.schema)]);
+		return true;
 	}
 	/**
 	* The set of field keys the global settings schema declares `perNode: true`
@@ -16017,20 +16244,6 @@ async function flattenNestedRecords(ports, spec) {
 		summary: { converted: rows.size }
 	};
 }
-/** The ports over one kind's records handle. */
-function flattenPortsOver(handle) {
-	return {
-		listNested: async (legacyKey) => (await handle.query({ limit: 1e3 })).records.filter((r) => legacyKey in r.data).map((r) => r.id),
-		readResolved: async (id) => {
-			const row = await handle.getResolved(id);
-			if (row === null) throw new Error("the record is gone");
-			return row.data;
-		},
-		patch: async (id, patch) => {
-			await handle.patch(id, patch);
-		}
-	};
-}
 /**
 * The addon-side ports of `moveIntegrationRowsToRecords` (planning#416). An addon runs the move
 * from its own process, so the leftover rows are reached through the migration-only door
@@ -16078,25 +16291,6 @@ function integrationRowsPortsOverApi(deps) {
 		}
 	};
 }
-function defaultIntegrationApiOver(api) {
-	return {
-		list: () => api.integrations.list.query(),
-		readLegacyIntegrationRows: (input) => api.migrations.readLegacyIntegrationRows.query(input),
-		clearLegacyIntegrationRows: (input) => api.migrations.clearLegacyIntegrationRows.mutate(input),
-		listDevices: (addonId) => api.deviceManager.listAll.query({
-			addonId,
-			projection: "slim"
-		}),
-		setDeviceIntegrationId: async (deviceId, integrationId) => {
-			await api.deviceManager.setIntegrationId.mutate({
-				deviceId,
-				integrationId
-			});
-		},
-		readDeviceHasConfig: async (deviceId) => Object.keys((await api.deviceManager.getDevice.query({ deviceId }))?.config ?? {}).length > 0,
-		readDeviceIntegrationId: async (deviceId) => (await api.deviceManager.getDevice.query({ deviceId }))?.integrationId ?? null
-	};
-}
 /**
 * The trainer contract — what the hub hands the cloud trainer and what it
 * gets back (cloud training, D805+).
@@ -45494,6 +45688,8 @@ var SettingsSchemaWithValuesSchema = object({
 });
 /** Patch object — keys are field names, values are the new field values. */
 var SettingsPatchSchema = record(string(), unknown());
+/** The scope of a scoped-settings call (D986): where the capability declared the values. */
+var ScopedSettingsScopeSchema = _enum(SCOPED_SETTINGS_SCOPES);
 /** Standard success response for update operations. */
 var SettingsUpdateResultSchema = object({ success: literal(true) });
 method(object({
@@ -45509,6 +45705,25 @@ method(object({
 	kind: "mutation",
 	auth: "admin"
 }), method(object({
+	addonId: string(),
+	cap: string(),
+	scope: ScopedSettingsScopeSchema,
+	nodeId: string().optional()
+}), SettingsSchemaWithValuesSchema.nullable()), method(object({
+	addonId: string(),
+	cap: string(),
+	scope: ScopedSettingsScopeSchema,
+	nodeId: string().optional(),
+	patch: SettingsPatchSchema
+}), SettingsUpdateResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	addonId: string(),
+	cap: string(),
+	scope: ScopedSettingsScopeSchema,
+	nodeId: string().optional()
+}), record(string(), unknown()).nullable()), method(object({
 	addonId: string(),
 	nodeId: string().optional()
 }), SettingsSchemaWithValuesSchema.nullable()), method(object({
@@ -78500,7 +78715,7 @@ var TerminalInstanceInfoSchema = object({
 	/**
 	* False while the node the instance is bound to is not in the cluster
 	* topology (forgotten, renamed, re-paired). The instance is kept; the
-	* operator re-points it with `updateInstance({ targetNodeId })`.
+	* operator re-points it on the Terminal page.
 	*/
 	nodeInCluster: boolean(),
 	profileId: string(),
@@ -78538,41 +78753,7 @@ var TerminalOutputBatchSchema = object({
 	snapshot: string().optional(),
 	events: array(TerminalOutputEventSchema).readonly()
 });
-method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalInstanceInfoSchema).readonly(), { auth: "admin" }), method(object({
-	targetNodeId: string().min(1),
-	profileId: string().min(1),
-	name: string().trim().min(1).max(160).optional(),
-	executable: string().max(1024).optional(),
-	args: array(string().max(2048)).max(64).optional(),
-	cwd: string().max(1024).optional(),
-	environment: array(string().max(4096)).max(64).optional(),
-	profileSettings: ProfileSettingsBagSchema.optional()
-}), TerminalInstanceInfoSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({
-	instanceId: string().min(1),
-	/** Re-point the instance to another node; the profile must exist there. */
-	targetNodeId: string().min(1).max(256).optional(),
-	name: string().trim().min(1).max(160).optional(),
-	executable: string().max(1024).optional(),
-	args: array(string().max(2048)).max(64).optional(),
-	cwd: string().max(1024).optional(),
-	environment: array(string().max(4096)).max(64).optional(),
-	profileSettings: ProfileSettingsBagSchema.optional()
-}), TerminalInstanceInfoSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ instanceId: string().min(1) }), _void(), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({
-	instanceId: string().min(1),
-	enabled: boolean()
-}), TerminalInstanceInfoSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(_void(), array(TerminalLegacyCameraSchema).readonly(), { auth: "admin" }), method(object({
+method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalLegacyCameraSchema).readonly(), { auth: "admin" }), method(object({
 	stableId: string().min(1),
 	name: string().trim().min(1).max(160).optional()
 }), TerminalInstanceInfoSchema, {
@@ -83392,6 +83573,20 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
+	"addonSettings.getScopedSettings": {
+		capName: "addon-settings",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
+	"addonSettings.readScopedValues": {
+		capName: "addon-settings",
+		capScope: "system",
+		addonId: null,
+		access: "view",
+		role: "admin"
+	},
 	"addonSettings.unsetStoredSettingsKeys": {
 		capName: "addon-settings",
 		capScope: "system",
@@ -83413,6 +83608,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"addonSettings.updateScopedSettings": {
+		capName: "addon-settings",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"addonWidgets.listWidgets": {
 		capName: "addon-widgets",
 		capScope: "system",
@@ -92303,27 +92505,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"terminalSession.createInstance": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
-	"terminalSession.deleteInstance": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "delete",
-		role: "admin"
-	},
-	"terminalSession.listInstances": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"terminalSession.listLegacyCameras": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -92366,20 +92547,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"terminalSession.setInstanceEnabled": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
-	"terminalSession.updateInstance": {
-		capName: "terminal-session",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"terminalSession.writeInput": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -98746,7 +98913,6 @@ function buildLinkedInstances(records, spec) {
 	});
 	return instances;
 }
-var BROKER_ROWS_MAX = 1e3;
 var STRAY_REGISTRY_ID = /^int_\d+$/;
 async function moveBrokerLinksToConnections(ports) {
 	const brokers = await ports.listBrokers();
@@ -98778,36 +98944,6 @@ async function moveBrokerLinksToConnections(ports) {
 		}
 	};
 }
-/** The ports over the two record kinds of the addon. */
-function brokerLinkPortsOver(deps) {
-	return {
-		warn: deps.warn,
-		listBrokers: async () => {
-			return (await deps.brokers.query({ limit: BROKER_ROWS_MAX })).records.map((row) => {
-				const name = row.data["name"];
-				const link = row.data["integrationId"];
-				return {
-					id: row.id,
-					name: typeof name === "string" && name.length > 0 ? name : row.id,
-					integrationId: typeof link === "string" ? link : void 0
-				};
-			});
-		},
-		readConnection: async (id) => {
-			const row = await deps.connections.get(id);
-			return row === null ? null : { brokerId: row.data.brokerId };
-		},
-		putConnection: async (id, body) => {
-			await deps.connections.put({
-				id,
-				data: body
-			}, { ifRev: 0 });
-		},
-		clearBrokerLink: async (brokerId) => {
-			await deps.brokers.patch(brokerId, { integrationId: null });
-		}
-	};
-}
 //#endregion
 //#region src/speak/constants.ts
 /** Echo speech limits and the worker restart bound (same window as CrashSupervisor). */
@@ -144132,6 +144268,7 @@ var EchoSessionRegistry = class {
 	#resolve = null;
 	#dnd = /* @__PURE__ */ new Map();
 	#volumes = /* @__PURE__ */ new Map();
+	#groupPlayers = /* @__PURE__ */ new Map();
 	setResolver(fn) {
 		this.#resolve = fn;
 	}
@@ -144170,10 +144307,35 @@ var EchoSessionRegistry = class {
 		});
 		return pending;
 	}
+	/**
+	* The player state of a speaker group, shared by its members within one poll cycle.
+	* A failed read is not kept for the next member.
+	*/
+	groupPlayer(brokerId, group, now, deviceId) {
+		const key = `${brokerId}\u0000${group.id}`;
+		const shared = this.#groupPlayers.get(key);
+		if (shared !== void 0 && now - shared.at < 25e3) return shared.pending;
+		const session = this.get(brokerId);
+		if (session === null) return Promise.reject(/* @__PURE__ */ new Error("no Echo session for this account"));
+		const pending = session.playerState(group.id, group.deviceType, deviceId);
+		this.#groupPlayers.set(key, {
+			at: now,
+			pending
+		});
+		pending.catch(() => {
+			if (this.#groupPlayers.get(key)?.pending === pending) this.#groupPlayers.delete(key);
+		});
+		return pending;
+	}
 	/** Forget the shared volume list: a list fetched before a set must not answer a poll after it. */
 	invalidateVolumes(brokerId) {
 		this.#volumes.delete(brokerId);
 	}
+	/** Forget the shared group players: a transport command or a push makes a cached group answer stale. */
+	invalidateGroupPlayers(brokerId) {
+		const prefix = `${brokerId}\u0000`;
+		for (const key of [...this.#groupPlayers.keys()]) if (key.startsWith(prefix)) this.#groupPlayers.delete(key);
+	}
 	/** Forget the shared Do Not Disturb list, for the same reason. */
 	invalidateDnd(brokerId) {
 		this.#dnd.delete(brokerId);
@@ -144189,6 +144351,7 @@ var EchoSessionRegistry = class {
 	}
 	event(brokerId, serial) {
 		this.invalidateVolumes(brokerId);
+		this.invalidateGroupPlayers(brokerId);
 		this.invalidateDnd(brokerId);
 		for (const listener of [...this.#pushListeners.get(`${brokerId}\u0000${serial}`) ?? []]) listener();
 	}
@@ -144207,6 +144370,7 @@ var EchoSessionRegistry = class {
 		this.#resolve = null;
 		this.#dnd.clear();
 		this.#volumes.clear();
+		this.#groupPlayers.clear();
 	}
 };
 function subscribe(map, key, listener) {
@@ -144249,6 +144413,11 @@ function mapEchoPlaybackState(value) {
 		default: return "idle";
 	}
 }
+/** Whether a player answer carries any playback: an active state, a text or artwork. */
+function hasPlayback(info) {
+	if (mapEchoPlaybackState(info.state) !== "idle") return true;
+	return nonEmpty(info.infoText?.title) !== null || nonEmpty(info.mainArt?.url) !== null;
+}
 function percent(value) {
 	if (typeof value !== "number" || !Number.isFinite(value)) return null;
 	return Math.round(Math.max(0, Math.min(100, value)));
@@ -144338,7 +144507,9 @@ var EchoDeviceSchema = object({
 	dnd: boolean(),
 	deviceType: string(),
 	/** The room the account files the device under, when Amazon names one. */
-	room: string().optional()
+	room: string().optional(),
+	/** Serials of the speaker groups this device belongs to (Amazon's `parentClusters`); absent when none. */
+	parentClusters: array(string()).optional()
 });
 var LoginStatusSchema = _enum(["ok", "failed"]);
 var SessionStatusSchema = object({
@@ -144567,6 +144738,8 @@ var AlexaEchoDevice = class extends BaseDevice {
 	unsubscribers = [];
 	polling = false;
 	failureLogged = false;
+	/** The name of the speaker group whose playback this Echo shows; null when it plays on its own. */
+	viaGroup = null;
 	volumeFailureLogged = false;
 	health = "ok";
 	/** When this device last wrote its volume / Do Not Disturb optimistically; a read that began earlier must not overwrite it. */
@@ -144694,9 +144867,11 @@ var AlexaEchoDevice = class extends BaseDevice {
 		}
 		const deviceType = this.amazonDeviceType !== "" ? this.amazonDeviceType : listed?.deviceType ?? "";
 		try {
-			const fromPlayer = mapPlayerInfoToStatus(await session.playerState(this.serial, deviceType, this.id), {
+			const own = await session.playerState(this.serial, deviceType, this.id);
+			const now = Date.now();
+			const fromPlayer = mapPlayerInfoToStatus(await this.withGroupPlayback(own, listed, session), {
 				online: true,
-				now: Date.now()
+				now
 			});
 			const read = await this.completeVolume(fromPlayer);
 			const kept = this.keepNewerVolume(read, readStartedAt);
@@ -144711,6 +144886,49 @@ var AlexaEchoDevice = class extends BaseDevice {
 		await this.readDoNotDisturb(readStartedAt);
 	}
 	/**
+	* A member of a playing speaker group is answered empty by its own player read while
+	* the group plays. When the member's answer carries no playback, serve the first
+	* parent group that is playing or paused (its track and artwork; the volume stays the
+	* member's own). A failed group read leaves the member's own answer.
+	*/
+	async withGroupPlayback(own, listed, session) {
+		const parents = listed?.parentClusters ?? [];
+		if (hasPlayback(own) || parents.length === 0) {
+			this.noteViaGroup(null);
+			return own;
+		}
+		for (const parentId of parents) {
+			const group = session.devices.find((device) => device.id === parentId);
+			if (group === void 0 || !group.online) continue;
+			try {
+				const groupInfo = await alexaEchoSessions.groupPlayer(this.brokerId, group, Date.now(), this.id);
+				if (groupInfo.state === "PLAYING" || groupInfo.state === "PAUSED" || groupInfo.state === "BUFFERING") {
+					this.noteViaGroup(group.name);
+					return {
+						...groupInfo,
+						volume: own.volume
+					};
+				}
+			} catch (err) {
+				this.ctx.logger.debug("alexa echo: the group player could not be read", {
+					tags: { deviceId: this.id },
+					meta: {
+						group: group.name,
+						error: err instanceof Error ? err.message : String(err)
+					}
+				});
+			}
+		}
+		this.noteViaGroup(null);
+		return own;
+	}
+	/** Log each transition into and out of "playing via a group" once. */
+	noteViaGroup(name) {
+		if (name === this.viaGroup) return;
+		this.viaGroup = name;
+		this.ctx.logger.info(name === null ? "alexa echo: no longer playing via a group" : `alexa echo: playing via group ${name}`, { tags: { deviceId: this.id } });
+	}
+	/**
 	* An idle Echo's player read carries no volume. Ask the account's volume list
 	* (shared by every Echo of the account in this cycle); a failed read leaves null.
 	*/
@@ -144782,6 +145000,7 @@ var AlexaEchoDevice = class extends BaseDevice {
 	}
 	async command(command) {
 		await this.session().npCommand(this.serial, command, this.id);
+		alexaEchoSessions.invalidateGroupPlayers(this.brokerId);
 		this.rereadSoon();
 	}
 	/**
@@ -145681,7 +145900,7 @@ function echoTargetStoreOver(records, options = {}) {
 /** The `echoTargets` setting as the legacy source: a row the migration left there is still served. */
 function legacyEchoTargetsOver(setting) {
 	return {
-		list: async () => readEchoTargets({ echoTargets: setting.readRows() }).map((row) => ({
+		list: async () => readEchoTargets({ echoTargets: await setting.readRows() }).map((row) => ({
 			id: row.id,
 			name: row.name,
 			kind: alexaTargetKind().kind,
@@ -145693,11 +145912,12 @@ function legacyEchoTargetsOver(setting) {
 			}
 		})),
 		delete: async (id) => {
-			const rest = setting.readRows().filter((row) => {
+			const rows = await setting.readRows();
+			const rest = rows.filter((row) => {
 				const parsed = alexaEchoTargetSchema.safeParse(row);
 				return !(parsed.success && parsed.data.id === id);
 			});
-			if (rest.length !== setting.readRows().length) await setting.writeRows(rest);
+			if (rest.length !== rows.length) await setting.writeRows(rest);
 		}
 	};
 }
@@ -145714,8 +145934,9 @@ function echoRowOf(target) {
 }
 /** The migration's ports over the `notify-alexa-echo` record kind. */
 function echoRecordPortsOver(records, logger) {
-	const handle = echoTargetStoreOver(records).handlesByKind().get(alexaTargetKind().kind);
-	if (handle === void 0) throw new Error("import-alexa: the Echo target record kind is not declared");
+	const [kind] = Object.values(alexaNotifyRecordKinds);
+	if (kind === void 0) throw new Error("import-alexa: the Echo target record kind is not declared");
+	const handle = records.kind(kind);
 	return {
 		readEchoRecord: async (id) => (await handle.getResolved(id))?.data ?? null,
 		writeEchoRecord: async (id, body) => {
@@ -146800,17 +147021,42 @@ async function flattenBrokerRecords(ports) {
 //#endregion
 //#region src/migrations/broker-links-to-connections.ts
 var BROKER_LINKS_TO_CONNECTIONS_ID = "import-alexa/2026-11-05-broker-links-to-connections";
+var BROKER_ROWS_MAX = 1e3;
 /** The broker records and the integration (`connections`) records of this addon. */
 function alexaBrokerLinkPorts(records, warn) {
-	return brokerLinkPortsOver({
-		brokers: records.kind({
-			name: alexaBrokersEntryKind.name,
-			declaration: alexaBrokersEntryKind.declaration,
-			schema: record(string(), unknown())
-		}),
-		connections: records.kind(alexaConnectionsEntryKind),
-		warn
+	const brokers = records.kind({
+		name: alexaBrokersEntryKind.name,
+		declaration: alexaBrokersEntryKind.declaration,
+		schema: record(string(), unknown())
 	});
+	const connections = records.kind(alexaConnectionsEntryKind);
+	return {
+		warn,
+		listBrokers: async () => {
+			return (await brokers.query({ limit: BROKER_ROWS_MAX })).records.map((row) => {
+				const name = row.data["name"];
+				const link = row.data["integrationId"];
+				return {
+					id: row.id,
+					name: typeof name === "string" && name.length > 0 ? name : row.id,
+					integrationId: typeof link === "string" ? link : void 0
+				};
+			});
+		},
+		readConnection: async (id) => {
+			const row = await connections.get(id);
+			return row === null ? null : { brokerId: row.data.brokerId };
+		},
+		putConnection: async (id, body) => {
+			await connections.put({
+				id,
+				data: body
+			}, { ifRev: 0 });
+		},
+		clearBrokerLink: async (brokerId) => {
+			await brokers.patch(brokerId, { integrationId: null });
+		}
+	};
 }
 //#endregion
 //#region src/migrations/strip-echo-target-volume-and-mode.ts
@@ -146826,7 +147072,7 @@ function strippedRow(row) {
 	return Object.fromEntries(Object.entries(row).filter(([key]) => !RETIRED_KEYS.includes(key)));
 }
 async function stripEchoTargetVolumeAndMode(ports) {
-	const rows = ports.readRows();
+	const rows = await ports.readRows();
 	const stripped = rows.filter(carriesRetiredKey).length;
 	if (stripped === 0) return {
 		outcome: "already-done",
@@ -146859,7 +147105,7 @@ async function stripEchoTargetVolumeAndMode(ports) {
 */
 var ECHO_TARGETS_TO_RECORDS_ID = "import-alexa/2026-11-06-echo-targets-to-records";
 async function moveEchoTargetsToRecords(ports) {
-	const rows = ports.readRows();
+	const rows = await ports.readRows();
 	if (rows.length === 0) return {
 		outcome: "already-done",
 		summary: { converted: 0 }
@@ -147010,6 +147256,118 @@ var BROKER_RECORD_MIGRATION_IDS = [
 	BROKER_LINKS_TO_CONNECTIONS_ID
 ];
 //#endregion
+//#region src/migrations/records-door.ts
+function positionalHandleOver(handle) {
+	return {
+		get: (id) => handle.get({ id }),
+		getResolved: (id) => handle.getResolved({ id }),
+		put: (input, opts) => handle.put({
+			...input,
+			...opts?.ifRev === void 0 ? {} : { ifRev: opts.ifRev }
+		}),
+		patch: (id, partial) => handle.patch({
+			id,
+			partial
+		}),
+		delete: (id) => handle.delete({ id }),
+		query: ({ limit }) => handle.query({ limit })
+	};
+}
+/** The records door of the migration API, in the shape the migrations call. */
+function positionalRecordsOver(api) {
+	return { kind: (definition) => positionalHandleOver(api.records.kind(definition)) };
+}
+//#endregion
+//#region src/migrations/ports.ts
+var NESTED_MAX = 1e3;
+/** The registry list and the migration-only rows door, over the migration API. */
+function integrationRowsApiOver(api) {
+	return {
+		list: async () => (await api.integrations.list({})).integrations,
+		readLegacyIntegrationRows: (input) => api.legacyRows.read(input),
+		clearLegacyIntegrationRows: (input) => api.legacyRows.clear(input)
+	};
+}
+/** The keychain handle of the migration API: resolve and delete, owner-scoped by the transport. */
+function secretsOver(api) {
+	return {
+		resolve: async (refs) => {
+			const { values } = await api.secrets.resolve({ refs: [...refs] });
+			const out = {};
+			for (const ref of refs) {
+				const value = values[ref];
+				out[ref] = value === null || value === void 0 ? { kind: "missing" } : {
+					kind: "value",
+					value,
+					version: 0
+				};
+			}
+			return out;
+		},
+		delete: async (refs) => (await api.secrets.delete({ refs: [...refs] })).deleted
+	};
+}
+/** The Echo targets kept in the addon's `echoTargets` setting, read and written as stored. */
+function echoSettingPortsOver(api) {
+	return {
+		readRows: async () => {
+			const { store } = await api.settings.read({});
+			const rows = store["echoTargets"];
+			return Array.isArray(rows) ? rows : [];
+		},
+		writeRows: async (rows) => {
+			await api.settings.write({ patch: { echoTargets: [...rows] } });
+		}
+	};
+}
+/** The broker rows' flatten ports over the records door. */
+function flattenPortsOverDoor(records) {
+	const handle = records.kind({
+		name: alexaBrokersEntryKind.name,
+		declaration: alexaBrokersEntryKind.declaration,
+		schema: record(string(), unknown())
+	});
+	return {
+		listNested: async (legacyKey) => (await handle.query({ limit: NESTED_MAX })).records.filter((row) => legacyKey in row.data).map((row) => row.id),
+		readResolved: async (id) => {
+			const row = await handle.getResolved(id);
+			if (row === null) throw new Error("the record is gone");
+			return row.data;
+		},
+		patch: async (id, patch) => {
+			await handle.patch(id, patch);
+		}
+	};
+}
+/**
+* The catalogue's ports over {@link MigrationApiV1}, and nothing else (planning#447): the addon's
+* own settings store (the Echo rows), its keychain handle, the legacy integration rows door and its
+* broker, connection and Echo target records.
+*/
+function alexaPortsOver(api) {
+	const records = positionalRecordsOver(api);
+	const warn = (message) => {
+		api.log.warn({ message });
+	};
+	return {
+		...echoSettingPortsOver(api),
+		...flattenPortsOverDoor(records),
+		...alexaBrokerLinkPorts(records, warn),
+		...echoRecordPortsOver(records, { warn: (message, extras) => {
+			api.log.warn({
+				message,
+				...extras?.meta === void 0 ? {} : { meta: extras.meta }
+			});
+		} }),
+		...alexaIntegrationRowsPorts({
+			api: integrationRowsApiOver(api),
+			records,
+			secrets: secretsOver(api),
+			warn
+		})
+	};
+}
+//#endregion
 //#region src/speak/icon-routes.ts
 var ALEXA_ICON_SVG = "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\" fill=\"#00CAFF\"><title>Amazon Alexa</title><path d=\"M12 0C5.37 0 0 5.37 0 12C0 18.09 4.53 23.11 10.4 23.9V21.5A1.59 1.59 0 0 0 9.32 19.97A8.41 8.41 0 0 1 3.6 11.8A8.37 8.37 0 0 1 12.09 3.6A8.4 8.4 0 0 1 20.4 12.31L20.39 12.38A8.68 8.68 0 0 1 20.36 12.76C20.36 12.83 20.35 12.9 20.34 12.96C20.34 13.04 20.33 13.12 20.32 13.19L20.3 13.29C19.27 20.07 10.45 23.87 10.4 23.9C10.92 23.97 11.46 24 12 24C18.63 24 24 18.63 24 12S18.63 0 12 0Z\"/></svg>";
 /** One day; the mark is immutable per addon version. */
@@ -147129,7 +147487,7 @@ var AlexaImportAddon = class extends BaseDeviceProvider {
 			infoOf: (id) => this.registry?.get(id) ?? null,
 			onChanged: (id) => this.syncBrokerRuntime(id)
 		});
-		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS, this.migrationPorts(records)), { only: BROKER_RECORD_MIGRATION_IDS });
+		await this.runMigrations(ADDON_MIGRATIONS, (api) => alexaPortsOver(api), { only: BROKER_RECORD_MIGRATION_IDS });
 		this.activeBrokers = await this.loadPersistedBrokers();
 		await this.adoptSessionFiles();
 		this.registry = new AlexaBrokerRegistry(this.ctx.logger, {
@@ -147170,7 +147528,7 @@ var AlexaImportAddon = class extends BaseDeviceProvider {
 			deviceCode: this.deviceCodeLogin,
 			commitCookie: (input) => this.commitCapturedCookie(input)
 		}), ...speakIconRoutes()];
-		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS, this.migrationPorts(records)), { only: ADDON_MIGRATIONS.map((m) => m.meta.id).filter((id) => !BROKER_RECORD_MIGRATION_IDS.includes(id)) });
+		await this.runMigrations(ADDON_MIGRATIONS, (api) => alexaPortsOver(api), { only: ADDON_MIGRATIONS.map((m) => m.meta.id).filter((id) => !BROKER_RECORD_MIGRATION_IDS.includes(id)) });
 		const echoStore = echoTargetStoreOver(records, {
 			logger: this.ctx.logger,
 			legacy: legacyEchoTargetsOver(this.echoSettingPorts())
@@ -147221,29 +147579,15 @@ var AlexaImportAddon = class extends BaseDeviceProvider {
 			}
 		] };
 	}
-	/** The `echoTargets` setting, read and written as the migration and the legacy store see it. */
+	/**
+	* The `echoTargets` setting the legacy Echo store still serves: the addon's own durable state
+	* under the key it was always stored at, so a row an older release left there is still read.
+	*/
 	echoSettingPorts() {
+		const rows = this.state("echoTargets", array(unknown()), []);
 		return {
-			readRows: () => Array.isArray(this.config.echoTargets) ? this.config.echoTargets : [],
-			writeRows: async (rows) => {
-				await this.updateGlobalSettings({ echoTargets: [...readEchoTargets({ echoTargets: rows })] });
-			}
-		};
-	}
-	migrationPorts(records) {
-		const secrets = this.ctx.secrets;
-		if (secrets === void 0) throw new Error("import-alexa: ctx.secrets is required");
-		return {
-			...this.echoSettingPorts(),
-			...flattenPortsOver(records.kind(alexaBrokersEntryKind)),
-			...alexaBrokerLinkPorts(records, (message) => this.ctx.logger.warn(message)),
-			...echoRecordPortsOver(records, this.ctx.logger),
-			...alexaIntegrationRowsPorts({
-				api: defaultIntegrationApiOver(this.ctx.api),
-				records,
-				secrets,
-				warn: (message) => this.ctx.logger.warn(message)
-			})
+			readRows: () => rows.get(),
+			writeRows: (next) => rows.set([...readEchoTargets({ echoTargets: next })])
 		};
 	}
 	/** One provider over the two record kinds: the account (broker) and the integrations using it. */