@camstack/addon-import-alexa 0.2.196 → 0.2.198

package/dist/addon.js

@@ -48,1194 +48,6 @@ node_fs = __toESM(node_fs, 1);
 let node_child_process = require("node:child_process");
 require("node:zlib");
 let node_url = require("node:url");
-//#region ../types/dist/event-category-78tcBemo.mjs
-var EventCategory = /* @__PURE__ */ function(EventCategory) {
-	EventCategory["SystemBoot"] = "system.boot";
-	EventCategory["SystemAddonsReady"] = "system.addons-ready";
-	EventCategory["SystemRestarting"] = "system.restarting";
-	/**
-	* Fired exactly once after the hub finishes booting following a
-	* restart that was triggered by `RestartCoordinator` (today: framework
-	* live-update). Payload is the marker that was on disk at boot
-	* (`PendingRestartMarkerPayload`); admin UI listens for it to display a
-	* success toast describing what changed.
-	*
-	* Spec: docs/superpowers/specs/2026-05-14-framework-live-update-design.md
-	*/
-	EventCategory["SystemRestartCompleted"] = "system.restart-completed";
-	/**
-	* The hub reissued its own TLS certificate at boot (`ensureTlsCert`).
-	* Emitted only when the material on disk actually changed, so an
-	* operator who trusted the old certificate by hand is told rather than
-	* discovering it as a browser error. Payload `TlsCertChangedPayload`.
-	*
-	* Rule: docs/decisions/adr-0227-*.md
-	*/
-	EventCategory["SystemTlsCertChanged"] = "system.tls-cert-changed";
-	/**
-	* A newer addon or server-root package version was found by the
-	* authoritative registry check. Emitted once when any observed
-	* `latestVersion` changes (or a package/node first appears behind);
-	* the payload carries the full currently-available list. Repeated
-	* polling of the same latests is silent.
-	*/
-	EventCategory["UpdateAvailable"] = "update.available";
-	/**
-	* Readiness transition for a capability provider. Every producer emits
-	* this event on `onInitialize` completion, `onDestroy`, and
-	* `$node.reconnect`; every consumer that needs to gate on a cross-process
-	* cap subscribes via the kernel's readiness module (`awaitReady` /
-	* `onReadyState`) instead of polling. Payload is
-	* `SystemReadyStatePayload` — see event-bus.ts.
-	*/
-	EventCategory["SystemReadyState"] = "system.ready-state";
-	EventCategory["AddonStarted"] = "addon.started";
-	EventCategory["AddonStopped"] = "addon.stopped";
-	EventCategory["AddonRestarted"] = "addon.restarted";
-	EventCategory["AddonUpdated"] = "addon.updated";
-	EventCategory["AddonInstalled"] = "addon.installed";
-	EventCategory["AddonUninstalled"] = "addon.uninstalled";
-	EventCategory["AddonCrashed"] = "addon.crashed";
-	/**
-	* A RUNNER the D6 crash circuit-breaker gave up on — terminal.
-	*
-	* `AddonCrashed` is the routine, self-healing fact ("it crashed; it is being
-	* respawned"); this is the one that never resolves itself. Emitted exactly
-	* once per trip, by `process-service.ts`, carrying the node, the runner, the
-	* addons it hosted and the crash count that tripped the breaker.
-	*
-	* It exists because a runner marked terminally `failed` used to be SILENT:
-	* on 2026-08-18 the `recorder` runner died of three unhandled ffmpeg spawn
-	* errors, the breaker stopped respawning it (correctly), `/health` kept
-	* returning 200, and fleet-wide recording was gone for 3h15 before the
-	* operator's phone told him. The Notification Center's system-event intake
-	* consumes this category and maps it to the `addon-crash-loop` kind.
-	*/
-	EventCategory["AddonRunnerFailed"] = "addon.runner-failed";
-	/**
-	* A runner whose addon refused to start with a typed reason (D877) - parked
-	* in `refused`, never counted by the crash breaker, retried on operator
-	* action. One event per refusal.
-	*/
-	EventCategory["AddonRunnerRefused"] = "addon.runner-refused";
-	/**
-	* A runner settled on a state (D877): `running` (READY), `crashed`, `failed` or
-	* `refused`. In-process telemetry for the boot check (re-evaluate while any
-	* runner is still pending) and the alert centre (close a recovered runner).
-	*/
-	EventCategory["ProcessStateChanged"] = "process.state-changed";
-	/**
-	* The node's one-shot runner boot check (D877): planned runners against the
-	* process service, `degraded` when any is failed, refused or missing. The
-	* alert centre turns it into one critical alert.
-	*/
-	EventCategory["SystemRunnerCheck"] = "system.runner-check";
-	/**
-	* An alert EPISODE opened or closed, emitted by the alert centre for alerts
-	* of severity `critical` or `error` (`AlertEpisodePayload`). The alert
-	* centre sends no notification of its own: Notification Center turns this
-	* into the `alert-critical` / `alert-error` / `alert-critical-resolved`
-	* system-event kinds, and reconciles from the alerts store because a bus
-	* event may be dropped (D8, D11).
-	*/
-	EventCategory["AlertEpisode"] = "alert.episode";
-	EventCategory["AddonError"] = "addon.error";
-	EventCategory["AddonPageReady"] = "addon.page-ready";
-	EventCategory["AddonWidgetReady"] = "addon.widget-ready";
-	/**
-	* Addon failed to load (import or initialize). Emitted by the kernel's
-	* AddonHealthMonitor only AFTER the boot grace period ends — failures
-	* during the first 5 minutes are silently retried without alerting
-	* (slow-starting addons must have time to come up). Post-grace, this
-	* event is emitted exactly once per failure-streak; AlertCenter
-	* consumes it to create a persistent operator-visible alert.
-	*
-	* Payload: `{ packageName, addonId?, error: { message, stack }, retryCount, nextRetryAt }`.
-	*/
-	EventCategory["AddonLoadFailed"] = "addon.load-failed";
-	/**
-	* A keychain value was stored or removed (D787). Carries the ref, its
-	* owner and the new version — NEVER the value. A process holding the ref
-	* drops its cached copy and the owning `BaseAddon` re-resolves its config.
-	* Telemetry (D8): a process that misses it still revalidates by version.
-	*/
-	EventCategory["KeychainChanged"] = "keychain.changed";
-	/**
-	* Addon recovered from a previous failure. Emitted when an addon
-	* transitions from `failed` back to `healthy` (typically via the
-	* monitor's auto-retry loop, or after manual `addons.retryLoad`).
-	* AlertCenter dismisses the corresponding `AddonLoadFailed` alert
-	* on this event.
-	*/
-	EventCategory["AddonLoadRecovered"] = "addon.load-recovered";
-	/**
-	* An addon is RUNNING although its installed package is below what the
-	* running server requires (`camstack.requires.addons` of the server, or the
-	* addon's own `requires.server`). Raised once per streak by the unsupported-
-	* addon tracker, on the hub and on agents; AlertCenter turns it into one
-	* operator alert per node and package. The addon is never held back for it.
-	*
-	* Payload: `{ packageName, addonId, nodeId, installedVersion, requiredMinimum, serverVersion, unmet }`.
-	*/
-	EventCategory["AddonUnsupportedVersion"] = "addon.unsupported-version";
-	/**
-	* The package of an {@link AddonUnsupportedVersion} alert reached a supported
-	* version, or is no longer installed on the node. AlertCenter dismisses the matching alert.
-	*
-	* Payload: `{ packageName, addonId, nodeId }`.
-	*/
-	EventCategory["AddonUnsupportedResolved"] = "addon.unsupported-resolved";
-	/**
-	* Monitor scheduled the next retry for a failed addon. Transient —
-	* surfaced to the UI for live-updating the "next retry in Ns"
-	* countdown on the Addons page row, NOT persisted as an alert.
-	*/
-	EventCategory["AddonRetryScheduled"] = "addon.retry-scheduled";
-	/**
-	* A liveness invariant of this node is false — it has no devices, every
-	* camera is offline, or a camera that was recording has stopped producing
-	* segments. Emitted by the `liveness-monitor` builtin, once per fault (the
-	* `findingId` is stable across ticks), only after its boot grace period.
-	* AlertCenter raises a persistent operator-visible alert.
-	*
-	* It exists because on 2026-08-03 the hub ran four hours with zero devices
-	* and zero recordings while every surface stayed quiet.
-	*
-	* Payload: `{ findingId, severity, title, message, deviceId? }`.
-	*/
-	EventCategory["SystemLivenessFailed"] = "system.liveness-failed";
-	/**
-	* A previously reported liveness fault is true again. AlertCenter dismisses
-	* the matching `SystemLivenessFailed` alert.
-	*
-	* Payload: `{ findingId }`.
-	*/
-	EventCategory["SystemLivenessRecovered"] = "system.liveness-recovered";
-	/**
-	* Monitor is attempting to reload a failed addon NOW. UI uses this
-	* to show a spinner during the retry attempt. Same transient nature
-	* as AddonRetryScheduled.
-	*/
-	EventCategory["AddonRetryAttempting"] = "addon.retry-attempting";
-	EventCategory["DeviceRegistered"] = "device.registered";
-	EventCategory["DeviceUnregistered"] = "device.unregistered";
-	EventCategory["DeviceEnabled"] = "device.enabled";
-	EventCategory["DeviceDisabled"] = "device.disabled";
-	EventCategory["DeviceSettingsUpdated"] = "device.settings-updated";
-	/**
-	* Emitted when the set of native capability providers bound to a device
-	* changes — e.g. an addon registers a new native cap via
-	* `DeviceContext.registerNativeCap`, or all native bindings for a device
-	* are cleared on removal. Hub consumers re-resolve device-proxy routes
-	* when this fires.
-	*/
-	EventCategory["DeviceBindingsChanged"] = "device.bindings-changed";
-	/**
-	* Emitted when the operator-organisational meta surface changes
-	* (`name` / `location` / `disabled`). Payload: `{deviceId, field,
-	* value}`. Live consumers (UI device list, alert center) react
-	* without polling. Distinct from `DeviceSettingsUpdated` which
-	* fires on hardware-config changes (host/port/credentials/etc).
-	*/
-	EventCategory["DeviceMetaChanged"] = "device.meta-changed";
-	/**
-	* Emitted by `BaseDevice.updateSourceInfo()` after a successful patch
-	* to the device's upstream-system identity / rendering envelope. The
-	* full new SourceInfo travels in the payload so cross-process listeners
-	* (UI, export adapters) don't need to re-read the meta blob.
-	*
-	* Payload: `{deviceId, sourceInfo}`.
-	*
-	* Distinct from `DeviceMetaChanged` which covers the operator-edited
-	* surface (`name` / `location` / `disabled`). The two share the
-	* persistence layer (both ride on `device-manager.setMetadata` for
-	* SourceInfo, or `setName`/`setLocation`/`setDisabled` for the meta
-	* fields) but consumers care about different subsets.
-	*/
-	EventCategory["DeviceSourceInfoChanged"] = "device.source-info-changed";
-	/**
-	* Emitted by DeviceStreamWiringService after a successful
-	* `stream-broker.registerDeviceStreams` call. Payload includes
-	* deviceId — consumers look up the full registered device info via
-	* `brokerManager.getRegisteredDevice(deviceId)`.
-	*
-	* Replaces the legacy `StreamRouterService.onDeviceRegistered` callback.
-	*/
-	EventCategory["DeviceStreamsRegistered"] = "device.streams-registered";
-	/**
-	* Device-level "fully provisioned" signal — the EXPORT trigger. Emitted once
-	* a device's persisted export-relevant shape (its `DeviceFeature` set) is
-	* established or changes, carrying `{deviceId, fingerprint, generation}`.
-	* Export adapters (Alexa / HAP) react to THIS instead of the chatty per-cap
-	* `DeviceBindingsChanged`, turning a boot's incomplete→complete trickle into
-	* one clean delta. `fingerprint` is `canonicalDeviceFingerprint(shape)`.
-	*
-	* Spec: docs/superpowers/specs/2026-06-01-alexa-hap-export-reconciler-design.md
-	*/
-	EventCategory["DeviceProvisioned"] = "device.provisioned";
-	/**
-	* Fires once when a device's initial feature-probe completes successfully
-	* (lastProbedAt 0→>0); exported shape is now stable. Telemetry (may be
-	* dropped) — consumers MUST also gate on the device record's `probed` flag.
-	*/
-	EventCategory["DeviceReady"] = "device.ready";
-	EventCategory["IntegrationEnabled"] = "integration.enabled";
-	EventCategory["IntegrationDisabled"] = "integration.disabled";
-	EventCategory["IntegrationDeleted"] = "integration.deleted";
-	/** Emitted when a broker connection's status flips (connected /
-	*  disconnected / error). Carries `{ brokerId, status, error? }`. */
-	EventCategory["BrokerStatusChanged"] = "broker.status-changed";
-	/** Emitted for every subscription-matched message routed by a
-	*  broker provider. Carries `{ brokerId, subscriptionId, key, payload }`.
-	*  Consumers filter by `brokerId` + `subscriptionId` in the handler. */
-	EventCategory["BrokerMessage"] = "broker.message";
-	EventCategory["ProviderStarted"] = "provider.started";
-	EventCategory["ProviderStopped"] = "provider.stopped";
-	EventCategory["ProcessCrashed"] = "process.crashed";
-	EventCategory["ProcessRestartScheduled"] = "process.restart_scheduled";
-	EventCategory["ProcessRestarted"] = "process.restarted";
-	/**
-	* The SET of storage locations changed — one was created, edited, enabled,
-	* disabled or deleted through the location instances or the forced-delete action.
-	*
-	* Telemetry, not a transaction (D8/D11): every consumer that re-resolves on
-	* it must also converge on its own periodic path, because a dropped event
-	* must not leave a node writing to yesterday's disk set forever. It exists
-	* because there was NO signal at all — an operator who added a second
-	* recordings disk in the admin UI got nothing, and the recorder kept its
-	* resolved locations until something else happened to re-resolve them
-	* (D387). Payload `StorageLocationsChangedPayload`.
-	*/
-	EventCategory["StorageLocationsChanged"] = "storage.locations-changed";
-	EventCategory["RecordingStarted"] = "recording.started";
-	EventCategory["RecordingStopped"] = "recording.stopped";
-	EventCategory["RecordingError"] = "recording.error";
-	EventCategory["RecordingHealthDegraded"] = "recording.health.degraded";
-	/** Recording enabled but no segment finalized for the NC stall window. */
-	EventCategory["RecordingHealthStalled"] = "recording.health.stalled";
-	/** Recovery from {@link RecordingHealthStalled}. */
-	EventCategory["RecordingHealthOk"] = "recording.health.ok";
-	EventCategory["RecordingStorageCritical"] = "recording.storage.critical";
-	/** Free space on a storage location crossed the warn bar. */
-	EventCategory["StorageLocationLow"] = "storage.location.low";
-	/** Free space at/under the critical bar, or capacity probe failed (`null`). */
-	EventCategory["StorageLocationCritical"] = "storage.location.critical";
-	/** Recovery from low/critical on a storage location. */
-	EventCategory["StorageLocationOk"] = "storage.location.ok";
-	EventCategory["RecordingSegmentWritten"] = "recording.segment.written";
-	EventCategory["RecordingPolicyFallback"] = "recording.policy.fallback";
-	EventCategory["RecordingRetentionCompleted"] = "recording.retention.completed";
-	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
-	*  progress bar the client reconciles via `recordingExport.getExport`. */
-	EventCategory["RecordingExportProgress"] = "recording.export.progress";
-	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
-	EventCategory["RecordingExportFailed"] = "recording.export.failed";
-	EventCategory["DetectionEvent"] = "detection.event";
-	EventCategory["SessionTrackNew"] = "session.track.new";
-	EventCategory["SessionTrackExpired"] = "session.track.expired";
-	EventCategory["BenchmarkProgress"] = "benchmark.progress";
-	EventCategory["PlatformProbePhase"] = "platform-probe.phase";
-	EventCategory["PipelineProgress"] = "pipeline.progress";
-	/** Per-frame execution trace emitted by the pipeline executor for live observability. */
-	EventCategory["PipelineTrace"] = "pipeline.trace";
-	/**
-	* Raw inference output emitted by `addon-pipeline-runner` after running the
-	* detection pipeline on a frame. Carries the `FrameResult` (with
-	* `detections[]`, `width`/`height`, timing debug) — never the frame
-	* buffer itself. Hub-side consumers (analysis pipeline, class filters,
-	* notifications) subscribe to this and re-emit `detection.result` after
-	* post-processing.
-	*/
-	EventCategory["PipelineInferenceResult"] = "pipeline.inference-result";
-	/**
-	* Camera lifecycle event emitted by `addon-pipeline-orchestrator` when it
-	* assigns or unassigns a camera to/from an agent. Carries no frame data;
-	* pure observability for UI dashboards and metrics consumers.
-	*/
-	EventCategory["PipelineCameraAssigned"] = "pipeline.camera-assigned";
-	EventCategory["PipelineCameraUnassigned"] = "pipeline.camera-unassigned";
-	/**
-	* A node the orchestrator would otherwise place cameras on has NO usable
-	* inference device: the operator enabled one or more accelerators there and
-	* the live probe reports every one of them unavailable. Emitted once per
-	* TRANSITION into that state (never per dispatch), and the node is dropped
-	* from the placement candidate set for as long as it holds.
-	*
-	* This exists because the state was previously invisible: agent-a
-	* absorbed 283k inference errors in a day while still being handed cameras,
-	* and nothing in the system said so.
-	*
-	* A node with no accelerators configured at all is NOT this — its devices
-	* are `disabled`, not `unavailable`, and the runner's default CPU pool
-	* serves it exactly as before.
-	*/
-	EventCategory["PipelineNodeInferenceUnavailable"] = "pipeline.node-inference-unavailable";
-	/**
-	* A camera has an OPEN detection session and has produced no detection at
-	* all for longer than the blind threshold — the camera is being decoded and
-	* inferred and is returning nothing. Emitted once per transition into blind,
-	* per camera.
-	*
-	* The failure it reports: a 1h43 detection blackout on the entrance camera
-	* that nobody noticed, because "a camera that detects nothing" and "a quiet
-	* camera" produce byte-identical silence.
-	*/
-	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
-	/**
-	* A camera's motion source has fired constantly with no subject for an hour
-	* (motion duty or session count over the bar, zero detections) — it is not
-	* blind, its motion zones or sensitivity want tuning (D907). Paired with
-	* {@link PipelineMotionCalm}.
-	*/
-	EventCategory["PipelineMotionNoisy"] = "pipeline.motion-noisy";
-	/** The recovery edge of {@link PipelineMotionNoisy}: the motion fell back, or a detection arrived. */
-	EventCategory["PipelineMotionCalm"] = "pipeline.motion-calm";
-	/**
-	* A camera's package LLM confirm has failed closed three times in a row
-	* (D931, 2026-10-26). One edge per camera until
-	* {@link PipelinePackageLlmAnswered}.
-	*/
-	EventCategory["PipelinePackageLlmSilent"] = "pipeline.package-llm-silent";
-	/** The recovery edge of {@link PipelinePackageLlmSilent}: a confirm returned yes or no. */
-	EventCategory["PipelinePackageLlmAnswered"] = "pipeline.package-llm-answered";
-	/**
-	* Per-camera pipeline config was mutated by the orchestrator
-	* (a settings change via `setAgentInferenceDevices` /
-	* `setCameraStepToggle` / `setCameraStepSettings`). Orchestrator
-	* subscribes to its own emission to hot-reload the assigned runner
-	* via `attachCamera` so the next frame executes against the new
-	* engine/steps without waiting for a rebalance or the next
-	* `DeviceStreamsRegistered` cycle.
-	*/
-	EventCategory["PipelineCameraUpdated"] = "pipeline.camera-updated";
-	/**
-	* The cluster camera-source OWNER changed (`clusterRoles.ingestNode`).
-	* Emitted by addon-pipeline-orchestrator whenever it (re)derives node
-	* capabilities — at boot, on agent online/offline, and on an ingest-node
-	* flip. Carries the resolved `ownerNodeId`. The stream-broker consumes it to
-	* keep its ingest-owner-gate decision current WITHOUT a per-`ensureBroker`
-	* cross-process `getIngestOwner` query (push the authority's decision instead
-	* of polling it on the hot path). Idempotent state — re-emitted on every
-	* topology change, so a dropped event self-heals on the next one (plus the
-	* broker's long backstop reconcile query).
-	*/
-	EventCategory["PipelineIngestOwnerChanged"] = "pipeline.ingest-owner-changed";
-	/**
-	* Periodic snapshot of per-node pipeline-runner load
-	* (`RunnerLocalLoad`). Emitted ~1Hz by every runner so UI dashboards
-	* subscribe instead of polling `pipelineRunner.getLocalLoad`.
-	* `nodeId` carried in the payload + on `event.source.nodeId`.
-	*/
-	EventCategory["PipelineRunnerLoadSnapshot"] = "pipeline.runner-load-snapshot";
-	/**
-	* Periodic snapshot of per-camera pipeline metrics (`CameraMetrics`
-	* + `deviceId` + `nodeId`). Emitted ~1Hz by every runner for each
-	* attached camera. UI subscribes to drive overlay phase / fps /
-	* inference time without polling `getCameraMetrics`.
-	*/
-	EventCategory["PipelineCameraMetricsSnapshot"] = "pipeline.camera-metrics-snapshot";
-	/**
-	* Periodic snapshot of stream-broker per-broker statistics (input
-	* fps, decoded fps, bitrate, codec). Emitted ~1Hz by every
-	* stream-broker process for each active broker so the UI can drive
-	* the Stream / Cluster dashboards without polling
-	* `streamBroker.listAllProfileSlots` and friends.
-	*/
-	EventCategory["StreamBrokerMetricsSnapshot"] = "stream-broker.metrics-snapshot";
-	/**
-	* Cap event fired by `stream-broker` when a profile slot enters
-	* "demanded" state — a cam stream has been assigned and at least one
-	* consumer (RTSP restream, decoded subscriber, WebRTC session, …) is
-	* present. Camera-provider addons (Reolink Baichuan push, …)
-	* subscribe to this category to start their underlying transport
-	* lazily. Payload: `{ deviceId, camStreamId, profile }`.
-	*/
-	EventCategory["StreamBrokerOnCamStreamDemand"] = "stream-broker.onCamStreamDemand";
-	/**
-	* Cap event fired by `stream-broker` when the last consumer leaves a
-	* previously-demanded cam stream. Providers tear down their
-	* underlying transport on receipt. Payload: `{ deviceId, camStreamId }`.
-	*/
-	EventCategory["StreamBrokerOnCamStreamIdle"] = "stream-broker.onCamStreamIdle";
-	/**
-	* Cap event fired by `stream-broker` when a broker fails to dial a
-	* managed-loopback source (today: `pull-rfc4571`) and the publisher
-	* needs to refresh the cached URL. The lib's TCP server idle-tears-down
-	* on its own schedule, so a re-publish with a fresh `host:port` is the
-	* only way to keep the broker dialable. Camera providers (Reolink
-	* Baichuan native, …) subscribe and respond by re-running their publish
-	* pipeline.
-	* Payload: `{ deviceId, camStreamId, brokerId }`.
-	*/
-	EventCategory["StreamBrokerOnRequestStreamSourceRefresh"] = "stream-broker.onRequestStreamSourceRefresh";
-	/**
-	* A camera provider changed a device's stream parameters (codec /
-	* resolution / bitrate / a stream added or removed). A LOW-LATENCY NUDGE
-	* for the stream-broker's catalog reconcile: it carries NO authoritative
-	* data — the broker re-PULLS that device's `stream-catalog` cap on receipt
-	* (the 30s reconcile poll is the backstop if this nudge is dropped). Emitted
-	* by providers from `stream-params.setProfile`. Payload: `{ deviceId }`.
-	*/
-	EventCategory["StreamParamsChanged"] = "stream-params.changed";
-	/**
-	* Generic per-device runtime-state change. Fired by `device-manager`
-	* whenever a persisted slice in any cap's `runtimeState` shape
-	* mutates. Payload: `{deviceId, capName, slice}`. Subscribers are
-	* the `deviceState` cap router (cross-process listeners) and the
-	* deviceProxy reactive bindings (`device.state.<capName>.value`).
-	* Cap-specific events (`battery.onStatusChanged`, …) still fire
-	* — they're authoritative for callers that want a typed payload
-	* without filtering on `capName`.
-	*/
-	EventCategory["DeviceStateChanged"] = "device.state-changed";
-	/**
-	* The NATIVE shadow of a cap a composition has claimed fields of moved
-	* (D663). Payload: `{ deviceId, capName, native }` — what the provider
-	* wrote, BEFORE the owned fields are overlaid. Owner-only (D224): it is for
-	* the composer's native self-reads, and the public event routers refuse it
-	* (`isOwnerOnlyEventCategory`) so no consumer surface ever shows a second
-	* truth beside the merged `DeviceStateChanged.slice`. Emitted only under a
-	* `replace` claim, one per native write of that cap.
-	*/
-	EventCategory["DeviceNativeShadowChanged"] = "device.native-shadow-changed";
-	/**
-	* Frame occupancy for a camera CHANGED — a tracked object was gained or
-	* lost. Carries `{ deviceId, totalObjects, byClass, zones }`.
-	*
-	* Emitted only on a change, so a steady scene is silent. It exists so a
-	* client can stop polling `zoneAnalytics.getCurrentSnapshot`: that was the
-	* one live badge with no push signal at all, and it cost a request every
-	* four seconds per visible camera.
-	*
-	* Like every event it is telemetry and may be dropped ([D8]) — a consumer
-	* keeps a slow reconcile rather than trusting it alone.
-	*/
-	EventCategory["ZoneAnalyticsOccupancyChanged"] = "zone-analytics.occupancy-changed";
-	/**
-	* Cap event fired by every device that registers the `battery`
-	* capability. Mirrors the cap definition's `onStatusChanged`. Carries
-	* `{ deviceId, status: BatteryStatus }`. Subscribers (alert center,
-	* snapshot wrapper, UI) react to charge/sleep transitions without
-	* polling `batteryCapability.getStatus`.
-	*/
-	EventCategory["BatteryOnStatusChanged"] = "battery.onStatusChanged";
-	/**
-	* Cap event fired by every device that registers the `network-link`
-	* capability. Mirrors the cap definition's `onStatusChanged`. Carries
-	* `{ deviceId, status: NetworkLinkStatus }` — a link switch or a signal
-	* reading that moved.
-	*/
-	EventCategory["NetworkLinkOnStatusChanged"] = "network-link.onStatusChanged";
-	/**
-	* Emitted by the battery cap provider WHEN `wakeForStream` enters the
-	* "wake in progress" window — between the Baichuan wake-up issue and
-	* the camera's first dialed-back RTP packet. The stream-broker
-	* manager subscribes to flip the per-broker placeholder reason to
-	* `'waking'` so viewers see a labelled "WAKING UP" tile instead of
-	* the generic `'reconnecting'` frame. Carries `{ deviceId }`. The
-	* complementary "wake complete" signal is the existing
-	* `BatteryOnStatusChanged { sleeping: false }` event.
-	*/
-	EventCategory["BatteryOnWakeStarted"] = "battery.onWakeStarted";
-	/**
-	* Cap event fired by every device that registers the `doorbell`
-	* capability. Mirrors `doorbellCapability.events.onPressed`. Carries
-	* `{ deviceId, timestamp }`. Operators consuming the UI subscribe
-	* here to render transient ring toasts and a "Recent presses" row
-	* on the device detail page.
-	*/
-	EventCategory["DoorbellOnPressed"] = "doorbell.onPressed";
-	/** Mirrors `runningStateCapability.events.onStarted`. */
-	EventCategory["RunningStarted"] = "running.started";
-	/** Mirrors `runningStateCapability.events.onFinished`. */
-	EventCategory["RunningFinished"] = "running.finished";
-	/** Mirrors `deviceRunsCapability.events.onRunOpened` - a durable run record opened. */
-	EventCategory["DeviceRunOpened"] = "device-run.opened";
-	/** Mirrors `deviceRunsCapability.events.onRunClosed` - a durable run record closed. */
-	EventCategory["DeviceRunClosed"] = "device-run.closed";
-	/**
-	* Cap event fired by every device that registers the `event-emitter`
-	* capability. Mirrors `eventEmitterCapability.events.onEvent`. Carries
-	* `{ deviceId, eventType, data, timestamp, seq }` — the device's EXACT
-	* declared event verbatim (NO normalization). Subscribers (UI event
-	* stream, advanced-notifier rules) react to fired events without
-	* holding a cap reference.
-	*/
-	EventCategory["EventEmitted"] = "event-emitter.event";
-	/**
-	* Periodic snapshot of the per-node detection-pipeline engine
-	* registry (loaded engines, models resident, in-use cameras, idle
-	* TTL). Emitted ~0.2Hz (every 5 s) by every detection-pipeline
-	* process. The Engines tab subscribes to drive its inventory view
-	* without polling `pipelineExecutor.listLoadedEngines`.
-	*/
-	EventCategory["PipelineEngineMetricsSnapshot"] = "pipeline.engine-metrics-snapshot";
-	/**
-	* Per-node detection-engine runtime-provisioning transition. Emitted by
-	* the detection-pipeline provider on every state change of its lazy
-	* engine-provisioning machine (idle → installing → verifying → ready,
-	* or → failed with a `nextRetryAt`). Payload is the
-	* `EngineProvisioningState` snapshot; `event.source.nodeId` carries the
-	* node. The Pipeline page subscribes to drive a live "installing
-	* OpenVINO… / ready" indicator per node without polling
-	* `pipelineExecutor.getEngineProvisioning`. Telemetry-grade (D8): the UI
-	* also reads the cap snapshot on mount / reconnect. Phase 2.
-	*/
-	EventCategory["PipelineEngineProvisioning"] = "pipeline.engine-provisioning";
-	/**
-	* Cluster topology snapshot. Carries the same payload returned by
-	* `nodes.topology` (every reachable node + addons + processes).
-	* Emitted by the hub on any agent / addon lifecycle change
-	* (debounced) plus a periodic safety net. Replaces UI polling on
-	* `nodes.topology` — admin-ui dashboards subscribe to drive the
-	* cluster view directly from the event payload.
-	*/
-	EventCategory["ClusterTopologySnapshot"] = "cluster.topology-snapshot";
-	/**
-	* Periodic per-node system metrics snapshot (CPU / memory / GPU /
-	* disk / network). Emitted ~0.2 Hz by the metrics-provider addon
-	* for each node. Drives the dashboard SystemStatus / ProcessResources
-	* widgets without polling `metricsProvider.getCurrent`.
-	*/
-	EventCategory["MetricsNodeResourcesSnapshot"] = "metrics.node-resources-snapshot";
-	/**
-	* Periodic per-node process-tree snapshot (camstack-related pids
-	* with root / managed / system classification). Emitted ~0.2 Hz by
-	* the metrics-provider addon. Drives the Cluster → Processes tab
-	* without polling `metricsProvider.listNodeProcesses`.
-	*/
-	EventCategory["MetricsNodeProcessesSnapshot"] = "metrics.node-processes-snapshot";
-	/**
-	* Capability binding change event emitted by `addon-pipeline-orchestrator`
-	* when a user changes which addon implements a cap on a node. Subscribed
-	* by every kernel process to update its local `preferredProviderRegistry`
-	* so future capability lookups respect the new binding.
-	*/
-	/**
-	* A capability binding was changed for a node — addon X now provides
-	* capability `cap` on node `nodeId`. Lives under the generic
-	* `capability.*` namespace because capability bindings are a kernel-
-	* level concept used by many addons, not strictly pipeline-scoped.
-	*/
-	EventCategory["CapabilityBindingChanged"] = "capability.binding-changed";
-	EventCategory["ModelDownloadProgress"] = "model.download.progress";
-	EventCategory["AgentRegistered"] = "agent.registered";
-	EventCategory["AgentUnregistered"] = "agent.unregistered";
-	EventCategory["AgentOnline"] = "agent.online";
-	EventCategory["AgentOffline"] = "agent.offline";
-	/** Forked worker process (e.g. hub/pipeline) connected to the broker. */
-	EventCategory["WorkerOnline"] = "worker.online";
-	/** Forked worker process disconnected from the broker. */
-	EventCategory["WorkerOffline"] = "worker.offline";
-	EventCategory["AgentTaskDispatched"] = "agent.task.dispatched";
-	EventCategory["AgentTaskAssigned"] = "agent.task.assigned";
-	EventCategory["AgentTrpcConnected"] = "agent.trpc.connected";
-	EventCategory["AgentWsConnected"] = "agent.ws.connected";
-	EventCategory["AgentWsDisconnected"] = "agent.ws.disconnected";
-	EventCategory["AgentBackupActivated"] = "agent.backup.activated";
-	EventCategory["OrchestrationSettingsUpdated"] = "orchestration.settings-updated";
-	EventCategory["MotionAnalysis"] = "detection.motion-analysis";
-	/** All raw motion zones from CCL before minArea filter — for UI debug overlay. */
-	EventCategory["MotionZonesRaw"] = "detection.motion-zones-raw";
-	/**
-	* Per-camera motion phase transition (`watching ↔ active`) emitted
-	* by the runner. Mirrors the `motion.onMotionChanged` cap event
-	* surface — payload `MotionOnMotionChangedPayload` carries
-	* `{deviceId, detected, timestamp, source, regions?}`. Subscribers
-	* include addons that need to react to motion state without
-	* polling the runtime-state mirror.
-	*/
-	EventCategory["MotionOnMotionChanged"] = "motion.on-motion-changed";
-	EventCategory["DetectionResult"] = "detection.result";
-	EventCategory["DetectionRaw"] = "detection.raw";
-	EventCategory["DetectionCameraNative"] = "detection.camera-native";
-	/**
-	* Canonical per-chunk live audio pipeline output. Payload is
-	* `PipelineAudioInferenceResultPayload` carrying a full `AudioResult`
-	* (level + detections + debug). Lives on the pipeline.* namespace
-	* alongside `pipeline.inference-result` (video) for symmetry.
-	*/
-	EventCategory["PipelineAudioInferenceResult"] = "pipeline.audio-inference-result";
-	EventCategory["DetectionPhaseTransition"] = "detection.phase-transition";
-	/**
-	* A camera provider's RAW onboard motion push (D673): the `MotionOnMotionChanged`
-	* data shape without `triggeredBy`, built by `providerMotionEvent`. Its one
-	* consumer is the orchestrator's camera-sensors bridge, which re-emits the
-	* camera's EFFECTIVE onboard motion as `MotionOnMotionChanged` (a pass-through
-	* for a camera with no attached sensor). Providers must not emit
-	* `MotionOnMotionChanged` themselves; `scripts/check-onboard-motion-emitters.ts`
-	* keeps it so (camera-grid is a named, deferred exception).
-	*/
-	EventCategory["ProviderMotion"] = "provider.motion";
-	EventCategory["ProviderDetection"] = "provider.detection";
-	EventCategory["EnrichmentEmbeddingStored"] = "enrichment.embedding.stored";
-	EventCategory["EnrichmentSceneStateChanged"] = "enrichment.scene.state-changed";
-	EventCategory["EnrichmentActivitySummary"] = "enrichment.activity.summary";
-	/**
-	* Unified track-lifecycle event: ONE category carrying `phase:
-	* 'start' | 'update' | 'end'` with a rich, typed
-	* `PipelineAnalyticsTrackLifecyclePayload`. Supersedes the thin
-	* `PipelineAnalyticsTrackStarted` / `PipelineAnalyticsTrackEnded`
-	* pair — a consumer subscribes once and branches on `phase`.
-	*/
-	EventCategory["PipelineAnalyticsTrackLifecycle"] = "pipeline-analytics.track-lifecycle";
-	/**
-	* @deprecated Superseded by {@link PipelineAnalyticsTrackLifecycle}
-	* (`phase:'start'`). Kept as a soft alias — no known subscribers.
-	*/
-	EventCategory["PipelineAnalyticsTrackStarted"] = "pipeline-analytics.track-started";
-	/**
-	* @deprecated Superseded by {@link PipelineAnalyticsTrackLifecycle}
-	* (`phase:'end'`). Kept as a soft alias — no known subscribers.
-	*/
-	EventCategory["PipelineAnalyticsTrackEnded"] = "pipeline-analytics.track-ended";
-	EventCategory["PipelineAnalyticsDetectionEvent"] = "pipeline-analytics.detection-event";
-	EventCategory["PipelineAnalyticsFrameTracked"] = "pipeline-analytics.frame-tracked";
-	/**
-	* Fired by `addon-post-analysis` when a parked (stationary) object appears
-	* (a track was promoted to a stationary-registry entry) or departs (the
-	* object moved / was removed). Telemetry (D8): lossy, drives a UI refresh of
-	* the dedicated "Stationary" section — never the live event feed. Payload:
-	* `{ deviceId, entryId, className, phase:'appeared'|'departed', timestamp, observedAt, zones }`.
-	*/
-	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
-	/**
-	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
-	* a package zone — a newly-appeared stationary object of a package class
-	* that cleared the class / zone / dwell / size gates. Payload:
-	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
-	* entryId, className, zoneIds, keyFrameMediaId?, bbox, timestamp }`.
-	* Telemetry (D8): the durable record is the `package-events` store row;
-	* this bus topic drives notifier rules + live UI. See
-	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
-	*/
-	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
-	/**
-	* Fired by `addon-post-analysis` when a previously-delivered package
-	* leaves its zone (the stationary entry departed — moved or swept).
-	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
-	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
-	* Telemetry (D8). See package-zones-design §5.2.
-	*/
-	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
-	/**
-	* Fired by `addon-post-analysis` whenever a gallery face row changes:
-	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
-	* `'unassigned'` its identity link changed, `'deleted'` the row was
-	* removed. Telemetry semantics (D8): a lost event only delays a refresh,
-	* never a correctness issue. Payload `PipelineAnalyticsFaceGalleryChangedPayload`.
-	*/
-	EventCategory["PipelineAnalyticsFaceGalleryChanged"] = "pipeline-analytics.face-gallery-changed";
-	/**
-	* Fired by `addon-post-analysis` whenever a gallery plate row changes:
-	* `kind:'buffered'` a new read was persisted (`PlateRecognizer.onTrackEnd`),
-	* `'assigned'` / `'unassigned'` its vehicle link changed
-	* (`PlateGalleryProvider`), `'deleted'` the row was removed. Telemetry
-	* semantics (D8): a lost event only delays a refresh, never a correctness
-	* issue. Payload `PipelineAnalyticsPlateGalleryChangedPayload`.
-	*/
-	EventCategory["PipelineAnalyticsPlateGalleryChanged"] = "pipeline-analytics.plate-gallery-changed";
-	EventCategory["CameraStreamsProfileSlotsChanged"] = "camera-streams.onProfileSlotsChanged";
-	/**
-	* Stream-broker health watchdog. Per-broker (deviceId/profile) emission.
-	* `stream.offline` fires after STREAM_STALE_TIMEOUT_MS without an encoded
-	* packet on an active broker. `stream.online` fires on first packet
-	* after a stale gap (or on initial first packet). Payload includes
-	* the assigned camStreamId as `profileKey`.
-	*/
-	EventCategory["StreamOnline"] = "stream.online";
-	EventCategory["StreamOffline"] = "stream.offline";
-	EventCategory["NetworkTunnelStarted"] = "network.tunnel.started";
-	EventCategory["NetworkTunnelStopped"] = "network.tunnel.stopped";
-	/** Fired by the `local-network` cap when the host's interface set
-	*  changes (new IP from DHCP, VPN connect, docker bridge added). */
-	EventCategory["LocalNetworkChanged"] = "network.local.changed";
-	/**
-	* Fired by a `mesh-network` provider (Tailscale, …) when its
-	* mesh-reachable host changes (join / leave / MagicDNS or 100.x IP
-	* change). Lets `local-network` fold the mesh endpoint into its
-	* connection-endpoint list without a cross-package import. Payload
-	* carries the preferred host (`host: ''` = no longer reachable),
-	* the hub port, and the scheme. Telemetry-grade (D8): consumers
-	* pull-reconcile from the provider's `getStatus` on reconnect. */
-	EventCategory["MeshNetworkChanged"] = "network.mesh.changed";
-	EventCategory["BackupCompleted"] = "backup.completed";
-	/**
-	* A whole backup RUN finished — every destination attempted, win or lose.
-	*
-	* `backup.completed` fires once per DESTINATION, which is the right grain for
-	* a progress UI and the wrong one for a notification: an operator with three
-	* destinations would be told three times. And a run where two of three
-	* destinations succeeded is not a clean success — a single "backup
-	* completed" that hid the failed one would be a lie, so the count of each is
-	* carried here and the message says both.
-	*
-	* Emitted by the backup orchestrator only after the destination loop, so a
-	* run that dies during the BUILD phase produces no completion at all.
-	*/
-	EventCategory["BackupRunCompleted"] = "backup.run-completed";
-	EventCategory["BackupRestored"] = "backup.restored";
-	EventCategory["NotificationDispatched"] = "notification.dispatched";
-	EventCategory["NotificationFailed"] = "notification.failed";
-	/**
-	* A notification rule that cannot work (D905): its stored row does not load,
-	* or it still names a device / delivery target the prune CONFIRMED deleted.
-	* One edge per rule per distinct set of reasons; never on an unanswered read.
-	*/
-	EventCategory["NotificationRuleBroken"] = "notification.rule-broken";
-	/** The clear of {@link NotificationRuleBroken}: the rule loads and names nothing deleted. */
-	EventCategory["NotificationRuleRepaired"] = "notification.rule-repaired";
-	/** A migration failed or was blocked; the Alert Center re-reads the ledger. */
-	EventCategory["MigrationFailed"] = "migration.failed";
-	/** A migration applied or a failure cleared; the Alert Center re-reads the ledger. */
-	EventCategory["MigrationApplied"] = "migration.applied";
-	EventCategory["DeviceUpdated"] = "device.updated";
-	/**
-	* Transport-level connectivity. Emitted by the device driver when
-	* the underlying control socket actually connects / disconnects
-	* (Baichuan TCP, ONVIF probe response, RTSP DESCRIBE, …) — NOT for
-	* power-state transitions on a battery camera. For battery wake /
-	* doze cycles see `DeviceAwake` / `DeviceSleeping`.
-	*/
-	EventCategory["DeviceOnline"] = "device.online";
-	/**
-	* Stream-broker watchdog — emitted when no encoded packet has been
-	* received for STREAM_STALE_TIMEOUT_MS on an active broker (rtsp or
-	* push). Paired with DeviceOnline which fires on first packet after
-	* a stale gap. Payload: DeviceStreamHealthPayload.
-	*/
-	EventCategory["DeviceOffline"] = "device.offline";
-	/**
-	* Battery cam woke up — physical power-state transition reported
-	* by the device firmware. Distinct from `DeviceOnline` so a UI panel
-	* watching power state doesn't flap on every UDP socket reconnect.
-	*/
-	EventCategory["DeviceAwake"] = "device.awake";
-	/**
-	* Battery cam went to sleep. See `DeviceAwake`.
-	*/
-	EventCategory["DeviceSleeping"] = "device.sleeping";
-	EventCategory["RetentionCleanup"] = "retention.cleanup";
-	/**
-	* Legacy bulk-update progress snapshot (payload `BulkUpdateState`). No longer
-	* emitted — F3 removed the coordinator that produced it; "Update all" now runs
-	* as one lifecycle engine job (`AddonsJobProgress`/`AddonsJobLog`). Retained
-	* (with `BulkUpdateState`) only to avoid regenerating the event maps; removed
-	* in F4 once live bulk progress is re-implemented over the engine events.
-	*/
-	EventCategory["AddonsBulkUpdateProgress"] = "addons.bulk-update-progress";
-	EventCategory["AddonsJobProgress"] = "addons.job-progress";
-	EventCategory["AddonsJobLog"] = "addons.job-log";
-	/**
-	* A container's child visibility toggled (hidden/shown). Emitted by the
-	* `accessories` cap when a child device is hidden or revealed.
-	* Payload: `{ deviceId, childDeviceId, hidden }`.
-	*/
-	EventCategory["AccessoriesChildVisibilityChanged"] = "accessories.onChildVisibilityChanged";
-	/**
-	* A container's child set changed (children added/removed/reordered).
-	* Payload: `{ deviceId, childDeviceIds, hiddenChildIds }`.
-	*/
-	EventCategory["AccessoriesChanged"] = "accessories.onAccessoriesChanged";
-	/**
-	* An action run started or ended. Emitted by the `actions` surface.
-	* Payload: `ActionRunChanged` (`{ actionId, runId, isRunning, outcome?, lastRunAt, lastError }`).
-	*/
-	EventCategory["ActionsRunChanged"] = "actions.onRunChanged";
-	/**
-	* Progress update from a running model conversion job.
-	* Payload: `{ kind: 'model-convert', phase, sessionId?, pct?, detail? }`.
-	* Emitted by `addon-model-studio` on the converting node.
-	*/
-	EventCategory["ModelConvertProgress"] = "model-convert.progress";
-	return EventCategory;
-}({});
-//#endregion
-//#region ../types/dist/device-type-D1fH5kaC.mjs
-/**
-import { errMsg } from '@camstack/types'
-* Extract a human-readable message from an unknown error value.
-* Replaces the ubiquitous `errMsg(err)` pattern.
-*/
-function errMsg(err) {
-	if (err instanceof Error) return err.message;
-	if (typeof err === "string") return err;
-	return String(err);
-}
-var DeviceType = /* @__PURE__ */ function(DeviceType) {
-	DeviceType["Camera"] = "camera";
-	DeviceType["Hub"] = "hub";
-	DeviceType["Light"] = "light";
-	DeviceType["Siren"] = "siren";
-	DeviceType["Switch"] = "switch";
-	DeviceType["Sensor"] = "sensor";
-	DeviceType["Thermostat"] = "thermostat";
-	/** Air-conditioner / heat-pump climate device (HVAC) — shares the
-	*  `climate-control` cap surface with `Thermostat` but renders a
-	*  dedicated AC-appropriate control UI (mode chips, fan speed,
-	*  independent vertical/horizontal swing). Sources: native Gree, and
-	*  reusable by other AC integrations. */
-	DeviceType["Climate"] = "climate";
-	DeviceType["Button"] = "button";
-	/** Generic stateless event emitter — carries a device's EXACT declared
-	*  event vocabulary verbatim (no normalization). Installed with the
-	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
-	*  HA bus events (e.g. `zha_event`, generic). */
-	DeviceType["EventEmitter"] = "event-emitter";
-	/** Firmware/software update entity — current vs available version,
-	*  updatable flag, update state, and an install action. Installed with
-	*  the `update` cap. Sources: Homematic firmware-update channels (and
-	*  reusable by other providers, e.g. HA `update.*` entities). */
-	DeviceType["Update"] = "update";
-	DeviceType["Generic"] = "generic";
-	/** Generic notification delivery target (HA `notify.<service>`, future
-	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
-	*  endpoint; the `notifier` cap defines the send surface. */
-	DeviceType["Notifier"] = "notifier";
-	/** Pre-recorded action sequence with optional parameters
-	*  (HA `script.*`). Runnable via `script-runner` cap. */
-	DeviceType["Script"] = "script";
-	/** Automation rule (HA `automation.*`) — enable/disable + manual
-	*  trigger surface exposed via `automation-control` cap. */
-	DeviceType["Automation"] = "automation";
-	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
-	DeviceType["Lock"] = "lock";
-	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
-	*  `valve.*`). `cover` cap with sub-roles for variant. */
-	DeviceType["Cover"] = "cover";
-	/** Pipe / water / gas valve with open/close/stop and optional
-	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
-	*  modelled on the same open/closed lifecycle. */
-	DeviceType["Valve"] = "valve";
-	/** Humidifier / dehumidifier with on/off + target humidity + mode
-	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
-	*  modelled on the same target / mode lifecycle. */
-	DeviceType["Humidifier"] = "humidifier";
-	/** Water heater / boiler with target temperature + operation mode +
-	*  away mode (HA `water_heater.*`). `water-heater` cap — a
-	*  climate-family actuator. */
-	DeviceType["WaterHeater"] = "water-heater";
-	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
-	DeviceType["Fan"] = "fan";
-	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
-	*  the camera surface — those use `Camera`. `media-player` cap. */
-	DeviceType["MediaPlayer"] = "media-player";
-	/** Security panel / alarm system (HA `alarm_control_panel.*`).
-	*  `alarm-panel` cap. */
-	DeviceType["AlarmPanel"] = "alarm-panel";
-	/** Generic user-settable input (HA `number` / `input_number` / `select`
-	*  / `input_select` / `text` / `input_text` / `input_datetime`).
-	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
-	*  TextControl / DateTimeControl. */
-	DeviceType["Control"] = "control";
-	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
-	*  `presence` cap. */
-	DeviceType["Presence"] = "presence";
-	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
-	*  `weather` cap. */
-	DeviceType["Weather"] = "weather";
-	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
-	DeviceType["Vacuum"] = "vacuum";
-	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
-	*  `lawn-mower-control` cap. */
-	DeviceType["LawnMower"] = "lawn-mower";
-	/** Physical HA device group — parent container for entity-children
-	*  adopted from a single HA device entry. Not renderable as a
-	*  standalone device; exists only to anchor child entities. */
-	DeviceType["Container"] = "container";
-	/** Single still-image entity (HA `image.*`). Read-only display of an
-	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
-	DeviceType["Image"] = "image";
-	/** Smart pet feeder — cloud-connected food dispenser with a bowl food
-	*  level, battery, desiccant life, feeding state and manual-feed /
-	*  call-pet / maintenance actions. Installed with the `pet-feeder` cap;
-	*  dual-hopper models (D4S/D4SH) expose per-hopper portions. Sources:
-	*  native PetKit (`nodepetkit` `FeederDevice`), reusable by other feeder
-	*  integrations sharing the same food/desiccant/hopper surface. */
-	DeviceType["PetFeeder"] = "pet-feeder";
-	/** Pet water fountain — tank level, water drunk, pump and its duty cycle.
-	*  Installed with the `pet-fountain` cap. Reaches CamStack as loose entities
-	*  of a container and is BUILT as a composed device (D967). */
-	DeviceType["PetFountain"] = "pet-fountain";
-	/** Built-in dishwasher — program lifecycle, door / remote-start gates,
-	*  salt and rinse-aid levels. Installed with the `dishwasher` cap.
-	*  Sources: native Bosch Home Connect, reusable by similar integrations.
-	*  A plug-built dishwasher carries running-state and power instead. */
-	DeviceType["Dishwasher"] = "dishwasher";
-	/** Washing machine. A plug-built one is running while its power stays
-	*  above a threshold. No program cap — that surface is the dishwasher's. */
-	DeviceType["Washer"] = "washer";
-	/** A dumb plug-in stove or heater: a switch (and, with a meter, a power
-	*  reading) that only runs while the plug is on. Built from a smart plug;
-	*  the `timed-run` cap switches it off again after a chosen time. */
-	DeviceType["Heater"] = "heater";
-	/** Tumble dryer. Same plug-built running surface as {@link Washer}. */
-	DeviceType["Dryer"] = "dryer";
-	/** The physical bridge box of a vendor ecosystem (Velux KLF-200, and later
-	*  other radio-to-IP bridges). It carries the box's own facts (firmware,
-	*  address, connection state) and the actions the box really supports
-	*  (`reboot`, `device-admin-link`). Products are NOT its children — they are
-	*  adopted beside it — and its connection settings stay on the integration. */
-	DeviceType["Gateway"] = "gateway";
-	return DeviceType;
-}({});
-var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
-	DeviceFeature["BatteryOperated"] = "battery-operated";
-	DeviceFeature["Rebootable"] = "rebootable";
-	/**
-	* Device supports an on-demand re-sync of its derived spec with its
-	* upstream source — drives the generic Re-sync button. The owning
-	* provider implements the action via the `device-adoption.resync` cap.
-	*/
-	DeviceFeature["Resyncable"] = "resyncable";
-	DeviceFeature["NativeSnapshot"] = "native-snapshot";
-	DeviceFeature["DoorbellButton"] = "doorbell-button";
-	DeviceFeature["TwoWayAudio"] = "two-way-audio";
-	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
-	/**
-	* Camera supports the on-firmware autotrack subsystem (subject-
-	* following). Distinct from `PanTiltZoom` because not every PTZ
-	* camera ships autotrack — the admin UI uses this flag to gate
-	* the autotrack toggle / settings card without re-deriving from
-	* the cap registry. Mirrors `ptz-autotrack` cap registration:
-	* driver sets this feature when probe confirms the firmware
-	* surface, and registers the cap in the same code path.
-	*/
-	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
-	/**
-	* Accessory exposes a "trigger on motion" toggle — the parent camera's
-	* motion detection automatically activates this device. Mirrors
-	* `motion-trigger` cap registration: drivers set this feature in the
-	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
-	*
-	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
-	* fast scalar without binding fetch), notifier rules, and `listAll`
-	* filters that want "all devices with on-motion behaviour".
-	*/
-	DeviceFeature["MotionTrigger"] = "motion-trigger";
-	/** Light supports rgb-triplet color via `color` cap. */
-	DeviceFeature["LightColorRgb"] = "light-color-rgb";
-	/** Light supports HSV color via `color` cap. */
-	DeviceFeature["LightColorHsv"] = "light-color-hsv";
-	/** Light supports color-temperature (mired) via `color` cap. */
-	DeviceFeature["LightColorMired"] = "light-color-mired";
-	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
-	*  targetHigh). Gates the range slider UI. */
-	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
-	/** Thermostat exposes target humidity and/or current humidity
-	*  readings. Gates the humidity controls. */
-	DeviceFeature["ClimateHumidity"] = "climate-humidity";
-	/** Thermostat exposes a fan-mode selector. */
-	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
-	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
-	DeviceFeature["ClimatePreset"] = "climate-preset";
-	/** Thermostat exposes a vertical louver swing toggle. Gates the
-	*  vertical-swing switch in the climate UI. Independent of horizontal. */
-	DeviceFeature["ClimateSwingVertical"] = "climate-swing-vertical";
-	/** Thermostat exposes a horizontal louver swing toggle. Gates the
-	*  horizontal-swing switch in the climate UI. Independent of vertical. */
-	DeviceFeature["ClimateSwingHorizontal"] = "climate-swing-horizontal";
-	/** Cover exposes intermediate position control (0..100). Gates the
-	*  position slider UI. */
-	DeviceFeature["CoverPositionable"] = "cover-positionable";
-	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
-	DeviceFeature["CoverTilt"] = "cover-tilt";
-	/** Cover has a real stop: `stop` halts the travel in place. Gates the stop
-	*  control in exporters; a provider whose `stop` is a no-op never declares it. */
-	DeviceFeature["CoverStoppable"] = "cover-stoppable";
-	/** Valve exposes intermediate position control (0..100). Gates the
-	*  position slider / drag surface UI. */
-	DeviceFeature["ValvePositionable"] = "valve-positionable";
-	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
-	DeviceFeature["FanSpeed"] = "fan-speed";
-	/** Fan exposes a preset mode selector. */
-	DeviceFeature["FanPreset"] = "fan-preset";
-	/** Fan exposes blade direction (forward/reverse) — typical of
-	*  ceiling fans. */
-	DeviceFeature["FanDirection"] = "fan-direction";
-	/** Fan exposes an oscillation toggle. */
-	DeviceFeature["FanOscillating"] = "fan-oscillating";
-	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
-	*  field on the UI lock-controls panel. */
-	DeviceFeature["LockPinRequired"] = "lock-pin-required";
-	/** Lock supports a latch-release ("open door") action distinct from
-	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
-	*  `supported_features`. Gates the Open Door button in the UI. */
-	DeviceFeature["LockOpen"] = "lock-open";
-	/** Media player exposes a seek-to-position surface. */
-	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
-	/** Media player exposes a volume-level setter. */
-	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
-	/** Media player exposes a mute toggle distinct from volume=0. */
-	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
-	/** Media player exposes a shuffle toggle. */
-	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
-	/** Media player exposes a repeat mode (off / all / one). */
-	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
-	/** Media player exposes a source / input selector. */
-	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
-	/** Media player exposes a play-arbitrary-media surface (URL / id). */
-	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
-	/** Media player exposes next-track. */
-	DeviceFeature["MediaPlayerNext"] = "media-player-next";
-	/** Media player exposes previous-track. */
-	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
-	/** Media player exposes stop distinct from pause. */
-	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
-	/** Media player exposes volume up / down in steps (an infrared TV has no level). */
-	DeviceFeature["MediaPlayerVolumeStep"] = "media-player-volume-step";
-	/** Media player exposes channel up / down in steps. */
-	DeviceFeature["MediaPlayerChannelStep"] = "media-player-channel-step";
-	/** Media player exposes power on / off. */
-	DeviceFeature["MediaPlayerPower"] = "media-player-power";
-	/** Alarm panel requires a PIN code on arm/disarm. */
-	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
-	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
-	*  addition to a textual location. */
-	DeviceFeature["PresenceGps"] = "presence-gps";
-	/** Notifier accepts an inline / URL image attachment. */
-	DeviceFeature["NotifierImage"] = "notifier-image";
-	/** Notifier accepts a priority hint (high/normal/low). */
-	DeviceFeature["NotifierPriority"] = "notifier-priority";
-	/** Notifier accepts a free-form `data` payload for platform-specific
-	*  fields. */
-	DeviceFeature["NotifierData"] = "notifier-data";
-	/** Notifier supports interactive action buttons / callbacks. */
-	DeviceFeature["NotifierActions"] = "notifier-actions";
-	/** Notifier supports per-call recipient targeting (multi-user). */
-	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
-	/** Script runner accepts a variables map on each run invocation. */
-	DeviceFeature["ScriptVariables"] = "script-variables";
-	/** Automation `trigger` accepts a skipCondition flag — fires the
-	*  automation's actions while bypassing its condition block. */
-	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
-	/** Robot vacuum exposes a live cleaning map (image child). Gates the
-	*  map tile in the vacuum UI. */
-	DeviceFeature["VacuumHasMap"] = "vacuum-has-map";
-	/** Robot vacuum exposes AI obstacle-detection toggles. Gates the AI
-	*  switches group. */
-	DeviceFeature["VacuumHasAi"] = "vacuum-has-ai";
-	/** Robot mower exposes a live mowing map (SVG image child). Gates the
-	*  mower map tile. */
-	DeviceFeature["MowerHasMap"] = "mower-has-map";
-	/** Robot mower exposes targeted mowing (all-area / zones / edges /
-	*  spots) — gates the Mow action + map selectors. */
-	DeviceFeature["MowerHasTargetedMowing"] = "mower-has-targeted-mowing";
-	return DeviceFeature;
-}({});
-/**
-* Semantic role a device plays within its parent. Populated by driver
-* addons when creating accessory devices (Reolink siren/floodlight/
-* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
-* admin UI to pick icons, labels, and widgets — a `Switch` with
-* `role: Floodlight` renders as a bulb with a brightness slider,
-* whereas a `Switch` with `role: Siren` renders as a klaxon.
-*
-* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
-* sqlite as a nullable TEXT column — old rows keep working unchanged.
-*/
-var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
-	DeviceRole["Siren"] = "siren";
-	DeviceRole["Floodlight"] = "floodlight";
-	DeviceRole["Spotlight"] = "spotlight";
-	DeviceRole["PirSensor"] = "pir-sensor";
-	DeviceRole["Chime"] = "chime";
-	DeviceRole["Autotrack"] = "autotrack";
-	DeviceRole["Nightvision"] = "nightvision";
-	DeviceRole["PrivacyMask"] = "privacy-mask";
-	DeviceRole["Doorbell"] = "doorbell";
-	/** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
-	DeviceRole["CoverBlind"] = "cover-blind";
-	/** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
-	DeviceRole["CoverShutter"] = "cover-shutter";
-	/** Exterior awning. HA `device_class: awning`. */
-	DeviceRole["CoverAwning"] = "cover-awning";
-	/** Curtain / drape. HA `device_class: curtain`. */
-	DeviceRole["CoverCurtain"] = "cover-curtain";
-	/** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
-	DeviceRole["CoverGarage"] = "cover-garage";
-	/** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
-	DeviceRole["CoverGate"] = "cover-gate";
-	/** Door. HA `device_class: door`. A security actuator: exports gate it. */
-	DeviceRole["CoverDoor"] = "cover-door";
-	/** Window. HA `device_class: window`. */
-	DeviceRole["CoverWindow"] = "cover-window";
-	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
-	*  real Switch device for UI rendering / export adapters. */
-	DeviceRole["BinaryHelper"] = "binary-helper";
-	/** A smart plug: a `switch` whose source says it is an outlet (HA
-	*  `device_class: outlet`). The Alexa export shows it as a SMARTPLUG. */
-	DeviceRole["Outlet"] = "outlet";
-	/** Generic motion / occupancy / moving event source. Distinct from
-	*  the camera accessory PirSensor role: that one is a camera child;
-	*  this is a standalone HA / 3rd-party motion sensor. */
-	DeviceRole["MotionSensor"] = "motion-sensor";
-	DeviceRole["ContactSensor"] = "contact-sensor";
-	DeviceRole["LeakSensor"] = "leak-sensor";
-	DeviceRole["SmokeSensor"] = "smoke-sensor";
-	DeviceRole["COSensor"] = "co-sensor";
-	DeviceRole["GasSensor"] = "gas-sensor";
-	DeviceRole["TamperSensor"] = "tamper-sensor";
-	DeviceRole["VibrationSensor"] = "vibration-sensor";
-	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
-	DeviceRole["SoundSensor"] = "sound-sensor";
-	/** Fallback for `binary_sensor` without a known `device_class`. */
-	DeviceRole["BinarySensor"] = "binary-sensor";
-	DeviceRole["TemperatureSensor"] = "temperature-sensor";
-	DeviceRole["HumiditySensor"] = "humidity-sensor";
-	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
-	DeviceRole["PressureSensor"] = "pressure-sensor";
-	/** Wind speed or direction (weather-station `wind-sensor` cap). */
-	DeviceRole["WindSensor"] = "wind-sensor";
-	/** Rain accumulation or rate (weather-station `rain-sensor` cap). */
-	DeviceRole["RainSensor"] = "rain-sensor";
-	/** UV index (weather-station `uv-sensor` cap). */
-	DeviceRole["UvSensor"] = "uv-sensor";
-	/** Solar irradiance W/m² (weather-station `solar-radiation-sensor` cap).
-	*  Distinct from AmbientLightSensor (lux). */
-	DeviceRole["SolarRadiationSensor"] = "solar-radiation-sensor";
-	/** Soil moisture % (garden/weather `soil-moisture-sensor` cap). */
-	DeviceRole["SoilMoistureSensor"] = "soil-moisture-sensor";
-	DeviceRole["PowerSensor"] = "power-sensor";
-	DeviceRole["EnergySensor"] = "energy-sensor";
-	DeviceRole["VoltageSensor"] = "voltage-sensor";
-	DeviceRole["CurrentSensor"] = "current-sensor";
-	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
-	/** Battery level (numeric % via `sensor` OR low-bool via
-	*  `binary_sensor` — the cap distinguishes via the value type). */
-	DeviceRole["BatterySensor"] = "battery-sensor";
-	/** Fallback for `sensor` numeric without a known `device_class`. */
-	DeviceRole["NumericSensor"] = "numeric-sensor";
-	/** String / enum state (HA `sensor` with `state_class: enum` or
-	*  `attributes.options`). */
-	DeviceRole["EnumSensor"] = "enum-sensor";
-	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
-	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
-	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
-	DeviceRole["DateTimeSensor"] = "datetime-sensor";
-	/** Last-resort fallback when nothing else matches. */
-	DeviceRole["GenericSensor"] = "generic-sensor";
-	DeviceRole["NumericControl"] = "numeric-control";
-	DeviceRole["SelectControl"] = "select-control";
-	DeviceRole["TextControl"] = "text-control";
-	DeviceRole["DateTimeControl"] = "datetime-control";
-	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
-	*  rich features (image, priority, channel routing). */
-	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
-	/** Chat / messaging service (HA `notify.telegram_*`,
-	*  `notify.discord_*`, etc.). */
-	DeviceRole["MessagingNotifier"] = "messaging-notifier";
-	/** Email-based delivery (HA `notify.smtp`, etc.). */
-	DeviceRole["EmailNotifier"] = "email-notifier";
-	/** Fallback when the notifier service name doesn't match a known
-	*  pattern. */
-	DeviceRole["GenericNotifier"] = "generic-notifier";
-	/** Emits a pulse train (infrared or RF) on request — the `ir-transmitter`
-	*  cap. A `DeviceType.Generic` device. */
-	DeviceRole["IrTransmitter"] = "ir-transmitter";
-	return DeviceRole;
-}({});
-//#endregion
 //#region ../../node_modules/zod/v4/core/core.js
 var _a$1;
 function $constructor(name, initializer, params) {
@@ -6056,12 +4868,1207 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../../node_modules/zod/v4/classic/coerce.js
-function number(params) {
-	return /* @__PURE__ */ _coercedNumber(ZodNumber, params);
+//#region ../../node_modules/zod/v4/classic/coerce.js
+function number(params) {
+	return /* @__PURE__ */ _coercedNumber(ZodNumber, params);
+}
+//#endregion
+//#region ../types/dist/event-category-78tcBemo.mjs
+var EventCategory = /* @__PURE__ */ function(EventCategory) {
+	EventCategory["SystemBoot"] = "system.boot";
+	EventCategory["SystemAddonsReady"] = "system.addons-ready";
+	EventCategory["SystemRestarting"] = "system.restarting";
+	/**
+	* Fired exactly once after the hub finishes booting following a
+	* restart that was triggered by `RestartCoordinator` (today: framework
+	* live-update). Payload is the marker that was on disk at boot
+	* (`PendingRestartMarkerPayload`); admin UI listens for it to display a
+	* success toast describing what changed.
+	*
+	* Spec: docs/superpowers/specs/2026-05-14-framework-live-update-design.md
+	*/
+	EventCategory["SystemRestartCompleted"] = "system.restart-completed";
+	/**
+	* The hub reissued its own TLS certificate at boot (`ensureTlsCert`).
+	* Emitted only when the material on disk actually changed, so an
+	* operator who trusted the old certificate by hand is told rather than
+	* discovering it as a browser error. Payload `TlsCertChangedPayload`.
+	*
+	* Rule: docs/decisions/adr-0227-*.md
+	*/
+	EventCategory["SystemTlsCertChanged"] = "system.tls-cert-changed";
+	/**
+	* A newer addon or server-root package version was found by the
+	* authoritative registry check. Emitted once when any observed
+	* `latestVersion` changes (or a package/node first appears behind);
+	* the payload carries the full currently-available list. Repeated
+	* polling of the same latests is silent.
+	*/
+	EventCategory["UpdateAvailable"] = "update.available";
+	/**
+	* Readiness transition for a capability provider. Every producer emits
+	* this event on `onInitialize` completion, `onDestroy`, and
+	* `$node.reconnect`; every consumer that needs to gate on a cross-process
+	* cap subscribes via the kernel's readiness module (`awaitReady` /
+	* `onReadyState`) instead of polling. Payload is
+	* `SystemReadyStatePayload` — see event-bus.ts.
+	*/
+	EventCategory["SystemReadyState"] = "system.ready-state";
+	EventCategory["AddonStarted"] = "addon.started";
+	EventCategory["AddonStopped"] = "addon.stopped";
+	EventCategory["AddonRestarted"] = "addon.restarted";
+	EventCategory["AddonUpdated"] = "addon.updated";
+	EventCategory["AddonInstalled"] = "addon.installed";
+	EventCategory["AddonUninstalled"] = "addon.uninstalled";
+	EventCategory["AddonCrashed"] = "addon.crashed";
+	/**
+	* A RUNNER the D6 crash circuit-breaker gave up on — terminal.
+	*
+	* `AddonCrashed` is the routine, self-healing fact ("it crashed; it is being
+	* respawned"); this is the one that never resolves itself. Emitted exactly
+	* once per trip, by `process-service.ts`, carrying the node, the runner, the
+	* addons it hosted and the crash count that tripped the breaker.
+	*
+	* It exists because a runner marked terminally `failed` used to be SILENT:
+	* on 2026-08-18 the `recorder` runner died of three unhandled ffmpeg spawn
+	* errors, the breaker stopped respawning it (correctly), `/health` kept
+	* returning 200, and fleet-wide recording was gone for 3h15 before the
+	* operator's phone told him. The Notification Center's system-event intake
+	* consumes this category and maps it to the `addon-crash-loop` kind.
+	*/
+	EventCategory["AddonRunnerFailed"] = "addon.runner-failed";
+	/**
+	* A runner whose addon refused to start with a typed reason (D877) - parked
+	* in `refused`, never counted by the crash breaker, retried on operator
+	* action. One event per refusal.
+	*/
+	EventCategory["AddonRunnerRefused"] = "addon.runner-refused";
+	/**
+	* A runner settled on a state (D877): `running` (READY), `crashed`, `failed` or
+	* `refused`. In-process telemetry for the boot check (re-evaluate while any
+	* runner is still pending) and the alert centre (close a recovered runner).
+	*/
+	EventCategory["ProcessStateChanged"] = "process.state-changed";
+	/**
+	* The node's one-shot runner boot check (D877): planned runners against the
+	* process service, `degraded` when any is failed, refused or missing. The
+	* alert centre turns it into one critical alert.
+	*/
+	EventCategory["SystemRunnerCheck"] = "system.runner-check";
+	/**
+	* An alert EPISODE opened or closed, emitted by the alert centre for alerts
+	* of severity `critical` or `error` (`AlertEpisodePayload`). The alert
+	* centre sends no notification of its own: Notification Center turns this
+	* into the `alert-critical` / `alert-error` / `alert-critical-resolved`
+	* system-event kinds, and reconciles from the alerts store because a bus
+	* event may be dropped (D8, D11).
+	*/
+	EventCategory["AlertEpisode"] = "alert.episode";
+	EventCategory["AddonError"] = "addon.error";
+	EventCategory["AddonPageReady"] = "addon.page-ready";
+	EventCategory["AddonWidgetReady"] = "addon.widget-ready";
+	/**
+	* Addon failed to load (import or initialize). Emitted by the kernel's
+	* AddonHealthMonitor only AFTER the boot grace period ends — failures
+	* during the first 5 minutes are silently retried without alerting
+	* (slow-starting addons must have time to come up). Post-grace, this
+	* event is emitted exactly once per failure-streak; AlertCenter
+	* consumes it to create a persistent operator-visible alert.
+	*
+	* Payload: `{ packageName, addonId?, error: { message, stack }, retryCount, nextRetryAt }`.
+	*/
+	EventCategory["AddonLoadFailed"] = "addon.load-failed";
+	/**
+	* A keychain value was stored or removed (D787). Carries the ref, its
+	* owner and the new version — NEVER the value. A process holding the ref
+	* drops its cached copy and the owning `BaseAddon` re-resolves its config.
+	* Telemetry (D8): a process that misses it still revalidates by version.
+	*/
+	EventCategory["KeychainChanged"] = "keychain.changed";
+	/**
+	* Addon recovered from a previous failure. Emitted when an addon
+	* transitions from `failed` back to `healthy` (typically via the
+	* monitor's auto-retry loop, or after manual `addons.retryLoad`).
+	* AlertCenter dismisses the corresponding `AddonLoadFailed` alert
+	* on this event.
+	*/
+	EventCategory["AddonLoadRecovered"] = "addon.load-recovered";
+	/**
+	* An addon is RUNNING although its installed package is below what the
+	* running server requires (`camstack.requires.addons` of the server, or the
+	* addon's own `requires.server`). Raised once per streak by the unsupported-
+	* addon tracker, on the hub and on agents; AlertCenter turns it into one
+	* operator alert per node and package. The addon is never held back for it.
+	*
+	* Payload: `{ packageName, addonId, nodeId, installedVersion, requiredMinimum, serverVersion, unmet }`.
+	*/
+	EventCategory["AddonUnsupportedVersion"] = "addon.unsupported-version";
+	/**
+	* The package of an {@link AddonUnsupportedVersion} alert reached a supported
+	* version, or is no longer installed on the node. AlertCenter dismisses the matching alert.
+	*
+	* Payload: `{ packageName, addonId, nodeId }`.
+	*/
+	EventCategory["AddonUnsupportedResolved"] = "addon.unsupported-resolved";
+	/**
+	* Monitor scheduled the next retry for a failed addon. Transient —
+	* surfaced to the UI for live-updating the "next retry in Ns"
+	* countdown on the Addons page row, NOT persisted as an alert.
+	*/
+	EventCategory["AddonRetryScheduled"] = "addon.retry-scheduled";
+	/**
+	* A liveness invariant of this node is false — it has no devices, every
+	* camera is offline, or a camera that was recording has stopped producing
+	* segments. Emitted by the `liveness-monitor` builtin, once per fault (the
+	* `findingId` is stable across ticks), only after its boot grace period.
+	* AlertCenter raises a persistent operator-visible alert.
+	*
+	* It exists because on 2026-08-03 the hub ran four hours with zero devices
+	* and zero recordings while every surface stayed quiet.
+	*
+	* Payload: `{ findingId, severity, title, message, deviceId? }`.
+	*/
+	EventCategory["SystemLivenessFailed"] = "system.liveness-failed";
+	/**
+	* A previously reported liveness fault is true again. AlertCenter dismisses
+	* the matching `SystemLivenessFailed` alert.
+	*
+	* Payload: `{ findingId }`.
+	*/
+	EventCategory["SystemLivenessRecovered"] = "system.liveness-recovered";
+	/**
+	* Monitor is attempting to reload a failed addon NOW. UI uses this
+	* to show a spinner during the retry attempt. Same transient nature
+	* as AddonRetryScheduled.
+	*/
+	EventCategory["AddonRetryAttempting"] = "addon.retry-attempting";
+	EventCategory["DeviceRegistered"] = "device.registered";
+	EventCategory["DeviceUnregistered"] = "device.unregistered";
+	EventCategory["DeviceEnabled"] = "device.enabled";
+	EventCategory["DeviceDisabled"] = "device.disabled";
+	EventCategory["DeviceSettingsUpdated"] = "device.settings-updated";
+	/**
+	* Emitted when the set of native capability providers bound to a device
+	* changes — e.g. an addon registers a new native cap via
+	* `DeviceContext.registerNativeCap`, or all native bindings for a device
+	* are cleared on removal. Hub consumers re-resolve device-proxy routes
+	* when this fires.
+	*/
+	EventCategory["DeviceBindingsChanged"] = "device.bindings-changed";
+	/**
+	* Emitted when the operator-organisational meta surface changes
+	* (`name` / `location` / `disabled`). Payload: `{deviceId, field,
+	* value}`. Live consumers (UI device list, alert center) react
+	* without polling. Distinct from `DeviceSettingsUpdated` which
+	* fires on hardware-config changes (host/port/credentials/etc).
+	*/
+	EventCategory["DeviceMetaChanged"] = "device.meta-changed";
+	/**
+	* Emitted by `BaseDevice.updateSourceInfo()` after a successful patch
+	* to the device's upstream-system identity / rendering envelope. The
+	* full new SourceInfo travels in the payload so cross-process listeners
+	* (UI, export adapters) don't need to re-read the meta blob.
+	*
+	* Payload: `{deviceId, sourceInfo}`.
+	*
+	* Distinct from `DeviceMetaChanged` which covers the operator-edited
+	* surface (`name` / `location` / `disabled`). The two share the
+	* persistence layer (both ride on `device-manager.setMetadata` for
+	* SourceInfo, or `setName`/`setLocation`/`setDisabled` for the meta
+	* fields) but consumers care about different subsets.
+	*/
+	EventCategory["DeviceSourceInfoChanged"] = "device.source-info-changed";
+	/**
+	* Emitted by DeviceStreamWiringService after a successful
+	* `stream-broker.registerDeviceStreams` call. Payload includes
+	* deviceId — consumers look up the full registered device info via
+	* `brokerManager.getRegisteredDevice(deviceId)`.
+	*
+	* Replaces the legacy `StreamRouterService.onDeviceRegistered` callback.
+	*/
+	EventCategory["DeviceStreamsRegistered"] = "device.streams-registered";
+	/**
+	* Device-level "fully provisioned" signal — the EXPORT trigger. Emitted once
+	* a device's persisted export-relevant shape (its `DeviceFeature` set) is
+	* established or changes, carrying `{deviceId, fingerprint, generation}`.
+	* Export adapters (Alexa / HAP) react to THIS instead of the chatty per-cap
+	* `DeviceBindingsChanged`, turning a boot's incomplete→complete trickle into
+	* one clean delta. `fingerprint` is `canonicalDeviceFingerprint(shape)`.
+	*
+	* Spec: docs/superpowers/specs/2026-06-01-alexa-hap-export-reconciler-design.md
+	*/
+	EventCategory["DeviceProvisioned"] = "device.provisioned";
+	/**
+	* Fires once when a device's initial feature-probe completes successfully
+	* (lastProbedAt 0→>0); exported shape is now stable. Telemetry (may be
+	* dropped) — consumers MUST also gate on the device record's `probed` flag.
+	*/
+	EventCategory["DeviceReady"] = "device.ready";
+	EventCategory["IntegrationEnabled"] = "integration.enabled";
+	EventCategory["IntegrationDisabled"] = "integration.disabled";
+	EventCategory["IntegrationDeleted"] = "integration.deleted";
+	/** Emitted when a broker connection's status flips (connected /
+	*  disconnected / error). Carries `{ brokerId, status, error? }`. */
+	EventCategory["BrokerStatusChanged"] = "broker.status-changed";
+	/** Emitted for every subscription-matched message routed by a
+	*  broker provider. Carries `{ brokerId, subscriptionId, key, payload }`.
+	*  Consumers filter by `brokerId` + `subscriptionId` in the handler. */
+	EventCategory["BrokerMessage"] = "broker.message";
+	EventCategory["ProviderStarted"] = "provider.started";
+	EventCategory["ProviderStopped"] = "provider.stopped";
+	EventCategory["ProcessCrashed"] = "process.crashed";
+	EventCategory["ProcessRestartScheduled"] = "process.restart_scheduled";
+	EventCategory["ProcessRestarted"] = "process.restarted";
+	/**
+	* The SET of storage locations changed — one was created, edited, enabled,
+	* disabled or deleted through the location instances or the forced-delete action.
+	*
+	* Telemetry, not a transaction (D8/D11): every consumer that re-resolves on
+	* it must also converge on its own periodic path, because a dropped event
+	* must not leave a node writing to yesterday's disk set forever. It exists
+	* because there was NO signal at all — an operator who added a second
+	* recordings disk in the admin UI got nothing, and the recorder kept its
+	* resolved locations until something else happened to re-resolve them
+	* (D387). Payload `StorageLocationsChangedPayload`.
+	*/
+	EventCategory["StorageLocationsChanged"] = "storage.locations-changed";
+	EventCategory["RecordingStarted"] = "recording.started";
+	EventCategory["RecordingStopped"] = "recording.stopped";
+	EventCategory["RecordingError"] = "recording.error";
+	EventCategory["RecordingHealthDegraded"] = "recording.health.degraded";
+	/** Recording enabled but no segment finalized for the NC stall window. */
+	EventCategory["RecordingHealthStalled"] = "recording.health.stalled";
+	/** Recovery from {@link RecordingHealthStalled}. */
+	EventCategory["RecordingHealthOk"] = "recording.health.ok";
+	EventCategory["RecordingStorageCritical"] = "recording.storage.critical";
+	/** Free space on a storage location crossed the warn bar. */
+	EventCategory["StorageLocationLow"] = "storage.location.low";
+	/** Free space at/under the critical bar, or capacity probe failed (`null`). */
+	EventCategory["StorageLocationCritical"] = "storage.location.critical";
+	/** Recovery from low/critical on a storage location. */
+	EventCategory["StorageLocationOk"] = "storage.location.ok";
+	EventCategory["RecordingSegmentWritten"] = "recording.segment.written";
+	EventCategory["RecordingPolicyFallback"] = "recording.policy.fallback";
+	EventCategory["RecordingRetentionCompleted"] = "recording.retention.completed";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
+	EventCategory["DetectionEvent"] = "detection.event";
+	EventCategory["SessionTrackNew"] = "session.track.new";
+	EventCategory["SessionTrackExpired"] = "session.track.expired";
+	EventCategory["BenchmarkProgress"] = "benchmark.progress";
+	EventCategory["PlatformProbePhase"] = "platform-probe.phase";
+	EventCategory["PipelineProgress"] = "pipeline.progress";
+	/** Per-frame execution trace emitted by the pipeline executor for live observability. */
+	EventCategory["PipelineTrace"] = "pipeline.trace";
+	/**
+	* Raw inference output emitted by `addon-pipeline-runner` after running the
+	* detection pipeline on a frame. Carries the `FrameResult` (with
+	* `detections[]`, `width`/`height`, timing debug) — never the frame
+	* buffer itself. Hub-side consumers (analysis pipeline, class filters,
+	* notifications) subscribe to this and re-emit `detection.result` after
+	* post-processing.
+	*/
+	EventCategory["PipelineInferenceResult"] = "pipeline.inference-result";
+	/**
+	* Camera lifecycle event emitted by `addon-pipeline-orchestrator` when it
+	* assigns or unassigns a camera to/from an agent. Carries no frame data;
+	* pure observability for UI dashboards and metrics consumers.
+	*/
+	EventCategory["PipelineCameraAssigned"] = "pipeline.camera-assigned";
+	EventCategory["PipelineCameraUnassigned"] = "pipeline.camera-unassigned";
+	/**
+	* A node the orchestrator would otherwise place cameras on has NO usable
+	* inference device: the operator enabled one or more accelerators there and
+	* the live probe reports every one of them unavailable. Emitted once per
+	* TRANSITION into that state (never per dispatch), and the node is dropped
+	* from the placement candidate set for as long as it holds.
+	*
+	* This exists because the state was previously invisible: agent-a
+	* absorbed 283k inference errors in a day while still being handed cameras,
+	* and nothing in the system said so.
+	*
+	* A node with no accelerators configured at all is NOT this — its devices
+	* are `disabled`, not `unavailable`, and the runner's default CPU pool
+	* serves it exactly as before.
+	*/
+	EventCategory["PipelineNodeInferenceUnavailable"] = "pipeline.node-inference-unavailable";
+	/**
+	* A camera has an OPEN detection session and has produced no detection at
+	* all for longer than the blind threshold — the camera is being decoded and
+	* inferred and is returning nothing. Emitted once per transition into blind,
+	* per camera.
+	*
+	* The failure it reports: a 1h43 detection blackout on the entrance camera
+	* that nobody noticed, because "a camera that detects nothing" and "a quiet
+	* camera" produce byte-identical silence.
+	*/
+	EventCategory["PipelineDetectionBlind"] = "pipeline.detection-blind";
+	/**
+	* A camera's motion source has fired constantly with no subject for an hour
+	* (motion duty or session count over the bar, zero detections) — it is not
+	* blind, its motion zones or sensitivity want tuning (D907). Paired with
+	* {@link PipelineMotionCalm}.
+	*/
+	EventCategory["PipelineMotionNoisy"] = "pipeline.motion-noisy";
+	/** The recovery edge of {@link PipelineMotionNoisy}: the motion fell back, or a detection arrived. */
+	EventCategory["PipelineMotionCalm"] = "pipeline.motion-calm";
+	/**
+	* A camera's package LLM confirm has failed closed three times in a row
+	* (D931, 2026-10-26). One edge per camera until
+	* {@link PipelinePackageLlmAnswered}.
+	*/
+	EventCategory["PipelinePackageLlmSilent"] = "pipeline.package-llm-silent";
+	/** The recovery edge of {@link PipelinePackageLlmSilent}: a confirm returned yes or no. */
+	EventCategory["PipelinePackageLlmAnswered"] = "pipeline.package-llm-answered";
+	/**
+	* Per-camera pipeline config was mutated by the orchestrator
+	* (a settings change via `setAgentInferenceDevices` /
+	* `setCameraStepToggle` / `setCameraStepSettings`). Orchestrator
+	* subscribes to its own emission to hot-reload the assigned runner
+	* via `attachCamera` so the next frame executes against the new
+	* engine/steps without waiting for a rebalance or the next
+	* `DeviceStreamsRegistered` cycle.
+	*/
+	EventCategory["PipelineCameraUpdated"] = "pipeline.camera-updated";
+	/**
+	* The cluster camera-source OWNER changed (`clusterRoles.ingestNode`).
+	* Emitted by addon-pipeline-orchestrator whenever it (re)derives node
+	* capabilities — at boot, on agent online/offline, and on an ingest-node
+	* flip. Carries the resolved `ownerNodeId`. The stream-broker consumes it to
+	* keep its ingest-owner-gate decision current WITHOUT a per-`ensureBroker`
+	* cross-process `getIngestOwner` query (push the authority's decision instead
+	* of polling it on the hot path). Idempotent state — re-emitted on every
+	* topology change, so a dropped event self-heals on the next one (plus the
+	* broker's long backstop reconcile query).
+	*/
+	EventCategory["PipelineIngestOwnerChanged"] = "pipeline.ingest-owner-changed";
+	/**
+	* Periodic snapshot of per-node pipeline-runner load
+	* (`RunnerLocalLoad`). Emitted ~1Hz by every runner so UI dashboards
+	* subscribe instead of polling `pipelineRunner.getLocalLoad`.
+	* `nodeId` carried in the payload + on `event.source.nodeId`.
+	*/
+	EventCategory["PipelineRunnerLoadSnapshot"] = "pipeline.runner-load-snapshot";
+	/**
+	* Periodic snapshot of per-camera pipeline metrics (`CameraMetrics`
+	* + `deviceId` + `nodeId`). Emitted ~1Hz by every runner for each
+	* attached camera. UI subscribes to drive overlay phase / fps /
+	* inference time without polling `getCameraMetrics`.
+	*/
+	EventCategory["PipelineCameraMetricsSnapshot"] = "pipeline.camera-metrics-snapshot";
+	/**
+	* Periodic snapshot of stream-broker per-broker statistics (input
+	* fps, decoded fps, bitrate, codec). Emitted ~1Hz by every
+	* stream-broker process for each active broker so the UI can drive
+	* the Stream / Cluster dashboards without polling
+	* `streamBroker.listAllProfileSlots` and friends.
+	*/
+	EventCategory["StreamBrokerMetricsSnapshot"] = "stream-broker.metrics-snapshot";
+	/**
+	* Cap event fired by `stream-broker` when a profile slot enters
+	* "demanded" state — a cam stream has been assigned and at least one
+	* consumer (RTSP restream, decoded subscriber, WebRTC session, …) is
+	* present. Camera-provider addons (Reolink Baichuan push, …)
+	* subscribe to this category to start their underlying transport
+	* lazily. Payload: `{ deviceId, camStreamId, profile }`.
+	*/
+	EventCategory["StreamBrokerOnCamStreamDemand"] = "stream-broker.onCamStreamDemand";
+	/**
+	* Cap event fired by `stream-broker` when the last consumer leaves a
+	* previously-demanded cam stream. Providers tear down their
+	* underlying transport on receipt. Payload: `{ deviceId, camStreamId }`.
+	*/
+	EventCategory["StreamBrokerOnCamStreamIdle"] = "stream-broker.onCamStreamIdle";
+	/**
+	* Cap event fired by `stream-broker` when a broker fails to dial a
+	* managed-loopback source (today: `pull-rfc4571`) and the publisher
+	* needs to refresh the cached URL. The lib's TCP server idle-tears-down
+	* on its own schedule, so a re-publish with a fresh `host:port` is the
+	* only way to keep the broker dialable. Camera providers (Reolink
+	* Baichuan native, …) subscribe and respond by re-running their publish
+	* pipeline.
+	* Payload: `{ deviceId, camStreamId, brokerId }`.
+	*/
+	EventCategory["StreamBrokerOnRequestStreamSourceRefresh"] = "stream-broker.onRequestStreamSourceRefresh";
+	/**
+	* A camera provider changed a device's stream parameters (codec /
+	* resolution / bitrate / a stream added or removed). A LOW-LATENCY NUDGE
+	* for the stream-broker's catalog reconcile: it carries NO authoritative
+	* data — the broker re-PULLS that device's `stream-catalog` cap on receipt
+	* (the 30s reconcile poll is the backstop if this nudge is dropped). Emitted
+	* by providers from `stream-params.setProfile`. Payload: `{ deviceId }`.
+	*/
+	EventCategory["StreamParamsChanged"] = "stream-params.changed";
+	/**
+	* Generic per-device runtime-state change. Fired by `device-manager`
+	* whenever a persisted slice in any cap's `runtimeState` shape
+	* mutates. Payload: `{deviceId, capName, slice}`. Subscribers are
+	* the `deviceState` cap router (cross-process listeners) and the
+	* deviceProxy reactive bindings (`device.state.<capName>.value`).
+	* Cap-specific events (`battery.onStatusChanged`, …) still fire
+	* — they're authoritative for callers that want a typed payload
+	* without filtering on `capName`.
+	*/
+	EventCategory["DeviceStateChanged"] = "device.state-changed";
+	/**
+	* The NATIVE shadow of a cap a composition has claimed fields of moved
+	* (D663). Payload: `{ deviceId, capName, native }` — what the provider
+	* wrote, BEFORE the owned fields are overlaid. Owner-only (D224): it is for
+	* the composer's native self-reads, and the public event routers refuse it
+	* (`isOwnerOnlyEventCategory`) so no consumer surface ever shows a second
+	* truth beside the merged `DeviceStateChanged.slice`. Emitted only under a
+	* `replace` claim, one per native write of that cap.
+	*/
+	EventCategory["DeviceNativeShadowChanged"] = "device.native-shadow-changed";
+	/**
+	* Frame occupancy for a camera CHANGED — a tracked object was gained or
+	* lost. Carries `{ deviceId, totalObjects, byClass, zones }`.
+	*
+	* Emitted only on a change, so a steady scene is silent. It exists so a
+	* client can stop polling `zoneAnalytics.getCurrentSnapshot`: that was the
+	* one live badge with no push signal at all, and it cost a request every
+	* four seconds per visible camera.
+	*
+	* Like every event it is telemetry and may be dropped ([D8]) — a consumer
+	* keeps a slow reconcile rather than trusting it alone.
+	*/
+	EventCategory["ZoneAnalyticsOccupancyChanged"] = "zone-analytics.occupancy-changed";
+	/**
+	* Cap event fired by every device that registers the `battery`
+	* capability. Mirrors the cap definition's `onStatusChanged`. Carries
+	* `{ deviceId, status: BatteryStatus }`. Subscribers (alert center,
+	* snapshot wrapper, UI) react to charge/sleep transitions without
+	* polling `batteryCapability.getStatus`.
+	*/
+	EventCategory["BatteryOnStatusChanged"] = "battery.onStatusChanged";
+	/**
+	* Cap event fired by every device that registers the `network-link`
+	* capability. Mirrors the cap definition's `onStatusChanged`. Carries
+	* `{ deviceId, status: NetworkLinkStatus }` — a link switch or a signal
+	* reading that moved.
+	*/
+	EventCategory["NetworkLinkOnStatusChanged"] = "network-link.onStatusChanged";
+	/**
+	* Emitted by the battery cap provider WHEN `wakeForStream` enters the
+	* "wake in progress" window — between the Baichuan wake-up issue and
+	* the camera's first dialed-back RTP packet. The stream-broker
+	* manager subscribes to flip the per-broker placeholder reason to
+	* `'waking'` so viewers see a labelled "WAKING UP" tile instead of
+	* the generic `'reconnecting'` frame. Carries `{ deviceId }`. The
+	* complementary "wake complete" signal is the existing
+	* `BatteryOnStatusChanged { sleeping: false }` event.
+	*/
+	EventCategory["BatteryOnWakeStarted"] = "battery.onWakeStarted";
+	/**
+	* Cap event fired by every device that registers the `doorbell`
+	* capability. Mirrors `doorbellCapability.events.onPressed`. Carries
+	* `{ deviceId, timestamp }`. Operators consuming the UI subscribe
+	* here to render transient ring toasts and a "Recent presses" row
+	* on the device detail page.
+	*/
+	EventCategory["DoorbellOnPressed"] = "doorbell.onPressed";
+	/** Mirrors `runningStateCapability.events.onStarted`. */
+	EventCategory["RunningStarted"] = "running.started";
+	/** Mirrors `runningStateCapability.events.onFinished`. */
+	EventCategory["RunningFinished"] = "running.finished";
+	/** Mirrors `deviceRunsCapability.events.onRunOpened` - a durable run record opened. */
+	EventCategory["DeviceRunOpened"] = "device-run.opened";
+	/** Mirrors `deviceRunsCapability.events.onRunClosed` - a durable run record closed. */
+	EventCategory["DeviceRunClosed"] = "device-run.closed";
+	/**
+	* Cap event fired by every device that registers the `event-emitter`
+	* capability. Mirrors `eventEmitterCapability.events.onEvent`. Carries
+	* `{ deviceId, eventType, data, timestamp, seq }` — the device's EXACT
+	* declared event verbatim (NO normalization). Subscribers (UI event
+	* stream, advanced-notifier rules) react to fired events without
+	* holding a cap reference.
+	*/
+	EventCategory["EventEmitted"] = "event-emitter.event";
+	/**
+	* Periodic snapshot of the per-node detection-pipeline engine
+	* registry (loaded engines, models resident, in-use cameras, idle
+	* TTL). Emitted ~0.2Hz (every 5 s) by every detection-pipeline
+	* process. The Engines tab subscribes to drive its inventory view
+	* without polling `pipelineExecutor.listLoadedEngines`.
+	*/
+	EventCategory["PipelineEngineMetricsSnapshot"] = "pipeline.engine-metrics-snapshot";
+	/**
+	* Per-node detection-engine runtime-provisioning transition. Emitted by
+	* the detection-pipeline provider on every state change of its lazy
+	* engine-provisioning machine (idle → installing → verifying → ready,
+	* or → failed with a `nextRetryAt`). Payload is the
+	* `EngineProvisioningState` snapshot; `event.source.nodeId` carries the
+	* node. The Pipeline page subscribes to drive a live "installing
+	* OpenVINO… / ready" indicator per node without polling
+	* `pipelineExecutor.getEngineProvisioning`. Telemetry-grade (D8): the UI
+	* also reads the cap snapshot on mount / reconnect. Phase 2.
+	*/
+	EventCategory["PipelineEngineProvisioning"] = "pipeline.engine-provisioning";
+	/**
+	* Cluster topology snapshot. Carries the same payload returned by
+	* `nodes.topology` (every reachable node + addons + processes).
+	* Emitted by the hub on any agent / addon lifecycle change
+	* (debounced) plus a periodic safety net. Replaces UI polling on
+	* `nodes.topology` — admin-ui dashboards subscribe to drive the
+	* cluster view directly from the event payload.
+	*/
+	EventCategory["ClusterTopologySnapshot"] = "cluster.topology-snapshot";
+	/**
+	* Periodic per-node system metrics snapshot (CPU / memory / GPU /
+	* disk / network). Emitted ~0.2 Hz by the metrics-provider addon
+	* for each node. Drives the dashboard SystemStatus / ProcessResources
+	* widgets without polling `metricsProvider.getCurrent`.
+	*/
+	EventCategory["MetricsNodeResourcesSnapshot"] = "metrics.node-resources-snapshot";
+	/**
+	* Periodic per-node process-tree snapshot (camstack-related pids
+	* with root / managed / system classification). Emitted ~0.2 Hz by
+	* the metrics-provider addon. Drives the Cluster → Processes tab
+	* without polling `metricsProvider.listNodeProcesses`.
+	*/
+	EventCategory["MetricsNodeProcessesSnapshot"] = "metrics.node-processes-snapshot";
+	/**
+	* Capability binding change event emitted by `addon-pipeline-orchestrator`
+	* when a user changes which addon implements a cap on a node. Subscribed
+	* by every kernel process to update its local `preferredProviderRegistry`
+	* so future capability lookups respect the new binding.
+	*/
+	/**
+	* A capability binding was changed for a node — addon X now provides
+	* capability `cap` on node `nodeId`. Lives under the generic
+	* `capability.*` namespace because capability bindings are a kernel-
+	* level concept used by many addons, not strictly pipeline-scoped.
+	*/
+	EventCategory["CapabilityBindingChanged"] = "capability.binding-changed";
+	EventCategory["ModelDownloadProgress"] = "model.download.progress";
+	EventCategory["AgentRegistered"] = "agent.registered";
+	EventCategory["AgentUnregistered"] = "agent.unregistered";
+	EventCategory["AgentOnline"] = "agent.online";
+	EventCategory["AgentOffline"] = "agent.offline";
+	/** Forked worker process (e.g. hub/pipeline) connected to the broker. */
+	EventCategory["WorkerOnline"] = "worker.online";
+	/** Forked worker process disconnected from the broker. */
+	EventCategory["WorkerOffline"] = "worker.offline";
+	EventCategory["AgentTaskDispatched"] = "agent.task.dispatched";
+	EventCategory["AgentTaskAssigned"] = "agent.task.assigned";
+	EventCategory["AgentTrpcConnected"] = "agent.trpc.connected";
+	EventCategory["AgentWsConnected"] = "agent.ws.connected";
+	EventCategory["AgentWsDisconnected"] = "agent.ws.disconnected";
+	EventCategory["AgentBackupActivated"] = "agent.backup.activated";
+	EventCategory["OrchestrationSettingsUpdated"] = "orchestration.settings-updated";
+	EventCategory["MotionAnalysis"] = "detection.motion-analysis";
+	/** All raw motion zones from CCL before minArea filter — for UI debug overlay. */
+	EventCategory["MotionZonesRaw"] = "detection.motion-zones-raw";
+	/**
+	* Per-camera motion phase transition (`watching ↔ active`) emitted
+	* by the runner. Mirrors the `motion.onMotionChanged` cap event
+	* surface — payload `MotionOnMotionChangedPayload` carries
+	* `{deviceId, detected, timestamp, source, regions?}`. Subscribers
+	* include addons that need to react to motion state without
+	* polling the runtime-state mirror.
+	*/
+	EventCategory["MotionOnMotionChanged"] = "motion.on-motion-changed";
+	EventCategory["DetectionResult"] = "detection.result";
+	EventCategory["DetectionRaw"] = "detection.raw";
+	EventCategory["DetectionCameraNative"] = "detection.camera-native";
+	/**
+	* Canonical per-chunk live audio pipeline output. Payload is
+	* `PipelineAudioInferenceResultPayload` carrying a full `AudioResult`
+	* (level + detections + debug). Lives on the pipeline.* namespace
+	* alongside `pipeline.inference-result` (video) for symmetry.
+	*/
+	EventCategory["PipelineAudioInferenceResult"] = "pipeline.audio-inference-result";
+	EventCategory["DetectionPhaseTransition"] = "detection.phase-transition";
+	/**
+	* A camera provider's RAW onboard motion push (D673): the `MotionOnMotionChanged`
+	* data shape without `triggeredBy`, built by `providerMotionEvent`. Its one
+	* consumer is the orchestrator's camera-sensors bridge, which re-emits the
+	* camera's EFFECTIVE onboard motion as `MotionOnMotionChanged` (a pass-through
+	* for a camera with no attached sensor). Providers must not emit
+	* `MotionOnMotionChanged` themselves; `scripts/check-onboard-motion-emitters.ts`
+	* keeps it so (camera-grid is a named, deferred exception).
+	*/
+	EventCategory["ProviderMotion"] = "provider.motion";
+	EventCategory["ProviderDetection"] = "provider.detection";
+	EventCategory["EnrichmentEmbeddingStored"] = "enrichment.embedding.stored";
+	EventCategory["EnrichmentSceneStateChanged"] = "enrichment.scene.state-changed";
+	EventCategory["EnrichmentActivitySummary"] = "enrichment.activity.summary";
+	/**
+	* Unified track-lifecycle event: ONE category carrying `phase:
+	* 'start' | 'update' | 'end'` with a rich, typed
+	* `PipelineAnalyticsTrackLifecyclePayload`. Supersedes the thin
+	* `PipelineAnalyticsTrackStarted` / `PipelineAnalyticsTrackEnded`
+	* pair — a consumer subscribes once and branches on `phase`.
+	*/
+	EventCategory["PipelineAnalyticsTrackLifecycle"] = "pipeline-analytics.track-lifecycle";
+	/**
+	* @deprecated Superseded by {@link PipelineAnalyticsTrackLifecycle}
+	* (`phase:'start'`). Kept as a soft alias — no known subscribers.
+	*/
+	EventCategory["PipelineAnalyticsTrackStarted"] = "pipeline-analytics.track-started";
+	/**
+	* @deprecated Superseded by {@link PipelineAnalyticsTrackLifecycle}
+	* (`phase:'end'`). Kept as a soft alias — no known subscribers.
+	*/
+	EventCategory["PipelineAnalyticsTrackEnded"] = "pipeline-analytics.track-ended";
+	EventCategory["PipelineAnalyticsDetectionEvent"] = "pipeline-analytics.detection-event";
+	EventCategory["PipelineAnalyticsFrameTracked"] = "pipeline-analytics.frame-tracked";
+	/**
+	* Fired by `addon-post-analysis` when a parked (stationary) object appears
+	* (a track was promoted to a stationary-registry entry) or departs (the
+	* object moved / was removed). Telemetry (D8): lossy, drives a UI refresh of
+	* the dedicated "Stationary" section — never the live event feed. Payload:
+	* `{ deviceId, entryId, className, phase:'appeared'|'departed', timestamp, observedAt, zones }`.
+	*/
+	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
+	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaId?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
+	* Fired by `addon-post-analysis` whenever a gallery face row changes:
+	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
+	* `'unassigned'` its identity link changed, `'deleted'` the row was
+	* removed. Telemetry semantics (D8): a lost event only delays a refresh,
+	* never a correctness issue. Payload `PipelineAnalyticsFaceGalleryChangedPayload`.
+	*/
+	EventCategory["PipelineAnalyticsFaceGalleryChanged"] = "pipeline-analytics.face-gallery-changed";
+	/**
+	* Fired by `addon-post-analysis` whenever a gallery plate row changes:
+	* `kind:'buffered'` a new read was persisted (`PlateRecognizer.onTrackEnd`),
+	* `'assigned'` / `'unassigned'` its vehicle link changed
+	* (`PlateGalleryProvider`), `'deleted'` the row was removed. Telemetry
+	* semantics (D8): a lost event only delays a refresh, never a correctness
+	* issue. Payload `PipelineAnalyticsPlateGalleryChangedPayload`.
+	*/
+	EventCategory["PipelineAnalyticsPlateGalleryChanged"] = "pipeline-analytics.plate-gallery-changed";
+	EventCategory["CameraStreamsProfileSlotsChanged"] = "camera-streams.onProfileSlotsChanged";
+	/**
+	* Stream-broker health watchdog. Per-broker (deviceId/profile) emission.
+	* `stream.offline` fires after STREAM_STALE_TIMEOUT_MS without an encoded
+	* packet on an active broker. `stream.online` fires on first packet
+	* after a stale gap (or on initial first packet). Payload includes
+	* the assigned camStreamId as `profileKey`.
+	*/
+	EventCategory["StreamOnline"] = "stream.online";
+	EventCategory["StreamOffline"] = "stream.offline";
+	EventCategory["NetworkTunnelStarted"] = "network.tunnel.started";
+	EventCategory["NetworkTunnelStopped"] = "network.tunnel.stopped";
+	/** Fired by the `local-network` cap when the host's interface set
+	*  changes (new IP from DHCP, VPN connect, docker bridge added). */
+	EventCategory["LocalNetworkChanged"] = "network.local.changed";
+	/**
+	* Fired by a `mesh-network` provider (Tailscale, …) when its
+	* mesh-reachable host changes (join / leave / MagicDNS or 100.x IP
+	* change). Lets `local-network` fold the mesh endpoint into its
+	* connection-endpoint list without a cross-package import. Payload
+	* carries the preferred host (`host: ''` = no longer reachable),
+	* the hub port, and the scheme. Telemetry-grade (D8): consumers
+	* pull-reconcile from the provider's `getStatus` on reconnect. */
+	EventCategory["MeshNetworkChanged"] = "network.mesh.changed";
+	EventCategory["BackupCompleted"] = "backup.completed";
+	/**
+	* A whole backup RUN finished — every destination attempted, win or lose.
+	*
+	* `backup.completed` fires once per DESTINATION, which is the right grain for
+	* a progress UI and the wrong one for a notification: an operator with three
+	* destinations would be told three times. And a run where two of three
+	* destinations succeeded is not a clean success — a single "backup
+	* completed" that hid the failed one would be a lie, so the count of each is
+	* carried here and the message says both.
+	*
+	* Emitted by the backup orchestrator only after the destination loop, so a
+	* run that dies during the BUILD phase produces no completion at all.
+	*/
+	EventCategory["BackupRunCompleted"] = "backup.run-completed";
+	EventCategory["BackupRestored"] = "backup.restored";
+	EventCategory["NotificationDispatched"] = "notification.dispatched";
+	EventCategory["NotificationFailed"] = "notification.failed";
+	/**
+	* A notification rule that cannot work (D905): its stored row does not load,
+	* or it still names a device / delivery target the prune CONFIRMED deleted.
+	* One edge per rule per distinct set of reasons; never on an unanswered read.
+	*/
+	EventCategory["NotificationRuleBroken"] = "notification.rule-broken";
+	/** The clear of {@link NotificationRuleBroken}: the rule loads and names nothing deleted. */
+	EventCategory["NotificationRuleRepaired"] = "notification.rule-repaired";
+	/** A migration failed or was blocked; the Alert Center re-reads the ledger. */
+	EventCategory["MigrationFailed"] = "migration.failed";
+	/** A migration applied or a failure cleared; the Alert Center re-reads the ledger. */
+	EventCategory["MigrationApplied"] = "migration.applied";
+	EventCategory["DeviceUpdated"] = "device.updated";
+	/**
+	* Transport-level connectivity. Emitted by the device driver when
+	* the underlying control socket actually connects / disconnects
+	* (Baichuan TCP, ONVIF probe response, RTSP DESCRIBE, …) — NOT for
+	* power-state transitions on a battery camera. For battery wake /
+	* doze cycles see `DeviceAwake` / `DeviceSleeping`.
+	*/
+	EventCategory["DeviceOnline"] = "device.online";
+	/**
+	* Stream-broker watchdog — emitted when no encoded packet has been
+	* received for STREAM_STALE_TIMEOUT_MS on an active broker (rtsp or
+	* push). Paired with DeviceOnline which fires on first packet after
+	* a stale gap. Payload: DeviceStreamHealthPayload.
+	*/
+	EventCategory["DeviceOffline"] = "device.offline";
+	/**
+	* Battery cam woke up — physical power-state transition reported
+	* by the device firmware. Distinct from `DeviceOnline` so a UI panel
+	* watching power state doesn't flap on every UDP socket reconnect.
+	*/
+	EventCategory["DeviceAwake"] = "device.awake";
+	/**
+	* Battery cam went to sleep. See `DeviceAwake`.
+	*/
+	EventCategory["DeviceSleeping"] = "device.sleeping";
+	EventCategory["RetentionCleanup"] = "retention.cleanup";
+	/**
+	* Legacy bulk-update progress snapshot (payload `BulkUpdateState`). No longer
+	* emitted — F3 removed the coordinator that produced it; "Update all" now runs
+	* as one lifecycle engine job (`AddonsJobProgress`/`AddonsJobLog`). Retained
+	* (with `BulkUpdateState`) only to avoid regenerating the event maps; removed
+	* in F4 once live bulk progress is re-implemented over the engine events.
+	*/
+	EventCategory["AddonsBulkUpdateProgress"] = "addons.bulk-update-progress";
+	EventCategory["AddonsJobProgress"] = "addons.job-progress";
+	EventCategory["AddonsJobLog"] = "addons.job-log";
+	/**
+	* A container's child visibility toggled (hidden/shown). Emitted by the
+	* `accessories` cap when a child device is hidden or revealed.
+	* Payload: `{ deviceId, childDeviceId, hidden }`.
+	*/
+	EventCategory["AccessoriesChildVisibilityChanged"] = "accessories.onChildVisibilityChanged";
+	/**
+	* A container's child set changed (children added/removed/reordered).
+	* Payload: `{ deviceId, childDeviceIds, hiddenChildIds }`.
+	*/
+	EventCategory["AccessoriesChanged"] = "accessories.onAccessoriesChanged";
+	/**
+	* An action run started or ended. Emitted by the `actions` surface.
+	* Payload: `ActionRunChanged` (`{ actionId, runId, isRunning, outcome?, lastRunAt, lastError }`).
+	*/
+	EventCategory["ActionsRunChanged"] = "actions.onRunChanged";
+	/**
+	* Progress update from a running model conversion job.
+	* Payload: `{ kind: 'model-convert', phase, sessionId?, pct?, detail? }`.
+	* Emitted by `addon-model-studio` on the converting node.
+	*/
+	EventCategory["ModelConvertProgress"] = "model-convert.progress";
+	return EventCategory;
+}({});
+//#endregion
+//#region ../types/dist/device-type-DxCT0krO.mjs
+/**
+import { errMsg } from '@camstack/types'
+* Extract a human-readable message from an unknown error value.
+* Replaces the ubiquitous `errMsg(err)` pattern.
+*/
+function errMsg(err) {
+	if (err instanceof Error) return err.message;
+	if (typeof err === "string") return err;
+	return String(err);
 }
+var DeviceType = /* @__PURE__ */ function(DeviceType) {
+	DeviceType["Camera"] = "camera";
+	DeviceType["Hub"] = "hub";
+	DeviceType["Light"] = "light";
+	DeviceType["Siren"] = "siren";
+	DeviceType["Switch"] = "switch";
+	DeviceType["Sensor"] = "sensor";
+	DeviceType["Thermostat"] = "thermostat";
+	/** Air-conditioner / heat-pump climate device (HVAC) — shares the
+	*  `climate-control` cap surface with `Thermostat` but renders a
+	*  dedicated AC-appropriate control UI (mode chips, fan speed,
+	*  independent vertical/horizontal swing). Sources: native Gree, and
+	*  reusable by other AC integrations. */
+	DeviceType["Climate"] = "climate";
+	DeviceType["Button"] = "button";
+	/** Generic stateless event emitter — carries a device's EXACT declared
+	*  event vocabulary verbatim (no normalization). Installed with the
+	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
+	*  HA bus events (e.g. `zha_event`, generic). */
+	DeviceType["EventEmitter"] = "event-emitter";
+	/** Firmware/software update entity — current vs available version,
+	*  updatable flag, update state, and an install action. Installed with
+	*  the `update` cap. Sources: Homematic firmware-update channels (and
+	*  reusable by other providers, e.g. HA `update.*` entities). */
+	DeviceType["Update"] = "update";
+	DeviceType["Generic"] = "generic";
+	/** Generic notification delivery target (HA `notify.<service>`, future
+	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
+	*  endpoint; the `notifier` cap defines the send surface. */
+	DeviceType["Notifier"] = "notifier";
+	/** Pre-recorded action sequence with optional parameters
+	*  (HA `script.*`). Runnable via `script-runner` cap. */
+	DeviceType["Script"] = "script";
+	/** Automation rule (HA `automation.*`) — enable/disable + manual
+	*  trigger surface exposed via `automation-control` cap. */
+	DeviceType["Automation"] = "automation";
+	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
+	DeviceType["Lock"] = "lock";
+	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
+	*  `valve.*`). `cover` cap with sub-roles for variant. */
+	DeviceType["Cover"] = "cover";
+	/** Pipe / water / gas valve with open/close/stop and optional
+	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
+	*  modelled on the same open/closed lifecycle. */
+	DeviceType["Valve"] = "valve";
+	/** Humidifier / dehumidifier with on/off + target humidity + mode
+	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
+	*  modelled on the same target / mode lifecycle. */
+	DeviceType["Humidifier"] = "humidifier";
+	/** Water heater / boiler with target temperature + operation mode +
+	*  away mode (HA `water_heater.*`). `water-heater` cap — a
+	*  climate-family actuator. */
+	DeviceType["WaterHeater"] = "water-heater";
+	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
+	DeviceType["Fan"] = "fan";
+	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
+	*  the camera surface — those use `Camera`. `media-player` cap. */
+	DeviceType["MediaPlayer"] = "media-player";
+	/** Security panel / alarm system (HA `alarm_control_panel.*`).
+	*  `alarm-panel` cap. */
+	DeviceType["AlarmPanel"] = "alarm-panel";
+	/** Generic user-settable input (HA `number` / `input_number` / `select`
+	*  / `input_select` / `text` / `input_text` / `input_datetime`).
+	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
+	*  TextControl / DateTimeControl. */
+	DeviceType["Control"] = "control";
+	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
+	*  `presence` cap. */
+	DeviceType["Presence"] = "presence";
+	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
+	*  `weather` cap. */
+	DeviceType["Weather"] = "weather";
+	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
+	DeviceType["Vacuum"] = "vacuum";
+	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
+	*  `lawn-mower-control` cap. */
+	DeviceType["LawnMower"] = "lawn-mower";
+	/** Physical HA device group — parent container for entity-children
+	*  adopted from a single HA device entry. Not renderable as a
+	*  standalone device; exists only to anchor child entities. */
+	DeviceType["Container"] = "container";
+	/** Single still-image entity (HA `image.*`). Read-only display of an
+	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
+	DeviceType["Image"] = "image";
+	/** Smart pet feeder — cloud-connected food dispenser with a bowl food
+	*  level, battery, desiccant life, feeding state and manual-feed /
+	*  call-pet / maintenance actions. Installed with the `pet-feeder` cap;
+	*  dual-hopper models (D4S/D4SH) expose per-hopper portions. Sources:
+	*  native PetKit (`nodepetkit` `FeederDevice`), reusable by other feeder
+	*  integrations sharing the same food/desiccant/hopper surface. */
+	DeviceType["PetFeeder"] = "pet-feeder";
+	/** Pet water fountain — tank level, water drunk, pump and its duty cycle.
+	*  Installed with the `pet-fountain` cap. Reaches CamStack as loose entities
+	*  of a container and is BUILT as a composed device (D967). */
+	DeviceType["PetFountain"] = "pet-fountain";
+	/** Built-in dishwasher — program lifecycle, door / remote-start gates,
+	*  salt and rinse-aid levels. Installed with the `dishwasher` cap.
+	*  Sources: native Bosch Home Connect, reusable by similar integrations.
+	*  A plug-built dishwasher carries running-state and power instead. */
+	DeviceType["Dishwasher"] = "dishwasher";
+	/** Washing machine. A plug-built one is running while its power stays
+	*  above a threshold. No program cap — that surface is the dishwasher's. */
+	DeviceType["Washer"] = "washer";
+	/** A dumb plug-in stove or heater: a switch (and, with a meter, a power
+	*  reading) that only runs while the plug is on. Built from a smart plug;
+	*  the `timed-run` cap switches it off again after a chosen time. */
+	DeviceType["Heater"] = "heater";
+	/** Tumble dryer. Same plug-built running surface as {@link Washer}. */
+	DeviceType["Dryer"] = "dryer";
+	/** The physical bridge box of a vendor ecosystem (Velux KLF-200, and later
+	*  other radio-to-IP bridges). It carries the box's own facts (firmware,
+	*  address, connection state) and the actions the box really supports
+	*  (`reboot`, `device-admin-link`). Products are NOT its children — they are
+	*  adopted beside it — and its connection settings stay on the integration. */
+	DeviceType["Gateway"] = "gateway";
+	return DeviceType;
+}({});
+var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
+	DeviceFeature["BatteryOperated"] = "battery-operated";
+	DeviceFeature["Rebootable"] = "rebootable";
+	/**
+	* Device supports an on-demand re-sync of its derived spec with its
+	* upstream source — drives the generic Re-sync button. The owning
+	* provider implements the action via the `device-adoption.resync` cap.
+	*/
+	DeviceFeature["Resyncable"] = "resyncable";
+	DeviceFeature["NativeSnapshot"] = "native-snapshot";
+	DeviceFeature["DoorbellButton"] = "doorbell-button";
+	DeviceFeature["TwoWayAudio"] = "two-way-audio";
+	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
+	/**
+	* Camera supports the on-firmware autotrack subsystem (subject-
+	* following). Distinct from `PanTiltZoom` because not every PTZ
+	* camera ships autotrack — the admin UI uses this flag to gate
+	* the autotrack toggle / settings card without re-deriving from
+	* the cap registry. Mirrors `ptz-autotrack` cap registration:
+	* driver sets this feature when probe confirms the firmware
+	* surface, and registers the cap in the same code path.
+	*/
+	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
+	/**
+	* Accessory exposes a "trigger on motion" toggle — the parent camera's
+	* motion detection automatically activates this device. Mirrors
+	* `motion-trigger` cap registration: drivers set this feature in the
+	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
+	*
+	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
+	* fast scalar without binding fetch), notifier rules, and `listAll`
+	* filters that want "all devices with on-motion behaviour".
+	*/
+	DeviceFeature["MotionTrigger"] = "motion-trigger";
+	/**
+	* Device can be run for a chosen time and then stopped. Mirrors the
+	* `timed-run` wrapper cap — the cap is bound by the core-blocks addon, not by
+	* a driver, so the flag is derived from the device's bindings
+	* (`featuresOfBoundCaps`). Gates the quick-run control in the viewer.
+	*/
+	DeviceFeature["TimedRun"] = "timed-run";
+	/** Light supports rgb-triplet color via `color` cap. */
+	DeviceFeature["LightColorRgb"] = "light-color-rgb";
+	/** Light supports HSV color via `color` cap. */
+	DeviceFeature["LightColorHsv"] = "light-color-hsv";
+	/** Light supports color-temperature (mired) via `color` cap. */
+	DeviceFeature["LightColorMired"] = "light-color-mired";
+	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
+	*  targetHigh). Gates the range slider UI. */
+	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
+	/** Thermostat exposes target humidity and/or current humidity
+	*  readings. Gates the humidity controls. */
+	DeviceFeature["ClimateHumidity"] = "climate-humidity";
+	/** Thermostat exposes a fan-mode selector. */
+	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
+	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
+	DeviceFeature["ClimatePreset"] = "climate-preset";
+	/** Thermostat exposes a vertical louver swing toggle. Gates the
+	*  vertical-swing switch in the climate UI. Independent of horizontal. */
+	DeviceFeature["ClimateSwingVertical"] = "climate-swing-vertical";
+	/** Thermostat exposes a horizontal louver swing toggle. Gates the
+	*  horizontal-swing switch in the climate UI. Independent of vertical. */
+	DeviceFeature["ClimateSwingHorizontal"] = "climate-swing-horizontal";
+	/** Cover exposes intermediate position control (0..100). Gates the
+	*  position slider UI. */
+	DeviceFeature["CoverPositionable"] = "cover-positionable";
+	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
+	DeviceFeature["CoverTilt"] = "cover-tilt";
+	/** Cover has a real stop: `stop` halts the travel in place. Gates the stop
+	*  control in exporters; a provider whose `stop` is a no-op never declares it. */
+	DeviceFeature["CoverStoppable"] = "cover-stoppable";
+	/** Valve exposes intermediate position control (0..100). Gates the
+	*  position slider / drag surface UI. */
+	DeviceFeature["ValvePositionable"] = "valve-positionable";
+	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
+	DeviceFeature["FanSpeed"] = "fan-speed";
+	/** Fan exposes a preset mode selector. */
+	DeviceFeature["FanPreset"] = "fan-preset";
+	/** Fan exposes blade direction (forward/reverse) — typical of
+	*  ceiling fans. */
+	DeviceFeature["FanDirection"] = "fan-direction";
+	/** Fan exposes an oscillation toggle. */
+	DeviceFeature["FanOscillating"] = "fan-oscillating";
+	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
+	*  field on the UI lock-controls panel. */
+	DeviceFeature["LockPinRequired"] = "lock-pin-required";
+	/** Lock supports a latch-release ("open door") action distinct from
+	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
+	*  `supported_features`. Gates the Open Door button in the UI. */
+	DeviceFeature["LockOpen"] = "lock-open";
+	/** Media player exposes a seek-to-position surface. */
+	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
+	/** Media player exposes a volume-level setter. */
+	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
+	/** Media player exposes a mute toggle distinct from volume=0. */
+	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
+	/** Media player exposes a shuffle toggle. */
+	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
+	/** Media player exposes a repeat mode (off / all / one). */
+	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
+	/** Media player exposes a source / input selector. */
+	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
+	/** Media player exposes a play-arbitrary-media surface (URL / id). */
+	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
+	/** Media player exposes next-track. */
+	DeviceFeature["MediaPlayerNext"] = "media-player-next";
+	/** Media player exposes previous-track. */
+	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
+	/** Media player exposes stop distinct from pause. */
+	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
+	/** Media player exposes volume up / down in steps (an infrared TV has no level). */
+	DeviceFeature["MediaPlayerVolumeStep"] = "media-player-volume-step";
+	/** Media player exposes channel up / down in steps. */
+	DeviceFeature["MediaPlayerChannelStep"] = "media-player-channel-step";
+	/** Media player exposes power on / off. */
+	DeviceFeature["MediaPlayerPower"] = "media-player-power";
+	/** Alarm panel requires a PIN code on arm/disarm. */
+	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
+	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
+	*  addition to a textual location. */
+	DeviceFeature["PresenceGps"] = "presence-gps";
+	/** Notifier accepts an inline / URL image attachment. */
+	DeviceFeature["NotifierImage"] = "notifier-image";
+	/** Notifier accepts a priority hint (high/normal/low). */
+	DeviceFeature["NotifierPriority"] = "notifier-priority";
+	/** Notifier accepts a free-form `data` payload for platform-specific
+	*  fields. */
+	DeviceFeature["NotifierData"] = "notifier-data";
+	/** Notifier supports interactive action buttons / callbacks. */
+	DeviceFeature["NotifierActions"] = "notifier-actions";
+	/** Notifier supports per-call recipient targeting (multi-user). */
+	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
+	/** Script runner accepts a variables map on each run invocation. */
+	DeviceFeature["ScriptVariables"] = "script-variables";
+	/** Automation `trigger` accepts a skipCondition flag — fires the
+	*  automation's actions while bypassing its condition block. */
+	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
+	/** Robot vacuum exposes a live cleaning map (image child). Gates the
+	*  map tile in the vacuum UI. */
+	DeviceFeature["VacuumHasMap"] = "vacuum-has-map";
+	/** Robot vacuum exposes AI obstacle-detection toggles. Gates the AI
+	*  switches group. */
+	DeviceFeature["VacuumHasAi"] = "vacuum-has-ai";
+	/** Robot mower exposes a live mowing map (SVG image child). Gates the
+	*  mower map tile. */
+	DeviceFeature["MowerHasMap"] = "mower-has-map";
+	/** Robot mower exposes targeted mowing (all-area / zones / edges /
+	*  spots) — gates the Mow action + map selectors. */
+	DeviceFeature["MowerHasTargetedMowing"] = "mower-has-targeted-mowing";
+	return DeviceFeature;
+}({});
+/**
+* Semantic role a device plays within its parent. Populated by driver
+* addons when creating accessory devices (Reolink siren/floodlight/
+* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
+* admin UI to pick icons, labels, and widgets — a `Switch` with
+* `role: Floodlight` renders as a bulb with a brightness slider,
+* whereas a `Switch` with `role: Siren` renders as a klaxon.
+*
+* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
+* sqlite as a nullable TEXT column — old rows keep working unchanged.
+*/
+var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
+	DeviceRole["Siren"] = "siren";
+	DeviceRole["Floodlight"] = "floodlight";
+	DeviceRole["Spotlight"] = "spotlight";
+	DeviceRole["PirSensor"] = "pir-sensor";
+	DeviceRole["Chime"] = "chime";
+	DeviceRole["Autotrack"] = "autotrack";
+	DeviceRole["Nightvision"] = "nightvision";
+	DeviceRole["PrivacyMask"] = "privacy-mask";
+	DeviceRole["Doorbell"] = "doorbell";
+	/** Interior blind / shade / roller blind. HA `device_class: blind|shade`. */
+	DeviceRole["CoverBlind"] = "cover-blind";
+	/** Exterior roller shutter. HA `device_class: shutter`; Homematic BROLL. */
+	DeviceRole["CoverShutter"] = "cover-shutter";
+	/** Exterior awning. HA `device_class: awning`. */
+	DeviceRole["CoverAwning"] = "cover-awning";
+	/** Curtain / drape. HA `device_class: curtain`. */
+	DeviceRole["CoverCurtain"] = "cover-curtain";
+	/** Garage door. HA `device_class: garage`. A security actuator: exports gate it. */
+	DeviceRole["CoverGarage"] = "cover-garage";
+	/** Gate. HA `device_class: gate`. A security actuator: exports gate it. */
+	DeviceRole["CoverGate"] = "cover-gate";
+	/** Door. HA `device_class: door`. A security actuator: exports gate it. */
+	DeviceRole["CoverDoor"] = "cover-door";
+	/** Window. HA `device_class: window`. */
+	DeviceRole["CoverWindow"] = "cover-window";
+	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
+	*  real Switch device for UI rendering / export adapters. */
+	DeviceRole["BinaryHelper"] = "binary-helper";
+	/** A smart plug: a `switch` whose source says it is an outlet (HA
+	*  `device_class: outlet`). The Alexa export shows it as a SMARTPLUG. */
+	DeviceRole["Outlet"] = "outlet";
+	/** Generic motion / occupancy / moving event source. Distinct from
+	*  the camera accessory PirSensor role: that one is a camera child;
+	*  this is a standalone HA / 3rd-party motion sensor. */
+	DeviceRole["MotionSensor"] = "motion-sensor";
+	DeviceRole["ContactSensor"] = "contact-sensor";
+	DeviceRole["LeakSensor"] = "leak-sensor";
+	DeviceRole["SmokeSensor"] = "smoke-sensor";
+	DeviceRole["COSensor"] = "co-sensor";
+	DeviceRole["GasSensor"] = "gas-sensor";
+	DeviceRole["TamperSensor"] = "tamper-sensor";
+	DeviceRole["VibrationSensor"] = "vibration-sensor";
+	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
+	DeviceRole["SoundSensor"] = "sound-sensor";
+	/** Fallback for `binary_sensor` without a known `device_class`. */
+	DeviceRole["BinarySensor"] = "binary-sensor";
+	DeviceRole["TemperatureSensor"] = "temperature-sensor";
+	DeviceRole["HumiditySensor"] = "humidity-sensor";
+	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
+	DeviceRole["PressureSensor"] = "pressure-sensor";
+	/** Wind speed or direction (weather-station `wind-sensor` cap). */
+	DeviceRole["WindSensor"] = "wind-sensor";
+	/** Rain accumulation or rate (weather-station `rain-sensor` cap). */
+	DeviceRole["RainSensor"] = "rain-sensor";
+	/** UV index (weather-station `uv-sensor` cap). */
+	DeviceRole["UvSensor"] = "uv-sensor";
+	/** Solar irradiance W/m² (weather-station `solar-radiation-sensor` cap).
+	*  Distinct from AmbientLightSensor (lux). */
+	DeviceRole["SolarRadiationSensor"] = "solar-radiation-sensor";
+	/** Soil moisture % (garden/weather `soil-moisture-sensor` cap). */
+	DeviceRole["SoilMoistureSensor"] = "soil-moisture-sensor";
+	DeviceRole["PowerSensor"] = "power-sensor";
+	DeviceRole["EnergySensor"] = "energy-sensor";
+	DeviceRole["VoltageSensor"] = "voltage-sensor";
+	DeviceRole["CurrentSensor"] = "current-sensor";
+	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
+	/** Battery level (numeric % via `sensor` OR low-bool via
+	*  `binary_sensor` — the cap distinguishes via the value type). */
+	DeviceRole["BatterySensor"] = "battery-sensor";
+	/** Fallback for `sensor` numeric without a known `device_class`. */
+	DeviceRole["NumericSensor"] = "numeric-sensor";
+	/** String / enum state (HA `sensor` with `state_class: enum` or
+	*  `attributes.options`). */
+	DeviceRole["EnumSensor"] = "enum-sensor";
+	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
+	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
+	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
+	DeviceRole["DateTimeSensor"] = "datetime-sensor";
+	/** Last-resort fallback when nothing else matches. */
+	DeviceRole["GenericSensor"] = "generic-sensor";
+	DeviceRole["NumericControl"] = "numeric-control";
+	DeviceRole["SelectControl"] = "select-control";
+	DeviceRole["TextControl"] = "text-control";
+	DeviceRole["DateTimeControl"] = "datetime-control";
+	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
+	*  rich features (image, priority, channel routing). */
+	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
+	/** Chat / messaging service (HA `notify.telegram_*`,
+	*  `notify.discord_*`, etc.). */
+	DeviceRole["MessagingNotifier"] = "messaging-notifier";
+	/** Email-based delivery (HA `notify.smtp`, etc.). */
+	DeviceRole["EmailNotifier"] = "email-notifier";
+	/** Fallback when the notifier service name doesn't match a known
+	*  pattern. */
+	DeviceRole["GenericNotifier"] = "generic-notifier";
+	/** Emits a pulse train (infrared or RF) on request — the `ir-transmitter`
+	*  cap. A `DeviceType.Generic` device. */
+	DeviceRole["IrTransmitter"] = "ir-transmitter";
+	return DeviceRole;
+}({});
 //#endregion
-//#region ../types/dist/sleep-CQP-REJp.mjs
+//#region ../types/dist/sleep-7El4r5Bl.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -6815,7 +6822,7 @@ function switchRecordsOverMigrationApi(api) {
 		};
 	} };
 }
-function integrationRowsApiOver(api) {
+function integrationRowsApiOver$1(api) {
 	return {
 		list: async () => (await api.integrations.list({})).integrations,
 		readLegacyIntegrationRows: (input) => api.legacyRows.read(input),
@@ -8446,7 +8453,7 @@ function boundOf(list) {
 * Base class for CamStack addons. Eliminates settings boilerplate:
 *
 * - Typed `config` property with automatic resolution from store + defaults
-* - `getGlobalSettings()` / `updateGlobalSettings()` auto-implemented
+* - the scoped settings API (`clusterSettings` / `nodeSettings` / `deviceDefaults`) auto-implemented
 * - `getAddonSettings()` / `updateAddonSettings()` auto-implemented
 * - `getDeviceSettings()` / `updateDeviceSettings()` auto-implemented
 * - `ctx` accessor for the AddonContext (no manual `this.ctxRef` storage)
@@ -8456,7 +8463,7 @@ function boundOf(list) {
 * Subclasses override:
 * - `onInitialize()` — addon-specific init logic, return ProviderRegistration[]
 * - `onShutdown()` — cleanup
-* - `globalSettingsSchema()` / `deviceSettingsSchema()` — UI schemas
+* - `clusterSettingsSchema()` / `nodeSettingsSchema()` / `deviceSettingsSchema()` — UI schemas
 *
 * @example
 * ```ts
@@ -8470,7 +8477,7 @@ function boundOf(list) {
 *     super({ maxRetries: 3, endpoint: 'http://localhost' })
 *   }
 *
-*   protected globalSettingsSchema() {
+*   protected clusterSettingsSchema() {
 *     return this.schema({
 *       sections: [{
 *         id: 'main', title: 'Settings',
@@ -8513,7 +8520,7 @@ var BaseAddon = class {
 	defaults;
 	/**
 	* Hidden-state paths that hold secrets (D787) — values the addon writes
-	* itself (`updateGlobalSettings`, `state()`) that no form field declares.
+	* itself (`state()`, the scoped writers) that no form field declares.
 	* Stored in the keychain exactly like a `password` field. Syntax:
 	* `'snapshotSigningKey'`, `'identity.pincode'`, `'tokens[userId].accessToken'`
 	* (`key[<id field>]` addresses array items by id, never by index).
@@ -8523,7 +8530,7 @@ var BaseAddon = class {
 	/**
 	* D986 M4: the scoped schemas this addon declared, resolved once per capability
 	* (`loadScopedSchemas`) so the sync readers (`perNodeKeys`, the secret tree, the restart check)
-	* see them. Empty until loaded: the readers then fall back to {@link globalSettingsSchema}.
+	* see them. Empty until loaded.
 	*/
 	_scopedByCap = /* @__PURE__ */ new Map();
 	_nodeKeysByCap = /* @__PURE__ */ new Map();
@@ -8647,7 +8654,7 @@ var BaseAddon = class {
 			seq: 1e3,
 			initialBody: spec.initialBody
 		})], (a) => registrySwitchPortsOver({
-			api: integrationRowsApiOver(a),
+			api: integrationRowsApiOver$1(a),
 			records: switchRecordsOverMigrationApi(a),
 			kind: spec.kind
 		})).bind(api);
@@ -8709,7 +8716,7 @@ var BaseAddon = class {
 	/** Addon-specific cleanup. Override if needed. */
 	async onShutdown() {}
 	/**
-	* Called after config is resolved during updateGlobalSettings/updateAddonSettings.
+	* Called after config is resolved during a settings write.
 	* Override to react to config changes (e.g. restart a sampler, reconnect a service).
 	* Not called during initialize() — use onInitialize() for initial setup.
 	*/
@@ -8738,82 +8745,12 @@ var BaseAddon = class {
 	scopedSettingsCapabilities() {
 		return [];
 	}
-	/** Override to provide global-level settings UI schema. */
-	globalSettingsSchema(_cap) {
-		return null;
-	}
 	/** Override to provide device-level settings UI schema. */
 	deviceSettingsSchema() {
 		return null;
 	}
 	/**
-	* INTEGRATION-LEVEL SETTINGS — declare which of this addon's global sections
-	* ARE the configuration of its integration.
-	*
-	* Return the `ConfigSection.id`s, from {@link globalSettingsSchema}, that an
-	* operator should find on the addon's integration page (System →
-	* Integrations → <name>) rather than only in the cluster-wide list of every
-	* addon. Empty (the default) means the addon has no integration-level
-	* settings and no such surface is offered — this is opt-in, because whether
-	* an addon's configuration IS its integration's configuration depends on the
-	* nature of the integration.
-	*
-	* WHAT THIS IS NOT. It is not a scope. The selected sections keep living in
-	* the ONE global schema, in the ONE addon store, written by the ONE
-	* `updateGlobalSettings` path. There is deliberately no
-	* `updateIntegrationSettings`: a second write path is how a surface acquires
-	* a second store key, and this repo has shipped that twice (`btmPath@hub`,
-	* D266). Selecting sections cannot introduce a key that selecting cannot.
-	*
-	* WHY IT IS A LIST OF SECTION IDS AND NOT A MARKER ON THE SECTION.
-	* `ConfigFieldBase` used to carry `scope?: 'device' | 'global'` and it was
-	* removed with the reason recorded at
-	* `packages/types/src/interfaces/config-ui.ts:249` — *"a field's scope is
-	* determined by WHICH schema it lives in, not by a field-level marker."* A
-	* marker sprinkled across sections also has to borrow a field that already
-	* means something else; borrowing `section.tab` put the literal word
-	* "integration" into an operator-facing tab bar, because `tab` means "how to
-	* GROUP this visually" and cannot also mean "where this lives" (D269
-	* supersedes D268). One declaration, in one place, next to the schema whose
-	* ids it names.
-	*/
-	integrationSettingSections() {
-		return [];
-	}
-	async getGlobalSettings(overlay, cap, nodeId) {
-		await this.loadScopedSchemas(cap);
-		const schema = this.globalSettingsSchema(cap) ?? this.scopedFormSchema(cap);
-		if (!schema) return { sections: [] };
-		const projected = await this.readRawProjectedStore(nodeId, cap);
-		return hydrateSchema(schema, overlay ? await this.overlayKeepingMarkers(projected, overlay) : projected, { inlineSecretsAsViews: true });
-	}
-	/**
-	* The integration-level view of this addon's settings: exactly the sections
-	* named by {@link integrationSettingSections}, hydrated from the SAME store
-	* `getGlobalSettings` reads, and narrowed to cluster-scoped fields.
-	*
-	* Returns `null` when the addon declared nothing — an addon that opts out has
-	* no integration settings surface at all, rather than an empty one that reads
-	* as a failed load.
-	*
-	* Three properties hold BY CONSTRUCTION, which is why they are here in core
-	* and not in whichever UI happens to render this:
-	*
-	*  1. **One key.** The payload is a SUBSET of the global schema, so a field
-	*     shown here is the same field, with the same bare key, that the addon's
-	*     own page shows. There is no integration-specific writer — callers save
-	*     through `updateGlobalSettings` — so a second store key is unreachable,
-	*     not merely discouraged.
-	*  2. **No node scope.** `perNode: true` fields are DROPPED. Their store key
-	*     is `<key>@<nodeId>` and an integration is not a node; whichever node
-	*     such a field silently picked would be a wrong answer for the operator
-	*     who opened the page (D266).
-	*  3. **No silent typo.** A declared id that names no section throws. The
-	*     alternative — skip it — turns a rename into a surface that quietly
-	*     empties, which looks exactly like an addon with nothing to configure.
-	*/
-	/**
-	* The form schema of ONE integration instance, or `null` to use {@link globalSettingsSchema}.
+	* The form schema of ONE integration instance, or `null` to use the scoped form.
 	*
 	* Override it only when an `instanceMode: multiple` addon's instances differ: an NVR integration
 	* needs its connection fields, the default integration the addon's own sections. It is the
@@ -8986,6 +8923,19 @@ var BaseAddon = class {
 		const overlay = await this.scopedSettingsOverlay(scope, cap, nodeId);
 		return hydrateSchema(schema, overlay ? await this.overlayKeepingMarkers(stored, overlay) : stored, { inlineSecretsAsViews: true });
 	}
+	/**
+	* The scoped schemas this addon serves: one entry per loaded (capability, scope), capabilities
+	* in declaration order, scopes in {@link SCOPED_SETTINGS_SCOPES} order. `[]` when it declares
+	* nothing.
+	*/
+	async listScopedSettings() {
+		await this.loadScopedSchemas();
+		return [...this._scopedByCap].flatMap(([cap, entries]) => entries.map((entry) => ({
+			cap,
+			scope: entry.scope,
+			sectionIds: entry.schema.sections.map((section) => section.id)
+		})));
+	}
 	/** The OPERATOR's write of declared keys of one scope (D787 secret semantics). */
 	async updateScopedSettings(scope, cap, patch, nodeId) {
 		this._operatorWriteDepth++;
@@ -9011,32 +8961,15 @@ var BaseAddon = class {
 	*/
 	async getIntegrationFormSchema(instance, nodeId) {
 		const scoped = await this.integrationFormSchema(instance);
-		if (scoped === null) return this.getGlobalSettings(void 0, void 0, nodeId);
+		if (scoped === null) return this.scopedForm(nodeId);
 		return hydrateSchema(scoped, {}, { inlineSecretsAsViews: true });
 	}
-	async getIntegrationSettings(nodeId) {
-		const declared = this.integrationSettingSections();
-		if (declared.length === 0) return null;
-		const schema = this.globalSettingsSchema();
-		if (!schema) throw new Error(`${this.constructor.name}: integrationSettingSections() names [${declared.join(", ")}] but globalSettingsSchema() returns null.`);
-		const byId = new Map(schema.sections.map((section) => [section.id, section]));
-		const sections = [];
-		for (const id of declared) {
-			const section = byId.get(id);
-			if (!section) throw new Error(`${this.constructor.name}: integrationSettingSections() names unknown section "${id}". Known sections: [${[...byId.keys()].join(", ")}].`);
-			const fields = dropPerNodeFields(section.fields);
-			if (fields.length === 0) continue;
-			sections.push({
-				...section,
-				fields
-			});
-		}
-		if (sections.length === 0) return null;
-		const projected = await this.readRawProjectedStore(nodeId);
-		return hydrateSchema({
-			...schema,
-			sections
-		}, projected, { inlineSecretsAsViews: true });
+	/** The form of the scoped schemas this addon declared, hydrated from its store. */
+	async scopedForm(nodeId) {
+		await this.loadScopedSchemas();
+		const schema = this.scopedFormSchema();
+		if (!schema) return { sections: [] };
+		return hydrateSchema(schema, await this.readRawProjectedStore(nodeId), { inlineSecretsAsViews: true });
 	}
 	/**
 	* The raw addon store PROJECTED onto the target node's bare per-node keys:
@@ -9045,8 +8978,8 @@ var BaseAddon = class {
 	* bare fallback), all `@`-scoped and stray bare per-node keys are dropped.
 	* A no-op passthrough when the schema declares no `perNode` field.
 	*
-	* This is the sanctioned way for a `getGlobalSettings` OVERRIDE that needs
-	* the store for custom option logic (option narrowing, value snapping) to
+	* This is the sanctioned way for an addon that needs
+	* the store for custom logic (option narrowing, value snapping) to
 	* read it per-node — never `ctx.settings.readAddonStore()` directly.
 	* `nodeId` omitted ⇒ the local node (node-blind injection from ctx).
 	*
@@ -9098,7 +9031,7 @@ var BaseAddon = class {
 	}
 	/**
 	* Whether ONE global key of this addon's store was written, read three-way
-	* (D651). For a question a hydrated view cannot answer: `getGlobalSettings`
+	* (D651). For a question a hydrated view cannot answer: a hydrated form
 	* reports `value ?? default`, so "the operator chose the default" and "nobody
 	* chose" look the same, and a failed read looks like both. A `perNode` key is
 	* not supported here: its stored name is scoped.
@@ -9132,7 +9065,7 @@ var BaseAddon = class {
 	}
 	/**
 	* The OPERATOR's write — a settings form or an admin API call, dispatched by
-	* the kernel. Identical to {@link updateGlobalSettings}, except that a secret
+	* the kernel. The one in-process write of the addon blob that is not a scoped write; a secret
 	* the operator sends is stored as sent even when it equals a pre-keychain
 	* inline value: the operator re-entering a password is a change, an addon
 	* writing back what it read is not (D787).
@@ -9145,9 +9078,6 @@ var BaseAddon = class {
 			this._operatorWriteDepth--;
 		}
 	}
-	async updateGlobalSettings(patch, nodeId) {
-		await this.applyGlobalPatch(patch, nodeId);
-	}
 	/**
 	* REMOVE stored secrets — their keychain values and their markers (D787).
 	*
@@ -9190,8 +9120,7 @@ var BaseAddon = class {
 		await this.resolveConfig();
 		await this.onConfigChanged();
 		this.emitLifecycle(EventCategory.AddonUpdated, { level: "global" });
-		const legacy = this.globalSettingsSchema();
-		this.maybeAutoRestart(Object.keys(barePatch), [...legacy === null ? [] : [legacy], ...this.loadedScopedSchemas().map((entry) => entry.schema)]);
+		this.maybeAutoRestart(Object.keys(barePatch), this.loadedScopedSchemas().map((entry) => entry.schema));
 		return true;
 	}
 	/**
@@ -9229,10 +9158,7 @@ var BaseAddon = class {
 		this._nodeKeysByCap = /* @__PURE__ */ new Map();
 		this._addonSecretTree = null;
 	}
-	/**
-	* The form the settings API serves while an addon declares no {@link globalSettingsSchema}: the
-	* sections of its scoped schemas, so dropping the old hook does not blank the form.
-	*/
+	/** The form of an addon's scoped schemas: their sections, each shown once. */
 	scopedFormSchema(cap) {
 		const byId = /* @__PURE__ */ new Map();
 		for (const entry of this.loadedScopedSchemas(cap)) for (const section of entry.schema.sections) if (!byId.has(section.id)) byId.set(section.id, section);
@@ -9244,8 +9170,7 @@ var BaseAddon = class {
 		return [...this._scopedByCap.values()].flat();
 	}
 	/**
-	* The field keys that are stored per node: every field of a {@link nodeSettingsSchema}, plus
-	* the fields the legacy {@link globalSettingsSchema} still marks `perNode: true`. Derived once
+	* The field keys that are stored per node: every field of a {@link nodeSettingsSchema}. Derived once
 	* per `cap` argument and memoized (schemas are static declarations). Empty set ⇒ every
 	* per-node code path is bypassed and the settings API behaves like the node-agnostic one.
 	* Call {@link loadScopedSchemas} first (the async seams do).
@@ -9254,8 +9179,7 @@ var BaseAddon = class {
 		const cacheKey = cap ?? "";
 		const cached = this._nodeKeysByCap.get(cacheKey);
 		if (cached) return cached;
-		const legacy = this.globalSettingsSchema(cap);
-		const keys = new Set(legacy ? legacy.sections.flatMap((section) => collectPerNodeFieldKeys(section.fields)) : []);
+		const keys = /* @__PURE__ */ new Set();
 		for (const { scope, schema } of this.loadedScopedSchemas(cap)) {
 			if (scope !== "node") continue;
 			for (const section of schema.sections) for (const key of collectValueFieldKeys(section.fields)) keys.add(key);
@@ -9473,8 +9397,6 @@ var BaseAddon = class {
 	}
 	declaredKeySet() {
 		const keys = new Set(Object.keys(this.defaults));
-		const schema = this.globalSettingsSchema();
-		if (schema) for (const section of schema.sections) for (const key of collectFieldKeys(section.fields)) keys.add(key);
 		for (const { schema: scoped } of this.loadedScopedSchemas()) for (const section of scoped.sections) for (const key of collectFieldKeys(section.fields)) keys.add(key);
 		for (const key of this._declaredStateKeys) keys.add(key);
 		for (const path of this.secretStatePaths) {
@@ -9572,7 +9494,7 @@ var BaseAddon = class {
 	/** The addon store's secret tree: schema fields by TYPE, plus `secretStatePaths`. */
 	addonSecretTree() {
 		if (this._addonSecretTree === null) {
-			const tree = new Map(secretTreeFromSchema(this.globalSettingsSchema()));
+			const tree = /* @__PURE__ */ new Map();
 			for (const { schema } of this.loadedScopedSchemas()) for (const [key, node] of secretTreeFromSchema(schema)) tree.set(key, node);
 			this._addonSecretTree = mergeSecretStatePaths(tree, this.secretStatePaths);
 		}
@@ -9784,47 +9706,6 @@ function classifyStoreError(err) {
 	if (TRANSPORT_PHRASES.some((f) => message.includes(f))) return "transport";
 	return "permanent";
 }
-/**
-* Collect the keys of every field marked `perNode: true`, recursing into
-* layout containers (`group` fields and `sub-tabs` tabs) the same way
-* `hydrateSchema` does. Valueless structural fields (separator/info/…)
-* don't declare `perNode` and are excluded by the `in` narrowing.
-*/
-/**
-* The same fields with every `perNode: true` one removed, recursing into layout
-* containers exactly as {@link collectPerNodeFieldKeys} does. A container left
-* with no child is dropped rather than rendered empty.
-*
-* Used by `getIntegrationSettings`: an integration is not a node, so a field
-* whose store key is `<key>@<nodeId>` has no node to belong to there.
-*/
-function dropPerNodeFields(fields) {
-	const kept = [];
-	for (const field of fields) {
-		if (field.type === "group") {
-			const inner = dropPerNodeFields(field.fields);
-			if (inner.length > 0) kept.push({
-				...field,
-				fields: inner
-			});
-			continue;
-		}
-		if (field.type === "sub-tabs") {
-			const tabs = field.tabs.map((tab) => ({
-				...tab,
-				fields: dropPerNodeFields(tab.fields)
-			})).filter((tab) => tab.fields.length > 0);
-			if (tabs.length > 0) kept.push({
-				...field,
-				tabs
-			});
-			continue;
-		}
-		if ("perNode" in field && field.perNode === true) continue;
-		kept.push(field);
-	}
-	return kept;
-}
 /** The keys of the value-holding fields, recursing into layout containers. */
 function collectValueFieldKeys(fields) {
 	const collected = [];
@@ -9857,21 +9738,6 @@ function collectFieldKeys(fields) {
 	}
 	return collected;
 }
-function collectPerNodeFieldKeys(fields) {
-	const collected = [];
-	for (const field of fields) {
-		if (field.type === "group") {
-			collected.push(...collectPerNodeFieldKeys(field.fields));
-			continue;
-		}
-		if (field.type === "sub-tabs") {
-			for (const tab of field.tabs) collected.push(...collectPerNodeFieldKeys(tab.fields));
-			continue;
-		}
-		if ("perNode" in field && field.perNode === true) collected.push(field.key);
-	}
-	return collected;
-}
 /**
 * Normalize an `ICamstackAddon.initialize()` return value into the
 * `AddonInitResult` envelope. Arrays are wrapped into `{ providers }`;
@@ -12632,13 +12498,25 @@ Object.freeze({
 		"path": "temperature",
 		"valueType": "number"
 	}],
-	"timed-run": [{
-		"path": "activeUntil",
-		"valueType": "number"
-	}, {
-		"path": "requestedBy",
-		"valueType": "string"
-	}],
+	"timed-run": [
+		{
+			"path": "activeUntil",
+			"valueType": "number"
+		},
+		{
+			"path": "requestedBy",
+			"valueType": "string"
+		},
+		{
+			"path": "quickRun.duration",
+			"valueType": "number"
+		},
+		{
+			"path": "quickRun.unit",
+			"valueType": "enum",
+			"enumValues": ["s", "min"]
+		}
+	],
 	"update": [
 		{
 			"path": "currentVersion",
@@ -12862,7 +12740,7 @@ object({
 	params: record(string(), union([string(), number$1()])).optional()
 });
 //#endregion
-//#region ../types/dist/composition-BmBHuDTQ.mjs
+//#region ../types/dist/composition-Bx0JvKUU.mjs
 /**
 * The ffmpeg build every CamStack node downloads, per platform and arch.
 *
@@ -14024,6 +13902,387 @@ var NodeColorIdSchema = _enum([
 	"node-h"
 ]);
 //#endregion
+//#region ../types/dist/convert-BAzH15HU.mjs
+/**
+* Frozen unit → spec table. `•` in the doc marks each dimension's canonical
+* unit (`factor: 1, offset: 0`). °F derives from `°C = (°F − 32) × 5/9` ⇒
+* `factor = 5/9`, `offset = -160/9` (kept as exact expressions, not rounded
+* decimals). K derives from `°C = K − 273.15`.
+*/
+var UNIT_TABLE = {
+	"°C": {
+		dimension: "temperature",
+		factor: 1,
+		offset: 0
+	},
+	"°F": {
+		dimension: "temperature",
+		factor: 5 / 9,
+		offset: -160 / 9
+	},
+	K: {
+		dimension: "temperature",
+		factor: 1,
+		offset: -273.15
+	},
+	hPa: {
+		dimension: "pressure",
+		factor: 1,
+		offset: 0
+	},
+	kPa: {
+		dimension: "pressure",
+		factor: 10,
+		offset: 0
+	},
+	Pa: {
+		dimension: "pressure",
+		factor: .01,
+		offset: 0
+	},
+	mbar: {
+		dimension: "pressure",
+		factor: 1,
+		offset: 0
+	},
+	bar: {
+		dimension: "pressure",
+		factor: 1e3,
+		offset: 0
+	},
+	inHg: {
+		dimension: "pressure",
+		factor: 33.8639,
+		offset: 0
+	},
+	mmHg: {
+		dimension: "pressure",
+		factor: 1.33322,
+		offset: 0
+	},
+	psi: {
+		dimension: "pressure",
+		factor: 68.9476,
+		offset: 0
+	},
+	"m/s": {
+		dimension: "speed",
+		factor: 1,
+		offset: 0
+	},
+	"km/h": {
+		dimension: "speed",
+		factor: 1 / 3.6,
+		offset: 0
+	},
+	mph: {
+		dimension: "speed",
+		factor: .44704,
+		offset: 0
+	},
+	kn: {
+		dimension: "speed",
+		factor: .514444,
+		offset: 0
+	},
+	"mm/h": {
+		dimension: "precipitation-rate",
+		factor: 1,
+		offset: 0
+	},
+	"in/h": {
+		dimension: "precipitation-rate",
+		factor: 25.4,
+		offset: 0
+	},
+	m: {
+		dimension: "length",
+		factor: 1,
+		offset: 0
+	},
+	mm: {
+		dimension: "length",
+		factor: .001,
+		offset: 0
+	},
+	cm: {
+		dimension: "length",
+		factor: .01,
+		offset: 0
+	},
+	km: {
+		dimension: "length",
+		factor: 1e3,
+		offset: 0
+	},
+	in: {
+		dimension: "length",
+		factor: .0254,
+		offset: 0
+	},
+	ft: {
+		dimension: "length",
+		factor: .3048,
+		offset: 0
+	},
+	mi: {
+		dimension: "length",
+		factor: 1609.344,
+		offset: 0
+	},
+	"m²": {
+		dimension: "area",
+		factor: 1,
+		offset: 0
+	},
+	lx: {
+		dimension: "illuminance",
+		factor: 1,
+		offset: 0
+	},
+	"W/m²": {
+		dimension: "irradiance",
+		factor: 1,
+		offset: 0
+	},
+	W: {
+		dimension: "power",
+		factor: 1,
+		offset: 0
+	},
+	kW: {
+		dimension: "power",
+		factor: 1e3,
+		offset: 0
+	},
+	VA: {
+		dimension: "apparent-power",
+		factor: 1,
+		offset: 0
+	},
+	Wh: {
+		dimension: "energy",
+		factor: 1,
+		offset: 0
+	},
+	kWh: {
+		dimension: "energy",
+		factor: 1e3,
+		offset: 0
+	},
+	MWh: {
+		dimension: "energy",
+		factor: 1e6,
+		offset: 0
+	},
+	V: {
+		dimension: "voltage",
+		factor: 1,
+		offset: 0
+	},
+	mV: {
+		dimension: "voltage",
+		factor: .001,
+		offset: 0
+	},
+	A: {
+		dimension: "current",
+		factor: 1,
+		offset: 0
+	},
+	mA: {
+		dimension: "current",
+		factor: .001,
+		offset: 0
+	},
+	ppm: {
+		dimension: "concentration-volume",
+		factor: 1,
+		offset: 0
+	},
+	ppb: {
+		dimension: "concentration-volume",
+		factor: .001,
+		offset: 0
+	},
+	"µg/m³": {
+		dimension: "concentration-mass",
+		factor: 1,
+		offset: 0
+	},
+	"mg/m³": {
+		dimension: "concentration-mass",
+		factor: 1e3,
+		offset: 0
+	},
+	kg: {
+		dimension: "mass",
+		factor: 1,
+		offset: 0
+	},
+	g: {
+		dimension: "mass",
+		factor: .001,
+		offset: 0
+	},
+	lb: {
+		dimension: "mass",
+		factor: .453592,
+		offset: 0
+	},
+	oz: {
+		dimension: "mass",
+		factor: .0283495,
+		offset: 0
+	},
+	"%": {
+		dimension: "percentage",
+		factor: 1,
+		offset: 0
+	},
+	L: {
+		dimension: "volume",
+		factor: 1,
+		offset: 0
+	},
+	mL: {
+		dimension: "volume",
+		factor: .001,
+		offset: 0
+	},
+	gal: {
+		dimension: "volume",
+		factor: 3.785411784,
+		offset: 0
+	},
+	s: {
+		dimension: "duration",
+		factor: 1,
+		offset: 0
+	},
+	ms: {
+		dimension: "duration",
+		factor: .001,
+		offset: 0
+	},
+	min: {
+		dimension: "duration",
+		factor: 60,
+		offset: 0
+	},
+	h: {
+		dimension: "duration",
+		factor: 3600,
+		offset: 0
+	},
+	d: {
+		dimension: "duration",
+		factor: 86400,
+		offset: 0
+	},
+	B: {
+		dimension: "information",
+		factor: 1,
+		offset: 0
+	},
+	KiB: {
+		dimension: "information",
+		factor: 1024,
+		offset: 0
+	},
+	MiB: {
+		dimension: "information",
+		factor: 1024 ** 2,
+		offset: 0
+	},
+	GiB: {
+		dimension: "information",
+		factor: 1024 ** 3,
+		offset: 0
+	},
+	TiB: {
+		dimension: "information",
+		factor: 1024 ** 4,
+		offset: 0
+	},
+	kB: {
+		dimension: "information",
+		factor: 1e3,
+		offset: 0
+	},
+	MB: {
+		dimension: "information",
+		factor: 1e6,
+		offset: 0
+	},
+	GB: {
+		dimension: "information",
+		factor: 1e9,
+		offset: 0
+	},
+	"°": {
+		dimension: "angle",
+		factor: 1,
+		offset: 0
+	},
+	dBFS: {
+		dimension: "sound-level",
+		factor: 1,
+		offset: 0
+	},
+	dBm: {
+		dimension: "signal-level",
+		factor: 1,
+		offset: 0
+	},
+	mired: {
+		dimension: "colour-temperature",
+		factor: 1,
+		offset: 0
+	},
+	kbps: {
+		dimension: "bitrate",
+		factor: 1,
+		offset: 0
+	},
+	Mbps: {
+		dimension: "bitrate",
+		factor: 1e3,
+		offset: 0
+	},
+	fps: {
+		dimension: "rate",
+		factor: 1,
+		offset: 0
+	}
+};
+/** Resolve a unit's `UnitSpec`, or `undefined` when the spelling is unknown. */
+function specFor(unit) {
+	return Object.hasOwn(UNIT_TABLE, unit) ? UNIT_TABLE[unit] : void 0;
+}
+/** Value in `spec`'s unit → its dimension's canonical unit. */
+function toCanonical(value, spec) {
+	return value * spec.factor + spec.offset;
+}
+/** Canonical-unit value → the unit described by `spec`. */
+function fromCanonical(canonical, spec) {
+	return (canonical - spec.offset) / spec.factor;
+}
+/**
+* Graceful variant for the render path: returns the converted value, or
+* `undefined` when the conversion is refused (unknown unit / cross-dimension).
+* Never throws — a render caller falls back to the raw value + source unit.
+*/
+function tryConvertUnit(value, from, to) {
+	if (from === to) return value;
+	const fromSpec = specFor(from);
+	if (!fromSpec) return void 0;
+	const toSpec = specFor(to);
+	if (!toSpec) return void 0;
+	if (fromSpec.dimension !== toSpec.dimension) return void 0;
+	return fromCanonical(toCanonical(value, fromSpec), toSpec);
+}
+//#endregion
 //#region ../types/dist/index.mjs
 var SMTP_INBOUND_DEFAULT_PORT = 2525;
 var SMTP_INBOUND_DEFAULT_DOMAIN = "camstack.local";
@@ -16244,20 +16503,6 @@ async function flattenNestedRecords(ports, spec) {
 		summary: { converted: rows.size }
 	};
 }
-/** The ports over one kind's records handle. */
-function flattenPortsOver(handle) {
-	return {
-		listNested: async (legacyKey) => (await handle.query({ limit: 1e3 })).records.filter((r) => legacyKey in r.data).map((r) => r.id),
-		readResolved: async (id) => {
-			const row = await handle.getResolved(id);
-			if (row === null) throw new Error("the record is gone");
-			return row.data;
-		},
-		patch: async (id, patch) => {
-			await handle.patch(id, patch);
-		}
-	};
-}
 /**
 * The addon-side ports of `moveIntegrationRowsToRecords` (planning#416). An addon runs the move
 * from its own process, so the leftover rows are reached through the migration-only door
@@ -16305,25 +16550,6 @@ function integrationRowsPortsOverApi(deps) {
 		}
 	};
 }
-function defaultIntegrationApiOver(api) {
-	return {
-		list: () => api.integrations.list.query(),
-		readLegacyIntegrationRows: (input) => api.migrations.readLegacyIntegrationRows.query(input),
-		clearLegacyIntegrationRows: (input) => api.migrations.clearLegacyIntegrationRows.mutate(input),
-		listDevices: (addonId) => api.deviceManager.listAll.query({
-			addonId,
-			projection: "slim"
-		}),
-		setDeviceIntegrationId: async (deviceId, integrationId) => {
-			await api.deviceManager.setIntegrationId.mutate({
-				deviceId,
-				integrationId
-			});
-		},
-		readDeviceHasConfig: async (deviceId) => Object.keys((await api.deviceManager.getDevice.query({ deviceId }))?.config ?? {}).length > 0,
-		readDeviceIntegrationId: async (deviceId) => (await api.deviceManager.getDevice.query({ deviceId }))?.integrationId ?? null
-	};
-}
 /**
 * The trainer contract — what the hub hands the cloud trainer and what it
 * gets back (cloud training, D805+).
@@ -43521,6 +43747,7 @@ var ExpressionBindingSourceSchema = union([
 	object({
 		kind: literal("global"),
 		sourceStableId: string(),
+		addonId: string().optional(),
 		cap: string(),
 		fieldPath: string()
 	})
@@ -43647,385 +43874,6 @@ function extractSourceInfoFromMetadata(metadata) {
 	return parsed.data;
 }
 /**
-* Frozen unit → spec table. `•` in the doc marks each dimension's canonical
-* unit (`factor: 1, offset: 0`). °F derives from `°C = (°F − 32) × 5/9` ⇒
-* `factor = 5/9`, `offset = -160/9` (kept as exact expressions, not rounded
-* decimals). K derives from `°C = K − 273.15`.
-*/
-var UNIT_TABLE = {
-	"°C": {
-		dimension: "temperature",
-		factor: 1,
-		offset: 0
-	},
-	"°F": {
-		dimension: "temperature",
-		factor: 5 / 9,
-		offset: -160 / 9
-	},
-	K: {
-		dimension: "temperature",
-		factor: 1,
-		offset: -273.15
-	},
-	hPa: {
-		dimension: "pressure",
-		factor: 1,
-		offset: 0
-	},
-	kPa: {
-		dimension: "pressure",
-		factor: 10,
-		offset: 0
-	},
-	Pa: {
-		dimension: "pressure",
-		factor: .01,
-		offset: 0
-	},
-	mbar: {
-		dimension: "pressure",
-		factor: 1,
-		offset: 0
-	},
-	bar: {
-		dimension: "pressure",
-		factor: 1e3,
-		offset: 0
-	},
-	inHg: {
-		dimension: "pressure",
-		factor: 33.8639,
-		offset: 0
-	},
-	mmHg: {
-		dimension: "pressure",
-		factor: 1.33322,
-		offset: 0
-	},
-	psi: {
-		dimension: "pressure",
-		factor: 68.9476,
-		offset: 0
-	},
-	"m/s": {
-		dimension: "speed",
-		factor: 1,
-		offset: 0
-	},
-	"km/h": {
-		dimension: "speed",
-		factor: 1 / 3.6,
-		offset: 0
-	},
-	mph: {
-		dimension: "speed",
-		factor: .44704,
-		offset: 0
-	},
-	kn: {
-		dimension: "speed",
-		factor: .514444,
-		offset: 0
-	},
-	"mm/h": {
-		dimension: "precipitation-rate",
-		factor: 1,
-		offset: 0
-	},
-	"in/h": {
-		dimension: "precipitation-rate",
-		factor: 25.4,
-		offset: 0
-	},
-	m: {
-		dimension: "length",
-		factor: 1,
-		offset: 0
-	},
-	mm: {
-		dimension: "length",
-		factor: .001,
-		offset: 0
-	},
-	cm: {
-		dimension: "length",
-		factor: .01,
-		offset: 0
-	},
-	km: {
-		dimension: "length",
-		factor: 1e3,
-		offset: 0
-	},
-	in: {
-		dimension: "length",
-		factor: .0254,
-		offset: 0
-	},
-	ft: {
-		dimension: "length",
-		factor: .3048,
-		offset: 0
-	},
-	mi: {
-		dimension: "length",
-		factor: 1609.344,
-		offset: 0
-	},
-	"m²": {
-		dimension: "area",
-		factor: 1,
-		offset: 0
-	},
-	lx: {
-		dimension: "illuminance",
-		factor: 1,
-		offset: 0
-	},
-	"W/m²": {
-		dimension: "irradiance",
-		factor: 1,
-		offset: 0
-	},
-	W: {
-		dimension: "power",
-		factor: 1,
-		offset: 0
-	},
-	kW: {
-		dimension: "power",
-		factor: 1e3,
-		offset: 0
-	},
-	VA: {
-		dimension: "apparent-power",
-		factor: 1,
-		offset: 0
-	},
-	Wh: {
-		dimension: "energy",
-		factor: 1,
-		offset: 0
-	},
-	kWh: {
-		dimension: "energy",
-		factor: 1e3,
-		offset: 0
-	},
-	MWh: {
-		dimension: "energy",
-		factor: 1e6,
-		offset: 0
-	},
-	V: {
-		dimension: "voltage",
-		factor: 1,
-		offset: 0
-	},
-	mV: {
-		dimension: "voltage",
-		factor: .001,
-		offset: 0
-	},
-	A: {
-		dimension: "current",
-		factor: 1,
-		offset: 0
-	},
-	mA: {
-		dimension: "current",
-		factor: .001,
-		offset: 0
-	},
-	ppm: {
-		dimension: "concentration-volume",
-		factor: 1,
-		offset: 0
-	},
-	ppb: {
-		dimension: "concentration-volume",
-		factor: .001,
-		offset: 0
-	},
-	"µg/m³": {
-		dimension: "concentration-mass",
-		factor: 1,
-		offset: 0
-	},
-	"mg/m³": {
-		dimension: "concentration-mass",
-		factor: 1e3,
-		offset: 0
-	},
-	kg: {
-		dimension: "mass",
-		factor: 1,
-		offset: 0
-	},
-	g: {
-		dimension: "mass",
-		factor: .001,
-		offset: 0
-	},
-	lb: {
-		dimension: "mass",
-		factor: .453592,
-		offset: 0
-	},
-	oz: {
-		dimension: "mass",
-		factor: .0283495,
-		offset: 0
-	},
-	"%": {
-		dimension: "percentage",
-		factor: 1,
-		offset: 0
-	},
-	L: {
-		dimension: "volume",
-		factor: 1,
-		offset: 0
-	},
-	mL: {
-		dimension: "volume",
-		factor: .001,
-		offset: 0
-	},
-	gal: {
-		dimension: "volume",
-		factor: 3.785411784,
-		offset: 0
-	},
-	s: {
-		dimension: "duration",
-		factor: 1,
-		offset: 0
-	},
-	ms: {
-		dimension: "duration",
-		factor: .001,
-		offset: 0
-	},
-	min: {
-		dimension: "duration",
-		factor: 60,
-		offset: 0
-	},
-	h: {
-		dimension: "duration",
-		factor: 3600,
-		offset: 0
-	},
-	d: {
-		dimension: "duration",
-		factor: 86400,
-		offset: 0
-	},
-	B: {
-		dimension: "information",
-		factor: 1,
-		offset: 0
-	},
-	KiB: {
-		dimension: "information",
-		factor: 1024,
-		offset: 0
-	},
-	MiB: {
-		dimension: "information",
-		factor: 1024 ** 2,
-		offset: 0
-	},
-	GiB: {
-		dimension: "information",
-		factor: 1024 ** 3,
-		offset: 0
-	},
-	TiB: {
-		dimension: "information",
-		factor: 1024 ** 4,
-		offset: 0
-	},
-	kB: {
-		dimension: "information",
-		factor: 1e3,
-		offset: 0
-	},
-	MB: {
-		dimension: "information",
-		factor: 1e6,
-		offset: 0
-	},
-	GB: {
-		dimension: "information",
-		factor: 1e9,
-		offset: 0
-	},
-	"°": {
-		dimension: "angle",
-		factor: 1,
-		offset: 0
-	},
-	dBFS: {
-		dimension: "sound-level",
-		factor: 1,
-		offset: 0
-	},
-	dBm: {
-		dimension: "signal-level",
-		factor: 1,
-		offset: 0
-	},
-	mired: {
-		dimension: "colour-temperature",
-		factor: 1,
-		offset: 0
-	},
-	kbps: {
-		dimension: "bitrate",
-		factor: 1,
-		offset: 0
-	},
-	Mbps: {
-		dimension: "bitrate",
-		factor: 1e3,
-		offset: 0
-	},
-	fps: {
-		dimension: "rate",
-		factor: 1,
-		offset: 0
-	}
-};
-/** Resolve a unit's `UnitSpec`, or `undefined` when the spelling is unknown. */
-function specFor(unit) {
-	return Object.hasOwn(UNIT_TABLE, unit) ? UNIT_TABLE[unit] : void 0;
-}
-/** Value in `spec`'s unit → its dimension's canonical unit. */
-function toCanonical(value, spec) {
-	return value * spec.factor + spec.offset;
-}
-/** Canonical-unit value → the unit described by `spec`. */
-function fromCanonical(canonical, spec) {
-	return (canonical - spec.offset) / spec.factor;
-}
-/**
-* Graceful variant for the render path: returns the converted value, or
-* `undefined` when the conversion is refused (unknown unit / cross-dimension).
-* Never throws — a render caller falls back to the raw value + source unit.
-*/
-function tryConvertUnit(value, from, to) {
-	if (from === to) return value;
-	const fromSpec = specFor(from);
-	if (!fromSpec) return void 0;
-	const toSpec = specFor(to);
-	if (!toSpec) return void 0;
-	if (fromSpec.dimension !== toSpec.dimension) return void 0;
-	return fromCanonical(toCanonical(value, fromSpec), toSpec);
-}
-/**
 * A number a person types for a physical quantity — the input side of the
 * value + unit contract (D972).
 *
@@ -45723,26 +45571,23 @@ var SettingsSchemaWithValuesSchema = object({
 var SettingsPatchSchema = record(string(), unknown());
 /** The scope of a scoped-settings call (D986): where the capability declared the values. */
 var ScopedSettingsScopeSchema = _enum(SCOPED_SETTINGS_SCOPES);
+/** One scoped schema an addon serves: its capability, scope and section ids. */
+var ScopedSettingsDeclarationSchema = object({
+	cap: string(),
+	scope: ScopedSettingsScopeSchema,
+	sectionIds: array(string())
+});
 /** Standard success response for update operations. */
 var SettingsUpdateResultSchema = object({ success: literal(true) });
 method(object({
-	addonId: string(),
-	nodeId: string().optional(),
-	overlay: record(string(), unknown()).optional(),
-	cap: string().optional()
-}), SettingsSchemaWithValuesSchema.nullable()), method(object({
-	addonId: string(),
-	nodeId: string().optional(),
-	patch: SettingsPatchSchema
-}), SettingsUpdateResultSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({
 	addonId: string(),
 	cap: string(),
 	scope: ScopedSettingsScopeSchema,
 	nodeId: string().optional()
 }), SettingsSchemaWithValuesSchema.nullable()), method(object({
+	addonId: string(),
+	nodeId: string().optional()
+}), array(ScopedSettingsDeclarationSchema).nullable()), method(object({
 	addonId: string(),
 	cap: string(),
 	scope: ScopedSettingsScopeSchema,
@@ -45757,9 +45602,6 @@ method(object({
 	scope: ScopedSettingsScopeSchema,
 	nodeId: string().optional()
 }), record(string(), unknown()).nullable()), method(object({
-	addonId: string(),
-	nodeId: string().optional()
-}), SettingsSchemaWithValuesSchema.nullable()), method(object({
 	addonId: string(),
 	nodeId: string().optional(),
 	instance: IntegrationInstanceRefSchema
@@ -47322,7 +47164,7 @@ var BackupDestinationInfoSchema = object({
 	id: string(),
 	/**
 	* Manifest id of the owning addon. The Settings button on the
-	* destination card opens that addon's `globalSettingsSchema` panel.
+	* destination card opens that addon's scoped settings panel.
 	*/
 	addonId: string(),
 	/** Operator-toggled enable flag from the destination-policy table. */
@@ -52799,6 +52641,7 @@ method(InstancePinSchema, DeviceExportStatusSchema), method(_void(), array(Expor
 	kind: "mutation",
 	auth: "admin"
 });
+var DeviceAliasSchema = string().max(64).regex(/^[a-z][a-z0-9_]*$/);
 /**
 * A SITE ZONE — a named part of the property that several locations belong to.
 *
@@ -53285,6 +53128,12 @@ var DeviceInfoSchema = object({
 	addonId: string(),
 	type: _enum(DeviceType),
 	name: string(),
+	/** The name a value template uses for this device (`{{ stufa_veranda.temperature }}`),
+	*  entity_id style. Generated once from the name at first registration, unique
+	*  cluster-wide, editable through `setAlias`, NOT changed by a rename (D1021).
+	*  Optional: a record produced by an older build omits it until the boot
+	*  backfill has run. */
+	alias: DeviceAliasSchema.optional(),
 	/** Operator-organisational location label. `null` when unset. */
 	location: string().nullable(),
 	/** Soft-disabled flag. */
@@ -53604,6 +53453,25 @@ method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	deviceId: number$1(),
+	alias: string()
+}), discriminatedUnion("ok", [object({
+	ok: literal(true),
+	alias: DeviceAliasSchema
+}), object({
+	ok: literal(false),
+	reason: _enum([
+		"empty",
+		"too-long",
+		"grammar",
+		"reserved",
+		"taken"
+	]),
+	takenBy: number$1().optional()
+})]), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number$1(),
 	location: string().nullable()
@@ -67704,6 +67572,11 @@ var NcScheduleSchema = object({
 * as a STATE SUMMARY at the end of each window of `schedule`.
 */
 var NcSystemEventDeliveryModeSchema = _enum(["instant", "summary"]);
+_enum([
+	"activation",
+	"deactivation",
+	"schedule"
+]);
 /**
 * How a summary window is SENT (D698): `rule` (absent) = ONE notification with
 * every section; `section` = one notification per section with something to
@@ -67720,11 +67593,26 @@ var NcStateSummarySplitSchema = _enum(["rule", "section"]);
 * midnight crossing); the send time is each window's END. Refused on the
 * `alarm` family, which stays instant (`systemEventDeliveryProblems`).
 */
-var NcSystemEventDeliverySchema = discriminatedUnion("mode", [object({ mode: literal("instant") }), object({
-	mode: literal("summary"),
-	schedule: NcScheduleSchema,
-	split: NcStateSummarySplitSchema.optional()
-})]);
+var NcSystemEventDeliverySchema = discriminatedUnion("mode", [
+	object({ mode: literal("instant") }),
+	object({
+		mode: literal("summary"),
+		schedule: NcScheduleSchema,
+		split: NcStateSummarySplitSchema.optional()
+	}),
+	object({
+		mode: literal("modes"),
+		/** The bad edge, and every kind that has a single edge. */
+		onActivation: boolean(),
+		/** The recovery edges of the classes of the selected kinds (derived, never stored per kind). */
+		onDeactivation: boolean(),
+		/** A state summary at the end of each window; absent = no summary. */
+		onSchedule: object({
+			schedule: NcScheduleSchema,
+			grouping: NcStateSummarySplitSchema
+		}).optional()
+	})
+]);
 /** Fuzzy plate matcher — OCR noise makes exact match useless (spec row 12/13). */
 var NcPlateMatcherSchema = object({
 	/**
@@ -75815,93 +75703,27 @@ var RunningFlipEventDataSchema = object({
 	phase: string().nullable()
 });
 var RUNNING_DEVICE_TYPES = Object.values(DeviceType);
-/** Generic Customize target for the running boolean (D936). */
-var runningCustomize = {
-	version: 1,
-	overridable: [{
-		path: "running",
-		by: "running"
-	}],
-	targets: [{
-		id: "running",
-		cardinality: "scalar",
-		vocabulary: {
-			cap: "running-state",
-			stateField: "running"
-		},
-		deviceTypes: [
-			DeviceType.Washer,
-			DeviceType.Dryer,
-			DeviceType.Dishwasher,
-			DeviceType.Vacuum,
-			DeviceType.LawnMower,
-			DeviceType.MediaPlayer,
-			DeviceType.WaterHeater,
-			DeviceType.Humidifier,
-			DeviceType.Fan,
-			DeviceType.Climate,
-			DeviceType.Thermostat,
-			DeviceType.PetFeeder,
-			DeviceType.Heater
-		],
-		apply: "add",
-		path: "running",
-		sources: [
-			{
-				kind: "switch",
-				transforms: [{ kind: "identity" }]
-			},
-			{
-				kind: "binary",
-				transforms: [{ kind: "identity" }, { kind: "invert" }]
-			},
-			{
-				kind: "numeric",
-				requiredUnit: "W",
-				transforms: [{
-					kind: "threshold",
-					comparisons: ["gte", "lte"],
-					comparison: "gte",
-					defaultThreshold: 5,
-					defaultStartDwellMs: RUNNING_POWER_START_DELAY_MS,
-					defaultStopDwellMs: RUNNING_POWER_STOP_DELAY_MS,
-					thresholdUnit: "W"
-				}]
-			}
-		],
-		companions: [
-			{
-				kind: "constant",
-				path: "source",
-				value: "assigned",
-				when: "always"
-			},
-			{
-				kind: "constant",
-				path: "phase",
-				value: null,
-				when: "add"
-			},
-			{
-				kind: "clock",
-				path: "lastFetchedAt",
-				when: "always"
-			},
-			{
-				kind: "transition-time",
-				path: "since",
-				sourceChangedAt: "prefer"
-			}
-		],
-		sourceReport: {
-			status: "assignment-status",
-			runtimeField: "source",
-			nativeValue: "native",
-			assignedValue: "assigned"
-		},
-		advancedExpression: true
-	}]
-};
+/**
+* Customize offers "running" only where a job makes sense (D933): a cycle,
+* a clean, a mow, playback, or another appliance that is on and working.
+* The cap itself stays on every type — a camera can still report running
+* natively; it just has no card.
+*/
+var RUNNING_CUSTOMIZE_DEVICE_TYPES = [
+	DeviceType.Washer,
+	DeviceType.Dryer,
+	DeviceType.Dishwasher,
+	DeviceType.Vacuum,
+	DeviceType.LawnMower,
+	DeviceType.MediaPlayer,
+	DeviceType.WaterHeater,
+	DeviceType.Humidifier,
+	DeviceType.Fan,
+	DeviceType.Climate,
+	DeviceType.Thermostat,
+	DeviceType.PetFeeder,
+	DeviceType.Heater
+];
 var runningStateCapability = {
 	name: "running-state",
 	scope: "device",
@@ -75921,7 +75743,78 @@ var runningStateCapability = {
 	durability: "restored",
 	history: { fields: { running: { kind: "boolean" } } },
 	volatileStateFields: ["lastFetchedAt"],
-	customize: runningCustomize
+	customize: {
+		version: 1,
+		overridable: [{
+			path: "running",
+			by: "running"
+		}],
+		targets: [{
+			id: "running",
+			cardinality: "scalar",
+			vocabulary: {
+				cap: "running-state",
+				stateField: "running"
+			},
+			deviceTypes: RUNNING_CUSTOMIZE_DEVICE_TYPES,
+			apply: "add",
+			path: "running",
+			sources: [
+				{
+					kind: "switch",
+					transforms: [{ kind: "identity" }]
+				},
+				{
+					kind: "binary",
+					transforms: [{ kind: "identity" }, { kind: "invert" }]
+				},
+				{
+					kind: "numeric",
+					requiredUnit: "W",
+					transforms: [{
+						kind: "threshold",
+						comparisons: ["gte", "lte"],
+						comparison: "gte",
+						defaultThreshold: 5,
+						defaultStartDwellMs: RUNNING_POWER_START_DELAY_MS,
+						defaultStopDwellMs: RUNNING_POWER_STOP_DELAY_MS,
+						thresholdUnit: "W"
+					}]
+				}
+			],
+			companions: [
+				{
+					kind: "constant",
+					path: "source",
+					value: "assigned",
+					when: "always"
+				},
+				{
+					kind: "constant",
+					path: "phase",
+					value: null,
+					when: "add"
+				},
+				{
+					kind: "clock",
+					path: "lastFetchedAt",
+					when: "always"
+				},
+				{
+					kind: "transition-time",
+					path: "since",
+					sourceChangedAt: "prefer"
+				}
+			],
+			sourceReport: {
+				status: "assignment-status",
+				runtimeField: "source",
+				nativeValue: "native",
+				assignedValue: "assigned"
+			},
+			advancedExpression: true
+		}]
+	}
 };
 /**
 * scene-monitor — device-scoped reference-region state cap. An operator marks
@@ -78855,6 +78748,11 @@ var TimedRunUnitSchema = _enum(["s", "min"]);
 _enum(["switch", "pet-fountain"]);
 DeviceType.Heater, DeviceType.PetFountain;
 var TIMED_RUN_DEVICE_TYPES = [DeviceType.Heater, DeviceType.PetFountain];
+/** One duration, as the one-tap run asks for it. */
+var TimedRunQuickRunSchema = object({
+	duration: number$1().positive().finite(),
+	unit: TimedRunUnitSchema
+});
 /** Why a request was not carried out. Typed, so a caller can say it in words. */
 var TimedRunRefusalSchema = _enum([
 	"unsupported-device",
@@ -78875,8 +78773,23 @@ var TimedRunStatusSchema = object({
 	activeUntil: number$1().nullable(),
 	/** Who asked for the run (a user id or an addon id); `null` when nothing is armed or it did not say. */
 	requestedBy: string().nullable(),
+	/**
+	* The one-tap run of THIS device: what a "Run" button on any surface starts. `null` when
+	* the device is gone or its type has no timed run; a status from before this field
+	* existed has none, and a surface falls back to the type's default.
+	*/
+	quickRun: TimedRunQuickRunSchema.nullable(),
 	lastFetchedAt: number$1()
 });
+/** What the settings form needs: the unit, the bounds and the type's default. */
+var TimedRunOptionsSchema = object({
+	unit: TimedRunUnitSchema,
+	/** The longest run, in `unit`. */
+	maxDuration: number$1(),
+	defaultDuration: number$1()
+});
+/** The one-tap run duration, in the type's unit; `null` returns to the type's default. */
+var TimedRunSettingsPatchSchema = object({ quickRunDuration: number$1().positive().finite().nullable().optional() });
 var timedRunCapability = {
 	name: "timed-run",
 	scope: "device",
@@ -78884,7 +78797,24 @@ var timedRunCapability = {
 	kind: "wrapper",
 	defaultActive: true,
 	deviceTypes: TIMED_RUN_DEVICE_TYPES,
+	deviceConfig: { ui: {
+		kind: "derived-form",
+		builderId: "timed-run",
+		tab: "general"
+	} },
 	methods: {
+		getOptions: method(object({ deviceId: number$1().int() }), TimedRunOptionsSchema),
+		/**
+		* The one-tap run of this device. A duration above the type's maximum is
+		* REFUSED (thrown), like `runFor`: the maximum is a safety bound.
+		*/
+		setSettings: method(object({
+			deviceId: number$1().int(),
+			settings: TimedRunSettingsPatchSchema
+		}), _void(), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/**
 		* Turn the device on and arm its off. A run already armed is replaced (the
 		* new deadline wins). Refuses with a typed reason above the type's maximum.
@@ -83585,13 +83515,6 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"addonSettings.getGlobalSettings": {
-		capName: "addon-settings",
-		capScope: "system",
-		addonId: null,
-		access: "view",
-		role: "admin"
-	},
 	"addonSettings.getIntegrationFormSchema": {
 		capName: "addon-settings",
 		capScope: "system",
@@ -83599,14 +83522,14 @@ Object.freeze({
 		access: "view",
 		role: "admin"
 	},
-	"addonSettings.getIntegrationSettings": {
+	"addonSettings.getScopedSettings": {
 		capName: "addon-settings",
 		capScope: "system",
 		addonId: null,
 		access: "view",
 		role: "admin"
 	},
-	"addonSettings.getScopedSettings": {
+	"addonSettings.listScopedSettings": {
 		capName: "addon-settings",
 		capScope: "system",
 		addonId: null,
@@ -83634,13 +83557,6 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
-	"addonSettings.updateGlobalSettings": {
-		capName: "addon-settings",
-		capScope: "system",
-		addonId: null,
-		access: "create",
-		role: "admin"
-	},
 	"addonSettings.updateScopedSettings": {
 		capName: "addon-settings",
 		capScope: "system",
@@ -85811,6 +85727,13 @@ Object.freeze({
 		access: "create",
 		role: "admin"
 	},
+	"deviceManager.setAlias": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"deviceManager.setChildLayout": {
 		capName: "device-manager",
 		capScope: "system",
@@ -92594,6 +92517,13 @@ Object.freeze({
 		access: "create",
 		role: "viewer"
 	},
+	"timedRun.getOptions": {
+		capName: "timed-run",
+		capScope: "device",
+		addonId: null,
+		access: "view",
+		role: "viewer"
+	},
 	"timedRun.getStatus": {
 		capName: "timed-run",
 		capScope: "device",
@@ -92608,6 +92538,13 @@ Object.freeze({
 		access: "create",
 		role: "viewer"
 	},
+	"timedRun.setSettings": {
+		capName: "timed-run",
+		capScope: "device",
+		addonId: null,
+		access: "create",
+		role: "admin"
+	},
 	"toast.onToast": {
 		capName: "toast",
 		capScope: "system",
@@ -93538,6 +93475,7 @@ function offered(received) {
 	};
 }
 offered(HA_AS), withheld(HOMEKIT_REASON), withheld(ALEXA_REASON), withheld(GOOGLE_REASON), withheld(MATTER_REASON);
+string().min(1).max(4096);
 Object.freeze({
 	"accessories.getStatus": [{
 		name: "deviceId",
@@ -94221,6 +94159,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.setAlias": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceManager.setChildLayout": [{
 		name: "deviceId",
 		form: "single",
@@ -96285,6 +96228,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"timedRun.getOptions": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"timedRun.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -96295,6 +96243,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"timedRun.setSettings": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"update.getStatus": [{
 		name: "deviceId",
 		form: "single",
@@ -97364,6 +97317,7 @@ var STATE_SUMMARY_VARS = [
 	[...RULE_TEXT],
 	[...RULE_TEXT],
 	[...RULE_TEXT],
+	[...RULE_TEXT],
 	[...RULE_BODY_ONLY],
 	[...RULE_TEXT],
 	([...RULE_TEXT], [...DEVICE_EVENTS]),
@@ -98946,7 +98900,6 @@ function buildLinkedInstances(records, spec) {
 	});
 	return instances;
 }
-var BROKER_ROWS_MAX = 1e3;
 var STRAY_REGISTRY_ID = /^int_\d+$/;
 async function moveBrokerLinksToConnections(ports) {
 	const brokers = await ports.listBrokers();
@@ -98978,36 +98931,6 @@ async function moveBrokerLinksToConnections(ports) {
 		}
 	};
 }
-/** The ports over the two record kinds of the addon. */
-function brokerLinkPortsOver(deps) {
-	return {
-		warn: deps.warn,
-		listBrokers: async () => {
-			return (await deps.brokers.query({ limit: BROKER_ROWS_MAX })).records.map((row) => {
-				const name = row.data["name"];
-				const link = row.data["integrationId"];
-				return {
-					id: row.id,
-					name: typeof name === "string" && name.length > 0 ? name : row.id,
-					integrationId: typeof link === "string" ? link : void 0
-				};
-			});
-		},
-		readConnection: async (id) => {
-			const row = await deps.connections.get(id);
-			return row === null ? null : { brokerId: row.data.brokerId };
-		},
-		putConnection: async (id, body) => {
-			await deps.connections.put({
-				id,
-				data: body
-			}, { ifRev: 0 });
-		},
-		clearBrokerLink: async (brokerId) => {
-			await deps.brokers.patch(brokerId, { integrationId: null });
-		}
-	};
-}
 //#endregion
 //#region src/speak/constants.ts
 /** Echo speech limits and the worker restart bound (same window as CrashSupervisor). */
@@ -145964,7 +145887,7 @@ function echoTargetStoreOver(records, options = {}) {
 /** The `echoTargets` setting as the legacy source: a row the migration left there is still served. */
 function legacyEchoTargetsOver(setting) {
 	return {
-		list: async () => readEchoTargets({ echoTargets: setting.readRows() }).map((row) => ({
+		list: async () => readEchoTargets({ echoTargets: await setting.readRows() }).map((row) => ({
 			id: row.id,
 			name: row.name,
 			kind: alexaTargetKind().kind,
@@ -145976,11 +145899,12 @@ function legacyEchoTargetsOver(setting) {
 			}
 		})),
 		delete: async (id) => {
-			const rest = setting.readRows().filter((row) => {
+			const rows = await setting.readRows();
+			const rest = rows.filter((row) => {
 				const parsed = alexaEchoTargetSchema.safeParse(row);
 				return !(parsed.success && parsed.data.id === id);
 			});
-			if (rest.length !== setting.readRows().length) await setting.writeRows(rest);
+			if (rest.length !== rows.length) await setting.writeRows(rest);
 		}
 	};
 }
@@ -145997,8 +145921,9 @@ function echoRowOf(target) {
 }
 /** The migration's ports over the `notify-alexa-echo` record kind. */
 function echoRecordPortsOver(records, logger) {
-	const handle = echoTargetStoreOver(records).handlesByKind().get(alexaTargetKind().kind);
-	if (handle === void 0) throw new Error("import-alexa: the Echo target record kind is not declared");
+	const [kind] = Object.values(alexaNotifyRecordKinds);
+	if (kind === void 0) throw new Error("import-alexa: the Echo target record kind is not declared");
+	const handle = records.kind(kind);
 	return {
 		readEchoRecord: async (id) => (await handle.getResolved(id))?.data ?? null,
 		writeEchoRecord: async (id, body) => {
@@ -147083,17 +147008,42 @@ async function flattenBrokerRecords(ports) {
 //#endregion
 //#region src/migrations/broker-links-to-connections.ts
 var BROKER_LINKS_TO_CONNECTIONS_ID = "import-alexa/2026-11-05-broker-links-to-connections";
+var BROKER_ROWS_MAX = 1e3;
 /** The broker records and the integration (`connections`) records of this addon. */
 function alexaBrokerLinkPorts(records, warn) {
-	return brokerLinkPortsOver({
-		brokers: records.kind({
-			name: alexaBrokersEntryKind.name,
-			declaration: alexaBrokersEntryKind.declaration,
-			schema: record(string(), unknown())
-		}),
-		connections: records.kind(alexaConnectionsEntryKind),
-		warn
+	const brokers = records.kind({
+		name: alexaBrokersEntryKind.name,
+		declaration: alexaBrokersEntryKind.declaration,
+		schema: record(string(), unknown())
 	});
+	const connections = records.kind(alexaConnectionsEntryKind);
+	return {
+		warn,
+		listBrokers: async () => {
+			return (await brokers.query({ limit: BROKER_ROWS_MAX })).records.map((row) => {
+				const name = row.data["name"];
+				const link = row.data["integrationId"];
+				return {
+					id: row.id,
+					name: typeof name === "string" && name.length > 0 ? name : row.id,
+					integrationId: typeof link === "string" ? link : void 0
+				};
+			});
+		},
+		readConnection: async (id) => {
+			const row = await connections.get(id);
+			return row === null ? null : { brokerId: row.data.brokerId };
+		},
+		putConnection: async (id, body) => {
+			await connections.put({
+				id,
+				data: body
+			}, { ifRev: 0 });
+		},
+		clearBrokerLink: async (brokerId) => {
+			await brokers.patch(brokerId, { integrationId: null });
+		}
+	};
 }
 //#endregion
 //#region src/migrations/strip-echo-target-volume-and-mode.ts
@@ -147109,7 +147059,7 @@ function strippedRow(row) {
 	return Object.fromEntries(Object.entries(row).filter(([key]) => !RETIRED_KEYS.includes(key)));
 }
 async function stripEchoTargetVolumeAndMode(ports) {
-	const rows = ports.readRows();
+	const rows = await ports.readRows();
 	const stripped = rows.filter(carriesRetiredKey).length;
 	if (stripped === 0) return {
 		outcome: "already-done",
@@ -147142,7 +147092,7 @@ async function stripEchoTargetVolumeAndMode(ports) {
 */
 var ECHO_TARGETS_TO_RECORDS_ID = "import-alexa/2026-11-06-echo-targets-to-records";
 async function moveEchoTargetsToRecords(ports) {
-	const rows = ports.readRows();
+	const rows = await ports.readRows();
 	if (rows.length === 0) return {
 		outcome: "already-done",
 		summary: { converted: 0 }
@@ -147293,6 +147243,118 @@ var BROKER_RECORD_MIGRATION_IDS = [
 	BROKER_LINKS_TO_CONNECTIONS_ID
 ];
 //#endregion
+//#region src/migrations/records-door.ts
+function positionalHandleOver(handle) {
+	return {
+		get: (id) => handle.get({ id }),
+		getResolved: (id) => handle.getResolved({ id }),
+		put: (input, opts) => handle.put({
+			...input,
+			...opts?.ifRev === void 0 ? {} : { ifRev: opts.ifRev }
+		}),
+		patch: (id, partial) => handle.patch({
+			id,
+			partial
+		}),
+		delete: (id) => handle.delete({ id }),
+		query: ({ limit }) => handle.query({ limit })
+	};
+}
+/** The records door of the migration API, in the shape the migrations call. */
+function positionalRecordsOver(api) {
+	return { kind: (definition) => positionalHandleOver(api.records.kind(definition)) };
+}
+//#endregion
+//#region src/migrations/ports.ts
+var NESTED_MAX = 1e3;
+/** The registry list and the migration-only rows door, over the migration API. */
+function integrationRowsApiOver(api) {
+	return {
+		list: async () => (await api.integrations.list({})).integrations,
+		readLegacyIntegrationRows: (input) => api.legacyRows.read(input),
+		clearLegacyIntegrationRows: (input) => api.legacyRows.clear(input)
+	};
+}
+/** The keychain handle of the migration API: resolve and delete, owner-scoped by the transport. */
+function secretsOver(api) {
+	return {
+		resolve: async (refs) => {
+			const { values } = await api.secrets.resolve({ refs: [...refs] });
+			const out = {};
+			for (const ref of refs) {
+				const value = values[ref];
+				out[ref] = value === null || value === void 0 ? { kind: "missing" } : {
+					kind: "value",
+					value,
+					version: 0
+				};
+			}
+			return out;
+		},
+		delete: async (refs) => (await api.secrets.delete({ refs: [...refs] })).deleted
+	};
+}
+/** The Echo targets kept in the addon's `echoTargets` setting, read and written as stored. */
+function echoSettingPortsOver(api) {
+	return {
+		readRows: async () => {
+			const { store } = await api.settings.read({});
+			const rows = store["echoTargets"];
+			return Array.isArray(rows) ? rows : [];
+		},
+		writeRows: async (rows) => {
+			await api.settings.write({ patch: { echoTargets: [...rows] } });
+		}
+	};
+}
+/** The broker rows' flatten ports over the records door. */
+function flattenPortsOverDoor(records) {
+	const handle = records.kind({
+		name: alexaBrokersEntryKind.name,
+		declaration: alexaBrokersEntryKind.declaration,
+		schema: record(string(), unknown())
+	});
+	return {
+		listNested: async (legacyKey) => (await handle.query({ limit: NESTED_MAX })).records.filter((row) => legacyKey in row.data).map((row) => row.id),
+		readResolved: async (id) => {
+			const row = await handle.getResolved(id);
+			if (row === null) throw new Error("the record is gone");
+			return row.data;
+		},
+		patch: async (id, patch) => {
+			await handle.patch(id, patch);
+		}
+	};
+}
+/**
+* The catalogue's ports over {@link MigrationApiV1}, and nothing else (planning#447): the addon's
+* own settings store (the Echo rows), its keychain handle, the legacy integration rows door and its
+* broker, connection and Echo target records.
+*/
+function alexaPortsOver(api) {
+	const records = positionalRecordsOver(api);
+	const warn = (message) => {
+		api.log.warn({ message });
+	};
+	return {
+		...echoSettingPortsOver(api),
+		...flattenPortsOverDoor(records),
+		...alexaBrokerLinkPorts(records, warn),
+		...echoRecordPortsOver(records, { warn: (message, extras) => {
+			api.log.warn({
+				message,
+				...extras?.meta === void 0 ? {} : { meta: extras.meta }
+			});
+		} }),
+		...alexaIntegrationRowsPorts({
+			api: integrationRowsApiOver(api),
+			records,
+			secrets: secretsOver(api),
+			warn
+		})
+	};
+}
+//#endregion
 //#region src/speak/icon-routes.ts
 var ALEXA_ICON_SVG = "<svg role=\"img\" viewBox=\"0 0 24 24\" xmlns=\"http://www.w3.org/2000/svg\" fill=\"#00CAFF\"><title>Amazon Alexa</title><path d=\"M12 0C5.37 0 0 5.37 0 12C0 18.09 4.53 23.11 10.4 23.9V21.5A1.59 1.59 0 0 0 9.32 19.97A8.41 8.41 0 0 1 3.6 11.8A8.37 8.37 0 0 1 12.09 3.6A8.4 8.4 0 0 1 20.4 12.31L20.39 12.38A8.68 8.68 0 0 1 20.36 12.76C20.36 12.83 20.35 12.9 20.34 12.96C20.34 13.04 20.33 13.12 20.32 13.19L20.3 13.29C19.27 20.07 10.45 23.87 10.4 23.9C10.92 23.97 11.46 24 12 24C18.63 24 24 18.63 24 12S18.63 0 12 0Z\"/></svg>";
 /** One day; the mark is immutable per addon version. */
@@ -147412,7 +147474,7 @@ var AlexaImportAddon = class extends BaseDeviceProvider {
 			infoOf: (id) => this.registry?.get(id) ?? null,
 			onChanged: (id) => this.syncBrokerRuntime(id)
 		});
-		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS, this.migrationPorts(records)), { only: BROKER_RECORD_MIGRATION_IDS });
+		await this.runMigrations(ADDON_MIGRATIONS, (api) => alexaPortsOver(api), { only: BROKER_RECORD_MIGRATION_IDS });
 		this.activeBrokers = await this.loadPersistedBrokers();
 		await this.adoptSessionFiles();
 		this.registry = new AlexaBrokerRegistry(this.ctx.logger, {
@@ -147453,7 +147515,7 @@ var AlexaImportAddon = class extends BaseDeviceProvider {
 			deviceCode: this.deviceCodeLogin,
 			commitCookie: (input) => this.commitCapturedCookie(input)
 		}), ...speakIconRoutes()];
-		await this.runMigrations(defineAddonMigrations(ADDON_MIGRATIONS, this.migrationPorts(records)), { only: ADDON_MIGRATIONS.map((m) => m.meta.id).filter((id) => !BROKER_RECORD_MIGRATION_IDS.includes(id)) });
+		await this.runMigrations(ADDON_MIGRATIONS, (api) => alexaPortsOver(api), { only: ADDON_MIGRATIONS.map((m) => m.meta.id).filter((id) => !BROKER_RECORD_MIGRATION_IDS.includes(id)) });
 		const echoStore = echoTargetStoreOver(records, {
 			logger: this.ctx.logger,
 			legacy: legacyEchoTargetsOver(this.echoSettingPorts())
@@ -147504,29 +147566,15 @@ var AlexaImportAddon = class extends BaseDeviceProvider {
 			}
 		] };
 	}
-	/** The `echoTargets` setting, read and written as the migration and the legacy store see it. */
+	/**
+	* The `echoTargets` setting the legacy Echo store still serves: the addon's own durable state
+	* under the key it was always stored at, so a row an older release left there is still read.
+	*/
 	echoSettingPorts() {
+		const rows = this.state("echoTargets", array(unknown()), []);
 		return {
-			readRows: () => Array.isArray(this.config.echoTargets) ? this.config.echoTargets : [],
-			writeRows: async (rows) => {
-				await this.updateGlobalSettings({ echoTargets: [...readEchoTargets({ echoTargets: rows })] });
-			}
-		};
-	}
-	migrationPorts(records) {
-		const secrets = this.ctx.secrets;
-		if (secrets === void 0) throw new Error("import-alexa: ctx.secrets is required");
-		return {
-			...this.echoSettingPorts(),
-			...flattenPortsOver(records.kind(alexaBrokersEntryKind)),
-			...alexaBrokerLinkPorts(records, (message) => this.ctx.logger.warn(message)),
-			...echoRecordPortsOver(records, this.ctx.logger),
-			...alexaIntegrationRowsPorts({
-				api: defaultIntegrationApiOver(this.ctx.api),
-				records,
-				secrets,
-				warn: (message) => this.ctx.logger.warn(message)
-			})
+			readRows: () => rows.get(),
+			writeRows: (next) => rows.set([...readEchoTargets({ echoTargets: next })])
 		};
 	}
 	/** One provider over the two record kinds: the account (broker) and the integrations using it. */