@camstack/addon-osd-manager 0.1.15 → 0.1.17

package/dist/index.js

@@ -7641,7 +7641,7 @@ var RecordingBandSchema = object({
 	postBufferSec: number().min(0).optional()
 });
 ({
-	preBufferSec: 10,
+	preBufferSec: 15,
 	postBufferSec: 30
 }).postBufferSec * 1e3;
 /**
@@ -15322,128 +15322,103 @@ var COCO_TO_MACRO = {
 var AUDIO_MACRO_LABELS = [
 	{
 		id: "speech",
-		name: "Speech",
-		icon: "🗣️"
+		name: "Speech"
 	},
 	{
 		id: "scream",
-		name: "Scream / Shout",
-		icon: "😱"
+		name: "Scream / Shout"
 	},
 	{
 		id: "crying",
-		name: "Crying / Baby",
-		icon: "😢"
+		name: "Crying / Baby"
 	},
 	{
 		id: "laughter",
-		name: "Laughter",
-		icon: "😂"
+		name: "Laughter"
 	},
 	{
 		id: "music",
-		name: "Music",
-		icon: "🎵"
+		name: "Music"
 	},
 	{
 		id: "dog",
-		name: "Dog",
-		icon: "🐕"
+		name: "Dog"
 	},
 	{
 		id: "cat",
-		name: "Cat",
-		icon: "🐈"
+		name: "Cat"
 	},
 	{
 		id: "bird",
-		name: "Bird",
-		icon: "🐦"
+		name: "Bird"
 	},
 	{
 		id: "animal",
-		name: "Animal (other)",
-		icon: "🐾"
+		name: "Animal (other)"
 	},
 	{
 		id: "alarm",
-		name: "Alarm / Siren",
-		icon: "🚨"
+		name: "Alarm / Siren"
 	},
 	{
 		id: "doorbell",
-		name: "Doorbell / Knock",
-		icon: "🔔"
+		name: "Doorbell / Knock"
 	},
 	{
 		id: "glass_breaking",
-		name: "Glass Breaking",
-		icon: "💥"
+		name: "Glass Breaking"
 	},
 	{
 		id: "gunshot",
-		name: "Gunshot / Explosion",
-		icon: "💣"
+		name: "Gunshot / Explosion"
 	},
 	{
 		id: "vehicle",
-		name: "Vehicle",
-		icon: "🚗"
+		name: "Vehicle"
 	},
 	{
 		id: "siren",
-		name: "Emergency Siren",
-		icon: "🚑"
+		name: "Emergency Siren"
 	},
 	{
 		id: "fire",
-		name: "Fire / Smoke",
-		icon: "🔥"
+		name: "Fire / Smoke"
 	},
 	{
 		id: "water",
-		name: "Water",
-		icon: "💧"
+		name: "Water"
 	},
 	{
 		id: "wind",
-		name: "Wind / Weather",
-		icon: "🌬️"
+		name: "Wind / Weather"
 	},
 	{
 		id: "door",
-		name: "Door",
-		icon: "🚪"
+		name: "Door"
 	},
 	{
 		id: "footsteps",
-		name: "Footsteps",
-		icon: "👣"
+		name: "Footsteps"
 	},
 	{
 		id: "crowd",
-		name: "Crowd / Chatter",
-		icon: "👥"
+		name: "Crowd / Chatter"
 	},
 	{
 		id: "telephone",
-		name: "Telephone",
-		icon: "📞"
+		name: "Telephone"
 	},
 	{
 		id: "engine",
-		name: "Engine / Motor",
-		icon: "⚙️"
+		name: "Engine / Motor"
 	},
 	{
 		id: "tools",
-		name: "Tools / Construction",
-		icon: "🔨"
+		name: "Tools / Construction"
 	},
 	{
 		id: "silence",
-		name: "Silence",
-		icon: "🤫"
+		name: "Silence"
 	}
 ];
 var YAMNET_TO_MACRO = {
@@ -18496,7 +18471,7 @@ var TrackEnvelopeSchema = object({
 * `snapshots[]` references — megabytes across a page of tracks. `slim`
 * keeps every scalar the list surfaces actually render (ids, class(es),
 * label / audioLabels / importance enrichment, firstSeen/lastSeen, state,
-* zonesVisited, bestEventId, envelope, hasFace, hasRider) and returns `positions` /
+* zonesVisited, bestEventId, envelope, hasFace, hasEmbeddedFace, hasRider) and returns `positions` /
 * `snapshots` as EMPTY arrays — detail views re-fetch the full row via
 * `getTrack`. Mirrors the event-store `projection` convention
 * (`getObjectEvents` et al.).
@@ -18791,6 +18766,35 @@ var TrackSchema = object({
 	*/
 	hasFace: boolean().optional(),
 	/**
+	* This track has a face row IN THE GALLERY: a crop **and** an embedding — a
+	* face an operator could ASSIGN to an identity.
+	*
+	* The STRICT twin of {@link hasFace}, and the pair only earns its keep
+	* because the two disagree. `hasFace` is stamped at the TOP of the face
+	* branch, before every gate, and means no more than "a face detector produced
+	* a face detail". This one is stamped at the single moment the gallery row
+	* LANDS — after `FaceRecognizer.onTrackEnd` successfully persists it, i.e.
+	* past the embedding-magnitude verdict, the `minFacePx` detection gate, the
+	* candidate gate, the imageless-track drop (no crop was ever captured) and
+	* the crop-store drop. Everything between the detector and that insert can
+	* legitimately refuse the face, so a flag written any earlier promises the
+	* operator something to assign and delivers nothing.
+	*
+	* **Independent of recognition.** A face collected but never auto-matched is
+	* still assignable — it is in fact the face an operator most wants to reach —
+	* so this is NOT gated on `recognizedIdentityId`. Recognition lands in
+	* `subLabel`; this says only that the raw material exists.
+	*
+	* **Set once, never cleared.** A track that produced a gallery row produced
+	* one; deleting the row later is the gallery's business, not this flag's.
+	*
+	* **Absent ≠ false**, the same rule as {@link hasFace}: every row written
+	* before the column omits it, and so does every server that predates the
+	* field. A consumer must test `=== true` and render nothing otherwise —
+	* never infer "no assignable face".
+	*/
+	hasEmbeddedFace: boolean().optional(),
+	/**
 	* This subject CONTAINS a folded rider — a person the rider-pairing step
 	* ([D34](../decisions/adr-0034.md)) removed from the frame BEFORE the tracker,
 	* so the passage is tracked once and as a VEHICLE.
@@ -20733,6 +20737,32 @@ var DetailResultSchema = object({
 	/** FRAME-space bbox (already mapped back from crop space). */
 	bbox: NativeCropBboxSchema.optional(),
 	embedding: string().optional(),
+	/**
+	* L2 magnitude of the RAW pre-normalization embedding. Additive and optional
+	* so an older runner that does not send it degrades to "unmeasurable", which
+	* the consuming gate treats as accept — never as reject.
+	*/
+	embeddingMagnitude: number().optional(),
+	/**
+	* Model that produced `embedding` — the SAME contract `labelModelId` has for
+	* `label`, and for the same reason: the producing node is the only side that
+	* knows which model actually ran, and re-deriving it downstream is exactly
+	* the inference this model exists to forbid.
+	*
+	* Additive and optional, so a runner that predates it degrades to
+	* "unmeasurable" rather than to a wrong answer — the consumer falls back to
+	* its previous assumption instead of refusing.
+	*
+	* Its absence was not cosmetic. `FaceRecognizer` needs the probe's model id
+	* to use `face-matcher`'s same-model gate (`sample.modelId !== probe.modelId`);
+	* with nothing on the wire it took the id from the GALLERY, so the gate
+	* compared the gallery against itself and could never fire. That turned the
+	* one guard protecting the face feature space into a tautology, and it is
+	* why swapping `face-embedding`'s model would NOT have stranded the enrolled
+	* gallery as the catalog comment predicts — it would have scored the new
+	* model's vectors against the old model's samples in one cosine space.
+	*/
+	embeddingModelId: string().optional(),
 	label: string().optional(),
 	/**
 	* The tier `label` occupies, copied VERBATIM from the producing step's
@@ -22695,6 +22725,7 @@ var snapshotCapability = {
 				isBattery: boolean(),
 				reason: _enum([
 					"disabled",
+					"offline",
 					"sleeping",
 					"unreachable",
 					"waking"
@@ -22784,9 +22815,17 @@ targets: array(object({
 			sleeping: boolean(),
 			/** Current device state rendered over the cached frame. State images
 			*  remain authoritative even when their photographic background is
-			*  old; null means the link must carry a current camera frame. */
+			*  old; null means the link must carry a current camera frame.
+			*
+			*  **This is the ONLY source a surface may derive an inactive tile
+			*  from.** A client that reads a device's `online`/`disabled` flags and
+			*  draws its own verdict will disagree with the pixels it is painting
+			*  — the frame comes from here, and so must the sentence over it
+			*  (D190). Pair with `ageMs` for the age of the photograph behind the
+			*  state. */
 			stateReason: _enum([
 				"disabled",
+				"offline",
 				"sleeping",
 				"unreachable",
 				"waking"
@@ -40780,7 +40819,6 @@ var NC_AUDIO_DEFAULTS = {
 	hitPercent: 60,
 	samplingSeconds: 10
 };
-new Map(AUDIO_MACRO_LABELS.flatMap((macro) => macro.icon === void 0 ? [] : [[macro.id, macro.icon]]));
 new Set(["devices", "classes"]);
 NC_AUDIO_DEFAULTS.hitPercent, NC_AUDIO_DEFAULTS.samplingSeconds;
 var WEEKDAY_TO_DAY = {
@@ -41074,6 +41112,39 @@ TimelapseRuleInputSchema.extend({
 	createdAt: number(),
 	updatedAt: number()
 });
+Object.freeze(Object.fromEntries([{
+	stepId: "face-embedding",
+	label: "Face recognition model",
+	defaultModelId: "arcface-r100",
+	indexName: "the enrolled face gallery",
+	options: [
+		{
+			id: "arcface-r100",
+			label: "ArcFace (ResNet34)"
+		},
+		{
+			id: "auraface-r100",
+			label: "AuraFace R100"
+		},
+		{
+			id: "inception-resnet-v1",
+			label: "Inception ResNet V1"
+		}
+	]
+}, {
+	stepId: "clip-embedding",
+	label: "Semantic search model",
+	defaultModelId: "mobileclip-s1",
+	indexName: "the object semantic-search index",
+	options: [{
+		id: "mobileclip-s1",
+		label: "MobileCLIP S1"
+	}, {
+		id: "mobileclip-s2",
+		label: "MobileCLIP S2"
+	}]
+}].map((s) => [s.stepId, s.defaultModelId])));
+string().min(1);
 object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -41094,10 +41165,21 @@ object({
 	*/
 	square: boolean()
 });
-({
+/**
+* The convention in force when nobody has configured one — byte-for-byte the
+* behaviour of the pre-unification LIVE path (`DETAIL_CROP_PADDING_RATIO`).
+*/
+var DEFAULT_DETAIL_CROP_CONVENTION = {
 	paddingRatio: .15,
 	square: false
-}).paddingRatio;
+};
+Object.freeze({
+	x: 0,
+	y: 0,
+	w: 1,
+	h: 1
+});
+DEFAULT_DETAIL_CROP_CONVENTION.paddingRatio;
 /**
 * WHICH delivered frames the decode worker retains a native copy of.
 *
@@ -41255,6 +41337,37 @@ var OsdBindingsStore = class {
 	}
 };
 //#endregion
+//#region src/bound-index.ts
+/**
+* The durable index of cameras that have at least one OSD binding.
+*
+* WHY IT EXISTS. The render loop's work list used to be DERIVED at boot: list
+* every device in the directory, read each one's binding block, keep the ones
+* that answered non-empty. Every one of those reads is a UDS round-trip to the
+* settings store, and they ran one at a time. Measured on the boot of
+* 2026-08-19: 976 devices × 559 ms under boot load = 546 s in which
+* `OsdManager.start()` had not returned — and `start()` was awaited inside
+* `onInitialize()`, so for nine minutes the `osd-manager` and
+* `addon-pages-source` capabilities did not exist ANYWHERE in the cluster
+* (docs/architecture/addon-lifecycle.md). The answer it took nine minutes to
+* compute was `boundDevices = 0`.
+*
+* Filtering to cameras and fanning the reads out makes that scan cheap, but it
+* is still a scan. The index is the actual fix: the work list is WRITTEN where
+* bindings are written, so boot reads one key and is done in milliseconds. The
+* scan stays, in the background, as the reconcile — because an index nothing
+* checks is an index that eventually lies.
+*
+* The value is the SET of bound camera ids, serialised as a sorted array.
+* `null` is not "no cameras are bound", it is "this hub has never written the
+* index" — the two must stay distinguishable, because the first is authoritative
+* and the second means seed it from a scan. An empty ARRAY is the authoritative
+* "nothing is bound".
+*/
+/** Store key inside the addon's own (global) store. */
+var OSD_BOUND_INDEX_KEY = "boundDeviceIds";
+var OsdBoundIndexSchema = array(number().int().positive()).nullable();
+//#endregion
 //#region src/gate.ts
 /**
 * The display gate — "should this slot show its value right now?".
@@ -41331,6 +41444,27 @@ function evaluateGate(input) {
 	return OPEN;
 }
 //#endregion
+//#region src/lane-pool.ts
+/**
+* Apply `mapper` to every item with at most `limit` in flight at once.
+*
+* A rejecting mapper rejects the whole call (same contract as `Promise.all`);
+* a caller that must not fail the sweep for one bad unit catches INSIDE the
+* mapper — which is what every caller in this package does, because a unit that
+* threw must never be the reason the next camera is not reconciled.
+*/
+async function mapWithConcurrency(items, limit, mapper) {
+	const results = new Array(items.length);
+	if (items.length === 0) return results;
+	const lanes = Math.max(1, Math.min(Math.trunc(limit), items.length));
+	const entries = items.entries();
+	const lane = async () => {
+		for (const [index, item] of entries) results[index] = await mapper(item, index);
+	};
+	await Promise.all(Array.from({ length: lanes }, () => lane()));
+	return results;
+}
+//#endregion
 //#region src/format.ts
 /** Tokens `formatClock` understands. Anything else in the pattern is literal. */
 var CLOCK_TOKENS = [
@@ -41663,31 +41797,61 @@ var OsdManager = class {
 	recognitionGeneration = /* @__PURE__ */ new Map();
 	recognitionInvalidatedAt = /* @__PURE__ */ new Map();
 	timer = null;
+	/** The background reconcile, while one is running. Held so a second arming
+	*  cannot overlap the first — two concurrent passes would race on the index
+	*  write and could persist the older of the two answers. */
+	reconcile = null;
 	constructor(deps) {
 		this.deps = deps;
 		this.logger = deps.logger;
 		this.now = deps.now ?? (() => Date.now());
 	}
 	/**
-	* Learn which cameras have bindings, then start ticking. A camera with no
-	* binding costs nothing — it is never in `boundDevices`, so the loop
-	* never reads its state and never touches its firmware.
+	* Read the durable work list, start ticking, and arm the reconcile BEHIND
+	* both.
+	*
+	* This used to derive the work list first: list every device, read every
+	* device's binding block, one at a time. On 2026-08-19 that was 976 devices ×
+	* 559 ms = 546 s, awaited inside `onInitialize`, so every capability this
+	* addon declares was absent cluster-wide for nine minutes — and the answer was
+	* `boundDevices = 0`. A camera with no binding still costs nothing at runtime;
+	* what it used to cost was the boot.
+	*
+	* The scan did not go away, it moved: it is the reconcile, it runs in the
+	* background, and it is the only thing that keeps the index from silently
+	* lying.
 	*/
 	async start(tickMs) {
-		await this.reloadBoundDevices();
+		const stored = await this.readBoundIndex();
+		if (stored !== null) {
+			this.boundDevices.clear();
+			for (const deviceId of stored) this.boundDevices.add(deviceId);
+		}
 		this.timer = setInterval(() => {
 			this.renderAllBound();
 		}, tickMs);
 		this.logger.info("osd-manager: render loop started", { meta: {
 			tickMs,
-			boundDevices: this.boundDevices.size
+			boundDevices: this.boundDevices.size,
+			source: stored === null ? "seed" : "durable-index"
 		} });
+		this.armReconcile(stored === null ? "seed" : "reconcile");
 	}
 	stop() {
 		if (this.timer !== null) clearInterval(this.timer);
 		this.timer = null;
 		this.lastWritten.clear();
 	}
+	/** Resolves when the armed reconcile has settled. Tests await it; production
+	*  never does — that is the entire point of arming it. */
+	async settleReconcile() {
+		await this.reconcile;
+	}
+	/** Every camera currently on the work list, sorted — the value persisted as
+	*  the durable index. */
+	get boundDeviceIds() {
+		return [...this.boundDevices].sort((a, b) => a - b);
+	}
 	/**
 	* Keep recognition overlays event-fresh. The persisted-track hydration below
 	* remains the restart/cold-start authority; lifecycle events only advance it.
@@ -41719,19 +41883,124 @@ var OsdManager = class {
 		});
 	}
 	/**
-	* Reconcile the work list against the store rather than trusting an event
-	* to have arrived (D8). Cheap: one settings read per camera, on the tick
-	* cadence, not per frame.
+	* Reconcile the durable index against the store rather than trusting it to be
+	* right (D8 — an index nothing checks is an index that eventually lies).
+	*
+	* Background work, and BOUNDED: cameras only, four reads in flight. Two rules
+	* keep it from destroying work:
+	*
+	* - a binding read that FAILED decides nothing — the camera keeps whatever the
+	*   index already said (D49);
+	* - a camera absent from the listing is left alone. The device restore pass
+	*   runs for minutes after boot (D167), so "not published yet" and "deleted"
+	*   look identical from here, and only one of them may unbind a camera. A
+	*   real removal comes from `clearSlotBinding`, which is authoritative.
+	*
+	* Every correction is logged with its `deviceId`, because a silent repair is
+	* indistinguishable from an index that was right all along.
+	*/
+	async reconcileBoundDevices(mode = "reconcile") {
+		const cameras = await this.deps.listCameras();
+		const probes = await mapWithConcurrency(cameras, this.deps.reconcileConcurrency ?? 4, async (camera) => ({
+			deviceId: camera.id,
+			bindings: await this.probeBindings(camera.id)
+		}));
+		const listed = new Set(cameras.map((camera) => camera.id));
+		let unreadable = 0;
+		const added = [];
+		const removed = [];
+		for (const probe of probes) {
+			if (probe.bindings === null) {
+				unreadable += 1;
+				continue;
+			}
+			const bound = Object.keys(probe.bindings).length > 0;
+			if (bound && !this.boundDevices.has(probe.deviceId)) {
+				this.boundDevices.add(probe.deviceId);
+				added.push(probe.deviceId);
+			} else if (!bound && this.boundDevices.has(probe.deviceId)) {
+				this.boundDevices.delete(probe.deviceId);
+				removed.push(probe.deviceId);
+			}
+		}
+		if (mode === "reconcile") {
+			for (const deviceId of added) this.logger.warn("osd-manager: bound-device index was missing a camera that HAS bindings — corrected", {
+				tags: { deviceId },
+				meta: { correction: "added" }
+			});
+			for (const deviceId of removed) this.logger.warn("osd-manager: bound-device index claimed a camera with NO bindings — corrected", {
+				tags: { deviceId },
+				meta: { correction: "removed" }
+			});
+		}
+		const notListed = [...this.boundDevices].filter((deviceId) => !listed.has(deviceId)).length;
+		this.logger.info("osd-manager: bound-device reconcile complete", { meta: {
+			mode,
+			cameras: cameras.length,
+			bound: this.boundDevices.size,
+			added: added.length,
+			removed: removed.length,
+			unreadable,
+			notListed
+		} });
+		if (mode === "seed" || added.length > 0 || removed.length > 0) await this.persistBoundIndex(null);
+	}
+	/**
+	* Run the reconcile in the BACKGROUND, once at a time.
+	*
+	* Nothing on the boot path may await it — that await is what took the
+	* capability graph down for nine minutes. A second arming while one is in
+	* flight is dropped rather than queued: both passes would compute over the
+	* same store and race on the index write.
+	*/
+	armReconcile(mode) {
+		if (this.reconcile !== null) return;
+		this.reconcile = this.reconcileBoundDevices(mode).catch((err) => {
+			this.logger.warn("osd-manager: bound-device reconcile failed — the index keeps its current contents", { meta: {
+				mode,
+				error: String(err)
+			} });
+		}).finally(() => {
+			this.reconcile = null;
+		});
+	}
+	/** The persisted index, or `null` when it has never been written (or could
+	*  not be read — both mean "derive it from a scan", which is safe). */
+	async readBoundIndex() {
+		try {
+			return await this.deps.boundIndex.get();
+		} catch (err) {
+			this.logger.warn("osd-manager: bound-device index unreadable — seeding from a camera scan", { meta: { error: String(err) } });
+			return null;
+		}
+	}
+	/**
+	* Persist the work list. Called from every place a binding is written, so the
+	* index cannot drift from the bindings without the write that caused the drift
+	* also failing — and that failure is logged, and repaired by the reconcile.
 	*/
-	async reloadBoundDevices() {
-		const devices = await this.safeListDevices();
-		const next = /* @__PURE__ */ new Set();
-		for (const device of devices) {
-			const bindings = await this.readBindings(device.id);
-			if (Object.keys(bindings).length > 0) next.add(device.id);
+	async persistBoundIndex(deviceId) {
+		try {
+			await this.deps.boundIndex.set([...this.boundDeviceIds]);
+		} catch (err) {
+			this.logger.warn("osd-manager: bound-device index write failed — the next reconcile repairs it", {
+				...deviceId === null ? {} : { tags: { deviceId } },
+				meta: { error: String(err) }
+			});
+		}
+	}
+	/** One camera's bindings, or `null` when the read FAILED. Distinct from an
+	*  empty map on purpose: only the second may unbind a camera (D49). */
+	async probeBindings(deviceId) {
+		try {
+			return await this.deps.bindings(deviceId).get();
+		} catch (err) {
+			this.logger.warn("osd-manager: binding read failed during reconcile — this camera keeps its index entry", {
+				tags: { deviceId },
+				meta: { error: String(err) }
+			});
+			return null;
 		}
-		this.boundDevices.clear();
-		for (const id of next) this.boundDevices.add(id);
 	}
 	getDeviceOsd = async ({ deviceId }) => {
 		const status = await this.deps.readOsdStatus(deviceId);
@@ -41782,6 +42051,7 @@ var OsdManager = class {
 		await this.assertSlotExists(deviceId, slotId);
 		await this.deps.bindings(deviceId).update((prev) => withBinding(prev, slotId, binding));
 		this.boundDevices.add(deviceId);
+		await this.persistBoundIndex(deviceId);
 		this.logger.info("osd-manager: slot binding saved", {
 			tags: { deviceId },
 			meta: {
@@ -41806,6 +42076,7 @@ var OsdManager = class {
 		this.lastWritten.delete(cacheKey(deviceId, slotId));
 		const remaining = await this.readBindings(deviceId);
 		if (Object.keys(remaining).length === 0) this.boundDevices.delete(deviceId);
+		await this.persistBoundIndex(deviceId);
 		this.logger.info("osd-manager: slot binding cleared — slot keeps its last text", {
 			tags: { deviceId },
 			meta: { slotId }
@@ -41846,6 +42117,7 @@ var OsdManager = class {
 		for (const key of [...this.lastWritten.keys()]) if (key.startsWith(`${targetDeviceId}:`)) this.lastWritten.delete(key);
 		if (Object.keys(copiedBindings).length > 0) this.boundDevices.add(targetDeviceId);
 		else this.boundDevices.delete(targetDeviceId);
+		await this.persistBoundIndex(targetDeviceId);
 		await this.renderDeviceInternal(targetDeviceId, null);
 		this.logger.info("osd-manager: camera configuration copied", {
 			tags: { deviceId: targetDeviceId },
@@ -42074,6 +42346,7 @@ var OsdManagerAddon = class extends BaseAddon {
 	async onInitialize() {
 		const ctx = this.ctx;
 		const store = new OsdBindingsStore((deviceId, key, schema, fallback) => this.deviceState(deviceId, key, schema, fallback));
+		const boundIndex = this.state(OSD_BOUND_INDEX_KEY, OsdBoundIndexSchema, null);
 		const manager = new OsdManager({
 			logger: ctx.logger,
 			readOsdStatus: async (deviceId) => {
@@ -42110,6 +42383,15 @@ var OsdManagerAddon = class extends BaseAddon {
 					name: d.name
 				}));
 			},
+			listCameras: async () => {
+				return (await ctx.api.deviceManager.listAll.query({
+					isCamera: true,
+					projection: "slim"
+				})).map((d) => ({
+					id: d.id,
+					name: d.name
+				}));
+			},
 			listDeviceCaps: async (deviceId) => {
 				const bindings = await ctx.api.deviceManager.getBindings.query({ deviceId });
 				return [...new Set(bindings.entries.map((e) => e.capName))];
@@ -42137,7 +42419,8 @@ var OsdManagerAddon = class extends BaseAddon {
 					} } : {}
 				};
 			},
-			bindings: (deviceId) => store.forDevice(deviceId)
+			bindings: (deviceId) => store.forDevice(deviceId),
+			boundIndex
 		});
 		this.manager = manager;
 		this.subscribe({ category: EventCategory.PipelineAnalyticsTrackLifecycle }, (event) => {
@@ -42149,7 +42432,9 @@ var OsdManagerAddon = class extends BaseAddon {
 		this.subscribe({ category: EventCategory.PipelineAnalyticsPlateGalleryChanged }, (event) => {
 			manager.onRecognitionGalleryChanged(event.data.deviceId);
 		});
-		await manager.start(Math.max(1, this.config.tickSeconds) * 1e3);
+		manager.start(Math.max(1, this.config.tickSeconds) * 1e3).catch((err) => {
+			ctx.logger.error("osd-manager: render loop failed to start — no camera will be re-rendered", { meta: { error: err instanceof Error ? err.message : String(err) } });
+		});
 		const pagesProvider = {
 			id: this.id,
 			listPages: () => this.pages