@camstack/addon-osd-manager 0.1.41 → 0.1.43

package/dist/index.js

@@ -8117,6 +8117,20 @@ var RelocateJobSchema = object({
 	* in its row, not in its name, so `MediaRelocateEngine` never reconciles one.
 	*/
 	rowsReconciled: number().int().nonnegative().optional(),
+	/**
+	* Rows this run FORGOT because the file they name is not on disk.
+	*
+	* The mover derived the path from the row's own fields and `stat`ed it; an
+	* ENOENT there is a per-path confirmation that the segment is gone (D296),
+	* and the durable row is dropped through the same channel eviction uses. It
+	* is reported for the same reason `rowsReconciled` is: this is a durable
+	* mutation nobody asked for, and a migration that quietly erases hour rows is
+	* the same failure as one that quietly skips them (D295).
+	*
+	* The production drain of 2026-08-30 would have reported 11 074 here — the
+	* ledger claimed 5.65 GB of footage that no longer existed.
+	*/
+	rowsForgotten: number().int().nonnegative().optional(),
 	startedAt: number(),
 	finishedAt: number().nullable(),
 	error: string().nullable()
@@ -8181,6 +8195,13 @@ var MediaRelocateModeSchema = _enum([
 ]);
 var RelocateMediaInputSchema = object({
 	toLocationId: string(),
+	/**
+	* Restrict the pass to rows currently on this location. Omitted / `'*'` =
+	* every row that is not already on `toLocationId` (the historical
+	* behaviour). A named source is what a from→to migration needs: without it
+	* "move events off disk 2" also emptied disk 1.
+	*/
+	fromLocationId: string().optional(),
 	throttleMbps: number().min(1).max(1e3).optional(),
 	/** Omitted = `move`, the pre-existing behaviour. */
 	mode: MediaRelocateModeSchema.optional()
@@ -8248,6 +8269,19 @@ var StorageMigrationDestinationsSchema = object({
 	galleryMedia: string().min(1).optional()
 }).refine((value) => Object.keys(value).length > 0, { message: "select at least one storage class" });
 /**
+* Optional named source per class. Omitted = the class's current default
+* (the historical behaviour). A named source that is NOT the default is a
+* drain of that disk: bytes move, the default stays, and the source is
+* disabled when the move finishes.
+*/
+var StorageMigrationSourcesSchema = object({
+	recordings: string().min(1).optional(),
+	recordingsLow: string().min(1).optional(),
+	eventMedia: string().min(1).optional(),
+	backups: string().min(1).optional(),
+	galleryMedia: string().min(1).optional()
+}).optional();
+/**
 * How a migration sequences the cutover against the byte move.
 *
 *  - `blocking`     — the historical order: pause, move every byte, repoint,
@@ -8269,6 +8303,8 @@ var StorageMigrationModeSchema = _enum(["blocking", "nonBlocking"]);
 /** Shared input for planning and starting an orchestrated storage migration. */
 var StorageMigrationInputSchema = object({
 	destinations: StorageMigrationDestinationsSchema,
+	/** Omitted = each class's current default. */
+	sources: StorageMigrationSourcesSchema,
 	throttleMbps: number().min(1).max(1e3).optional(),
 	/** Omitted = `blocking`, which stays the default. */
 	mode: StorageMigrationModeSchema.optional()
@@ -8348,6 +8384,13 @@ var StorageMigrationMoveSchema = object({
 	storageClass: StorageMigrationClassSchema,
 	fromLocationId: string(),
 	toLocationId: string(),
+	/**
+	* True when `from` was NOT the class default at plan time. The move still
+	* copies bytes, but the default is left alone and the source is disabled
+	* once the copy verifies. Absent on jobs planned before this field existed
+	* — those jobs always repointed, which is `false`.
+	*/
+	freezeSource: boolean().optional(),
 	moverJobId: string().nullable(),
 	state: RelocateJobStateSchema.nullable(),
 	error: string().nullable(),
@@ -8361,6 +8404,7 @@ var StorageMigrationJobSchema = object({
 	*  can tell a seconds-long cutover from a thirty-hour one. */
 	mode: StorageMigrationModeSchema,
 	destinations: StorageMigrationDestinationsSchema,
+	sources: StorageMigrationSourcesSchema,
 	throttleMbps: number(),
 	moves: array(StorageMigrationMoveSchema),
 	pauseLeaseId: string().nullable(),
@@ -8386,6 +8430,7 @@ var StorageMigrationFindingSchema = object({
 });
 var StorageMigrationPlanSchema = object({
 	destinations: StorageMigrationDestinationsSchema,
+	sources: StorageMigrationSourcesSchema,
 	/** The mode this plan was built for. A plan is only valid for its mode: the
 	*  `eventMedia` seal gate and the single-cardinality refusal both depend on
 	*  it. */
@@ -8393,7 +8438,8 @@ var StorageMigrationPlanSchema = object({
 	moves: array(object({
 		storageClass: StorageMigrationClassSchema,
 		fromLocationId: string(),
-		toLocationId: string()
+		toLocationId: string(),
+		freezeSource: boolean().optional()
 	})),
 	findings: array(StorageMigrationFindingSchema)
 });
@@ -8480,16 +8526,142 @@ var RelocateResidueSchema = object({
 	segments: number().int().nonnegative(),
 	bytes: number().int().nonnegative()
 }).nullable();
+/**
+* Ask one location whether its durable hour rows describe the disk — the walk
+* (D319).
+*
+* `apply` DEFAULTS TO FALSE and that default is the product: the operator's
+* missing tool is the question, and the dry run is how they sanity-check the
+* destructive run before authorising it.
+*/
+var LedgerWalkInputSchema = object({
+	locationId: string().min(1),
+	/** Forget the confirmed-absent rows, rather than only counting them. */
+	apply: boolean().optional(),
+	/** Narrow to one camera. */
+	deviceId: number().int().positive().optional(),
+	/** Narrow to these recording profiles; empty/absent = every profile. */
+	profiles: array(string().min(1)).optional()
+});
+/** Why a whole walk did nothing. Every one leaves the ledger untouched. */
+var LedgerWalkRefusalSchema = _enum([
+	"location-unknown",
+	"source-writable",
+	"no-ledger",
+	"archive-unreadable",
+	"anchor-absent",
+	"anchor-unreadable",
+	"anchor-moved"
+]);
+_enum([
+	"live-tail",
+	"listing-error",
+	"path-mismatch",
+	"durable-refused"
+]);
+/** Every skip reason, always present, always a number — so a reason that never
+*  fired reports as zero rather than absent and the report shape is constant
+*  between passes. Spelled out rather than `z.record` for exactly that. */
+var LedgerWalkSkipCountsSchema = object({
+	"live-tail": number().int().nonnegative(),
+	"listing-error": number().int().nonnegative(),
+	"path-mismatch": number().int().nonnegative(),
+	"durable-refused": number().int().nonnegative()
+});
+/** One camera's share of a walk, so a report names cameras and not rows. */
+var LedgerWalkDeviceReportSchema = object({
+	deviceId: number().int(),
+	hoursWalked: number().int().nonnegative(),
+	hoursMissing: number().int().nonnegative(),
+	ghostSegments: number().int().nonnegative(),
+	ghostBytes: number().int().nonnegative(),
+	forgottenSegments: number().int().nonnegative(),
+	orphanFiles: number().int().nonnegative()
+});
+/**
+* What one walk claimed, listed, found and (only when armed) forgot.
+*
+* `archiveSegments` is the **M** and `segmentsClaimed` the **N** (D295), so a
+* walk that saw a fraction of the location is visible in its own report rather
+* than in the absence of one.
+*/
+var LedgerWalkReportSchema = object({
+	locationId: string(),
+	applied: boolean(),
+	refused: LedgerWalkRefusalSchema.nullable(),
+	archiveSegments: number().int().nonnegative().nullable(),
+	archiveBytes: number().int().nonnegative().nullable(),
+	hoursClaimed: number().int().nonnegative(),
+	hoursWalked: number().int().nonnegative(),
+	hoursMissing: number().int().nonnegative(),
+	/** `readdir` calls issued — the cost, stated in the unit that is paid. */
+	listings: number().int().nonnegative(),
+	segmentsClaimed: number().int().nonnegative(),
+	ghostSegments: number().int().nonnegative(),
+	ghostBytes: number().int().nonnegative(),
+	ghostHoursWhole: number().int().nonnegative(),
+	forgottenSegments: number().int().nonnegative(),
+	forgottenBytes: number().int().nonnegative(),
+	/** Files under a claimed hour that no durable row names. Never deleted. */
+	orphanFiles: number().int().nonnegative(),
+	orphanSample: array(string()).readonly(),
+	hoursSkipped: number().int().nonnegative(),
+	skippedByReason: LedgerWalkSkipCountsSchema,
+	/** The walk stopped at its per-pass hour bound with claims unwalked. */
+	bounded: boolean(),
+	byDevice: array(LedgerWalkDeviceReportSchema).readonly()
+});
 /** How many rows a media pass would still act on against a given target — the
 *  media lane's denominator AND its residue, from ONE derivation so the two can
 *  never disagree. `null` = the count could not be taken. */
 var RelocatableMediaCountSchema = object({ rows: number().int().nonnegative() }).nullable();
 var RelocatableMediaCountInputSchema = object({
 	toLocationId: string().min(1),
+	/** Restrict the count to one source; omitted / `'*'` = every non-target row. */
+	fromLocationId: string().optional(),
 	/** Omitted = `move`. */
 	mode: MediaRelocateModeSchema.optional()
 });
 /**
+* Operator cleanup of leftover analytics rows, optional debug media, and
+* ghost ledger entries on frozen footage locations.
+*
+* A pass is tens of minutes on a standing backlog. The hub method RETURNS
+* `{ jobId }` immediately; progress is `cleanupStatus`. Awaiting the work
+* is how `addons.custom` hit the 60 s UDS deadline while reclaim continued
+* with no operator-visible status.
+*/
+var StorageCleanupPhaseSchema = _enum([
+	"orphans",
+	"debug-media",
+	"ghost-ledger",
+	"done",
+	"failed",
+	"cancelled"
+]);
+var StorageCleanupInputSchema = object({ 
+/** Also walk motion stills / track filmstrips. Off by default. */
+includeDebugMedia: boolean().optional() });
+var StorageCleanupJobSchema = object({
+	jobId: string(),
+	phase: StorageCleanupPhaseSchema,
+	includeDebugMedia: boolean(),
+	orphansReclaimed: number().int().nonnegative(),
+	orphanBytesReclaimed: number().int().nonnegative(),
+	debugMediaReclaimed: number().int().nonnegative(),
+	debugMediaBytesReclaimed: number().int().nonnegative(),
+	ghostsForgotten: number().int().nonnegative(),
+	ghostBytesForgotten: number().int().nonnegative(),
+	/** Short operator-facing line: current collection, pass, or location. */
+	detail: string().nullable(),
+	cancelRequested: boolean(),
+	startedAt: number(),
+	updatedAt: number(),
+	finishedAt: number().nullable(),
+	error: string().nullable()
+});
+var StorageCleanupStatusInputSchema = object({ jobId: string().optional() });
+/**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
 * storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
 * so the persisted record schema and the consumer-facing cap can both consume it
@@ -8517,11 +8689,10 @@ var StorageLocationTypeSchema = string().regex(/^[a-z][a-zA-Z0-9-]*$/);
 * The default location for a type uses `id === <type>:default` by
 * convention (the bare type ref like `'backups'` resolves to it).
 *
-* `isSystem: true` marks a location as orchestrator-seeded and
-* undeletable. The bootstrap-installed defaults (one per type) carry
-* this flag; operator-added locations don't. Editing the config of
-* a system location is allowed (path migration, provider swap) but
-* deleting it is rejected at the cap level.
+* `isSystem` is a legacy persisted flag. Seed still creates the initial
+* `<type>:default` locations; the flag is no longer a lock, a badge, or a
+* prune selector. New writes leave it false. Deletion is gated on uniqueness
+* / last-enabled, not on this bit.
 */
 var StorageLocationSchema = object({
 	id: string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
@@ -21616,13 +21787,15 @@ var ListGroupsPageSchema = object({
 	groups: array(AnalyticsGroupRecordSchema).readonly(),
 	nextCursor: string().nullable()
 });
+var KEY_EVENTS_DEFAULT_LIMIT = 50;
+var KEY_EVENTS_MAX_LIMIT = 200;
 var KeyEventQueryInput = object({
 	deviceId: number(),
 	/** Window lower bound (track firstSeen ≥ since). */
 	since: number(),
 	/** Window upper bound (track firstSeen ≤ until). */
 	until: number(),
-	limit: number().int().min(1).max(200).default(50),
+	limit: number().int().min(1).max(KEY_EVENTS_MAX_LIMIT).default(KEY_EVENTS_DEFAULT_LIMIT),
 	/** Drop tracks scoring below this importance. */
 	minImportance: number().min(0).max(1).optional(),
 	/** Restrict to a single class (e.g. 'person'). */
@@ -21644,6 +21817,32 @@ var KeyEventSchema = object({
 	...TrackFlagFields,
 	...TrackRetrainFields
 });
+/** `getKeyEvents`' window and filters, asked of a SET of cameras at once. */
+var KeyEventBatchQueryInput = object({
+	deviceIds: array(number()).min(1).max(200),
+	since: number(),
+	until: number(),
+	/** Applied PER CAMERA, exactly as `getKeyEvents.limit` is — never a total
+	*  across the set, which would let a busy camera starve a quiet one of its
+	*  rows and change what the merged feed contains. */
+	limit: number().int().min(1).max(KEY_EVENTS_MAX_LIMIT).default(KEY_EVENTS_DEFAULT_LIMIT),
+	minImportance: number().min(0).max(1).optional(),
+	classFilter: string().optional()
+});
+/**
+* One camera's key events in a batch answer.
+*
+* The row exists for every requested id. `getKeyEvents` degrades to `[]` on
+* error rather than throwing, so a camera whose store read failed and one with
+* no events in the window were ALREADY indistinguishable per camera — the
+* batch does not make that worse, and the row keeps the deviceId the single
+* method's output never carried (the caller used to stamp it from the fan-out
+* key, which only worked because there was one query per camera).
+*/
+var KeyEventsForDeviceSchema = object({
+	deviceId: number(),
+	events: array(KeyEventSchema).readonly()
+});
 object({
 	trackId: string(),
 	className: string(),
@@ -21863,6 +22062,47 @@ var RebuildStatusSchema = object({
 	/** Present when the pass ended by throwing. */
 	error: string().nullable()
 });
+/**
+* Acknowledgement that a debug-media reclaim STARTED.
+*
+* The pass is paced at ~2 MB/s over a standing 100 GB — tens of minutes — so
+* it runs detached and this returns immediately. Awaiting it is how the
+* `addons.custom` door hit the 60 s UDS deadline while the walk carried on
+* with no status. Poll {@link pipelineAnalyticsCapability.methods.getMediaReclaimStatus}.
+*/
+var MediaReclaimStartResultSchema = object({
+	started: boolean(),
+	/** True when a pass was already running; the new request is ignored. */
+	alreadyRunning: boolean()
+});
+var MediaReclaimInputSchema = object({
+	mode: _enum(["report", "reclaim"]).default("report"),
+	scopes: array(_enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+	deviceIds: array(number().int()).min(1).optional(),
+	restart: boolean().optional(),
+	pageSize: number().int().min(50).max(5e3).optional(),
+	maxRowsPerDevice: number().int().min(1).max(5e5).optional(),
+	maxReclaimPerDevice: number().int().min(1).max(5e5).optional(),
+	maxBytesPerRun: number().int().min(1).optional(),
+	budgetMinutes: number().int().min(1).max(720).optional(),
+	throttleBytesPerSec: number().int().min(64 * 1024).optional(),
+	graceMinutes: number().int().min(1).max(10080).optional()
+});
+var MediaReclaimStatusSchema = object({
+	running: boolean(),
+	mode: _enum(["report", "reclaim"]).nullable(),
+	totalExamined: number(),
+	totalEligible: number(),
+	totalReclaimed: number(),
+	totalBytesReclaimed: number(),
+	totalRefused: number(),
+	/** Device+scope windows finished in this pass. */
+	devicesDone: number(),
+	complete: boolean().nullable(),
+	startedAtMs: number().nullable(),
+	finishedAtMs: number().nullable(),
+	error: string().nullable()
+});
 var ReplayFrameInputSchema = object({
 	timestamp: number(),
 	frame: PipelineRunResultBridge
@@ -21992,6 +22232,21 @@ var pipelineAnalyticsCapability = {
 		* scored on-read (no write). Degrades to `[]` on error.
 		*/
 		getKeyEvents: method(KeyEventQueryInput, array(KeyEventSchema).readonly()),
+		/**
+		* The same ranking, for a SET of cameras, in one round trip.
+		*
+		* The Detection Intelligence events feed asks this of every selected
+		* camera and re-asks on a 30s timer. Fanned out client-side that is N
+		* round trips — browser → hub → post-analysis — for N independent,
+		* already-indexed store queries. Batched, the queries are unchanged and
+		* run concurrently INSIDE the owner; only the transport collapses.
+		*
+		* Deliberately per-device rather than pre-merged: `limit` stays per
+		* camera (a total would let a busy camera starve a quiet one), and a
+		* caller that renders one camera's lane needs to know which camera a row
+		* came from. `getKeyEvents` stays for single-device callers.
+		*/
+		getKeyEventsBatch: method(KeyEventBatchQueryInput, array(KeyEventsForDeviceSchema).readonly()),
 		/** Server-side bucketed event counts for the 24-hour timeline.
 		*  Returns one entry per non-empty bucket; empty buckets are omitted. */
 		getEventDensity: method(object({
@@ -22270,6 +22525,20 @@ var pipelineAnalyticsCapability = {
 			auth: "admin"
 		}),
 		/**
+		* Reclaim the standing debug-media backlog (motion-visit stills + track
+		* filmstrips). DETACHED: returns `{ started }` immediately. The pass is
+		* tens of minutes; awaiting it is a timeout, not a verdict. Dry-run unless
+		* `mode: 'reclaim'`. Poll `getMediaReclaimStatus`.
+		*/
+		reclaimDebugMedia: method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		getMediaReclaimStatus: method(object({}), MediaReclaimStatusSchema, {
+			kind: "query",
+			auth: "admin"
+		}),
+		/**
 		* The CHEAP QUESTION, asked before any media moves: how big is the dataset
 		* the marked (`markForTrain`) tracks would produce?
 		*
@@ -25222,7 +25491,23 @@ var storageMigrationCapability = {
 		drain: method(StorageMigrationDrainInputSchema, object({ jobId: string() }), {
 			kind: "mutation",
 			auth: "admin"
-		})
+		}),
+		/**
+		* One operator cleanup of leftover analytics (DB + blobs) and ghost
+		* ledger rows on frozen footage locations. Optional debug-media sweep.
+		* Returns immediately; poll {@link cleanupStatus}.
+		*/
+		cleanupStart: method(StorageCleanupInputSchema, object({ jobId: string() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		cleanupStatus: method(StorageCleanupStatusInputSchema, StorageCleanupJobSchema.nullable(), { auth: "admin" }),
+		cleanupCancel: method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Recent finished migration jobs, newest first. The live job is `status`. */
+		history: method(object({}), array(StorageMigrationJobSchema).readonly(), { auth: "admin" })
 	}
 };
 var ProviderInfoSchema = discriminatedUnion("shouldSaveDiskSpace", [object({
@@ -33375,6 +33660,33 @@ var RecordingRebalanceInputSchema = object({
 	minMoveGb: number().min(0).optional()
 });
 /**
+* Operator-facing placement of one camera onto a recordings location.
+*
+* `pinLocationId` is the operator instruction: a location id, or `null` for
+* Auto (the planner may move this camera). `locationId` is where high/mid
+* currently write — the plan, which may disagree with the pin when Auto.
+*/
+var RecordingDevicePlacementSchema = object({
+	deviceId: number().int(),
+	profile: string(),
+	locationId: string()
+});
+var RecordingDevicePinSchema = object({
+	deviceId: number().int(),
+	/** Recordings-class location this camera is pinned to. */
+	locationId: string()
+});
+var RecordingPlacementViewSchema = object({
+	assignments: array(RecordingDevicePlacementSchema),
+	pins: array(RecordingDevicePinSchema),
+	defaultLocations: record(string(), string())
+});
+var RecordingSetDevicePlacementInputSchema = object({
+	deviceId: number().int(),
+	/** `null` = Auto. Otherwise a `recordings:*` location id. */
+	locationId: string().nullable()
+});
+/**
 * Result of locating footage at a wall-clock instant for one device/profile.
 * `segment` carries the covering segment's window; `gap` reports the forward
 * nearest covered edge (`null` past the end of footage / when none exists)
@@ -33696,6 +34008,23 @@ var recordingCapability = {
 			kind: "query",
 			auth: "admin"
 		}),
+		/**
+		* Does this location's LEDGER tell the truth about its disk? (D319)
+		*
+		* One `readdir` per claimed hour, diffed both ways: durable rows whose file
+		* is not there, and files no durable row names. `apply` defaults to FALSE —
+		* the report is the product, and the dry run is how an operator
+		* sanity-checks the destructive run before authorising it.
+		*
+		* REFUSES a source that is still a write target: a listing of a live
+		* location is a lower bound, which is not the strong evidence that lets
+		* this pass forget without a budget. A live location is reconciled by the
+		* mover, under D318's bound.
+		*/
+		reconcileLedgerAgainstDisk: method(LedgerWalkInputSchema, LedgerWalkReportSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Cancel a running or queued relocate job. A queued job never runs. */
 		cancelRelocateJob: method(object({ jobId: string() }), object({ cancelled: boolean() }), {
 			kind: "mutation",
@@ -33710,6 +34039,22 @@ var recordingCapability = {
 		startStorageRebalance: method(RecordingRebalanceInputSchema, RecordingRebalancePlanSchema, {
 			kind: "mutation",
 			auth: "admin"
+		}),
+		/**
+		* The placement plan in force plus operator pins. Drives the Locations
+		* admin page: Auto vs a named recordings location, per camera.
+		*/
+		getPlacement: method(object({}), RecordingPlacementViewSchema, {
+			kind: "query",
+			auth: "admin"
+		}),
+		/**
+		* Pin a camera to a recordings location, or clear the pin (Auto). High and
+		* mid follow the pin; low stays with the recordingsLow planner.
+		*/
+		setDevicePlacement: method(RecordingSetDevicePlacementInputSchema, object({ ok: literal(true) }), {
+			kind: "mutation",
+			auth: "admin"
 		})
 	}
 };
@@ -34130,6 +34475,25 @@ var SceneMonitorStatusSchema = object({
 	monitors: array(SceneMonitorSchema),
 	lastFetchedAt: number()
 });
+/**
+* One camera's row in a `listScenesBatch` answer.
+*
+* `status` is NULLABLE and the nullability is the whole point. `scene-monitor`
+* is a `defaultActive` wrapper, so every camera is asked; a camera whose
+* provider is absent (pipeline-analytics not deployed, the post-processing node
+* down) cannot answer, and that is not the same fact as a camera with no scenes
+* configured. Fanned out per camera the difference was visible — one query
+* errored while the others resolved — and a batch that returned only the rows
+* it managed would have destroyed it, silently, by making an unreachable camera
+* indistinguishable from one that answered `monitors: []`.
+*
+* So: EVERY requested deviceId gets a row. `status: null` means "this camera
+* could not be read"; `status.monitors: []` means "read, and it has none".
+*/
+var SceneMonitorStatusForDeviceSchema = object({
+	deviceId: number(),
+	status: SceneMonitorStatusSchema.nullable()
+});
 var sceneMonitorCapability = {
 	name: "scene-monitor",
 	scope: "device",
@@ -34139,6 +34503,22 @@ var sceneMonitorCapability = {
 	deviceTypes: [DeviceType.Camera],
 	methods: {
 		listScenes: method(object({ deviceId: number() }), SceneMonitorStatusSchema),
+		/**
+		* The same answer, for a SET of cameras, in one round trip.
+		*
+		* `/scenes` renders every camera and re-reads them on a 30s safety-net
+		* poll behind the push slice. Fanned out client-side that was one query
+		* per camera — 29 round trips through the browser, the hub and the
+		* post-analysis runner every 30 seconds to read an in-memory map the
+		* owner had already merged. The work is unchanged (`statusFor` per
+		* device, all in-process at the owner); what collapses is the transport.
+		*
+		* A camera that cannot answer still gets a row, with `status: null` —
+		* see {@link SceneMonitorStatusForDeviceSchema}. Never fewer rows than
+		* ids: a caller that asked for twenty-nine and got twenty-seven cannot
+		* tell which two are missing, or that any are.
+		*/
+		listScenesBatch: method(object({ deviceIds: array(number()).min(1).max(200) }), array(SceneMonitorStatusForDeviceSchema).readonly()),
 		createScene: method(object({
 			deviceId: number(),
 			label: string(),
@@ -36125,6 +36505,27 @@ var CameraOccupancySnapshotSchema = object({
 	stationaryObjects: array(StationaryObjectSchema).readonly().optional()
 });
 /**
+* One camera's row in a `getCurrentSnapshotBatch` answer.
+*
+* THREE outcomes, and the single-camera method could only express two of them
+* because `snapshot: null` was already spoken for:
+*
+*  - `read: 'read'`, `snapshot` present — the live occupancy reading.
+*  - `read: 'read'`, `snapshot: null`   — read, and this camera has no reading
+*    yet: no frame since boot, and no parked-object registry to hydrate from.
+*  - `read: 'unreadable'`               — the owner could not answer for this
+*    camera. `snapshot` is null, and it does NOT mean "nothing parked here".
+*
+* Collapsing the last two is the failure this field exists to prevent: a
+* hydration that threw would otherwise render as an empty Stationary section,
+* which is a definite claim about a camera nobody could read.
+*/
+var CameraOccupancySnapshotForDeviceSchema = object({
+	deviceId: number(),
+	read: _enum(["read", "unreadable"]),
+	snapshot: CameraOccupancySnapshotSchema.nullable()
+});
+/**
 * Time-series resolution. The history methods return one bucket per
 * step over the requested range. Smaller resolutions cost more
 * memory + bandwidth; bound to discrete steps so caller cannot ask
@@ -36181,6 +36582,20 @@ var zoneAnalyticsCapability = {
 		*  (no inference result emitted since boot or since binding was
 		*  activated). */
 		getCurrentSnapshot: method(object({ deviceId: number() }), CameraOccupancySnapshotSchema.nullable()),
+		/**
+		* The same snapshot, for a SET of cameras, in one round trip.
+		*
+		* The Events page's Stationary section polls this every 15s for every
+		* selected camera. Fanned out client-side that is one query per camera to
+		* read a `Map.get` at the owner — the answer costs nothing, the round trip
+		* costs everything. Batched, N transports become one and the per-device
+		* work is unchanged.
+		*
+		* Every requested deviceId gets a row, tagged `read` — see
+		* {@link CameraOccupancySnapshotForDeviceSchema}. A camera the owner could
+		* not answer for is `'unreadable'`, never an empty reading.
+		*/
+		getCurrentSnapshotBatch: method(object({ deviceIds: array(number()).min(1).max(200) }), array(CameraOccupancySnapshotForDeviceSchema).readonly()),
 		/** Time-series object count inside one zone. `className` optional —
 		*  omit to count every class in the zone. */
 		getZoneHistory: method(object({
@@ -39782,6 +40197,18 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getKeyEventsBatch": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
+	"pipelineAnalytics.getMediaReclaimStatus": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getMotionEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -39956,6 +40383,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.reclaimDebugMedia": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.reconcileFromDisk": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -40880,6 +41313,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.getPlacement": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"recording.getPlaybackManifest": {
 		capName: "recording",
 		capScope: "system",
@@ -40958,6 +41397,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.reconcileLedgerAgainstDisk": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recording.refreshStorageLocationsForMigration": {
 		capName: "recording",
 		capScope: "system",
@@ -41000,6 +41445,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.setDevicePlacement": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recording.startStorageMigrationMove": {
 		capName: "recording",
 		capScope: "system",
@@ -41084,6 +41535,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"sceneMonitor.listScenesBatch": {
+		capName: "scene-monitor",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.recheckNow": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -41438,12 +41895,36 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"storageMigration.cleanupCancel": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.cleanupStart": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.cleanupStatus": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageMigration.drain": {
 		capName: "storage-migration",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"storageMigration.history": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageMigration.movers": {
 		capName: "storage-migration",
 		capScope: "system",
@@ -42440,6 +42921,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"zoneAnalytics.getCurrentSnapshotBatch": {
+		capName: "zone-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"zoneAnalytics.getUnzonedHistory": {
 		capName: "zone-analytics",
 		capScope: "device",
@@ -43444,6 +43931,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineAnalytics.getKeyEventsBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"pipelineAnalytics.getMotionEvents": [{
 		name: "deviceId",
 		form: "single",
@@ -43549,6 +44041,11 @@ Object.freeze({
 		form: "single",
 		optional: true
 	}],
+	"pipelineAnalytics.reclaimDebugMedia": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
 	"pipelineAnalytics.reconcileFromDisk": [{
 		name: "deviceId",
 		form: "single",
@@ -43884,6 +44381,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"recording.reconcileLedgerAgainstDisk": [{
+		name: "deviceId",
+		form: "single",
+		optional: true
+	}],
 	"recording.relocateFootage": [{
 		name: "deviceId",
 		form: "single",
@@ -43909,6 +44411,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"recording.setDevicePlacement": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"recording.startStorageMigrationMove": [{
 		name: "deviceId",
 		form: "single",
@@ -43949,6 +44456,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"sceneMonitor.listScenesBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"sceneMonitor.recheckNow": [{
 		name: "deviceId",
 		form: "single",
@@ -44210,6 +44722,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"zoneAnalytics.getCurrentSnapshotBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"zoneAnalytics.getUnzonedHistory": [{
 		name: "deviceId",
 		form: "single",