@camstack/addon-pipeline-orchestrator 1.0.4 → 1.0.6

package/dist/index.mjs

@@ -4627,63 +4627,7 @@ function _instanceof(cls, params = {}) {
 	return inst;
 }
 //#endregion
-//#region ../types/dist/index.mjs
-/**
-* Deep wiring healthcheck — snapshot of active reachability probes across
-* every declared capability + widget of every installed plugin, on every
-* node. Produced by the backend `WiringHealthService` and surfaced via
-* `GET /health/wiring`, the tRPC `health.wiring` query, and the boot-gate.
-*
-* Unlike `/health` (process liveness), this reflects whether each cap/widget
-* is actually *reachable* over the real cap-dispatch path. See spec
-* `docs/superpowers/specs/2026-05-23-deep-healthcheck-design.md`.
-*/
-/** What kind of target a probe addressed. */
-var wiringProbeKindSchema = _enum([
-	"singleton",
-	"device",
-	"widget"
-]);
-/** Result of probing a single (cap|widget [, device]) target. */
-var wiringProbeResultSchema = object({
-	capName: string(),
-	kind: wiringProbeKindSchema,
-	deviceId: number().optional(),
-	reachable: boolean(),
-	latencyMs: number(),
-	error: string().optional()
-});
-/** Per-addon roll-up of cap + widget probe results. */
-var wiringAddonHealthSchema = object({
-	addonId: string(),
-	caps: array(wiringProbeResultSchema).readonly(),
-	widgets: array(wiringProbeResultSchema).readonly()
-});
-/** Per-node roll-up. */
-var wiringNodeHealthSchema = object({
-	nodeId: string(),
-	addons: array(wiringAddonHealthSchema).readonly()
-});
-object({
-	/** True only when every probed target is reachable. */
-	ok: boolean(),
-	/** True when at least one target is unreachable. */
-	degraded: boolean(),
-	checkedAt: string(),
-	nodes: array(wiringNodeHealthSchema).readonly(),
-	summary: object({
-		total: number(),
-		reachable: number(),
-		unreachable: number()
-	})
-});
-var MODEL_FORMATS = [
-	"onnx",
-	"coreml",
-	"openvino",
-	"tflite",
-	"pt"
-];
+//#region ../types/dist/sleep-D7JeS58T.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -4981,6 +4925,18 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineEngineMetricsSnapshot"] = "pipeline.engine-metrics-snapshot";
 	/**
+	* Per-node detection-engine runtime-provisioning transition. Emitted by
+	* the detection-pipeline provider on every state change of its lazy
+	* engine-provisioning machine (idle → installing → verifying → ready,
+	* or → failed with a `nextRetryAt`). Payload is the
+	* `EngineProvisioningState` snapshot; `event.source.nodeId` carries the
+	* node. The Pipeline page subscribes to drive a live "installing
+	* OpenVINO… / ready" indicator per node without polling
+	* `pipelineExecutor.getEngineProvisioning`. Telemetry-grade (D8): the UI
+	* also reads the cap snapshot on mount / reconnect. Phase 2.
+	*/
+	EventCategory["PipelineEngineProvisioning"] = "pipeline.engine-provisioning";
+	/**
 	* Cluster topology snapshot. Carries the same payload returned by
 	* `nodes.topology` (every reachable node + addons + processes).
 	* Emitted by the hub on any agent / addon lifecycle change
@@ -6021,7 +5977,7 @@ function makeSourceBrokerId(deviceId, camStreamId) {
 * Zod schema for StreamSourceEntry — the canonical stream descriptor
 * exposed by ICameraDevice.getStreamSources() and consumed by the broker.
 */
-var StreamSourceEntrySchema = object({
+var StreamSourceEntrySchema$1 = object({
 	id: string(),
 	label: string(),
 	protocol: _enum([
@@ -6243,140 +6199,6 @@ var ProfileRtspEntrySchema = object({
 	codec: string().optional(),
 	resolution: CamStreamResolutionSchema.optional()
 });
-/**
-* Numeric day-of-week: 0 = Sunday … 6 = Saturday (matches `Date.getDay`).
-* Named `RecordingWeekday` to avoid collision with the string-union
-* `Weekday` exported from `interfaces/timezones.ts`.
-*/
-var RecordingWeekdaySchema = number().int().min(0).max(6);
-var HHMM = /^([01]\d|2[0-3]):[0-5]\d$/;
-var RecordingScheduleSchema = discriminatedUnion("kind", [object({ kind: literal("always") }), object({
-	kind: literal("timeOfDay"),
-	start: string().regex(HHMM),
-	end: string().regex(HHMM),
-	/** Restrict to these weekdays; omit = every day. */
-	days: array(RecordingWeekdaySchema).optional()
-})]);
-var RecordingModeSchema = _enum([
-	"continuous",
-	"onMotion",
-	"onAudioThreshold"
-]);
-/**
-* First-class, authoritative per-camera storage mode — the netta choice the UI
-* reads directly (never inferred from `rules`):
-*  - `off`        — not recording.
-*  - `events`     — record only around triggers (motion / audio threshold),
-*                   with pre/post-buffer.
-*  - `continuous` — record 24/7 within the schedule.
-*
-* `mode` compiles one-way to the internal `rules[]` consumed by the policy
-* engine (see `compileRules`); `rules[]` is never authored directly anymore.
-*/
-var RecordingStorageModeSchema = _enum([
-	"off",
-	"events",
-	"continuous"
-]);
-/** Which detectors trigger an `events`-mode recording. */
-var RecordingTriggersSchema = object({
-	motion: boolean().optional(),
-	audioThresholdDbfs: number().optional()
-});
-/**
-* Mode of a single recording band — the recorder per-band vocabulary.
-*
-* Distinct from `RecordingStorageModeSchema` (which carries `off`): a band is
-* only ever `continuous` or `events`; "off" is expressed by the absence of a
-* covering band, not by a band value.
-*/
-var RecordingBandModeSchema = _enum(["continuous", "events"]);
-/**
-* Triggers for an `events`-mode band. Identical shape to
-* `RecordingTriggersSchema` — reuse that schema as the band trigger type so the
-* two never drift.
-*/
-var RecordingBandTriggersSchema = RecordingTriggersSchema;
-/**
-* A single mode-per-band window — the canonical recorder band shape, the
-* single source of truth re-used by `addon-pipeline/recorder`.
-*
-* `days` lists the weekdays the band covers (empty = every day, matching the
-* band engine's `applies` rule). `start`/`end` are `HH:MM`; an `end <= start`
-* span wraps past midnight (handled by the band engine).
-*/
-var RecordingBandSchema = object({
-	days: array(RecordingWeekdaySchema),
-	start: string().regex(HHMM),
-	end: string().regex(HHMM),
-	mode: RecordingBandModeSchema,
-	triggers: RecordingBandTriggersSchema.optional(),
-	preBufferSec: number().min(0).optional(),
-	postBufferSec: number().min(0).optional()
-});
-var RecordingRuleSchema = object({
-	schedule: RecordingScheduleSchema,
-	mode: RecordingModeSchema,
-	/** Seconds of footage to retain BEFORE a trigger (applied at keep/discard). */
-	preBufferSec: number().min(0).default(0),
-	/** Keep recording until this many seconds after the last trigger. */
-	postBufferSec: number().min(0).default(0),
-	/** Each new trigger restarts the post-buffer window. */
-	resetTimeoutOnNewEvent: boolean().default(true),
-	/** onAudioThreshold only — dBFS level that counts as a trigger. */
-	thresholdDbfs: number().optional()
-});
-/**
-* Per-device retention overrides. Every field is optional; an unset or `0`
-* value inherits the node-wide recorder default. Only footage-lifetime limits
-* live per-camera: `maxAgeDays` and `maxSizeGb`. The disk-occupancy threshold
-* (when the volume is too full to keep recording) is NOT a per-camera concern —
-* it belongs to the StorageLocation (`StorageLocation.config.minFreePercent`),
-* shared by every camera writing to that volume.
-*/
-var RecordingRetentionSchema = object({
-	maxAgeDays: number().min(0).optional(),
-	maxSizeGb: number().min(0).optional()
-});
-/**
-* The full per-camera recording intent — the wire shape of a RecordingTarget.
-*
-* `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
-* are its mode-specific parameters. `rules` is a DEPRECATED authoring input kept
-* only for transition + migration (`migrateRulesToMode`); the policy engine
-* consumes the compiled output of `compileRules(config)`, never `rules` directly.
-*/
-var RecordingConfigSchema = object({
-	enabled: boolean(),
-	/** Authoritative storage mode. Absent on legacy targets → derived once via
-	*  `migrateRulesToMode`, then persisted. */
-	mode: RecordingStorageModeSchema.optional(),
-	profiles: array(CamProfileSchema).optional(),
-	segmentSeconds: number().int().positive().optional(),
-	/** Shared recording time-bands for `events` & `continuous` — record only when
-	*  the wall-clock falls inside one of these windows. Omit or empty = always.
-	*  `continuous` compiles to one rule per band; `events` to band × trigger. */
-	schedules: array(RecordingScheduleSchema).optional(),
-	/** Legacy single-band predecessor of `schedules`. Read-compat only — it is
-	*  normalized into `schedules` on read and never written going forward. (Not
-	*  tagged `@deprecated`: the normalization paths must read it cast-free.) */
-	schedule: RecordingScheduleSchema.optional(),
-	/** `events`-mode only — which detectors trigger a recording. */
-	triggers: RecordingTriggersSchema.optional(),
-	/** `events`-mode only — seconds retained before / after a trigger. */
-	preBufferSec: number().min(0).optional(),
-	postBufferSec: number().min(0).optional(),
-	/** DEPRECATED authoring input; retained for migration/transition. */
-	rules: array(RecordingRuleSchema).optional(),
-	/**
-	* AUTHORITATIVE mode-per-band recording model (recorder). When present it
-	* is the single source of truth; the legacy `mode`/`schedules`/`schedule`/
-	* `triggers`/`rules` fields above are kept for READ-COMPAT only and are
-	* derived into bands once via `migrateConfigToBands`.
-	*/
-	bands: array(RecordingBandSchema).optional(),
-	retention: RecordingRetentionSchema.optional()
-});
 var ReadinessTimeoutError = class extends Error {
 	capName;
 	scope;
@@ -6726,770 +6548,1116 @@ function randomGeneration() {
 	if (typeof crypto !== "undefined" && crypto.randomUUID) return crypto.randomUUID();
 	return Math.random().toString(36).slice(2, 14);
 }
-/**
-* `StorageLocationType` — an addon-declared id that identifies the *kind* of
-* storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
-* so the persisted record schema and the consumer-facing cap can both consume it
-* without forming a circular import. The `storage` cap re-exports it
-* verbatim for back-compat.
-*
-* This Zod schema is the **authoritative source** for `StorageLocationType`.
-* The TS alias in `./storage.ts` re-exports `z.infer<typeof
-* StorageLocationTypeSchema>` so the wire surface (cap) and the legacy
-* `IStorageProvider` interface stay in lockstep.
-*
-* The type is now an **open string** (not a closed enum) — addons declare
-* their own location kinds via `StorageLocationDeclaration.id`. The regex
-* enforces a safe id format: lowercase-start, alphanumeric + hyphens.
-*/
-var StorageLocationTypeSchema = string().regex(/^[a-z][a-zA-Z0-9-]*$/);
-/**
-* Persisted record for a storage location instance. Operators can register
-* multiple instances for multi-cardinality types (e.g. two `backups`
-* locations with different `providerId`s). Cardinality is now declared per
-* location via `StorageLocationDeclaration.cardinality` — the static
-* `STORAGE_LOCATION_CARDINALITY` map has been removed.
-*
-* `id` is a stable namespaced string of the form `<type>:<slug>`.
-* The default location for a type uses `id === <type>:default` by
-* convention (the bare type ref like `'backups'` resolves to it).
-*
-* `isSystem: true` marks a location as orchestrator-seeded and
-* undeletable. The bootstrap-installed defaults (one per type) carry
-* this flag; operator-added locations don't. Editing the config of
-* a system location is allowed (path migration, provider swap) but
-* deleting it is rejected at the cap level.
-*/
-var StorageLocationSchema = object({
-	id: string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
-	type: string(),
-	displayName: string().min(1),
-	providerId: string().min(1),
-	config: record(string(), unknown()),
-	/**
-	* Cluster node this location physically lives on. REQUIRED for node-local
-	* providers (filesystem — the path exists on one node's disk), null/absent
-	* for node-agnostic providers (S3/SFTP/WebDAV, reachable from any node).
-	* `'hub'` is the hub node. Validated against the provider's `nodeLocal`
-	* flag at upsert time, not here (the schema is provider-agnostic).
-	*/
-	nodeId: string().optional(),
-	isDefault: boolean().default(false),
-	isSystem: boolean().default(false),
-	createdAt: number(),
-	updatedAt: number()
-});
-/**
-* Reference accepted by consumer-facing `api.storage.*` calls.
-* Either:
-*  - a `StorageLocationType` (e.g. `'backups'`) → orchestrator resolves to the default of that type
-*  - a fully-qualified id (e.g. `'backups:nas-01'`) → addresses a specific instance
-*
-* The orchestrator's `resolveRef(ref)` handles both cases.
-*/
-var StorageLocationRefSchema = union([StorageLocationTypeSchema, string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/)]);
-/**
-* `StorageLocationDeclaration` — a single storage-location entry declared by
-* an addon in its `package.json` under `camstack.storageLocations`.
-*
-* Design intent:
-* - **Addon declares its needs** — each addon describes the logical storage
-*   slots it requires (e.g. `recordings`, `recordingsLow`) without caring
-*   about the physical path.
-* - **Kernel aggregates** — at boot the kernel collects declarations from all
-*   installed addons, deduplicates by `id`, and exposes the union via the
-*   storage-locations settings surface.
-* - **Orchestrator seeds** — for every declared `id` the orchestrator ensures
-*   at least one instance named `<id>:default` is present, using
-*   `defaultsTo` to inherit the resolved root from another location when the
-*   declaration is a derivative slot (e.g. `recordingsLow` defaults to
-*   `recordings`).
-* - **ids are global** — `id` values are shared across the entire deployment;
-*   two addons declaring the same `id` must agree on `cardinality` (validated
-*   at kernel aggregation time, not here).
-*/
-var StorageLocationDeclarationSchema = object({
-	/**
-	* Global location identifier, e.g. `recordings` or `recordingsLow`.
-	* Must start with a lowercase letter and may contain letters, digits, and
-	* hyphens.
-	*/
-	id: string().regex(/^[a-z][a-zA-Z0-9-]*$/, { message: "id must start with a lowercase letter and contain only letters, digits, or hyphens" }),
-	/** Human-readable name shown in the admin UI. */
-	displayName: string().min(1, { message: "displayName must not be empty" }),
-	/** Optional longer explanation of what data this location stores. */
-	description: string().optional(),
-	/**
-	* `single` — exactly one instance of this location is allowed system-wide
-	* (e.g. `logs`, `models`). The operator can edit it but not add more.
-	* `multi`  — the operator may register several instances (e.g. a second
-	* `recordings` on a NAS for disk tiering); one is the default at any time.
-	*/
-	cardinality: _enum(["single", "multi"]),
-	/**
-	* When set, the default instance for this location inherits its resolved
-	* root from the named location's default instance. Useful for derivative
-	* slots (e.g. `recordingsLow` → `recordings`) so operators only need to
-	* configure the primary location.
-	*/
-	defaultsTo: string().optional()
-});
-var DecoderStatsSchema = object({
-	inputFps: number(),
-	outputFps: number(),
-	avgDecodeTimeMs: number(),
-	droppedFrames: number()
-});
-var DecoderSessionConfigSchema = object({
-	codec: string(),
-	maxFps: number().default(0),
-	outputFormat: _enum([
-		"jpeg",
-		"rgb",
-		"bgr",
-		"yuv420",
-		"gray"
-	]).default("jpeg"),
-	scale: number().default(1),
-	width: number().optional(),
-	height: number().optional(),
+var DeviceType = /* @__PURE__ */ function(DeviceType) {
+	DeviceType["Camera"] = "camera";
+	DeviceType["Hub"] = "hub";
+	DeviceType["Light"] = "light";
+	DeviceType["Siren"] = "siren";
+	DeviceType["Switch"] = "switch";
+	DeviceType["Sensor"] = "sensor";
+	DeviceType["Thermostat"] = "thermostat";
+	DeviceType["Button"] = "button";
+	/** Generic stateless event emitter — carries a device's EXACT declared
+	*  event vocabulary verbatim (no normalization). Installed with the
+	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
+	*  HA bus events (e.g. `zha_event`, generic). */
+	DeviceType["EventEmitter"] = "event-emitter";
+	/** Firmware/software update entity — current vs available version,
+	*  updatable flag, update state, and an install action. Installed with
+	*  the `update` cap. Sources: Homematic firmware-update channels (and
+	*  reusable by other providers, e.g. HA `update.*` entities). */
+	DeviceType["Update"] = "update";
+	DeviceType["Generic"] = "generic";
+	/** Generic notification delivery target (HA `notify.<service>`, future
+	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
+	*  endpoint; the `notifier` cap defines the send surface. */
+	DeviceType["Notifier"] = "notifier";
+	/** Pre-recorded action sequence with optional parameters
+	*  (HA `script.*`). Runnable via `script-runner` cap. */
+	DeviceType["Script"] = "script";
+	/** Automation rule (HA `automation.*`) — enable/disable + manual
+	*  trigger surface exposed via `automation-control` cap. */
+	DeviceType["Automation"] = "automation";
+	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
+	DeviceType["Lock"] = "lock";
+	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
+	*  `valve.*`). `cover` cap with sub-roles for variant. */
+	DeviceType["Cover"] = "cover";
+	/** Pipe / water / gas valve with open/close/stop and optional
+	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
+	*  modelled on the same open/closed lifecycle. */
+	DeviceType["Valve"] = "valve";
+	/** Humidifier / dehumidifier with on/off + target humidity + mode
+	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
+	*  modelled on the same target / mode lifecycle. */
+	DeviceType["Humidifier"] = "humidifier";
+	/** Water heater / boiler with target temperature + operation mode +
+	*  away mode (HA `water_heater.*`). `water-heater` cap — a
+	*  climate-family actuator. */
+	DeviceType["WaterHeater"] = "water-heater";
+	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
+	DeviceType["Fan"] = "fan";
+	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
+	*  the camera surface — those use `Camera`. `media-player` cap. */
+	DeviceType["MediaPlayer"] = "media-player";
+	/** Security panel / alarm system (HA `alarm_control_panel.*`).
+	*  `alarm-panel` cap. */
+	DeviceType["AlarmPanel"] = "alarm-panel";
+	/** Generic user-settable input (HA `number` / `input_number` / `select`
+	*  / `input_select` / `text` / `input_text` / `input_datetime`).
+	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
+	*  TextControl / DateTimeControl. */
+	DeviceType["Control"] = "control";
+	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
+	*  `presence` cap. */
+	DeviceType["Presence"] = "presence";
+	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
+	*  `weather` cap. */
+	DeviceType["Weather"] = "weather";
+	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
+	DeviceType["Vacuum"] = "vacuum";
+	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
+	*  `lawn-mower-control` cap. */
+	DeviceType["LawnMower"] = "lawn-mower";
+	/** Physical HA device group — parent container for entity-children
+	*  adopted from a single HA device entry. Not renderable as a
+	*  standalone device; exists only to anchor child entities. */
+	DeviceType["Container"] = "container";
+	/** Single still-image entity (HA `image.*`). Read-only display of an
+	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
+	DeviceType["Image"] = "image";
+	return DeviceType;
+}({});
+var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
+	DeviceFeature["BatteryOperated"] = "battery-operated";
+	DeviceFeature["Rebootable"] = "rebootable";
 	/**
-	* Identifier of the camera this decoder session serves. Optional
-	* because the cap is generic (any caller could request decode), but
-	* stream-broker passes it so decoder logs include `deviceId` for
-	* per-camera filtering when diagnosing failures (e.g. node-av
-	* sendPacket errors on a single hung camera).
+	* Device supports an on-demand re-sync of its derived spec with its
+	* upstream source — drives the generic Re-sync button. The owning
+	* provider implements the action via the `device-adoption.resync` cap.
 	*/
-	deviceId: number().int().nonnegative().optional(),
+	DeviceFeature["Resyncable"] = "resyncable";
+	DeviceFeature["NativeSnapshot"] = "native-snapshot";
+	DeviceFeature["DoorbellButton"] = "doorbell-button";
+	DeviceFeature["TwoWayAudio"] = "two-way-audio";
+	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
 	/**
-	* Free-form tag for log scoping. Stream-broker uses
-	* `broker:<deviceId>/<profile>`. Decoder session logger surfaces it
-	* on every line so `grep tag=broker:5/high` filters one camera
-	* profile cleanly.
+	* Camera supports the on-firmware autotrack subsystem (subject-
+	* following). Distinct from `PanTiltZoom` because not every PTZ
+	* camera ships autotrack — the admin UI uses this flag to gate
+	* the autotrack toggle / settings card without re-deriving from
+	* the cap registry. Mirrors `ptz-autotrack` cap registration:
+	* driver sets this feature when probe confirms the firmware
+	* surface, and registers the cap in the same code path.
 	*/
-	tag: string().optional(),
+	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
 	/**
-	* Where the session delivers decoded frames (Phase 5 / D9):
+	* Accessory exposes a "trigger on motion" toggle — the parent camera's
+	* motion detection automatically activates this device. Mirrors
+	* `motion-trigger` cap registration: drivers set this feature in the
+	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
 	*
-	* - `'callback'` (default) — the legacy pixel path: decoded frames are
-	*   buffered as `DecodedFrame`s and drained via `pullFrames`.
-	* - `'shm'` — the shared-memory frame plane: decoded frames are written
-	*   into an OS shared-memory ring and drained as zero-pixel
-	*   `FrameHandle`s via `pullHandles`. A session is one mode or the
-	*   other — `pullFrames` returns nothing for an `'shm'` session and
-	*   `pullHandles` returns nothing for a `'callback'` session.
-	*/
-	frameSink: _enum(["callback", "shm"]).default("callback")
-});
-var EncodeProfileSchema = object({
-	video: object({
-		codec: _enum([
-			"h264",
-			"h265",
-			"copy"
-		]),
-		profile: _enum([
-			"baseline",
-			"main",
-			"high"
-		]).optional(),
-		width: number().int().positive().optional(),
-		height: number().int().positive().optional(),
-		fps: number().positive().optional(),
-		bitrateKbps: number().int().positive().optional(),
-		gopFrames: number().int().positive().optional(),
-		bf: number().int().min(0).optional(),
-		preset: _enum([
-			"ultrafast",
-			"superfast",
-			"veryfast",
-			"faster",
-			"fast",
-			"medium"
-		]).optional(),
-		tune: _enum([
-			"zerolatency",
-			"film",
-			"animation"
-		]).optional()
-	}),
-	audio: union([literal("passthrough"), object({
-		codec: _enum([
-			"opus",
-			"aac",
-			"pcmu",
-			"pcma",
-			"copy"
-		]),
-		bitrateKbps: number().int().positive().optional(),
-		sampleRateHz: number().int().positive().optional(),
-		channels: union([literal(1), literal(2)]).optional()
-	})]),
-	/**
-	* ffmpeg input-side args, inserted between the fixed global flags
-	* (`-hide_banner -loglevel error`) and `-i pipe:0`. Free-text array
-	* — the widget surfaces a textarea + suggestion chips for the most-
-	* used demuxer/format options.
-	*/
-	inputArgs: array(string()).optional(),
-	/**
-	* ffmpeg output-side args, inserted between the encode block and
-	* the final `-f <muxer> pipe:1`. Use for muxer options, bitstream
-	* filters, codec-specific overrides. Free-text array.
+	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
+	* fast scalar without binding fetch), notifier rules, and `listAll`
+	* filters that want "all devices with on-motion behaviour".
 	*/
-	outputArgs: array(string()).optional()
-});
-/**
-import { errMsg } from '@camstack/types'
-* Extract a human-readable message from an unknown error value.
-* Replaces the ubiquitous `errMsg(err)` pattern.
-*/
-function errMsg(err) {
-	if (err instanceof Error) return err.message;
-	if (typeof err === "string") return err;
-	return String(err);
+	DeviceFeature["MotionTrigger"] = "motion-trigger";
+	/** Light supports rgb-triplet color via `color` cap. */
+	DeviceFeature["LightColorRgb"] = "light-color-rgb";
+	/** Light supports HSV color via `color` cap. */
+	DeviceFeature["LightColorHsv"] = "light-color-hsv";
+	/** Light supports color-temperature (mired) via `color` cap. */
+	DeviceFeature["LightColorMired"] = "light-color-mired";
+	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
+	*  targetHigh). Gates the range slider UI. */
+	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
+	/** Thermostat exposes target humidity and/or current humidity
+	*  readings. Gates the humidity controls. */
+	DeviceFeature["ClimateHumidity"] = "climate-humidity";
+	/** Thermostat exposes a fan-mode selector. */
+	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
+	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
+	DeviceFeature["ClimatePreset"] = "climate-preset";
+	/** Cover exposes intermediate position control (0..100). Gates the
+	*  position slider UI. */
+	DeviceFeature["CoverPositionable"] = "cover-positionable";
+	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
+	DeviceFeature["CoverTilt"] = "cover-tilt";
+	/** Valve exposes intermediate position control (0..100). Gates the
+	*  position slider / drag surface UI. */
+	DeviceFeature["ValvePositionable"] = "valve-positionable";
+	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
+	DeviceFeature["FanSpeed"] = "fan-speed";
+	/** Fan exposes a preset mode selector. */
+	DeviceFeature["FanPreset"] = "fan-preset";
+	/** Fan exposes blade direction (forward/reverse) — typical of
+	*  ceiling fans. */
+	DeviceFeature["FanDirection"] = "fan-direction";
+	/** Fan exposes an oscillation toggle. */
+	DeviceFeature["FanOscillating"] = "fan-oscillating";
+	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
+	*  field on the UI lock-controls panel. */
+	DeviceFeature["LockPinRequired"] = "lock-pin-required";
+	/** Lock supports a latch-release ("open door") action distinct from
+	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
+	*  `supported_features`. Gates the Open Door button in the UI. */
+	DeviceFeature["LockOpen"] = "lock-open";
+	/** Media player exposes a seek-to-position surface. */
+	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
+	/** Media player exposes a volume-level setter. */
+	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
+	/** Media player exposes a mute toggle distinct from volume=0. */
+	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
+	/** Media player exposes a shuffle toggle. */
+	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
+	/** Media player exposes a repeat mode (off / all / one). */
+	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
+	/** Media player exposes a source / input selector. */
+	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
+	/** Media player exposes a play-arbitrary-media surface (URL / id). */
+	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
+	/** Media player exposes next-track. */
+	DeviceFeature["MediaPlayerNext"] = "media-player-next";
+	/** Media player exposes previous-track. */
+	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
+	/** Media player exposes stop distinct from pause. */
+	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
+	/** Alarm panel requires a PIN code on arm/disarm. */
+	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
+	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
+	*  addition to a textual location. */
+	DeviceFeature["PresenceGps"] = "presence-gps";
+	/** Notifier accepts an inline / URL image attachment. */
+	DeviceFeature["NotifierImage"] = "notifier-image";
+	/** Notifier accepts a priority hint (high/normal/low). */
+	DeviceFeature["NotifierPriority"] = "notifier-priority";
+	/** Notifier accepts a free-form `data` payload for platform-specific
+	*  fields. */
+	DeviceFeature["NotifierData"] = "notifier-data";
+	/** Notifier supports interactive action buttons / callbacks. */
+	DeviceFeature["NotifierActions"] = "notifier-actions";
+	/** Notifier supports per-call recipient targeting (multi-user). */
+	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
+	/** Script runner accepts a variables map on each run invocation. */
+	DeviceFeature["ScriptVariables"] = "script-variables";
+	/** Automation `trigger` accepts a skipCondition flag — fires the
+	*  automation's actions while bypassing its condition block. */
+	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
+	return DeviceFeature;
+}({});
+/**
+* Semantic role a device plays within its parent. Populated by driver
+* addons when creating accessory devices (Reolink siren/floodlight/
+* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
+* admin UI to pick icons, labels, and widgets — a `Switch` with
+* `role: Floodlight` renders as a bulb with a brightness slider,
+* whereas a `Switch` with `role: Siren` renders as a klaxon.
+*
+* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
+* sqlite as a nullable TEXT column — old rows keep working unchanged.
+*/
+var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
+	DeviceRole["Siren"] = "siren";
+	DeviceRole["Floodlight"] = "floodlight";
+	DeviceRole["Spotlight"] = "spotlight";
+	DeviceRole["PirSensor"] = "pir-sensor";
+	DeviceRole["Chime"] = "chime";
+	DeviceRole["Autotrack"] = "autotrack";
+	DeviceRole["Nightvision"] = "nightvision";
+	DeviceRole["PrivacyMask"] = "privacy-mask";
+	DeviceRole["Doorbell"] = "doorbell";
+	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
+	*  real Switch device for UI rendering / export adapters. */
+	DeviceRole["BinaryHelper"] = "binary-helper";
+	/** Generic motion / occupancy / moving event source. Distinct from
+	*  the camera accessory PirSensor role: that one is a camera child;
+	*  this is a standalone HA / 3rd-party motion sensor. */
+	DeviceRole["MotionSensor"] = "motion-sensor";
+	DeviceRole["ContactSensor"] = "contact-sensor";
+	DeviceRole["LeakSensor"] = "leak-sensor";
+	DeviceRole["SmokeSensor"] = "smoke-sensor";
+	DeviceRole["COSensor"] = "co-sensor";
+	DeviceRole["GasSensor"] = "gas-sensor";
+	DeviceRole["TamperSensor"] = "tamper-sensor";
+	DeviceRole["VibrationSensor"] = "vibration-sensor";
+	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
+	DeviceRole["SoundSensor"] = "sound-sensor";
+	/** Fallback for `binary_sensor` without a known `device_class`. */
+	DeviceRole["BinarySensor"] = "binary-sensor";
+	DeviceRole["TemperatureSensor"] = "temperature-sensor";
+	DeviceRole["HumiditySensor"] = "humidity-sensor";
+	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
+	DeviceRole["PressureSensor"] = "pressure-sensor";
+	DeviceRole["PowerSensor"] = "power-sensor";
+	DeviceRole["EnergySensor"] = "energy-sensor";
+	DeviceRole["VoltageSensor"] = "voltage-sensor";
+	DeviceRole["CurrentSensor"] = "current-sensor";
+	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
+	/** Battery level (numeric % via `sensor` OR low-bool via
+	*  `binary_sensor` — the cap distinguishes via the value type). */
+	DeviceRole["BatterySensor"] = "battery-sensor";
+	/** Fallback for `sensor` numeric without a known `device_class`. */
+	DeviceRole["NumericSensor"] = "numeric-sensor";
+	/** String / enum state (HA `sensor` with `state_class: enum` or
+	*  `attributes.options`). */
+	DeviceRole["EnumSensor"] = "enum-sensor";
+	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
+	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
+	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
+	DeviceRole["DateTimeSensor"] = "datetime-sensor";
+	/** Last-resort fallback when nothing else matches. */
+	DeviceRole["GenericSensor"] = "generic-sensor";
+	DeviceRole["NumericControl"] = "numeric-control";
+	DeviceRole["SelectControl"] = "select-control";
+	DeviceRole["TextControl"] = "text-control";
+	DeviceRole["DateTimeControl"] = "datetime-control";
+	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
+	*  rich features (image, priority, channel routing). */
+	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
+	/** Chat / messaging service (HA `notify.telegram_*`,
+	*  `notify.discord_*`, etc.). */
+	DeviceRole["MessagingNotifier"] = "messaging-notifier";
+	/** Email-based delivery (HA `notify.smtp`, etc.). */
+	DeviceRole["EmailNotifier"] = "email-notifier";
+	/** Fallback when the notifier service name doesn't match a known
+	*  pattern. */
+	DeviceRole["GenericNotifier"] = "generic-notifier";
+	return DeviceRole;
+}({});
+/**
+* Generic types for capability definitions.
+*
+* A capability is defined with Zod schemas for methods, events, and settings.
+* TypeScript types are inferred via z.infer<> — zero duplication.
+*
+* Pattern:
+*   1. Define Zod schemas for data, methods, settings
+*   2. Export const capabilityDef = { ... } satisfies CapabilityDefinition
+*   3. Export type IProvider = InferProvider<typeof capabilityDef>
+*   4. Addon implements IProvider
+*   5. Registry auto-mounts tRPC router from definition.methods
+*/
+/**
+* Output schema shared by the contribution + live methods.
+*
+* Mirrors the `ConfigUISchemaWithValues` shape (sections[] + optional
+* tabs[]) without importing from `../interfaces/config-ui.js` — a
+* concrete-but-lenient Zod object keeps tRPC output inference happy
+* (using `z.unknown()` here collapses unrelated router branches to
+* `unknown` when the generator re-inlines the huge AppRouter type).
+*
+* `.passthrough()` on sections/fields accepts whatever FormBuilder
+* extensions the caller adds (showWhen, displayScale, …) without
+* rebuilding every time a new field kind is introduced.
+*/
+var ContributionSectionSchema = object({
+	id: string(),
+	title: string(),
+	description: string().optional(),
+	style: _enum(["card", "accordion"]).optional(),
+	defaultCollapsed: boolean().optional(),
+	columns: union([
+		literal(1),
+		literal(2),
+		literal(3),
+		literal(4)
+	]).optional(),
+	tab: string().optional(),
+	location: _enum(["settings", "top-tab"]).optional(),
+	order: number().optional(),
+	fields: array(any())
+});
+object({
+	tabs: array(object({
+		id: string(),
+		label: string(),
+		icon: string(),
+		order: number().optional()
+	})).optional(),
+	sections: array(ContributionSectionSchema)
+}).nullable();
+object({ deviceId: number() }), object({ deviceId: number() }), object({
+	deviceId: number(),
+	patch: record(string(), unknown())
+}), object({ success: literal(true) });
+object({ deviceId: number() }), unknown().nullable();
+/** Shorthand to define a method schema */
+function method(input, output, options) {
+	return {
+		input,
+		output,
+		kind: options?.kind ?? "query",
+		auth: options?.auth ?? "protected",
+		...options?.access !== void 0 ? { access: options.access } : {},
+		timeoutMs: options?.timeoutMs
+	};
 }
-var YAMNET_TO_MACRO = {
-	mapping: {
-		Speech: "speech",
-		"Child speech, kid speaking": "speech",
-		Conversation: "speech",
-		"Narration, monologue": "speech",
-		Babbling: "speech",
-		Whispering: "speech",
-		"Speech synthesizer": "speech",
-		Humming: "speech",
-		Rapping: "speech",
-		Singing: "speech",
-		Choir: "speech",
-		"Child singing": "speech",
-		Shout: "scream",
-		Bellow: "scream",
-		Yell: "scream",
-		Screaming: "scream",
-		"Children shouting": "scream",
-		Whoop: "scream",
-		"Crying, sobbing": "crying",
-		"Baby cry, infant cry": "crying",
-		Whimper: "crying",
-		"Wail, moan": "crying",
-		Groan: "crying",
-		Laughter: "laughter",
-		"Baby laughter": "laughter",
-		Giggle: "laughter",
-		Snicker: "laughter",
-		"Belly laugh": "laughter",
-		"Chuckle, chortle": "laughter",
-		Music: "music",
-		"Musical instrument": "music",
-		Guitar: "music",
-		Piano: "music",
-		Drum: "music",
-		"Drum kit": "music",
-		"Violin, fiddle": "music",
-		Flute: "music",
-		Saxophone: "music",
-		Trumpet: "music",
-		Synthesizer: "music",
-		"Pop music": "music",
-		"Rock music": "music",
-		"Hip hop music": "music",
-		"Classical music": "music",
-		Jazz: "music",
-		"Electronic music": "music",
-		"Background music": "music",
-		Dog: "dog",
-		Bark: "dog",
-		Yip: "dog",
-		Howl: "dog",
-		"Bow-wow": "dog",
-		Growling: "dog",
-		"Whimper (dog)": "dog",
-		Cat: "cat",
-		Purr: "cat",
-		Meow: "cat",
-		Hiss: "cat",
-		Caterwaul: "cat",
-		Bird: "bird",
-		"Bird vocalization, bird call, bird song": "bird",
-		"Chirp, tweet": "bird",
-		Squawk: "bird",
-		Crow: "bird",
-		Owl: "bird",
-		"Pigeon, dove": "bird",
-		Animal: "animal",
-		"Domestic animals, pets": "animal",
-		"Livestock, farm animals, working animals": "animal",
-		Horse: "animal",
-		"Cattle, bovinae": "animal",
-		Pig: "animal",
-		Sheep: "animal",
-		Goat: "animal",
-		Frog: "animal",
-		Insect: "animal",
-		Cricket: "animal",
-		Alarm: "alarm",
-		"Alarm clock": "alarm",
-		"Smoke detector, smoke alarm": "alarm",
-		"Fire alarm": "alarm",
-		Buzzer: "alarm",
-		"Civil defense siren": "alarm",
-		"Car alarm": "alarm",
-		Siren: "siren",
-		"Police car (siren)": "siren",
-		"Ambulance (siren)": "siren",
-		"Fire engine, fire truck (siren)": "siren",
-		"Emergency vehicle": "siren",
-		Foghorn: "siren",
-		Doorbell: "doorbell",
-		"Ding-dong": "doorbell",
-		Knock: "doorbell",
-		Tap: "doorbell",
-		Glass: "glass_breaking",
-		Shatter: "glass_breaking",
-		"Chink, clink": "glass_breaking",
-		"Gunshot, gunfire": "gunshot",
-		"Machine gun": "gunshot",
-		Explosion: "gunshot",
-		Fireworks: "gunshot",
-		Firecracker: "gunshot",
-		"Artillery fire": "gunshot",
-		"Cap gun": "gunshot",
-		Boom: "gunshot",
-		Vehicle: "vehicle",
-		Car: "vehicle",
-		Truck: "vehicle",
-		Bus: "vehicle",
-		Motorcycle: "vehicle",
-		"Car passing by": "vehicle",
-		"Vehicle horn, car horn, honking": "vehicle",
-		"Traffic noise, roadway noise": "vehicle",
-		Train: "vehicle",
-		Aircraft: "vehicle",
-		Helicopter: "vehicle",
-		Bicycle: "vehicle",
-		Skateboard: "vehicle",
-		Fire: "fire",
-		Crackle: "fire",
-		Water: "water",
-		Rain: "water",
-		Raindrop: "water",
-		"Rain on surface": "water",
-		Stream: "water",
-		Waterfall: "water",
-		Ocean: "water",
-		"Waves, surf": "water",
-		"Splash, splatter": "water",
-		Wind: "wind",
-		Thunderstorm: "wind",
-		Thunder: "wind",
-		"Wind noise (microphone)": "wind",
-		"Rustling leaves": "wind",
-		Door: "door",
-		"Sliding door": "door",
-		Slam: "door",
-		"Cupboard open or close": "door",
-		"Walk, footsteps": "footsteps",
-		Run: "footsteps",
-		Shuffle: "footsteps",
-		Crowd: "crowd",
-		Chatter: "crowd",
-		Cheering: "crowd",
-		Applause: "crowd",
-		"Children playing": "crowd",
-		"Hubbub, speech noise, speech babble": "crowd",
-		Telephone: "telephone",
-		"Telephone bell ringing": "telephone",
-		Ringtone: "telephone",
-		"Telephone dialing, DTMF": "telephone",
-		"Busy signal": "telephone",
-		Engine: "engine",
-		"Engine starting": "engine",
-		Idling: "engine",
-		"Accelerating, revving, vroom": "engine",
-		"Light engine (high frequency)": "engine",
-		"Medium engine (mid frequency)": "engine",
-		"Heavy engine (low frequency)": "engine",
-		"Lawn mower": "engine",
-		Chainsaw: "engine",
-		Hammer: "tools",
-		Jackhammer: "tools",
-		Sawing: "tools",
-		"Power tool": "tools",
-		Drill: "tools",
-		Sanding: "tools",
-		Silence: "silence"
-	},
-	preserveOriginal: false
-};
-var APPLE_SA_TO_MACRO = {
-	mapping: {
-		speech: "speech",
-		child_speech: "speech",
-		conversation: "speech",
-		whispering: "speech",
-		singing: "speech",
-		humming: "speech",
-		shout: "scream",
-		yell: "scream",
-		screaming: "scream",
-		crying: "crying",
-		baby_crying: "crying",
-		sobbing: "crying",
-		laughter: "laughter",
-		baby_laughter: "laughter",
-		giggling: "laughter",
-		music: "music",
-		guitar: "music",
-		piano: "music",
-		drums: "music",
-		dog_bark: "dog",
-		dog_bow_wow: "dog",
-		dog_growling: "dog",
-		dog_howl: "dog",
-		cat_meow: "cat",
-		cat_purr: "cat",
-		cat_hiss: "cat",
-		bird: "bird",
-		bird_chirp: "bird",
-		bird_squawk: "bird",
-		animal: "animal",
-		horse: "animal",
-		cow_moo: "animal",
-		insect: "animal",
-		alarm: "alarm",
-		smoke_alarm: "alarm",
-		fire_alarm: "alarm",
-		car_alarm: "alarm",
-		siren: "siren",
-		police_siren: "siren",
-		ambulance_siren: "siren",
-		doorbell: "doorbell",
-		door_knock: "doorbell",
-		knocking: "doorbell",
-		glass_breaking: "glass_breaking",
-		glass_shatter: "glass_breaking",
-		gunshot: "gunshot",
-		explosion: "gunshot",
-		fireworks: "gunshot",
-		car: "vehicle",
-		truck: "vehicle",
-		motorcycle: "vehicle",
-		car_horn: "vehicle",
-		vehicle_horn: "vehicle",
-		traffic: "vehicle",
-		fire: "fire",
-		fire_crackle: "fire",
-		water: "water",
-		rain: "water",
-		ocean: "water",
-		splash: "water",
-		wind: "wind",
-		thunder: "wind",
-		thunderstorm: "wind",
-		door: "door",
-		door_slam: "door",
-		sliding_door: "door",
-		footsteps: "footsteps",
-		walking: "footsteps",
-		running: "footsteps",
-		crowd: "crowd",
-		chatter: "crowd",
-		cheering: "crowd",
-		applause: "crowd",
-		telephone_ring: "telephone",
-		ringtone: "telephone",
-		engine: "engine",
-		engine_starting: "engine",
-		lawn_mower: "engine",
-		chainsaw: "engine",
-		hammer: "tools",
-		jackhammer: "tools",
-		drill: "tools",
-		power_tool: "tools",
-		silence: "silence"
-	},
-	preserveOriginal: false
-};
-var _macroLookup = /* @__PURE__ */ new Map();
-for (const [k, v] of Object.entries(YAMNET_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
-for (const [k, v] of Object.entries(APPLE_SA_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
-var DeviceType = /* @__PURE__ */ function(DeviceType) {
-	DeviceType["Camera"] = "camera";
-	DeviceType["Hub"] = "hub";
-	DeviceType["Light"] = "light";
-	DeviceType["Siren"] = "siren";
-	DeviceType["Switch"] = "switch";
-	DeviceType["Sensor"] = "sensor";
-	DeviceType["Thermostat"] = "thermostat";
-	DeviceType["Button"] = "button";
-	/** Generic stateless event emitter — carries a device's EXACT declared
-	*  event vocabulary verbatim (no normalization). Installed with the
-	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
-	*  HA bus events (e.g. `zha_event`, generic). */
-	DeviceType["EventEmitter"] = "event-emitter";
-	/** Firmware/software update entity — current vs available version,
-	*  updatable flag, update state, and an install action. Installed with
-	*  the `update` cap. Sources: Homematic firmware-update channels (and
-	*  reusable by other providers, e.g. HA `update.*` entities). */
-	DeviceType["Update"] = "update";
-	DeviceType["Generic"] = "generic";
-	/** Generic notification delivery target (HA `notify.<service>`, future
-	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
-	*  endpoint; the `notifier` cap defines the send surface. */
-	DeviceType["Notifier"] = "notifier";
-	/** Pre-recorded action sequence with optional parameters
-	*  (HA `script.*`). Runnable via `script-runner` cap. */
-	DeviceType["Script"] = "script";
-	/** Automation rule (HA `automation.*`) — enable/disable + manual
-	*  trigger surface exposed via `automation-control` cap. */
-	DeviceType["Automation"] = "automation";
-	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
-	DeviceType["Lock"] = "lock";
-	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
-	*  `valve.*`). `cover` cap with sub-roles for variant. */
-	DeviceType["Cover"] = "cover";
-	/** Pipe / water / gas valve with open/close/stop and optional
-	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
-	*  modelled on the same open/closed lifecycle. */
-	DeviceType["Valve"] = "valve";
-	/** Humidifier / dehumidifier with on/off + target humidity + mode
-	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
-	*  modelled on the same target / mode lifecycle. */
-	DeviceType["Humidifier"] = "humidifier";
-	/** Water heater / boiler with target temperature + operation mode +
-	*  away mode (HA `water_heater.*`). `water-heater` cap — a
-	*  climate-family actuator. */
-	DeviceType["WaterHeater"] = "water-heater";
-	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
-	DeviceType["Fan"] = "fan";
-	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
-	*  the camera surface — those use `Camera`. `media-player` cap. */
-	DeviceType["MediaPlayer"] = "media-player";
-	/** Security panel / alarm system (HA `alarm_control_panel.*`).
-	*  `alarm-panel` cap. */
-	DeviceType["AlarmPanel"] = "alarm-panel";
-	/** Generic user-settable input (HA `number` / `input_number` / `select`
-	*  / `input_select` / `text` / `input_text` / `input_datetime`).
-	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
-	*  TextControl / DateTimeControl. */
-	DeviceType["Control"] = "control";
-	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
-	*  `presence` cap. */
-	DeviceType["Presence"] = "presence";
-	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
-	*  `weather` cap. */
-	DeviceType["Weather"] = "weather";
-	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
-	DeviceType["Vacuum"] = "vacuum";
-	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
-	*  `lawn-mower-control` cap. */
-	DeviceType["LawnMower"] = "lawn-mower";
-	/** Physical HA device group — parent container for entity-children
-	*  adopted from a single HA device entry. Not renderable as a
-	*  standalone device; exists only to anchor child entities. */
-	DeviceType["Container"] = "container";
-	/** Single still-image entity (HA `image.*`). Read-only display of an
-	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
-	DeviceType["Image"] = "image";
-	return DeviceType;
-}({});
-var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
-	DeviceFeature["BatteryOperated"] = "battery-operated";
-	DeviceFeature["Rebootable"] = "rebootable";
+var StaticDirOutputSchema = object({ staticDir: string() });
+var VersionOutputSchema = object({ version: string() });
+method(_void(), StaticDirOutputSchema), method(_void(), VersionOutputSchema);
+/**
+* device-ops — device-scoped cap that unifies the per-IDevice operations
+* previously routed through the `.device-ops` Moleculer bridge service.
+*
+* Each worker that hosts live `IDevice` instances auto-registers a native
+* provider for this cap (per device) backed by its local
+* `DeviceRegistry`. Hub-side callers reach it transparently through
+* `ctx.fetchDevice(id).deviceOps.*` — the DeviceProxy injects
+* `deviceId` + `nodeId` and dispatches through the standard cap-router,
+* so there's no parallel bridge path anymore.
+*
+* The surface is intentionally small — every method corresponds to a
+* single action on the live `IDevice` (or `ICameraDevice` for
+* `getStreamSources`). Richer orchestration (enable/disable with
+* integration plumbing, bulk updates) stays in the `device-manager` cap;
+* `device-ops` is the per-device primitive the device-manager routes to.
+*/
+var StreamSourceEntrySchema = object({
+	id: string(),
+	label: string(),
+	protocol: _enum([
+		"rtsp",
+		"rtmp",
+		"annexb",
+		"http-mjpeg",
+		"webrtc",
+		"custom"
+	]),
+	url: string().optional(),
+	resolution: object({
+		width: number(),
+		height: number()
+	}).optional(),
+	fps: number().optional(),
+	bitrate: number().optional(),
+	codec: string().optional(),
+	profileHint: CamProfileSchema.optional(),
+	sdp: string().optional()
+});
+var ConfigEntrySchema$1 = object({
+	key: string(),
+	value: unknown()
+});
+var RawStateResultSchema = object({
+	/** Originating provider id, e.g. 'homeassistant' | 'reolink' | 'hikvision'. */
+	source: string(),
+	/** Opaque, DISPLAY-SAFE upstream blob (no secrets/PII). */
+	data: record(string(), unknown())
+});
+method(object({ deviceId: number() }), array(StreamSourceEntrySchema)), method(object({ deviceId: number() }), array(ConfigEntrySchema$1)), method(object({
+	deviceId: number(),
+	values: record(string(), unknown())
+}), _void(), { kind: "mutation" }), method(object({
+	deviceId: number(),
+	action: string().min(1),
+	input: unknown()
+}), unknown(), { kind: "mutation" }), method(object({ deviceId: number() }), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), unknown().nullable()), method(object({ deviceId: number() }), RawStateResultSchema.nullable(), { auth: "protected" });
+/**
+* Promise-based timer helpers — used everywhere the codebase needs to
+* wait, back off, or schedule a retry. Before these helpers landed, each
+* call site re-implemented `new Promise(r => setTimeout(r, ms))` inline,
+* with subtle variations (some swallowing cancellation, some not). Two
+* shapes cover every observed use case:
+*
+*  - {@link sleep} for a plain, uncancellable wait — the default choice.
+*  - {@link sleepCancellable} for a wait that wakes early when an
+*    abort signal trips, used by long-running pollers whose teardown
+*    must stop a pending backoff promptly.
+*/
+/**
+* Resolve after `ms` milliseconds. Never rejects, never cancels. The
+* sleep cannot be interrupted; for a wakeable variant use
+* {@link sleepCancellable}.
+*
+* `ms <= 0` resolves on the next microtask via `setTimeout(0)`, which
+* still gives the event loop a chance to drain — useful for breaking
+* up tight async loops without changing call-site semantics.
+*/
+function sleep$1(ms) {
+	return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
+}
+//#endregion
+//#region ../types/dist/err-msg-IQTHeDzc.mjs
+/**
+import { errMsg } from '@camstack/types'
+* Extract a human-readable message from an unknown error value.
+* Replaces the ubiquitous `errMsg(err)` pattern.
+*/
+function errMsg(err) {
+	if (err instanceof Error) return err.message;
+	if (typeof err === "string") return err;
+	return String(err);
+}
+//#endregion
+//#region ../types/dist/index.mjs
+/**
+* Deep wiring healthcheck — snapshot of active reachability probes across
+* every declared capability + widget of every installed plugin, on every
+* node. Produced by the backend `WiringHealthService` and surfaced via
+* `GET /health/wiring`, the tRPC `health.wiring` query, and the boot-gate.
+*
+* Unlike `/health` (process liveness), this reflects whether each cap/widget
+* is actually *reachable* over the real cap-dispatch path. See spec
+* `docs/superpowers/specs/2026-05-23-deep-healthcheck-design.md`.
+*/
+/** What kind of target a probe addressed. */
+var wiringProbeKindSchema = _enum([
+	"singleton",
+	"device",
+	"widget"
+]);
+/** Result of probing a single (cap|widget [, device]) target. */
+var wiringProbeResultSchema = object({
+	capName: string(),
+	kind: wiringProbeKindSchema,
+	deviceId: number().optional(),
+	reachable: boolean(),
+	latencyMs: number(),
+	error: string().optional()
+});
+/** Per-addon roll-up of cap + widget probe results. */
+var wiringAddonHealthSchema = object({
+	addonId: string(),
+	caps: array(wiringProbeResultSchema).readonly(),
+	widgets: array(wiringProbeResultSchema).readonly()
+});
+/** Per-node roll-up. */
+var wiringNodeHealthSchema = object({
+	nodeId: string(),
+	addons: array(wiringAddonHealthSchema).readonly()
+});
+object({
+	/** True only when every probed target is reachable. */
+	ok: boolean(),
+	/** True when at least one target is unreachable. */
+	degraded: boolean(),
+	checkedAt: string(),
+	nodes: array(wiringNodeHealthSchema).readonly(),
+	summary: object({
+		total: number(),
+		reachable: number(),
+		unreachable: number()
+	})
+});
+var MODEL_FORMATS = [
+	"onnx",
+	"coreml",
+	"openvino",
+	"tflite",
+	"pt"
+];
+/**
+* Numeric day-of-week: 0 = Sunday … 6 = Saturday (matches `Date.getDay`).
+* Named `RecordingWeekday` to avoid collision with the string-union
+* `Weekday` exported from `interfaces/timezones.ts`.
+*/
+var RecordingWeekdaySchema = number().int().min(0).max(6);
+var HHMM = /^([01]\d|2[0-3]):[0-5]\d$/;
+var RecordingScheduleSchema = discriminatedUnion("kind", [object({ kind: literal("always") }), object({
+	kind: literal("timeOfDay"),
+	start: string().regex(HHMM),
+	end: string().regex(HHMM),
+	/** Restrict to these weekdays; omit = every day. */
+	days: array(RecordingWeekdaySchema).optional()
+})]);
+var RecordingModeSchema = _enum([
+	"continuous",
+	"onMotion",
+	"onAudioThreshold"
+]);
+/**
+* First-class, authoritative per-camera storage mode — the netta choice the UI
+* reads directly (never inferred from `rules`):
+*  - `off`        — not recording.
+*  - `events`     — record only around triggers (motion / audio threshold),
+*                   with pre/post-buffer.
+*  - `continuous` — record 24/7 within the schedule.
+*
+* `mode` compiles one-way to the internal `rules[]` consumed by the policy
+* engine (see `compileRules`); `rules[]` is never authored directly anymore.
+*/
+var RecordingStorageModeSchema = _enum([
+	"off",
+	"events",
+	"continuous"
+]);
+/** Which detectors trigger an `events`-mode recording. */
+var RecordingTriggersSchema = object({
+	motion: boolean().optional(),
+	audioThresholdDbfs: number().optional()
+});
+/**
+* Mode of a single recording band — the recorder per-band vocabulary.
+*
+* Distinct from `RecordingStorageModeSchema` (which carries `off`): a band is
+* only ever `continuous` or `events`; "off" is expressed by the absence of a
+* covering band, not by a band value.
+*/
+var RecordingBandModeSchema = _enum(["continuous", "events"]);
+/**
+* Triggers for an `events`-mode band. Identical shape to
+* `RecordingTriggersSchema` — reuse that schema as the band trigger type so the
+* two never drift.
+*/
+var RecordingBandTriggersSchema = RecordingTriggersSchema;
+/**
+* A single mode-per-band window — the canonical recorder band shape, the
+* single source of truth re-used by `addon-pipeline/recorder`.
+*
+* `days` lists the weekdays the band covers (empty = every day, matching the
+* band engine's `applies` rule). `start`/`end` are `HH:MM`; an `end <= start`
+* span wraps past midnight (handled by the band engine).
+*/
+var RecordingBandSchema = object({
+	days: array(RecordingWeekdaySchema),
+	start: string().regex(HHMM),
+	end: string().regex(HHMM),
+	mode: RecordingBandModeSchema,
+	triggers: RecordingBandTriggersSchema.optional(),
+	preBufferSec: number().min(0).optional(),
+	postBufferSec: number().min(0).optional()
+});
+var RecordingRuleSchema = object({
+	schedule: RecordingScheduleSchema,
+	mode: RecordingModeSchema,
+	/** Seconds of footage to retain BEFORE a trigger (applied at keep/discard). */
+	preBufferSec: number().min(0).default(0),
+	/** Keep recording until this many seconds after the last trigger. */
+	postBufferSec: number().min(0).default(0),
+	/** Each new trigger restarts the post-buffer window. */
+	resetTimeoutOnNewEvent: boolean().default(true),
+	/** onAudioThreshold only — dBFS level that counts as a trigger. */
+	thresholdDbfs: number().optional()
+});
+/**
+* Per-device retention overrides. Every field is optional; an unset or `0`
+* value inherits the node-wide recorder default. Only footage-lifetime limits
+* live per-camera: `maxAgeDays` and `maxSizeGb`. The disk-occupancy threshold
+* (when the volume is too full to keep recording) is NOT a per-camera concern —
+* it belongs to the StorageLocation (`StorageLocation.config.minFreePercent`),
+* shared by every camera writing to that volume.
+*/
+var RecordingRetentionSchema = object({
+	maxAgeDays: number().min(0).optional(),
+	maxSizeGb: number().min(0).optional()
+});
+/**
+* The full per-camera recording intent — the wire shape of a RecordingTarget.
+*
+* `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
+* are its mode-specific parameters. `rules` is a DEPRECATED authoring input kept
+* only for transition + migration (`migrateRulesToMode`); the policy engine
+* consumes the compiled output of `compileRules(config)`, never `rules` directly.
+*/
+var RecordingConfigSchema = object({
+	enabled: boolean(),
+	/** Authoritative storage mode. Absent on legacy targets → derived once via
+	*  `migrateRulesToMode`, then persisted. */
+	mode: RecordingStorageModeSchema.optional(),
+	profiles: array(CamProfileSchema).optional(),
+	segmentSeconds: number().int().positive().optional(),
+	/** Shared recording time-bands for `events` & `continuous` — record only when
+	*  the wall-clock falls inside one of these windows. Omit or empty = always.
+	*  `continuous` compiles to one rule per band; `events` to band × trigger. */
+	schedules: array(RecordingScheduleSchema).optional(),
+	/** Legacy single-band predecessor of `schedules`. Read-compat only — it is
+	*  normalized into `schedules` on read and never written going forward. (Not
+	*  tagged `@deprecated`: the normalization paths must read it cast-free.) */
+	schedule: RecordingScheduleSchema.optional(),
+	/** `events`-mode only — which detectors trigger a recording. */
+	triggers: RecordingTriggersSchema.optional(),
+	/** `events`-mode only — seconds retained before / after a trigger. */
+	preBufferSec: number().min(0).optional(),
+	postBufferSec: number().min(0).optional(),
+	/** DEPRECATED authoring input; retained for migration/transition. */
+	rules: array(RecordingRuleSchema).optional(),
+	/**
+	* AUTHORITATIVE mode-per-band recording model (recorder). When present it
+	* is the single source of truth; the legacy `mode`/`schedules`/`schedule`/
+	* `triggers`/`rules` fields above are kept for READ-COMPAT only and are
+	* derived into bands once via `migrateConfigToBands`.
+	*/
+	bands: array(RecordingBandSchema).optional(),
+	retention: RecordingRetentionSchema.optional()
+});
+/**
+* `StorageLocationType` — an addon-declared id that identifies the *kind* of
+* storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
+* so the persisted record schema and the consumer-facing cap can both consume it
+* without forming a circular import. The `storage` cap re-exports it
+* verbatim for back-compat.
+*
+* This Zod schema is the **authoritative source** for `StorageLocationType`.
+* The TS alias in `./storage.ts` re-exports `z.infer<typeof
+* StorageLocationTypeSchema>` so the wire surface (cap) and the legacy
+* `IStorageProvider` interface stay in lockstep.
+*
+* The type is now an **open string** (not a closed enum) — addons declare
+* their own location kinds via `StorageLocationDeclaration.id`. The regex
+* enforces a safe id format: lowercase-start, alphanumeric + hyphens.
+*/
+var StorageLocationTypeSchema = string().regex(/^[a-z][a-zA-Z0-9-]*$/);
+/**
+* Persisted record for a storage location instance. Operators can register
+* multiple instances for multi-cardinality types (e.g. two `backups`
+* locations with different `providerId`s). Cardinality is now declared per
+* location via `StorageLocationDeclaration.cardinality` — the static
+* `STORAGE_LOCATION_CARDINALITY` map has been removed.
+*
+* `id` is a stable namespaced string of the form `<type>:<slug>`.
+* The default location for a type uses `id === <type>:default` by
+* convention (the bare type ref like `'backups'` resolves to it).
+*
+* `isSystem: true` marks a location as orchestrator-seeded and
+* undeletable. The bootstrap-installed defaults (one per type) carry
+* this flag; operator-added locations don't. Editing the config of
+* a system location is allowed (path migration, provider swap) but
+* deleting it is rejected at the cap level.
+*/
+var StorageLocationSchema = object({
+	id: string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
+	type: string(),
+	displayName: string().min(1),
+	providerId: string().min(1),
+	config: record(string(), unknown()),
 	/**
-	* Device supports an on-demand re-sync of its derived spec with its
-	* upstream source — drives the generic Re-sync button. The owning
-	* provider implements the action via the `device-adoption.resync` cap.
+	* Cluster node this location physically lives on. REQUIRED for node-local
+	* providers (filesystem — the path exists on one node's disk), null/absent
+	* for node-agnostic providers (S3/SFTP/WebDAV, reachable from any node).
+	* `'hub'` is the hub node. Validated against the provider's `nodeLocal`
+	* flag at upsert time, not here (the schema is provider-agnostic).
 	*/
-	DeviceFeature["Resyncable"] = "resyncable";
-	DeviceFeature["NativeSnapshot"] = "native-snapshot";
-	DeviceFeature["DoorbellButton"] = "doorbell-button";
-	DeviceFeature["TwoWayAudio"] = "two-way-audio";
-	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
+	nodeId: string().optional(),
+	isDefault: boolean().default(false),
+	isSystem: boolean().default(false),
+	createdAt: number(),
+	updatedAt: number()
+});
+/**
+* Reference accepted by consumer-facing `api.storage.*` calls.
+* Either:
+*  - a `StorageLocationType` (e.g. `'backups'`) → orchestrator resolves to the default of that type
+*  - a fully-qualified id (e.g. `'backups:nas-01'`) → addresses a specific instance
+*
+* The orchestrator's `resolveRef(ref)` handles both cases.
+*/
+var StorageLocationRefSchema = union([StorageLocationTypeSchema, string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/)]);
+/**
+* `StorageLocationDeclaration` — a single storage-location entry declared by
+* an addon in its `package.json` under `camstack.storageLocations`.
+*
+* Design intent:
+* - **Addon declares its needs** — each addon describes the logical storage
+*   slots it requires (e.g. `recordings`, `recordingsLow`) without caring
+*   about the physical path.
+* - **Kernel aggregates** — at boot the kernel collects declarations from all
+*   installed addons, deduplicates by `id`, and exposes the union via the
+*   storage-locations settings surface.
+* - **Orchestrator seeds** — for every declared `id` the orchestrator ensures
+*   at least one instance named `<id>:default` is present, using
+*   `defaultsTo` to inherit the resolved root from another location when the
+*   declaration is a derivative slot (e.g. `recordingsLow` defaults to
+*   `recordings`).
+* - **ids are global** — `id` values are shared across the entire deployment;
+*   two addons declaring the same `id` must agree on `cardinality` (validated
+*   at kernel aggregation time, not here).
+*/
+var StorageLocationDeclarationSchema = object({
 	/**
-	* Camera supports the on-firmware autotrack subsystem (subject-
-	* following). Distinct from `PanTiltZoom` because not every PTZ
-	* camera ships autotrack — the admin UI uses this flag to gate
-	* the autotrack toggle / settings card without re-deriving from
-	* the cap registry. Mirrors `ptz-autotrack` cap registration:
-	* driver sets this feature when probe confirms the firmware
-	* surface, and registers the cap in the same code path.
+	* Global location identifier, e.g. `recordings` or `recordingsLow`.
+	* Must start with a lowercase letter and may contain letters, digits, and
+	* hyphens.
 	*/
-	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
+	id: string().regex(/^[a-z][a-zA-Z0-9-]*$/, { message: "id must start with a lowercase letter and contain only letters, digits, or hyphens" }),
+	/** Human-readable name shown in the admin UI. */
+	displayName: string().min(1, { message: "displayName must not be empty" }),
+	/** Optional longer explanation of what data this location stores. */
+	description: string().optional(),
 	/**
-	* Accessory exposes a "trigger on motion" toggle — the parent camera's
-	* motion detection automatically activates this device. Mirrors
-	* `motion-trigger` cap registration: drivers set this feature in the
-	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
-	*
-	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
-	* fast scalar without binding fetch), notifier rules, and `listAll`
-	* filters that want "all devices with on-motion behaviour".
+	* `single` — exactly one instance of this location is allowed system-wide
+	* (e.g. `logs`, `models`). The operator can edit it but not add more.
+	* `multi`  — the operator may register several instances (e.g. a second
+	* `recordings` on a NAS for disk tiering); one is the default at any time.
 	*/
-	DeviceFeature["MotionTrigger"] = "motion-trigger";
-	/** Light supports rgb-triplet color via `color` cap. */
-	DeviceFeature["LightColorRgb"] = "light-color-rgb";
-	/** Light supports HSV color via `color` cap. */
-	DeviceFeature["LightColorHsv"] = "light-color-hsv";
-	/** Light supports color-temperature (mired) via `color` cap. */
-	DeviceFeature["LightColorMired"] = "light-color-mired";
-	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
-	*  targetHigh). Gates the range slider UI. */
-	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
-	/** Thermostat exposes target humidity and/or current humidity
-	*  readings. Gates the humidity controls. */
-	DeviceFeature["ClimateHumidity"] = "climate-humidity";
-	/** Thermostat exposes a fan-mode selector. */
-	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
-	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
-	DeviceFeature["ClimatePreset"] = "climate-preset";
-	/** Cover exposes intermediate position control (0..100). Gates the
-	*  position slider UI. */
-	DeviceFeature["CoverPositionable"] = "cover-positionable";
-	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
-	DeviceFeature["CoverTilt"] = "cover-tilt";
-	/** Valve exposes intermediate position control (0..100). Gates the
-	*  position slider / drag surface UI. */
-	DeviceFeature["ValvePositionable"] = "valve-positionable";
-	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
-	DeviceFeature["FanSpeed"] = "fan-speed";
-	/** Fan exposes a preset mode selector. */
-	DeviceFeature["FanPreset"] = "fan-preset";
-	/** Fan exposes blade direction (forward/reverse) — typical of
-	*  ceiling fans. */
-	DeviceFeature["FanDirection"] = "fan-direction";
-	/** Fan exposes an oscillation toggle. */
-	DeviceFeature["FanOscillating"] = "fan-oscillating";
-	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
-	*  field on the UI lock-controls panel. */
-	DeviceFeature["LockPinRequired"] = "lock-pin-required";
-	/** Lock supports a latch-release ("open door") action distinct from
-	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
-	*  `supported_features`. Gates the Open Door button in the UI. */
-	DeviceFeature["LockOpen"] = "lock-open";
-	/** Media player exposes a seek-to-position surface. */
-	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
-	/** Media player exposes a volume-level setter. */
-	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
-	/** Media player exposes a mute toggle distinct from volume=0. */
-	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
-	/** Media player exposes a shuffle toggle. */
-	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
-	/** Media player exposes a repeat mode (off / all / one). */
-	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
-	/** Media player exposes a source / input selector. */
-	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
-	/** Media player exposes a play-arbitrary-media surface (URL / id). */
-	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
-	/** Media player exposes next-track. */
-	DeviceFeature["MediaPlayerNext"] = "media-player-next";
-	/** Media player exposes previous-track. */
-	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
-	/** Media player exposes stop distinct from pause. */
-	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
-	/** Alarm panel requires a PIN code on arm/disarm. */
-	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
-	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
-	*  addition to a textual location. */
-	DeviceFeature["PresenceGps"] = "presence-gps";
-	/** Notifier accepts an inline / URL image attachment. */
-	DeviceFeature["NotifierImage"] = "notifier-image";
-	/** Notifier accepts a priority hint (high/normal/low). */
-	DeviceFeature["NotifierPriority"] = "notifier-priority";
-	/** Notifier accepts a free-form `data` payload for platform-specific
-	*  fields. */
-	DeviceFeature["NotifierData"] = "notifier-data";
-	/** Notifier supports interactive action buttons / callbacks. */
-	DeviceFeature["NotifierActions"] = "notifier-actions";
-	/** Notifier supports per-call recipient targeting (multi-user). */
-	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
-	/** Script runner accepts a variables map on each run invocation. */
-	DeviceFeature["ScriptVariables"] = "script-variables";
-	/** Automation `trigger` accepts a skipCondition flag — fires the
-	*  automation's actions while bypassing its condition block. */
-	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
-	return DeviceFeature;
-}({});
-/**
-* Semantic role a device plays within its parent. Populated by driver
-* addons when creating accessory devices (Reolink siren/floodlight/
-* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
-* admin UI to pick icons, labels, and widgets — a `Switch` with
-* `role: Floodlight` renders as a bulb with a brightness slider,
-* whereas a `Switch` with `role: Siren` renders as a klaxon.
-*
-* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
-* sqlite as a nullable TEXT column — old rows keep working unchanged.
-*/
-var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
-	DeviceRole["Siren"] = "siren";
-	DeviceRole["Floodlight"] = "floodlight";
-	DeviceRole["Spotlight"] = "spotlight";
-	DeviceRole["PirSensor"] = "pir-sensor";
-	DeviceRole["Chime"] = "chime";
-	DeviceRole["Autotrack"] = "autotrack";
-	DeviceRole["Nightvision"] = "nightvision";
-	DeviceRole["PrivacyMask"] = "privacy-mask";
-	DeviceRole["Doorbell"] = "doorbell";
-	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
-	*  real Switch device for UI rendering / export adapters. */
-	DeviceRole["BinaryHelper"] = "binary-helper";
-	/** Generic motion / occupancy / moving event source. Distinct from
-	*  the camera accessory PirSensor role: that one is a camera child;
-	*  this is a standalone HA / 3rd-party motion sensor. */
-	DeviceRole["MotionSensor"] = "motion-sensor";
-	DeviceRole["ContactSensor"] = "contact-sensor";
-	DeviceRole["LeakSensor"] = "leak-sensor";
-	DeviceRole["SmokeSensor"] = "smoke-sensor";
-	DeviceRole["COSensor"] = "co-sensor";
-	DeviceRole["GasSensor"] = "gas-sensor";
-	DeviceRole["TamperSensor"] = "tamper-sensor";
-	DeviceRole["VibrationSensor"] = "vibration-sensor";
-	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
-	DeviceRole["SoundSensor"] = "sound-sensor";
-	/** Fallback for `binary_sensor` without a known `device_class`. */
-	DeviceRole["BinarySensor"] = "binary-sensor";
-	DeviceRole["TemperatureSensor"] = "temperature-sensor";
-	DeviceRole["HumiditySensor"] = "humidity-sensor";
-	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
-	DeviceRole["PressureSensor"] = "pressure-sensor";
-	DeviceRole["PowerSensor"] = "power-sensor";
-	DeviceRole["EnergySensor"] = "energy-sensor";
-	DeviceRole["VoltageSensor"] = "voltage-sensor";
-	DeviceRole["CurrentSensor"] = "current-sensor";
-	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
-	/** Battery level (numeric % via `sensor` OR low-bool via
-	*  `binary_sensor` — the cap distinguishes via the value type). */
-	DeviceRole["BatterySensor"] = "battery-sensor";
-	/** Fallback for `sensor` numeric without a known `device_class`. */
-	DeviceRole["NumericSensor"] = "numeric-sensor";
-	/** String / enum state (HA `sensor` with `state_class: enum` or
-	*  `attributes.options`). */
-	DeviceRole["EnumSensor"] = "enum-sensor";
-	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
-	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
-	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
-	DeviceRole["DateTimeSensor"] = "datetime-sensor";
-	/** Last-resort fallback when nothing else matches. */
-	DeviceRole["GenericSensor"] = "generic-sensor";
-	DeviceRole["NumericControl"] = "numeric-control";
-	DeviceRole["SelectControl"] = "select-control";
-	DeviceRole["TextControl"] = "text-control";
-	DeviceRole["DateTimeControl"] = "datetime-control";
-	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
-	*  rich features (image, priority, channel routing). */
-	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
-	/** Chat / messaging service (HA `notify.telegram_*`,
-	*  `notify.discord_*`, etc.). */
-	DeviceRole["MessagingNotifier"] = "messaging-notifier";
-	/** Email-based delivery (HA `notify.smtp`, etc.). */
-	DeviceRole["EmailNotifier"] = "email-notifier";
-	/** Fallback when the notifier service name doesn't match a known
-	*  pattern. */
-	DeviceRole["GenericNotifier"] = "generic-notifier";
-	return DeviceRole;
-}({});
+	cardinality: _enum(["single", "multi"]),
+	/**
+	* When set, the default instance for this location inherits its resolved
+	* root from the named location's default instance. Useful for derivative
+	* slots (e.g. `recordingsLow` → `recordings`) so operators only need to
+	* configure the primary location.
+	*/
+	defaultsTo: string().optional()
+});
+var DecoderStatsSchema = object({
+	inputFps: number(),
+	outputFps: number(),
+	avgDecodeTimeMs: number(),
+	droppedFrames: number()
+});
+var DecoderSessionConfigSchema = object({
+	codec: string(),
+	maxFps: number().default(0),
+	outputFormat: _enum([
+		"jpeg",
+		"rgb",
+		"bgr",
+		"yuv420",
+		"gray"
+	]).default("jpeg"),
+	scale: number().default(1),
+	width: number().optional(),
+	height: number().optional(),
+	/**
+	* Identifier of the camera this decoder session serves. Optional
+	* because the cap is generic (any caller could request decode), but
+	* stream-broker passes it so decoder logs include `deviceId` for
+	* per-camera filtering when diagnosing failures (e.g. node-av
+	* sendPacket errors on a single hung camera).
+	*/
+	deviceId: number().int().nonnegative().optional(),
+	/**
+	* Free-form tag for log scoping. Stream-broker uses
+	* `broker:<deviceId>/<profile>`. Decoder session logger surfaces it
+	* on every line so `grep tag=broker:5/high` filters one camera
+	* profile cleanly.
+	*/
+	tag: string().optional(),
+	/**
+	* Where the session delivers decoded frames (Phase 5 / D9):
+	*
+	* - `'callback'` (default) — the legacy pixel path: decoded frames are
+	*   buffered as `DecodedFrame`s and drained via `pullFrames`.
+	* - `'shm'` — the shared-memory frame plane: decoded frames are written
+	*   into an OS shared-memory ring and drained as zero-pixel
+	*   `FrameHandle`s via `pullHandles`. A session is one mode or the
+	*   other — `pullFrames` returns nothing for an `'shm'` session and
+	*   `pullHandles` returns nothing for a `'callback'` session.
+	*/
+	frameSink: _enum(["callback", "shm"]).default("callback")
+});
+var EncodeProfileSchema = object({
+	video: object({
+		codec: _enum([
+			"h264",
+			"h265",
+			"copy"
+		]),
+		profile: _enum([
+			"baseline",
+			"main",
+			"high"
+		]).optional(),
+		width: number().int().positive().optional(),
+		height: number().int().positive().optional(),
+		fps: number().positive().optional(),
+		bitrateKbps: number().int().positive().optional(),
+		gopFrames: number().int().positive().optional(),
+		bf: number().int().min(0).optional(),
+		preset: _enum([
+			"ultrafast",
+			"superfast",
+			"veryfast",
+			"faster",
+			"fast",
+			"medium"
+		]).optional(),
+		tune: _enum([
+			"zerolatency",
+			"film",
+			"animation"
+		]).optional()
+	}),
+	audio: union([literal("passthrough"), object({
+		codec: _enum([
+			"opus",
+			"aac",
+			"pcmu",
+			"pcma",
+			"copy"
+		]),
+		bitrateKbps: number().int().positive().optional(),
+		sampleRateHz: number().int().positive().optional(),
+		channels: union([literal(1), literal(2)]).optional()
+	})]),
+	/**
+	* ffmpeg input-side args, inserted between the fixed global flags
+	* (`-hide_banner -loglevel error`) and `-i pipe:0`. Free-text array
+	* — the widget surfaces a textarea + suggestion chips for the most-
+	* used demuxer/format options.
+	*/
+	inputArgs: array(string()).optional(),
+	/**
+	* ffmpeg output-side args, inserted between the encode block and
+	* the final `-f <muxer> pipe:1`. Use for muxer options, bitstream
+	* filters, codec-specific overrides. Free-text array.
+	*/
+	outputArgs: array(string()).optional()
+});
+var YAMNET_TO_MACRO = {
+	mapping: {
+		Speech: "speech",
+		"Child speech, kid speaking": "speech",
+		Conversation: "speech",
+		"Narration, monologue": "speech",
+		Babbling: "speech",
+		Whispering: "speech",
+		"Speech synthesizer": "speech",
+		Humming: "speech",
+		Rapping: "speech",
+		Singing: "speech",
+		Choir: "speech",
+		"Child singing": "speech",
+		Shout: "scream",
+		Bellow: "scream",
+		Yell: "scream",
+		Screaming: "scream",
+		"Children shouting": "scream",
+		Whoop: "scream",
+		"Crying, sobbing": "crying",
+		"Baby cry, infant cry": "crying",
+		Whimper: "crying",
+		"Wail, moan": "crying",
+		Groan: "crying",
+		Laughter: "laughter",
+		"Baby laughter": "laughter",
+		Giggle: "laughter",
+		Snicker: "laughter",
+		"Belly laugh": "laughter",
+		"Chuckle, chortle": "laughter",
+		Music: "music",
+		"Musical instrument": "music",
+		Guitar: "music",
+		Piano: "music",
+		Drum: "music",
+		"Drum kit": "music",
+		"Violin, fiddle": "music",
+		Flute: "music",
+		Saxophone: "music",
+		Trumpet: "music",
+		Synthesizer: "music",
+		"Pop music": "music",
+		"Rock music": "music",
+		"Hip hop music": "music",
+		"Classical music": "music",
+		Jazz: "music",
+		"Electronic music": "music",
+		"Background music": "music",
+		Dog: "dog",
+		Bark: "dog",
+		Yip: "dog",
+		Howl: "dog",
+		"Bow-wow": "dog",
+		Growling: "dog",
+		"Whimper (dog)": "dog",
+		Cat: "cat",
+		Purr: "cat",
+		Meow: "cat",
+		Hiss: "cat",
+		Caterwaul: "cat",
+		Bird: "bird",
+		"Bird vocalization, bird call, bird song": "bird",
+		"Chirp, tweet": "bird",
+		Squawk: "bird",
+		Crow: "bird",
+		Owl: "bird",
+		"Pigeon, dove": "bird",
+		Animal: "animal",
+		"Domestic animals, pets": "animal",
+		"Livestock, farm animals, working animals": "animal",
+		Horse: "animal",
+		"Cattle, bovinae": "animal",
+		Pig: "animal",
+		Sheep: "animal",
+		Goat: "animal",
+		Frog: "animal",
+		Insect: "animal",
+		Cricket: "animal",
+		Alarm: "alarm",
+		"Alarm clock": "alarm",
+		"Smoke detector, smoke alarm": "alarm",
+		"Fire alarm": "alarm",
+		Buzzer: "alarm",
+		"Civil defense siren": "alarm",
+		"Car alarm": "alarm",
+		Siren: "siren",
+		"Police car (siren)": "siren",
+		"Ambulance (siren)": "siren",
+		"Fire engine, fire truck (siren)": "siren",
+		"Emergency vehicle": "siren",
+		Foghorn: "siren",
+		Doorbell: "doorbell",
+		"Ding-dong": "doorbell",
+		Knock: "doorbell",
+		Tap: "doorbell",
+		Glass: "glass_breaking",
+		Shatter: "glass_breaking",
+		"Chink, clink": "glass_breaking",
+		"Gunshot, gunfire": "gunshot",
+		"Machine gun": "gunshot",
+		Explosion: "gunshot",
+		Fireworks: "gunshot",
+		Firecracker: "gunshot",
+		"Artillery fire": "gunshot",
+		"Cap gun": "gunshot",
+		Boom: "gunshot",
+		Vehicle: "vehicle",
+		Car: "vehicle",
+		Truck: "vehicle",
+		Bus: "vehicle",
+		Motorcycle: "vehicle",
+		"Car passing by": "vehicle",
+		"Vehicle horn, car horn, honking": "vehicle",
+		"Traffic noise, roadway noise": "vehicle",
+		Train: "vehicle",
+		Aircraft: "vehicle",
+		Helicopter: "vehicle",
+		Bicycle: "vehicle",
+		Skateboard: "vehicle",
+		Fire: "fire",
+		Crackle: "fire",
+		Water: "water",
+		Rain: "water",
+		Raindrop: "water",
+		"Rain on surface": "water",
+		Stream: "water",
+		Waterfall: "water",
+		Ocean: "water",
+		"Waves, surf": "water",
+		"Splash, splatter": "water",
+		Wind: "wind",
+		Thunderstorm: "wind",
+		Thunder: "wind",
+		"Wind noise (microphone)": "wind",
+		"Rustling leaves": "wind",
+		Door: "door",
+		"Sliding door": "door",
+		Slam: "door",
+		"Cupboard open or close": "door",
+		"Walk, footsteps": "footsteps",
+		Run: "footsteps",
+		Shuffle: "footsteps",
+		Crowd: "crowd",
+		Chatter: "crowd",
+		Cheering: "crowd",
+		Applause: "crowd",
+		"Children playing": "crowd",
+		"Hubbub, speech noise, speech babble": "crowd",
+		Telephone: "telephone",
+		"Telephone bell ringing": "telephone",
+		Ringtone: "telephone",
+		"Telephone dialing, DTMF": "telephone",
+		"Busy signal": "telephone",
+		Engine: "engine",
+		"Engine starting": "engine",
+		Idling: "engine",
+		"Accelerating, revving, vroom": "engine",
+		"Light engine (high frequency)": "engine",
+		"Medium engine (mid frequency)": "engine",
+		"Heavy engine (low frequency)": "engine",
+		"Lawn mower": "engine",
+		Chainsaw: "engine",
+		Hammer: "tools",
+		Jackhammer: "tools",
+		Sawing: "tools",
+		"Power tool": "tools",
+		Drill: "tools",
+		Sanding: "tools",
+		Silence: "silence"
+	},
+	preserveOriginal: false
+};
+var APPLE_SA_TO_MACRO = {
+	mapping: {
+		speech: "speech",
+		child_speech: "speech",
+		conversation: "speech",
+		whispering: "speech",
+		singing: "speech",
+		humming: "speech",
+		shout: "scream",
+		yell: "scream",
+		screaming: "scream",
+		crying: "crying",
+		baby_crying: "crying",
+		sobbing: "crying",
+		laughter: "laughter",
+		baby_laughter: "laughter",
+		giggling: "laughter",
+		music: "music",
+		guitar: "music",
+		piano: "music",
+		drums: "music",
+		dog_bark: "dog",
+		dog_bow_wow: "dog",
+		dog_growling: "dog",
+		dog_howl: "dog",
+		cat_meow: "cat",
+		cat_purr: "cat",
+		cat_hiss: "cat",
+		bird: "bird",
+		bird_chirp: "bird",
+		bird_squawk: "bird",
+		animal: "animal",
+		horse: "animal",
+		cow_moo: "animal",
+		insect: "animal",
+		alarm: "alarm",
+		smoke_alarm: "alarm",
+		fire_alarm: "alarm",
+		car_alarm: "alarm",
+		siren: "siren",
+		police_siren: "siren",
+		ambulance_siren: "siren",
+		doorbell: "doorbell",
+		door_knock: "doorbell",
+		knocking: "doorbell",
+		glass_breaking: "glass_breaking",
+		glass_shatter: "glass_breaking",
+		gunshot: "gunshot",
+		explosion: "gunshot",
+		fireworks: "gunshot",
+		car: "vehicle",
+		truck: "vehicle",
+		motorcycle: "vehicle",
+		car_horn: "vehicle",
+		vehicle_horn: "vehicle",
+		traffic: "vehicle",
+		fire: "fire",
+		fire_crackle: "fire",
+		water: "water",
+		rain: "water",
+		ocean: "water",
+		splash: "water",
+		wind: "wind",
+		thunder: "wind",
+		thunderstorm: "wind",
+		door: "door",
+		door_slam: "door",
+		sliding_door: "door",
+		footsteps: "footsteps",
+		walking: "footsteps",
+		running: "footsteps",
+		crowd: "crowd",
+		chatter: "crowd",
+		cheering: "crowd",
+		applause: "crowd",
+		telephone_ring: "telephone",
+		ringtone: "telephone",
+		engine: "engine",
+		engine_starting: "engine",
+		lawn_mower: "engine",
+		chainsaw: "engine",
+		hammer: "tools",
+		jackhammer: "tools",
+		drill: "tools",
+		power_tool: "tools",
+		silence: "silence"
+	},
+	preserveOriginal: false
+};
+var _macroLookup = /* @__PURE__ */ new Map();
+for (const [k, v] of Object.entries(YAMNET_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
+for (const [k, v] of Object.entries(APPLE_SA_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
 /**
 * Accessory device helpers — shared across drivers.
 *
@@ -7680,74 +7848,6 @@ object({
 });
 DeviceType.Sensor;
 /**
-* Generic types for capability definitions.
-*
-* A capability is defined with Zod schemas for methods, events, and settings.
-* TypeScript types are inferred via z.infer<> — zero duplication.
-*
-* Pattern:
-*   1. Define Zod schemas for data, methods, settings
-*   2. Export const capabilityDef = { ... } satisfies CapabilityDefinition
-*   3. Export type IProvider = InferProvider<typeof capabilityDef>
-*   4. Addon implements IProvider
-*   5. Registry auto-mounts tRPC router from definition.methods
-*/
-/**
-* Output schema shared by the contribution + live methods.
-*
-* Mirrors the `ConfigUISchemaWithValues` shape (sections[] + optional
-* tabs[]) without importing from `../interfaces/config-ui.js` — a
-* concrete-but-lenient Zod object keeps tRPC output inference happy
-* (using `z.unknown()` here collapses unrelated router branches to
-* `unknown` when the generator re-inlines the huge AppRouter type).
-*
-* `.passthrough()` on sections/fields accepts whatever FormBuilder
-* extensions the caller adds (showWhen, displayScale, …) without
-* rebuilding every time a new field kind is introduced.
-*/
-var ContributionSectionSchema = object({
-	id: string(),
-	title: string(),
-	description: string().optional(),
-	style: _enum(["card", "accordion"]).optional(),
-	defaultCollapsed: boolean().optional(),
-	columns: union([
-		literal(1),
-		literal(2),
-		literal(3),
-		literal(4)
-	]).optional(),
-	tab: string().optional(),
-	location: _enum(["settings", "top-tab"]).optional(),
-	order: number().optional(),
-	fields: array(any())
-});
-object({
-	tabs: array(object({
-		id: string(),
-		label: string(),
-		icon: string(),
-		order: number().optional()
-	})).optional(),
-	sections: array(ContributionSectionSchema)
-}).nullable();
-object({ deviceId: number() }), object({ deviceId: number() }), object({
-	deviceId: number(),
-	patch: record(string(), unknown())
-}), object({ success: literal(true) });
-object({ deviceId: number() }), unknown().nullable();
-/** Shorthand to define a method schema */
-function method(input, output, options) {
-	return {
-		input,
-		output,
-		kind: options?.kind ?? "query",
-		auth: options?.auth ?? "protected",
-		...options?.access !== void 0 ? { access: options.access } : {},
-		timeoutMs: options?.timeoutMs
-	};
-}
-/**
 * Alarm-panel cap. Models HA `alarm_control_panel.*` on
 * `DeviceType.AlarmPanel`. State follows HA's canonical lifecycle
 * across disarmed / armed_(home|away|night|vacation|custom_bypass) /
@@ -9562,6 +9662,24 @@ var DetectorOutputSchema = object({
 	inferenceMs: number(),
 	modelId: string()
 });
+var EngineProvisioningSchema = object({
+	runtimeId: _enum([
+		"onnx",
+		"openvino",
+		"coreml"
+	]).nullable(),
+	device: string().nullable(),
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	progress: number().optional(),
+	error: string().optional(),
+	nextRetryAt: number().optional()
+});
 var PipelineStepInputSchema = lazy(() => object({
 	addonId: string(),
 	modelId: string(),
@@ -9661,6 +9779,15 @@ var pipelineExecutorCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Per-node detection-engine provisioning snapshot. Returns the live
+		* state of the lazy runtime-provisioning machine on `nodeId`
+		* (idle / installing / verifying / ready / failed). The UI pairs this
+		* one-shot query with the `pipeline.engine-provisioning` live event
+		* (emitted on every transition) to drive a per-node "engine ready?"
+		* indicator without polling. Phase 2.
+		*/
+		getEngineProvisioning: method(object({ nodeId: string() }), EngineProvisioningSchema),
 		getVideoPipelineSteps: method(_void(), record(string(), object({
 			modelId: string(),
 			settings: record(string(), unknown()).readonly()
@@ -12045,9 +12172,6 @@ method(LogEntrySchema, _void(), { kind: "mutation" }), method(object({
 	limit: number().optional(),
 	tags: record(string(), string()).optional()
 }), array(LogEntrySchema).readonly());
-var StaticDirOutputSchema = object({ staticDir: string() });
-var VersionOutputSchema = object({ version: string() });
-method(_void(), StaticDirOutputSchema), method(_void(), VersionOutputSchema);
 /**
 * Zod schemas for persisted record types.
 *
@@ -13537,7 +13661,10 @@ var AgentAddonConfigSchema = object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 });
-var AgentPipelineSettingsSchema = object({ addonDefaults: record(string(), AgentAddonConfigSchema).readonly() });
+var AgentPipelineSettingsSchema = object({
+	addonDefaults: record(string(), AgentAddonConfigSchema).readonly(),
+	maxCameras: number().int().nonnegative().nullable().default(null)
+});
 var CameraPipelineForAgentSchema = object({
 	steps: array(PipelineStepInputSchema).readonly(),
 	audio: object({
@@ -13639,6 +13766,133 @@ var GlobalMetricsSchema = object({
 * capability providers.
 */
 var CapabilityBindingsSchema = record(string(), string());
+/** Source block — always present; derives from the stream catalog. */
+var CameraSourceStatusSchema = object({ streams: array(object({
+	camStreamId: string(),
+	codec: string(),
+	width: number(),
+	height: number(),
+	fps: number(),
+	kind: string()
+})).readonly() });
+/** Assignment block — always present (orchestrator-local, no remote call). */
+var CameraAssignmentStatusSchema = object({
+	detectionNodeId: string().nullable(),
+	decoderNodeId: string().nullable(),
+	audioNodeId: string().nullable(),
+	pinned: object({
+		detection: boolean(),
+		decoder: boolean(),
+		audio: boolean()
+	}),
+	reasons: object({
+		detection: string().optional(),
+		decoder: string().optional(),
+		audio: string().optional()
+	})
+});
+/** Broker block — null when the broker stage is unreachable or inactive. */
+var CameraBrokerStatusSchema = object({
+	profiles: array(object({
+		profile: string(),
+		status: string(),
+		codec: string(),
+		width: number(),
+		height: number(),
+		subscribers: number(),
+		inFps: number(),
+		outFps: number()
+	})).readonly(),
+	webrtcSessions: number(),
+	rtspRestream: boolean()
+});
+/** Shared-memory ring statistics within the decoder block. */
+var CameraDecoderShmSchema = object({
+	framesWritten: number(),
+	getFrameHits: number(),
+	getFrameMisses: number(),
+	budgetMb: number()
+});
+/** Decoder block — null when the decoder stage is unreachable or inactive. */
+var CameraDecoderStatusSchema = object({
+	nodeId: string(),
+	formats: array(string()).readonly(),
+	sessionCount: number(),
+	shm: CameraDecoderShmSchema
+});
+/** Motion block — null when motion detection is not active for this device. */
+var CameraMotionStatusSchema = object({
+	enabled: boolean(),
+	fps: number()
+});
+/** Detection provisioning sub-block. */
+var CameraDetectionProvisioningSchema = object({
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	error: string().optional()
+});
+/** Detection phase — derived from the runner's engine phase. */
+var CameraDetectionPhaseSchema = _enum([
+	"idle",
+	"watching",
+	"active"
+]);
+/** Detection block — null when no detection node is assigned or reachable. */
+var CameraDetectionStatusSchema = object({
+	nodeId: string(),
+	engine: object({
+		backend: string(),
+		device: string()
+	}),
+	phase: CameraDetectionPhaseSchema,
+	configuredFps: number(),
+	actualFps: number(),
+	queueDepth: number(),
+	avgInferenceMs: number(),
+	provisioning: CameraDetectionProvisioningSchema
+});
+/** Audio block — null when no audio node is assigned or reachable. */
+var CameraAudioStatusSchema = object({
+	nodeId: string(),
+	enabled: boolean()
+});
+/** Recording block — null when no recording cap is active for this device. */
+var CameraRecordingStatusSchema = object({
+	mode: _enum([
+		"off",
+		"continuous",
+		"events"
+	]),
+	active: boolean(),
+	storageBytes: number()
+});
+/**
+* Aggregated per-camera pipeline status — server-composed, single call.
+*
+* The `assignment` and `source` blocks are always present.
+* Every other block is `null` when the stage is inactive or unreachable
+* during the bounded parallel fan-out in the orchestrator implementation.
+*
+* See spec: `docs/superpowers/specs/2026-06-24-camera-status-aggregator-cap.md`
+*/
+var CameraStatusSchema = object({
+	deviceId: number(),
+	assignment: CameraAssignmentStatusSchema,
+	source: CameraSourceStatusSchema,
+	broker: CameraBrokerStatusSchema.nullable(),
+	decoder: CameraDecoderStatusSchema.nullable(),
+	motion: CameraMotionStatusSchema.nullable(),
+	detection: CameraDetectionStatusSchema.nullable(),
+	audio: CameraAudioStatusSchema.nullable(),
+	recording: CameraRecordingStatusSchema.nullable(),
+	/** Unix timestamp (ms) when this snapshot was composed server-side. */
+	fetchedAt: number()
+});
 /**
 * Pipeline Orchestrator capability — global load balancer + camera dispatcher.
 *
@@ -13808,10 +14062,29 @@ var pipelineOrchestratorCapability = {
 		* `success: false` indicates the nodeId wasn't in the store (no-op).
 		* Refuses to remove `hub` (the orchestrator always co-resides with it).
 		*/
-		removeAgentSettings: method(object({ agentNodeId: string() }), object({
-			success: boolean(),
-			removed: boolean()
-		}), {
+		removeAgentSettings: method(object({ agentNodeId: string() }), object({
+			success: boolean(),
+			removed: boolean()
+		}), {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
+		* Set the per-node camera cap for one agent.
+		*
+		* `maxCameras: 0` and `maxCameras: null` are both treated as unlimited
+		* by the load balancer (0 is stored as-is; the balancer treats ≤0 as
+		* unlimited alongside null). Pass `null` to clear an existing cap.
+		* Note: the admin UI normalises 0→null before calling this method, so
+		* `maxCameras: 0` only reaches the store via direct SDK or CLI calls.
+		* Changes take effect immediately on the next dispatch cycle — cameras
+		* currently assigned over-cap are left in place (no forced eviction),
+		* but new assignments obey the updated cap.
+		*/
+		setAgentMaxCameras: method(object({
+			agentNodeId: string(),
+			maxCameras: number().int().nonnegative().nullable()
+		}), object({ success: literal(true) }), {
 			kind: "mutation",
 			auth: "admin"
 		}),
@@ -13855,6 +14128,29 @@ var pipelineOrchestratorCapability = {
 			deviceId: number(),
 			agentNodeId: string().optional()
 		}), CameraPipelineConfigSchema),
+		/**
+		* Server-composed aggregated status for a single camera.
+		*
+		* Fans out in parallel (bounded, per-stage graceful degradation) to
+		* broker / decoder / motion / detection / audio / recording source caps
+		* via `ctx.api`. A stage whose source errors or times out becomes `null`
+		* in the returned payload — one slow agent never breaks the whole call.
+		*
+		* Intended for "on open / on camera select" snapshots. Live deltas
+		* keep arriving from the existing ~1Hz events the UI already subscribes to.
+		*/
+		getCameraStatus: method(object({ deviceId: number() }), CameraStatusSchema),
+		/**
+		* Server-composed aggregated status for multiple cameras in one call.
+		*
+		* `deviceIds` defaults to all cameras currently tracked by the
+		* orchestrator's assignment map when omitted.
+		*
+		* Runs per-device composition in parallel (bounded). Use this to
+		* populate the cluster assignments table and the pipeline flow overview
+		* rail without issuing N parallel browser round-trips.
+		*/
+		getCameraStatuses: method(object({ deviceIds: array(number()).optional() }), array(CameraStatusSchema).readonly()),
 		/** List every template the operator has saved. */
 		listTemplates: method(_void(), array(PipelineTemplateSchema).readonly()),
 		/** Create a new named preset from a given CameraPipelineConfig. */
@@ -14351,7 +14647,7 @@ method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ addonId: string() }), array(SavedDeviceRowSchema)), method(object({ addonId: string().optional() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), DeviceInfoSchema.nullable()), method(object({ parentDeviceId: number() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), array(StreamSourceEntrySchema)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
+}), method(object({ addonId: string() }), array(SavedDeviceRowSchema)), method(object({ addonId: string().optional() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), DeviceInfoSchema.nullable()), method(object({ parentDeviceId: number() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
 	deviceId: number(),
 	values: record(string(), unknown())
 }), object({ success: literal(true) }), {
@@ -15071,7 +15367,20 @@ var DiskSpaceInfoSchema = object({
 var PidResourceStatsSchema = object({
 	pid: number(),
 	cpu: number(),
-	memory: number()
+	memory: number(),
+	/**
+	* Private (anonymous) resident bytes — the per-process V8 heap + native
+	* allocations NOT shared with other processes (Linux RssAnon). This is the
+	* "real" per-runner cost; summing it across runners is meaningful, unlike
+	* `memory` (RSS), which double-counts the shared mmap'd framework code.
+	* Undefined where /proc is unavailable (e.g. macOS).
+	*/
+	privateBytes: number().optional(),
+	/**
+	* Shared file-backed resident bytes (Linux RssFile) — mmap'd framework/lib
+	* code shared copy-on-write across runners. Undefined on macOS.
+	*/
+	sharedBytes: number().optional()
 });
 var AddonInstanceSchema = object({
 	addonId: string(),
@@ -15120,6 +15429,17 @@ var KillProcessResultSchema = object({
 	reason: string().optional(),
 	signal: _enum(["SIGTERM", "SIGKILL"]).optional()
 });
+var DumpHeapSnapshotInputSchema = object({ 
+/** The addon whose runner should dump a heap snapshot. */
+addonId: string() });
+var DumpHeapSnapshotResultSchema = object({
+	success: boolean(),
+	/** Path of the written .heapsnapshot inside the runner's container/host. */
+	path: string().optional(),
+	/** Process pid that was signalled. */
+	pid: number().optional(),
+	reason: string().optional()
+});
 var SystemMetricsSchema = object({
 	cpuPercent: number(),
 	memoryPercent: number(),
@@ -15133,6 +15453,9 @@ var SystemMetricsSchema = object({
 method(_void(), SystemResourceSnapshotSchema), method(_void(), SystemResourceSnapshotSchema.nullable()), method(_void(), SystemMetricsSchema), method(object({ dirPath: string() }), DiskSpaceInfoSchema), method(_void(), MetricsGpuInfoSchema.nullable()), method(_void(), number().nullable()), method(object({ pids: array(number()) }), array(PidResourceStatsSchema)), method(_void(), array(AddonInstanceSchema).readonly()), method(object({ addonId: string() }), PidResourceStatsSchema.nullable()), method(_void(), array(NodeProcessSchema).readonly()), method(KillProcessInputSchema, KillProcessResultSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 });
 var PtzPresetSchema = object({
 	id: string(),
@@ -15499,63 +15822,6 @@ method(object({
 	auth: "admin"
 });
 /**
-* device-ops — device-scoped cap that unifies the per-IDevice operations
-* previously routed through the `.device-ops` Moleculer bridge service.
-*
-* Each worker that hosts live `IDevice` instances auto-registers a native
-* provider for this cap (per device) backed by its local
-* `DeviceRegistry`. Hub-side callers reach it transparently through
-* `ctx.fetchDevice(id).deviceOps.*` — the DeviceProxy injects
-* `deviceId` + `nodeId` and dispatches through the standard cap-router,
-* so there's no parallel bridge path anymore.
-*
-* The surface is intentionally small — every method corresponds to a
-* single action on the live `IDevice` (or `ICameraDevice` for
-* `getStreamSources`). Richer orchestration (enable/disable with
-* integration plumbing, bulk updates) stays in the `device-manager` cap;
-* `device-ops` is the per-device primitive the device-manager routes to.
-*/
-var StreamSourceEntrySchema$1 = object({
-	id: string(),
-	label: string(),
-	protocol: _enum([
-		"rtsp",
-		"rtmp",
-		"annexb",
-		"http-mjpeg",
-		"webrtc",
-		"custom"
-	]),
-	url: string().optional(),
-	resolution: object({
-		width: number(),
-		height: number()
-	}).optional(),
-	fps: number().optional(),
-	bitrate: number().optional(),
-	codec: string().optional(),
-	profileHint: CamProfileSchema.optional(),
-	sdp: string().optional()
-});
-var ConfigEntrySchema$1 = object({
-	key: string(),
-	value: unknown()
-});
-var RawStateResultSchema = object({
-	/** Originating provider id, e.g. 'homeassistant' | 'reolink' | 'hikvision'. */
-	source: string(),
-	/** Opaque, DISPLAY-SAFE upstream blob (no secrets/PII). */
-	data: record(string(), unknown())
-});
-method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema$1)), method(object({
-	deviceId: number(),
-	values: record(string(), unknown())
-}), _void(), { kind: "mutation" }), method(object({
-	deviceId: number(),
-	action: string().min(1),
-	input: unknown()
-}), unknown(), { kind: "mutation" }), method(object({ deviceId: number() }), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), unknown().nullable()), method(object({ deviceId: number() }), RawStateResultSchema.nullable(), { auth: "protected" });
-/**
 * camera-credentials — device-scoped cap exposing the camera's network
 * + auth surface in a vendor-neutral shape.
 *
@@ -19238,6 +19504,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"metricsProvider.dumpHeapSnapshot": {
+		capName: "metrics-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"metricsProvider.getAddonStats": {
 		capName: "metrics-provider",
 		capScope: "system",
@@ -19694,6 +19966,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineExecutor.getEngineProvisioning": {
+		capName: "pipeline-executor",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineExecutor.getGlobalPipelineConfig": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -19898,6 +20176,18 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getCameraStatus": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"pipelineOrchestrator.getCameraStatuses": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getCameraStepOverrides": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -19982,6 +20272,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setAgentMaxCameras": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.setCameraPipelineForAgent": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -21481,30 +21777,6 @@ object({
 	bootAttempts: number(),
 	schemaVersion: literal(1)
 });
-/**
-* Promise-based timer helpers — used everywhere the codebase needs to
-* wait, back off, or schedule a retry. Before these helpers landed, each
-* call site re-implemented `new Promise(r => setTimeout(r, ms))` inline,
-* with subtle variations (some swallowing cancellation, some not). Two
-* shapes cover every observed use case:
-*
-*  - {@link sleep} for a plain, uncancellable wait — the default choice.
-*  - {@link sleepCancellable} for a wait that wakes early when an
-*    abort signal trips, used by long-running pollers whose teardown
-*    must stop a pending backoff promptly.
-*/
-/**
-* Resolve after `ms` milliseconds. Never rejects, never cancels. The
-* sleep cannot be interrupted; for a wakeable variant use
-* {@link sleepCancellable}.
-*
-* `ms <= 0` resolves on the next microtask via `setTimeout(0)`, which
-* still gives the event loop a chance to drain — useful for breaking
-* up tight async loops without changing call-site semantics.
-*/
-function sleep$1(ms) {
-	return new Promise((resolve) => setTimeout(resolve, Math.max(0, ms)));
-}
 //#endregion
 //#region src/pipeline-resolver.ts
 function applyStepPatch(base, patch) {
@@ -22012,7 +22284,10 @@ var StoredAgentAddonConfigSchema = object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 });
-var StoredAgentPipelineSettingsSchema = object({ addonDefaults: record(string(), StoredAgentAddonConfigSchema).readonly() });
+var StoredAgentPipelineSettingsSchema = object({
+	addonDefaults: record(string(), StoredAgentAddonConfigSchema).readonly(),
+	maxCameras: number().int().nonnegative().nullable().default(null)
+});
 var AgentSettingsMapSchema = record(string(), StoredAgentPipelineSettingsSchema);
 var StoredCameraStepOverridePatchSchema = object({
 	enabled: boolean().optional(),
@@ -22057,10 +22332,26 @@ function computeCapacityScore(load) {
 	return load.attachedCameras * Math.max(load.avgInferenceFps, 0) + Math.max(load.queueDepthTotal, 0);
 }
 /**
+* Returns true when the node has remaining capacity.
+* A node is eligible iff `cap` is unlimited (null/absent/<=0) OR
+* its `attachedCameras` count is strictly less than the cap.
+* Pins count toward the cap via `attachedCameras`.
+*/
+function isEligible(node, caps) {
+	const cap = caps?.[node.nodeId];
+	if (cap === null || cap === void 0 || cap <= 0) return true;
+	return node.attachedCameras < cap;
+}
+/**
 * Run the two-level camera balancer.
 *
-* L1 (manual affinity): if `preferredAgent` names an online node, return it.
-* L2 (capacity): compute capacity scores and pick the lowest.
+* L1 (manual affinity): if `preferredAgent` names an online node AND that
+* node is under its `maxCameras` cap, return it. If the node is online but at
+* or over cap, return `{kind:'pending'}` — a pinned camera is never silently
+* over-assigned.
+*
+* L2 (capacity): filter to eligible nodes and pick the lowest capacity score.
+* If all nodes are at/over cap, return `{kind:'pending'}`.
 *
 * Returns `null` when no runners are online. The orchestrator decides how to
 * react — typically by logging and deferring the assignment until a runner
@@ -22069,19 +22360,32 @@ function computeCapacityScore(load) {
 function balance(input) {
 	const online = input.nodes.filter((n) => n.nodeId.length > 0);
 	if (online.length === 0) return null;
+	const eligible = online.filter((n) => isEligible(n, input.nodeCaps));
 	if (input.preferredAgent) {
-		const match = online.find((n) => n.nodeId === input.preferredAgent);
-		if (match) return {
-			agentNodeId: match.nodeId,
-			reason: "manual",
-			score: computeCapacityScore(match)
-		};
+		const pinnedOnline = online.find((n) => n.nodeId === input.preferredAgent);
+		if (pinnedOnline) {
+			if (eligible.some((n) => n.nodeId === pinnedOnline.nodeId)) return {
+				kind: "assigned",
+				agentNodeId: pinnedOnline.nodeId,
+				reason: "manual",
+				score: computeCapacityScore(pinnedOnline)
+			};
+			return {
+				kind: "pending",
+				reason: "over-cap"
+			};
+		}
 	}
-	const best = online.map((node) => ({
+	if (eligible.length === 0) return {
+		kind: "pending",
+		reason: "over-cap"
+	};
+	const best = eligible.map((node) => ({
 		node,
 		score: computeCapacityScore(node)
 	})).toSorted((a, b) => a.score - b.score)[0];
 	return {
+		kind: "assigned",
 		agentNodeId: best.node.nodeId,
 		reason: "capacity",
 		score: best.score
@@ -22500,6 +22804,139 @@ var PipelineWatchdog = class {
 	}
 };
 //#endregion
+//#region src/camera-status/compose-camera-status.ts
+function mapAssignment(input) {
+	return {
+		detectionNodeId: input.detectionNodeId,
+		decoderNodeId: input.decoderNodeId,
+		audioNodeId: input.audioNodeId,
+		pinned: {
+			detection: input.pinned.detection,
+			decoder: input.pinned.decoder,
+			audio: input.pinned.audio
+		},
+		reasons: {
+			detection: input.reasons.detection,
+			decoder: input.reasons.decoder,
+			audio: input.reasons.audio
+		}
+	};
+}
+function mapSource(sourceResult) {
+	if (sourceResult === null) return { streams: [] };
+	return { streams: sourceResult.streams.map((s) => ({
+		camStreamId: s.camStreamId,
+		codec: s.codec,
+		width: s.width,
+		height: s.height,
+		fps: s.fps,
+		kind: s.kind
+	})) };
+}
+function mapBroker(brokerResult) {
+	if (brokerResult === null) return null;
+	return {
+		profiles: brokerResult.profiles.map((p) => ({
+			profile: p.profile,
+			status: p.status,
+			codec: p.codec,
+			width: p.width,
+			height: p.height,
+			subscribers: p.subscribers,
+			inFps: p.inFps,
+			outFps: p.outFps
+		})),
+		webrtcSessions: brokerResult.webrtcSessions,
+		rtspRestream: brokerResult.rtspRestream
+	};
+}
+function mapDecoderShm(shm) {
+	return {
+		framesWritten: shm.framesWritten,
+		getFrameHits: shm.getFrameHits,
+		getFrameMisses: shm.getFrameMisses,
+		budgetMb: shm.budgetMb
+	};
+}
+function mapDecoder(decoderResult) {
+	if (decoderResult === null) return null;
+	return {
+		nodeId: decoderResult.nodeId,
+		formats: [...decoderResult.formats],
+		sessionCount: decoderResult.sessionCount,
+		shm: mapDecoderShm(decoderResult.shm)
+	};
+}
+function mapMotion(motionResult) {
+	if (motionResult === null) return null;
+	return {
+		enabled: motionResult.enabled,
+		fps: motionResult.fps
+	};
+}
+function mapProvisioning(p) {
+	if (p.error !== void 0) return {
+		state: p.state,
+		error: p.error
+	};
+	return { state: p.state };
+}
+function mapDetection(detectionResult) {
+	if (detectionResult === null) return null;
+	const phase = detectionResult.phase;
+	return {
+		nodeId: detectionResult.nodeId,
+		engine: {
+			backend: detectionResult.engine.backend,
+			device: detectionResult.engine.device
+		},
+		phase,
+		configuredFps: detectionResult.configuredFps,
+		actualFps: detectionResult.actualFps,
+		queueDepth: detectionResult.queueDepth,
+		avgInferenceMs: detectionResult.avgInferenceMs,
+		provisioning: mapProvisioning(detectionResult.provisioning)
+	};
+}
+function mapAudio(audioResult) {
+	if (audioResult === null) return null;
+	return {
+		nodeId: audioResult.nodeId,
+		enabled: audioResult.enabled
+	};
+}
+function mapRecording(recordingResult) {
+	if (recordingResult === null) return null;
+	return {
+		mode: recordingResult.mode,
+		active: recordingResult.active,
+		storageBytes: recordingResult.storageBytes
+	};
+}
+/**
+* Pure function that composes a `CameraStatus` from per-stage fetch results.
+*
+* - `assignment` is always built from orchestrator-local data (never null).
+* - `source` always present: defaults to `{ streams: [] }` when sourceResult is null.
+* - Every other block is null when its stage result is null (graceful degradation).
+* - `fetchedAt` is stamped exactly as provided — never calls `Date.now()`.
+* - No mutation of the input.
+*/
+function composeCameraStatus(input) {
+	return {
+		deviceId: input.deviceId,
+		assignment: mapAssignment(input),
+		source: mapSource(input.sourceResult),
+		broker: mapBroker(input.brokerResult),
+		decoder: mapDecoder(input.decoderResult),
+		motion: mapMotion(input.motionResult),
+		detection: mapDetection(input.detectionResult),
+		audio: mapAudio(input.audioResult),
+		recording: mapRecording(input.recordingResult),
+		fetchedAt: input.fetchedAt
+	};
+}
+//#endregion
 //#region src/index.ts
 var PHASE_MODE_VALUES = new Set([
 	"disabled",
@@ -23257,8 +23694,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 					});
 					return {
 						success: true,
-						agentNodeId: "",
-						reason: "capacity"
+						kind: "pending"
 					};
 				}
 			}
@@ -23268,14 +23704,22 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		const preferredAgent = typeof pipelinePin === "string" && pipelinePin !== "auto" ? pipelinePin : legacyPreferred;
 		const decision = balance({
 			nodes: await this.collectAgentLoad({ onlyEnabled: true }),
-			preferredAgent
+			preferredAgent,
+			nodeCaps: this.buildNodeCaps()
 		});
-		const targetNodeId = decision?.agentNodeId ?? await this.localRunnerNodeId();
-		if (!targetNodeId) throw new Error(`dispatchCamera: no runner available for ${runnerConfig.deviceId}`);
+		if (!decision) throw new Error(`dispatchCamera: no runner available for ${runnerConfig.deviceId}`);
+		if (decision.kind === "pending") {
+			this.ctx.logger.warn("camera left pending — all nodes at maxCameras", { tags: { deviceId: runnerConfig.deviceId } });
+			return {
+				success: true,
+				kind: "pending"
+			};
+		}
+		const targetNodeId = decision.agentNodeId;
 		await this.attachOn(targetNodeId, runnerConfig);
 		if (targetNodeId === this.localNodeId) this.pipelineWatchdog?.register(this.buildWatchdogCamera(runnerConfig, String(runnerConfig.deviceId)));
-		const reason = decision?.reason ?? "capacity";
-		const pinned = decision?.reason === "manual";
+		const reason = decision.reason;
+		const pinned = decision.reason === "manual";
 		this.recordAssignment(runnerConfig.deviceId, targetNodeId, reason, pinned);
 		const decoderNodeId = await this.resolveDecoderNode(runnerConfig.deviceId, targetNodeId);
 		this.ctx.logger.info("dispatchCamera", {
@@ -23285,12 +23729,13 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 			},
 			meta: {
 				reason,
-				score: decision?.score ?? "n/a",
+				score: decision.score,
 				decoderNodeId
 			}
 		});
 		return {
 			success: true,
+			kind: "assigned",
 			agentNodeId: targetNodeId,
 			reason
 		};
@@ -23364,10 +23809,13 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		if (cached) {
 			const decision = balance({
 				nodes: await this.collectAgentLoad({ onlyEnabled: true }),
-				preferredAgent: null
+				preferredAgent: null,
+				nodeCaps: this.buildNodeCaps()
 			});
-			const targetNodeId = decision?.agentNodeId ?? await this.localRunnerNodeId();
-			if (targetNodeId) {
+			if (!decision) this.ctx.logger.warn("unassignPipeline: no runner available, leaving unassigned", { tags: { deviceId: input.deviceId } });
+			else if (decision.kind === "pending") this.ctx.logger.warn("camera left pending — all nodes at maxCameras", { tags: { deviceId: input.deviceId } });
+			else {
+				const targetNodeId = decision.agentNodeId;
 				if (current && current.agentNodeId !== targetNodeId) await this.detachOn(current.agentNodeId, input.deviceId).catch((err) => {
 					const msg = errMsg(err);
 					this.ctx.logger.debug("unassignPipeline detach-old failed", {
@@ -23376,7 +23824,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 					});
 				});
 				if (!current || current.agentNodeId !== targetNodeId) await this.attachOn(targetNodeId, cached);
-				const reason = decision?.reason === "manual" ? "capacity" : decision?.reason ?? "capacity";
+				const reason = decision.reason === "manual" ? "capacity" : decision.reason;
 				this.recordAssignment(input.deviceId, targetNodeId, reason, false);
 				this.ctx.logger.info("unassignPipeline: re-dispatched via auto", {
 					tags: {
@@ -23387,7 +23835,6 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				});
 				return { success: true };
 			}
-			this.ctx.logger.warn("unassignPipeline: no runner available, leaving unassigned", { tags: { deviceId: input.deviceId } });
 		}
 		if (current) {
 			await this.detachOn(current.agentNodeId, input.deviceId).catch((err) => {
@@ -23405,15 +23852,21 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 	async rebalance() {
 		if (!this.ctx) throw new Error("PipelineOrchestrator: rebalance called before initialize");
 		const loads = await this.collectAgentLoad({ onlyEnabled: true });
+		const nodeCaps = this.buildNodeCaps();
 		let migrated = 0;
 		for (const [deviceId, config] of this.cameraConfigs) {
 			const current = this.assignments.get(deviceId);
 			if (current?.pinned) continue;
 			const decision = balance({
 				nodes: loads,
-				preferredAgent: await this.readPreferredAgent(deviceId)
+				preferredAgent: await this.readPreferredAgent(deviceId),
+				nodeCaps
 			});
 			if (!decision) continue;
+			if (decision.kind === "pending") {
+				this.ctx.logger.warn("camera left pending — all nodes at maxCameras", { tags: { deviceId } });
+				continue;
+			}
 			if (current && current.agentNodeId === decision.agentNodeId) continue;
 			if (current) await this.detachOn(current.agentNodeId, deviceId).catch((err) => {
 				const msg = errMsg(err);
@@ -23551,15 +24004,6 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 			nodeId
 		});
 	}
-	async localRunnerNodeId() {
-		const api = this.ctx.api;
-		if (!api) return null;
-		try {
-			return (await api.pipelineRunner.getLocalLoad.query({ nodeId: this.localNodeId }))?.nodeId ?? this.localNodeId;
-		} catch {
-			return this.localNodeId;
-		}
-	}
 	/**
 	* Enumerate every runner-capable node currently known (populated via
 	* AgentOnline/AgentOffline events). Used to populate the `enabledNodes`
@@ -23714,6 +24158,18 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 			return null;
 		}
 	}
+	/**
+	* Build a per-node camera cap map from the persisted agent settings.
+	* Returns `null` for nodes where `maxCameras` is null (unlimited).
+	* Used by every `balance()` call so the balancer can honour operator-set
+	* per-node maximums without polling the store on each decision.
+	*/
+	buildNodeCaps() {
+		const blob = this.agentSettingsState.get();
+		const caps = {};
+		for (const [nodeId, settings] of Object.entries(blob)) caps[nodeId] = settings.maxCameras ?? null;
+		return caps;
+	}
 	async readAudioNodePin(deviceId) {
 		if (!this.ctx?.settings) return null;
 		try {
@@ -23856,13 +24312,19 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		for (const { deviceId, config } of affected) {
 			const decision = balance({
 				nodes: loads,
-				preferredAgent: null
+				preferredAgent: null,
+				nodeCaps: this.buildNodeCaps()
 			});
 			if (!decision) {
 				this.ctx.logger.error("Failover: no online runner", { tags: { deviceId } });
 				this.assignments.delete(deviceId);
 				continue;
 			}
+			if (decision.kind === "pending") {
+				this.ctx.logger.warn("camera left pending — all nodes at maxCameras", { tags: { deviceId } });
+				this.assignments.delete(deviceId);
+				continue;
+			}
 			try {
 				await this.attachOn(decision.agentNodeId, config);
 				this.recordAssignment(deviceId, decision.agentNodeId, "failover", false);
@@ -24342,7 +24804,10 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 	}
 	async setAgentAddonDefaults(input) {
 		let existing = (await this.readAgentSettingsMap())[input.agentNodeId];
-		if (!existing) existing = await this.seedAgentSettingsFromCatalog(input.agentNodeId) ?? void 0;
+		if (!existing) {
+			await this.seedAgentSettingsFromCatalog(input.agentNodeId);
+			existing = (await this.readAgentSettingsMap())[input.agentNodeId];
+		}
 		if (!existing) await this.writeAgentSettings(input.agentNodeId, { addonDefaults: { ...input.defaults } });
 		else await this.writeAgentSettings(input.agentNodeId, {
 			...existing,
@@ -24380,6 +24845,22 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 			removed: true
 		};
 	}
+	async setAgentMaxCameras(input) {
+		const existing = (await this.readAgentSettingsMap())[input.agentNodeId];
+		const next = existing ? {
+			...existing,
+			maxCameras: input.maxCameras
+		} : {
+			addonDefaults: {},
+			maxCameras: input.maxCameras
+		};
+		await this.writeAgentSettings(input.agentNodeId, next);
+		this.ctx.logger.info("agentSettings.maxCameras updated", {
+			tags: { nodeId: input.agentNodeId },
+			meta: { maxCameras: input.maxCameras }
+		});
+		return { success: true };
+	}
 	async getCameraSettings(input) {
 		return (await this.readCameraSettingsMap())[String(input.deviceId)] ?? null;
 	}
@@ -24509,6 +24990,204 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		this.ctx.logger.info("template deleted", { meta: { templateId: input.id } });
 		return { success: true };
 	}
+	/**
+	* Races a promise against a timeout. Returns `null` on timeout OR rejection.
+	* Never throws — individual stage failures become `null` in the aggregate.
+	*
+	* @param p   The stage fetch promise.
+	* @param ms  Timeout in milliseconds.
+	*/
+	boundedStage(p, ms) {
+		let timer;
+		const timeout = new Promise((resolve) => {
+			timer = setTimeout(() => resolve(null), ms);
+		});
+		return Promise.race([p, timeout]).catch(() => null).finally(() => {
+			if (timer !== void 0) clearTimeout(timer);
+		});
+	}
+	/**
+	* Server-composed aggregated status for a single camera.
+	*
+	* Fans out in parallel (bounded, per-stage graceful degradation) to
+	* broker / decoder / motion / detection / audio / recording source caps
+	* via `ctx.api`. A stage whose source errors or times out becomes `null`
+	* in the returned payload — one slow agent never breaks the whole call.
+	*/
+	async getCameraStatus(input) {
+		const { deviceId } = input;
+		const api = this.ctx.api;
+		const STAGE_TIMEOUT_MS = 3e3;
+		const pipelineAssignment = this.assignments.get(deviceId) ?? null;
+		const detectionNodeId = pipelineAssignment?.agentNodeId ?? null;
+		const decoderPinRaw = (api ? await this.ctx.settings?.readDeviceStore(deviceId).catch(() => ({})) ?? {} : {})["decoderNodeId"];
+		const decoderPinned = typeof decoderPinRaw === "string" && decoderPinRaw !== "auto";
+		const decoderNodeId = detectionNodeId ? await this.resolveDecoderNode(deviceId, detectionNodeId).catch(() => null) : null;
+		const audioAssignment = this.audioAssignments.get(deviceId) ?? null;
+		const audioNodeId = audioAssignment?.nodeId ?? null;
+		const audioPinned = audioAssignment?.pinned ?? false;
+		const pinned = {
+			detection: pipelineAssignment?.pinned ?? false,
+			decoder: decoderPinned,
+			audio: audioPinned
+		};
+		const reasons = {
+			detection: pipelineAssignment?.reason,
+			decoder: decoderPinned ? "manual" : "co-located",
+			audio: audioPinned ? "manual" : void 0
+		};
+		const allSlotsFetch = api ? api.streamBroker.listAllProfileSlots.query() : null;
+		const sourceFetch = api && allSlotsFetch ? this.boundedStage(allSlotsFetch.then((slots) => {
+			return { streams: slots.filter((s) => s.deviceId === deviceId).map((s) => ({
+				camStreamId: s.sourceCamStreamId ?? s.brokerId,
+				codec: s.codec ?? "",
+				width: s.resolution?.width ?? 0,
+				height: s.resolution?.height ?? 0,
+				fps: 0,
+				kind: s.profile
+			})) };
+		}), STAGE_TIMEOUT_MS) : Promise.resolve(null);
+		const WEBRTC_KINDS = new Set([
+			"webrtc-browser",
+			"webrtc-mobile",
+			"webrtc-whep"
+		]);
+		const brokerFetch = api && allSlotsFetch ? this.boundedStage(allSlotsFetch.then(async (slots) => {
+			const deviceSlots = slots.filter((s) => s.deviceId === deviceId);
+			if (deviceSlots.length === 0) return {
+				profiles: [],
+				webrtcSessions: 0,
+				rtspRestream: false
+			};
+			const [statsAndClients, rtspEntry] = await Promise.all([Promise.all(deviceSlots.map(async (slot) => {
+				return {
+					slot,
+					stats: await api.streamBroker.getBrokerStats.query({ brokerId: slot.brokerId }).catch(() => null),
+					clients: await api.streamBroker.listClients.query({ brokerId: slot.brokerId }).catch(() => null)
+				};
+			})), api.streamBroker.getAllRtspEntries.query({}).catch(() => null)]);
+			return {
+				profiles: statsAndClients.map(({ slot, stats, clients }) => ({
+					profile: slot.profile,
+					status: slot.status,
+					codec: stats?.codec ?? slot.codec ?? "",
+					width: slot.resolution?.width ?? 0,
+					height: slot.resolution?.height ?? 0,
+					subscribers: clients?.encodedSubscribers ?? 0,
+					inFps: stats?.inputFps ?? 0,
+					outFps: stats?.decodeFps ?? 0
+				})),
+				webrtcSessions: statsAndClients.reduce((total, { clients }) => {
+					if (!clients) return total;
+					return total + clients.encoded.filter((c) => WEBRTC_KINDS.has(c.attribution.kind)).length;
+				}, 0),
+				rtspRestream: rtspEntry?.some((e) => {
+					return e.brokerId.split("/")[0] === String(deviceId) && e.enabled;
+				}) ?? false
+			};
+		}), STAGE_TIMEOUT_MS) : Promise.resolve(null);
+		const decoderFetch = decoderNodeId ? Promise.resolve({
+			nodeId: decoderNodeId,
+			formats: [],
+			sessionCount: 0,
+			shm: {
+				framesWritten: 0,
+				getFrameHits: 0,
+				getFrameMisses: 0,
+				budgetMb: 0
+			}
+		}) : Promise.resolve(null);
+		const motionResult = (() => {
+			const config = this.cameraConfigs.get(deviceId);
+			if (!config) return null;
+			return {
+				enabled: config.motionSources.includes("analyzer") || config.motionSources.includes("onboard"),
+				fps: config.motionFps
+			};
+		})();
+		const detectionFetch = api && detectionNodeId ? this.boundedStage(Promise.all([api.pipelineExecutor.getEngineProvisioning.query({ nodeId: detectionNodeId }).catch(() => null), api.pipelineExecutor.getSelectedEngine.query({ nodeId: detectionNodeId }).catch(() => null)]).then(async ([provisioning, engine]) => {
+			const metrics = await api.pipelineRunner.getCameraMetrics.query({
+				deviceId,
+				nodeId: detectionNodeId
+			}).catch(() => null);
+			const phase = (() => {
+				const p = metrics?.phase;
+				if (p === "active") return "active";
+				if (p === "idle") return "idle";
+				return "watching";
+			})();
+			return {
+				nodeId: detectionNodeId,
+				engine: {
+					backend: engine?.backend ?? "",
+					device: engine?.device ?? ""
+				},
+				phase,
+				configuredFps: metrics?.configuredFps ?? 0,
+				actualFps: metrics?.actualFps ?? 0,
+				queueDepth: metrics?.queueDepth ?? 0,
+				avgInferenceMs: metrics?.avgInferenceTimeMs ?? 0,
+				provisioning: {
+					state: provisioning?.state ?? "idle",
+					...provisioning?.error !== void 0 ? { error: provisioning.error } : {}
+				}
+			};
+		}), STAGE_TIMEOUT_MS) : Promise.resolve(null);
+		const audioResult = audioNodeId ? {
+			nodeId: audioNodeId,
+			enabled: true
+		} : null;
+		function isRecordingStatus(v) {
+			return v !== null && typeof v === "object" && "activeMode" in v && (v.activeMode === "off" || v.activeMode === "continuous" || v.activeMode === "events") && "enabled" in v && typeof v.enabled === "boolean" && "storageBytes" in v && typeof v.storageBytes === "number";
+		}
+		const recordingFetch = api ? this.boundedStage(api.recording.getStatus.query({ deviceId }).then((rawStatus) => {
+			if (!isRecordingStatus(rawStatus)) return null;
+			return {
+				mode: rawStatus.activeMode,
+				active: rawStatus.enabled && rawStatus.activeMode !== "off",
+				storageBytes: rawStatus.storageBytes
+			};
+		}).catch(() => null), STAGE_TIMEOUT_MS) : Promise.resolve(null);
+		const [sourceResult, brokerResult, decoderResult, detectionResult, recordingResult] = await Promise.all([
+			sourceFetch,
+			brokerFetch,
+			decoderFetch,
+			detectionFetch,
+			recordingFetch
+		]);
+		return composeCameraStatus({
+			deviceId,
+			fetchedAt: Date.now(),
+			detectionNodeId,
+			decoderNodeId,
+			audioNodeId,
+			pinned,
+			reasons,
+			sourceResult,
+			brokerResult,
+			decoderResult,
+			motionResult,
+			detectionResult,
+			audioResult,
+			recordingResult
+		});
+	}
+	/**
+	* Server-composed aggregated status for multiple cameras in one call.
+	*
+	* `deviceIds` defaults to all cameras currently tracked by the
+	* orchestrator's assignment map when omitted.
+	*
+	* v1: `Promise.all` over per-device composition (no concurrency cap).
+	* Note: for large fleets (hundreds of cameras) this may fan out many
+	* parallel calls. A concurrency limiter (p-limit / semaphore) should be
+	* added if latency measurements show it's necessary — deliberately
+	* deferred per the YAGNI constraint in the spec.
+	*/
+	async getCameraStatuses(input) {
+		const ids = input.deviceIds !== void 0 && input.deviceIds.length > 0 ? input.deviceIds : [...this.assignments.keys()];
+		return Promise.all(ids.map((deviceId) => this.getCameraStatus({ deviceId })));
+	}
 	/** Read the templates map from the addon store via the durable handle. */
 	async readTemplatesMap() {
 		const raw = await this.templatesState.get();
@@ -24539,7 +25218,11 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 			return;
 		}
 		const all = await this.readAgentSettingsMap();
-		all[nodeId] = settings;
+		const existing = all[nodeId];
+		all[nodeId] = {
+			addonDefaults: settings.addonDefaults,
+			maxCameras: settings.maxCameras !== void 0 ? settings.maxCameras ?? null : existing?.maxCameras ?? null
+		};
 		await this.agentSettingsState.set(all);
 	}
 	/** Read the `cameraSettings` map (keyed on `deviceId` as string) via the durable handle. */
@@ -24749,12 +25432,15 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 			}
 			let agent = (await this.readAgentSettingsMap())[nodeId];
 			if (!agent || Object.keys(agent.addonDefaults ?? {}).length === 0) {
-				const seeded = await this.seedAgentSettingsFromCatalog(nodeId);
-				if (!seeded) {
+				if (!await this.seedAgentSettingsFromCatalog(nodeId)) {
 					await sleep$1(2e3);
 					continue;
 				}
-				agent = seeded;
+				agent = (await this.readAgentSettingsMap())[nodeId];
+			}
+			if (!agent) {
+				await sleep$1(2e3);
+				continue;
 			}
 			const engine = await this.readDetectionPipelineEngine(nodeId) ?? catalog.selectedEngine;
 			return {
@@ -25661,7 +26347,8 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		};
 		let dispatchedNodeId = null;
 		try {
-			dispatchedNodeId = (await this.dispatchCamera(runnerConfig)).agentNodeId;
+			const result = await this.dispatchCamera(runnerConfig);
+			if (result.kind === "assigned") dispatchedNodeId = result.agentNodeId;
 		} catch (err) {
 			const msg = errMsg(err);
 			log.error("dispatchCamera failed", { meta: { error: msg } });