@camstack/addon-pipeline-orchestrator 1.1.49 → 1.1.51

package/dist/index.js

@@ -29,7 +29,7 @@ node_fs = __toESM(node_fs);
 let node_path = require("node:path");
 node_path = __toESM(node_path);
 let node_url = require("node:url");
-//#region ../types/dist/event-category-H4AVePnn.mjs
+//#region ../types/dist/event-category-D4HJq7Mw.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -182,6 +182,11 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/** Runner-sampled scrub thumbnail (~1/5 s/camera). Telemetry (D8): a lost
 	*  thumb is a scrub gap the recorder's keyframe backfill covers. */
 	EventCategory["RecordingThumbSampled"] = "recording.thumb-sampled";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
 	EventCategory["DetectionEvent"] = "detection.event";
 	EventCategory["SessionTrackNew"] = "session.track.new";
 	EventCategory["SessionTrackExpired"] = "session.track.expired";
@@ -471,6 +476,25 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
 	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaKey?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
 	* Fired by `addon-post-analysis` whenever a gallery face row changes:
 	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
 	* `'unassigned'` its identity link changed, `'deleted'` the row was
@@ -5209,6 +5233,25 @@ function _instanceof(cls, params = {}) {
 	};
 	return inst;
 }
+//#endregion
+//#region ../../node_modules/zod/v4/classic/compat.js
+/** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
+var ZodIssueCode = {
+	invalid_type: "invalid_type",
+	too_big: "too_big",
+	too_small: "too_small",
+	invalid_format: "invalid_format",
+	not_multiple_of: "not_multiple_of",
+	unrecognized_keys: "unrecognized_keys",
+	invalid_union: "invalid_union",
+	invalid_key: "invalid_key",
+	invalid_element: "invalid_element",
+	invalid_value: "invalid_value",
+	custom: "custom"
+};
+/** @deprecated Do not use. Stub definition, only included for zod-to-json-schema compatibility. */
+var ZodFirstPartyTypeKind;
+ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 Object.fromEntries([
 	{
 		id: "overview",
@@ -6494,6 +6537,19 @@ function scopeKey(scope) {
 		case "device": return `device:${scope.deviceId}`;
 	}
 }
+/**
+* Producer transition order within ONE generation: `starting → ready →
+* down`. Used by `hydrate` to accept only forward moves for
+* same-generation snapshot records (a snapshot can be ahead of a lost
+* delta, never behind it, within one producer generation).
+*/
+function stateRank(state) {
+	switch (state) {
+		case "starting": return 0;
+		case "ready": return 1;
+		case "down": return 2;
+	}
+}
 function scopesEqual(a, b) {
 	if (a.type !== b.type) return false;
 	if (a.type === "global" || b.type === "global") return true;
@@ -6544,43 +6600,70 @@ var ReadinessRegistry = class {
 		return Array.from(this.snapshot.values());
 	}
 	/**
-	* Hydrate the snapshot from an authoritative source. Entries already
-	* present locally are skipped — live deltas (received via the event
-	* bus subscription) always take precedence over the snapshot. For
-	* each newly hydrated entry, a one-shot transition is dispatched to
-	* matching subscriptions so pending `awaitReady` callers unblock
-	* without having to wait for a fresh event.
+	* Hydrate the snapshot from an authoritative source — a RECONCILE, not
+	* an add-only merge (D8: readiness events are telemetry and may be
+	* lost; the on-reconnect/periodic snapshot re-pull is the repair path,
+	* so it MUST be able to advance a stale record — the 2026-07-17
+	* "still awaiting platform-probe forever" wedge was this method
+	* skipping every already-seen key).
 	*
-	* Local `epoch` is reset to 1 per entry — consumer-side epoch is
-	* derived from observed generation transitions, so this mirrors the
-	* value that would have been assigned had the consumer observed the
-	* first `ready` event directly.
+	*  - **Unseen keys** are added (epoch 1 — mirrors the value the
+	*    consumer would have derived from the first observed `ready`).
+	*  - **Existing keys** are UPDATED when the authoritative record
+	*    carries a different generation (producer restart / synthetic-down
+	*    superseded — epoch bumps on a new-generation `ready`, mirroring
+	*    `ingest`), or a FORWARD state move within the same generation
+	*    (`starting → ready → down`; within one producer generation a
+	*    snapshot can only be ahead of a lost delta, never behind it).
+	*  - **Never a same-generation regress** — a snapshot pulled just
+	*    before a live delta landed must not un-ready a record (the next
+	*    reconcile round converges it anyway).
+	*  - **Never a record this process is authoritative for** — node-scoped
+	*    records for our own nodeId, and device/global records we emitted,
+	*    keep local truth (an authority's stale copy of OUR record must
+	*    not regress us).
+	*
+	* Every applied entry dispatches a one-shot transition to matching
+	* subscriptions so pending `awaitReady` callers unblock without having
+	* to wait for a fresh event.
 	*/
 	hydrate(records) {
 		const now = this.now();
 		for (const record of records) {
 			const key = readinessKey(record.capName, record.scope);
-			if (this.snapshot.has(key)) continue;
+			const prev = this.snapshot.get(key) ?? null;
+			let epoch;
+			let durationInPrevState;
+			if (prev !== null) {
+				if (this.isLocallyAuthoritative(prev)) continue;
+				const sameGeneration = prev.generation === record.generation;
+				if (sameGeneration && stateRank(record.state) <= stateRank(prev.state)) continue;
+				epoch = !sameGeneration && record.state === "ready" ? prev.epoch + 1 : prev.epoch;
+				durationInPrevState = Math.max(0, now - prev.lastChange);
+			} else {
+				epoch = 1;
+				durationInPrevState = 0;
+			}
 			const hydrated = {
 				capName: record.capName,
 				scope: record.scope,
 				state: record.state,
 				generation: record.generation,
-				epoch: 1,
+				epoch,
 				lastChange: now,
 				sourceNodeId: record.sourceNodeId
 			};
 			this.snapshot.set(key, hydrated);
-			if (this.logger) this.logger.debug(`readiness: ${record.capName} (${scopeKey(record.scope)}) → ${record.state} (hydrated, gen=${record.generation.slice(0, 6)})`);
+			if (this.logger) this.logger.debug(`readiness: ${record.capName} (${scopeKey(record.scope)}) → ${record.state} (hydrated${prev !== null ? " update" : ""}, gen=${record.generation.slice(0, 6)})`);
 			const transition = {
 				capName: record.capName,
 				scope: record.scope,
 				state: record.state,
-				epoch: 1,
+				epoch,
 				generation: record.generation,
 				sourceNodeId: "hydrated",
 				ts: now,
-				durationInPrevState: 0
+				durationInPrevState
 			};
 			for (const sub of this.subscriptions) {
 				if (sub.capName !== record.capName) continue;
@@ -6593,6 +6676,17 @@ var ReadinessRegistry = class {
 			}
 		}
 	}
+	/**
+	* True when THIS process is the origin authority for `record` — a
+	* snapshot pulled from elsewhere must never overwrite it:
+	*  - node-scoped records whose `scope.nodeId` is our own node id
+	*    (this process — or a child bridged onto our bus — emits them);
+	*  - device/global-scoped records whose latest transition WE emitted.
+	*/
+	isLocallyAuthoritative(record) {
+		if (record.scope.type === "node") return record.scope.nodeId === this.sourceNodeId;
+		return record.sourceNodeId === this.sourceNodeId;
+	}
 	/** Shallow copy of the full snapshot — mainly for diagnostics/tests. */
 	getAll() {
 		return new Map(this.snapshot);
@@ -7679,6 +7773,24 @@ var RecordingRetentionSchema = object({
 	maxSizeGb: number().min(0).optional()
 });
 /**
+* Scrub-thumbnail fidelity preset — the single per-camera selector bundling the
+* sprite tile RESOLUTION + JPEG QUALITY the recorder packs timeline-scrub
+* previews at. Five graduated steps; absent on a config = `standard` (the
+* shipped default, matching `sheet-geometry`/`sheet-composer`).
+*
+* Existing sheets are IMMUTABLE — a changed preset applies to NEW windows only.
+* Each window's index sidecar carries its own tile dims, so a camera whose
+* preset changed over time renders every historical window at the dims it was
+* written with.
+*/
+var ScrubThumbnailPresetSchema = _enum([
+	"minimal",
+	"low",
+	"standard",
+	"high",
+	"max"
+]);
+/**
 * The full per-camera recording intent — the wire shape of a RecordingTarget.
 *
 * `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
@@ -7715,7 +7827,14 @@ var RecordingConfigSchema = object({
 	* derived into bands once via `migrateConfigToBands`.
 	*/
 	bands: array(RecordingBandSchema).optional(),
-	retention: RecordingRetentionSchema.optional()
+	retention: RecordingRetentionSchema.optional(),
+	/**
+	* Per-camera scrub-thumbnail fidelity preset (resolution + JPEG quality for
+	* timeline-scrub sprite previews). Absent = `standard`. Applies to NEW
+	* windows only — existing sheets are immutable, and each window's index
+	* carries its own tile dims so mixed-preset history renders correctly.
+	*/
+	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 });
 /**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
@@ -13348,7 +13467,11 @@ array(ZoneRuleSchema).readonly();
 * Extend the enum here when a new gating consumer comes online (audio
 * gating, alert filtering, …) — no other surface needs to change.
 */
-var ZoneRuleStageEnum = _enum(["motion", "detection"]);
+var ZoneRuleStageEnum = _enum([
+	"motion",
+	"detection",
+	"package"
+]);
 /**
 * Zone rules capability — per-camera CRUD over the {@link ZoneRule}
 * arrays that decide how each pipeline stage uses the polygon zones.
@@ -13392,16 +13515,24 @@ var zoneRulesCapability = {
 		})
 	},
 	/**
-	* Runtime-state slice — both stages mirrored together so consumers
+	* Runtime-state slice — every stage mirrored together so consumers
 	* see one reactive handle (`device.state.zoneRules.value`) instead
-	* of two. Bulk-replace mutations on either stage write the full
-	* `{motion, detection}` shape, so subscribers always get the
+	* of one per stage. Bulk-replace mutations on any stage write the full
+	* `{motion, detection, package}` shape, so subscribers always get the
 	* complete current set. Consumers that only care about one stage
 	* just read the matching property.
+	*
+	* `package` backs the package-drop detector — a package zone is a
+	* `ZoneRule` on the `'package'` stage referencing drawn polygons
+	* (see docs/superpowers/specs/2026-07-17-package-zones-design.md §3.1).
+	* The orchestrator provider that writes this stage lands in a later
+	* slice; until then the mirror carries only `{motion, detection}` and
+	* consumers read `package` as absent (treat as `[]`).
 	*/
 	runtimeState: object({
 		motion: array(ZoneRuleSchema).readonly(),
-		detection: array(ZoneRuleSchema).readonly()
+		detection: array(ZoneRuleSchema).readonly(),
+		package: array(ZoneRuleSchema).readonly()
 	})
 };
 var ProviderStatusSchema = object({
@@ -16650,6 +16781,7 @@ var EventKindIconSchema = _enum([
 	"smoke",
 	"water",
 	"button",
+	"package",
 	"generic"
 ]);
 var EventKindCategorySchema = _enum([
@@ -16657,7 +16789,8 @@ var EventKindCategorySchema = _enum([
 	"audio",
 	"detection",
 	"sensor",
-	"custom"
+	"custom",
+	"package"
 ]);
 var EventKindDescriptorSchema = object({
 	/** Stable kind id (e.g. 'motion', 'person', 'contact'). */
@@ -20514,6 +20647,108 @@ method(object({
 	auth: "admin"
 });
 /**
+* `recordingExport` cap — render a footage time range into a single downloadable
+* MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
+* bounded lifetime with a durable history, auto-expiry, and optional
+* delete-after-download.
+*
+* Like `recording` this is a `scope:'system', mode:'singleton'` cap: the
+* recorder self-gates so exactly ONE node (the designated `recordingNodeId`,
+* default `hub`) registers it. Device-scoped methods carry `deviceId` in their
+* input and dispatch to that single provider; the render runs on the node that
+* owns the footage (no cross-node segment transfer). Download rides the
+* framework addon data-plane. State persists in a DurableState blob (NOT
+* SQLite); history rows survive file deletion for audit.
+*/
+/** Playback-speed multiplier for the render (1 = realtime). */
+var ExportSpeedSchema = number().min(.25).max(32);
+/** Timelapse cadence — sample one source frame per `everyMs`, output at `outputFps`. */
+var ExportTimelapseSchema = object({
+	everyMs: number().int().positive(),
+	outputFps: number().int().min(1).max(60).optional()
+});
+/**
+* Render options. `speed` and `timelapse` are mutually exclusive. `includeAudio`
+* is honoured only for a realtime-ish speed (0.5–2×); timelapse is always
+* silent. `maxLifeMs` bounds how long the finished file is kept;
+* `deleteAfterDownload` removes it shortly after the first complete download.
+*/
+var ExportOptionsSchema = object({
+	speed: ExportSpeedSchema.optional(),
+	timelapse: ExportTimelapseSchema.optional(),
+	includeAudio: boolean(),
+	maxLifeMs: number().int().positive(),
+	deleteAfterDownload: boolean(),
+	title: string().max(200).optional()
+}).superRefine((v, ctx) => {
+	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "speed and timelapse are mutually exclusive",
+		path: ["timelapse"]
+	});
+});
+var ExportStateSchema = _enum([
+	"queued",
+	"rendering",
+	"ready",
+	"failed",
+	"expired",
+	"deleted"
+]);
+/** One export job / history row. */
+var ExportRecordSchema = object({
+	id: string(),
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema,
+	state: ExportStateSchema,
+	/** 0–100 while rendering; null otherwise. */
+	progressPct: number().nullable(),
+	/** File size once ready; null before. */
+	fileBytes: number().nullable(),
+	expiresAt: number(),
+	deleteAfterDownload: boolean(),
+	/** Epoch of the first complete download; null until then. */
+	downloadedAt: number().nullable(),
+	createdAt: number(),
+	/** User id/name that requested the export. */
+	createdBy: string(),
+	/** Failure reason when state is 'failed'; null otherwise. */
+	error: string().nullable()
+});
+/** Candidate download URLs (LAN first, then operator extra hosts). */
+var ExportDownloadSchema = object({
+	url: string(),
+	endpoints: array(string())
+});
+method(object({
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema
+}), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ deviceId: number().optional() }), array(ExportRecordSchema), {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportDownloadSchema, {
+	kind: "query",
+	auth: "protected"
+});
+/**
 * One publishable camera stream as its OWNING PROVIDER describes it — the same
 * payload the (legacy) push `streamBroker.publishCameraStream` carried, minus
 * `deviceId`.
@@ -24437,6 +24672,42 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordingExport.cancelExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.createExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.deleteExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordingExport.getDownloadUrl": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.getExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.listExports": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",
@@ -30518,6 +30789,27 @@ var PIPELINE_EXECUTOR_CAP = "pipeline-executor";
 var PipelineSettingsStore = class PipelineSettingsStore {
 	deps;
 	static CATALOG_CACHE_TTL_MS = 3e4;
+	/**
+	* One reconcile round for {@link awaitExecutorCatalog}: the BOUNDED
+	* registry wait between two authoritative provider probes. Matches the
+	* registry's own "still awaiting" diagnostic cadence.
+	*/
+	static EXECUTOR_RECONCILE_ROUND_MS = 3e4;
+	/**
+	* Pacing between provider probes when the registry claims `ready` but
+	* the provider is not answering yet (stale registry record) — without
+	* it that combination would spin hot.
+	*/
+	static EXECUTOR_READY_PROBE_PACE_MS = 2e3;
+	/**
+	* Round bound for {@link seedAgentSettingsFromCatalog}: seeding is
+	* invoked from event handlers (`handleDetectionPipelineReadiness`) that
+	* must not accumulate unbounded loops across provider flaps — on
+	* exhaustion it returns `null` and the periodic pending-retry sweep /
+	* the next readiness epoch retries. `waitForAgentAndCatalog` keeps the
+	* UNBOUNDED reconcile (cameras are never dispatched with empty steps).
+	*/
+	static SEED_MAX_RECONCILE_ROUNDS = 4;
 	constructor(deps) {
 		this.deps = deps;
 	}
@@ -30784,11 +31076,7 @@ var PipelineSettingsStore = class PipelineSettingsStore {
 	* absent.
 	*/
 	async seedAgentSettingsFromCatalog(nodeId) {
-		await this.deps.acquireCapability(PIPELINE_EXECUTOR_CAP, {
-			type: "node",
-			nodeId
-		});
-		const catalog = await this.getCatalogForAgent(nodeId);
+		const catalog = await this.awaitExecutorCatalog(nodeId, { maxRounds: PipelineSettingsStore.SEED_MAX_RECONCILE_ROUNDS });
 		if (!catalog) return null;
 		const existing = (await this.readAgentSettingsMap())[nodeId];
 		const nextAddonDefaults = seedAgentAddonDefaults(existing?.addonDefaults ?? {}, catalog);
@@ -30892,15 +31180,64 @@ var PipelineSettingsStore = class PipelineSettingsStore {
 		return resolved;
 	}
 	/**
-	* Block until `pipeline-executor` is ready on `nodeId` AND
+	* Loss-proof `pipeline-executor` gate (D8 — reconcile against the
+	* authority, never wait solely on an event).
+	*
+	* Readiness events are telemetry and MAY be lost across process/node
+	* hops (2026-07-17 incident: the agent's executor came back callable
+	* after an update, its `ready` delta never reached the hub registry,
+	* and the former `acquireCapability(…, Infinity)` gate wedged every
+	* dispatch forever). Each round of this loop therefore:
+	*
+	*  1. Probes the PROVIDER itself — `getCatalogForAgent` is a live
+	*     `pipelineExecutor.getSchema` RPC routed to `nodeId` (30s success
+	*     cache). The provider answering IS readiness, whatever the local
+	*     registry believes.
+	*  2. On a miss, falls back to a BOUNDED registry wait
+	*     (`EXECUTOR_RECONCILE_ROUND_MS`) — the event-driven fast path that
+	*     keeps the healthy cold-boot case latency-free (the wait resolves
+	*     the instant the `ready` delta lands). A lost event costs at most
+	*     one round, never forever.
+	*
+	* If the registry claims `ready` but the probe still misses (stale
+	* record for a dead provider), rounds pace at
+	* `EXECUTOR_READY_PROBE_PACE_MS` instead of spinning hot.
+	*
+	* Returns `null` only when `maxRounds` is exhausted (bounded callers)
+	* or the store was disposed mid-wait.
+	*/
+	async awaitExecutorCatalog(nodeId, opts = {}) {
+		const maxRounds = opts.maxRounds ?? Number.POSITIVE_INFINITY;
+		const startedAt = Date.now();
+		for (let round = 1; !this.disposed; round++) {
+			const catalog = await this.getCatalogForAgent(nodeId);
+			if (catalog) return catalog;
+			if (round >= maxRounds) return null;
+			if (round > 1) this.deps.logger.warn("executor reconcile: provider not answering yet — waiting one more round", {
+				tags: { nodeId },
+				meta: {
+					round,
+					elapsedMs: Date.now() - startedAt
+				}
+			});
+			const readyPerRegistry = await this.deps.acquireCapability(PIPELINE_EXECUTOR_CAP, {
+				type: "node",
+				nodeId
+			}, { timeoutMs: PipelineSettingsStore.EXECUTOR_RECONCILE_ROUND_MS }).then(() => true, () => false);
+			if (this.disposed) break;
+			if (readyPerRegistry) await sleep$1(PipelineSettingsStore.EXECUTOR_READY_PROBE_PACE_MS);
+		}
+		return null;
+	}
+	/**
+	* Block until `pipeline-executor` answers on `nodeId` AND
 	* `getCatalogForAgent` returns a non-null catalog AND `agentSettings`
 	* for that node has populated `addonDefaults`.
 	*
-	* `acquireCapability` defaults to infinite wait now — a single call
-	* carries the readiness gate. The thin retry below only handles
-	* the secondary case where the cap is "ready" but a derived call
-	* (getSchema) still returns null due to Moleculer service-registry
-	* propagation lag.
+	* The executor gate is {@link awaitExecutorCatalog} — reconcile-driven
+	* and UNBOUNDED here (cameras must never be dispatched with empty
+	* steps), but it converges as soon as the provider answers even when
+	* every readiness event was lost.
 	*
 	* Smell #20 fix: the retry loop used to be `while (true)` with no exit
 	* — a resolve in flight at addon shutdown would spin against a torn-
@@ -30910,16 +31247,9 @@ var PipelineSettingsStore = class PipelineSettingsStore {
 	* timing (2s backoff, same retry conditions) is unchanged.
 	*/
 	async waitForAgentAndCatalog(nodeId) {
-		await this.deps.acquireCapability(PIPELINE_EXECUTOR_CAP, {
-			type: "node",
-			nodeId
-		});
 		while (!this.disposed) {
-			const catalog = await this.getCatalogForAgent(nodeId);
-			if (!catalog) {
-				await sleep$1(2e3);
-				continue;
-			}
+			const catalog = await this.awaitExecutorCatalog(nodeId);
+			if (!catalog) break;
 			let agent = (await this.readAgentSettingsMap())[nodeId];
 			if (!agent || Object.keys(agent.addonDefaults ?? {}).length === 0) {
 				if (!await this.seedAgentSettingsFromCatalog(nodeId)) {
@@ -31945,7 +32275,8 @@ var RulesArraySchema = array(ZoneRuleSchema);
 */
 var ZoneRulesBlockSchema = object({
 	motion: unknown().optional(),
-	detection: unknown().optional()
+	detection: unknown().optional(),
+	package: unknown().optional()
 }).passthrough();
 var ZoneRulesProvider = class {
 	ctx;