@camstack/addon-pipeline-orchestrator 1.2.207 → 1.2.208

package/dist/index.js

@@ -5391,7 +5391,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-e0RweZzn.mjs
+//#region ../types/dist/sleep-BDR76Ykr.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -7929,7 +7929,7 @@ import { errMsg } from '@camstack/types'
 * Extract a human-readable message from an unknown error value.
 * Replaces the ubiquitous `errMsg(err)` pattern.
 */
-function errMsg(err) {
+function errMsg$1(err) {
 	if (err instanceof Error) return err.message;
 	if (typeof err === "string") return err;
 	return String(err);
@@ -18789,6 +18789,48 @@ var NcAlarmConfigSchema = object({
 	settings: NcAlarmSettingsSchema,
 	coverage: array(NcAlarmModeCoverageSchema)
 });
+/**
+* ONE rule's demand on ONE camera's clip ring.
+*
+* A rule, not a camera: the broker takes the MAX over the asks that reach a
+* camera, so the answer stays a faithful description of the rules and the
+* bounding (the byte budget, the broker's own ceiling) stays where the cost
+* lives. A camera that appears in no ask is being told **nothing** — which is
+* a different thing from never having been told, and only the envelope
+* (`rulesLoaded`) can tell those apart.
+*/
+var NcClipRetentionAskSchema = object({
+	/**
+	* The camera this ask is about. **Absent = every camera**, which is what a
+	* rule with no `conditions.devices` means: it can fire anywhere, so it is
+	* asking everywhere.
+	*/
+	deviceId: number().int().nonnegative().optional(),
+	/** Seconds of history the rule needs held for it. Never zero — a rule that
+	*  needs nothing produces no ask at all. */
+	seconds: number().min(0).max(60),
+	/** The profile the rule cuts from, when it named one. Absent = the cheapest
+	*  assigned, which is what the cut defaults to. */
+	profile: CamProfileSchema.optional(),
+	/** Who is asking — so a retention the operator did not expect names a rule. */
+	ruleId: string(),
+	ruleName: string(),
+	/** Why this many seconds: the rule's own window, or the occupancy ceiling. */
+	reason: _enum(["window", "occupancy"])
+});
+/**
+* The whole answer, with the one bit that keeps absence from reading as zero.
+*
+* `rulesLoaded` is false until the rule ledger has completed a load at least
+* once. A centre that is up but has not read its rules yet answers with an
+* empty ask list that means nothing at all — applying it would drop every
+* camera's ring to zero for the first events after a restart, which is the
+* footage this mechanism exists to keep.
+*/
+var NcClipRetentionPlanSchema = object({
+	rulesLoaded: boolean(),
+	asks: array(NcClipRetentionAskSchema).readonly()
+});
 method(object({}), object({ rules: array(NcRuleSchema) }), { auth: "admin" }), method(object({ ruleId: string() }), object({ rule: NcRuleSchema.nullable() }), { auth: "admin" }), method(object({ rule: NcRuleInputSchema }), object({ rule: NcRuleSchema }), {
 	kind: "mutation",
 	auth: "admin",
@@ -18809,7 +18851,7 @@ method(object({}), object({ rules: array(NcRuleSchema) }), { auth: "admin" }), m
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({}), object({ mutedDeviceIds: array(number().int()).readonly() }), { auth: "admin" }), method(object({
+}), method(object({}), NcClipRetentionPlanSchema, { auth: "admin" }), method(object({}), object({ mutedDeviceIds: array(number().int()).readonly() }), { auth: "admin" }), method(object({
 	deviceId: number().int(),
 	muted: boolean()
 }), object({ success: literal(true) }), {
@@ -35895,6 +35937,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"notificationRules.getClipRetentionAsks": {
+		capName: "notification-rules",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"notificationRules.getConditionCatalog": {
 		capName: "notification-rules",
 		capScope: "system",
@@ -42054,7 +42102,7 @@ var AudioSubscriptionController = class {
 		} catch (err) {
 			this.deps.logger.error("audio re-attach failed", {
 				tags: { deviceId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 		}
 	}
@@ -42165,7 +42213,7 @@ var AudioSubscriptionController = class {
 			this.closeMotionAudioWindow(deviceId, "motion-cooldown-elapsed").catch((err) => {
 				this.deps.logger.warn("lazy audio: cooldown teardown failed", {
 					tags: { deviceId },
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 		}, cooldownMs);
@@ -42184,7 +42232,7 @@ var AudioSubscriptionController = class {
 			this.closeMotionAudioWindow(deviceId, "quiet-window-elapsed").catch((err) => {
 				this.deps.logger.warn("lazy audio: quiet-window teardown failed", {
 					tags: { deviceId },
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 		}, windowMs);
@@ -42355,7 +42403,7 @@ var AudioSubscriptionController = class {
 					meta: {
 						audioNodeId,
 						brokerId: audioBrokerId,
-						error: errMsg(err)
+						error: errMsg$1(err)
 					}
 				});
 			});
@@ -43375,7 +43423,7 @@ var LoadShedController = class LoadShedController {
 		if (await this.tryClusterRelocate(deviceId).catch((err) => {
 			this.deps.logger.warn("Load management: cluster relocate failed", {
 				tags: { deviceId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 			return false;
 		})) {
@@ -43389,7 +43437,7 @@ var LoadShedController = class LoadShedController {
 		this.deps.api()?.pipelineRunner.detachCamera.mutate({ deviceId }).catch((err) => {
 			this.deps.logger.warn("Load management: detachCamera failed", {
 				tags: { deviceId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 		});
 		this.ensureLoadShedResumeTimer();
@@ -43421,7 +43469,7 @@ var LoadShedController = class LoadShedController {
 				tags: { deviceId },
 				meta: {
 					from: currentNode,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 		});
@@ -43464,7 +43512,7 @@ var LoadShedController = class LoadShedController {
 			this.deps.redispatchSingleCamera(deviceId).catch((err) => {
 				this.deps.logger.warn("Load management: auto-resume dispatch failed", {
 					tags: { deviceId },
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 		}
@@ -43625,7 +43673,7 @@ var AgentLoadService = class AgentLoadService {
 			ms,
 			outcome: "failed",
 			load: null,
-			error: errMsg(outcome.error)
+			error: errMsg$1(outcome.error)
 		};
 		return {
 			nodeId,
@@ -44629,7 +44677,7 @@ function warnSampled(deps, deviceId, source, message, meta) {
 function warnUnreachable(deps, deviceId, source, err) {
 	warnSampled(deps, deviceId, source, UNREACHABLE_MESSAGE, {
 		source,
-		error: errMsg(err)
+		error: errMsg$1(err)
 	});
 }
 /**
@@ -45874,6 +45922,89 @@ function sameFeatures(a, b) {
 	return b.every((f) => held.has(f));
 }
 //#endregion
+//#region src/onboard-forwarding-reconcile.ts
+/** The `detectionSources` member that means "this camera's own firmware". */
+var ONBOARD_DETECTION_SOURCE = "onboard";
+/**
+* What an ABSENT `detectionSources` means. `CameraDetectionConfig` declares the
+* field optional and its own contract as "absent is `['pipeline']` all the way
+* down" — the resolver always fills it, so this only covers the hand-built
+* configs, and it reads them the same way the runner does.
+*/
+var DETECTION_SOURCES_WHEN_ABSENT = ["pipeline"];
+function errMsg(err) {
+	return err instanceof Error ? err.message : String(err);
+}
+/**
+* Put the vendor forwarding flag back where `detectionSources` says it belongs.
+* Never throws — a camera's attach is not failed by a mechanism that could not
+* be reached, it is reported.
+*/
+async function reconcileOnboardForwarding(input, deps) {
+	const { deviceId, detectionSources } = input;
+	const wantsOnboard = detectionSources.includes(ONBOARD_DETECTION_SOURCE);
+	const log = deps.logger.withTags({ deviceId });
+	let hasCap;
+	try {
+		hasCap = await deps.hasNativeObjectDetectionCap(deviceId);
+	} catch (err) {
+		log.warn("onboard forwarding not reconciled — could not tell whether the camera has the cap", { meta: {
+			wantsOnboard,
+			detectionSources: [...detectionSources],
+			error: errMsg(err)
+		} });
+		return {
+			kind: "read-failed",
+			wantsOnboard
+		};
+	}
+	if (!hasCap) return {
+		kind: "no-cap",
+		wantsOnboard
+	};
+	let current;
+	try {
+		current = await deps.readForwardingEnabled(deviceId);
+	} catch (err) {
+		log.warn("onboard forwarding not reconciled — the vendor flag could not be read", { meta: {
+			wantsOnboard,
+			detectionSources: [...detectionSources],
+			error: errMsg(err)
+		} });
+		return {
+			kind: "read-failed",
+			wantsOnboard
+		};
+	}
+	if (current === wantsOnboard) return {
+		kind: "aligned",
+		wantsOnboard
+	};
+	try {
+		await deps.writeForwardingEnabled(deviceId, wantsOnboard);
+	} catch (err) {
+		log.warn("onboard forwarding drifted and the repair failed", { meta: {
+			was: current,
+			wanted: wantsOnboard,
+			detectionSources: [...detectionSources],
+			error: errMsg(err)
+		} });
+		return {
+			kind: "write-failed",
+			wantsOnboard
+		};
+	}
+	log.info("onboard forwarding flag put back to match the camera pick", { meta: {
+		was: current,
+		now: wantsOnboard,
+		detectionSources: [...detectionSources]
+	} });
+	return {
+		kind: "repaired",
+		wantsOnboard
+	};
+}
+//#endregion
 //#region src/watchdog-camera.ts
 /**
 * Derive the watchdog camera descriptor from a runner config. Captures which
@@ -46043,7 +46174,7 @@ var DetectionWiringController = class {
 		try {
 			raw = await this.deps.ctx().settings.readDeviceStore(deviceId);
 		} catch (err) {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			this.deps.logger.error("resolveDeviceDetectionSettings failed", {
 				tags: { deviceId },
 				meta: { error: msg }
@@ -46074,7 +46205,7 @@ var DetectionWiringController = class {
 				motionDetectionEnabled
 			});
 		} catch (err) {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			this.deps.logger.error("resolveDeviceDetectionSettings narrowing failed", {
 				tags: { deviceId },
 				meta: { error: msg }
@@ -46104,7 +46235,7 @@ var DetectionWiringController = class {
 		} catch (err) {
 			this.deps.logger.debug("fetchAssignedProfiles: slot read failed (transient) — treating as unknown", {
 				tags: { deviceId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 			return null;
 		}
@@ -46124,6 +46255,41 @@ var DetectionWiringController = class {
 		return buildDetectionConfigFromInputs(resolved, assigned);
 	}
 	/**
+	* Make the vendor's onboard-AI forwarding flag agree with this camera's
+	* `detectionSources` pick — in both directions. See
+	* `onboard-forwarding-reconcile.ts` for why the save-time write is not
+	* enough (the flag is device state and a provider restart re-seeds it OFF,
+	* measured on all seven Reolink cameras of the live hub).
+	*
+	* Never throws: a mechanism that could not be reached is reported, it does
+	* not fail the camera's attach.
+	*/
+	async reconcileOnboardForwarding(deviceId, detectionSources) {
+		return reconcileOnboardForwarding({
+			deviceId,
+			detectionSources
+		}, {
+			hasNativeObjectDetectionCap: (id) => this.deps.deviceHasNativeObjectDetectionCap(id),
+			readForwardingEnabled: async (id) => {
+				const api = this.deps.api();
+				if (!api) throw new Error("orchestrator: no api — cannot read the onboard forwarding flag");
+				const raw = await api.nativeObjectDetection.getStatus.query({ deviceId: id });
+				const parsed = NativeObjectDetectionStatusSchema.safeParse(raw);
+				if (!parsed.success) throw new Error(`orchestrator: nativeObjectDetection.getStatus returned an unusable status — ${parsed.error.message}`);
+				return parsed.data.enabled;
+			},
+			writeForwardingEnabled: async (id, enabled) => {
+				const api = this.deps.api();
+				if (!api) throw new Error("orchestrator: no api — cannot write the onboard forwarding flag");
+				await api.nativeObjectDetection.setEnabled.mutate({
+					deviceId: id,
+					enabled
+				});
+			},
+			logger: this.deps.logger
+		});
+	}
+	/**
 	* Start detection for a camera: dispatch to runner via the orchestrator
 	* local path and subscribe to the audio broker if audio is enabled.
 	*/
@@ -46135,6 +46301,7 @@ var DetectionWiringController = class {
 			await this.stopDetection(deviceId);
 		}
 		this.activeDetections.set(deviceId, config);
+		await this.reconcileOnboardForwarding(deviceId, config.detectionSources ?? DETECTION_SOURCES_WHEN_ABSENT);
 		if (!config.pipelineEnabled || config.detectionMode === "disabled") if (!config.pipelineEnabled) log.info("object detection switched off — no attach, no decode session", { meta: { detectionMode: config.detectionMode } });
 		else log.info("detection mode disabled — no standing attach, no decode session", { meta: {
 			detectionMode: config.detectionMode,
@@ -46144,7 +46311,7 @@ var DetectionWiringController = class {
 			if (config.motionSources.includes("analyzer")) try {
 				await this.deps.session.ensureMotionWatch(deviceId, config);
 			} catch (err) {
-				log.error("ensureMotionWatch failed", { meta: { error: errMsg(err) } });
+				log.error("ensureMotionWatch failed", { meta: { error: errMsg$1(err) } });
 			}
 			log.info("detection armed (session-time) — watching for motion", { meta: { motion: config.motionSources.join("+") } });
 		} else {
@@ -46163,7 +46330,7 @@ var DetectionWiringController = class {
 				const result = await this.deps.placement.dispatchCamera(runnerConfig);
 				if (result.kind === "assigned") dispatchedNodeId = result.agentNodeId;
 			} catch (err) {
-				const msg = errMsg(err);
+				const msg = errMsg$1(err);
 				log.error("dispatchCamera failed", { meta: { error: msg } });
 			}
 			if (dispatchedNodeId && (dispatchedNodeId !== hydrateNodeId || (runnerConfig.steps?.length ?? 0) === 0)) try {
@@ -46192,13 +46359,13 @@ var DetectionWiringController = class {
 					});
 				}
 			} catch (err) {
-				log.warn("startDetection: post-dispatch re-resolve failed", { meta: { error: errMsg(err) } });
+				log.warn("startDetection: post-dispatch re-resolve failed", { meta: { error: errMsg$1(err) } });
 			}
 		}
 		try {
 			await this.deps.audio.resubscribe(deviceId, config);
 		} catch (err) {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			log.error("subscribeAudioStream failed", { meta: { error: msg } });
 		}
 		if (config.detectionMode !== "on-motion") log.info("Detection dispatched", { meta: {
@@ -46214,7 +46381,7 @@ var DetectionWiringController = class {
 		try {
 			await this.deps.placement.releaseCamera({ deviceId });
 		} catch (err) {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			this.deps.logger.error("releaseCamera failed", {
 				tags: { deviceId },
 				meta: { error: msg }
@@ -46240,7 +46407,7 @@ var DetectionWiringController = class {
 		} catch (err) {
 			this.deps.logger.warn("failed to clear per-device orchestrator settings on removal", {
 				tags: { deviceId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 		}
 		this.deps.logger.info("Purged pipeline config for removed device", { tags: { deviceId } });
@@ -46264,7 +46431,7 @@ var DetectionWiringController = class {
 		} catch (err) {
 			this.deps.logger.debug("device existence check failed — proceeding as before", {
 				tags: { deviceId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 			return false;
 		}
@@ -46381,7 +46548,7 @@ var DetectionWiringController = class {
 			await this.deps.attachOn(assignment.agentNodeId, nextConfig);
 			log.info("pipeline.camera-updated: hot-reloaded", { tags: { nodeId: assignment.agentNodeId } });
 		} catch (err) {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			log.error("pipeline.camera-updated: attachOn failed", {
 				tags: { nodeId: assignment.agentNodeId },
 				meta: { error: msg }
@@ -46457,7 +46624,7 @@ var DetectionWiringController = class {
 			this.deps.audio.resubscribe(deviceId, audioCfg).catch((err) => {
 				this.deps.logger.warn("watchdog audio re-subscribe failed", {
 					tags: { deviceId },
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 		}
@@ -46656,7 +46823,7 @@ var DeviceConfigContributions = class {
 				issue: configIssue
 			} });
 			this.deps.topology.refreshNodeCapabilities().then(() => this.deps.redispatchAllActiveCameras("ingest-owner-changed")).catch((err) => {
-				this.deps.ctx().logger.warn("ingest-owner-changed re-dispatch failed", { meta: { error: errMsg(err) } });
+				this.deps.ctx().logger.warn("ingest-owner-changed re-dispatch failed", { meta: { error: errMsg$1(err) } });
 			});
 		}
 		this.deps.clearOnSettingsChange();
@@ -47396,7 +47563,7 @@ var PlacementService = class {
 	async releaseCamera(input) {
 		const current = this.deps.ledger.getAssignment(input.deviceId);
 		if (current) await this.detachOn(current.agentNodeId, input.deviceId).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			this.deps.ctx().logger.debug("releaseCamera detach failed", {
 				tags: { deviceId: input.deviceId },
 				meta: { error: msg }
@@ -47424,7 +47591,7 @@ var PlacementService = class {
 			pipelineNodeId: input.agentNodeId,
 			[PREFERRED_AGENT_SETTING]: null
 		}).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			ctx.logger.warn("assignPipeline: failed to persist pin", {
 				tags: { deviceId: input.deviceId },
 				meta: { error: msg }
@@ -47456,7 +47623,7 @@ var PlacementService = class {
 		}
 		const current = this.deps.ledger.getAssignment(input.deviceId);
 		if (current && current.agentNodeId !== input.agentNodeId) await this.detachOn(current.agentNodeId, input.deviceId).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			ctx.logger.debug("assignPipeline detach-old failed", {
 				tags: { deviceId: input.deviceId },
 				meta: { error: msg }
@@ -47481,7 +47648,7 @@ var PlacementService = class {
 		await ctx.settings?.writeDeviceStore(input.deviceId, { pipelineDeviceKey: clearing ? "auto" : input.deviceKey }).catch((err) => {
 			ctx.logger.warn("setPipelineDevicePin: failed to persist device pin", {
 				tags: { deviceId: input.deviceId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 		});
 		const sessionNode = this.deps.activeSessionNode(input.deviceId);
@@ -47504,7 +47671,7 @@ var PlacementService = class {
 			[PREFERRED_AGENT_SETTING]: null,
 			pipelineNodeId: "auto"
 		}).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			ctx.logger.warn("unassignPipeline: failed to clear pin", {
 				tags: { deviceId: input.deviceId },
 				meta: { error: msg }
@@ -47525,7 +47692,7 @@ var PlacementService = class {
 			else {
 				const targetNodeId = decision.agentNodeId;
 				if (current && current.agentNodeId !== targetNodeId) await this.detachOn(current.agentNodeId, input.deviceId).catch((err) => {
-					const msg = errMsg(err);
+					const msg = errMsg$1(err);
 					ctx.logger.debug("unassignPipeline detach-old failed", {
 						tags: { deviceId: input.deviceId },
 						meta: { error: msg }
@@ -47545,7 +47712,7 @@ var PlacementService = class {
 			}
 		}
 		if (current) await this.detachOn(current.agentNodeId, input.deviceId).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			ctx.logger.debug("unassignPipeline detach failed", {
 				tags: { deviceId: input.deviceId },
 				meta: { error: msg }
@@ -47564,7 +47731,7 @@ var PlacementService = class {
 	async runAutoRebalance() {
 		if (!this.deps.ctxIfReady()) return;
 		await this.deps.reconcilePlacementFromRunners().catch((err) => {
-			this.deps.ctx().logger.debug("auto-rebalance: attachment reconcile failed", { meta: { error: errMsg(err) } });
+			this.deps.ctx().logger.debug("auto-rebalance: attachment reconcile failed", { meta: { error: errMsg$1(err) } });
 		});
 		if (this.autoRebalanceInFlight) return;
 		if (this.deps.topology.enabledNodes.length < 2) return;
@@ -47573,7 +47740,7 @@ var PlacementService = class {
 			const { migrated } = await this.rebalance({ minImprovement: AUTO_REBALANCE_MIN_IMPROVEMENT });
 			if (migrated > 0) this.deps.ctx().logger.info("auto-rebalance: corrected placement drift", { meta: { migrated } });
 		} catch (err) {
-			this.deps.ctx().logger.debug("auto-rebalance pass failed", { meta: { error: errMsg(err) } });
+			this.deps.ctx().logger.debug("auto-rebalance pass failed", { meta: { error: errMsg$1(err) } });
 		} finally {
 			this.autoRebalanceInFlight = false;
 		}
@@ -47624,7 +47791,7 @@ var PlacementService = class {
 			}
 			if (current) {
 				await this.detachOn(current.agentNodeId, deviceId).catch((err) => {
-					const msg = errMsg(err);
+					const msg = errMsg$1(err);
 					ctx.logger.debug("rebalance detach-old failed", {
 						tags: { deviceId },
 						meta: { error: msg }
@@ -47951,7 +48118,7 @@ var NodeLifecycleHandler = class {
 					nodeId: decision.agentNodeId
 				} });
 			} catch (err) {
-				const msg = errMsg(err);
+				const msg = errMsg$1(err);
 				this.deps.logger.error("Failover: attach failed", {
 					tags: {
 						deviceId,
@@ -47981,7 +48148,7 @@ var NodeLifecycleHandler = class {
 		this.deps.schedulePendingRetry();
 		if (failoverPolicy.onReconnect === "rebalance") {
 			await this.deps.rebalance().catch((err) => {
-				const msg = errMsg(err);
+				const msg = errMsg$1(err);
 				this.deps.logger.error("rebalance after reconnect failed", { meta: { error: msg } });
 			});
 			return;
@@ -48007,7 +48174,7 @@ var NodeLifecycleHandler = class {
 				this.deps.ledger.recordAssignment(deviceId, nodeId, "failover", false);
 				restored++;
 			} catch (err) {
-				const msg = errMsg(err);
+				const msg = errMsg$1(err);
 				this.deps.logger.error("restore attach failed", {
 					tags: {
 						deviceId,
@@ -48097,7 +48264,7 @@ var NodeLifecycleHandler = class {
 						deviceId,
 						nodeId
 					},
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			}
 			this.deps.logger.info("readiness: detection-pipeline reseeded agent defaults + redispatched cameras", {
@@ -48111,7 +48278,7 @@ var NodeLifecycleHandler = class {
 				this.reattachStaleEmpties(nodeId).catch((err) => {
 					this.deps.logger.debug("readiness deferred sweep failed", {
 						tags: { nodeId },
-						meta: { error: errMsg(err) }
+						meta: { error: errMsg$1(err) }
 					});
 				});
 			}, 3e3);
@@ -48122,7 +48289,7 @@ var NodeLifecycleHandler = class {
 				tags: { nodeId },
 				meta: {
 					epoch: t.epoch,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 		}
@@ -48161,7 +48328,7 @@ var NodeLifecycleHandler = class {
 						deviceId,
 						nodeId
 					},
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			}
 		}
@@ -48483,7 +48650,7 @@ var NodeStressController = class NodeStressController {
 		if (this.timer) return;
 		this.timer = setInterval(() => {
 			this.sweep().catch((err) => {
-				this.deps.logger.warn("node-stress sweep failed", { meta: { error: errMsg(err) } });
+				this.deps.logger.warn("node-stress sweep failed", { meta: { error: errMsg$1(err) } });
 			});
 		}, NodeStressController.SWEEP_INTERVAL_MS);
 	}
@@ -48656,7 +48823,7 @@ var NodeStressController = class NodeStressController {
 				meta: {
 					from: plan.fromNodeId,
 					to: plan.toNodeId,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 		} finally {
@@ -49353,7 +49520,7 @@ var NodeTopologyService = class {
 		try {
 			blob = await this.deps.readAgentSettingsMap();
 		} catch (err) {
-			this.deps.logger.warn("refreshNodeCapabilities: agent settings read failed", { meta: { error: errMsg(err) } });
+			this.deps.logger.warn("refreshNodeCapabilities: agent settings read failed", { meta: { error: errMsg$1(err) } });
 		}
 		const nodeIds = new Set(["hub"]);
 		for (const nodeId of Object.keys(blob)) if (typeof nodeId === "string" && nodeId.length > 0 && !nodeId.includes("/")) nodeIds.add(nodeId);
@@ -49411,7 +49578,7 @@ function wireOrchestratorSubscriptions(deps) {
 	const unsubInferenceResult = deps.eventBus.subscribe({ category: EventCategory.PipelineInferenceResult }, (event) => {
 		if (!isEvent(event, EventCategory.PipelineInferenceResult)) return;
 		deps.handleInferenceResult(event.data).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			deps.logger.error("PipelineInferenceResult post-processing failed", {
 				tags: { deviceId: event.data.deviceId },
 				meta: { error: msg }
@@ -49430,7 +49597,7 @@ function wireOrchestratorSubscriptions(deps) {
 			deps.logger.info("received onProfileSlotsChanged", { tags: { deviceId } });
 			deps.handleDeviceRegistered(deviceId).catch((err) => {
 				if (isTornDown) return;
-				const msg = errMsg(err);
+				const msg = errMsg$1(err);
 				deps.logger.error("handleDeviceRegistered failed", {
 					tags: { deviceId },
 					meta: { error: msg }
@@ -49442,7 +49609,7 @@ function wireOrchestratorSubscriptions(deps) {
 	const unsubDeviceUnregistered = deps.eventBus.subscribe({ category: EventCategory.DeviceUnregistered }, (event) => {
 		const { deviceId } = event.data;
 		deps.handleDeviceUnregistered(deviceId).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			deps.logger.error("handleDeviceUnregistered failed", {
 				tags: { deviceId },
 				meta: { error: msg }
@@ -49454,7 +49621,7 @@ function wireOrchestratorSubscriptions(deps) {
 		const { deviceId } = event.data;
 		deps.handleSettingsChanged(deviceId).catch((err) => {
 			if (isTornDown) return;
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			deps.logger.error("handleSettingsChanged failed", {
 				tags: { deviceId },
 				meta: { error: msg }
@@ -49464,7 +49631,7 @@ function wireOrchestratorSubscriptions(deps) {
 	const unsubCameraUpdated = deps.eventBus.subscribe({ category: EventCategory.PipelineCameraUpdated }, (event) => {
 		if (!isEvent(event, EventCategory.PipelineCameraUpdated)) return;
 		deps.handlePipelineCameraUpdated(event.data.deviceId, event.data.config).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			deps.logger.error("handlePipelineCameraUpdated failed", {
 				tags: { deviceId: event.data.deviceId },
 				meta: { error: msg }
@@ -49477,7 +49644,7 @@ function wireOrchestratorSubscriptions(deps) {
 		if (!(reason === "wrapper-activated" || reason === "wrapper-deactivated") || !(capName === "detection-pipeline" || capName === "audio-analysis" || capName === "motion-detection")) return;
 		deps.handleSettingsChanged(deviceId).catch((err) => {
 			if (isTornDown) return;
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			deps.logger.error("binding-changed re-dispatch failed", {
 				tags: { deviceId },
 				meta: {
@@ -49505,7 +49672,7 @@ function wireOrchestratorSubscriptions(deps) {
 				tags: { deviceId },
 				meta: {
 					detected,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 		});
@@ -49520,7 +49687,7 @@ function wireOrchestratorSubscriptions(deps) {
 				tags: { deviceId },
 				meta: {
 					detected,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 		});
@@ -50514,7 +50681,7 @@ var PipelineSettingsStore = class PipelineSettingsStore {
 		} catch (err) {
 			this.deps.logger.debug("getCatalogForAgent failed", {
 				tags: { nodeId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 			return null;
 		}
@@ -50577,7 +50744,7 @@ var PipelineSettingsStore = class PipelineSettingsStore {
 				tags: { deviceId },
 				meta: {
 					capName: "detection-pipeline",
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 			return true;
@@ -51300,7 +51467,7 @@ var ReconcileController = class ReconcileController {
 			try {
 				slots = await api.streamBroker.listAllProfileSlots.query();
 			} catch (err) {
-				this.deps.logger.debug("dispatch reconcile skipped — stream-broker not ready", { meta: { error: errMsg(err) } });
+				this.deps.logger.debug("dispatch reconcile skipped — stream-broker not ready", { meta: { error: errMsg$1(err) } });
 				return;
 			}
 			const desired = desiredDeviceIdsFromSlots(slots);
@@ -51327,7 +51494,7 @@ var ReconcileController = class ReconcileController {
 			} catch (err) {
 				this.deps.logger.warn("dispatch reconcile: handleDeviceRegistered failed", {
 					tags: { deviceId },
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			}
 			await this.reconcilePlacementFromRunners();
@@ -51355,7 +51522,7 @@ var ReconcileController = class ReconcileController {
 			const devices = await api.deviceManager.listAll.query({ projection: "slim" });
 			return new Set(devices.map((device) => device.id));
 		} catch (err) {
-			this.deps.logger.debug("dispatch reconcile: deviceManager.listAll failed", { meta: { error: errMsg(err) } });
+			this.deps.logger.debug("dispatch reconcile: deviceManager.listAll failed", { meta: { error: errMsg$1(err) } });
 			return null;
 		}
 	}
@@ -51381,7 +51548,7 @@ var ReconcileController = class ReconcileController {
 			} catch (err) {
 				this.deps.logger.warn("dispatch reconcile: teardown of vanished device failed", {
 					tags: { deviceId },
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			}
 		}
@@ -51438,7 +51605,7 @@ var ReconcileController = class ReconcileController {
 			this.deps.logger.debug("placement reconcile skipped node — getLocalCameras failed", {
 				tags: { nodeId },
 				meta: {
-					error: outcome.kind === "rejected" ? errMsg(outcome.error) : "budget exceeded",
+					error: outcome.kind === "rejected" ? errMsg$1(outcome.error) : "budget exceeded",
 					ms
 				}
 			});
@@ -51468,7 +51635,7 @@ var ReconcileController = class ReconcileController {
 						nodeId,
 						deviceId
 					},
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			})));
 		}
@@ -51510,7 +51677,7 @@ var ReconcileController = class ReconcileController {
 			this.deps.handleDeviceRegistered(deviceId).catch((err) => {
 				this.deps.logger.debug("slot-read retry: handleDeviceRegistered failed", {
 					tags: { deviceId },
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 		}, delay);
@@ -51588,7 +51755,7 @@ var ReconcileController = class ReconcileController {
 					} catch (err) {
 						this.deps.logger.warn("pending retry: dispatchCamera failed", {
 							tags: { deviceId },
-							meta: { error: errMsg(err) }
+							meta: { error: errMsg$1(err) }
 						});
 						stillPending++;
 					}
@@ -51666,7 +51833,7 @@ var ReconcileController = class ReconcileController {
 			await this.deps.detachOn(assignment.agentNodeId, deviceId).catch((err) => {
 				this.deps.logger.debug("remote-health exhausted-detach failed", {
 					tags: { deviceId },
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 			return;
@@ -51689,14 +51856,14 @@ var ReconcileController = class ReconcileController {
 		await this.deps.detachOn(assignment.agentNodeId, deviceId).catch((err) => {
 			this.deps.logger.warn("remote-health detach failed", {
 				tags: { deviceId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 		});
 		this.deps.ledger.dropAssignment(deviceId, "silent");
 		await this.deps.dispatchCamera(cfg).catch((err) => {
 			this.deps.logger.warn("remote-health re-dispatch failed", {
 				tags: { deviceId },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 		});
 	}
@@ -52345,7 +52512,7 @@ var SessionDispatchController = class {
 						deviceId,
 						nodeId: session.nodeId
 					},
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 			this.deps.dropAssignment(deviceId, "silent");
@@ -52530,7 +52697,7 @@ var SessionDispatchController = class {
 		};
 		if (reconcileBudgetExceeded) log.warn("detection session: placement census overran its budget — placing without it", { meta: { budgetMs: 500 } });
 		else if (censusOutcome.kind === "rejected") log.warn("detection session: placement census failed — placing on the ledger as it is", { meta: {
-			error: errMsg(censusOutcome.error),
+			error: errMsg$1(censusOutcome.error),
 			reconcileMs
 		} });
 		const balanceStartedAt = Date.now();
@@ -52692,7 +52859,7 @@ var SessionDispatchController = class {
 				await this.resolveSessionLifecycleLocked(deviceId, reason);
 			}).catch((err) => {
 				log.warn("detection session: lifecycle re-check failed", { meta: {
-					error: errMsg(err),
+					error: errMsg$1(err),
 					reason
 				} });
 			});
@@ -52797,7 +52964,7 @@ var SessionDispatchController = class {
 			log.warn("detection session: teardown detach failed", {
 				tags: { nodeId: session.nodeId },
 				meta: {
-					error: errMsg(err),
+					error: errMsg$1(err),
 					reason
 				}
 			});
@@ -52880,7 +53047,7 @@ var SessionDispatchController = class {
 							deviceId,
 							nodeId: session.nodeId
 						},
-						meta: { error: errMsg(err) }
+						meta: { error: errMsg$1(err) }
 					});
 				});
 				this.sessionRegistry.deregister(deviceId);
@@ -52898,7 +53065,7 @@ var SessionDispatchController = class {
 						deviceId,
 						nodeId: watchNodeId
 					},
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 			this.motionWatchByDevice.delete(deviceId);
@@ -53078,7 +53245,7 @@ async function sweepMirror(deps, hydrator, cameraIds) {
 				tags: { deviceId },
 				meta: {
 					mirror: hydrator.mirror,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 			return "threw";
@@ -53118,7 +53285,7 @@ async function readCameraIds(deps) {
 			lastError = err;
 		}
 		if (Date.now() >= deadline) {
-			deps.logger.warn("zones mirror boot hydration SKIPPED — camera list never became readable; mirror-only consumers keep whatever the last write left", { meta: { error: lastError === null ? "ctx.api unavailable" : errMsg(lastError) } });
+			deps.logger.warn("zones mirror boot hydration SKIPPED — camera list never became readable; mirror-only consumers keep whatever the last write left", { meta: { error: lastError === null ? "ctx.api unavailable" : errMsg$1(lastError) } });
 			return null;
 		}
 		await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
@@ -53759,7 +53926,7 @@ async function buildOrchestratorControllers(deps) {
 		} catch (err) {
 			return {
 				kind: "unknown",
-				reason: errMsg(err)
+				reason: errMsg$1(err)
 			};
 		}
 	};
@@ -53843,14 +54010,14 @@ async function buildOrchestratorControllers(deps) {
 		readGlobalSettings: () => globalSettings
 	});
 	await NodeStressMoveLedger.declare(deps.ctx().api.settingsStore).then(() => nodeStress.hydrate()).catch((err) => {
-		deps.ctx().logger.warn("node-stress move history unavailable — this boot starts cold", { meta: { error: errMsg(err) } });
+		deps.ctx().logger.warn("node-stress move history unavailable — this boot starts cold", { meta: { error: errMsg$1(err) } });
 	});
 	await NodeStressLts.declare(deps.ctx().api.settingsStore).catch((err) => {
-		deps.ctx().logger.warn("node-stress statistics unavailable — no baseline this boot", { meta: { error: errMsg(err) } });
+		deps.ctx().logger.warn("node-stress statistics unavailable — no baseline this boot", { meta: { error: errMsg$1(err) } });
 	});
 	const nodeStressLtsTimer = setInterval(() => {
 		nodeStressLts.flushDue().catch((err) => {
-			deps.ctx().logger.warn("node-stress statistics flush failed", { meta: { error: errMsg(err) } });
+			deps.ctx().logger.warn("node-stress statistics flush failed", { meta: { error: errMsg$1(err) } });
 		});
 	}, 6e4);
 	nodeStress.start();
@@ -53987,7 +54154,7 @@ async function buildOrchestratorControllers(deps) {
 		deps.applyRuntimeSettings(globalSettings);
 		await topology.refreshNodeCapabilities();
 	} catch (err) {
-		const msg = errMsg(err);
+		const msg = errMsg$1(err);
 		deps.ctx().logger.warn("orchestrator settings load failed — using defaults", { meta: { error: msg } });
 	}
 	const rawNodeId = deps.ctx().kernel.localNodeId ?? "hub";
@@ -54020,7 +54187,7 @@ async function buildOrchestratorControllers(deps) {
 		nodeLifecycle.unsubscribeDetectionPipelineReadiness(nodeId);
 		audio.markNodeOffline(nodeId);
 		nodeLifecycle.handleNodeDisconnect(nodeId).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			deps.ctx().logger.error("failover after disconnect failed", {
 				tags: { nodeId },
 				meta: { error: msg }
@@ -54035,7 +54202,7 @@ async function buildOrchestratorControllers(deps) {
 			deps.subscribeToAudioAnalyzerReadiness(nodeId);
 		}
 		nodeLifecycle.handleNodeConnect(nodeId).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			deps.ctx().logger.error("reconnect handling failed", {
 				tags: { nodeId },
 				meta: { error: msg }
@@ -54049,7 +54216,7 @@ async function buildOrchestratorControllers(deps) {
 			meta: { capName }
 		});
 		nodeLifecycle.handleNodeDisconnect(nodeId).catch((err) => {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			deps.ctx().logger.error("failover after cap-down failed", {
 				tags: { nodeId },
 				meta: {
@@ -54112,7 +54279,7 @@ async function buildOrchestratorControllers(deps) {
 		doneFlag: settingsStore.bindingsMigrationDoneState,
 		logger: deps.ctx().logger
 	}).catch((err) => {
-		deps.ctxIfReady()?.logger.warn("bindings migration failed — will retry on next boot", { meta: { error: errMsg(err) } });
+		deps.ctxIfReady()?.logger.warn("bindings migration failed — will retry on next boot", { meta: { error: errMsg$1(err) } });
 	});
 	migrateStepGating({
 		readCameraSettings: () => settingsStore.readCameraSettingsMap(),
@@ -54123,7 +54290,7 @@ async function buildOrchestratorControllers(deps) {
 	}).then(async () => {
 		if (await settingsStore.applyPerNodeDeviceMigration()) deps.ctxIfReady()?.logger.info("per-(node,device) config migration applied");
 	}).catch((err) => {
-		deps.ctxIfReady()?.logger.warn("step-gating / per-node-device migration failed — retry next boot", { meta: { error: errMsg(err) } });
+		deps.ctxIfReady()?.logger.warn("step-gating / per-node-device migration failed — retry next boot", { meta: { error: errMsg$1(err) } });
 	});
 	const zoneRulesProvider = new ZoneRulesProvider({
 		logger: deps.ctx().logger.child("zone-rules"),
@@ -54151,7 +54318,7 @@ async function buildOrchestratorControllers(deps) {
 						deviceId,
 						nodeId: assignment.agentNodeId
 					},
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 		}
@@ -54179,7 +54346,7 @@ async function buildOrchestratorControllers(deps) {
 						deviceId,
 						nodeId: assignment.agentNodeId
 					},
-					meta: { error: errMsg(err) }
+					meta: { error: errMsg$1(err) }
 				});
 			});
 		}
@@ -54195,7 +54362,7 @@ async function buildOrchestratorControllers(deps) {
 		}],
 		logger: deps.ctx().logger.child("zones")
 	}).catch((err) => {
-		deps.ctxIfReady()?.logger.warn("zones mirror boot hydration failed", { meta: { error: errMsg(err) } });
+		deps.ctxIfReady()?.logger.warn("zones mirror boot hydration failed", { meta: { error: errMsg$1(err) } });
 	});
 	const unsubOrchestratorSubscriptions = wireOrchestratorSubscriptions({
 		eventBus: deps.ctx().eventBus,
@@ -54244,10 +54411,11 @@ async function buildOrchestratorControllers(deps) {
 		isCapActiveForDevice: (deviceId, capName) => deps.isCapActiveForDevice(deviceId, capName),
 		deviceHasOnboardMotionCap: (deviceId) => deps.deviceHasOnboardMotionCap(deviceId),
 		deviceHasActivitySignalCap: (deviceId) => deps.deviceHasActivitySignalCap(deviceId),
+		deviceHasNativeObjectDetectionCap: (deviceId) => deps.deviceHasNativeObjectDetectionCap(deviceId),
 		deviceSettingsSchema: () => deps.deviceSettingsSchema()
 	});
 	await detectionWiring.hydrateFeaturesMirror().catch((err) => {
-		deps.ctx().logger.warn("device-features mirror not restored — this boot starts cold", { meta: { error: errMsg(err) } });
+		deps.ctx().logger.warn("device-features mirror not restored — this boot starts cold", { meta: { error: errMsg$1(err) } });
 	});
 	return {
 		ledger,
@@ -55320,7 +55488,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		for (const deviceId of this.detectionWiring.activeDetectionDeviceIds()) try {
 			await this.releaseCamera({ deviceId });
 		} catch (err) {
-			const msg = errMsg(err);
+			const msg = errMsg$1(err);
 			this.ctx.logger.debug("releaseCamera failed during shutdown", {
 				tags: { deviceId },
 				meta: { error: msg }
@@ -55946,7 +56114,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				tags: { nodeId },
 				meta: {
 					nodeId,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 			return null;
@@ -56052,7 +56220,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				tags: { nodeId },
 				meta: {
 					nodeId,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 			return {
@@ -56099,7 +56267,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		} catch (err) {
 			this.ctx.logger.warn("resetNodePipelineDefaults: executor clearDeviceOverrides failed (node offline?)", {
 				tags: { nodeId: node },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 		}
 		this.settingsStore.invalidateCatalog();
@@ -56110,7 +56278,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 		} catch (err) {
 			this.ctx.logger.warn("resetNodePipelineDefaults: effective-model probe failed (node offline?)", {
 				tags: { nodeId: node },
-				meta: { error: errMsg(err) }
+				meta: { error: errMsg$1(err) }
 			});
 		}
 		this.ctx.logger.info("node pipeline reset to hardware-aware defaults", {
@@ -56327,7 +56495,7 @@ var PipelineOrchestratorAddon = class PipelineOrchestratorAddon extends BaseAddo
 				tags: { deviceId },
 				meta: {
 					capName,
-					error: errMsg(err)
+					error: errMsg$1(err)
 				}
 			});
 			return true;