@camstack/addon-post-analysis 1.0.5 → 1.0.7

package/dist/{dist-wfoiDvvm.mjs → dist-CJslCJXG.mjs}

@@ -4627,63 +4627,7 @@ function _instanceof(cls, params = {}) {
 	return inst;
 }
 //#endregion
-//#region ../types/dist/index.mjs
-/**
-* Deep wiring healthcheck — snapshot of active reachability probes across
-* every declared capability + widget of every installed plugin, on every
-* node. Produced by the backend `WiringHealthService` and surfaced via
-* `GET /health/wiring`, the tRPC `health.wiring` query, and the boot-gate.
-*
-* Unlike `/health` (process liveness), this reflects whether each cap/widget
-* is actually *reachable* over the real cap-dispatch path. See spec
-* `docs/superpowers/specs/2026-05-23-deep-healthcheck-design.md`.
-*/
-/** What kind of target a probe addressed. */
-var wiringProbeKindSchema = _enum([
-	"singleton",
-	"device",
-	"widget"
-]);
-/** Result of probing a single (cap|widget [, device]) target. */
-var wiringProbeResultSchema = object({
-	capName: string(),
-	kind: wiringProbeKindSchema,
-	deviceId: number().optional(),
-	reachable: boolean(),
-	latencyMs: number(),
-	error: string().optional()
-});
-/** Per-addon roll-up of cap + widget probe results. */
-var wiringAddonHealthSchema = object({
-	addonId: string(),
-	caps: array(wiringProbeResultSchema).readonly(),
-	widgets: array(wiringProbeResultSchema).readonly()
-});
-/** Per-node roll-up. */
-var wiringNodeHealthSchema = object({
-	nodeId: string(),
-	addons: array(wiringAddonHealthSchema).readonly()
-});
-object({
-	/** True only when every probed target is reachable. */
-	ok: boolean(),
-	/** True when at least one target is unreachable. */
-	degraded: boolean(),
-	checkedAt: string(),
-	nodes: array(wiringNodeHealthSchema).readonly(),
-	summary: object({
-		total: number(),
-		reachable: number(),
-		unreachable: number()
-	})
-});
-var MODEL_FORMATS = [
-	"onnx",
-	"coreml",
-	"openvino",
-	"tflite",
-	"pt"
-];
+//#region ../types/dist/sleep-D7JeS58T.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -4981,6 +4925,18 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineEngineMetricsSnapshot"] = "pipeline.engine-metrics-snapshot";
 	/**
+	* Per-node detection-engine runtime-provisioning transition. Emitted by
+	* the detection-pipeline provider on every state change of its lazy
+	* engine-provisioning machine (idle → installing → verifying → ready,
+	* or → failed with a `nextRetryAt`). Payload is the
+	* `EngineProvisioningState` snapshot; `event.source.nodeId` carries the
+	* node. The Pipeline page subscribes to drive a live "installing
+	* OpenVINO… / ready" indicator per node without polling
+	* `pipelineExecutor.getEngineProvisioning`. Telemetry-grade (D8): the UI
+	* also reads the cap snapshot on mount / reconnect. Phase 2.
+	*/
+	EventCategory["PipelineEngineProvisioning"] = "pipeline.engine-provisioning";
+	/**
 	* Cluster topology snapshot. Carries the same payload returned by
 	* `nodes.topology` (every reachable node + addons + processes).
 	* Emitted by the hub on any agent / addon lifecycle change
@@ -5994,7 +5950,7 @@ var ProfileSlotSchema = object({
 * Zod schema for StreamSourceEntry — the canonical stream descriptor
 * exposed by ICameraDevice.getStreamSources() and consumed by the broker.
 */
-var StreamSourceEntrySchema = object({
+var StreamSourceEntrySchema$1 = object({
 	id: string(),
 	label: string(),
 	protocol: _enum([
@@ -6216,923 +6172,1111 @@ var ProfileRtspEntrySchema = object({
 	codec: string().optional(),
 	resolution: CamStreamResolutionSchema.optional()
 });
-/**
-* Numeric day-of-week: 0 = Sunday … 6 = Saturday (matches `Date.getDay`).
-* Named `RecordingWeekday` to avoid collision with the string-union
-* `Weekday` exported from `interfaces/timezones.ts`.
-*/
-var RecordingWeekdaySchema = number().int().min(0).max(6);
-var HHMM = /^([01]\d|2[0-3]):[0-5]\d$/;
-var RecordingScheduleSchema = discriminatedUnion("kind", [object({ kind: literal("always") }), object({
-	kind: literal("timeOfDay"),
-	start: string().regex(HHMM),
-	end: string().regex(HHMM),
-	/** Restrict to these weekdays; omit = every day. */
-	days: array(RecordingWeekdaySchema).optional()
-})]);
-var RecordingModeSchema = _enum([
-	"continuous",
-	"onMotion",
-	"onAudioThreshold"
-]);
-/**
-* First-class, authoritative per-camera storage mode — the netta choice the UI
-* reads directly (never inferred from `rules`):
-*  - `off`        — not recording.
-*  - `events`     — record only around triggers (motion / audio threshold),
-*                   with pre/post-buffer.
-*  - `continuous` — record 24/7 within the schedule.
-*
-* `mode` compiles one-way to the internal `rules[]` consumed by the policy
-* engine (see `compileRules`); `rules[]` is never authored directly anymore.
-*/
-var RecordingStorageModeSchema = _enum([
-	"off",
-	"events",
-	"continuous"
-]);
-/** Which detectors trigger an `events`-mode recording. */
-var RecordingTriggersSchema = object({
-	motion: boolean().optional(),
-	audioThresholdDbfs: number().optional()
-});
-/**
-* Mode of a single recording band — the recorder per-band vocabulary.
-*
-* Distinct from `RecordingStorageModeSchema` (which carries `off`): a band is
-* only ever `continuous` or `events`; "off" is expressed by the absence of a
-* covering band, not by a band value.
-*/
-var RecordingBandModeSchema = _enum(["continuous", "events"]);
-/**
-* Triggers for an `events`-mode band. Identical shape to
-* `RecordingTriggersSchema` — reuse that schema as the band trigger type so the
-* two never drift.
-*/
-var RecordingBandTriggersSchema = RecordingTriggersSchema;
-/**
-* A single mode-per-band window — the canonical recorder band shape, the
-* single source of truth re-used by `addon-pipeline/recorder`.
-*
-* `days` lists the weekdays the band covers (empty = every day, matching the
-* band engine's `applies` rule). `start`/`end` are `HH:MM`; an `end <= start`
-* span wraps past midnight (handled by the band engine).
-*/
-var RecordingBandSchema = object({
-	days: array(RecordingWeekdaySchema),
-	start: string().regex(HHMM),
-	end: string().regex(HHMM),
-	mode: RecordingBandModeSchema,
-	triggers: RecordingBandTriggersSchema.optional(),
-	preBufferSec: number().min(0).optional(),
-	postBufferSec: number().min(0).optional()
-});
-var RecordingRuleSchema = object({
-	schedule: RecordingScheduleSchema,
-	mode: RecordingModeSchema,
-	/** Seconds of footage to retain BEFORE a trigger (applied at keep/discard). */
-	preBufferSec: number().min(0).default(0),
-	/** Keep recording until this many seconds after the last trigger. */
-	postBufferSec: number().min(0).default(0),
-	/** Each new trigger restarts the post-buffer window. */
-	resetTimeoutOnNewEvent: boolean().default(true),
-	/** onAudioThreshold only — dBFS level that counts as a trigger. */
-	thresholdDbfs: number().optional()
-});
-/**
-* Per-device retention overrides. Every field is optional; an unset or `0`
-* value inherits the node-wide recorder default. Only footage-lifetime limits
-* live per-camera: `maxAgeDays` and `maxSizeGb`. The disk-occupancy threshold
-* (when the volume is too full to keep recording) is NOT a per-camera concern —
-* it belongs to the StorageLocation (`StorageLocation.config.minFreePercent`),
-* shared by every camera writing to that volume.
-*/
-var RecordingRetentionSchema = object({
-	maxAgeDays: number().min(0).optional(),
-	maxSizeGb: number().min(0).optional()
-});
-/**
-* The full per-camera recording intent — the wire shape of a RecordingTarget.
-*
-* `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
-* are its mode-specific parameters. `rules` is a DEPRECATED authoring input kept
-* only for transition + migration (`migrateRulesToMode`); the policy engine
-* consumes the compiled output of `compileRules(config)`, never `rules` directly.
-*/
-var RecordingConfigSchema = object({
-	enabled: boolean(),
-	/** Authoritative storage mode. Absent on legacy targets → derived once via
-	*  `migrateRulesToMode`, then persisted. */
-	mode: RecordingStorageModeSchema.optional(),
-	profiles: array(CamProfileSchema).optional(),
-	segmentSeconds: number().int().positive().optional(),
-	/** Shared recording time-bands for `events` & `continuous` — record only when
-	*  the wall-clock falls inside one of these windows. Omit or empty = always.
-	*  `continuous` compiles to one rule per band; `events` to band × trigger. */
-	schedules: array(RecordingScheduleSchema).optional(),
-	/** Legacy single-band predecessor of `schedules`. Read-compat only — it is
-	*  normalized into `schedules` on read and never written going forward. (Not
-	*  tagged `@deprecated`: the normalization paths must read it cast-free.) */
-	schedule: RecordingScheduleSchema.optional(),
-	/** `events`-mode only — which detectors trigger a recording. */
-	triggers: RecordingTriggersSchema.optional(),
-	/** `events`-mode only — seconds retained before / after a trigger. */
-	preBufferSec: number().min(0).optional(),
-	postBufferSec: number().min(0).optional(),
-	/** DEPRECATED authoring input; retained for migration/transition. */
-	rules: array(RecordingRuleSchema).optional(),
-	/**
-	* AUTHORITATIVE mode-per-band recording model (recorder). When present it
-	* is the single source of truth; the legacy `mode`/`schedules`/`schedule`/
-	* `triggers`/`rules` fields above are kept for READ-COMPAT only and are
-	* derived into bands once via `migrateConfigToBands`.
-	*/
-	bands: array(RecordingBandSchema).optional(),
-	retention: RecordingRetentionSchema.optional()
-});
-/**
-* `StorageLocationType` — an addon-declared id that identifies the *kind* of
-* storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
-* so the persisted record schema and the consumer-facing cap can both consume it
-* without forming a circular import. The `storage` cap re-exports it
-* verbatim for back-compat.
-*
-* This Zod schema is the **authoritative source** for `StorageLocationType`.
-* The TS alias in `./storage.ts` re-exports `z.infer<typeof
-* StorageLocationTypeSchema>` so the wire surface (cap) and the legacy
-* `IStorageProvider` interface stay in lockstep.
-*
-* The type is now an **open string** (not a closed enum) — addons declare
-* their own location kinds via `StorageLocationDeclaration.id`. The regex
-* enforces a safe id format: lowercase-start, alphanumeric + hyphens.
-*/
-var StorageLocationTypeSchema = string().regex(/^[a-z][a-zA-Z0-9-]*$/);
-/**
-* Persisted record for a storage location instance. Operators can register
-* multiple instances for multi-cardinality types (e.g. two `backups`
-* locations with different `providerId`s). Cardinality is now declared per
-* location via `StorageLocationDeclaration.cardinality` — the static
-* `STORAGE_LOCATION_CARDINALITY` map has been removed.
-*
-* `id` is a stable namespaced string of the form `<type>:<slug>`.
-* The default location for a type uses `id === <type>:default` by
-* convention (the bare type ref like `'backups'` resolves to it).
-*
-* `isSystem: true` marks a location as orchestrator-seeded and
-* undeletable. The bootstrap-installed defaults (one per type) carry
-* this flag; operator-added locations don't. Editing the config of
-* a system location is allowed (path migration, provider swap) but
-* deleting it is rejected at the cap level.
-*/
-var StorageLocationSchema = object({
-	id: string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
-	type: string(),
-	displayName: string().min(1),
-	providerId: string().min(1),
-	config: record(string(), unknown()),
-	/**
-	* Cluster node this location physically lives on. REQUIRED for node-local
-	* providers (filesystem — the path exists on one node's disk), null/absent
-	* for node-agnostic providers (S3/SFTP/WebDAV, reachable from any node).
-	* `'hub'` is the hub node. Validated against the provider's `nodeLocal`
-	* flag at upsert time, not here (the schema is provider-agnostic).
-	*/
-	nodeId: string().optional(),
-	isDefault: boolean().default(false),
-	isSystem: boolean().default(false),
-	createdAt: number(),
-	updatedAt: number()
-});
-/**
-* Reference accepted by consumer-facing `api.storage.*` calls.
-* Either:
-*  - a `StorageLocationType` (e.g. `'backups'`) → orchestrator resolves to the default of that type
-*  - a fully-qualified id (e.g. `'backups:nas-01'`) → addresses a specific instance
-*
-* The orchestrator's `resolveRef(ref)` handles both cases.
-*/
-var StorageLocationRefSchema = union([StorageLocationTypeSchema, string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/)]);
-/**
-* `StorageLocationDeclaration` — a single storage-location entry declared by
-* an addon in its `package.json` under `camstack.storageLocations`.
-*
-* Design intent:
-* - **Addon declares its needs** — each addon describes the logical storage
-*   slots it requires (e.g. `recordings`, `recordingsLow`) without caring
-*   about the physical path.
-* - **Kernel aggregates** — at boot the kernel collects declarations from all
-*   installed addons, deduplicates by `id`, and exposes the union via the
-*   storage-locations settings surface.
-* - **Orchestrator seeds** — for every declared `id` the orchestrator ensures
-*   at least one instance named `<id>:default` is present, using
-*   `defaultsTo` to inherit the resolved root from another location when the
-*   declaration is a derivative slot (e.g. `recordingsLow` defaults to
-*   `recordings`).
-* - **ids are global** — `id` values are shared across the entire deployment;
-*   two addons declaring the same `id` must agree on `cardinality` (validated
-*   at kernel aggregation time, not here).
-*/
-var StorageLocationDeclarationSchema = object({
-	/**
-	* Global location identifier, e.g. `recordings` or `recordingsLow`.
-	* Must start with a lowercase letter and may contain letters, digits, and
-	* hyphens.
-	*/
-	id: string().regex(/^[a-z][a-zA-Z0-9-]*$/, { message: "id must start with a lowercase letter and contain only letters, digits, or hyphens" }),
-	/** Human-readable name shown in the admin UI. */
-	displayName: string().min(1, { message: "displayName must not be empty" }),
-	/** Optional longer explanation of what data this location stores. */
-	description: string().optional(),
-	/**
-	* `single` — exactly one instance of this location is allowed system-wide
-	* (e.g. `logs`, `models`). The operator can edit it but not add more.
-	* `multi`  — the operator may register several instances (e.g. a second
-	* `recordings` on a NAS for disk tiering); one is the default at any time.
-	*/
-	cardinality: _enum(["single", "multi"]),
-	/**
-	* When set, the default instance for this location inherits its resolved
-	* root from the named location's default instance. Useful for derivative
-	* slots (e.g. `recordingsLow` → `recordings`) so operators only need to
-	* configure the primary location.
-	*/
-	defaultsTo: string().optional()
-});
-var DecoderStatsSchema = object({
-	inputFps: number(),
-	outputFps: number(),
-	avgDecodeTimeMs: number(),
-	droppedFrames: number()
-});
-var DecoderSessionConfigSchema = object({
-	codec: string(),
-	maxFps: number().default(0),
-	outputFormat: _enum([
-		"jpeg",
-		"rgb",
-		"bgr",
-		"yuv420",
-		"gray"
-	]).default("jpeg"),
-	scale: number().default(1),
-	width: number().optional(),
-	height: number().optional(),
+/** Narrow an unknown value to a plain `Record<string, unknown>` or return null. */
+function asJsonObject(value) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
+	return { ...value };
+}
+var DeviceType = /* @__PURE__ */ function(DeviceType) {
+	DeviceType["Camera"] = "camera";
+	DeviceType["Hub"] = "hub";
+	DeviceType["Light"] = "light";
+	DeviceType["Siren"] = "siren";
+	DeviceType["Switch"] = "switch";
+	DeviceType["Sensor"] = "sensor";
+	DeviceType["Thermostat"] = "thermostat";
+	DeviceType["Button"] = "button";
+	/** Generic stateless event emitter — carries a device's EXACT declared
+	*  event vocabulary verbatim (no normalization). Installed with the
+	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
+	*  HA bus events (e.g. `zha_event`, generic). */
+	DeviceType["EventEmitter"] = "event-emitter";
+	/** Firmware/software update entity — current vs available version,
+	*  updatable flag, update state, and an install action. Installed with
+	*  the `update` cap. Sources: Homematic firmware-update channels (and
+	*  reusable by other providers, e.g. HA `update.*` entities). */
+	DeviceType["Update"] = "update";
+	DeviceType["Generic"] = "generic";
+	/** Generic notification delivery target (HA `notify.<service>`, future
+	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
+	*  endpoint; the `notifier` cap defines the send surface. */
+	DeviceType["Notifier"] = "notifier";
+	/** Pre-recorded action sequence with optional parameters
+	*  (HA `script.*`). Runnable via `script-runner` cap. */
+	DeviceType["Script"] = "script";
+	/** Automation rule (HA `automation.*`) — enable/disable + manual
+	*  trigger surface exposed via `automation-control` cap. */
+	DeviceType["Automation"] = "automation";
+	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
+	DeviceType["Lock"] = "lock";
+	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
+	*  `valve.*`). `cover` cap with sub-roles for variant. */
+	DeviceType["Cover"] = "cover";
+	/** Pipe / water / gas valve with open/close/stop and optional
+	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
+	*  modelled on the same open/closed lifecycle. */
+	DeviceType["Valve"] = "valve";
+	/** Humidifier / dehumidifier with on/off + target humidity + mode
+	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
+	*  modelled on the same target / mode lifecycle. */
+	DeviceType["Humidifier"] = "humidifier";
+	/** Water heater / boiler with target temperature + operation mode +
+	*  away mode (HA `water_heater.*`). `water-heater` cap — a
+	*  climate-family actuator. */
+	DeviceType["WaterHeater"] = "water-heater";
+	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
+	DeviceType["Fan"] = "fan";
+	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
+	*  the camera surface — those use `Camera`. `media-player` cap. */
+	DeviceType["MediaPlayer"] = "media-player";
+	/** Security panel / alarm system (HA `alarm_control_panel.*`).
+	*  `alarm-panel` cap. */
+	DeviceType["AlarmPanel"] = "alarm-panel";
+	/** Generic user-settable input (HA `number` / `input_number` / `select`
+	*  / `input_select` / `text` / `input_text` / `input_datetime`).
+	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
+	*  TextControl / DateTimeControl. */
+	DeviceType["Control"] = "control";
+	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
+	*  `presence` cap. */
+	DeviceType["Presence"] = "presence";
+	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
+	*  `weather` cap. */
+	DeviceType["Weather"] = "weather";
+	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
+	DeviceType["Vacuum"] = "vacuum";
+	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
+	*  `lawn-mower-control` cap. */
+	DeviceType["LawnMower"] = "lawn-mower";
+	/** Physical HA device group — parent container for entity-children
+	*  adopted from a single HA device entry. Not renderable as a
+	*  standalone device; exists only to anchor child entities. */
+	DeviceType["Container"] = "container";
+	/** Single still-image entity (HA `image.*`). Read-only display of an
+	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
+	DeviceType["Image"] = "image";
+	return DeviceType;
+}({});
+var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
+	DeviceFeature["BatteryOperated"] = "battery-operated";
+	DeviceFeature["Rebootable"] = "rebootable";
 	/**
-	* Identifier of the camera this decoder session serves. Optional
-	* because the cap is generic (any caller could request decode), but
-	* stream-broker passes it so decoder logs include `deviceId` for
-	* per-camera filtering when diagnosing failures (e.g. node-av
-	* sendPacket errors on a single hung camera).
+	* Device supports an on-demand re-sync of its derived spec with its
+	* upstream source — drives the generic Re-sync button. The owning
+	* provider implements the action via the `device-adoption.resync` cap.
 	*/
-	deviceId: number().int().nonnegative().optional(),
+	DeviceFeature["Resyncable"] = "resyncable";
+	DeviceFeature["NativeSnapshot"] = "native-snapshot";
+	DeviceFeature["DoorbellButton"] = "doorbell-button";
+	DeviceFeature["TwoWayAudio"] = "two-way-audio";
+	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
 	/**
-	* Free-form tag for log scoping. Stream-broker uses
-	* `broker:<deviceId>/<profile>`. Decoder session logger surfaces it
-	* on every line so `grep tag=broker:5/high` filters one camera
-	* profile cleanly.
+	* Camera supports the on-firmware autotrack subsystem (subject-
+	* following). Distinct from `PanTiltZoom` because not every PTZ
+	* camera ships autotrack — the admin UI uses this flag to gate
+	* the autotrack toggle / settings card without re-deriving from
+	* the cap registry. Mirrors `ptz-autotrack` cap registration:
+	* driver sets this feature when probe confirms the firmware
+	* surface, and registers the cap in the same code path.
 	*/
-	tag: string().optional(),
+	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
 	/**
-	* Where the session delivers decoded frames (Phase 5 / D9):
+	* Accessory exposes a "trigger on motion" toggle — the parent camera's
+	* motion detection automatically activates this device. Mirrors
+	* `motion-trigger` cap registration: drivers set this feature in the
+	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
 	*
-	* - `'callback'` (default) — the legacy pixel path: decoded frames are
-	*   buffered as `DecodedFrame`s and drained via `pullFrames`.
-	* - `'shm'` — the shared-memory frame plane: decoded frames are written
-	*   into an OS shared-memory ring and drained as zero-pixel
-	*   `FrameHandle`s via `pullHandles`. A session is one mode or the
-	*   other — `pullFrames` returns nothing for an `'shm'` session and
-	*   `pullHandles` returns nothing for a `'callback'` session.
-	*/
-	frameSink: _enum(["callback", "shm"]).default("callback")
-});
-var EncodeProfileSchema = object({
-	video: object({
-		codec: _enum([
-			"h264",
-			"h265",
-			"copy"
-		]),
-		profile: _enum([
-			"baseline",
-			"main",
-			"high"
-		]).optional(),
-		width: number().int().positive().optional(),
-		height: number().int().positive().optional(),
-		fps: number().positive().optional(),
-		bitrateKbps: number().int().positive().optional(),
-		gopFrames: number().int().positive().optional(),
-		bf: number().int().min(0).optional(),
-		preset: _enum([
-			"ultrafast",
-			"superfast",
-			"veryfast",
-			"faster",
-			"fast",
-			"medium"
-		]).optional(),
-		tune: _enum([
-			"zerolatency",
-			"film",
-			"animation"
-		]).optional()
-	}),
-	audio: union([literal("passthrough"), object({
-		codec: _enum([
-			"opus",
-			"aac",
-			"pcmu",
-			"pcma",
-			"copy"
-		]),
-		bitrateKbps: number().int().positive().optional(),
-		sampleRateHz: number().int().positive().optional(),
-		channels: union([literal(1), literal(2)]).optional()
-	})]),
-	/**
-	* ffmpeg input-side args, inserted between the fixed global flags
-	* (`-hide_banner -loglevel error`) and `-i pipe:0`. Free-text array
-	* — the widget surfaces a textarea + suggestion chips for the most-
-	* used demuxer/format options.
-	*/
-	inputArgs: array(string()).optional(),
-	/**
-	* ffmpeg output-side args, inserted between the encode block and
-	* the final `-f <muxer> pipe:1`. Use for muxer options, bitstream
-	* filters, codec-specific overrides. Free-text array.
+	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
+	* fast scalar without binding fetch), notifier rules, and `listAll`
+	* filters that want "all devices with on-motion behaviour".
 	*/
-	outputArgs: array(string()).optional()
-});
-/** Narrow an unknown value to a plain `Record<string, unknown>` or return null. */
-function asJsonObject(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	return { ...value };
-}
-/** Cosine similarity between two embedding vectors */
-function cosineSimilarity(a, b) {
-	if (a.length !== b.length) return 0;
-	let dotProduct = 0;
-	let normA = 0;
-	let normB = 0;
-	for (let i = 0; i < a.length; i++) {
-		dotProduct += a[i] * b[i];
-		normA += a[i] * a[i];
-		normB += b[i] * b[i];
-	}
-	const denom = Math.sqrt(normA) * Math.sqrt(normB);
-	return denom === 0 ? 0 : dotProduct / denom;
-}
+	DeviceFeature["MotionTrigger"] = "motion-trigger";
+	/** Light supports rgb-triplet color via `color` cap. */
+	DeviceFeature["LightColorRgb"] = "light-color-rgb";
+	/** Light supports HSV color via `color` cap. */
+	DeviceFeature["LightColorHsv"] = "light-color-hsv";
+	/** Light supports color-temperature (mired) via `color` cap. */
+	DeviceFeature["LightColorMired"] = "light-color-mired";
+	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
+	*  targetHigh). Gates the range slider UI. */
+	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
+	/** Thermostat exposes target humidity and/or current humidity
+	*  readings. Gates the humidity controls. */
+	DeviceFeature["ClimateHumidity"] = "climate-humidity";
+	/** Thermostat exposes a fan-mode selector. */
+	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
+	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
+	DeviceFeature["ClimatePreset"] = "climate-preset";
+	/** Cover exposes intermediate position control (0..100). Gates the
+	*  position slider UI. */
+	DeviceFeature["CoverPositionable"] = "cover-positionable";
+	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
+	DeviceFeature["CoverTilt"] = "cover-tilt";
+	/** Valve exposes intermediate position control (0..100). Gates the
+	*  position slider / drag surface UI. */
+	DeviceFeature["ValvePositionable"] = "valve-positionable";
+	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
+	DeviceFeature["FanSpeed"] = "fan-speed";
+	/** Fan exposes a preset mode selector. */
+	DeviceFeature["FanPreset"] = "fan-preset";
+	/** Fan exposes blade direction (forward/reverse) — typical of
+	*  ceiling fans. */
+	DeviceFeature["FanDirection"] = "fan-direction";
+	/** Fan exposes an oscillation toggle. */
+	DeviceFeature["FanOscillating"] = "fan-oscillating";
+	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
+	*  field on the UI lock-controls panel. */
+	DeviceFeature["LockPinRequired"] = "lock-pin-required";
+	/** Lock supports a latch-release ("open door") action distinct from
+	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
+	*  `supported_features`. Gates the Open Door button in the UI. */
+	DeviceFeature["LockOpen"] = "lock-open";
+	/** Media player exposes a seek-to-position surface. */
+	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
+	/** Media player exposes a volume-level setter. */
+	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
+	/** Media player exposes a mute toggle distinct from volume=0. */
+	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
+	/** Media player exposes a shuffle toggle. */
+	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
+	/** Media player exposes a repeat mode (off / all / one). */
+	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
+	/** Media player exposes a source / input selector. */
+	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
+	/** Media player exposes a play-arbitrary-media surface (URL / id). */
+	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
+	/** Media player exposes next-track. */
+	DeviceFeature["MediaPlayerNext"] = "media-player-next";
+	/** Media player exposes previous-track. */
+	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
+	/** Media player exposes stop distinct from pause. */
+	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
+	/** Alarm panel requires a PIN code on arm/disarm. */
+	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
+	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
+	*  addition to a textual location. */
+	DeviceFeature["PresenceGps"] = "presence-gps";
+	/** Notifier accepts an inline / URL image attachment. */
+	DeviceFeature["NotifierImage"] = "notifier-image";
+	/** Notifier accepts a priority hint (high/normal/low). */
+	DeviceFeature["NotifierPriority"] = "notifier-priority";
+	/** Notifier accepts a free-form `data` payload for platform-specific
+	*  fields. */
+	DeviceFeature["NotifierData"] = "notifier-data";
+	/** Notifier supports interactive action buttons / callbacks. */
+	DeviceFeature["NotifierActions"] = "notifier-actions";
+	/** Notifier supports per-call recipient targeting (multi-user). */
+	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
+	/** Script runner accepts a variables map on each run invocation. */
+	DeviceFeature["ScriptVariables"] = "script-variables";
+	/** Automation `trigger` accepts a skipCondition flag — fires the
+	*  automation's actions while bypassing its condition block. */
+	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
+	return DeviceFeature;
+}({});
 /**
-import { errMsg } from '@camstack/types'
-* Extract a human-readable message from an unknown error value.
-* Replaces the ubiquitous `errMsg(err)` pattern.
+* Semantic role a device plays within its parent. Populated by driver
+* addons when creating accessory devices (Reolink siren/floodlight/
+* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
+* admin UI to pick icons, labels, and widgets — a `Switch` with
+* `role: Floodlight` renders as a bulb with a brightness slider,
+* whereas a `Switch` with `role: Siren` renders as a klaxon.
+*
+* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
+* sqlite as a nullable TEXT column — old rows keep working unchanged.
 */
-function errMsg(err) {
-	if (err instanceof Error) return err.message;
-	if (typeof err === "string") return err;
-	return String(err);
+var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
+	DeviceRole["Siren"] = "siren";
+	DeviceRole["Floodlight"] = "floodlight";
+	DeviceRole["Spotlight"] = "spotlight";
+	DeviceRole["PirSensor"] = "pir-sensor";
+	DeviceRole["Chime"] = "chime";
+	DeviceRole["Autotrack"] = "autotrack";
+	DeviceRole["Nightvision"] = "nightvision";
+	DeviceRole["PrivacyMask"] = "privacy-mask";
+	DeviceRole["Doorbell"] = "doorbell";
+	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
+	*  real Switch device for UI rendering / export adapters. */
+	DeviceRole["BinaryHelper"] = "binary-helper";
+	/** Generic motion / occupancy / moving event source. Distinct from
+	*  the camera accessory PirSensor role: that one is a camera child;
+	*  this is a standalone HA / 3rd-party motion sensor. */
+	DeviceRole["MotionSensor"] = "motion-sensor";
+	DeviceRole["ContactSensor"] = "contact-sensor";
+	DeviceRole["LeakSensor"] = "leak-sensor";
+	DeviceRole["SmokeSensor"] = "smoke-sensor";
+	DeviceRole["COSensor"] = "co-sensor";
+	DeviceRole["GasSensor"] = "gas-sensor";
+	DeviceRole["TamperSensor"] = "tamper-sensor";
+	DeviceRole["VibrationSensor"] = "vibration-sensor";
+	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
+	DeviceRole["SoundSensor"] = "sound-sensor";
+	/** Fallback for `binary_sensor` without a known `device_class`. */
+	DeviceRole["BinarySensor"] = "binary-sensor";
+	DeviceRole["TemperatureSensor"] = "temperature-sensor";
+	DeviceRole["HumiditySensor"] = "humidity-sensor";
+	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
+	DeviceRole["PressureSensor"] = "pressure-sensor";
+	DeviceRole["PowerSensor"] = "power-sensor";
+	DeviceRole["EnergySensor"] = "energy-sensor";
+	DeviceRole["VoltageSensor"] = "voltage-sensor";
+	DeviceRole["CurrentSensor"] = "current-sensor";
+	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
+	/** Battery level (numeric % via `sensor` OR low-bool via
+	*  `binary_sensor` — the cap distinguishes via the value type). */
+	DeviceRole["BatterySensor"] = "battery-sensor";
+	/** Fallback for `sensor` numeric without a known `device_class`. */
+	DeviceRole["NumericSensor"] = "numeric-sensor";
+	/** String / enum state (HA `sensor` with `state_class: enum` or
+	*  `attributes.options`). */
+	DeviceRole["EnumSensor"] = "enum-sensor";
+	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
+	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
+	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
+	DeviceRole["DateTimeSensor"] = "datetime-sensor";
+	/** Last-resort fallback when nothing else matches. */
+	DeviceRole["GenericSensor"] = "generic-sensor";
+	DeviceRole["NumericControl"] = "numeric-control";
+	DeviceRole["SelectControl"] = "select-control";
+	DeviceRole["TextControl"] = "text-control";
+	DeviceRole["DateTimeControl"] = "datetime-control";
+	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
+	*  rich features (image, priority, channel routing). */
+	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
+	/** Chat / messaging service (HA `notify.telegram_*`,
+	*  `notify.discord_*`, etc.). */
+	DeviceRole["MessagingNotifier"] = "messaging-notifier";
+	/** Email-based delivery (HA `notify.smtp`, etc.). */
+	DeviceRole["EmailNotifier"] = "email-notifier";
+	/** Fallback when the notifier service name doesn't match a known
+	*  pattern. */
+	DeviceRole["GenericNotifier"] = "generic-notifier";
+	return DeviceRole;
+}({});
+/**
+* Generic types for capability definitions.
+*
+* A capability is defined with Zod schemas for methods, events, and settings.
+* TypeScript types are inferred via z.infer<> — zero duplication.
+*
+* Pattern:
+*   1. Define Zod schemas for data, methods, settings
+*   2. Export const capabilityDef = { ... } satisfies CapabilityDefinition
+*   3. Export type IProvider = InferProvider<typeof capabilityDef>
+*   4. Addon implements IProvider
+*   5. Registry auto-mounts tRPC router from definition.methods
+*/
+/**
+* Output schema shared by the contribution + live methods.
+*
+* Mirrors the `ConfigUISchemaWithValues` shape (sections[] + optional
+* tabs[]) without importing from `../interfaces/config-ui.js` — a
+* concrete-but-lenient Zod object keeps tRPC output inference happy
+* (using `z.unknown()` here collapses unrelated router branches to
+* `unknown` when the generator re-inlines the huge AppRouter type).
+*
+* `.passthrough()` on sections/fields accepts whatever FormBuilder
+* extensions the caller adds (showWhen, displayScale, …) without
+* rebuilding every time a new field kind is introduced.
+*/
+var ContributionSectionSchema = object({
+	id: string(),
+	title: string(),
+	description: string().optional(),
+	style: _enum(["card", "accordion"]).optional(),
+	defaultCollapsed: boolean().optional(),
+	columns: union([
+		literal(1),
+		literal(2),
+		literal(3),
+		literal(4)
+	]).optional(),
+	tab: string().optional(),
+	location: _enum(["settings", "top-tab"]).optional(),
+	order: number().optional(),
+	fields: array(any())
+});
+object({
+	tabs: array(object({
+		id: string(),
+		label: string(),
+		icon: string(),
+		order: number().optional()
+	})).optional(),
+	sections: array(ContributionSectionSchema)
+}).nullable();
+object({ deviceId: number() }), object({ deviceId: number() }), object({
+	deviceId: number(),
+	patch: record(string(), unknown())
+}), object({ success: literal(true) });
+object({ deviceId: number() }), unknown().nullable();
+/** Shorthand to define a method schema */
+function method(input, output, options) {
+	return {
+		input,
+		output,
+		kind: options?.kind ?? "query",
+		auth: options?.auth ?? "protected",
+		...options?.access !== void 0 ? { access: options.access } : {},
+		timeoutMs: options?.timeoutMs
+	};
 }
-var YAMNET_TO_MACRO = {
-	mapping: {
-		Speech: "speech",
-		"Child speech, kid speaking": "speech",
-		Conversation: "speech",
-		"Narration, monologue": "speech",
-		Babbling: "speech",
-		Whispering: "speech",
-		"Speech synthesizer": "speech",
-		Humming: "speech",
-		Rapping: "speech",
-		Singing: "speech",
-		Choir: "speech",
-		"Child singing": "speech",
-		Shout: "scream",
-		Bellow: "scream",
-		Yell: "scream",
-		Screaming: "scream",
-		"Children shouting": "scream",
-		Whoop: "scream",
-		"Crying, sobbing": "crying",
-		"Baby cry, infant cry": "crying",
-		Whimper: "crying",
-		"Wail, moan": "crying",
-		Groan: "crying",
-		Laughter: "laughter",
-		"Baby laughter": "laughter",
-		Giggle: "laughter",
-		Snicker: "laughter",
-		"Belly laugh": "laughter",
-		"Chuckle, chortle": "laughter",
-		Music: "music",
-		"Musical instrument": "music",
-		Guitar: "music",
-		Piano: "music",
-		Drum: "music",
-		"Drum kit": "music",
-		"Violin, fiddle": "music",
-		Flute: "music",
-		Saxophone: "music",
-		Trumpet: "music",
-		Synthesizer: "music",
-		"Pop music": "music",
-		"Rock music": "music",
-		"Hip hop music": "music",
-		"Classical music": "music",
-		Jazz: "music",
-		"Electronic music": "music",
-		"Background music": "music",
-		Dog: "dog",
-		Bark: "dog",
-		Yip: "dog",
-		Howl: "dog",
-		"Bow-wow": "dog",
-		Growling: "dog",
-		"Whimper (dog)": "dog",
-		Cat: "cat",
-		Purr: "cat",
-		Meow: "cat",
-		Hiss: "cat",
-		Caterwaul: "cat",
-		Bird: "bird",
-		"Bird vocalization, bird call, bird song": "bird",
-		"Chirp, tweet": "bird",
-		Squawk: "bird",
-		Crow: "bird",
-		Owl: "bird",
-		"Pigeon, dove": "bird",
-		Animal: "animal",
-		"Domestic animals, pets": "animal",
-		"Livestock, farm animals, working animals": "animal",
-		Horse: "animal",
-		"Cattle, bovinae": "animal",
-		Pig: "animal",
-		Sheep: "animal",
-		Goat: "animal",
-		Frog: "animal",
-		Insect: "animal",
-		Cricket: "animal",
-		Alarm: "alarm",
-		"Alarm clock": "alarm",
-		"Smoke detector, smoke alarm": "alarm",
-		"Fire alarm": "alarm",
-		Buzzer: "alarm",
-		"Civil defense siren": "alarm",
-		"Car alarm": "alarm",
-		Siren: "siren",
-		"Police car (siren)": "siren",
-		"Ambulance (siren)": "siren",
-		"Fire engine, fire truck (siren)": "siren",
-		"Emergency vehicle": "siren",
-		Foghorn: "siren",
-		Doorbell: "doorbell",
-		"Ding-dong": "doorbell",
-		Knock: "doorbell",
-		Tap: "doorbell",
-		Glass: "glass_breaking",
-		Shatter: "glass_breaking",
-		"Chink, clink": "glass_breaking",
-		"Gunshot, gunfire": "gunshot",
-		"Machine gun": "gunshot",
-		Explosion: "gunshot",
-		Fireworks: "gunshot",
-		Firecracker: "gunshot",
-		"Artillery fire": "gunshot",
-		"Cap gun": "gunshot",
-		Boom: "gunshot",
-		Vehicle: "vehicle",
-		Car: "vehicle",
-		Truck: "vehicle",
-		Bus: "vehicle",
-		Motorcycle: "vehicle",
-		"Car passing by": "vehicle",
-		"Vehicle horn, car horn, honking": "vehicle",
-		"Traffic noise, roadway noise": "vehicle",
-		Train: "vehicle",
-		Aircraft: "vehicle",
-		Helicopter: "vehicle",
-		Bicycle: "vehicle",
-		Skateboard: "vehicle",
-		Fire: "fire",
-		Crackle: "fire",
-		Water: "water",
-		Rain: "water",
-		Raindrop: "water",
-		"Rain on surface": "water",
-		Stream: "water",
-		Waterfall: "water",
-		Ocean: "water",
-		"Waves, surf": "water",
-		"Splash, splatter": "water",
-		Wind: "wind",
-		Thunderstorm: "wind",
-		Thunder: "wind",
-		"Wind noise (microphone)": "wind",
-		"Rustling leaves": "wind",
-		Door: "door",
-		"Sliding door": "door",
-		Slam: "door",
-		"Cupboard open or close": "door",
-		"Walk, footsteps": "footsteps",
-		Run: "footsteps",
-		Shuffle: "footsteps",
-		Crowd: "crowd",
-		Chatter: "crowd",
-		Cheering: "crowd",
-		Applause: "crowd",
-		"Children playing": "crowd",
-		"Hubbub, speech noise, speech babble": "crowd",
-		Telephone: "telephone",
-		"Telephone bell ringing": "telephone",
-		Ringtone: "telephone",
-		"Telephone dialing, DTMF": "telephone",
-		"Busy signal": "telephone",
-		Engine: "engine",
-		"Engine starting": "engine",
-		Idling: "engine",
-		"Accelerating, revving, vroom": "engine",
-		"Light engine (high frequency)": "engine",
-		"Medium engine (mid frequency)": "engine",
-		"Heavy engine (low frequency)": "engine",
-		"Lawn mower": "engine",
-		Chainsaw: "engine",
-		Hammer: "tools",
-		Jackhammer: "tools",
-		Sawing: "tools",
-		"Power tool": "tools",
-		Drill: "tools",
-		Sanding: "tools",
-		Silence: "silence"
-	},
-	preserveOriginal: false
-};
-var APPLE_SA_TO_MACRO = {
-	mapping: {
-		speech: "speech",
-		child_speech: "speech",
-		conversation: "speech",
-		whispering: "speech",
-		singing: "speech",
-		humming: "speech",
-		shout: "scream",
-		yell: "scream",
-		screaming: "scream",
-		crying: "crying",
-		baby_crying: "crying",
-		sobbing: "crying",
-		laughter: "laughter",
-		baby_laughter: "laughter",
-		giggling: "laughter",
-		music: "music",
-		guitar: "music",
-		piano: "music",
-		drums: "music",
-		dog_bark: "dog",
-		dog_bow_wow: "dog",
-		dog_growling: "dog",
-		dog_howl: "dog",
-		cat_meow: "cat",
-		cat_purr: "cat",
-		cat_hiss: "cat",
-		bird: "bird",
-		bird_chirp: "bird",
-		bird_squawk: "bird",
-		animal: "animal",
-		horse: "animal",
-		cow_moo: "animal",
-		insect: "animal",
-		alarm: "alarm",
-		smoke_alarm: "alarm",
-		fire_alarm: "alarm",
-		car_alarm: "alarm",
-		siren: "siren",
-		police_siren: "siren",
-		ambulance_siren: "siren",
-		doorbell: "doorbell",
-		door_knock: "doorbell",
-		knocking: "doorbell",
-		glass_breaking: "glass_breaking",
-		glass_shatter: "glass_breaking",
-		gunshot: "gunshot",
-		explosion: "gunshot",
-		fireworks: "gunshot",
-		car: "vehicle",
-		truck: "vehicle",
-		motorcycle: "vehicle",
-		car_horn: "vehicle",
-		vehicle_horn: "vehicle",
-		traffic: "vehicle",
-		fire: "fire",
-		fire_crackle: "fire",
-		water: "water",
-		rain: "water",
-		ocean: "water",
-		splash: "water",
-		wind: "wind",
-		thunder: "wind",
-		thunderstorm: "wind",
-		door: "door",
-		door_slam: "door",
-		sliding_door: "door",
-		footsteps: "footsteps",
-		walking: "footsteps",
-		running: "footsteps",
-		crowd: "crowd",
-		chatter: "crowd",
-		cheering: "crowd",
-		applause: "crowd",
-		telephone_ring: "telephone",
-		ringtone: "telephone",
-		engine: "engine",
-		engine_starting: "engine",
-		lawn_mower: "engine",
-		chainsaw: "engine",
-		hammer: "tools",
-		jackhammer: "tools",
-		drill: "tools",
-		power_tool: "tools",
-		silence: "silence"
-	},
-	preserveOriginal: false
-};
-var _macroLookup = /* @__PURE__ */ new Map();
-for (const [k, v] of Object.entries(YAMNET_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
-for (const [k, v] of Object.entries(APPLE_SA_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
-var DeviceType = /* @__PURE__ */ function(DeviceType) {
-	DeviceType["Camera"] = "camera";
-	DeviceType["Hub"] = "hub";
-	DeviceType["Light"] = "light";
-	DeviceType["Siren"] = "siren";
-	DeviceType["Switch"] = "switch";
-	DeviceType["Sensor"] = "sensor";
-	DeviceType["Thermostat"] = "thermostat";
-	DeviceType["Button"] = "button";
-	/** Generic stateless event emitter — carries a device's EXACT declared
-	*  event vocabulary verbatim (no normalization). Installed with the
-	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
-	*  HA bus events (e.g. `zha_event`, generic). */
-	DeviceType["EventEmitter"] = "event-emitter";
-	/** Firmware/software update entity — current vs available version,
-	*  updatable flag, update state, and an install action. Installed with
-	*  the `update` cap. Sources: Homematic firmware-update channels (and
-	*  reusable by other providers, e.g. HA `update.*` entities). */
-	DeviceType["Update"] = "update";
-	DeviceType["Generic"] = "generic";
-	/** Generic notification delivery target (HA `notify.<service>`, future
-	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
-	*  endpoint; the `notifier` cap defines the send surface. */
-	DeviceType["Notifier"] = "notifier";
-	/** Pre-recorded action sequence with optional parameters
-	*  (HA `script.*`). Runnable via `script-runner` cap. */
-	DeviceType["Script"] = "script";
-	/** Automation rule (HA `automation.*`) — enable/disable + manual
-	*  trigger surface exposed via `automation-control` cap. */
-	DeviceType["Automation"] = "automation";
-	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
-	DeviceType["Lock"] = "lock";
-	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
-	*  `valve.*`). `cover` cap with sub-roles for variant. */
-	DeviceType["Cover"] = "cover";
-	/** Pipe / water / gas valve with open/close/stop and optional
-	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
-	*  modelled on the same open/closed lifecycle. */
-	DeviceType["Valve"] = "valve";
-	/** Humidifier / dehumidifier with on/off + target humidity + mode
-	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
-	*  modelled on the same target / mode lifecycle. */
-	DeviceType["Humidifier"] = "humidifier";
-	/** Water heater / boiler with target temperature + operation mode +
-	*  away mode (HA `water_heater.*`). `water-heater` cap — a
-	*  climate-family actuator. */
-	DeviceType["WaterHeater"] = "water-heater";
-	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
-	DeviceType["Fan"] = "fan";
-	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
-	*  the camera surface — those use `Camera`. `media-player` cap. */
-	DeviceType["MediaPlayer"] = "media-player";
-	/** Security panel / alarm system (HA `alarm_control_panel.*`).
-	*  `alarm-panel` cap. */
-	DeviceType["AlarmPanel"] = "alarm-panel";
-	/** Generic user-settable input (HA `number` / `input_number` / `select`
-	*  / `input_select` / `text` / `input_text` / `input_datetime`).
-	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
-	*  TextControl / DateTimeControl. */
-	DeviceType["Control"] = "control";
-	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
-	*  `presence` cap. */
-	DeviceType["Presence"] = "presence";
-	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
-	*  `weather` cap. */
-	DeviceType["Weather"] = "weather";
-	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
-	DeviceType["Vacuum"] = "vacuum";
-	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
-	*  `lawn-mower-control` cap. */
-	DeviceType["LawnMower"] = "lawn-mower";
-	/** Physical HA device group — parent container for entity-children
-	*  adopted from a single HA device entry. Not renderable as a
-	*  standalone device; exists only to anchor child entities. */
-	DeviceType["Container"] = "container";
-	/** Single still-image entity (HA `image.*`). Read-only display of an
-	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
-	DeviceType["Image"] = "image";
-	return DeviceType;
-}({});
-var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
-	DeviceFeature["BatteryOperated"] = "battery-operated";
-	DeviceFeature["Rebootable"] = "rebootable";
+var StaticDirOutputSchema = object({ staticDir: string() });
+var VersionOutputSchema = object({ version: string() });
+method(_void(), StaticDirOutputSchema), method(_void(), VersionOutputSchema);
+/**
+* device-ops — device-scoped cap that unifies the per-IDevice operations
+* previously routed through the `.device-ops` Moleculer bridge service.
+*
+* Each worker that hosts live `IDevice` instances auto-registers a native
+* provider for this cap (per device) backed by its local
+* `DeviceRegistry`. Hub-side callers reach it transparently through
+* `ctx.fetchDevice(id).deviceOps.*` — the DeviceProxy injects
+* `deviceId` + `nodeId` and dispatches through the standard cap-router,
+* so there's no parallel bridge path anymore.
+*
+* The surface is intentionally small — every method corresponds to a
+* single action on the live `IDevice` (or `ICameraDevice` for
+* `getStreamSources`). Richer orchestration (enable/disable with
+* integration plumbing, bulk updates) stays in the `device-manager` cap;
+* `device-ops` is the per-device primitive the device-manager routes to.
+*/
+var StreamSourceEntrySchema = object({
+	id: string(),
+	label: string(),
+	protocol: _enum([
+		"rtsp",
+		"rtmp",
+		"annexb",
+		"http-mjpeg",
+		"webrtc",
+		"custom"
+	]),
+	url: string().optional(),
+	resolution: object({
+		width: number(),
+		height: number()
+	}).optional(),
+	fps: number().optional(),
+	bitrate: number().optional(),
+	codec: string().optional(),
+	profileHint: CamProfileSchema.optional(),
+	sdp: string().optional()
+});
+var ConfigEntrySchema$1 = object({
+	key: string(),
+	value: unknown()
+});
+var RawStateResultSchema = object({
+	/** Originating provider id, e.g. 'homeassistant' | 'reolink' | 'hikvision'. */
+	source: string(),
+	/** Opaque, DISPLAY-SAFE upstream blob (no secrets/PII). */
+	data: record(string(), unknown())
+});
+method(object({ deviceId: number() }), array(StreamSourceEntrySchema)), method(object({ deviceId: number() }), array(ConfigEntrySchema$1)), method(object({
+	deviceId: number(),
+	values: record(string(), unknown())
+}), _void(), { kind: "mutation" }), method(object({
+	deviceId: number(),
+	action: string().min(1),
+	input: unknown()
+}), unknown(), { kind: "mutation" }), method(object({ deviceId: number() }), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), unknown().nullable()), method(object({ deviceId: number() }), RawStateResultSchema.nullable(), { auth: "protected" });
+//#endregion
+//#region ../types/dist/err-msg-IQTHeDzc.mjs
+/**
+import { errMsg } from '@camstack/types'
+* Extract a human-readable message from an unknown error value.
+* Replaces the ubiquitous `errMsg(err)` pattern.
+*/
+function errMsg(err) {
+	if (err instanceof Error) return err.message;
+	if (typeof err === "string") return err;
+	return String(err);
+}
+//#endregion
+//#region ../types/dist/index.mjs
+/**
+* Deep wiring healthcheck — snapshot of active reachability probes across
+* every declared capability + widget of every installed plugin, on every
+* node. Produced by the backend `WiringHealthService` and surfaced via
+* `GET /health/wiring`, the tRPC `health.wiring` query, and the boot-gate.
+*
+* Unlike `/health` (process liveness), this reflects whether each cap/widget
+* is actually *reachable* over the real cap-dispatch path. See spec
+* `docs/superpowers/specs/2026-05-23-deep-healthcheck-design.md`.
+*/
+/** What kind of target a probe addressed. */
+var wiringProbeKindSchema = _enum([
+	"singleton",
+	"device",
+	"widget"
+]);
+/** Result of probing a single (cap|widget [, device]) target. */
+var wiringProbeResultSchema = object({
+	capName: string(),
+	kind: wiringProbeKindSchema,
+	deviceId: number().optional(),
+	reachable: boolean(),
+	latencyMs: number(),
+	error: string().optional()
+});
+/** Per-addon roll-up of cap + widget probe results. */
+var wiringAddonHealthSchema = object({
+	addonId: string(),
+	caps: array(wiringProbeResultSchema).readonly(),
+	widgets: array(wiringProbeResultSchema).readonly()
+});
+/** Per-node roll-up. */
+var wiringNodeHealthSchema = object({
+	nodeId: string(),
+	addons: array(wiringAddonHealthSchema).readonly()
+});
+object({
+	/** True only when every probed target is reachable. */
+	ok: boolean(),
+	/** True when at least one target is unreachable. */
+	degraded: boolean(),
+	checkedAt: string(),
+	nodes: array(wiringNodeHealthSchema).readonly(),
+	summary: object({
+		total: number(),
+		reachable: number(),
+		unreachable: number()
+	})
+});
+var MODEL_FORMATS = [
+	"onnx",
+	"coreml",
+	"openvino",
+	"tflite",
+	"pt"
+];
+/**
+* Numeric day-of-week: 0 = Sunday … 6 = Saturday (matches `Date.getDay`).
+* Named `RecordingWeekday` to avoid collision with the string-union
+* `Weekday` exported from `interfaces/timezones.ts`.
+*/
+var RecordingWeekdaySchema = number().int().min(0).max(6);
+var HHMM = /^([01]\d|2[0-3]):[0-5]\d$/;
+var RecordingScheduleSchema = discriminatedUnion("kind", [object({ kind: literal("always") }), object({
+	kind: literal("timeOfDay"),
+	start: string().regex(HHMM),
+	end: string().regex(HHMM),
+	/** Restrict to these weekdays; omit = every day. */
+	days: array(RecordingWeekdaySchema).optional()
+})]);
+var RecordingModeSchema = _enum([
+	"continuous",
+	"onMotion",
+	"onAudioThreshold"
+]);
+/**
+* First-class, authoritative per-camera storage mode — the netta choice the UI
+* reads directly (never inferred from `rules`):
+*  - `off`        — not recording.
+*  - `events`     — record only around triggers (motion / audio threshold),
+*                   with pre/post-buffer.
+*  - `continuous` — record 24/7 within the schedule.
+*
+* `mode` compiles one-way to the internal `rules[]` consumed by the policy
+* engine (see `compileRules`); `rules[]` is never authored directly anymore.
+*/
+var RecordingStorageModeSchema = _enum([
+	"off",
+	"events",
+	"continuous"
+]);
+/** Which detectors trigger an `events`-mode recording. */
+var RecordingTriggersSchema = object({
+	motion: boolean().optional(),
+	audioThresholdDbfs: number().optional()
+});
+/**
+* Mode of a single recording band — the recorder per-band vocabulary.
+*
+* Distinct from `RecordingStorageModeSchema` (which carries `off`): a band is
+* only ever `continuous` or `events`; "off" is expressed by the absence of a
+* covering band, not by a band value.
+*/
+var RecordingBandModeSchema = _enum(["continuous", "events"]);
+/**
+* Triggers for an `events`-mode band. Identical shape to
+* `RecordingTriggersSchema` — reuse that schema as the band trigger type so the
+* two never drift.
+*/
+var RecordingBandTriggersSchema = RecordingTriggersSchema;
+/**
+* A single mode-per-band window — the canonical recorder band shape, the
+* single source of truth re-used by `addon-pipeline/recorder`.
+*
+* `days` lists the weekdays the band covers (empty = every day, matching the
+* band engine's `applies` rule). `start`/`end` are `HH:MM`; an `end <= start`
+* span wraps past midnight (handled by the band engine).
+*/
+var RecordingBandSchema = object({
+	days: array(RecordingWeekdaySchema),
+	start: string().regex(HHMM),
+	end: string().regex(HHMM),
+	mode: RecordingBandModeSchema,
+	triggers: RecordingBandTriggersSchema.optional(),
+	preBufferSec: number().min(0).optional(),
+	postBufferSec: number().min(0).optional()
+});
+var RecordingRuleSchema = object({
+	schedule: RecordingScheduleSchema,
+	mode: RecordingModeSchema,
+	/** Seconds of footage to retain BEFORE a trigger (applied at keep/discard). */
+	preBufferSec: number().min(0).default(0),
+	/** Keep recording until this many seconds after the last trigger. */
+	postBufferSec: number().min(0).default(0),
+	/** Each new trigger restarts the post-buffer window. */
+	resetTimeoutOnNewEvent: boolean().default(true),
+	/** onAudioThreshold only — dBFS level that counts as a trigger. */
+	thresholdDbfs: number().optional()
+});
+/**
+* Per-device retention overrides. Every field is optional; an unset or `0`
+* value inherits the node-wide recorder default. Only footage-lifetime limits
+* live per-camera: `maxAgeDays` and `maxSizeGb`. The disk-occupancy threshold
+* (when the volume is too full to keep recording) is NOT a per-camera concern —
+* it belongs to the StorageLocation (`StorageLocation.config.minFreePercent`),
+* shared by every camera writing to that volume.
+*/
+var RecordingRetentionSchema = object({
+	maxAgeDays: number().min(0).optional(),
+	maxSizeGb: number().min(0).optional()
+});
+/**
+* The full per-camera recording intent — the wire shape of a RecordingTarget.
+*
+* `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
+* are its mode-specific parameters. `rules` is a DEPRECATED authoring input kept
+* only for transition + migration (`migrateRulesToMode`); the policy engine
+* consumes the compiled output of `compileRules(config)`, never `rules` directly.
+*/
+var RecordingConfigSchema = object({
+	enabled: boolean(),
+	/** Authoritative storage mode. Absent on legacy targets → derived once via
+	*  `migrateRulesToMode`, then persisted. */
+	mode: RecordingStorageModeSchema.optional(),
+	profiles: array(CamProfileSchema).optional(),
+	segmentSeconds: number().int().positive().optional(),
+	/** Shared recording time-bands for `events` & `continuous` — record only when
+	*  the wall-clock falls inside one of these windows. Omit or empty = always.
+	*  `continuous` compiles to one rule per band; `events` to band × trigger. */
+	schedules: array(RecordingScheduleSchema).optional(),
+	/** Legacy single-band predecessor of `schedules`. Read-compat only — it is
+	*  normalized into `schedules` on read and never written going forward. (Not
+	*  tagged `@deprecated`: the normalization paths must read it cast-free.) */
+	schedule: RecordingScheduleSchema.optional(),
+	/** `events`-mode only — which detectors trigger a recording. */
+	triggers: RecordingTriggersSchema.optional(),
+	/** `events`-mode only — seconds retained before / after a trigger. */
+	preBufferSec: number().min(0).optional(),
+	postBufferSec: number().min(0).optional(),
+	/** DEPRECATED authoring input; retained for migration/transition. */
+	rules: array(RecordingRuleSchema).optional(),
+	/**
+	* AUTHORITATIVE mode-per-band recording model (recorder). When present it
+	* is the single source of truth; the legacy `mode`/`schedules`/`schedule`/
+	* `triggers`/`rules` fields above are kept for READ-COMPAT only and are
+	* derived into bands once via `migrateConfigToBands`.
+	*/
+	bands: array(RecordingBandSchema).optional(),
+	retention: RecordingRetentionSchema.optional()
+});
+/**
+* `StorageLocationType` — an addon-declared id that identifies the *kind* of
+* storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
+* so the persisted record schema and the consumer-facing cap can both consume it
+* without forming a circular import. The `storage` cap re-exports it
+* verbatim for back-compat.
+*
+* This Zod schema is the **authoritative source** for `StorageLocationType`.
+* The TS alias in `./storage.ts` re-exports `z.infer<typeof
+* StorageLocationTypeSchema>` so the wire surface (cap) and the legacy
+* `IStorageProvider` interface stay in lockstep.
+*
+* The type is now an **open string** (not a closed enum) — addons declare
+* their own location kinds via `StorageLocationDeclaration.id`. The regex
+* enforces a safe id format: lowercase-start, alphanumeric + hyphens.
+*/
+var StorageLocationTypeSchema = string().regex(/^[a-z][a-zA-Z0-9-]*$/);
+/**
+* Persisted record for a storage location instance. Operators can register
+* multiple instances for multi-cardinality types (e.g. two `backups`
+* locations with different `providerId`s). Cardinality is now declared per
+* location via `StorageLocationDeclaration.cardinality` — the static
+* `STORAGE_LOCATION_CARDINALITY` map has been removed.
+*
+* `id` is a stable namespaced string of the form `<type>:<slug>`.
+* The default location for a type uses `id === <type>:default` by
+* convention (the bare type ref like `'backups'` resolves to it).
+*
+* `isSystem: true` marks a location as orchestrator-seeded and
+* undeletable. The bootstrap-installed defaults (one per type) carry
+* this flag; operator-added locations don't. Editing the config of
+* a system location is allowed (path migration, provider swap) but
+* deleting it is rejected at the cap level.
+*/
+var StorageLocationSchema = object({
+	id: string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
+	type: string(),
+	displayName: string().min(1),
+	providerId: string().min(1),
+	config: record(string(), unknown()),
+	/**
+	* Cluster node this location physically lives on. REQUIRED for node-local
+	* providers (filesystem — the path exists on one node's disk), null/absent
+	* for node-agnostic providers (S3/SFTP/WebDAV, reachable from any node).
+	* `'hub'` is the hub node. Validated against the provider's `nodeLocal`
+	* flag at upsert time, not here (the schema is provider-agnostic).
+	*/
+	nodeId: string().optional(),
+	isDefault: boolean().default(false),
+	isSystem: boolean().default(false),
+	createdAt: number(),
+	updatedAt: number()
+});
+/**
+* Reference accepted by consumer-facing `api.storage.*` calls.
+* Either:
+*  - a `StorageLocationType` (e.g. `'backups'`) → orchestrator resolves to the default of that type
+*  - a fully-qualified id (e.g. `'backups:nas-01'`) → addresses a specific instance
+*
+* The orchestrator's `resolveRef(ref)` handles both cases.
+*/
+var StorageLocationRefSchema = union([StorageLocationTypeSchema, string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/)]);
+/**
+* `StorageLocationDeclaration` — a single storage-location entry declared by
+* an addon in its `package.json` under `camstack.storageLocations`.
+*
+* Design intent:
+* - **Addon declares its needs** — each addon describes the logical storage
+*   slots it requires (e.g. `recordings`, `recordingsLow`) without caring
+*   about the physical path.
+* - **Kernel aggregates** — at boot the kernel collects declarations from all
+*   installed addons, deduplicates by `id`, and exposes the union via the
+*   storage-locations settings surface.
+* - **Orchestrator seeds** — for every declared `id` the orchestrator ensures
+*   at least one instance named `<id>:default` is present, using
+*   `defaultsTo` to inherit the resolved root from another location when the
+*   declaration is a derivative slot (e.g. `recordingsLow` defaults to
+*   `recordings`).
+* - **ids are global** — `id` values are shared across the entire deployment;
+*   two addons declaring the same `id` must agree on `cardinality` (validated
+*   at kernel aggregation time, not here).
+*/
+var StorageLocationDeclarationSchema = object({
+	/**
+	* Global location identifier, e.g. `recordings` or `recordingsLow`.
+	* Must start with a lowercase letter and may contain letters, digits, and
+	* hyphens.
+	*/
+	id: string().regex(/^[a-z][a-zA-Z0-9-]*$/, { message: "id must start with a lowercase letter and contain only letters, digits, or hyphens" }),
+	/** Human-readable name shown in the admin UI. */
+	displayName: string().min(1, { message: "displayName must not be empty" }),
+	/** Optional longer explanation of what data this location stores. */
+	description: string().optional(),
+	/**
+	* `single` — exactly one instance of this location is allowed system-wide
+	* (e.g. `logs`, `models`). The operator can edit it but not add more.
+	* `multi`  — the operator may register several instances (e.g. a second
+	* `recordings` on a NAS for disk tiering); one is the default at any time.
+	*/
+	cardinality: _enum(["single", "multi"]),
+	/**
+	* When set, the default instance for this location inherits its resolved
+	* root from the named location's default instance. Useful for derivative
+	* slots (e.g. `recordingsLow` → `recordings`) so operators only need to
+	* configure the primary location.
+	*/
+	defaultsTo: string().optional()
+});
+var DecoderStatsSchema = object({
+	inputFps: number(),
+	outputFps: number(),
+	avgDecodeTimeMs: number(),
+	droppedFrames: number()
+});
+var DecoderSessionConfigSchema = object({
+	codec: string(),
+	maxFps: number().default(0),
+	outputFormat: _enum([
+		"jpeg",
+		"rgb",
+		"bgr",
+		"yuv420",
+		"gray"
+	]).default("jpeg"),
+	scale: number().default(1),
+	width: number().optional(),
+	height: number().optional(),
 	/**
-	* Device supports an on-demand re-sync of its derived spec with its
-	* upstream source — drives the generic Re-sync button. The owning
-	* provider implements the action via the `device-adoption.resync` cap.
+	* Identifier of the camera this decoder session serves. Optional
+	* because the cap is generic (any caller could request decode), but
+	* stream-broker passes it so decoder logs include `deviceId` for
+	* per-camera filtering when diagnosing failures (e.g. node-av
+	* sendPacket errors on a single hung camera).
 	*/
-	DeviceFeature["Resyncable"] = "resyncable";
-	DeviceFeature["NativeSnapshot"] = "native-snapshot";
-	DeviceFeature["DoorbellButton"] = "doorbell-button";
-	DeviceFeature["TwoWayAudio"] = "two-way-audio";
-	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
+	deviceId: number().int().nonnegative().optional(),
 	/**
-	* Camera supports the on-firmware autotrack subsystem (subject-
-	* following). Distinct from `PanTiltZoom` because not every PTZ
-	* camera ships autotrack — the admin UI uses this flag to gate
-	* the autotrack toggle / settings card without re-deriving from
-	* the cap registry. Mirrors `ptz-autotrack` cap registration:
-	* driver sets this feature when probe confirms the firmware
-	* surface, and registers the cap in the same code path.
+	* Free-form tag for log scoping. Stream-broker uses
+	* `broker:<deviceId>/<profile>`. Decoder session logger surfaces it
+	* on every line so `grep tag=broker:5/high` filters one camera
+	* profile cleanly.
 	*/
-	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
+	tag: string().optional(),
 	/**
-	* Accessory exposes a "trigger on motion" toggle — the parent camera's
-	* motion detection automatically activates this device. Mirrors
-	* `motion-trigger` cap registration: drivers set this feature in the
-	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
+	* Where the session delivers decoded frames (Phase 5 / D9):
 	*
-	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
-	* fast scalar without binding fetch), notifier rules, and `listAll`
-	* filters that want "all devices with on-motion behaviour".
+	* - `'callback'` (default) — the legacy pixel path: decoded frames are
+	*   buffered as `DecodedFrame`s and drained via `pullFrames`.
+	* - `'shm'` — the shared-memory frame plane: decoded frames are written
+	*   into an OS shared-memory ring and drained as zero-pixel
+	*   `FrameHandle`s via `pullHandles`. A session is one mode or the
+	*   other — `pullFrames` returns nothing for an `'shm'` session and
+	*   `pullHandles` returns nothing for a `'callback'` session.
 	*/
-	DeviceFeature["MotionTrigger"] = "motion-trigger";
-	/** Light supports rgb-triplet color via `color` cap. */
-	DeviceFeature["LightColorRgb"] = "light-color-rgb";
-	/** Light supports HSV color via `color` cap. */
-	DeviceFeature["LightColorHsv"] = "light-color-hsv";
-	/** Light supports color-temperature (mired) via `color` cap. */
-	DeviceFeature["LightColorMired"] = "light-color-mired";
-	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
-	*  targetHigh). Gates the range slider UI. */
-	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
-	/** Thermostat exposes target humidity and/or current humidity
-	*  readings. Gates the humidity controls. */
-	DeviceFeature["ClimateHumidity"] = "climate-humidity";
-	/** Thermostat exposes a fan-mode selector. */
-	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
-	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
-	DeviceFeature["ClimatePreset"] = "climate-preset";
-	/** Cover exposes intermediate position control (0..100). Gates the
-	*  position slider UI. */
-	DeviceFeature["CoverPositionable"] = "cover-positionable";
-	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
-	DeviceFeature["CoverTilt"] = "cover-tilt";
-	/** Valve exposes intermediate position control (0..100). Gates the
-	*  position slider / drag surface UI. */
-	DeviceFeature["ValvePositionable"] = "valve-positionable";
-	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
-	DeviceFeature["FanSpeed"] = "fan-speed";
-	/** Fan exposes a preset mode selector. */
-	DeviceFeature["FanPreset"] = "fan-preset";
-	/** Fan exposes blade direction (forward/reverse) — typical of
-	*  ceiling fans. */
-	DeviceFeature["FanDirection"] = "fan-direction";
-	/** Fan exposes an oscillation toggle. */
-	DeviceFeature["FanOscillating"] = "fan-oscillating";
-	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
-	*  field on the UI lock-controls panel. */
-	DeviceFeature["LockPinRequired"] = "lock-pin-required";
-	/** Lock supports a latch-release ("open door") action distinct from
-	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
-	*  `supported_features`. Gates the Open Door button in the UI. */
-	DeviceFeature["LockOpen"] = "lock-open";
-	/** Media player exposes a seek-to-position surface. */
-	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
-	/** Media player exposes a volume-level setter. */
-	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
-	/** Media player exposes a mute toggle distinct from volume=0. */
-	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
-	/** Media player exposes a shuffle toggle. */
-	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
-	/** Media player exposes a repeat mode (off / all / one). */
-	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
-	/** Media player exposes a source / input selector. */
-	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
-	/** Media player exposes a play-arbitrary-media surface (URL / id). */
-	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
-	/** Media player exposes next-track. */
-	DeviceFeature["MediaPlayerNext"] = "media-player-next";
-	/** Media player exposes previous-track. */
-	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
-	/** Media player exposes stop distinct from pause. */
-	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
-	/** Alarm panel requires a PIN code on arm/disarm. */
-	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
-	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
-	*  addition to a textual location. */
-	DeviceFeature["PresenceGps"] = "presence-gps";
-	/** Notifier accepts an inline / URL image attachment. */
-	DeviceFeature["NotifierImage"] = "notifier-image";
-	/** Notifier accepts a priority hint (high/normal/low). */
-	DeviceFeature["NotifierPriority"] = "notifier-priority";
-	/** Notifier accepts a free-form `data` payload for platform-specific
-	*  fields. */
-	DeviceFeature["NotifierData"] = "notifier-data";
-	/** Notifier supports interactive action buttons / callbacks. */
-	DeviceFeature["NotifierActions"] = "notifier-actions";
-	/** Notifier supports per-call recipient targeting (multi-user). */
-	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
-	/** Script runner accepts a variables map on each run invocation. */
-	DeviceFeature["ScriptVariables"] = "script-variables";
-	/** Automation `trigger` accepts a skipCondition flag — fires the
-	*  automation's actions while bypassing its condition block. */
-	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
-	return DeviceFeature;
-}({});
-/**
-* Semantic role a device plays within its parent. Populated by driver
-* addons when creating accessory devices (Reolink siren/floodlight/
-* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
-* admin UI to pick icons, labels, and widgets — a `Switch` with
-* `role: Floodlight` renders as a bulb with a brightness slider,
-* whereas a `Switch` with `role: Siren` renders as a klaxon.
-*
-* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
-* sqlite as a nullable TEXT column — old rows keep working unchanged.
-*/
-var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
-	DeviceRole["Siren"] = "siren";
-	DeviceRole["Floodlight"] = "floodlight";
-	DeviceRole["Spotlight"] = "spotlight";
-	DeviceRole["PirSensor"] = "pir-sensor";
-	DeviceRole["Chime"] = "chime";
-	DeviceRole["Autotrack"] = "autotrack";
-	DeviceRole["Nightvision"] = "nightvision";
-	DeviceRole["PrivacyMask"] = "privacy-mask";
-	DeviceRole["Doorbell"] = "doorbell";
-	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
-	*  real Switch device for UI rendering / export adapters. */
-	DeviceRole["BinaryHelper"] = "binary-helper";
-	/** Generic motion / occupancy / moving event source. Distinct from
-	*  the camera accessory PirSensor role: that one is a camera child;
-	*  this is a standalone HA / 3rd-party motion sensor. */
-	DeviceRole["MotionSensor"] = "motion-sensor";
-	DeviceRole["ContactSensor"] = "contact-sensor";
-	DeviceRole["LeakSensor"] = "leak-sensor";
-	DeviceRole["SmokeSensor"] = "smoke-sensor";
-	DeviceRole["COSensor"] = "co-sensor";
-	DeviceRole["GasSensor"] = "gas-sensor";
-	DeviceRole["TamperSensor"] = "tamper-sensor";
-	DeviceRole["VibrationSensor"] = "vibration-sensor";
-	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
-	DeviceRole["SoundSensor"] = "sound-sensor";
-	/** Fallback for `binary_sensor` without a known `device_class`. */
-	DeviceRole["BinarySensor"] = "binary-sensor";
-	DeviceRole["TemperatureSensor"] = "temperature-sensor";
-	DeviceRole["HumiditySensor"] = "humidity-sensor";
-	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
-	DeviceRole["PressureSensor"] = "pressure-sensor";
-	DeviceRole["PowerSensor"] = "power-sensor";
-	DeviceRole["EnergySensor"] = "energy-sensor";
-	DeviceRole["VoltageSensor"] = "voltage-sensor";
-	DeviceRole["CurrentSensor"] = "current-sensor";
-	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
-	/** Battery level (numeric % via `sensor` OR low-bool via
-	*  `binary_sensor` — the cap distinguishes via the value type). */
-	DeviceRole["BatterySensor"] = "battery-sensor";
-	/** Fallback for `sensor` numeric without a known `device_class`. */
-	DeviceRole["NumericSensor"] = "numeric-sensor";
-	/** String / enum state (HA `sensor` with `state_class: enum` or
-	*  `attributes.options`). */
-	DeviceRole["EnumSensor"] = "enum-sensor";
-	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
-	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
-	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
-	DeviceRole["DateTimeSensor"] = "datetime-sensor";
-	/** Last-resort fallback when nothing else matches. */
-	DeviceRole["GenericSensor"] = "generic-sensor";
-	DeviceRole["NumericControl"] = "numeric-control";
-	DeviceRole["SelectControl"] = "select-control";
-	DeviceRole["TextControl"] = "text-control";
-	DeviceRole["DateTimeControl"] = "datetime-control";
-	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
-	*  rich features (image, priority, channel routing). */
-	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
-	/** Chat / messaging service (HA `notify.telegram_*`,
-	*  `notify.discord_*`, etc.). */
-	DeviceRole["MessagingNotifier"] = "messaging-notifier";
-	/** Email-based delivery (HA `notify.smtp`, etc.). */
-	DeviceRole["EmailNotifier"] = "email-notifier";
-	/** Fallback when the notifier service name doesn't match a known
-	*  pattern. */
-	DeviceRole["GenericNotifier"] = "generic-notifier";
-	return DeviceRole;
-}({});
+	frameSink: _enum(["callback", "shm"]).default("callback")
+});
+var EncodeProfileSchema = object({
+	video: object({
+		codec: _enum([
+			"h264",
+			"h265",
+			"copy"
+		]),
+		profile: _enum([
+			"baseline",
+			"main",
+			"high"
+		]).optional(),
+		width: number().int().positive().optional(),
+		height: number().int().positive().optional(),
+		fps: number().positive().optional(),
+		bitrateKbps: number().int().positive().optional(),
+		gopFrames: number().int().positive().optional(),
+		bf: number().int().min(0).optional(),
+		preset: _enum([
+			"ultrafast",
+			"superfast",
+			"veryfast",
+			"faster",
+			"fast",
+			"medium"
+		]).optional(),
+		tune: _enum([
+			"zerolatency",
+			"film",
+			"animation"
+		]).optional()
+	}),
+	audio: union([literal("passthrough"), object({
+		codec: _enum([
+			"opus",
+			"aac",
+			"pcmu",
+			"pcma",
+			"copy"
+		]),
+		bitrateKbps: number().int().positive().optional(),
+		sampleRateHz: number().int().positive().optional(),
+		channels: union([literal(1), literal(2)]).optional()
+	})]),
+	/**
+	* ffmpeg input-side args, inserted between the fixed global flags
+	* (`-hide_banner -loglevel error`) and `-i pipe:0`. Free-text array
+	* — the widget surfaces a textarea + suggestion chips for the most-
+	* used demuxer/format options.
+	*/
+	inputArgs: array(string()).optional(),
+	/**
+	* ffmpeg output-side args, inserted between the encode block and
+	* the final `-f <muxer> pipe:1`. Use for muxer options, bitstream
+	* filters, codec-specific overrides. Free-text array.
+	*/
+	outputArgs: array(string()).optional()
+});
+/** Cosine similarity between two embedding vectors */
+function cosineSimilarity(a, b) {
+	if (a.length !== b.length) return 0;
+	let dotProduct = 0;
+	let normA = 0;
+	let normB = 0;
+	for (let i = 0; i < a.length; i++) {
+		dotProduct += a[i] * b[i];
+		normA += a[i] * a[i];
+		normB += b[i] * b[i];
+	}
+	const denom = Math.sqrt(normA) * Math.sqrt(normB);
+	return denom === 0 ? 0 : dotProduct / denom;
+}
+var YAMNET_TO_MACRO = {
+	mapping: {
+		Speech: "speech",
+		"Child speech, kid speaking": "speech",
+		Conversation: "speech",
+		"Narration, monologue": "speech",
+		Babbling: "speech",
+		Whispering: "speech",
+		"Speech synthesizer": "speech",
+		Humming: "speech",
+		Rapping: "speech",
+		Singing: "speech",
+		Choir: "speech",
+		"Child singing": "speech",
+		Shout: "scream",
+		Bellow: "scream",
+		Yell: "scream",
+		Screaming: "scream",
+		"Children shouting": "scream",
+		Whoop: "scream",
+		"Crying, sobbing": "crying",
+		"Baby cry, infant cry": "crying",
+		Whimper: "crying",
+		"Wail, moan": "crying",
+		Groan: "crying",
+		Laughter: "laughter",
+		"Baby laughter": "laughter",
+		Giggle: "laughter",
+		Snicker: "laughter",
+		"Belly laugh": "laughter",
+		"Chuckle, chortle": "laughter",
+		Music: "music",
+		"Musical instrument": "music",
+		Guitar: "music",
+		Piano: "music",
+		Drum: "music",
+		"Drum kit": "music",
+		"Violin, fiddle": "music",
+		Flute: "music",
+		Saxophone: "music",
+		Trumpet: "music",
+		Synthesizer: "music",
+		"Pop music": "music",
+		"Rock music": "music",
+		"Hip hop music": "music",
+		"Classical music": "music",
+		Jazz: "music",
+		"Electronic music": "music",
+		"Background music": "music",
+		Dog: "dog",
+		Bark: "dog",
+		Yip: "dog",
+		Howl: "dog",
+		"Bow-wow": "dog",
+		Growling: "dog",
+		"Whimper (dog)": "dog",
+		Cat: "cat",
+		Purr: "cat",
+		Meow: "cat",
+		Hiss: "cat",
+		Caterwaul: "cat",
+		Bird: "bird",
+		"Bird vocalization, bird call, bird song": "bird",
+		"Chirp, tweet": "bird",
+		Squawk: "bird",
+		Crow: "bird",
+		Owl: "bird",
+		"Pigeon, dove": "bird",
+		Animal: "animal",
+		"Domestic animals, pets": "animal",
+		"Livestock, farm animals, working animals": "animal",
+		Horse: "animal",
+		"Cattle, bovinae": "animal",
+		Pig: "animal",
+		Sheep: "animal",
+		Goat: "animal",
+		Frog: "animal",
+		Insect: "animal",
+		Cricket: "animal",
+		Alarm: "alarm",
+		"Alarm clock": "alarm",
+		"Smoke detector, smoke alarm": "alarm",
+		"Fire alarm": "alarm",
+		Buzzer: "alarm",
+		"Civil defense siren": "alarm",
+		"Car alarm": "alarm",
+		Siren: "siren",
+		"Police car (siren)": "siren",
+		"Ambulance (siren)": "siren",
+		"Fire engine, fire truck (siren)": "siren",
+		"Emergency vehicle": "siren",
+		Foghorn: "siren",
+		Doorbell: "doorbell",
+		"Ding-dong": "doorbell",
+		Knock: "doorbell",
+		Tap: "doorbell",
+		Glass: "glass_breaking",
+		Shatter: "glass_breaking",
+		"Chink, clink": "glass_breaking",
+		"Gunshot, gunfire": "gunshot",
+		"Machine gun": "gunshot",
+		Explosion: "gunshot",
+		Fireworks: "gunshot",
+		Firecracker: "gunshot",
+		"Artillery fire": "gunshot",
+		"Cap gun": "gunshot",
+		Boom: "gunshot",
+		Vehicle: "vehicle",
+		Car: "vehicle",
+		Truck: "vehicle",
+		Bus: "vehicle",
+		Motorcycle: "vehicle",
+		"Car passing by": "vehicle",
+		"Vehicle horn, car horn, honking": "vehicle",
+		"Traffic noise, roadway noise": "vehicle",
+		Train: "vehicle",
+		Aircraft: "vehicle",
+		Helicopter: "vehicle",
+		Bicycle: "vehicle",
+		Skateboard: "vehicle",
+		Fire: "fire",
+		Crackle: "fire",
+		Water: "water",
+		Rain: "water",
+		Raindrop: "water",
+		"Rain on surface": "water",
+		Stream: "water",
+		Waterfall: "water",
+		Ocean: "water",
+		"Waves, surf": "water",
+		"Splash, splatter": "water",
+		Wind: "wind",
+		Thunderstorm: "wind",
+		Thunder: "wind",
+		"Wind noise (microphone)": "wind",
+		"Rustling leaves": "wind",
+		Door: "door",
+		"Sliding door": "door",
+		Slam: "door",
+		"Cupboard open or close": "door",
+		"Walk, footsteps": "footsteps",
+		Run: "footsteps",
+		Shuffle: "footsteps",
+		Crowd: "crowd",
+		Chatter: "crowd",
+		Cheering: "crowd",
+		Applause: "crowd",
+		"Children playing": "crowd",
+		"Hubbub, speech noise, speech babble": "crowd",
+		Telephone: "telephone",
+		"Telephone bell ringing": "telephone",
+		Ringtone: "telephone",
+		"Telephone dialing, DTMF": "telephone",
+		"Busy signal": "telephone",
+		Engine: "engine",
+		"Engine starting": "engine",
+		Idling: "engine",
+		"Accelerating, revving, vroom": "engine",
+		"Light engine (high frequency)": "engine",
+		"Medium engine (mid frequency)": "engine",
+		"Heavy engine (low frequency)": "engine",
+		"Lawn mower": "engine",
+		Chainsaw: "engine",
+		Hammer: "tools",
+		Jackhammer: "tools",
+		Sawing: "tools",
+		"Power tool": "tools",
+		Drill: "tools",
+		Sanding: "tools",
+		Silence: "silence"
+	},
+	preserveOriginal: false
+};
+var APPLE_SA_TO_MACRO = {
+	mapping: {
+		speech: "speech",
+		child_speech: "speech",
+		conversation: "speech",
+		whispering: "speech",
+		singing: "speech",
+		humming: "speech",
+		shout: "scream",
+		yell: "scream",
+		screaming: "scream",
+		crying: "crying",
+		baby_crying: "crying",
+		sobbing: "crying",
+		laughter: "laughter",
+		baby_laughter: "laughter",
+		giggling: "laughter",
+		music: "music",
+		guitar: "music",
+		piano: "music",
+		drums: "music",
+		dog_bark: "dog",
+		dog_bow_wow: "dog",
+		dog_growling: "dog",
+		dog_howl: "dog",
+		cat_meow: "cat",
+		cat_purr: "cat",
+		cat_hiss: "cat",
+		bird: "bird",
+		bird_chirp: "bird",
+		bird_squawk: "bird",
+		animal: "animal",
+		horse: "animal",
+		cow_moo: "animal",
+		insect: "animal",
+		alarm: "alarm",
+		smoke_alarm: "alarm",
+		fire_alarm: "alarm",
+		car_alarm: "alarm",
+		siren: "siren",
+		police_siren: "siren",
+		ambulance_siren: "siren",
+		doorbell: "doorbell",
+		door_knock: "doorbell",
+		knocking: "doorbell",
+		glass_breaking: "glass_breaking",
+		glass_shatter: "glass_breaking",
+		gunshot: "gunshot",
+		explosion: "gunshot",
+		fireworks: "gunshot",
+		car: "vehicle",
+		truck: "vehicle",
+		motorcycle: "vehicle",
+		car_horn: "vehicle",
+		vehicle_horn: "vehicle",
+		traffic: "vehicle",
+		fire: "fire",
+		fire_crackle: "fire",
+		water: "water",
+		rain: "water",
+		ocean: "water",
+		splash: "water",
+		wind: "wind",
+		thunder: "wind",
+		thunderstorm: "wind",
+		door: "door",
+		door_slam: "door",
+		sliding_door: "door",
+		footsteps: "footsteps",
+		walking: "footsteps",
+		running: "footsteps",
+		crowd: "crowd",
+		chatter: "crowd",
+		cheering: "crowd",
+		applause: "crowd",
+		telephone_ring: "telephone",
+		ringtone: "telephone",
+		engine: "engine",
+		engine_starting: "engine",
+		lawn_mower: "engine",
+		chainsaw: "engine",
+		hammer: "tools",
+		jackhammer: "tools",
+		drill: "tools",
+		power_tool: "tools",
+		silence: "silence"
+	},
+	preserveOriginal: false
+};
+var _macroLookup = /* @__PURE__ */ new Map();
+for (const [k, v] of Object.entries(YAMNET_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
+for (const [k, v] of Object.entries(APPLE_SA_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
 /**
 * Accessory device helpers — shared across drivers.
 *
@@ -7292,74 +7436,6 @@ object({
 });
 DeviceType.Sensor;
 /**
-* Generic types for capability definitions.
-*
-* A capability is defined with Zod schemas for methods, events, and settings.
-* TypeScript types are inferred via z.infer<> — zero duplication.
-*
-* Pattern:
-*   1. Define Zod schemas for data, methods, settings
-*   2. Export const capabilityDef = { ... } satisfies CapabilityDefinition
-*   3. Export type IProvider = InferProvider<typeof capabilityDef>
-*   4. Addon implements IProvider
-*   5. Registry auto-mounts tRPC router from definition.methods
-*/
-/**
-* Output schema shared by the contribution + live methods.
-*
-* Mirrors the `ConfigUISchemaWithValues` shape (sections[] + optional
-* tabs[]) without importing from `../interfaces/config-ui.js` — a
-* concrete-but-lenient Zod object keeps tRPC output inference happy
-* (using `z.unknown()` here collapses unrelated router branches to
-* `unknown` when the generator re-inlines the huge AppRouter type).
-*
-* `.passthrough()` on sections/fields accepts whatever FormBuilder
-* extensions the caller adds (showWhen, displayScale, …) without
-* rebuilding every time a new field kind is introduced.
-*/
-var ContributionSectionSchema = object({
-	id: string(),
-	title: string(),
-	description: string().optional(),
-	style: _enum(["card", "accordion"]).optional(),
-	defaultCollapsed: boolean().optional(),
-	columns: union([
-		literal(1),
-		literal(2),
-		literal(3),
-		literal(4)
-	]).optional(),
-	tab: string().optional(),
-	location: _enum(["settings", "top-tab"]).optional(),
-	order: number().optional(),
-	fields: array(any())
-});
-object({
-	tabs: array(object({
-		id: string(),
-		label: string(),
-		icon: string(),
-		order: number().optional()
-	})).optional(),
-	sections: array(ContributionSectionSchema)
-}).nullable();
-object({ deviceId: number() }), object({ deviceId: number() }), object({
-	deviceId: number(),
-	patch: record(string(), unknown())
-}), object({ success: literal(true) });
-object({ deviceId: number() }), unknown().nullable();
-/** Shorthand to define a method schema */
-function method(input, output, options) {
-	return {
-		input,
-		output,
-		kind: options?.kind ?? "query",
-		auth: options?.auth ?? "protected",
-		...options?.access !== void 0 ? { access: options.access } : {},
-		timeoutMs: options?.timeoutMs
-	};
-}
-/**
 * Alarm-panel cap. Models HA `alarm_control_panel.*` on
 * `DeviceType.AlarmPanel`. State follows HA's canonical lifecycle
 * across disarmed / armed_(home|away|night|vacation|custom_bypass) /
@@ -9203,6 +9279,24 @@ var DetectorOutputSchema = object({
 	inferenceMs: number(),
 	modelId: string()
 });
+var EngineProvisioningSchema = object({
+	runtimeId: _enum([
+		"onnx",
+		"openvino",
+		"coreml"
+	]).nullable(),
+	device: string().nullable(),
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	progress: number().optional(),
+	error: string().optional(),
+	nextRetryAt: number().optional()
+});
 var PipelineStepInputSchema = lazy(() => object({
 	addonId: string(),
 	modelId: string(),
@@ -9271,7 +9365,7 @@ var PipelineRunResultBridge = custom();
 method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngineChoiceSchema), method(PipelineEngineChoiceSchema, array(PipelineDefaultStepSchema)), method(_void(), PipelineEngineChoiceSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(_void(), record(string(), object({
+}), method(object({ nodeId: string() }), EngineProvisioningSchema), method(_void(), record(string(), object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 }))), method(object({ steps: record(string(), object({
@@ -11421,9 +11515,6 @@ method(LogEntrySchema, _void(), { kind: "mutation" }), method(object({
 	limit: number().optional(),
 	tags: record(string(), string()).optional()
 }), array(LogEntrySchema).readonly());
-var StaticDirOutputSchema = object({ staticDir: string() });
-var VersionOutputSchema = object({ version: string() });
-method(_void(), StaticDirOutputSchema), method(_void(), VersionOutputSchema);
 /**
 * Zod schemas for persisted record types.
 *
@@ -12923,7 +13014,10 @@ var AgentAddonConfigSchema = object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 });
-var AgentPipelineSettingsSchema = object({ addonDefaults: record(string(), AgentAddonConfigSchema).readonly() });
+var AgentPipelineSettingsSchema = object({
+	addonDefaults: record(string(), AgentAddonConfigSchema).readonly(),
+	maxCameras: number().int().nonnegative().nullable().default(null)
+});
 var CameraPipelineForAgentSchema = object({
 	steps: array(PipelineStepInputSchema).readonly(),
 	audio: object({
@@ -13025,6 +13119,133 @@ var GlobalMetricsSchema = object({
 * capability providers.
 */
 var CapabilityBindingsSchema = record(string(), string());
+/** Source block — always present; derives from the stream catalog. */
+var CameraSourceStatusSchema = object({ streams: array(object({
+	camStreamId: string(),
+	codec: string(),
+	width: number(),
+	height: number(),
+	fps: number(),
+	kind: string()
+})).readonly() });
+/** Assignment block — always present (orchestrator-local, no remote call). */
+var CameraAssignmentStatusSchema = object({
+	detectionNodeId: string().nullable(),
+	decoderNodeId: string().nullable(),
+	audioNodeId: string().nullable(),
+	pinned: object({
+		detection: boolean(),
+		decoder: boolean(),
+		audio: boolean()
+	}),
+	reasons: object({
+		detection: string().optional(),
+		decoder: string().optional(),
+		audio: string().optional()
+	})
+});
+/** Broker block — null when the broker stage is unreachable or inactive. */
+var CameraBrokerStatusSchema = object({
+	profiles: array(object({
+		profile: string(),
+		status: string(),
+		codec: string(),
+		width: number(),
+		height: number(),
+		subscribers: number(),
+		inFps: number(),
+		outFps: number()
+	})).readonly(),
+	webrtcSessions: number(),
+	rtspRestream: boolean()
+});
+/** Shared-memory ring statistics within the decoder block. */
+var CameraDecoderShmSchema = object({
+	framesWritten: number(),
+	getFrameHits: number(),
+	getFrameMisses: number(),
+	budgetMb: number()
+});
+/** Decoder block — null when the decoder stage is unreachable or inactive. */
+var CameraDecoderStatusSchema = object({
+	nodeId: string(),
+	formats: array(string()).readonly(),
+	sessionCount: number(),
+	shm: CameraDecoderShmSchema
+});
+/** Motion block — null when motion detection is not active for this device. */
+var CameraMotionStatusSchema = object({
+	enabled: boolean(),
+	fps: number()
+});
+/** Detection provisioning sub-block. */
+var CameraDetectionProvisioningSchema = object({
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	error: string().optional()
+});
+/** Detection phase — derived from the runner's engine phase. */
+var CameraDetectionPhaseSchema = _enum([
+	"idle",
+	"watching",
+	"active"
+]);
+/** Detection block — null when no detection node is assigned or reachable. */
+var CameraDetectionStatusSchema = object({
+	nodeId: string(),
+	engine: object({
+		backend: string(),
+		device: string()
+	}),
+	phase: CameraDetectionPhaseSchema,
+	configuredFps: number(),
+	actualFps: number(),
+	queueDepth: number(),
+	avgInferenceMs: number(),
+	provisioning: CameraDetectionProvisioningSchema
+});
+/** Audio block — null when no audio node is assigned or reachable. */
+var CameraAudioStatusSchema = object({
+	nodeId: string(),
+	enabled: boolean()
+});
+/** Recording block — null when no recording cap is active for this device. */
+var CameraRecordingStatusSchema = object({
+	mode: _enum([
+		"off",
+		"continuous",
+		"events"
+	]),
+	active: boolean(),
+	storageBytes: number()
+});
+/**
+* Aggregated per-camera pipeline status — server-composed, single call.
+*
+* The `assignment` and `source` blocks are always present.
+* Every other block is `null` when the stage is inactive or unreachable
+* during the bounded parallel fan-out in the orchestrator implementation.
+*
+* See spec: `docs/superpowers/specs/2026-06-24-camera-status-aggregator-cap.md`
+*/
+var CameraStatusSchema = object({
+	deviceId: number(),
+	assignment: CameraAssignmentStatusSchema,
+	source: CameraSourceStatusSchema,
+	broker: CameraBrokerStatusSchema.nullable(),
+	decoder: CameraDecoderStatusSchema.nullable(),
+	motion: CameraMotionStatusSchema.nullable(),
+	detection: CameraDetectionStatusSchema.nullable(),
+	audio: CameraAudioStatusSchema.nullable(),
+	recording: CameraRecordingStatusSchema.nullable(),
+	/** Unix timestamp (ms) when this snapshot was composed server-side. */
+	fetchedAt: number()
+});
 method(object({
 	deviceId: number(),
 	agentNodeId: string()
@@ -13092,6 +13313,12 @@ method(object({
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	agentNodeId: string(),
+	maxCameras: number().int().nonnegative().nullable()
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({ deviceId: number() }), CameraPipelineSettingsSchema.nullable()), method(object({
 	deviceId: number(),
 	addonId: string(),
@@ -13117,7 +13344,7 @@ method(object({
 }), method(object({
 	deviceId: number(),
 	agentNodeId: string().optional()
-}), CameraPipelineConfigSchema), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
+}), CameraPipelineConfigSchema), method(object({ deviceId: number() }), CameraStatusSchema), method(object({ deviceIds: array(number()).optional() }), array(CameraStatusSchema).readonly()), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
 	name: string(),
 	description: string().optional(),
 	config: CameraPipelineConfigSchema
@@ -13614,7 +13841,7 @@ method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ addonId: string() }), array(SavedDeviceRowSchema)), method(object({ addonId: string().optional() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), DeviceInfoSchema.nullable()), method(object({ parentDeviceId: number() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), array(StreamSourceEntrySchema)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
+}), method(object({ addonId: string() }), array(SavedDeviceRowSchema)), method(object({ addonId: string().optional() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), DeviceInfoSchema.nullable()), method(object({ parentDeviceId: number() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
 	deviceId: number(),
 	values: record(string(), unknown())
 }), object({ success: literal(true) }), {
@@ -14345,7 +14572,20 @@ var DiskSpaceInfoSchema = object({
 var PidResourceStatsSchema = object({
 	pid: number(),
 	cpu: number(),
-	memory: number()
+	memory: number(),
+	/**
+	* Private (anonymous) resident bytes — the per-process V8 heap + native
+	* allocations NOT shared with other processes (Linux RssAnon). This is the
+	* "real" per-runner cost; summing it across runners is meaningful, unlike
+	* `memory` (RSS), which double-counts the shared mmap'd framework code.
+	* Undefined where /proc is unavailable (e.g. macOS).
+	*/
+	privateBytes: number().optional(),
+	/**
+	* Shared file-backed resident bytes (Linux RssFile) — mmap'd framework/lib
+	* code shared copy-on-write across runners. Undefined on macOS.
+	*/
+	sharedBytes: number().optional()
 });
 var AddonInstanceSchema = object({
 	addonId: string(),
@@ -14394,6 +14634,17 @@ var KillProcessResultSchema = object({
 	reason: string().optional(),
 	signal: _enum(["SIGTERM", "SIGKILL"]).optional()
 });
+var DumpHeapSnapshotInputSchema = object({ 
+/** The addon whose runner should dump a heap snapshot. */
+addonId: string() });
+var DumpHeapSnapshotResultSchema = object({
+	success: boolean(),
+	/** Path of the written .heapsnapshot inside the runner's container/host. */
+	path: string().optional(),
+	/** Process pid that was signalled. */
+	pid: number().optional(),
+	reason: string().optional()
+});
 var SystemMetricsSchema = object({
 	cpuPercent: number(),
 	memoryPercent: number(),
@@ -14407,6 +14658,9 @@ var SystemMetricsSchema = object({
 method(_void(), SystemResourceSnapshotSchema), method(_void(), SystemResourceSnapshotSchema.nullable()), method(_void(), SystemMetricsSchema), method(object({ dirPath: string() }), DiskSpaceInfoSchema), method(_void(), MetricsGpuInfoSchema.nullable()), method(_void(), number().nullable()), method(object({ pids: array(number()) }), array(PidResourceStatsSchema)), method(_void(), array(AddonInstanceSchema).readonly()), method(object({ addonId: string() }), PidResourceStatsSchema.nullable()), method(_void(), array(NodeProcessSchema).readonly()), method(KillProcessInputSchema, KillProcessResultSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 });
 var PtzPresetSchema = object({
 	id: string(),
@@ -14823,63 +15077,6 @@ method(object({
 	auth: "admin"
 });
 /**
-* device-ops — device-scoped cap that unifies the per-IDevice operations
-* previously routed through the `.device-ops` Moleculer bridge service.
-*
-* Each worker that hosts live `IDevice` instances auto-registers a native
-* provider for this cap (per device) backed by its local
-* `DeviceRegistry`. Hub-side callers reach it transparently through
-* `ctx.fetchDevice(id).deviceOps.*` — the DeviceProxy injects
-* `deviceId` + `nodeId` and dispatches through the standard cap-router,
-* so there's no parallel bridge path anymore.
-*
-* The surface is intentionally small — every method corresponds to a
-* single action on the live `IDevice` (or `ICameraDevice` for
-* `getStreamSources`). Richer orchestration (enable/disable with
-* integration plumbing, bulk updates) stays in the `device-manager` cap;
-* `device-ops` is the per-device primitive the device-manager routes to.
-*/
-var StreamSourceEntrySchema$1 = object({
-	id: string(),
-	label: string(),
-	protocol: _enum([
-		"rtsp",
-		"rtmp",
-		"annexb",
-		"http-mjpeg",
-		"webrtc",
-		"custom"
-	]),
-	url: string().optional(),
-	resolution: object({
-		width: number(),
-		height: number()
-	}).optional(),
-	fps: number().optional(),
-	bitrate: number().optional(),
-	codec: string().optional(),
-	profileHint: CamProfileSchema.optional(),
-	sdp: string().optional()
-});
-var ConfigEntrySchema$1 = object({
-	key: string(),
-	value: unknown()
-});
-var RawStateResultSchema = object({
-	/** Originating provider id, e.g. 'homeassistant' | 'reolink' | 'hikvision'. */
-	source: string(),
-	/** Opaque, DISPLAY-SAFE upstream blob (no secrets/PII). */
-	data: record(string(), unknown())
-});
-method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema$1)), method(object({
-	deviceId: number(),
-	values: record(string(), unknown())
-}), _void(), { kind: "mutation" }), method(object({
-	deviceId: number(),
-	action: string().min(1),
-	input: unknown()
-}), unknown(), { kind: "mutation" }), method(object({ deviceId: number() }), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), unknown().nullable()), method(object({ deviceId: number() }), RawStateResultSchema.nullable(), { auth: "protected" });
-/**
 * camera-credentials — device-scoped cap exposing the camera's network
 * + auth surface in a vendor-neutral shape.
 *
@@ -18562,6 +18759,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"metricsProvider.dumpHeapSnapshot": {
+		capName: "metrics-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"metricsProvider.getAddonStats": {
 		capName: "metrics-provider",
 		capScope: "system",
@@ -19018,6 +19221,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineExecutor.getEngineProvisioning": {
+		capName: "pipeline-executor",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineExecutor.getGlobalPipelineConfig": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -19222,6 +19431,18 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getCameraStatus": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"pipelineOrchestrator.getCameraStatuses": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getCameraStepOverrides": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -19306,6 +19527,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setAgentMaxCameras": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.setCameraPipelineForAgent": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -20806,4 +21033,4 @@ object({
 	schemaVersion: literal(1)
 });
 //#endregion
-export { tuple as C, string as S, _enum as _, asJsonObject as a, number as b, createEvent as c, faceGalleryCapability as d, hydrateSchema as f, zoneAnalyticsCapability as g, videoclipsCapability as h, addonWidgetsSourceCapability as i, embeddingEncoderCapability as l, plateGalleryCapability as m, DeviceType as n, audioMetricsCapability as o, pipelineAnalyticsCapability as p, EventCategory as r, cosineSimilarity as s, BaseAddon as t, errMsg as u, array as v, object as x, boolean as y };
+export { tuple as C, string as S, _enum as _, faceGalleryCapability as a, number as b, videoclipsCapability as c, BaseAddon as d, DeviceType as f, hydrateSchema as g, createEvent as h, embeddingEncoderCapability as i, zoneAnalyticsCapability as l, asJsonObject as m, audioMetricsCapability as n, pipelineAnalyticsCapability as o, EventCategory as p, cosineSimilarity as r, plateGalleryCapability as s, addonWidgetsSourceCapability as t, errMsg as u, array as v, object as x, boolean as y };