@camstack/addon-provider-dreame 0.2.90 → 0.2.93

package/dist/addon.js

@@ -52672,7 +52672,7 @@ var DreameCameraStream = class extends TypedEmitter {
 	}
 };
 //#endregion
-//#region ../types/dist/event-category-CnLqLOKs.mjs
+//#region ../types/dist/event-category-DAXzJeTX.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -53264,7 +53264,6 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	* issue. Payload `PipelineAnalyticsPlateGalleryChangedPayload`.
 	*/
 	EventCategory["PipelineAnalyticsPlateGalleryChanged"] = "pipeline-analytics.plate-gallery-changed";
-	EventCategory["FrigateLiveEvent"] = "frigate.live-event";
 	EventCategory["CameraStreamsProfileSlotsChanged"] = "camera-streams.onProfileSlotsChanged";
 	/**
 	* Stream-broker health watchdog. Per-broker (deviceId/profile) emission.
@@ -65298,7 +65297,7 @@ DeviceType.Camera;
 var SourceInfoSchema = object({
 	/** Live dispatch key — mutable when the source system allows rename. */
 	id: string(),
-	/** Source system tag — e.g. 'homeassistant' | 'reolink' | 'frigate'. */
+	/** Source system tag — e.g. 'homeassistant' | 'reolink' | 'onvif'. */
 	system: string(),
 	/** Immutable upstream identifier when available (HA `unique_id`, … ).
 	*  Used to detect rename when `id` changes. */
@@ -65311,7 +65310,7 @@ var SourceInfoSchema = object({
 /**
 * Build the synthetic SourceInfo every existing provider falls back to
 * when no upstream value has been persisted. Keeps non-migrated providers
-* (Reolink / Hikvision / ONVIF / Frigate / RTSP) functional without code
+* (Reolink / Hikvision / ONVIF / RTSP) functional without code
 * changes — `id` reuses the CamStack stableId, `system` reuses the addon
 * id. Real upstream identity replaces this once a provider migrates and
 * calls `updateSourceInfo()` with concrete values.
@@ -65990,7 +65989,7 @@ var deviceProviderCapability = {
 *   - `device-management.router.ts` (deleted in Phase 2)
 *   - `device-ops.router.ts` (compat layer — deleted; device-provider ops absorbed here)
 *
-* All device provider addons (rtsp, onvif, frigate, …) are hub-local: they may
+* All device provider addons (rtsp, onvif, …) are hub-local: they may
 * fork into separate processes but never run on remote cluster agents. Therefore:
 *   - No nodeId routing needed — this is a pure hub singleton.
 *   - The hub's DeviceRegistry is the single source of truth for all live devices.
@@ -70038,7 +70037,7 @@ var NcRuleInputSchema = object({
 	* The measured seven-person arrival on device 590 spans 110 s with every
 	* internal gap under 30 s. A 12 s fixed window cuts it into three groups; an
 	* idle cutoff holds it as one and ends it when the arrival actually ends.
-	* 30 is Frigate's shipped value for the same decision.
+	* 30 s is a widely shipped value for the same decision.
 	*
 	* ### What it replaces
 	*
@@ -72120,6 +72119,13 @@ var ZoneCrossingSchema = object({
 	/** Zone display name at crossing time (falls back to the id). */
 	zoneName: string().optional()
 });
+/** One zone a box was stamped with, and how much of the BOX fell inside it. */
+var ZoneOverlapSchema = object({
+	zoneId: string(),
+	zoneName: string().optional(),
+	/** Percentage of the BOX area inside the zone, 0–100. */
+	overlapPct: number()
+});
 var ObjectEventSchema = object({
 	...BaseEventFields,
 	kind: literal("object"),
@@ -72144,6 +72150,35 @@ var ObjectEventSchema = object({
 	bbox: BoundingBoxSchema.optional(),
 	/** Heavy JSON — omitted in slim projection. */
 	zones: array(string()).readonly().optional(),
+	/**
+	* How far inside each stamped zone the box actually was, as a percentage of
+	* the BOX area.
+	*
+	* Membership alone cannot express "at least a third of it inside", which is
+	* the bar an operator argues with — and the number already existed: the
+	* engine computed it, the pipeline logged it, and then discarded it. It
+	* matters most on the events that carry no track, where a rule has nothing
+	* else to judge by.
+	*/
+	zoneOverlaps: array(ZoneOverlapSchema).readonly().optional(),
+	/**
+	* Present when this event describes a detection the TRACKER refused, so it
+	* has no track and never will.
+	*
+	* A zone-scoped immediate rule asks "is there an animal in the flowerbed
+	* NOW?"; tracking answers a different question ("is this the same subject as
+	* before?") whose confirmation threshold presumes continuity. On 2026-09-09 a
+	* dog at 0.7729, 100% inside a watched zone, was refused three times in six
+	* seconds with three different candidate ids — seven analysed frames in the
+	* window, the subject in a handful of them, metres apart — and produced no
+	* event at all.
+	*
+	* It is NAMED rather than merely implied by a missing `trackId`: an event
+	* with no track and no reason is indistinguishable from a track whose media
+	* went missing, and a consumer that asks this one for a best shot or a
+	* history is asking for something that never existed.
+	*/
+	spawnRefused: string().optional(),
 	/** Omitted in slim projection. */
 	state: TrackStateSchema.optional(),
 	/**
@@ -73217,6 +73252,60 @@ var NativeCropResultSchema = object({
 	*/
 	tier: _enum(["native", "ram-fullframe"]).optional()
 });
+/**
+* What a PARKED frame is for — the `kind` half of the `(deviceId, trackId,
+* kind)` key ([D422](../../../docs/decisions/adr-0422-a-relevant-frame-is-parked-when-it-becomes-relevant.md)).
+*
+* - `keyFrame` — the track's clean best FULL frame at native width (capped by
+*   the caller's `maxWidth`). What `keyFrame` + `keyFrameSmall` are written
+*   from, and what the detail plane's full-frame rung cuts from.
+* - `thumbnail` — the best-shot subject slab: the caller's 16:9 central-square
+*   window, cut by the runner at uncapped native resolution.
+*
+* The runner never interprets `trackId`; it is an opaque key the hub owns.
+*/
+var ParkedFrameKindSchema = _enum(["keyFrame", "thumbnail"]);
+/**
+* Why a park did NOT happen. Every one is logged on the runner with
+* `tags: { deviceId }` and the handle's measured age, because a handle already
+* gone at park time IS the defect the 150–500 ms window exists to prevent —
+* never a reason to retry in a loop.
+*
+* - `handle-gone` — the native surface no longer resolves this handle (never
+*   registered, past the lease bound, or the worker released it). `detail`
+*   carries the runner's own miss reason.
+* - `encode-failed` — pixels resolved and the JPEG encode threw.
+*/
+var ParkRefusalSchema = _enum(["handle-gone", "encode-failed"]);
+/** Answer to `parkTrackFrame` — a discriminated union, so "not parked" always names why. */
+var ParkTrackFrameResultSchema = discriminatedUnion("parked", [object({
+	parked: literal(true),
+	/** The node holding the parcel — what a later retrieval must be pinned to. */
+	nodeId: string(),
+	width: number().int().positive(),
+	height: number().int().positive(),
+	/** JPEG bytes the parcel costs on the node. */
+	bytes: number().int().nonnegative(),
+	/** Whether this park replaced a parcel already held for the key. */
+	replaced: boolean()
+}), object({
+	parked: literal(false),
+	nodeId: string(),
+	reason: ParkRefusalSchema,
+	/** Age of the handle at the park, on the runner's clock; null if unknown. */
+	handleAgeMs: number().nullable(),
+	detail: string().optional()
+})]);
+/** A retrieved parcel — the runner's own JPEG, base64 for the wire. */
+var ParkedTrackFrameSchema = object({
+	jpeg: string(),
+	width: number().int().positive(),
+	height: number().int().positive(),
+	/** The frame instant the parcel shows (the caller's clock, echoed back). */
+	timestamp: number(),
+	/** When the node stored it (the node's clock). */
+	parkedAt: number()
+});
 /** Parent detection context passed to `runDetailSubtree` — the crop's
 *  originating detection, in FRAME-space coordinates. Reuses
 *  `NativeCropBboxSchema`'s `{x,y,w,h}` shape (same numeric fields; here
@@ -73606,7 +73695,7 @@ var RunnerCameraConfigSchema = object({
 	* - `analyzer`: ML/frame-diff motion detection (motion-wasm or other
 	*   analyzer providers) running on decoded frames in this runner.
 	* - `onboard`: camera-native motion pushes (Reolink Baichuan, ONVIF
-	*   analytics, Frigate motion). The provider emits ProviderMotion
+	*   analytics). The provider emits ProviderMotion
 	*   events; the orchestrator forwards to `reportMotion`.
 	*/
 	motionSources: MotionSourcesSchema.default(["analyzer"]),
@@ -73848,7 +73937,26 @@ method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mu
 	className: string(),
 	/** Camera the pixels came from. Diagnostics + log tags ONLY — never routing. */
 	sourceDeviceId: number()
-}), RunStatelessStepResultSchema, { kind: "mutation" });
+}), RunStatelessStepResultSchema, { kind: "mutation" }), method(object({
+	deviceId: number(),
+	/** Opaque to the runner — the hub's track id. */
+	trackId: string(),
+	kind: ParkedFrameKindSchema,
+	handle: FrameHandleSchema,
+	/** Normalized [0,1] window to cut. `{0,0,1,1}` for a full frame. */
+	bbox: NativeCropBboxSchema,
+	/** Width cap for a full-frame park (the `keyFrame` native cap). */
+	maxWidth: number().int().positive().optional(),
+	/** The frame instant (caller's clock) — orders parks for one key. */
+	timestamp: number()
+}), ParkTrackFrameResultSchema, { kind: "mutation" }), method(object({
+	deviceId: number(),
+	trackId: string(),
+	kind: ParkedFrameKindSchema
+}), ParkedTrackFrameSchema.nullable()), method(object({
+	deviceId: number(),
+	trackId: string()
+}), object({ released: number().int().nonnegative() }), { kind: "mutation" });
 var CameraPipelineConfigSchema = object({
 	engine: PipelineEngineChoiceSchema.optional(),
 	steps: array(PipelineStepInputSchema).readonly(),
@@ -76918,8 +77026,8 @@ onStatusChanged: { data: object({
 	/**
 	* Runtime-state slice — every provider that registers this cap
 	* stores the same shape under `device.runtimeState[battery]`.
-	* Cross-provider uniformity: a Reolink Argus, a Frigate sensor
-	* proxy, an ONVIF battery cam all read/write the same keys.
+	* Cross-provider uniformity: a Reolink Argus, a sensor proxy,
+	* an ONVIF battery cam all read/write the same keys.
 	* Consumers (BatteryBadge, snapshot wrapper sleep gate) read once
 	* via `device.runtimeState.getCapState('battery')` regardless of
 	* the underlying driver.
@@ -77069,7 +77177,7 @@ var buttonCapability = {
 *
 * Implementations:
 *   - Each camera-providing addon registers this cap natively per
-*     device (Reolink, Hikvision, RTSP, Frigate, ONVIF self).
+*     device (Reolink, Hikvision, RTSP, ONVIF self).
 *   - Returns a snapshot from the persisted device config blob — no
 *     extra round-trip to the camera, no probing.
 *   - The cap is admin-only (`auth: 'admin'`) — credentials must not
@@ -79169,7 +79277,7 @@ var AvailableIntegrationTypeSchema = object({
 	* Which integration-marker cap the addon declared, so the wizard can
 	* branch on CAP — never on addon name. `device-adoption` integrations
 	* (Home Assistant, …) route through the broker step (Approach A);
-	* `device-provider` integrations (Reolink/Frigate/ONVIF) keep the
+	* `device-provider` integrations (Reolink/ONVIF) keep the
 	* legacy config → discovery flow.
 	*/
 	kind: _enum(["device-adoption", "device-provider"]),
@@ -82741,13 +82849,31 @@ var RecordingManifestSchema = object({
 	*/
 	playbackEndpoints: array(string())
 });
-/** Recording storage usage for one camera (bytes on disk across all its
-*  profiles/subtrees/locations on this node). */
+/**
+* Recording storage usage for one camera — what the ARCHIVE holds for it,
+* across every profile and every resolvable location on this node.
+*
+* ## Archive vs residency, which is the whole point of this shape (D418)
+*
+* `usedBytes` / `oldestMs` / `segments` are the durable hour ledger's numbers:
+* the same quantity `RecordingLocationUsage.usedBytes` reports for the volume
+* this camera writes to, so the two can be added up and compared.
+*
+* They were not always. Until D418 this row came from the recorder's in-RAM
+* `RecordingIndex`, which since D287 holds only the live tail plus the hours
+* somebody hydrated — so a hub with 1.9 TB and 3.3 days of footage reported
+* 60.5 GB and "oldest: three hours ago" on the same page as the volume row
+* that said otherwise, and two people read it as retention eating recent
+* footage. Residency is still reported, under `residentBytes` /
+* `residentOldestMs`, which answer a different question and say so.
+*/
 var RecordingDeviceUsageSchema = object({
 	deviceId: number(),
+	/** Bytes the ARCHIVE holds for this camera on this node's resolvable
+	*  recordings locations. */
 	usedBytes: number(),
 	/**
-	* Start of this camera's OLDEST indexed segment, across every profile and
+	* Start of this camera's OLDEST ARCHIVED segment, across every profile and
 	* location — the "Oldest footage" column in Recordings → Storage, and the
 	* only honest answer to "is retention actually holding?" per camera.
 	*
@@ -82757,7 +82883,24 @@ var RecordingDeviceUsageSchema = object({
 	* (types) and the addon ship on different trains, and the addon is usually
 	* the later of the two.
 	*/
-	oldestMs: number().nullable().optional()
+	oldestMs: number().nullable().optional(),
+	/** Segments the archive holds for this camera — the "M" beside `usedBytes`.
+	*  OPTIONAL for the same train-skew reason as `oldestMs`. */
+	segments: number().optional(),
+	/**
+	* RESIDENCY, not the archive: bytes the recorder process currently holds in
+	* its RAM index — the live tail plus the hours a reader hydrated.
+	*
+	* It answers "what can be served without touching the disk", never "how much
+	* footage this camera has". A UI that renders it must label it as such, and
+	* must never total it as storage. OPTIONAL: a recorder predating D418 omits
+	* it, and so does a node whose ledger could not answer.
+	*/
+	residentBytes: number().optional(),
+	/** The residency counterpart of `oldestMs` — the oldest segment currently in
+	*  RAM, which on a healthy recorder is minutes ago and means nothing about
+	*  retention. `null` = nothing resident. */
+	residentOldestMs: number().nullable().optional()
 });
 /** Recording storage usage + capacity for one storage location. */
 var RecordingLocationUsageSchema = object({
@@ -82795,6 +82938,17 @@ var RecordingStorageUsageSchema = object({
 	totalUsedBytes: number(),
 	devices: array(RecordingDeviceUsageSchema),
 	/**
+	* WHERE `devices[]` came from, so an empty table is never mistaken for empty
+	* disks (D418).
+	*
+	* `archive` = the durable hour ledger answered. `unavailable` = this node
+	* declared no ledger and the recorder REFUSED rather than answering the
+	* question with the resident index (D295 rule 3) — the rows are UNKNOWN, not
+	* zero, and a UI must say so. OPTIONAL: a recorder predating D418 omits it,
+	* and its rows are residency.
+	*/
+	devicesRead: _enum(["archive", "unavailable"]).optional(),
+	/**
 	* Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
 	* of the payload without it: the hub serves this method through a BAKED
 	* router, so a hub whose framework train predates a change to this array
@@ -86674,7 +86828,7 @@ function toDeviceSummary(device, addonId) {
 	};
 }
 /**
-* Base class for device-provider addons (rtsp, onvif, frigate).
+* Base class for device-provider addons (rtsp, onvif).
 *
 * Provides default implementations for the common device-provider cap
 * methods (`start`, `stop`, `getStatus`, `getDevices`, `supportsDiscovery`,
@@ -91330,6 +91484,24 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineRunner.getParkedTrackFrame": {
+		capName: "pipeline-runner",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"pipelineRunner.parkTrackFrame": {
+		capName: "pipeline-runner",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"pipelineRunner.releaseParkedTrackFrames": {
+		capName: "pipeline-runner",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineRunner.reportMotion": {
 		capName: "pipeline-runner",
 		capScope: "system",
@@ -94607,6 +94779,21 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineRunner.getParkedTrackFrame": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.parkTrackFrame": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.releaseParkedTrackFrames": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineRunner.reportMotion": [{
 		name: "deviceId",
 		form: "single",
@@ -95298,7 +95485,7 @@ var PreviewTextField = string().max(200);
 * Whether the notification's preview is a STILL or a short animation.
 *
 * The operator's ask, verbatim: *"inviato come gif o video (come per le altre
-* rule)"* — his Scrypted advanced-notifier has a `gifRule`, and a ten-hour
+* rule)"* — the other rules already offer an animated preview, and a ten-hour
 * night reads better as three seconds of motion than as one frame of it. Both
 * modes get the SAME treatment (blurred frame, large centred title); `'gif'`
 * simply applies it to a dozen frames sampled across the render and assembles
@@ -143943,9 +144130,9 @@ var { mulaw, alaw } = resolveAlawmulaw();
 //#endregion
 //#region src/devices/dreame-rfc4571-server.ts
 /**
-* RFC 4571 (framed RTP over TCP) output for the robot camera — the shape the
-* Scrypted plugin (`scrypted-dreame-native/src/rfc4571.ts`) proved on this
-* robot, ported: nodedreame's `DreameCameraStream` speaks the LinkVisual relay
+* RFC 4571 (framed RTP over TCP) output for the robot camera — the shape
+* already proven on this robot: nodedreame's `DreameCameraStream` speaks the
+* LinkVisual relay
 * and emits H.264 access units + AAC (ADTS); nodelink's `Rfc4571Muxer` frames
 * them as RTP on a local TCP server the stream-broker dials as a
 * `pull-rfc4571` source, exactly like a Reolink Baichuan camera.
@@ -143954,9 +144141,28 @@ var { mulaw, alaw } = resolveAlawmulaw();
 * name, and WE own the TCP socket — when the broker's reader detaches we know
 * the viewer is gone and release the monitor at once, instead of polling the
 * broker for consumers or waiting on a duration cap.
+*
+* And we own the FEED: the relay dies in three ways nodedreame reports and one
+* it cannot — the socket errors (`error`; with no listener an EventEmitter
+* throws, and on 2026-09-09 a `read ETIMEDOUT` took the whole provider down),
+* the relay closes and the stream stops itself (`stopped`), or the socket goes
+* silent for minutes before the kernel gives up (nothing at all: 16 min of a
+* broker dialling a port that accepted and sent nothing). The server reports
+* every one of them ONCE through `onFeedLost`, and never its own close, so the
+* device can put the lazy sentinel back and let the next dial be a wake (D424).
 */
 var VIDEO_PT = 96;
 var AUDIO_PT = 97;
+/**
+* How long the feed may go without a video access unit before the relay is
+* declared dead. The broker gives a source 8 s (`RTP_ACTIVITY_TIMEOUT_MS`);
+* this sits just past it so a stall is judged by the side that can act on it.
+*/
+var FEED_STALL_MS = 1e4;
+var FEED_STALL_SWEEP_MS = 1e3;
+function describeLoss(loss) {
+	return loss.error === null ? loss.reason : `${loss.reason}: ${loss.error.message}`;
+}
 function deferred() {
 	let resolve = () => void 0;
 	return {
@@ -143989,11 +144195,33 @@ function consoleInto(logger) {
 * server calls `onConsumerDisconnect` when the last reader detaches.
 */
 async function startRfc4571Server(params) {
-	const { stream, logger, onConsumerDisconnect, bindHost = "0.0.0.0", keyframeTimeoutMs = 2e4, audioGraceMs = 1500, idleGraceMs = 4e3 } = params;
+	const { stream, logger, onConsumerDisconnect, onFeedLost, bindHost = "0.0.0.0", keyframeTimeoutMs = 2e4, audioGraceMs = 1500, idleGraceMs = 4e3, stallTimeoutMs = FEED_STALL_MS } = params;
 	const videoRef = { current: null };
 	const audioRef = { current: null };
 	const firstKeyframe = deferred();
 	const firstAudio = deferred();
+	const firstLoss = deferred();
+	let pendingLoss = null;
+	let toreDown = false;
+	let serving = false;
+	let lastVideoAt = 0;
+	const reportLoss = (loss) => {
+		if (toreDown || pendingLoss !== null) return;
+		pendingLoss = loss;
+		firstLoss.resolve(loss);
+		if (serving) onFeedLost(loss);
+	};
+	stream.on("error", (err) => reportLoss({
+		reason: "error",
+		error: err
+	}));
+	stream.on("stopped", () => reportLoss({
+		reason: "stopped",
+		error: null
+	}));
+	stream.on("videoAccessUnit", () => {
+		lastVideoAt = Date.now();
+	});
 	stream.on("videoAccessUnit", (e) => {
 		if (videoRef.current !== null) return;
 		const p = extractH264ParamSetsFromAccessUnit(e.data);
@@ -144019,8 +144247,11 @@ async function startRfc4571Server(params) {
 		}
 	});
 	await stream.start();
+	const lostBeforeServing = firstLoss.promise.then((loss) => {
+		throw new Error(`relay lost before the first keyframe (${describeLoss(loss)})`);
+	});
 	try {
-		await withTimeout(firstKeyframe.promise, keyframeTimeoutMs, "timed out waiting for the first keyframe");
+		await Promise.race([withTimeout(firstKeyframe.promise, keyframeTimeoutMs, "timed out waiting for the first keyframe"), lostBeforeServing]);
 	} catch (err) {
 		await stream.stop().catch(() => void 0);
 		throw err;
@@ -144028,6 +144259,10 @@ async function startRfc4571Server(params) {
 	await Promise.race([firstAudio.promise, new Promise((resolve) => {
 		setTimeout(resolve, audioGraceMs).unref?.();
 	})]);
+	if (pendingLoss !== null) {
+		await stream.stop().catch(() => void 0);
+		throw new Error(`relay lost before the server was up (${describeLoss(pendingLoss)})`);
+	}
 	const paramSets = videoRef.current;
 	if (paramSets === null) throw new Error("no parameter sets after the first keyframe");
 	const audioFacts = audioRef.current;
@@ -144047,7 +144282,6 @@ async function startRfc4571Server(params) {
 	if (audioFacts !== null) stream.on("audioFrame", (adts) => muxer.sendAudioAdtsFrame(adts));
 	let liveClients = 0;
 	let idleTimer = null;
-	let toreDown = false;
 	const server = node_net.default.createServer((socket) => {
 		liveClients += 1;
 		if (idleTimer !== null) clearTimeout(idleTimer);
@@ -144074,6 +144308,15 @@ async function startRfc4571Server(params) {
 	});
 	const addr = server.address();
 	if (addr === null || typeof addr === "string") throw new Error("failed to bind the RFC4571 server");
+	const stallSweep = setInterval(() => {
+		if (toreDown || Date.now() - lastVideoAt < stallTimeoutMs) return;
+		reportLoss({
+			reason: "stalled",
+			error: null
+		});
+	}, Math.max(5, Math.min(FEED_STALL_SWEEP_MS, Math.floor(stallTimeoutMs / 2))));
+	stallSweep.unref?.();
+	serving = true;
 	return {
 		host: bindHost,
 		port: addr.port,
@@ -144085,6 +144328,7 @@ async function startRfc4571Server(params) {
 		} : null,
 		close: async () => {
 			toreDown = true;
+			clearInterval(stallSweep);
 			if (idleTimer !== null) clearTimeout(idleTimer);
 			try {
 				muxer.close();
@@ -144364,6 +144608,9 @@ var DreameCameraDevice = class extends DreameChildDevice {
 					keyframeTimeoutMs: WAKE_TIMEOUT_MS,
 					onConsumerDisconnect: () => {
 						this.closeStream("idle");
+					},
+					onFeedLost: (loss) => {
+						this.onFeedLost(loss);
 					}
 				});
 				this.live = {
@@ -144403,6 +144650,22 @@ var DreameCameraDevice = class extends DreameChildDevice {
 		});
 		return this.opening;
 	}
+	/**
+	* The feed died under an open monitor. The session is closed — the lazy
+	* sentinel goes back on the broker — so the broker's next dial asks for a
+	* materialize, which is the wake. Logged: this branch drops a live stream.
+	*/
+	onFeedLost(loss) {
+		this.ctx.logger.warn("robot camera: relay feed lost — closing the monitor; the next dial re-opens it", {
+			tags: { deviceId: this.id },
+			meta: {
+				reason: loss.reason,
+				error: loss.error === null ? null : errMsg(loss.error),
+				openMs: Date.now() - this.sessionOpenedAt
+			}
+		});
+		this.closeStream("feed-lost");
+	}
 	armMaxDuration() {
 		if (this.maxTimer !== null) clearTimeout(this.maxTimer);
 		this.maxTimer = setTimeout(() => {

package/dist/addon.mjs

@@ -52669,7 +52669,7 @@ var DreameCameraStream = class extends TypedEmitter {
 	}
 };
 //#endregion
-//#region ../types/dist/event-category-CnLqLOKs.mjs
+//#region ../types/dist/event-category-DAXzJeTX.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -53261,7 +53261,6 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	* issue. Payload `PipelineAnalyticsPlateGalleryChangedPayload`.
 	*/
 	EventCategory["PipelineAnalyticsPlateGalleryChanged"] = "pipeline-analytics.plate-gallery-changed";
-	EventCategory["FrigateLiveEvent"] = "frigate.live-event";
 	EventCategory["CameraStreamsProfileSlotsChanged"] = "camera-streams.onProfileSlotsChanged";
 	/**
 	* Stream-broker health watchdog. Per-broker (deviceId/profile) emission.
@@ -65295,7 +65294,7 @@ DeviceType.Camera;
 var SourceInfoSchema = object({
 	/** Live dispatch key — mutable when the source system allows rename. */
 	id: string(),
-	/** Source system tag — e.g. 'homeassistant' | 'reolink' | 'frigate'. */
+	/** Source system tag — e.g. 'homeassistant' | 'reolink' | 'onvif'. */
 	system: string(),
 	/** Immutable upstream identifier when available (HA `unique_id`, … ).
 	*  Used to detect rename when `id` changes. */
@@ -65308,7 +65307,7 @@ var SourceInfoSchema = object({
 /**
 * Build the synthetic SourceInfo every existing provider falls back to
 * when no upstream value has been persisted. Keeps non-migrated providers
-* (Reolink / Hikvision / ONVIF / Frigate / RTSP) functional without code
+* (Reolink / Hikvision / ONVIF / RTSP) functional without code
 * changes — `id` reuses the CamStack stableId, `system` reuses the addon
 * id. Real upstream identity replaces this once a provider migrates and
 * calls `updateSourceInfo()` with concrete values.
@@ -65987,7 +65986,7 @@ var deviceProviderCapability = {
 *   - `device-management.router.ts` (deleted in Phase 2)
 *   - `device-ops.router.ts` (compat layer — deleted; device-provider ops absorbed here)
 *
-* All device provider addons (rtsp, onvif, frigate, …) are hub-local: they may
+* All device provider addons (rtsp, onvif, …) are hub-local: they may
 * fork into separate processes but never run on remote cluster agents. Therefore:
 *   - No nodeId routing needed — this is a pure hub singleton.
 *   - The hub's DeviceRegistry is the single source of truth for all live devices.
@@ -70035,7 +70034,7 @@ var NcRuleInputSchema = object({
 	* The measured seven-person arrival on device 590 spans 110 s with every
 	* internal gap under 30 s. A 12 s fixed window cuts it into three groups; an
 	* idle cutoff holds it as one and ends it when the arrival actually ends.
-	* 30 is Frigate's shipped value for the same decision.
+	* 30 s is a widely shipped value for the same decision.
 	*
 	* ### What it replaces
 	*
@@ -72117,6 +72116,13 @@ var ZoneCrossingSchema = object({
 	/** Zone display name at crossing time (falls back to the id). */
 	zoneName: string().optional()
 });
+/** One zone a box was stamped with, and how much of the BOX fell inside it. */
+var ZoneOverlapSchema = object({
+	zoneId: string(),
+	zoneName: string().optional(),
+	/** Percentage of the BOX area inside the zone, 0–100. */
+	overlapPct: number()
+});
 var ObjectEventSchema = object({
 	...BaseEventFields,
 	kind: literal("object"),
@@ -72141,6 +72147,35 @@ var ObjectEventSchema = object({
 	bbox: BoundingBoxSchema.optional(),
 	/** Heavy JSON — omitted in slim projection. */
 	zones: array(string()).readonly().optional(),
+	/**
+	* How far inside each stamped zone the box actually was, as a percentage of
+	* the BOX area.
+	*
+	* Membership alone cannot express "at least a third of it inside", which is
+	* the bar an operator argues with — and the number already existed: the
+	* engine computed it, the pipeline logged it, and then discarded it. It
+	* matters most on the events that carry no track, where a rule has nothing
+	* else to judge by.
+	*/
+	zoneOverlaps: array(ZoneOverlapSchema).readonly().optional(),
+	/**
+	* Present when this event describes a detection the TRACKER refused, so it
+	* has no track and never will.
+	*
+	* A zone-scoped immediate rule asks "is there an animal in the flowerbed
+	* NOW?"; tracking answers a different question ("is this the same subject as
+	* before?") whose confirmation threshold presumes continuity. On 2026-09-09 a
+	* dog at 0.7729, 100% inside a watched zone, was refused three times in six
+	* seconds with three different candidate ids — seven analysed frames in the
+	* window, the subject in a handful of them, metres apart — and produced no
+	* event at all.
+	*
+	* It is NAMED rather than merely implied by a missing `trackId`: an event
+	* with no track and no reason is indistinguishable from a track whose media
+	* went missing, and a consumer that asks this one for a best shot or a
+	* history is asking for something that never existed.
+	*/
+	spawnRefused: string().optional(),
 	/** Omitted in slim projection. */
 	state: TrackStateSchema.optional(),
 	/**
@@ -73214,6 +73249,60 @@ var NativeCropResultSchema = object({
 	*/
 	tier: _enum(["native", "ram-fullframe"]).optional()
 });
+/**
+* What a PARKED frame is for — the `kind` half of the `(deviceId, trackId,
+* kind)` key ([D422](../../../docs/decisions/adr-0422-a-relevant-frame-is-parked-when-it-becomes-relevant.md)).
+*
+* - `keyFrame` — the track's clean best FULL frame at native width (capped by
+*   the caller's `maxWidth`). What `keyFrame` + `keyFrameSmall` are written
+*   from, and what the detail plane's full-frame rung cuts from.
+* - `thumbnail` — the best-shot subject slab: the caller's 16:9 central-square
+*   window, cut by the runner at uncapped native resolution.
+*
+* The runner never interprets `trackId`; it is an opaque key the hub owns.
+*/
+var ParkedFrameKindSchema = _enum(["keyFrame", "thumbnail"]);
+/**
+* Why a park did NOT happen. Every one is logged on the runner with
+* `tags: { deviceId }` and the handle's measured age, because a handle already
+* gone at park time IS the defect the 150–500 ms window exists to prevent —
+* never a reason to retry in a loop.
+*
+* - `handle-gone` — the native surface no longer resolves this handle (never
+*   registered, past the lease bound, or the worker released it). `detail`
+*   carries the runner's own miss reason.
+* - `encode-failed` — pixels resolved and the JPEG encode threw.
+*/
+var ParkRefusalSchema = _enum(["handle-gone", "encode-failed"]);
+/** Answer to `parkTrackFrame` — a discriminated union, so "not parked" always names why. */
+var ParkTrackFrameResultSchema = discriminatedUnion("parked", [object({
+	parked: literal(true),
+	/** The node holding the parcel — what a later retrieval must be pinned to. */
+	nodeId: string(),
+	width: number().int().positive(),
+	height: number().int().positive(),
+	/** JPEG bytes the parcel costs on the node. */
+	bytes: number().int().nonnegative(),
+	/** Whether this park replaced a parcel already held for the key. */
+	replaced: boolean()
+}), object({
+	parked: literal(false),
+	nodeId: string(),
+	reason: ParkRefusalSchema,
+	/** Age of the handle at the park, on the runner's clock; null if unknown. */
+	handleAgeMs: number().nullable(),
+	detail: string().optional()
+})]);
+/** A retrieved parcel — the runner's own JPEG, base64 for the wire. */
+var ParkedTrackFrameSchema = object({
+	jpeg: string(),
+	width: number().int().positive(),
+	height: number().int().positive(),
+	/** The frame instant the parcel shows (the caller's clock, echoed back). */
+	timestamp: number(),
+	/** When the node stored it (the node's clock). */
+	parkedAt: number()
+});
 /** Parent detection context passed to `runDetailSubtree` — the crop's
 *  originating detection, in FRAME-space coordinates. Reuses
 *  `NativeCropBboxSchema`'s `{x,y,w,h}` shape (same numeric fields; here
@@ -73603,7 +73692,7 @@ var RunnerCameraConfigSchema = object({
 	* - `analyzer`: ML/frame-diff motion detection (motion-wasm or other
 	*   analyzer providers) running on decoded frames in this runner.
 	* - `onboard`: camera-native motion pushes (Reolink Baichuan, ONVIF
-	*   analytics, Frigate motion). The provider emits ProviderMotion
+	*   analytics). The provider emits ProviderMotion
 	*   events; the orchestrator forwards to `reportMotion`.
 	*/
 	motionSources: MotionSourcesSchema.default(["analyzer"]),
@@ -73845,7 +73934,26 @@ method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mu
 	className: string(),
 	/** Camera the pixels came from. Diagnostics + log tags ONLY — never routing. */
 	sourceDeviceId: number()
-}), RunStatelessStepResultSchema, { kind: "mutation" });
+}), RunStatelessStepResultSchema, { kind: "mutation" }), method(object({
+	deviceId: number(),
+	/** Opaque to the runner — the hub's track id. */
+	trackId: string(),
+	kind: ParkedFrameKindSchema,
+	handle: FrameHandleSchema,
+	/** Normalized [0,1] window to cut. `{0,0,1,1}` for a full frame. */
+	bbox: NativeCropBboxSchema,
+	/** Width cap for a full-frame park (the `keyFrame` native cap). */
+	maxWidth: number().int().positive().optional(),
+	/** The frame instant (caller's clock) — orders parks for one key. */
+	timestamp: number()
+}), ParkTrackFrameResultSchema, { kind: "mutation" }), method(object({
+	deviceId: number(),
+	trackId: string(),
+	kind: ParkedFrameKindSchema
+}), ParkedTrackFrameSchema.nullable()), method(object({
+	deviceId: number(),
+	trackId: string()
+}), object({ released: number().int().nonnegative() }), { kind: "mutation" });
 var CameraPipelineConfigSchema = object({
 	engine: PipelineEngineChoiceSchema.optional(),
 	steps: array(PipelineStepInputSchema).readonly(),
@@ -76915,8 +77023,8 @@ onStatusChanged: { data: object({
 	/**
 	* Runtime-state slice — every provider that registers this cap
 	* stores the same shape under `device.runtimeState[battery]`.
-	* Cross-provider uniformity: a Reolink Argus, a Frigate sensor
-	* proxy, an ONVIF battery cam all read/write the same keys.
+	* Cross-provider uniformity: a Reolink Argus, a sensor proxy,
+	* an ONVIF battery cam all read/write the same keys.
 	* Consumers (BatteryBadge, snapshot wrapper sleep gate) read once
 	* via `device.runtimeState.getCapState('battery')` regardless of
 	* the underlying driver.
@@ -77066,7 +77174,7 @@ var buttonCapability = {
 *
 * Implementations:
 *   - Each camera-providing addon registers this cap natively per
-*     device (Reolink, Hikvision, RTSP, Frigate, ONVIF self).
+*     device (Reolink, Hikvision, RTSP, ONVIF self).
 *   - Returns a snapshot from the persisted device config blob — no
 *     extra round-trip to the camera, no probing.
 *   - The cap is admin-only (`auth: 'admin'`) — credentials must not
@@ -79166,7 +79274,7 @@ var AvailableIntegrationTypeSchema = object({
 	* Which integration-marker cap the addon declared, so the wizard can
 	* branch on CAP — never on addon name. `device-adoption` integrations
 	* (Home Assistant, …) route through the broker step (Approach A);
-	* `device-provider` integrations (Reolink/Frigate/ONVIF) keep the
+	* `device-provider` integrations (Reolink/ONVIF) keep the
 	* legacy config → discovery flow.
 	*/
 	kind: _enum(["device-adoption", "device-provider"]),
@@ -82738,13 +82846,31 @@ var RecordingManifestSchema = object({
 	*/
 	playbackEndpoints: array(string())
 });
-/** Recording storage usage for one camera (bytes on disk across all its
-*  profiles/subtrees/locations on this node). */
+/**
+* Recording storage usage for one camera — what the ARCHIVE holds for it,
+* across every profile and every resolvable location on this node.
+*
+* ## Archive vs residency, which is the whole point of this shape (D418)
+*
+* `usedBytes` / `oldestMs` / `segments` are the durable hour ledger's numbers:
+* the same quantity `RecordingLocationUsage.usedBytes` reports for the volume
+* this camera writes to, so the two can be added up and compared.
+*
+* They were not always. Until D418 this row came from the recorder's in-RAM
+* `RecordingIndex`, which since D287 holds only the live tail plus the hours
+* somebody hydrated — so a hub with 1.9 TB and 3.3 days of footage reported
+* 60.5 GB and "oldest: three hours ago" on the same page as the volume row
+* that said otherwise, and two people read it as retention eating recent
+* footage. Residency is still reported, under `residentBytes` /
+* `residentOldestMs`, which answer a different question and say so.
+*/
 var RecordingDeviceUsageSchema = object({
 	deviceId: number(),
+	/** Bytes the ARCHIVE holds for this camera on this node's resolvable
+	*  recordings locations. */
 	usedBytes: number(),
 	/**
-	* Start of this camera's OLDEST indexed segment, across every profile and
+	* Start of this camera's OLDEST ARCHIVED segment, across every profile and
 	* location — the "Oldest footage" column in Recordings → Storage, and the
 	* only honest answer to "is retention actually holding?" per camera.
 	*
@@ -82754,7 +82880,24 @@ var RecordingDeviceUsageSchema = object({
 	* (types) and the addon ship on different trains, and the addon is usually
 	* the later of the two.
 	*/
-	oldestMs: number().nullable().optional()
+	oldestMs: number().nullable().optional(),
+	/** Segments the archive holds for this camera — the "M" beside `usedBytes`.
+	*  OPTIONAL for the same train-skew reason as `oldestMs`. */
+	segments: number().optional(),
+	/**
+	* RESIDENCY, not the archive: bytes the recorder process currently holds in
+	* its RAM index — the live tail plus the hours a reader hydrated.
+	*
+	* It answers "what can be served without touching the disk", never "how much
+	* footage this camera has". A UI that renders it must label it as such, and
+	* must never total it as storage. OPTIONAL: a recorder predating D418 omits
+	* it, and so does a node whose ledger could not answer.
+	*/
+	residentBytes: number().optional(),
+	/** The residency counterpart of `oldestMs` — the oldest segment currently in
+	*  RAM, which on a healthy recorder is minutes ago and means nothing about
+	*  retention. `null` = nothing resident. */
+	residentOldestMs: number().nullable().optional()
 });
 /** Recording storage usage + capacity for one storage location. */
 var RecordingLocationUsageSchema = object({
@@ -82792,6 +82935,17 @@ var RecordingStorageUsageSchema = object({
 	totalUsedBytes: number(),
 	devices: array(RecordingDeviceUsageSchema),
 	/**
+	* WHERE `devices[]` came from, so an empty table is never mistaken for empty
+	* disks (D418).
+	*
+	* `archive` = the durable hour ledger answered. `unavailable` = this node
+	* declared no ledger and the recorder REFUSED rather than answering the
+	* question with the resident index (D295 rule 3) — the rows are UNKNOWN, not
+	* zero, and a UI must say so. OPTIONAL: a recorder predating D418 omits it,
+	* and its rows are residency.
+	*/
+	devicesRead: _enum(["archive", "unavailable"]).optional(),
+	/**
 	* Per-physical-volume capacity. OPTIONAL, and consumers must render the rest
 	* of the payload without it: the hub serves this method through a BAKED
 	* router, so a hub whose framework train predates a change to this array
@@ -86671,7 +86825,7 @@ function toDeviceSummary(device, addonId) {
 	};
 }
 /**
-* Base class for device-provider addons (rtsp, onvif, frigate).
+* Base class for device-provider addons (rtsp, onvif).
 *
 * Provides default implementations for the common device-provider cap
 * methods (`start`, `stop`, `getStatus`, `getDevices`, `supportsDiscovery`,
@@ -91327,6 +91481,24 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineRunner.getParkedTrackFrame": {
+		capName: "pipeline-runner",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"pipelineRunner.parkTrackFrame": {
+		capName: "pipeline-runner",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"pipelineRunner.releaseParkedTrackFrames": {
+		capName: "pipeline-runner",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineRunner.reportMotion": {
 		capName: "pipeline-runner",
 		capScope: "system",
@@ -94604,6 +94776,21 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineRunner.getParkedTrackFrame": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.parkTrackFrame": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
+	"pipelineRunner.releaseParkedTrackFrames": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineRunner.reportMotion": [{
 		name: "deviceId",
 		form: "single",
@@ -95295,7 +95482,7 @@ var PreviewTextField = string().max(200);
 * Whether the notification's preview is a STILL or a short animation.
 *
 * The operator's ask, verbatim: *"inviato come gif o video (come per le altre
-* rule)"* — his Scrypted advanced-notifier has a `gifRule`, and a ten-hour
+* rule)"* — the other rules already offer an animated preview, and a ten-hour
 * night reads better as three seconds of motion than as one frame of it. Both
 * modes get the SAME treatment (blurred frame, large centred title); `'gif'`
 * simply applies it to a dozen frames sampled across the render and assembles
@@ -143940,9 +144127,9 @@ var { mulaw, alaw } = resolveAlawmulaw();
 //#endregion
 //#region src/devices/dreame-rfc4571-server.ts
 /**
-* RFC 4571 (framed RTP over TCP) output for the robot camera — the shape the
-* Scrypted plugin (`scrypted-dreame-native/src/rfc4571.ts`) proved on this
-* robot, ported: nodedreame's `DreameCameraStream` speaks the LinkVisual relay
+* RFC 4571 (framed RTP over TCP) output for the robot camera — the shape
+* already proven on this robot: nodedreame's `DreameCameraStream` speaks the
+* LinkVisual relay
 * and emits H.264 access units + AAC (ADTS); nodelink's `Rfc4571Muxer` frames
 * them as RTP on a local TCP server the stream-broker dials as a
 * `pull-rfc4571` source, exactly like a Reolink Baichuan camera.
@@ -143951,9 +144138,28 @@ var { mulaw, alaw } = resolveAlawmulaw();
 * name, and WE own the TCP socket — when the broker's reader detaches we know
 * the viewer is gone and release the monitor at once, instead of polling the
 * broker for consumers or waiting on a duration cap.
+*
+* And we own the FEED: the relay dies in three ways nodedreame reports and one
+* it cannot — the socket errors (`error`; with no listener an EventEmitter
+* throws, and on 2026-09-09 a `read ETIMEDOUT` took the whole provider down),
+* the relay closes and the stream stops itself (`stopped`), or the socket goes
+* silent for minutes before the kernel gives up (nothing at all: 16 min of a
+* broker dialling a port that accepted and sent nothing). The server reports
+* every one of them ONCE through `onFeedLost`, and never its own close, so the
+* device can put the lazy sentinel back and let the next dial be a wake (D424).
 */
 var VIDEO_PT = 96;
 var AUDIO_PT = 97;
+/**
+* How long the feed may go without a video access unit before the relay is
+* declared dead. The broker gives a source 8 s (`RTP_ACTIVITY_TIMEOUT_MS`);
+* this sits just past it so a stall is judged by the side that can act on it.
+*/
+var FEED_STALL_MS = 1e4;
+var FEED_STALL_SWEEP_MS = 1e3;
+function describeLoss(loss) {
+	return loss.error === null ? loss.reason : `${loss.reason}: ${loss.error.message}`;
+}
 function deferred() {
 	let resolve = () => void 0;
 	return {
@@ -143986,11 +144192,33 @@ function consoleInto(logger) {
 * server calls `onConsumerDisconnect` when the last reader detaches.
 */
 async function startRfc4571Server(params) {
-	const { stream, logger, onConsumerDisconnect, bindHost = "0.0.0.0", keyframeTimeoutMs = 2e4, audioGraceMs = 1500, idleGraceMs = 4e3 } = params;
+	const { stream, logger, onConsumerDisconnect, onFeedLost, bindHost = "0.0.0.0", keyframeTimeoutMs = 2e4, audioGraceMs = 1500, idleGraceMs = 4e3, stallTimeoutMs = FEED_STALL_MS } = params;
 	const videoRef = { current: null };
 	const audioRef = { current: null };
 	const firstKeyframe = deferred();
 	const firstAudio = deferred();
+	const firstLoss = deferred();
+	let pendingLoss = null;
+	let toreDown = false;
+	let serving = false;
+	let lastVideoAt = 0;
+	const reportLoss = (loss) => {
+		if (toreDown || pendingLoss !== null) return;
+		pendingLoss = loss;
+		firstLoss.resolve(loss);
+		if (serving) onFeedLost(loss);
+	};
+	stream.on("error", (err) => reportLoss({
+		reason: "error",
+		error: err
+	}));
+	stream.on("stopped", () => reportLoss({
+		reason: "stopped",
+		error: null
+	}));
+	stream.on("videoAccessUnit", () => {
+		lastVideoAt = Date.now();
+	});
 	stream.on("videoAccessUnit", (e) => {
 		if (videoRef.current !== null) return;
 		const p = extractH264ParamSetsFromAccessUnit(e.data);
@@ -144016,8 +144244,11 @@ async function startRfc4571Server(params) {
 		}
 	});
 	await stream.start();
+	const lostBeforeServing = firstLoss.promise.then((loss) => {
+		throw new Error(`relay lost before the first keyframe (${describeLoss(loss)})`);
+	});
 	try {
-		await withTimeout(firstKeyframe.promise, keyframeTimeoutMs, "timed out waiting for the first keyframe");
+		await Promise.race([withTimeout(firstKeyframe.promise, keyframeTimeoutMs, "timed out waiting for the first keyframe"), lostBeforeServing]);
 	} catch (err) {
 		await stream.stop().catch(() => void 0);
 		throw err;
@@ -144025,6 +144256,10 @@ async function startRfc4571Server(params) {
 	await Promise.race([firstAudio.promise, new Promise((resolve) => {
 		setTimeout(resolve, audioGraceMs).unref?.();
 	})]);
+	if (pendingLoss !== null) {
+		await stream.stop().catch(() => void 0);
+		throw new Error(`relay lost before the server was up (${describeLoss(pendingLoss)})`);
+	}
 	const paramSets = videoRef.current;
 	if (paramSets === null) throw new Error("no parameter sets after the first keyframe");
 	const audioFacts = audioRef.current;
@@ -144044,7 +144279,6 @@ async function startRfc4571Server(params) {
 	if (audioFacts !== null) stream.on("audioFrame", (adts) => muxer.sendAudioAdtsFrame(adts));
 	let liveClients = 0;
 	let idleTimer = null;
-	let toreDown = false;
 	const server = net.createServer((socket) => {
 		liveClients += 1;
 		if (idleTimer !== null) clearTimeout(idleTimer);
@@ -144071,6 +144305,15 @@ async function startRfc4571Server(params) {
 	});
 	const addr = server.address();
 	if (addr === null || typeof addr === "string") throw new Error("failed to bind the RFC4571 server");
+	const stallSweep = setInterval(() => {
+		if (toreDown || Date.now() - lastVideoAt < stallTimeoutMs) return;
+		reportLoss({
+			reason: "stalled",
+			error: null
+		});
+	}, Math.max(5, Math.min(FEED_STALL_SWEEP_MS, Math.floor(stallTimeoutMs / 2))));
+	stallSweep.unref?.();
+	serving = true;
 	return {
 		host: bindHost,
 		port: addr.port,
@@ -144082,6 +144325,7 @@ async function startRfc4571Server(params) {
 		} : null,
 		close: async () => {
 			toreDown = true;
+			clearInterval(stallSweep);
 			if (idleTimer !== null) clearTimeout(idleTimer);
 			try {
 				muxer.close();
@@ -144361,6 +144605,9 @@ var DreameCameraDevice = class extends DreameChildDevice {
 					keyframeTimeoutMs: WAKE_TIMEOUT_MS,
 					onConsumerDisconnect: () => {
 						this.closeStream("idle");
+					},
+					onFeedLost: (loss) => {
+						this.onFeedLost(loss);
 					}
 				});
 				this.live = {
@@ -144400,6 +144647,22 @@ var DreameCameraDevice = class extends DreameChildDevice {
 		});
 		return this.opening;
 	}
+	/**
+	* The feed died under an open monitor. The session is closed — the lazy
+	* sentinel goes back on the broker — so the broker's next dial asks for a
+	* materialize, which is the wake. Logged: this branch drops a live stream.
+	*/
+	onFeedLost(loss) {
+		this.ctx.logger.warn("robot camera: relay feed lost — closing the monitor; the next dial re-opens it", {
+			tags: { deviceId: this.id },
+			meta: {
+				reason: loss.reason,
+				error: loss.error === null ? null : errMsg(loss.error),
+				openMs: Date.now() - this.sessionOpenedAt
+			}
+		});
+		this.closeStream("feed-lost");
+	}
 	armMaxDuration() {
 		if (this.maxTimer !== null) clearTimeout(this.maxTimer);
 		this.maxTimer = setTimeout(() => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-dreame",
-  "version": "0.2.90",
+  "version": "0.2.93",
   "description": "Dreame robot-vacuum / lawn-mower device-provider addon for CamStack — wraps the @apocaliss92/nodedreame Dreamehome cloud client",
   "keywords": [
     "camstack",