@camstack/addon-provider-homeassistant 1.2.112 → 1.2.114

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_dist = require("./dist-4E45Rli4.js");
+const require_dist = require("./dist-1-owndOS.js");
 let node_crypto = require("node:crypto");
 let node_zlib = require("node:zlib");
 //#region src/ha-device-source.ts
@@ -923,7 +923,7 @@ var HaBinarySensorDevice = class extends HaBaseChildDevice {
 					getStatus: async () => this.readSlice({
 						detected: false,
 						lastDetectedAt: null,
-						autoClearAfterMs: 15e3
+						autoClearAfterMs: null
 					}),
 					isDetected: async () => {
 						return this.runtimeState.getCapState("motion")?.detected === true;
@@ -977,7 +977,7 @@ function buildSlice(capName, active, lastChangedAt) {
 		case "motion": return {
 			detected: active,
 			lastDetectedAt: active ? lastChangedAt : null,
-			autoClearAfterMs: 15e3
+			autoClearAfterMs: null
 		};
 	}
 }

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { $ as presenceCapability, A as controlCapability, At as EventCategory, B as humiditySensorCapability, C as buildAddonRouteProvider, Ct as number, D as colorCapability, Dt as union, E as climateControlCapability, Et as string, F as eventEmitterCapability, G as motionCapability, H as lawnMowerControlCapability, I as fanControlCapability, J as notifierCapability, K as normalizeUnit, L as floodCapability, M as deviceAdoptionCapability, O as connectivityCapability, Ot as unknown, P as enumSensorCapability, Q as prepareNotification, R as gasCapability, S as brokerCapability, St as literal, T as carbonMonoxideCapability, Tt as record, U as lockControlCapability, V as imageCapability, W as mediaPlayerCapability, Y as numericSensorCapability, Z as powerMeterCapability, _ as automationControlCapability, _t as createEvent, at as temperatureSensorCapability, b as binaryCapability, bt as array, ct as valveCapability, d as TargetSchema, dt as weatherCapability, et as pressureSensorCapability, f as accessoriesCapability, ft as errMsg, g as ambientLightSensorCapability, gt as DeviceType, h as alarmPanelCapability, ht as DeviceRole, it as tamperCapability, j as coverCapability, k as contactCapability, kt as url, lt as vibrationCapability, m as airQualitySensorCapability, mt as DeviceFeature, n as BaseDevice, nt as smokeCapability, ot as updateCapability, p as addonRoutesCapability, q as notificationOutputCapability, r as BaseDeviceProvider, rt as switchCapability, s as EnumSensorDateTimeFormatSchema, st as vacuumControlCapability, tt as scriptRunnerCapability, ut as waterHeaterCapability, v as batteryCapability, w as buttonCapability, wt as object, x as brightnessCapability, xt as discriminatedUnion, y as bestLocationMatch, yt as _enum, z as humidifierCapability } from "./dist-B6d9kSVC.mjs";
+import { $ as presenceCapability, A as controlCapability, At as EventCategory, B as humiditySensorCapability, C as buildAddonRouteProvider, Ct as number, D as colorCapability, Dt as union, E as climateControlCapability, Et as string, F as eventEmitterCapability, G as motionCapability, H as lawnMowerControlCapability, I as fanControlCapability, J as notifierCapability, K as normalizeUnit, L as floodCapability, M as deviceAdoptionCapability, O as connectivityCapability, Ot as unknown, P as enumSensorCapability, Q as prepareNotification, R as gasCapability, S as brokerCapability, St as literal, T as carbonMonoxideCapability, Tt as record, U as lockControlCapability, V as imageCapability, W as mediaPlayerCapability, Y as numericSensorCapability, Z as powerMeterCapability, _ as automationControlCapability, _t as createEvent, at as temperatureSensorCapability, b as binaryCapability, bt as array, ct as valveCapability, d as TargetSchema, dt as weatherCapability, et as pressureSensorCapability, f as accessoriesCapability, ft as errMsg, g as ambientLightSensorCapability, gt as DeviceType, h as alarmPanelCapability, ht as DeviceRole, it as tamperCapability, j as coverCapability, k as contactCapability, kt as url, lt as vibrationCapability, m as airQualitySensorCapability, mt as DeviceFeature, n as BaseDevice, nt as smokeCapability, ot as updateCapability, p as addonRoutesCapability, q as notificationOutputCapability, r as BaseDeviceProvider, rt as switchCapability, s as EnumSensorDateTimeFormatSchema, st as vacuumControlCapability, tt as scriptRunnerCapability, ut as waterHeaterCapability, v as batteryCapability, w as buttonCapability, wt as object, x as brightnessCapability, xt as discriminatedUnion, y as bestLocationMatch, yt as _enum, z as humidifierCapability } from "./dist-BPuEMYlM.mjs";
 import { randomUUID } from "node:crypto";
 import { brotliCompressSync, deflateSync, gzipSync } from "node:zlib";
 //#region src/ha-device-source.ts
@@ -922,7 +922,7 @@ var HaBinarySensorDevice = class extends HaBaseChildDevice {
 					getStatus: async () => this.readSlice({
 						detected: false,
 						lastDetectedAt: null,
-						autoClearAfterMs: 15e3
+						autoClearAfterMs: null
 					}),
 					isDetected: async () => {
 						return this.runtimeState.getCapState("motion")?.detected === true;
@@ -976,7 +976,7 @@ function buildSlice(capName, active, lastChangedAt) {
 		case "motion": return {
 			detected: active,
 			lastDetectedAt: active ? lastChangedAt : null,
-			autoClearAfterMs: 15e3
+			autoClearAfterMs: null
 		};
 	}
 }

package/dist/{dist-4E45Rli4.js → dist-1-owndOS.js}

@@ -7361,8 +7361,23 @@ function errMsg(err) {
 	if (typeof err === "string") return err;
 	return String(err);
 }
-//#endregion
-//#region ../types/dist/index.mjs
+new Set([
+	"track",
+	"summary",
+	"face",
+	"identity",
+	"plate",
+	"vehicle",
+	"scene",
+	"motion",
+	"object",
+	"audio"
+]);
+new Set([
+	"motion",
+	"object",
+	"audio"
+]);
 /**
 * Build an `IAddonRouteProvider` from a list of routes. Implements
 * both the operator-facing `getRoutes` (returning route descriptors
@@ -12774,8 +12789,17 @@ method(object({
 }), array(SettingsRecordSchema).readonly()), method(object({
 	namespace: string().optional(),
 	collection: string(),
-	record: SettingsRecordSchema
-}), _void(), { kind: "mutation" }), method(object({
+	record: object({
+		id: string().optional(),
+		data: record(string(), unknown())
+	})
+}), object({ 
+/**
+* The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+* for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+* primary key — which is the only place an auto key is knowable.
+*/
+id: union([string(), number()]) }), { kind: "mutation" }), method(object({
 	namespace: string().optional(),
 	collection: string(),
 	records: array(BulkRecordSchema).readonly()
@@ -12884,8 +12908,17 @@ method(_void(), EngineInfoSchema, { auth: "admin" }), method(object({
 }), array(SettingsRecordSchema).readonly(), { auth: "admin" }), method(object({
 	namespace: string().optional(),
 	collection: string(),
-	record: SettingsRecordSchema
-}), _void(), {
+	record: object({
+		id: string().optional(),
+		data: record(string(), unknown())
+	})
+}), object({ 
+/**
+* The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+* for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+* primary key — which is the only place an auto key is knowable.
+*/
+id: union([string(), number()]) }), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({
@@ -19910,7 +19943,20 @@ var TrackSchema = object({
 	...TrackRetrainFields
 });
 var BaseEventFields = {
-	id: string(),
+	/**
+	* A SQLite ROWID, assigned by the database (D474).
+	*
+	* Was a 36-character UUID and cost 263 MB of a 1 117 MB database — paid
+	* TWICE per row, in the row and in the primary-key index, across 2.1 million
+	* motion, audio and object events. An `INTEGER PRIMARY KEY` in SQLite **is**
+	* the rowid: the table itself is that B-tree, so the index stops existing
+	* rather than getting smaller. No shorter string does that.
+	*
+	* Defined once here for all three event kinds, which is why they move
+	* together: a per-table migration would have forked this and
+	* `COMMON_BASE_COLUMNS` and reunited them two stages later.
+	*/
+	id: number().int(),
 	deviceId: number(),
 	timestamp: number()
 };
@@ -19929,7 +19975,34 @@ var MotionEventSchema = object({
 	/** Omitted in slim projection. */
 	frameHeight: number().optional(),
 	/** Populated by B5 (recording playback URL for this event). */
-	mediaUrl: string().optional()
+	mediaUrl: string().optional(),
+	/**
+	* One row per motion EPISODE, not one per push (D475). `null` while the
+	* episode is still open — a further rising edge extends it in place rather
+	* than inserting a new row. Set once, at close, to `lastOnAt - startedAt`
+	* (the span from the first rising edge to the LAST one, deliberately NOT
+	* `closedAt - startedAt` — the close delay is a quiet CONFIRMATION, not
+	* movement, and folding it in would report `MOTION_CLOSE_AFTER_MS` of
+	* motion for an instantaneous trigger).
+	*
+	* **Absent** (not merely `null`) on a row written before D475 — that means
+	* "closed the old way, before this column existed", never "still open".
+	* Nothing in this codebase may read an absent `durationMs` as an open
+	* episode; only `null` means open.
+	*/
+	durationMs: number().nullable().optional(),
+	/**
+	* Ms offsets from `timestamp` (the episode's own first rising edge, so the
+	* first entry is always `0`) of every genuine off→on transition the
+	* episode saw — "ogni evento on si deve salvare" (D475). NOT one entry per
+	* push: a firmware source that keepalives at ~1 Hz for the whole burst
+	* (Reolink, Hikvision) produces exactly one edge; a source that reports an
+	* explicit `false` mid-episode and then resumes before the quiet window
+	* elapses produces another. Stored compactly — see `motion-edge-codec.ts`
+	* — and decoded back to this shape on read. Absent/empty on a legacy row,
+	* which must never be read as "no episode happened here".
+	*/
+	edges: array(number()).readonly().optional()
 });
 /**
 * Which detection SOURCE produced an object event. `pipeline` = the ML
@@ -19984,6 +20057,23 @@ var ObjectEventSchema = object({
 	* includes it (it is light). Absent on rows written before this field.
 	*/
 	frameId: string().optional(),
+	/**
+	* A PRODUCER-chosen key that makes a synthetic event's emission idempotent
+	* (D474).
+	*
+	* Only the package detector writes it, and it exists because the event id
+	* stopped being choosable: the delivery and pick-up rows used to BE their
+	* dedupe key (`pa-pkg-<entryId>-delivered`), which is how "never emit a
+	* second delivery for this entry" survived a restart. An `INTEGER` rowid is
+	* assigned by SQLite, so that key had to move off the primary key rather
+	* than be dropped — a detector that cannot recognise its own row re-delivers
+	* every parcel on every boot.
+	*
+	* Absent on every other object event, and on every row written before this
+	* field. Never a substitute for `id`: it is unique per (producer, occasion),
+	* not per row, and nothing addresses a row by it.
+	*/
+	idempotencyKey: string().optional(),
 	/** Omitted in slim projection. */
 	trackId: string().optional(),
 	className: string(),
@@ -21086,6 +21176,14 @@ var NativeCropResultSchema = object({
 	* set `encodeJpeg: true`; `bytes` is then absent.
 	*/
 	jpeg: string().optional(),
+	/**
+	* The SAME compressed JPEG as `jpeg`, as bytes (D462). Present instead of
+	* `jpeg` when the request set `acceptJpegBytes`; a request that did not gets
+	* `jpeg` exactly as before. MsgPack and the mesh leg both carry binary —
+	* `bytes` above has crossed this boundary as a `Uint8Array` all along — so
+	* base64 was buying nothing but a multi-megabyte string in the relay's heap.
+	*/
+	jpegBytes: _instanceof(Uint8Array).optional(),
 	width: number().int().positive(),
 	height: number().int().positive(),
 	/**
@@ -21152,7 +21250,14 @@ var ParkTrackFrameResultSchema = discriminatedUnion("parked", [object({
 })]);
 /** A retrieved parcel — the runner's own JPEG, base64 for the wire. */
 var ParkedTrackFrameSchema = object({
-	jpeg: string(),
+	/**
+	* Base64 JPEG — the pre-D462 wire. OPTIONAL since D462: a request that set
+	* `acceptJpegBytes` is answered in `jpegBytes` and this is then absent.
+	* Exactly one of the two is present.
+	*/
+	jpeg: string().optional(),
+	/** The same JPEG as bytes, for a caller that declared it reads them (D462). */
+	jpegBytes: _instanceof(Uint8Array).optional(),
 	width: number().int().positive(),
 	height: number().int().positive(),
 	/** The frame instant the parcel shows (the caller's clock, echoed back). */
@@ -21739,6 +21844,13 @@ method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mu
 	bbox: NativeCropBboxSchema,
 	maxWidth: number().int().positive().optional(),
 	/**
+	* The caller reads a `Uint8Array` (D462). When set, a JPEG answer comes
+	* back in `jpegBytes` instead of base64 `jpeg`. Absent means the old
+	* wire — never assume consent: a pre-D462 caller parses the field as
+	* base64 and bytes would decode to garbage rather than fail.
+	*/
+	acceptJpegBytes: boolean().optional(),
+	/**
 	* When `true`, the runner encodes the resolved crop to JPEG ON THE
 	* OWNING NODE and returns it in `jpeg` (base64) INSTEAD of raw `bytes`.
 	* Callers set this for CROSS-NODE fetches (`handle.nodeId` is a remote
@@ -21806,7 +21918,14 @@ method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mu
 }), ParkTrackFrameResultSchema, { kind: "mutation" }), method(object({
 	deviceId: number(),
 	trackId: string(),
-	kind: ParkedFrameKindSchema
+	kind: ParkedFrameKindSchema,
+	/**
+	* The caller reads a `Uint8Array` (D462). When set, a JPEG answer comes
+	* back in `jpegBytes` instead of base64 `jpeg`. Absent means the old
+	* wire — never assume consent: a pre-D462 caller parses the field as
+	* base64 and bytes would decode to garbage rather than fail.
+	*/
+	acceptJpegBytes: boolean().optional()
 }), ParkedTrackFrameSchema.nullable()), method(object({
 	deviceId: number(),
 	trackId: string()
@@ -28293,26 +28412,59 @@ authKey: string().optional() }), object({
 	/** Human-readable error when `ok: false`. */
 	error: string().optional()
 }), { kind: "mutation" });
-/**
-* Hardware / firmware motion sensor cap — binary detected state plus
-* a timestamp of the last observation. Distinct from
-* `motion-detection.cap.ts` which owns the LOCAL ML motion pipeline;
-* `motion` is the lightweight readout from on-camera motion (Reolink
-* `GetMdState`, Baichuan push `type: motion`, ONVIF analytics).
-*
-* Native-motion providers also fan out to `detection.camera-native`
-* with `source: 'onboard'` so cross-cutting system services
-* (alert-center, advanced-notifier) can subscribe once and receive
-* motion from every camera.
-*/
 var MotionStatusSchema = object({
 	detected: boolean(),
 	/** Ms epoch of the last detected-true observation. Null if never detected. */
 	lastDetectedAt: number().nullable(),
 	/**
-	* Ms after which `detected` auto-reverts to false if no fresh push
-	* arrives. Null means the provider leaves detected state until a
-	* native "clear" event.
+	* `MOTION_CLOSE_AFTER_MS` while `detected: true` on a `Camera` device,
+	* `null` while false and on every `Sensor` device (D475) — see that
+	* constant's doc for the one-authority rule.
+	*
+	* ## Reading this field still arms nothing
+	*
+	* It reads like an instruction to the consumer ("revert after N ms if
+	* no fresh push arrives") and it is not one: nothing in this repo reads
+	* the LIVE cap value to drive a timer. `pipeline-analytics`'s motion-episode
+	* close DOES now use the same number — `MOTION_CLOSE_AFTER_MS` — but as an
+	* imported constant, not as a read of `device.state.motion.value`, so this
+	* field stays what it always was: DESCRIPTIVE output, mirroring an answer
+	* computed elsewhere. Building a self-clear timer out of a READ of this
+	* field would add a second falling-edge authority beside whichever one
+	* already owns the device, and two that can disagree are worse than one.
+	* Consumers that need a falling edge SHAPED differently — held open across
+	* a flapping source — debounce on their own side and say so, as
+	* `addon-export-alexa/src/motion-clear-hold.ts` and
+	* `addon-export-hap`'s `RESET_DEBOUNCE_MS` both do.
+	*
+	* ## Who writes it
+	*
+	* - **Cameras** — the runner's phase machine, `active → watching` on
+	*   `cooldown_expired`, which then writes this slice with
+	*   `detected: false` (`handlePhaseChanged` in
+	*   `pipeline-runner/index.ts`). It produces the FALLING edge, which
+	*   matters most for the sources that only ever push a rising one:
+	*   Reolink emits `MotionOnMotionChanged { detected: true }` and never
+	*   a false.
+	* - **Sensors** (Home Assistant binary sensors, Homematic) — the
+	*   provider pushes the false itself, from the upstream system's own
+	*   state change. No phase machine is involved.
+	*
+	* ### The phase machine is CANONICAL, not sole — and that is a defect
+	*
+	* An earlier revision of this docblock (mine, 2026-09-12) claimed the
+	* phase machine is the sole writer for a camera. It is not.
+	* `hikvision-camera.ts:3464` and `amcrest-camera.ts:445` both call
+	* `setCapSlice(motionCapability, …)` on their own rising edge, and
+	* Hikvision's comment says why: it read THIS docblock, agreed the
+	* runner is canonical, and wrote anyway to avoid per-tick churn. So
+	* two authorities can disagree about one slice, which this repo
+	* forbids, and the doc said otherwise — which is worse than saying
+	* nothing, because it reads as verification.
+	*
+	* This predates D475 and is not fixed there: the fix touches every
+	* camera provider. Recorded in D475's Consequences. Do not restore the
+	* "sole writer" wording without also removing the other writers.
 	*/
 	autoClearAfterMs: number().nullable()
 });
@@ -28382,7 +28534,11 @@ onMotionChanged: { data: MotionOnMotionChangedDataSchema } },
 	*/
 	runtimeState: MotionStatusSchema,
 	/**
-	* Runtime-state durability: **session** — self-clearing by construction (`autoClearAfterMs`); a restored `detected: true` is a frozen event, and the next frame re-publishes the real one.
+	* Runtime-state durability: **session** — every writer of this slice
+	* writes only on an EDGE, so a restored `detected: true` would stay
+	* frozen until the next one instead of being corrected. The next edge
+	* re-publishes the real state. (On who the writers are, and why there
+	* is more than one, see `autoClearAfterMs` above.)
 	*
 	* See `RuntimeStateDurability`. Enforced by
 	* `scripts/check-runtime-state-durability.ts`.

package/dist/{dist-B6d9kSVC.mjs → dist-BPuEMYlM.mjs}

@@ -7361,8 +7361,23 @@ function errMsg(err) {
 	if (typeof err === "string") return err;
 	return String(err);
 }
-//#endregion
-//#region ../types/dist/index.mjs
+new Set([
+	"track",
+	"summary",
+	"face",
+	"identity",
+	"plate",
+	"vehicle",
+	"scene",
+	"motion",
+	"object",
+	"audio"
+]);
+new Set([
+	"motion",
+	"object",
+	"audio"
+]);
 /**
 * Build an `IAddonRouteProvider` from a list of routes. Implements
 * both the operator-facing `getRoutes` (returning route descriptors
@@ -12774,8 +12789,17 @@ method(object({
 }), array(SettingsRecordSchema).readonly()), method(object({
 	namespace: string().optional(),
 	collection: string(),
-	record: SettingsRecordSchema
-}), _void(), { kind: "mutation" }), method(object({
+	record: object({
+		id: string().optional(),
+		data: record(string(), unknown())
+	})
+}), object({ 
+/**
+* The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+* for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+* primary key — which is the only place an auto key is knowable.
+*/
+id: union([string(), number()]) }), { kind: "mutation" }), method(object({
 	namespace: string().optional(),
 	collection: string(),
 	records: array(BulkRecordSchema).readonly()
@@ -12884,8 +12908,17 @@ method(_void(), EngineInfoSchema, { auth: "admin" }), method(object({
 }), array(SettingsRecordSchema).readonly(), { auth: "admin" }), method(object({
 	namespace: string().optional(),
 	collection: string(),
-	record: SettingsRecordSchema
-}), _void(), {
+	record: object({
+		id: string().optional(),
+		data: record(string(), unknown())
+	})
+}), object({ 
+/**
+* The id the row ACTUALLY got (D473): the one supplied, the UUID minted
+* for an absent one, or the ROWID SQLite assigned on an `INTEGER`
+* primary key — which is the only place an auto key is knowable.
+*/
+id: union([string(), number()]) }), {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({
@@ -19910,7 +19943,20 @@ var TrackSchema = object({
 	...TrackRetrainFields
 });
 var BaseEventFields = {
-	id: string(),
+	/**
+	* A SQLite ROWID, assigned by the database (D474).
+	*
+	* Was a 36-character UUID and cost 263 MB of a 1 117 MB database — paid
+	* TWICE per row, in the row and in the primary-key index, across 2.1 million
+	* motion, audio and object events. An `INTEGER PRIMARY KEY` in SQLite **is**
+	* the rowid: the table itself is that B-tree, so the index stops existing
+	* rather than getting smaller. No shorter string does that.
+	*
+	* Defined once here for all three event kinds, which is why they move
+	* together: a per-table migration would have forked this and
+	* `COMMON_BASE_COLUMNS` and reunited them two stages later.
+	*/
+	id: number().int(),
 	deviceId: number(),
 	timestamp: number()
 };
@@ -19929,7 +19975,34 @@ var MotionEventSchema = object({
 	/** Omitted in slim projection. */
 	frameHeight: number().optional(),
 	/** Populated by B5 (recording playback URL for this event). */
-	mediaUrl: string().optional()
+	mediaUrl: string().optional(),
+	/**
+	* One row per motion EPISODE, not one per push (D475). `null` while the
+	* episode is still open — a further rising edge extends it in place rather
+	* than inserting a new row. Set once, at close, to `lastOnAt - startedAt`
+	* (the span from the first rising edge to the LAST one, deliberately NOT
+	* `closedAt - startedAt` — the close delay is a quiet CONFIRMATION, not
+	* movement, and folding it in would report `MOTION_CLOSE_AFTER_MS` of
+	* motion for an instantaneous trigger).
+	*
+	* **Absent** (not merely `null`) on a row written before D475 — that means
+	* "closed the old way, before this column existed", never "still open".
+	* Nothing in this codebase may read an absent `durationMs` as an open
+	* episode; only `null` means open.
+	*/
+	durationMs: number().nullable().optional(),
+	/**
+	* Ms offsets from `timestamp` (the episode's own first rising edge, so the
+	* first entry is always `0`) of every genuine off→on transition the
+	* episode saw — "ogni evento on si deve salvare" (D475). NOT one entry per
+	* push: a firmware source that keepalives at ~1 Hz for the whole burst
+	* (Reolink, Hikvision) produces exactly one edge; a source that reports an
+	* explicit `false` mid-episode and then resumes before the quiet window
+	* elapses produces another. Stored compactly — see `motion-edge-codec.ts`
+	* — and decoded back to this shape on read. Absent/empty on a legacy row,
+	* which must never be read as "no episode happened here".
+	*/
+	edges: array(number()).readonly().optional()
 });
 /**
 * Which detection SOURCE produced an object event. `pipeline` = the ML
@@ -19984,6 +20057,23 @@ var ObjectEventSchema = object({
 	* includes it (it is light). Absent on rows written before this field.
 	*/
 	frameId: string().optional(),
+	/**
+	* A PRODUCER-chosen key that makes a synthetic event's emission idempotent
+	* (D474).
+	*
+	* Only the package detector writes it, and it exists because the event id
+	* stopped being choosable: the delivery and pick-up rows used to BE their
+	* dedupe key (`pa-pkg-<entryId>-delivered`), which is how "never emit a
+	* second delivery for this entry" survived a restart. An `INTEGER` rowid is
+	* assigned by SQLite, so that key had to move off the primary key rather
+	* than be dropped — a detector that cannot recognise its own row re-delivers
+	* every parcel on every boot.
+	*
+	* Absent on every other object event, and on every row written before this
+	* field. Never a substitute for `id`: it is unique per (producer, occasion),
+	* not per row, and nothing addresses a row by it.
+	*/
+	idempotencyKey: string().optional(),
 	/** Omitted in slim projection. */
 	trackId: string().optional(),
 	className: string(),
@@ -21086,6 +21176,14 @@ var NativeCropResultSchema = object({
 	* set `encodeJpeg: true`; `bytes` is then absent.
 	*/
 	jpeg: string().optional(),
+	/**
+	* The SAME compressed JPEG as `jpeg`, as bytes (D462). Present instead of
+	* `jpeg` when the request set `acceptJpegBytes`; a request that did not gets
+	* `jpeg` exactly as before. MsgPack and the mesh leg both carry binary —
+	* `bytes` above has crossed this boundary as a `Uint8Array` all along — so
+	* base64 was buying nothing but a multi-megabyte string in the relay's heap.
+	*/
+	jpegBytes: _instanceof(Uint8Array).optional(),
 	width: number().int().positive(),
 	height: number().int().positive(),
 	/**
@@ -21152,7 +21250,14 @@ var ParkTrackFrameResultSchema = discriminatedUnion("parked", [object({
 })]);
 /** A retrieved parcel — the runner's own JPEG, base64 for the wire. */
 var ParkedTrackFrameSchema = object({
-	jpeg: string(),
+	/**
+	* Base64 JPEG — the pre-D462 wire. OPTIONAL since D462: a request that set
+	* `acceptJpegBytes` is answered in `jpegBytes` and this is then absent.
+	* Exactly one of the two is present.
+	*/
+	jpeg: string().optional(),
+	/** The same JPEG as bytes, for a caller that declared it reads them (D462). */
+	jpegBytes: _instanceof(Uint8Array).optional(),
 	width: number().int().positive(),
 	height: number().int().positive(),
 	/** The frame instant the parcel shows (the caller's clock, echoed back). */
@@ -21739,6 +21844,13 @@ method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mu
 	bbox: NativeCropBboxSchema,
 	maxWidth: number().int().positive().optional(),
 	/**
+	* The caller reads a `Uint8Array` (D462). When set, a JPEG answer comes
+	* back in `jpegBytes` instead of base64 `jpeg`. Absent means the old
+	* wire — never assume consent: a pre-D462 caller parses the field as
+	* base64 and bytes would decode to garbage rather than fail.
+	*/
+	acceptJpegBytes: boolean().optional(),
+	/**
 	* When `true`, the runner encodes the resolved crop to JPEG ON THE
 	* OWNING NODE and returns it in `jpeg` (base64) INSTEAD of raw `bytes`.
 	* Callers set this for CROSS-NODE fetches (`handle.nodeId` is a remote
@@ -21806,7 +21918,14 @@ method(RunnerCameraConfigSchema, object({ success: literal(true) }), { kind: "mu
 }), ParkTrackFrameResultSchema, { kind: "mutation" }), method(object({
 	deviceId: number(),
 	trackId: string(),
-	kind: ParkedFrameKindSchema
+	kind: ParkedFrameKindSchema,
+	/**
+	* The caller reads a `Uint8Array` (D462). When set, a JPEG answer comes
+	* back in `jpegBytes` instead of base64 `jpeg`. Absent means the old
+	* wire — never assume consent: a pre-D462 caller parses the field as
+	* base64 and bytes would decode to garbage rather than fail.
+	*/
+	acceptJpegBytes: boolean().optional()
 }), ParkedTrackFrameSchema.nullable()), method(object({
 	deviceId: number(),
 	trackId: string()
@@ -28293,26 +28412,59 @@ authKey: string().optional() }), object({
 	/** Human-readable error when `ok: false`. */
 	error: string().optional()
 }), { kind: "mutation" });
-/**
-* Hardware / firmware motion sensor cap — binary detected state plus
-* a timestamp of the last observation. Distinct from
-* `motion-detection.cap.ts` which owns the LOCAL ML motion pipeline;
-* `motion` is the lightweight readout from on-camera motion (Reolink
-* `GetMdState`, Baichuan push `type: motion`, ONVIF analytics).
-*
-* Native-motion providers also fan out to `detection.camera-native`
-* with `source: 'onboard'` so cross-cutting system services
-* (alert-center, advanced-notifier) can subscribe once and receive
-* motion from every camera.
-*/
 var MotionStatusSchema = object({
 	detected: boolean(),
 	/** Ms epoch of the last detected-true observation. Null if never detected. */
 	lastDetectedAt: number().nullable(),
 	/**
-	* Ms after which `detected` auto-reverts to false if no fresh push
-	* arrives. Null means the provider leaves detected state until a
-	* native "clear" event.
+	* `MOTION_CLOSE_AFTER_MS` while `detected: true` on a `Camera` device,
+	* `null` while false and on every `Sensor` device (D475) — see that
+	* constant's doc for the one-authority rule.
+	*
+	* ## Reading this field still arms nothing
+	*
+	* It reads like an instruction to the consumer ("revert after N ms if
+	* no fresh push arrives") and it is not one: nothing in this repo reads
+	* the LIVE cap value to drive a timer. `pipeline-analytics`'s motion-episode
+	* close DOES now use the same number — `MOTION_CLOSE_AFTER_MS` — but as an
+	* imported constant, not as a read of `device.state.motion.value`, so this
+	* field stays what it always was: DESCRIPTIVE output, mirroring an answer
+	* computed elsewhere. Building a self-clear timer out of a READ of this
+	* field would add a second falling-edge authority beside whichever one
+	* already owns the device, and two that can disagree are worse than one.
+	* Consumers that need a falling edge SHAPED differently — held open across
+	* a flapping source — debounce on their own side and say so, as
+	* `addon-export-alexa/src/motion-clear-hold.ts` and
+	* `addon-export-hap`'s `RESET_DEBOUNCE_MS` both do.
+	*
+	* ## Who writes it
+	*
+	* - **Cameras** — the runner's phase machine, `active → watching` on
+	*   `cooldown_expired`, which then writes this slice with
+	*   `detected: false` (`handlePhaseChanged` in
+	*   `pipeline-runner/index.ts`). It produces the FALLING edge, which
+	*   matters most for the sources that only ever push a rising one:
+	*   Reolink emits `MotionOnMotionChanged { detected: true }` and never
+	*   a false.
+	* - **Sensors** (Home Assistant binary sensors, Homematic) — the
+	*   provider pushes the false itself, from the upstream system's own
+	*   state change. No phase machine is involved.
+	*
+	* ### The phase machine is CANONICAL, not sole — and that is a defect
+	*
+	* An earlier revision of this docblock (mine, 2026-09-12) claimed the
+	* phase machine is the sole writer for a camera. It is not.
+	* `hikvision-camera.ts:3464` and `amcrest-camera.ts:445` both call
+	* `setCapSlice(motionCapability, …)` on their own rising edge, and
+	* Hikvision's comment says why: it read THIS docblock, agreed the
+	* runner is canonical, and wrote anyway to avoid per-tick churn. So
+	* two authorities can disagree about one slice, which this repo
+	* forbids, and the doc said otherwise — which is worse than saying
+	* nothing, because it reads as verification.
+	*
+	* This predates D475 and is not fixed there: the fix touches every
+	* camera provider. Recorded in D475's Consequences. Do not restore the
+	* "sole writer" wording without also removing the other writers.
 	*/
 	autoClearAfterMs: number().nullable()
 });
@@ -28382,7 +28534,11 @@ onMotionChanged: { data: MotionOnMotionChangedDataSchema } },
 	*/
 	runtimeState: MotionStatusSchema,
 	/**
-	* Runtime-state durability: **session** — self-clearing by construction (`autoClearAfterMs`); a restored `detected: true` is a frozen event, and the next frame re-publishes the real one.
+	* Runtime-state durability: **session** — every writer of this slice
+	* writes only on an EDGE, so a restored `detected: true` would stay
+	* frozen until the next one instead of being corrected. The next edge
+	* re-publishes the real state. (On who the writers are, and why there
+	* is more than one, see `autoClearAfterMs` above.)
 	*
 	* See `RuntimeStateDurability`. Enforced by
 	* `scripts/check-runtime-state-durability.ts`.

package/dist/ha-export/ha-export.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 //#endregion
-const require_dist = require("../dist-4E45Rli4.js");
+const require_dist = require("../dist-1-owndOS.js");
 let node_crypto = require("node:crypto");
 //#region src/ha-export/topics.ts
 /**

package/dist/ha-export/ha-export.addon.mjs

@@ -1,4 +1,4 @@
-import { At as EventCategory, C as buildAddonRouteProvider, Et as string, N as deviceExportCapability, X as oauthIntegrationCapability, a as COCO_TO_MACRO, c as FanDirectionSchema, i as CAMERA_SWITCH_ORDER, l as HvacModeSchema, o as CameraSwitchIdSchema, p as addonRoutesCapability, pt as BaseAddon, t as AlarmArmModeSchema, u as MediaPlayerRepeatSchema, vt as nodePin } from "../dist-B6d9kSVC.mjs";
+import { At as EventCategory, C as buildAddonRouteProvider, Et as string, N as deviceExportCapability, X as oauthIntegrationCapability, a as COCO_TO_MACRO, c as FanDirectionSchema, i as CAMERA_SWITCH_ORDER, l as HvacModeSchema, o as CameraSwitchIdSchema, p as addonRoutesCapability, pt as BaseAddon, t as AlarmArmModeSchema, u as MediaPlayerRepeatSchema, vt as nodePin } from "../dist-BPuEMYlM.mjs";
 import { createHmac, timingSafeEqual } from "node:crypto";
 //#region src/ha-export/topics.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-provider-homeassistant",
-  "version": "1.2.112",
+  "version": "1.2.114",
   "description": "Home Assistant device provider addon for CamStack",
   "keywords": [
     "camstack",