@camstack/addon-provider-rtsp 1.0.4 → 1.0.6

package/dist/addon.mjs

@@ -4641,63 +4641,7 @@ function preprocess(fn, schema) {
 	});
 }
 //#endregion
-//#region ../types/dist/index.mjs
-/**
-* Deep wiring healthcheck — snapshot of active reachability probes across
-* every declared capability + widget of every installed plugin, on every
-* node. Produced by the backend `WiringHealthService` and surfaced via
-* `GET /health/wiring`, the tRPC `health.wiring` query, and the boot-gate.
-*
-* Unlike `/health` (process liveness), this reflects whether each cap/widget
-* is actually *reachable* over the real cap-dispatch path. See spec
-* `docs/superpowers/specs/2026-05-23-deep-healthcheck-design.md`.
-*/
-/** What kind of target a probe addressed. */
-var wiringProbeKindSchema = _enum([
-	"singleton",
-	"device",
-	"widget"
-]);
-/** Result of probing a single (cap|widget [, device]) target. */
-var wiringProbeResultSchema = object({
-	capName: string(),
-	kind: wiringProbeKindSchema,
-	deviceId: number().optional(),
-	reachable: boolean(),
-	latencyMs: number(),
-	error: string().optional()
-});
-/** Per-addon roll-up of cap + widget probe results. */
-var wiringAddonHealthSchema = object({
-	addonId: string(),
-	caps: array(wiringProbeResultSchema).readonly(),
-	widgets: array(wiringProbeResultSchema).readonly()
-});
-/** Per-node roll-up. */
-var wiringNodeHealthSchema = object({
-	nodeId: string(),
-	addons: array(wiringAddonHealthSchema).readonly()
-});
-object({
-	/** True only when every probed target is reachable. */
-	ok: boolean(),
-	/** True when at least one target is unreachable. */
-	degraded: boolean(),
-	checkedAt: string(),
-	nodes: array(wiringNodeHealthSchema).readonly(),
-	summary: object({
-		total: number(),
-		reachable: number(),
-		unreachable: number()
-	})
-});
-var MODEL_FORMATS = [
-	"onnx",
-	"coreml",
-	"openvino",
-	"tflite",
-	"pt"
-];
+//#region ../types/dist/sleep-D7JeS58T.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -4995,6 +4939,18 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineEngineMetricsSnapshot"] = "pipeline.engine-metrics-snapshot";
 	/**
+	* Per-node detection-engine runtime-provisioning transition. Emitted by
+	* the detection-pipeline provider on every state change of its lazy
+	* engine-provisioning machine (idle → installing → verifying → ready,
+	* or → failed with a `nextRetryAt`). Payload is the
+	* `EngineProvisioningState` snapshot; `event.source.nodeId` carries the
+	* node. The Pipeline page subscribes to drive a live "installing
+	* OpenVINO… / ready" indicator per node without polling
+	* `pipelineExecutor.getEngineProvisioning`. Telemetry-grade (D8): the UI
+	* also reads the cap snapshot on mount / reconnect. Phase 2.
+	*/
+	EventCategory["PipelineEngineProvisioning"] = "pipeline.engine-provisioning";
+	/**
 	* Cluster topology snapshot. Carries the same payload returned by
 	* `nodes.topology` (every reachable node + addons + processes).
 	* Emitted by the hub on any agent / addon lifecycle change
@@ -6008,7 +5964,7 @@ var ProfileSlotSchema = object({
 * Zod schema for StreamSourceEntry — the canonical stream descriptor
 * exposed by ICameraDevice.getStreamSources() and consumed by the broker.
 */
-var StreamSourceEntrySchema = object({
+var StreamSourceEntrySchema$1 = object({
 	id: string(),
 	label: string(),
 	protocol: _enum([
@@ -6230,926 +6186,1116 @@ var ProfileRtspEntrySchema = object({
 	codec: string().optional(),
 	resolution: CamStreamResolutionSchema.optional()
 });
-/**
-* Numeric day-of-week: 0 = Sunday … 6 = Saturday (matches `Date.getDay`).
-* Named `RecordingWeekday` to avoid collision with the string-union
-* `Weekday` exported from `interfaces/timezones.ts`.
-*/
-var RecordingWeekdaySchema = number().int().min(0).max(6);
-var HHMM = /^([01]\d|2[0-3]):[0-5]\d$/;
-var RecordingScheduleSchema = discriminatedUnion("kind", [object({ kind: literal("always") }), object({
-	kind: literal("timeOfDay"),
-	start: string().regex(HHMM),
-	end: string().regex(HHMM),
-	/** Restrict to these weekdays; omit = every day. */
-	days: array(RecordingWeekdaySchema).optional()
-})]);
-var RecordingModeSchema = _enum([
-	"continuous",
-	"onMotion",
-	"onAudioThreshold"
-]);
-/**
-* First-class, authoritative per-camera storage mode — the netta choice the UI
-* reads directly (never inferred from `rules`):
-*  - `off`        — not recording.
-*  - `events`     — record only around triggers (motion / audio threshold),
-*                   with pre/post-buffer.
-*  - `continuous` — record 24/7 within the schedule.
-*
-* `mode` compiles one-way to the internal `rules[]` consumed by the policy
-* engine (see `compileRules`); `rules[]` is never authored directly anymore.
-*/
-var RecordingStorageModeSchema = _enum([
-	"off",
-	"events",
-	"continuous"
-]);
-/** Which detectors trigger an `events`-mode recording. */
-var RecordingTriggersSchema = object({
-	motion: boolean().optional(),
-	audioThresholdDbfs: number().optional()
-});
-/**
-* Mode of a single recording band — the recorder per-band vocabulary.
-*
-* Distinct from `RecordingStorageModeSchema` (which carries `off`): a band is
-* only ever `continuous` or `events`; "off" is expressed by the absence of a
-* covering band, not by a band value.
-*/
-var RecordingBandModeSchema = _enum(["continuous", "events"]);
-/**
-* Triggers for an `events`-mode band. Identical shape to
-* `RecordingTriggersSchema` — reuse that schema as the band trigger type so the
-* two never drift.
-*/
-var RecordingBandTriggersSchema = RecordingTriggersSchema;
-/**
-* A single mode-per-band window — the canonical recorder band shape, the
-* single source of truth re-used by `addon-pipeline/recorder`.
-*
-* `days` lists the weekdays the band covers (empty = every day, matching the
-* band engine's `applies` rule). `start`/`end` are `HH:MM`; an `end <= start`
-* span wraps past midnight (handled by the band engine).
-*/
-var RecordingBandSchema = object({
-	days: array(RecordingWeekdaySchema),
-	start: string().regex(HHMM),
-	end: string().regex(HHMM),
-	mode: RecordingBandModeSchema,
-	triggers: RecordingBandTriggersSchema.optional(),
-	preBufferSec: number().min(0).optional(),
-	postBufferSec: number().min(0).optional()
-});
-var RecordingRuleSchema = object({
-	schedule: RecordingScheduleSchema,
-	mode: RecordingModeSchema,
-	/** Seconds of footage to retain BEFORE a trigger (applied at keep/discard). */
-	preBufferSec: number().min(0).default(0),
-	/** Keep recording until this many seconds after the last trigger. */
-	postBufferSec: number().min(0).default(0),
-	/** Each new trigger restarts the post-buffer window. */
-	resetTimeoutOnNewEvent: boolean().default(true),
-	/** onAudioThreshold only — dBFS level that counts as a trigger. */
-	thresholdDbfs: number().optional()
-});
-/**
-* Per-device retention overrides. Every field is optional; an unset or `0`
-* value inherits the node-wide recorder default. Only footage-lifetime limits
-* live per-camera: `maxAgeDays` and `maxSizeGb`. The disk-occupancy threshold
-* (when the volume is too full to keep recording) is NOT a per-camera concern —
-* it belongs to the StorageLocation (`StorageLocation.config.minFreePercent`),
-* shared by every camera writing to that volume.
-*/
-var RecordingRetentionSchema = object({
-	maxAgeDays: number().min(0).optional(),
-	maxSizeGb: number().min(0).optional()
-});
-/**
-* The full per-camera recording intent — the wire shape of a RecordingTarget.
-*
-* `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
-* are its mode-specific parameters. `rules` is a DEPRECATED authoring input kept
-* only for transition + migration (`migrateRulesToMode`); the policy engine
-* consumes the compiled output of `compileRules(config)`, never `rules` directly.
-*/
-var RecordingConfigSchema = object({
-	enabled: boolean(),
-	/** Authoritative storage mode. Absent on legacy targets → derived once via
-	*  `migrateRulesToMode`, then persisted. */
-	mode: RecordingStorageModeSchema.optional(),
-	profiles: array(CamProfileSchema).optional(),
-	segmentSeconds: number().int().positive().optional(),
-	/** Shared recording time-bands for `events` & `continuous` — record only when
-	*  the wall-clock falls inside one of these windows. Omit or empty = always.
-	*  `continuous` compiles to one rule per band; `events` to band × trigger. */
-	schedules: array(RecordingScheduleSchema).optional(),
-	/** Legacy single-band predecessor of `schedules`. Read-compat only — it is
-	*  normalized into `schedules` on read and never written going forward. (Not
-	*  tagged `@deprecated`: the normalization paths must read it cast-free.) */
-	schedule: RecordingScheduleSchema.optional(),
-	/** `events`-mode only — which detectors trigger a recording. */
-	triggers: RecordingTriggersSchema.optional(),
-	/** `events`-mode only — seconds retained before / after a trigger. */
-	preBufferSec: number().min(0).optional(),
-	postBufferSec: number().min(0).optional(),
-	/** DEPRECATED authoring input; retained for migration/transition. */
-	rules: array(RecordingRuleSchema).optional(),
-	/**
-	* AUTHORITATIVE mode-per-band recording model (recorder). When present it
-	* is the single source of truth; the legacy `mode`/`schedules`/`schedule`/
-	* `triggers`/`rules` fields above are kept for READ-COMPAT only and are
-	* derived into bands once via `migrateConfigToBands`.
-	*/
-	bands: array(RecordingBandSchema).optional(),
-	retention: RecordingRetentionSchema.optional()
-});
-/**
-* `StorageLocationType` — an addon-declared id that identifies the *kind* of
-* storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
-* so the persisted record schema and the consumer-facing cap can both consume it
-* without forming a circular import. The `storage` cap re-exports it
-* verbatim for back-compat.
-*
-* This Zod schema is the **authoritative source** for `StorageLocationType`.
-* The TS alias in `./storage.ts` re-exports `z.infer<typeof
-* StorageLocationTypeSchema>` so the wire surface (cap) and the legacy
-* `IStorageProvider` interface stay in lockstep.
-*
-* The type is now an **open string** (not a closed enum) — addons declare
-* their own location kinds via `StorageLocationDeclaration.id`. The regex
-* enforces a safe id format: lowercase-start, alphanumeric + hyphens.
-*/
-var StorageLocationTypeSchema = string().regex(/^[a-z][a-zA-Z0-9-]*$/);
-/**
-* Persisted record for a storage location instance. Operators can register
-* multiple instances for multi-cardinality types (e.g. two `backups`
-* locations with different `providerId`s). Cardinality is now declared per
-* location via `StorageLocationDeclaration.cardinality` — the static
-* `STORAGE_LOCATION_CARDINALITY` map has been removed.
-*
-* `id` is a stable namespaced string of the form `<type>:<slug>`.
-* The default location for a type uses `id === <type>:default` by
-* convention (the bare type ref like `'backups'` resolves to it).
-*
-* `isSystem: true` marks a location as orchestrator-seeded and
-* undeletable. The bootstrap-installed defaults (one per type) carry
-* this flag; operator-added locations don't. Editing the config of
-* a system location is allowed (path migration, provider swap) but
-* deleting it is rejected at the cap level.
-*/
-var StorageLocationSchema = object({
-	id: string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
-	type: string(),
-	displayName: string().min(1),
-	providerId: string().min(1),
-	config: record(string(), unknown()),
-	/**
-	* Cluster node this location physically lives on. REQUIRED for node-local
-	* providers (filesystem — the path exists on one node's disk), null/absent
-	* for node-agnostic providers (S3/SFTP/WebDAV, reachable from any node).
-	* `'hub'` is the hub node. Validated against the provider's `nodeLocal`
-	* flag at upsert time, not here (the schema is provider-agnostic).
-	*/
-	nodeId: string().optional(),
-	isDefault: boolean().default(false),
-	isSystem: boolean().default(false),
-	createdAt: number(),
-	updatedAt: number()
-});
-/**
-* Reference accepted by consumer-facing `api.storage.*` calls.
-* Either:
-*  - a `StorageLocationType` (e.g. `'backups'`) → orchestrator resolves to the default of that type
-*  - a fully-qualified id (e.g. `'backups:nas-01'`) → addresses a specific instance
-*
-* The orchestrator's `resolveRef(ref)` handles both cases.
-*/
-var StorageLocationRefSchema = union([StorageLocationTypeSchema, string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/)]);
-/**
-* `StorageLocationDeclaration` — a single storage-location entry declared by
-* an addon in its `package.json` under `camstack.storageLocations`.
-*
-* Design intent:
-* - **Addon declares its needs** — each addon describes the logical storage
-*   slots it requires (e.g. `recordings`, `recordingsLow`) without caring
-*   about the physical path.
-* - **Kernel aggregates** — at boot the kernel collects declarations from all
-*   installed addons, deduplicates by `id`, and exposes the union via the
-*   storage-locations settings surface.
-* - **Orchestrator seeds** — for every declared `id` the orchestrator ensures
-*   at least one instance named `<id>:default` is present, using
-*   `defaultsTo` to inherit the resolved root from another location when the
-*   declaration is a derivative slot (e.g. `recordingsLow` defaults to
-*   `recordings`).
-* - **ids are global** — `id` values are shared across the entire deployment;
-*   two addons declaring the same `id` must agree on `cardinality` (validated
-*   at kernel aggregation time, not here).
-*/
-var StorageLocationDeclarationSchema = object({
+var DeviceType = /* @__PURE__ */ function(DeviceType) {
+	DeviceType["Camera"] = "camera";
+	DeviceType["Hub"] = "hub";
+	DeviceType["Light"] = "light";
+	DeviceType["Siren"] = "siren";
+	DeviceType["Switch"] = "switch";
+	DeviceType["Sensor"] = "sensor";
+	DeviceType["Thermostat"] = "thermostat";
+	DeviceType["Button"] = "button";
+	/** Generic stateless event emitter — carries a device's EXACT declared
+	*  event vocabulary verbatim (no normalization). Installed with the
+	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
+	*  HA bus events (e.g. `zha_event`, generic). */
+	DeviceType["EventEmitter"] = "event-emitter";
+	/** Firmware/software update entity — current vs available version,
+	*  updatable flag, update state, and an install action. Installed with
+	*  the `update` cap. Sources: Homematic firmware-update channels (and
+	*  reusable by other providers, e.g. HA `update.*` entities). */
+	DeviceType["Update"] = "update";
+	DeviceType["Generic"] = "generic";
+	/** Generic notification delivery target (HA `notify.<service>`, future
+	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
+	*  endpoint; the `notifier` cap defines the send surface. */
+	DeviceType["Notifier"] = "notifier";
+	/** Pre-recorded action sequence with optional parameters
+	*  (HA `script.*`). Runnable via `script-runner` cap. */
+	DeviceType["Script"] = "script";
+	/** Automation rule (HA `automation.*`) — enable/disable + manual
+	*  trigger surface exposed via `automation-control` cap. */
+	DeviceType["Automation"] = "automation";
+	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
+	DeviceType["Lock"] = "lock";
+	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
+	*  `valve.*`). `cover` cap with sub-roles for variant. */
+	DeviceType["Cover"] = "cover";
+	/** Pipe / water / gas valve with open/close/stop and optional
+	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
+	*  modelled on the same open/closed lifecycle. */
+	DeviceType["Valve"] = "valve";
+	/** Humidifier / dehumidifier with on/off + target humidity + mode
+	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
+	*  modelled on the same target / mode lifecycle. */
+	DeviceType["Humidifier"] = "humidifier";
+	/** Water heater / boiler with target temperature + operation mode +
+	*  away mode (HA `water_heater.*`). `water-heater` cap — a
+	*  climate-family actuator. */
+	DeviceType["WaterHeater"] = "water-heater";
+	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
+	DeviceType["Fan"] = "fan";
+	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
+	*  the camera surface — those use `Camera`. `media-player` cap. */
+	DeviceType["MediaPlayer"] = "media-player";
+	/** Security panel / alarm system (HA `alarm_control_panel.*`).
+	*  `alarm-panel` cap. */
+	DeviceType["AlarmPanel"] = "alarm-panel";
+	/** Generic user-settable input (HA `number` / `input_number` / `select`
+	*  / `input_select` / `text` / `input_text` / `input_datetime`).
+	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
+	*  TextControl / DateTimeControl. */
+	DeviceType["Control"] = "control";
+	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
+	*  `presence` cap. */
+	DeviceType["Presence"] = "presence";
+	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
+	*  `weather` cap. */
+	DeviceType["Weather"] = "weather";
+	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
+	DeviceType["Vacuum"] = "vacuum";
+	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
+	*  `lawn-mower-control` cap. */
+	DeviceType["LawnMower"] = "lawn-mower";
+	/** Physical HA device group — parent container for entity-children
+	*  adopted from a single HA device entry. Not renderable as a
+	*  standalone device; exists only to anchor child entities. */
+	DeviceType["Container"] = "container";
+	/** Single still-image entity (HA `image.*`). Read-only display of an
+	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
+	DeviceType["Image"] = "image";
+	return DeviceType;
+}({});
+var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
+	DeviceFeature["BatteryOperated"] = "battery-operated";
+	DeviceFeature["Rebootable"] = "rebootable";
 	/**
-	* Global location identifier, e.g. `recordings` or `recordingsLow`.
-	* Must start with a lowercase letter and may contain letters, digits, and
-	* hyphens.
+	* Device supports an on-demand re-sync of its derived spec with its
+	* upstream source — drives the generic Re-sync button. The owning
+	* provider implements the action via the `device-adoption.resync` cap.
 	*/
-	id: string().regex(/^[a-z][a-zA-Z0-9-]*$/, { message: "id must start with a lowercase letter and contain only letters, digits, or hyphens" }),
-	/** Human-readable name shown in the admin UI. */
-	displayName: string().min(1, { message: "displayName must not be empty" }),
-	/** Optional longer explanation of what data this location stores. */
-	description: string().optional(),
+	DeviceFeature["Resyncable"] = "resyncable";
+	DeviceFeature["NativeSnapshot"] = "native-snapshot";
+	DeviceFeature["DoorbellButton"] = "doorbell-button";
+	DeviceFeature["TwoWayAudio"] = "two-way-audio";
+	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
 	/**
-	* `single` — exactly one instance of this location is allowed system-wide
-	* (e.g. `logs`, `models`). The operator can edit it but not add more.
-	* `multi`  — the operator may register several instances (e.g. a second
-	* `recordings` on a NAS for disk tiering); one is the default at any time.
+	* Camera supports the on-firmware autotrack subsystem (subject-
+	* following). Distinct from `PanTiltZoom` because not every PTZ
+	* camera ships autotrack — the admin UI uses this flag to gate
+	* the autotrack toggle / settings card without re-deriving from
+	* the cap registry. Mirrors `ptz-autotrack` cap registration:
+	* driver sets this feature when probe confirms the firmware
+	* surface, and registers the cap in the same code path.
 	*/
-	cardinality: _enum(["single", "multi"]),
+	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
 	/**
-	* When set, the default instance for this location inherits its resolved
-	* root from the named location's default instance. Useful for derivative
-	* slots (e.g. `recordingsLow` → `recordings`) so operators only need to
-	* configure the primary location.
+	* Accessory exposes a "trigger on motion" toggle — the parent camera's
+	* motion detection automatically activates this device. Mirrors
+	* `motion-trigger` cap registration: drivers set this feature in the
+	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
+	*
+	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
+	* fast scalar without binding fetch), notifier rules, and `listAll`
+	* filters that want "all devices with on-motion behaviour".
 	*/
-	defaultsTo: string().optional()
-});
-/**
-* Compute pixel count for sorting. Returns w*h, or 0 if unknown.
-*/
-function streamPixels(meta) {
-	return (meta.width ?? 0) * (meta.height ?? 0);
-}
+	DeviceFeature["MotionTrigger"] = "motion-trigger";
+	/** Light supports rgb-triplet color via `color` cap. */
+	DeviceFeature["LightColorRgb"] = "light-color-rgb";
+	/** Light supports HSV color via `color` cap. */
+	DeviceFeature["LightColorHsv"] = "light-color-hsv";
+	/** Light supports color-temperature (mired) via `color` cap. */
+	DeviceFeature["LightColorMired"] = "light-color-mired";
+	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
+	*  targetHigh). Gates the range slider UI. */
+	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
+	/** Thermostat exposes target humidity and/or current humidity
+	*  readings. Gates the humidity controls. */
+	DeviceFeature["ClimateHumidity"] = "climate-humidity";
+	/** Thermostat exposes a fan-mode selector. */
+	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
+	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
+	DeviceFeature["ClimatePreset"] = "climate-preset";
+	/** Cover exposes intermediate position control (0..100). Gates the
+	*  position slider UI. */
+	DeviceFeature["CoverPositionable"] = "cover-positionable";
+	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
+	DeviceFeature["CoverTilt"] = "cover-tilt";
+	/** Valve exposes intermediate position control (0..100). Gates the
+	*  position slider / drag surface UI. */
+	DeviceFeature["ValvePositionable"] = "valve-positionable";
+	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
+	DeviceFeature["FanSpeed"] = "fan-speed";
+	/** Fan exposes a preset mode selector. */
+	DeviceFeature["FanPreset"] = "fan-preset";
+	/** Fan exposes blade direction (forward/reverse) — typical of
+	*  ceiling fans. */
+	DeviceFeature["FanDirection"] = "fan-direction";
+	/** Fan exposes an oscillation toggle. */
+	DeviceFeature["FanOscillating"] = "fan-oscillating";
+	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
+	*  field on the UI lock-controls panel. */
+	DeviceFeature["LockPinRequired"] = "lock-pin-required";
+	/** Lock supports a latch-release ("open door") action distinct from
+	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
+	*  `supported_features`. Gates the Open Door button in the UI. */
+	DeviceFeature["LockOpen"] = "lock-open";
+	/** Media player exposes a seek-to-position surface. */
+	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
+	/** Media player exposes a volume-level setter. */
+	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
+	/** Media player exposes a mute toggle distinct from volume=0. */
+	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
+	/** Media player exposes a shuffle toggle. */
+	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
+	/** Media player exposes a repeat mode (off / all / one). */
+	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
+	/** Media player exposes a source / input selector. */
+	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
+	/** Media player exposes a play-arbitrary-media surface (URL / id). */
+	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
+	/** Media player exposes next-track. */
+	DeviceFeature["MediaPlayerNext"] = "media-player-next";
+	/** Media player exposes previous-track. */
+	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
+	/** Media player exposes stop distinct from pause. */
+	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
+	/** Alarm panel requires a PIN code on arm/disarm. */
+	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
+	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
+	*  addition to a textual location. */
+	DeviceFeature["PresenceGps"] = "presence-gps";
+	/** Notifier accepts an inline / URL image attachment. */
+	DeviceFeature["NotifierImage"] = "notifier-image";
+	/** Notifier accepts a priority hint (high/normal/low). */
+	DeviceFeature["NotifierPriority"] = "notifier-priority";
+	/** Notifier accepts a free-form `data` payload for platform-specific
+	*  fields. */
+	DeviceFeature["NotifierData"] = "notifier-data";
+	/** Notifier supports interactive action buttons / callbacks. */
+	DeviceFeature["NotifierActions"] = "notifier-actions";
+	/** Notifier supports per-call recipient targeting (multi-user). */
+	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
+	/** Script runner accepts a variables map on each run invocation. */
+	DeviceFeature["ScriptVariables"] = "script-variables";
+	/** Automation `trigger` accepts a skipCondition flag — fires the
+	*  automation's actions while bypassing its condition block. */
+	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
+	return DeviceFeature;
+}({});
 /**
-* Classify streams relative to each other.
-* Highest resolution → high, lowest → low, everything else → mid.
-* With 1 stream: high. With 2: high + low.
+* Semantic role a device plays within its parent. Populated by driver
+* addons when creating accessory devices (Reolink siren/floodlight/
+* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
+* admin UI to pick icons, labels, and widgets — a `Switch` with
+* `role: Floodlight` renders as a bulb with a brightness slider,
+* whereas a `Switch` with `role: Siren` renders as a klaxon.
+*
+* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
+* sqlite as a nullable TEXT column — old rows keep working unchanged.
 */
-function classifyStreams(streams) {
-	if (streams.length === 0) return [];
-	const sorted = streams.map((s, i) => ({
-		s,
-		i,
-		px: streamPixels(s.metadata ?? {})
-	})).toSorted((a, b) => b.px - a.px);
-	const result = Array.from({ length: streams.length });
-	for (let rank = 0; rank < sorted.length; rank++) {
-		const { s, i } = sorted[rank];
-		let quality;
-		if (rank === 0) quality = "high";
-		else if (rank === sorted.length - 1) quality = "low";
-		else quality = "mid";
-		result[i] = {
-			...s,
-			quality
-		};
-	}
-	return result;
+var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
+	DeviceRole["Siren"] = "siren";
+	DeviceRole["Floodlight"] = "floodlight";
+	DeviceRole["Spotlight"] = "spotlight";
+	DeviceRole["PirSensor"] = "pir-sensor";
+	DeviceRole["Chime"] = "chime";
+	DeviceRole["Autotrack"] = "autotrack";
+	DeviceRole["Nightvision"] = "nightvision";
+	DeviceRole["PrivacyMask"] = "privacy-mask";
+	DeviceRole["Doorbell"] = "doorbell";
+	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
+	*  real Switch device for UI rendering / export adapters. */
+	DeviceRole["BinaryHelper"] = "binary-helper";
+	/** Generic motion / occupancy / moving event source. Distinct from
+	*  the camera accessory PirSensor role: that one is a camera child;
+	*  this is a standalone HA / 3rd-party motion sensor. */
+	DeviceRole["MotionSensor"] = "motion-sensor";
+	DeviceRole["ContactSensor"] = "contact-sensor";
+	DeviceRole["LeakSensor"] = "leak-sensor";
+	DeviceRole["SmokeSensor"] = "smoke-sensor";
+	DeviceRole["COSensor"] = "co-sensor";
+	DeviceRole["GasSensor"] = "gas-sensor";
+	DeviceRole["TamperSensor"] = "tamper-sensor";
+	DeviceRole["VibrationSensor"] = "vibration-sensor";
+	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
+	DeviceRole["SoundSensor"] = "sound-sensor";
+	/** Fallback for `binary_sensor` without a known `device_class`. */
+	DeviceRole["BinarySensor"] = "binary-sensor";
+	DeviceRole["TemperatureSensor"] = "temperature-sensor";
+	DeviceRole["HumiditySensor"] = "humidity-sensor";
+	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
+	DeviceRole["PressureSensor"] = "pressure-sensor";
+	DeviceRole["PowerSensor"] = "power-sensor";
+	DeviceRole["EnergySensor"] = "energy-sensor";
+	DeviceRole["VoltageSensor"] = "voltage-sensor";
+	DeviceRole["CurrentSensor"] = "current-sensor";
+	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
+	/** Battery level (numeric % via `sensor` OR low-bool via
+	*  `binary_sensor` — the cap distinguishes via the value type). */
+	DeviceRole["BatterySensor"] = "battery-sensor";
+	/** Fallback for `sensor` numeric without a known `device_class`. */
+	DeviceRole["NumericSensor"] = "numeric-sensor";
+	/** String / enum state (HA `sensor` with `state_class: enum` or
+	*  `attributes.options`). */
+	DeviceRole["EnumSensor"] = "enum-sensor";
+	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
+	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
+	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
+	DeviceRole["DateTimeSensor"] = "datetime-sensor";
+	/** Last-resort fallback when nothing else matches. */
+	DeviceRole["GenericSensor"] = "generic-sensor";
+	DeviceRole["NumericControl"] = "numeric-control";
+	DeviceRole["SelectControl"] = "select-control";
+	DeviceRole["TextControl"] = "text-control";
+	DeviceRole["DateTimeControl"] = "datetime-control";
+	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
+	*  rich features (image, priority, channel routing). */
+	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
+	/** Chat / messaging service (HA `notify.telegram_*`,
+	*  `notify.discord_*`, etc.). */
+	DeviceRole["MessagingNotifier"] = "messaging-notifier";
+	/** Email-based delivery (HA `notify.smtp`, etc.). */
+	DeviceRole["EmailNotifier"] = "email-notifier";
+	/** Fallback when the notifier service name doesn't match a known
+	*  pattern. */
+	DeviceRole["GenericNotifier"] = "generic-notifier";
+	return DeviceRole;
+}({});
+/**
+* Generic types for capability definitions.
+*
+* A capability is defined with Zod schemas for methods, events, and settings.
+* TypeScript types are inferred via z.infer<> — zero duplication.
+*
+* Pattern:
+*   1. Define Zod schemas for data, methods, settings
+*   2. Export const capabilityDef = { ... } satisfies CapabilityDefinition
+*   3. Export type IProvider = InferProvider<typeof capabilityDef>
+*   4. Addon implements IProvider
+*   5. Registry auto-mounts tRPC router from definition.methods
+*/
+/**
+* Output schema shared by the contribution + live methods.
+*
+* Mirrors the `ConfigUISchemaWithValues` shape (sections[] + optional
+* tabs[]) without importing from `../interfaces/config-ui.js` — a
+* concrete-but-lenient Zod object keeps tRPC output inference happy
+* (using `z.unknown()` here collapses unrelated router branches to
+* `unknown` when the generator re-inlines the huge AppRouter type).
+*
+* `.passthrough()` on sections/fields accepts whatever FormBuilder
+* extensions the caller adds (showWhen, displayScale, …) without
+* rebuilding every time a new field kind is introduced.
+*/
+var ContributionSectionSchema = object({
+	id: string(),
+	title: string(),
+	description: string().optional(),
+	style: _enum(["card", "accordion"]).optional(),
+	defaultCollapsed: boolean().optional(),
+	columns: union([
+		literal(1),
+		literal(2),
+		literal(3),
+		literal(4)
+	]).optional(),
+	tab: string().optional(),
+	location: _enum(["settings", "top-tab"]).optional(),
+	order: number().optional(),
+	fields: array(any())
+});
+object({
+	tabs: array(object({
+		id: string(),
+		label: string(),
+		icon: string(),
+		order: number().optional()
+	})).optional(),
+	sections: array(ContributionSectionSchema)
+}).nullable();
+object({ deviceId: number() }), object({ deviceId: number() }), object({
+	deviceId: number(),
+	patch: record(string(), unknown())
+}), object({ success: literal(true) });
+object({ deviceId: number() }), unknown().nullable();
+/** Shorthand to define a method schema */
+function method(input, output, options) {
+	return {
+		input,
+		output,
+		kind: options?.kind ?? "query",
+		auth: options?.auth ?? "protected",
+		...options?.access !== void 0 ? { access: options.access } : {},
+		timeoutMs: options?.timeoutMs
+	};
 }
-var DecoderStatsSchema = object({
-	inputFps: number(),
-	outputFps: number(),
-	avgDecodeTimeMs: number(),
-	droppedFrames: number()
+/** Shorthand to define an event schema */
+function event(data) {
+	return { data };
+}
+var StaticDirOutputSchema = object({ staticDir: string() });
+var VersionOutputSchema = object({ version: string() });
+method(_void(), StaticDirOutputSchema), method(_void(), VersionOutputSchema);
+/**
+* device-ops — device-scoped cap that unifies the per-IDevice operations
+* previously routed through the `.device-ops` Moleculer bridge service.
+*
+* Each worker that hosts live `IDevice` instances auto-registers a native
+* provider for this cap (per device) backed by its local
+* `DeviceRegistry`. Hub-side callers reach it transparently through
+* `ctx.fetchDevice(id).deviceOps.*` — the DeviceProxy injects
+* `deviceId` + `nodeId` and dispatches through the standard cap-router,
+* so there's no parallel bridge path anymore.
+*
+* The surface is intentionally small — every method corresponds to a
+* single action on the live `IDevice` (or `ICameraDevice` for
+* `getStreamSources`). Richer orchestration (enable/disable with
+* integration plumbing, bulk updates) stays in the `device-manager` cap;
+* `device-ops` is the per-device primitive the device-manager routes to.
+*/
+var StreamSourceEntrySchema = object({
+	id: string(),
+	label: string(),
+	protocol: _enum([
+		"rtsp",
+		"rtmp",
+		"annexb",
+		"http-mjpeg",
+		"webrtc",
+		"custom"
+	]),
+	url: string().optional(),
+	resolution: object({
+		width: number(),
+		height: number()
+	}).optional(),
+	fps: number().optional(),
+	bitrate: number().optional(),
+	codec: string().optional(),
+	profileHint: CamProfileSchema.optional(),
+	sdp: string().optional()
 });
-var DecoderSessionConfigSchema = object({
-	codec: string(),
-	maxFps: number().default(0),
-	outputFormat: _enum([
-		"jpeg",
-		"rgb",
-		"bgr",
-		"yuv420",
-		"gray"
-	]).default("jpeg"),
-	scale: number().default(1),
-	width: number().optional(),
-	height: number().optional(),
-	/**
-	* Identifier of the camera this decoder session serves. Optional
-	* because the cap is generic (any caller could request decode), but
-	* stream-broker passes it so decoder logs include `deviceId` for
-	* per-camera filtering when diagnosing failures (e.g. node-av
-	* sendPacket errors on a single hung camera).
-	*/
-	deviceId: number().int().nonnegative().optional(),
-	/**
-	* Free-form tag for log scoping. Stream-broker uses
-	* `broker:<deviceId>/<profile>`. Decoder session logger surfaces it
-	* on every line so `grep tag=broker:5/high` filters one camera
-	* profile cleanly.
-	*/
-	tag: string().optional(),
-	/**
-	* Where the session delivers decoded frames (Phase 5 / D9):
-	*
-	* - `'callback'` (default) — the legacy pixel path: decoded frames are
-	*   buffered as `DecodedFrame`s and drained via `pullFrames`.
-	* - `'shm'` — the shared-memory frame plane: decoded frames are written
-	*   into an OS shared-memory ring and drained as zero-pixel
-	*   `FrameHandle`s via `pullHandles`. A session is one mode or the
-	*   other — `pullFrames` returns nothing for an `'shm'` session and
-	*   `pullHandles` returns nothing for a `'callback'` session.
-	*/
-	frameSink: _enum(["callback", "shm"]).default("callback")
+var ConfigEntrySchema$1 = object({
+	key: string(),
+	value: unknown()
 });
-var EncodeProfileSchema = object({
-	video: object({
-		codec: _enum([
-			"h264",
-			"h265",
-			"copy"
-		]),
-		profile: _enum([
-			"baseline",
-			"main",
-			"high"
-		]).optional(),
-		width: number().int().positive().optional(),
-		height: number().int().positive().optional(),
-		fps: number().positive().optional(),
-		bitrateKbps: number().int().positive().optional(),
-		gopFrames: number().int().positive().optional(),
-		bf: number().int().min(0).optional(),
-		preset: _enum([
-			"ultrafast",
-			"superfast",
-			"veryfast",
-			"faster",
-			"fast",
-			"medium"
-		]).optional(),
-		tune: _enum([
-			"zerolatency",
-			"film",
-			"animation"
-		]).optional()
-	}),
-	audio: union([literal("passthrough"), object({
-		codec: _enum([
-			"opus",
-			"aac",
-			"pcmu",
-			"pcma",
-			"copy"
-		]),
-		bitrateKbps: number().int().positive().optional(),
-		sampleRateHz: number().int().positive().optional(),
-		channels: union([literal(1), literal(2)]).optional()
-	})]),
-	/**
-	* ffmpeg input-side args, inserted between the fixed global flags
-	* (`-hide_banner -loglevel error`) and `-i pipe:0`. Free-text array
-	* — the widget surfaces a textarea + suggestion chips for the most-
-	* used demuxer/format options.
-	*/
-	inputArgs: array(string()).optional(),
+var RawStateResultSchema = object({
+	/** Originating provider id, e.g. 'homeassistant' | 'reolink' | 'hikvision'. */
+	source: string(),
+	/** Opaque, DISPLAY-SAFE upstream blob (no secrets/PII). */
+	data: record(string(), unknown())
+});
+method(object({ deviceId: number() }), array(StreamSourceEntrySchema)), method(object({ deviceId: number() }), array(ConfigEntrySchema$1)), method(object({
+	deviceId: number(),
+	values: record(string(), unknown())
+}), _void(), { kind: "mutation" }), method(object({
+	deviceId: number(),
+	action: string().min(1),
+	input: unknown()
+}), unknown(), { kind: "mutation" }), method(object({ deviceId: number() }), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), unknown().nullable()), method(object({ deviceId: number() }), RawStateResultSchema.nullable(), { auth: "protected" });
+//#endregion
+//#region ../types/dist/index.mjs
+/**
+* Deep wiring healthcheck — snapshot of active reachability probes across
+* every declared capability + widget of every installed plugin, on every
+* node. Produced by the backend `WiringHealthService` and surfaced via
+* `GET /health/wiring`, the tRPC `health.wiring` query, and the boot-gate.
+*
+* Unlike `/health` (process liveness), this reflects whether each cap/widget
+* is actually *reachable* over the real cap-dispatch path. See spec
+* `docs/superpowers/specs/2026-05-23-deep-healthcheck-design.md`.
+*/
+/** What kind of target a probe addressed. */
+var wiringProbeKindSchema = _enum([
+	"singleton",
+	"device",
+	"widget"
+]);
+/** Result of probing a single (cap|widget [, device]) target. */
+var wiringProbeResultSchema = object({
+	capName: string(),
+	kind: wiringProbeKindSchema,
+	deviceId: number().optional(),
+	reachable: boolean(),
+	latencyMs: number(),
+	error: string().optional()
+});
+/** Per-addon roll-up of cap + widget probe results. */
+var wiringAddonHealthSchema = object({
+	addonId: string(),
+	caps: array(wiringProbeResultSchema).readonly(),
+	widgets: array(wiringProbeResultSchema).readonly()
+});
+/** Per-node roll-up. */
+var wiringNodeHealthSchema = object({
+	nodeId: string(),
+	addons: array(wiringAddonHealthSchema).readonly()
+});
+object({
+	/** True only when every probed target is reachable. */
+	ok: boolean(),
+	/** True when at least one target is unreachable. */
+	degraded: boolean(),
+	checkedAt: string(),
+	nodes: array(wiringNodeHealthSchema).readonly(),
+	summary: object({
+		total: number(),
+		reachable: number(),
+		unreachable: number()
+	})
+});
+var MODEL_FORMATS = [
+	"onnx",
+	"coreml",
+	"openvino",
+	"tflite",
+	"pt"
+];
+/**
+* Numeric day-of-week: 0 = Sunday … 6 = Saturday (matches `Date.getDay`).
+* Named `RecordingWeekday` to avoid collision with the string-union
+* `Weekday` exported from `interfaces/timezones.ts`.
+*/
+var RecordingWeekdaySchema = number().int().min(0).max(6);
+var HHMM = /^([01]\d|2[0-3]):[0-5]\d$/;
+var RecordingScheduleSchema = discriminatedUnion("kind", [object({ kind: literal("always") }), object({
+	kind: literal("timeOfDay"),
+	start: string().regex(HHMM),
+	end: string().regex(HHMM),
+	/** Restrict to these weekdays; omit = every day. */
+	days: array(RecordingWeekdaySchema).optional()
+})]);
+var RecordingModeSchema = _enum([
+	"continuous",
+	"onMotion",
+	"onAudioThreshold"
+]);
+/**
+* First-class, authoritative per-camera storage mode — the netta choice the UI
+* reads directly (never inferred from `rules`):
+*  - `off`        — not recording.
+*  - `events`     — record only around triggers (motion / audio threshold),
+*                   with pre/post-buffer.
+*  - `continuous` — record 24/7 within the schedule.
+*
+* `mode` compiles one-way to the internal `rules[]` consumed by the policy
+* engine (see `compileRules`); `rules[]` is never authored directly anymore.
+*/
+var RecordingStorageModeSchema = _enum([
+	"off",
+	"events",
+	"continuous"
+]);
+/** Which detectors trigger an `events`-mode recording. */
+var RecordingTriggersSchema = object({
+	motion: boolean().optional(),
+	audioThresholdDbfs: number().optional()
+});
+/**
+* Mode of a single recording band — the recorder per-band vocabulary.
+*
+* Distinct from `RecordingStorageModeSchema` (which carries `off`): a band is
+* only ever `continuous` or `events`; "off" is expressed by the absence of a
+* covering band, not by a band value.
+*/
+var RecordingBandModeSchema = _enum(["continuous", "events"]);
+/**
+* Triggers for an `events`-mode band. Identical shape to
+* `RecordingTriggersSchema` — reuse that schema as the band trigger type so the
+* two never drift.
+*/
+var RecordingBandTriggersSchema = RecordingTriggersSchema;
+/**
+* A single mode-per-band window — the canonical recorder band shape, the
+* single source of truth re-used by `addon-pipeline/recorder`.
+*
+* `days` lists the weekdays the band covers (empty = every day, matching the
+* band engine's `applies` rule). `start`/`end` are `HH:MM`; an `end <= start`
+* span wraps past midnight (handled by the band engine).
+*/
+var RecordingBandSchema = object({
+	days: array(RecordingWeekdaySchema),
+	start: string().regex(HHMM),
+	end: string().regex(HHMM),
+	mode: RecordingBandModeSchema,
+	triggers: RecordingBandTriggersSchema.optional(),
+	preBufferSec: number().min(0).optional(),
+	postBufferSec: number().min(0).optional()
+});
+var RecordingRuleSchema = object({
+	schedule: RecordingScheduleSchema,
+	mode: RecordingModeSchema,
+	/** Seconds of footage to retain BEFORE a trigger (applied at keep/discard). */
+	preBufferSec: number().min(0).default(0),
+	/** Keep recording until this many seconds after the last trigger. */
+	postBufferSec: number().min(0).default(0),
+	/** Each new trigger restarts the post-buffer window. */
+	resetTimeoutOnNewEvent: boolean().default(true),
+	/** onAudioThreshold only — dBFS level that counts as a trigger. */
+	thresholdDbfs: number().optional()
+});
+/**
+* Per-device retention overrides. Every field is optional; an unset or `0`
+* value inherits the node-wide recorder default. Only footage-lifetime limits
+* live per-camera: `maxAgeDays` and `maxSizeGb`. The disk-occupancy threshold
+* (when the volume is too full to keep recording) is NOT a per-camera concern —
+* it belongs to the StorageLocation (`StorageLocation.config.minFreePercent`),
+* shared by every camera writing to that volume.
+*/
+var RecordingRetentionSchema = object({
+	maxAgeDays: number().min(0).optional(),
+	maxSizeGb: number().min(0).optional()
+});
+/**
+* The full per-camera recording intent — the wire shape of a RecordingTarget.
+*
+* `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
+* are its mode-specific parameters. `rules` is a DEPRECATED authoring input kept
+* only for transition + migration (`migrateRulesToMode`); the policy engine
+* consumes the compiled output of `compileRules(config)`, never `rules` directly.
+*/
+var RecordingConfigSchema = object({
+	enabled: boolean(),
+	/** Authoritative storage mode. Absent on legacy targets → derived once via
+	*  `migrateRulesToMode`, then persisted. */
+	mode: RecordingStorageModeSchema.optional(),
+	profiles: array(CamProfileSchema).optional(),
+	segmentSeconds: number().int().positive().optional(),
+	/** Shared recording time-bands for `events` & `continuous` — record only when
+	*  the wall-clock falls inside one of these windows. Omit or empty = always.
+	*  `continuous` compiles to one rule per band; `events` to band × trigger. */
+	schedules: array(RecordingScheduleSchema).optional(),
+	/** Legacy single-band predecessor of `schedules`. Read-compat only — it is
+	*  normalized into `schedules` on read and never written going forward. (Not
+	*  tagged `@deprecated`: the normalization paths must read it cast-free.) */
+	schedule: RecordingScheduleSchema.optional(),
+	/** `events`-mode only — which detectors trigger a recording. */
+	triggers: RecordingTriggersSchema.optional(),
+	/** `events`-mode only — seconds retained before / after a trigger. */
+	preBufferSec: number().min(0).optional(),
+	postBufferSec: number().min(0).optional(),
+	/** DEPRECATED authoring input; retained for migration/transition. */
+	rules: array(RecordingRuleSchema).optional(),
 	/**
-	* ffmpeg output-side args, inserted between the encode block and
-	* the final `-f <muxer> pipe:1`. Use for muxer options, bitstream
-	* filters, codec-specific overrides. Free-text array.
+	* AUTHORITATIVE mode-per-band recording model (recorder). When present it
+	* is the single source of truth; the legacy `mode`/`schedules`/`schedule`/
+	* `triggers`/`rules` fields above are kept for READ-COMPAT only and are
+	* derived into bands once via `migrateConfigToBands`.
 	*/
-	outputArgs: array(string()).optional()
+	bands: array(RecordingBandSchema).optional(),
+	retention: RecordingRetentionSchema.optional()
 });
-var YAMNET_TO_MACRO = {
-	mapping: {
-		Speech: "speech",
-		"Child speech, kid speaking": "speech",
-		Conversation: "speech",
-		"Narration, monologue": "speech",
-		Babbling: "speech",
-		Whispering: "speech",
-		"Speech synthesizer": "speech",
-		Humming: "speech",
-		Rapping: "speech",
-		Singing: "speech",
-		Choir: "speech",
-		"Child singing": "speech",
-		Shout: "scream",
-		Bellow: "scream",
-		Yell: "scream",
-		Screaming: "scream",
-		"Children shouting": "scream",
-		Whoop: "scream",
-		"Crying, sobbing": "crying",
-		"Baby cry, infant cry": "crying",
-		Whimper: "crying",
-		"Wail, moan": "crying",
-		Groan: "crying",
-		Laughter: "laughter",
-		"Baby laughter": "laughter",
-		Giggle: "laughter",
-		Snicker: "laughter",
-		"Belly laugh": "laughter",
-		"Chuckle, chortle": "laughter",
-		Music: "music",
-		"Musical instrument": "music",
-		Guitar: "music",
-		Piano: "music",
-		Drum: "music",
-		"Drum kit": "music",
-		"Violin, fiddle": "music",
-		Flute: "music",
-		Saxophone: "music",
-		Trumpet: "music",
-		Synthesizer: "music",
-		"Pop music": "music",
-		"Rock music": "music",
-		"Hip hop music": "music",
-		"Classical music": "music",
-		Jazz: "music",
-		"Electronic music": "music",
-		"Background music": "music",
-		Dog: "dog",
-		Bark: "dog",
-		Yip: "dog",
-		Howl: "dog",
-		"Bow-wow": "dog",
-		Growling: "dog",
-		"Whimper (dog)": "dog",
-		Cat: "cat",
-		Purr: "cat",
-		Meow: "cat",
-		Hiss: "cat",
-		Caterwaul: "cat",
-		Bird: "bird",
-		"Bird vocalization, bird call, bird song": "bird",
-		"Chirp, tweet": "bird",
-		Squawk: "bird",
-		Crow: "bird",
-		Owl: "bird",
-		"Pigeon, dove": "bird",
-		Animal: "animal",
-		"Domestic animals, pets": "animal",
-		"Livestock, farm animals, working animals": "animal",
-		Horse: "animal",
-		"Cattle, bovinae": "animal",
-		Pig: "animal",
-		Sheep: "animal",
-		Goat: "animal",
-		Frog: "animal",
-		Insect: "animal",
-		Cricket: "animal",
-		Alarm: "alarm",
-		"Alarm clock": "alarm",
-		"Smoke detector, smoke alarm": "alarm",
-		"Fire alarm": "alarm",
-		Buzzer: "alarm",
-		"Civil defense siren": "alarm",
-		"Car alarm": "alarm",
-		Siren: "siren",
-		"Police car (siren)": "siren",
-		"Ambulance (siren)": "siren",
-		"Fire engine, fire truck (siren)": "siren",
-		"Emergency vehicle": "siren",
-		Foghorn: "siren",
-		Doorbell: "doorbell",
-		"Ding-dong": "doorbell",
-		Knock: "doorbell",
-		Tap: "doorbell",
-		Glass: "glass_breaking",
-		Shatter: "glass_breaking",
-		"Chink, clink": "glass_breaking",
-		"Gunshot, gunfire": "gunshot",
-		"Machine gun": "gunshot",
-		Explosion: "gunshot",
-		Fireworks: "gunshot",
-		Firecracker: "gunshot",
-		"Artillery fire": "gunshot",
-		"Cap gun": "gunshot",
-		Boom: "gunshot",
-		Vehicle: "vehicle",
-		Car: "vehicle",
-		Truck: "vehicle",
-		Bus: "vehicle",
-		Motorcycle: "vehicle",
-		"Car passing by": "vehicle",
-		"Vehicle horn, car horn, honking": "vehicle",
-		"Traffic noise, roadway noise": "vehicle",
-		Train: "vehicle",
-		Aircraft: "vehicle",
-		Helicopter: "vehicle",
-		Bicycle: "vehicle",
-		Skateboard: "vehicle",
-		Fire: "fire",
-		Crackle: "fire",
-		Water: "water",
-		Rain: "water",
-		Raindrop: "water",
-		"Rain on surface": "water",
-		Stream: "water",
-		Waterfall: "water",
-		Ocean: "water",
-		"Waves, surf": "water",
-		"Splash, splatter": "water",
-		Wind: "wind",
-		Thunderstorm: "wind",
-		Thunder: "wind",
-		"Wind noise (microphone)": "wind",
-		"Rustling leaves": "wind",
-		Door: "door",
-		"Sliding door": "door",
-		Slam: "door",
-		"Cupboard open or close": "door",
-		"Walk, footsteps": "footsteps",
-		Run: "footsteps",
-		Shuffle: "footsteps",
-		Crowd: "crowd",
-		Chatter: "crowd",
-		Cheering: "crowd",
-		Applause: "crowd",
-		"Children playing": "crowd",
-		"Hubbub, speech noise, speech babble": "crowd",
-		Telephone: "telephone",
-		"Telephone bell ringing": "telephone",
-		Ringtone: "telephone",
-		"Telephone dialing, DTMF": "telephone",
-		"Busy signal": "telephone",
-		Engine: "engine",
-		"Engine starting": "engine",
-		Idling: "engine",
-		"Accelerating, revving, vroom": "engine",
-		"Light engine (high frequency)": "engine",
-		"Medium engine (mid frequency)": "engine",
-		"Heavy engine (low frequency)": "engine",
-		"Lawn mower": "engine",
-		Chainsaw: "engine",
-		Hammer: "tools",
-		Jackhammer: "tools",
-		Sawing: "tools",
-		"Power tool": "tools",
-		Drill: "tools",
-		Sanding: "tools",
-		Silence: "silence"
-	},
-	preserveOriginal: false
-};
-var APPLE_SA_TO_MACRO = {
-	mapping: {
-		speech: "speech",
-		child_speech: "speech",
-		conversation: "speech",
-		whispering: "speech",
-		singing: "speech",
-		humming: "speech",
-		shout: "scream",
-		yell: "scream",
-		screaming: "scream",
-		crying: "crying",
-		baby_crying: "crying",
-		sobbing: "crying",
-		laughter: "laughter",
-		baby_laughter: "laughter",
-		giggling: "laughter",
-		music: "music",
-		guitar: "music",
-		piano: "music",
-		drums: "music",
-		dog_bark: "dog",
-		dog_bow_wow: "dog",
-		dog_growling: "dog",
-		dog_howl: "dog",
-		cat_meow: "cat",
-		cat_purr: "cat",
-		cat_hiss: "cat",
-		bird: "bird",
-		bird_chirp: "bird",
-		bird_squawk: "bird",
-		animal: "animal",
-		horse: "animal",
-		cow_moo: "animal",
-		insect: "animal",
-		alarm: "alarm",
-		smoke_alarm: "alarm",
-		fire_alarm: "alarm",
-		car_alarm: "alarm",
-		siren: "siren",
-		police_siren: "siren",
-		ambulance_siren: "siren",
-		doorbell: "doorbell",
-		door_knock: "doorbell",
-		knocking: "doorbell",
-		glass_breaking: "glass_breaking",
-		glass_shatter: "glass_breaking",
-		gunshot: "gunshot",
-		explosion: "gunshot",
-		fireworks: "gunshot",
-		car: "vehicle",
-		truck: "vehicle",
-		motorcycle: "vehicle",
-		car_horn: "vehicle",
-		vehicle_horn: "vehicle",
-		traffic: "vehicle",
-		fire: "fire",
-		fire_crackle: "fire",
-		water: "water",
-		rain: "water",
-		ocean: "water",
-		splash: "water",
-		wind: "wind",
-		thunder: "wind",
-		thunderstorm: "wind",
-		door: "door",
-		door_slam: "door",
-		sliding_door: "door",
-		footsteps: "footsteps",
-		walking: "footsteps",
-		running: "footsteps",
-		crowd: "crowd",
-		chatter: "crowd",
-		cheering: "crowd",
-		applause: "crowd",
-		telephone_ring: "telephone",
-		ringtone: "telephone",
-		engine: "engine",
-		engine_starting: "engine",
-		lawn_mower: "engine",
-		chainsaw: "engine",
-		hammer: "tools",
-		jackhammer: "tools",
-		drill: "tools",
-		power_tool: "tools",
-		silence: "silence"
-	},
-	preserveOriginal: false
-};
-var _macroLookup = /* @__PURE__ */ new Map();
-for (const [k, v] of Object.entries(YAMNET_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
-for (const [k, v] of Object.entries(APPLE_SA_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
-var DeviceType = /* @__PURE__ */ function(DeviceType) {
-	DeviceType["Camera"] = "camera";
-	DeviceType["Hub"] = "hub";
-	DeviceType["Light"] = "light";
-	DeviceType["Siren"] = "siren";
-	DeviceType["Switch"] = "switch";
-	DeviceType["Sensor"] = "sensor";
-	DeviceType["Thermostat"] = "thermostat";
-	DeviceType["Button"] = "button";
-	/** Generic stateless event emitter — carries a device's EXACT declared
-	*  event vocabulary verbatim (no normalization). Installed with the
-	*  `event-emitter` cap. Sources: HA `event.*` entities (structured) and
-	*  HA bus events (e.g. `zha_event`, generic). */
-	DeviceType["EventEmitter"] = "event-emitter";
-	/** Firmware/software update entity — current vs available version,
-	*  updatable flag, update state, and an install action. Installed with
-	*  the `update` cap. Sources: Homematic firmware-update channels (and
-	*  reusable by other providers, e.g. HA `update.*` entities). */
-	DeviceType["Update"] = "update";
-	DeviceType["Generic"] = "generic";
-	/** Generic notification delivery target (HA `notify.<service>`, future
-	*  Telegram / Discord / ntfy / SMTP, …). One device per delivery
-	*  endpoint; the `notifier` cap defines the send surface. */
-	DeviceType["Notifier"] = "notifier";
-	/** Pre-recorded action sequence with optional parameters
-	*  (HA `script.*`). Runnable via `script-runner` cap. */
-	DeviceType["Script"] = "script";
-	/** Automation rule (HA `automation.*`) — enable/disable + manual
-	*  trigger surface exposed via `automation-control` cap. */
-	DeviceType["Automation"] = "automation";
-	/** Door / smart lock device (HA `lock.*`). `lock-control` cap. */
-	DeviceType["Lock"] = "lock";
-	/** Window covering, blinds, garage door, valve, etc. (HA `cover.*`,
-	*  `valve.*`). `cover` cap with sub-roles for variant. */
-	DeviceType["Cover"] = "cover";
-	/** Pipe / water / gas valve with open/close/stop and optional
-	*  position (HA `valve.*`). `valve` cap — a cover-sibling actuator
-	*  modelled on the same open/closed lifecycle. */
-	DeviceType["Valve"] = "valve";
-	/** Humidifier / dehumidifier with on/off + target humidity + mode
-	*  (HA `humidifier.*`). `humidifier` cap — a climate-family actuator
-	*  modelled on the same target / mode lifecycle. */
-	DeviceType["Humidifier"] = "humidifier";
-	/** Water heater / boiler with target temperature + operation mode +
-	*  away mode (HA `water_heater.*`). `water-heater` cap — a
-	*  climate-family actuator. */
-	DeviceType["WaterHeater"] = "water-heater";
-	/** Ceiling / standing / exhaust fan (HA `fan.*`). `fan-control` cap. */
-	DeviceType["Fan"] = "fan";
-	/** Audio / video playback endpoint (HA `media_player.*`). Disjoint from
-	*  the camera surface — those use `Camera`. `media-player` cap. */
-	DeviceType["MediaPlayer"] = "media-player";
-	/** Security panel / alarm system (HA `alarm_control_panel.*`).
-	*  `alarm-panel` cap. */
-	DeviceType["AlarmPanel"] = "alarm-panel";
-	/** Generic user-settable input (HA `number` / `input_number` / `select`
-	*  / `input_select` / `text` / `input_text` / `input_datetime`).
-	*  Sub-type via `DeviceRole`: NumericControl / SelectControl /
-	*  TextControl / DateTimeControl. */
-	DeviceType["Control"] = "control";
-	/** Person / device-tracker presence (HA `person.*`, `device_tracker.*`).
-	*  `presence` cap. */
-	DeviceType["Presence"] = "presence";
-	/** Weather provider (HA `weather.*`). Tier-3, low MVP priority.
-	*  `weather` cap. */
-	DeviceType["Weather"] = "weather";
-	/** Robot vacuum (HA `vacuum.*`). Tier-3. `vacuum-control` cap. */
-	DeviceType["Vacuum"] = "vacuum";
-	/** Robotic lawn mower (HA `lawn_mower.*`). Tier-3.
-	*  `lawn-mower-control` cap. */
-	DeviceType["LawnMower"] = "lawn-mower";
-	/** Physical HA device group — parent container for entity-children
-	*  adopted from a single HA device entry. Not renderable as a
-	*  standalone device; exists only to anchor child entities. */
-	DeviceType["Container"] = "container";
-	/** Single still-image entity (HA `image.*`). Read-only display of an
-	*  `entity_picture` signed URL the browser loads directly. `image` cap. */
-	DeviceType["Image"] = "image";
-	return DeviceType;
-}({});
-var DeviceFeature = /* @__PURE__ */ function(DeviceFeature) {
-	DeviceFeature["BatteryOperated"] = "battery-operated";
-	DeviceFeature["Rebootable"] = "rebootable";
+/**
+* `StorageLocationType` — an addon-declared id that identifies the *kind* of
+* storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
+* so the persisted record schema and the consumer-facing cap can both consume it
+* without forming a circular import. The `storage` cap re-exports it
+* verbatim for back-compat.
+*
+* This Zod schema is the **authoritative source** for `StorageLocationType`.
+* The TS alias in `./storage.ts` re-exports `z.infer<typeof
+* StorageLocationTypeSchema>` so the wire surface (cap) and the legacy
+* `IStorageProvider` interface stay in lockstep.
+*
+* The type is now an **open string** (not a closed enum) — addons declare
+* their own location kinds via `StorageLocationDeclaration.id`. The regex
+* enforces a safe id format: lowercase-start, alphanumeric + hyphens.
+*/
+var StorageLocationTypeSchema = string().regex(/^[a-z][a-zA-Z0-9-]*$/);
+/**
+* Persisted record for a storage location instance. Operators can register
+* multiple instances for multi-cardinality types (e.g. two `backups`
+* locations with different `providerId`s). Cardinality is now declared per
+* location via `StorageLocationDeclaration.cardinality` — the static
+* `STORAGE_LOCATION_CARDINALITY` map has been removed.
+*
+* `id` is a stable namespaced string of the form `<type>:<slug>`.
+* The default location for a type uses `id === <type>:default` by
+* convention (the bare type ref like `'backups'` resolves to it).
+*
+* `isSystem: true` marks a location as orchestrator-seeded and
+* undeletable. The bootstrap-installed defaults (one per type) carry
+* this flag; operator-added locations don't. Editing the config of
+* a system location is allowed (path migration, provider swap) but
+* deleting it is rejected at the cap level.
+*/
+var StorageLocationSchema = object({
+	id: string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
+	type: string(),
+	displayName: string().min(1),
+	providerId: string().min(1),
+	config: record(string(), unknown()),
+	/**
+	* Cluster node this location physically lives on. REQUIRED for node-local
+	* providers (filesystem — the path exists on one node's disk), null/absent
+	* for node-agnostic providers (S3/SFTP/WebDAV, reachable from any node).
+	* `'hub'` is the hub node. Validated against the provider's `nodeLocal`
+	* flag at upsert time, not here (the schema is provider-agnostic).
+	*/
+	nodeId: string().optional(),
+	isDefault: boolean().default(false),
+	isSystem: boolean().default(false),
+	createdAt: number(),
+	updatedAt: number()
+});
+/**
+* Reference accepted by consumer-facing `api.storage.*` calls.
+* Either:
+*  - a `StorageLocationType` (e.g. `'backups'`) → orchestrator resolves to the default of that type
+*  - a fully-qualified id (e.g. `'backups:nas-01'`) → addresses a specific instance
+*
+* The orchestrator's `resolveRef(ref)` handles both cases.
+*/
+var StorageLocationRefSchema = union([StorageLocationTypeSchema, string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/)]);
+/**
+* `StorageLocationDeclaration` — a single storage-location entry declared by
+* an addon in its `package.json` under `camstack.storageLocations`.
+*
+* Design intent:
+* - **Addon declares its needs** — each addon describes the logical storage
+*   slots it requires (e.g. `recordings`, `recordingsLow`) without caring
+*   about the physical path.
+* - **Kernel aggregates** — at boot the kernel collects declarations from all
+*   installed addons, deduplicates by `id`, and exposes the union via the
+*   storage-locations settings surface.
+* - **Orchestrator seeds** — for every declared `id` the orchestrator ensures
+*   at least one instance named `<id>:default` is present, using
+*   `defaultsTo` to inherit the resolved root from another location when the
+*   declaration is a derivative slot (e.g. `recordingsLow` defaults to
+*   `recordings`).
+* - **ids are global** — `id` values are shared across the entire deployment;
+*   two addons declaring the same `id` must agree on `cardinality` (validated
+*   at kernel aggregation time, not here).
+*/
+var StorageLocationDeclarationSchema = object({
+	/**
+	* Global location identifier, e.g. `recordings` or `recordingsLow`.
+	* Must start with a lowercase letter and may contain letters, digits, and
+	* hyphens.
+	*/
+	id: string().regex(/^[a-z][a-zA-Z0-9-]*$/, { message: "id must start with a lowercase letter and contain only letters, digits, or hyphens" }),
+	/** Human-readable name shown in the admin UI. */
+	displayName: string().min(1, { message: "displayName must not be empty" }),
+	/** Optional longer explanation of what data this location stores. */
+	description: string().optional(),
+	/**
+	* `single` — exactly one instance of this location is allowed system-wide
+	* (e.g. `logs`, `models`). The operator can edit it but not add more.
+	* `multi`  — the operator may register several instances (e.g. a second
+	* `recordings` on a NAS for disk tiering); one is the default at any time.
+	*/
+	cardinality: _enum(["single", "multi"]),
+	/**
+	* When set, the default instance for this location inherits its resolved
+	* root from the named location's default instance. Useful for derivative
+	* slots (e.g. `recordingsLow` → `recordings`) so operators only need to
+	* configure the primary location.
+	*/
+	defaultsTo: string().optional()
+});
+/**
+* Compute pixel count for sorting. Returns w*h, or 0 if unknown.
+*/
+function streamPixels(meta) {
+	return (meta.width ?? 0) * (meta.height ?? 0);
+}
+/**
+* Classify streams relative to each other.
+* Highest resolution → high, lowest → low, everything else → mid.
+* With 1 stream: high. With 2: high + low.
+*/
+function classifyStreams(streams) {
+	if (streams.length === 0) return [];
+	const sorted = streams.map((s, i) => ({
+		s,
+		i,
+		px: streamPixels(s.metadata ?? {})
+	})).toSorted((a, b) => b.px - a.px);
+	const result = Array.from({ length: streams.length });
+	for (let rank = 0; rank < sorted.length; rank++) {
+		const { s, i } = sorted[rank];
+		let quality;
+		if (rank === 0) quality = "high";
+		else if (rank === sorted.length - 1) quality = "low";
+		else quality = "mid";
+		result[i] = {
+			...s,
+			quality
+		};
+	}
+	return result;
+}
+var DecoderStatsSchema = object({
+	inputFps: number(),
+	outputFps: number(),
+	avgDecodeTimeMs: number(),
+	droppedFrames: number()
+});
+var DecoderSessionConfigSchema = object({
+	codec: string(),
+	maxFps: number().default(0),
+	outputFormat: _enum([
+		"jpeg",
+		"rgb",
+		"bgr",
+		"yuv420",
+		"gray"
+	]).default("jpeg"),
+	scale: number().default(1),
+	width: number().optional(),
+	height: number().optional(),
 	/**
-	* Device supports an on-demand re-sync of its derived spec with its
-	* upstream source — drives the generic Re-sync button. The owning
-	* provider implements the action via the `device-adoption.resync` cap.
+	* Identifier of the camera this decoder session serves. Optional
+	* because the cap is generic (any caller could request decode), but
+	* stream-broker passes it so decoder logs include `deviceId` for
+	* per-camera filtering when diagnosing failures (e.g. node-av
+	* sendPacket errors on a single hung camera).
 	*/
-	DeviceFeature["Resyncable"] = "resyncable";
-	DeviceFeature["NativeSnapshot"] = "native-snapshot";
-	DeviceFeature["DoorbellButton"] = "doorbell-button";
-	DeviceFeature["TwoWayAudio"] = "two-way-audio";
-	DeviceFeature["PanTiltZoom"] = "pan-tilt-zoom";
+	deviceId: number().int().nonnegative().optional(),
 	/**
-	* Camera supports the on-firmware autotrack subsystem (subject-
-	* following). Distinct from `PanTiltZoom` because not every PTZ
-	* camera ships autotrack — the admin UI uses this flag to gate
-	* the autotrack toggle / settings card without re-deriving from
-	* the cap registry. Mirrors `ptz-autotrack` cap registration:
-	* driver sets this feature when probe confirms the firmware
-	* surface, and registers the cap in the same code path.
+	* Free-form tag for log scoping. Stream-broker uses
+	* `broker:<deviceId>/<profile>`. Decoder session logger surfaces it
+	* on every line so `grep tag=broker:5/high` filters one camera
+	* profile cleanly.
 	*/
-	DeviceFeature["PtzAutotrack"] = "ptz-autotrack";
+	tag: string().optional(),
 	/**
-	* Accessory exposes a "trigger on motion" toggle — the parent camera's
-	* motion detection automatically activates this device. Mirrors
-	* `motion-trigger` cap registration: drivers set this feature in the
-	* same code path that calls `ctx.registerNativeCap(motionTriggerCapability, ...)`.
+	* Where the session delivers decoded frames (Phase 5 / D9):
 	*
-	* Used by admin UI (gate the in-hero `MotionTriggerToggle` against a
-	* fast scalar without binding fetch), notifier rules, and `listAll`
-	* filters that want "all devices with on-motion behaviour".
+	* - `'callback'` (default) — the legacy pixel path: decoded frames are
+	*   buffered as `DecodedFrame`s and drained via `pullFrames`.
+	* - `'shm'` — the shared-memory frame plane: decoded frames are written
+	*   into an OS shared-memory ring and drained as zero-pixel
+	*   `FrameHandle`s via `pullHandles`. A session is one mode or the
+	*   other — `pullFrames` returns nothing for an `'shm'` session and
+	*   `pullHandles` returns nothing for a `'callback'` session.
 	*/
-	DeviceFeature["MotionTrigger"] = "motion-trigger";
-	/** Light supports rgb-triplet color via `color` cap. */
-	DeviceFeature["LightColorRgb"] = "light-color-rgb";
-	/** Light supports HSV color via `color` cap. */
-	DeviceFeature["LightColorHsv"] = "light-color-hsv";
-	/** Light supports color-temperature (mired) via `color` cap. */
-	DeviceFeature["LightColorMired"] = "light-color-mired";
-	/** Thermostat supports a `heat_cool` dual setpoint (targetLow +
-	*  targetHigh). Gates the range slider UI. */
-	DeviceFeature["ClimateDualSetpoint"] = "climate-dual-setpoint";
-	/** Thermostat exposes target humidity and/or current humidity
-	*  readings. Gates the humidity controls. */
-	DeviceFeature["ClimateHumidity"] = "climate-humidity";
-	/** Thermostat exposes a fan-mode selector. */
-	DeviceFeature["ClimateFanMode"] = "climate-fan-mode";
-	/** Thermostat exposes preset modes (eco / away / sleep / vendor). */
-	DeviceFeature["ClimatePreset"] = "climate-preset";
-	/** Cover exposes intermediate position control (0..100). Gates the
-	*  position slider UI. */
-	DeviceFeature["CoverPositionable"] = "cover-positionable";
-	/** Cover exposes slat-tilt control. Gates the tilt slider UI. */
-	DeviceFeature["CoverTilt"] = "cover-tilt";
-	/** Valve exposes intermediate position control (0..100). Gates the
-	*  position slider / drag surface UI. */
-	DeviceFeature["ValvePositionable"] = "valve-positionable";
-	/** Fan exposes a speed-percentage setter. Gates the speed slider UI. */
-	DeviceFeature["FanSpeed"] = "fan-speed";
-	/** Fan exposes a preset mode selector. */
-	DeviceFeature["FanPreset"] = "fan-preset";
-	/** Fan exposes blade direction (forward/reverse) — typical of
-	*  ceiling fans. */
-	DeviceFeature["FanDirection"] = "fan-direction";
-	/** Fan exposes an oscillation toggle. */
-	DeviceFeature["FanOscillating"] = "fan-oscillating";
-	/** Lock requires a PIN code on lock/unlock. Gates the code-entry
-	*  field on the UI lock-controls panel. */
-	DeviceFeature["LockPinRequired"] = "lock-pin-required";
-	/** Lock supports a latch-release ("open door") action distinct from
-	*  unlock. Mirrors HA `LockEntityFeature.OPEN` (bit 1) in
-	*  `supported_features`. Gates the Open Door button in the UI. */
-	DeviceFeature["LockOpen"] = "lock-open";
-	/** Media player exposes a seek-to-position surface. */
-	DeviceFeature["MediaPlayerSeek"] = "media-player-seek";
-	/** Media player exposes a volume-level setter. */
-	DeviceFeature["MediaPlayerVolume"] = "media-player-volume";
-	/** Media player exposes a mute toggle distinct from volume=0. */
-	DeviceFeature["MediaPlayerMute"] = "media-player-mute";
-	/** Media player exposes a shuffle toggle. */
-	DeviceFeature["MediaPlayerShuffle"] = "media-player-shuffle";
-	/** Media player exposes a repeat mode (off / all / one). */
-	DeviceFeature["MediaPlayerRepeat"] = "media-player-repeat";
-	/** Media player exposes a source / input selector. */
-	DeviceFeature["MediaPlayerSelectSource"] = "media-player-select-source";
-	/** Media player exposes a play-arbitrary-media surface (URL / id). */
-	DeviceFeature["MediaPlayerPlayMedia"] = "media-player-play-media";
-	/** Media player exposes next-track. */
-	DeviceFeature["MediaPlayerNext"] = "media-player-next";
-	/** Media player exposes previous-track. */
-	DeviceFeature["MediaPlayerPrevious"] = "media-player-previous";
-	/** Media player exposes stop distinct from pause. */
-	DeviceFeature["MediaPlayerStop"] = "media-player-stop";
-	/** Alarm panel requires a PIN code on arm/disarm. */
-	DeviceFeature["AlarmPinRequired"] = "alarm-pin-required";
-	/** Presence device carries GPS coordinates (lat/lng/accuracy) in
-	*  addition to a textual location. */
-	DeviceFeature["PresenceGps"] = "presence-gps";
-	/** Notifier accepts an inline / URL image attachment. */
-	DeviceFeature["NotifierImage"] = "notifier-image";
-	/** Notifier accepts a priority hint (high/normal/low). */
-	DeviceFeature["NotifierPriority"] = "notifier-priority";
-	/** Notifier accepts a free-form `data` payload for platform-specific
-	*  fields. */
-	DeviceFeature["NotifierData"] = "notifier-data";
-	/** Notifier supports interactive action buttons / callbacks. */
-	DeviceFeature["NotifierActions"] = "notifier-actions";
-	/** Notifier supports per-call recipient targeting (multi-user). */
-	DeviceFeature["NotifierRecipients"] = "notifier-recipients";
-	/** Script runner accepts a variables map on each run invocation. */
-	DeviceFeature["ScriptVariables"] = "script-variables";
-	/** Automation `trigger` accepts a skipCondition flag — fires the
-	*  automation's actions while bypassing its condition block. */
-	DeviceFeature["AutomationSkipCondition"] = "automation-skip-condition";
-	return DeviceFeature;
-}({});
-/**
-* Semantic role a device plays within its parent. Populated by driver
-* addons when creating accessory devices (Reolink siren/floodlight/
-* PIR/chime/autotrack/doorbell, ONVIF relay outputs, …). Used by the
-* admin UI to pick icons, labels, and widgets — a `Switch` with
-* `role: Floodlight` renders as a bulb with a brightness slider,
-* whereas a `Switch` with `role: Siren` renders as a klaxon.
-*
-* Undefined for top-level devices (cameras, NVRs, hubs). Persisted in
-* sqlite as a nullable TEXT column — old rows keep working unchanged.
-*/
-var DeviceRole = /* @__PURE__ */ function(DeviceRole) {
-	DeviceRole["Siren"] = "siren";
-	DeviceRole["Floodlight"] = "floodlight";
-	DeviceRole["Spotlight"] = "spotlight";
-	DeviceRole["PirSensor"] = "pir-sensor";
-	DeviceRole["Chime"] = "chime";
-	DeviceRole["Autotrack"] = "autotrack";
-	DeviceRole["Nightvision"] = "nightvision";
-	DeviceRole["PrivacyMask"] = "privacy-mask";
-	DeviceRole["Doorbell"] = "doorbell";
-	/** Virtual HA toggle (input_boolean.*) — distinguishable from a
-	*  real Switch device for UI rendering / export adapters. */
-	DeviceRole["BinaryHelper"] = "binary-helper";
-	/** Generic motion / occupancy / moving event source. Distinct from
-	*  the camera accessory PirSensor role: that one is a camera child;
-	*  this is a standalone HA / 3rd-party motion sensor. */
-	DeviceRole["MotionSensor"] = "motion-sensor";
-	DeviceRole["ContactSensor"] = "contact-sensor";
-	DeviceRole["LeakSensor"] = "leak-sensor";
-	DeviceRole["SmokeSensor"] = "smoke-sensor";
-	DeviceRole["COSensor"] = "co-sensor";
-	DeviceRole["GasSensor"] = "gas-sensor";
-	DeviceRole["TamperSensor"] = "tamper-sensor";
-	DeviceRole["VibrationSensor"] = "vibration-sensor";
-	DeviceRole["ConnectivitySensor"] = "connectivity-sensor";
-	DeviceRole["SoundSensor"] = "sound-sensor";
-	/** Fallback for `binary_sensor` without a known `device_class`. */
-	DeviceRole["BinarySensor"] = "binary-sensor";
-	DeviceRole["TemperatureSensor"] = "temperature-sensor";
-	DeviceRole["HumiditySensor"] = "humidity-sensor";
-	DeviceRole["AmbientLightSensor"] = "ambient-light-sensor";
-	DeviceRole["PressureSensor"] = "pressure-sensor";
-	DeviceRole["PowerSensor"] = "power-sensor";
-	DeviceRole["EnergySensor"] = "energy-sensor";
-	DeviceRole["VoltageSensor"] = "voltage-sensor";
-	DeviceRole["CurrentSensor"] = "current-sensor";
-	DeviceRole["AirQualitySensor"] = "air-quality-sensor";
-	/** Battery level (numeric % via `sensor` OR low-bool via
-	*  `binary_sensor` — the cap distinguishes via the value type). */
-	DeviceRole["BatterySensor"] = "battery-sensor";
-	/** Fallback for `sensor` numeric without a known `device_class`. */
-	DeviceRole["NumericSensor"] = "numeric-sensor";
-	/** String / enum state (HA `sensor` with `state_class: enum` or
-	*  `attributes.options`). */
-	DeviceRole["EnumSensor"] = "enum-sensor";
-	/** Date / timestamp state (HA `sensor` with `device_class: timestamp`
-	*  or `date`). The slice carries the raw ISO string verbatim (hosted on
-	*  the `enum-sensor` cap); the UI renders it locale-formatted. */
-	DeviceRole["DateTimeSensor"] = "datetime-sensor";
-	/** Last-resort fallback when nothing else matches. */
-	DeviceRole["GenericSensor"] = "generic-sensor";
-	DeviceRole["NumericControl"] = "numeric-control";
-	DeviceRole["SelectControl"] = "select-control";
-	DeviceRole["TextControl"] = "text-control";
-	DeviceRole["DateTimeControl"] = "datetime-control";
-	/** Mobile push notifier (HA `notify.mobile_app_*`) — supports
-	*  rich features (image, priority, channel routing). */
-	DeviceRole["MobilePushNotifier"] = "mobile-push-notifier";
-	/** Chat / messaging service (HA `notify.telegram_*`,
-	*  `notify.discord_*`, etc.). */
-	DeviceRole["MessagingNotifier"] = "messaging-notifier";
-	/** Email-based delivery (HA `notify.smtp`, etc.). */
-	DeviceRole["EmailNotifier"] = "email-notifier";
-	/** Fallback when the notifier service name doesn't match a known
-	*  pattern. */
-	DeviceRole["GenericNotifier"] = "generic-notifier";
-	return DeviceRole;
-}({});
+	frameSink: _enum(["callback", "shm"]).default("callback")
+});
+var EncodeProfileSchema = object({
+	video: object({
+		codec: _enum([
+			"h264",
+			"h265",
+			"copy"
+		]),
+		profile: _enum([
+			"baseline",
+			"main",
+			"high"
+		]).optional(),
+		width: number().int().positive().optional(),
+		height: number().int().positive().optional(),
+		fps: number().positive().optional(),
+		bitrateKbps: number().int().positive().optional(),
+		gopFrames: number().int().positive().optional(),
+		bf: number().int().min(0).optional(),
+		preset: _enum([
+			"ultrafast",
+			"superfast",
+			"veryfast",
+			"faster",
+			"fast",
+			"medium"
+		]).optional(),
+		tune: _enum([
+			"zerolatency",
+			"film",
+			"animation"
+		]).optional()
+	}),
+	audio: union([literal("passthrough"), object({
+		codec: _enum([
+			"opus",
+			"aac",
+			"pcmu",
+			"pcma",
+			"copy"
+		]),
+		bitrateKbps: number().int().positive().optional(),
+		sampleRateHz: number().int().positive().optional(),
+		channels: union([literal(1), literal(2)]).optional()
+	})]),
+	/**
+	* ffmpeg input-side args, inserted between the fixed global flags
+	* (`-hide_banner -loglevel error`) and `-i pipe:0`. Free-text array
+	* — the widget surfaces a textarea + suggestion chips for the most-
+	* used demuxer/format options.
+	*/
+	inputArgs: array(string()).optional(),
+	/**
+	* ffmpeg output-side args, inserted between the encode block and
+	* the final `-f <muxer> pipe:1`. Use for muxer options, bitstream
+	* filters, codec-specific overrides. Free-text array.
+	*/
+	outputArgs: array(string()).optional()
+});
+var YAMNET_TO_MACRO = {
+	mapping: {
+		Speech: "speech",
+		"Child speech, kid speaking": "speech",
+		Conversation: "speech",
+		"Narration, monologue": "speech",
+		Babbling: "speech",
+		Whispering: "speech",
+		"Speech synthesizer": "speech",
+		Humming: "speech",
+		Rapping: "speech",
+		Singing: "speech",
+		Choir: "speech",
+		"Child singing": "speech",
+		Shout: "scream",
+		Bellow: "scream",
+		Yell: "scream",
+		Screaming: "scream",
+		"Children shouting": "scream",
+		Whoop: "scream",
+		"Crying, sobbing": "crying",
+		"Baby cry, infant cry": "crying",
+		Whimper: "crying",
+		"Wail, moan": "crying",
+		Groan: "crying",
+		Laughter: "laughter",
+		"Baby laughter": "laughter",
+		Giggle: "laughter",
+		Snicker: "laughter",
+		"Belly laugh": "laughter",
+		"Chuckle, chortle": "laughter",
+		Music: "music",
+		"Musical instrument": "music",
+		Guitar: "music",
+		Piano: "music",
+		Drum: "music",
+		"Drum kit": "music",
+		"Violin, fiddle": "music",
+		Flute: "music",
+		Saxophone: "music",
+		Trumpet: "music",
+		Synthesizer: "music",
+		"Pop music": "music",
+		"Rock music": "music",
+		"Hip hop music": "music",
+		"Classical music": "music",
+		Jazz: "music",
+		"Electronic music": "music",
+		"Background music": "music",
+		Dog: "dog",
+		Bark: "dog",
+		Yip: "dog",
+		Howl: "dog",
+		"Bow-wow": "dog",
+		Growling: "dog",
+		"Whimper (dog)": "dog",
+		Cat: "cat",
+		Purr: "cat",
+		Meow: "cat",
+		Hiss: "cat",
+		Caterwaul: "cat",
+		Bird: "bird",
+		"Bird vocalization, bird call, bird song": "bird",
+		"Chirp, tweet": "bird",
+		Squawk: "bird",
+		Crow: "bird",
+		Owl: "bird",
+		"Pigeon, dove": "bird",
+		Animal: "animal",
+		"Domestic animals, pets": "animal",
+		"Livestock, farm animals, working animals": "animal",
+		Horse: "animal",
+		"Cattle, bovinae": "animal",
+		Pig: "animal",
+		Sheep: "animal",
+		Goat: "animal",
+		Frog: "animal",
+		Insect: "animal",
+		Cricket: "animal",
+		Alarm: "alarm",
+		"Alarm clock": "alarm",
+		"Smoke detector, smoke alarm": "alarm",
+		"Fire alarm": "alarm",
+		Buzzer: "alarm",
+		"Civil defense siren": "alarm",
+		"Car alarm": "alarm",
+		Siren: "siren",
+		"Police car (siren)": "siren",
+		"Ambulance (siren)": "siren",
+		"Fire engine, fire truck (siren)": "siren",
+		"Emergency vehicle": "siren",
+		Foghorn: "siren",
+		Doorbell: "doorbell",
+		"Ding-dong": "doorbell",
+		Knock: "doorbell",
+		Tap: "doorbell",
+		Glass: "glass_breaking",
+		Shatter: "glass_breaking",
+		"Chink, clink": "glass_breaking",
+		"Gunshot, gunfire": "gunshot",
+		"Machine gun": "gunshot",
+		Explosion: "gunshot",
+		Fireworks: "gunshot",
+		Firecracker: "gunshot",
+		"Artillery fire": "gunshot",
+		"Cap gun": "gunshot",
+		Boom: "gunshot",
+		Vehicle: "vehicle",
+		Car: "vehicle",
+		Truck: "vehicle",
+		Bus: "vehicle",
+		Motorcycle: "vehicle",
+		"Car passing by": "vehicle",
+		"Vehicle horn, car horn, honking": "vehicle",
+		"Traffic noise, roadway noise": "vehicle",
+		Train: "vehicle",
+		Aircraft: "vehicle",
+		Helicopter: "vehicle",
+		Bicycle: "vehicle",
+		Skateboard: "vehicle",
+		Fire: "fire",
+		Crackle: "fire",
+		Water: "water",
+		Rain: "water",
+		Raindrop: "water",
+		"Rain on surface": "water",
+		Stream: "water",
+		Waterfall: "water",
+		Ocean: "water",
+		"Waves, surf": "water",
+		"Splash, splatter": "water",
+		Wind: "wind",
+		Thunderstorm: "wind",
+		Thunder: "wind",
+		"Wind noise (microphone)": "wind",
+		"Rustling leaves": "wind",
+		Door: "door",
+		"Sliding door": "door",
+		Slam: "door",
+		"Cupboard open or close": "door",
+		"Walk, footsteps": "footsteps",
+		Run: "footsteps",
+		Shuffle: "footsteps",
+		Crowd: "crowd",
+		Chatter: "crowd",
+		Cheering: "crowd",
+		Applause: "crowd",
+		"Children playing": "crowd",
+		"Hubbub, speech noise, speech babble": "crowd",
+		Telephone: "telephone",
+		"Telephone bell ringing": "telephone",
+		Ringtone: "telephone",
+		"Telephone dialing, DTMF": "telephone",
+		"Busy signal": "telephone",
+		Engine: "engine",
+		"Engine starting": "engine",
+		Idling: "engine",
+		"Accelerating, revving, vroom": "engine",
+		"Light engine (high frequency)": "engine",
+		"Medium engine (mid frequency)": "engine",
+		"Heavy engine (low frequency)": "engine",
+		"Lawn mower": "engine",
+		Chainsaw: "engine",
+		Hammer: "tools",
+		Jackhammer: "tools",
+		Sawing: "tools",
+		"Power tool": "tools",
+		Drill: "tools",
+		Sanding: "tools",
+		Silence: "silence"
+	},
+	preserveOriginal: false
+};
+var APPLE_SA_TO_MACRO = {
+	mapping: {
+		speech: "speech",
+		child_speech: "speech",
+		conversation: "speech",
+		whispering: "speech",
+		singing: "speech",
+		humming: "speech",
+		shout: "scream",
+		yell: "scream",
+		screaming: "scream",
+		crying: "crying",
+		baby_crying: "crying",
+		sobbing: "crying",
+		laughter: "laughter",
+		baby_laughter: "laughter",
+		giggling: "laughter",
+		music: "music",
+		guitar: "music",
+		piano: "music",
+		drums: "music",
+		dog_bark: "dog",
+		dog_bow_wow: "dog",
+		dog_growling: "dog",
+		dog_howl: "dog",
+		cat_meow: "cat",
+		cat_purr: "cat",
+		cat_hiss: "cat",
+		bird: "bird",
+		bird_chirp: "bird",
+		bird_squawk: "bird",
+		animal: "animal",
+		horse: "animal",
+		cow_moo: "animal",
+		insect: "animal",
+		alarm: "alarm",
+		smoke_alarm: "alarm",
+		fire_alarm: "alarm",
+		car_alarm: "alarm",
+		siren: "siren",
+		police_siren: "siren",
+		ambulance_siren: "siren",
+		doorbell: "doorbell",
+		door_knock: "doorbell",
+		knocking: "doorbell",
+		glass_breaking: "glass_breaking",
+		glass_shatter: "glass_breaking",
+		gunshot: "gunshot",
+		explosion: "gunshot",
+		fireworks: "gunshot",
+		car: "vehicle",
+		truck: "vehicle",
+		motorcycle: "vehicle",
+		car_horn: "vehicle",
+		vehicle_horn: "vehicle",
+		traffic: "vehicle",
+		fire: "fire",
+		fire_crackle: "fire",
+		water: "water",
+		rain: "water",
+		ocean: "water",
+		splash: "water",
+		wind: "wind",
+		thunder: "wind",
+		thunderstorm: "wind",
+		door: "door",
+		door_slam: "door",
+		sliding_door: "door",
+		footsteps: "footsteps",
+		walking: "footsteps",
+		running: "footsteps",
+		crowd: "crowd",
+		chatter: "crowd",
+		cheering: "crowd",
+		applause: "crowd",
+		telephone_ring: "telephone",
+		ringtone: "telephone",
+		engine: "engine",
+		engine_starting: "engine",
+		lawn_mower: "engine",
+		chainsaw: "engine",
+		hammer: "tools",
+		jackhammer: "tools",
+		drill: "tools",
+		power_tool: "tools",
+		silence: "silence"
+	},
+	preserveOriginal: false
+};
+var _macroLookup = /* @__PURE__ */ new Map();
+for (const [k, v] of Object.entries(YAMNET_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
+for (const [k, v] of Object.entries(APPLE_SA_TO_MACRO.mapping)) _macroLookup.set(k.toLowerCase(), v);
 /**
 * Accessory device helpers — shared across drivers.
 *
@@ -7603,78 +7749,6 @@ var airQualitySensorCapability = {
 	runtimeState: AirQualitySensorStatusSchema
 };
 /**
-* Generic types for capability definitions.
-*
-* A capability is defined with Zod schemas for methods, events, and settings.
-* TypeScript types are inferred via z.infer<> — zero duplication.
-*
-* Pattern:
-*   1. Define Zod schemas for data, methods, settings
-*   2. Export const capabilityDef = { ... } satisfies CapabilityDefinition
-*   3. Export type IProvider = InferProvider<typeof capabilityDef>
-*   4. Addon implements IProvider
-*   5. Registry auto-mounts tRPC router from definition.methods
-*/
-/**
-* Output schema shared by the contribution + live methods.
-*
-* Mirrors the `ConfigUISchemaWithValues` shape (sections[] + optional
-* tabs[]) without importing from `../interfaces/config-ui.js` — a
-* concrete-but-lenient Zod object keeps tRPC output inference happy
-* (using `z.unknown()` here collapses unrelated router branches to
-* `unknown` when the generator re-inlines the huge AppRouter type).
-*
-* `.passthrough()` on sections/fields accepts whatever FormBuilder
-* extensions the caller adds (showWhen, displayScale, …) without
-* rebuilding every time a new field kind is introduced.
-*/
-var ContributionSectionSchema = object({
-	id: string(),
-	title: string(),
-	description: string().optional(),
-	style: _enum(["card", "accordion"]).optional(),
-	defaultCollapsed: boolean().optional(),
-	columns: union([
-		literal(1),
-		literal(2),
-		literal(3),
-		literal(4)
-	]).optional(),
-	tab: string().optional(),
-	location: _enum(["settings", "top-tab"]).optional(),
-	order: number().optional(),
-	fields: array(any())
-});
-object({
-	tabs: array(object({
-		id: string(),
-		label: string(),
-		icon: string(),
-		order: number().optional()
-	})).optional(),
-	sections: array(ContributionSectionSchema)
-}).nullable();
-object({ deviceId: number() }), object({ deviceId: number() }), object({
-	deviceId: number(),
-	patch: record(string(), unknown())
-}), object({ success: literal(true) });
-object({ deviceId: number() }), unknown().nullable();
-/** Shorthand to define a method schema */
-function method(input, output, options) {
-	return {
-		input,
-		output,
-		kind: options?.kind ?? "query",
-		auth: options?.auth ?? "protected",
-		...options?.access !== void 0 ? { access: options.access } : {},
-		timeoutMs: options?.timeoutMs
-	};
-}
-/** Shorthand to define an event schema */
-function event(data) {
-	return { data };
-}
-/**
 * Alarm-panel cap. Models HA `alarm_control_panel.*` on
 * `DeviceType.AlarmPanel`. State follows HA's canonical lifecycle
 * across disarmed / armed_(home|away|night|vacation|custom_bypass) /
@@ -10390,6 +10464,24 @@ var DetectorOutputSchema = object({
 	inferenceMs: number(),
 	modelId: string()
 });
+var EngineProvisioningSchema = object({
+	runtimeId: _enum([
+		"onnx",
+		"openvino",
+		"coreml"
+	]).nullable(),
+	device: string().nullable(),
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	progress: number().optional(),
+	error: string().optional(),
+	nextRetryAt: number().optional()
+});
 var PipelineStepInputSchema = lazy(() => object({
 	addonId: string(),
 	modelId: string(),
@@ -10458,7 +10550,7 @@ var PipelineRunResultBridge = custom();
 method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngineChoiceSchema), method(PipelineEngineChoiceSchema, array(PipelineDefaultStepSchema)), method(_void(), PipelineEngineChoiceSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(_void(), record(string(), object({
+}), method(object({ nodeId: string() }), EngineProvisioningSchema), method(_void(), record(string(), object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 }))), method(object({ steps: record(string(), object({
@@ -14128,9 +14220,6 @@ method(LogEntrySchema, _void(), { kind: "mutation" }), method(object({
 	limit: number().optional(),
 	tags: record(string(), string()).optional()
 }), array(LogEntrySchema).readonly());
-var StaticDirOutputSchema = object({ staticDir: string() });
-var VersionOutputSchema = object({ version: string() });
-method(_void(), StaticDirOutputSchema), method(_void(), VersionOutputSchema);
 /**
 * Zod schemas for persisted record types.
 *
@@ -15614,7 +15703,10 @@ var AgentAddonConfigSchema = object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 });
-var AgentPipelineSettingsSchema = object({ addonDefaults: record(string(), AgentAddonConfigSchema).readonly() });
+var AgentPipelineSettingsSchema = object({
+	addonDefaults: record(string(), AgentAddonConfigSchema).readonly(),
+	maxCameras: number().int().nonnegative().nullable().default(null)
+});
 var CameraPipelineForAgentSchema = object({
 	steps: array(PipelineStepInputSchema).readonly(),
 	audio: object({
@@ -15716,6 +15808,133 @@ var GlobalMetricsSchema = object({
 * capability providers.
 */
 var CapabilityBindingsSchema = record(string(), string());
+/** Source block — always present; derives from the stream catalog. */
+var CameraSourceStatusSchema = object({ streams: array(object({
+	camStreamId: string(),
+	codec: string(),
+	width: number(),
+	height: number(),
+	fps: number(),
+	kind: string()
+})).readonly() });
+/** Assignment block — always present (orchestrator-local, no remote call). */
+var CameraAssignmentStatusSchema = object({
+	detectionNodeId: string().nullable(),
+	decoderNodeId: string().nullable(),
+	audioNodeId: string().nullable(),
+	pinned: object({
+		detection: boolean(),
+		decoder: boolean(),
+		audio: boolean()
+	}),
+	reasons: object({
+		detection: string().optional(),
+		decoder: string().optional(),
+		audio: string().optional()
+	})
+});
+/** Broker block — null when the broker stage is unreachable or inactive. */
+var CameraBrokerStatusSchema = object({
+	profiles: array(object({
+		profile: string(),
+		status: string(),
+		codec: string(),
+		width: number(),
+		height: number(),
+		subscribers: number(),
+		inFps: number(),
+		outFps: number()
+	})).readonly(),
+	webrtcSessions: number(),
+	rtspRestream: boolean()
+});
+/** Shared-memory ring statistics within the decoder block. */
+var CameraDecoderShmSchema = object({
+	framesWritten: number(),
+	getFrameHits: number(),
+	getFrameMisses: number(),
+	budgetMb: number()
+});
+/** Decoder block — null when the decoder stage is unreachable or inactive. */
+var CameraDecoderStatusSchema = object({
+	nodeId: string(),
+	formats: array(string()).readonly(),
+	sessionCount: number(),
+	shm: CameraDecoderShmSchema
+});
+/** Motion block — null when motion detection is not active for this device. */
+var CameraMotionStatusSchema = object({
+	enabled: boolean(),
+	fps: number()
+});
+/** Detection provisioning sub-block. */
+var CameraDetectionProvisioningSchema = object({
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	error: string().optional()
+});
+/** Detection phase — derived from the runner's engine phase. */
+var CameraDetectionPhaseSchema = _enum([
+	"idle",
+	"watching",
+	"active"
+]);
+/** Detection block — null when no detection node is assigned or reachable. */
+var CameraDetectionStatusSchema = object({
+	nodeId: string(),
+	engine: object({
+		backend: string(),
+		device: string()
+	}),
+	phase: CameraDetectionPhaseSchema,
+	configuredFps: number(),
+	actualFps: number(),
+	queueDepth: number(),
+	avgInferenceMs: number(),
+	provisioning: CameraDetectionProvisioningSchema
+});
+/** Audio block — null when no audio node is assigned or reachable. */
+var CameraAudioStatusSchema = object({
+	nodeId: string(),
+	enabled: boolean()
+});
+/** Recording block — null when no recording cap is active for this device. */
+var CameraRecordingStatusSchema = object({
+	mode: _enum([
+		"off",
+		"continuous",
+		"events"
+	]),
+	active: boolean(),
+	storageBytes: number()
+});
+/**
+* Aggregated per-camera pipeline status — server-composed, single call.
+*
+* The `assignment` and `source` blocks are always present.
+* Every other block is `null` when the stage is inactive or unreachable
+* during the bounded parallel fan-out in the orchestrator implementation.
+*
+* See spec: `docs/superpowers/specs/2026-06-24-camera-status-aggregator-cap.md`
+*/
+var CameraStatusSchema = object({
+	deviceId: number(),
+	assignment: CameraAssignmentStatusSchema,
+	source: CameraSourceStatusSchema,
+	broker: CameraBrokerStatusSchema.nullable(),
+	decoder: CameraDecoderStatusSchema.nullable(),
+	motion: CameraMotionStatusSchema.nullable(),
+	detection: CameraDetectionStatusSchema.nullable(),
+	audio: CameraAudioStatusSchema.nullable(),
+	recording: CameraRecordingStatusSchema.nullable(),
+	/** Unix timestamp (ms) when this snapshot was composed server-side. */
+	fetchedAt: number()
+});
 method(object({
 	deviceId: number(),
 	agentNodeId: string()
@@ -15783,6 +16002,12 @@ method(object({
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	agentNodeId: string(),
+	maxCameras: number().int().nonnegative().nullable()
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({ deviceId: number() }), CameraPipelineSettingsSchema.nullable()), method(object({
 	deviceId: number(),
 	addonId: string(),
@@ -15808,7 +16033,7 @@ method(object({
 }), method(object({
 	deviceId: number(),
 	agentNodeId: string().optional()
-}), CameraPipelineConfigSchema), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
+}), CameraPipelineConfigSchema), method(object({ deviceId: number() }), CameraStatusSchema), method(object({ deviceIds: array(number()).optional() }), array(CameraStatusSchema).readonly()), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
 	name: string(),
 	description: string().optional(),
 	config: CameraPipelineConfigSchema
@@ -16295,7 +16520,7 @@ method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ addonId: string() }), array(SavedDeviceRowSchema)), method(object({ addonId: string().optional() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), DeviceInfoSchema.nullable()), method(object({ parentDeviceId: number() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), array(StreamSourceEntrySchema)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
+}), method(object({ addonId: string() }), array(SavedDeviceRowSchema)), method(object({ addonId: string().optional() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), DeviceInfoSchema.nullable()), method(object({ parentDeviceId: number() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
 	deviceId: number(),
 	values: record(string(), unknown())
 }), object({ success: literal(true) }), {
@@ -17020,7 +17245,20 @@ var DiskSpaceInfoSchema = object({
 var PidResourceStatsSchema = object({
 	pid: number(),
 	cpu: number(),
-	memory: number()
+	memory: number(),
+	/**
+	* Private (anonymous) resident bytes — the per-process V8 heap + native
+	* allocations NOT shared with other processes (Linux RssAnon). This is the
+	* "real" per-runner cost; summing it across runners is meaningful, unlike
+	* `memory` (RSS), which double-counts the shared mmap'd framework code.
+	* Undefined where /proc is unavailable (e.g. macOS).
+	*/
+	privateBytes: number().optional(),
+	/**
+	* Shared file-backed resident bytes (Linux RssFile) — mmap'd framework/lib
+	* code shared copy-on-write across runners. Undefined on macOS.
+	*/
+	sharedBytes: number().optional()
 });
 var AddonInstanceSchema = object({
 	addonId: string(),
@@ -17069,6 +17307,17 @@ var KillProcessResultSchema = object({
 	reason: string().optional(),
 	signal: _enum(["SIGTERM", "SIGKILL"]).optional()
 });
+var DumpHeapSnapshotInputSchema = object({ 
+/** The addon whose runner should dump a heap snapshot. */
+addonId: string() });
+var DumpHeapSnapshotResultSchema = object({
+	success: boolean(),
+	/** Path of the written .heapsnapshot inside the runner's container/host. */
+	path: string().optional(),
+	/** Process pid that was signalled. */
+	pid: number().optional(),
+	reason: string().optional()
+});
 var SystemMetricsSchema = object({
 	cpuPercent: number(),
 	memoryPercent: number(),
@@ -17082,6 +17331,9 @@ var SystemMetricsSchema = object({
 method(_void(), SystemResourceSnapshotSchema), method(_void(), SystemResourceSnapshotSchema.nullable()), method(_void(), SystemMetricsSchema), method(object({ dirPath: string() }), DiskSpaceInfoSchema), method(_void(), MetricsGpuInfoSchema.nullable()), method(_void(), number().nullable()), method(object({ pids: array(number()) }), array(PidResourceStatsSchema)), method(_void(), array(AddonInstanceSchema).readonly()), method(object({ addonId: string() }), PidResourceStatsSchema.nullable()), method(_void(), array(NodeProcessSchema).readonly()), method(KillProcessInputSchema, KillProcessResultSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
+	kind: "mutation",
+	auth: "admin"
 });
 var PtzPresetSchema = object({
 	id: string(),
@@ -17448,63 +17700,6 @@ method(object({
 	auth: "admin"
 });
 /**
-* device-ops — device-scoped cap that unifies the per-IDevice operations
-* previously routed through the `.device-ops` Moleculer bridge service.
-*
-* Each worker that hosts live `IDevice` instances auto-registers a native
-* provider for this cap (per device) backed by its local
-* `DeviceRegistry`. Hub-side callers reach it transparently through
-* `ctx.fetchDevice(id).deviceOps.*` — the DeviceProxy injects
-* `deviceId` + `nodeId` and dispatches through the standard cap-router,
-* so there's no parallel bridge path anymore.
-*
-* The surface is intentionally small — every method corresponds to a
-* single action on the live `IDevice` (or `ICameraDevice` for
-* `getStreamSources`). Richer orchestration (enable/disable with
-* integration plumbing, bulk updates) stays in the `device-manager` cap;
-* `device-ops` is the per-device primitive the device-manager routes to.
-*/
-var StreamSourceEntrySchema$1 = object({
-	id: string(),
-	label: string(),
-	protocol: _enum([
-		"rtsp",
-		"rtmp",
-		"annexb",
-		"http-mjpeg",
-		"webrtc",
-		"custom"
-	]),
-	url: string().optional(),
-	resolution: object({
-		width: number(),
-		height: number()
-	}).optional(),
-	fps: number().optional(),
-	bitrate: number().optional(),
-	codec: string().optional(),
-	profileHint: CamProfileSchema.optional(),
-	sdp: string().optional()
-});
-var ConfigEntrySchema$1 = object({
-	key: string(),
-	value: unknown()
-});
-var RawStateResultSchema = object({
-	/** Originating provider id, e.g. 'homeassistant' | 'reolink' | 'hikvision'. */
-	source: string(),
-	/** Opaque, DISPLAY-SAFE upstream blob (no secrets/PII). */
-	data: record(string(), unknown())
-});
-method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema$1)), method(object({
-	deviceId: number(),
-	values: record(string(), unknown())
-}), _void(), { kind: "mutation" }), method(object({
-	deviceId: number(),
-	action: string().min(1),
-	input: unknown()
-}), unknown(), { kind: "mutation" }), method(object({ deviceId: number() }), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), unknown().nullable()), method(object({ deviceId: number() }), RawStateResultSchema.nullable(), { auth: "protected" });
-/**
 * camera-credentials — device-scoped cap exposing the camera's network
 * + auth surface in a vendor-neutral shape.
 *
@@ -21200,6 +21395,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"metricsProvider.dumpHeapSnapshot": {
+		capName: "metrics-provider",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"metricsProvider.getAddonStats": {
 		capName: "metrics-provider",
 		capScope: "system",
@@ -21656,6 +21857,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineExecutor.getEngineProvisioning": {
+		capName: "pipeline-executor",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineExecutor.getGlobalPipelineConfig": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -21860,6 +22067,18 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getCameraStatus": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"pipelineOrchestrator.getCameraStatuses": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getCameraStepOverrides": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -21944,6 +22163,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setAgentMaxCameras": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.setCameraPipelineForAgent": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",