@camstack/addon-provider-rtsp 1.1.18 → 1.1.20

package/dist/addon.js

@@ -1,4 +1,28 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+let node_net = require("node:net");
+node_net = __toESM(node_net);
 //#region ../../node_modules/zod/v4/core/core.js
 var _a$1;
 function $constructor(name, initializer, params) {
@@ -4642,7 +4666,7 @@ function preprocess(fn, schema) {
 	});
 }
 //#endregion
-//#region ../types/dist/sleep-CZDdRBua.mjs
+//#region ../types/dist/sleep-Cc14_yxc.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -4828,6 +4852,18 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineCameraUpdated"] = "pipeline.camera-updated";
 	/**
+	* The cluster camera-source OWNER changed (`clusterRoles.ingestNode`).
+	* Emitted by addon-pipeline-orchestrator whenever it (re)derives node
+	* capabilities — at boot, on agent online/offline, and on an ingest-node
+	* flip. Carries the resolved `ownerNodeId`. The stream-broker consumes it to
+	* keep its ingest-owner-gate decision current WITHOUT a per-`ensureBroker`
+	* cross-process `getIngestOwner` query (push the authority's decision instead
+	* of polling it on the hot path). Idempotent state — re-emitted on every
+	* topology change, so a dropped event self-heals on the next one (plus the
+	* broker's long backstop reconcile query).
+	*/
+	EventCategory["PipelineIngestOwnerChanged"] = "pipeline.ingest-owner-changed";
+	/**
 	* Periodic snapshot of per-node pipeline-runner load
 	* (`RunnerLocalLoad`). Emitted ~1Hz by every runner so UI dashboards
 	* subscribe instead of polling `pipelineRunner.getLocalLoad`.
@@ -6911,6 +6947,36 @@ var ModelFormatsSchema = object({
 	tflite: ModelFormatEntrySchema.optional(),
 	pt: ModelFormatEntrySchema.optional()
 });
+/**
+* Variant-selector grouping axes. Shared by the full `ModelCatalogEntry` and by
+* the reduced `PipelineModelOption` returned in `pipeline.getSchema()` so the
+* grouped Family→Tier→Variant picker renders identically in the config UI and
+* in the pipeline/device steppers. The flat `id` stays the source of truth for
+* resolution/download/persistence; this is a presentation overlay resolved back
+* to an `id`.
+*/
+var ModelVariantGroupSchema = object({
+	/** Top-level family, e.g. `yolo26` (later `d-fine`, `rf-detr`). */
+	family: string(),
+	/** Size within the family, e.g. `n` | `s` | `m` | `l`. */
+	tier: string(),
+	/** Quantization axis. Omit ⇒ the fp32 base build. */
+	precision: _enum(["fp32", "int8"]).optional(),
+	/**
+	* Speed-optimization axis. Omit ⇒ the standard build. `fast` marks a
+	* latency-optimized export (e.g. ReLU-activation variant) — the slot the
+	* future performance variants plug into.
+	*/
+	optimization: _enum(["standard", "fast"]).optional(),
+	/**
+	* Input-resolution axis (square input side, px). Omit ⇒ the family's native
+	* resolution (640 for yolo26). Reduced-input builds (320 / 256) are a big,
+	* cheap latency lever — especially on Apple ANE and the Intel N100 — at a
+	* small-object accuracy cost. Mirrors the model's `inputSize` but lifted onto
+	* the group so the selector can offer it as a variant axis.
+	*/
+	resolution: number().int().positive().optional()
+});
 var ModelCatalogEntrySchema = object({
 	id: string(),
 	name: string(),
@@ -6940,7 +7006,43 @@ var ModelCatalogEntrySchema = object({
 	* Auxiliary files required at runtime (labels JSON, charset dict, etc.).
 	* Downloaded into the same modelsDir alongside the model file.
 	*/
-	extraFiles: array(ModelExtraFileSchema).readonly().optional()
+	extraFiles: array(ModelExtraFileSchema).readonly().optional(),
+	/**
+	* LEGACY entry — retained in the catalog so a persisted operator selection
+	* still RESOLVES (and can be re-activated), but hidden from the selectable
+	* model list and excluded from the auto format-default pick. Set on the
+	* superseded / consolidated models (older lineages, redundant fp16 IRs) so
+	* the active lineup stays the coherent curated ladder without deleting a
+	* model anyone may still be pinned to. `resolveModelForFormat` keeps honoring
+	* an explicit legacy id that has a build for the node's format.
+	*/
+	legacy: boolean().optional(),
+	/**
+	* Measured quality/latency metadata — populated from the benchmark addon on
+	* the real node classes. Absent = not yet measured (most entries today; the
+	* catalog historically carried only `sizeMB`, a poor cross-architecture
+	* speed proxy). `p95LatencyMs` is keyed by node class (e.g. `n100`, `mac`).
+	*/
+	metrics: object({
+		map50: number().optional(),
+		p95LatencyMs: record(string(), number()).optional()
+	}).optional(),
+	/**
+	* SPDX-ish license id of the model weights (e.g. `AGPL-3.0` for Ultralytics
+	* YOLO26, `GPL-3.0` for YOLOv9, `Apache-2.0` for D-FINE/RF-DETR). Matters for
+	* the retraining addon and any future commercial distribution.
+	*/
+	license: string().optional(),
+	/**
+	* Variant-selector grouping. The UI groups models by `family` + `tier` and
+	* offers `precision` / `optimization` as variant axes WITHIN a tier — so all
+	* of a family's sizes and quantizations collapse into one grouped picker
+	* instead of a flat list of `yolo26s`, `yolo26s-int8`, … Absent ⇒ ungrouped
+	* (legacy / custom models) — never shown in the grouped selector. The flat
+	* `id` stays the source of truth for resolution/download/persistence; grouping
+	* is a presentation overlay resolved back to an `id`.
+	*/
+	group: ModelVariantGroupSchema.optional()
 });
 var ConvertTargetSchema = discriminatedUnion("format", [object({
 	format: literal("openvino"),
@@ -7001,8 +7103,8 @@ var RecordingModeSchema = _enum([
 	"onAudioThreshold"
 ]);
 /**
-* First-class, authoritative per-camera storage mode — the netta choice the UI
-* reads directly (never inferred from `rules`):
+* First-class, authoritative per-camera storage mode — the explicit choice the
+* UI reads directly (never inferred from `rules`):
 *  - `off`        — not recording.
 *  - `events`     — record only around triggers (motion / audio threshold),
 *                   with pre/post-buffer.
@@ -8534,6 +8636,72 @@ function shallowEqual(a, b) {
 	for (const k of ak) if (a[k] !== b[k]) return false;
 	return true;
 }
+/** Reject after `ms`; always clears its own timer. */
+async function withTimeout(promise, ms, label) {
+	let timer;
+	const timeout = new Promise((_resolve, reject) => {
+		timer = setTimeout(() => reject(/* @__PURE__ */ new Error(`${label} timed out after ${String(ms)}ms`)), ms);
+	});
+	try {
+		return await Promise.race([promise, timeout]);
+	} finally {
+		if (timer !== void 0) clearTimeout(timer);
+	}
+}
+/**
+* Start the reachability poll loop. Returns a handle whose `stop()` clears the
+* timer and prevents any further ticks. Start on device activation, stop on
+* device teardown (`removeDevice`) so no timer leaks.
+*/
+function startReachabilityPoll(options) {
+	const intervalMs = options.intervalMs ?? 3e4;
+	const failuresToOffline = options.failuresToOffline ?? 3;
+	const probeTimeoutMs = options.probeTimeoutMs ?? 1e4;
+	const runImmediately = options.runImmediately ?? true;
+	let stopped = false;
+	let running = false;
+	let consecutiveFailures = 0;
+	let timer;
+	const tick = async () => {
+		if (stopped) return;
+		if (running) return;
+		if (options.isEnabled && !options.isEnabled()) return;
+		running = true;
+		try {
+			const reachable = await withTimeout(Promise.resolve().then(options.probe), probeTimeoutMs, "reachability probe");
+			if (stopped) return;
+			if (reachable) {
+				consecutiveFailures = 0;
+				options.setOnline(true);
+			} else registerFailure("probe resolved unreachable");
+		} catch (error) {
+			if (stopped) return;
+			registerFailure(error instanceof Error ? error.message : "probe threw");
+		} finally {
+			running = false;
+		}
+	};
+	const registerFailure = (reason) => {
+		consecutiveFailures += 1;
+		options.logger?.debug("reachability probe failed", {
+			reason,
+			consecutiveFailures,
+			failuresToOffline
+		});
+		if (consecutiveFailures >= failuresToOffline) options.setOnline(false);
+	};
+	timer = setInterval(() => {
+		tick();
+	}, intervalMs);
+	if (typeof timer === "object" && timer !== null && "unref" in timer) timer.unref();
+	if (runImmediately) tick();
+	return { stop: () => {
+		if (stopped) return;
+		stopped = true;
+		if (timer !== void 0) clearInterval(timer);
+		timer = void 0;
+	} };
+}
 /**
 * Generic device-level status snapshot. Auto-registered by `BaseDevice`
 * for every device, regardless of provider — the kernel needs a uniform
@@ -9197,26 +9365,13 @@ onBrightnessChanged: { data: object({
 	*/
 	runtimeState: BrightnessStatusSchema
 };
+/** Stream delivery format. (Relocated from the retired `streaming-engine` cap.) */
 var StreamFormatSchema = _enum([
 	"webrtc",
 	"hls",
 	"mjpeg",
 	"rtsp"
 ]);
-var StreamInfoSchema = object({
-	streamId: string(),
-	format: StreamFormatSchema,
-	url: string().nullable(),
-	active: boolean()
-});
-method(object({
-	streamId: string(),
-	sourceUrl: string(),
-	codec: string().optional()
-}), _void(), { kind: "mutation" }), method(object({ streamId: string() }), _void(), { kind: "mutation" }), method(object({
-	streamId: string(),
-	format: StreamFormatSchema
-}), string().nullable()), method(_void(), array(StreamInfoSchema));
 var RtspRestreamEntrySchema = object({
 	brokerId: string(),
 	url: string(),
@@ -10084,37 +10239,7 @@ var consumablesCapability = {
 	scope: "device",
 	deviceNative: true,
 	mode: "singleton",
-	deviceTypes: [
-		DeviceType.Camera,
-		DeviceType.Hub,
-		DeviceType.Light,
-		DeviceType.Siren,
-		DeviceType.Switch,
-		DeviceType.Sensor,
-		DeviceType.Thermostat,
-		DeviceType.Button,
-		DeviceType.EventEmitter,
-		DeviceType.Update,
-		DeviceType.Generic,
-		DeviceType.Notifier,
-		DeviceType.Script,
-		DeviceType.Automation,
-		DeviceType.Lock,
-		DeviceType.Cover,
-		DeviceType.Valve,
-		DeviceType.Humidifier,
-		DeviceType.WaterHeater,
-		DeviceType.Fan,
-		DeviceType.MediaPlayer,
-		DeviceType.AlarmPanel,
-		DeviceType.Control,
-		DeviceType.Presence,
-		DeviceType.Weather,
-		DeviceType.Vacuum,
-		DeviceType.LawnMower,
-		DeviceType.Container,
-		DeviceType.Image
-	],
+	deviceTypes: Object.values(DeviceType),
 	deviceConfig: { ui: {
 		kind: "widget",
 		widgetId: "host/consumables-panel",
@@ -11707,7 +11832,6 @@ var PipelineDefaultStepSchema = lazy(() => object({
 	enabled: boolean(),
 	modelId: string(),
 	children: array(PipelineDefaultStepSchema).readonly(),
-	engine: PipelineEngineChoiceSchema.optional(),
 	group: string().optional(),
 	settings: record(string(), unknown()).optional()
 }));
@@ -11732,7 +11856,9 @@ var PipelineModelOptionSchema = object({
 	formats: record(string(), object({
 		downloaded: boolean(),
 		sizeMB: number()
-	}))
+	})),
+	group: ModelVariantGroupSchema.optional(),
+	legacy: boolean().optional()
 });
 var ConfigFieldBridge = custom();
 var PipelineAddonSchemaSchema = object({
@@ -11783,15 +11909,42 @@ var EngineProvisioningSchema = object({
 	]),
 	progress: number().optional(),
 	error: string().optional(),
-	nextRetryAt: number().optional()
+	nextRetryAt: number().optional(),
+	/**
+	* Gate A (config-correctness gate at engine change): human-readable
+	* config issues surfaced EAGERLY when the node's engine changes — model
+	* substitutions ("chose X, running Y") and zero-build steps ("no model
+	* has a <format> build"). Additive/optional: informational only, never
+	* enforced here — `assertEngineReady` (readiness) still gates inference.
+	* Absent/empty when the node-default tree resolves cleanly.
+	*/
+	configIssues: array(string()).optional()
 });
 var PipelineStepInputSchema = lazy(() => object({
 	addonId: string(),
-	modelId: string(),
+	modelId: string().optional(),
 	enabled: boolean().default(true),
 	children: array(PipelineStepInputSchema).optional(),
 	settings: record(string(), unknown()).optional()
 }));
+var ModelSubstitutionSchema = object({
+	addonId: string(),
+	chosen: string(),
+	running: string(),
+	format: string()
+});
+var PipelineValidationIssueSchema = object({
+	addonId: string(),
+	kind: _enum(["unknown-addon", "no-format-build"]),
+	detail: string()
+});
+var PipelineValidationResultSchema = object({
+	ok: boolean(),
+	issues: array(PipelineValidationIssueSchema).readonly(),
+	substitutions: array(ModelSubstitutionSchema).readonly(),
+	/** The node's `currentEngine.format` this validation ran against. */
+	format: string()
+});
 var ReferenceImageEntrySchema = object({
 	filename: string(),
 	stepIds: array(string()).readonly().optional()
@@ -11862,7 +12015,13 @@ method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngi
 })) }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(_void(), PipelineSchemaSchema), method(_void(), array(PipelineDefaultStepSchema).readonly().nullable()), method(_void(), PipelineConfigBridge), method(_void(), ConfigUISchemaBridge), method(_void(), array(PipelineTemplateSchema$1).readonly()), method(object({
+}), method(object({ nodeId: string() }), object({
+	success: literal(true),
+	regeneratedModelId: string().nullable()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), PipelineSchemaSchema), method(_void(), array(PipelineDefaultStepSchema).readonly().nullable()), method(_void(), PipelineConfigBridge), method(_void(), ConfigUISchemaBridge), method(object({ steps: array(PipelineStepInputSchema) }), PipelineValidationResultSchema), method(_void(), array(PipelineTemplateSchema$1).readonly()), method(object({
 	name: string(),
 	steps: array(PipelineTemplateStepSchema).readonly(),
 	engine: PipelineEngineChoiceSchema
@@ -12155,6 +12314,13 @@ var RunnerFrameSourceSchema = discriminatedUnion("kind", [object({ kind: literal
 	kind: literal("remote-restream"),
 	/** The camera's source-owner node (slice 1: always the hub). */
 	ownerNodeId: string(),
+	/**
+	* The owner's LAN-reachable host, resolved by the orchestrator from the
+	* per-node `reachableHost` override (Cluster UI). When present the runner
+	* dials THIS host for the owner's restream, in preference to the
+	* `CAMSTACK_HUB_URL`-derived default. Absent → auto-detect fallback.
+	*/
+	ownerReachableHost: string().optional(),
 	/** Operator override for the owner host the runner dials. */
 	hubHostnameOverride: string().optional()
 })]).describe("Per-camera frame-source mode for the runner (P2c)");
@@ -12163,13 +12329,11 @@ var RunnerFrameSourceSchema = discriminatedUnion("kind", [object({ kind: literal
 * specific runner instance via `attachCamera`. Carries everything the
 * runner needs to subscribe to the local broker and execute inference.
 *
-* Stateless-pipeline model: the full pipeline content (`engine`, `steps`,
-* optional `audio`) travels with the attach payload. The runner keeps it
-* in RAM for the lifetime of the attach — on rebalance, edit, or
-* restart the orchestrator re-sends the latest snapshot.
-*
-* `engine`/`steps`/`audio` are optional during the additive migration
-* window; once orchestrator + UI are migrated they become required.
+* Stateless-pipeline model: the pipeline content (`steps`, optional
+* `audio`) travels with the attach payload. The runner keeps it in RAM
+* for the lifetime of the attach — on rebalance, edit, or restart the
+* orchestrator re-sends the latest snapshot. Engine is NOT carried: it is
+* node-local, resolved by the executing runner at dispatch time.
 */
 var RunnerCameraConfigSchema = object({
 	deviceId: number(),
@@ -12220,14 +12384,11 @@ var RunnerCameraConfigSchema = object({
 	*/
 	motionSources: MotionSourcesSchema.default(["analyzer"]),
 	pipelineEnabled: boolean().default(true),
-	/** Engine choice for video steps (runtime+backend+format). */
-	engine: PipelineEngineChoiceSchema.optional(),
 	/** Ordered tree of video steps. Absent → runner skips video detection. */
 	steps: array(PipelineStepInputSchema).readonly().optional(),
 	/** Audio classification branch. `enabled:false` disables, null skips. */
 	audio: object({
-		engine: PipelineEngineChoiceSchema,
-		modelId: string(),
+		modelId: string().optional(),
 		enabled: boolean()
 	}).nullable().optional(),
 	/**
@@ -18090,11 +18251,11 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	timestamp: number()
 });
 var CameraPipelineConfigSchema = object({
-	engine: PipelineEngineChoiceSchema,
+	engine: PipelineEngineChoiceSchema.optional(),
 	steps: array(PipelineStepInputSchema).readonly(),
 	audio: object({
-		engine: PipelineEngineChoiceSchema,
-		modelId: string(),
+		engine: PipelineEngineChoiceSchema.optional(),
+		modelId: string().optional(),
 		enabled: boolean(),
 		settings: record(string(), unknown()).readonly().optional()
 	}).nullable().optional()
@@ -18109,7 +18270,7 @@ var PipelineTemplateSchema = object({
 });
 var AgentAddonConfigSchema = object({
 	enabled: boolean(),
-	modelId: string(),
+	modelId: string().optional(),
 	settings: record(string(), unknown()).readonly()
 });
 var AgentPipelineSettingsSchema = object({
@@ -18124,7 +18285,15 @@ var AgentPipelineSettingsSchema = object({
 	/** Node is eligible to run audio-analyzer sessions. */
 	audio: boolean().optional(),
 	/** Node is eligible to be the ingest / source-owner (serve the restream). */
-	ingest: boolean().optional()
+	ingest: boolean().optional(),
+	/**
+	* Operator override for the LAN host a cross-node decoder dials to reach
+	* THIS node's restream (Cluster UI). Absent → auto-detect: a remote runner
+	* falls back to its `CAMSTACK_HUB_URL`-derived host (the Moleculer address
+	* it already uses to reach the hub). Set this only when the auto-detected
+	* address is wrong (multi-homed host, NAT, custom interface).
+	*/
+	reachableHost: string().optional()
 });
 var CameraPipelineForAgentSchema = object({
 	steps: array(PipelineStepInputSchema).readonly(),
@@ -18230,6 +18399,15 @@ var GlobalMetricsSchema = object({
 * capability providers.
 */
 var CapabilityBindingsSchema = record(string(), string());
+/**
+* The cluster's single camera-source owner (`clusterRoles.ingestNode`) plus
+* its LAN-reachable host, if one is registered. See `getIngestOwner`.
+*/
+var IngestOwnerSchema = object({
+	ownerNodeId: string(),
+	reachableHost: string().optional(),
+	configIssue: string().optional()
+});
 /** Source block — always present; derives from the stream catalog. */
 var CameraSourceStatusSchema = object({ streams: array(object({
 	camStreamId: string(),
@@ -18244,6 +18422,14 @@ var CameraAssignmentStatusSchema = object({
 	detectionNodeId: string().nullable(),
 	decoderNodeId: string().nullable(),
 	audioNodeId: string().nullable(),
+	/**
+	* The node that OWNS this camera's physical source pull (dials the RTSP and
+	* hosts the broker/restream) — the cluster ingest owner today
+	* (`clusterRoles.ingestNode`), per-camera once source assignment lands. Lets
+	* the UI show WHERE a camera is sourced without SSH/logs, and is the node the
+	* broker block below was read from (pinned). Nullable only pre-wiring.
+	*/
+	sourceNodeId: string().nullable(),
 	pinned: object({
 		detection: boolean(),
 		decoder: boolean(),
@@ -18376,7 +18562,7 @@ method(object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({
+}), method(_void(), IngestOwnerSchema), method(object({
 	deviceId: number(),
 	nodeId: string()
 }), _void(), {
@@ -18445,6 +18631,12 @@ method(object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	agentNodeId: string(),
+	reachableHost: string().nullable()
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({ deviceId: number() }), CameraPipelineSettingsSchema.nullable()), method(object({
 	deviceId: number(),
 	addonId: string(),
@@ -18489,22 +18681,6 @@ method(object({
 	kind: "mutation",
 	auth: "admin"
 });
-var RegisteredStreamSchema = object({
-	streamId: string(),
-	label: string().optional(),
-	codec: string(),
-	type: _enum(["video", "audio"]),
-	sourceUrl: string()
-});
-var ExposedResourceSchema = object({
-	streamId: string(),
-	format: string(),
-	value: string()
-});
-method(object({
-	deviceId: number(),
-	streams: array(RegisteredStreamSchema).readonly()
-}), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), array(ExposedResourceSchema).readonly());
 /**
 * Query filter for settings-store collections.
 */
@@ -18657,9 +18833,9 @@ method(SendEmailInputSchema, SendEmailResultSchema, {
 /**
 * A single device snapshot returned as base64 JPEG/PNG.
 *
-* Shared with the `snapshot-provider` collection cap — the orchestrator
-* receives the same shape from each native provider and from the
-* broker-based fallback.
+* The `SnapshotAddon` wrapper returns this shape whether the frame came from
+* the device-native provider (onboard capture) or from the stream-broker
+* prebuffer fallback.
 */
 var SnapshotImageSchema = object({
 	base64: string(),
@@ -18734,10 +18910,6 @@ var snapshotCapability = {
 		kind: "poll"
 	}
 };
-method(object({ deviceId: number() }), boolean()), method(object({
-	deviceId: number(),
-	streamId: string().optional()
-}), SnapshotImageSchema.nullable());
 /**
 * `sso-bridge` — internal hub-only cap that lets SSO-style auth
 * providers (OIDC, SAML, magic-link, …) mint an HMAC-signed token
@@ -19098,9 +19270,10 @@ method(object({
 	auth: "admin"
 });
 /**
-* Optional client-side hints sent at session creation to help the
-* provider pick the best native source. All fields are optional —
-* a viewer that knows nothing still gets a sane default.
+* Optional client-side hints sent at session creation to help the provider
+* pick the best native source. All fields optional — a viewer that knows
+* nothing still gets a sane default. (Relocated from the retired `webrtc`
+* collection cap; this `webrtc-session` cap is the live signaling surface.)
 */
 var webrtcClientHintsSchema = object({
 	viewportWidth: number().int().positive().optional(),
@@ -19111,22 +19284,6 @@ var webrtcClientHintsSchema = object({
 	/** Hard tier override; takes precedence over scoring when registered. */
 	prefersTier: string().optional()
 }).partial();
-method(object({
-	streamId: string(),
-	sdpOffer: string()
-}), string(), { kind: "mutation" }), method(object({ streamId: string() }), boolean()), method(object({
-	streamId: string(),
-	codec: string()
-}), _void(), { kind: "mutation" }), method(object({ streamId: string() }), _void(), { kind: "mutation" }), method(object({
-	streamId: string(),
-	hints: webrtcClientHintsSchema.optional()
-}), object({
-	sessionId: string(),
-	sdpOffer: string()
-}), { kind: "mutation" }), method(object({
-	sessionId: string(),
-	sdpAnswer: string()
-}), _void(), { kind: "mutation" }), method(object({ sessionId: string() }), _void(), { kind: "mutation" }), method(object({ streamId: string() }), boolean());
 /**
 * Discriminated target for a WebRTC session. The client sends this
 * structured object instead of building / parsing brokerId strings;
@@ -19613,7 +19770,15 @@ var FrameworkPackageStatusSchema = object({
 	latestVersion: string().nullable(),
 	hasUpdate: boolean(),
 	/** Optional manifest description for the row tooltip. */
-	description: string().optional()
+	description: string().optional(),
+	/**
+	* Content build-id (md5 of the resolved `dist/` tree) of the code the hub
+	* ACTUALLY loaded. Framework packages ship code changes without always
+	* bumping `currentVersion`, so semver alone hides "same version, new code".
+	* `null` when the dist can't be hashed (not installed / empty). The admin-UI
+	* surfaces this so a stale-code hub is visible even at an unchanged version.
+	*/
+	buildId: string().nullable()
 });
 var LogStreamEntrySchema = object({
 	timestamp: string(),
@@ -24174,6 +24339,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineExecutor.resetToDefault": {
+		capName: "pipeline-executor",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineExecutor.runAudioTest": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -24222,6 +24393,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineExecutor.validatePipeline": {
+		capName: "pipeline-executor",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.assignAudio": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -24330,6 +24507,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getIngestOwner": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getPipelineAssignment": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -24402,6 +24585,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setAgentReachableHost": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.setCameraPipelineForAgent": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -24732,24 +24921,6 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"restreamer.getExposedResources": {
-		capName: "restreamer",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"restreamer.registerDevice": {
-		capName: "restreamer",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
-	"restreamer.unregisterDevice": {
-		capName: "restreamer",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"scriptRunner.run": {
 		capName: "script-runner",
 		capScope: "device",
@@ -24852,18 +25023,6 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"snapshotProvider.getSnapshot": {
-		capName: "snapshot-provider",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"snapshotProvider.supportsDevice": {
-		capName: "snapshot-provider",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"ssoBridge.signBridgeToken": {
 		capName: "sso-bridge",
 		capScope: "system",
@@ -25290,30 +25449,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"streamingEngine.getStreamUrl": {
-		capName: "streaming-engine",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"streamingEngine.listStreams": {
-		capName: "streaming-engine",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"streamingEngine.registerStream": {
-		capName: "streaming-engine",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
-	"streamingEngine.unregisterStream": {
-		capName: "streaming-engine",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"streamParams.getConfigSchema": {
 		capName: "stream-params",
 		capScope: "device",
@@ -25680,54 +25815,6 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"webrtc.closeSession": {
-		capName: "webrtc",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
-	"webrtc.createSession": {
-		capName: "webrtc",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
-	"webrtc.handleAnswer": {
-		capName: "webrtc",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
-	"webrtc.handleOffer": {
-		capName: "webrtc",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
-	"webrtc.hasAdaptiveBitrate": {
-		capName: "webrtc",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"webrtc.registerStream": {
-		capName: "webrtc",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
-	"webrtc.supportsStream": {
-		capName: "webrtc",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
-	"webrtc.unregisterStream": {
-		capName: "webrtc",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"webrtcSession.addIceCandidate": {
 		capName: "webrtc-session",
 		capScope: "device",
@@ -25941,6 +26028,72 @@ function maskUrlCredentials(rawUrl) {
 		return rawUrl;
 	}
 }
+//#endregion
+//#region src/rtsp-reachability.ts
+/**
+* Control-plane reachability probe for a generic RTSP camera.
+*
+* Unlike Hikvision/Amcrest/ONVIF, an RTSP source exposes NO management API —
+* we only have an `rtsp://` URL. Reachability is therefore probed at the RTSP
+* control channel itself:
+*
+*   1. open a TCP connection to the RTSP `host:port` (default 554);
+*   2. best-effort send an RTSP `OPTIONS` request;
+*   3. treat an `RTSP/…` response OR a successful TCP handshake (even without
+*      a response before the deadline) as REACHABLE.
+*
+* A successful TCP handshake already proves the camera's RTSP port is live —
+* the `OPTIONS` round-trip is a stronger confirmation when the server answers
+* promptly, but we deliberately fall back to the bare connect so a camera that
+* gates `OPTIONS` behind auth (or is simply slow to answer) is not wrongly
+* marked offline.
+*
+* The socket is always destroyed; the probe never throws and resolves within
+* `timeoutMs`.
+*/
+var DEFAULT_RTSP_PORT = 554;
+/** Parse `host` + `port` out of an `rtsp://` URL. Credentials/path ignored. */
+function parseRtspTarget(url) {
+	try {
+		const parsed = new URL(url);
+		if (!parsed.hostname) return null;
+		const port = parsed.port ? Number.parseInt(parsed.port, 10) : DEFAULT_RTSP_PORT;
+		if (!Number.isFinite(port) || port <= 0 || port > 65535) return null;
+		return {
+			host: parsed.hostname,
+			port
+		};
+	} catch {
+		return null;
+	}
+}
+async function probeRtspReachable(url, timeoutMs) {
+	const target = parseRtspTarget(url);
+	if (!target) return false;
+	return new Promise((resolve) => {
+		let settled = false;
+		let connected = false;
+		const socket = new node_net.default.Socket();
+		const finish = (reachable) => {
+			if (settled) return;
+			settled = true;
+			socket.destroy();
+			resolve(reachable);
+		};
+		socket.setTimeout(timeoutMs);
+		socket.once("timeout", () => finish(connected));
+		socket.once("error", () => finish(false));
+		socket.once("connect", () => {
+			connected = true;
+			const request = `OPTIONS ${url} RTSP/1.0\r\nCSeq: 1\r\nUser-Agent: camstack-reachability\r\n\r\n`;
+			socket.write(request, () => {});
+		});
+		socket.once("data", (buf) => {
+			finish(buf.toString("latin1").startsWith("RTSP/") || connected);
+		});
+		socket.connect(target.port, target.host);
+	});
+}
 var rtspCameraSchema = object({
 	streams: preprocess((raw) => {
 		if (!Array.isArray(raw)) return raw;
@@ -25978,15 +26131,44 @@ var legacyStreamSchema = object({
 	label: CamProfileSchema,
 	url: string()
 });
-var RtspCamera = class extends BaseDevice {
+var RtspCamera = class RtspCamera extends BaseDevice {
 	type = DeviceType.Camera;
 	features = [];
+	/** Control-plane reachability poll — an RTSP `OPTIONS`/TCP-connect probe to
+	*  the camera's RTSP port every 30s drives `device.online`, decoupled from
+	*  stream-broker video health. Started in `onActivate`, stopped in
+	*  `removeDevice`. */
+	reachabilityPoll = null;
 	constructor(ctx) {
 		super(ctx, rtspCameraSchema, { type: DeviceType.Camera });
 		this.migrateLegacyStreamsIfNeeded(ctx.persistedConfig ?? {});
 		this.registerSnapshotProvider();
 		this.registerStreamCatalogProvider();
 	}
+	/** Phase 5 — device is live: begin the control-plane reachability poll. */
+	async onActivate() {
+		this.startReachabilityPolling();
+	}
+	/** Start the RTSP reachability poll: a lightweight `OPTIONS`/TCP-connect
+	*  probe to the first configured stream's `host:port` every 30s drives
+	*  `device.online`, with hysteresis. Idempotent. */
+	startReachabilityPolling() {
+		if (this.reachabilityPoll) return;
+		this.reachabilityPoll = startReachabilityPoll({
+			probe: async () => {
+				const url = this.config.get("streams")[0]?.url;
+				if (!url) return false;
+				return probeRtspReachable(url, RtspCamera.RTSP_PROBE_TIMEOUT_MS);
+			},
+			setOnline: (online) => {
+				this.markOnline(online);
+			},
+			isEnabled: () => !this.disabled,
+			logger: this.ctx.logger
+		});
+	}
+	/** Per-probe TCP/RTSP round-trip budget — a dead host resolves as a miss. */
+	static RTSP_PROBE_TIMEOUT_MS = 5e3;
 	/**
 	* Build this camera's pull-able stream catalog — the descriptors the
 	* stream-broker needs to dial. Single source of truth feeding the
@@ -26077,6 +26259,8 @@ var RtspCamera = class extends BaseDevice {
 	}
 	async removeDevice() {
 		this.ctx.logger.info("Removing RTSP camera", { meta: { stableId: this.stableId } });
+		this.reachabilityPoll?.stop();
+		this.reachabilityPoll = null;
 		const streams = this.config.get("streams");
 		await Promise.all(streams.map((s) => this.ctx.api.streamBroker.retractCameraStream.mutate({
 			deviceId: this.id,
@@ -26354,21 +26538,7 @@ var RtspProviderAddon = class extends BaseDeviceProvider {
 		super({});
 	}
 	async onInitialize() {
-		const regs = await super.onInitialize();
-		this.subscribe({ category: EventCategory.DeviceStateChanged }, (event) => {
-			const data = event.data;
-			if (data.capName !== "camera-streams") return;
-			const deviceId = data.deviceId;
-			if (typeof deviceId !== "number") return;
-			const registry = this.ctx.kernel.deviceRegistry;
-			if (!registry) return;
-			if (registry.getAddonId(deviceId) !== this.addonId) return;
-			const device = registry.getById(deviceId);
-			if (!device) return;
-			const online = data.slice?.online === true;
-			if (device.online !== online) device.online = online;
-		});
-		return regs;
+		return await super.onInitialize();
 	}
 	async onGetCreationSchema(type) {
 		if (type !== DeviceType.Camera) return null;