@camstack/addon-remote-storage 1.2.26 → 1.2.27

package/dist/s3.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-UN8idVfB.js");
+const require_shared = require("./shared-DSlbJzYc.js");
 let node_stream = require("node:stream");
 let _aws_sdk_client_s3 = require("@aws-sdk/client-s3");
 let _aws_sdk_lib_storage = require("@aws-sdk/lib-storage");

package/dist/s3.addon.mjs

@@ -1,4 +1,4 @@
-import { c as BaseAddon, i as rearmIdleAbort, n as getOptionalBasePath, o as scheduleIdleAbort, s as storageProviderCapability, t as createSessionId } from "./shared-BwialOVX.mjs";
+import { c as BaseAddon, i as rearmIdleAbort, n as getOptionalBasePath, o as scheduleIdleAbort, s as storageProviderCapability, t as createSessionId } from "./shared-3YApqgLa.mjs";
 import { PassThrough } from "node:stream";
 import { DeleteObjectCommand, GetObjectCommand, HeadBucketCommand, HeadObjectCommand, ListObjectsV2Command, PutObjectCommand, S3Client } from "@aws-sdk/client-s3";
 import { Upload } from "@aws-sdk/lib-storage";

package/dist/sftp.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-UN8idVfB.js");
+const require_shared = require("./shared-DSlbJzYc.js");
 let ssh2 = require("ssh2");
 let node_path = require("node:path");
 node_path = require_shared.__toESM(node_path);

package/dist/sftp.addon.mjs

@@ -1,4 +1,4 @@
-import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-BwialOVX.mjs";
+import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-3YApqgLa.mjs";
 import { Client } from "ssh2";
 import * as path from "node:path";
 //#region src/providers/sftp/sftp-config-schema.ts

package/dist/{shared-BwialOVX.mjs → shared-3YApqgLa.mjs}

@@ -5802,6 +5802,13 @@ var BaseAddon = class {
 	_readinessGeneration = typeof crypto !== "undefined" && crypto.randomUUID ? crypto.randomUUID() : Math.random().toString(36).slice(2, 14);
 	/** Capability names this addon registered at init — used to emit matching `down` events on shutdown. */
 	_registeredCapNames = [];
+	/**
+	* True only after `readAddonStore` actually answered. Constructor
+	* defaults look like stored config when the store is down — a forked
+	* addon that auto-starts from those defaults (cloudflare-tunnel quick
+	* mode, 2026-08-25) is not "the operator chose this".
+	*/
+	settingsStoreReady = false;
 	/** Default config values. Provided via constructor. */
 	defaults;
 	constructor(defaults) {
@@ -6202,7 +6209,9 @@ var BaseAddon = class {
 		];
 		let lastErr;
 		for (let attempt = 0; attempt <= delaysMs.length; attempt++) try {
-			return await settings.readAddonStore() ?? {};
+			const stored = await settings.readAddonStore() ?? {};
+			this.settingsStoreReady = true;
+			return stored;
 		} catch (err) {
 			lastErr = err;
 			const msg = err instanceof Error ? err.message : String(err);
@@ -6210,6 +6219,7 @@ var BaseAddon = class {
 			if (attempt === delaysMs.length) break;
 			await new Promise((r) => setTimeout(r, delaysMs[attempt]));
 		}
+		this.settingsStoreReady = false;
 		this._ctx?.logger?.warn?.("readAddonStore: settings-store unavailable after retries — using defaults", { meta: { error: lastErr instanceof Error ? lastErr.message : String(lastErr) } });
 		return {};
 	}
@@ -8097,6 +8107,12 @@ var ModelVariantGroupSchema = object({
 	*/
 	resolution: number().int().positive().optional()
 });
+var ModelProviderIdSchema = _enum([
+	"camstack",
+	"frigate",
+	"scrypted",
+	"custom"
+]);
 var ModelCatalogEntrySchema = object({
 	id: string(),
 	name: string(),
@@ -8194,6 +8210,12 @@ var ModelCatalogEntrySchema = object({
 	*/
 	group: ModelVariantGroupSchema.optional(),
 	/**
+	* Catalog source for the pipeline stepper's provider-first picker. Absent on
+	* built-in CamStack entries (treated as `camstack`) and on registry rows
+	* persisted before this field existed (`inferModelProvider` fills those).
+	*/
+	provider: ModelProviderIdSchema.optional(),
+	/**
 	* Per-MODEL class map override. Absent ⇒ the step's `StepDefinition.classMap`
 	* applies (Frigate / COCO public catalog). Set on a custom model whose raw
 	* labels already ARE the CamStack macros (Scrypted identity map).
@@ -11721,6 +11743,27 @@ var LinkedDeviceSchema = object({
 	features: array(string()),
 	producesTrackedEvents: boolean().optional()
 });
+/** One camera's resolved linked set, tagged with the camera it belongs to.
+*  The batch answer needs the tag; the single-device answer already has it
+*  from the input, which is why `getLinkedDevices` keeps the untagged shape. */
+var LinkedDevicesForDeviceSchema = object({
+	deviceId: number(),
+	mode: LinkedDevicesModeSchema,
+	devices: array(LinkedDeviceSchema)
+});
+/** One device's binding map — the shape `getBindings`, `getBindingsBatch` and
+*  `getAllBindings` all answer in. Declared once: three copies of the same
+*  object literal is exactly how the three drift apart. */
+var DeviceBindingsForDeviceSchema = object({
+	deviceId: number(),
+	entries: array(object({
+		capName: string(),
+		kind: _enum(["native", "wrapped"]),
+		providerAddonId: string(),
+		providerNodeId: string(),
+		nativeAddonId: string()
+	}))
+});
 var SavedDeviceRowSchema = object({
 	/** Numeric id reserved at allocateDeviceId time. */
 	id: number(),
@@ -11946,11 +11989,25 @@ method(object({
 	projection: _enum(["full", "slim"]).optional(),
 	/** Return only camera devices. Filtering server-side instead of
 	*  shipping 293 rows to find 12. */
-	isCamera: boolean().optional()
+	isCamera: boolean().optional(),
+	/**
+	* Return only these device ids. For the caller that already KNOWS the
+	* handful it wants and needs a field the id-bearing answer does not
+	* carry — the viewer's linked-devices panel joins `type` and `online`
+	* onto ~8 linked ids and, unfiltered, dragged the fleet across to do
+	* it: 433 KB slim / 958 KB full for 967 devices, on a query that
+	* refetches on the reconcile interval, on a phone.
+	*
+	* Safe to send at a hub that predates it: Zod STRIPS unknown input
+	* keys rather than rejecting them (verified against the live hub
+	* 2026-08-25 — 967 rows came back), so an old hub answers exactly what
+	* it answers today and the caller filters as it already does.
+	*/
+	deviceIds: array(number()).optional()
 }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), DeviceInfoSchema.nullable()), method(object({ parentDeviceId: number() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), object({
 	mode: LinkedDevicesModeSchema,
 	devices: array(LinkedDeviceSchema)
-})), method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
+})), method(object({ deviceIds: array(number()) }), array(LinkedDevicesForDeviceSchema)), method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
 	deviceId: number(),
 	values: record(string(), unknown())
 }), object({ success: literal(true) }), {
@@ -11977,25 +12034,7 @@ method(object({
 }), method(object({ deviceId: number() }), array(StreamProbeResultSchema), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), object({
-	deviceId: number(),
-	entries: array(object({
-		capName: string(),
-		kind: _enum(["native", "wrapped"]),
-		providerAddonId: string(),
-		providerNodeId: string(),
-		nativeAddonId: string()
-	}))
-})), method(object({}), array(object({
-	deviceId: number(),
-	entries: array(object({
-		capName: string(),
-		kind: _enum(["native", "wrapped"]),
-		providerAddonId: string(),
-		providerNodeId: string(),
-		nativeAddonId: string()
-	}))
-}))), method(object({
+}), method(object({ deviceId: number() }), DeviceBindingsForDeviceSchema), method(object({ deviceIds: array(number()) }), array(DeviceBindingsForDeviceSchema)), method(object({}), array(DeviceBindingsForDeviceSchema)), method(object({
 	deviceId: number(),
 	capName: string(),
 	wrapperAddonId: string(),
@@ -14367,12 +14406,15 @@ var NcOccupancyConditionSchema = object({
 * there is no second switch that can disagree with the first and every rule
 * authored before the decision migrates for free (`audioModeOf`):
 *
-*  - **LABEL mode — `labels` present.** The rule fires on the FIRST frame the
-*    classifier labels with one of them. No window, no percentage:
-*    `hitPercent` and `samplingSeconds` are ignored, and the rule's own
-*    `throttle` cooldown is the only brake. The per-label confidence floor is
-*    the analyzer's (`classificationMinScore`, per device) — a label only
-*    reaches this condition if the classifier was already confident enough.
+*  - **LABEL mode — `labels` present.** The rule fires when `confirmHits`
+*    labelled frames land inside `confirmWindowSec` (default 2 in 5 s).
+*    `hitPercent` and `samplingSeconds` are still ignored — a percentage of
+*    frames is the wrong question for a classifier that labels 1–3 frames
+*    per episode. The count window is the brake that drops a single-frame
+*    false positive; the rule's own `throttle` cooldown is the other. The
+*    per-label confidence floor is the analyzer's (`classificationMinScore`,
+*    per device) — a label only reaches this condition if the classifier was
+*    already confident enough. `confirmHits: 1` restores first-frame fire.
 *  - **LEVEL mode — `dbThreshold` present, no labels.** The sampling window IS
 *    the condition: at least `hitPercent`% of the samples over
 *    `samplingSeconds` must be at or above `dbThreshold` dBFS (see
@@ -14399,14 +14441,22 @@ var NcOccupancyConditionSchema = object({
 * an operator who typed `dog` mean the same thing.
 */
 var NcAudioConditionSchema = object({
-	/** LABEL MODE: audio macro labels. Present ⇒ fires on the first labelled frame. */
+	/** LABEL MODE: audio macro labels. Present ⇒ count-in-window confirm. */
 	labels: array(string().min(1)).min(1).optional(),
 	/** LEVEL MODE: floor in dBFS (negative-going, `0` = full scale). */
 	dbThreshold: number().min(-96).max(0).optional(),
 	/** LEVEL MODE ONLY: percentage of the window's samples that must be hits (1–100). */
 	hitPercent: number().int().min(1).max(100).default(60),
 	/** LEVEL MODE ONLY: length of the sampling window in seconds. */
-	samplingSeconds: number().int().min(1).max(300).default(10)
+	samplingSeconds: number().int().min(1).max(300).default(10),
+	/**
+	* LABEL MODE: how many labelled frames must land inside
+	* {@link NcAudioConditionSchema.shape.confirmWindowSec} before dispatch.
+	* Absent ⇒ 2 (the matcher default). `1` is first-frame fire.
+	*/
+	confirmHits: number().int().min(1).max(20).optional(),
+	/** LABEL MODE: the window those frames must share, in seconds. Absent ⇒ 5. */
+	confirmWindowSec: number().int().min(1).max(60).optional()
 });
 /**
 * Which zone-crossing DIRECTION a rule accepts (`ObjectEvent.zoneCrossing`).
@@ -16780,6 +16830,46 @@ var RecentTracksPageSchema = object({
 	/** Cursor for the next page, or null when this page is the last. */
 	nextCursor: string().nullable()
 });
+var LIST_GROUPS_DEFAULT_LIMIT = 40;
+var LIST_GROUPS_MAX_LIMIT = 100;
+var AnalyticsGroupRecordSchema = object({
+	id: string(),
+	deviceId: number().int(),
+	openedAt: number().int(),
+	closedAt: number().int(),
+	timestamp: number().int(),
+	memberCount: number().int(),
+	memberTrackIds: array(string()).readonly(),
+	className: string(),
+	classes: array(string()).readonly(),
+	/** Relative event-media path, or null when the group has no picture yet. */
+	mediaUrl: string().nullable(),
+	singleton: boolean()
+});
+var AnalyticsGroupMemberSchema = object({
+	trackId: string(),
+	deviceId: number().int(),
+	className: string(),
+	firstSeen: number().int(),
+	lastSeen: number().int(),
+	mediaUrl: string().nullable()
+});
+var AnalyticsGroupDetailSchema = AnalyticsGroupRecordSchema.extend({ members: array(AnalyticsGroupMemberSchema).readonly() });
+var ListGroupsQueryInput = object({
+	/** Devices to merge. An empty array yields `{ groups: [], nextCursor: null }`. */
+	deviceIds: array(number()),
+	/** Window lower bound on `closedAt` (inclusive). */
+	since: number().optional(),
+	/** Window upper bound on `openedAt` (inclusive). */
+	until: number().optional(),
+	limit: number().int().min(1).max(LIST_GROUPS_MAX_LIMIT).default(LIST_GROUPS_DEFAULT_LIMIT),
+	/** Opaque continuation cursor from a previous page's `nextCursor`. */
+	cursor: string().optional()
+});
+var ListGroupsPageSchema = object({
+	groups: array(AnalyticsGroupRecordSchema).readonly(),
+	nextCursor: string().nullable()
+});
 var KeyEventQueryInput = object({
 	deviceId: number(),
 	/** Window lower bound (track firstSeen ≥ since). */
@@ -16855,7 +16945,9 @@ var TrackCascadeCountsSchema = object({
 	/** Unassigned plate reads removed (best-effort; plate leg deferred to plate-intelligence). */
 	plates: number().int(),
 	/** Per-track CLIP search vectors removed (best-effort). */
-	embeddings: number().int()
+	embeddings: number().int(),
+	/** Group membership + group rows removed with their last member (best-effort). */
+	groups: number().int()
 });
 /** Disk-wins reconcile: media rows whose blobs are gone, then empty tracks. */
 var DiskReconcileCountsSchema = object({
@@ -17001,7 +17093,10 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	*  stationary registry). Default false: the timeline lists passages,
 	*  not parking records (operator decision, 2026-08-15). */
 	includeStationary: boolean().optional()
-}), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(object({ deviceId: number() }), _void(), {
+}), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(ListGroupsQueryInput, ListGroupsPageSchema), method(object({
+	deviceId: number(),
+	groupId: string().min(1)
+}), AnalyticsGroupDetailSchema.nullable()), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(DeviceEventQueryInput, array(MotionEventSchema).readonly()), method(ObjectEventQueryInput, array(ObjectEventSchema).readonly()), method(DeviceEventQueryInput, array(AudioEventSchema).readonly()), method(object({ deviceId: number() }), array(EventKindDescriptorSchema).readonly()), method(object({ deviceIds: array(number()).min(1).max(200) }), array(EventKindsForDeviceSchema).readonly()), method(object({
@@ -17311,7 +17406,8 @@ var PipelineModelOptionSchema = object({
 		sizeMB: number()
 	})),
 	group: ModelVariantGroupSchema.optional(),
-	legacy: boolean().optional()
+	legacy: boolean().optional(),
+	provider: ModelProviderIdSchema.optional()
 });
 var ConfigFieldBridge = custom();
 var PipelineAddonSchemaSchema = object({
@@ -23940,7 +24036,12 @@ var PlateInfoSchema = object({
 	plateBbox: BoundingBoxSchema.optional(),
 	/** keyFrame parity: MediaStore key of the track's native-resolution key frame. */
 	keyFrameMediaKey: string().optional(),
-	base64: string().optional()
+	base64: string().optional(),
+	/**
+	* Same crop as a data-plane URL. `getPlateByTrack` returns this and
+	* never inlines JPEG; `listPlates` still inlines for the admin-ui.
+	*/
+	cropUrl: string().optional()
 });
 var MediaFileLiteSchema = object({
 	key: string(),
@@ -27580,6 +27681,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getBindingsBatch": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.getChildren": {
 		capName: "device-manager",
 		capScope: "system",
@@ -27640,6 +27747,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getLinkedDevicesBatch": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.getRoleDisplayDefaults": {
 		capName: "device-manager",
 		capScope: "system",
@@ -29410,6 +29523,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getGroup": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getKeyEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -29494,6 +29613,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listGroups": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listOpsLog": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -32275,6 +32400,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getBindingsBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"deviceManager.getChildren": [{
 		name: "parentDeviceId",
 		form: "single",
@@ -32320,6 +32450,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getLinkedDevicesBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"deviceManager.getSettingsSchema": [{
 		name: "deviceId",
 		form: "single",
@@ -32340,6 +32475,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.listAll": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
 	"deviceManager.loadConfig": [{
 		name: "deviceId",
 		form: "single",
@@ -32913,6 +33053,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineAnalytics.getGroup": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineAnalytics.getKeyEvents": [{
 		name: "deviceId",
 		form: "single",
@@ -32968,6 +33113,11 @@ Object.freeze({
 		form: "array",
 		optional: false
 	}],
+	"pipelineAnalytics.listGroups": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"pipelineAnalytics.listOpsLog": [{
 		name: "deviceId",
 		form: "single",

package/dist/{shared-UN8idVfB.js → shared-DSlbJzYc.js}

@@ -5825,6 +5825,13 @@ var BaseAddon = class {
 	_readinessGeneration = typeof crypto !== "undefined" && crypto.randomUUID ? crypto.randomUUID() : Math.random().toString(36).slice(2, 14);
 	/** Capability names this addon registered at init — used to emit matching `down` events on shutdown. */
 	_registeredCapNames = [];
+	/**
+	* True only after `readAddonStore` actually answered. Constructor
+	* defaults look like stored config when the store is down — a forked
+	* addon that auto-starts from those defaults (cloudflare-tunnel quick
+	* mode, 2026-08-25) is not "the operator chose this".
+	*/
+	settingsStoreReady = false;
 	/** Default config values. Provided via constructor. */
 	defaults;
 	constructor(defaults) {
@@ -6225,7 +6232,9 @@ var BaseAddon = class {
 		];
 		let lastErr;
 		for (let attempt = 0; attempt <= delaysMs.length; attempt++) try {
-			return await settings.readAddonStore() ?? {};
+			const stored = await settings.readAddonStore() ?? {};
+			this.settingsStoreReady = true;
+			return stored;
 		} catch (err) {
 			lastErr = err;
 			const msg = err instanceof Error ? err.message : String(err);
@@ -6233,6 +6242,7 @@ var BaseAddon = class {
 			if (attempt === delaysMs.length) break;
 			await new Promise((r) => setTimeout(r, delaysMs[attempt]));
 		}
+		this.settingsStoreReady = false;
 		this._ctx?.logger?.warn?.("readAddonStore: settings-store unavailable after retries — using defaults", { meta: { error: lastErr instanceof Error ? lastErr.message : String(lastErr) } });
 		return {};
 	}
@@ -8120,6 +8130,12 @@ var ModelVariantGroupSchema = object({
 	*/
 	resolution: number().int().positive().optional()
 });
+var ModelProviderIdSchema = _enum([
+	"camstack",
+	"frigate",
+	"scrypted",
+	"custom"
+]);
 var ModelCatalogEntrySchema = object({
 	id: string(),
 	name: string(),
@@ -8217,6 +8233,12 @@ var ModelCatalogEntrySchema = object({
 	*/
 	group: ModelVariantGroupSchema.optional(),
 	/**
+	* Catalog source for the pipeline stepper's provider-first picker. Absent on
+	* built-in CamStack entries (treated as `camstack`) and on registry rows
+	* persisted before this field existed (`inferModelProvider` fills those).
+	*/
+	provider: ModelProviderIdSchema.optional(),
+	/**
 	* Per-MODEL class map override. Absent ⇒ the step's `StepDefinition.classMap`
 	* applies (Frigate / COCO public catalog). Set on a custom model whose raw
 	* labels already ARE the CamStack macros (Scrypted identity map).
@@ -11744,6 +11766,27 @@ var LinkedDeviceSchema = object({
 	features: array(string()),
 	producesTrackedEvents: boolean().optional()
 });
+/** One camera's resolved linked set, tagged with the camera it belongs to.
+*  The batch answer needs the tag; the single-device answer already has it
+*  from the input, which is why `getLinkedDevices` keeps the untagged shape. */
+var LinkedDevicesForDeviceSchema = object({
+	deviceId: number(),
+	mode: LinkedDevicesModeSchema,
+	devices: array(LinkedDeviceSchema)
+});
+/** One device's binding map — the shape `getBindings`, `getBindingsBatch` and
+*  `getAllBindings` all answer in. Declared once: three copies of the same
+*  object literal is exactly how the three drift apart. */
+var DeviceBindingsForDeviceSchema = object({
+	deviceId: number(),
+	entries: array(object({
+		capName: string(),
+		kind: _enum(["native", "wrapped"]),
+		providerAddonId: string(),
+		providerNodeId: string(),
+		nativeAddonId: string()
+	}))
+});
 var SavedDeviceRowSchema = object({
 	/** Numeric id reserved at allocateDeviceId time. */
 	id: number(),
@@ -11969,11 +12012,25 @@ method(object({
 	projection: _enum(["full", "slim"]).optional(),
 	/** Return only camera devices. Filtering server-side instead of
 	*  shipping 293 rows to find 12. */
-	isCamera: boolean().optional()
+	isCamera: boolean().optional(),
+	/**
+	* Return only these device ids. For the caller that already KNOWS the
+	* handful it wants and needs a field the id-bearing answer does not
+	* carry — the viewer's linked-devices panel joins `type` and `online`
+	* onto ~8 linked ids and, unfiltered, dragged the fleet across to do
+	* it: 433 KB slim / 958 KB full for 967 devices, on a query that
+	* refetches on the reconcile interval, on a phone.
+	*
+	* Safe to send at a hub that predates it: Zod STRIPS unknown input
+	* keys rather than rejecting them (verified against the live hub
+	* 2026-08-25 — 967 rows came back), so an old hub answers exactly what
+	* it answers today and the caller filters as it already does.
+	*/
+	deviceIds: array(number()).optional()
 }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), DeviceInfoSchema.nullable()), method(object({ parentDeviceId: number() }), array(DeviceInfoSchema)), method(object({ deviceId: number() }), object({
 	mode: LinkedDevicesModeSchema,
 	devices: array(LinkedDeviceSchema)
-})), method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
+})), method(object({ deviceIds: array(number()) }), array(LinkedDevicesForDeviceSchema)), method(object({ deviceId: number() }), array(StreamSourceEntrySchema$1)), method(object({ deviceId: number() }), array(ConfigEntrySchema)), method(object({ deviceId: number() }), ConfigUISchemaOutput), method(object({
 	deviceId: number(),
 	values: record(string(), unknown())
 }), object({ success: literal(true) }), {
@@ -12000,25 +12057,7 @@ method(object({
 }), method(object({ deviceId: number() }), array(StreamProbeResultSchema), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), object({
-	deviceId: number(),
-	entries: array(object({
-		capName: string(),
-		kind: _enum(["native", "wrapped"]),
-		providerAddonId: string(),
-		providerNodeId: string(),
-		nativeAddonId: string()
-	}))
-})), method(object({}), array(object({
-	deviceId: number(),
-	entries: array(object({
-		capName: string(),
-		kind: _enum(["native", "wrapped"]),
-		providerAddonId: string(),
-		providerNodeId: string(),
-		nativeAddonId: string()
-	}))
-}))), method(object({
+}), method(object({ deviceId: number() }), DeviceBindingsForDeviceSchema), method(object({ deviceIds: array(number()) }), array(DeviceBindingsForDeviceSchema)), method(object({}), array(DeviceBindingsForDeviceSchema)), method(object({
 	deviceId: number(),
 	capName: string(),
 	wrapperAddonId: string(),
@@ -14390,12 +14429,15 @@ var NcOccupancyConditionSchema = object({
 * there is no second switch that can disagree with the first and every rule
 * authored before the decision migrates for free (`audioModeOf`):
 *
-*  - **LABEL mode — `labels` present.** The rule fires on the FIRST frame the
-*    classifier labels with one of them. No window, no percentage:
-*    `hitPercent` and `samplingSeconds` are ignored, and the rule's own
-*    `throttle` cooldown is the only brake. The per-label confidence floor is
-*    the analyzer's (`classificationMinScore`, per device) — a label only
-*    reaches this condition if the classifier was already confident enough.
+*  - **LABEL mode — `labels` present.** The rule fires when `confirmHits`
+*    labelled frames land inside `confirmWindowSec` (default 2 in 5 s).
+*    `hitPercent` and `samplingSeconds` are still ignored — a percentage of
+*    frames is the wrong question for a classifier that labels 1–3 frames
+*    per episode. The count window is the brake that drops a single-frame
+*    false positive; the rule's own `throttle` cooldown is the other. The
+*    per-label confidence floor is the analyzer's (`classificationMinScore`,
+*    per device) — a label only reaches this condition if the classifier was
+*    already confident enough. `confirmHits: 1` restores first-frame fire.
 *  - **LEVEL mode — `dbThreshold` present, no labels.** The sampling window IS
 *    the condition: at least `hitPercent`% of the samples over
 *    `samplingSeconds` must be at or above `dbThreshold` dBFS (see
@@ -14422,14 +14464,22 @@ var NcOccupancyConditionSchema = object({
 * an operator who typed `dog` mean the same thing.
 */
 var NcAudioConditionSchema = object({
-	/** LABEL MODE: audio macro labels. Present ⇒ fires on the first labelled frame. */
+	/** LABEL MODE: audio macro labels. Present ⇒ count-in-window confirm. */
 	labels: array(string().min(1)).min(1).optional(),
 	/** LEVEL MODE: floor in dBFS (negative-going, `0` = full scale). */
 	dbThreshold: number().min(-96).max(0).optional(),
 	/** LEVEL MODE ONLY: percentage of the window's samples that must be hits (1–100). */
 	hitPercent: number().int().min(1).max(100).default(60),
 	/** LEVEL MODE ONLY: length of the sampling window in seconds. */
-	samplingSeconds: number().int().min(1).max(300).default(10)
+	samplingSeconds: number().int().min(1).max(300).default(10),
+	/**
+	* LABEL MODE: how many labelled frames must land inside
+	* {@link NcAudioConditionSchema.shape.confirmWindowSec} before dispatch.
+	* Absent ⇒ 2 (the matcher default). `1` is first-frame fire.
+	*/
+	confirmHits: number().int().min(1).max(20).optional(),
+	/** LABEL MODE: the window those frames must share, in seconds. Absent ⇒ 5. */
+	confirmWindowSec: number().int().min(1).max(60).optional()
 });
 /**
 * Which zone-crossing DIRECTION a rule accepts (`ObjectEvent.zoneCrossing`).
@@ -16803,6 +16853,46 @@ var RecentTracksPageSchema = object({
 	/** Cursor for the next page, or null when this page is the last. */
 	nextCursor: string().nullable()
 });
+var LIST_GROUPS_DEFAULT_LIMIT = 40;
+var LIST_GROUPS_MAX_LIMIT = 100;
+var AnalyticsGroupRecordSchema = object({
+	id: string(),
+	deviceId: number().int(),
+	openedAt: number().int(),
+	closedAt: number().int(),
+	timestamp: number().int(),
+	memberCount: number().int(),
+	memberTrackIds: array(string()).readonly(),
+	className: string(),
+	classes: array(string()).readonly(),
+	/** Relative event-media path, or null when the group has no picture yet. */
+	mediaUrl: string().nullable(),
+	singleton: boolean()
+});
+var AnalyticsGroupMemberSchema = object({
+	trackId: string(),
+	deviceId: number().int(),
+	className: string(),
+	firstSeen: number().int(),
+	lastSeen: number().int(),
+	mediaUrl: string().nullable()
+});
+var AnalyticsGroupDetailSchema = AnalyticsGroupRecordSchema.extend({ members: array(AnalyticsGroupMemberSchema).readonly() });
+var ListGroupsQueryInput = object({
+	/** Devices to merge. An empty array yields `{ groups: [], nextCursor: null }`. */
+	deviceIds: array(number()),
+	/** Window lower bound on `closedAt` (inclusive). */
+	since: number().optional(),
+	/** Window upper bound on `openedAt` (inclusive). */
+	until: number().optional(),
+	limit: number().int().min(1).max(LIST_GROUPS_MAX_LIMIT).default(LIST_GROUPS_DEFAULT_LIMIT),
+	/** Opaque continuation cursor from a previous page's `nextCursor`. */
+	cursor: string().optional()
+});
+var ListGroupsPageSchema = object({
+	groups: array(AnalyticsGroupRecordSchema).readonly(),
+	nextCursor: string().nullable()
+});
 var KeyEventQueryInput = object({
 	deviceId: number(),
 	/** Window lower bound (track firstSeen ≥ since). */
@@ -16878,7 +16968,9 @@ var TrackCascadeCountsSchema = object({
 	/** Unassigned plate reads removed (best-effort; plate leg deferred to plate-intelligence). */
 	plates: number().int(),
 	/** Per-track CLIP search vectors removed (best-effort). */
-	embeddings: number().int()
+	embeddings: number().int(),
+	/** Group membership + group rows removed with their last member (best-effort). */
+	groups: number().int()
 });
 /** Disk-wins reconcile: media rows whose blobs are gone, then empty tracks. */
 var DiskReconcileCountsSchema = object({
@@ -17024,7 +17116,10 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	*  stationary registry). Default false: the timeline lists passages,
 	*  not parking records (operator decision, 2026-08-15). */
 	includeStationary: boolean().optional()
-}), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(object({ deviceId: number() }), _void(), {
+}), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(ListGroupsQueryInput, ListGroupsPageSchema), method(object({
+	deviceId: number(),
+	groupId: string().min(1)
+}), AnalyticsGroupDetailSchema.nullable()), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(DeviceEventQueryInput, array(MotionEventSchema).readonly()), method(ObjectEventQueryInput, array(ObjectEventSchema).readonly()), method(DeviceEventQueryInput, array(AudioEventSchema).readonly()), method(object({ deviceId: number() }), array(EventKindDescriptorSchema).readonly()), method(object({ deviceIds: array(number()).min(1).max(200) }), array(EventKindsForDeviceSchema).readonly()), method(object({
@@ -17334,7 +17429,8 @@ var PipelineModelOptionSchema = object({
 		sizeMB: number()
 	})),
 	group: ModelVariantGroupSchema.optional(),
-	legacy: boolean().optional()
+	legacy: boolean().optional(),
+	provider: ModelProviderIdSchema.optional()
 });
 var ConfigFieldBridge = custom();
 var PipelineAddonSchemaSchema = object({
@@ -23963,7 +24059,12 @@ var PlateInfoSchema = object({
 	plateBbox: BoundingBoxSchema.optional(),
 	/** keyFrame parity: MediaStore key of the track's native-resolution key frame. */
 	keyFrameMediaKey: string().optional(),
-	base64: string().optional()
+	base64: string().optional(),
+	/**
+	* Same crop as a data-plane URL. `getPlateByTrack` returns this and
+	* never inlines JPEG; `listPlates` still inlines for the admin-ui.
+	*/
+	cropUrl: string().optional()
 });
 var MediaFileLiteSchema = object({
 	key: string(),
@@ -27603,6 +27704,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getBindingsBatch": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.getChildren": {
 		capName: "device-manager",
 		capScope: "system",
@@ -27663,6 +27770,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.getLinkedDevicesBatch": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.getRoleDisplayDefaults": {
 		capName: "device-manager",
 		capScope: "system",
@@ -29433,6 +29546,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getGroup": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getKeyEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -29517,6 +29636,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listGroups": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listOpsLog": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -32298,6 +32423,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getBindingsBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"deviceManager.getChildren": [{
 		name: "parentDeviceId",
 		form: "single",
@@ -32343,6 +32473,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.getLinkedDevicesBatch": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"deviceManager.getSettingsSchema": [{
 		name: "deviceId",
 		form: "single",
@@ -32363,6 +32498,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceManager.listAll": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
 	"deviceManager.loadConfig": [{
 		name: "deviceId",
 		form: "single",
@@ -32936,6 +33076,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"pipelineAnalytics.getGroup": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"pipelineAnalytics.getKeyEvents": [{
 		name: "deviceId",
 		form: "single",
@@ -32991,6 +33136,11 @@ Object.freeze({
 		form: "array",
 		optional: false
 	}],
+	"pipelineAnalytics.listGroups": [{
+		name: "deviceIds",
+		form: "array",
+		optional: false
+	}],
 	"pipelineAnalytics.listOpsLog": [{
 		name: "deviceId",
 		form: "single",

package/dist/webdav.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_shared = require("./shared-UN8idVfB.js");
+const require_shared = require("./shared-DSlbJzYc.js");
 let node_stream = require("node:stream");
 let webdav = require("webdav");
 //#region src/providers/webdav/webdav-config-schema.ts

package/dist/webdav.addon.mjs

@@ -1,4 +1,4 @@
-import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-BwialOVX.mjs";
+import { a as safeJoinRemotePath, c as BaseAddon, i as rearmIdleAbort, o as scheduleIdleAbort, r as getRequiredBasePath, s as storageProviderCapability, t as createSessionId } from "./shared-3YApqgLa.mjs";
 import { PassThrough } from "node:stream";
 import { AuthType, createClient } from "webdav";
 //#region src/providers/webdav/webdav-config-schema.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-remote-storage",
-  "version": "1.2.26",
+  "version": "1.2.27",
   "description": "Remote storage providers (SFTP, S3, WebDAV) — unifies remote backends behind the storage-provider cap",
   "keywords": [
     "camstack",