@camstack/addon-tailscale 1.0.3 → 1.0.5

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-ByDiIgMC.js");
+const require_dist = require("../dist-C3Gth0Ap.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { i as networkAccessCapability, n as EventCategory, r as meshNetworkCapability, t as BaseAddon } from "../dist-DcSssCOP.mjs";
+import { i as networkAccessCapability, n as EventCategory, r as meshNetworkCapability, t as BaseAddon } from "../dist-Dr1YikI7.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-ByDiIgMC.js → dist-C3Gth0Ap.js}

@@ -4981,6 +4981,18 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineEngineMetricsSnapshot"] = "pipeline.engine-metrics-snapshot";
 	/**
+	* Per-node detection-engine runtime-provisioning transition. Emitted by
+	* the detection-pipeline provider on every state change of its lazy
+	* engine-provisioning machine (idle → installing → verifying → ready,
+	* or → failed with a `nextRetryAt`). Payload is the
+	* `EngineProvisioningState` snapshot; `event.source.nodeId` carries the
+	* node. The Pipeline page subscribes to drive a live "installing
+	* OpenVINO… / ready" indicator per node without polling
+	* `pipelineExecutor.getEngineProvisioning`. Telemetry-grade (D8): the UI
+	* also reads the cap snapshot on mount / reconnect. Phase 2.
+	*/
+	EventCategory["PipelineEngineProvisioning"] = "pipeline.engine-provisioning";
+	/**
 	* Cluster topology snapshot. Carries the same payload returned by
 	* `nodes.topology` (every reachable node + addons + processes).
 	* Emitted by the hub on any agent / addon lifecycle change
@@ -5130,14 +5142,15 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["DeviceSleeping"] = "device.sleeping";
 	EventCategory["RetentionCleanup"] = "retention.cleanup";
 	/**
-	* Progress snapshot emitted by `BulkUpdateCoordinator` on every state
-	* transition (item status change, phase change, completion, cancel).
-	* Payload is `BulkUpdateState`. Admin UI subscribes via `useLiveEvent`
-	* to drive the sticky `BulkUpdateBanner` and per-row `AddonRowBadge`.
-	*
-	* Spec: docs/superpowers/specs/2026-05-21-addons-bulk-update-progress-design.md
+	* Legacy bulk-update progress snapshot (payload `BulkUpdateState`). No longer
+	* emitted — F3 removed the coordinator that produced it; "Update all" now runs
+	* as one lifecycle engine job (`AddonsJobProgress`/`AddonsJobLog`). Retained
+	* (with `BulkUpdateState`) only to avoid regenerating the event maps; removed
+	* in F4 once live bulk progress is re-implemented over the engine events.
 	*/
 	EventCategory["AddonsBulkUpdateProgress"] = "addons.bulk-update-progress";
+	EventCategory["AddonsJobProgress"] = "addons.job-progress";
+	EventCategory["AddonsJobLog"] = "addons.job-log";
 	/**
 	* A container's child visibility toggled (hidden/shown). Emitted by the
 	* `accessories` cap when a child device is hidden or revealed.
@@ -9144,6 +9157,24 @@ var DetectorOutputSchema = object({
 	inferenceMs: number(),
 	modelId: string()
 });
+var EngineProvisioningSchema = object({
+	runtimeId: _enum([
+		"onnx",
+		"openvino",
+		"coreml"
+	]).nullable(),
+	device: string().nullable(),
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	progress: number().optional(),
+	error: string().optional(),
+	nextRetryAt: number().optional()
+});
 var PipelineStepInputSchema = lazy(() => object({
 	addonId: string(),
 	modelId: string(),
@@ -9212,7 +9243,7 @@ var PipelineRunResultBridge = custom();
 method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngineChoiceSchema), method(PipelineEngineChoiceSchema, array(PipelineDefaultStepSchema)), method(_void(), PipelineEngineChoiceSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(_void(), record(string(), object({
+}), method(object({ nodeId: string() }), EngineProvisioningSchema), method(_void(), record(string(), object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 }))), method(object({ steps: record(string(), object({
@@ -12799,7 +12830,10 @@ var AgentAddonConfigSchema = object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 });
-var AgentPipelineSettingsSchema = object({ addonDefaults: record(string(), AgentAddonConfigSchema).readonly() });
+var AgentPipelineSettingsSchema = object({
+	addonDefaults: record(string(), AgentAddonConfigSchema).readonly(),
+	maxCameras: number().int().nonnegative().nullable().default(null)
+});
 var CameraPipelineForAgentSchema = object({
 	steps: array(PipelineStepInputSchema).readonly(),
 	audio: object({
@@ -12901,6 +12935,133 @@ var GlobalMetricsSchema = object({
 * capability providers.
 */
 var CapabilityBindingsSchema = record(string(), string());
+/** Source block — always present; derives from the stream catalog. */
+var CameraSourceStatusSchema = object({ streams: array(object({
+	camStreamId: string(),
+	codec: string(),
+	width: number(),
+	height: number(),
+	fps: number(),
+	kind: string()
+})).readonly() });
+/** Assignment block — always present (orchestrator-local, no remote call). */
+var CameraAssignmentStatusSchema = object({
+	detectionNodeId: string().nullable(),
+	decoderNodeId: string().nullable(),
+	audioNodeId: string().nullable(),
+	pinned: object({
+		detection: boolean(),
+		decoder: boolean(),
+		audio: boolean()
+	}),
+	reasons: object({
+		detection: string().optional(),
+		decoder: string().optional(),
+		audio: string().optional()
+	})
+});
+/** Broker block — null when the broker stage is unreachable or inactive. */
+var CameraBrokerStatusSchema = object({
+	profiles: array(object({
+		profile: string(),
+		status: string(),
+		codec: string(),
+		width: number(),
+		height: number(),
+		subscribers: number(),
+		inFps: number(),
+		outFps: number()
+	})).readonly(),
+	webrtcSessions: number(),
+	rtspRestream: boolean()
+});
+/** Shared-memory ring statistics within the decoder block. */
+var CameraDecoderShmSchema = object({
+	framesWritten: number(),
+	getFrameHits: number(),
+	getFrameMisses: number(),
+	budgetMb: number()
+});
+/** Decoder block — null when the decoder stage is unreachable or inactive. */
+var CameraDecoderStatusSchema = object({
+	nodeId: string(),
+	formats: array(string()).readonly(),
+	sessionCount: number(),
+	shm: CameraDecoderShmSchema
+});
+/** Motion block — null when motion detection is not active for this device. */
+var CameraMotionStatusSchema = object({
+	enabled: boolean(),
+	fps: number()
+});
+/** Detection provisioning sub-block. */
+var CameraDetectionProvisioningSchema = object({
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	error: string().optional()
+});
+/** Detection phase — derived from the runner's engine phase. */
+var CameraDetectionPhaseSchema = _enum([
+	"idle",
+	"watching",
+	"active"
+]);
+/** Detection block — null when no detection node is assigned or reachable. */
+var CameraDetectionStatusSchema = object({
+	nodeId: string(),
+	engine: object({
+		backend: string(),
+		device: string()
+	}),
+	phase: CameraDetectionPhaseSchema,
+	configuredFps: number(),
+	actualFps: number(),
+	queueDepth: number(),
+	avgInferenceMs: number(),
+	provisioning: CameraDetectionProvisioningSchema
+});
+/** Audio block — null when no audio node is assigned or reachable. */
+var CameraAudioStatusSchema = object({
+	nodeId: string(),
+	enabled: boolean()
+});
+/** Recording block — null when no recording cap is active for this device. */
+var CameraRecordingStatusSchema = object({
+	mode: _enum([
+		"off",
+		"continuous",
+		"events"
+	]),
+	active: boolean(),
+	storageBytes: number()
+});
+/**
+* Aggregated per-camera pipeline status — server-composed, single call.
+*
+* The `assignment` and `source` blocks are always present.
+* Every other block is `null` when the stage is inactive or unreachable
+* during the bounded parallel fan-out in the orchestrator implementation.
+*
+* See spec: `docs/superpowers/specs/2026-06-24-camera-status-aggregator-cap.md`
+*/
+var CameraStatusSchema = object({
+	deviceId: number(),
+	assignment: CameraAssignmentStatusSchema,
+	source: CameraSourceStatusSchema,
+	broker: CameraBrokerStatusSchema.nullable(),
+	decoder: CameraDecoderStatusSchema.nullable(),
+	motion: CameraMotionStatusSchema.nullable(),
+	detection: CameraDetectionStatusSchema.nullable(),
+	audio: CameraAudioStatusSchema.nullable(),
+	recording: CameraRecordingStatusSchema.nullable(),
+	/** Unix timestamp (ms) when this snapshot was composed server-side. */
+	fetchedAt: number()
+});
 method(object({
 	deviceId: number(),
 	agentNodeId: string()
@@ -12968,6 +13129,12 @@ method(object({
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	agentNodeId: string(),
+	maxCameras: number().int().nonnegative().nullable()
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({ deviceId: number() }), CameraPipelineSettingsSchema.nullable()), method(object({
 	deviceId: number(),
 	addonId: string(),
@@ -12993,7 +13160,7 @@ method(object({
 }), method(object({
 	deviceId: number(),
 	agentNodeId: string().optional()
-}), CameraPipelineConfigSchema), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
+}), CameraPipelineConfigSchema), method(object({ deviceId: number() }), CameraStatusSchema), method(object({ deviceIds: array(number()).optional() }), array(CameraStatusSchema).readonly()), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
 	name: string(),
 	description: string().optional(),
 	config: CameraPipelineConfigSchema
@@ -16035,6 +16202,69 @@ method(_void(), array(IntegrationWithStateSchema)), method(object({ id: string()
 	kind: "mutation",
 	auth: "admin"
 });
+var jobKindSchema = _enum([
+	"install",
+	"update",
+	"uninstall",
+	"restart"
+]);
+var taskPhaseSchema = _enum([
+	"queued",
+	"fetching",
+	"staged",
+	"validating",
+	"applying",
+	"restarting",
+	"applied",
+	"done",
+	"failed",
+	"skipped"
+]);
+var taskTargetSchema = _enum(["framework", "addon"]);
+var taskLogEntrySchema = object({
+	tsMs: number(),
+	nodeId: string(),
+	packageName: string(),
+	phase: taskPhaseSchema,
+	message: string()
+});
+var lifecycleTaskSchema = object({
+	taskId: string(),
+	nodeId: string(),
+	packageName: string(),
+	fromVersion: string().nullable(),
+	toVersion: string(),
+	target: taskTargetSchema,
+	phase: taskPhaseSchema,
+	stagedPath: string().nullable(),
+	attempts: number(),
+	steps: array(taskLogEntrySchema),
+	error: string().nullable(),
+	startedAtMs: number().nullable(),
+	finishedAtMs: number().nullable()
+});
+var lifecycleJobStateSchema = _enum([
+	"running",
+	"completed",
+	"failed",
+	"partially-failed",
+	"cancelled"
+]);
+var lifecycleJobScopeSchema = _enum([
+	"single",
+	"bulk",
+	"cluster"
+]);
+var lifecycleJobSchema = object({
+	jobId: string(),
+	kind: jobKindSchema,
+	createdAtMs: number(),
+	createdBy: string(),
+	scope: lifecycleJobScopeSchema,
+	tasks: array(lifecycleTaskSchema),
+	state: lifecycleJobStateSchema,
+	schemaVersion: literal(1)
+});
 /**
 * addons — system-scoped singleton capability for addon package
 * management (install, update, configure, restart) and per-addon log
@@ -16217,7 +16447,7 @@ var BulkUpdatePhaseSchema = _enum([
 	"restarting",
 	"finalizing"
 ]);
-var BulkUpdateStateSchema = object({
+object({
 	id: string(),
 	nodeId: string(),
 	startedAtMs: number(),
@@ -16320,20 +16550,7 @@ method(_void(), array(AddonListItemSchema).readonly()), method(object({
 }), UpdateFrameworkPackageResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({
-	nodeId: string(),
-	items: array(object({
-		name: string(),
-		version: string(),
-		isSystem: boolean()
-	})).readonly()
-}), object({ id: string() }), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ id: string() }), BulkUpdateStateSchema.nullable(), { auth: "admin" }), method(object({ id: string() }), object({ cancelled: boolean() }), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ nodeId: string().optional() }), array(BulkUpdateStateSchema).readonly(), { auth: "admin" }), method(object({ name: string() }), array(PackageVersionInfoSchema).readonly()), method(object({ addonId: string() }), RestartAddonResultSchema, {
+}), method(object({ name: string() }), array(PackageVersionInfoSchema).readonly()), method(object({ addonId: string() }), RestartAddonResultSchema, {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({ packageName: string() }), object({ success: literal(true) }), {
@@ -16355,6 +16572,24 @@ method(_void(), array(AddonListItemSchema).readonly()), method(object({
 	kind: "mutation",
 	auth: "admin"
 }), method(CustomActionInputSchema, unknown(), { kind: "mutation" }), method(object({
+	kind: _enum([
+		"install",
+		"update",
+		"uninstall",
+		"restart"
+	]),
+	targets: array(object({
+		name: string().min(1),
+		version: string().min(1)
+	})).min(1),
+	nodeIds: array(string()).optional()
+}), object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ jobId: string() }), lifecycleJobSchema.nullable(), { auth: "admin" }), method(object({ activeOnly: boolean().optional() }), array(lifecycleJobSchema), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
 	addonId: string(),
 	level: LogLevelSchema$1.optional()
 }), LogStreamEntrySchema, { kind: "subscription" });
@@ -16395,7 +16630,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"addons.cancelBulkUpdate": {
+	"addons.cancelJob": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
@@ -16425,7 +16660,7 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"addons.getBulkUpdateState": {
+	"addons.getJob": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
@@ -16473,19 +16708,19 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"addons.listActiveBulkUpdates": {
+	"addons.listCapabilityProviders": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
-	"addons.listCapabilityProviders": {
+	"addons.listFrameworkPackages": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
-	"addons.listFrameworkPackages": {
+	"addons.listJobs": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
@@ -16569,7 +16804,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"addons.startBulkUpdate": {
+	"addons.startJob": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
@@ -18795,6 +19030,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineExecutor.getEngineProvisioning": {
+		capName: "pipeline-executor",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineExecutor.getGlobalPipelineConfig": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -18999,6 +19240,18 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getCameraStatus": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"pipelineOrchestrator.getCameraStatuses": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getCameraStepOverrides": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -19083,6 +19336,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setAgentMaxCameras": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.setCameraPipelineForAgent": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -20556,6 +20815,32 @@ Object.freeze({
 	"network-access": "ingress",
 	"smtp-provider": "email"
 });
+var frameworkSwapPackageSchema = object({
+	name: string(),
+	stagedPath: string(),
+	backupPath: string(),
+	toVersion: string(),
+	fromVersion: string().nullable()
+});
+object({
+	jobId: string(),
+	taskId: string(),
+	packages: array(frameworkSwapPackageSchema),
+	requestedAtMs: number(),
+	schemaVersion: literal(1)
+});
+object({
+	jobId: string(),
+	taskId: string(),
+	backups: array(object({
+		name: string(),
+		backupPath: string(),
+		livePath: string()
+	})),
+	appliedAtMs: number(),
+	bootAttempts: number(),
+	schemaVersion: literal(1)
+});
 //#endregion
 Object.defineProperty(exports, "BaseAddon", {
 	enumerable: true,

package/dist/{dist-DcSssCOP.mjs → dist-Dr1YikI7.mjs}

@@ -4981,6 +4981,18 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineEngineMetricsSnapshot"] = "pipeline.engine-metrics-snapshot";
 	/**
+	* Per-node detection-engine runtime-provisioning transition. Emitted by
+	* the detection-pipeline provider on every state change of its lazy
+	* engine-provisioning machine (idle → installing → verifying → ready,
+	* or → failed with a `nextRetryAt`). Payload is the
+	* `EngineProvisioningState` snapshot; `event.source.nodeId` carries the
+	* node. The Pipeline page subscribes to drive a live "installing
+	* OpenVINO… / ready" indicator per node without polling
+	* `pipelineExecutor.getEngineProvisioning`. Telemetry-grade (D8): the UI
+	* also reads the cap snapshot on mount / reconnect. Phase 2.
+	*/
+	EventCategory["PipelineEngineProvisioning"] = "pipeline.engine-provisioning";
+	/**
 	* Cluster topology snapshot. Carries the same payload returned by
 	* `nodes.topology` (every reachable node + addons + processes).
 	* Emitted by the hub on any agent / addon lifecycle change
@@ -5130,14 +5142,15 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["DeviceSleeping"] = "device.sleeping";
 	EventCategory["RetentionCleanup"] = "retention.cleanup";
 	/**
-	* Progress snapshot emitted by `BulkUpdateCoordinator` on every state
-	* transition (item status change, phase change, completion, cancel).
-	* Payload is `BulkUpdateState`. Admin UI subscribes via `useLiveEvent`
-	* to drive the sticky `BulkUpdateBanner` and per-row `AddonRowBadge`.
-	*
-	* Spec: docs/superpowers/specs/2026-05-21-addons-bulk-update-progress-design.md
+	* Legacy bulk-update progress snapshot (payload `BulkUpdateState`). No longer
+	* emitted — F3 removed the coordinator that produced it; "Update all" now runs
+	* as one lifecycle engine job (`AddonsJobProgress`/`AddonsJobLog`). Retained
+	* (with `BulkUpdateState`) only to avoid regenerating the event maps; removed
+	* in F4 once live bulk progress is re-implemented over the engine events.
 	*/
 	EventCategory["AddonsBulkUpdateProgress"] = "addons.bulk-update-progress";
+	EventCategory["AddonsJobProgress"] = "addons.job-progress";
+	EventCategory["AddonsJobLog"] = "addons.job-log";
 	/**
 	* A container's child visibility toggled (hidden/shown). Emitted by the
 	* `accessories` cap when a child device is hidden or revealed.
@@ -9144,6 +9157,24 @@ var DetectorOutputSchema = object({
 	inferenceMs: number(),
 	modelId: string()
 });
+var EngineProvisioningSchema = object({
+	runtimeId: _enum([
+		"onnx",
+		"openvino",
+		"coreml"
+	]).nullable(),
+	device: string().nullable(),
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	progress: number().optional(),
+	error: string().optional(),
+	nextRetryAt: number().optional()
+});
 var PipelineStepInputSchema = lazy(() => object({
 	addonId: string(),
 	modelId: string(),
@@ -9212,7 +9243,7 @@ var PipelineRunResultBridge = custom();
 method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngineChoiceSchema), method(PipelineEngineChoiceSchema, array(PipelineDefaultStepSchema)), method(_void(), PipelineEngineChoiceSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(_void(), record(string(), object({
+}), method(object({ nodeId: string() }), EngineProvisioningSchema), method(_void(), record(string(), object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 }))), method(object({ steps: record(string(), object({
@@ -12799,7 +12830,10 @@ var AgentAddonConfigSchema = object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 });
-var AgentPipelineSettingsSchema = object({ addonDefaults: record(string(), AgentAddonConfigSchema).readonly() });
+var AgentPipelineSettingsSchema = object({
+	addonDefaults: record(string(), AgentAddonConfigSchema).readonly(),
+	maxCameras: number().int().nonnegative().nullable().default(null)
+});
 var CameraPipelineForAgentSchema = object({
 	steps: array(PipelineStepInputSchema).readonly(),
 	audio: object({
@@ -12901,6 +12935,133 @@ var GlobalMetricsSchema = object({
 * capability providers.
 */
 var CapabilityBindingsSchema = record(string(), string());
+/** Source block — always present; derives from the stream catalog. */
+var CameraSourceStatusSchema = object({ streams: array(object({
+	camStreamId: string(),
+	codec: string(),
+	width: number(),
+	height: number(),
+	fps: number(),
+	kind: string()
+})).readonly() });
+/** Assignment block — always present (orchestrator-local, no remote call). */
+var CameraAssignmentStatusSchema = object({
+	detectionNodeId: string().nullable(),
+	decoderNodeId: string().nullable(),
+	audioNodeId: string().nullable(),
+	pinned: object({
+		detection: boolean(),
+		decoder: boolean(),
+		audio: boolean()
+	}),
+	reasons: object({
+		detection: string().optional(),
+		decoder: string().optional(),
+		audio: string().optional()
+	})
+});
+/** Broker block — null when the broker stage is unreachable or inactive. */
+var CameraBrokerStatusSchema = object({
+	profiles: array(object({
+		profile: string(),
+		status: string(),
+		codec: string(),
+		width: number(),
+		height: number(),
+		subscribers: number(),
+		inFps: number(),
+		outFps: number()
+	})).readonly(),
+	webrtcSessions: number(),
+	rtspRestream: boolean()
+});
+/** Shared-memory ring statistics within the decoder block. */
+var CameraDecoderShmSchema = object({
+	framesWritten: number(),
+	getFrameHits: number(),
+	getFrameMisses: number(),
+	budgetMb: number()
+});
+/** Decoder block — null when the decoder stage is unreachable or inactive. */
+var CameraDecoderStatusSchema = object({
+	nodeId: string(),
+	formats: array(string()).readonly(),
+	sessionCount: number(),
+	shm: CameraDecoderShmSchema
+});
+/** Motion block — null when motion detection is not active for this device. */
+var CameraMotionStatusSchema = object({
+	enabled: boolean(),
+	fps: number()
+});
+/** Detection provisioning sub-block. */
+var CameraDetectionProvisioningSchema = object({
+	state: _enum([
+		"idle",
+		"installing",
+		"verifying",
+		"ready",
+		"failed"
+	]),
+	error: string().optional()
+});
+/** Detection phase — derived from the runner's engine phase. */
+var CameraDetectionPhaseSchema = _enum([
+	"idle",
+	"watching",
+	"active"
+]);
+/** Detection block — null when no detection node is assigned or reachable. */
+var CameraDetectionStatusSchema = object({
+	nodeId: string(),
+	engine: object({
+		backend: string(),
+		device: string()
+	}),
+	phase: CameraDetectionPhaseSchema,
+	configuredFps: number(),
+	actualFps: number(),
+	queueDepth: number(),
+	avgInferenceMs: number(),
+	provisioning: CameraDetectionProvisioningSchema
+});
+/** Audio block — null when no audio node is assigned or reachable. */
+var CameraAudioStatusSchema = object({
+	nodeId: string(),
+	enabled: boolean()
+});
+/** Recording block — null when no recording cap is active for this device. */
+var CameraRecordingStatusSchema = object({
+	mode: _enum([
+		"off",
+		"continuous",
+		"events"
+	]),
+	active: boolean(),
+	storageBytes: number()
+});
+/**
+* Aggregated per-camera pipeline status — server-composed, single call.
+*
+* The `assignment` and `source` blocks are always present.
+* Every other block is `null` when the stage is inactive or unreachable
+* during the bounded parallel fan-out in the orchestrator implementation.
+*
+* See spec: `docs/superpowers/specs/2026-06-24-camera-status-aggregator-cap.md`
+*/
+var CameraStatusSchema = object({
+	deviceId: number(),
+	assignment: CameraAssignmentStatusSchema,
+	source: CameraSourceStatusSchema,
+	broker: CameraBrokerStatusSchema.nullable(),
+	decoder: CameraDecoderStatusSchema.nullable(),
+	motion: CameraMotionStatusSchema.nullable(),
+	detection: CameraDetectionStatusSchema.nullable(),
+	audio: CameraAudioStatusSchema.nullable(),
+	recording: CameraRecordingStatusSchema.nullable(),
+	/** Unix timestamp (ms) when this snapshot was composed server-side. */
+	fetchedAt: number()
+});
 method(object({
 	deviceId: number(),
 	agentNodeId: string()
@@ -12968,6 +13129,12 @@ method(object({
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	agentNodeId: string(),
+	maxCameras: number().int().nonnegative().nullable()
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({ deviceId: number() }), CameraPipelineSettingsSchema.nullable()), method(object({
 	deviceId: number(),
 	addonId: string(),
@@ -12993,7 +13160,7 @@ method(object({
 }), method(object({
 	deviceId: number(),
 	agentNodeId: string().optional()
-}), CameraPipelineConfigSchema), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
+}), CameraPipelineConfigSchema), method(object({ deviceId: number() }), CameraStatusSchema), method(object({ deviceIds: array(number()).optional() }), array(CameraStatusSchema).readonly()), method(_void(), array(PipelineTemplateSchema).readonly()), method(object({
 	name: string(),
 	description: string().optional(),
 	config: CameraPipelineConfigSchema
@@ -16035,6 +16202,69 @@ method(_void(), array(IntegrationWithStateSchema)), method(object({ id: string()
 	kind: "mutation",
 	auth: "admin"
 });
+var jobKindSchema = _enum([
+	"install",
+	"update",
+	"uninstall",
+	"restart"
+]);
+var taskPhaseSchema = _enum([
+	"queued",
+	"fetching",
+	"staged",
+	"validating",
+	"applying",
+	"restarting",
+	"applied",
+	"done",
+	"failed",
+	"skipped"
+]);
+var taskTargetSchema = _enum(["framework", "addon"]);
+var taskLogEntrySchema = object({
+	tsMs: number(),
+	nodeId: string(),
+	packageName: string(),
+	phase: taskPhaseSchema,
+	message: string()
+});
+var lifecycleTaskSchema = object({
+	taskId: string(),
+	nodeId: string(),
+	packageName: string(),
+	fromVersion: string().nullable(),
+	toVersion: string(),
+	target: taskTargetSchema,
+	phase: taskPhaseSchema,
+	stagedPath: string().nullable(),
+	attempts: number(),
+	steps: array(taskLogEntrySchema),
+	error: string().nullable(),
+	startedAtMs: number().nullable(),
+	finishedAtMs: number().nullable()
+});
+var lifecycleJobStateSchema = _enum([
+	"running",
+	"completed",
+	"failed",
+	"partially-failed",
+	"cancelled"
+]);
+var lifecycleJobScopeSchema = _enum([
+	"single",
+	"bulk",
+	"cluster"
+]);
+var lifecycleJobSchema = object({
+	jobId: string(),
+	kind: jobKindSchema,
+	createdAtMs: number(),
+	createdBy: string(),
+	scope: lifecycleJobScopeSchema,
+	tasks: array(lifecycleTaskSchema),
+	state: lifecycleJobStateSchema,
+	schemaVersion: literal(1)
+});
 /**
 * addons — system-scoped singleton capability for addon package
 * management (install, update, configure, restart) and per-addon log
@@ -16217,7 +16447,7 @@ var BulkUpdatePhaseSchema = _enum([
 	"restarting",
 	"finalizing"
 ]);
-var BulkUpdateStateSchema = object({
+object({
 	id: string(),
 	nodeId: string(),
 	startedAtMs: number(),
@@ -16320,20 +16550,7 @@ method(_void(), array(AddonListItemSchema).readonly()), method(object({
 }), UpdateFrameworkPackageResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({
-	nodeId: string(),
-	items: array(object({
-		name: string(),
-		version: string(),
-		isSystem: boolean()
-	})).readonly()
-}), object({ id: string() }), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ id: string() }), BulkUpdateStateSchema.nullable(), { auth: "admin" }), method(object({ id: string() }), object({ cancelled: boolean() }), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ nodeId: string().optional() }), array(BulkUpdateStateSchema).readonly(), { auth: "admin" }), method(object({ name: string() }), array(PackageVersionInfoSchema).readonly()), method(object({ addonId: string() }), RestartAddonResultSchema, {
+}), method(object({ name: string() }), array(PackageVersionInfoSchema).readonly()), method(object({ addonId: string() }), RestartAddonResultSchema, {
 	kind: "mutation",
 	auth: "admin"
 }), method(object({ packageName: string() }), object({ success: literal(true) }), {
@@ -16355,6 +16572,24 @@ method(_void(), array(AddonListItemSchema).readonly()), method(object({
 	kind: "mutation",
 	auth: "admin"
 }), method(CustomActionInputSchema, unknown(), { kind: "mutation" }), method(object({
+	kind: _enum([
+		"install",
+		"update",
+		"uninstall",
+		"restart"
+	]),
+	targets: array(object({
+		name: string().min(1),
+		version: string().min(1)
+	})).min(1),
+	nodeIds: array(string()).optional()
+}), object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ jobId: string() }), lifecycleJobSchema.nullable(), { auth: "admin" }), method(object({ activeOnly: boolean().optional() }), array(lifecycleJobSchema), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
 	addonId: string(),
 	level: LogLevelSchema$1.optional()
 }), LogStreamEntrySchema, { kind: "subscription" });
@@ -16395,7 +16630,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"addons.cancelBulkUpdate": {
+	"addons.cancelJob": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
@@ -16425,7 +16660,7 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"addons.getBulkUpdateState": {
+	"addons.getJob": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
@@ -16473,19 +16708,19 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"addons.listActiveBulkUpdates": {
+	"addons.listCapabilityProviders": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
-	"addons.listCapabilityProviders": {
+	"addons.listFrameworkPackages": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
-	"addons.listFrameworkPackages": {
+	"addons.listJobs": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
@@ -16569,7 +16804,7 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"addons.startBulkUpdate": {
+	"addons.startJob": {
 		capName: "addons",
 		capScope: "system",
 		addonId: null,
@@ -18795,6 +19030,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineExecutor.getEngineProvisioning": {
+		capName: "pipeline-executor",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineExecutor.getGlobalPipelineConfig": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -18999,6 +19240,18 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getCameraStatus": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"pipelineOrchestrator.getCameraStatuses": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getCameraStepOverrides": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -19083,6 +19336,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setAgentMaxCameras": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.setCameraPipelineForAgent": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -20556,5 +20815,31 @@ Object.freeze({
 	"network-access": "ingress",
 	"smtp-provider": "email"
 });
+var frameworkSwapPackageSchema = object({
+	name: string(),
+	stagedPath: string(),
+	backupPath: string(),
+	toVersion: string(),
+	fromVersion: string().nullable()
+});
+object({
+	jobId: string(),
+	taskId: string(),
+	packages: array(frameworkSwapPackageSchema),
+	requestedAtMs: number(),
+	schemaVersion: literal(1)
+});
+object({
+	jobId: string(),
+	taskId: string(),
+	backups: array(object({
+		name: string(),
+		backupPath: string(),
+		livePath: string()
+	})),
+	appliedAtMs: number(),
+	bootAttempts: number(),
+	schemaVersion: literal(1)
+});
 //#endregion
 export { networkAccessCapability as i, EventCategory as n, meshNetworkCapability as r, BaseAddon as t };

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-ByDiIgMC.js");
+const require_dist = require("../dist-C3Gth0Ap.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_crypto = require("node:crypto");

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { i as networkAccessCapability, n as EventCategory, t as BaseAddon } from "../dist-DcSssCOP.mjs";
+import { i as networkAccessCapability, n as EventCategory, t as BaseAddon } from "../dist-Dr1YikI7.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { randomUUID } from "node:crypto";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",