@camstack/addon-tailscale 1.1.25 → 1.1.27

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-DBIyLTIA.js");
+const require_dist = require("../dist-DVZX81-I.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { i as EventCategory, n as networkAccessCapability, r as BaseAddon, t as meshNetworkCapability } from "../dist-BIsh2UNX.mjs";
+import { i as EventCategory, n as networkAccessCapability, r as BaseAddon, t as meshNetworkCapability } from "../dist-FdwqBAVi.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-DBIyLTIA.js → dist-DVZX81-I.js}

@@ -1,4 +1,4 @@
-//#region ../types/dist/event-category-H4AVePnn.mjs
+//#region ../types/dist/event-category-D4HJq7Mw.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -151,6 +151,11 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/** Runner-sampled scrub thumbnail (~1/5 s/camera). Telemetry (D8): a lost
 	*  thumb is a scrub gap the recorder's keyframe backfill covers. */
 	EventCategory["RecordingThumbSampled"] = "recording.thumb-sampled";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
 	EventCategory["DetectionEvent"] = "detection.event";
 	EventCategory["SessionTrackNew"] = "session.track.new";
 	EventCategory["SessionTrackExpired"] = "session.track.expired";
@@ -440,6 +445,25 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
 	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaKey?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
 	* Fired by `addon-post-analysis` whenever a gallery face row changes:
 	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
 	* `'unassigned'` its identity link changed, `'deleted'` the row was
@@ -5178,6 +5202,25 @@ function _instanceof(cls, params = {}) {
 	};
 	return inst;
 }
+//#endregion
+//#region ../../node_modules/zod/v4/classic/compat.js
+/** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
+var ZodIssueCode = {
+	invalid_type: "invalid_type",
+	too_big: "too_big",
+	too_small: "too_small",
+	invalid_format: "invalid_format",
+	not_multiple_of: "not_multiple_of",
+	unrecognized_keys: "unrecognized_keys",
+	invalid_union: "invalid_union",
+	invalid_key: "invalid_key",
+	invalid_element: "invalid_element",
+	invalid_value: "invalid_value",
+	custom: "custom"
+};
+/** @deprecated Do not use. Stub definition, only included for zod-to-json-schema compatibility. */
+var ZodFirstPartyTypeKind;
+ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 Object.fromEntries([
 	{
 		id: "overview",
@@ -7284,6 +7327,62 @@ var RecordingConfigSchema = object({
 	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 });
 /**
+* Ops-log — the durable, append-only operations audit shared by the
+* recordings and events management surfaces.
+*
+* ONE row shape is reused for both domains so a single "Activity" view can
+* merge the recorder's DurableState ring (recordings ops-log) and the
+* pipeline-analytics SQLite collection (events ops-log). Each row records a
+* management operation, WHY it ran (reason), and its measurable effect
+* (itemsAffected + bytesReclaimed). Writes are best-effort — a failed log must
+* never fail the operation it records.
+*/
+/** Which management domain the operation belongs to. */
+var OpsLogDomainSchema = _enum(["recording", "events"]);
+/** The kind of management operation performed. */
+var OpsLogOpSchema = _enum([
+	"prune",
+	"manual-delete",
+	"rescan",
+	"retention-run"
+]);
+/** Why the operation ran. */
+var OpsLogReasonSchema = _enum([
+	"retention",
+	"quota",
+	"manual",
+	"operator"
+]);
+/** One audit row, shared verbatim by both domains. */
+var OpsLogEntrySchema = object({
+	/** Unique row id. */
+	id: string(),
+	/** Epoch ms the operation completed. */
+	at: number(),
+	domain: OpsLogDomainSchema,
+	op: OpsLogOpSchema,
+	reason: OpsLogReasonSchema,
+	/** The camera the op targeted; null for a cluster/global op. */
+	deviceId: number().nullable(),
+	/** Node that performed the op (the log carries nodeId — no cross-node aggregation). */
+	nodeId: string(),
+	/** Buckets / rows deleted (op-specific unit). */
+	itemsAffected: number(),
+	/** Bytes reclaimed by the op (0 when not measurable). */
+	bytesReclaimed: number(),
+	/** Free-text detail (e.g. "floor moved to <ts>"); null when none. */
+	detail: string().nullable(),
+	/** Who/what triggered the op. */
+	actor: string()
+});
+/** Shared query input for the per-domain `listOpsLog` cap methods. */
+var OpsLogQueryInputSchema = object({
+	/** Restrict to a single camera; omit for every row. */
+	deviceId: number().optional(),
+	/** Max rows returned, newest-first. */
+	limit: number().int().min(1).max(1e3).optional()
+});
+/**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
 * storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
 * so the persisted record schema and the consumer-facing cap can both consume it
@@ -12533,7 +12632,11 @@ array(ZoneRuleSchema).readonly();
 * Extend the enum here when a new gating consumer comes online (audio
 * gating, alert filtering, …) — no other surface needs to change.
 */
-var ZoneRuleStageEnum = _enum(["motion", "detection"]);
+var ZoneRuleStageEnum = _enum([
+	"motion",
+	"detection",
+	"package"
+]);
 DeviceType.Camera, method(object({
 	deviceId: number(),
 	stage: ZoneRuleStageEnum
@@ -12546,7 +12649,8 @@ DeviceType.Camera, method(object({
 	auth: "admin"
 }), object({
 	motion: array(ZoneRuleSchema).readonly(),
-	detection: array(ZoneRuleSchema).readonly()
+	detection: array(ZoneRuleSchema).readonly(),
+	package: array(ZoneRuleSchema).readonly()
 });
 var ProviderStatusSchema = object({
 	connected: boolean(),
@@ -15746,6 +15850,7 @@ var EventKindIconSchema = _enum([
 	"smoke",
 	"water",
 	"button",
+	"package",
 	"generic"
 ]);
 var EventKindCategorySchema = _enum([
@@ -15753,7 +15858,8 @@ var EventKindCategorySchema = _enum([
 	"audio",
 	"detection",
 	"sensor",
-	"custom"
+	"custom",
+	"package"
 ]);
 var EventKindDescriptorSchema = object({
 	/** Stable kind id (e.g. 'motion', 'person', 'contact'). */
@@ -16094,6 +16200,26 @@ var TrackCascadeCountsSchema = object({
 	/** Per-track CLIP search vectors removed (best-effort). */
 	embeddings: number().int()
 });
+/** Event-store footprint for one camera. */
+var EventStoreDeviceFootprintSchema = object({
+	deviceId: number(),
+	/** Persisted event rows (motion + object + audio) for the camera. */
+	rows: number().int(),
+	/** Event-owned media bytes on disk for the camera. */
+	bytes: number().int()
+});
+/** Aggregate event-store footprint: global totals + per-camera breakdown. */
+var EventStoreFootprintSchema = object({
+	totalRows: number().int(),
+	totalBytes: number().int(),
+	devices: array(EventStoreDeviceFootprintSchema).readonly()
+});
+/** Per-kind counts returned by the event-prune / device-delete mutations. */
+var EventPruneCountsSchema = object({
+	motion: number().int(),
+	object: number().int(),
+	audio: number().int()
+});
 DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).readonly()), method(object({
 	deviceId: number(),
 	trackId: string()
@@ -16157,6 +16283,21 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({}), EventStoreFootprintSchema, {
+	kind: "query",
+	auth: "admin"
+}), method(object({
+	olderThanMs: number(),
+	reason: OpsLogReasonSchema.optional()
+}), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ deviceId: number() }), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
 }), method(object({
 	eventId: string(),
 	kind: MediaFileKindEnum.optional()
@@ -19451,13 +19592,131 @@ method(object({
 }), method(object({ deviceId: number() }), RecordingStatusSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), object({
+}), method(object({
+	deviceId: number(),
+	reason: OpsLogReasonSchema.optional()
+}), object({
 	floorMs: number().nullable(),
 	deletedBuckets: number().int(),
 	reclaimedBytes: number().int()
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	deviceId: number(),
+	fromMs: number().optional(),
+	toMs: number().optional()
+}), object({
+	deletedBuckets: number().int(),
+	reclaimedBytes: number().int()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
+});
+/**
+* `recordingExport` cap — render a footage time range into a single downloadable
+* MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
+* bounded lifetime with a durable history, auto-expiry, and optional
+* delete-after-download.
+*
+* Like `recording` this is a `scope:'system', mode:'singleton'` cap: the
+* recorder self-gates so exactly ONE node (the designated `recordingNodeId`,
+* default `hub`) registers it. Device-scoped methods carry `deviceId` in their
+* input and dispatch to that single provider; the render runs on the node that
+* owns the footage (no cross-node segment transfer). Download rides the
+* framework addon data-plane. State persists in a DurableState blob (NOT
+* SQLite); history rows survive file deletion for audit.
+*/
+/** Playback-speed multiplier for the render (1 = realtime). */
+var ExportSpeedSchema = number().min(.25).max(32);
+/** Timelapse cadence — sample one source frame per `everyMs`, output at `outputFps`. */
+var ExportTimelapseSchema = object({
+	everyMs: number().int().positive(),
+	outputFps: number().int().min(1).max(60).optional()
+});
+/**
+* Render options. `speed` and `timelapse` are mutually exclusive. `includeAudio`
+* is honoured only for a realtime-ish speed (0.5–2×); timelapse is always
+* silent. `maxLifeMs` bounds how long the finished file is kept;
+* `deleteAfterDownload` removes it shortly after the first complete download.
+*/
+var ExportOptionsSchema = object({
+	speed: ExportSpeedSchema.optional(),
+	timelapse: ExportTimelapseSchema.optional(),
+	includeAudio: boolean(),
+	maxLifeMs: number().int().positive(),
+	deleteAfterDownload: boolean(),
+	title: string().max(200).optional()
+}).superRefine((v, ctx) => {
+	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "speed and timelapse are mutually exclusive",
+		path: ["timelapse"]
+	});
+});
+var ExportStateSchema = _enum([
+	"queued",
+	"rendering",
+	"ready",
+	"failed",
+	"expired",
+	"deleted"
+]);
+/** One export job / history row. */
+var ExportRecordSchema = object({
+	id: string(),
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema,
+	state: ExportStateSchema,
+	/** 0–100 while rendering; null otherwise. */
+	progressPct: number().nullable(),
+	/** File size once ready; null before. */
+	fileBytes: number().nullable(),
+	expiresAt: number(),
+	deleteAfterDownload: boolean(),
+	/** Epoch of the first complete download; null until then. */
+	downloadedAt: number().nullable(),
+	createdAt: number(),
+	/** User id/name that requested the export. */
+	createdBy: string(),
+	/** Failure reason when state is 'failed'; null otherwise. */
+	error: string().nullable()
+});
+/** Candidate download URLs (LAN first, then operator extra hosts). */
+var ExportDownloadSchema = object({
+	url: string(),
+	endpoints: array(string())
+});
+method(object({
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema
+}), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ deviceId: number().optional() }), array(ExportRecordSchema), {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportDownloadSchema, {
+	kind: "query",
+	auth: "protected"
 });
 /**
 * One publishable camera stream as its OWNING PROVIDER describes it — the same
@@ -22477,6 +22736,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineAnalytics.deleteDeviceEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineAnalytics.deleteTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22507,6 +22772,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getEventStoreFootprint": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getKeyEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22549,6 +22820,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listOpsLog": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listRecentTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22561,6 +22838,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.pruneEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.pruneEventsBefore": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -23323,6 +23606,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.deleteFootprint": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"recording.getAvailability": {
 		capName: "recording",
 		capScope: "system",
@@ -23353,6 +23642,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.listOpsLog": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"recording.locateSegment": {
 		capName: "recording",
 		capScope: "system",
@@ -23383,6 +23678,42 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordingExport.cancelExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.createExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.deleteExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordingExport.getDownloadUrl": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.getExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.listExports": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",

package/dist/{dist-BIsh2UNX.mjs → dist-FdwqBAVi.mjs}

@@ -1,4 +1,4 @@
-//#region ../types/dist/event-category-H4AVePnn.mjs
+//#region ../types/dist/event-category-D4HJq7Mw.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -151,6 +151,11 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/** Runner-sampled scrub thumbnail (~1/5 s/camera). Telemetry (D8): a lost
 	*  thumb is a scrub gap the recorder's keyframe backfill covers. */
 	EventCategory["RecordingThumbSampled"] = "recording.thumb-sampled";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
 	EventCategory["DetectionEvent"] = "detection.event";
 	EventCategory["SessionTrackNew"] = "session.track.new";
 	EventCategory["SessionTrackExpired"] = "session.track.expired";
@@ -440,6 +445,25 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
 	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaKey?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
 	* Fired by `addon-post-analysis` whenever a gallery face row changes:
 	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
 	* `'unassigned'` its identity link changed, `'deleted'` the row was
@@ -5178,6 +5202,25 @@ function _instanceof(cls, params = {}) {
 	};
 	return inst;
 }
+//#endregion
+//#region ../../node_modules/zod/v4/classic/compat.js
+/** @deprecated Use the raw string literal codes instead, e.g. "invalid_type". */
+var ZodIssueCode = {
+	invalid_type: "invalid_type",
+	too_big: "too_big",
+	too_small: "too_small",
+	invalid_format: "invalid_format",
+	not_multiple_of: "not_multiple_of",
+	unrecognized_keys: "unrecognized_keys",
+	invalid_union: "invalid_union",
+	invalid_key: "invalid_key",
+	invalid_element: "invalid_element",
+	invalid_value: "invalid_value",
+	custom: "custom"
+};
+/** @deprecated Do not use. Stub definition, only included for zod-to-json-schema compatibility. */
+var ZodFirstPartyTypeKind;
+ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 Object.fromEntries([
 	{
 		id: "overview",
@@ -7284,6 +7327,62 @@ var RecordingConfigSchema = object({
 	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 });
 /**
+* Ops-log — the durable, append-only operations audit shared by the
+* recordings and events management surfaces.
+*
+* ONE row shape is reused for both domains so a single "Activity" view can
+* merge the recorder's DurableState ring (recordings ops-log) and the
+* pipeline-analytics SQLite collection (events ops-log). Each row records a
+* management operation, WHY it ran (reason), and its measurable effect
+* (itemsAffected + bytesReclaimed). Writes are best-effort — a failed log must
+* never fail the operation it records.
+*/
+/** Which management domain the operation belongs to. */
+var OpsLogDomainSchema = _enum(["recording", "events"]);
+/** The kind of management operation performed. */
+var OpsLogOpSchema = _enum([
+	"prune",
+	"manual-delete",
+	"rescan",
+	"retention-run"
+]);
+/** Why the operation ran. */
+var OpsLogReasonSchema = _enum([
+	"retention",
+	"quota",
+	"manual",
+	"operator"
+]);
+/** One audit row, shared verbatim by both domains. */
+var OpsLogEntrySchema = object({
+	/** Unique row id. */
+	id: string(),
+	/** Epoch ms the operation completed. */
+	at: number(),
+	domain: OpsLogDomainSchema,
+	op: OpsLogOpSchema,
+	reason: OpsLogReasonSchema,
+	/** The camera the op targeted; null for a cluster/global op. */
+	deviceId: number().nullable(),
+	/** Node that performed the op (the log carries nodeId — no cross-node aggregation). */
+	nodeId: string(),
+	/** Buckets / rows deleted (op-specific unit). */
+	itemsAffected: number(),
+	/** Bytes reclaimed by the op (0 when not measurable). */
+	bytesReclaimed: number(),
+	/** Free-text detail (e.g. "floor moved to <ts>"); null when none. */
+	detail: string().nullable(),
+	/** Who/what triggered the op. */
+	actor: string()
+});
+/** Shared query input for the per-domain `listOpsLog` cap methods. */
+var OpsLogQueryInputSchema = object({
+	/** Restrict to a single camera; omit for every row. */
+	deviceId: number().optional(),
+	/** Max rows returned, newest-first. */
+	limit: number().int().min(1).max(1e3).optional()
+});
+/**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
 * storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
 * so the persisted record schema and the consumer-facing cap can both consume it
@@ -12533,7 +12632,11 @@ array(ZoneRuleSchema).readonly();
 * Extend the enum here when a new gating consumer comes online (audio
 * gating, alert filtering, …) — no other surface needs to change.
 */
-var ZoneRuleStageEnum = _enum(["motion", "detection"]);
+var ZoneRuleStageEnum = _enum([
+	"motion",
+	"detection",
+	"package"
+]);
 DeviceType.Camera, method(object({
 	deviceId: number(),
 	stage: ZoneRuleStageEnum
@@ -12546,7 +12649,8 @@ DeviceType.Camera, method(object({
 	auth: "admin"
 }), object({
 	motion: array(ZoneRuleSchema).readonly(),
-	detection: array(ZoneRuleSchema).readonly()
+	detection: array(ZoneRuleSchema).readonly(),
+	package: array(ZoneRuleSchema).readonly()
 });
 var ProviderStatusSchema = object({
 	connected: boolean(),
@@ -15746,6 +15850,7 @@ var EventKindIconSchema = _enum([
 	"smoke",
 	"water",
 	"button",
+	"package",
 	"generic"
 ]);
 var EventKindCategorySchema = _enum([
@@ -15753,7 +15858,8 @@ var EventKindCategorySchema = _enum([
 	"audio",
 	"detection",
 	"sensor",
-	"custom"
+	"custom",
+	"package"
 ]);
 var EventKindDescriptorSchema = object({
 	/** Stable kind id (e.g. 'motion', 'person', 'contact'). */
@@ -16094,6 +16200,26 @@ var TrackCascadeCountsSchema = object({
 	/** Per-track CLIP search vectors removed (best-effort). */
 	embeddings: number().int()
 });
+/** Event-store footprint for one camera. */
+var EventStoreDeviceFootprintSchema = object({
+	deviceId: number(),
+	/** Persisted event rows (motion + object + audio) for the camera. */
+	rows: number().int(),
+	/** Event-owned media bytes on disk for the camera. */
+	bytes: number().int()
+});
+/** Aggregate event-store footprint: global totals + per-camera breakdown. */
+var EventStoreFootprintSchema = object({
+	totalRows: number().int(),
+	totalBytes: number().int(),
+	devices: array(EventStoreDeviceFootprintSchema).readonly()
+});
+/** Per-kind counts returned by the event-prune / device-delete mutations. */
+var EventPruneCountsSchema = object({
+	motion: number().int(),
+	object: number().int(),
+	audio: number().int()
+});
 DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).readonly()), method(object({
 	deviceId: number(),
 	trackId: string()
@@ -16157,6 +16283,21 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({}), EventStoreFootprintSchema, {
+	kind: "query",
+	auth: "admin"
+}), method(object({
+	olderThanMs: number(),
+	reason: OpsLogReasonSchema.optional()
+}), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ deviceId: number() }), EventPruneCountsSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
 }), method(object({
 	eventId: string(),
 	kind: MediaFileKindEnum.optional()
@@ -19451,13 +19592,131 @@ method(object({
 }), method(object({ deviceId: number() }), RecordingStatusSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), object({
+}), method(object({
+	deviceId: number(),
+	reason: OpsLogReasonSchema.optional()
+}), object({
 	floorMs: number().nullable(),
 	deletedBuckets: number().int(),
 	reclaimedBytes: number().int()
 }), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	deviceId: number(),
+	fromMs: number().optional(),
+	toMs: number().optional()
+}), object({
+	deletedBuckets: number().int(),
+	reclaimedBytes: number().int()
+}), {
+	kind: "mutation",
+	auth: "admin"
+}), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
+	kind: "query",
+	auth: "admin"
+});
+/**
+* `recordingExport` cap — render a footage time range into a single downloadable
+* MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
+* bounded lifetime with a durable history, auto-expiry, and optional
+* delete-after-download.
+*
+* Like `recording` this is a `scope:'system', mode:'singleton'` cap: the
+* recorder self-gates so exactly ONE node (the designated `recordingNodeId`,
+* default `hub`) registers it. Device-scoped methods carry `deviceId` in their
+* input and dispatch to that single provider; the render runs on the node that
+* owns the footage (no cross-node segment transfer). Download rides the
+* framework addon data-plane. State persists in a DurableState blob (NOT
+* SQLite); history rows survive file deletion for audit.
+*/
+/** Playback-speed multiplier for the render (1 = realtime). */
+var ExportSpeedSchema = number().min(.25).max(32);
+/** Timelapse cadence — sample one source frame per `everyMs`, output at `outputFps`. */
+var ExportTimelapseSchema = object({
+	everyMs: number().int().positive(),
+	outputFps: number().int().min(1).max(60).optional()
+});
+/**
+* Render options. `speed` and `timelapse` are mutually exclusive. `includeAudio`
+* is honoured only for a realtime-ish speed (0.5–2×); timelapse is always
+* silent. `maxLifeMs` bounds how long the finished file is kept;
+* `deleteAfterDownload` removes it shortly after the first complete download.
+*/
+var ExportOptionsSchema = object({
+	speed: ExportSpeedSchema.optional(),
+	timelapse: ExportTimelapseSchema.optional(),
+	includeAudio: boolean(),
+	maxLifeMs: number().int().positive(),
+	deleteAfterDownload: boolean(),
+	title: string().max(200).optional()
+}).superRefine((v, ctx) => {
+	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "speed and timelapse are mutually exclusive",
+		path: ["timelapse"]
+	});
+});
+var ExportStateSchema = _enum([
+	"queued",
+	"rendering",
+	"ready",
+	"failed",
+	"expired",
+	"deleted"
+]);
+/** One export job / history row. */
+var ExportRecordSchema = object({
+	id: string(),
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema,
+	state: ExportStateSchema,
+	/** 0–100 while rendering; null otherwise. */
+	progressPct: number().nullable(),
+	/** File size once ready; null before. */
+	fileBytes: number().nullable(),
+	expiresAt: number(),
+	deleteAfterDownload: boolean(),
+	/** Epoch of the first complete download; null until then. */
+	downloadedAt: number().nullable(),
+	createdAt: number(),
+	/** User id/name that requested the export. */
+	createdBy: string(),
+	/** Failure reason when state is 'failed'; null otherwise. */
+	error: string().nullable()
+});
+/** Candidate download URLs (LAN first, then operator extra hosts). */
+var ExportDownloadSchema = object({
+	url: string(),
+	endpoints: array(string())
+});
+method(object({
+	deviceId: number(),
+	profile: string(),
+	fromMs: number(),
+	toMs: number(),
+	options: ExportOptionsSchema
+}), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ deviceId: number().optional() }), array(ExportRecordSchema), {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "query",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportRecordSchema, {
+	kind: "mutation",
+	auth: "protected"
+}), method(object({ exportId: string() }), ExportDownloadSchema, {
+	kind: "query",
+	auth: "protected"
 });
 /**
 * One publishable camera stream as its OWNING PROVIDER describes it — the same
@@ -22477,6 +22736,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"pipelineAnalytics.deleteDeviceEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "delete"
+	},
 	"pipelineAnalytics.deleteTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22507,6 +22772,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.getEventStoreFootprint": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.getKeyEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22549,6 +22820,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.listOpsLog": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineAnalytics.listRecentTracks": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -22561,6 +22838,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineAnalytics.pruneEvents": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.pruneEventsBefore": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -23323,6 +23606,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.deleteFootprint": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"recording.getAvailability": {
 		capName: "recording",
 		capScope: "system",
@@ -23353,6 +23642,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.listOpsLog": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"recording.locateSegment": {
 		capName: "recording",
 		capScope: "system",
@@ -23383,6 +23678,42 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordingExport.cancelExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.createExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.deleteExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordingExport.getDownloadUrl": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.getExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.listExports": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-DBIyLTIA.js");
+const require_dist = require("../dist-DVZX81-I.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_crypto = require("node:crypto");

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { i as EventCategory, n as networkAccessCapability, r as BaseAddon } from "../dist-BIsh2UNX.mjs";
+import { i as EventCategory, n as networkAccessCapability, r as BaseAddon } from "../dist-FdwqBAVi.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { randomUUID } from "node:crypto";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.1.25",
+  "version": "1.1.27",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",