@camstack/addon-tailscale 1.2.49 → 1.2.50

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-Cv-ufJXF.js");
+const require_dist = require("../dist-v7uK6zeq.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-8Fi7VglU.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-CMpgFoPi.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-8Fi7VglU.mjs → dist-CMpgFoPi.mjs}

@@ -8113,6 +8113,13 @@ var MediaRelocateModeSchema = _enum([
 ]);
 var RelocateMediaInputSchema = object({
 	toLocationId: string(),
+	/**
+	* Restrict the pass to rows currently on this location. Omitted / `'*'` =
+	* every row that is not already on `toLocationId` (the historical
+	* behaviour). A named source is what a from→to migration needs: without it
+	* "move events off disk 2" also emptied disk 1.
+	*/
+	fromLocationId: string().optional(),
 	throttleMbps: number().min(1).max(1e3).optional(),
 	/** Omitted = `move`, the pre-existing behaviour. */
 	mode: MediaRelocateModeSchema.optional()
@@ -8180,6 +8187,19 @@ var StorageMigrationDestinationsSchema = object({
 	galleryMedia: string().min(1).optional()
 }).refine((value) => Object.keys(value).length > 0, { message: "select at least one storage class" });
 /**
+* Optional named source per class. Omitted = the class's current default
+* (the historical behaviour). A named source that is NOT the default is a
+* drain of that disk: bytes move, the default stays, and the source is
+* disabled when the move finishes.
+*/
+var StorageMigrationSourcesSchema = object({
+	recordings: string().min(1).optional(),
+	recordingsLow: string().min(1).optional(),
+	eventMedia: string().min(1).optional(),
+	backups: string().min(1).optional(),
+	galleryMedia: string().min(1).optional()
+}).optional();
+/**
 * How a migration sequences the cutover against the byte move.
 *
 *  - `blocking`     — the historical order: pause, move every byte, repoint,
@@ -8201,6 +8221,8 @@ var StorageMigrationModeSchema = _enum(["blocking", "nonBlocking"]);
 /** Shared input for planning and starting an orchestrated storage migration. */
 var StorageMigrationInputSchema = object({
 	destinations: StorageMigrationDestinationsSchema,
+	/** Omitted = each class's current default. */
+	sources: StorageMigrationSourcesSchema,
 	throttleMbps: number().min(1).max(1e3).optional(),
 	/** Omitted = `blocking`, which stays the default. */
 	mode: StorageMigrationModeSchema.optional()
@@ -8280,6 +8302,13 @@ var StorageMigrationMoveSchema = object({
 	storageClass: StorageMigrationClassSchema,
 	fromLocationId: string(),
 	toLocationId: string(),
+	/**
+	* True when `from` was NOT the class default at plan time. The move still
+	* copies bytes, but the default is left alone and the source is disabled
+	* once the copy verifies. Absent on jobs planned before this field existed
+	* — those jobs always repointed, which is `false`.
+	*/
+	freezeSource: boolean().optional(),
 	moverJobId: string().nullable(),
 	state: RelocateJobStateSchema.nullable(),
 	error: string().nullable(),
@@ -8293,6 +8322,7 @@ var StorageMigrationJobSchema = object({
 	*  can tell a seconds-long cutover from a thirty-hour one. */
 	mode: StorageMigrationModeSchema,
 	destinations: StorageMigrationDestinationsSchema,
+	sources: StorageMigrationSourcesSchema,
 	throttleMbps: number(),
 	moves: array(StorageMigrationMoveSchema),
 	pauseLeaseId: string().nullable(),
@@ -8318,6 +8348,7 @@ var StorageMigrationFindingSchema = object({
 });
 var StorageMigrationPlanSchema = object({
 	destinations: StorageMigrationDestinationsSchema,
+	sources: StorageMigrationSourcesSchema,
 	/** The mode this plan was built for. A plan is only valid for its mode: the
 	*  `eventMedia` seal gate and the single-cardinality refusal both depend on
 	*  it. */
@@ -8325,7 +8356,8 @@ var StorageMigrationPlanSchema = object({
 	moves: array(object({
 		storageClass: StorageMigrationClassSchema,
 		fromLocationId: string(),
-		toLocationId: string()
+		toLocationId: string(),
+		freezeSource: boolean().optional()
 	})),
 	findings: array(StorageMigrationFindingSchema)
 });
@@ -8503,10 +8535,51 @@ var LedgerWalkReportSchema = object({
 var RelocatableMediaCountSchema = object({ rows: number().int().nonnegative() }).nullable();
 var RelocatableMediaCountInputSchema = object({
 	toLocationId: string().min(1),
+	/** Restrict the count to one source; omitted / `'*'` = every non-target row. */
+	fromLocationId: string().optional(),
 	/** Omitted = `move`. */
 	mode: MediaRelocateModeSchema.optional()
 });
 /**
+* Operator cleanup of leftover analytics rows, optional debug media, and
+* ghost ledger entries on frozen footage locations.
+*
+* A pass is tens of minutes on a standing backlog. The hub method RETURNS
+* `{ jobId }` immediately; progress is `cleanupStatus`. Awaiting the work
+* is how `addons.custom` hit the 60 s UDS deadline while reclaim continued
+* with no operator-visible status.
+*/
+var StorageCleanupPhaseSchema = _enum([
+	"orphans",
+	"debug-media",
+	"ghost-ledger",
+	"done",
+	"failed",
+	"cancelled"
+]);
+var StorageCleanupInputSchema = object({ 
+/** Also walk motion stills / track filmstrips. Off by default. */
+includeDebugMedia: boolean().optional() });
+var StorageCleanupJobSchema = object({
+	jobId: string(),
+	phase: StorageCleanupPhaseSchema,
+	includeDebugMedia: boolean(),
+	orphansReclaimed: number().int().nonnegative(),
+	orphanBytesReclaimed: number().int().nonnegative(),
+	debugMediaReclaimed: number().int().nonnegative(),
+	debugMediaBytesReclaimed: number().int().nonnegative(),
+	ghostsForgotten: number().int().nonnegative(),
+	ghostBytesForgotten: number().int().nonnegative(),
+	/** Short operator-facing line: current collection, pass, or location. */
+	detail: string().nullable(),
+	cancelRequested: boolean(),
+	startedAt: number(),
+	updatedAt: number(),
+	finishedAt: number().nullable(),
+	error: string().nullable()
+});
+var StorageCleanupStatusInputSchema = object({ jobId: string().optional() });
+/**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
 * storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
 * so the persisted record schema and the consumer-facing cap can both consume it
@@ -8534,11 +8607,10 @@ var StorageLocationTypeSchema = string().regex(/^[a-z][a-zA-Z0-9-]*$/);
 * The default location for a type uses `id === <type>:default` by
 * convention (the bare type ref like `'backups'` resolves to it).
 *
-* `isSystem: true` marks a location as orchestrator-seeded and
-* undeletable. The bootstrap-installed defaults (one per type) carry
-* this flag; operator-added locations don't. Editing the config of
-* a system location is allowed (path migration, provider swap) but
-* deleting it is rejected at the cap level.
+* `isSystem` is a legacy persisted flag. Seed still creates the initial
+* `<type>:default` locations; the flag is no longer a lock, a badge, or a
+* prune selector. New writes leave it false. Deletion is gated on uniqueness
+* / last-enabled, not on this bit.
 */
 var StorageLocationSchema = object({
 	id: string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
@@ -12800,6 +12872,12 @@ method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	from: string(),
+	to: string()
+}), object({ moved: number() }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number(),
 	disabled: boolean()
@@ -18747,46 +18825,6 @@ var RecentTracksPageSchema = object({
 	/** Cursor for the next page, or null when this page is the last. */
 	nextCursor: string().nullable()
 });
-var LIST_GROUPS_DEFAULT_LIMIT = 40;
-var LIST_GROUPS_MAX_LIMIT = 100;
-var AnalyticsGroupRecordSchema = object({
-	id: string(),
-	deviceId: number().int(),
-	openedAt: number().int(),
-	closedAt: number().int(),
-	timestamp: number().int(),
-	memberCount: number().int(),
-	memberTrackIds: array(string()).readonly(),
-	className: string(),
-	classes: array(string()).readonly(),
-	/** Relative event-media path, or null when the group has no picture yet. */
-	mediaUrl: string().nullable(),
-	singleton: boolean()
-});
-var AnalyticsGroupMemberSchema = object({
-	trackId: string(),
-	deviceId: number().int(),
-	className: string(),
-	firstSeen: number().int(),
-	lastSeen: number().int(),
-	mediaUrl: string().nullable()
-});
-var AnalyticsGroupDetailSchema = AnalyticsGroupRecordSchema.extend({ members: array(AnalyticsGroupMemberSchema).readonly() });
-var ListGroupsQueryInput = object({
-	/** Devices to merge. An empty array yields `{ groups: [], nextCursor: null }`. */
-	deviceIds: array(number()),
-	/** Window lower bound on `closedAt` (inclusive). */
-	since: number().optional(),
-	/** Window upper bound on `openedAt` (inclusive). */
-	until: number().optional(),
-	limit: number().int().min(1).max(LIST_GROUPS_MAX_LIMIT).default(LIST_GROUPS_DEFAULT_LIMIT),
-	/** Opaque continuation cursor from a previous page's `nextCursor`. */
-	cursor: string().optional()
-});
-var ListGroupsPageSchema = object({
-	groups: array(AnalyticsGroupRecordSchema).readonly(),
-	nextCursor: string().nullable()
-});
 var KEY_EVENTS_DEFAULT_LIMIT = 50;
 var KEY_EVENTS_MAX_LIMIT = 200;
 var KeyEventQueryInput = object({
@@ -18890,9 +18928,7 @@ var TrackCascadeCountsSchema = object({
 	/** Unassigned plate reads removed (best-effort; plate leg deferred to plate-intelligence). */
 	plates: number().int(),
 	/** Per-track CLIP search vectors removed (best-effort). */
-	embeddings: number().int(),
-	/** Group membership + group rows removed with their last member (best-effort). */
-	groups: number().int()
+	embeddings: number().int()
 });
 /** Disk-wins reconcile: media rows whose blobs are gone, then empty tracks. */
 var DiskReconcileCountsSchema = object({
@@ -19062,6 +19098,47 @@ var RebuildStatusSchema = object({
 	/** Present when the pass ended by throwing. */
 	error: string().nullable()
 });
+/**
+* Acknowledgement that a debug-media reclaim STARTED.
+*
+* The pass is paced at ~2 MB/s over a standing 100 GB — tens of minutes — so
+* it runs detached and this returns immediately. Awaiting it is how the
+* `addons.custom` door hit the 60 s UDS deadline while the walk carried on
+* with no status. Poll {@link pipelineAnalyticsCapability.methods.getMediaReclaimStatus}.
+*/
+var MediaReclaimStartResultSchema = object({
+	started: boolean(),
+	/** True when a pass was already running; the new request is ignored. */
+	alreadyRunning: boolean()
+});
+var MediaReclaimInputSchema = object({
+	mode: _enum(["report", "reclaim"]).default("report"),
+	scopes: array(_enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+	deviceIds: array(number().int()).min(1).optional(),
+	restart: boolean().optional(),
+	pageSize: number().int().min(50).max(5e3).optional(),
+	maxRowsPerDevice: number().int().min(1).max(5e5).optional(),
+	maxReclaimPerDevice: number().int().min(1).max(5e5).optional(),
+	maxBytesPerRun: number().int().min(1).optional(),
+	budgetMinutes: number().int().min(1).max(720).optional(),
+	throttleBytesPerSec: number().int().min(64 * 1024).optional(),
+	graceMinutes: number().int().min(1).max(10080).optional()
+});
+var MediaReclaimStatusSchema = object({
+	running: boolean(),
+	mode: _enum(["report", "reclaim"]).nullable(),
+	totalExamined: number(),
+	totalEligible: number(),
+	totalReclaimed: number(),
+	totalBytesReclaimed: number(),
+	totalRefused: number(),
+	/** Device+scope windows finished in this pass. */
+	devicesDone: number(),
+	complete: boolean().nullable(),
+	startedAtMs: number().nullable(),
+	finishedAtMs: number().nullable(),
+	error: string().nullable()
+});
 var ReplayFrameInputSchema = object({
 	timestamp: number(),
 	frame: PipelineRunResultBridge
@@ -19100,10 +19177,7 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	*  stationary registry). Default false: the timeline lists passages,
 	*  not parking records (operator decision, 2026-08-15). */
 	includeStationary: boolean().optional()
-}), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(ListGroupsQueryInput, ListGroupsPageSchema), method(object({
-	deviceId: number(),
-	groupId: string().min(1)
-}), AnalyticsGroupDetailSchema.nullable()), method(object({ deviceId: number() }), _void(), {
+}), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(DeviceEventQueryInput, array(MotionEventSchema).readonly()), method(ObjectEventQueryInput, array(ObjectEventSchema).readonly()), method(DeviceEventQueryInput, array(AudioEventSchema).readonly()), method(object({ deviceId: number() }), array(EventKindDescriptorSchema).readonly()), method(object({ deviceIds: array(number()).min(1).max(200) }), array(EventKindsForDeviceSchema).readonly()), method(object({
@@ -19203,6 +19277,12 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
 	kind: "query",
 	auth: "admin"
+}), method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({}), MediaReclaimStatusSchema, {
+	kind: "query",
+	auth: "admin"
 }), method(object({ deviceIds: array(number()).optional() }), TrainingExportSummarySchema, {
 	kind: "query",
 	auth: "admin"
@@ -21173,7 +21253,13 @@ method(StorageMigrationInputSchema, StorageMigrationPlanSchema, { auth: "admin"
 }), method(object({}), array(StorageMigrationMoverSchema).readonly(), { auth: "admin" }), method(object({}), array(StorageMigrationResidueSchema).readonly(), { auth: "admin" }), method(StorageMigrationDrainInputSchema, object({ jobId: string() }), {
 	kind: "mutation",
 	auth: "admin"
-});
+}), method(StorageCleanupInputSchema, object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageCleanupStatusInputSchema, StorageCleanupJobSchema.nullable(), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({}), array(StorageMigrationJobSchema).readonly(), { auth: "admin" });
 var ProviderInfoSchema = discriminatedUnion("shouldSaveDiskSpace", [object({
 	providerId: string().min(1),
 	displayName: string().min(1),
@@ -26612,6 +26698,33 @@ var RecordingRebalanceInputSchema = object({
 	minMoveGb: number().min(0).optional()
 });
 /**
+* Operator-facing placement of one camera onto a recordings location.
+*
+* `pinLocationId` is the operator instruction: a location id, or `null` for
+* Auto (the planner may move this camera). `locationId` is where high/mid
+* currently write — the plan, which may disagree with the pin when Auto.
+*/
+var RecordingDevicePlacementSchema = object({
+	deviceId: number().int(),
+	profile: string(),
+	locationId: string()
+});
+var RecordingDevicePinSchema = object({
+	deviceId: number().int(),
+	/** Recordings-class location this camera is pinned to. */
+	locationId: string()
+});
+var RecordingPlacementViewSchema = object({
+	assignments: array(RecordingDevicePlacementSchema),
+	pins: array(RecordingDevicePinSchema),
+	defaultLocations: record(string(), string())
+});
+var RecordingSetDevicePlacementInputSchema = object({
+	deviceId: number().int(),
+	/** `null` = Auto. Otherwise a `recordings:*` location id. */
+	locationId: string().nullable()
+});
+/**
 * Result of locating footage at a wall-clock instant for one device/profile.
 * `segment` carries the covering segment's window; `gap` reports the forward
 * nearest covered edge (`null` past the end of footage / when none exists)
@@ -26837,6 +26950,12 @@ method(object({
 }), method(RecordingRebalanceInputSchema, RecordingRebalancePlanSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({}), RecordingPlacementViewSchema, {
+	kind: "query",
+	auth: "admin"
+}), method(RecordingSetDevicePlacementInputSchema, object({ ok: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
 });
 /**
 * `recording-export` cap — render a footage time range into a single downloadable
@@ -30207,6 +30326,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"deviceManager.renameLocation": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.runDeviceAction": {
 		capName: "device-manager",
 		capScope: "system",
@@ -31899,19 +32024,19 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.getGroup": {
+	"pipelineAnalytics.getKeyEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.getKeyEvents": {
+	"pipelineAnalytics.getKeyEventsBatch": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.getKeyEventsBatch": {
+	"pipelineAnalytics.getMediaReclaimStatus": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
@@ -32001,12 +32126,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.listGroups": {
-		capName: "pipeline-analytics",
-		capScope: "device",
-		addonId: null,
-		access: "view"
-	},
 	"pipelineAnalytics.listOpsLog": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -32091,6 +32210,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.reclaimDebugMedia": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.reconcileFromDisk": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -33015,6 +33140,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.getPlacement": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"recording.getPlaybackManifest": {
 		capName: "recording",
 		capScope: "system",
@@ -33141,6 +33272,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.setDevicePlacement": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recording.startStorageMigrationMove": {
 		capName: "recording",
 		capScope: "system",
@@ -33585,12 +33722,36 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"storageMigration.cleanupCancel": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.cleanupStart": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.cleanupStatus": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageMigration.drain": {
 		capName: "storage-migration",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"storageMigration.history": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageMigration.movers": {
 		capName: "storage-migration",
 		capScope: "system",
@@ -35587,11 +35748,6 @@ Object.freeze({
 		form: "single",
 		optional: true
 	}],
-	"pipelineAnalytics.getGroup": [{
-		name: "deviceId",
-		form: "single",
-		optional: false
-	}],
 	"pipelineAnalytics.getKeyEvents": [{
 		name: "deviceId",
 		form: "single",
@@ -35657,11 +35813,6 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
-	"pipelineAnalytics.listGroups": [{
-		name: "deviceIds",
-		form: "array",
-		optional: false
-	}],
 	"pipelineAnalytics.listOpsLog": [{
 		name: "deviceId",
 		form: "single",
@@ -35707,6 +35858,11 @@ Object.freeze({
 		form: "single",
 		optional: true
 	}],
+	"pipelineAnalytics.reclaimDebugMedia": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
 	"pipelineAnalytics.reconcileFromDisk": [{
 		name: "deviceId",
 		form: "single",
@@ -36072,6 +36228,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"recording.setDevicePlacement": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"recording.startStorageMigrationMove": [{
 		name: "deviceId",
 		form: "single",

package/dist/{dist-Cv-ufJXF.js → dist-v7uK6zeq.js}

@@ -8113,6 +8113,13 @@ var MediaRelocateModeSchema = _enum([
 ]);
 var RelocateMediaInputSchema = object({
 	toLocationId: string(),
+	/**
+	* Restrict the pass to rows currently on this location. Omitted / `'*'` =
+	* every row that is not already on `toLocationId` (the historical
+	* behaviour). A named source is what a from→to migration needs: without it
+	* "move events off disk 2" also emptied disk 1.
+	*/
+	fromLocationId: string().optional(),
 	throttleMbps: number().min(1).max(1e3).optional(),
 	/** Omitted = `move`, the pre-existing behaviour. */
 	mode: MediaRelocateModeSchema.optional()
@@ -8180,6 +8187,19 @@ var StorageMigrationDestinationsSchema = object({
 	galleryMedia: string().min(1).optional()
 }).refine((value) => Object.keys(value).length > 0, { message: "select at least one storage class" });
 /**
+* Optional named source per class. Omitted = the class's current default
+* (the historical behaviour). A named source that is NOT the default is a
+* drain of that disk: bytes move, the default stays, and the source is
+* disabled when the move finishes.
+*/
+var StorageMigrationSourcesSchema = object({
+	recordings: string().min(1).optional(),
+	recordingsLow: string().min(1).optional(),
+	eventMedia: string().min(1).optional(),
+	backups: string().min(1).optional(),
+	galleryMedia: string().min(1).optional()
+}).optional();
+/**
 * How a migration sequences the cutover against the byte move.
 *
 *  - `blocking`     — the historical order: pause, move every byte, repoint,
@@ -8201,6 +8221,8 @@ var StorageMigrationModeSchema = _enum(["blocking", "nonBlocking"]);
 /** Shared input for planning and starting an orchestrated storage migration. */
 var StorageMigrationInputSchema = object({
 	destinations: StorageMigrationDestinationsSchema,
+	/** Omitted = each class's current default. */
+	sources: StorageMigrationSourcesSchema,
 	throttleMbps: number().min(1).max(1e3).optional(),
 	/** Omitted = `blocking`, which stays the default. */
 	mode: StorageMigrationModeSchema.optional()
@@ -8280,6 +8302,13 @@ var StorageMigrationMoveSchema = object({
 	storageClass: StorageMigrationClassSchema,
 	fromLocationId: string(),
 	toLocationId: string(),
+	/**
+	* True when `from` was NOT the class default at plan time. The move still
+	* copies bytes, but the default is left alone and the source is disabled
+	* once the copy verifies. Absent on jobs planned before this field existed
+	* — those jobs always repointed, which is `false`.
+	*/
+	freezeSource: boolean().optional(),
 	moverJobId: string().nullable(),
 	state: RelocateJobStateSchema.nullable(),
 	error: string().nullable(),
@@ -8293,6 +8322,7 @@ var StorageMigrationJobSchema = object({
 	*  can tell a seconds-long cutover from a thirty-hour one. */
 	mode: StorageMigrationModeSchema,
 	destinations: StorageMigrationDestinationsSchema,
+	sources: StorageMigrationSourcesSchema,
 	throttleMbps: number(),
 	moves: array(StorageMigrationMoveSchema),
 	pauseLeaseId: string().nullable(),
@@ -8318,6 +8348,7 @@ var StorageMigrationFindingSchema = object({
 });
 var StorageMigrationPlanSchema = object({
 	destinations: StorageMigrationDestinationsSchema,
+	sources: StorageMigrationSourcesSchema,
 	/** The mode this plan was built for. A plan is only valid for its mode: the
 	*  `eventMedia` seal gate and the single-cardinality refusal both depend on
 	*  it. */
@@ -8325,7 +8356,8 @@ var StorageMigrationPlanSchema = object({
 	moves: array(object({
 		storageClass: StorageMigrationClassSchema,
 		fromLocationId: string(),
-		toLocationId: string()
+		toLocationId: string(),
+		freezeSource: boolean().optional()
 	})),
 	findings: array(StorageMigrationFindingSchema)
 });
@@ -8503,10 +8535,51 @@ var LedgerWalkReportSchema = object({
 var RelocatableMediaCountSchema = object({ rows: number().int().nonnegative() }).nullable();
 var RelocatableMediaCountInputSchema = object({
 	toLocationId: string().min(1),
+	/** Restrict the count to one source; omitted / `'*'` = every non-target row. */
+	fromLocationId: string().optional(),
 	/** Omitted = `move`. */
 	mode: MediaRelocateModeSchema.optional()
 });
 /**
+* Operator cleanup of leftover analytics rows, optional debug media, and
+* ghost ledger entries on frozen footage locations.
+*
+* A pass is tens of minutes on a standing backlog. The hub method RETURNS
+* `{ jobId }` immediately; progress is `cleanupStatus`. Awaiting the work
+* is how `addons.custom` hit the 60 s UDS deadline while reclaim continued
+* with no operator-visible status.
+*/
+var StorageCleanupPhaseSchema = _enum([
+	"orphans",
+	"debug-media",
+	"ghost-ledger",
+	"done",
+	"failed",
+	"cancelled"
+]);
+var StorageCleanupInputSchema = object({ 
+/** Also walk motion stills / track filmstrips. Off by default. */
+includeDebugMedia: boolean().optional() });
+var StorageCleanupJobSchema = object({
+	jobId: string(),
+	phase: StorageCleanupPhaseSchema,
+	includeDebugMedia: boolean(),
+	orphansReclaimed: number().int().nonnegative(),
+	orphanBytesReclaimed: number().int().nonnegative(),
+	debugMediaReclaimed: number().int().nonnegative(),
+	debugMediaBytesReclaimed: number().int().nonnegative(),
+	ghostsForgotten: number().int().nonnegative(),
+	ghostBytesForgotten: number().int().nonnegative(),
+	/** Short operator-facing line: current collection, pass, or location. */
+	detail: string().nullable(),
+	cancelRequested: boolean(),
+	startedAt: number(),
+	updatedAt: number(),
+	finishedAt: number().nullable(),
+	error: string().nullable()
+});
+var StorageCleanupStatusInputSchema = object({ jobId: string().optional() });
+/**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
 * storage a location serves. Defined here (not in `capabilities/storage.cap.ts`)
 * so the persisted record schema and the consumer-facing cap can both consume it
@@ -8534,11 +8607,10 @@ var StorageLocationTypeSchema = string().regex(/^[a-z][a-zA-Z0-9-]*$/);
 * The default location for a type uses `id === <type>:default` by
 * convention (the bare type ref like `'backups'` resolves to it).
 *
-* `isSystem: true` marks a location as orchestrator-seeded and
-* undeletable. The bootstrap-installed defaults (one per type) carry
-* this flag; operator-added locations don't. Editing the config of
-* a system location is allowed (path migration, provider swap) but
-* deleting it is rejected at the cap level.
+* `isSystem` is a legacy persisted flag. Seed still creates the initial
+* `<type>:default` locations; the flag is no longer a lock, a badge, or a
+* prune selector. New writes leave it false. Deletion is gated on uniqueness
+* / last-enabled, not on this bit.
 */
 var StorageLocationSchema = object({
 	id: string().regex(/^[a-z][a-zA-Z0-9-]*:[a-zA-Z0-9-]+$/),
@@ -12800,6 +12872,12 @@ method(object({
 }), _void(), {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({
+	from: string(),
+	to: string()
+}), object({ moved: number() }), {
+	kind: "mutation",
+	auth: "admin"
 }), method(object({
 	deviceId: number(),
 	disabled: boolean()
@@ -18747,46 +18825,6 @@ var RecentTracksPageSchema = object({
 	/** Cursor for the next page, or null when this page is the last. */
 	nextCursor: string().nullable()
 });
-var LIST_GROUPS_DEFAULT_LIMIT = 40;
-var LIST_GROUPS_MAX_LIMIT = 100;
-var AnalyticsGroupRecordSchema = object({
-	id: string(),
-	deviceId: number().int(),
-	openedAt: number().int(),
-	closedAt: number().int(),
-	timestamp: number().int(),
-	memberCount: number().int(),
-	memberTrackIds: array(string()).readonly(),
-	className: string(),
-	classes: array(string()).readonly(),
-	/** Relative event-media path, or null when the group has no picture yet. */
-	mediaUrl: string().nullable(),
-	singleton: boolean()
-});
-var AnalyticsGroupMemberSchema = object({
-	trackId: string(),
-	deviceId: number().int(),
-	className: string(),
-	firstSeen: number().int(),
-	lastSeen: number().int(),
-	mediaUrl: string().nullable()
-});
-var AnalyticsGroupDetailSchema = AnalyticsGroupRecordSchema.extend({ members: array(AnalyticsGroupMemberSchema).readonly() });
-var ListGroupsQueryInput = object({
-	/** Devices to merge. An empty array yields `{ groups: [], nextCursor: null }`. */
-	deviceIds: array(number()),
-	/** Window lower bound on `closedAt` (inclusive). */
-	since: number().optional(),
-	/** Window upper bound on `openedAt` (inclusive). */
-	until: number().optional(),
-	limit: number().int().min(1).max(LIST_GROUPS_MAX_LIMIT).default(LIST_GROUPS_DEFAULT_LIMIT),
-	/** Opaque continuation cursor from a previous page's `nextCursor`. */
-	cursor: string().optional()
-});
-var ListGroupsPageSchema = object({
-	groups: array(AnalyticsGroupRecordSchema).readonly(),
-	nextCursor: string().nullable()
-});
 var KEY_EVENTS_DEFAULT_LIMIT = 50;
 var KEY_EVENTS_MAX_LIMIT = 200;
 var KeyEventQueryInput = object({
@@ -18890,9 +18928,7 @@ var TrackCascadeCountsSchema = object({
 	/** Unassigned plate reads removed (best-effort; plate leg deferred to plate-intelligence). */
 	plates: number().int(),
 	/** Per-track CLIP search vectors removed (best-effort). */
-	embeddings: number().int(),
-	/** Group membership + group rows removed with their last member (best-effort). */
-	groups: number().int()
+	embeddings: number().int()
 });
 /** Disk-wins reconcile: media rows whose blobs are gone, then empty tracks. */
 var DiskReconcileCountsSchema = object({
@@ -19062,6 +19098,47 @@ var RebuildStatusSchema = object({
 	/** Present when the pass ended by throwing. */
 	error: string().nullable()
 });
+/**
+* Acknowledgement that a debug-media reclaim STARTED.
+*
+* The pass is paced at ~2 MB/s over a standing 100 GB — tens of minutes — so
+* it runs detached and this returns immediately. Awaiting it is how the
+* `addons.custom` door hit the 60 s UDS deadline while the walk carried on
+* with no status. Poll {@link pipelineAnalyticsCapability.methods.getMediaReclaimStatus}.
+*/
+var MediaReclaimStartResultSchema = object({
+	started: boolean(),
+	/** True when a pass was already running; the new request is ignored. */
+	alreadyRunning: boolean()
+});
+var MediaReclaimInputSchema = object({
+	mode: _enum(["report", "reclaim"]).default("report"),
+	scopes: array(_enum(["motion-still", "track-filmstrip"])).min(1).optional(),
+	deviceIds: array(number().int()).min(1).optional(),
+	restart: boolean().optional(),
+	pageSize: number().int().min(50).max(5e3).optional(),
+	maxRowsPerDevice: number().int().min(1).max(5e5).optional(),
+	maxReclaimPerDevice: number().int().min(1).max(5e5).optional(),
+	maxBytesPerRun: number().int().min(1).optional(),
+	budgetMinutes: number().int().min(1).max(720).optional(),
+	throttleBytesPerSec: number().int().min(64 * 1024).optional(),
+	graceMinutes: number().int().min(1).max(10080).optional()
+});
+var MediaReclaimStatusSchema = object({
+	running: boolean(),
+	mode: _enum(["report", "reclaim"]).nullable(),
+	totalExamined: number(),
+	totalEligible: number(),
+	totalReclaimed: number(),
+	totalBytesReclaimed: number(),
+	totalRefused: number(),
+	/** Device+scope windows finished in this pass. */
+	devicesDone: number(),
+	complete: boolean().nullable(),
+	startedAtMs: number().nullable(),
+	finishedAtMs: number().nullable(),
+	error: string().nullable()
+});
 var ReplayFrameInputSchema = object({
 	timestamp: number(),
 	frame: PipelineRunResultBridge
@@ -19100,10 +19177,7 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 	*  stationary registry). Default false: the timeline lists passages,
 	*  not parking records (operator decision, 2026-08-15). */
 	includeStationary: boolean().optional()
-}), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(ListGroupsQueryInput, ListGroupsPageSchema), method(object({
-	deviceId: number(),
-	groupId: string().min(1)
-}), AnalyticsGroupDetailSchema.nullable()), method(object({ deviceId: number() }), _void(), {
+}), array(TrackSchema).readonly()), method(RecentTracksQueryInput, RecentTracksPageSchema), method(object({ deviceId: number() }), _void(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(DeviceEventQueryInput, array(MotionEventSchema).readonly()), method(ObjectEventQueryInput, array(ObjectEventSchema).readonly()), method(DeviceEventQueryInput, array(AudioEventSchema).readonly()), method(object({ deviceId: number() }), array(EventKindDescriptorSchema).readonly()), method(object({ deviceIds: array(number()).min(1).max(200) }), array(EventKindsForDeviceSchema).readonly()), method(object({
@@ -19203,6 +19277,12 @@ DeviceType.Camera, method(object({ deviceId: number() }), array(TrackSchema).rea
 }), method(OpsLogQueryInputSchema, array(OpsLogEntrySchema).readonly(), {
 	kind: "query",
 	auth: "admin"
+}), method(MediaReclaimInputSchema, MediaReclaimStartResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({}), MediaReclaimStatusSchema, {
+	kind: "query",
+	auth: "admin"
 }), method(object({ deviceIds: array(number()).optional() }), TrainingExportSummarySchema, {
 	kind: "query",
 	auth: "admin"
@@ -21173,7 +21253,13 @@ method(StorageMigrationInputSchema, StorageMigrationPlanSchema, { auth: "admin"
 }), method(object({}), array(StorageMigrationMoverSchema).readonly(), { auth: "admin" }), method(object({}), array(StorageMigrationResidueSchema).readonly(), { auth: "admin" }), method(StorageMigrationDrainInputSchema, object({ jobId: string() }), {
 	kind: "mutation",
 	auth: "admin"
-});
+}), method(StorageCleanupInputSchema, object({ jobId: string() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(StorageCleanupStatusInputSchema, StorageCleanupJobSchema.nullable(), { auth: "admin" }), method(object({ jobId: string() }), object({ cancelled: boolean() }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({}), array(StorageMigrationJobSchema).readonly(), { auth: "admin" });
 var ProviderInfoSchema = discriminatedUnion("shouldSaveDiskSpace", [object({
 	providerId: string().min(1),
 	displayName: string().min(1),
@@ -26612,6 +26698,33 @@ var RecordingRebalanceInputSchema = object({
 	minMoveGb: number().min(0).optional()
 });
 /**
+* Operator-facing placement of one camera onto a recordings location.
+*
+* `pinLocationId` is the operator instruction: a location id, or `null` for
+* Auto (the planner may move this camera). `locationId` is where high/mid
+* currently write — the plan, which may disagree with the pin when Auto.
+*/
+var RecordingDevicePlacementSchema = object({
+	deviceId: number().int(),
+	profile: string(),
+	locationId: string()
+});
+var RecordingDevicePinSchema = object({
+	deviceId: number().int(),
+	/** Recordings-class location this camera is pinned to. */
+	locationId: string()
+});
+var RecordingPlacementViewSchema = object({
+	assignments: array(RecordingDevicePlacementSchema),
+	pins: array(RecordingDevicePinSchema),
+	defaultLocations: record(string(), string())
+});
+var RecordingSetDevicePlacementInputSchema = object({
+	deviceId: number().int(),
+	/** `null` = Auto. Otherwise a `recordings:*` location id. */
+	locationId: string().nullable()
+});
+/**
 * Result of locating footage at a wall-clock instant for one device/profile.
 * `segment` carries the covering segment's window; `gap` reports the forward
 * nearest covered edge (`null` past the end of footage / when none exists)
@@ -26837,6 +26950,12 @@ method(object({
 }), method(RecordingRebalanceInputSchema, RecordingRebalancePlanSchema, {
 	kind: "mutation",
 	auth: "admin"
+}), method(object({}), RecordingPlacementViewSchema, {
+	kind: "query",
+	auth: "admin"
+}), method(RecordingSetDevicePlacementInputSchema, object({ ok: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
 });
 /**
 * `recording-export` cap — render a footage time range into a single downloadable
@@ -30207,6 +30326,12 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"deviceManager.renameLocation": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.runDeviceAction": {
 		capName: "device-manager",
 		capScope: "system",
@@ -31899,19 +32024,19 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.getGroup": {
+	"pipelineAnalytics.getKeyEvents": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.getKeyEvents": {
+	"pipelineAnalytics.getKeyEventsBatch": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.getKeyEventsBatch": {
+	"pipelineAnalytics.getMediaReclaimStatus": {
 		capName: "pipeline-analytics",
 		capScope: "device",
 		addonId: null,
@@ -32001,12 +32126,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineAnalytics.listGroups": {
-		capName: "pipeline-analytics",
-		capScope: "device",
-		addonId: null,
-		access: "view"
-	},
 	"pipelineAnalytics.listOpsLog": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -32091,6 +32210,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineAnalytics.reclaimDebugMedia": {
+		capName: "pipeline-analytics",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineAnalytics.reconcileFromDisk": {
 		capName: "pipeline-analytics",
 		capScope: "device",
@@ -33015,6 +33140,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"recording.getPlacement": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"recording.getPlaybackManifest": {
 		capName: "recording",
 		capScope: "system",
@@ -33141,6 +33272,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recording.setDevicePlacement": {
+		capName: "recording",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"recording.startStorageMigrationMove": {
 		capName: "recording",
 		capScope: "system",
@@ -33585,12 +33722,36 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"storageMigration.cleanupCancel": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.cleanupStart": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"storageMigration.cleanupStatus": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageMigration.drain": {
 		capName: "storage-migration",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
+	"storageMigration.history": {
+		capName: "storage-migration",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"storageMigration.movers": {
 		capName: "storage-migration",
 		capScope: "system",
@@ -35587,11 +35748,6 @@ Object.freeze({
 		form: "single",
 		optional: true
 	}],
-	"pipelineAnalytics.getGroup": [{
-		name: "deviceId",
-		form: "single",
-		optional: false
-	}],
 	"pipelineAnalytics.getKeyEvents": [{
 		name: "deviceId",
 		form: "single",
@@ -35657,11 +35813,6 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
-	"pipelineAnalytics.listGroups": [{
-		name: "deviceIds",
-		form: "array",
-		optional: false
-	}],
 	"pipelineAnalytics.listOpsLog": [{
 		name: "deviceId",
 		form: "single",
@@ -35707,6 +35858,11 @@ Object.freeze({
 		form: "single",
 		optional: true
 	}],
+	"pipelineAnalytics.reclaimDebugMedia": [{
+		name: "deviceIds",
+		form: "array",
+		optional: true
+	}],
 	"pipelineAnalytics.reconcileFromDisk": [{
 		name: "deviceId",
 		form: "single",
@@ -36072,6 +36228,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"recording.setDevicePlacement": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"recording.startStorageMigrationMove": [{
 		name: "deviceId",
 		form: "single",

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-Cv-ufJXF.js");
+const require_dist = require("../dist-v7uK6zeq.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 //#region src/ingress/tailscale-cli.ts

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-8Fi7VglU.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-CMpgFoPi.mjs";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.2.49",
+  "version": "1.2.50",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",