@camstack/system 1.1.52 → 1.1.54

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BduBhv6N.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { O as filesystemBrowseCapability, Q as storageProviderCapability, it as BaseAddon } from "../../dist-B_PSvr-m.mjs";
+import { O as filesystemBrowseCapability, Q as storageProviderCapability, it as BaseAddon } from "../../dist-DssImRC5.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { basename, dirname, join, resolve, sep } from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BduBhv6N.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 let node_crypto = require("node:crypto");
 let better_sqlite3 = require("better-sqlite3");
 better_sqlite3 = require_chunk.__toESM(better_sqlite3);
@@ -510,10 +510,18 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 		if (existingCols.length > 0) {
 			const existingNames = new Set(existingCols.map((c) => c.name));
 			const declaredNames = new Set(schema.columns.map((c) => c.name));
-			const missingDeclared = schema.columns.some((c) => !existingNames.has(c.name));
-			if (existingCols.length <= 2 && existingNames.has("data") && !declaredNames.has("data") || missingDeclared) try {
+			const missingCols = schema.columns.filter((c) => !existingNames.has(c.name));
+			const isLegacyKv = existingCols.length <= 2 && existingNames.has("data") && !declaredNames.has("data");
+			const addableInPlace = (col) => !col.primaryKey && !col.unique && (!col.notNull || col.defaultValue !== void 0);
+			if (isLegacyKv || missingCols.some((c) => !addableInPlace(c))) try {
 				this.getDb().exec(`DROP TABLE "${table}"`);
 			} catch {}
+			else if (missingCols.length > 0) for (const col of missingCols) {
+				const parts = [`"${col.name}" ${col.type}`];
+				if (col.notNull) parts.push("NOT NULL");
+				if (col.defaultValue !== void 0) parts.push(`DEFAULT ${typeof col.defaultValue === "string" ? `'${col.defaultValue}'` : col.defaultValue === null ? "NULL" : String(col.defaultValue)}`);
+				this.getDb().exec(`ALTER TABLE "${table}" ADD COLUMN ${parts.join(" ")}`);
+			}
 		}
 		this.getDb().exec(`CREATE TABLE IF NOT EXISTS "${table}" (${colDefs.join(", ")})`);
 		if (schema.indexes) for (const idx of schema.indexes) {

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { Y as settingsStoreCapability, it as BaseAddon, mt as asJsonObject, rt as errMsg, s as RUNTIME_DEFAULTS, wt as parseJsonUnknown } from "../../dist-B_PSvr-m.mjs";
+import { Y as settingsStoreCapability, it as BaseAddon, mt as asJsonObject, rt as errMsg, s as RUNTIME_DEFAULTS, wt as parseJsonUnknown } from "../../dist-DssImRC5.mjs";
 import { randomUUID } from "node:crypto";
 import Database from "better-sqlite3";
 //#region src/builtins/sqlite-storage/sqlite-settings-backend.ts
@@ -504,10 +504,18 @@ var SqliteSettingsBackend = class SqliteSettingsBackend {
 		if (existingCols.length > 0) {
 			const existingNames = new Set(existingCols.map((c) => c.name));
 			const declaredNames = new Set(schema.columns.map((c) => c.name));
-			const missingDeclared = schema.columns.some((c) => !existingNames.has(c.name));
-			if (existingCols.length <= 2 && existingNames.has("data") && !declaredNames.has("data") || missingDeclared) try {
+			const missingCols = schema.columns.filter((c) => !existingNames.has(c.name));
+			const isLegacyKv = existingCols.length <= 2 && existingNames.has("data") && !declaredNames.has("data");
+			const addableInPlace = (col) => !col.primaryKey && !col.unique && (!col.notNull || col.defaultValue !== void 0);
+			if (isLegacyKv || missingCols.some((c) => !addableInPlace(c))) try {
 				this.getDb().exec(`DROP TABLE "${table}"`);
 			} catch {}
+			else if (missingCols.length > 0) for (const col of missingCols) {
+				const parts = [`"${col.name}" ${col.type}`];
+				if (col.notNull) parts.push("NOT NULL");
+				if (col.defaultValue !== void 0) parts.push(`DEFAULT ${typeof col.defaultValue === "string" ? `'${col.defaultValue}'` : col.defaultValue === null ? "NULL" : String(col.defaultValue)}`);
+				this.getDb().exec(`ALTER TABLE "${table}" ADD COLUMN ${parts.join(" ")}`);
+			}
 		}
 		this.getDb().exec(`CREATE TABLE IF NOT EXISTS "${table}" (${colDefs.join(", ")})`);
 		if (schema.indexes) for (const idx of schema.indexes) {

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BduBhv6N.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ct as parseJsonObject, Z as storageCapability, it as BaseAddon, u as StorageLocationTypeSchema } from "../../dist-B_PSvr-m.mjs";
+import { Ct as parseJsonObject, Z as storageCapability, it as BaseAddon, u as StorageLocationTypeSchema } from "../../dist-DssImRC5.mjs";
 import * as path$1 from "node:path";
 import * as fs from "node:fs/promises";
 import { buildStorageLocationRegistry } from "@camstack/system";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BduBhv6N.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { it as BaseAddon, rt as errMsg, xt as hydrateSchema } from "../../dist-B_PSvr-m.mjs";
+import { it as BaseAddon, rt as errMsg, xt as hydrateSchema } from "../../dist-DssImRC5.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BduBhv6N.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { L as logDestinationCapability, it as BaseAddon } from "../../dist-B_PSvr-m.mjs";
+import { L as logDestinationCapability, it as BaseAddon } from "../../dist-DssImRC5.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-BduBhv6N.js → dist-B5C4dVvO.js}

@@ -1,5 +1,5 @@
 let zod = require("zod");
-//#region ../types/dist/event-category-H4AVePnn.mjs
+//#region ../types/dist/event-category-D4HJq7Mw.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -152,6 +152,11 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/** Runner-sampled scrub thumbnail (~1/5 s/camera). Telemetry (D8): a lost
 	*  thumb is a scrub gap the recorder's keyframe backfill covers. */
 	EventCategory["RecordingThumbSampled"] = "recording.thumb-sampled";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
 	EventCategory["DetectionEvent"] = "detection.event";
 	EventCategory["SessionTrackNew"] = "session.track.new";
 	EventCategory["SessionTrackExpired"] = "session.track.expired";
@@ -441,6 +446,25 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
 	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaKey?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
 	* Fired by `addon-post-analysis` whenever a gallery face row changes:
 	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
 	* `'unassigned'` its identity link changed, `'deleted'` the row was
@@ -1802,6 +1826,19 @@ function scopeKey(scope) {
 		case "device": return `device:${scope.deviceId}`;
 	}
 }
+/**
+* Producer transition order within ONE generation: `starting → ready →
+* down`. Used by `hydrate` to accept only forward moves for
+* same-generation snapshot records (a snapshot can be ahead of a lost
+* delta, never behind it, within one producer generation).
+*/
+function stateRank(state) {
+	switch (state) {
+		case "starting": return 0;
+		case "ready": return 1;
+		case "down": return 2;
+	}
+}
 function scopesEqual(a, b) {
 	if (a.type !== b.type) return false;
 	if (a.type === "global" || b.type === "global") return true;
@@ -1852,43 +1889,70 @@ var ReadinessRegistry = class {
 		return Array.from(this.snapshot.values());
 	}
 	/**
-	* Hydrate the snapshot from an authoritative source. Entries already
-	* present locally are skipped — live deltas (received via the event
-	* bus subscription) always take precedence over the snapshot. For
-	* each newly hydrated entry, a one-shot transition is dispatched to
-	* matching subscriptions so pending `awaitReady` callers unblock
-	* without having to wait for a fresh event.
+	* Hydrate the snapshot from an authoritative source — a RECONCILE, not
+	* an add-only merge (D8: readiness events are telemetry and may be
+	* lost; the on-reconnect/periodic snapshot re-pull is the repair path,
+	* so it MUST be able to advance a stale record — the 2026-07-17
+	* "still awaiting platform-probe forever" wedge was this method
+	* skipping every already-seen key).
+	*
+	*  - **Unseen keys** are added (epoch 1 — mirrors the value the
+	*    consumer would have derived from the first observed `ready`).
+	*  - **Existing keys** are UPDATED when the authoritative record
+	*    carries a different generation (producer restart / synthetic-down
+	*    superseded — epoch bumps on a new-generation `ready`, mirroring
+	*    `ingest`), or a FORWARD state move within the same generation
+	*    (`starting → ready → down`; within one producer generation a
+	*    snapshot can only be ahead of a lost delta, never behind it).
+	*  - **Never a same-generation regress** — a snapshot pulled just
+	*    before a live delta landed must not un-ready a record (the next
+	*    reconcile round converges it anyway).
+	*  - **Never a record this process is authoritative for** — node-scoped
+	*    records for our own nodeId, and device/global records we emitted,
+	*    keep local truth (an authority's stale copy of OUR record must
+	*    not regress us).
 	*
-	* Local `epoch` is reset to 1 per entry — consumer-side epoch is
-	* derived from observed generation transitions, so this mirrors the
-	* value that would have been assigned had the consumer observed the
-	* first `ready` event directly.
+	* Every applied entry dispatches a one-shot transition to matching
+	* subscriptions so pending `awaitReady` callers unblock without having
+	* to wait for a fresh event.
 	*/
 	hydrate(records) {
 		const now = this.now();
 		for (const record of records) {
 			const key = readinessKey(record.capName, record.scope);
-			if (this.snapshot.has(key)) continue;
+			const prev = this.snapshot.get(key) ?? null;
+			let epoch;
+			let durationInPrevState;
+			if (prev !== null) {
+				if (this.isLocallyAuthoritative(prev)) continue;
+				const sameGeneration = prev.generation === record.generation;
+				if (sameGeneration && stateRank(record.state) <= stateRank(prev.state)) continue;
+				epoch = !sameGeneration && record.state === "ready" ? prev.epoch + 1 : prev.epoch;
+				durationInPrevState = Math.max(0, now - prev.lastChange);
+			} else {
+				epoch = 1;
+				durationInPrevState = 0;
+			}
 			const hydrated = {
 				capName: record.capName,
 				scope: record.scope,
 				state: record.state,
 				generation: record.generation,
-				epoch: 1,
+				epoch,
 				lastChange: now,
 				sourceNodeId: record.sourceNodeId
 			};
 			this.snapshot.set(key, hydrated);
-			if (this.logger) this.logger.debug(`readiness: ${record.capName} (${scopeKey(record.scope)}) → ${record.state} (hydrated, gen=${record.generation.slice(0, 6)})`);
+			if (this.logger) this.logger.debug(`readiness: ${record.capName} (${scopeKey(record.scope)}) → ${record.state} (hydrated${prev !== null ? " update" : ""}, gen=${record.generation.slice(0, 6)})`);
 			const transition = {
 				capName: record.capName,
 				scope: record.scope,
 				state: record.state,
-				epoch: 1,
+				epoch,
 				generation: record.generation,
 				sourceNodeId: "hydrated",
 				ts: now,
-				durationInPrevState: 0
+				durationInPrevState
 			};
 			for (const sub of this.subscriptions) {
 				if (sub.capName !== record.capName) continue;
@@ -1901,6 +1965,17 @@ var ReadinessRegistry = class {
 			}
 		}
 	}
+	/**
+	* True when THIS process is the origin authority for `record` — a
+	* snapshot pulled from elsewhere must never overwrite it:
+	*  - node-scoped records whose `scope.nodeId` is our own node id
+	*    (this process — or a child bridged onto our bus — emits them);
+	*  - device/global-scoped records whose latest transition WE emitted.
+	*/
+	isLocallyAuthoritative(record) {
+		if (record.scope.type === "node") return record.scope.nodeId === this.sourceNodeId;
+		return record.sourceNodeId === this.sourceNodeId;
+	}
 	/** Shallow copy of the full snapshot — mainly for diagnostics/tests. */
 	getAll() {
 		return new Map(this.snapshot);
@@ -3204,6 +3279,24 @@ var RecordingRetentionSchema = zod.z.object({
 	maxSizeGb: zod.z.number().min(0).optional()
 });
 /**
+* Scrub-thumbnail fidelity preset — the single per-camera selector bundling the
+* sprite tile RESOLUTION + JPEG QUALITY the recorder packs timeline-scrub
+* previews at. Five graduated steps; absent on a config = `standard` (the
+* shipped default, matching `sheet-geometry`/`sheet-composer`).
+*
+* Existing sheets are IMMUTABLE — a changed preset applies to NEW windows only.
+* Each window's index sidecar carries its own tile dims, so a camera whose
+* preset changed over time renders every historical window at the dims it was
+* written with.
+*/
+var ScrubThumbnailPresetSchema = zod.z.enum([
+	"minimal",
+	"low",
+	"standard",
+	"high",
+	"max"
+]);
+/**
 * The full per-camera recording intent — the wire shape of a RecordingTarget.
 *
 * `mode` is the authoritative storage choice; `schedule`/`triggers`/`pre`/`post`
@@ -3240,7 +3333,14 @@ var RecordingConfigSchema = zod.z.object({
 	* derived into bands once via `migrateConfigToBands`.
 	*/
 	bands: zod.z.array(RecordingBandSchema).optional(),
-	retention: RecordingRetentionSchema.optional()
+	retention: RecordingRetentionSchema.optional(),
+	/**
+	* Per-camera scrub-thumbnail fidelity preset (resolution + JPEG quality for
+	* timeline-scrub sprite previews). Absent = `standard`. Applies to NEW
+	* windows only — existing sheets are immutable, and each window's index
+	* carries its own tile dims so mixed-preset history renders correctly.
+	*/
+	scrubThumbnails: ScrubThumbnailPresetSchema.optional()
 });
 /**
 * `StorageLocationType` — an addon-declared id that identifies the *kind* of
@@ -11080,7 +11180,11 @@ zod.z.array(ZoneRuleSchema).readonly();
 * Extend the enum here when a new gating consumer comes online (audio
 * gating, alert filtering, …) — no other surface needs to change.
 */
-var ZoneRuleStageEnum = zod.z.enum(["motion", "detection"]);
+var ZoneRuleStageEnum = zod.z.enum([
+	"motion",
+	"detection",
+	"package"
+]);
 /**
 * Zone rules capability — per-camera CRUD over the {@link ZoneRule}
 * arrays that decide how each pipeline stage uses the polygon zones.
@@ -11124,16 +11228,24 @@ var zoneRulesCapability = {
 		})
 	},
 	/**
-	* Runtime-state slice — both stages mirrored together so consumers
+	* Runtime-state slice — every stage mirrored together so consumers
 	* see one reactive handle (`device.state.zoneRules.value`) instead
-	* of two. Bulk-replace mutations on either stage write the full
-	* `{motion, detection}` shape, so subscribers always get the
+	* of one per stage. Bulk-replace mutations on any stage write the full
+	* `{motion, detection, package}` shape, so subscribers always get the
 	* complete current set. Consumers that only care about one stage
 	* just read the matching property.
+	*
+	* `package` backs the package-drop detector — a package zone is a
+	* `ZoneRule` on the `'package'` stage referencing drawn polygons
+	* (see docs/superpowers/specs/2026-07-17-package-zones-design.md §3.1).
+	* The orchestrator provider that writes this stage lands in a later
+	* slice; until then the mirror carries only `{motion, detection}` and
+	* consumers read `package` as absent (treat as `[]`).
 	*/
 	runtimeState: zod.z.object({
 		motion: zod.z.array(ZoneRuleSchema).readonly(),
-		detection: zod.z.array(ZoneRuleSchema).readonly()
+		detection: zod.z.array(ZoneRuleSchema).readonly(),
+		package: zod.z.array(ZoneRuleSchema).readonly()
 	})
 };
 var ProviderStatusSchema = zod.z.object({
@@ -15699,6 +15811,7 @@ var EventKindIconSchema = zod.z.enum([
 	"smoke",
 	"water",
 	"button",
+	"package",
 	"generic"
 ]);
 var EventKindCategorySchema = zod.z.enum([
@@ -15706,7 +15819,8 @@ var EventKindCategorySchema = zod.z.enum([
 	"audio",
 	"detection",
 	"sensor",
-	"custom"
+	"custom",
+	"package"
 ]);
 var EventKindDescriptorSchema = zod.z.object({
 	/** Stable kind id (e.g. 'motion', 'person', 'contact'). */
@@ -20843,6 +20957,125 @@ var recordingCapability = {
 	}
 };
 /**
+* `recordingExport` cap — render a footage time range into a single downloadable
+* MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
+* bounded lifetime with a durable history, auto-expiry, and optional
+* delete-after-download.
+*
+* Like `recording` this is a `scope:'system', mode:'singleton'` cap: the
+* recorder self-gates so exactly ONE node (the designated `recordingNodeId`,
+* default `hub`) registers it. Device-scoped methods carry `deviceId` in their
+* input and dispatch to that single provider; the render runs on the node that
+* owns the footage (no cross-node segment transfer). Download rides the
+* framework addon data-plane. State persists in a DurableState blob (NOT
+* SQLite); history rows survive file deletion for audit.
+*/
+/** Playback-speed multiplier for the render (1 = realtime). */
+var ExportSpeedSchema = zod.z.number().min(.25).max(32);
+/** Timelapse cadence — sample one source frame per `everyMs`, output at `outputFps`. */
+var ExportTimelapseSchema = zod.z.object({
+	everyMs: zod.z.number().int().positive(),
+	outputFps: zod.z.number().int().min(1).max(60).optional()
+});
+/**
+* Render options. `speed` and `timelapse` are mutually exclusive. `includeAudio`
+* is honoured only for a realtime-ish speed (0.5–2×); timelapse is always
+* silent. `maxLifeMs` bounds how long the finished file is kept;
+* `deleteAfterDownload` removes it shortly after the first complete download.
+*/
+var ExportOptionsSchema = zod.z.object({
+	speed: ExportSpeedSchema.optional(),
+	timelapse: ExportTimelapseSchema.optional(),
+	includeAudio: zod.z.boolean(),
+	maxLifeMs: zod.z.number().int().positive(),
+	deleteAfterDownload: zod.z.boolean(),
+	title: zod.z.string().max(200).optional()
+}).superRefine((v, ctx) => {
+	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
+		code: zod.z.ZodIssueCode.custom,
+		message: "speed and timelapse are mutually exclusive",
+		path: ["timelapse"]
+	});
+});
+var ExportStateSchema = zod.z.enum([
+	"queued",
+	"rendering",
+	"ready",
+	"failed",
+	"expired",
+	"deleted"
+]);
+/** One export job / history row. */
+var ExportRecordSchema = zod.z.object({
+	id: zod.z.string(),
+	deviceId: zod.z.number(),
+	profile: zod.z.string(),
+	fromMs: zod.z.number(),
+	toMs: zod.z.number(),
+	options: ExportOptionsSchema,
+	state: ExportStateSchema,
+	/** 0–100 while rendering; null otherwise. */
+	progressPct: zod.z.number().nullable(),
+	/** File size once ready; null before. */
+	fileBytes: zod.z.number().nullable(),
+	expiresAt: zod.z.number(),
+	deleteAfterDownload: zod.z.boolean(),
+	/** Epoch of the first complete download; null until then. */
+	downloadedAt: zod.z.number().nullable(),
+	createdAt: zod.z.number(),
+	/** User id/name that requested the export. */
+	createdBy: zod.z.string(),
+	/** Failure reason when state is 'failed'; null otherwise. */
+	error: zod.z.string().nullable()
+});
+/** Candidate download URLs (LAN first, then operator extra hosts). */
+var ExportDownloadSchema = zod.z.object({
+	url: zod.z.string(),
+	endpoints: zod.z.array(zod.z.string())
+});
+var recordingExportCapability = {
+	name: "recordingExport",
+	scope: "system",
+	mode: "singleton",
+	methods: {
+		/** Queue a render of `[fromMs,toMs)` for `deviceId`/`profile`. Fails fast
+		*  when no footage covers the range. Returns the queued record. */
+		createExport: method(zod.z.object({
+			deviceId: zod.z.number(),
+			profile: zod.z.string(),
+			fromMs: zod.z.number(),
+			toMs: zod.z.number(),
+			options: ExportOptionsSchema
+		}), ExportRecordSchema, {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		/** All export rows (history included), optionally scoped to one device. */
+		listExports: method(zod.z.object({ deviceId: zod.z.number().optional() }), zod.z.array(ExportRecordSchema), {
+			kind: "query",
+			auth: "protected"
+		}),
+		getExport: method(zod.z.object({ exportId: zod.z.string() }), ExportRecordSchema, {
+			kind: "query",
+			auth: "protected"
+		}),
+		/** Abort a queued/rendering export; the partial file is removed. */
+		cancelExport: method(zod.z.object({ exportId: zod.z.string() }), ExportRecordSchema, {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		/** Remove the file but keep the history row (state → 'deleted'). */
+		deleteExport: method(zod.z.object({ exportId: zod.z.string() }), ExportRecordSchema, {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		getDownloadUrl: method(zod.z.object({ exportId: zod.z.string() }), ExportDownloadSchema, {
+			kind: "query",
+			auth: "protected"
+		})
+	}
+};
+/**
 * One publishable camera stream as its OWNING PROVIDER describes it — the same
 * payload the (legacy) push `streamBroker.publishCameraStream` carried, minus
 * `deviceId`.
@@ -21604,6 +21837,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	ptzAutotrackCapability,
 	rebootCapability,
 	recordingCapability,
+	recordingExportCapability,
 	sceneMonitorCapability,
 	scriptRunnerCapability,
 	serverManagementCapability,
@@ -25327,6 +25561,42 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordingExport.cancelExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.createExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.deleteExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordingExport.getDownloadUrl": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.getExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.listExports": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",