@camstack/system 1.1.53 → 1.1.54

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BNro5CRu.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { O as filesystemBrowseCapability, Q as storageProviderCapability, it as BaseAddon } from "../../dist-D7_69kDt.mjs";
+import { O as filesystemBrowseCapability, Q as storageProviderCapability, it as BaseAddon } from "../../dist-DssImRC5.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { basename, dirname, join, resolve, sep } from "node:path";

package/dist/builtins/sqlite-storage/sqlite-settings.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BNro5CRu.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 let node_crypto = require("node:crypto");
 let better_sqlite3 = require("better-sqlite3");
 better_sqlite3 = require_chunk.__toESM(better_sqlite3);

package/dist/builtins/sqlite-storage/sqlite-settings.addon.mjs

@@ -1,4 +1,4 @@
-import { Y as settingsStoreCapability, it as BaseAddon, mt as asJsonObject, rt as errMsg, s as RUNTIME_DEFAULTS, wt as parseJsonUnknown } from "../../dist-D7_69kDt.mjs";
+import { Y as settingsStoreCapability, it as BaseAddon, mt as asJsonObject, rt as errMsg, s as RUNTIME_DEFAULTS, wt as parseJsonUnknown } from "../../dist-DssImRC5.mjs";
 import { randomUUID } from "node:crypto";
 import Database from "better-sqlite3";
 //#region src/builtins/sqlite-storage/sqlite-settings-backend.ts

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BNro5CRu.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Ct as parseJsonObject, Z as storageCapability, it as BaseAddon, u as StorageLocationTypeSchema } from "../../dist-D7_69kDt.mjs";
+import { Ct as parseJsonObject, Z as storageCapability, it as BaseAddon, u as StorageLocationTypeSchema } from "../../dist-DssImRC5.mjs";
 import * as path$1 from "node:path";
 import * as fs from "node:fs/promises";
 import { buildStorageLocationRegistry } from "@camstack/system";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BNro5CRu.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { it as BaseAddon, rt as errMsg, xt as hydrateSchema } from "../../dist-D7_69kDt.mjs";
+import { it as BaseAddon, rt as errMsg, xt as hydrateSchema } from "../../dist-DssImRC5.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-BNro5CRu.js");
+const require_dist = require("../../dist-B5C4dVvO.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { L as logDestinationCapability, it as BaseAddon } from "../../dist-D7_69kDt.mjs";
+import { L as logDestinationCapability, it as BaseAddon } from "../../dist-DssImRC5.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-BNro5CRu.js → dist-B5C4dVvO.js}

@@ -1,5 +1,5 @@
 let zod = require("zod");
-//#region ../types/dist/event-category-H4AVePnn.mjs
+//#region ../types/dist/event-category-D4HJq7Mw.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -152,6 +152,11 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/** Runner-sampled scrub thumbnail (~1/5 s/camera). Telemetry (D8): a lost
 	*  thumb is a scrub gap the recorder's keyframe backfill covers. */
 	EventCategory["RecordingThumbSampled"] = "recording.thumb-sampled";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
 	EventCategory["DetectionEvent"] = "detection.event";
 	EventCategory["SessionTrackNew"] = "session.track.new";
 	EventCategory["SessionTrackExpired"] = "session.track.expired";
@@ -441,6 +446,25 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
 	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaKey?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
 	* Fired by `addon-post-analysis` whenever a gallery face row changes:
 	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
 	* `'unassigned'` its identity link changed, `'deleted'` the row was
@@ -11156,7 +11180,11 @@ zod.z.array(ZoneRuleSchema).readonly();
 * Extend the enum here when a new gating consumer comes online (audio
 * gating, alert filtering, …) — no other surface needs to change.
 */
-var ZoneRuleStageEnum = zod.z.enum(["motion", "detection"]);
+var ZoneRuleStageEnum = zod.z.enum([
+	"motion",
+	"detection",
+	"package"
+]);
 /**
 * Zone rules capability — per-camera CRUD over the {@link ZoneRule}
 * arrays that decide how each pipeline stage uses the polygon zones.
@@ -11200,16 +11228,24 @@ var zoneRulesCapability = {
 		})
 	},
 	/**
-	* Runtime-state slice — both stages mirrored together so consumers
+	* Runtime-state slice — every stage mirrored together so consumers
 	* see one reactive handle (`device.state.zoneRules.value`) instead
-	* of two. Bulk-replace mutations on either stage write the full
-	* `{motion, detection}` shape, so subscribers always get the
+	* of one per stage. Bulk-replace mutations on any stage write the full
+	* `{motion, detection, package}` shape, so subscribers always get the
 	* complete current set. Consumers that only care about one stage
 	* just read the matching property.
+	*
+	* `package` backs the package-drop detector — a package zone is a
+	* `ZoneRule` on the `'package'` stage referencing drawn polygons
+	* (see docs/superpowers/specs/2026-07-17-package-zones-design.md §3.1).
+	* The orchestrator provider that writes this stage lands in a later
+	* slice; until then the mirror carries only `{motion, detection}` and
+	* consumers read `package` as absent (treat as `[]`).
 	*/
 	runtimeState: zod.z.object({
 		motion: zod.z.array(ZoneRuleSchema).readonly(),
-		detection: zod.z.array(ZoneRuleSchema).readonly()
+		detection: zod.z.array(ZoneRuleSchema).readonly(),
+		package: zod.z.array(ZoneRuleSchema).readonly()
 	})
 };
 var ProviderStatusSchema = zod.z.object({
@@ -15775,6 +15811,7 @@ var EventKindIconSchema = zod.z.enum([
 	"smoke",
 	"water",
 	"button",
+	"package",
 	"generic"
 ]);
 var EventKindCategorySchema = zod.z.enum([
@@ -15782,7 +15819,8 @@ var EventKindCategorySchema = zod.z.enum([
 	"audio",
 	"detection",
 	"sensor",
-	"custom"
+	"custom",
+	"package"
 ]);
 var EventKindDescriptorSchema = zod.z.object({
 	/** Stable kind id (e.g. 'motion', 'person', 'contact'). */
@@ -20919,6 +20957,125 @@ var recordingCapability = {
 	}
 };
 /**
+* `recordingExport` cap — render a footage time range into a single downloadable
+* MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
+* bounded lifetime with a durable history, auto-expiry, and optional
+* delete-after-download.
+*
+* Like `recording` this is a `scope:'system', mode:'singleton'` cap: the
+* recorder self-gates so exactly ONE node (the designated `recordingNodeId`,
+* default `hub`) registers it. Device-scoped methods carry `deviceId` in their
+* input and dispatch to that single provider; the render runs on the node that
+* owns the footage (no cross-node segment transfer). Download rides the
+* framework addon data-plane. State persists in a DurableState blob (NOT
+* SQLite); history rows survive file deletion for audit.
+*/
+/** Playback-speed multiplier for the render (1 = realtime). */
+var ExportSpeedSchema = zod.z.number().min(.25).max(32);
+/** Timelapse cadence — sample one source frame per `everyMs`, output at `outputFps`. */
+var ExportTimelapseSchema = zod.z.object({
+	everyMs: zod.z.number().int().positive(),
+	outputFps: zod.z.number().int().min(1).max(60).optional()
+});
+/**
+* Render options. `speed` and `timelapse` are mutually exclusive. `includeAudio`
+* is honoured only for a realtime-ish speed (0.5–2×); timelapse is always
+* silent. `maxLifeMs` bounds how long the finished file is kept;
+* `deleteAfterDownload` removes it shortly after the first complete download.
+*/
+var ExportOptionsSchema = zod.z.object({
+	speed: ExportSpeedSchema.optional(),
+	timelapse: ExportTimelapseSchema.optional(),
+	includeAudio: zod.z.boolean(),
+	maxLifeMs: zod.z.number().int().positive(),
+	deleteAfterDownload: zod.z.boolean(),
+	title: zod.z.string().max(200).optional()
+}).superRefine((v, ctx) => {
+	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
+		code: zod.z.ZodIssueCode.custom,
+		message: "speed and timelapse are mutually exclusive",
+		path: ["timelapse"]
+	});
+});
+var ExportStateSchema = zod.z.enum([
+	"queued",
+	"rendering",
+	"ready",
+	"failed",
+	"expired",
+	"deleted"
+]);
+/** One export job / history row. */
+var ExportRecordSchema = zod.z.object({
+	id: zod.z.string(),
+	deviceId: zod.z.number(),
+	profile: zod.z.string(),
+	fromMs: zod.z.number(),
+	toMs: zod.z.number(),
+	options: ExportOptionsSchema,
+	state: ExportStateSchema,
+	/** 0–100 while rendering; null otherwise. */
+	progressPct: zod.z.number().nullable(),
+	/** File size once ready; null before. */
+	fileBytes: zod.z.number().nullable(),
+	expiresAt: zod.z.number(),
+	deleteAfterDownload: zod.z.boolean(),
+	/** Epoch of the first complete download; null until then. */
+	downloadedAt: zod.z.number().nullable(),
+	createdAt: zod.z.number(),
+	/** User id/name that requested the export. */
+	createdBy: zod.z.string(),
+	/** Failure reason when state is 'failed'; null otherwise. */
+	error: zod.z.string().nullable()
+});
+/** Candidate download URLs (LAN first, then operator extra hosts). */
+var ExportDownloadSchema = zod.z.object({
+	url: zod.z.string(),
+	endpoints: zod.z.array(zod.z.string())
+});
+var recordingExportCapability = {
+	name: "recordingExport",
+	scope: "system",
+	mode: "singleton",
+	methods: {
+		/** Queue a render of `[fromMs,toMs)` for `deviceId`/`profile`. Fails fast
+		*  when no footage covers the range. Returns the queued record. */
+		createExport: method(zod.z.object({
+			deviceId: zod.z.number(),
+			profile: zod.z.string(),
+			fromMs: zod.z.number(),
+			toMs: zod.z.number(),
+			options: ExportOptionsSchema
+		}), ExportRecordSchema, {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		/** All export rows (history included), optionally scoped to one device. */
+		listExports: method(zod.z.object({ deviceId: zod.z.number().optional() }), zod.z.array(ExportRecordSchema), {
+			kind: "query",
+			auth: "protected"
+		}),
+		getExport: method(zod.z.object({ exportId: zod.z.string() }), ExportRecordSchema, {
+			kind: "query",
+			auth: "protected"
+		}),
+		/** Abort a queued/rendering export; the partial file is removed. */
+		cancelExport: method(zod.z.object({ exportId: zod.z.string() }), ExportRecordSchema, {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		/** Remove the file but keep the history row (state → 'deleted'). */
+		deleteExport: method(zod.z.object({ exportId: zod.z.string() }), ExportRecordSchema, {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		getDownloadUrl: method(zod.z.object({ exportId: zod.z.string() }), ExportDownloadSchema, {
+			kind: "query",
+			auth: "protected"
+		})
+	}
+};
+/**
 * One publishable camera stream as its OWNING PROVIDER describes it — the same
 * payload the (legacy) push `streamBroker.publishCameraStream` carried, minus
 * `deviceId`.
@@ -21680,6 +21837,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	ptzAutotrackCapability,
 	rebootCapability,
 	recordingCapability,
+	recordingExportCapability,
 	sceneMonitorCapability,
 	scriptRunnerCapability,
 	serverManagementCapability,
@@ -25403,6 +25561,42 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordingExport.cancelExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.createExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.deleteExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordingExport.getDownloadUrl": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.getExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.listExports": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",

package/dist/{dist-D7_69kDt.mjs → dist-DssImRC5.mjs}

@@ -1,5 +1,5 @@
 import { z } from "zod";
-//#region ../types/dist/event-category-H4AVePnn.mjs
+//#region ../types/dist/event-category-D4HJq7Mw.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -152,6 +152,11 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	/** Runner-sampled scrub thumbnail (~1/5 s/camera). Telemetry (D8): a lost
 	*  thumb is a scrub gap the recorder's keyframe backfill covers. */
 	EventCategory["RecordingThumbSampled"] = "recording.thumb-sampled";
+	/** Export render progress (0–100). Telemetry (D8): a lost tick is a stale
+	*  progress bar the client reconciles via `recordingExport.getExport`. */
+	EventCategory["RecordingExportProgress"] = "recording.export.progress";
+	EventCategory["RecordingExportCompleted"] = "recording.export.completed";
+	EventCategory["RecordingExportFailed"] = "recording.export.failed";
 	EventCategory["DetectionEvent"] = "detection.event";
 	EventCategory["SessionTrackNew"] = "session.track.new";
 	EventCategory["SessionTrackExpired"] = "session.track.expired";
@@ -441,6 +446,25 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	*/
 	EventCategory["PipelineAnalyticsStationaryChanged"] = "pipeline-analytics.stationary-changed";
 	/**
+	* Fired by `addon-post-analysis` when a package-drop is confirmed inside
+	* a package zone — a newly-appeared stationary object of a package class
+	* that cleared the class / zone / dwell / size gates. Payload:
+	* `PipelineAnalyticsPackageDeliveredPayload` carrying `{ deviceId,
+	* entryId, className, zoneIds, keyFrameMediaKey?, bbox, timestamp }`.
+	* Telemetry (D8): the durable record is the `package-events` store row;
+	* this bus topic drives notifier rules + live UI. See
+	* docs/superpowers/specs/2026-07-17-package-zones-design.md §5.1.
+	*/
+	EventCategory["PipelineAnalyticsPackageDelivered"] = "pipeline-analytics.package-delivered";
+	/**
+	* Fired by `addon-post-analysis` when a previously-delivered package
+	* leaves its zone (the stationary entry departed — moved or swept).
+	* Payload: `PipelineAnalyticsPackagePickedUpPayload` carrying
+	* `{ deviceId, entryId, deliveredEventId, className, timestamp }`.
+	* Telemetry (D8). See package-zones-design §5.2.
+	*/
+	EventCategory["PipelineAnalyticsPackagePickedUp"] = "pipeline-analytics.package-picked-up";
+	/**
 	* Fired by `addon-post-analysis` whenever a gallery face row changes:
 	* `kind:'buffered'` a new detected face was persisted, `'assigned'` /
 	* `'unassigned'` its identity link changed, `'deleted'` the row was
@@ -11156,7 +11180,11 @@ z.array(ZoneRuleSchema).readonly();
 * Extend the enum here when a new gating consumer comes online (audio
 * gating, alert filtering, …) — no other surface needs to change.
 */
-var ZoneRuleStageEnum = z.enum(["motion", "detection"]);
+var ZoneRuleStageEnum = z.enum([
+	"motion",
+	"detection",
+	"package"
+]);
 /**
 * Zone rules capability — per-camera CRUD over the {@link ZoneRule}
 * arrays that decide how each pipeline stage uses the polygon zones.
@@ -11200,16 +11228,24 @@ var zoneRulesCapability = {
 		})
 	},
 	/**
-	* Runtime-state slice — both stages mirrored together so consumers
+	* Runtime-state slice — every stage mirrored together so consumers
 	* see one reactive handle (`device.state.zoneRules.value`) instead
-	* of two. Bulk-replace mutations on either stage write the full
-	* `{motion, detection}` shape, so subscribers always get the
+	* of one per stage. Bulk-replace mutations on any stage write the full
+	* `{motion, detection, package}` shape, so subscribers always get the
 	* complete current set. Consumers that only care about one stage
 	* just read the matching property.
+	*
+	* `package` backs the package-drop detector — a package zone is a
+	* `ZoneRule` on the `'package'` stage referencing drawn polygons
+	* (see docs/superpowers/specs/2026-07-17-package-zones-design.md §3.1).
+	* The orchestrator provider that writes this stage lands in a later
+	* slice; until then the mirror carries only `{motion, detection}` and
+	* consumers read `package` as absent (treat as `[]`).
 	*/
 	runtimeState: z.object({
 		motion: z.array(ZoneRuleSchema).readonly(),
-		detection: z.array(ZoneRuleSchema).readonly()
+		detection: z.array(ZoneRuleSchema).readonly(),
+		package: z.array(ZoneRuleSchema).readonly()
 	})
 };
 var ProviderStatusSchema = z.object({
@@ -15775,6 +15811,7 @@ var EventKindIconSchema = z.enum([
 	"smoke",
 	"water",
 	"button",
+	"package",
 	"generic"
 ]);
 var EventKindCategorySchema = z.enum([
@@ -15782,7 +15819,8 @@ var EventKindCategorySchema = z.enum([
 	"audio",
 	"detection",
 	"sensor",
-	"custom"
+	"custom",
+	"package"
 ]);
 var EventKindDescriptorSchema = z.object({
 	/** Stable kind id (e.g. 'motion', 'person', 'contact'). */
@@ -20919,6 +20957,125 @@ var recordingCapability = {
 	}
 };
 /**
+* `recordingExport` cap — render a footage time range into a single downloadable
+* MP4 (regular / accelerated / decelerated / timelapse, ± audio), kept for a
+* bounded lifetime with a durable history, auto-expiry, and optional
+* delete-after-download.
+*
+* Like `recording` this is a `scope:'system', mode:'singleton'` cap: the
+* recorder self-gates so exactly ONE node (the designated `recordingNodeId`,
+* default `hub`) registers it. Device-scoped methods carry `deviceId` in their
+* input and dispatch to that single provider; the render runs on the node that
+* owns the footage (no cross-node segment transfer). Download rides the
+* framework addon data-plane. State persists in a DurableState blob (NOT
+* SQLite); history rows survive file deletion for audit.
+*/
+/** Playback-speed multiplier for the render (1 = realtime). */
+var ExportSpeedSchema = z.number().min(.25).max(32);
+/** Timelapse cadence — sample one source frame per `everyMs`, output at `outputFps`. */
+var ExportTimelapseSchema = z.object({
+	everyMs: z.number().int().positive(),
+	outputFps: z.number().int().min(1).max(60).optional()
+});
+/**
+* Render options. `speed` and `timelapse` are mutually exclusive. `includeAudio`
+* is honoured only for a realtime-ish speed (0.5–2×); timelapse is always
+* silent. `maxLifeMs` bounds how long the finished file is kept;
+* `deleteAfterDownload` removes it shortly after the first complete download.
+*/
+var ExportOptionsSchema = z.object({
+	speed: ExportSpeedSchema.optional(),
+	timelapse: ExportTimelapseSchema.optional(),
+	includeAudio: z.boolean(),
+	maxLifeMs: z.number().int().positive(),
+	deleteAfterDownload: z.boolean(),
+	title: z.string().max(200).optional()
+}).superRefine((v, ctx) => {
+	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
+		code: z.ZodIssueCode.custom,
+		message: "speed and timelapse are mutually exclusive",
+		path: ["timelapse"]
+	});
+});
+var ExportStateSchema = z.enum([
+	"queued",
+	"rendering",
+	"ready",
+	"failed",
+	"expired",
+	"deleted"
+]);
+/** One export job / history row. */
+var ExportRecordSchema = z.object({
+	id: z.string(),
+	deviceId: z.number(),
+	profile: z.string(),
+	fromMs: z.number(),
+	toMs: z.number(),
+	options: ExportOptionsSchema,
+	state: ExportStateSchema,
+	/** 0–100 while rendering; null otherwise. */
+	progressPct: z.number().nullable(),
+	/** File size once ready; null before. */
+	fileBytes: z.number().nullable(),
+	expiresAt: z.number(),
+	deleteAfterDownload: z.boolean(),
+	/** Epoch of the first complete download; null until then. */
+	downloadedAt: z.number().nullable(),
+	createdAt: z.number(),
+	/** User id/name that requested the export. */
+	createdBy: z.string(),
+	/** Failure reason when state is 'failed'; null otherwise. */
+	error: z.string().nullable()
+});
+/** Candidate download URLs (LAN first, then operator extra hosts). */
+var ExportDownloadSchema = z.object({
+	url: z.string(),
+	endpoints: z.array(z.string())
+});
+var recordingExportCapability = {
+	name: "recordingExport",
+	scope: "system",
+	mode: "singleton",
+	methods: {
+		/** Queue a render of `[fromMs,toMs)` for `deviceId`/`profile`. Fails fast
+		*  when no footage covers the range. Returns the queued record. */
+		createExport: method(z.object({
+			deviceId: z.number(),
+			profile: z.string(),
+			fromMs: z.number(),
+			toMs: z.number(),
+			options: ExportOptionsSchema
+		}), ExportRecordSchema, {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		/** All export rows (history included), optionally scoped to one device. */
+		listExports: method(z.object({ deviceId: z.number().optional() }), z.array(ExportRecordSchema), {
+			kind: "query",
+			auth: "protected"
+		}),
+		getExport: method(z.object({ exportId: z.string() }), ExportRecordSchema, {
+			kind: "query",
+			auth: "protected"
+		}),
+		/** Abort a queued/rendering export; the partial file is removed. */
+		cancelExport: method(z.object({ exportId: z.string() }), ExportRecordSchema, {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		/** Remove the file but keep the history row (state → 'deleted'). */
+		deleteExport: method(z.object({ exportId: z.string() }), ExportRecordSchema, {
+			kind: "mutation",
+			auth: "protected"
+		}),
+		getDownloadUrl: method(z.object({ exportId: z.string() }), ExportDownloadSchema, {
+			kind: "query",
+			auth: "protected"
+		})
+	}
+};
+/**
 * One publishable camera stream as its OWNING PROVIDER describes it — the same
 * payload the (legacy) push `streamBroker.publishCameraStream` carried, minus
 * `deviceId`.
@@ -21680,6 +21837,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	ptzAutotrackCapability,
 	rebootCapability,
 	recordingCapability,
+	recordingExportCapability,
 	sceneMonitorCapability,
 	scriptRunnerCapability,
 	serverManagementCapability,
@@ -25403,6 +25561,42 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"recordingExport.cancelExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.createExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
+	"recordingExport.deleteExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
+	"recordingExport.getDownloadUrl": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.getExport": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"recordingExport.listExports": {
+		capName: "recordingExport",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"sceneMonitor.captureReference": {
 		capName: "scene-monitor",
 		capScope: "device",

package/dist/index.js

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-BNro5CRu.js");
+const require_dist = require("./dist-B5C4dVvO.js");
 const require_model_download_service = require("./model-download-service-hf0ookyy.js");
-const require_manifest_python_deps = require("./manifest-python-deps-DszE7bYn.js");
+const require_manifest_python_deps = require("./manifest-python-deps-kkvku9yU.js");
 const require_resource_monitor = require("./resource-monitor-DNNomR-i.js");
 const require_builtins_sqlite_storage_filesystem_storage_addon = require("./builtins/sqlite-storage/filesystem-storage.addon.js");
 const require_builtins_sqlite_storage_sqlite_settings_addon = require("./builtins/sqlite-storage/sqlite-settings.addon.js");