@camstack/system 1.2.172 → 1.2.174

package/dist/builtins/device-manager/migrate-device.d.ts

@@ -0,0 +1,44 @@
+import { CameraSwitchId } from '@camstack/types';
+/** What actually happened to one switch on one device. */
+export type SwitchOutcome = 'off' | 'on' | 'not-offered' | 'unreachable';
+export interface SwitchReport {
+    readonly deviceId: number;
+    readonly switchId: CameraSwitchId;
+    readonly outcome: SwitchOutcome;
+    /** The refusal, verbatim, when the outcome is not the requested one. */
+    readonly detail?: string;
+}
+export interface MigrateDeviceResult {
+    readonly sourceId: number;
+    readonly targetId: number;
+    /** Every switch write attempted, in order, on both devices. */
+    readonly switches: readonly SwitchReport[];
+    /**
+     * Switches that could NOT be turned off on the source. Empty is the only
+     * value that means "the old camera is fully quiet"; a caller that renders
+     * only a success flag is not entitled to one.
+     */
+    readonly sourceStillLive: readonly CameraSwitchId[];
+    readonly swapped: boolean;
+}
+export interface MigrateDeviceDeps {
+    /** `pipelineOrchestrator.setCameraSwitch`, through `ctx.api`. */
+    readonly setSwitch: (deviceId: number, switchId: CameraSwitchId, enabled: boolean) => Promise<void>;
+    /** `DeviceRowStore.swapIds`, already under the meta write lock. */
+    readonly swapIds: (a: number, b: number) => Promise<void>;
+    /** Respawn the runners that hold either number in memory. Disabling stops
+     *  data PRODUCTION; it does not flush a cache that maps id → addon. */
+    readonly respawnRunners: (deviceIds: readonly number[]) => Promise<void>;
+    readonly log: (message: string, meta: Record<string, unknown>) => void;
+}
+/**
+ * Put both cameras to sleep, exchange their identities, wake the target.
+ *
+ * Throws only if the swap itself fails — a switch that could not be written is
+ * reported, not raised, because refusing to migrate a camera whose old hardware
+ * is unreachable would refuse the exact case this exists for.
+ */
+export declare function migrateDevice(deps: MigrateDeviceDeps, input: {
+    readonly sourceId: number;
+    readonly targetId: number;
+}): Promise<MigrateDeviceResult>;

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { J as evaluateSensorEdge, Kt as createEvent, Mt as errMsg, Nt as BaseAddon, W as doorbellCapability, _ as SOURCE_DEVICE_TYPES, an as EventCategory, g as SOURCE_CAPS, j as bareAddonId, nt as isSourceCap, tt as isSameAddonId, zt as DeviceType } from "../../dist-1DEQFmTq.mjs";
+import { Bt as DeviceType, G as doorbellCapability, M as bareAddonId, Nt as errMsg, Pt as BaseAddon, Y as evaluateSensorEdge, _ as SOURCE_CAPS, nt as isSameAddonId, on as EventCategory, qt as createEvent, rt as isSourceCap, v as SOURCE_DEVICE_TYPES } from "../../dist-B25PDvaS.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Nt as BaseAddon, st as logDestinationCapability } from "../../dist-1DEQFmTq.mjs";
+import { Pt as BaseAddon, ct as logDestinationCapability } from "../../dist-B25PDvaS.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Kt as createEvent, Mt as errMsg, Nt as BaseAddon, an as EventCategory } from "../../dist-1DEQFmTq.mjs";
+import { Nt as errMsg, Pt as BaseAddon, on as EventCategory, qt as createEvent } from "../../dist-B25PDvaS.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { Nt as BaseAddon, b as ScopedTokenSchema, k as authProviderCapability, kt as userManagementCapability, r as ApiKeyRecordSchema, w as UserRecordSchema } from "../../dist-1DEQFmTq.mjs";
+import { A as authProviderCapability, At as userManagementCapability, Pt as BaseAddon, T as UserRecordSchema, r as ApiKeyRecordSchema, x as ScopedTokenSchema } from "../../dist-B25PDvaS.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 const require_tls = require("../../tls-BxQlomxd.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Nt as BaseAddon, an as EventCategory, ot as localNetworkCapability } from "../../dist-1DEQFmTq.mjs";
+import { Pt as BaseAddon, on as EventCategory, st as localNetworkCapability } from "../../dist-B25PDvaS.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-DOTmtLCW.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Nt as BaseAddon, st as logDestinationCapability } from "../../dist-1DEQFmTq.mjs";
+import { Pt as BaseAddon, ct as logDestinationCapability } from "../../dist-B25PDvaS.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 let node_fs_promises = require("node:fs/promises");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Kt as createEvent, Mt as errMsg, Nt as BaseAddon, Z as foldSnapshotByFunction, _t as resolveBucketMs, an as EventCategory, gt as reducePoints, ut as metricsProviderCapability } from "../../dist-1DEQFmTq.mjs";
+import { Nt as errMsg, Pt as BaseAddon, Q as foldSnapshotByFunction, _t as reducePoints, dt as metricsProviderCapability, on as EventCategory, qt as createEvent, vt as resolveBucketMs } from "../../dist-B25PDvaS.mjs";
 import { readFile, readdir } from "node:fs/promises";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { G as enumerateInferenceDevices, Jt as emitReadiness, Mt as errMsg, Nt as BaseAddon, St as scoreRuntimes, an as EventCategory, mt as platformProbeCapability } from "../../dist-1DEQFmTq.mjs";
+import { Ct as scoreRuntimes, K as enumerateInferenceDevices, Nt as errMsg, Pt as BaseAddon, Yt as emitReadiness, ht as platformProbeCapability, on as EventCategory } from "../../dist-B25PDvaS.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Nt as BaseAddon, an as EventCategory } from "../../dist-1DEQFmTq.mjs";
+import { Pt as BaseAddon, on as EventCategory } from "../../dist-B25PDvaS.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { B as deriveBatteryPresence, Lt as DeviceFeature, M as batteryCapability, Mt as errMsg, Nt as BaseAddon, Ot as streamQualityLabel, Qt as nodePin, an as EventCategory, i as BatteryStatusSchema, j as bareAddonId, wt as snapshotCapability, zt as DeviceType } from "../../dist-1DEQFmTq.mjs";
+import { $t as nodePin, Bt as DeviceType, M as bareAddonId, N as batteryCapability, Nt as errMsg, Pt as BaseAddon, Rt as DeviceFeature, Tt as snapshotCapability, V as deriveBatteryPresence, i as BatteryStatusSchema, kt as streamQualityLabel, on as EventCategory } from "../../dist-B25PDvaS.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Dt as storageProviderCapability, Nt as BaseAddon, X as filesystemBrowseCapability } from "../../dist-1DEQFmTq.mjs";
+import { Ot as storageProviderCapability, Pt as BaseAddon, Z as filesystemBrowseCapability } from "../../dist-B25PDvaS.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-DmHNjbB0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $t as parseJsonObject, C as StorageMigrationJobSchema, Ct as settingsStoreCapability, Et as storageMigrationCapability, Nt as BaseAddon, P as collectSecretConfigKeys, S as StorageLocationTypeSchema, Tt as storageCapability, m as REDACTED_SECRET, x as StorageCleanupJobSchema } from "../../dist-1DEQFmTq.mjs";
+import { C as StorageLocationTypeSchema, Dt as storageMigrationCapability, Et as storageCapability, F as collectSecretConfigKeys, Pt as BaseAddon, S as StorageCleanupJobSchema, en as parseJsonObject, h as REDACTED_SECRET, w as StorageMigrationJobSchema, wt as settingsStoreCapability } from "../../dist-B25PDvaS.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-BdT320dq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Mt as errMsg, Nt as BaseAddon, Xt as hydrateSchema } from "../../dist-1DEQFmTq.mjs";
+import { Nt as errMsg, Pt as BaseAddon, Zt as hydrateSchema } from "../../dist-B25PDvaS.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-DsoVfJSR.js");
+const require_dist = require("../../dist-BzPNEPHo.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Nt as BaseAddon, st as logDestinationCapability } from "../../dist-1DEQFmTq.mjs";
+import { Pt as BaseAddon, ct as logDestinationCapability } from "../../dist-B25PDvaS.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-1DEQFmTq.mjs → dist-B25PDvaS.mjs}

@@ -3619,6 +3619,32 @@ var CameraSwitchIdSchema = z.enum([
 	"notifications"
 ]);
 /**
+* Stable render order — broadest blast radius first, and a source before the
+* thing that consumes it. `device-audio` sits ABOVE `audio-analysis` because
+* turning the microphone off leaves the analyzer with nothing to analyse; the
+* reverse is not true.
+*
+* `privacy-mask` sits directly ABOVE `device-audio` because they are literal
+* siblings — one cap, one device plane, video then audio — and NOT above
+* `object-detection` despite feeding it: a mask blanks REGIONS, so its blast
+* radius is partial, and the "broadest first" rule does not rank a partial
+* control above a whole-function one.
+*
+* `broker-audio` sits directly BELOW `device-audio` by the same source-first
+* rule: the camera's microphone feeds the broker, so silencing the camera
+* leaves the broker's mute with nothing to suppress; the reverse is not true.
+*/
+var CAMERA_SWITCH_ORDER = [
+	"stream-broker",
+	"object-detection",
+	"privacy-mask",
+	"device-audio",
+	"broker-audio",
+	"audio-analysis",
+	"recording",
+	"notifications"
+];
+/**
 * WHERE the switch's state actually lives. A discriminated union rather than a
 * string so both the writer (the orchestrator's `setCameraSwitch`) and any
 * reader can exhaustively narrow — and so "the group added a parallel map" is
@@ -3892,7 +3918,8 @@ var OpsLogReasonSchema = z.enum([
 	"quota",
 	"manual",
 	"operator",
-	"maintenance"
+	"maintenance",
+	"orphaned-device"
 ]);
 /** One audit row, shared verbatim by both domains. */
 var OpsLogEntrySchema = z.object({
@@ -10605,6 +10632,29 @@ var DevicePersistConfigPayloadSchema = z.object({
 	deviceId: z.number(),
 	data: z.record(z.string(), z.unknown())
 });
+/** What a migration actually did, per switch. `unreachable` is a first-class
+*  answer: a camera that could not be asked is not a camera that was silenced. */
+var MigrateSwitchOutcomeSchema = z.enum([
+	"off",
+	"on",
+	"not-offered",
+	"unreachable"
+]);
+var MigrateSwitchReportSchema = z.object({
+	deviceId: z.number(),
+	switchId: CameraSwitchIdSchema,
+	outcome: MigrateSwitchOutcomeSchema,
+	detail: z.string().optional()
+});
+var MigrateDeviceResultSchema = z.object({
+	sourceId: z.number(),
+	targetId: z.number(),
+	switches: z.array(MigrateSwitchReportSchema).readonly(),
+	/** Switches that could NOT be turned off on the source. Empty is the only
+	*  value meaning the replaced hardware is quiet. */
+	sourceStillLive: z.array(CameraSwitchIdSchema).readonly(),
+	swapped: z.boolean()
+});
 var deviceManagerCapability = {
 	name: "device-manager",
 	scope: "system",
@@ -10619,6 +10669,33 @@ var deviceManagerCapability = {
 			addonId: z.string(),
 			stableId: z.string()
 		}), z.object({ id: z.number() }), { kind: "mutation" }),
+		/**
+		* Replace a camera: the new hardware inherits the number the system knows.
+		*
+		* Everything general about a camera is keyed on the numeric id and nothing
+		* else — the recording path on disk, the hour ledger, the media store, zone
+		* ownership, and all four ecosystem exports. So a replacement moves the
+		* NUMBER rather than the work, and the operator keeps their footage, their
+		* rules and their integrations.
+		*
+		* Both cameras are switched off first, then the identities are exchanged
+		* (children follow their parent), then the target — now answering on the
+		* inherited number — is switched back on.
+		*
+		* **A switch that could not be written is REPORTED, not swallowed.** The
+		* source is characteristically broken, and two of the eight switches write
+		* the camera itself, so on a dead one they cannot be written at all.
+		* `sourceStillLive` names what stayed live; empty is the only value that
+		* means the old hardware is quiet. The migration proceeds either way —
+		* refusing would refuse the case this exists for.
+		*/
+		migrateDevice: method(z.object({
+			sourceId: z.number(),
+			targetId: z.number()
+		}), MigrateDeviceResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Register a device in the DB + in-memory registry. Called by DeviceManagerApi.register(). */
 		registerDevice: method(DeviceRegisterPayloadSchema, z.void(), { kind: "mutation" }),
 		/** Remove a device from the DB + in-memory registry. Called by DeviceManagerApi.remove(). */
@@ -35679,6 +35756,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.migrateDevice": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.persistConfig": {
 		capName: "device-manager",
 		capScope: "system",
@@ -42964,4 +43047,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { isCollectionArrayMethod as $, parseJsonObject as $t, backupCapability as A, vectorDimFromBase64 as At, deriveBatteryPresence as B, ReadinessRegistry as Bt, StorageMigrationJobSchema as C, settingsStoreCapability as Ct, addonWidgetsCapability as D, storageProviderCapability as Dt, addonSettingsCapability as E, storageMigrationCapability as Et, coreBlockAddonId as F, DEVICE_SETTINGS_CONTRIBUTION_METHODS as Ft, enumerateInferenceDevices as G, asString as Gt, deviceStateCapability as H, WELL_KNOWN_TAB_MAP as Ht, coreBlockIdFromAddonId as I, DEVICE_STATUS_METHOD as It, evaluateSensorEdge as J, emitReadiness as Jt, enumerateItemArrayFields as K, createEvent as Kt, coreBlocksCapability as L, DeviceFeature as Lt, batteryCapability as M, errMsg as Mt, buildStreamParamsConfigSchema as N, BaseAddon as Nt, alertsCapability as O, streamQualityLabel as Ot, collectSecretConfigKeys as P, DATAPLANE_SECRET_HEADER as Pt, isArrayOutputSchema as Q, nodePin as Qt, dataStoreProviderCapability as R, DeviceRole as Rt, StorageLocationTypeSchema as S, scoreRuntimes as St, addonPagesCapability as T, storageCapability as Tt, deviceStatusCapability as U, asJsonObject as Ut, deviceManagerCapability as V, ReadinessTimeoutError as Vt, doorbellCapability as W, asNumber as Wt, filesystemBrowseCapability as X, hydrateSchema as Xt, extractNestedAddonId as Y, expandCapMethods as Yt, foldSnapshotByFunction as Z, isDeviceConfigCap as Zt, SOURCE_DEVICE_TYPES as _, resolveBucketMs as _t, CAP_NAMES_WITH_STATUS as a, EventCategory as an, lifecycleJobSchema as at, ScopedTokenSchema as b, scopesAllowAddon as bt, CoreBlockSchema as c, logLevelAtMost as ct, DeviceStatusSchema as d, normalizeUnit as dt, parseJsonUnknown as en, isObjectInput as et, LOG_LEVEL_RANK as f, objectInputDeclaresAddonId as ft, SOURCE_CAPS as g, reducePoints as gt, RUNTIME_DEFAULTS as h, procedureAuthKey as ht, BatteryStatusSchema as i, sleep as in, kebabToCamel as it, bareAddonId as j, vectorStoreCapability as jt, authProviderCapability as k, userManagementCapability as kt, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as l, looseSchema as lt, REDACTED_SECRET as m, platformProbeCapability as mt, AlertSchema as n, resolveCapMount as nn, isSourceCap as nt, CORE_BLOCKS_ADDON_ID as o, localNetworkCapability as ot, METHOD_ACCESS_MAP as p, parseStreamParamsFormPatch as pt, enumerateSchemaFields as q, emitDownForOwnedCaps as qt, ApiKeyRecordSchema as r, scopeKey as rn, isVoidInput as rt, CORE_BLOCK_ADDON_PREFIX as s, logDestinationCapability as st, ALL_CAPABILITY_DEFINITIONS as t, readinessKey as tn, isSameAddonId as tt, DeclaredDevices as u, metricsProviderCapability as ut, STORAGE_ACCESS_FALLBACK as v, resolveMethodAuth as vt, UserRecordSchema as w, snapshotCapability as wt, StorageCleanupJobSchema as x, scopesAllowDeviceCap as xt, STREAM_PROFILE_META as y, runtimeStatePolicyFor as yt, decodeVectorBase64 as z, DeviceType as zt };
+export { isArrayOutputSchema as $, nodePin as $t, authProviderCapability as A, userManagementCapability as At, decodeVectorBase64 as B, DeviceType as Bt, StorageLocationTypeSchema as C, scoreRuntimes as Ct, addonSettingsCapability as D, storageMigrationCapability as Dt, addonPagesCapability as E, storageCapability as Et, collectSecretConfigKeys as F, DATAPLANE_SECRET_HEADER as Ft, doorbellCapability as G, asNumber as Gt, deviceManagerCapability as H, ReadinessTimeoutError as Ht, coreBlockAddonId as I, DEVICE_SETTINGS_CONTRIBUTION_METHODS as It, enumerateSchemaFields as J, emitDownForOwnedCaps as Jt, enumerateInferenceDevices as K, asString as Kt, coreBlockIdFromAddonId as L, DEVICE_STATUS_METHOD as Lt, bareAddonId as M, vectorStoreCapability as Mt, batteryCapability as N, errMsg as Nt, addonWidgetsCapability as O, storageProviderCapability as Ot, buildStreamParamsConfigSchema as P, BaseAddon as Pt, foldSnapshotByFunction as Q, isDeviceConfigCap as Qt, coreBlocksCapability as R, DeviceFeature as Rt, StorageCleanupJobSchema as S, scopesAllowDeviceCap as St, UserRecordSchema as T, snapshotCapability as Tt, deviceStateCapability as U, WELL_KNOWN_TAB_MAP as Ut, deriveBatteryPresence as V, ReadinessRegistry as Vt, deviceStatusCapability as W, asJsonObject as Wt, extractNestedAddonId as X, expandCapMethods as Xt, evaluateSensorEdge as Y, emitReadiness as Yt, filesystemBrowseCapability as Z, hydrateSchema as Zt, SOURCE_CAPS as _, reducePoints as _t, CAMERA_SWITCH_ORDER as a, sleep as an, kebabToCamel as at, STREAM_PROFILE_META as b, runtimeStatePolicyFor as bt, CORE_BLOCK_ADDON_PREFIX as c, logDestinationCapability as ct, DeclaredDevices as d, metricsProviderCapability as dt, parseJsonObject as en, isCollectionArrayMethod as et, DeviceStatusSchema as f, normalizeUnit as ft, RUNTIME_DEFAULTS as g, procedureAuthKey as gt, REDACTED_SECRET as h, platformProbeCapability as ht, BatteryStatusSchema as i, scopeKey as in, isVoidInput as it, backupCapability as j, vectorDimFromBase64 as jt, alertsCapability as k, streamQualityLabel as kt, CoreBlockSchema as l, logLevelAtMost as lt, METHOD_ACCESS_MAP as m, parseStreamParamsFormPatch as mt, AlertSchema as n, readinessKey as nn, isSameAddonId as nt, CAP_NAMES_WITH_STATUS as o, EventCategory as on, lifecycleJobSchema as ot, LOG_LEVEL_RANK as p, objectInputDeclaresAddonId as pt, enumerateItemArrayFields as q, createEvent as qt, ApiKeyRecordSchema as r, resolveCapMount as rn, isSourceCap as rt, CORE_BLOCKS_ADDON_ID as s, localNetworkCapability as st, ALL_CAPABILITY_DEFINITIONS as t, parseJsonUnknown as tn, isObjectInput as tt, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as u, looseSchema as ut, SOURCE_DEVICE_TYPES as v, resolveBucketMs as vt, StorageMigrationJobSchema as w, settingsStoreCapability as wt, ScopedTokenSchema as x, scopesAllowAddon as xt, STORAGE_ACCESS_FALLBACK as y, resolveMethodAuth as yt, dataStoreProviderCapability as z, DeviceRole as zt };

package/dist/{dist-DsoVfJSR.js → dist-BzPNEPHo.js}

@@ -3619,6 +3619,32 @@ var CameraSwitchIdSchema = zod.z.enum([
 	"notifications"
 ]);
 /**
+* Stable render order — broadest blast radius first, and a source before the
+* thing that consumes it. `device-audio` sits ABOVE `audio-analysis` because
+* turning the microphone off leaves the analyzer with nothing to analyse; the
+* reverse is not true.
+*
+* `privacy-mask` sits directly ABOVE `device-audio` because they are literal
+* siblings — one cap, one device plane, video then audio — and NOT above
+* `object-detection` despite feeding it: a mask blanks REGIONS, so its blast
+* radius is partial, and the "broadest first" rule does not rank a partial
+* control above a whole-function one.
+*
+* `broker-audio` sits directly BELOW `device-audio` by the same source-first
+* rule: the camera's microphone feeds the broker, so silencing the camera
+* leaves the broker's mute with nothing to suppress; the reverse is not true.
+*/
+var CAMERA_SWITCH_ORDER = [
+	"stream-broker",
+	"object-detection",
+	"privacy-mask",
+	"device-audio",
+	"broker-audio",
+	"audio-analysis",
+	"recording",
+	"notifications"
+];
+/**
 * WHERE the switch's state actually lives. A discriminated union rather than a
 * string so both the writer (the orchestrator's `setCameraSwitch`) and any
 * reader can exhaustively narrow — and so "the group added a parallel map" is
@@ -3892,7 +3918,8 @@ var OpsLogReasonSchema = zod.z.enum([
 	"quota",
 	"manual",
 	"operator",
-	"maintenance"
+	"maintenance",
+	"orphaned-device"
 ]);
 /** One audit row, shared verbatim by both domains. */
 var OpsLogEntrySchema = zod.z.object({
@@ -10605,6 +10632,29 @@ var DevicePersistConfigPayloadSchema = zod.z.object({
 	deviceId: zod.z.number(),
 	data: zod.z.record(zod.z.string(), zod.z.unknown())
 });
+/** What a migration actually did, per switch. `unreachable` is a first-class
+*  answer: a camera that could not be asked is not a camera that was silenced. */
+var MigrateSwitchOutcomeSchema = zod.z.enum([
+	"off",
+	"on",
+	"not-offered",
+	"unreachable"
+]);
+var MigrateSwitchReportSchema = zod.z.object({
+	deviceId: zod.z.number(),
+	switchId: CameraSwitchIdSchema,
+	outcome: MigrateSwitchOutcomeSchema,
+	detail: zod.z.string().optional()
+});
+var MigrateDeviceResultSchema = zod.z.object({
+	sourceId: zod.z.number(),
+	targetId: zod.z.number(),
+	switches: zod.z.array(MigrateSwitchReportSchema).readonly(),
+	/** Switches that could NOT be turned off on the source. Empty is the only
+	*  value meaning the replaced hardware is quiet. */
+	sourceStillLive: zod.z.array(CameraSwitchIdSchema).readonly(),
+	swapped: zod.z.boolean()
+});
 var deviceManagerCapability = {
 	name: "device-manager",
 	scope: "system",
@@ -10619,6 +10669,33 @@ var deviceManagerCapability = {
 			addonId: zod.z.string(),
 			stableId: zod.z.string()
 		}), zod.z.object({ id: zod.z.number() }), { kind: "mutation" }),
+		/**
+		* Replace a camera: the new hardware inherits the number the system knows.
+		*
+		* Everything general about a camera is keyed on the numeric id and nothing
+		* else — the recording path on disk, the hour ledger, the media store, zone
+		* ownership, and all four ecosystem exports. So a replacement moves the
+		* NUMBER rather than the work, and the operator keeps their footage, their
+		* rules and their integrations.
+		*
+		* Both cameras are switched off first, then the identities are exchanged
+		* (children follow their parent), then the target — now answering on the
+		* inherited number — is switched back on.
+		*
+		* **A switch that could not be written is REPORTED, not swallowed.** The
+		* source is characteristically broken, and two of the eight switches write
+		* the camera itself, so on a dead one they cannot be written at all.
+		* `sourceStillLive` names what stayed live; empty is the only value that
+		* means the old hardware is quiet. The migration proceeds either way —
+		* refusing would refuse the case this exists for.
+		*/
+		migrateDevice: method(zod.z.object({
+			sourceId: zod.z.number(),
+			targetId: zod.z.number()
+		}), MigrateDeviceResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Register a device in the DB + in-memory registry. Called by DeviceManagerApi.register(). */
 		registerDevice: method(DeviceRegisterPayloadSchema, zod.z.void(), { kind: "mutation" }),
 		/** Remove a device from the DB + in-memory registry. Called by DeviceManagerApi.remove(). */
@@ -35679,6 +35756,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.migrateDevice": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.persistConfig": {
 		capName: "device-manager",
 		capScope: "system",
@@ -42994,6 +43077,12 @@ Object.defineProperty(exports, "BatteryStatusSchema", {
 		return BatteryStatusSchema;
 	}
 });
+Object.defineProperty(exports, "CAMERA_SWITCH_ORDER", {
+	enumerable: true,
+	get: function() {
+		return CAMERA_SWITCH_ORDER;
+	}
+});
 Object.defineProperty(exports, "CAP_NAMES_WITH_STATUS", {
 	enumerable: true,
 	get: function() {

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-DsoVfJSR.js");
+const require_dist = require("./dist-BzPNEPHo.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");
@@ -27,7 +27,7 @@ require("./builtins/system-config/index.js");
 const require_builtins_winston_logging_index = require("./builtins/winston-logging/index.js");
 const require_file_data_plane = require("./file-data-plane-DO8KbxCe.js");
 const require_tls$1 = require("./tls-BxQlomxd.js");
-const require_manifest_system_deps = require("./manifest-system-deps-ir_XTNpe.js");
+const require_manifest_system_deps = require("./manifest-system-deps-B0mzJPmb.js");
 const require_resource_monitor = require("./resource-monitor-CdnzxBLP.js");
 const require_custom_action_registry = require("./custom-action-registry-jY0NOZK8.js");
 let zod = require("zod");