@camstack/types 0.1.34 → 0.1.36

package/dist/{index-Ce7RZWP4.mjs → index-CgPd35k5.mjs}

@@ -12,6 +12,7 @@ const WELL_KNOWN_TABS = [
   { id: "osd", label: "OSD", icon: "type", order: 18 },
   { id: "stream-broker", label: "Stream Broker", icon: "radio", order: 20 },
   { id: "streaming", label: "Streaming", icon: "video", order: 35 },
+  { id: "ptz", label: "PTZ", icon: "move", order: 40 },
   { id: "pipeline", label: "Detection Pipeline", icon: "cpu", order: 39 },
   { id: "zones", label: "Detection", icon: "shapes", order: 38 },
   { id: "live-stats", label: "Live Stats", icon: "activity", order: 39 },
@@ -79,6 +80,9 @@ function hydrateField(field, values) {
     return { ...field, value: items };
   }
   const rawValue = storedValue !== void 0 ? storedValue : defaultValue !== void 0 ? defaultValue : null;
+  if (field.type === "password") {
+    return { ...field, value: "" };
+  }
   const value = field.type === "textarea" && field.isJson && rawValue !== null && typeof rawValue === "object" ? JSON.stringify(rawValue, null, 2) : rawValue;
   const hydrated = { ...field, value };
   return hydrated;
@@ -181,7 +185,19 @@ const DecoderSessionConfigSchema = z.object({
    * on every line so `grep tag=broker:5/high` filters one camera
    * profile cleanly.
    */
-  tag: z.string().optional()
+  tag: z.string().optional(),
+  /**
+   * Where the session delivers decoded frames (Phase 5 / D9):
+   *
+   * - `'callback'` (default) — the legacy pixel path: decoded frames are
+   *   buffered as `DecodedFrame`s and drained via `pullFrames`.
+   * - `'shm'` — the shared-memory frame plane: decoded frames are written
+   *   into an OS shared-memory ring and drained as zero-pixel
+   *   `FrameHandle`s via `pullHandles`. A session is one mode or the
+   *   other — `pullFrames` returns nothing for an `'shm'` session and
+   *   `pullHandles` returns nothing for a `'callback'` session.
+   */
+  frameSink: z.enum(["callback", "shm"]).default("callback")
 });
 function errMsg(err) {
   if (err instanceof Error) return err.message;
@@ -767,6 +783,9 @@ function method(input, output, options) {
 function event(data) {
   return { data };
 }
+function isDeviceConfigCap(def) {
+  return def?.deviceConfig !== void 0;
+}
 const AudioClassSummarySchema = z.object({
   className: z.string(),
   /** Number of windows (chunks) where this class was the top hit. */
@@ -1069,6 +1088,53 @@ const DecodedFrameSchema = z.object({
   format: z.enum(["jpeg", "rgb", "bgr", "yuv420", "gray"]),
   timestamp: z.number()
 });
+const FrameHandleSchema = z.object({
+  shmId: z.string(),
+  slot: z.number().int().nonnegative(),
+  seq: z.number().int().nonnegative(),
+  width: z.number().int().positive(),
+  height: z.number().int().positive(),
+  format: z.enum(["jpeg", "rgb", "bgr", "yuv420", "gray"]),
+  pts: z.number(),
+  byteLength: z.number().int().nonnegative(),
+  nodeId: z.string(),
+  slotCount: z.number().int().positive()
+});
+const FrameHandleFormatSchema = z.enum(["rgb", "bgr", "yuv420", "gray"]);
+const SubscribeFramesInputSchema = z.object({
+  brokerId: z.string(),
+  format: FrameHandleFormatSchema,
+  /**
+   * Optional reader-side cadence hint in frames per second. The broker does
+   * NOT throttle — latest-wins ring reads drop frames implicitly for a slow
+   * consumer. The value is echoed back in `SubscribeFramesResult.maxFps` so
+   * the consumer can pace its own `pullFrameHandles` polling.
+   */
+  maxFps: z.number().positive().optional(),
+  /** Short caller-identity tag (`motion`, `detection`, …) for diagnostics. */
+  tag: z.string().optional()
+});
+const SubscribeFramesResultSchema = z.object({
+  /** Opaque id the consumer passes to `pullFrameHandles` / `unsubscribeFrames`. */
+  subscriptionId: z.string(),
+  /** Reader-side cadence hint (frames/s) — echoes `SubscribeFramesInput.maxFps`. */
+  maxFps: z.number().nonnegative()
+});
+const DecodedAudioChunkSchema = z.object({
+  data: z.instanceof(Uint8Array),
+  sampleRate: z.number().int().positive(),
+  channels: z.number().int().positive(),
+  timestamp: z.number()
+});
+const SubscribeAudioChunksInputSchema = z.object({
+  brokerId: z.string(),
+  /** Short caller-identity tag (`audio-analyzer`, …) for `listClients`. */
+  tag: z.string().optional()
+});
+const SubscribeAudioChunksResultSchema = z.object({
+  /** Opaque id passed to `pullAudioChunks` / `unsubscribeAudioChunks`. */
+  subscriptionId: z.string()
+});
 const BrokerStatusSchema$1 = z.enum(["idle", "connecting", "streaming", "error", "stopped"]);
 const BrokerStatsSchema = z.object({
   status: BrokerStatusSchema$1,
@@ -1298,9 +1364,76 @@ const streamBrokerCapability = {
       z.object({ released: z.boolean(), refcount: z.number().int().nonnegative() }),
       { kind: "mutation", auth: "admin" }
     ),
-    getBroker: method(
-      z.object({ brokerId: z.string() }),
-      z.custom()
+    /**
+     * ── Decoded audio-chunk plane (Phase 5 / D9) ──────────────────────
+     *
+     * The serialisable replacement for the live-object `IStreamBroker.
+     * onDecodedAudioChunk` callback path. Unlike the video frame plane,
+     * audio chunks are tiny (a ~500ms PCM window is a few KB) so they ship
+     * their bytes INLINE over tRPC — no shared-memory ring. A consumer:
+     *
+     *   1. `subscribeAudioChunks({ brokerId, tag })` — the broker registers
+     *      a per-subscription bounded FIFO queue and returns a
+     *      `subscriptionId`.
+     *   2. polls `pullAudioChunks({ subscriptionId, maxCount })` — drains
+     *      `DecodedAudioChunk[]` in arrival order (FIFO, no latest-wins
+     *      drop: an audio gap is audible / breaks an analysis window). The
+     *      queue is generously sized; it only drops its oldest chunk if a
+     *      truly stalled consumer lets it overflow.
+     *   3. `unsubscribeAudioChunks({ subscriptionId })` on teardown.
+     */
+    subscribeAudioChunks: method(
+      SubscribeAudioChunksInputSchema,
+      SubscribeAudioChunksResultSchema,
+      { kind: "mutation" }
+    ),
+    pullAudioChunks: method(
+      z.object({
+        subscriptionId: z.string(),
+        maxCount: z.number().int().positive().default(8)
+      }),
+      z.array(DecodedAudioChunkSchema).readonly()
+    ),
+    unsubscribeAudioChunks: method(
+      z.object({ subscriptionId: z.string() }),
+      z.object({ released: z.boolean() }),
+      { kind: "mutation" }
+    ),
+    /**
+     * ── Shared-memory frame plane (Phase 5 / D9) ──────────────────────
+     *
+     * The handle-based replacement for the live-object `IStreamBroker.
+     * onDecodedFrame` callback path. A consumer:
+     *
+     *   1. `subscribeFrames({ brokerId, format })` — the broker spins up
+     *      (or reuses) a `frameSink: 'shm'` decoder session producing that
+     *      `format` and returns a `subscriptionId`.
+     *   2. polls `pullFrameHandles({ subscriptionId, maxCount })` — drains
+     *      zero-pixel `FrameHandle[]`; each handle is fed to a
+     *      `FrameRingReader` that opens the named shm segment and reads the
+     *      pixels back zero-copy.
+     *   3. `unsubscribeFrames({ subscriptionId })` on teardown.
+     *
+     * The broker keeps one shm ring per `(brokerId, format)` actually
+     * requested — no broker-side `sharp` conversion. fps throttling is
+     * implicit (latest-wins ring reads drop frames for a slow consumer).
+     */
+    subscribeFrames: method(
+      SubscribeFramesInputSchema,
+      SubscribeFramesResultSchema,
+      { kind: "mutation" }
+    ),
+    pullFrameHandles: method(
+      z.object({
+        subscriptionId: z.string(),
+        maxCount: z.number().int().positive().default(4)
+      }),
+      z.array(FrameHandleSchema).readonly()
+    ),
+    unsubscribeFrames: method(
+      z.object({ subscriptionId: z.string() }),
+      z.object({ released: z.boolean() }),
+      { kind: "mutation" }
     ),
     setPreBufferDuration: method(
       z.object({ brokerId: z.string(), seconds: z.number().min(0).max(30) }),
@@ -1356,6 +1489,8 @@ const cameraStreamsCapability = {
   name: "camera-streams",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   methods: {
     getCameraStreams: method(
@@ -1651,6 +1786,8 @@ const motionDetectionCapability = {
   name: "motion-detection",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   exposesDeviceSettings: true,
   methods: {
     analyze: method(
@@ -2522,6 +2659,42 @@ const motionTriggerCapability = {
   },
   runtimeState: MotionTriggerRuntimeStateSchema
 };
+const MotionZoneStatusSchema = z.object({
+  enabled: z.boolean(),
+  sensitivity: z.number(),
+  /** Row-major active-cell grid. Length = gridWidth*gridHeight (see getOptions). */
+  cells: z.array(z.boolean()),
+  lastFetchedAt: z.number()
+});
+const MotionZoneOptionsSchema = z.object({
+  gridWidth: z.number(),
+  gridHeight: z.number(),
+  sensitivity: z.object({ min: z.number(), max: z.number(), step: z.number() })
+});
+const MotionZonePatchSchema = z.object({
+  enabled: z.boolean().optional(),
+  sensitivity: z.number().optional(),
+  cells: z.array(z.boolean()).optional()
+});
+const motionZonesCapability = {
+  name: "motion-zones",
+  scope: "device",
+  mode: "singleton",
+  deviceTypes: [DeviceType.Camera],
+  deviceConfig: {
+    ui: { kind: "widget", widgetId: "host/motion-zones-grid", tab: "motion", label: "Motion Zones" }
+  },
+  methods: {
+    getOptions: method(z.object({ deviceId: z.number() }), MotionZoneOptionsSchema),
+    setZone: method(
+      z.object({ deviceId: z.number(), patch: MotionZonePatchSchema }),
+      z.void(),
+      { kind: "mutation", auth: "admin" }
+    )
+  },
+  status: { schema: MotionZoneStatusSchema, kind: "poll" },
+  runtimeState: MotionZoneStatusSchema
+};
 const AutotrackTargetTypeSchema = z.string().describe("Vendor target string (people/vehicle/pet); empty = camera default");
 const PtzAutotrackSettingsSchema = z.object({
   targetType: AutotrackTargetTypeSchema,
@@ -2560,6 +2733,9 @@ const ptzAutotrackCapability = {
   scope: "device",
   mode: "singleton",
   deviceTypes: [DeviceType.Camera],
+  deviceConfig: {
+    ui: { kind: "widget", widgetId: "host/ptz-autotrack", tab: "ptz", topTab: true, label: "Auto-Tracking", order: 5 }
+  },
   methods: {
     /**
      * Read the current on/off state + last-applied settings.
@@ -2626,6 +2802,111 @@ const ptzAutotrackCapability = {
    */
   runtimeState: PtzAutotrackRuntimeStateSchema
 };
+const StreamProfileSchema = z.enum(["main", "sub", "ext"]);
+const StreamProfileConfigSchema = z.object({
+  width: z.number(),
+  height: z.number(),
+  codec: z.enum(["h264", "h265"]),
+  framerate: z.number(),
+  bitrate: z.number(),
+  // kbps
+  bitrateMode: z.enum(["vbr", "cbr"]).optional(),
+  encoderProfile: z.enum(["high", "main", "baseline"]).optional(),
+  gop: z.number().optional(),
+  audio: z.boolean().optional()
+});
+const StreamParamsStatusSchema = z.object({
+  /** Per-profile current config. A profile absent = the camera doesn't have it. */
+  main: StreamProfileConfigSchema.optional(),
+  sub: StreamProfileConfigSchema.optional(),
+  ext: StreamProfileConfigSchema.optional(),
+  lastFetchedAt: z.number()
+});
+const StreamProfileOptionsSchema = z.object({
+  resolutions: z.array(z.object({ width: z.number(), height: z.number() })),
+  codecs: z.array(z.enum(["h264", "h265"])),
+  framerates: z.array(z.number()),
+  /** Allowed bitrate values (kbps). Empty if the camera takes a free range. */
+  bitrates: z.array(z.number()),
+  /** Optional [min,max] kbps when the camera accepts a continuous range. */
+  bitrateRange: z.tuple([z.number(), z.number()]).optional(),
+  supportsBitrateMode: z.boolean(),
+  supportsEncoderProfile: z.boolean(),
+  supportsGop: z.boolean(),
+  /** Allowed GOP / keyframe-interval range, in seconds — drives the
+   *  I-frame-interval selector. Absent when the camera advertises GOP
+   *  support but no concrete range (callers then fall back to a free
+   *  numeric input). `{ min, max, step }` per the getOptions convention. */
+  gop: z.object({ min: z.number(), max: z.number(), step: z.number() }).optional()
+});
+const StreamParamsOptionsSchema = z.object({
+  main: StreamProfileOptionsSchema.optional(),
+  sub: StreamProfileOptionsSchema.optional(),
+  ext: StreamProfileOptionsSchema.optional()
+});
+const StreamProfilePatchSchema = z.object({
+  width: z.number().optional(),
+  height: z.number().optional(),
+  codec: z.enum(["h264", "h265"]).optional(),
+  framerate: z.number().optional(),
+  bitrate: z.number().optional(),
+  bitrateMode: z.enum(["vbr", "cbr"]).optional(),
+  encoderProfile: z.enum(["high", "main", "baseline"]).optional(),
+  gop: z.number().optional(),
+  audio: z.boolean().optional()
+});
+const streamParamsCapability = {
+  name: "stream-params",
+  scope: "device",
+  mode: "singleton",
+  deviceTypes: [DeviceType.Camera],
+  deviceConfig: {
+    ui: { kind: "derived-form", builderId: "stream-params", tab: "streaming" }
+  },
+  methods: {
+    getOptions: method(
+      z.object({ deviceId: z.number() }),
+      StreamParamsOptionsSchema
+    ),
+    setProfile: method(
+      z.object({
+        deviceId: z.number(),
+        profile: StreamProfileSchema,
+        patch: StreamProfilePatchSchema
+      }),
+      z.void(),
+      { kind: "mutation", auth: "admin" }
+    ),
+    /**
+     * Build the `ConfigUISchema` (admin-ui `ConfigFormBuilder` input
+     * shape) for this camera's stream-encoder settings — one section per
+     * profile (main / sub / ext) with the resolution / codec / framerate
+     * / bitrate / bitrate-mode / encoder-profile / GOP controls the
+     * firmware actually exposes.
+     *
+     * Driven by `getOptions` (camera-probed availability) + `getStatus`
+     * (current per-profile config); each field's `default` is seeded
+     * from the live config so the form renders the camera state in one
+     * pass. Returns `null` when the camera exposes no configurable
+     * stream property — the renderer then shows the unsupported message.
+     *
+     * Output is `z.unknown().nullable()` — the same convention every
+     * other `ConfigUISchema`-returning cap method uses (`device-ops`,
+     * `device-manager`); `ConfigUISchema` is a TS-only type with no
+     * companion Zod schema, and a concrete object would collapse
+     * unrelated AppRouter branches to `unknown` during codegen.
+     */
+    getConfigSchema: method(
+      z.object({ deviceId: z.number() }),
+      z.unknown().nullable()
+    )
+  },
+  status: {
+    schema: StreamParamsStatusSchema,
+    kind: "poll"
+  },
+  runtimeState: StreamParamsStatusSchema
+};
 const SwitchStatusSchema = z.object({
   on: z.boolean(),
   /** Ms epoch of the last state change. Useful for UI "X minutes ago". */
@@ -3630,6 +3911,83 @@ const adminUiCapability = {
     getVersion: method(z.void(), VersionOutputSchema)
   }
 };
+const MethodAccessSchema = z.enum(["view", "create", "delete"]);
+const AllowedProviderSchema = z.union([z.literal("*"), z.array(z.string())]);
+const AllowedDevicesSchema = z.record(z.string(), z.union([z.literal("*"), z.array(z.string())]));
+const CapScopeSchema = z.enum(["device", "system"]);
+const TokenScopeSchema = z.discriminatedUnion("type", [
+  z.object({
+    type: z.literal("category"),
+    target: CapScopeSchema,
+    access: z.array(MethodAccessSchema).min(1)
+  }),
+  z.object({
+    type: z.literal("capability"),
+    target: z.string(),
+    access: z.array(MethodAccessSchema).min(1)
+  }),
+  z.object({
+    type: z.literal("addon"),
+    target: z.string(),
+    access: z.array(MethodAccessSchema).min(1)
+  }),
+  z.object({
+    type: z.literal("device"),
+    /**
+     * One or more deviceIds (serialised as strings for wire-format
+     * consistency with the rest of the union). Matcher accepts if
+     * `input.deviceId` ∈ `targets`. Array shape avoids the row-explosion
+     * of one scope-per-device when granting access to a set of cameras.
+     */
+    targets: z.array(z.string()).min(1),
+    access: z.array(MethodAccessSchema).min(1)
+  })
+]);
+const UserRecordSchema = z.object({
+  id: z.string(),
+  username: z.string(),
+  passwordHash: z.string(),
+  /**
+   * Admin bypass. When true, the middleware skips the scope-access
+   * check entirely. There is no other axis of privilege; the legacy
+   * role enum collapsed onto this boolean in v2.
+   */
+  isAdmin: z.boolean().default(false),
+  allowedProviders: AllowedProviderSchema,
+  allowedDevices: AllowedDevicesSchema,
+  /**
+   * Scopes granted to this user. Admins bypass; their `scopes` is
+   * ignored. Non-admins without scopes are locked out of every
+   * protected call.
+   */
+  scopes: z.array(TokenScopeSchema).default([]),
+  createdAt: z.number(),
+  updatedAt: z.number()
+});
+const ApiKeyRecordSchema = z.object({
+  id: z.string(),
+  label: z.string(),
+  isAdmin: z.boolean().default(false),
+  allowedProviders: AllowedProviderSchema,
+  allowedDevices: AllowedDevicesSchema,
+  tokenHash: z.string(),
+  tokenPrefix: z.string(),
+  createdAt: z.number(),
+  lastUsedAt: z.number().optional()
+});
+const ScopedTokenSchema = z.object({
+  id: z.string(),
+  userId: z.string(),
+  name: z.string(),
+  tokenHash: z.string(),
+  tokenPrefix: z.string(),
+  scopes: z.array(TokenScopeSchema),
+  // SQLite/JSON storage round-trips undefined → null. Use `nullish` so the
+  // schema accepts both `null` (read from disk) and `undefined` (in-memory).
+  expiresAt: z.number().nullish(),
+  lastUsedAt: z.number().nullish(),
+  createdAt: z.number()
+});
 const SsoBridgeClaimsSchema = z.object({
   userId: z.string(),
   username: z.string(),
@@ -3645,7 +4003,18 @@ const SsoBridgeClaimsSchema = z.object({
    * JWT WITHOUT verifying the signature — the hub re-verifies on every
    * inbound call so trust still rests with the signing hub.
    */
-  hubUrl: z.string().optional()
+  hubUrl: z.string().optional(),
+  /** Permission scopes baked into the token. Set by the OAuth
+   *  account-linking grant; absent on ordinary SSO-login tokens. */
+  scopes: z.array(TokenScopeSchema).optional(),
+  /** OAuth authorization-code binding — set only on `oauth-code` tokens. */
+  redirectUri: z.string().optional(),
+  integrationId: z.string().optional(),
+  /** JWT ID — unique per issued code; consumed-set enforces single-use. */
+  jti: z.string().optional(),
+  /** OAuth session registry id — set on `oauth-access`/`oauth-refresh`
+   *  tokens so the verify path can check the session is not revoked. */
+  sessionId: z.string().optional()
 });
 const ssoBridgeCapability = {
   name: "sso-bridge",
@@ -3666,6 +4035,27 @@ const ssoBridgeCapability = {
     )
   }
 };
+const OauthIntegrationDescriptorSchema = z.object({
+  /** Stable id used as the `integration=` query param, e.g. 'export-alexa'. */
+  integrationId: z.string(),
+  /** Human label rendered on the consent page. */
+  displayName: z.string(),
+  /** Scopes baked into every token issued for this integration. */
+  requestedScopes: z.array(TokenScopeSchema),
+  /** Allowed redirect_uri prefixes. /api/oauth2/authorize rejects any
+   *  redirect_uri that does not start with one of these. Required —
+   *  an empty list means the integration can never complete linking. */
+  allowedRedirectPrefixes: z.array(z.string()).min(1)
+});
+const oauthIntegrationCapability = {
+  name: "oauth-integration",
+  scope: "system",
+  mode: "collection",
+  internal: true,
+  methods: {
+    getDescriptor: method(z.void(), OauthIntegrationDescriptorSchema)
+  }
+};
 const PasskeySummarySchema = z.object({
   credentialId: z.string(),
   label: z.string(),
@@ -3981,21 +4371,30 @@ const addonPagesSourceCapability = {
 };
 const WidgetHostEnum = z.enum(["device-tab", "dashboard", "integration-detail"]);
 const WidgetSizeEnum = z.enum(["xs", "sm", "md", "lg", "xl"]);
+const WidgetRemoteSchema = z.object({
+  remoteName: z.string(),
+  exposedModule: z.string(),
+  componentKey: z.string().optional()
+});
 const WidgetMetadataSchema = z.object({
-  /** Stable id within the addon — kebab-case. */
-  stableId: z.string(),
+  // ── UiContribution core (kind:'remote') ──────────────────────────
+  /** Primary host tab — `'dashboard'`, `'device-tab'`, or a device-detail tab id. */
+  tab: z.string(),
+  /** Optional sub-tab within `tab`. */
+  subTab: z.string().optional(),
   /** Operator-facing label. */
   label: z.string(),
+  /** Ordering within `(tab, subTab)`, ascending. */
+  order: z.number().optional(),
+  /** Always `'remote'` — a widget is a Module Federation remote. */
+  kind: z.literal("remote"),
+  /** MF remote descriptor. */
+  remote: WidgetRemoteSchema,
+  // ── Widget-only metadata ─────────────────────────────────────────
+  /** Stable id within the addon — kebab-case. Equals `remote.componentKey`. */
+  stableId: z.string(),
   description: z.string().optional(),
   icon: z.string().optional(),
-  /**
-   * Module Federation remote name — must match the `name` field on the
-   * widget addon's `federation()` plugin config. Used by the host's
-   * `<WidgetRegistryProvider>` to call `loadRemote('<remoteName>/widgets')`.
-   * Conventionally `addon_<addonid>_widgets` (snake_case; MF names
-   * cannot contain hyphens).
-   */
-  remoteName: z.string(),
   /**
    * Bundle filename inside the addon's `dist/` dir served at
    * `/api/addon-widgets/<addonId>/<bundle>`. With Module Federation
@@ -4004,9 +4403,9 @@ const WidgetMetadataSchema = z.object({
    * cache-buster URL without a separate filesystem stat.
    */
   bundle: z.string(),
-  /** Where the widget makes sense to render. */
+  /** Every host the widget supports. The picker filters on this set. */
   hosts: z.array(WidgetHostEnum).readonly(),
-  /** Required props the host must supply. Validated at <WidgetSlot> mount. */
+  /** Required props the host must supply. Validated at `<WidgetSlot>` mount. */
   requires: z.object({
     deviceContext: z.boolean().default(false),
     integrationContext: z.boolean().default(false)
@@ -4106,6 +4505,16 @@ const DEFAULT_DECODER_HWACCEL_CONFIG = {
   hwaccel: "auto",
   probedBestHwaccel: ""
 };
+const ShmRingStatsSchema = z.object({
+  sessionId: z.string(),
+  slotCount: z.number().int(),
+  slotByteLength: z.number().int(),
+  segmentBytes: z.number().int(),
+  budgetMb: z.number().int(),
+  framesWritten: z.number().int(),
+  getFrameHits: z.number().int(),
+  getFrameMisses: z.number().int()
+});
 const decoderCapability = {
   name: "decoder",
   scope: "system",
@@ -4142,10 +4551,27 @@ const decoderCapability = {
       url: z.string()
     }), z.void()),
     // ── Output — polling-based frame retrieval ────────────────────
+    // `pullFrames` drains the pixel `DecodedFrame[]` of a `frameSink:
+    // 'callback'` session. `pullHandles` (Phase 5 / D9) drains the
+    // zero-pixel `FrameHandle[]` of a `frameSink: 'shm'` session — the
+    // broker hands each handle to a `FrameRingReader` that opens the
+    // named segment and reads the pixels back zero-copy. A session is
+    // one mode or the other; the unmatched method returns an empty
+    // array.
     pullFrames: method(z.object({
       sessionId: z.string(),
       maxCount: z.number().default(1)
     }), z.array(DecodedFrameSchema)),
+    pullHandles: method(z.object({
+      sessionId: z.string(),
+      maxCount: z.number().default(1)
+    }), z.array(FrameHandleSchema)),
+    // ── Frame fetch (Phase 5 / D9 downstream access) ──────────────
+    // Read the pixels a FrameHandle refers to from this node's shm ring.
+    // Returns null when the slot was already recycled (latest-wins).
+    getFrame: method(z.object({ handle: FrameHandleSchema }), DecodedFrameSchema.nullable()),
+    // shm ring usage stats for a session.
+    getShmStats: method(z.object({ sessionId: z.string() }), ShmRingStatsSchema.nullable()),
     // ── Control ───────────────────────────────────────────────────
     updateConfig: method(z.object({
       sessionId: z.string(),
@@ -4298,6 +4724,8 @@ const webrtcSessionCapability = {
   name: "webrtc-session",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   methods: {
     /**
@@ -4816,6 +5244,8 @@ const audioAnalysisCapability = {
   name: "audio-analysis",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   exposesDeviceSettings: true,
   methods: {
@@ -5355,8 +5785,8 @@ const deviceManagerCapability = {
     /**
      * Return the addon ids that declared a wrapper provider for `capName`.
      * Backs the device-bindings UI's wrapper-picker dropdown. Entries are
-     * sourced from `CapabilityRegistry.wrapperProviders`, populated at
-     * `ProviderRegistration.kind === 'wrapper'` time.
+     * sourced from `CapabilityRegistry.wrapperProviders`, populated when
+     * the cap definition declares `kind: 'wrapper'`.
      */
     listWrappersForCap: method(
       z.object({ capName: z.string() }),
@@ -5669,54 +6099,6 @@ const authProviderCapability = {
     validateToken: method(z.object({ token: z.string() }), AuthResultSchema.nullable())
   }
 };
-const AuthProviderInfoSchema = z.object({
-  /** Stable id matching the addon id (used for `getLoginUrl({addonId,…})`). */
-  addonId: z.string(),
-  /**
-   * Per-instance id when one addon registers multiple "logical"
-   * providers (e.g. OIDC with Google + Microsoft + custom). The login
-   * URL becomes `/addon/${addonId}/${instanceId}/start` — handler reads
-   * `:instanceId` from the route. Empty/unset means the addon is a
-   * single-instance provider; the URL is `/addon/${addonId}/start`.
-   */
-  instanceId: z.string().optional(),
-  /** Display label shown on the login button + admin row. */
-  displayName: z.string(),
-  /** Optional iconography hint (lucide-react icon name OR emoji). */
-  icon: z.string().optional(),
-  /** When true, the provider exposes a redirect-based login flow
-   *  (`getLoginUrl` returns a URL the browser navigates to). */
-  hasRedirectFlow: z.boolean(),
-  /** When true, the provider exposes a credential-form login flow
-   *  (`validateCredentials` accepts username + password). */
-  hasCredentialFlow: z.boolean(),
-  /** Provider kind, drives admin-UI hint dispatch (oidc / saml / totp / …). */
-  kind: z.string().optional(),
-  /** Operator-facing status string (e.g. "Connected to https://login.acme.com"). */
-  status: z.string().optional(),
-  /** When false, the provider is registered but disabled by config; the
-   *  UI surfaces it as inactive without enumerating it for login. */
-  enabled: z.boolean()
-});
-const authenticationCapability = {
-  name: "authentication",
-  scope: "system",
-  mode: "singleton",
-  methods: {
-    /** All registered auth providers, both enabled and disabled. */
-    listProviders: method(z.void(), z.array(AuthProviderInfoSchema).readonly()),
-    /**
-     * Toggle a provider's enabled flag. Disabled providers stay
-     * registered but aren't surfaced on the login page. The orchestrator
-     * persists the state in `addon-settings` so it survives restarts.
-     */
-    setProviderEnabled: method(
-      z.object({ addonId: z.string(), enabled: z.boolean() }),
-      z.object({ success: z.literal(true) }),
-      { kind: "mutation", auth: "admin" }
-    )
-  }
-};
 const NetworkEndpointSchema = z.object({
   url: z.string(),
   hostname: z.string(),
@@ -5745,7 +6127,6 @@ const networkAccessCapability = {
   name: "network-access",
   scope: "system",
   mode: "collection",
-  internal: true,
   providerKind: "ingress",
   methods: {
     start: method(z.void(), NetworkEndpointSchema, { kind: "mutation" }),
@@ -5753,58 +6134,13 @@ const networkAccessCapability = {
     getEndpoint: method(z.void(), NetworkEndpointSchema.nullable()),
     getStatus: method(z.void(), NetworkAccessStatusSchema),
     /**
-     * Enumerate every active ingress entry. Default implementation (when
-     * the provider omits this method) is derived from `getEndpoint()` —
-     * see the remote-access orchestrator for the fallback path.
+     * Enumerate every active ingress entry. Providers that expose only a
+     * single endpoint may omit this method; callers fall back to
+     * `getEndpoint()` in that case.
      */
     listEndpoints: method(z.void(), z.array(NetworkEndpointEntrySchema).readonly())
   }
 };
-const RemoteAccessEndpointSchema = z.object({
-  url: z.string(),
-  hostname: z.string(),
-  port: z.number(),
-  protocol: z.enum(["http", "https"])
-});
-const RemoteAccessProviderInfoSchema = z.object({
-  /** Stable id matching the addon id. */
-  addonId: z.string(),
-  /** Display label shown on the admin row — sourced from the addon manifest. */
-  displayName: z.string(),
-  /** When false, the provider is registered but disabled. */
-  enabled: z.boolean(),
-  /** True when the underlying tunnel/connection is up. */
-  connected: z.boolean(),
-  /** Public-facing endpoint, when connected. Null otherwise. */
-  endpoint: RemoteAccessEndpointSchema.nullable(),
-  /** Last error message (when connected=false), if available. */
-  error: z.string().optional()
-});
-const remoteAccessCapability = {
-  name: "remote-access",
-  scope: "system",
-  mode: "singleton",
-  methods: {
-    /** All registered remote-access providers + their live status. */
-    listProviders: method(z.void(), z.array(RemoteAccessProviderInfoSchema).readonly()),
-    /**
-     * Start a specific provider's tunnel. Per-provider config still
-     * lives on the addon's settings panel; this is just the on/off
-     * trigger so the admin UI can manage the lifecycle from one place.
-     */
-    startProvider: method(
-      z.object({ addonId: z.string() }),
-      RemoteAccessEndpointSchema,
-      { kind: "mutation", auth: "admin" }
-    ),
-    /** Stop a specific provider's tunnel (idempotent on already-stopped). */
-    stopProvider: method(
-      z.object({ addonId: z.string() }),
-      z.object({ success: z.literal(true) }),
-      { kind: "mutation", auth: "admin" }
-    )
-  }
-};
 const TurnServerSchema = z.object({
   /** Single URL or list of URLs (e.g. "turn:turn.example.com:3478?transport=udp"). */
   urls: z.union([z.string(), z.array(z.string())]),
@@ -5827,48 +6163,6 @@ const turnProviderCapability = {
     )
   }
 };
-const TurnProviderInfoSchema = z.object({
-  /** Stable id matching the addon id. */
-  addonId: z.string(),
-  /** Display label shown on the admin row — sourced from the addon manifest. */
-  displayName: z.string(),
-  /** When false, the provider is registered but disabled. */
-  enabled: z.boolean(),
-  /** Number of servers this provider is currently exposing. */
-  serverCount: z.number(),
-  /**
-   * Flat list of every TURN/STUN URL this provider currently exposes.
-   * One row per URL (multi-URL ICE server entries are flattened). The
-   * admin UI shows this in a compact per-provider list so operators
-   * can verify what's actually being negotiated without having to dig
-   * into the combined `getAllServers` output.
-   */
-  urls: z.array(z.string()).readonly(),
-  /** Last fetch error (when serverCount=0 due to API failure), if any. */
-  error: z.string().optional()
-});
-const turnOrchestratorCapability = {
-  name: "turn-orchestrator",
-  scope: "system",
-  mode: "singleton",
-  methods: {
-    /** All registered TURN providers + per-provider stats. */
-    listProviders: method(z.void(), z.array(TurnProviderInfoSchema).readonly()),
-    /**
-     * Combined list of TURN/STUN servers from all ENABLED providers.
-     * Consumed by the WebRTC layer at session-creation time —
-     * implementations may fetch fresh short-lived credentials each
-     * call (e.g. Cloudflare API), so consumers SHOULD call per-session.
-     */
-    getAllServers: method(z.void(), z.array(TurnServerSchema).readonly()),
-    /** Toggle a provider's enabled flag. */
-    setProviderEnabled: method(
-      z.object({ addonId: z.string(), enabled: z.boolean() }),
-      z.object({ success: z.literal(true) }),
-      { kind: "mutation", auth: "admin" }
-    )
-  }
-};
 const SnapshotImageSchema = z.object({
   base64: z.string(),
   contentType: z.string()
@@ -5887,6 +6181,8 @@ const snapshotCapability = {
   name: "snapshot",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   // Owns per-device snapshot settings (preferred stream, debug logging).
   // The three DeviceSettingsContribution methods are auto-added to the
@@ -6236,6 +6532,8 @@ const detectionPipelineCapability = {
   name: "detection-pipeline",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   exposesDeviceSettings: true,
   methods: {}
@@ -6344,6 +6642,8 @@ const pipelineAnalyticsCapability = {
   name: "pipeline-analytics",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   exposesDeviceSettings: true,
   methods: {
@@ -6633,11 +6933,26 @@ const PtzMoveCommandSchema = z.object({
   zoom: z.number().optional(),
   speed: z.number().optional()
 });
+const PtzStatusSchema = PtzPositionSchema.extend({ autofocus: z.boolean() });
+const PtzOptionsSchema = z.object({
+  hasPan: z.boolean(),
+  hasTilt: z.boolean(),
+  hasZoom: z.boolean(),
+  supportsPresets: z.boolean(),
+  /** Max number of named presets the camera supports, when known. */
+  maxPresets: z.number().optional(),
+  /** Whether the camera exposes a controllable autofocus toggle
+   *  (boolean `hasX` per the getOptions availability convention). */
+  hasAutofocus: z.boolean()
+});
 const ptzCapability = {
   name: "ptz",
   scope: "device",
   mode: "singleton",
   deviceTypes: [DeviceType.Camera],
+  deviceConfig: {
+    ui: { kind: "widget", widgetId: "host/ptz-panel", tab: "ptz", topTab: true, label: "PTZ", order: 0 }
+  },
   methods: {
     move: method(
       PtzMoveCommandSchema.extend({ deviceId: z.number() }),
@@ -6663,6 +6978,20 @@ const ptzCapability = {
       z.void(),
       { kind: "mutation" }
     ),
+    savePreset: method(
+      z.object({ deviceId: z.number(), presetId: z.string(), name: z.string() }),
+      z.void(),
+      { kind: "mutation", auth: "admin" }
+    ),
+    deletePreset: method(
+      z.object({ deviceId: z.number(), presetId: z.string() }),
+      z.void(),
+      { kind: "mutation", auth: "admin" }
+    ),
+    getOptions: method(
+      z.object({ deviceId: z.number() }),
+      PtzOptionsSchema
+    ),
     goHome: method(
       z.object({ deviceId: z.number() }),
       z.void(),
@@ -6677,10 +7006,17 @@ const ptzCapability = {
     getPosition: method(
       z.object({ deviceId: z.number() }),
       PtzPositionSchema
+    ),
+    /** Toggle the camera's autofocus. Only meaningful when
+     *  `getOptions().hasAutofocus` is true. */
+    setAutofocus: method(
+      z.object({ deviceId: z.number(), enabled: z.boolean() }),
+      z.void(),
+      { kind: "mutation" }
     )
   },
   status: {
-    schema: PtzPositionSchema,
+    schema: PtzStatusSchema,
     kind: "command-driven"
   }
 };
@@ -7464,7 +7800,7 @@ const localNetworkCapability = {
     )
   }
 };
-const MeshEndpointSchema$1 = z.object({
+const MeshEndpointSchema = z.object({
   /** Stable identifier within the provider (e.g. `mesh-ipv4`, `magicdns`, `funnel`). */
   id: z.string(),
   /** Operator-facing label (e.g. "Mesh IPv4", "MagicDNS"). */
@@ -7537,7 +7873,7 @@ const MeshStatusSchema = z.object({
   /** Number of peers visible to this host (excluding self). */
   peerCount: z.number(),
   /** Every endpoint this provider exposes for the current host. */
-  endpoints: z.array(MeshEndpointSchema$1).readonly(),
+  endpoints: z.array(MeshEndpointSchema).readonly(),
   /** Last error from the daemon, when not joined. */
   error: z.string().optional(),
   // ── Account / tenant identity (generic across providers) ────────
@@ -7704,185 +8040,6 @@ const meshNetworkCapability = {
     // tabs driven by this cap.
   }
 };
-const MeshEndpointSchema = z.object({
-  id: z.string(),
-  label: z.string(),
-  scope: z.enum(["mesh", "public"]),
-  url: z.string(),
-  hostname: z.string(),
-  port: z.number(),
-  protocol: z.enum(["http", "https"])
-});
-const MeshProviderInfoSchema = z.object({
-  /** Stable id matching the addon id. */
-  addonId: z.string(),
-  /** Display label shown on the admin row — sourced from the addon manifest. */
-  displayName: z.string(),
-  /** True when the host is joined to this provider's mesh. */
-  joined: z.boolean(),
-  /** Local mesh IP (empty when not joined). */
-  meshIp: z.string(),
-  /** MagicDNS / mesh hostname (empty when not configured). */
-  magicDnsHostname: z.string(),
-  /** Peer count (excluding self). */
-  peerCount: z.number(),
-  /** Active endpoints (mesh IP + MagicDNS + optional public Funnel). */
-  endpoints: z.array(MeshEndpointSchema).readonly(),
-  /** Last error reported by the provider. */
-  error: z.string().optional(),
-  // ── Generic identity fields mirrored from MeshStatus ─────────────
-  /** Tenant / tailnet / network display name. Empty pre-join. */
-  tenantName: z.string(),
-  /** Mesh DNS suffix (e.g. tailXXXX.ts.net). Empty when not configured. */
-  magicDnsSuffix: z.string(),
-  /** Authenticated user / account login. Null for token-only providers. */
-  userLogin: z.string().nullable(),
-  /** Provider control-plane URL. */
-  controlPlaneUrl: z.string(),
-  /** Machine-key expiry (epoch ms). Null when keys don't rotate. */
-  keyExpiry: z.number().nullable()
-});
-const meshOrchestratorCapability = {
-  name: "mesh-orchestrator",
-  scope: "system",
-  mode: "singleton",
-  methods: {
-    /** All registered mesh-network providers + live status. */
-    listProviders: method(z.void(), z.array(MeshProviderInfoSchema).readonly()),
-    /**
-     * Join the mesh of a specific provider. Per-provider config still
-     * lives on its settings panel; the orchestrator forwards.
-     */
-    joinProvider: method(
-      z.object({
-        addonId: z.string(),
-        authKey: z.string().min(8),
-        hostname: z.string().optional()
-      }),
-      z.object({ joined: z.literal(true) }),
-      { kind: "mutation" }
-    ),
-    leaveProvider: method(
-      z.object({ addonId: z.string() }),
-      z.object({ success: z.literal(true) }),
-      { kind: "mutation" }
-    ),
-    /**
-     * Browser-redirect login flow. Forwards to the named provider's
-     * `mesh-network.startLogin` and returns the URL the daemon
-     * prints. UI opens it in a new tab, then polls `listProviders`
-     * for `joined: true`.
-     */
-    startLoginProvider: method(
-      z.object({
-        addonId: z.string(),
-        hostname: z.string().optional()
-      }),
-      z.object({ loginUrl: z.string() }),
-      { kind: "mutation" }
-    ),
-    /**
-     * Sign out of the provider's account entirely (`mesh-network.logout`).
-     * Distinct from `leaveProvider` which only takes the host off-mesh;
-     * `logoutProvider` wipes credentials so the next start requires a
-     * fresh login.
-     */
-    logoutProvider: method(
-      z.object({ addonId: z.string() }),
-      z.object({ loggedOut: z.literal(true) }),
-      { kind: "mutation" }
-    ),
-    /**
-     * Per-provider peer list. Forwards to `mesh-network.listPeers` on
-     * the addressed provider. Separate from `listProviders` because
-     * peer payloads can be large on a heavily-populated tailnet —
-     * fetch only when the operator opens the Peers tab.
-     */
-    listProviderPeers: method(
-      z.object({ addonId: z.string() }),
-      z.object({
-        peers: z.array(MeshPeerSchema).readonly()
-      })
-    )
-  }
-};
-const MethodAccessSchema = z.enum(["view", "create", "delete"]);
-const AllowedProviderSchema = z.union([z.literal("*"), z.array(z.string())]);
-const AllowedDevicesSchema = z.record(z.string(), z.union([z.literal("*"), z.array(z.string())]));
-const CapScopeSchema = z.enum(["device", "system"]);
-const TokenScopeSchema = z.discriminatedUnion("type", [
-  z.object({
-    type: z.literal("category"),
-    target: CapScopeSchema,
-    access: z.array(MethodAccessSchema).min(1)
-  }),
-  z.object({
-    type: z.literal("capability"),
-    target: z.string(),
-    access: z.array(MethodAccessSchema).min(1)
-  }),
-  z.object({
-    type: z.literal("addon"),
-    target: z.string(),
-    access: z.array(MethodAccessSchema).min(1)
-  }),
-  z.object({
-    type: z.literal("device"),
-    /**
-     * One or more deviceIds (serialised as strings for wire-format
-     * consistency with the rest of the union). Matcher accepts if
-     * `input.deviceId` ∈ `targets`. Array shape avoids the row-explosion
-     * of one scope-per-device when granting access to a set of cameras.
-     */
-    targets: z.array(z.string()).min(1),
-    access: z.array(MethodAccessSchema).min(1)
-  })
-]);
-const UserRecordSchema = z.object({
-  id: z.string(),
-  username: z.string(),
-  passwordHash: z.string(),
-  /**
-   * Admin bypass. When true, the middleware skips the scope-access
-   * check entirely. There is no other axis of privilege; the legacy
-   * role enum collapsed onto this boolean in v2.
-   */
-  isAdmin: z.boolean().default(false),
-  allowedProviders: AllowedProviderSchema,
-  allowedDevices: AllowedDevicesSchema,
-  /**
-   * Scopes granted to this user. Admins bypass; their `scopes` is
-   * ignored. Non-admins without scopes are locked out of every
-   * protected call.
-   */
-  scopes: z.array(TokenScopeSchema).default([]),
-  createdAt: z.number(),
-  updatedAt: z.number()
-});
-const ApiKeyRecordSchema = z.object({
-  id: z.string(),
-  label: z.string(),
-  isAdmin: z.boolean().default(false),
-  allowedProviders: AllowedProviderSchema,
-  allowedDevices: AllowedDevicesSchema,
-  tokenHash: z.string(),
-  tokenPrefix: z.string(),
-  createdAt: z.number(),
-  lastUsedAt: z.number().optional()
-});
-const ScopedTokenSchema = z.object({
-  id: z.string(),
-  userId: z.string(),
-  name: z.string(),
-  tokenHash: z.string(),
-  tokenPrefix: z.string(),
-  scopes: z.array(TokenScopeSchema),
-  // SQLite/JSON storage round-trips undefined → null. Use `nullish` so the
-  // schema accepts both `null` (read from disk) and `undefined` (in-memory).
-  expiresAt: z.number().nullish(),
-  lastUsedAt: z.number().nullish(),
-  createdAt: z.number()
-});
 const UserSummarySchema = z.object({
   id: z.string(),
   username: z.string(),
@@ -7955,6 +8112,16 @@ const CreateScopedTokenResultSchema = z.object({
   token: z.string(),
   record: ScopedTokenSummarySchema
 });
+const OauthSessionSummarySchema = z.object({
+  id: z.string(),
+  userId: z.string(),
+  username: z.string(),
+  integrationId: z.string(),
+  scopes: z.array(TokenScopeSchema),
+  createdAt: z.number(),
+  lastUsedAt: z.number(),
+  revokedAt: z.number().nullable()
+});
 const TotpSetupResultSchema = z.object({
   secret: z.string(),
   otpauthUrl: z.string()
@@ -8033,6 +8200,66 @@ const userManagementCapability = {
       z.object({ userId: z.string(), code: z.string() }),
       z.object({ valid: z.boolean() }),
       { kind: "mutation", access: "view" }
+    ),
+    // ── OAuth account-linking grant ────────────────────────────────
+    //
+    // Core's /oauth2/* endpoints delegate here. Tokens are sso-bridge
+    // JWTs (kinds oauth-code / oauth-access / oauth-refresh) and ALWAYS
+    // carry isAdmin:false — the operator login proves hub control; the
+    // issued token is minimal (device scope only).
+    oauthIssueCode: method(
+      z.object({
+        integrationId: z.string(),
+        userId: z.string(),
+        username: z.string(),
+        scopes: z.array(TokenScopeSchema),
+        redirectUri: z.string(),
+        hubUrl: z.string()
+      }),
+      z.object({ code: z.string() }),
+      { kind: "mutation", access: "create" }
+    ),
+    oauthExchangeCode: method(
+      z.object({ code: z.string(), redirectUri: z.string() }),
+      z.object({
+        accessToken: z.string(),
+        refreshToken: z.string(),
+        expiresIn: z.number()
+      }).nullable(),
+      { kind: "mutation", access: "view" }
+    ),
+    oauthRefresh: method(
+      z.object({ refreshToken: z.string() }),
+      z.object({
+        accessToken: z.string(),
+        refreshToken: z.string(),
+        expiresIn: z.number()
+      }).nullable(),
+      { kind: "mutation", access: "view" }
+    ),
+    oauthVerifyAccessToken: method(
+      z.object({ token: z.string() }),
+      z.object({
+        userId: z.string(),
+        username: z.string(),
+        scopes: z.array(TokenScopeSchema)
+      }).nullable(),
+      { access: "view" }
+    ),
+    // ── OAuth linked-session management (Phase D) ──────────────────
+    //
+    // The admin UI lists active account-linking sessions and revokes
+    // them; revocation makes the linked integration's tokens fail
+    // verification immediately.
+    listOauthSessions: method(
+      z.void(),
+      z.array(OauthSessionSummarySchema),
+      { auth: "admin" }
+    ),
+    revokeOauthSession: method(
+      z.object({ id: z.string() }),
+      z.object({ success: z.boolean() }),
+      { kind: "mutation", auth: "admin", access: "delete" }
     )
   }
 };
@@ -8262,6 +8489,19 @@ const nodesCapability = {
       z.record(z.string(), ClusterAddonStatusEntrySchema),
       { auth: "admin" }
     ),
+    getCapUsageGraph: method(
+      z.object({
+        windowSeconds: z.number().int().positive().max(300).default(60)
+      }),
+      z.array(z.object({
+        callerAddonId: z.string(),
+        providerAddonId: z.string(),
+        capName: z.string(),
+        callsPerMin: z.number(),
+        lastCallAtMs: z.number()
+      })).readonly(),
+      { auth: "admin" }
+    ),
     /**
      * Direct per-node addon listing — calls `$agent.status` on the target
      * node (or returns the hub registry for `nodeId === 'hub'`) and surfaces
@@ -8698,6 +8938,29 @@ const addonsCapability = {
         isActive: z.boolean()
       })).readonly()
     ),
+    /**
+     * Toggle a single collection-cap provider on/off. Generic write-side
+     * counterpart of `listCapabilityProviders` — drives the per-provider
+     * Enable/Disable affordance in admin pages (TURN servers, etc.)
+     * without needing a bespoke orchestrator cap.
+     *
+     * Reaches the hub's `CapabilityRegistry` directly:
+     * `enableCollectionProvider` / `disableCollectionProvider` flip the
+     * registry-level `disabledProviders` set. `getCollectionEntries`
+     * already filters disabled providers out, so a disabled provider
+     * drops out of every collection aggregate immediately. Only valid
+     * for `mode: 'collection'` caps — the registry no-ops + warns for
+     * singletons.
+     */
+    setCapabilityProviderEnabled: method(
+      z.object({
+        capName: z.string().min(1),
+        addonId: z.string().min(1),
+        enabled: z.boolean()
+      }),
+      z.object({ success: z.literal(true) }),
+      { kind: "mutation", auth: "admin" }
+    ),
     /**
      * Live-update one of the framework packages marked
      * `camstack.system: true` (`@camstack/types|kernel|core|sdk|ui-library`).
@@ -8801,77 +9064,77 @@ const PIPELINE_OWNER_CAPABILITY_NAMES = [
 ];
 export {
   nativeObjectDetectionCapability as $,
-  adminUiCapability as A,
-  advancedNotifierCapability as B,
-  alertsCapability as C,
-  audioAnalysisCapability as D,
-  audioAnalyzerCapability as E,
-  audioCodecCapability as F,
-  authProviderCapability as G,
-  authenticationCapability as H,
-  backupCapability as I,
-  cameraCredentialsCapability as J,
-  decoderCapability as K,
-  detectionPipelineCapability as L,
-  deviceExportCapability as M,
-  deviceManagerCapability as N,
-  deviceOpsCapability as O,
-  deviceStateCapability as P,
-  embeddingEncoderCapability as Q,
-  eventsCapability as R,
-  integrationsCapability as S,
-  intercomCapability as T,
-  localNetworkCapability as U,
-  logDestinationCapability as V,
-  meshNetworkCapability as W,
-  meshOrchestratorCapability as X,
+  addonWidgetsSourceCapability as A,
+  addonsCapability as B,
+  adminUiCapability as C,
+  advancedNotifierCapability as D,
+  alertsCapability as E,
+  audioAnalysisCapability as F,
+  audioAnalyzerCapability as G,
+  audioCodecCapability as H,
+  authProviderCapability as I,
+  backupCapability as J,
+  cameraCredentialsCapability as K,
+  decoderCapability as L,
+  detectionPipelineCapability as M,
+  deviceExportCapability as N,
+  deviceManagerCapability as O,
+  deviceOpsCapability as P,
+  deviceStateCapability as Q,
+  embeddingEncoderCapability as R,
+  eventsCapability as S,
+  integrationsCapability as T,
+  intercomCapability as U,
+  localNetworkCapability as V,
+  logDestinationCapability as W,
+  meshNetworkCapability as X,
   metricsProviderCapability as Y,
   motionDetectionCapability as Z,
   mqttBrokerCapability as _,
   zoneRulesCapability as a,
-  AudioEventSchema as a$,
+  AudioLevelSchema as a$,
   networkAccessCapability as a0,
   networkQualityCapability as a1,
   nodesCapability as a2,
   notificationOutputCapability as a3,
-  osdCapability as a4,
-  pipelineAnalyticsCapability as a5,
-  pipelineExecutorCapability as a6,
-  pipelineOrchestratorCapability as a7,
-  pipelineRunnerCapability as a8,
-  platformProbeCapability as a9,
-  AUDIO_MACRO_LABELS as aA,
-  AccessoriesStatusSchema as aB,
-  AccessoryKind as aC,
-  AddBrokerInputSchema as aD,
-  AddonAutoUpdateSchema as aE,
-  AddonListItemSchema as aF,
-  AddonPageDeclarationSchema as aG,
-  AddonPageInfoSchema as aH,
-  AgentLoadSummarySchema as aI,
-  AlertSchema as aJ,
-  AlertSeveritySchema as aK,
-  AlertSourceSchema as aL,
-  AlertStatusSchema as aM,
-  ApiKeyRecordSchema as aN,
-  ApiKeySummarySchema as aO,
-  ArchiveEntrySchema as aP,
-  ArchiveManifestSchema as aQ,
-  AudioAnalysisResultSchema as aR,
-  AudioAnalysisSettingsSchema as aS,
-  AudioChunkInputSchema as aT,
-  AudioClassSummarySchema as aU,
-  AudioClassificationLabelSchema as aV,
-  AudioClassificationResultSchema as aW,
-  AudioCodecInfoSchema as aX,
-  AudioDecodeSessionConfigSchema as aY,
-  AudioEncodeSessionConfigSchema as aZ,
-  AudioEncodedChunkSchema as a_,
-  ptzCapability as aa,
-  rebootCapability as ab,
-  recordingCapability as ac,
-  recordingEngineCapability as ad,
-  remoteAccessCapability as ae,
+  oauthIntegrationCapability as a4,
+  osdCapability as a5,
+  pipelineAnalyticsCapability as a6,
+  pipelineExecutorCapability as a7,
+  pipelineOrchestratorCapability as a8,
+  pipelineRunnerCapability as a9,
+  AccessoriesStatusSchema as aA,
+  AccessoryKind as aB,
+  AddBrokerInputSchema as aC,
+  AddonAutoUpdateSchema as aD,
+  AddonListItemSchema as aE,
+  AddonPageDeclarationSchema as aF,
+  AddonPageInfoSchema as aG,
+  AgentLoadSummarySchema as aH,
+  AlertSchema as aI,
+  AlertSeveritySchema as aJ,
+  AlertSourceSchema as aK,
+  AlertStatusSchema as aL,
+  ApiKeyRecordSchema as aM,
+  ApiKeySummarySchema as aN,
+  ArchiveEntrySchema as aO,
+  ArchiveManifestSchema as aP,
+  AudioAnalysisResultSchema as aQ,
+  AudioAnalysisSettingsSchema as aR,
+  AudioChunkInputSchema as aS,
+  AudioClassSummarySchema as aT,
+  AudioClassificationLabelSchema as aU,
+  AudioClassificationResultSchema as aV,
+  AudioCodecInfoSchema as aW,
+  AudioDecodeSessionConfigSchema as aX,
+  AudioEncodeSessionConfigSchema as aY,
+  AudioEncodedChunkSchema as aZ,
+  AudioEventSchema as a_,
+  platformProbeCapability as aa,
+  ptzCapability as ab,
+  rebootCapability as ac,
+  recordingCapability as ad,
+  recordingEngineCapability as ae,
   restreamerCapability as af,
   settingsStoreCapability as ag,
   smtpProviderCapability as ah,
@@ -8884,283 +9147,301 @@ export {
   streamingEngineCapability as ao,
   systemCapability as ap,
   toastCapability as aq,
-  turnOrchestratorCapability as ar,
-  turnProviderCapability as as,
-  userManagementCapability as at,
-  userPasskeysCapability as au,
-  webrtcCapability as av,
-  webrtcSessionCapability as aw,
-  ACCESSORY_LABEL as ax,
-  APPLE_SA_TO_MACRO as ay,
-  AUDIO_BACKEND_CHOICES as az,
+  turnProviderCapability as ar,
+  userManagementCapability as as,
+  userPasskeysCapability as at,
+  webrtcCapability as au,
+  webrtcSessionCapability as av,
+  ACCESSORY_LABEL as aw,
+  APPLE_SA_TO_MACRO as ax,
+  AUDIO_BACKEND_CHOICES as ay,
+  AUDIO_MACRO_LABELS as az,
   zoneAnalyticsCapability as b,
-  DeviceExportStatusSchema as b$,
-  AudioLevelSchema as b0,
-  AudioMetricsHistoryPointSchema as b1,
-  AudioMetricsHistorySchema as b2,
-  AudioMetricsSnapshotSchema as b3,
-  AudioPcmChunkSchema as b4,
-  AuthProviderInfoSchema as b5,
-  AuthResultSchema as b6,
-  AutoUpdateSettingsSchema as b7,
-  AvailableIntegrationTypeSchema as b8,
-  BATTERY_DEVICE_PROFILE as b9,
-  ClusterAddonNodeDeploymentSchema as bA,
-  ClusterAddonStatusEntrySchema as bB,
-  CollectionColumnSchema as bC,
-  CollectionIndexSchema as bD,
-  ConfigEntrySchema$1 as bE,
-  ConfigSectionWithValuesSchema as bF,
-  ConfigTabDeclarationSchema as bG,
-  CreateApiKeyInputSchema as bH,
-  CreateApiKeyResultSchema as bI,
-  CreateIntegrationInputSchema as bJ,
-  CreateScopedTokenInputSchema as bK,
-  CreateScopedTokenResultSchema as bL,
-  CreateUserInputSchema as bM,
-  CustomActionInputSchema as bN,
-  DEFAULT_AUDIO_ANALYZER_CONFIG as bO,
-  DEFAULT_DECODER_HWACCEL_CONFIG as bP,
-  DEVICE_PROFILES as bQ,
-  DEVICE_SETTINGS_CONTRIBUTION_METHODS as bR,
-  DEVICE_STATUS_METHOD as bS,
-  DecodedFrameSchema as bT,
-  DecoderAssignmentSchema as bU,
-  DecoderSessionConfigSchema as bV,
-  DecoderStatsSchema as bW,
-  DeleteIntegrationResultSchema as bX,
-  DetectorOutputSchema as bY,
-  DeviceDiscoveryStatusSchema as bZ,
-  ExposeInputSchema as b_,
-  BackupDestinationInfoSchema as ba,
-  BackupEntrySchema as bb,
-  BatteryStatusSchema as bc,
-  BoundingBoxSchema as bd,
-  BrightnessStatusSchema as be,
-  BrokerAudioClientSchema as bf,
-  BrokerClientsSchema as bg,
-  BrokerConnectionDetailsSchema as bh,
-  BrokerDecodedClientSchema as bi,
-  BrokerInfoSchema as bj,
-  BrokerRtspClientSchema as bk,
-  BrokerStatsSchema as bl,
-  BrokerStatusSchema$1 as bm,
-  CAM_PROFILE_ORDER as bn,
-  CamProfileSchema as bo,
-  CamStreamKindSchema as bp,
-  CamStreamResolutionSchema as bq,
-  CameraCredentialsSchema as br,
-  CameraCredentialsStatusSchema as bs,
-  CameraMetricsSchema as bt,
-  CameraMetricsWithDeviceIdSchema as bu,
-  CameraStreamSchema as bv,
-  CapScopeSchema as bw,
-  CapabilityBindingsSchema as bx,
-  ChargingStatus as by,
-  ClientNetworkStatsSchema as bz,
-  motionCapability as c,
-  OrchestratorMetricsSchema as c$,
-  UnexposeInputSchema as c0,
-  DeviceFeature as c1,
-  DeviceInfoSchema as c2,
-  DeviceNetworkStatsSchema as c3,
-  DeviceRole as c4,
-  DeviceStatusSchema as c5,
-  DeviceType as c6,
-  DiscoveredChildDeviceSchema as c7,
-  DiscoveredChildStatusSchema as c8,
-  DiscoveredDeviceSchema as c9,
-  LocationStatSchema as cA,
-  LogEntrySchema as cB,
-  LogLevelSchema$1 as cC,
-  LogStreamEntrySchema as cD,
-  MODEL_FORMATS as cE,
-  MediaFileSchema as cF,
-  MethodAccessSchema as cG,
-  MotionAnalysisResultSchema as cH,
-  MotionEventSchema as cI,
-  MotionOnMotionChangedDataSchema as cJ,
-  MotionRegionSchema as cK,
-  MotionSourceEnum as cL,
-  MotionSourcesSchema as cM,
-  MotionStatusSchema as cN,
-  MotionTriggerRuntimeStateSchema as cO,
-  MotionTriggerStatusSchema as cP,
-  StatusSchema as cQ,
-  NativeDetectionSchema as cR,
-  NativeObjectClassEnum as cS,
-  NativeObjectDetectionStatusSchema as cT,
-  NetworkAccessStatusSchema as cU,
-  NetworkAddressSchema as cV,
-  NetworkEndpointSchema as cW,
-  NotificationHistoryEntrySchema as cX,
-  NotificationRuleSchema as cY,
-  NotificationSchema as cZ,
-  ObjectEventSchema as c_,
-  DoorbellPressEventSchema as ca,
-  DoorbellStatusSchema as cb,
-  EmbeddingInfoSchema as cc,
-  EmbeddingResultSchema as cd,
-  EncodedPacketSchema as ce,
-  EnrichedWidgetMetadataSchema as cf,
-  EventItemSchema as cg,
-  EventKindSchema as ch,
-  ExportSetupFieldSchema as ci,
-  ExportSetupSchema as cj,
-  ExposedDeviceSchema as ck,
-  ExposedResourceSchema as cl,
-  FeatureManifestSchema as cm,
-  FeatureProbeStatusSchema as cn,
-  FrameInputSchema as co,
-  GetStreamWithCodecInputSchema as cp,
-  GlobalMetricsSchema as cq,
-  HWACCEL_OPTIONS as cr,
-  HealthStatusSchema as cs,
-  HistoryPointSchema as ct,
-  HistoryResolutionEnum as cu,
-  InstalledPackageSchema as cv,
-  IntegrationLiteSchema as cw,
-  IntegrationWithStateSchema as cx,
-  IntercomAbilitySchema as cy,
-  IntercomStatusSchema as cz,
-  doorbellCapability as d,
-  FinalizeUploadInputSchema as d$,
-  OsdOverlayKindEnum as d0,
-  OsdOverlayPatchSchema as d1,
-  OsdOverlaySchema as d2,
-  OsdPositionEnum as d3,
-  OsdStatusSchema as d4,
-  PIPELINE_FLOW_CAPABILITY_NAMES as d5,
-  PIPELINE_OWNER_CAPABILITY_NAMES as d6,
-  PackageUpdateSchema as d7,
-  PackageVersionInfoSchema as d8,
-  PasskeySummarySchema as d9,
-  RtspRestreamEntrySchema as dA,
-  RunnerCameraConfigSchema as dB,
-  RunnerCameraDeviceUIFields as dC,
-  RunnerLocalLoadSchema as dD,
-  RunnerLocalMetricsSchema as dE,
-  STORAGE_LOCATION_CARDINALITY as dF,
-  ScopedTokenSchema as dG,
-  ScopedTokenSummarySchema as dH,
-  SearchResultSchema as dI,
-  SegmentSchema as dJ,
-  SendEmailInputSchema as dK,
-  SendEmailResultSchema as dL,
-  SettingsPatchSchema as dM,
-  SettingsRecordSchema as dN,
-  SettingsSchemaWithValuesSchema as dO,
-  SettingsUpdateResultSchema as dP,
-  SmtpStatusSchema as dQ,
-  SnapshotImageSchema as dR,
-  SpatialDetectionSchema as dS,
-  SsoBridgeClaimsSchema as dT,
-  StartEmbeddedInputSchema as dU,
-  AbortUploadInputSchema as dV,
-  BeginDownloadInputSchema as dW,
-  BeginDownloadResultSchema as dX,
-  BeginUploadInputSchema as dY,
-  BeginUploadResultSchema as dZ,
-  EndDownloadInputSchema as d_,
-  PcmSampleFormatSchema as da,
-  PerScopeBreakdownSchema as db,
-  PipelineAssignmentSchema as dc,
-  PipelineDefaultStepSchema as dd,
-  PipelineEngineChoiceSchema as de,
-  PipelineRunResultBridge as df,
-  PipelineStepInputSchema as dg,
-  PlaceholderReasonSchema as dh,
-  PolygonPointSchema as di,
-  ProfileSlotSchema as dj,
-  ProfileSlotStatusSchema as dk,
-  ProviderStatusSchema as dl,
-  PtzAutotrackRuntimeStateSchema as dm,
-  PtzAutotrackSettingsSchema as dn,
-  PtzAutotrackStatusSchema as dp,
-  PtzAutotrackTargetOptionSchema as dq,
-  PtzMoveCommandSchema as dr,
-  PtzPositionSchema as ds,
-  PtzPresetSchema as dt,
-  QueryFilterSchema as du,
-  RegisteredStreamSchema as dv,
-  RemoteAccessEndpointSchema as dw,
-  RemoteAccessProviderInfoSchema as dx,
-  ReportMotionInputSchema as dy,
-  RtpSourceSchema as dz,
+  UnexposeInputSchema as b$,
+  AudioMetricsHistoryPointSchema as b0,
+  AudioMetricsHistorySchema as b1,
+  AudioMetricsSnapshotSchema as b2,
+  AudioPcmChunkSchema as b3,
+  AuthResultSchema as b4,
+  AutoUpdateSettingsSchema as b5,
+  AvailableIntegrationTypeSchema as b6,
+  BATTERY_DEVICE_PROFILE as b7,
+  BackupDestinationInfoSchema as b8,
+  BackupEntrySchema as b9,
+  CollectionColumnSchema as bA,
+  CollectionIndexSchema as bB,
+  ConfigEntrySchema$1 as bC,
+  ConfigSectionWithValuesSchema as bD,
+  ConfigTabDeclarationSchema as bE,
+  CreateApiKeyInputSchema as bF,
+  CreateApiKeyResultSchema as bG,
+  CreateIntegrationInputSchema as bH,
+  CreateScopedTokenInputSchema as bI,
+  CreateScopedTokenResultSchema as bJ,
+  CreateUserInputSchema as bK,
+  CustomActionInputSchema as bL,
+  DEFAULT_AUDIO_ANALYZER_CONFIG as bM,
+  DEFAULT_DECODER_HWACCEL_CONFIG as bN,
+  DEVICE_PROFILES as bO,
+  DEVICE_SETTINGS_CONTRIBUTION_METHODS as bP,
+  DEVICE_STATUS_METHOD as bQ,
+  DecodedAudioChunkSchema as bR,
+  DecodedFrameSchema as bS,
+  DecoderAssignmentSchema as bT,
+  DecoderSessionConfigSchema as bU,
+  DecoderStatsSchema as bV,
+  DeleteIntegrationResultSchema as bW,
+  DetectorOutputSchema as bX,
+  DeviceDiscoveryStatusSchema as bY,
+  ExposeInputSchema as bZ,
+  DeviceExportStatusSchema as b_,
+  BatteryStatusSchema as ba,
+  BoundingBoxSchema as bb,
+  BrightnessStatusSchema as bc,
+  BrokerAudioClientSchema as bd,
+  BrokerClientsSchema as be,
+  BrokerConnectionDetailsSchema as bf,
+  BrokerDecodedClientSchema as bg,
+  BrokerInfoSchema as bh,
+  BrokerRtspClientSchema as bi,
+  BrokerStatsSchema as bj,
+  BrokerStatusSchema$1 as bk,
+  CAM_PROFILE_ORDER as bl,
+  CamProfileSchema as bm,
+  CamStreamKindSchema as bn,
+  CamStreamResolutionSchema as bo,
+  CameraCredentialsSchema as bp,
+  CameraCredentialsStatusSchema as bq,
+  CameraMetricsSchema as br,
+  CameraMetricsWithDeviceIdSchema as bs,
+  CameraStreamSchema as bt,
+  CapScopeSchema as bu,
+  CapabilityBindingsSchema as bv,
+  ChargingStatus as bw,
+  ClientNetworkStatsSchema as bx,
+  ClusterAddonNodeDeploymentSchema as by,
+  ClusterAddonStatusEntrySchema as bz,
+  streamParamsCapability as c,
+  NetworkAddressSchema as c$,
+  DeviceFeature as c0,
+  DeviceInfoSchema as c1,
+  DeviceNetworkStatsSchema as c2,
+  DeviceRole as c3,
+  DeviceStatusSchema as c4,
+  DeviceType as c5,
+  DiscoveredChildDeviceSchema as c6,
+  DiscoveredChildStatusSchema as c7,
+  DiscoveredDeviceSchema as c8,
+  DoorbellPressEventSchema as c9,
+  IntercomStatusSchema as cA,
+  LocationStatSchema as cB,
+  LogEntrySchema as cC,
+  LogLevelSchema$1 as cD,
+  LogStreamEntrySchema as cE,
+  MODEL_FORMATS as cF,
+  MediaFileSchema as cG,
+  MeshPeerSchema as cH,
+  MeshStatusSchema as cI,
+  MethodAccessSchema as cJ,
+  MotionAnalysisResultSchema as cK,
+  MotionEventSchema as cL,
+  MotionOnMotionChangedDataSchema as cM,
+  MotionRegionSchema as cN,
+  MotionSourceEnum as cO,
+  MotionSourcesSchema as cP,
+  MotionStatusSchema as cQ,
+  MotionTriggerRuntimeStateSchema as cR,
+  MotionTriggerStatusSchema as cS,
+  MotionZoneOptionsSchema as cT,
+  MotionZonePatchSchema as cU,
+  MotionZoneStatusSchema as cV,
+  StatusSchema as cW,
+  NativeDetectionSchema as cX,
+  NativeObjectClassEnum as cY,
+  NativeObjectDetectionStatusSchema as cZ,
+  NetworkAccessStatusSchema as c_,
+  DoorbellStatusSchema as ca,
+  EmbeddingInfoSchema as cb,
+  EmbeddingResultSchema as cc,
+  EncodedPacketSchema as cd,
+  EnrichedWidgetMetadataSchema as ce,
+  EventItemSchema as cf,
+  EventKindSchema as cg,
+  ExportSetupFieldSchema as ch,
+  ExportSetupSchema as ci,
+  ExposedDeviceSchema as cj,
+  ExposedResourceSchema as ck,
+  FeatureManifestSchema as cl,
+  FeatureProbeStatusSchema as cm,
+  FrameHandleFormatSchema as cn,
+  FrameHandleSchema as co,
+  FrameInputSchema as cp,
+  GetStreamWithCodecInputSchema as cq,
+  GlobalMetricsSchema as cr,
+  HWACCEL_OPTIONS as cs,
+  HealthStatusSchema as ct,
+  HistoryPointSchema as cu,
+  HistoryResolutionEnum as cv,
+  InstalledPackageSchema as cw,
+  IntegrationLiteSchema as cx,
+  IntegrationWithStateSchema as cy,
+  IntercomAbilitySchema as cz,
+  motionTriggerCapability as d,
+  StartEmbeddedInputSchema as d$,
+  NetworkEndpointSchema as d0,
+  NotificationHistoryEntrySchema as d1,
+  NotificationRuleSchema as d2,
+  NotificationSchema as d3,
+  OauthIntegrationDescriptorSchema as d4,
+  ObjectEventSchema as d5,
+  OrchestratorMetricsSchema as d6,
+  OsdOverlayKindEnum as d7,
+  OsdOverlayPatchSchema as d8,
+  OsdOverlaySchema as d9,
+  PtzPresetSchema as dA,
+  PtzStatusSchema as dB,
+  QueryFilterSchema as dC,
+  RegisteredStreamSchema as dD,
+  ReportMotionInputSchema as dE,
+  RtpSourceSchema as dF,
+  RtspRestreamEntrySchema as dG,
+  RunnerCameraConfigSchema as dH,
+  RunnerCameraDeviceUIFields as dI,
+  RunnerLocalLoadSchema as dJ,
+  RunnerLocalMetricsSchema as dK,
+  STORAGE_LOCATION_CARDINALITY as dL,
+  ScopedTokenSchema as dM,
+  ScopedTokenSummarySchema as dN,
+  SearchResultSchema as dO,
+  SegmentSchema as dP,
+  SendEmailInputSchema as dQ,
+  SendEmailResultSchema as dR,
+  SettingsPatchSchema as dS,
+  SettingsRecordSchema as dT,
+  SettingsSchemaWithValuesSchema as dU,
+  SettingsUpdateResultSchema as dV,
+  ShmRingStatsSchema as dW,
+  SmtpStatusSchema as dX,
+  SnapshotImageSchema as dY,
+  SpatialDetectionSchema as dZ,
+  SsoBridgeClaimsSchema as d_,
+  OsdPositionEnum as da,
+  OsdStatusSchema as db,
+  PIPELINE_FLOW_CAPABILITY_NAMES as dc,
+  PIPELINE_OWNER_CAPABILITY_NAMES as dd,
+  PackageUpdateSchema as de,
+  PackageVersionInfoSchema as df,
+  PasskeySummarySchema as dg,
+  PcmSampleFormatSchema as dh,
+  PerScopeBreakdownSchema as di,
+  PipelineAssignmentSchema as dj,
+  PipelineDefaultStepSchema as dk,
+  PipelineEngineChoiceSchema as dl,
+  PipelineRunResultBridge as dm,
+  PipelineStepInputSchema as dn,
+  PlaceholderReasonSchema as dp,
+  PolygonPointSchema as dq,
+  ProfileSlotSchema as dr,
+  ProfileSlotStatusSchema as ds,
+  ProviderStatusSchema as dt,
+  PtzAutotrackRuntimeStateSchema as du,
+  PtzAutotrackSettingsSchema as dv,
+  PtzAutotrackStatusSchema as dw,
+  PtzAutotrackTargetOptionSchema as dx,
+  PtzMoveCommandSchema as dy,
+  PtzPositionSchema as dz,
   errMsg as e,
-  StorageLocationRefSchema as e0,
-  StorageLocationSchema as e1,
-  StorageLocationTypeSchema as e2,
-  ProviderInfoSchema as e3,
-  ReadChunkInputSchema as e4,
-  TestLocationResultSchema as e5,
-  WriteChunkInputSchema as e6,
-  StreamFormatSchema as e7,
-  StreamInfoSchema as e8,
-  StreamNetworkStatsSchema as e9,
-  YAMNET_TO_MACRO as eA,
-  ZoneKindEnum as eB,
-  ZoneRuleModeEnum as eC,
-  ZoneRuleSchema as eD,
-  ZoneRuleStageEnum as eE,
-  ZoneRulesArraySchema as eF,
-  ZoneSchema as eG,
-  ZoneScopeBreakdownSchema as eH,
-  accessoryStableId as eI,
-  deviceMatchesProfile as eJ,
-  event as eK,
-  expandCapMethods as eL,
-  getAudioMacroClassIds as eM,
-  mapAudioLabelToMacro as eN,
-  method as eO,
-  resolveDeviceProfile as eP,
-  webrtcClientHintsSchema as eQ,
-  StreamSourceEntrySchema$1 as ea,
-  StreamSourceSchema as eb,
-  SwitchStatusSchema as ec,
-  SystemMetricsSchema as ed,
-  TestConnectionResultSchema as ee,
-  ToastSchema as ef,
-  TokenScopeSchema as eg,
-  TopologyNodeSchema as eh,
-  TopologyProcessSchema as ei,
-  TopologyServiceSchema as ej,
-  TrackSchema as ek,
-  TrackStateSchema as el,
-  TrackedDetectionSchema as em,
-  TurnProviderInfoSchema as en,
-  TurnServerSchema as eo,
-  UpdateIntegrationInputSchema as ep,
-  UpdateUserInputSchema as eq,
-  UserRecordSchema as er,
-  UserSummarySchema as es,
-  WELL_KNOWN_TABS as et,
-  WELL_KNOWN_TAB_MAP as eu,
-  WebrtcStreamChoiceSchema as ev,
-  WebrtcStreamTargetSchema as ew,
-  WidgetHostEnum as ex,
-  WidgetMetadataSchema as ey,
-  WidgetSizeEnum as ez,
-  featureProbeCapability as f,
-  deviceStatusCapability as g,
+  event as e$,
+  AbortUploadInputSchema as e0,
+  BeginDownloadInputSchema as e1,
+  BeginDownloadResultSchema as e2,
+  BeginUploadInputSchema as e3,
+  BeginUploadResultSchema as e4,
+  EndDownloadInputSchema as e5,
+  FinalizeUploadInputSchema as e6,
+  StorageLocationRefSchema as e7,
+  StorageLocationSchema as e8,
+  StorageLocationTypeSchema as e9,
+  TopologyServiceSchema as eA,
+  TrackSchema as eB,
+  TrackStateSchema as eC,
+  TrackedDetectionSchema as eD,
+  TurnServerSchema as eE,
+  UpdateIntegrationInputSchema as eF,
+  UpdateUserInputSchema as eG,
+  UserRecordSchema as eH,
+  UserSummarySchema as eI,
+  WELL_KNOWN_TABS as eJ,
+  WELL_KNOWN_TAB_MAP as eK,
+  WebrtcStreamChoiceSchema as eL,
+  WebrtcStreamTargetSchema as eM,
+  WidgetHostEnum as eN,
+  WidgetMetadataSchema as eO,
+  WidgetRemoteSchema as eP,
+  WidgetSizeEnum as eQ,
+  YAMNET_TO_MACRO as eR,
+  ZoneKindEnum as eS,
+  ZoneRuleModeEnum as eT,
+  ZoneRuleSchema as eU,
+  ZoneRuleStageEnum as eV,
+  ZoneRulesArraySchema as eW,
+  ZoneSchema as eX,
+  ZoneScopeBreakdownSchema as eY,
+  accessoryStableId as eZ,
+  deviceMatchesProfile as e_,
+  ProviderInfoSchema as ea,
+  ReadChunkInputSchema as eb,
+  TestLocationResultSchema as ec,
+  WriteChunkInputSchema as ed,
+  StreamFormatSchema as ee,
+  StreamInfoSchema as ef,
+  StreamNetworkStatsSchema as eg,
+  StreamParamsOptionsSchema as eh,
+  StreamParamsStatusSchema as ei,
+  StreamProfileConfigSchema as ej,
+  StreamProfileOptionsSchema as ek,
+  StreamProfilePatchSchema as el,
+  StreamProfileSchema as em,
+  StreamSourceEntrySchema$1 as en,
+  StreamSourceSchema as eo,
+  SubscribeAudioChunksInputSchema as ep,
+  SubscribeAudioChunksResultSchema as eq,
+  SubscribeFramesInputSchema as er,
+  SubscribeFramesResultSchema as es,
+  SwitchStatusSchema as et,
+  SystemMetricsSchema as eu,
+  TestConnectionResultSchema as ev,
+  ToastSchema as ew,
+  TokenScopeSchema as ex,
+  TopologyNodeSchema as ey,
+  TopologyProcessSchema as ez,
+  motionCapability as f,
+  expandCapMethods as f0,
+  getAudioMacroClassIds as f1,
+  isDeviceConfigCap as f2,
+  mapAudioLabelToMacro as f3,
+  method as f4,
+  resolveDeviceProfile as f5,
+  webrtcClientHintsSchema as f6,
+  featureProbeCapability as g,
   hydrateSchema as h,
-  deviceDiscoveryCapability as i,
-  cameraStreamsCapability as j,
-  brightnessCapability as k,
-  batteryCapability as l,
-  motionTriggerCapability as m,
-  audioMetricsCapability as n,
-  deviceProviderCapability as o,
+  doorbellCapability as i,
+  deviceStatusCapability as j,
+  deviceDiscoveryCapability as k,
+  cameraStreamsCapability as l,
+  motionZonesCapability as m,
+  brightnessCapability as n,
+  batteryCapability as o,
   ptzAutotrackCapability as p,
-  accessoriesCapability as q,
-  addonPagesCapability as r,
+  audioMetricsCapability as q,
+  deviceProviderCapability as r,
   switchCapability as s,
-  addonPagesSourceCapability as t,
-  addonRoutesCapability as u,
-  addonSettingsCapability as v,
-  addonWidgetsCapability as w,
-  addonWidgetsSourceCapability as x,
-  addonsCapability as y,
+  accessoriesCapability as t,
+  addonPagesCapability as u,
+  addonPagesSourceCapability as v,
+  addonRoutesCapability as w,
+  addonSettingsCapability as x,
+  addonWidgetsCapability as y,
   zonesCapability as z
 };
-//# sourceMappingURL=index-Ce7RZWP4.mjs.map
+//# sourceMappingURL=index-CgPd35k5.mjs.map