@camstack/types 0.1.35 → 0.1.37

package/dist/{index-CWhQOnm9.mjs → index-CgPd35k5.mjs}

@@ -12,6 +12,7 @@ const WELL_KNOWN_TABS = [
   { id: "osd", label: "OSD", icon: "type", order: 18 },
   { id: "stream-broker", label: "Stream Broker", icon: "radio", order: 20 },
   { id: "streaming", label: "Streaming", icon: "video", order: 35 },
+  { id: "ptz", label: "PTZ", icon: "move", order: 40 },
   { id: "pipeline", label: "Detection Pipeline", icon: "cpu", order: 39 },
   { id: "zones", label: "Detection", icon: "shapes", order: 38 },
   { id: "live-stats", label: "Live Stats", icon: "activity", order: 39 },
@@ -79,6 +80,9 @@ function hydrateField(field, values) {
     return { ...field, value: items };
   }
   const rawValue = storedValue !== void 0 ? storedValue : defaultValue !== void 0 ? defaultValue : null;
+  if (field.type === "password") {
+    return { ...field, value: "" };
+  }
   const value = field.type === "textarea" && field.isJson && rawValue !== null && typeof rawValue === "object" ? JSON.stringify(rawValue, null, 2) : rawValue;
   const hydrated = { ...field, value };
   return hydrated;
@@ -181,7 +185,19 @@ const DecoderSessionConfigSchema = z.object({
    * on every line so `grep tag=broker:5/high` filters one camera
    * profile cleanly.
    */
-  tag: z.string().optional()
+  tag: z.string().optional(),
+  /**
+   * Where the session delivers decoded frames (Phase 5 / D9):
+   *
+   * - `'callback'` (default) — the legacy pixel path: decoded frames are
+   *   buffered as `DecodedFrame`s and drained via `pullFrames`.
+   * - `'shm'` — the shared-memory frame plane: decoded frames are written
+   *   into an OS shared-memory ring and drained as zero-pixel
+   *   `FrameHandle`s via `pullHandles`. A session is one mode or the
+   *   other — `pullFrames` returns nothing for an `'shm'` session and
+   *   `pullHandles` returns nothing for a `'callback'` session.
+   */
+  frameSink: z.enum(["callback", "shm"]).default("callback")
 });
 function errMsg(err) {
   if (err instanceof Error) return err.message;
@@ -767,6 +783,9 @@ function method(input, output, options) {
 function event(data) {
   return { data };
 }
+function isDeviceConfigCap(def) {
+  return def?.deviceConfig !== void 0;
+}
 const AudioClassSummarySchema = z.object({
   className: z.string(),
   /** Number of windows (chunks) where this class was the top hit. */
@@ -1069,6 +1088,53 @@ const DecodedFrameSchema = z.object({
   format: z.enum(["jpeg", "rgb", "bgr", "yuv420", "gray"]),
   timestamp: z.number()
 });
+const FrameHandleSchema = z.object({
+  shmId: z.string(),
+  slot: z.number().int().nonnegative(),
+  seq: z.number().int().nonnegative(),
+  width: z.number().int().positive(),
+  height: z.number().int().positive(),
+  format: z.enum(["jpeg", "rgb", "bgr", "yuv420", "gray"]),
+  pts: z.number(),
+  byteLength: z.number().int().nonnegative(),
+  nodeId: z.string(),
+  slotCount: z.number().int().positive()
+});
+const FrameHandleFormatSchema = z.enum(["rgb", "bgr", "yuv420", "gray"]);
+const SubscribeFramesInputSchema = z.object({
+  brokerId: z.string(),
+  format: FrameHandleFormatSchema,
+  /**
+   * Optional reader-side cadence hint in frames per second. The broker does
+   * NOT throttle — latest-wins ring reads drop frames implicitly for a slow
+   * consumer. The value is echoed back in `SubscribeFramesResult.maxFps` so
+   * the consumer can pace its own `pullFrameHandles` polling.
+   */
+  maxFps: z.number().positive().optional(),
+  /** Short caller-identity tag (`motion`, `detection`, …) for diagnostics. */
+  tag: z.string().optional()
+});
+const SubscribeFramesResultSchema = z.object({
+  /** Opaque id the consumer passes to `pullFrameHandles` / `unsubscribeFrames`. */
+  subscriptionId: z.string(),
+  /** Reader-side cadence hint (frames/s) — echoes `SubscribeFramesInput.maxFps`. */
+  maxFps: z.number().nonnegative()
+});
+const DecodedAudioChunkSchema = z.object({
+  data: z.instanceof(Uint8Array),
+  sampleRate: z.number().int().positive(),
+  channels: z.number().int().positive(),
+  timestamp: z.number()
+});
+const SubscribeAudioChunksInputSchema = z.object({
+  brokerId: z.string(),
+  /** Short caller-identity tag (`audio-analyzer`, …) for `listClients`. */
+  tag: z.string().optional()
+});
+const SubscribeAudioChunksResultSchema = z.object({
+  /** Opaque id passed to `pullAudioChunks` / `unsubscribeAudioChunks`. */
+  subscriptionId: z.string()
+});
 const BrokerStatusSchema$1 = z.enum(["idle", "connecting", "streaming", "error", "stopped"]);
 const BrokerStatsSchema = z.object({
   status: BrokerStatusSchema$1,
@@ -1298,9 +1364,76 @@ const streamBrokerCapability = {
       z.object({ released: z.boolean(), refcount: z.number().int().nonnegative() }),
       { kind: "mutation", auth: "admin" }
     ),
-    getBroker: method(
-      z.object({ brokerId: z.string() }),
-      z.custom()
+    /**
+     * ── Decoded audio-chunk plane (Phase 5 / D9) ──────────────────────
+     *
+     * The serialisable replacement for the live-object `IStreamBroker.
+     * onDecodedAudioChunk` callback path. Unlike the video frame plane,
+     * audio chunks are tiny (a ~500ms PCM window is a few KB) so they ship
+     * their bytes INLINE over tRPC — no shared-memory ring. A consumer:
+     *
+     *   1. `subscribeAudioChunks({ brokerId, tag })` — the broker registers
+     *      a per-subscription bounded FIFO queue and returns a
+     *      `subscriptionId`.
+     *   2. polls `pullAudioChunks({ subscriptionId, maxCount })` — drains
+     *      `DecodedAudioChunk[]` in arrival order (FIFO, no latest-wins
+     *      drop: an audio gap is audible / breaks an analysis window). The
+     *      queue is generously sized; it only drops its oldest chunk if a
+     *      truly stalled consumer lets it overflow.
+     *   3. `unsubscribeAudioChunks({ subscriptionId })` on teardown.
+     */
+    subscribeAudioChunks: method(
+      SubscribeAudioChunksInputSchema,
+      SubscribeAudioChunksResultSchema,
+      { kind: "mutation" }
+    ),
+    pullAudioChunks: method(
+      z.object({
+        subscriptionId: z.string(),
+        maxCount: z.number().int().positive().default(8)
+      }),
+      z.array(DecodedAudioChunkSchema).readonly()
+    ),
+    unsubscribeAudioChunks: method(
+      z.object({ subscriptionId: z.string() }),
+      z.object({ released: z.boolean() }),
+      { kind: "mutation" }
+    ),
+    /**
+     * ── Shared-memory frame plane (Phase 5 / D9) ──────────────────────
+     *
+     * The handle-based replacement for the live-object `IStreamBroker.
+     * onDecodedFrame` callback path. A consumer:
+     *
+     *   1. `subscribeFrames({ brokerId, format })` — the broker spins up
+     *      (or reuses) a `frameSink: 'shm'` decoder session producing that
+     *      `format` and returns a `subscriptionId`.
+     *   2. polls `pullFrameHandles({ subscriptionId, maxCount })` — drains
+     *      zero-pixel `FrameHandle[]`; each handle is fed to a
+     *      `FrameRingReader` that opens the named shm segment and reads the
+     *      pixels back zero-copy.
+     *   3. `unsubscribeFrames({ subscriptionId })` on teardown.
+     *
+     * The broker keeps one shm ring per `(brokerId, format)` actually
+     * requested — no broker-side `sharp` conversion. fps throttling is
+     * implicit (latest-wins ring reads drop frames for a slow consumer).
+     */
+    subscribeFrames: method(
+      SubscribeFramesInputSchema,
+      SubscribeFramesResultSchema,
+      { kind: "mutation" }
+    ),
+    pullFrameHandles: method(
+      z.object({
+        subscriptionId: z.string(),
+        maxCount: z.number().int().positive().default(4)
+      }),
+      z.array(FrameHandleSchema).readonly()
+    ),
+    unsubscribeFrames: method(
+      z.object({ subscriptionId: z.string() }),
+      z.object({ released: z.boolean() }),
+      { kind: "mutation" }
     ),
     setPreBufferDuration: method(
       z.object({ brokerId: z.string(), seconds: z.number().min(0).max(30) }),
@@ -1356,6 +1489,8 @@ const cameraStreamsCapability = {
   name: "camera-streams",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   methods: {
     getCameraStreams: method(
@@ -1651,6 +1786,8 @@ const motionDetectionCapability = {
   name: "motion-detection",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   exposesDeviceSettings: true,
   methods: {
     analyze: method(
@@ -2522,6 +2659,42 @@ const motionTriggerCapability = {
   },
   runtimeState: MotionTriggerRuntimeStateSchema
 };
+const MotionZoneStatusSchema = z.object({
+  enabled: z.boolean(),
+  sensitivity: z.number(),
+  /** Row-major active-cell grid. Length = gridWidth*gridHeight (see getOptions). */
+  cells: z.array(z.boolean()),
+  lastFetchedAt: z.number()
+});
+const MotionZoneOptionsSchema = z.object({
+  gridWidth: z.number(),
+  gridHeight: z.number(),
+  sensitivity: z.object({ min: z.number(), max: z.number(), step: z.number() })
+});
+const MotionZonePatchSchema = z.object({
+  enabled: z.boolean().optional(),
+  sensitivity: z.number().optional(),
+  cells: z.array(z.boolean()).optional()
+});
+const motionZonesCapability = {
+  name: "motion-zones",
+  scope: "device",
+  mode: "singleton",
+  deviceTypes: [DeviceType.Camera],
+  deviceConfig: {
+    ui: { kind: "widget", widgetId: "host/motion-zones-grid", tab: "motion", label: "Motion Zones" }
+  },
+  methods: {
+    getOptions: method(z.object({ deviceId: z.number() }), MotionZoneOptionsSchema),
+    setZone: method(
+      z.object({ deviceId: z.number(), patch: MotionZonePatchSchema }),
+      z.void(),
+      { kind: "mutation", auth: "admin" }
+    )
+  },
+  status: { schema: MotionZoneStatusSchema, kind: "poll" },
+  runtimeState: MotionZoneStatusSchema
+};
 const AutotrackTargetTypeSchema = z.string().describe("Vendor target string (people/vehicle/pet); empty = camera default");
 const PtzAutotrackSettingsSchema = z.object({
   targetType: AutotrackTargetTypeSchema,
@@ -2560,6 +2733,9 @@ const ptzAutotrackCapability = {
   scope: "device",
   mode: "singleton",
   deviceTypes: [DeviceType.Camera],
+  deviceConfig: {
+    ui: { kind: "widget", widgetId: "host/ptz-autotrack", tab: "ptz", topTab: true, label: "Auto-Tracking", order: 5 }
+  },
   methods: {
     /**
      * Read the current on/off state + last-applied settings.
@@ -2626,6 +2802,111 @@ const ptzAutotrackCapability = {
    */
   runtimeState: PtzAutotrackRuntimeStateSchema
 };
+const StreamProfileSchema = z.enum(["main", "sub", "ext"]);
+const StreamProfileConfigSchema = z.object({
+  width: z.number(),
+  height: z.number(),
+  codec: z.enum(["h264", "h265"]),
+  framerate: z.number(),
+  bitrate: z.number(),
+  // kbps
+  bitrateMode: z.enum(["vbr", "cbr"]).optional(),
+  encoderProfile: z.enum(["high", "main", "baseline"]).optional(),
+  gop: z.number().optional(),
+  audio: z.boolean().optional()
+});
+const StreamParamsStatusSchema = z.object({
+  /** Per-profile current config. A profile absent = the camera doesn't have it. */
+  main: StreamProfileConfigSchema.optional(),
+  sub: StreamProfileConfigSchema.optional(),
+  ext: StreamProfileConfigSchema.optional(),
+  lastFetchedAt: z.number()
+});
+const StreamProfileOptionsSchema = z.object({
+  resolutions: z.array(z.object({ width: z.number(), height: z.number() })),
+  codecs: z.array(z.enum(["h264", "h265"])),
+  framerates: z.array(z.number()),
+  /** Allowed bitrate values (kbps). Empty if the camera takes a free range. */
+  bitrates: z.array(z.number()),
+  /** Optional [min,max] kbps when the camera accepts a continuous range. */
+  bitrateRange: z.tuple([z.number(), z.number()]).optional(),
+  supportsBitrateMode: z.boolean(),
+  supportsEncoderProfile: z.boolean(),
+  supportsGop: z.boolean(),
+  /** Allowed GOP / keyframe-interval range, in seconds — drives the
+   *  I-frame-interval selector. Absent when the camera advertises GOP
+   *  support but no concrete range (callers then fall back to a free
+   *  numeric input). `{ min, max, step }` per the getOptions convention. */
+  gop: z.object({ min: z.number(), max: z.number(), step: z.number() }).optional()
+});
+const StreamParamsOptionsSchema = z.object({
+  main: StreamProfileOptionsSchema.optional(),
+  sub: StreamProfileOptionsSchema.optional(),
+  ext: StreamProfileOptionsSchema.optional()
+});
+const StreamProfilePatchSchema = z.object({
+  width: z.number().optional(),
+  height: z.number().optional(),
+  codec: z.enum(["h264", "h265"]).optional(),
+  framerate: z.number().optional(),
+  bitrate: z.number().optional(),
+  bitrateMode: z.enum(["vbr", "cbr"]).optional(),
+  encoderProfile: z.enum(["high", "main", "baseline"]).optional(),
+  gop: z.number().optional(),
+  audio: z.boolean().optional()
+});
+const streamParamsCapability = {
+  name: "stream-params",
+  scope: "device",
+  mode: "singleton",
+  deviceTypes: [DeviceType.Camera],
+  deviceConfig: {
+    ui: { kind: "derived-form", builderId: "stream-params", tab: "streaming" }
+  },
+  methods: {
+    getOptions: method(
+      z.object({ deviceId: z.number() }),
+      StreamParamsOptionsSchema
+    ),
+    setProfile: method(
+      z.object({
+        deviceId: z.number(),
+        profile: StreamProfileSchema,
+        patch: StreamProfilePatchSchema
+      }),
+      z.void(),
+      { kind: "mutation", auth: "admin" }
+    ),
+    /**
+     * Build the `ConfigUISchema` (admin-ui `ConfigFormBuilder` input
+     * shape) for this camera's stream-encoder settings — one section per
+     * profile (main / sub / ext) with the resolution / codec / framerate
+     * / bitrate / bitrate-mode / encoder-profile / GOP controls the
+     * firmware actually exposes.
+     *
+     * Driven by `getOptions` (camera-probed availability) + `getStatus`
+     * (current per-profile config); each field's `default` is seeded
+     * from the live config so the form renders the camera state in one
+     * pass. Returns `null` when the camera exposes no configurable
+     * stream property — the renderer then shows the unsupported message.
+     *
+     * Output is `z.unknown().nullable()` — the same convention every
+     * other `ConfigUISchema`-returning cap method uses (`device-ops`,
+     * `device-manager`); `ConfigUISchema` is a TS-only type with no
+     * companion Zod schema, and a concrete object would collapse
+     * unrelated AppRouter branches to `unknown` during codegen.
+     */
+    getConfigSchema: method(
+      z.object({ deviceId: z.number() }),
+      z.unknown().nullable()
+    )
+  },
+  status: {
+    schema: StreamParamsStatusSchema,
+    kind: "poll"
+  },
+  runtimeState: StreamParamsStatusSchema
+};
 const SwitchStatusSchema = z.object({
   on: z.boolean(),
   /** Ms epoch of the last state change. Useful for UI "X minutes ago". */
@@ -3630,6 +3911,83 @@ const adminUiCapability = {
     getVersion: method(z.void(), VersionOutputSchema)
   }
 };
+const MethodAccessSchema = z.enum(["view", "create", "delete"]);
+const AllowedProviderSchema = z.union([z.literal("*"), z.array(z.string())]);
+const AllowedDevicesSchema = z.record(z.string(), z.union([z.literal("*"), z.array(z.string())]));
+const CapScopeSchema = z.enum(["device", "system"]);
+const TokenScopeSchema = z.discriminatedUnion("type", [
+  z.object({
+    type: z.literal("category"),
+    target: CapScopeSchema,
+    access: z.array(MethodAccessSchema).min(1)
+  }),
+  z.object({
+    type: z.literal("capability"),
+    target: z.string(),
+    access: z.array(MethodAccessSchema).min(1)
+  }),
+  z.object({
+    type: z.literal("addon"),
+    target: z.string(),
+    access: z.array(MethodAccessSchema).min(1)
+  }),
+  z.object({
+    type: z.literal("device"),
+    /**
+     * One or more deviceIds (serialised as strings for wire-format
+     * consistency with the rest of the union). Matcher accepts if
+     * `input.deviceId` ∈ `targets`. Array shape avoids the row-explosion
+     * of one scope-per-device when granting access to a set of cameras.
+     */
+    targets: z.array(z.string()).min(1),
+    access: z.array(MethodAccessSchema).min(1)
+  })
+]);
+const UserRecordSchema = z.object({
+  id: z.string(),
+  username: z.string(),
+  passwordHash: z.string(),
+  /**
+   * Admin bypass. When true, the middleware skips the scope-access
+   * check entirely. There is no other axis of privilege; the legacy
+   * role enum collapsed onto this boolean in v2.
+   */
+  isAdmin: z.boolean().default(false),
+  allowedProviders: AllowedProviderSchema,
+  allowedDevices: AllowedDevicesSchema,
+  /**
+   * Scopes granted to this user. Admins bypass; their `scopes` is
+   * ignored. Non-admins without scopes are locked out of every
+   * protected call.
+   */
+  scopes: z.array(TokenScopeSchema).default([]),
+  createdAt: z.number(),
+  updatedAt: z.number()
+});
+const ApiKeyRecordSchema = z.object({
+  id: z.string(),
+  label: z.string(),
+  isAdmin: z.boolean().default(false),
+  allowedProviders: AllowedProviderSchema,
+  allowedDevices: AllowedDevicesSchema,
+  tokenHash: z.string(),
+  tokenPrefix: z.string(),
+  createdAt: z.number(),
+  lastUsedAt: z.number().optional()
+});
+const ScopedTokenSchema = z.object({
+  id: z.string(),
+  userId: z.string(),
+  name: z.string(),
+  tokenHash: z.string(),
+  tokenPrefix: z.string(),
+  scopes: z.array(TokenScopeSchema),
+  // SQLite/JSON storage round-trips undefined → null. Use `nullish` so the
+  // schema accepts both `null` (read from disk) and `undefined` (in-memory).
+  expiresAt: z.number().nullish(),
+  lastUsedAt: z.number().nullish(),
+  createdAt: z.number()
+});
 const SsoBridgeClaimsSchema = z.object({
   userId: z.string(),
   username: z.string(),
@@ -3645,7 +4003,18 @@ const SsoBridgeClaimsSchema = z.object({
    * JWT WITHOUT verifying the signature — the hub re-verifies on every
    * inbound call so trust still rests with the signing hub.
    */
-  hubUrl: z.string().optional()
+  hubUrl: z.string().optional(),
+  /** Permission scopes baked into the token. Set by the OAuth
+   *  account-linking grant; absent on ordinary SSO-login tokens. */
+  scopes: z.array(TokenScopeSchema).optional(),
+  /** OAuth authorization-code binding — set only on `oauth-code` tokens. */
+  redirectUri: z.string().optional(),
+  integrationId: z.string().optional(),
+  /** JWT ID — unique per issued code; consumed-set enforces single-use. */
+  jti: z.string().optional(),
+  /** OAuth session registry id — set on `oauth-access`/`oauth-refresh`
+   *  tokens so the verify path can check the session is not revoked. */
+  sessionId: z.string().optional()
 });
 const ssoBridgeCapability = {
   name: "sso-bridge",
@@ -3666,6 +4035,27 @@ const ssoBridgeCapability = {
     )
   }
 };
+const OauthIntegrationDescriptorSchema = z.object({
+  /** Stable id used as the `integration=` query param, e.g. 'export-alexa'. */
+  integrationId: z.string(),
+  /** Human label rendered on the consent page. */
+  displayName: z.string(),
+  /** Scopes baked into every token issued for this integration. */
+  requestedScopes: z.array(TokenScopeSchema),
+  /** Allowed redirect_uri prefixes. /api/oauth2/authorize rejects any
+   *  redirect_uri that does not start with one of these. Required —
+   *  an empty list means the integration can never complete linking. */
+  allowedRedirectPrefixes: z.array(z.string()).min(1)
+});
+const oauthIntegrationCapability = {
+  name: "oauth-integration",
+  scope: "system",
+  mode: "collection",
+  internal: true,
+  methods: {
+    getDescriptor: method(z.void(), OauthIntegrationDescriptorSchema)
+  }
+};
 const PasskeySummarySchema = z.object({
   credentialId: z.string(),
   label: z.string(),
@@ -3981,21 +4371,30 @@ const addonPagesSourceCapability = {
 };
 const WidgetHostEnum = z.enum(["device-tab", "dashboard", "integration-detail"]);
 const WidgetSizeEnum = z.enum(["xs", "sm", "md", "lg", "xl"]);
+const WidgetRemoteSchema = z.object({
+  remoteName: z.string(),
+  exposedModule: z.string(),
+  componentKey: z.string().optional()
+});
 const WidgetMetadataSchema = z.object({
-  /** Stable id within the addon — kebab-case. */
-  stableId: z.string(),
+  // ── UiContribution core (kind:'remote') ──────────────────────────
+  /** Primary host tab — `'dashboard'`, `'device-tab'`, or a device-detail tab id. */
+  tab: z.string(),
+  /** Optional sub-tab within `tab`. */
+  subTab: z.string().optional(),
   /** Operator-facing label. */
   label: z.string(),
+  /** Ordering within `(tab, subTab)`, ascending. */
+  order: z.number().optional(),
+  /** Always `'remote'` — a widget is a Module Federation remote. */
+  kind: z.literal("remote"),
+  /** MF remote descriptor. */
+  remote: WidgetRemoteSchema,
+  // ── Widget-only metadata ─────────────────────────────────────────
+  /** Stable id within the addon — kebab-case. Equals `remote.componentKey`. */
+  stableId: z.string(),
   description: z.string().optional(),
   icon: z.string().optional(),
-  /**
-   * Module Federation remote name — must match the `name` field on the
-   * widget addon's `federation()` plugin config. Used by the host's
-   * `<WidgetRegistryProvider>` to call `loadRemote('<remoteName>/widgets')`.
-   * Conventionally `addon_<addonid>_widgets` (snake_case; MF names
-   * cannot contain hyphens).
-   */
-  remoteName: z.string(),
   /**
    * Bundle filename inside the addon's `dist/` dir served at
    * `/api/addon-widgets/<addonId>/<bundle>`. With Module Federation
@@ -4004,9 +4403,9 @@ const WidgetMetadataSchema = z.object({
    * cache-buster URL without a separate filesystem stat.
    */
   bundle: z.string(),
-  /** Where the widget makes sense to render. */
+  /** Every host the widget supports. The picker filters on this set. */
   hosts: z.array(WidgetHostEnum).readonly(),
-  /** Required props the host must supply. Validated at <WidgetSlot> mount. */
+  /** Required props the host must supply. Validated at `<WidgetSlot>` mount. */
   requires: z.object({
     deviceContext: z.boolean().default(false),
     integrationContext: z.boolean().default(false)
@@ -4106,6 +4505,16 @@ const DEFAULT_DECODER_HWACCEL_CONFIG = {
   hwaccel: "auto",
   probedBestHwaccel: ""
 };
+const ShmRingStatsSchema = z.object({
+  sessionId: z.string(),
+  slotCount: z.number().int(),
+  slotByteLength: z.number().int(),
+  segmentBytes: z.number().int(),
+  budgetMb: z.number().int(),
+  framesWritten: z.number().int(),
+  getFrameHits: z.number().int(),
+  getFrameMisses: z.number().int()
+});
 const decoderCapability = {
   name: "decoder",
   scope: "system",
@@ -4142,10 +4551,27 @@ const decoderCapability = {
       url: z.string()
     }), z.void()),
     // ── Output — polling-based frame retrieval ────────────────────
+    // `pullFrames` drains the pixel `DecodedFrame[]` of a `frameSink:
+    // 'callback'` session. `pullHandles` (Phase 5 / D9) drains the
+    // zero-pixel `FrameHandle[]` of a `frameSink: 'shm'` session — the
+    // broker hands each handle to a `FrameRingReader` that opens the
+    // named segment and reads the pixels back zero-copy. A session is
+    // one mode or the other; the unmatched method returns an empty
+    // array.
     pullFrames: method(z.object({
       sessionId: z.string(),
       maxCount: z.number().default(1)
     }), z.array(DecodedFrameSchema)),
+    pullHandles: method(z.object({
+      sessionId: z.string(),
+      maxCount: z.number().default(1)
+    }), z.array(FrameHandleSchema)),
+    // ── Frame fetch (Phase 5 / D9 downstream access) ──────────────
+    // Read the pixels a FrameHandle refers to from this node's shm ring.
+    // Returns null when the slot was already recycled (latest-wins).
+    getFrame: method(z.object({ handle: FrameHandleSchema }), DecodedFrameSchema.nullable()),
+    // shm ring usage stats for a session.
+    getShmStats: method(z.object({ sessionId: z.string() }), ShmRingStatsSchema.nullable()),
     // ── Control ───────────────────────────────────────────────────
     updateConfig: method(z.object({
       sessionId: z.string(),
@@ -4298,6 +4724,8 @@ const webrtcSessionCapability = {
   name: "webrtc-session",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   methods: {
     /**
@@ -4816,6 +5244,8 @@ const audioAnalysisCapability = {
   name: "audio-analysis",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   exposesDeviceSettings: true,
   methods: {
@@ -5355,8 +5785,8 @@ const deviceManagerCapability = {
     /**
      * Return the addon ids that declared a wrapper provider for `capName`.
      * Backs the device-bindings UI's wrapper-picker dropdown. Entries are
-     * sourced from `CapabilityRegistry.wrapperProviders`, populated at
-     * `ProviderRegistration.kind === 'wrapper'` time.
+     * sourced from `CapabilityRegistry.wrapperProviders`, populated when
+     * the cap definition declares `kind: 'wrapper'`.
      */
     listWrappersForCap: method(
       z.object({ capName: z.string() }),
@@ -5751,6 +6181,8 @@ const snapshotCapability = {
   name: "snapshot",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   // Owns per-device snapshot settings (preferred stream, debug logging).
   // The three DeviceSettingsContribution methods are auto-added to the
@@ -6100,6 +6532,8 @@ const detectionPipelineCapability = {
   name: "detection-pipeline",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   exposesDeviceSettings: true,
   methods: {}
@@ -6208,6 +6642,8 @@ const pipelineAnalyticsCapability = {
   name: "pipeline-analytics",
   scope: "device",
   mode: "singleton",
+  kind: "wrapper",
+  defaultActive: true,
   deviceTypes: [DeviceType.Camera],
   exposesDeviceSettings: true,
   methods: {
@@ -6497,11 +6933,26 @@ const PtzMoveCommandSchema = z.object({
   zoom: z.number().optional(),
   speed: z.number().optional()
 });
+const PtzStatusSchema = PtzPositionSchema.extend({ autofocus: z.boolean() });
+const PtzOptionsSchema = z.object({
+  hasPan: z.boolean(),
+  hasTilt: z.boolean(),
+  hasZoom: z.boolean(),
+  supportsPresets: z.boolean(),
+  /** Max number of named presets the camera supports, when known. */
+  maxPresets: z.number().optional(),
+  /** Whether the camera exposes a controllable autofocus toggle
+   *  (boolean `hasX` per the getOptions availability convention). */
+  hasAutofocus: z.boolean()
+});
 const ptzCapability = {
   name: "ptz",
   scope: "device",
   mode: "singleton",
   deviceTypes: [DeviceType.Camera],
+  deviceConfig: {
+    ui: { kind: "widget", widgetId: "host/ptz-panel", tab: "ptz", topTab: true, label: "PTZ", order: 0 }
+  },
   methods: {
     move: method(
       PtzMoveCommandSchema.extend({ deviceId: z.number() }),
@@ -6527,6 +6978,20 @@ const ptzCapability = {
       z.void(),
       { kind: "mutation" }
     ),
+    savePreset: method(
+      z.object({ deviceId: z.number(), presetId: z.string(), name: z.string() }),
+      z.void(),
+      { kind: "mutation", auth: "admin" }
+    ),
+    deletePreset: method(
+      z.object({ deviceId: z.number(), presetId: z.string() }),
+      z.void(),
+      { kind: "mutation", auth: "admin" }
+    ),
+    getOptions: method(
+      z.object({ deviceId: z.number() }),
+      PtzOptionsSchema
+    ),
     goHome: method(
       z.object({ deviceId: z.number() }),
       z.void(),
@@ -6541,10 +7006,17 @@ const ptzCapability = {
     getPosition: method(
       z.object({ deviceId: z.number() }),
       PtzPositionSchema
+    ),
+    /** Toggle the camera's autofocus. Only meaningful when
+     *  `getOptions().hasAutofocus` is true. */
+    setAutofocus: method(
+      z.object({ deviceId: z.number(), enabled: z.boolean() }),
+      z.void(),
+      { kind: "mutation" }
     )
   },
   status: {
-    schema: PtzPositionSchema,
+    schema: PtzStatusSchema,
     kind: "command-driven"
   }
 };
@@ -7568,83 +8040,6 @@ const meshNetworkCapability = {
     // tabs driven by this cap.
   }
 };
-const MethodAccessSchema = z.enum(["view", "create", "delete"]);
-const AllowedProviderSchema = z.union([z.literal("*"), z.array(z.string())]);
-const AllowedDevicesSchema = z.record(z.string(), z.union([z.literal("*"), z.array(z.string())]));
-const CapScopeSchema = z.enum(["device", "system"]);
-const TokenScopeSchema = z.discriminatedUnion("type", [
-  z.object({
-    type: z.literal("category"),
-    target: CapScopeSchema,
-    access: z.array(MethodAccessSchema).min(1)
-  }),
-  z.object({
-    type: z.literal("capability"),
-    target: z.string(),
-    access: z.array(MethodAccessSchema).min(1)
-  }),
-  z.object({
-    type: z.literal("addon"),
-    target: z.string(),
-    access: z.array(MethodAccessSchema).min(1)
-  }),
-  z.object({
-    type: z.literal("device"),
-    /**
-     * One or more deviceIds (serialised as strings for wire-format
-     * consistency with the rest of the union). Matcher accepts if
-     * `input.deviceId` ∈ `targets`. Array shape avoids the row-explosion
-     * of one scope-per-device when granting access to a set of cameras.
-     */
-    targets: z.array(z.string()).min(1),
-    access: z.array(MethodAccessSchema).min(1)
-  })
-]);
-const UserRecordSchema = z.object({
-  id: z.string(),
-  username: z.string(),
-  passwordHash: z.string(),
-  /**
-   * Admin bypass. When true, the middleware skips the scope-access
-   * check entirely. There is no other axis of privilege; the legacy
-   * role enum collapsed onto this boolean in v2.
-   */
-  isAdmin: z.boolean().default(false),
-  allowedProviders: AllowedProviderSchema,
-  allowedDevices: AllowedDevicesSchema,
-  /**
-   * Scopes granted to this user. Admins bypass; their `scopes` is
-   * ignored. Non-admins without scopes are locked out of every
-   * protected call.
-   */
-  scopes: z.array(TokenScopeSchema).default([]),
-  createdAt: z.number(),
-  updatedAt: z.number()
-});
-const ApiKeyRecordSchema = z.object({
-  id: z.string(),
-  label: z.string(),
-  isAdmin: z.boolean().default(false),
-  allowedProviders: AllowedProviderSchema,
-  allowedDevices: AllowedDevicesSchema,
-  tokenHash: z.string(),
-  tokenPrefix: z.string(),
-  createdAt: z.number(),
-  lastUsedAt: z.number().optional()
-});
-const ScopedTokenSchema = z.object({
-  id: z.string(),
-  userId: z.string(),
-  name: z.string(),
-  tokenHash: z.string(),
-  tokenPrefix: z.string(),
-  scopes: z.array(TokenScopeSchema),
-  // SQLite/JSON storage round-trips undefined → null. Use `nullish` so the
-  // schema accepts both `null` (read from disk) and `undefined` (in-memory).
-  expiresAt: z.number().nullish(),
-  lastUsedAt: z.number().nullish(),
-  createdAt: z.number()
-});
 const UserSummarySchema = z.object({
   id: z.string(),
   username: z.string(),
@@ -7717,6 +8112,16 @@ const CreateScopedTokenResultSchema = z.object({
   token: z.string(),
   record: ScopedTokenSummarySchema
 });
+const OauthSessionSummarySchema = z.object({
+  id: z.string(),
+  userId: z.string(),
+  username: z.string(),
+  integrationId: z.string(),
+  scopes: z.array(TokenScopeSchema),
+  createdAt: z.number(),
+  lastUsedAt: z.number(),
+  revokedAt: z.number().nullable()
+});
 const TotpSetupResultSchema = z.object({
   secret: z.string(),
   otpauthUrl: z.string()
@@ -7795,6 +8200,66 @@ const userManagementCapability = {
       z.object({ userId: z.string(), code: z.string() }),
       z.object({ valid: z.boolean() }),
       { kind: "mutation", access: "view" }
+    ),
+    // ── OAuth account-linking grant ────────────────────────────────
+    //
+    // Core's /oauth2/* endpoints delegate here. Tokens are sso-bridge
+    // JWTs (kinds oauth-code / oauth-access / oauth-refresh) and ALWAYS
+    // carry isAdmin:false — the operator login proves hub control; the
+    // issued token is minimal (device scope only).
+    oauthIssueCode: method(
+      z.object({
+        integrationId: z.string(),
+        userId: z.string(),
+        username: z.string(),
+        scopes: z.array(TokenScopeSchema),
+        redirectUri: z.string(),
+        hubUrl: z.string()
+      }),
+      z.object({ code: z.string() }),
+      { kind: "mutation", access: "create" }
+    ),
+    oauthExchangeCode: method(
+      z.object({ code: z.string(), redirectUri: z.string() }),
+      z.object({
+        accessToken: z.string(),
+        refreshToken: z.string(),
+        expiresIn: z.number()
+      }).nullable(),
+      { kind: "mutation", access: "view" }
+    ),
+    oauthRefresh: method(
+      z.object({ refreshToken: z.string() }),
+      z.object({
+        accessToken: z.string(),
+        refreshToken: z.string(),
+        expiresIn: z.number()
+      }).nullable(),
+      { kind: "mutation", access: "view" }
+    ),
+    oauthVerifyAccessToken: method(
+      z.object({ token: z.string() }),
+      z.object({
+        userId: z.string(),
+        username: z.string(),
+        scopes: z.array(TokenScopeSchema)
+      }).nullable(),
+      { access: "view" }
+    ),
+    // ── OAuth linked-session management (Phase D) ──────────────────
+    //
+    // The admin UI lists active account-linking sessions and revokes
+    // them; revocation makes the linked integration's tokens fail
+    // verification immediately.
+    listOauthSessions: method(
+      z.void(),
+      z.array(OauthSessionSummarySchema),
+      { auth: "admin" }
+    ),
+    revokeOauthSession: method(
+      z.object({ id: z.string() }),
+      z.object({ success: z.boolean() }),
+      { kind: "mutation", auth: "admin", access: "delete" }
     )
   }
 };
@@ -8024,6 +8489,19 @@ const nodesCapability = {
       z.record(z.string(), ClusterAddonStatusEntrySchema),
       { auth: "admin" }
     ),
+    getCapUsageGraph: method(
+      z.object({
+        windowSeconds: z.number().int().positive().max(300).default(60)
+      }),
+      z.array(z.object({
+        callerAddonId: z.string(),
+        providerAddonId: z.string(),
+        capName: z.string(),
+        callsPerMin: z.number(),
+        lastCallAtMs: z.number()
+      })).readonly(),
+      { auth: "admin" }
+    ),
     /**
      * Direct per-node addon listing — calls `$agent.status` on the target
      * node (or returns the hub registry for `nodeId === 'hub'`) and surfaces
@@ -8585,361 +9063,385 @@ const PIPELINE_OWNER_CAPABILITY_NAMES = [
   "pipeline-runner"
 ];
 export {
-  networkQualityCapability as $,
-  adminUiCapability as A,
-  advancedNotifierCapability as B,
-  alertsCapability as C,
-  audioAnalysisCapability as D,
-  audioAnalyzerCapability as E,
-  audioCodecCapability as F,
-  authProviderCapability as G,
-  backupCapability as H,
-  cameraCredentialsCapability as I,
-  decoderCapability as J,
-  detectionPipelineCapability as K,
-  deviceExportCapability as L,
-  deviceManagerCapability as M,
-  deviceOpsCapability as N,
-  deviceStateCapability as O,
-  embeddingEncoderCapability as P,
-  eventsCapability as Q,
-  integrationsCapability as R,
-  intercomCapability as S,
-  localNetworkCapability as T,
-  logDestinationCapability as U,
-  meshNetworkCapability as V,
-  metricsProviderCapability as W,
-  motionDetectionCapability as X,
-  mqttBrokerCapability as Y,
-  nativeObjectDetectionCapability as Z,
-  networkAccessCapability as _,
+  nativeObjectDetectionCapability as $,
+  addonWidgetsSourceCapability as A,
+  addonsCapability as B,
+  adminUiCapability as C,
+  advancedNotifierCapability as D,
+  alertsCapability as E,
+  audioAnalysisCapability as F,
+  audioAnalyzerCapability as G,
+  audioCodecCapability as H,
+  authProviderCapability as I,
+  backupCapability as J,
+  cameraCredentialsCapability as K,
+  decoderCapability as L,
+  detectionPipelineCapability as M,
+  deviceExportCapability as N,
+  deviceManagerCapability as O,
+  deviceOpsCapability as P,
+  deviceStateCapability as Q,
+  embeddingEncoderCapability as R,
+  eventsCapability as S,
+  integrationsCapability as T,
+  intercomCapability as U,
+  localNetworkCapability as V,
+  logDestinationCapability as W,
+  meshNetworkCapability as X,
+  metricsProviderCapability as Y,
+  motionDetectionCapability as Z,
+  mqttBrokerCapability as _,
   zoneRulesCapability as a,
-  AudioMetricsSnapshotSchema as a$,
-  nodesCapability as a0,
-  notificationOutputCapability as a1,
-  osdCapability as a2,
-  pipelineAnalyticsCapability as a3,
-  pipelineExecutorCapability as a4,
-  pipelineOrchestratorCapability as a5,
-  pipelineRunnerCapability as a6,
-  platformProbeCapability as a7,
-  ptzCapability as a8,
-  rebootCapability as a9,
-  AddonAutoUpdateSchema as aA,
-  AddonListItemSchema as aB,
-  AddonPageDeclarationSchema as aC,
-  AddonPageInfoSchema as aD,
-  AgentLoadSummarySchema as aE,
-  AlertSchema as aF,
-  AlertSeveritySchema as aG,
-  AlertSourceSchema as aH,
-  AlertStatusSchema as aI,
-  ApiKeyRecordSchema as aJ,
-  ApiKeySummarySchema as aK,
-  ArchiveEntrySchema as aL,
-  ArchiveManifestSchema as aM,
-  AudioAnalysisResultSchema as aN,
-  AudioAnalysisSettingsSchema as aO,
-  AudioChunkInputSchema as aP,
-  AudioClassSummarySchema as aQ,
-  AudioClassificationLabelSchema as aR,
-  AudioClassificationResultSchema as aS,
-  AudioCodecInfoSchema as aT,
-  AudioDecodeSessionConfigSchema as aU,
-  AudioEncodeSessionConfigSchema as aV,
-  AudioEncodedChunkSchema as aW,
-  AudioEventSchema as aX,
-  AudioLevelSchema as aY,
-  AudioMetricsHistoryPointSchema as aZ,
-  AudioMetricsHistorySchema as a_,
-  recordingCapability as aa,
-  recordingEngineCapability as ab,
-  restreamerCapability as ac,
-  settingsStoreCapability as ad,
-  smtpProviderCapability as ae,
-  snapshotCapability as af,
-  snapshotProviderCapability as ag,
-  ssoBridgeCapability as ah,
-  storageCapability as ai,
-  storageProviderCapability as aj,
-  streamBrokerCapability as ak,
-  streamingEngineCapability as al,
-  systemCapability as am,
-  toastCapability as an,
-  turnProviderCapability as ao,
-  userManagementCapability as ap,
-  userPasskeysCapability as aq,
-  webrtcCapability as ar,
-  webrtcSessionCapability as as,
-  ACCESSORY_LABEL as at,
-  APPLE_SA_TO_MACRO as au,
-  AUDIO_BACKEND_CHOICES as av,
-  AUDIO_MACRO_LABELS as aw,
-  AccessoriesStatusSchema as ax,
-  AccessoryKind as ay,
-  AddBrokerInputSchema as az,
+  AudioLevelSchema as a$,
+  networkAccessCapability as a0,
+  networkQualityCapability as a1,
+  nodesCapability as a2,
+  notificationOutputCapability as a3,
+  oauthIntegrationCapability as a4,
+  osdCapability as a5,
+  pipelineAnalyticsCapability as a6,
+  pipelineExecutorCapability as a7,
+  pipelineOrchestratorCapability as a8,
+  pipelineRunnerCapability as a9,
+  AccessoriesStatusSchema as aA,
+  AccessoryKind as aB,
+  AddBrokerInputSchema as aC,
+  AddonAutoUpdateSchema as aD,
+  AddonListItemSchema as aE,
+  AddonPageDeclarationSchema as aF,
+  AddonPageInfoSchema as aG,
+  AgentLoadSummarySchema as aH,
+  AlertSchema as aI,
+  AlertSeveritySchema as aJ,
+  AlertSourceSchema as aK,
+  AlertStatusSchema as aL,
+  ApiKeyRecordSchema as aM,
+  ApiKeySummarySchema as aN,
+  ArchiveEntrySchema as aO,
+  ArchiveManifestSchema as aP,
+  AudioAnalysisResultSchema as aQ,
+  AudioAnalysisSettingsSchema as aR,
+  AudioChunkInputSchema as aS,
+  AudioClassSummarySchema as aT,
+  AudioClassificationLabelSchema as aU,
+  AudioClassificationResultSchema as aV,
+  AudioCodecInfoSchema as aW,
+  AudioDecodeSessionConfigSchema as aX,
+  AudioEncodeSessionConfigSchema as aY,
+  AudioEncodedChunkSchema as aZ,
+  AudioEventSchema as a_,
+  platformProbeCapability as aa,
+  ptzCapability as ab,
+  rebootCapability as ac,
+  recordingCapability as ad,
+  recordingEngineCapability as ae,
+  restreamerCapability as af,
+  settingsStoreCapability as ag,
+  smtpProviderCapability as ah,
+  snapshotCapability as ai,
+  snapshotProviderCapability as aj,
+  ssoBridgeCapability as ak,
+  storageCapability as al,
+  storageProviderCapability as am,
+  streamBrokerCapability as an,
+  streamingEngineCapability as ao,
+  systemCapability as ap,
+  toastCapability as aq,
+  turnProviderCapability as ar,
+  userManagementCapability as as,
+  userPasskeysCapability as at,
+  webrtcCapability as au,
+  webrtcSessionCapability as av,
+  ACCESSORY_LABEL as aw,
+  APPLE_SA_TO_MACRO as ax,
+  AUDIO_BACKEND_CHOICES as ay,
+  AUDIO_MACRO_LABELS as az,
   zoneAnalyticsCapability as b,
-  DeviceRole as b$,
-  AudioPcmChunkSchema as b0,
-  AuthResultSchema as b1,
-  AutoUpdateSettingsSchema as b2,
-  AvailableIntegrationTypeSchema as b3,
-  BATTERY_DEVICE_PROFILE as b4,
-  BackupDestinationInfoSchema as b5,
-  BackupEntrySchema as b6,
-  BatteryStatusSchema as b7,
-  BoundingBoxSchema as b8,
-  BrightnessStatusSchema as b9,
-  ConfigSectionWithValuesSchema as bA,
-  ConfigTabDeclarationSchema as bB,
-  CreateApiKeyInputSchema as bC,
-  CreateApiKeyResultSchema as bD,
-  CreateIntegrationInputSchema as bE,
-  CreateScopedTokenInputSchema as bF,
-  CreateScopedTokenResultSchema as bG,
-  CreateUserInputSchema as bH,
-  CustomActionInputSchema as bI,
-  DEFAULT_AUDIO_ANALYZER_CONFIG as bJ,
-  DEFAULT_DECODER_HWACCEL_CONFIG as bK,
-  DEVICE_PROFILES as bL,
-  DEVICE_SETTINGS_CONTRIBUTION_METHODS as bM,
-  DEVICE_STATUS_METHOD as bN,
-  DecodedFrameSchema as bO,
-  DecoderAssignmentSchema as bP,
-  DecoderSessionConfigSchema as bQ,
-  DecoderStatsSchema as bR,
-  DeleteIntegrationResultSchema as bS,
-  DetectorOutputSchema as bT,
-  DeviceDiscoveryStatusSchema as bU,
-  ExposeInputSchema as bV,
-  DeviceExportStatusSchema as bW,
-  UnexposeInputSchema as bX,
-  DeviceFeature as bY,
-  DeviceInfoSchema as bZ,
-  DeviceNetworkStatsSchema as b_,
-  BrokerAudioClientSchema as ba,
-  BrokerClientsSchema as bb,
-  BrokerConnectionDetailsSchema as bc,
-  BrokerDecodedClientSchema as bd,
-  BrokerInfoSchema as be,
-  BrokerRtspClientSchema as bf,
-  BrokerStatsSchema as bg,
-  BrokerStatusSchema$1 as bh,
-  CAM_PROFILE_ORDER as bi,
-  CamProfileSchema as bj,
-  CamStreamKindSchema as bk,
-  CamStreamResolutionSchema as bl,
-  CameraCredentialsSchema as bm,
-  CameraCredentialsStatusSchema as bn,
-  CameraMetricsSchema as bo,
-  CameraMetricsWithDeviceIdSchema as bp,
-  CameraStreamSchema as bq,
-  CapScopeSchema as br,
-  CapabilityBindingsSchema as bs,
-  ChargingStatus as bt,
-  ClientNetworkStatsSchema as bu,
-  ClusterAddonNodeDeploymentSchema as bv,
-  ClusterAddonStatusEntrySchema as bw,
-  CollectionColumnSchema as bx,
-  CollectionIndexSchema as by,
-  ConfigEntrySchema$1 as bz,
-  motionCapability as c,
-  OsdOverlaySchema as c$,
-  DeviceStatusSchema as c0,
-  DeviceType as c1,
-  DiscoveredChildDeviceSchema as c2,
-  DiscoveredChildStatusSchema as c3,
-  DiscoveredDeviceSchema as c4,
-  DoorbellPressEventSchema as c5,
-  DoorbellStatusSchema as c6,
-  EmbeddingInfoSchema as c7,
-  EmbeddingResultSchema as c8,
-  EncodedPacketSchema as c9,
-  MediaFileSchema as cA,
-  MeshPeerSchema as cB,
-  MeshStatusSchema as cC,
-  MethodAccessSchema as cD,
-  MotionAnalysisResultSchema as cE,
-  MotionEventSchema as cF,
-  MotionOnMotionChangedDataSchema as cG,
-  MotionRegionSchema as cH,
-  MotionSourceEnum as cI,
-  MotionSourcesSchema as cJ,
-  MotionStatusSchema as cK,
-  MotionTriggerRuntimeStateSchema as cL,
-  MotionTriggerStatusSchema as cM,
-  StatusSchema as cN,
-  NativeDetectionSchema as cO,
-  NativeObjectClassEnum as cP,
-  NativeObjectDetectionStatusSchema as cQ,
-  NetworkAccessStatusSchema as cR,
-  NetworkAddressSchema as cS,
-  NetworkEndpointSchema as cT,
-  NotificationHistoryEntrySchema as cU,
-  NotificationRuleSchema as cV,
-  NotificationSchema as cW,
-  ObjectEventSchema as cX,
-  OrchestratorMetricsSchema as cY,
-  OsdOverlayKindEnum as cZ,
-  OsdOverlayPatchSchema as c_,
-  EnrichedWidgetMetadataSchema as ca,
-  EventItemSchema as cb,
-  EventKindSchema as cc,
-  ExportSetupFieldSchema as cd,
-  ExportSetupSchema as ce,
-  ExposedDeviceSchema as cf,
-  ExposedResourceSchema as cg,
-  FeatureManifestSchema as ch,
-  FeatureProbeStatusSchema as ci,
-  FrameInputSchema as cj,
-  GetStreamWithCodecInputSchema as ck,
-  GlobalMetricsSchema as cl,
-  HWACCEL_OPTIONS as cm,
-  HealthStatusSchema as cn,
-  HistoryPointSchema as co,
-  HistoryResolutionEnum as cp,
-  InstalledPackageSchema as cq,
-  IntegrationLiteSchema as cr,
-  IntegrationWithStateSchema as cs,
-  IntercomAbilitySchema as ct,
-  IntercomStatusSchema as cu,
-  LocationStatSchema as cv,
-  LogEntrySchema as cw,
-  LogLevelSchema$1 as cx,
-  LogStreamEntrySchema as cy,
-  MODEL_FORMATS as cz,
-  doorbellCapability as d,
-  ReadChunkInputSchema as d$,
-  OsdPositionEnum as d0,
-  OsdStatusSchema as d1,
-  PIPELINE_FLOW_CAPABILITY_NAMES as d2,
-  PIPELINE_OWNER_CAPABILITY_NAMES as d3,
-  PackageUpdateSchema as d4,
-  PackageVersionInfoSchema as d5,
-  PasskeySummarySchema as d6,
-  PcmSampleFormatSchema as d7,
-  PerScopeBreakdownSchema as d8,
-  PipelineAssignmentSchema as d9,
-  STORAGE_LOCATION_CARDINALITY as dA,
-  ScopedTokenSchema as dB,
-  ScopedTokenSummarySchema as dC,
-  SearchResultSchema as dD,
-  SegmentSchema as dE,
-  SendEmailInputSchema as dF,
-  SendEmailResultSchema as dG,
-  SettingsPatchSchema as dH,
-  SettingsRecordSchema as dI,
-  SettingsSchemaWithValuesSchema as dJ,
-  SettingsUpdateResultSchema as dK,
-  SmtpStatusSchema as dL,
-  SnapshotImageSchema as dM,
-  SpatialDetectionSchema as dN,
-  SsoBridgeClaimsSchema as dO,
-  StartEmbeddedInputSchema as dP,
-  AbortUploadInputSchema as dQ,
-  BeginDownloadInputSchema as dR,
-  BeginDownloadResultSchema as dS,
-  BeginUploadInputSchema as dT,
-  BeginUploadResultSchema as dU,
-  EndDownloadInputSchema as dV,
-  FinalizeUploadInputSchema as dW,
-  StorageLocationRefSchema as dX,
-  StorageLocationSchema as dY,
-  StorageLocationTypeSchema as dZ,
-  ProviderInfoSchema as d_,
-  PipelineDefaultStepSchema as da,
-  PipelineEngineChoiceSchema as db,
-  PipelineRunResultBridge as dc,
-  PipelineStepInputSchema as dd,
-  PlaceholderReasonSchema as de,
-  PolygonPointSchema as df,
-  ProfileSlotSchema as dg,
-  ProfileSlotStatusSchema as dh,
-  ProviderStatusSchema as di,
-  PtzAutotrackRuntimeStateSchema as dj,
-  PtzAutotrackSettingsSchema as dk,
-  PtzAutotrackStatusSchema as dl,
-  PtzAutotrackTargetOptionSchema as dm,
-  PtzMoveCommandSchema as dn,
-  PtzPositionSchema as dp,
-  PtzPresetSchema as dq,
-  QueryFilterSchema as dr,
-  RegisteredStreamSchema as ds,
-  ReportMotionInputSchema as dt,
-  RtpSourceSchema as du,
-  RtspRestreamEntrySchema as dv,
-  RunnerCameraConfigSchema as dw,
-  RunnerCameraDeviceUIFields as dx,
-  RunnerLocalLoadSchema as dy,
-  RunnerLocalMetricsSchema as dz,
+  UnexposeInputSchema as b$,
+  AudioMetricsHistoryPointSchema as b0,
+  AudioMetricsHistorySchema as b1,
+  AudioMetricsSnapshotSchema as b2,
+  AudioPcmChunkSchema as b3,
+  AuthResultSchema as b4,
+  AutoUpdateSettingsSchema as b5,
+  AvailableIntegrationTypeSchema as b6,
+  BATTERY_DEVICE_PROFILE as b7,
+  BackupDestinationInfoSchema as b8,
+  BackupEntrySchema as b9,
+  CollectionColumnSchema as bA,
+  CollectionIndexSchema as bB,
+  ConfigEntrySchema$1 as bC,
+  ConfigSectionWithValuesSchema as bD,
+  ConfigTabDeclarationSchema as bE,
+  CreateApiKeyInputSchema as bF,
+  CreateApiKeyResultSchema as bG,
+  CreateIntegrationInputSchema as bH,
+  CreateScopedTokenInputSchema as bI,
+  CreateScopedTokenResultSchema as bJ,
+  CreateUserInputSchema as bK,
+  CustomActionInputSchema as bL,
+  DEFAULT_AUDIO_ANALYZER_CONFIG as bM,
+  DEFAULT_DECODER_HWACCEL_CONFIG as bN,
+  DEVICE_PROFILES as bO,
+  DEVICE_SETTINGS_CONTRIBUTION_METHODS as bP,
+  DEVICE_STATUS_METHOD as bQ,
+  DecodedAudioChunkSchema as bR,
+  DecodedFrameSchema as bS,
+  DecoderAssignmentSchema as bT,
+  DecoderSessionConfigSchema as bU,
+  DecoderStatsSchema as bV,
+  DeleteIntegrationResultSchema as bW,
+  DetectorOutputSchema as bX,
+  DeviceDiscoveryStatusSchema as bY,
+  ExposeInputSchema as bZ,
+  DeviceExportStatusSchema as b_,
+  BatteryStatusSchema as ba,
+  BoundingBoxSchema as bb,
+  BrightnessStatusSchema as bc,
+  BrokerAudioClientSchema as bd,
+  BrokerClientsSchema as be,
+  BrokerConnectionDetailsSchema as bf,
+  BrokerDecodedClientSchema as bg,
+  BrokerInfoSchema as bh,
+  BrokerRtspClientSchema as bi,
+  BrokerStatsSchema as bj,
+  BrokerStatusSchema$1 as bk,
+  CAM_PROFILE_ORDER as bl,
+  CamProfileSchema as bm,
+  CamStreamKindSchema as bn,
+  CamStreamResolutionSchema as bo,
+  CameraCredentialsSchema as bp,
+  CameraCredentialsStatusSchema as bq,
+  CameraMetricsSchema as br,
+  CameraMetricsWithDeviceIdSchema as bs,
+  CameraStreamSchema as bt,
+  CapScopeSchema as bu,
+  CapabilityBindingsSchema as bv,
+  ChargingStatus as bw,
+  ClientNetworkStatsSchema as bx,
+  ClusterAddonNodeDeploymentSchema as by,
+  ClusterAddonStatusEntrySchema as bz,
+  streamParamsCapability as c,
+  NetworkAddressSchema as c$,
+  DeviceFeature as c0,
+  DeviceInfoSchema as c1,
+  DeviceNetworkStatsSchema as c2,
+  DeviceRole as c3,
+  DeviceStatusSchema as c4,
+  DeviceType as c5,
+  DiscoveredChildDeviceSchema as c6,
+  DiscoveredChildStatusSchema as c7,
+  DiscoveredDeviceSchema as c8,
+  DoorbellPressEventSchema as c9,
+  IntercomStatusSchema as cA,
+  LocationStatSchema as cB,
+  LogEntrySchema as cC,
+  LogLevelSchema$1 as cD,
+  LogStreamEntrySchema as cE,
+  MODEL_FORMATS as cF,
+  MediaFileSchema as cG,
+  MeshPeerSchema as cH,
+  MeshStatusSchema as cI,
+  MethodAccessSchema as cJ,
+  MotionAnalysisResultSchema as cK,
+  MotionEventSchema as cL,
+  MotionOnMotionChangedDataSchema as cM,
+  MotionRegionSchema as cN,
+  MotionSourceEnum as cO,
+  MotionSourcesSchema as cP,
+  MotionStatusSchema as cQ,
+  MotionTriggerRuntimeStateSchema as cR,
+  MotionTriggerStatusSchema as cS,
+  MotionZoneOptionsSchema as cT,
+  MotionZonePatchSchema as cU,
+  MotionZoneStatusSchema as cV,
+  StatusSchema as cW,
+  NativeDetectionSchema as cX,
+  NativeObjectClassEnum as cY,
+  NativeObjectDetectionStatusSchema as cZ,
+  NetworkAccessStatusSchema as c_,
+  DoorbellStatusSchema as ca,
+  EmbeddingInfoSchema as cb,
+  EmbeddingResultSchema as cc,
+  EncodedPacketSchema as cd,
+  EnrichedWidgetMetadataSchema as ce,
+  EventItemSchema as cf,
+  EventKindSchema as cg,
+  ExportSetupFieldSchema as ch,
+  ExportSetupSchema as ci,
+  ExposedDeviceSchema as cj,
+  ExposedResourceSchema as ck,
+  FeatureManifestSchema as cl,
+  FeatureProbeStatusSchema as cm,
+  FrameHandleFormatSchema as cn,
+  FrameHandleSchema as co,
+  FrameInputSchema as cp,
+  GetStreamWithCodecInputSchema as cq,
+  GlobalMetricsSchema as cr,
+  HWACCEL_OPTIONS as cs,
+  HealthStatusSchema as ct,
+  HistoryPointSchema as cu,
+  HistoryResolutionEnum as cv,
+  InstalledPackageSchema as cw,
+  IntegrationLiteSchema as cx,
+  IntegrationWithStateSchema as cy,
+  IntercomAbilitySchema as cz,
+  motionTriggerCapability as d,
+  StartEmbeddedInputSchema as d$,
+  NetworkEndpointSchema as d0,
+  NotificationHistoryEntrySchema as d1,
+  NotificationRuleSchema as d2,
+  NotificationSchema as d3,
+  OauthIntegrationDescriptorSchema as d4,
+  ObjectEventSchema as d5,
+  OrchestratorMetricsSchema as d6,
+  OsdOverlayKindEnum as d7,
+  OsdOverlayPatchSchema as d8,
+  OsdOverlaySchema as d9,
+  PtzPresetSchema as dA,
+  PtzStatusSchema as dB,
+  QueryFilterSchema as dC,
+  RegisteredStreamSchema as dD,
+  ReportMotionInputSchema as dE,
+  RtpSourceSchema as dF,
+  RtspRestreamEntrySchema as dG,
+  RunnerCameraConfigSchema as dH,
+  RunnerCameraDeviceUIFields as dI,
+  RunnerLocalLoadSchema as dJ,
+  RunnerLocalMetricsSchema as dK,
+  STORAGE_LOCATION_CARDINALITY as dL,
+  ScopedTokenSchema as dM,
+  ScopedTokenSummarySchema as dN,
+  SearchResultSchema as dO,
+  SegmentSchema as dP,
+  SendEmailInputSchema as dQ,
+  SendEmailResultSchema as dR,
+  SettingsPatchSchema as dS,
+  SettingsRecordSchema as dT,
+  SettingsSchemaWithValuesSchema as dU,
+  SettingsUpdateResultSchema as dV,
+  ShmRingStatsSchema as dW,
+  SmtpStatusSchema as dX,
+  SnapshotImageSchema as dY,
+  SpatialDetectionSchema as dZ,
+  SsoBridgeClaimsSchema as d_,
+  OsdPositionEnum as da,
+  OsdStatusSchema as db,
+  PIPELINE_FLOW_CAPABILITY_NAMES as dc,
+  PIPELINE_OWNER_CAPABILITY_NAMES as dd,
+  PackageUpdateSchema as de,
+  PackageVersionInfoSchema as df,
+  PasskeySummarySchema as dg,
+  PcmSampleFormatSchema as dh,
+  PerScopeBreakdownSchema as di,
+  PipelineAssignmentSchema as dj,
+  PipelineDefaultStepSchema as dk,
+  PipelineEngineChoiceSchema as dl,
+  PipelineRunResultBridge as dm,
+  PipelineStepInputSchema as dn,
+  PlaceholderReasonSchema as dp,
+  PolygonPointSchema as dq,
+  ProfileSlotSchema as dr,
+  ProfileSlotStatusSchema as ds,
+  ProviderStatusSchema as dt,
+  PtzAutotrackRuntimeStateSchema as du,
+  PtzAutotrackSettingsSchema as dv,
+  PtzAutotrackStatusSchema as dw,
+  PtzAutotrackTargetOptionSchema as dx,
+  PtzMoveCommandSchema as dy,
+  PtzPositionSchema as dz,
   errMsg as e,
-  TestLocationResultSchema as e0,
-  WriteChunkInputSchema as e1,
-  StreamFormatSchema as e2,
-  StreamInfoSchema as e3,
-  StreamNetworkStatsSchema as e4,
-  StreamSourceEntrySchema$1 as e5,
-  StreamSourceSchema as e6,
-  SwitchStatusSchema as e7,
-  SystemMetricsSchema as e8,
-  TestConnectionResultSchema as e9,
-  ZoneSchema as eA,
-  ZoneScopeBreakdownSchema as eB,
-  accessoryStableId as eC,
-  deviceMatchesProfile as eD,
-  event as eE,
-  expandCapMethods as eF,
-  getAudioMacroClassIds as eG,
-  mapAudioLabelToMacro as eH,
-  method as eI,
-  resolveDeviceProfile as eJ,
-  webrtcClientHintsSchema as eK,
-  ToastSchema as ea,
-  TokenScopeSchema as eb,
-  TopologyNodeSchema as ec,
-  TopologyProcessSchema as ed,
-  TopologyServiceSchema as ee,
-  TrackSchema as ef,
-  TrackStateSchema as eg,
-  TrackedDetectionSchema as eh,
-  TurnServerSchema as ei,
-  UpdateIntegrationInputSchema as ej,
-  UpdateUserInputSchema as ek,
-  UserRecordSchema as el,
-  UserSummarySchema as em,
-  WELL_KNOWN_TABS as en,
-  WELL_KNOWN_TAB_MAP as eo,
-  WebrtcStreamChoiceSchema as ep,
-  WebrtcStreamTargetSchema as eq,
-  WidgetHostEnum as er,
-  WidgetMetadataSchema as es,
-  WidgetSizeEnum as et,
-  YAMNET_TO_MACRO as eu,
-  ZoneKindEnum as ev,
-  ZoneRuleModeEnum as ew,
-  ZoneRuleSchema as ex,
-  ZoneRuleStageEnum as ey,
-  ZoneRulesArraySchema as ez,
-  featureProbeCapability as f,
-  deviceStatusCapability as g,
+  event as e$,
+  AbortUploadInputSchema as e0,
+  BeginDownloadInputSchema as e1,
+  BeginDownloadResultSchema as e2,
+  BeginUploadInputSchema as e3,
+  BeginUploadResultSchema as e4,
+  EndDownloadInputSchema as e5,
+  FinalizeUploadInputSchema as e6,
+  StorageLocationRefSchema as e7,
+  StorageLocationSchema as e8,
+  StorageLocationTypeSchema as e9,
+  TopologyServiceSchema as eA,
+  TrackSchema as eB,
+  TrackStateSchema as eC,
+  TrackedDetectionSchema as eD,
+  TurnServerSchema as eE,
+  UpdateIntegrationInputSchema as eF,
+  UpdateUserInputSchema as eG,
+  UserRecordSchema as eH,
+  UserSummarySchema as eI,
+  WELL_KNOWN_TABS as eJ,
+  WELL_KNOWN_TAB_MAP as eK,
+  WebrtcStreamChoiceSchema as eL,
+  WebrtcStreamTargetSchema as eM,
+  WidgetHostEnum as eN,
+  WidgetMetadataSchema as eO,
+  WidgetRemoteSchema as eP,
+  WidgetSizeEnum as eQ,
+  YAMNET_TO_MACRO as eR,
+  ZoneKindEnum as eS,
+  ZoneRuleModeEnum as eT,
+  ZoneRuleSchema as eU,
+  ZoneRuleStageEnum as eV,
+  ZoneRulesArraySchema as eW,
+  ZoneSchema as eX,
+  ZoneScopeBreakdownSchema as eY,
+  accessoryStableId as eZ,
+  deviceMatchesProfile as e_,
+  ProviderInfoSchema as ea,
+  ReadChunkInputSchema as eb,
+  TestLocationResultSchema as ec,
+  WriteChunkInputSchema as ed,
+  StreamFormatSchema as ee,
+  StreamInfoSchema as ef,
+  StreamNetworkStatsSchema as eg,
+  StreamParamsOptionsSchema as eh,
+  StreamParamsStatusSchema as ei,
+  StreamProfileConfigSchema as ej,
+  StreamProfileOptionsSchema as ek,
+  StreamProfilePatchSchema as el,
+  StreamProfileSchema as em,
+  StreamSourceEntrySchema$1 as en,
+  StreamSourceSchema as eo,
+  SubscribeAudioChunksInputSchema as ep,
+  SubscribeAudioChunksResultSchema as eq,
+  SubscribeFramesInputSchema as er,
+  SubscribeFramesResultSchema as es,
+  SwitchStatusSchema as et,
+  SystemMetricsSchema as eu,
+  TestConnectionResultSchema as ev,
+  ToastSchema as ew,
+  TokenScopeSchema as ex,
+  TopologyNodeSchema as ey,
+  TopologyProcessSchema as ez,
+  motionCapability as f,
+  expandCapMethods as f0,
+  getAudioMacroClassIds as f1,
+  isDeviceConfigCap as f2,
+  mapAudioLabelToMacro as f3,
+  method as f4,
+  resolveDeviceProfile as f5,
+  webrtcClientHintsSchema as f6,
+  featureProbeCapability as g,
   hydrateSchema as h,
-  deviceDiscoveryCapability as i,
-  cameraStreamsCapability as j,
-  brightnessCapability as k,
-  batteryCapability as l,
-  motionTriggerCapability as m,
-  audioMetricsCapability as n,
-  deviceProviderCapability as o,
+  doorbellCapability as i,
+  deviceStatusCapability as j,
+  deviceDiscoveryCapability as k,
+  cameraStreamsCapability as l,
+  motionZonesCapability as m,
+  brightnessCapability as n,
+  batteryCapability as o,
   ptzAutotrackCapability as p,
-  accessoriesCapability as q,
-  addonPagesCapability as r,
+  audioMetricsCapability as q,
+  deviceProviderCapability as r,
   switchCapability as s,
-  addonPagesSourceCapability as t,
-  addonRoutesCapability as u,
-  addonSettingsCapability as v,
-  addonWidgetsCapability as w,
-  addonWidgetsSourceCapability as x,
-  addonsCapability as y,
+  accessoriesCapability as t,
+  addonPagesCapability as u,
+  addonPagesSourceCapability as v,
+  addonRoutesCapability as w,
+  addonSettingsCapability as x,
+  addonWidgetsCapability as y,
   zonesCapability as z
 };
-//# sourceMappingURL=index-CWhQOnm9.mjs.map
+//# sourceMappingURL=index-CgPd35k5.mjs.map