@camstack/types 1.2.242 → 1.2.244

package/dist/addon.js

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-vrBqRLsb.js");
+const require_sleep = require("./sleep-Da9UCU5_.js");
 const require_event_category = require("./event-category-BVfsrBYA.js");
 const require_err_msg = require("./err-msg-COpsHMw2.js");
 //#region src/generated/cap-input-defaults.ts

package/dist/addon.mjs

@@ -1,4 +1,4 @@
-import { A as DeviceType, Dt as DisposerChain, G as readNodePin, J as ReadinessTimeoutError, L as expandCapMethods, Mt as emitReadiness, Ot as BaseAddon, S as DEVICE_CHILDREN_BATCH_MAX, T as describeCustomActions, Tt as DATAPLANE_SECRET_HEADER, W as nodePin, Z as scopeKey, a as asJsonObject, b as deviceOpsCapability, d as BOOT_RECOVERY_BACKOFF_MS, f as DEVICE_SCOPED_CAPS, h as createEventBusSliceSource, j as adminUiCapability, kt as normalizeAddonInitResult, m as createDeviceProxy, p as isDeviceScopedCap, q as ReadinessRegistry, s as asString, t as sleep, u as parseJsonUnknown, x as viewerUiCapability } from "./sleep-CUmLTud7.mjs";
+import { A as DeviceType, Dt as DisposerChain, G as readNodePin, J as ReadinessTimeoutError, L as expandCapMethods, Mt as emitReadiness, Ot as BaseAddon, S as DEVICE_CHILDREN_BATCH_MAX, T as describeCustomActions, Tt as DATAPLANE_SECRET_HEADER, W as nodePin, Z as scopeKey, a as asJsonObject, b as deviceOpsCapability, d as BOOT_RECOVERY_BACKOFF_MS, f as DEVICE_SCOPED_CAPS, h as createEventBusSliceSource, j as adminUiCapability, kt as normalizeAddonInitResult, m as createDeviceProxy, p as isDeviceScopedCap, q as ReadinessRegistry, s as asString, t as sleep, u as parseJsonUnknown, x as viewerUiCapability } from "./sleep-i3eUVc-d.mjs";
 import { t as EventCategory } from "./event-category-BVDXG4tB.mjs";
 import { t as errMsg } from "./err-msg-IQTHeDzc.mjs";
 //#region src/generated/cap-input-defaults.ts

package/dist/capabilities/device-admin-link-url.d.ts

@@ -0,0 +1,87 @@
+/**
+ * The ONE place a device-admin-link URL is built.
+ *
+ * Every provider of `device-admin-link` calls {@link buildDeviceAdminUrl}. No
+ * provider concatenates a URL itself, and `scripts/check-admin-link-builder-
+ * is-the-only-url-source.ts` is what makes that true rather than hoped for.
+ *
+ * ## Why a builder at all, for a string that looks like `http://` + host
+ *
+ * Because the one thing that must never happen to this string is easy to do by
+ * accident. Every provider that knows a device's host knows its PASSWORD too —
+ * they sit next to each other in the same device config (`{ host, port,
+ * username, password }` on Hikvision, Reolink, Amcrest, ONVIF alike). A
+ * convenience that "pre-fills the login" is one template literal away, and
+ * `http://admin:hunter2@192.168.50.139/` is a working URL that browsers accept,
+ * that lands in the DOM, in a right-click → copy, in a screenshot, and in any
+ * log line that prints what was opened. `scripts/check-no-credential-urls-in-
+ * fixtures.ts` already exists because this repo shipped exactly that leak on
+ * the RTSP surfaces.
+ *
+ * So the builder takes host/port/scheme/path as SEPARATE arguments — there is
+ * no parameter a credential could be passed in — and then re-checks the result
+ * it produced. A camera's admin page asks for its own login; that is correct,
+ * and pre-filling it is not ours to do.
+ */
+/** Scheme of a device admin page. Only these two; nothing else is a web page. */
+export type DeviceAdminScheme = 'http' | 'https';
+/** Everything needed to address a management page, with no room for a secret. */
+export interface DeviceAdminUrlParts {
+    /** Hostname or IP. Never a URL, never `user@host`. */
+    readonly host: string;
+    /**
+     * TCP port of the WEB interface. `null` means "the scheme default" and the
+     * port is omitted from the URL.
+     *
+     * Not the vendor's control port. Reolink's device config carries `port: 9000`
+     * — the Baichuan media port — and `http://<reolink>:9000/` answers nothing
+     * (verified against 192.168.50.226 on 2026-09-22: `:9000` refuses the
+     * connection, `:80` returns 200 text/html). A provider that reads a port
+     * field without knowing what that port IS produces a button that opens a
+     * browser error.
+     */
+    readonly port: number | null;
+    readonly scheme: DeviceAdminScheme;
+    /** Absolute path, starting with `/`. `'/'` for the site root. */
+    readonly path: string;
+    /**
+     * Query parameters, already decided by the caller. Values are encoded here.
+     * A key named like a credential is REFUSED — see {@link CREDENTIAL_QUERY_KEYS}.
+     */
+    readonly query?: Readonly<Record<string, string>>;
+}
+/** Why a link could not be built. Named, because a silent `null` is a defect. */
+export type DeviceAdminUrlRefusal = 'empty-host' | 'host-not-plain' | 'host-carries-userinfo' | 'port-out-of-range' | 'path-not-absolute' | 'credential-query-key' | 'userinfo-in-result';
+/** Discriminated result — a refusal always carries its reason. */
+export type DeviceAdminUrlResult = {
+    readonly ok: true;
+    readonly url: string;
+} | {
+    readonly ok: false;
+    readonly reason: DeviceAdminUrlRefusal;
+};
+/**
+ * Build the admin-page URL, or refuse by name.
+ *
+ * The refusal is never thrown: a provider answering "no page for this device"
+ * is an ordinary answer (`getAdminLink` → `null`), and a throw here would turn
+ * a missing host on one device into a failed query for the whole surface.
+ */
+export declare function buildDeviceAdminUrl(parts: DeviceAdminUrlParts): DeviceAdminUrlResult;
+/** Host/port/scheme recovered from an operator-configured base URL. */
+export interface DeviceAdminBase {
+    readonly ok: true;
+    readonly host: string;
+    readonly port: number | null;
+    readonly scheme: DeviceAdminScheme;
+    /** Path prefix the base URL carried (`''` when it was just an origin). */
+    readonly basePath: string;
+}
+/** Refusal shape for {@link parseAdminBase}. */
+export type DeviceAdminBaseResult = DeviceAdminBase | {
+    readonly ok: false;
+    readonly reason: DeviceAdminBaseRefusal;
+};
+/** Why a configured base URL cannot be used to build a link. */
+export type DeviceAdminBaseRefusal = 'empty' | 'unparseable' | 'scheme-not-http' | 'base-carries-userinfo';
+export declare function parseAdminBase(baseUrl: string): DeviceAdminBaseResult;

package/dist/capabilities/device-admin-link.cap.d.ts

@@ -0,0 +1,118 @@
+/**
+ * device-admin-link — "this device has a management page of its own, and here
+ * is its address".
+ *
+ * ## Why this is not a `deviceConfig` cap
+ *
+ * There is nothing to edit. A `deviceConfig` cap (D14) exists so the framework
+ * can DERIVE a settings form from `getOptions` + `getStatus` and route a flat
+ * patch back through a setter; it costs a `builderId` reducer in
+ * `device-config-contribution.ts` and a `*-config-schema.ts` beside it, and it
+ * renders a form section. This cap answers ONE question with ONE read and
+ * renders a button. Nothing about it is a form, so it carries no `deviceConfig`
+ * block, no `settings`, no `runtimeState` and no reducer — exactly like
+ * `reboot`, the other pure-RPC device-native cap.
+ *
+ * ## Absent, and the difference between "no page" and "we cannot say"
+ *
+ * The two are answered at DIFFERENT layers, on purpose:
+ *
+ *  - **"We cannot say"** → the provider never registers the cap for that
+ *    device. A VeSync humidifier, a Petkit feeder, a Dreame vacuum and a Dreo
+ *    fan are reached only through a vendor cloud; there is no address to hand
+ *    out and no page to open. A Tuya plug, a Wyze camera and a Gree air
+ *    conditioner DO have a LAN IP, and still have no HTTP management page
+ *    behind it. None of them register, so `deviceManager.getBindings` never
+ *    lists the cap and no surface asks.
+ *  - **"This device has no page, and I know that"** → the provider registers
+ *    and `getAdminLink` returns `null`. This is the answer for a device whose
+ *    sibling DOES have a page: a Reolink battery camera reached over UDP by
+ *    `uid` with a blank `host`, an Ecowitt gateway configured in `listener`
+ *    transport, a Home Assistant broker authenticated by supervisor token
+ *    (which carries no `baseUrl` at all).
+ *
+ * Both draw NOTHING. A button that opens a browser error is worse than no
+ * button, and D62 is the same rule from the other side: an off switch is
+ * reported off, never made to look broken. There is no third state where the
+ * UI renders a disabled button "because the device might have a page".
+ *
+ * ## The URL never carries credentials
+ *
+ * Not in userinfo, not in a query string. Every provider builds through
+ * `buildDeviceAdminUrl` (`device-admin-link-url.ts`), which takes host, port,
+ * scheme and path as separate arguments — there is no parameter a secret could
+ * arrive in — and re-checks its own output for the `scheme://user:pass@` shape
+ * that `scripts/check-no-credential-urls-in-fixtures.ts` bans from recorded
+ * output. `scripts/check-admin-link-builder-is-the-only-url-source.ts` is what
+ * keeps providers from hand-rolling one anyway.
+ *
+ * This matters here more than anywhere else in the repo, because every provider
+ * that knows a device's host knows its PASSWORD too: `{ host, port, username,
+ * password }` sit in one object on Hikvision, Amcrest, Reolink and ONVIF alike,
+ * and `http://admin:hunter2@192.168.50.139/` is a URL a browser accepts. The
+ * camera's own page will ask for its own login. That is correct, and pre-
+ * filling it is the operator's business, not ours.
+ *
+ * ## It is a LAN fact
+ *
+ * The URL addresses the device where the NODE can see it. It is not proxied,
+ * not made reachable from outside, and not sent anywhere. A surface renders it
+ * as a link the operator's own browser follows, on the operator's own network,
+ * or renders nothing.
+ */
+import { z } from 'zod';
+import { type InferProvider } from './capability-definition.js';
+/**
+ * Whose page is it. The distinction is for the OPERATOR, who needs to know
+ * before clicking whether he is about to land on a camera's own web server or
+ * inside Home Assistant.
+ */
+export declare const AdminLinkTargetEnum: z.ZodEnum<{
+    device: "device";
+    integration: "integration";
+}>;
+export type AdminLinkTarget = z.infer<typeof AdminLinkTargetEnum>;
+export declare const DeviceAdminLinkSchema: z.ZodObject<{
+    url: z.ZodString;
+    label: z.ZodString;
+    target: z.ZodEnum<{
+        device: "device";
+        integration: "integration";
+    }>;
+    host: z.ZodString;
+}, z.core.$strip>;
+export type DeviceAdminLink = z.infer<typeof DeviceAdminLinkSchema>;
+export declare const deviceAdminLinkCapability: {
+    readonly name: "device-admin-link";
+    readonly scope: "device";
+    readonly deviceNative: true;
+    readonly mode: "singleton";
+    readonly methods: {
+        /**
+         * The device's management page, or `null` when this device has none.
+         *
+         * `auth: 'admin'` deliberately. This is administration, not actuation —
+         * the same bucket as `reboot` and `camera-credentials`, and explicitly NOT
+         * the actuation set `scripts/check-actuation-not-admin.ts` protects (D403).
+         * The URL is also a statement about the LAN, which a household member with
+         * a `view` grant on a light has no reason to be handed.
+         *
+         * The surfaces gate on the QUERY, never on a role they guessed: a caller
+         * without the right loses the query and draws nothing, which is the same
+         * thing a device with no page draws. There is no path on which a button
+         * appears and then fails — the D403 failure mode, from the other end.
+         */
+        readonly getAdminLink: import("./capability-definition.js").CapabilityMethodSchema<z.ZodObject<{
+            deviceId: z.ZodNumber;
+        }, z.core.$strip>, z.ZodNullable<z.ZodObject<{
+            url: z.ZodString;
+            label: z.ZodString;
+            target: z.ZodEnum<{
+                device: "device";
+                integration: "integration";
+            }>;
+            host: z.ZodString;
+        }, z.core.$strip>>, import("./capability-definition.js").CapabilityMethodKind>;
+    };
+};
+export type IDeviceAdminLinkProvider = InferProvider<typeof deviceAdminLinkCapability>;

package/dist/capabilities/index.d.ts

@@ -48,6 +48,8 @@ export type { DecoderHwAccelConfig, HwAccelChoice, IDecoderCapProvider, ShmRingS
 export { DEFAULT_DECODER_HWACCEL_CONFIG, DecoderSessionConfigSchema, decoderCapability, HWACCEL_OPTIONS, ShmRingStatsSchema, } from './decoder.cap.js';
 export { detectionPipelineCapability, type IDetectionPipelineProvider, } from './detection-pipeline.cap.js';
 export { AdoptInputSchema as AdoptionAdoptInputSchema, type AdoptionFilter, AdoptionFilterSchema, type AdoptionStatus, AdoptionStatusSchema, AdoptResultSchema as AdoptionAdoptResultSchema, CandidateQueryFilterSchema, deviceAdoptionCapability, GetCandidateInputSchema as AdoptionGetCandidateInputSchema, type IDeviceAdoptionProvider, ListCandidatesInputSchema as AdoptionListCandidatesInputSchema, ListCandidatesOutputSchema as AdoptionListCandidatesOutputSchema, ReleaseInputSchema as AdoptionReleaseInputSchema, } from './device-adoption.cap.js';
+export { type AdminLinkTarget, AdminLinkTargetEnum, type DeviceAdminLink, DeviceAdminLinkSchema, deviceAdminLinkCapability, type IDeviceAdminLinkProvider, } from './device-admin-link.cap.js';
+export { buildDeviceAdminUrl, type DeviceAdminBase, type DeviceAdminBaseRefusal, type DeviceAdminBaseResult, type DeviceAdminScheme, type DeviceAdminUrlParts, type DeviceAdminUrlRefusal, type DeviceAdminUrlResult, parseAdminBase, } from './device-admin-link-url.js';
 export type { IDeviceExportProvider } from './device-export.cap.js';
 export { DeviceExportStatusSchema, deviceExportCapability, ExportSetupFieldSchema, ExportSetupSchema, ExposedDeviceSchema, ExposeInputSchema as DeviceExportExposeInputSchema, UnexposeInputSchema as DeviceExportUnexposeInputSchema, } from './device-export.cap.js';
 export type { DeviceInfo, DeviceManagerApplyInitialMetaInput } from './device-manager.cap.js';
@@ -116,8 +118,8 @@ export type { IUserPasskeysProvider, PasskeySummary } from './user-passkeys.cap.
 export { PasskeySummarySchema, userPasskeysCapability } from './user-passkeys.cap.js';
 export type { IVectorStoreProvider } from './vector-store.cap.js';
 export { VectorDeclareIndexInputSchema, VectorDeleteByFilterInputSchema, VectorDeleteInputSchema, VectorDeleteResultSchema, type VectorFilter, VectorFilterSchema, VectorGetInputSchema, VectorGetResultSchema, type VectorItem, VectorItemSchema, type VectorMatch, VectorMatchSchema, type VectorMetadata, VectorMetadataSchema, type VectorMetric, VectorMetricSchema, VectorQueryInputSchema, VectorQueryResultSchema, VectorStatsInputSchema, VectorStatsResultSchema, VectorUpsertInputSchema, VectorUpsertResultSchema, vectorStoreCapability, } from './vector-store.cap.js';
-export type { Clip, ClipBytes, ClipPlayback, ClipSource, ClipSourceAvailability, ClipStillDisposition, ClipStillRefusalCode, ClipWake, IVideoclipsProvider, } from './videoclips.cap.js';
-export { CLIP_STILL_DISPOSITION_HEADER, CLIP_STILL_REASON_CODE_HEADER, CLIP_STILL_REASON_HEADER, ClipBytesSchema, ClipPlaybackSchema, ClipSchema, ClipSourceAvailabilitySchema, ClipSourceSchema, ClipStillDispositionSchema, ClipStillRefusalCodeSchema, ClipWakeSchema, MAX_CLIP_EVENT_IDS, MAX_CLIP_LABELS, VIDEOCLIPS_MAX_READ_BYTES, videoclipsCapability, } from './videoclips.cap.js';
+export type { Clip, ClipBytes, ClipPlayback, ClipSource, ClipSourceAvailability, ClipStillDisposition, ClipStillRefusalCode, ClipStreamAudio, ClipStreamAudioReason, ClipStreamDial, ClipWake, IVideoclipsProvider, } from './videoclips.cap.js';
+export { CLIP_STILL_DISPOSITION_HEADER, CLIP_STILL_REASON_CODE_HEADER, CLIP_STILL_REASON_HEADER, CLIP_STREAM_TRANSPORT_HEADER, ClipBytesSchema, ClipPlaybackSchema, ClipSchema, ClipSourceAvailabilitySchema, ClipSourceSchema, ClipStillDispositionSchema, ClipStillRefusalCodeSchema, ClipStreamAudioReasonSchema, ClipStreamAudioSchema, ClipStreamDialSchema, ClipWakeSchema, MAX_CLIP_EVENT_IDS, MAX_CLIP_LABELS, VIDEOCLIPS_MAX_READ_BYTES, videoclipsCapability, } from './videoclips.cap.js';
 export type { IViewerUiProvider } from './viewer-ui.cap.js';
 export { viewerUiCapability } from './viewer-ui.cap.js';
 export { type IWebrtcSessionProvider, type WebrtcClientHints, type WebrtcLadderDecision, WebrtcLadderDecisionSchema, type WebrtcSessionDebug, WebrtcSessionDebugSchema, type WebrtcStreamChoice, WebrtcStreamChoiceSchema, type WebrtcStreamTarget, WebrtcStreamTargetSchema, type WebrtcTierFailure, WebrtcTierFailureSchema, webrtcClientHintsSchema, webrtcSessionCapability, } from './webrtc-session.cap.js';
@@ -143,6 +145,8 @@ export { type ContactStatus, ContactStatusSchema, contactCapability, type IConta
 export { type ControlKind, ControlKindSchema, type ControlSetValueInput, type ControlStatus, ControlStatusSchema, controlCapability, type IControlProvider, } from './control.cap.js';
 export { type CoverState, CoverStateSchema, type CoverStatus, CoverStatusSchema, coverCapability, type ICoverProvider, } from './cover.cap.js';
 export { type DayNightMode, DayNightModeSchema, type DayNightOptions, DayNightOptionsSchema, type DayNightSettingsPatch, DayNightSettingsPatchSchema, type DayNightStatus, DayNightStatusSchema, dayNightCapability, type IDayNightProvider, } from './day-night.cap.js';
+export { type OnboardAllowedValues, type OnboardFieldSupport, OnboardFieldSupportSchema, type OnboardRecordTrack, OnboardRecordTrackSchema, type OnboardScheduleSupport, OnboardScheduleSupportSchema, type OnboardStorage, OnboardStorageSchema, type OnboardStorageVolume, OnboardStorageVolumeSchema, type IRecordingOnboardProvider, type RecordTrigger, RecordTriggerSchema, type RecordWindow, RecordWindowSchema, type RecordingOnboardOptions, RecordingOnboardOptionsSchema, type RecordingOnboardPatch, RecordingOnboardPatchSchema, type RecordingOnboardStatus, RecordingOnboardStatusSchema, recordingOnboardCapability, } from './recording-onboard.cap.js';
+export { DAYS_PER_WEEK, DAY_NAMES, HOURS_PER_DAY, MINUTES_PER_DAY, WEEKLY_MASK_LENGTH, dayOfWeekToIndex, describeOnboardClamp, describeOnboardRefusal, formatMinutes, minutesToTimeOfDay, timeOfDayToMinutes, weeklyMaskIndex, weeklyMaskIsUniform, weeklyMaskToWindows, windowsToWeeklyMask, } from './recording-onboard-rules.js';
 export { type DeviceDiscoveryStatus, DeviceDiscoveryStatusSchema, type DiscoveredChildDevice, DiscoveredChildDeviceSchema, type DiscoveredChildStatus, DiscoveredChildStatusSchema, deviceDiscoveryCapability, type IDeviceDiscoveryNativeProvider, type IDeviceDiscoveryProvider, } from './device-discovery.cap.js';
 export { deviceOpsCapability, type IDeviceOpsProvider, type RawStateResult, RawStateResultSchema, } from './device-ops.cap.js';
 export { type DeviceStatus, DeviceStatusSchema, deviceStatusCapability, type IDeviceStatusProvider, } from './device-status.cap.js';
@@ -258,9 +262,11 @@ import type { coverCapability } from './cover.cap.js';
 import type { customModelRegistryCapability } from './custom-model-registry.cap.js';
 import type { dataStoreProviderCapability } from './data-store-provider.cap.js';
 import type { dayNightCapability } from './day-night.cap.js';
+import type { recordingOnboardCapability } from './recording-onboard.cap.js';
 import type { decoderCapability } from './decoder.cap.js';
 import type { detectionPipelineCapability } from './detection-pipeline.cap.js';
 import type { deviceAdoptionCapability } from './device-adoption.cap.js';
+import type { deviceAdminLinkCapability } from './device-admin-link.cap.js';
 import type { deviceDiscoveryCapability } from './device-discovery.cap.js';
 import type { deviceExportCapability } from './device-export.cap.js';
 import type { deviceManagerCapability } from './device-manager.cap.js';
@@ -374,6 +380,6 @@ import type { webrtcSessionCapability } from './webrtc-session.cap.js';
 import type { zoneAnalyticsCapability } from './zone-analytics.cap.js';
 import type { zoneRulesCapability } from './zone-rules.cap.js';
 import type { zonesCapability } from './zones.cap.js';
-type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof eventsCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability;
+type AnyCapability = typeof streamSignalsCapability | typeof addonSettingsCapability | typeof alertsCapability | typeof storageCapability | typeof storageMigrationCapability | typeof storageProviderCapability | typeof storageEvictableCapability | typeof storageOccupancyCapability | typeof filesystemBrowseCapability | typeof backupCapability | typeof terminalSessionCapability | typeof settingsStoreCapability | typeof dataStoreProviderCapability | typeof logChannelsCapability | typeof logDestinationCapability | typeof loadContributionCapability | typeof failureContributionCapability | typeof adminUiCapability | typeof viewerUiCapability | typeof ssoBridgeCapability | typeof userPasskeysCapability | typeof smtpProviderCapability | typeof mqttBrokerCapability | typeof brokerCapability | typeof deviceAdoptionCapability | typeof deviceAdminLinkCapability | typeof deviceExportCapability | typeof addonPagesCapability | typeof addonPagesSourceCapability | typeof addonWidgetsCapability | typeof addonWidgetsSourceCapability | typeof customModelRegistryCapability | typeof modelDistributorCapability | typeof modelConvertCapability | typeof addonRoutesCapability | typeof streamBrokerCapability | typeof decoderCapability | typeof webrtcSessionCapability | typeof cameraStreamsCapability | typeof motionDetectionCapability | typeof pipelineExecutorCapability | typeof detectionPipelineCapability | typeof cameraPipelineConfigCapability | typeof pipelineRunnerCapability | typeof pipelineOrchestratorCapability | typeof audioAnalyzerCapability | typeof audioAnalysisCapability | typeof audioCodecCapability | typeof embeddingEncoderCapability | typeof vectorStoreCapability | typeof deviceProviderCapability | typeof deviceManagerCapability | typeof deviceStateCapability | typeof authProviderCapability | typeof loginMethodCapability | typeof networkAccessCapability | typeof turnProviderCapability | typeof snapshotCapability | typeof llmCapability | typeof llmRuntimeCapability | typeof notificationOutputCapability | typeof coreBlocksCapability | typeof notificationRulesCapability | typeof pipelineAnalyticsCapability | typeof metricsProviderCapability | typeof ptzCapability | typeof ptzAutotrackCapability | typeof navigationCapability | typeof consumablesCapability | typeof connectionTestCapability | typeof rebootCapability | typeof deviceDiscoveryCapability | typeof brightnessCapability | typeof colorCapability | typeof climateControlCapability | typeof coverCapability | typeof valveCapability | typeof humidifierCapability | typeof waterHeaterCapability | typeof weatherCapability | typeof imageCapability | typeof lockControlCapability | typeof vacuumControlCapability | typeof petFeederCapability | typeof lawnMowerControlCapability | typeof fanControlCapability | typeof controlCapability | typeof notifierCapability | typeof mediaPlayerCapability | typeof alarmPanelCapability | typeof presenceCapability | typeof scriptRunnerCapability | typeof automationControlCapability | typeof motionTriggerCapability | typeof eventsCapability | typeof zonesCapability | typeof zoneRulesCapability | typeof zoneAnalyticsCapability | typeof audioMetricsCapability | typeof motionCapability | typeof contactCapability | typeof floodCapability | typeof smokeCapability | typeof carbonMonoxideCapability | typeof gasCapability | typeof tamperCapability | typeof vibrationCapability | typeof connectivityCapability | typeof binaryCapability | typeof temperatureSensorCapability | typeof humiditySensorCapability | typeof ambientLightSensorCapability | typeof pressureSensorCapability | typeof powerMeterCapability | typeof airQualitySensorCapability | typeof numericSensorCapability | typeof enumSensorCapability | typeof recordingCapability | typeof recordingExportCapability | typeof recordingSignalCapability | typeof deviceOpsCapability | typeof platformProbeCapability | typeof localNetworkCapability | typeof meshNetworkCapability | typeof userManagementCapability | typeof systemCapability | typeof networkQualityCapability | typeof toastCapability | typeof nodesCapability | typeof serverManagementCapability | typeof integrationsCapability | typeof addonsCapability | typeof oauthIntegrationCapability | typeof streamParamsCapability | typeof streamCatalogCapability | typeof motionZonesCapability | typeof cameraGridLayoutCapability | typeof sceneMonitorCapability | typeof privacyMaskCapability | typeof dayNightCapability | typeof recordingOnboardCapability | typeof imageSettingsCapability | typeof osdCapability | typeof osdManagerCapability | typeof accessoriesCapability | typeof batteryCapability | typeof networkLinkCapability | typeof buttonCapability | typeof cameraCredentialsCapability | typeof deviceStatusCapability | typeof doorbellCapability | typeof eventEmitterCapability | typeof faceGalleryCapability | typeof featureProbeCapability | typeof intercomCapability | typeof nativeObjectDetectionCapability | typeof plateGalleryCapability | typeof switchCapability | typeof updateCapability | typeof videoclipsCapability;
 export type CapabilityName = AnyCapability['name'];
 export type ITypedReadinessRegistry = IReadinessRegistry<CapabilityName>;

package/dist/capabilities/pipeline-orchestrator.cap.d.ts

@@ -1273,9 +1273,11 @@ export declare const pipelineOrchestratorCapability: {
                 unavailableReason: z.ZodOptional<z.ZodEnum<{
                     "no-provider": "no-provider";
                     "source-unreachable": "source-unreachable";
-                    "not-configured": "not-configured";
                     "device-disabled": "device-disabled";
                 }>>;
+                warning: z.ZodOptional<z.ZodEnum<{
+                    "no-privacy-zones": "no-privacy-zones";
+                }>>;
                 enabled: z.ZodBoolean;
                 authority: z.ZodDiscriminatedUnion<[z.ZodObject<{
                     kind: z.ZodLiteral<"device-disabled">;
@@ -1349,9 +1351,11 @@ export declare const pipelineOrchestratorCapability: {
                 unavailableReason: z.ZodOptional<z.ZodEnum<{
                     "no-provider": "no-provider";
                     "source-unreachable": "source-unreachable";
-                    "not-configured": "not-configured";
                     "device-disabled": "device-disabled";
                 }>>;
+                warning: z.ZodOptional<z.ZodEnum<{
+                    "no-privacy-zones": "no-privacy-zones";
+                }>>;
                 enabled: z.ZodBoolean;
                 authority: z.ZodDiscriminatedUnion<[z.ZodObject<{
                     kind: z.ZodLiteral<"device-disabled">;

package/dist/capabilities/recording-onboard-rules.d.ts

@@ -0,0 +1,135 @@
+/**
+ * `recording-onboard` — the vendor-neutral rules both providers share.
+ *
+ * Three things live here rather than in each addon, because two
+ * hand-written copies of them would be two different opinions about the
+ * same question:
+ *
+ *   1. {@link describeOnboardRefusal} — THE refusal vocabulary. A write
+ *      a camera cannot honour is refused with one sentence an operator
+ *      can read, and the sentence is the same whoever refuses it.
+ *   2. {@link weeklyMaskToWindows} / {@link windowsToWeeklyMask} —
+ *      Reolink's 7×24 hour mask ↔ the cap's {@link RecordWindow} list.
+ *   3. {@link timeOfDayToMinutes} / {@link minutesToTimeOfDay} —
+ *      Hikvision's `TimeOfDay` strings ↔ minutes since midnight.
+ *
+ * Pure. No I/O, no clock, no logger.
+ */
+import type { RecordTrigger, RecordWindow, RecordingOnboardOptions, RecordingOnboardPatch } from './recording-onboard.cap.js';
+/** Minutes in a day. `endMinute === 1440` means "to end of day". */
+export declare const MINUTES_PER_DAY = 1440;
+/** Days in the cap's week, 0 = Monday. */
+export declare const DAYS_PER_WEEK = 7;
+/** Hours per day — the resolution of Reolink's mask. */
+export declare const HOURS_PER_DAY = 24;
+/** Length of a Reolink weekly `valueTable`: 7 days × 24 hours. */
+export declare const WEEKLY_MASK_LENGTH: number;
+/**
+ * Day-of-week names in the cap's index order (0 = Monday), for messages
+ * an operator reads and for Hikvision's `<DayOfWeek>` element.
+ */
+export declare const DAY_NAMES: readonly string[];
+/**
+ * Does `patch` ask this camera for something it cannot do?
+ *
+ * Returns the operator-readable reason, or `null` when every field in
+ * the patch is within what `options` says this camera accepts. A
+ * provider calls this BEFORE touching the camera and throws the string:
+ * refusing is the point, and refusing identically on both vendors is why
+ * this is one function.
+ *
+ * The order of checks is the order an operator would read them: the
+ * scalar knobs first, then the schedule, because a schedule complaint is
+ * longer and a scalar one is usually the real problem.
+ */
+export declare function describeOnboardRefusal(options: RecordingOnboardOptions, patch: RecordingOnboardPatch): string | null;
+/** `510` → `08:30`. For messages, not for the wire. */
+export declare function formatMinutes(minute: number): string;
+/**
+ * Index of the mask character covering `day` at `hour`.
+ *
+ * **Layout: day-major, Monday first** — `day * 24 + hour`.
+ *
+ * This is an ASSUMPTION, and it is recorded as one because the fleet
+ * cannot currently confirm it: every `valueTable` on every Reolink
+ * measured on 2026-09-22 is uniform (all `1` or all `0`), and a uniform
+ * mask reads identically under either layout. To settle it, set a single
+ * hour on one day from the Reolink app and re-read `getRecordSchedule`.
+ * Until then, a NON-uniform mask is reported as windows under this
+ * layout and the day labels may be transposed; a uniform one is exact.
+ */
+export declare function weeklyMaskIndex(day: number, hour: number): number;
+/**
+ * True when every slot of the mask carries the same value — the case in
+ * which {@link weeklyMaskIndex}'s layout assumption cannot be wrong.
+ */
+export declare function weeklyMaskIsUniform(mask: string): boolean;
+/**
+ * Expand one trigger's weekly hour mask into windows, merging adjacent
+ * set hours into one window per run so a full day is ONE window rather
+ * than twenty-four.
+ *
+ * A mask of the wrong length yields no windows: a truncated table is not
+ * a schedule of fewer days, it is an answer we did not understand.
+ */
+export declare function weeklyMaskToWindows(mask: string, trigger: RecordTrigger): RecordWindow[];
+/**
+ * Collapse this trigger's windows back into a weekly hour mask.
+ *
+ * Windows for other triggers are ignored — the mask is per trigger. A
+ * window that is not hour-aligned is REFUSED upstream by
+ * {@link describeOnboardRefusal}; this function rounds nothing, it
+ * simply sets every hour the window fully or partly covers, so a caller
+ * that skipped the refusal cannot silently lose coverage.
+ */
+export declare function windowsToWeeklyMask(windows: readonly RecordWindow[], trigger: RecordTrigger): string;
+/**
+ * Parse a Hikvision `<TimeOfDay>` into minutes since midnight.
+ *
+ * The firmware is not self-consistent and both spellings are real, on
+ * the same camera in the same block: a start time reads `00:00:00` and
+ * the matching end time reads `24:00`. Seconds are accepted and
+ * discarded — the cap's resolution is minutes — and `24:00` maps to
+ * {@link MINUTES_PER_DAY}, not to 0.
+ *
+ * Returns null for anything else, which a caller reports as a window it
+ * could not read rather than as midnight.
+ */
+export declare function timeOfDayToMinutes(value: string): number | null;
+/**
+ * Render minutes back as a Hikvision `TimeOfDay`.
+ *
+ * Emits the camera's own two spellings: `24:00` for end-of-day, because
+ * that is what the firmware writes and `24:00:00` is not observed, and
+ * `HH:MM:SS` otherwise.
+ */
+export declare function minutesToTimeOfDay(minute: number): string;
+/** `'Monday'` → 0. Case-insensitive. Null for anything unrecognised. */
+export declare function dayOfWeekToIndex(value: string): number | null;
+/** One field a camera stored differently from what it was asked. */
+export interface OnboardClamp {
+    readonly field: string;
+    readonly asked: number | boolean | string;
+    /** What the camera holds now. `null` when the read-back could not say. */
+    readonly stored: number | boolean | string | null;
+}
+/**
+ * Which fields of a patch the camera did NOT take verbatim.
+ *
+ * Measured on a Hikvision I91DN (1436, 2026-09-22): a `PUT` of
+ * `PreRecordTimeSeconds: 8` answered `200`, `statusCode 1`, `OK` — and stored
+ * **5**. Neither the asked value nor the previous one. The camera declares no
+ * allowed set for that field, so there is nothing to refuse against before the
+ * wire: `/capabilities` returns a plain value where a constrained field would
+ * carry an `opt=` list.
+ *
+ * So the only honest moment is after the read-back, and re-reading alone is
+ * not enough — it makes the difference VISIBLE while leaving it unexplained.
+ * A write that reports success for a value the camera never took is the same
+ * silent substitution D599 removed from the clip path, wearing a different hat.
+ *
+ * Compares only the fields the patch actually named: a field nobody asked
+ * about cannot have been clamped, and a read-back that could not answer it is
+ * `stored: null` rather than a claim.
+ */
+export declare function describeOnboardClamp(patch: Readonly<Record<string, unknown>>, landed: Readonly<Record<string, unknown>> | null): readonly OnboardClamp[];