@camstack/types 1.2.373 → 1.2.374

package/dist/index.js

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_sleep = require("./sleep-DnQ5WsMI.js");
+const require_sleep = require("./sleep-rqlHXgwb.js");
 const require_event_category = require("./event-category-T43rdQWR.js");
-const require_composition = require("./composition-DCYnv4I6.js");
+const require_composition = require("./composition-DIp0uE_b.js");
 const require_node_color = require("./node-color.js");
-const require_err_msg = require("./err-msg-Dx2Kor0g.js");
+const require_err_msg = require("./err-msg-Ls8Q6dHO.js");
 const require_enums = require("./enums.js");
 let zod = require("zod");
 //#region src/media/media-owner-key.ts
@@ -2601,12 +2601,12 @@ function toStreamSourceEntry(stream) {
 function isString(v) {
 	return typeof v === "string";
 }
-function isRecord$2(v) {
+function isRecord$3(v) {
 	return typeof v === "object" && v !== null && !Array.isArray(v);
 }
 function parseStreamEntry(v) {
 	if (isString(v) && v.trim()) return { url: v };
-	if (isRecord$2(v) && isString(v["url"]) && v["url"].trim()) return {
+	if (isRecord$3(v) && isString(v["url"]) && v["url"].trim()) return {
 		url: v["url"],
 		label: isString(v["label"]) ? v["label"] : void 0
 	};
@@ -3247,20 +3247,20 @@ var SURVIVING_TRIGGER_KEYS = [
 	"objectClasses",
 	"sensorDeviceIds"
 ];
-function isRecord$1(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function listensToLegacySignal(band) {
-	return isRecord$1(band) && isRecord$1(band.triggers) && band.triggers.deviceSignal === true;
+	return isRecord$2(band) && isRecord$2(band.triggers) && band.triggers.deviceSignal === true;
 }
 function hasSurvivingTrigger(band) {
 	const triggers = band.triggers;
-	if (!isRecord$1(triggers)) return false;
+	if (!isRecord$2(triggers)) return false;
 	return SURVIVING_TRIGGER_KEYS.some((key) => triggers[key] !== void 0);
 }
 function withoutLegacySignal(band) {
 	const triggers = band.triggers;
-	if (!isRecord$1(triggers)) return band;
+	if (!isRecord$2(triggers)) return band;
 	const { deviceSignal: _retired, ...rest } = triggers;
 	return {
 		...band,
@@ -3290,11 +3290,11 @@ function migrateLegacyDeviceSignalConfig(raw) {
 		migrated: false,
 		strippedOnly: false
 	};
-	if (!isRecord$1(raw) || !Array.isArray(raw.bands)) return unchanged;
+	if (!isRecord$2(raw) || !Array.isArray(raw.bands)) return unchanged;
 	if (!raw.bands.some(listensToLegacySignal)) return unchanged;
 	const kept = [];
 	for (const band of raw.bands) {
-		if (!listensToLegacySignal(band) || !isRecord$1(band)) {
+		if (!listensToLegacySignal(band) || !isRecord$2(band)) {
 			kept.push(band);
 			continue;
 		}
@@ -8000,7 +8000,9 @@ var ConfigTabDeclarationSchema = zod.z.object({
 var ConfigSectionWithValuesSchema = zod.z.object({
 	id: zod.z.string(),
 	title: zod.z.string(),
+	titleKey: zod.z.string().optional(),
 	description: zod.z.string().optional(),
+	descriptionKey: zod.z.string().optional(),
 	style: zod.z.enum(["card", "accordion"]).optional(),
 	defaultCollapsed: zod.z.boolean().optional(),
 	columns: zod.z.union([
@@ -13996,6 +13998,16 @@ var keychainCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* Delete every value scoped `device/<deviceId>`, whatever its owner (D864).
+		* Reserved to `device-manager`, on the device-removed path: a driver's
+		* device-scoped secret is not anybody's once the device is gone. Answers the
+		* refs removed (never values).
+		*/
+		deleteDeviceScope: require_sleep.method(zod.z.object({ deviceId: zod.z.number().int() }), zod.z.object({ refs: zod.z.array(zod.z.string()).readonly() }), {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** The caller's own refs, metadata only. */
 		listMeta: require_sleep.method(zod.z.object({}), zod.z.array(KeychainSecretMetaSchema).readonly(), { auth: "admin" }),
 		/** Whether values can be served — the save path refuses a write while locked. */
@@ -36374,6 +36386,42 @@ var DeviceRegisterPayloadSchema = zod.z.object({
 	*  omits it and the keyword backstop applies. */
 	secretConfigPaths: zod.z.array(zod.z.string()).optional()
 });
+/** One deleted device, kept by device-manager so an addon that missed the
+*  deletion can still learn of it (D865). Written by the delete path ONLY. */
+var DeviceTombstoneSchema = zod.z.object({
+	deviceId: zod.z.number().int().positive(),
+	/** Epoch ms the device was deleted. */
+	deletedAt: zod.z.number(),
+	/** The addon that owned the device when it was deleted. */
+	providerAddonId: zod.z.string()
+});
+/** How long a tombstone stays readable. Past it, a device that was deleted
+*  and never cleaned is only reachable by the admin "clean data of deleted
+*  devices" action. */
+var DEVICE_TOMBSTONE_RETENTION_MS = 2160 * 60 * 60 * 1e3;
+/** Data held for one device that device-manager no longer knows. */
+var OrphanDeviceDataSchema = zod.z.object({
+	deviceId: zod.z.number().int().positive(),
+	/** Rows/files per store (`<addonId>:<store>`). */
+	stores: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative())
+});
+var CleanupDeletedDevicesResultSchema = zod.z.object({
+	/**
+	* `skipped` — the absence check could not be trusted (a device-list read
+	* failed or the two reads disagreed); nothing was listed or deleted.
+	* `dry-run` — `devices` is what a confirmed run would delete.
+	* `cleaned` — `devices` is what was deleted.
+	*/
+	status: zod.z.enum([
+		"skipped",
+		"dry-run",
+		"cleaned"
+	]),
+	reason: zod.z.string().nullable(),
+	devices: zod.z.array(OrphanDeviceDataSchema),
+	/** Implementers that could not be asked (their stores are not in `devices`). */
+	unreachable: zod.z.array(zod.z.string())
+});
 var DeviceRemovePayloadSchema = zod.z.object({ deviceId: zod.z.number() });
 var DevicePersistConfigPayloadSchema = zod.z.object({
 	deviceId: zod.z.number(),
@@ -36970,6 +37018,27 @@ var deviceManagerCapability = {
 			kind: "mutation",
 			auth: "admin"
 		}),
+		/**
+		* The tombstones of devices deleted at or after `sinceMs` (D865). The
+		* reconcile feed of every `device-removal-hook` implementer: an addon that
+		* was down when a device was deleted asks here at start and periodically.
+		* A tombstone exists only for a DELETE — never for a device that is merely
+		* unregistered, offline or whose provider is restarting. Tombstones older
+		* than `DEVICE_TOMBSTONE_RETENTION_MS` are gone.
+		*/
+		listDeletedSince: require_sleep.method(zod.z.object({ sinceMs: zod.z.number() }), zod.z.array(DeviceTombstoneSchema).readonly(), { auth: "admin" }),
+		/**
+		* Admin-triggered clean-up of data that belongs to devices deleted BEFORE
+		* tombstones existed (D865). Asks every `device-removal-hook` implementer
+		* which device ids it holds data for, keeps those absent from the device
+		* list — confirmed by TWO reads of the list, skipped if either fails — and
+		* with `confirm: false` only reports the counts per store. `confirm: true`
+		* deletes. Never runs on its own.
+		*/
+		cleanupDeletedDevicesData: require_sleep.method(zod.z.object({ confirm: zod.z.boolean() }), CleanupDeletedDevicesResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
 		/** Cascade-delete every top-level device whose `integrationId` matches.
 		*  Children cascade automatically via the per-parent remove path.
 		*  Idempotent: a device whose `integrationId` was never set never matches.
@@ -37997,6 +38066,87 @@ var embeddingEncoderCapability = {
 	}
 };
 //#endregion
+//#region src/capabilities/device-removal-hook.cap.ts
+/**
+* `device-removal-hook` — the reliable way an addon learns a device was DELETED,
+* so it can delete what it keeps for that device (D865).
+*
+* ## Why an event was not enough
+*
+* `DeviceUnregistered` is telemetry and may be dropped (D8, D11). An addon that
+* hung its per-device clean-up on it left durable garbage whenever the event was
+* lost, the addon was down, or it was restarting at that moment — footage,
+* analytics rows and settings of device 4483 outlived the device. Loss of this
+* signal corrupts durable state, so it travels by RPC with a recorded fact
+* behind it (D8: "if loss would corrupt durable state, use RPC plus a reconcile").
+*
+* ## The three pieces
+*
+* 1. device-manager records a TOMBSTONE per deleted device
+*    (`deviceManager.listDeletedSince`). The tombstone is written by the delete
+*    path only — a device that is unregistered, offline or whose provider is
+*    restarting is NOT deleted and gets none.
+* 2. After a delete, device-manager calls `onDeviceRemoved` on EVERY provider of
+*    this collection, one by one, with bounded retries, logged.
+* 3. An implementer that was down asks `deviceManager.listDeletedSince` at start
+*    (and periodically) and runs its own `onDeviceRemoved` for each tombstone it
+*    may have missed. Reconcile is driven by tombstones, never by "the device is
+*    not in the current list": a failed or partial list read must not destroy data.
+*
+* ## Contract for an implementer
+*
+* - **Idempotent.** It is called again by a retry, by a reconcile and by the
+*   admin cleanup of data that predates tombstones. A device with nothing left
+*   answers zero counts.
+* - **One key per store** in `counts`, deleted rows/files per store, so the log
+*   line and the admin dry run can say where the data was.
+* - **Training datasets are NOT device data** and are never deleted by a hook.
+* - **Per-device SETTINGS are not hooked.** Configuration lives in the standard
+*   per-device store (`ctx.settings.*DeviceStore`), which device-manager clears
+*   for every addon centrally at delete time. This hook is for device DATA
+*   that is not settings: footage, event media, analytics rows, history.
+* - A provider that cannot tell is allowed to throw; the caller retries it.
+*
+* `listDeviceData` is the read side of the admin "Clean data of deleted devices"
+* action: which device ids this addon holds data for, and how much per store. It
+* never deletes. device-manager decides which of those ids are absent from the
+* fleet, from TWO consistent reads of the device list (D49).
+*/
+/** What a hook is told about the deletion. */
+var DeviceRemovedInputSchema = zod.z.object({
+	deviceId: zod.z.number().int().positive(),
+	/** Epoch ms the device was deleted (the tombstone's `deletedAt`). */
+	deletedAt: zod.z.number(),
+	/** The addon that owned the device, as device-manager last knew it. */
+	providerAddonId: zod.z.string()
+});
+/** Rows/files/refs deleted, per store this implementer owns. */
+var DeviceRemovedResultSchema = zod.z.object({ counts: zod.z.record(zod.z.string(), zod.z.number().int().nonnegative()) });
+/** One (store, device) pair an implementer holds data for. */
+var DeviceDataEntrySchema = zod.z.object({
+	store: zod.z.string(),
+	deviceId: zod.z.number().int().positive(),
+	/** Rows (or files) held for the device in the store. */
+	count: zod.z.number().int().nonnegative()
+});
+var deviceRemovalHookCapability = {
+	name: "device-removal-hook",
+	scope: "system",
+	mode: "collection",
+	internal: true,
+	methods: {
+		/** Delete everything this addon keeps for the deleted device. Idempotent. */
+		onDeviceRemoved: require_sleep.method(DeviceRemovedInputSchema, DeviceRemovedResultSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Which devices this addon holds data for, per store. Reads only. */
+		listDeviceData: require_sleep.method(zod.z.void(), zod.z.array(DeviceDataEntrySchema).readonly(), { auth: "admin" })
+	},
+	/** In-process only — enumerated through `addons.listCapabilityProviders`. */
+	mount: { kind: "skip" }
+};
+//#endregion
 //#region src/capabilities/failure-contribution.cap.ts
 /**
 * `failure-contribution` — the capability an addon reports its OWN losses
@@ -70244,10 +70394,20 @@ var ServerNameInfoSchema = zod.z.object({
 	/** `true` when nobody named the hub: `name` is the machine hostname. */
 	isDefault: zod.z.boolean()
 });
-/** The hostname without its domain (`nas.lan.example` becomes `nas`). */
+/** What an unset name shows when the hostname says nothing about the hub. */
+var SERVER_NAME_FALLBACK = "CamStack";
+/** A container id: Docker's default hostname (12 hex chars, or the full 64). */
+var CONTAINER_ID_PATTERN = /^(?:[0-9a-f]{12}|[0-9a-f]{64})$/;
+/**
+* The hostname without its domain (`nas.lan.example` becomes `nas`). A hostname
+* that names nothing (empty, `localhost`, a container id) yields
+* {@link SERVER_NAME_FALLBACK}.
+*/
 function shortHostname(hostname) {
 	const first = hostname.trim().split(".")[0] ?? "";
-	return first.length > 0 ? first : "hub";
+	if (first.length === 0 || first.toLowerCase() === "localhost") return SERVER_NAME_FALLBACK;
+	if (CONTAINER_ID_PATTERN.test(first)) return SERVER_NAME_FALLBACK;
+	return first;
 }
 /**
 * Resolve a stored value (whatever the row held, `undefined` when unset) and the
@@ -78125,6 +78285,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"deviceManager.cleanupDeletedDevicesData": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceManager.createDevice": {
 		capName: "device-manager",
 		capScope: "system",
@@ -78305,6 +78471,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"deviceManager.listDeletedSince": {
+		capName: "device-manager",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"deviceManager.listDeviceIdsByCaps": {
 		capName: "device-manager",
 		capScope: "system",
@@ -78713,6 +78885,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"deviceRemovalHook.listDeviceData": {
+		capName: "device-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
+	"deviceRemovalHook.onDeviceRemoved": {
+		capName: "device-removal-hook",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"deviceState.claimFields": {
 		capName: "device-state",
 		capScope: "system",
@@ -79145,6 +79329,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
+	"keychain.deleteDeviceScope": {
+		capName: "keychain",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"keychain.getState": {
 		capName: "keychain",
 		capScope: "system",
@@ -84438,6 +84628,7 @@ var KNOWN_CAP_NAMES = [
 	"device-manager",
 	"device-ops",
 	"device-provider",
+	"device-removal-hook",
 	"device-state",
 	"device-status",
 	"doorbell",
@@ -84676,6 +84867,7 @@ var SYSTEM_CAP_NAMES = [
 	"device-history",
 	"device-manager",
 	"device-provider",
+	"device-removal-hook",
 	"device-state",
 	"embedding-encoder",
 	"face-gallery",
@@ -85484,7 +85676,7 @@ function resolveDeviceProfile(features) {
 //#endregion
 //#region src/device/path-util.ts
 /** Returns true when `x` is a non-null, non-array plain object. */
-function isRecord(x) {
+function isRecord$1(x) {
 	return x !== null && typeof x === "object" && !Array.isArray(x);
 }
 /** Read a dot-path (`a.b.c`) out of an object. Returns `undefined` for any
@@ -85493,7 +85685,7 @@ function getByPath(obj, path) {
 	const parts = path.split(".");
 	let cur = obj;
 	for (const part of parts) {
-		if (!isRecord(cur)) return void 0;
+		if (!isRecord$1(cur)) return void 0;
 		cur = cur[part];
 	}
 	return cur;
@@ -85515,7 +85707,7 @@ function setByPath(obj, path, value) {
 	const head = path.slice(0, dotIndex);
 	const tail = path.slice(dotIndex + 1);
 	const child = obj[head];
-	const childObj = isRecord(child) ? child : {};
+	const childObj = isRecord$1(child) ? child : {};
 	return {
 		...obj,
 		[head]: setByPath(childObj, tail, value)
@@ -86708,6 +86900,7 @@ var CAPABILITY_NAMES = {
 	deviceManager: "device-manager",
 	deviceOps: "device-ops",
 	deviceProvider: "device-provider",
+	deviceRemovalHook: "device-removal-hook",
 	deviceState: "device-state",
 	deviceStatus: "device-status",
 	doorbell: "doorbell",
@@ -87058,6 +87251,10 @@ var CAPABILITY_ROUTER_KEYS = [
 		key: "deviceProvider",
 		name: "device-provider"
 	},
+	{
+		key: "deviceRemovalHook",
+		name: "device-removal-hook"
+	},
 	{
 		key: "deviceState",
 		name: "device-state"
@@ -87587,6 +87784,7 @@ var ALL_CAPABILITY_DEFINITIONS = [
 	deviceManagerCapability,
 	require_sleep.deviceOpsCapability,
 	deviceProviderCapability,
+	deviceRemovalHookCapability,
 	deviceStateCapability,
 	deviceStatusCapability,
 	doorbellCapability,
@@ -88482,6 +88680,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"deviceRemovalHook.onDeviceRemoved": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"deviceState.claimFields": [{
 		name: "deviceId",
 		form: "single",
@@ -88671,6 +88874,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"keychain.deleteDeviceScope": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"lawnMowerControl.dock": [{
 		name: "deviceId",
 		form: "single",
@@ -90425,6 +90633,7 @@ var SYSTEM_SCOPE_DEVICE_METHODS = [
 	"deviceManager.updateConfig",
 	"deviceManager.updateDeviceField",
 	"deviceManager.updateDeviceFieldsBatch",
+	"deviceRemovalHook.onDeviceRemoved",
 	"deviceState.claimFields",
 	"deviceState.getCapSlice",
 	"deviceState.getNativeCapSlice",
@@ -90434,6 +90643,7 @@ var SYSTEM_SCOPE_DEVICE_METHODS = [
 	"deviceState.setCapSlice",
 	"faceGallery.getFaceByTrack",
 	"faceGallery.listRecentFaces",
+	"keychain.deleteDeviceScope",
 	"networkQuality.getDeviceStats",
 	"networkQuality.reportClientStats",
 	"notificationRules.getAlarmSensors",
@@ -91633,6 +91843,8 @@ function createSystemProxy(api) {
 			getChildren: (input) => dispatch("deviceManager", "getChildren", "query", input),
 			getChildrenBatch: (input) => dispatch("deviceManager", "getChildrenBatch", "query", input),
 			getLinkedDevicesBatch: (input) => dispatch("deviceManager", "getLinkedDevicesBatch", "query", input),
+			listDeletedSince: (input) => dispatch("deviceManager", "listDeletedSince", "query", input),
+			cleanupDeletedDevicesData: (input) => dispatch("deviceManager", "cleanupDeletedDevicesData", "mutation", input),
 			removeByIntegration: (input) => dispatch("deviceManager", "removeByIntegration", "mutation", input),
 			getBindingsBatch: (input) => dispatch("deviceManager", "getBindingsBatch", "query", input),
 			getAllBindings: (input) => dispatch("deviceManager", "getAllBindings", "query", input),
@@ -96537,6 +96749,91 @@ function eventKindLabel(kind, locale) {
 	return isEventKindLabelKey(key) ? EVENT_KIND_LABELS[key][locale] : kind;
 }
 //#endregion
+//#region src/i18n/translation.ts
+/**
+* Server-side translation primitives (D863) - pure, zod only.
+*
+* A catalog is a FLAT `Record<key, string>` per (namespace, language). A
+* reference is `"<namespace>:<key>"`; the English text always travels next to
+* it (`label` beside `labelKey`), so a missing key or an unknown language is
+* the English text, never a blank or a raw key.
+*/
+/** The languages a catalog may be written in. English is the mandatory base. */
+var CatalogLangSchema = AppPageLangSchema;
+var CATALOG_LANGS = CatalogLangSchema.options;
+var DEFAULT_CATALOG_LANG = "en";
+/** One catalog file: flat key to text. A file of any other shape is rejected whole. */
+var CatalogFileSchema = zod.z.record(zod.z.string().min(1), zod.z.string());
+/** Fills `{name}` placeholders; an unknown placeholder is left as written. */
+function interpolate(template, params) {
+	if (params === void 0) return template;
+	return template.replace(/\{(\w+)\}/g, (whole, name) => {
+		const value = params[name];
+		return value === void 0 ? whole : String(value);
+	});
+}
+/** Splits `"ns:key"`; `null` when the reference has no namespace. */
+function splitTranslationRef(ref) {
+	const at = ref.indexOf(":");
+	if (at <= 0 || at === ref.length - 1) return null;
+	return {
+		ns: ref.slice(0, at),
+		key: ref.slice(at + 1)
+	};
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var KEYED_TEXTS = [
+	{
+		keyField: "labelKey",
+		textField: "label"
+	},
+	{
+		keyField: "descriptionKey",
+		textField: "description"
+	},
+	{
+		keyField: "titleKey",
+		textField: "title"
+	}
+];
+/**
+* Returns `value` with every `labelKey` / `descriptionKey` / `titleKey` that
+* the catalog can resolve replaced into `label` / `description` / `title`.
+* Pure: the input is never mutated; a subtree with nothing to change is
+* returned as the SAME object. A key the catalog does not hold keeps the
+* English text that sits next to it.
+*/
+function localizeConfigTree(value, lookup) {
+	if (Array.isArray(value)) {
+		let changed = false;
+		const next = value.map((item) => {
+			const out = localizeConfigTree(item, lookup);
+			if (out !== item) changed = true;
+			return out;
+		});
+		return changed ? next : value;
+	}
+	if (!isRecord(value)) return value;
+	const patch = {};
+	for (const [k, v] of Object.entries(value)) {
+		const out = localizeConfigTree(v, lookup);
+		if (out !== v) patch[k] = out;
+	}
+	for (const { keyField, textField } of KEYED_TEXTS) {
+		const ref = value[keyField];
+		if (typeof ref !== "string") continue;
+		const parts = splitTranslationRef(ref);
+		const text = parts === null ? void 0 : lookup(parts.ns, parts.key);
+		if (text !== void 0) patch[textField] = text;
+	}
+	return Object.keys(patch).length === 0 ? value : {
+		...value,
+		...patch
+	};
+}
+//#endregion
 //#region src/notification/timelapse-rule.ts
 /**
 * TimelapseRule — the STANDALONE scheduled timelapse producer's rule model.
@@ -98809,6 +99106,48 @@ function slideInsideFrame(rect, frameWidth, frameHeight) {
 	};
 }
 //#endregion
+//#region src/pipeline/face-rescore-schedule.ts
+/**
+* The cadence of the automatic whole-archive face rescore (D866).
+*
+* One cluster-wide knob in `pipeline-orchestrator`'s GLOBAL settings, read by
+* `pipeline-analytics` over the hub-routed `addon-settings` cap on every tick.
+* It lives here for the same reason the detail-crop convention does: the
+* writer (orchestrator) and the reader (analytics) are different addons, they
+* never import each other, and a key copied by hand is how a setting silently
+* stops arriving.
+*/
+var FACE_RESCORE_SECTION_ID = "face-rescore";
+var FACE_RESCORE_INTERVAL_KEY = "faceRescoreIntervalMinutes";
+/** Slider bounds. `0` is "disabled"; anything in 1..9 is raised to `min`. */
+var FACE_RESCORE_INTERVAL_FIELD = {
+	min: 0,
+	max: 1440,
+	step: 5,
+	default: 60
+};
+/** The smallest period that actually runs; below it (but above 0) is clamped up. */
+var FACE_RESCORE_INTERVAL_MIN_RUNNING = 10;
+/**
+* Narrow a stored value to minutes. `0` ⇒ disabled; a positive value under
+* {@link FACE_RESCORE_INTERVAL_MIN_RUNNING} is raised to it; junk or absent ⇒
+* the default (an unreadable setting must not switch the job off nor storm it).
+*/
+function readFaceRescoreIntervalMinutes(value) {
+	if (typeof value !== "number" || !Number.isFinite(value) || value < 0) return FACE_RESCORE_INTERVAL_FIELD.default;
+	if (value === 0) return 0;
+	return Math.min(FACE_RESCORE_INTERVAL_FIELD.max, Math.max(10, Math.floor(value)));
+}
+/** The interval out of a hydrated payload; a `null` view (mid-boot) is the default. */
+function pickFaceRescoreIntervalMinutes(view) {
+	if (view === null) return FACE_RESCORE_INTERVAL_FIELD.default;
+	for (const section of view.sections) for (const entry of section.fields) {
+		if (typeof entry !== "object" || entry === null || !("key" in entry)) continue;
+		if (entry.key === "faceRescoreIntervalMinutes") return readFaceRescoreIntervalMinutes("value" in entry ? entry.value : void 0);
+	}
+	return FACE_RESCORE_INTERVAL_FIELD.default;
+}
+//#endregion
 //#region src/pipeline/native-lease.ts
 /**
 * THE native-frame **lease** knobs — hold depth, RAM budget, demand window and
@@ -100644,6 +100983,78 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
+//#region src/device/device-removal-reconcile.ts
+/** How often an implementer re-asks for tombstones after its start-up pass. */
+var REMOVAL_RECONCILE_INTERVAL_MS = 360 * 60 * 1e3;
+/** One reconcile pass over every tombstone inside the retention window. */
+async function reconcileRemovedDevices(opts) {
+	const now = opts.now ?? (() => Date.now());
+	const api = opts.api;
+	if (api === void 0) {
+		opts.logger.warn("device removal reconcile skipped — no device-manager api");
+		return {
+			read: false,
+			applied: 0,
+			failed: 0
+		};
+	}
+	let tombstones;
+	try {
+		tombstones = await api.deviceManager.listDeletedSince.query({ sinceMs: now() - DEVICE_TOMBSTONE_RETENTION_MS });
+	} catch (err) {
+		opts.logger.warn("device removal reconcile skipped — tombstones unreadable, nothing deleted", { meta: { error: require_err_msg.errMsg(err) } });
+		return {
+			read: false,
+			applied: 0,
+			failed: 0
+		};
+	}
+	let applied = 0;
+	let failed = 0;
+	for (const tombstone of tombstones) try {
+		const result = await opts.remove(tombstone);
+		applied += 1;
+		if (Object.values(result.counts).reduce((sum, n) => sum + n, 0) > 0) opts.logger.info("device removal reconcile cleaned a missed deletion", {
+			tags: { deviceId: tombstone.deviceId },
+			meta: {
+				counts: result.counts,
+				deletedAt: tombstone.deletedAt
+			}
+		});
+	} catch (err) {
+		failed += 1;
+		opts.logger.warn("device removal reconcile failed for a device — retried next pass", {
+			tags: { deviceId: tombstone.deviceId },
+			meta: { error: require_err_msg.errMsg(err) }
+		});
+	}
+	return {
+		read: true,
+		applied,
+		failed
+	};
+}
+/**
+* Run the reconcile now and then periodically. Returns the disposer. The timer
+* is unref'd and a pass never overlaps the previous one.
+*/
+function armRemovalReconcile(opts) {
+	let running = false;
+	const pass = () => {
+		if (running) return;
+		running = true;
+		reconcileRemovedDevices(opts).catch((err) => {
+			opts.logger.warn("device removal reconcile pass crashed", { meta: { error: require_err_msg.errMsg(err) } });
+		}).finally(() => {
+			running = false;
+		});
+	};
+	pass();
+	const timer = setInterval(pass, REMOVAL_RECONCILE_INTERVAL_MS);
+	timer.unref?.();
+	return () => clearInterval(timer);
+}
+//#endregion
 exports.ACCESSORY_LABEL = ACCESSORY_LABEL;
 exports.ACCESS_ROLES = ACCESS_ROLES;
 exports.AGENT_MDNS_QUERY_NAME = AGENT_MDNS_QUERY_NAME;
@@ -100823,6 +101234,7 @@ exports.CAPABILITY_ROUTER_KEYS = CAPABILITY_ROUTER_KEYS;
 exports.CAP_NAMES_WITH_STATUS = CAP_NAMES_WITH_STATUS;
 exports.CAP_NODE_PIN_CONTEXT_KEY = require_sleep.CAP_NODE_PIN_CONTEXT_KEY;
 exports.CAP_PROVIDER_KIND_MAP = CAP_PROVIDER_KIND_MAP;
+exports.CATALOG_LANGS = CATALOG_LANGS;
 exports.CLASS_MAP_MACRO_TARGETS = CLASS_MAP_MACRO_TARGETS;
 exports.CLIP_BROKER_PACED_RATES = CLIP_BROKER_PACED_RATES;
 exports.CLIP_PLAYBACK_OPTIONS = CLIP_PLAYBACK_OPTIONS;
@@ -100911,15 +101323,19 @@ exports.CameraSwitchIdSchema = CameraSwitchIdSchema;
 exports.CameraSwitchSchema = CameraSwitchSchema;
 exports.CameraSwitchUnavailableReasonSchema = CameraSwitchUnavailableReasonSchema;
 exports.CameraSwitchWarningSchema = CameraSwitchWarningSchema;
+exports.CamstackError = require_sleep.CamstackError;
 exports.CandidateQueryFilterSchema = CandidateQueryFilterSchema;
 exports.CapScopeSchema = CapScopeSchema;
 exports.CapabilityBindingsSchema = CapabilityBindingsSchema;
 exports.CapacityFallbackSchema = CapacityFallbackSchema;
 exports.CapacitySourceSchema = CapacitySourceSchema;
 exports.CarbonMonoxideStatusSchema = CarbonMonoxideStatusSchema;
+exports.CatalogFileSchema = CatalogFileSchema;
+exports.CatalogLangSchema = CatalogLangSchema;
 exports.ChargingStatus = require_err_msg.ChargingStatus;
 exports.ClaimOutcomeSchema = ClaimOutcomeSchema;
 exports.ClaimsListingSchema = ClaimsListingSchema;
+exports.CleanupDeletedDevicesResultSchema = CleanupDeletedDevicesResultSchema;
 exports.ClearTrackRelationInputSchema = ClearTrackRelationInputSchema;
 exports.ClearTrackRelationResultSchema = ClearTrackRelationResultSchema;
 exports.ClientNetworkStatsSchema = ClientNetworkStatsSchema;
@@ -101044,6 +101460,7 @@ exports.DEFAULT_ADDON_PLACEMENT = DEFAULT_ADDON_PLACEMENT;
 exports.DEFAULT_AUDIO_ANALYZER_CONFIG = DEFAULT_AUDIO_ANALYZER_CONFIG;
 exports.DEFAULT_CAMERA_FPS = DEFAULT_CAMERA_FPS;
 exports.DEFAULT_CAMERA_SENSOR_MODE = DEFAULT_CAMERA_SENSOR_MODE;
+exports.DEFAULT_CATALOG_LANG = DEFAULT_CATALOG_LANG;
 exports.DEFAULT_CLUSTER_STEP_MODELS = DEFAULT_CLUSTER_STEP_MODELS;
 exports.DEFAULT_CLUSTER_STEP_SETTINGS = DEFAULT_CLUSTER_STEP_SETTINGS;
 exports.DEFAULT_CORE_BLOCK_ENTRY = DEFAULT_CORE_BLOCK_ENTRY;
@@ -101098,6 +101515,7 @@ exports.DEVICE_SETTINGS_CONTRIBUTION_METHODS = require_sleep.DEVICE_SETTINGS_CON
 exports.DEVICE_SIGNATURE_MESSAGE_VERSION = DEVICE_SIGNATURE_MESSAGE_VERSION;
 exports.DEVICE_STATE_READERS = DEVICE_STATE_READERS;
 exports.DEVICE_STATUS_METHOD = require_sleep.DEVICE_STATUS_METHOD;
+exports.DEVICE_TOMBSTONE_RETENTION_MS = DEVICE_TOMBSTONE_RETENTION_MS;
 exports.DEVICE_TYPE_CONTROL_KIND = DEVICE_TYPE_CONTROL_KIND;
 exports.DEVICE_TYPE_DO_CAPS = DEVICE_TYPE_DO_CAPS;
 exports.DEVICE_TYPE_INFO = DEVICE_TYPE_INFO;
@@ -101132,6 +101550,7 @@ exports.DeviceCodeSeveritySchema = DeviceCodeSeveritySchema;
 exports.DeviceConfig = DeviceConfig;
 exports.DeviceCredentialSchema = DeviceCredentialSchema;
 exports.DeviceCredentialStatusSchema = DeviceCredentialStatusSchema;
+exports.DeviceDataEntrySchema = DeviceDataEntrySchema;
 exports.DeviceDiscoveryStatusSchema = DeviceDiscoveryStatusSchema;
 exports.DeviceEnrollProofSchema = DeviceEnrollProofSchema;
 exports.DeviceExportExposeInputSchema = ExposeInputSchema;
@@ -101151,12 +101570,15 @@ exports.DeviceProofInputSchema = DeviceProofInputSchema;
 exports.DeviceRecommendationSchema = DeviceRecommendationSchema;
 exports.DeviceRefusalReasonSchema = DeviceRefusalReasonSchema;
 exports.DeviceRefusalSchema = DeviceRefusalSchema;
+exports.DeviceRemovedInputSchema = DeviceRemovedInputSchema;
+exports.DeviceRemovedResultSchema = DeviceRemovedResultSchema;
 exports.DeviceRestoreRetryScheduler = DeviceRestoreRetryScheduler;
 exports.DeviceRole = require_err_msg.DeviceRole;
 exports.DeviceRuntimeState = DeviceRuntimeState;
 exports.DeviceSelectorSchema = DeviceSelectorSchema;
 exports.DeviceSignaturePurposeSchema = DeviceSignaturePurposeSchema;
 exports.DeviceStatusSchema = DeviceStatusSchema;
+exports.DeviceTombstoneSchema = DeviceTombstoneSchema;
 exports.DeviceType = require_err_msg.DeviceType;
 exports.DiagnosticIdSchema = DiagnosticIdSchema;
 exports.DiagnosticWindowPatchSchema = DiagnosticWindowPatchSchema;
@@ -101211,6 +101633,8 @@ exports.EnrichedWidgetMetadataSchema = EnrichedWidgetMetadataSchema;
 exports.EnrollSelfInputSchema = EnrollSelfInputSchema;
 exports.EnumSensorDateTimeFormatSchema = EnumSensorDateTimeFormatSchema;
 exports.EnumSensorStatusSchema = EnumSensorStatusSchema;
+exports.ErrorCodeSchema = require_sleep.ErrorCodeSchema;
+exports.ErrorI18nPayloadSchema = require_sleep.ErrorI18nPayloadSchema;
 exports.EventCategory = require_event_category.EventCategory;
 exports.EventDensityBucketSchema = EventDensityBucketSchema;
 exports.EventDensityForDeviceSchema = EventDensityForDeviceSchema;
@@ -101267,6 +101691,10 @@ exports.ExtensionSourceHealthSchema = ExtensionSourceHealthSchema;
 exports.ExtensionSourceSchema = ExtensionSourceSchema;
 exports.ExternalIdentityKeySchema = ExternalIdentityKeySchema;
 exports.ExternalIdentitySchema = ExternalIdentitySchema;
+exports.FACE_RESCORE_INTERVAL_FIELD = FACE_RESCORE_INTERVAL_FIELD;
+exports.FACE_RESCORE_INTERVAL_KEY = FACE_RESCORE_INTERVAL_KEY;
+exports.FACE_RESCORE_INTERVAL_MIN_RUNNING = FACE_RESCORE_INTERVAL_MIN_RUNNING;
+exports.FACE_RESCORE_SECTION_ID = FACE_RESCORE_SECTION_ID;
 exports.FEEDER_EXAMPLE_ADDON_ID = FEEDER_EXAMPLE_ADDON_ID;
 exports.FEEDER_EXAMPLE_HA_DEVICE_ID = FEEDER_EXAMPLE_HA_DEVICE_ID;
 exports.FFMPEG_PATH_ENV = require_composition.FFMPEG_PATH_ENV;
@@ -101843,6 +102271,7 @@ exports.OpsLogOpSchema = OpsLogOpSchema;
 exports.OpsLogQueryInputSchema = OpsLogQueryInputSchema;
 exports.OpsLogReasonSchema = OpsLogReasonSchema;
 exports.OrchestratorMetricsSchema = OrchestratorMetricsSchema;
+exports.OrphanDeviceDataSchema = OrphanDeviceDataSchema;
 exports.OsdNamedTemplateSchema = OsdNamedTemplateSchema;
 exports.OsdOverlayKindEnum = OsdOverlayKindEnum;
 exports.OsdOverlayPatchSchema = OsdOverlayPatchSchema;
@@ -101950,6 +102379,7 @@ exports.RECORDING_SOURCE_CAMSTACK = RECORDING_SOURCE_CAMSTACK;
 exports.RECORDING_SOURCE_CAMSTACK_ADDON = RECORDING_SOURCE_CAMSTACK_ADDON;
 exports.RECORDING_TIMELINE_BATCH_MAX = RECORDING_TIMELINE_BATCH_MAX;
 exports.REDACTED_SECRET = require_sleep.REDACTED_SECRET;
+exports.REMOVAL_RECONCILE_INTERVAL_MS = REMOVAL_RECONCILE_INTERVAL_MS;
 exports.REMOVED_MODEL_IDS = REMOVED_MODEL_IDS;
 exports.RESERVED_BINDING_NAMES = require_composition.RESERVED_BINDING_NAMES;
 exports.RESERVED_COLLECTION_SOURCES = RESERVED_COLLECTION_SOURCES;
@@ -102458,6 +102888,7 @@ exports.applyModeDeviceListEdit = applyModeDeviceListEdit;
 exports.applyModelBoundSettings = applyModelBoundSettings;
 exports.applyNonBlockingEdit = applyNonBlockingEdit;
 exports.applySecureOnArmEdit = applySecureOnArmEdit;
+exports.armRemovalReconcile = armRemovalReconcile;
 exports.arrayItemFieldPath = require_sleep.arrayItemFieldPath;
 exports.asBoolean = require_sleep.asBoolean;
 exports.asJsonArray = require_sleep.asJsonArray;
@@ -102663,6 +103094,7 @@ exports.deviceMatchesProfile = deviceMatchesProfile;
 exports.deviceOpsCapability = require_sleep.deviceOpsCapability;
 exports.deviceProviderCapability = deviceProviderCapability;
 exports.deviceRefusalFromMessage = deviceRefusalFromMessage;
+exports.deviceRemovalHookCapability = deviceRemovalHookCapability;
 exports.deviceSelectorMatches = deviceSelectorMatches;
 exports.deviceStateCapability = deviceStateCapability;
 exports.deviceStatusCapability = deviceStatusCapability;
@@ -102781,6 +103213,7 @@ exports.inferModelProvider = inferModelProvider;
 exports.initialPoolMemoryState = initialPoolMemoryState;
 exports.integrationsCapability = integrationsCapability;
 exports.intercomCapability = intercomCapability;
+exports.interpolate = interpolate;
 exports.interpretStoredClusterModel = interpretStoredClusterModel;
 exports.invalidClusterStepModelEntries = invalidClusterStepModelEntries;
 exports.invertPresetFeature = invertPresetFeature;
@@ -102873,6 +103306,7 @@ exports.llmCapability = llmCapability;
 exports.llmRuntimeCapability = llmRuntimeCapability;
 exports.loadContributionCapability = loadContributionCapability;
 exports.localNetworkCapability = localNetworkCapability;
+exports.localizeConfigTree = localizeConfigTree;
 exports.locationIconKey = locationIconKey;
 exports.locationSimilarity = locationSimilarity;
 exports.lockControlCapability = lockControlCapability;
@@ -102980,6 +103414,7 @@ exports.pickAppLinkHub = pickAppLinkHub;
 exports.pickClusterStepModels = pickClusterStepModels;
 exports.pickClusterStepSettings = pickClusterStepSettings;
 exports.pickDetailCropConvention = pickDetailCropConvention;
+exports.pickFaceRescoreIntervalMinutes = pickFaceRescoreIntervalMinutes;
 exports.pickInvalidClusterStepModels = pickInvalidClusterStepModels;
 exports.pickNativeLeaseOverride = pickNativeLeaseOverride;
 exports.pickPreferredRtspEntry = pickPreferredRtspEntry;
@@ -103016,6 +103451,8 @@ exports.readClusterStepModels = readClusterStepModels;
 exports.readClusterStepSettings = readClusterStepSettings;
 exports.readDetailCropConvention = readDetailCropConvention;
 exports.readDeviceStateFrom = readDeviceStateFrom;
+exports.readErrorI18n = require_sleep.readErrorI18n;
+exports.readFaceRescoreIntervalMinutes = readFaceRescoreIntervalMinutes;
 exports.readHubMotionDetected = readHubMotionDetected;
 exports.readHubMotionStatus = readHubMotionStatus;
 exports.readMotionTriggeredBy = readMotionTriggeredBy;
@@ -103027,6 +103464,7 @@ exports.readinessKey = require_sleep.readinessKey;
 exports.rebootCapability = rebootCapability;
 exports.recommendNode = recommendNode;
 exports.reconcileBlockDevices = reconcileBlockDevices;
+exports.reconcileRemovedDevices = reconcileRemovedDevices;
 exports.recordingArchiveCapability = recordingArchiveCapability;
 exports.recordingCapability = recordingCapability;
 exports.recordingExportCapability = recordingExportCapability;
@@ -103146,6 +103584,7 @@ exports.sliceChangedAt = require_composition.sliceChangedAt;
 exports.smokeCapability = smokeCapability;
 exports.smtpProviderCapability = smtpProviderCapability;
 exports.snapshotCapability = snapshotCapability;
+exports.splitTranslationRef = splitTranslationRef;
 exports.ssoBridgeCapability = ssoBridgeCapability;
 exports.startReachabilityPoll = startReachabilityPoll;
 exports.stateLabel = stateLabel;
@@ -103221,6 +103660,7 @@ exports.unitsForDimension = unitsForDimension;
 exports.unreachableExtensionSlotRow = unreachableExtensionSlotRow;
 exports.unwrapSchema = unwrapSchema;
 exports.updateCapability = updateCapability;
+exports.userError = require_sleep.userError;
 exports.userManagementCapability = userManagementCapability;
 exports.userPasskeysCapability = userPasskeysCapability;
 exports.vacuumControlCapability = vacuumControlCapability;