@mega-yfue/eufy-sdk 0.6.0-beta.1 → 0.6.0-beta.10

package/dist/index.js

@@ -3681,7 +3681,8 @@ var isIndoorPanTiltS350 = (ctx) => has(INDOOR_PT_S350_TYPES, ctx.deviceType);
 var isHomeBase = (ctx) => has(HOMEBASE_TYPES, ctx.deviceType);
 var isStation9000 = (ctx) => ctx.deviceType === DeviceType.STATION_9000;
 var isNvrT8N00 = (ctx) => ctx.model === "T8N00";
-var isNvrMediaCamera = (ctx) => ctx.model === "T8E00" || ctx.model === "T8P00";
+var NVR_MEDIA_CAMERA_MODELS = /* @__PURE__ */ new Set(["T8E00", "T8P00", "T8P10", "T8162", "T8410", "T8214"]);
+var isNvrMediaCamera = (ctx) => ctx.model !== void 0 && NVR_MEDIA_CAMERA_MODELS.has(ctx.model);
 var isNvrDualLensCamera = (ctx) => ctx.model === "T8E00";
 var isCallDoorbell = (ctx) => ctx.model === "T8223" || ctx.model === "T8224";
 var isAiotVacuum = (ctx) => ctx.category !== "eufy_home_tuya";
@@ -4711,7 +4712,7 @@ function decodePowerSource(raw) {
 function recordSetting(param, value, ctx) {
   return setStationScalar(param, value, ctx.channel);
 }
-var MAINS_CAMERA_MODELS = ["T8425", "T8419", "T8410", "T84A1", "T8423", "T8E00", "T8P00"];
+var MAINS_CAMERA_MODELS = ["T8425", "T8419", "T8410", "T84A1", "T8423", "T8E00", "T8P00", "T8P10"];
 function cameraPowerTier(model, capabilities) {
   return capabilities.has("battery") && notMainsCamera({ model }) ? "battery" : "wired";
 }
@@ -5333,2084 +5334,2086 @@ var AUDIO = {
   }
 };
 
-// dist/model/capabilities/camera.js
-var CAMERA_CMD = {
-  /** Camera-reported Wi-Fi signal (app `CMD_GET_WIFI_RSSI`). */
-  WIFI_RSSI: 1142,
-  /** Camera on/off. Read and write polarity depend on the family and topology. */
-  CAMERA_ENABLE: 1035,
-  /** Wrapped T8410 power switch on HomeBase 3. */
-  PRIVACY_MODE: 6250,
+// dist/model/capabilities/doorbell.js
+import { setTimeout as sleep } from "node:timers/promises";
+var DOORBELL_MODELS = /* @__PURE__ */ new Set([
+  "T820",
+  "T8200",
+  "T8201",
+  "T8202",
+  "T8203",
+  "T8210",
+  "T8212",
+  "T8213",
+  "T8214",
+  "T8220",
+  "T8221",
+  "T8222"
+]);
+var DOORBELL_TYPES = [
+  DeviceType.DOORBELL,
+  DeviceType.BATTERY_DOORBELL,
+  DeviceType.BATTERY_DOORBELL_2,
+  DeviceType.BATTERY_DOORBELL_PLUS,
+  DeviceType.DOORBELL_SOLO,
+  DeviceType.BATTERY_DOORBELL_PLUS_E340
+];
+var DOORBELL_CMD = {
   /**
-   * Camera status LED on/off — the "power/recording" indicator. The
-   * app JS has a sibling param `1056` (`APP_CMD_LIVEVIEW_LED_SWITCH`) for the SAME UI "Status Light"
-   * setting on some other model/generation — confirmed real (a full parser class exists) but tested
-   * live with no effect on a T8425 (which uses 1045, shipped here); which model actually uses 1056
-   * is unconfirmed. Don't wire 1056 as an alias of this without per-model evidence.
+   * Doorbell "quick response" — make the doorbell PLAY a stored voice reply. Same 136-byte
+   * direct-binary shape as the camera setters: `value` = the `voice_id` to play. Reversed from a
+   * live capture (outer-cmd 1706, signCode 8, on the doorbell's `device_channel`) + the app's
+   * `PlayQuickResponseParser` (`{cmd:1706,voice_id}`).
    */
-  DEV_LED_SWITCH: 1045,
+  QUICK_RESPONSE: 1706,
   /**
-   * Rotate the image 180° on/off. Direct param, value 0 = normal, 1 = flipped. The app's constant is
-   * `INDOOR_ROTATE_IMAGE`, but it is NOT indoor-only — ✅ verified live on an OUTDOOR floodlight cam
-   * (T8425), so we drop the misleading "indoor". App parser: `{cmd:1207, params:{enable:0|1}}`.
+   * Mechanical (wired) chime enable/disable — whether the doorbell drives an existing wired chime box,
+   * the app's "existing doorbell chime" (as opposed to / in addition to the HomeBase acting as the chime,
+   * param 1702 `chimeSwitch` above; toggling each switch alone wrote one parameter and named the pair). Same
+   * 136-byte direct-binary shape as `QUICK_RESPONSE`/camera on-off: `[u32 channel][u32 value][account_id
+   * ASCII, zero-padded to 128 bytes]`, outer P2P cmd = 1703 itself, signCode 8, on the device's own
+   * channel. Reversed from a live capture (outer-cmd 1703, signCode 8, captured on the doorbell's
+   * `device_channel` — channel 2 for that unit, NOT a wire constant, always use `ctx.channel`):
+   * turning ON sent `value=1`, turning OFF sent `value=0` — a plain boolean, 1=on/0=off.
+   * App `APP_CMD_BAT_DOORBELL_MECHANICAL_CHIME_SWITCH`.
    */
-  ROTATE_IMAGE: 1207,
+  MECHANICAL_CHIME_SWITCH: 1703,
   /**
-   * On-screen watermark / OSD overlay (app `CMD_SET_DEVS_OSD`). ✅ Wire verified live on T8425 (ch3):
-   * a **3-value enum**, not a bool — 0 = off, 1 = timestamp, 2 = timestamp + logo. Direct-binary
-   * `[channel][value]`. (Labels/enum in {@link Watermark}.)
+   * Whether the HOMEBASE acts as the doorbell's chime — the app's "HomeBase as chime" switch, as opposed
+   * to the wired chime box {@link DOORBELL_CMD.MECHANICAL_CHIME_SWITCH} drives. The app constant reads
+   * `CHIME_SWITCH`, which is why this was long described as a separate plug-in chime; toggling that one
+   * switch alone on a T8210 behind a HomeBase wrote 1702 and nothing else, and the account has no
+   * plug-in chime at all. Same 136-byte direct-binary shape as
+   * that sibling: `[u32 channel][u32 value][account_id ASCII, zero-padded to 128 bytes]`, outer P2P cmd
+   * 1702 itself, signCode 8, on the device's own channel. Reversed from a live capture (outer-cmd 1702,
+   * signCode 8, on the doorbell's `device_channel` — 2 for that unit, NOT a wire constant, always use
+   * `ctx.channel`): turning OFF sent `value=0`, turning ON sent `value=1` — a plain boolean.
+   * App `APP_CMD_BAT_DOORBELL_CHIME_SWITCH`.
    */
-  SET_DEVS_OSD: 1214,
+  CHIME_SWITCH: 1702,
   /**
-   * Video-doorbell status-LED on/off. Rides the `1350` SET_PAYLOAD envelope
-   * (`{account_id,cmd:1716,mChannel,mValue3:1716,payload:{light_enable:0|1}}`),
-   * signCode 8. ✅ verified live on Doorbell Dual T8214. Family-specific wire for the same semantic
-   * status LED setting ordinary cameras report under 1045.
+   * Wide Dynamic Range (WDR) image switch — a video/image tone-mapping setting that widens the
+   * exposure range in high-contrast scenes (bright sky behind a visitor, etc). SAME 136-byte
+   * direct-binary shape/polarity/capture session as `MECHANICAL_CHIME_SWITCH` immediately above: outer
+   * P2P cmd 1704, signCode 8, device channel, `value` 1=on/0=off.
+   * App `APP_CMD_BAT_DOORBELL_WDR_SWITCH`.
    */
-  DOORBELL_LED: 1716,
+  WDR_SWITCH: 1704,
   /**
-   * Night-vision mode (app `NIGHT_VISION_TYPE`). Enum: 0 = off, 1 = infrared/auto (B&W), 2 = full colour.
-   * ✅ All three verified live on T8425: `1350` SET_PAYLOAD, inner cmd 1277, `payload:{channel:<deviceCh>,
-   * night_sion:N}`, mChannel 0, mValue3 0. Standalone (SINGLE-connect) uses direct `IC_NIGHT_VISION_TYPE`
-   * (1013). (Some models omit full colour; enum in {@link NightVision}.)
+   * Doorbell chime ("ding-dong") volume — app `APP_CMD_BAT_DOORBELL_SET_DINGDONG_VOLUME`. UNLIKE the 1703/1704 direct-binary switches above, this rides the
+   * `SET_PAYLOAD` (1350) JSON envelope: `{account_id,cmd:1717,mChannel:<deviceCh>,mValue3:0,
+   * payload:{dingdong_volume:N}}`, GCM signCode 8, on the doorbell's `device_channel` (2 for the
+   * captured unit — always use `ctx.channel`, don't hardcode). `mValue3` is an EXPLICIT `0`, not the
+   * `SET_PAYLOAD` default of `mValue3:cmd` (see {@link module:./intent setPayload}'s doc comment) —
+   * both live frames captured showed `mValue3:0`. Reversed from a live capture (values 3 and 25
+   * observed) — a 0-100 loudness level, distinct from the already-shipped `ringtoneVolume` (1708,
+   * direct-binary, `audio.ts`), which is a DIFFERENT control.
    */
-  NIGHT_VISION_TYPE: 1277,
-  /** T8442 infrared night vision on/off: direct L1 int-string, hardware verified (0/1). */
-  IC_NIGHT_VISION_TYPE: 1013,
+  DINGDONG_VOLUME: 1717,
   /**
-   * Push-notification STYLE — how much a detection push carries: text alone, a thumbnail, or text
-   * followed by a thumbnail. App `CMD_INDOOR_PUSH_NOTIFY_TYPE`, and the "indoor" is a misnomer: the
-   * wire is confirmed on an OUTDOOR standalone camera (T8171). The app's id→name table carries TWO
-   * aliases for this id, `ENTER_OTA` and `INDOOR_PUSH_NOTIFY_TYPE`; the confirmed behaviour is the
-   * notification style.
-   *
-   * Wire verified live on a T8171 (standalone, own channel, reached over the cloud/WAN path): the
-   * `1700` CONTROL_PAYLOAD wrapper, signCode 8, plaintext
-   * `{"commandType":6020,"data":{"value":N,"transaction":"<epoch ms>"}}`. All three values captured
-   * byte-exact, each read back on the cloud param within ~10s. The station answers on the same wrapper
-   * ~600ms later with a 4-byte body — the command's int32 result — so this write is not
-   * fire-and-forget, unlike the direct-binary switches.
-   * (Values in {@link NotificationStyle}.)
+   * Doorbell chime ("ding-dong") RINGTONE SELECTION — app `APP_CMD_BAT_DOORBELL_SET_DINGDONG_RINGTONE`.
+   * SAME `SET_PAYLOAD` (1350) JSON envelope shape as
+   * `DINGDONG_VOLUME` immediately above: `{account_id,cmd:1718,mChannel:<deviceCh>,mValue3:0,
+   * payload:{dingdong_ringtone:N}}`, GCM signCode 8, doorbell `device_channel`, explicit `mValue3:0`.
+   * Reversed from a live capture (values 4 and 0 observed) — `N` is an INTEGER INDEX picking one of
+   * several stored chime tones, NOT a boolean.
    */
-  PUSH_NOTIFY_TYPE: 6020,
+  DINGDONG_RINGTONE: 1718,
   /**
-   * **Sound detection** switch — whether the camera triggers on what it hears, beside the motion
-   * trigger it triggers on what it sees.
+   * Live-view quality AND the video encoding format, both in one integer — app
+   * `CMD_BAT_DOORBELL_VIDEO_QUALITY`. The value is `quality + (highCompression ? 5 : 0)`, where quality
+   * is 0 Auto / 1 Low / 2 Medium / 3 High ({@link DoorbellVideoQuality}). The app drives the two from
+   * separate menus and each write carries both, so setting either requires the other's current value —
+   * which is why neither is a derived setter.
    *
-   * Wire observed live on an indoor pan-tilt (standalone, mains, own channel): the `1700`
-   * CONTROL_PAYLOAD wrapper, plaintext `{"commandType":6043,"data":{"status":0|1}}`. Both directions
-   * captured byte-exact and read back on the cloud param, twice each; no other parameter moved.
-   */
-  SOUND_DETECTION: 6043,
-  /**
-   * How loud a sound has to be to trigger {@link CAMERA_CMD.SOUND_DETECTION} — the app's three-position
-   * control writes `1` lowest, `3` mid, `5` highest.
+   * The encoding is reversed from writing every option in the app and reading the parameter back: High
+   * on high compression is 8 and on low compression 3, Low on low compression 1, Auto on high
+   * compression 5. Six of the eight combinations were observed that way; `0` (Auto, low compression) and
+   * `2` (Medium, low compression) follow the same arithmetic but were not individually written.
    *
-   * Wire observed live on the same camera: `{"commandType":6044,"data":{"index":N}}` in the `1700`
-   * wrapper. The payload field is `index`, NOT the `value` its neighbours use — each of these
-   * commands names its field differently, so there is no generic setter for the family.
-   */
-  SOUND_DETECTION_SENSITIVITY: 6044,
-  /**
-   * WHICH sounds trigger {@link CAMERA_CMD.SOUND_DETECTION} — all sound, or crying alone.
+   * Wire captured byte-exact from the app on a T8210 behind a HomeBase: outer P2P cmd 1705 itself — no
+   * wrapper — signCode 8, on the doorbell's own channel, the same 136-byte direct-binary
+   * `[u32 channel][u32 value][account_id ASCII pad 128]` struct as its 1703/1704 siblings. The station
+   * answers with an unencrypted level-1 frame carrying 0.
    *
-   * Wire observed live: `{"commandType":6046,"data":{"type":N}}` in the `1700` wrapper, both values
-   * captured and read back. (Values in {@link SoundDetectionType}.)
+   * Replayed from this SDK and confirmed on that device: three writes in one session, each read back off
+   * the parameter — quality alone, then the encoding format with the quality held, then a restore.
    */
-  SOUND_DETECTION_TYPE: 6046,
+  VIDEO_QUALITY: 1705,
   /**
-   * **Anti-theft detection** switch (app `APP_CMD_EAS_SWITCH`). Despite the "EAS" name the app's own
-   * parser maps this id onto `anti_theft_detection_switch`, so the camera member uses that semantic
-   * name. The app's "EAS" resource strings mix emergency- and anti-theft-worded copy; the parser is
-   * the tiebreak.
-   *
-   * Wire from the app's own JS: a scalar `params:{value:0|1}`. Emitted with the **adaptive** form so
-   * topology picks the level — level-2/direct on a HomeBase-attached device, level-1 on a standalone.
-   *
-   * ⚠️ Replay + readback confirmed on a **HomeBase-attached** T8425 only (1015 read `0` → write → `1`
-   * → restore): the frame is confirmed accepted and persisted, NOT byte-compared to the app's. The
-   * **standalone** path is unverified, and newer (v3) devices use a *different* id for the same
-   * switch — `APP_CMD_NEW_EAS_SWITCH` (2735) — which has no path here; don't assume 1015 drives them.
+   * Doorbell quick-response LIST fetch — the sub-command carried inside a `SET_PAYLOAD` (1350)
+   * wrapper (app `APP_CMD_GET_CUSTOMIZE_VICOE_LIST`). The station replies with a `NOTIFY_PAYLOAD`
+   * (1351) frame whose JSON is `{cmd:6237, payload:{voice_list:[{voice_id,voice_name,voice_path}]}}`.
+   * Reversed from the app's `GetQuickResponseListP2pParser` + the capture heap. NOTE: 6238
+   * (`APP_CMD_GET_QUICK_RESPONSE`) is the single-file DOWNLOAD, not the list.
    */
-  EAS_SWITCH: 1015,
+  GET_QUICK_RESPONSE_LIST: 6237
+};
+var DoorbellRingtone = {
+  Default: 0,
+  Silent: 1,
+  Beacon: 2,
+  Chord: 3,
+  Christmas: 4,
+  Circuit: 5,
+  Clock: 6,
+  Ding: 7,
+  Hillside: 8,
+  Presto: 9
+};
+var DoorbellVideoQuality = {
+  /** The doorbell picks a quality from the link. */
+  Auto: 0,
+  Low: 1,
+  Medium: 2,
+  High: 3
+};
+function composite(raw) {
+  if (typeof raw !== "number" && (typeof raw !== "string" || raw.trim() === ""))
+    return void 0;
+  const v = Number(raw);
+  return Number.isInteger(v) && v >= 0 && v <= 8 && v % 5 <= 3 ? v : void 0;
+}
+function parseQuickResponses(voiceList) {
+  return (voiceList ?? []).map((v) => {
+    const path = typeof v.voice_path === "string" ? v.voice_path : "";
+    return {
+      voiceId: Number(v.voice_id),
+      name: typeof v.voice_name === "string" ? v.voice_name : "",
+      path,
+      custom: !path.startsWith("/system/snd/")
+    };
+  });
+}
+var DOORBELL_MEMBERS = {
   /**
-   * RECORDING quality — what gets stored, not the live view; {@link CAMERA_CMD.STREAMING_QUALITY_SET}
-   * below is the live one, and the app's name for this id is `multicamSetRecordQuailty`.
-   * Wire confirmed on a T8425 ch3: `1350` SET_PAYLOAD, inner cmd 2731,
-   * `payload:{channel:0, mode:0, primary_view:0, quality:N}`, mValue3 0, on the device channel. Tiers
-   * 1/2/3, named in {@link RECORDING_QUALITY_TIERS} — no tier 0 on this wire, where streaming has one.
-   * That is a fact about 2731 on the cameras it was confirmed on, not about recording everywhere. A
-   * doorbell has no recording-quality setting at all, and its live-view quality rides neither 2730 nor
-   * 2731 but 1705, on a domain of its own (5 = Auto, 6/7/8 = Low/Medium/High, all four observed).
+   * The HOMEBASE as the doorbell's chime — the hub plays the ring, not the wired chime box
+   * `mechanicalChimeSwitch` drives. `provenance` is "verified" on our own decrypt of the app's frame:
+   * direct-binary `[ch][value][acct]`, 1=on/0=off, the same shape as its 1703 sibling — captured, not
+   * inferred from the shared param range.
    */
-  RECORDING_QUALITY_SET: 2731,
+  chimeSwitch: {
+    param: DOORBELL_CMD.CHIME_SWITCH,
+    type: "bool",
+    kind: "boolean",
+    provenance: "verified",
+    description: `The HomeBase plays the doorbell's chime (1702; the app's "HomeBase as chime" switch \u2014 write wire-confirmed live on T8210).`,
+    write: (v, ctx) => setScalar(DOORBELL_CMD.CHIME_SWITCH, asBool(v) ? 1 : 0, ctx, "direct-binary")
+  },
   /**
-   * LIVE-VIEW quality — a separate setting from {@link CAMERA_CMD.RECORDING_QUALITY_SET}, and the app's
-   * names for the two invert what they suggest: 2730 is `multicamSetVideoQuailty` and drives the
-   * Streaming Quality picker, while 2731 is `multicamSetRecordQuailty` and drives Recording Quality.
-   * Changing one leaves the other's parameter untouched, which is how they were told apart.
-   *
-   * Unlike recording it offers a tier 0, `Auto`. Wire verified live on a T8170 (standalone): the `1350`
-   * SET_PAYLOAD envelope, signCode 8, plaintext `{"cmd":2730,"payload":{"transaction":"<epoch ms>",
-   * "quality":N,"channel":0,"mode":0,"primary_view":0},"account_id":…}`. All four tiers captured
-   * byte-exact and read back on parameter 1020; the station echoes the same payload back as a `1351`
-   * NOTIFY_PAYLOAD carrying the same `transaction`.
+   * `provenance` is "verified" on our own P2P decrypt of the write wire: direct-binary
+   * `[ch][value][acct]`, 1=on/0=off, verified live on a T8214 (ON then OFF).
    */
-  STREAMING_QUALITY_SET: 2730
-};
-function hasReportedEasSwitch(source) {
-  return source.paramIds?.has(CAMERA_CMD.EAS_SWITCH) === true || Object.hasOwn(source.params ?? {}, CAMERA_CMD.EAS_SWITCH);
-}
-var Watermark = {
-  /** No timestamp or logo. */
-  Off: 0,
-  /** Timestamp only. */
-  Timestamp: 1,
-  /** Timestamp + eufy logo. */
-  TimestampAndLogo: 2
-};
-var NotificationStyle2 = {
-  /** The push carries text alone. */
-  TextOnly: 1,
-  /** The push carries a thumbnail of the detection. */
-  IncludedThumbnail: 2,
-  /** The push arrives as text, then updates with a thumbnail. */
-  TextFirstThenThumbnail: 3
-};
-var SoundDetectionType = {
-  /** Crying alone triggers a detection. */
-  Crying: 1,
-  /** Any sound loud enough for the sensitivity triggers a detection. */
-  AllSound: 2
-};
-var NightVision = {
-  /** Off — never use infrared. */
-  Off: 0,
-  /** Infrared / "B&W Auto" — black-and-white night vision. */
-  Infrared: 1,
-  /** Full colour night vision (models with a spotlight / starlight sensor). */
-  FullColor: 2
-};
-var RecordingQuality = {
-  HD720: "HD (720P)",
-  FullHD1080: "Full HD (1080P)",
-  Max: "Max"
-};
-var RECORDING_QUALITY_TIERS = {
-  1: "HD (720P)",
-  2: "Full HD (1080P)",
-  3: "Max"
-};
-var StreamingQuality = {
-  Auto: "Auto",
-  ...RecordingQuality
-};
-var STREAMING_QUALITY_TIERS = {
-  0: "Auto",
-  ...RECORDING_QUALITY_TIERS
-};
-function resolveStreamingQuality(value) {
-  return STREAMING_QUALITY_TIERS[value];
-}
-function resolveStreamingQualityTier(value) {
-  if (typeof value === "boolean")
-    return void 0;
-  if (typeof value === "string" && !/^\d+$/.test(value.trim())) {
-    const hit = Object.entries(STREAMING_QUALITY_TIERS).find(([, label]) => label.toLowerCase() === value.trim().toLowerCase());
-    return hit ? Number(hit[0]) : void 0;
-  }
-  const tier = Number(value);
-  return Number.isInteger(tier) && STREAMING_QUALITY_TIERS[tier] != null ? tier : void 0;
-}
-function resolveRecordingQuality(value) {
-  return RECORDING_QUALITY_TIERS[value];
-}
-function resolveRecordingQualityValue(name) {
-  const hit = Object.entries(RECORDING_QUALITY_TIERS).find(([, label]) => label.toLowerCase() === name.trim().toLowerCase());
-  return hit ? Number(hit[0]) : void 0;
-}
-function resolveRecordingQualityTier(value) {
-  if (typeof value === "boolean")
-    return void 0;
-  if (typeof value === "string" && !/^\d+$/.test(value.trim()))
-    return resolveRecordingQualityValue(value);
-  const tier = Number(value);
-  return Number.isInteger(tier) && RECORDING_QUALITY_TIERS[tier] != null ? tier : void 0;
-}
-function decodeRecordingQualityTier(raw) {
-  if (typeof raw === "number" || typeof raw === "string")
-    return resolveRecordingQualityTier(raw);
-  if (typeof raw !== "object" || raw === null)
-    return void 0;
-  const cfg = raw;
-  const mode = cfg[`mode_${Number(cfg.cur_mode) || 0}`];
-  const quality = typeof mode === "object" && mode !== null ? mode.quality : void 0;
-  return typeof quality === "number" ? resolveRecordingQualityTier(quality) : void 0;
-}
-function isEnableBitPolarity(ctx) {
-  const t = ctx.deviceType;
-  if (t === void 0)
-    return false;
-  if (t === DeviceType.INDOOR_CAMERA && ctx.paramIds.has(CAMERA_CMD.CAMERA_ENABLE))
-    return false;
-  if (isIndoorCamera(ctx) && !isIndoorCamMini(ctx) && !isIndoorPanTiltS350(ctx))
-    return true;
-  return ENABLE_BIT_FLOODLIGHT_TYPES.has(t);
-}
-var ENABLE_BIT_FLOODLIGHT_TYPES = /* @__PURE__ */ new Set([
-  DeviceType.FLOODLIGHT_CAMERA_8422,
-  DeviceType.FLOODLIGHT_CAMERA_8424
-]);
-function powerValue(on, ctx) {
-  return isEnableBitPolarity(ctx) ? on ? 1 : 0 : on ? 0 : 1;
-}
-function isT8410HomeBase3(ctx) {
-  return ctx.model === "T8410" && ctx.stationSerial?.startsWith("T8030") === true;
-}
-function isT8442(ctx) {
-  return ctx.model === "T8442";
-}
-function usesHomeBasePowerPayload(ctx) {
-  if (!isT8410HomeBase3(ctx) || !ctx.firmwareVersion || !/^\d+(?:\.\d+){2,3}$/.test(ctx.firmwareVersion))
-    return false;
-  const version = ctx.firmwareVersion.split(".").map(Number);
-  const minimum = [2, 3, 1, 0];
-  for (let i = 0; i < minimum.length; i++) {
-    const difference = (version[i] ?? 0) - minimum[i];
-    if (difference !== 0)
-      return difference > 0;
-  }
-  return true;
-}
-function hasUnreflectedHomeBasePower(ctx) {
-  return usesHomeBasePowerPayload(ctx) && !ctx.paramIds.has(2001);
-}
-function hasPrivacyPower(ctx) {
-  return ctx.deviceType === DeviceType.INDOOR_PT_CAMERA_S350 && ctx.homeBaseAttached === true;
-}
-function powerCommand(on, ctx) {
-  if (hasPrivacyPower(ctx))
-    return privacyCommand(!on, ctx.channel);
-  if (usesHomeBasePowerPayload(ctx))
-    return setPayload(CAMERA_CMD.PRIVACY_MODE, { switch: on ? 0 : 1 }, ctx, 0);
-  return setScalar(CAMERA_CMD.CAMERA_ENABLE, powerValue(on, ctx), ctx, "auto");
-}
-function privacyCommand(enabled, channel) {
-  return { kind: "p2p-privacy-burst", enabled, channel };
-}
-function statusLedCommand(on, ctx) {
-  if (hasCapability(ctx, "doorbell"))
-    return setPayload(CAMERA_CMD.DOORBELL_LED, { light_enable: on ? 1 : 0 }, ctx);
-  return setScalar(CAMERA_CMD.DEV_LED_SWITCH, on ? 1 : 0, ctx, "int-string");
-}
-function poweredOf(ctx) {
-  return cameraPowerTier(ctx.model, ctx.capabilities ?? /* @__PURE__ */ new Set());
-}
-function enablementReflection(on, ctx) {
-  if (!CAMERA_MEMBERS.enabled.readReflectsWrite(ctx))
-    return void 0;
-  const alias = CAMERA_MEMBERS.enabled.readAliases[0].paramType;
-  if (ctx.paramIds.has(alias))
-    return { param: alias, expected: on, observed: on };
-  if (ctx.paramIds.has(CAMERA_CMD.CAMERA_ENABLE)) {
-    return {
-      param: CAMERA_CMD.CAMERA_ENABLE,
-      expected: powerValue(on, ctx),
-      observed: on
-    };
-  }
-  return void 0;
-}
-function refuseWhenDisabled(ctx, read) {
-  if (CAMERA_MEMBERS.enabled.readReflectsWrite(ctx) && read("enabled")?.value === false)
-    throw new CameraDisabledError(ctx.name ?? ctx.serial);
-}
-function refuseUnsupportedView(media, opts) {
-  const view = opts?.view ?? 0;
-  if (!(media.views ?? [0]).includes(view))
-    throw new RangeError(`camera: unsupported optical view ${view}`);
-}
-var CAMERA_MEMBERS = {
-  /** Reads the latest cached report and exposes no setter. */
-  wifiRssi: {
-    param: CAMERA_CMD.WIFI_RSSI,
-    type: "number",
-    kind: "scalar",
-    provenance: "apk",
-    description: "Camera-reported Wi-Fi signal; physical units and a quality scale are unspecified."
-  },
-  /**
-   * The default READ is the *disable*-bit convention (1035 "0" ⇒ ON, 2001 direct); the WRITE polarity is
-   * family-dependent — see `powerValue` / `isEnableBitPolarity`. Battery/solo cams report the state under
-   * 1035, standalone indoor/outdoor cams under 2001 OPEN_DEVICE with direct polarity, so 2001 is a
-   * read-alias. Both verified live, and the write polarity is confirmed against the app's own frames.
-   *
-   * T8410 on HomeBase 3 reports 1035 as an enable bit ("1" ⇒ ON). That reported state does not reliably
-   * reflect the privacy command. `readReflectsWrite` states this distinction.
-   *
-   * The privacy param (6250) is reported by the outdoor-PT family and by no other camera measured, and both
-   * of its polarities are observed. It is deliberately NOT aliased here: it moved in the same step as 1035, so
-   * the reading cannot say whether power and privacy are one state or two — so
-   * aliasing a second param could only fold two possible states into one getter for no gain.
-   */
-  enabled: {
-    param: CAMERA_CMD.CAMERA_ENABLE,
+  mechanicalChimeSwitch: {
+    param: DOORBELL_CMD.MECHANICAL_CHIME_SWITCH,
     type: "bool",
     kind: "boolean",
     provenance: "verified",
-    available: isCameraCodec,
-    invert: true,
-    invertFor: (ctx) => isT8410HomeBase3(ctx) ? false : void 0,
-    readAliases: [{ paramType: 2001, invert: false }],
-    readReflectsWrite: (ctx) => !hasUnreflectedHomeBasePower(ctx) && !hasPrivacyPower(ctx),
-    description: "Camera enabled. Family-dependent wire param: 1035 CMD_DEVS_SWITCH (enable bit on T8410/HomeBase 3, disable bit on battery/solo cams) or 2001 OPEN_DEVICE (standalone indoor/outdoor). Reported on/off state; unreflectedMembers identifies commands whose effect this report does not reliably reflect.",
-    observation: {
-      event: "cameraEnabledChanged",
-      reflects: (value, ctx) => enablementReflection(asBool(value), ctx),
-      timeoutMs: 2e4
-    },
-    write: (v, ctx) => powerCommand(asBool(v), ctx),
-    aliases: { on: true, off: false }
+    description: `The existing wired chime box rings (1703; the app's "existing doorbell chime" switch \u2014 confirmed on T8214, and that pairing confirmed by toggling it alone on a T8210).`,
+    write: (v, ctx) => setScalar(DOORBELL_CMD.MECHANICAL_CHIME_SWITCH, asBool(v) ? 1 : 0, ctx, "direct-binary")
   },
-  /**
-   * A 180° rotation for a ceiling or upside-down mount, not a mirror — the app's own constant calls it
-   * `INDOOR_ROTATE_IMAGE` but it is not indoor-only. `apk` provenance: the wire is read out of the app
-   * parser and the write has not been driven on hardware, so treat a silent no-op as possible and
-   * confirm by re-reading rather than by trusting the dispatch.
-   */
-  imageFlipped: {
-    param: CAMERA_CMD.ROTATE_IMAGE,
+  /** Same reasoning and the same capture session as {@link DOORBELL_MEMBERS.mechanicalChimeSwitch}. */
+  wdrSwitch: {
+    param: DOORBELL_CMD.WDR_SWITCH,
     type: "bool",
     kind: "boolean",
-    provenance: "apk",
-    available: isCameraCodec,
-    description: "Rotate the image 180\xB0 (ROTATE_IMAGE 1207): false = normal, true = flipped. For ceiling/upside-down mounts. Write is a direct param; wire from the app parser (unverified live).",
-    write: (v, ctx) => setScalar(CAMERA_CMD.ROTATE_IMAGE, asBool(v) ? 1 : 0, ctx, "auto")
+    provenance: "verified",
+    description: "Wide Dynamic Range (WDR) image switch (1704; write wire-confirmed live on T8214 \u2014 see DOORBELL_CMD.WDR_SWITCH).",
+    write: (v, ctx) => setScalar(DOORBELL_CMD.WDR_SWITCH, asBool(v) ? 1 : 0, ctx, "direct-binary")
   },
   /**
-   * A THREE-VALUE enum, not the boolean the name suggests — the middle option is timestamp without the
-   * logo, so a plain switch cannot express every state the device has. `coerceEnumValue` refuses
-   * anything outside {@link Watermark} instead of coercing it: on a fire-and-forget write a bogus index
-   * would dispatch and look like it worked. The labels are the app's radio order.
+   * The READ half of a control whose write lives on `audio` — hence `writtenElsewhere`, which is what
+   * keeps the published schema's `writable` true even though this member declares no `write`. The split
+   * is deliberate: `audio` owns every volume wire, but 1708 leaks onto non-doorbell cameras, so `audio`
+   * gates its setter on this capability while the read stays here where it is doorbell-only. Distinct
+   * from `dingdongVolume` (1717), which is a different control on a different wire.
    */
-  watermark: {
-    param: CAMERA_CMD.SET_DEVS_OSD,
-    type: "enum",
-    kind: "enum",
-    enumValues: { 0: "Off", 1: "Timestamp", 2: "Timestamp + Logo" },
+  ringtoneVolume: {
+    param: 1708,
+    type: "number",
+    unit: "%",
+    kind: "percent",
     provenance: "verified",
-    available: isCameraCodec,
-    description: "On-screen watermark/OSD overlay (CMD_SET_DEVS_OSD 1214). \u2705 wire verified live (T8425 ch3): direct-binary [ch][value 0/1/2] \u2014 a 3-value enum, not a bool. Enum labels are best-guess.",
-    write: (v, ctx) => {
-      const w = coerceEnumValue(Watermark, v);
-      return w == null ? void 0 : setScalar(CAMERA_CMD.SET_DEVS_OSD, w, ctx, "auto");
-    }
+    writtenElsewhere: true,
+    description: "Ringtone volume (1708; confirmed on T8214, observed value 80). The WRITE is `audio`'s setRingtoneVolume \u2014 that capability owns every volume wire."
   },
   /**
-   * Whether the camera triggers on what it HEARS — the sound counterpart to motion detection, which the
-   * app presents beside it. The camera keeps the sensitivity and the type it was last given, so
-   * switching this off and on again restores the previous configuration rather than resetting it.
-   */
-  soundDetection: {
-    param: CAMERA_CMD.SOUND_DETECTION,
-    type: "bool",
-    kind: "boolean",
-    provenance: "verified",
-    available: isCameraCodec,
-    description: "Trigger on sound as well as motion (SOUND_DETECTION 6043). \u2705 Write confirmed live on a T8410 (mains, standalone, own channel): both directions sent through this member and read back on the cloud param, and the app's own frame captured byte-exact for the same body.",
-    write: (v, ctx) => setJson(CAMERA_CMD.SOUND_DETECTION, { status: asBool(v) ? 1 : 0 }, ctx)
-  },
-  /**
-   * How loud a sound must be to trigger: `1` lowest, `3` mid, `5` highest, on the app's own
-   * three-position control. A `scalar` rather than an enum — the endpoints and the midpoint are
-   * observed, so 2 and 4 are a prediction of the scale's shape rather than values the wire is known to
-   * take. Independent of {@link CAMERA_MEMBERS.soundDetection}: the camera stores it whether sound
-   * detection is on or off.
+   * A `1350` SET_PAYLOAD envelope (NOT direct-binary) with an explicit `mValue3` 0 — both live frames
+   * captured that value. Bounded 0-100 like every sibling volume setter: the write is fire-and-forget,
+   * so an out-of-range value would otherwise be sent as-is and look like it worked. `provenance` is
+   * "verified" on our own capture, not merely an observed param id.
    */
-  soundDetectionSensitivity: {
-    param: CAMERA_CMD.SOUND_DETECTION_SENSITIVITY,
+  dingdongVolume: {
+    param: DOORBELL_CMD.DINGDONG_VOLUME,
     type: "number",
-    kind: "scalar",
+    unit: "%",
+    kind: "percent",
     provenance: "verified",
-    available: isCameraCodec,
-    description: "Sound-detection sensitivity: 1 = lowest, 3 = mid, 5 = highest (SOUND_DETECTION_SENSITIVITY 6044). \u2705 Write confirmed live on a T8410: 1 and 5 sent consecutively through this member and read back on the cloud param. 2 and 4 are the scale's shape, not observed values.",
-    write: (v, ctx) => {
-      const n = Number(v);
-      if (!Number.isInteger(n) || n < 1 || n > 5)
-        return void 0;
-      return setJson(CAMERA_CMD.SOUND_DETECTION_SENSITIVITY, { index: n }, ctx);
-    }
+    min: 0,
+    max: 100,
+    description: "Doorbell chime volume, 0-100 (1717 APP_CMD_BAT_DOORBELL_SET_DINGDONG_VOLUME; SET_PAYLOAD envelope, distinct from the direct-binary ringtoneVolume/1708 \u2014 see DOORBELL_CMD.DINGDONG_VOLUME). Write wire-confirmed live on T8214, observed values 3 and 25.",
+    write: (v, ctx) => setPayload(DOORBELL_CMD.DINGDONG_VOLUME, { dingdong_volume: Number(v) }, ctx, 0, void 0, "auto")
   },
   /**
-   * WHICH sounds count — any sound, or crying alone. `coerceEnumValue` refuses anything outside
-   * {@link SoundDetectionType} rather than coercing it: both neighbouring values are real types, so a
-   * coerced one arms the wrong trigger and reports success.
+   * The same `1350` SET_PAYLOAD shape and capture session as {@link DOORBELL_MEMBERS.dingdongVolume},
+   * but an INDEX rather than a level. Clamping a bad index would land on a real-but-wrong tone (garbage
+   * → 0, too-big → 9) instead of failing, and only 3 of the 10 indices (0, 7, 8) are wire-tested — so
+   * anything outside {@link DoorbellRingtone} is refused.
    */
-  soundDetectionType: {
-    param: CAMERA_CMD.SOUND_DETECTION_TYPE,
-    type: "enum",
+  dingdongRingtone: {
+    param: DOORBELL_CMD.DINGDONG_RINGTONE,
+    type: "number",
     kind: "enum",
-    enumValues: { 1: "Crying", 2: "All Sound" },
+    enumValues: enumLabels(DoorbellRingtone),
     provenance: "verified",
-    available: isCameraCodec,
-    description: "Which sounds trigger a detection: crying alone, or any sound (SOUND_DETECTION_TYPE 6046). \u2705 Write confirmed live on a T8410: both values sent consecutively through this member and read back on the cloud param.",
+    args: [{ name: "ringtone", kind: "enum", description: "A tone INDEX, not a volume." }],
+    description: "Doorbell chime ringtone SELECTION INDEX, not a bool (1718 APP_CMD_BAT_DOORBELL_SET_DINGDONG_RINGTONE; SET_PAYLOAD envelope \u2014 see DOORBELL_CMD.DINGDONG_RINGTONE). Write wire-confirmed live on T8214, observed values 4 and 0. Named options: see the {@link DoorbellRingtone} enum. A write outside that enum is REJECTED, not clamped into range \u2014 this is a selection, not a volume, so a bad index would otherwise land on a real-but-wrong tone.",
     write: (v, ctx) => {
-      const type = coerceEnumValue(SoundDetectionType, v);
-      return type == null ? void 0 : setJson(CAMERA_CMD.SOUND_DETECTION_TYPE, { type }, ctx);
+      const tone = coerceEnumValue(DoorbellRingtone, v);
+      return tone === void 0 ? void 0 : setPayload(DOORBELL_CMD.DINGDONG_RINGTONE, { dingdong_ringtone: tone }, ctx, 0, void 0, "auto");
     }
   },
   /**
-   * `coerceEnumValue` refuses anything outside {@link NotificationStyle} instead of coercing it: every
-   * neighbouring value is itself a real style, so a coerced one selects the wrong notification and
-   * reports success.
-   *
-   * `transaction` is part of the verified frame — a decimal epoch-in-milliseconds string, fresh per
-   * command.
+   * The live-view quality half of {@link DOORBELL_CMD.VIDEO_QUALITY}, lifted out of the composite by
+   * `decode`. `writtenElsewhere` because the setter needs the OTHER half's current value to rebuild the
+   * integer, which a member's `write` — given only the new value and the context — cannot read.
    */
-  notificationStyle: {
-    param: CAMERA_CMD.PUSH_NOTIFY_TYPE,
-    type: "enum",
+  videoQuality: {
+    param: DOORBELL_CMD.VIDEO_QUALITY,
+    type: "number",
     kind: "enum",
-    enumValues: { 1: "Text Only", 2: "Included Thumbnail", 3: "Text First, Then Thumbnail" },
+    enumValues: enumLabels(DoorbellVideoQuality),
     provenance: "verified",
-    available: isCameraCodec,
-    description: "How much a detection push carries: text only, a thumbnail, or text then a thumbnail (CMD_INDOOR_PUSH_NOTIFY_TYPE 6020). All three values wire-verified live on a standalone T8171 over the cloud/WAN path \u2014 the 1700 control-payload wrapper, each one read back on the cloud param. A value outside the enum is REJECTED, not clamped: every neighbouring value is a real style, so a bad one would silently select the wrong notification.",
-    write: (v, ctx) => {
-      const style = coerceEnumValue(NotificationStyle2, v);
-      return style == null ? void 0 : setJson(CAMERA_CMD.PUSH_NOTIFY_TYPE, { value: style, transaction: String(Date.now()) }, ctx);
-    }
+    writtenElsewhere: true,
+    decode: (raw) => {
+      const v = composite(raw);
+      return v === void 0 ? void 0 : v % 5;
+    },
+    decodedKind: "enum",
+    decodedValues: Object.values(DoorbellVideoQuality),
+    description: "Live-view quality: 0 Auto / 1 Low / 2 Medium / 3 High (1705 CMD_BAT_DOORBELL_VIDEO_QUALITY). The parameter also carries the video encoding format, so this is the remainder mod 5 \u2014 see highCompressionEncoding for the other half. Ranks, not resolutions: the app's picker reads Auto/Low/Medium/High. Written by setVideoQuality, which takes the encoding format too \u2014 hardware-confirmed on a T8210."
   },
   /**
-   * Three modes, and `FullColor` is the conditional one: a model without a spotlight or starlight
-   * sensor omits it, and the wire accepts the value regardless — the device's own reported set is the
-   * only statement of which of the three it has. `coerceEnumValue` rejects a value outside
-   * {@link NightVision} rather than coercing it. The payload key on the wire is `night_sion`.
+   * The encoding half of the SAME integer, so it declares no param of its own and reaches into the
+   * owner's value — two members claiming 1705 would leave the second reading a name nothing is stored
+   * under, and a paramless member publishes no schema entry at all, which is what keeps that from
+   * happening structurally. High compression is the app's default on the captured device.
    */
-  nightVision: {
-    param: CAMERA_CMD.NIGHT_VISION_TYPE,
-    type: "enum",
-    kind: "enum",
-    enumValues: { 0: "Off", 1: "Infrared", 2: "Full Color" },
-    enumValuesFor: (ctx) => isT8442(ctx) ? { 0: "Off", 1: "Infrared" } : void 0,
+  highCompressionEncoding: {
+    readsFrom: "videoQuality",
+    type: "bool",
+    kind: "boolean",
     provenance: "verified",
-    available: isCameraCodec,
-    readAvailable: (ctx) => !isT8442(ctx),
-    readAliases: [{ paramType: 2002, available: isT8442 }],
-    description: "Night-vision mode: 0 = off, 1 = infrared (B&W), 2 = full colour where supported. T8425 uses NIGHT_VISION_TYPE 1277 (1350 SET_PAYLOAD, night_sion); T8442 reports 2002 and writes direct IC_NIGHT_VISION_TYPE 1013 (int-string, 0/1). Both wires verified live.",
-    write: (v, ctx) => {
-      const nv = coerceEnumValue(NightVision, v);
-      if (nv == null)
-        return void 0;
-      if (isT8442(ctx)) {
-        if (nv === NightVision.FullColor)
-          throw new Error("nightVision: Full Color is not supported on T8442 (only Off/Infrared)");
-        return setScalar(CAMERA_CMD.IC_NIGHT_VISION_TYPE, nv, ctx, "int-string");
-      }
-      return setPayload(CAMERA_CMD.NIGHT_VISION_TYPE, { channel: ctx.channel, night_sion: nv }, ctx, 0, 0, "auto");
-    }
+    decode: (raw) => {
+      const v = composite(raw);
+      return v === void 0 ? void 0 : v >= 5;
+    },
+    description: "Video encoding format: true = high compression, false = low compression (the +5 offset inside 1705, which also carries videoQuality). Set through setVideoQuality, which takes both halves because the wire carries both."
   },
   /**
-   * Live-view quality, the pair to {@link CAMERA_MEMBERS.recordingQuality} and a different setting on a
-   * different wire: changing one leaves the other's parameter untouched.
-   *
-   * The READ is 1020, which reports the resolved tier as a plain integer, while the WRITE rides 2730's
-   * `1350` payload. They are two ids for one setting because 2730 carries a per-mode config and 1020
-   * carries the tier in force; the tier is what this property means. 1020 is also the name the param
-   * dictionary already gives that id, and `Device` keys state by NAME — a member claiming 2730 under
-   * this name would collide with it on a device reporting both.
+   * Set both halves of {@link DOORBELL_CMD.VIDEO_QUALITY} at once, because the wire has no way to set
+   * one alone: every frame carries the whole integer.
    *
-   * `transaction` is part of the frame that was captured, so it is sent. The recording sibling's own
-   * confirmed frame carries no such field; neither is inferred from the other.
+   * Taking both is not a convenience choice. An earlier shape took one and preserved the other by
+   * reading it back, and it failed on hardware: the state reader is the snapshot the device was bound
+   * with, so a second write in the same session composed against the value from before the first and
+   * silently reverted it. Requiring both puts that decision where it can be made correctly — a caller
+   * reads {@link DOORBELL_MEMBERS.videoQuality} and {@link DOORBELL_MEMBERS.highCompressionEncoding}
+   * and passes what it wants, instead of the SDK guessing from a stale copy.
    */
-  streamingQuality: {
-    param: 1020,
-    type: "number",
-    kind: "enum",
-    enumValues: STREAMING_QUALITY_TIERS,
-    provenance: "verified",
-    available: isCameraCodec,
-    args: [{ name: "quality", kind: "enum", description: "A tier, or the name it maps to. 0 is Auto." }],
-    ...accepts(),
-    description: "Live-view quality as a tier, 0 = Auto (1020; the write rides 2730 APP_CMD_MULTI_CAM_SET_VIDEO_QUALITY). Distinct from recordingQuality, which is what gets stored. All four tiers wire-verified live on a T8170 and read back on 1020. Sent from this SDK to a standalone T8170 and T8171, tier 1 holds the live stream at 1280x720 and tier 0 restores the camera's own resolution ladder \u2014 see CAMERA_CMD.STREAMING_QUALITY_SET. A value outside the tier set is REJECTED, not clamped: every tier in range is a real quality, so a bad one would silently pick another.",
-    write: (v, ctx) => {
-      const q = resolveStreamingQualityTier(v);
-      return q == null ? void 0 : setPayload(CAMERA_CMD.STREAMING_QUALITY_SET, { channel: 0, mode: 0, primary_view: 0, quality: q, transaction: String(Date.now()) }, ctx, 0, void 0, "auto");
+  setVideoQuality: method(({ ctx, sink }) => async (quality, highCompression) => {
+    const q = coerceEnumValue(DoorbellVideoQuality, quality);
+    if (q === void 0) {
+      throw new Error(`videoQuality: ${String(quality)} is not one of ${enumLabels(DoorbellVideoQuality)}`);
     }
-  },
+    await sink.dispatch(setScalar(DOORBELL_CMD.VIDEO_QUALITY, q + (asBool(highCompression) ? 5 : 0), ctx, "direct-binary"));
+  }, "Set the live-view quality and the video encoding format, which share one wire."),
   /**
-   * `type` is how the value is STORED, and 2731 stores the whole config — the ACTIVE tier is lifted out
-   * of it by `decode`, so the getter answers a tier while the schema stays honest. The setter
-   * takes a resolution NAME as well as the tier the getter answers.
+   * A config blob the device reports WHOLE, so it is typed `string` and handed back unparsed — three
+   * settings live inside it (motion notifications, ring notifications, notification style) and the SDK
+   * lifts none of them out, because no `decode` is evidenced for the shape. Read-only: no write frame
+   * has been captured for it, and a config JSON is exactly where a guessed write does the most damage.
    */
-  recordingQuality: {
-    param: CAMERA_CMD.RECORDING_QUALITY_SET,
+  notificationMode: {
+    param: 1710,
     type: "string",
+    kind: "text",
     provenance: "verified",
-    available: isCameraCodec,
-    decode: (raw) => decodeRecordingQualityTier(raw),
-    decodedKind: "enum",
-    decodedValues: Object.keys(RECORDING_QUALITY_TIERS).map(Number),
-    // Label the decoded tiers so a host can render this as a labelled choice (a dropdown) rather than
-    // a bare number — same shape as `suction` and the sibling `streamingQuality`. `decode` still owns
-    // the value (a tier); these are only the tier→label map, keyed to match `decodedValues`.
-    enumValues: RECORDING_QUALITY_TIERS,
-    description: "RECORDING quality as a tier (2731) \u2014 distinct from streamingQuality, which is the live view. The device reports the whole config \u2014 `{cur_mode, mode_<n>:{quality}}`, read live off a T8170 \u2014 and the ACTIVE mode's tier is lifted out of it on read. \u2705 write wire verified live (T8425): 1350 SET_PAYLOAD {channel:0, mode:0, primary_view:0, quality:N}. Tier\u2192label in RECORDING_QUALITY_TIERS / resolveRecordingQuality (verified on T8425; add a per-model map if a model's tiers ever diverge).",
-    args: [{ name: "quality", kind: "enum", description: "A tier; the resolution name it maps to is accepted too." }],
-    ...accepts(),
-    write: (v, ctx) => {
-      const q = resolveRecordingQualityTier(v);
-      return q == null ? void 0 : setPayload(CAMERA_CMD.RECORDING_QUALITY_SET, { channel: 0, mode: 0, primary_view: 0, quality: q }, ctx, 0, void 0, "auto");
-    }
+    description: "Notification config JSON {notification_motion_onoff,notification_ring_onoff,notification_style} (1710; confirmed on T8214)."
   },
   /**
-   * Not every model has the feature, and one without it accepts the frame without acting on it — so the
-   * write is offered only where the device reports 1015, the same param the read is gated on.
+   * Play one of the doorbell's quick responses at the visitor. `voiceId` comes from
+   * {@link DOORBELL_MEMBERS.quickResponses}. The doorbell only plays while it has an active media
+   * session, so by default this briefly engages a live stream, sends, then tears it down.
+   * `{ engage: false }` leaves an already-open stream alone.
+   *
+   * If engagement was requested but no stream comes up this THROWS, rather than firing 1706 into the
+   * void and reporting success — the doorbell would play nothing. The wire is `QUICK_RESPONSE` 1706,
+   * the SAME direct-binary command as camera on/off, carrying the voice id as its value.
    */
-  antiTheftDetection: {
-    param: CAMERA_CMD.EAS_SWITCH,
-    type: "bool",
-    kind: "boolean",
-    provenance: "apk",
-    available: isCameraCodec,
-    description: "Anti-theft detection on/off (1015 APP_CMD_EAS_SWITCH; the app parses it as anti_theft_detection_switch). Adaptive scalar {value:0|1}. \u26A0\uFE0F Replay+readback confirmed on a HomeBase-attached T8425 only; standalone unverified and v3 devices use id 2735 \u2014 see CAMERA_CMD.EAS_SWITCH.",
-    requires: [CAMERA_CMD.EAS_SWITCH],
-    write: (v, ctx) => setScalar(CAMERA_CMD.EAS_SWITCH, asBool(v) ? 1 : 0, ctx, "auto")
-  },
+  playQuickResponse: method(({ ctx, sink, media }) => async (voiceId, opts = {}) => {
+    const engage = opts.engage ?? true;
+    let stream;
+    if (engage) {
+      if (!media) {
+        throw new Error("playQuickResponse needs a live media session to engage, but the device is not bound to a live client \u2014 open a stream and call with { engage: false }");
+      }
+      try {
+        stream = await media.live();
+      } catch (e) {
+        throw new Error(`playQuickResponse could not engage a live stream (the doorbell only plays while live): ${e instanceof Error ? e.message : String(e)}`);
+      }
+      await sleep(2500);
+    }
+    try {
+      await sink.dispatch(setScalar(DOORBELL_CMD.QUICK_RESPONSE, voiceId, ctx, "direct-binary"));
+      if (stream)
+        await sleep(1500);
+    } finally {
+      try {
+        stream?.stop();
+      } catch {
+      }
+    }
+  }, "Play a quick response at the visitor."),
   /**
-   * Privacy mode — the multi-frame burst. Nothing reports it back, so it is a setter with no getter, and
-   * it declares no param: the id the burst is built from is the transport's, not this capability's.
+   * Fetch the doorbell's quick-response list — a P2P request/reply query that returns data, so it
+   * exists only on a device bound to a media provider that offers one.
    *
-   * Being write-only, it is named by `unobservableMembers(dev.camera())`, which distinguishes "this camera
-   * is not in privacy mode" from "this camera cannot say" rather than leaving both as `undefined`. That
-   * distinction matters most on the families whose power rides this same envelope — see {@link enabled}.
+   * The transport stays doorbell-agnostic: it runs a GENERIC SET_PAYLOAD query (sub-cmd → reply
+   * payload); this capability owns the sub-command id (6237) and the reply parsing.
    */
-  privacy: {
-    type: "bool",
-    kind: "boolean",
-    writeOnly: true,
-    provenance: "verified",
-    available: isCameraCodec,
-    description: "Privacy mode (PRIVACY_MODE 6250) \u2014 the multi-frame burst the sink plays.",
-    write: (v, ctx) => privacyCommand(asBool(v), ctx.channel)
-  },
+  quickResponses: provided("media", (m) => m.p2pQuery && (async (opts) => {
+    const payload = await m.p2pQuery(DOORBELL_CMD.GET_QUICK_RESPONSE_LIST, opts);
+    const voiceList = Array.isArray(payload?.voice_list) ? payload.voice_list : [];
+    return parseQuickResponses(voiceList);
+  }), "Fetch the doorbell's quick-response list.")
+};
+var DOORBELL = {
+  capability: "doorbell",
+  description: "Doorbell chime / ringtone configuration (ring press is an event, not a param).",
+  members: DOORBELL_MEMBERS,
+  properties: propertiesOf(DOORBELL_MEMBERS),
   /**
-   * The same status LED is reported under 1045 on ordinary cameras and 1716 on video doorbells. The
-   * alias is the same semantic value on a family-specific wire. The parameter valid for the resolved
-   * family is sufficient evidence to install both the getter and family-aware setter.
+   * Doorbells self-report no param of their own (the 1702-1719 settings also arrive from eufyCams), and
+   * the cloud record names no product, so detection keys off the app's own tables:
+   * {@link DOORBELL_MODELS} and {@link DOORBELL_TYPES}.
    */
-  statusLed: {
-    param: CAMERA_CMD.DEV_LED_SWITCH,
-    type: "bool",
-    kind: "boolean",
-    provenance: "verified",
-    available: isCameraCodec,
-    readAvailable: (ctx) => !hasCapability(ctx, "doorbell"),
-    readAliases: [{ paramType: CAMERA_CMD.DOORBELL_LED, available: (ctx) => hasCapability(ctx, "doorbell") }],
-    requiresRead: true,
-    description: "Camera status LED. Video doorbells report the same state under their button-ring LED parameter.",
-    write: (v, ctx) => statusLedCommand(asBool(v), ctx)
+  detection: {
+    detect: (rec) => DOORBELL_MODELS.has(rec.model ?? ""),
+    deviceTypes: DOORBELL_TYPES,
+    modelHints: [/doorbell/i]
   },
-  views: provided("media", (m) => m.views && (() => m.views), "Optical view identifiers supported by this camera's media route."),
   /**
-   * Media is not a property: it returns DATA rather than moving state, its options are richer than a
-   * value, and it exists only on a device bound to a provider. Each is declared once, with its
-   * signature taken FROM {@link MediaProvider} — so a change there is a compile error here, not a drift.
+   * Inbound FCM doorbell events (`DoorbellPushEvent`): ring press and the package trio.
    *
-   * Every pull is refused where a reliable {@link CAMERA_MEMBERS.enabled} reads false, with {@link CameraDisabledError} —
-   * `live`, `snapshotLive`, `record`, `openReadable` and `recordFragments` alike, since each opens media on a
-   * camera that serves none. That reading is the on/off source; a live probe is not one, since a disabled
-   * camera answers a start with audio and never a video frame.
+   * Pet (3106) is NOT here. The id is declared identically in the doorbell, indoor and HB3-paired
+   * vocabularies, so it belongs to the camera-wide `motion` module that every camera binds; claiming
+   * it here as well would make it a contested id that a doorbell — which has both capabilities —
+   * matches twice, emitting one push as two events.
+   */
+  events: [
+    { source: "push", match: DoorbellPushEvent.PRESS_DOORBELL, emit: "doorbellPress" },
+    { source: "push", match: DoorbellPushEvent.PACKAGE_DELIVERED, emit: "packageDelivered" },
+    { source: "push", match: DoorbellPushEvent.PACKAGE_TAKEN, emit: "packageTaken" },
+    { source: "push", match: DoorbellPushEvent.PACKAGE_STRANDED, emit: "packageStranded" }
+  ]
+};
+
+// dist/model/capabilities/camera.js
+var CAMERA_CMD = {
+  /** Camera-reported Wi-Fi signal (app `CMD_GET_WIFI_RSSI`). */
+  WIFI_RSSI: 1142,
+  /** Camera on/off. Read and write polarity depend on the family and topology. */
+  CAMERA_ENABLE: 1035,
+  /** Wrapped T8410 power switch on HomeBase 3. */
+  PRIVACY_MODE: 6250,
+  /**
+   * Camera status LED on/off — the "power/recording" indicator. The
+   * app JS has a sibling param `1056` (`APP_CMD_LIVEVIEW_LED_SWITCH`) for the SAME UI "Status Light"
+   * setting on some other model/generation — confirmed real (a full parser class exists) but tested
+   * live with no effect on a T8425 (which uses 1045, shipped here); which model actually uses 1056
+   * is unconfirmed. Don't wire 1056 as an alias of this without per-model evidence.
+   */
+  DEV_LED_SWITCH: 1045,
+  /**
+   * Rotate the image 180° on/off. Direct param, value 0 = normal, 1 = flipped. The app's constant is
+   * `INDOOR_ROTATE_IMAGE`, but it is NOT indoor-only — ✅ verified live on an OUTDOOR floodlight cam
+   * (T8425), so we drop the misleading "indoor". App parser: `{cmd:1207, params:{enable:0|1}}`.
+   */
+  ROTATE_IMAGE: 1207,
+  /**
+   * On-screen watermark / OSD overlay (app `CMD_SET_DEVS_OSD`). ✅ Wire verified live on T8425 (ch3):
+   * a **3-value enum**, not a bool — 0 = off, 1 = timestamp, 2 = timestamp + logo. Direct-binary
+   * `[channel][value]`. (Labels/enum in {@link Watermark}.)
+   */
+  SET_DEVS_OSD: 1214,
+  /**
+   * Video-doorbell status-LED on/off. Rides the `1350` SET_PAYLOAD envelope
+   * (`{account_id,cmd:1716,mChannel,mValue3:1716,payload:{light_enable:0|1}}`),
+   * signCode 8. ✅ verified live on Doorbell Dual T8214. Family-specific wire for the same semantic
+   * status LED setting ordinary cameras report under 1045.
+   */
+  DOORBELL_LED: 1716,
+  /**
+   * Night-vision mode (app `NIGHT_VISION_TYPE`). Enum: 0 = off, 1 = infrared/auto (B&W), 2 = full colour.
+   * ✅ All three verified live on T8425: `1350` SET_PAYLOAD, inner cmd 1277, `payload:{channel:<deviceCh>,
+   * night_sion:N}`, mChannel 0, mValue3 0. Standalone (SINGLE-connect) uses direct `IC_NIGHT_VISION_TYPE`
+   * (1013). (Some models omit full colour; enum in {@link NightVision}.)
+   */
+  NIGHT_VISION_TYPE: 1277,
+  /** T8442 infrared night vision on/off: direct L1 int-string, hardware verified (0/1). */
+  IC_NIGHT_VISION_TYPE: 1013,
+  /**
+   * Push-notification STYLE — how much a detection push carries: text alone, a thumbnail, or text
+   * followed by a thumbnail. App `CMD_INDOOR_PUSH_NOTIFY_TYPE`, and the "indoor" is a misnomer: the
+   * wire is confirmed on an OUTDOOR standalone camera (T8171). The app's id→name table carries TWO
+   * aliases for this id, `ENTER_OTA` and `INDOOR_PUSH_NOTIFY_TYPE`; the confirmed behaviour is the
+   * notification style.
    *
-   * {@link CAMERA_MEMBERS.snapshotStored} is exempt — a retained push thumbnail is not a pull. A reading of
-   * `undefined` refuses nothing: families reporting neither wire param leave the state unknown, and unknown is
-   * not known-off.
+   * Wire verified live on a T8171 (standalone, own channel, reached over the cloud/WAN path): the
+   * `1700` CONTROL_PAYLOAD wrapper, signCode 8, plaintext
+   * `{"commandType":6020,"data":{"value":N,"transaction":"<epoch ms>"}}`. All three values captured
+   * byte-exact, each read back on the cloud param within ~10s. The station answers on the same wrapper
+   * ~600ms later with a 4-byte body — the command's int32 result — so this write is not
+   * fire-and-forget, unlike the direct-binary switches.
+   * (Values in {@link NotificationStyle}.)
+   */
+  PUSH_NOTIFY_TYPE: 6020,
+  /**
+   * **Sound detection** switch — whether the camera triggers on what it hears, beside the motion
+   * trigger it triggers on what it sees.
    *
-   * The refusal REJECTS on the four that answer with a promise, and THROWS on
-   * {@link CAMERA_MEMBERS.recordFragments}, which answers with a handle.
+   * Wire observed live on an indoor pan-tilt (standalone, mains, own channel): the `1700`
+   * CONTROL_PAYLOAD wrapper, plaintext `{"commandType":6043,"data":{"status":0|1}}`. Both directions
+   * captured byte-exact and read back on the cloud param, twice each; no other parameter moved.
    */
-  snapshotStored: provided("media", (m, { ctx }) => isCameraCodec(ctx) && m.snapshotStored && (() => m.snapshotStored()), "Latest validated push thumbnail retained in memory.", ["snapshot"]),
-  snapshotLive: provided("media", (m, { ctx, read }) => isCameraCodec(ctx) && (async (opts) => {
-    refuseWhenDisabled(ctx, read);
-    refuseUnsupportedView(m, opts);
-    return m.snapshotLive({ powered: poweredOf(ctx), ...opts });
-  }), "Fresh still decoded from a short live burst."),
-  live: provided("media", (m, { ctx, read }) => async (opts) => {
-    refuseWhenDisabled(ctx, read);
-    refuseUnsupportedView(m, opts);
-    return m.live({ powered: poweredOf(ctx), ...opts });
-  }, "Open a managed live stream."),
-  record: provided("media", (m, { ctx, read }) => isCameraCodec(ctx) && (async (...args) => {
-    refuseWhenDisabled(ctx, read);
-    return m.record(...args);
-  }), "Record N seconds \u2192 an mp4/h264 buffer."),
-  openReadable: provided("media", (m, { ctx, read }) => isCameraCodec(ctx) && m.openReadable && (async (opts) => {
-    refuseWhenDisabled(ctx, read);
-    refuseUnsupportedView(m, opts);
-    return m.openReadable({ powered: poweredOf(ctx), ...opts });
-  }), "Open a node:stream Readable of the live feed."),
-  recordFragments: provided("media", (m, { ctx, read }) => isCameraCodec(ctx) && m.recordFragments && ((opts) => {
-    refuseWhenDisabled(ctx, read);
-    return m.recordFragments({ powered: poweredOf(ctx), ...opts });
-  }), "Continuous fragmented-MP4 (CMAF) recording."),
-  downloadRecording: provided("media", (m, { ctx }) => isCameraCodec(ctx) && m.downloadRecording && ((opts) => m.downloadRecording(opts)), "Download a recording the station holds \u2192 H.264 and AAC elementary streams."),
+  SOUND_DETECTION: 6043,
   /**
-   * Push audio from the host to this camera's speaker. Gated on the **speaker** param specifically —
-   * not the `audio` capability, which resolves on a microphone alone and would advertise a speaker the
-   * device never reported. Talkback holds a media session open for its duration, so it carries the same
-   * power hint `live` does; without it a battery camera talked to with no stream running would stream
-   * unbounded.
+   * How loud a sound has to be to trigger {@link CAMERA_CMD.SOUND_DETECTION} — the app's three-position
+   * control writes `1` lowest, `3` mid, `5` highest.
+   *
+   * Wire observed live on the same camera: `{"commandType":6044,"data":{"index":N}}` in the `1700`
+   * wrapper. The payload field is `index`, NOT the `value` its neighbours use — each of these
+   * commands names its field differently, so there is no generic setter for the family.
    */
-  talkback: provided("media", (m, { ctx }) => isCameraCodec(ctx) && m.talkback && ctx.paramIds.has(AUDIO_CMD.AUDIO_SPEAKER) && ((opts) => m.talkback({ powered: poweredOf(ctx), ...opts })), "Push audio from the host to the camera's speaker.")
+  SOUND_DETECTION_SENSITIVITY: 6044,
+  /**
+   * WHICH sounds trigger {@link CAMERA_CMD.SOUND_DETECTION} — all sound, or crying alone.
+   *
+   * Wire observed live: `{"commandType":6046,"data":{"type":N}}` in the `1700` wrapper, both values
+   * captured and read back. (Values in {@link SoundDetectionType}.)
+   */
+  SOUND_DETECTION_TYPE: 6046,
+  /**
+   * **Anti-theft detection** switch (app `APP_CMD_EAS_SWITCH`). Despite the "EAS" name the app's own
+   * parser maps this id onto `anti_theft_detection_switch`, so the camera member uses that semantic
+   * name. The app's "EAS" resource strings mix emergency- and anti-theft-worded copy; the parser is
+   * the tiebreak.
+   *
+   * Wire from the app's own JS: a scalar `params:{value:0|1}`. Emitted with the **adaptive** form so
+   * topology picks the level — level-2/direct on a HomeBase-attached device, level-1 on a standalone.
+   *
+   * ⚠️ Replay + readback confirmed on a **HomeBase-attached** T8425 only (1015 read `0` → write → `1`
+   * → restore): the frame is confirmed accepted and persisted, NOT byte-compared to the app's. The
+   * **standalone** path is unverified, and newer (v3) devices use a *different* id for the same
+   * switch — `APP_CMD_NEW_EAS_SWITCH` (2735) — which has no path here; don't assume 1015 drives them.
+   */
+  EAS_SWITCH: 1015,
+  /**
+   * RECORDING quality — what gets stored, not the live view; {@link CAMERA_CMD.STREAMING_QUALITY_SET}
+   * below is the live one, and the app's name for this id is `multicamSetRecordQuailty`.
+   * Wire confirmed on a T8425 ch3: `1350` SET_PAYLOAD, inner cmd 2731,
+   * `payload:{channel:0, mode:0, primary_view:0, quality:N}`, mValue3 0, on the device channel. Tiers
+   * 1/2/3, named in {@link RECORDING_QUALITY_TIERS} — no tier 0 on this wire, where streaming has one.
+   * That is a fact about 2731 on the cameras it was confirmed on, not about recording everywhere. A
+   * doorbell has no recording-quality setting at all, and its live-view quality rides neither 2730 nor
+   * 2731 but 1705, on a domain of its own (5 = Auto, 6/7/8 = Low/Medium/High, all four observed).
+   */
+  RECORDING_QUALITY_SET: 2731,
+  /**
+   * LIVE-VIEW quality — a separate setting from {@link CAMERA_CMD.RECORDING_QUALITY_SET}, and the app's
+   * names for the two invert what they suggest: 2730 is `multicamSetVideoQuailty` and drives the
+   * Streaming Quality picker, while 2731 is `multicamSetRecordQuailty` and drives Recording Quality.
+   * Changing one leaves the other's parameter untouched, which is how they were told apart.
+   *
+   * Unlike recording it offers a tier 0, `Auto`. Wire verified live on a T8170 (standalone): the `1350`
+   * SET_PAYLOAD envelope, signCode 8, plaintext `{"cmd":2730,"payload":{"transaction":"<epoch ms>",
+   * "quality":N,"channel":0,"mode":0,"primary_view":0},"account_id":…}`. All four tiers captured
+   * byte-exact and read back on parameter 1020; the station echoes the same payload back as a `1351`
+   * NOTIFY_PAYLOAD carrying the same `transaction`.
+   */
+  STREAMING_QUALITY_SET: 2730
 };
-var CAMERA = {
-  capability: "camera",
-  description: "Camera power (on/off, CAMERA_SWITCH 1035) and privacy mode (PRIVACY_MODE 6250).",
-  members: CAMERA_MEMBERS,
-  properties: propertiesOf(CAMERA_MEMBERS),
-  /** Every camera-codec device has the power/privacy surface. */
-  detection: { codecs: ["camera"] },
-  /** Only the no-argument power verbs, which carry no value for a member to hold. */
-  actions({ ctx, sink }) {
-    if (!isCameraCodec(ctx))
-      return {};
-    return {
-      on: () => sink.dispatch(powerCommand(true, ctx)),
-      off: () => sink.dispatch(powerCommand(false, ctx))
-    };
-  }
+function hasReportedEasSwitch(source) {
+  return source.paramIds?.has(CAMERA_CMD.EAS_SWITCH) === true || Object.hasOwn(source.params ?? {}, CAMERA_CMD.EAS_SWITCH);
+}
+var Watermark = {
+  /** No timestamp or logo. */
+  Off: 0,
+  /** Timestamp only. */
+  Timestamp: 1,
+  /** Timestamp + eufy logo. */
+  TimestampAndLogo: 2
 };
-
-// dist/model/capabilities/siren.js
-var SIREN_PARAM = {
-  /** Whether the siren is sounding (app `APP_CMD_DEV_RING_STATUS`). 1 = sounding, 0 = silent. */
-  RING_STATUS: 61008,
-  /** Alarm volume as a device level (app `APP_CMD_SIREN_SENSOR_SET_ALARM_VOL`). See {@link SirenVolume}. */
-  ALARM_VOLUME: 1825,
-  /** Seconds an alarm sounds before stopping itself (app `APP_CMD_DEV_ALARM_TIMEOUT`). */
-  ALARM_TIMEOUT: 61006,
-  /** Do-not-disturb (app `APP_CMD_SENSOR_NOT_DISTURB`). */
-  NOT_DISTURB: 1828
+var NotificationStyle2 = {
+  /** The push carries text alone. */
+  TextOnly: 1,
+  /** The push carries a thumbnail of the detection. */
+  IncludedThumbnail: 2,
+  /** The push arrives as text, then updates with a thumbnail. */
+  TextFirstThenThumbnail: 3
 };
-var SIREN_CMD = {
-  /** Sound the siren briefly as a test (app `APP_CMD_SIREN_SENSOR_ALARM_TEST`). */
-  ALARM_TEST: 1826,
-  /** Manually stop a sounding alarm (app `APP_CMD_SIREN_SENSOR_MANUAL_STOP_ALARM`). */
-  MANUAL_STOP: 1871,
-  /** Station-family HomeBase duration alarm, verified live on T8010 and T8030 (app `SET_TONE_FILE`). */
-  HOMEBASE_TONE: 1201,
-  /** HomeBase alarm volume percentage (app `CMD_SET_HUB_SPK_VOLUME`). */
-  HUB_SPK_VOLUME: 1235,
-  /** HomeBase alarm-tone selection (app `APP_CMD_HUB_ALARM_TONE`). */
-  HUB_ALARM_TONE: 1281,
-  /** Attached-camera duration alarm, verified live on T8114 and T8210 (app `SET_DEVS_TONE_FILE`). */
-  CAMERA_TONE: 1202
+var SoundDetectionType = {
+  /** Crying alone triggers a detection. */
+  Crying: 1,
+  /** Any sound loud enough for the sensitivity triggers a detection. */
+  AllSound: 2
 };
-var STATION_CHANNEL = 255;
-var SirenVolume = { Low: 1, Mid: 2, High: 3 };
-var SirenAlarmDuration = { Min1: 60, Min5: 300, Min10: 600, Min15: 900 };
-var HubAlarmTone = { Tone1: 1, Tone2: 2 };
-var HUB_ALARM_EVIDENCE = [SIREN_CMD.HUB_ALARM_TONE, 1282];
-function isStationAlarmOutput(ctx) {
-  return ctx.deviceType === DeviceType.STATION || ctx.deviceType === DeviceType.HB3;
+var NightVision = {
+  /** Off — never use infrared. */
+  Off: 0,
+  /** Infrared / "B&W Auto" — black-and-white night vision. */
+  Infrared: 1,
+  /** Full colour night vision (models with a spotlight / starlight sensor). */
+  FullColor: 2
+};
+var RecordingQuality = {
+  HD720: "HD (720P)",
+  FullHD1080: "Full HD (1080P)",
+  Max: "Max"
+};
+var RECORDING_QUALITY_TIERS = {
+  1: "HD (720P)",
+  2: "Full HD (1080P)",
+  3: "Max"
+};
+var StreamingQuality = {
+  Auto: "Auto",
+  ...RecordingQuality
+};
+var STREAMING_QUALITY_TIERS = {
+  0: "Auto",
+  ...RECORDING_QUALITY_TIERS
+};
+function resolveStreamingQuality(value) {
+  return STREAMING_QUALITY_TIERS[value];
 }
-function isEvidencedStationAlarm(ctx) {
-  return isStationAlarmOutput(ctx) && HUB_ALARM_EVIDENCE.some((param) => ctx.paramIds.has(param));
+function resolveStreamingQualityTier(value) {
+  if (typeof value === "boolean")
+    return void 0;
+  if (typeof value === "string" && !/^\d+$/.test(value.trim())) {
+    const hit = Object.entries(STREAMING_QUALITY_TIERS).find(([, label]) => label.toLowerCase() === value.trim().toLowerCase());
+    return hit ? Number(hit[0]) : void 0;
+  }
+  const tier = Number(value);
+  return Number.isInteger(tier) && STREAMING_QUALITY_TIERS[tier] != null ? tier : void 0;
 }
-var S1_PRO_ALARM_MODELS = /* @__PURE__ */ new Set([
-  "T8134",
-  "T814X",
-  "T8214",
-  "T8790",
-  "T8122",
-  "T8113-Z",
-  "T8400"
-]);
-function isEvidencedAttachedCamera(ctx) {
-  return ctx.codec === "camera" && ctx.homeBaseAttached === true && hasReportedEasSwitch(ctx) && (!isStation9000({ deviceType: ctx.stationDeviceType }) || S1_PRO_ALARM_MODELS.has(ctx.model ?? ""));
+function resolveRecordingQuality(value) {
+  return RECORDING_QUALITY_TIERS[value];
 }
-function reportsParam(source, param) {
-  return source.paramIds?.has(param) === true || Object.hasOwn(source.params ?? {}, param);
+function resolveRecordingQualityValue(name) {
+  const hit = Object.entries(RECORDING_QUALITY_TIERS).find(([, label]) => label.toLowerCase() === name.trim().toLowerCase());
+  return hit ? Number(hit[0]) : void 0;
 }
-function hasStandaloneSirenEvidence(source) {
-  return reportsParam(source, SIREN_PARAM.ALARM_VOLUME) && (reportsParam(source, SIREN_PARAM.RING_STATUS) || reportsParam(source, SIREN_PARAM.ALARM_TIMEOUT));
+function resolveRecordingQualityTier(value) {
+  if (typeof value === "boolean")
+    return void 0;
+  if (typeof value === "string" && !/^\d+$/.test(value.trim()))
+    return resolveRecordingQualityValue(value);
+  const tier = Number(value);
+  return Number.isInteger(tier) && RECORDING_QUALITY_TIERS[tier] != null ? tier : void 0;
 }
-function isSensorCodec(ctx) {
-  return ctx.codec === "sensor";
+function decodeRecordingQualityTier(raw) {
+  if (typeof raw === "number" || typeof raw === "string")
+    return resolveRecordingQualityTier(raw);
+  if (typeof raw !== "object" || raw === null)
+    return void 0;
+  const cfg = raw;
+  const mode = cfg[`mode_${Number(cfg.cur_mode) || 0}`];
+  const quality = typeof mode === "object" && mode !== null ? mode.quality : void 0;
+  return typeof quality === "number" ? resolveRecordingQualityTier(quality) : void 0;
 }
-function isEvidencedStandaloneSiren(ctx) {
-  return isSensorCodec(ctx) && hasStandaloneSirenEvidence(ctx);
+function isEnableBitPolarity(ctx) {
+  const t = ctx.deviceType;
+  if (t === void 0)
+    return false;
+  if (t === DeviceType.INDOOR_CAMERA && ctx.paramIds.has(CAMERA_CMD.CAMERA_ENABLE))
+    return false;
+  if (isIndoorCamera(ctx) && !isIndoorCamMini(ctx) && !isIndoorPanTiltS350(ctx))
+    return true;
+  return ENABLE_BIT_FLOODLIGHT_TYPES.has(t);
 }
-function homeBaseAlarm(seconds, ctx) {
-  if (!ctx.accountName)
-    throw new Error("station-family HomeBase alarm output requires the acting account name");
-  return setPayload(SIREN_CMD.HOMEBASE_TONE, { time_out: seconds, user_name: ctx.accountName }, ctx, 0, STATION_CHANNEL);
+var ENABLE_BIT_FLOODLIGHT_TYPES = /* @__PURE__ */ new Set([
+  DeviceType.FLOODLIGHT_CAMERA_8422,
+  DeviceType.FLOODLIGHT_CAMERA_8424
+]);
+function powerValue(on, ctx) {
+  return isEnableBitPolarity(ctx) ? on ? 1 : 0 : on ? 0 : 1;
 }
-var PORTAL_MANUAL_ALARM_TYPE = 10;
-function cameraAlarm(seconds, ctx) {
-  if (isStation9000({ deviceType: ctx.stationDeviceType })) {
-    if (!ctx.accountName)
-      throw new Error("a camera alarm behind a HomeBase S1 Pro requires the acting account name");
-    return setPayload(SIREN_CMD.CAMERA_TONE, {
-      time_out: seconds,
-      type: PORTAL_MANUAL_ALARM_TYPE,
-      channel: ctx.channel,
-      username: ctx.accountName
-    }, ctx);
+function isT8410HomeBase3(ctx) {
+  return ctx.model === "T8410" && ctx.stationSerial?.startsWith("T8030") === true;
+}
+function isT8442(ctx) {
+  return ctx.model === "T8442";
+}
+function usesHomeBasePowerPayload(ctx) {
+  if (!isT8410HomeBase3(ctx) || !ctx.firmwareVersion || !/^\d+(?:\.\d+){2,3}$/.test(ctx.firmwareVersion))
+    return false;
+  const version = ctx.firmwareVersion.split(".").map(Number);
+  const minimum = [2, 3, 1, 0];
+  for (let i = 0; i < minimum.length; i++) {
+    const difference = (version[i] ?? 0) - minimum[i];
+    if (difference !== 0)
+      return difference > 0;
   }
-  return {
-    kind: "p2p-int-string",
-    cmd: SIREN_CMD.CAMERA_TONE,
-    value: seconds,
-    valueSub: ctx.channel,
-    channel: ctx.channel
-  };
+  return true;
 }
-function alarmOutputFamily(ctx) {
-  if (isEvidencedStationAlarm(ctx))
-    return "homebase";
-  if (isEvidencedAttachedCamera(ctx))
-    return "camera";
-  if (isEvidencedStandaloneSiren(ctx))
-    return "standalone";
-  return void 0;
+function hasUnreflectedHomeBasePower(ctx) {
+  return usesHomeBasePowerPayload(ctx) && !ctx.paramIds.has(2001);
 }
-function triggerAlarm(seconds, ctx) {
-  const family = alarmOutputFamily(ctx);
-  if (family === "homebase")
-    return homeBaseAlarm(seconds, ctx);
-  if (family === "camera")
-    return cameraAlarm(seconds, ctx);
-  throw new Error("manual alarm trigger has no verified wire for this device family");
+function hasPrivacyPower(ctx) {
+  return ctx.deviceType === DeviceType.INDOOR_PT_CAMERA_S350 && ctx.homeBaseAttached === true;
 }
-function stopAlarm(ctx) {
-  const family = alarmOutputFamily(ctx);
-  if (family === "homebase")
-    return homeBaseAlarm(0, ctx);
-  if (family === "camera")
-    return cameraAlarm(0, ctx);
-  if (family === "standalone")
-    return sirenPayload(SIREN_CMD.MANUAL_STOP, {}, ctx);
-  throw new Error("manual alarm stop has no verified wire for this device family");
+function powerCommand(on, ctx) {
+  if (hasPrivacyPower(ctx))
+    return privacyCommand(!on, ctx.channel);
+  if (usesHomeBasePowerPayload(ctx))
+    return setPayload(CAMERA_CMD.PRIVACY_MODE, { switch: on ? 0 : 1 }, ctx, 0);
+  return setScalar(CAMERA_CMD.CAMERA_ENABLE, powerValue(on, ctx), ctx, "auto");
 }
-function validateTriggerDuration(seconds) {
-  if (!Number.isSafeInteger(seconds) || seconds <= 0) {
-    throw new Error(`trigger duration ${String(seconds)} is not a positive safe whole-number duration in seconds`);
+function privacyCommand(enabled, channel) {
+  return { kind: "p2p-privacy-burst", enabled, channel };
+}
+function statusLedCommand(on, ctx) {
+  if (hasCapability(ctx, "doorbell"))
+    return setPayload(CAMERA_CMD.DOORBELL_LED, { light_enable: on ? 1 : 0 }, ctx);
+  return setScalar(CAMERA_CMD.DEV_LED_SWITCH, on ? 1 : 0, ctx, "int-string");
+}
+function poweredOf(ctx) {
+  return cameraPowerTier(ctx.model, ctx.capabilities ?? /* @__PURE__ */ new Set());
+}
+function enablementReflection(on, ctx) {
+  if (!CAMERA_MEMBERS.enabled.readReflectsWrite(ctx))
+    return void 0;
+  const alias = CAMERA_MEMBERS.enabled.readAliases[0].paramType;
+  if (ctx.paramIds.has(alias))
+    return { param: alias, expected: on, observed: on };
+  if (ctx.paramIds.has(CAMERA_CMD.CAMERA_ENABLE)) {
+    return {
+      param: CAMERA_CMD.CAMERA_ENABLE,
+      expected: powerValue(on, ctx),
+      observed: on
+    };
   }
-  return seconds;
+  return void 0;
 }
-function sirenPayload(cmd, body, ctx) {
-  return setPayload(cmd, { ...body, transaction: String(Date.now()) }, ctx, 0);
+function refuseWhenDisabled(ctx, read) {
+  if (CAMERA_MEMBERS.enabled.readReflectsWrite(ctx) && read("enabled")?.value === false)
+    throw new CameraDisabledError(ctx.name ?? ctx.serial);
 }
-var SIREN_MEMBERS = {
-  /**
-   * Authoritative sounding state reported by a standalone siren. HomeBase and camera command
-   * acknowledgements do not install or update this read.
-   */
-  active: {
-    param: SIREN_PARAM.RING_STATUS,
-    property: "siren",
-    type: "bool",
-    kind: "boolean",
-    provenance: "verified",
-    available: isSensorCodec,
-    description: "Whether the siren is sounding (61008 APP_CMD_DEV_RING_STATUS). \u2705 Confirmed boolean: a live test on a T90R0 pushed 1 (sounding) then 0 (silent)."
-  },
-  /**
-   * Rejected, not clamped, outside the 1-3 set: the write is fire-and-forget, so an out-of-range level
-   * would look like it worked.
-   */
-  volume: {
-    param: SIREN_PARAM.ALARM_VOLUME,
-    property: "sirenVolume",
+function refuseUnsupportedView(media, opts) {
+  const view = opts?.view ?? 0;
+  if (!(media.views ?? [0]).includes(view))
+    throw new RangeError(`camera: unsupported optical view ${view}`);
+}
+var CAMERA_MEMBERS = {
+  /** Reads the latest cached report and exposes no setter. */
+  wifiRssi: {
+    param: CAMERA_CMD.WIFI_RSSI,
     type: "number",
     kind: "scalar",
-    provenance: "verified",
-    available: isSensorCodec,
-    requires: [SIREN_PARAM.ALARM_VOLUME],
-    enumValues: enumLabels(SirenVolume),
-    args: [{ name: "level", kind: "scalar", description: "A device level 1-3 (Low/Mid/High), not a percentage." }],
-    description: "Alarm volume (1825 APP_CMD_SIREN_SENSOR_SET_ALARM_VOL), a device level 1-3 (Low/Mid/High), NOT a percentage. Write verified live on a T90R0 (1350 SET_PAYLOAD {volume}).",
-    write: (v, ctx) => {
-      const level = coerceEnumValue(SirenVolume, v);
-      return level === void 0 ? void 0 : sirenPayload(SIREN_PARAM.ALARM_VOLUME, { volume: level }, ctx);
-    }
+    provenance: "apk",
+    description: "Camera-reported Wi-Fi signal; physical units and a quality scale are unspecified."
   },
-  /** Only the four captured presets are accepted: no capture supports an arbitrary duration. */
-  alarmDuration: {
-    param: SIREN_PARAM.ALARM_TIMEOUT,
-    type: "number",
-    unit: "s",
-    kind: "seconds",
+  /**
+   * The default READ is the *disable*-bit convention (1035 "0" ⇒ ON, 2001 direct); the WRITE polarity is
+   * family-dependent — see `powerValue` / `isEnableBitPolarity`. Battery/solo cams report the state under
+   * 1035, standalone indoor/outdoor cams under 2001 OPEN_DEVICE with direct polarity, so 2001 is a
+   * read-alias. Both verified live, and the write polarity is confirmed against the app's own frames.
+   *
+   * T8410 on HomeBase 3 reports 1035 as an enable bit ("1" ⇒ ON). That reported state does not reliably
+   * reflect the privacy command. `readReflectsWrite` states this distinction.
+   *
+   * The privacy param (6250) is reported by the outdoor-PT family and by no other camera measured, and both
+   * of its polarities are observed. It is deliberately NOT aliased here: it moved in the same step as 1035, so
+   * the reading cannot say whether power and privacy are one state or two — so
+   * aliasing a second param could only fold two possible states into one getter for no gain.
+   */
+  enabled: {
+    param: CAMERA_CMD.CAMERA_ENABLE,
+    type: "bool",
+    kind: "boolean",
     provenance: "verified",
-    available: isSensorCodec,
-    requires: [SIREN_PARAM.ALARM_TIMEOUT],
-    enumValues: enumLabels(SirenAlarmDuration),
-    args: [{ name: "seconds", kind: "seconds", description: "One of the app's presets: 60/300/600/900." }],
-    description: "How long an alarm sounds before stopping itself (61006 APP_CMD_DEV_ALARM_TIMEOUT), seconds. Write verified live on a T90R0 (1350 SET_PAYLOAD {value}); app presets 60/300/600/900.",
+    available: isCameraCodec,
+    invert: true,
+    invertFor: (ctx) => isT8410HomeBase3(ctx) ? false : void 0,
+    readAliases: [{ paramType: 2001, invert: false }],
+    readReflectsWrite: (ctx) => !hasUnreflectedHomeBasePower(ctx) && !hasPrivacyPower(ctx),
+    description: "Camera enabled. Family-dependent wire param: 1035 CMD_DEVS_SWITCH (enable bit on T8410/HomeBase 3, disable bit on battery/solo cams) or 2001 OPEN_DEVICE (standalone indoor/outdoor). Reported on/off state; unreflectedMembers identifies commands whose effect this report does not reliably reflect.",
+    observation: {
+      event: "cameraEnabledChanged",
+      reflects: (value, ctx) => enablementReflection(asBool(value), ctx),
+      timeoutMs: 2e4
+    },
+    write: (v, ctx) => powerCommand(asBool(v), ctx),
+    aliases: { on: true, off: false }
+  },
+  /**
+   * A 180° rotation for a ceiling or upside-down mount, not a mirror — the app's own constant calls it
+   * `INDOOR_ROTATE_IMAGE` but it is not indoor-only. `apk` provenance: the wire is read out of the app
+   * parser and the write has not been driven on hardware, so treat a silent no-op as possible and
+   * confirm by re-reading rather than by trusting the dispatch.
+   */
+  imageFlipped: {
+    param: CAMERA_CMD.ROTATE_IMAGE,
+    type: "bool",
+    kind: "boolean",
+    provenance: "apk",
+    available: isCameraCodec,
+    description: "Rotate the image 180\xB0 (ROTATE_IMAGE 1207): false = normal, true = flipped. For ceiling/upside-down mounts. Write is a direct param; wire from the app parser (unverified live).",
+    write: (v, ctx) => setScalar(CAMERA_CMD.ROTATE_IMAGE, asBool(v) ? 1 : 0, ctx, "auto")
+  },
+  /**
+   * A THREE-VALUE enum, not the boolean the name suggests — the middle option is timestamp without the
+   * logo, so a plain switch cannot express every state the device has. `coerceEnumValue` refuses
+   * anything outside {@link Watermark} instead of coercing it: on a fire-and-forget write a bogus index
+   * would dispatch and look like it worked. The labels are the app's radio order.
+   */
+  watermark: {
+    param: CAMERA_CMD.SET_DEVS_OSD,
+    type: "enum",
+    kind: "enum",
+    enumValues: { 0: "Off", 1: "Timestamp", 2: "Timestamp + Logo" },
+    provenance: "verified",
+    available: isCameraCodec,
+    description: "On-screen watermark/OSD overlay (CMD_SET_DEVS_OSD 1214). \u2705 wire verified live (T8425 ch3): direct-binary [ch][value 0/1/2] \u2014 a 3-value enum, not a bool. Enum labels are best-guess.",
     write: (v, ctx) => {
-      const seconds = coerceEnumValue(SirenAlarmDuration, v);
-      return seconds === void 0 ? void 0 : sirenPayload(SIREN_PARAM.ALARM_TIMEOUT, { value: seconds }, ctx);
+      const w = coerceEnumValue(Watermark, v);
+      return w == null ? void 0 : setScalar(CAMERA_CMD.SET_DEVS_OSD, w, ctx, "auto");
     }
   },
   /**
-   * Read-only: `apk` provenance means the id comes from the disassembled app and the only live evidence
-   * is a T90R0 reporting 0, which fixes neither the polarity's other value nor a write frame. Typed
-   * `bool` on the app's own naming; do not add a setter until a toggle is captured.
+   * Whether the camera triggers on what it HEARS — the sound counterpart to motion detection, which the
+   * app presents beside it. The camera keeps the sensitivity and the type it was last given, so
+   * switching this off and on again restores the previous configuration rather than resetting it.
    */
-  doNotDisturb: {
-    param: SIREN_PARAM.NOT_DISTURB,
+  soundDetection: {
+    param: CAMERA_CMD.SOUND_DETECTION,
     type: "bool",
     kind: "boolean",
-    provenance: "apk",
-    available: isSensorCodec,
-    description: "Do-not-disturb (1828 APP_CMD_SENSOR_NOT_DISTURB). Observed 0 on a T90R0."
+    provenance: "verified",
+    available: isCameraCodec,
+    description: "Trigger on sound as well as motion (SOUND_DETECTION 6043). \u2705 Write confirmed live on a T8410 (mains, standalone, own channel): both directions sent through this member and read back on the cloud param, and the app's own frame captured byte-exact for the same body.",
+    write: (v, ctx) => setJson(CAMERA_CMD.SOUND_DETECTION, { status: asBool(v) ? 1 : 0 }, ctx)
   },
-  /** HomeBase alarm volume is a percentage on a station-scalar wire, unlike standalone level 1-3. */
-  alarmVolume: {
-    param: SIREN_CMD.HUB_SPK_VOLUME,
+  /**
+   * How loud a sound must be to trigger: `1` lowest, `3` mid, `5` highest, on the app's own
+   * three-position control. A `scalar` rather than an enum — the endpoints and the midpoint are
+   * observed, so 2 and 4 are a prediction of the scale's shape rather than values the wire is known to
+   * take. Independent of {@link CAMERA_MEMBERS.soundDetection}: the camera stores it whether sound
+   * detection is on or off.
+   */
+  soundDetectionSensitivity: {
+    param: CAMERA_CMD.SOUND_DETECTION_SENSITIVITY,
     type: "number",
-    unit: "%",
-    kind: "percent",
-    writeOnly: true,
+    kind: "scalar",
     provenance: "verified",
-    available: isHomeBase,
-    requires: HUB_ALARM_EVIDENCE,
-    min: 0,
-    max: 100,
-    description: "HomeBase alarm volume 0..100 (1235 CMD_SET_HUB_SPK_VOLUME). Verified audible on a T8030.",
-    write: (v) => setStationScalar(SIREN_CMD.HUB_SPK_VOLUME, Number(v), STATION_CHANNEL)
+    available: isCameraCodec,
+    description: "Sound-detection sensitivity: 1 = lowest, 3 = mid, 5 = highest (SOUND_DETECTION_SENSITIVITY 6044). \u2705 Write confirmed live on a T8410: 1 and 5 sent consecutively through this member and read back on the cloud param. 2 and 4 are the scale's shape, not observed values.",
+    write: (v, ctx) => {
+      const n = Number(v);
+      if (!Number.isInteger(n) || n < 1 || n > 5)
+        return void 0;
+      return setJson(CAMERA_CMD.SOUND_DETECTION_SENSITIVITY, { index: n }, ctx);
+    }
   },
-  /** HomeBase alarm tone keeps its independently verified two-option domain. */
-  alarmTone: {
-    param: SIREN_CMD.HUB_ALARM_TONE,
-    property: "hubAlarmTone",
-    type: "number",
+  /**
+   * WHICH sounds count — any sound, or crying alone. `coerceEnumValue` refuses anything outside
+   * {@link SoundDetectionType} rather than coercing it: both neighbouring values are real types, so a
+   * coerced one arms the wrong trigger and reports success.
+   */
+  soundDetectionType: {
+    param: CAMERA_CMD.SOUND_DETECTION_TYPE,
+    type: "enum",
     kind: "enum",
-    enumValues: enumLabels(HubAlarmTone),
+    enumValues: { 1: "Crying", 2: "All Sound" },
     provenance: "verified",
-    available: isHomeBase,
-    requires: HUB_ALARM_EVIDENCE,
-    args: [{ name: "tone", kind: "enum", description: "One of the app's alarm tones (1-indexed)." }],
-    description: "HomeBase alarm tone selection (1281 APP_CMD_HUB_ALARM_TONE; 1350 SET_PAYLOAD {type}, mValue3 0). Wire verified live on a T8030.",
+    available: isCameraCodec,
+    description: "Which sounds trigger a detection: crying alone, or any sound (SOUND_DETECTION_TYPE 6046). \u2705 Write confirmed live on a T8410: both values sent consecutively through this member and read back on the cloud param.",
     write: (v, ctx) => {
-      const tone = coerceEnumValue(HubAlarmTone, v);
-      return tone === void 0 ? void 0 : setPayload(SIREN_CMD.HUB_ALARM_TONE, { type: tone }, ctx, 0);
+      const type = coerceEnumValue(SoundDetectionType, v);
+      return type == null ? void 0 : setJson(CAMERA_CMD.SOUND_DETECTION_TYPE, { type }, ctx);
     }
   },
-  /** Sound a standalone siren briefly using its dedicated installation-test wire. */
-  test: {
-    action: (ctx) => sirenPayload(SIREN_CMD.ALARM_TEST, {}, ctx),
-    available: isEvidencedStandaloneSiren,
-    description: "Sound the siren briefly as a test."
-  },
-  /** Trigger a verified station-family HomeBase or evidenced attached-camera alarm for a bounded duration. */
-  trigger: {
-    ...method(({ ctx, sink }) => async (seconds) => {
-      await sink.dispatch(triggerAlarm(validateTriggerDuration(seconds), ctx));
-    }, "Trigger the alarm for a positive whole-number duration in seconds.", (ctx) => isEvidencedStationAlarm(ctx) || isEvidencedAttachedCamera(ctx)),
-    args: [{ name: "seconds", kind: "seconds", min: 1, description: "A positive whole-number duration." }]
-  },
-  /** Stop a verified alarm-output family through its own wire contract. */
-  stop: method(({ ctx, sink }) => () => sink.dispatch(stopAlarm(ctx)), "Manually stop a sounding alarm.", (ctx) => alarmOutputFamily(ctx) !== void 0)
-};
-var SIREN = {
-  capability: "siren",
-  description: "Audible alarm output with evidence-bounded state, configuration, test, trigger, and stop members.",
-  members: SIREN_MEMBERS,
-  properties: propertiesOf(SIREN_MEMBERS),
-  /** Detection uses reported evidence and topology; no model string or device type admits a wire. */
-  detection: {
-    detect: (record, codec) => {
-      const homeBase = record.deviceType !== void 0 && HOMEBASE_TYPES.has(record.deviceType);
-      const homeBaseAlarm2 = homeBase && HUB_ALARM_EVIDENCE.some((param) => Object.hasOwn(record.params ?? {}, param));
-      const attachedCameraAlarm = codec === "camera" && !!record.parentSn && hasReportedEasSwitch(record);
-      const standaloneSiren = codec === "sensor" && hasStandaloneSirenEvidence(record);
-      return homeBaseAlarm2 || attachedCameraAlarm || standaloneSiren;
-    }
-  }
-};
-
-// dist/model/capabilities/light.js
-var LIGHT_CMD = {
-  /** Spotlight momentary on/off; `{time,type,value}` under 1700. ✅ Verified via P2P state readback (3/3). */
-  FLOODLIGHT_SWITCH: 1400,
   /**
-   * Spotlight brightness 1..100. ✅ SOLVED & verified live (T8425 + T8124): direct-binary command,
-   * 136-byte struct `[u32 ch][u32 value][account_id pad→128]` (value = raw 1..100), NOT a JSON wrapper.
+   * `coerceEnumValue` refuses anything outside {@link NotificationStyle} instead of coercing it: every
+   * neighbouring value is itself a real style, so a coerced one selects the wrong notification and
+   * reports success.
+   *
+   * `transaction` is part of the verified frame — a decimal epoch-in-milliseconds string, fresh per
+   * command.
    */
-  SPOTLIGHT_BRIGHTNESS: 1401,
-  /** Spotlight master enable — distinct from the on/off switch. ✅ Verified live T8124 (same 136-byte direct-binary struct as brightness). */
-  SPOTLIGHT_ENABLE: 1403,
-  /** Spotlight color temperature 0=warm..100=cool. ✅ Verified live T8124 (only tunable-white spotlights respond; T8425 is white-only). */
-  SPOTLIGHT_COLOR_TEMP: 1410,
+  notificationStyle: {
+    param: CAMERA_CMD.PUSH_NOTIFY_TYPE,
+    type: "enum",
+    kind: "enum",
+    enumValues: { 1: "Text Only", 2: "Included Thumbnail", 3: "Text First, Then Thumbnail" },
+    provenance: "verified",
+    available: isCameraCodec,
+    description: "How much a detection push carries: text only, a thumbnail, or text then a thumbnail (CMD_INDOOR_PUSH_NOTIFY_TYPE 6020). All three values wire-verified live on a standalone T8171 over the cloud/WAN path \u2014 the 1700 control-payload wrapper, each one read back on the cloud param. A value outside the enum is REJECTED, not clamped: every neighbouring value is a real style, so a bad one would silently select the wrong notification.",
+    write: (v, ctx) => {
+      const style = coerceEnumValue(NotificationStyle2, v);
+      return style == null ? void 0 : setJson(CAMERA_CMD.PUSH_NOTIFY_TYPE, { value: style, transaction: String(Date.now()) }, ctx);
+    }
+  },
   /**
-   * Auto-spotlight = "motion-activated light" — light up when motion fires. ✅ Wire reversed from a live
-   * OUTBOUND P2P capture + replay-verified on T8425 (ch3, 2026-07-13, ON+OFF): the real command
-   * is **cmd 1422**, carried in a `1350` SET_PAYLOAD envelope on the DEVICE channel (mChannel = device
-   * channel, mValue3 0), with a COMPOSITE payload — NOT a bare bool:
-   *   `{brightness:0..100, enable:0|1, latitude:"", longtitude:"" (sic), mode:1, schedule:[], sunset2rise:0, time}`
-   * `enable` is the on/off; `time` = auto-off seconds; `mode`/`schedule`/`sunset2rise` are the scheduling
-   * knobs. See {@link AutoSpotlightOptions}.
-   * NB: the app-JS constant `APP_CMD_SET_LIGHT_CTRL_PIR_SWITCH` (1408) is a RED HERRING for this device —
-   * the T8425 never emits 1408; three 1408 wire attempts all no-op'd. (No `1408` constant is defined — it's
-   * dead; do not add one.)
+   * Three modes, and `FullColor` is the conditional one: a model without a spotlight or starlight
+   * sensor omits it, and the wire accepts the value regardless — the device's own reported set is the
+   * only statement of which of the three it has. `coerceEnumValue` rejects a value outside
+   * {@link NightVision} rather than coercing it. The payload key on the wire is `night_sion`.
    */
-  MOTION_ACTIVATE_LIGHT: 1422
-};
-var BRIGHTNESS_MIN = 1;
-var BRIGHTNESS_MAX = 100;
-function autoSpotlightCommand(on, ctx, opts = {}) {
-  return setPayload(LIGHT_CMD.MOTION_ACTIVATE_LIGHT, {
-    brightness: clamp(Number(opts.brightness ?? 50), BRIGHTNESS_MIN, BRIGHTNESS_MAX),
-    enable: on ? 1 : 0,
-    latitude: "",
-    longtitude: "",
-    mode: opts.mode ?? 1,
-    schedule: [],
-    sunset2rise: 0,
-    time: opts.time ?? 30
-  }, ctx, 0, void 0, "auto");
-}
-function lightSwitchWire(ctx) {
-  const t = ctx.deviceType;
-  if (t === void 0)
-    return void 0;
-  if (LIGHT_SWITCH_JSON_TYPES.has(t))
-    return "json";
-  if (LIGHT_SWITCH_INT_STRING_TYPES.has(t))
-    return "int-string";
-  return void 0;
-}
-var LIGHT_SWITCH_JSON_TYPES = /* @__PURE__ */ new Set([
-  DeviceType.FLOODLIGHT_CAMERA_8425,
-  ...WALL_LIGHT_TYPES,
-  DeviceType.INDOOR_PT_CAMERA,
-  DeviceType.INDOOR_PT_CAMERA_1080,
-  DeviceType.CAMERA_4G_S330
-]);
-var LIGHT_SWITCH_INT_STRING_TYPES = /* @__PURE__ */ new Set([
-  DeviceType.FLOODLIGHT_CAMERA_8423,
-  DeviceType.INDOOR_OUTDOOR_CAMERA_1080P_NO_LIGHT,
-  DeviceType.INDOOR_OUTDOOR_CAMERA_2K,
-  DeviceType.INDOOR_OUTDOOR_CAMERA_1080P,
-  DeviceType.OUTDOOR_PT_CAMERA,
-  DeviceType.CAMERA2C,
-  DeviceType.CAMERA2,
-  DeviceType.CAMERA2_PRO,
-  DeviceType.CAMERA2C_PRO,
-  DeviceType.CAMERA3,
-  DeviceType.CAMERA3C,
-  DeviceType.PROFESSIONAL_247
-]);
-function switchCommand(on, ctx) {
-  switch (lightSwitchWire(ctx)) {
-    case "json":
-      return setJson(LIGHT_CMD.FLOODLIGHT_SWITCH, { time: 0, type: 2, value: on ? 1 : 0 }, ctx);
-    case "int-string":
-      return setScalar(LIGHT_CMD.FLOODLIGHT_SWITCH, on ? 1 : 0, ctx, "int-string");
-    default:
-      return void 0;
-  }
-}
-function directBinary(param, value, ctx) {
-  return setScalar(param, value, ctx, "direct-binary");
-}
-function switchFrame(on, ctx) {
-  const cmd = switchCommand(on, ctx);
-  if (!cmd)
-    throw new Error(`light: unknown spotlight switch wire format \u2014 confirm it [${describeDevice(ctx)}]`);
-  return cmd;
-}
-var LIGHT_MEMBERS = {
+  nightVision: {
+    param: CAMERA_CMD.NIGHT_VISION_TYPE,
+    type: "enum",
+    kind: "enum",
+    enumValues: { 0: "Off", 1: "Infrared", 2: "Full Color" },
+    enumValuesFor: (ctx) => isT8442(ctx) ? { 0: "Off", 1: "Infrared" } : void 0,
+    provenance: "verified",
+    available: isCameraCodec,
+    readAvailable: (ctx) => !isT8442(ctx),
+    readAliases: [{ paramType: 2002, available: isT8442 }],
+    description: "Night-vision mode: 0 = off, 1 = infrared (B&W), 2 = full colour where supported. T8425 uses NIGHT_VISION_TYPE 1277 (1350 SET_PAYLOAD, night_sion); T8442 reports 2002 and writes direct IC_NIGHT_VISION_TYPE 1013 (int-string, 0/1). Both wires verified live.",
+    write: (v, ctx) => {
+      const nv = coerceEnumValue(NightVision, v);
+      if (nv == null)
+        return void 0;
+      if (isT8442(ctx)) {
+        if (nv === NightVision.FullColor)
+          throw new Error("nightVision: Full Color is not supported on T8442 (only Off/Infrared)");
+        return setScalar(CAMERA_CMD.IC_NIGHT_VISION_TYPE, nv, ctx, "int-string");
+      }
+      return setPayload(CAMERA_CMD.NIGHT_VISION_TYPE, { channel: ctx.channel, night_sion: nv }, ctx, 0, 0, "auto");
+    }
+  },
   /**
-   * Whether the lamp is lit RIGHT NOW — the momentary switch, not a setting. Measured on a T8170: 1400
-   * goes to `1` when a client lights the spotlight and back to `0` when that client stops, so the value
-   * tracks whoever is streaming rather than a preference anyone set. The vendor app lights the lamp for a
-   * live view and drops it on quitting.
+   * Live-view quality, the pair to {@link CAMERA_MEMBERS.recordingQuality} and a different setting on a
+   * different wire: changing one leaves the other's parameter untouched.
    *
-   * So it reads on whenever any client is watching. The setting a user changes and expects to persist
-   * is {@link spotlightEnabled}.
+   * The READ is 1020, which reports the resolved tier as a plain integer, while the WRITE rides 2730's
+   * `1350` payload. They are two ids for one setting because 2730 carries a per-mode config and 1020
+   * carries the tier in force; the tier is what this property means. 1020 is also the name the param
+   * dictionary already gives that id, and `Device` keys state by NAME — a member claiming 2730 under
+   * this name would collide with it on a device reporting both.
    *
-   * The switch refuses for a reason a value check cannot give — this model's frame SHAPE is unconfirmed —
-   * so `switchFrame` throws that reason and `bindMembers` turns it into the rejection, rather than
-   * letting the generated "not a valid value" blame a boolean that was never the problem.
+   * `transaction` is part of the frame that was captured, so it is sent. The recording sibling's own
+   * confirmed frame carries no such field; neither is inferred from the other.
+   *
+   * Not offered where the device reports the doorbell's own live-view quality (1705).
    */
-  isOn: {
-    param: LIGHT_CMD.FLOODLIGHT_SWITCH,
-    property: "light",
-    type: "bool",
-    kind: "boolean",
+  streamingQuality: {
+    param: 1020,
+    type: "number",
+    kind: "enum",
+    enumValues: STREAMING_QUALITY_TIERS,
     provenance: "verified",
-    description: "Light on/off (1400) \u2014 lit right now, not a setting: it follows whichever client is streaming. Verified via P2P state readback (3/3); session-scoped behaviour measured live on a T8170.",
-    write: (v, ctx) => switchFrame(asBool(v), ctx),
-    writeAs: "set",
-    aliases: { on: true, off: false }
+    available: (ctx) => isCameraCodec(ctx) && !(ctx.paramIds?.has(DOORBELL_CMD.VIDEO_QUALITY) ?? false),
+    args: [{ name: "quality", kind: "enum", description: "A tier, or the name it maps to. 0 is Auto." }],
+    ...accepts(),
+    description: "Live-view quality as a tier, 0 = Auto (1020; the write rides 2730 APP_CMD_MULTI_CAM_SET_VIDEO_QUALITY). Distinct from recordingQuality, which is what gets stored. All four tiers wire-verified live on a T8170 and read back on 1020. Sent from this SDK to a standalone T8170 and T8171, tier 1 holds the live stream at 1280x720 and tier 0 restores the camera's own resolution ladder \u2014 see CAMERA_CMD.STREAMING_QUALITY_SET. A value outside the tier set is REJECTED, not clamped: every tier in range is a real quality, so a bad one would silently pick another.",
+    write: (v, ctx) => {
+      const q = resolveStreamingQualityTier(v);
+      return q == null ? void 0 : setPayload(CAMERA_CMD.STREAMING_QUALITY_SET, { channel: 0, mode: 0, primary_view: 0, quality: q, transaction: String(Date.now()) }, ctx, 0, void 0, "auto");
+    }
   },
   /**
-   * Manual level for the spotlight, 1-100 — the floor is 1 rather than 0 because a 0 reads as "off" and
-   * that is `isOn`'s job. The write is pinned to the level-2 direct-binary frame (`directBinary`),
-   * the only shape captured for it, so a standalone camera that never negotiates a level-2 key cannot
-   * set it even though the getter reads fine.
+   * `type` is how the value is STORED, and 2731 stores the whole config — the ACTIVE tier is lifted out
+   * of it by `decode`, so the getter answers a tier while the schema stays honest. The setter
+   * takes a resolution NAME as well as the tier the getter answers.
    */
-  brightness: {
-    param: LIGHT_CMD.SPOTLIGHT_BRIGHTNESS,
-    type: "number",
-    unit: "%",
-    kind: "percent",
+  recordingQuality: {
+    param: CAMERA_CMD.RECORDING_QUALITY_SET,
+    type: "string",
     provenance: "verified",
-    min: BRIGHTNESS_MIN,
-    max: BRIGHTNESS_MAX,
-    description: "Manual brightness, range 1-100 (1401). Verified live (T8425 + T8124).",
-    write: (v, ctx) => directBinary(LIGHT_CMD.SPOTLIGHT_BRIGHTNESS, Number(v), ctx)
+    available: isCameraCodec,
+    decode: (raw) => decodeRecordingQualityTier(raw),
+    decodedKind: "enum",
+    decodedValues: Object.keys(RECORDING_QUALITY_TIERS).map(Number),
+    // Label the decoded tiers so a host can render this as a labelled choice (a dropdown) rather than
+    // a bare number — same shape as `suction` and the sibling `streamingQuality`. `decode` still owns
+    // the value (a tier); these are only the tier→label map, keyed to match `decodedValues`.
+    enumValues: RECORDING_QUALITY_TIERS,
+    description: "RECORDING quality as a tier (2731) \u2014 distinct from streamingQuality, which is the live view. The device reports the whole config \u2014 `{cur_mode, mode_<n>:{quality}}`, read live off a T8170 \u2014 and the ACTIVE mode's tier is lifted out of it on read. \u2705 write wire verified live (T8425): 1350 SET_PAYLOAD {channel:0, mode:0, primary_view:0, quality:N}. Tier\u2192label in RECORDING_QUALITY_TIERS / resolveRecordingQuality (verified on T8425; add a per-model map if a model's tiers ever diverge).",
+    args: [{ name: "quality", kind: "enum", description: "A tier; the resolution name it maps to is accepted too." }],
+    ...accepts(),
+    write: (v, ctx) => {
+      const q = resolveRecordingQualityTier(v);
+      return q == null ? void 0 : setPayload(CAMERA_CMD.RECORDING_QUALITY_SET, { channel: 0, mode: 0, primary_view: 0, quality: q }, ctx, 0, void 0, "auto");
+    }
   },
   /**
-   * Warm-to-cool on a 0-100 scale — a `scalar`, not a percentage or a mired value, since 0 is one end
-   * of a range rather than "none". `writeOnly`, so there is a setter and no getter at all: the device
-   * accepts the setting and never reports it back.
-   * Only tunable-white spotlights respond; a white-only model accepts the frame and does nothing.
+   * Not every model has the feature, and one without it accepts the frame without acting on it — so the
+   * write is offered only where the device reports 1015, the same param the read is gated on.
    */
-  colorTemp: {
-    param: LIGHT_CMD.SPOTLIGHT_COLOR_TEMP,
-    type: "number",
-    kind: "scalar",
-    provenance: "verified",
-    writeOnly: true,
-    min: 0,
-    max: 100,
-    description: "Colour temperature, 0 (warm) to 100 (cool). Not reported back, so it is write-only.",
-    write: (v, ctx) => directBinary(LIGHT_CMD.SPOTLIGHT_COLOR_TEMP, Number(v), ctx)
+  antiTheftDetection: {
+    param: CAMERA_CMD.EAS_SWITCH,
+    type: "bool",
+    kind: "boolean",
+    provenance: "apk",
+    available: isCameraCodec,
+    description: "Anti-theft detection on/off (1015 APP_CMD_EAS_SWITCH; the app parses it as anti_theft_detection_switch). Adaptive scalar {value:0|1}. \u26A0\uFE0F Replay+readback confirmed on a HomeBase-attached T8425 only; standalone unverified and v3 devices use id 2735 \u2014 see CAMERA_CMD.EAS_SWITCH.",
+    requires: [CAMERA_CMD.EAS_SWITCH],
+    write: (v, ctx) => setScalar(CAMERA_CMD.EAS_SWITCH, asBool(v) ? 1 : 0, ctx, "auto")
   },
   /**
-   * The master enable, one level above {@link isOn}: this decides whether the spotlight may light at all,
-   * where `isOn` is the momentary switch. `writeAs` names the setter `setEnabled` rather than the
-   * `setSpotlightEnabled` the key would derive, since the capability is already the spotlight.
-   *
-   * Reported, so it is a read as well as a write. ✅ Verified live on a T8170: the cloud device list
-   * carries 1403, and its value tracks the vendor app's spotlight setting in both directions — `1` to `0`
-   * when the setting is switched off, `0` to `1` when it is switched back on, so the polarity is direct
-   * and 1 means enabled. The poll reports a param only when its PREVIOUS value differed, so the id is in
-   * the record rather than newly appearing. The param dictionary names it `floodlightTotalSwitch`
-   * (`app:FLOODLIGHT_TOTAL_SWITCH`) and lists the T8170 among its models.
-   *
-   * This is the switch a user changes and expects to STAY changed. {@link isOn} is a different fact:
-   * the lamp being lit right now, driven by whichever
-   * client is streaming — the vendor app lights it for a live view and drops it on quitting.
+   * Privacy mode — the multi-frame burst. Nothing reports it back, so it is a setter with no getter, and
+   * it declares no param: the id the burst is built from is the transport's, not this capability's.
    *
-   * The T8423 write takes the session-chosen level; level-1 int+string was verified live on a standalone
-   * unit.
+   * Being write-only, it is named by `unobservableMembers(dev.camera())`, which distinguishes "this camera
+   * is not in privacy mode" from "this camera cannot say" rather than leaving both as `undefined`. That
+   * distinction matters most on the families whose power rides this same envelope — see {@link enabled}.
    */
-  spotlightEnabled: {
-    param: LIGHT_CMD.SPOTLIGHT_ENABLE,
+  privacy: {
     type: "bool",
     kind: "boolean",
+    writeOnly: true,
     provenance: "verified",
-    description: "The spotlight master switch, distinct from the on/off above \u2014 whether the spotlight may light at all. Read verified live on a T8170 (param 1403, direct polarity: 1 = enabled).",
-    write: (v, ctx) => setScalar(LIGHT_CMD.SPOTLIGHT_ENABLE, asBool(v) ? 1 : 0, ctx, ctx.deviceType === DeviceType.FLOODLIGHT_CAMERA_8423 ? "auto" : "direct-binary"),
-    writeAs: "setEnabled"
-  }
-};
-var LIGHT = {
-  capability: "light",
-  description: "Floodlight / spotlight manual switch and brightness.",
-  members: LIGHT_MEMBERS,
-  properties: propertiesOf(LIGHT_MEMBERS),
-  // Three T8171 units on firmware 1.2.1.6 report 1400/1401/1403 without a spotlight, so those
-  // param ids are not sufficient evidence for that model. The camera status LED (1045) is not light.
-  // Other models keep the existing param and name evidence.
-  detection: {
-    modelHints: [/floodlight|wall.?light|spot.?light|search.?light/i],
-    detect: (record) => record.model !== "T8171" && [1400, 1401, 1403, 6080, 6082, 1413].some((param) => Object.hasOwn(record.params ?? {}, param))
+    available: isCameraCodec,
+    description: "Privacy mode (PRIVACY_MODE 6250) \u2014 the multi-frame burst the sink plays.",
+    write: (v, ctx) => privacyCommand(asBool(v), ctx.channel)
   },
   /**
-   * Only what the member table cannot express: `on`/`off` as no-argument verbs over the same wire as the
-   * derived `set`, and the write-only auto-spotlight composite. The verbs stay UNDESCRIBED on purpose —
-   * `set` is the method that takes the value, and describing all three would offer one state as three
-   * controls. `async` is what turns `switchFrame`'s throw into the rejection a `Promise<void>`
-   * caller expects, the same shape the derived setter gets from `bindMembers`.
+   * The same status LED is reported under 1045 on ordinary cameras and 1716 on video doorbells. The
+   * alias is the same semantic value on a family-specific wire. The parameter valid for the resolved
+   * family is sufficient evidence to install both the getter and family-aware setter.
    */
-  actions({ ctx, sink }) {
-    const dispatchSwitch = async (on) => sink.dispatch(switchFrame(on, ctx));
-    return {
-      on: () => dispatchSwitch(true),
-      off: () => dispatchSwitch(false),
-      setAutoSpotlight: (on, opts) => sink.dispatch(autoSpotlightCommand(asBool(on), ctx, opts))
-    };
-  }
-};
-
-// dist/model/capabilities/smart-light.js
-var LIGHT_MQTT_CMD = 17;
-var LIGHT_MQTT_REPORT_CMD = 16;
-var LIGHT_CMD2 = {
-  /** `getDeviceInfoPayloadData` — request a full status report. */
-  GET_DEVICE_INFO: 512,
-  /** `setDeviceInfoPayloadData` — on/off (tag 0xa3) + brightness (tag 0xa4). */
-  SET_DEVICE_INFO: 513,
-  /** The device→app status report (`event_device_status_notify`), sent unsolicited. */
-  DEVICE_STATUS_REPORT: 516,
-  /** `setLightEffectParamsPayloadData` — apply one plain custom colour to evidenced segments. */
-  SET_LIGHT_EFFECT_PARAMS: 518,
-  /** The device's answer to {@link LIGHT_CMD.GET_DEVICE_INFO}. */
-  GET_DEVICE_INFO_REPLY: 2560,
-  /** `setLightEffectParamsV2PayloadData` — select a gallery effect by catalog id. WIRED (see doc). */
-  SET_LIGHT_EFFECT_PARAMS_V2: 525
-};
-var GET_DEVICE_INFO_ALL = 8191;
-var REQUEST_STATUS_TAG = 163;
-var WRITE_TAG = { IS_ON: 163, LEVEL: 164 };
-var LIGHT_PARAM = {
-  POWER: 161,
-  BRIGHTNESS: 162,
-  LENGTH: 163,
-  EFFECT_ID: 164,
-  COLOR_GRADIENT: 165,
-  CLOUD_EFFECT_ID: 166,
-  EFFECT_MODE: 167
-};
-var COMMON_TAGS = /* @__PURE__ */ new Map([
-  [161, LIGHT_PARAM.POWER],
-  [162, LIGHT_PARAM.BRIGHTNESS],
-  [163, LIGHT_PARAM.LENGTH],
-  [164, LIGHT_PARAM.EFFECT_ID],
-  [165, LIGHT_PARAM.COLOR_GRADIENT],
-  [166, LIGHT_PARAM.CLOUD_EFFECT_ID]
-]);
-var MAX_NUMERIC_LEN = 4;
-var FRAME_LAYOUTS = /* @__PURE__ */ new Map([
-  [LIGHT_CMD2.DEVICE_STATUS_REPORT, { modeTag: 167 }],
-  [LIGHT_CMD2.GET_DEVICE_INFO_REPLY, { modeTag: 168 }]
-]);
-var BOOL_PARAMS = /* @__PURE__ */ new Set([LIGHT_PARAM.POWER, LIGHT_PARAM.COLOR_GRADIENT]);
-function reportFrom(signal) {
-  if (signal.source !== "mqtt" || !signal.frame)
-    return void 0;
-  const { envelopeCmd, cmd, fields } = signal.frame;
-  if (envelopeCmd !== LIGHT_MQTT_REPORT_CMD)
-    return void 0;
-  const layout = FRAME_LAYOUTS.get(cmd);
-  if (!layout)
-    return void 0;
-  const params = {};
-  for (const { tag: tag2, value } of fields) {
-    const param = tag2 === layout.modeTag ? LIGHT_PARAM.EFFECT_MODE : COMMON_TAGS.get(tag2);
-    if (param === void 0 || value.length === 0 || value.length > MAX_NUMERIC_LEN)
-      continue;
-    const n = value.readUIntLE(0, value.length);
-    params[param] = BOOL_PARAMS.has(param) ? n === 1 ? "1" : "0" : String(n);
-  }
-  return Object.keys(params).length ? params : void 0;
-}
-var BRIGHTNESS_MIN2 = 0;
-var BRIGHTNESS_MAX2 = 100;
-function deviceInfoCommand(opts) {
-  const fields = [];
-  if (opts.isOn !== void 0)
-    fields.push({ tag: WRITE_TAG.IS_ON, value: Buffer.from([opts.isOn ? 1 : 0]) });
-  if (opts.level !== void 0) {
-    fields.push({
-      tag: WRITE_TAG.LEVEL,
-      value: Buffer.from([clamp(Math.round(opts.level), BRIGHTNESS_MIN2, BRIGHTNESS_MAX2)])
-    });
-  }
-  return { kind: "mqtt-dp", mqttCmdCode: LIGHT_MQTT_CMD, cmdCode: LIGHT_CMD2.SET_DEVICE_INFO, fields };
-}
-function requestStateCommand() {
-  const value = Buffer.alloc(4);
-  value.writeUInt32LE(GET_DEVICE_INFO_ALL, 0);
-  return {
-    kind: "mqtt-dp",
-    mqttCmdCode: LIGHT_MQTT_CMD,
-    cmdCode: LIGHT_CMD2.GET_DEVICE_INFO,
-    fields: [{ tag: REQUEST_STATUS_TAG, value }]
-  };
-}
-function presetCommand(lightId) {
-  return {
-    kind: "mqtt-dp-preset",
-    mqttCmdCode: LIGHT_MQTT_CMD,
-    cmdCode: LIGHT_CMD2.SET_LIGHT_EFFECT_PARAMS_V2,
-    companionCmdCode: LIGHT_CMD2.SET_DEVICE_INFO,
-    presetId: lightId
-  };
-}
-var CONFIRMED_EFFECT_MODELS = /* @__PURE__ */ new Set(["T8L02"]);
-var CONFIRMED_COLOR_MODELS = /* @__PURE__ */ new Set(["T8L02"]);
-var MAX_COLOR_SEGMENTS = 254;
-var modelKey = (model) => (model ?? "").trim().toUpperCase();
-function colorCommand(color, segmentCount) {
-  return {
-    kind: "mqtt-dp-color",
-    mqttCmdCode: LIGHT_MQTT_CMD,
-    cmdCode: LIGHT_CMD2.SET_LIGHT_EFFECT_PARAMS,
-    ...color,
-    segmentCount
-  };
-}
-var SMART_LIGHT_MEMBERS = {
-  /**
-   * On/off for the whole run of lights. `writeAs` names the setter `set` rather than `setPower`, and the
-   * `on`/`off` verbs beside it in `actions()` reach the same frame. `realtime` like every read here:
-   * there is no pollable cloud param, so the getter answers `undefined` until the first MQTT report —
-   * `refreshState` is how a caller populates it on demand. Note the READ tag (0xa1) and the WRITE tag
-   * (0xa3) differ; the two legs' tag maps are unrelated.
-   */
-  power: {
-    param: LIGHT_PARAM.POWER,
-    property: "lightPower",
-    type: "bool",
-    kind: "boolean",
-    provenance: "verified",
-    realtime: true,
-    description: "Power state, DP tag 0xa1. \u2705 Source-confirmed in the app's own report parser, then live-decoded off a T8L02 status report.",
-    write: (v) => deviceInfoCommand({ isOn: asBool(v) }),
-    writeAs: "set",
-    aliases: { on: true, off: false }
-  },
-  /**
-   * The CONFIGURED level, not the live output: it persists across an off, so reading a non-zero
-   * brightness says nothing about whether the lights are lit — pair it with `power`. 0 is a legal level
-   * here (unlike the camera spotlight's 1-100), and the write clamps into 0-100 rather than refusing.
-   * `realtime`, so `undefined` until the first report.
-   */
-  brightness: {
-    param: LIGHT_PARAM.BRIGHTNESS,
-    property: "lightBrightness",
-    type: "number",
-    unit: "%",
-    kind: "percent",
-    provenance: "verified",
-    realtime: true,
-    min: BRIGHTNESS_MIN2,
-    max: BRIGHTNESS_MAX2,
-    description: "Brightness 0-100, DP tag 0xa2. Persists across off \u2014 it is the configured level, not the live output. \u2705 Source-confirmed in the app's own report parser, then echoed back the value written, live.",
-    write: (v) => deviceInfoCommand({ level: Number(v) })
-  },
-  /**
-   * How many individually addressable segments the installed run has — a physical fact of the strip,
-   * which is why it is read-only. A bare `scalar` with no unit: the wire says how many, not how long.
-   * `realtime`, so `undefined` until the first report.
-   */
-  lightLength: {
-    param: LIGHT_PARAM.LENGTH,
-    type: "number",
-    kind: "scalar",
-    provenance: "verified",
-    realtime: true,
-    description: "Addressable segment count, DP tag 0xa3."
-  },
-  /**
-   * The gallery effect SELECTED — an `identifier`, not an enum, because it names an entry in a catalog
-   * that only exists at runtime, so there is no option set to publish. Distinct from `cloudEffectId`,
-   * which is the one actually running. Written by `setEffect`, whose gate is the model rather than a
-   * value. `realtime`, so `undefined` until the first report.
-   */
-  effectId: {
-    param: LIGHT_PARAM.EFFECT_ID,
-    property: "lightEffectId",
-    type: "number",
-    kind: "identifier",
-    provenance: "verified",
-    realtime: true,
-    description: "Selected gallery effect id, DP tag 0xa4."
-  },
-  /**
-   * Whether the run blends between an effect's colours rather than stepping between them. Read-only:
-   * the report parser establishes the flag, but no write frame for it has been reversed, so no setter
-   * is offered. One of the two params surfaced as `"1"`/`"0"` so the `bool` narrowing reads it.
-   * `realtime`, so `undefined` until the first report.
-   */
-  colorGradient: {
-    param: LIGHT_PARAM.COLOR_GRADIENT,
-    property: "lightColorGradient",
+  statusLed: {
+    param: CAMERA_CMD.DEV_LED_SWITCH,
     type: "bool",
     kind: "boolean",
     provenance: "verified",
-    realtime: true,
-    description: "Colour-gradient switch, DP tag 0xa5."
-  },
-  /**
-   * The effect actually RUNNING, `0` when none is — so this, not `effectId`, is the read that answers
-   * "is an effect playing". An `identifier` for the same reason as its sibling: the catalog it indexes
-   * is fetched at runtime. Read-only; `setEffect` drives the selection. `realtime`, so `undefined`
-   * until the first report.
-   */
-  cloudEffectId: {
-    param: LIGHT_PARAM.CLOUD_EFFECT_ID,
-    property: "lightCloudEffectId",
-    type: "number",
-    kind: "identifier",
-    provenance: "verified",
-    realtime: true,
-    description: "Running gallery effect id (0 when off), DP tag 0xa6."
-  },
-  /**
-   * Reported in every status frame, so it belongs in the schema and answers through `getProperty` — but
-   * given no typed getter: the app's own parser reads 0xa7 differently on the notify and on the
-   * get-reply, and no capture settles which value means what.
-   */
-  lightEffectMode: {
-    param: LIGHT_PARAM.EFFECT_MODE,
-    type: "number",
-    kind: "scalar",
-    provenance: "apk",
-    unexposed: true,
-    description: "Effect mode, DP tag 0xa7. Reported, but its value space is not evidenced \u2014 no typed getter, and a bare mode index rather than a named set, since the options it selects among are unknown."
-  },
-  /**
-   * A request, not a state: reports are pushed on change with no periodic heartbeat, so this is how a
-   * caller populates the getters on demand. The reply arrives asynchronously and does not resolve here.
-   */
-  refreshState: {
-    action: () => requestStateCommand(),
-    description: "Ask the device to report its current state; the reply refreshes the reads."
+    available: isCameraCodec,
+    readAvailable: (ctx) => !hasCapability(ctx, "doorbell"),
+    readAliases: [{ paramType: CAMERA_CMD.DOORBELL_LED, available: (ctx) => hasCapability(ctx, "doorbell") }],
+    requiresRead: true,
+    description: "Camera status LED. Video doorbells report the same state under their button-ring LED parameter.",
+    write: (v, ctx) => statusLedCommand(asBool(v), ctx)
   },
+  views: provided("media", (m) => m.views && (() => m.views), "Optical view identifiers supported by this camera's media route."),
   /**
-   * Gated on the MODEL, not on a value, and carrying no description: it refuses off the confirmed list
-   * for a reason a generated message cannot give, and its id names an entry in a catalog that only
-   * exists at runtime, so a generated control would have no domain to offer. Neither is a property
-   * write, so it keeps its own signature.
+   * Media is not a property: it returns DATA rather than moving state, its options are richer than a
+   * value, and it exists only on a device bound to a provider. Each is declared once, with its
+   * signature taken FROM {@link MediaProvider} — so a change there is a compile error here, not a drift.
+   *
+   * Every pull is refused where a reliable {@link CAMERA_MEMBERS.enabled} reads false, with {@link CameraDisabledError} —
+   * `live`, `snapshotLive`, `record`, `openReadable` and `recordFragments` alike, since each opens media on a
+   * camera that serves none. That reading is the on/off source; a live probe is not one, since a disabled
+   * camera answers a start with audio and never a video frame.
+   *
+   * {@link CAMERA_MEMBERS.snapshotStored} is exempt — a retained push thumbnail is not a pull. A reading of
+   * `undefined` refuses nothing: families reporting neither wire param leave the state unknown, and unknown is
+   * not known-off.
+   *
+   * The refusal REJECTS on the four that answer with a promise, and THROWS on
+   * {@link CAMERA_MEMBERS.recordFragments}, which answers with a handle.
    */
-  setEffect: method(({ ctx, sink }) => (lightId) => CONFIRMED_EFFECT_MODELS.has(modelKey(ctx.model)) ? sink.dispatch(presetCommand(lightId)) : Promise.reject(new Error(`light-effect write is verified only on ${[...CONFIRMED_EFFECT_MODELS].join(", ")}; model ${ctx.model ?? "unknown"} uses a per-family effect-frame encoding that isn't reverse-engineered \u2014 refusing to send the captured SKU's bytes (on/off/brightness still work)`)), "Select a light-effect gallery entry by its catalog id. Colours are an RGBCW approximation, exact on primaries."),
+  snapshotStored: provided("media", (m, { ctx }) => isCameraCodec(ctx) && m.snapshotStored && (() => m.snapshotStored()), "Latest validated push thumbnail retained in memory.", ["snapshot"]),
+  snapshotLive: provided("media", (m, { ctx, read }) => isCameraCodec(ctx) && (async (opts) => {
+    refuseWhenDisabled(ctx, read);
+    refuseUnsupportedView(m, opts);
+    return m.snapshotLive({ powered: poweredOf(ctx), ...opts });
+  }), "Fresh still decoded from a short live burst."),
+  live: provided("media", (m, { ctx, read }) => async (opts) => {
+    refuseWhenDisabled(ctx, read);
+    refuseUnsupportedView(m, opts);
+    return m.live({ powered: poweredOf(ctx), ...opts });
+  }, "Open a managed live stream."),
+  record: provided("media", (m, { ctx, read }) => isCameraCodec(ctx) && (async (...args) => {
+    refuseWhenDisabled(ctx, read);
+    return m.record(...args);
+  }), "Record N seconds \u2192 an mp4/h264 buffer."),
+  openReadable: provided("media", (m, { ctx, read }) => isCameraCodec(ctx) && m.openReadable && (async (opts) => {
+    refuseWhenDisabled(ctx, read);
+    refuseUnsupportedView(m, opts);
+    return m.openReadable({ powered: poweredOf(ctx), ...opts });
+  }), "Open a node:stream Readable of the live feed."),
+  recordFragments: provided("media", (m, { ctx, read }) => isCameraCodec(ctx) && m.recordFragments && ((opts) => {
+    refuseWhenDisabled(ctx, read);
+    return m.recordFragments({ powered: poweredOf(ctx), ...opts });
+  }), "Continuous fragmented-MP4 (CMAF) recording."),
+  downloadRecording: provided("media", (m, { ctx }) => isCameraCodec(ctx) && m.downloadRecording && ((opts) => m.downloadRecording(opts)), "Download a recording the station holds \u2192 H.264 and AAC elementary streams."),
   /**
-   * Plain custom colour, distinct from the gallery-effect wire. The frame addresses every reported
-   * segment, so a current positive segment count is mandatory and no family-wide length is guessed.
-   * Completion acknowledges transport publication only; the device reports no authoritative RGB.
+   * Push audio from the host to this camera's speaker. Gated on the **speaker** param specifically —
+   * not the `audio` capability, which resolves on a microphone alone and would advertise a speaker the
+   * device never reported. Talkback holds a media session open for its duration, so it carries the same
+   * power hint `live` does; without it a battery camera talked to with no stream running would stream
+   * unbounded.
    */
-  setColor: method(({ ctx, sink, read }) => (color) => {
-    if (!CONFIRMED_COLOR_MODELS.has(modelKey(ctx.model))) {
-      return Promise.reject(new Error(`custom-colour write is verified only on ${[...CONFIRMED_COLOR_MODELS].join(", ")}; model ${ctx.model ?? "unknown"} has no confirmed 0x0206 frame encoding`));
-    }
-    const segmentCount = read("lightLength")?.value;
-    if (typeof segmentCount !== "number" || !Number.isInteger(segmentCount) || segmentCount < 1 || segmentCount > MAX_COLOR_SEGMENTS) {
-      return Promise.reject(new Error(`custom-colour write requires a reported integer segment count in 1..${MAX_COLOR_SEGMENTS}`));
-    }
-    const channels = color && [color.red, color.green, color.blue];
-    if (!channels || channels.some((channel) => !Number.isInteger(channel) || channel < 0 || channel > 255)) {
-      return Promise.reject(new Error("custom-colour RGB channels must be integers in 0..255"));
-    }
-    return sink.dispatch(colorCommand(color, segmentCount));
-  }, "Set one plain RGB colour across all reported segments on verified T8L02 lights. Preserves configured brightness; completion acknowledges publication, not observed colour.", (ctx) => CONFIRMED_COLOR_MODELS.has(modelKey(ctx.model)))
+  talkback: provided("media", (m, { ctx }) => isCameraCodec(ctx) && m.talkback && ctx.paramIds.has(AUDIO_CMD.AUDIO_SPEAKER) && ((opts) => m.talkback({ powered: poweredOf(ctx), ...opts })), "Push audio from the host to the camera's speaker.")
 };
-var SMART_LIGHT = {
-  capability: "smart_light",
-  line: "life",
-  description: "eufy_life smart-lighting: T8L02 Permanent Outdoor Lights and similar (on/off/brightness/custom colour/effect).",
-  members: SMART_LIGHT_MEMBERS,
-  properties: propertiesOf(SMART_LIGHT_MEMBERS),
-  detection: { codecs: ["light"] },
-  /**
-   * Ask for a state snapshot as soon as this device's realtime channel is up, so the typed getters are
-   * populated at connect rather than only after the first write — reports are pushed on change, with
-   * no periodic heartbeat to wait for.
-   */
-  realtimeInit() {
-    return [requestStateCommand()];
-  },
-  decodeState(signal) {
-    const params = reportFrom(signal);
-    return params ? { params } : null;
-  },
-  emits: ["smartLightState"],
-  /**
-   * Surface a status report as one `smartLightState` event carrying every field it decoded. Fails
-   * closed (returns `null`, never throws) on any shape mismatch.
-   */
-  decodeEvent(signal) {
-    const params = reportFrom(signal);
-    if (!params)
-      return null;
-    const num2 = (id) => params[id] === void 0 ? void 0 : Number(params[id]);
-    const bool = (id) => params[id] === void 0 ? void 0 : params[id] === "1";
-    return {
-      event: "smartLightState",
-      payload: {
-        power: bool(LIGHT_PARAM.POWER),
-        brightness: num2(LIGHT_PARAM.BRIGHTNESS),
-        lightLength: num2(LIGHT_PARAM.LENGTH),
-        effectId: num2(LIGHT_PARAM.EFFECT_ID),
-        colorGradient: bool(LIGHT_PARAM.COLOR_GRADIENT),
-        cloudEffectId: num2(LIGHT_PARAM.CLOUD_EFFECT_ID)
-      }
-    };
-  },
+var CAMERA = {
+  capability: "camera",
+  description: "Camera power (on/off, CAMERA_SWITCH 1035) and privacy mode (PRIVACY_MODE 6250).",
+  members: CAMERA_MEMBERS,
+  properties: propertiesOf(CAMERA_MEMBERS),
+  /** Every camera-codec device has the power/privacy surface. */
+  detection: { codecs: ["camera"] },
   /** Only the no-argument power verbs, which carry no value for a member to hold. */
-  actions({ sink }) {
+  actions({ ctx, sink }) {
+    if (!isCameraCodec(ctx))
+      return {};
     return {
-      on: () => sink.dispatch(deviceInfoCommand({ isOn: true })),
-      off: () => sink.dispatch(deviceInfoCommand({ isOn: false }))
+      on: () => sink.dispatch(powerCommand(true, ctx)),
+      off: () => sink.dispatch(powerCommand(false, ctx))
     };
   }
 };
 
-// dist/model/capabilities/ptz.js
-var PTZ_CMD = {
-  /** Rotate. App `SetPtz…`/`INDOOR_ROTATE`: 1700 wrapper, `{cmd_type,rotate_type,zoom}`. */
-  PTZ_ROTATE: 6030,
-  /** Digital zoom. App `SetPictureZoomParser` (`COMMAND_DUAL_CAMERA_ZOOM`): 1350 SET_PAYLOAD sub-command,
-   * payload `{x,y,w,h,offset,orgZoom,dstZoom}`. Also the inbound `1351` zoom-notify `cmd`. */
-  PTZ_ZOOM: 6203,
-  /** Go to a stored preset — AND the save-preset frame (identical bytes; the camera moves vs creates
-   * by whether the slot is occupied). App `SetPresetPositionsParser` (`COMMAND_INDOOR_SPAN_CRUISE_POINT`):
-   * 1700 wrapper, `{settingstate:0, value:<presetId>}`. */
-  PTZ_PRESET_GOTO: 6032,
-  /** Capture the camera's current frame as a preset's thumbnail. App `COMMAND_APP_SPAN_PTZ_PIC`: 1700
-   * wrapper, `{value:<presetId>}`. The app sends this right before the 6032 save when creating a preset. */
-  PTZ_PRESET_PIC: 6097,
-  /** Delete a stored preset. App `DeletePresetPositionsParser` (`COMMAND_INDOOR_SPAN_CRUISE_DELETE`):
-   * 1700 wrapper, `{value:<presetId>}`. */
-  PTZ_PRESET_DELETE: 6033,
-  /** List stored presets. App `QueryPresetPositionsParser` (`COMMAND_INDOOR_SPAN_CRUISE_QUERY`): 1700
-   * request whose reply is a `1351` notify carrying `{points:[…]}`. */
-  PTZ_PRESET_QUERY: 6034,
-  /** Preview a stored preset — move to it transiently (the app uses this to show a preset before
-   * committing a default). App `COMMAND_INDOOR_SPAN_CRUISE_PREVIEW`: 1700 wrapper, `{value:<presetId>}`. */
-  PTZ_PRESET_PREVIEW: 6035,
-  /** Mark a stored preset as the default/home position. App `DefaultPresetPositionsParser`
-   * (`COMMAND_APP_SET_DEFAULT_POSITION`): 1350 SET_PAYLOAD, payload `{index:<presetId>, settingstate}`.
-   * A compound builder — the app follows it with PREVIEW (6035) + PTZ_PIC (6097) to refresh the
-   * thumbnail; the default-set itself is this frame. */
-  PTZ_SET_DEFAULT_POSITION: 6242,
-  /** How fast a rotate STEP travels. 1700 wrapper, `{value:1|3|5}`. Observed live: the app's
-   * Slow/Mid/Fast control on an indoor pan-tilt writes 1 / 3 / 5 and nothing else moves. The id sits
-   * inside the smart lock's `601x` block, so the shared param dictionary labels it `lockParam` — an id
-   * reused across product lines, and the camera's meaning is the observed one. */
-  PTZ_ROTATE_SPEED: 6015
-};
-var PTZ_FRAME = {
-  /** SoloCam JSON status wrapper — `{cmd, payload}`. */
-  NOTIFY_PAYLOAD: 1351,
-  /** Indoor-PT binary position stream wrapper. */
-  CONTROL_PAYLOAD: 1700
+// dist/model/capabilities/siren.js
+var SIREN_PARAM = {
+  /** Whether the siren is sounding (app `APP_CMD_DEV_RING_STATUS`). 1 = sounding, 0 = silent. */
+  RING_STATUS: 61008,
+  /** Alarm volume as a device level (app `APP_CMD_SIREN_SENSOR_SET_ALARM_VOL`). See {@link SirenVolume}. */
+  ALARM_VOLUME: 1825,
+  /** Seconds an alarm sounds before stopping itself (app `APP_CMD_DEV_ALARM_TIMEOUT`). */
+  ALARM_TIMEOUT: 61006,
+  /** Do-not-disturb (app `APP_CMD_SENSOR_NOT_DISTURB`). */
+  NOT_DISTURB: 1828
 };
-var PtzDirection = {
-  /** Pan left (one step). */
-  left: "left",
-  /** Pan right (one step). */
-  right: "right",
-  /** Tilt up (one step). */
-  up: "up",
-  /** Tilt down (one step). */
-  down: "down"
+var SIREN_CMD = {
+  /** Sound the siren briefly as a test (app `APP_CMD_SIREN_SENSOR_ALARM_TEST`). */
+  ALARM_TEST: 1826,
+  /** Manually stop a sounding alarm (app `APP_CMD_SIREN_SENSOR_MANUAL_STOP_ALARM`). */
+  MANUAL_STOP: 1871,
+  /** Station-family HomeBase duration alarm, verified live on T8010 and T8030 (app `SET_TONE_FILE`). */
+  HOMEBASE_TONE: 1201,
+  /** HomeBase alarm volume percentage (app `CMD_SET_HUB_SPK_VOLUME`). */
+  HUB_SPK_VOLUME: 1235,
+  /** HomeBase alarm-tone selection (app `APP_CMD_HUB_ALARM_TONE`). */
+  HUB_ALARM_TONE: 1281,
+  /** Attached-camera duration alarm, verified live on T8114 and T8210 (app `SET_DEVS_TONE_FILE`). */
+  CAMERA_TONE: 1202
 };
-var PTZ_ROTATE = { left: 1, right: 2, up: 3, down: 4 };
-var ZOOM_EVIDENCE_PARAMS = [6204, 6205];
-var ZOOM_MODEL_HINT = /^T8170\b|^T8425\b|S340/i;
-function hasZoomEvidence(ctx) {
-  return ZOOM_EVIDENCE_PARAMS.some((p) => ctx.paramIds.has(p)) || !!ctx.model && ZOOM_MODEL_HINT.test(ctx.model);
-}
-var PRESET_EVIDENCE_PARAMS = [1029, 6090, 6091, 6092, 6210];
-var FIXED_LENS_MODELS = /* @__PURE__ */ new Set(["T8134"]);
-function rotateCommand(direction, ctx, zoom = 1) {
-  return setJson(PTZ_CMD.PTZ_ROTATE, { cmd_type: 1, rotate_type: PTZ_ROTATE[direction], zoom }, ctx);
+var STATION_CHANNEL = 255;
+var SirenVolume = { Low: 1, Mid: 2, High: 3 };
+var SirenAlarmDuration = { Min1: 60, Min5: 300, Min10: 600, Min15: 900 };
+var HubAlarmTone = { Tone1: 1, Tone2: 2 };
+var HUB_ALARM_EVIDENCE = [SIREN_CMD.HUB_ALARM_TONE, 1282];
+function isStationAlarmOutput(ctx) {
+  return ctx.deviceType === DeviceType.STATION || ctx.deviceType === DeviceType.HB3;
 }
-function zoomCommand(dstZoom, ctx, region) {
-  const r = region ?? {};
-  const offset = r.offset ?? false;
-  return setPayload(PTZ_CMD.PTZ_ZOOM, {
-    x: offset ? r.x ?? 0 : 0,
-    y: offset ? r.y ?? 0 : 0,
-    w: offset ? r.w ?? 0 : 0,
-    h: offset ? r.h ?? 0 : 0,
-    offset,
-    orgZoom: r.orgZoom ?? 0,
-    dstZoom
-  }, ctx, 0, void 0, "auto");
+function isEvidencedStationAlarm(ctx) {
+  return isStationAlarmOutput(ctx) && HUB_ALARM_EVIDENCE.some((param) => ctx.paramIds.has(param));
 }
-function gotoPresetCommand(id, ctx) {
-  return setJson(PTZ_CMD.PTZ_PRESET_GOTO, { settingstate: 0, value: id }, ctx);
+var S1_PRO_ALARM_MODELS = /* @__PURE__ */ new Set([
+  "T8134",
+  "T814X",
+  "T8214",
+  "T8790",
+  "T8122",
+  "T8113-Z",
+  "T8400"
+]);
+function isEvidencedAttachedCamera(ctx) {
+  return ctx.codec === "camera" && ctx.homeBaseAttached === true && hasReportedEasSwitch(ctx) && (!isStation9000({ deviceType: ctx.stationDeviceType }) || S1_PRO_ALARM_MODELS.has(ctx.model ?? ""));
 }
-function deletePresetCommand(id, ctx) {
-  return setJson(PTZ_CMD.PTZ_PRESET_DELETE, { value: id }, ctx);
+function reportsParam(source, param) {
+  return source.paramIds?.has(param) === true || Object.hasOwn(source.params ?? {}, param);
 }
-function previewPresetCommand(id, ctx) {
-  return setJson(PTZ_CMD.PTZ_PRESET_PREVIEW, { value: id }, ctx);
+function hasStandaloneSirenEvidence(source) {
+  return reportsParam(source, SIREN_PARAM.ALARM_VOLUME) && (reportsParam(source, SIREN_PARAM.RING_STATUS) || reportsParam(source, SIREN_PARAM.ALARM_TIMEOUT));
 }
-function presetPicCommand(id, ctx) {
-  return setJson(PTZ_CMD.PTZ_PRESET_PIC, { value: id }, ctx);
+function isSensorCodec(ctx) {
+  return ctx.codec === "sensor";
 }
-function savePresetCommand(id, ctx) {
-  return [presetPicCommand(id, ctx), setJson(PTZ_CMD.PTZ_PRESET_GOTO, { settingstate: 0, value: id }, ctx)];
+function isEvidencedStandaloneSiren(ctx) {
+  return isSensorCodec(ctx) && hasStandaloneSirenEvidence(ctx);
 }
-function setDefaultPositionCommand(presetId, ctx) {
-  return setPayload(PTZ_CMD.PTZ_SET_DEFAULT_POSITION, { index: presetId, settingstate: 0 }, ctx);
+function homeBaseAlarm(seconds, ctx) {
+  if (!ctx.accountName)
+    throw new Error("station-family HomeBase alarm output requires the acting account name");
+  return setPayload(SIREN_CMD.HOMEBASE_TONE, { time_out: seconds, user_name: ctx.accountName }, ctx, 0, STATION_CHANNEL);
 }
-function parsePresetPoints(reply) {
-  const points = reply?.points;
-  if (!Array.isArray(points))
-    return [];
-  const out = [];
-  for (const p of points) {
-    if (typeof p !== "object" || p === null)
-      continue;
-    const rec = p;
-    const rawId = rec.index ?? rec.id ?? rec.value;
-    const id = typeof rawId === "number" ? rawId : Number(rawId);
-    if (!Number.isFinite(id))
-      continue;
-    out.push({ id, raw: rec });
+var PORTAL_MANUAL_ALARM_TYPE = 10;
+function cameraAlarm(seconds, ctx) {
+  if (isStation9000({ deviceType: ctx.stationDeviceType })) {
+    if (!ctx.accountName)
+      throw new Error("a camera alarm behind a HomeBase S1 Pro requires the acting account name");
+    return setPayload(SIREN_CMD.CAMERA_TONE, {
+      time_out: seconds,
+      type: PORTAL_MANUAL_ALARM_TYPE,
+      channel: ctx.channel,
+      username: ctx.accountName
+    }, ctx);
   }
-  return out;
+  return {
+    kind: "p2p-int-string",
+    cmd: SIREN_CMD.CAMERA_TONE,
+    value: seconds,
+    valueSub: ctx.channel,
+    channel: ctx.channel
+  };
 }
-function parsePresetImage(reply) {
-  const data = reply?.data;
-  if (typeof data !== "string" || data.length === 0)
-    return void 0;
-  const rawIndex = reply?.index;
-  const index = typeof rawIndex === "number" ? rawIndex : Number.isFinite(Number(rawIndex)) ? Number(rawIndex) : -1;
-  return { index, data };
+function alarmOutputFamily(ctx) {
+  if (isEvidencedStationAlarm(ctx))
+    return "homebase";
+  if (isEvidencedAttachedCamera(ctx))
+    return "camera";
+  if (isEvidencedStandaloneSiren(ctx))
+    return "standalone";
+  return void 0;
 }
-function isDirection(v) {
-  return v === "left" || v === "right" || v === "up" || v === "down";
+function triggerAlarm(seconds, ctx) {
+  const family = alarmOutputFamily(ctx);
+  if (family === "homebase")
+    return homeBaseAlarm(seconds, ctx);
+  if (family === "camera")
+    return cameraAlarm(seconds, ctx);
+  throw new Error("manual alarm trigger has no verified wire for this device family");
 }
-var PTZ_MEMBERS = {
-  /**
-   * How fast a rotate STEP travels, on the app's own three-position control: `1` slow, `3` mid, `5`
-   * fast. A `scalar` rather than an enum — the endpoints and the midpoint are observed, so 2 and 4 are
-   * a prediction of the scale's shape and the wire is not known to reject them.
-   *
-   * Not the same thing as `rotate`'s `zoom` argument, which scales one step's SIZE rather than its
-   * speed.
-   *
-   * The parameter is **absent until first written**: a camera whose speed has never been set reports
-   * no `6015` at all, so the getter is installed only once the value exists — an absent reading is "not
-   * configured", never "unsupported".
-   */
-  rotationSpeed: {
-    param: PTZ_CMD.PTZ_ROTATE_SPEED,
-    type: "number",
-    kind: "scalar",
-    provenance: "verified",
-    description: "Pan/tilt rotate speed: 1 = slow, 3 = mid, 5 = fast (PTZ_ROTATE_SPEED 6015). \u2705 Write confirmed live on a T8410 (mains, standalone): the app's Slow/Mid/Fast control identified 1/3/5, then 1 and 5 were sent consecutively through this member and read back on the cloud param. 2 and 4 are the scale's shape, not observed values. Absent until first written.",
-    write: (v, ctx) => {
-      const n = Number(v);
-      if (!Number.isInteger(n) || n < 1 || n > 5)
-        return void 0;
-      return setJson(PTZ_CMD.PTZ_ROTATE_SPEED, { value: n }, ctx);
-    }
-  },
-  /** Rotate a step in a direction; `zoom` scales the step size (1.0 = the default step). */
-  rotate: method(({ ctx, sink }) => (direction, zoom = 1) => sink.dispatch(rotateCommand(direction, ctx, zoom)), "Rotate a step in a direction."),
-  /** Rotate one step left. */
-  left: method(({ ctx, sink }) => () => sink.dispatch(rotateCommand("left", ctx)), "Rotate left."),
-  /** Rotate one step right. */
-  right: method(({ ctx, sink }) => () => sink.dispatch(rotateCommand("right", ctx)), "Rotate right."),
-  /** Rotate one step up. */
-  up: method(({ ctx, sink }) => () => sink.dispatch(rotateCommand("up", ctx)), "Rotate up."),
-  /** Rotate one step down. */
-  down: method(({ ctx, sink }) => () => sink.dispatch(rotateCommand("down", ctx)), "Rotate down."),
-  /**
-   * Zoom rides a SECOND (telephoto) lens, so it is offered only where the device shows zoom evidence —
-   * otherwise `dev.ptz()?.zoom` would be a silent no-op on a single-lens pan-tilt camera.
-   */
-  zoom: method(({ ctx, sink }) => (dstZoom, region) => sink.dispatch(zoomCommand(dstZoom, ctx, region)), "Zoom the telephoto lens.", hasZoomEvidence),
+function stopAlarm(ctx) {
+  const family = alarmOutputFamily(ctx);
+  if (family === "homebase")
+    return homeBaseAlarm(0, ctx);
+  if (family === "camera")
+    return cameraAlarm(0, ctx);
+  if (family === "standalone")
+    return sirenPayload(SIREN_CMD.MANUAL_STOP, {}, ctx);
+  throw new Error("manual alarm stop has no verified wire for this device family");
+}
+function validateTriggerDuration(seconds) {
+  if (!Number.isSafeInteger(seconds) || seconds <= 0) {
+    throw new Error(`trigger duration ${String(seconds)} is not a positive safe whole-number duration in seconds`);
+  }
+  return seconds;
+}
+function sirenPayload(cmd, body, ctx) {
+  return setPayload(cmd, { ...body, transaction: String(Date.now()) }, ctx, 0);
+}
+var SIREN_MEMBERS = {
   /**
-   * The preset sub-API. Write verbs dispatch through the sink; the READ verbs (`list`/`image`) are P2P
-   * request/reply and exist only when bound to a media provider — the transport stays
-   * capability-agnostic (it runs a generic control-payload query and resolves the correlated notify)
-   * while this module owns the sub-command id and the reply parsing.
-   *
-   * `answers` because calling it performs nothing: it hands back the namespace the verbs live on. Offering
-   * it as a control would produce one that returns an object and does nothing.
+   * Authoritative sounding state reported by a standalone siren. HomeBase and camera command
+   * acknowledgements do not install or update this read.
    */
-  preset: {
-    ...method(({ ctx, sink, media }) => () => {
-      const p = {
-        goto: (id) => sink.dispatch(gotoPresetCommand(id, ctx)),
-        preview: (id) => sink.dispatch(previewPresetCommand(id, ctx)),
-        save: async (id) => {
-          for (const cmd of savePresetCommand(id, ctx))
-            await sink.dispatch(cmd);
-        },
-        setDefault: (id) => sink.dispatch(setDefaultPositionCommand(id, ctx)),
-        delete: (id) => sink.dispatch(deletePresetCommand(id, ctx))
-      };
-      if (media?.p2pControlQuery) {
-        p.list = async (opts) => parsePresetPoints(await media.p2pControlQuery(PTZ_CMD.PTZ_PRESET_QUERY, { value: 0 }, opts));
-        p.image = async (id, opts) => parsePresetImage(await media.p2pControlQuery(PTZ_CMD.PTZ_PRESET_PIC, { value: id }, opts));
-      }
-      return p;
-    }, "The preset sub-API: goto/preview/save/setDefault/delete, plus list/image when bound."),
-    answers: true
-  }
-};
-var PTZ = {
-  capability: "ptz",
-  description: "Pan/tilt (PTZ) control. Movement is command-driven and rotate speed is stored; position arrives as a live event.",
+  active: {
+    param: SIREN_PARAM.RING_STATUS,
+    property: "siren",
+    type: "bool",
+    kind: "boolean",
+    provenance: "verified",
+    available: isSensorCodec,
+    description: "Whether the siren is sounding (61008 APP_CMD_DEV_RING_STATUS). \u2705 Confirmed boolean: a live test on a T90R0 pushed 1 (sounding) then 0 (silent)."
+  },
   /**
-   * The intent route for the movement verbs — kept alongside the member table because these are
-   * ARGUMENT-TAKING verbs, not property writes: `rotate` takes a direction, the preset verbs take an id.
-   * A member's `write` moves one named value, so it cannot name them, and dropping this would silently
-   * remove `setProperty("gotoPreset", 2)` from the low-level path. Each case delegates to the same
-   * builder the fluent method uses, so the two cannot drift. Zoom carries the same dual-lens gate the
-   * fluent `zoom` member does.
+   * Rejected, not clamped, outside the 1-3 set: the write is fire-and-forget, so an out-of-range level
+   * would look like it worked.
    */
-  buildCommand(action, value, ctx) {
-    if (action === "rotate" && isDirection(value))
-      return rotateCommand(value, ctx);
-    if (typeof value === "number") {
-      if (action === "zoom")
-        return hasZoomEvidence(ctx) ? zoomCommand(value, ctx) : void 0;
-      if (action === "gotoPreset")
-        return gotoPresetCommand(value, ctx);
-      if (action === "previewPreset")
-        return previewPresetCommand(value, ctx);
-      if (action === "deletePreset")
-        return deletePresetCommand(value, ctx);
-      if (action === "setDefaultPosition")
-        return setDefaultPositionCommand(value, ctx);
+  volume: {
+    param: SIREN_PARAM.ALARM_VOLUME,
+    property: "sirenVolume",
+    type: "number",
+    kind: "scalar",
+    provenance: "verified",
+    available: isSensorCodec,
+    requires: [SIREN_PARAM.ALARM_VOLUME],
+    enumValues: enumLabels(SirenVolume),
+    args: [{ name: "level", kind: "scalar", description: "A device level 1-3 (Low/Mid/High), not a percentage." }],
+    description: "Alarm volume (1825 APP_CMD_SIREN_SENSOR_SET_ALARM_VOL), a device level 1-3 (Low/Mid/High), NOT a percentage. Write verified live on a T90R0 (1350 SET_PAYLOAD {volume}).",
+    write: (v, ctx) => {
+      const level = coerceEnumValue(SirenVolume, v);
+      return level === void 0 ? void 0 : sirenPayload(SIREN_PARAM.ALARM_VOLUME, { volume: level }, ctx);
     }
-    return void 0;
   },
-  members: PTZ_MEMBERS,
-  properties: propertiesOf(PTZ_MEMBERS),
-  // SoloCam proves PT via reported preset params (6090/6091/6092/6210) and a rotate command surface
-  // (1029), except on a FIXED_LENS_MODELS model; Indoor-PT (deviceType 31/35/111 + C220 range
-  // 10008-10011) reports NO PT param, so the vendor deviceType is the only honest signal; explicit
-  // PT/S340/S350 model names also prove it.
-  // OUTDOOR_PT_CAMERA (48, e.g. SoloCam S340 / T8170) is pan-tilt by definition but a live unit can
-  // report none of the preset params — trust the deviceType. The rotating SoloCam solar variant
-  // T8124R shares deviceType 62 with the FIXED T8124 base, so its model code is the only honest
-  // signal that separates the two. Match ONLY confirmed rotating model codes here — do NOT widen to
-  // a `T81\d\dR` wildcard: the "R = rotating" reading is unverified for other models, and an
-  // over-broad hint would false-positive a future non-PT model, the same class of bug as a mislabel.
-  detection: {
-    detect: (record) => !FIXED_LENS_MODELS.has(record.model ?? "") && PRESET_EVIDENCE_PARAMS.some((p) => Object.hasOwn(record.params ?? {}, p)),
-    deviceTypes: [
-      DeviceType.OUTDOOR_PT_CAMERA,
-      DeviceType.INDOOR_PT_CAMERA,
-      DeviceType.INDOOR_PT_CAMERA_1080,
-      DeviceType.CAMERA_4G_S330,
-      DeviceType.INDOOR_PT_CAMERA_C220,
-      DeviceType.INDOOR_PT_CAMERA_C210,
-      DeviceType.INDOOR_PT_CAMERA_C220_V2,
-      DeviceType.INDOOR_PT_CAMERA_C220_V3,
-      // T8425 has its own dedicated deviceType (47), distinct from OUTDOOR_PT_CAMERA (48) — easy to
-      // miss since the name doesn't say "PT". Was omitted here despite T8425 being the hardware that
-      // grounded the rotate_type wire mapping (see PTZ_ROTATE's doc comment) — confirmed live it has
-      // no PTZ capability without this, on a real owned unit.
-      DeviceType.FLOODLIGHT_CAMERA_8425
-    ],
-    modelHints: [/pan.?tilt|\bpt\b|S3[45]0|indoor.?pt/i, /\bT8E00\b/i]
+  /** Only the four captured presets are accepted: no capture supports an arbitrary duration. */
+  alarmDuration: {
+    param: SIREN_PARAM.ALARM_TIMEOUT,
+    type: "number",
+    unit: "s",
+    kind: "seconds",
+    provenance: "verified",
+    available: isSensorCodec,
+    requires: [SIREN_PARAM.ALARM_TIMEOUT],
+    enumValues: enumLabels(SirenAlarmDuration),
+    args: [{ name: "seconds", kind: "seconds", description: "One of the app's presets: 60/300/600/900." }],
+    description: "How long an alarm sounds before stopping itself (61006 APP_CMD_DEV_ALARM_TIMEOUT), seconds. Write verified live on a T90R0 (1350 SET_PAYLOAD {value}); app presets 60/300/600/900.",
+    write: (v, ctx) => {
+      const seconds = coerceEnumValue(SirenAlarmDuration, v);
+      return seconds === void 0 ? void 0 : sirenPayload(SIREN_PARAM.ALARM_TIMEOUT, { value: seconds }, ctx);
+    }
   },
-  emits: ["ptzNotify"],
   /**
-   * Surface PTZ status the camera streams back while it moves. Two wire shapes (both prove pan-tilt):
-   *  - SoloCam: `CMD_NOTIFY_PAYLOAD` (1351) JSON `{cmd, payload}` with cmd 6030 (rotate) / 6203 (zoom).
-   *  - Indoor PT: `CMD_DOORBELL_SET_PAYLOAD` (1700) binary 24-byte records of float `(pan, tilt)`
-   *    (non-zero while moving; a fixed camera sends zeros).
-   * `stationSn` is added by the barrel, so it is NOT included in the returned payload.
+   * Read-only: `apk` provenance means the id comes from the disassembled app and the only live evidence
+   * is a T90R0 reporting 0, which fixes neither the polarity's other value nor a write frame. Typed
+   * `bool` on the app's own naming; do not add a setter until a toggle is captured.
    */
-  decodeEvent(signal) {
-    if (signal.source !== "p2p-frame")
-      return null;
-    const f = signal;
-    if (f.commandId === PTZ_FRAME.NOTIFY_PAYLOAD && f.json && typeof f.json.cmd === "number" && (f.json.cmd === PTZ_CMD.PTZ_ROTATE || f.json.cmd === PTZ_CMD.PTZ_ZOOM)) {
-      return {
-        event: "ptzNotify",
-        payload: { kind: f.json.cmd === PTZ_CMD.PTZ_ZOOM ? "zoom" : "rotate", payload: f.json.payload }
-      };
-    }
-    if (f.commandId === PTZ_FRAME.CONTROL_PAYLOAD && f.data && f.data.length >= 28) {
-      const coords = [];
-      for (let o = 4; o + 24 <= f.data.length; o += 24) {
-        const pan = f.data.readFloatLE(o + 12);
-        const tilt = f.data.readFloatLE(o + 16);
-        if (Number.isFinite(pan) && Number.isFinite(tilt) && Math.abs(pan) <= 2 && Math.abs(tilt) <= 2) {
-          coords.push([pan, tilt]);
-        }
-      }
-      if (coords.some(([p, t]) => p !== 0 || t !== 0)) {
-        return { event: "ptzNotify", payload: { kind: "position", coords } };
-      }
+  doNotDisturb: {
+    param: SIREN_PARAM.NOT_DISTURB,
+    type: "bool",
+    kind: "boolean",
+    provenance: "apk",
+    available: isSensorCodec,
+    description: "Do-not-disturb (1828 APP_CMD_SENSOR_NOT_DISTURB). Observed 0 on a T90R0."
+  },
+  /** HomeBase alarm volume is a percentage on a station-scalar wire, unlike standalone level 1-3. */
+  alarmVolume: {
+    param: SIREN_CMD.HUB_SPK_VOLUME,
+    type: "number",
+    unit: "%",
+    kind: "percent",
+    writeOnly: true,
+    provenance: "verified",
+    available: isHomeBase,
+    requires: HUB_ALARM_EVIDENCE,
+    min: 0,
+    max: 100,
+    description: "HomeBase alarm volume 0..100 (1235 CMD_SET_HUB_SPK_VOLUME). Verified audible on a T8030.",
+    write: (v) => setStationScalar(SIREN_CMD.HUB_SPK_VOLUME, Number(v), STATION_CHANNEL)
+  },
+  /** HomeBase alarm tone keeps its independently verified two-option domain. */
+  alarmTone: {
+    param: SIREN_CMD.HUB_ALARM_TONE,
+    property: "hubAlarmTone",
+    type: "number",
+    kind: "enum",
+    enumValues: enumLabels(HubAlarmTone),
+    provenance: "verified",
+    available: isHomeBase,
+    requires: HUB_ALARM_EVIDENCE,
+    args: [{ name: "tone", kind: "enum", description: "One of the app's alarm tones (1-indexed)." }],
+    description: "HomeBase alarm tone selection (1281 APP_CMD_HUB_ALARM_TONE; 1350 SET_PAYLOAD {type}, mValue3 0). Wire verified live on a T8030.",
+    write: (v, ctx) => {
+      const tone = coerceEnumValue(HubAlarmTone, v);
+      return tone === void 0 ? void 0 : setPayload(SIREN_CMD.HUB_ALARM_TONE, { type: tone }, ctx, 0);
     }
-    return null;
-  }
+  },
+  /** Sound a standalone siren briefly using its dedicated installation-test wire. */
+  test: {
+    action: (ctx) => sirenPayload(SIREN_CMD.ALARM_TEST, {}, ctx),
+    available: isEvidencedStandaloneSiren,
+    description: "Sound the siren briefly as a test."
+  },
+  /** Trigger a verified station-family HomeBase or evidenced attached-camera alarm for a bounded duration. */
+  trigger: {
+    ...method(({ ctx, sink }) => async (seconds) => {
+      await sink.dispatch(triggerAlarm(validateTriggerDuration(seconds), ctx));
+    }, "Trigger the alarm for a positive whole-number duration in seconds.", (ctx) => isEvidencedStationAlarm(ctx) || isEvidencedAttachedCamera(ctx)),
+    args: [{ name: "seconds", kind: "seconds", min: 1, description: "A positive whole-number duration." }]
+  },
+  /** Stop a verified alarm-output family through its own wire contract. */
+  stop: method(({ ctx, sink }) => () => sink.dispatch(stopAlarm(ctx)), "Manually stop a sounding alarm.", (ctx) => alarmOutputFamily(ctx) !== void 0)
 };
-
-// dist/model/capabilities/doorbell.js
-import { setTimeout as sleep } from "node:timers/promises";
-var DOORBELL_MODELS = /* @__PURE__ */ new Set([
-  "T820",
-  "T8200",
-  "T8201",
-  "T8202",
-  "T8203",
-  "T8210",
-  "T8212",
-  "T8213",
-  "T8214",
-  "T8220",
-  "T8221",
-  "T8222"
-]);
-var DOORBELL_TYPES = [
-  DeviceType.DOORBELL,
-  DeviceType.BATTERY_DOORBELL,
-  DeviceType.BATTERY_DOORBELL_2,
-  DeviceType.BATTERY_DOORBELL_PLUS,
-  DeviceType.DOORBELL_SOLO,
-  DeviceType.BATTERY_DOORBELL_PLUS_E340
-];
-var DOORBELL_CMD = {
-  /**
-   * Doorbell "quick response" — make the doorbell PLAY a stored voice reply. Same 136-byte
-   * direct-binary shape as the camera setters: `value` = the `voice_id` to play. Reversed from a
-   * live capture (outer-cmd 1706, signCode 8, on the doorbell's `device_channel`) + the app's
-   * `PlayQuickResponseParser` (`{cmd:1706,voice_id}`).
-   */
-  QUICK_RESPONSE: 1706,
+var SIREN = {
+  capability: "siren",
+  description: "Audible alarm output with evidence-bounded state, configuration, test, trigger, and stop members.",
+  members: SIREN_MEMBERS,
+  properties: propertiesOf(SIREN_MEMBERS),
+  /** Detection uses reported evidence and topology; no model string or device type admits a wire. */
+  detection: {
+    detect: (record, codec) => {
+      const homeBase = record.deviceType !== void 0 && HOMEBASE_TYPES.has(record.deviceType);
+      const homeBaseAlarm2 = homeBase && HUB_ALARM_EVIDENCE.some((param) => Object.hasOwn(record.params ?? {}, param));
+      const attachedCameraAlarm = codec === "camera" && !!record.parentSn && hasReportedEasSwitch(record);
+      const standaloneSiren = codec === "sensor" && hasStandaloneSirenEvidence(record);
+      return homeBaseAlarm2 || attachedCameraAlarm || standaloneSiren;
+    }
+  }
+};
+
+// dist/model/capabilities/light.js
+var LIGHT_CMD = {
+  /** Spotlight momentary on/off; `{time,type,value}` under 1700. ✅ Verified via P2P state readback (3/3). */
+  FLOODLIGHT_SWITCH: 1400,
   /**
-   * Mechanical (wired) chime enable/disable — whether the doorbell drives an existing wired chime box,
-   * the app's "existing doorbell chime" (as opposed to / in addition to the HomeBase acting as the chime,
-   * param 1702 `chimeSwitch` above; toggling each switch alone wrote one parameter and named the pair). Same
-   * 136-byte direct-binary shape as `QUICK_RESPONSE`/camera on-off: `[u32 channel][u32 value][account_id
-   * ASCII, zero-padded to 128 bytes]`, outer P2P cmd = 1703 itself, signCode 8, on the device's own
-   * channel. Reversed from a live capture (outer-cmd 1703, signCode 8, captured on the doorbell's
-   * `device_channel` — channel 2 for that unit, NOT a wire constant, always use `ctx.channel`):
-   * turning ON sent `value=1`, turning OFF sent `value=0` — a plain boolean, 1=on/0=off.
-   * App `APP_CMD_BAT_DOORBELL_MECHANICAL_CHIME_SWITCH`.
+   * Spotlight brightness 1..100. ✅ SOLVED & verified live (T8425 + T8124): direct-binary command,
+   * 136-byte struct `[u32 ch][u32 value][account_id pad→128]` (value = raw 1..100), NOT a JSON wrapper.
    */
-  MECHANICAL_CHIME_SWITCH: 1703,
+  SPOTLIGHT_BRIGHTNESS: 1401,
+  /** Spotlight master enable — distinct from the on/off switch. ✅ Verified live T8124 (same 136-byte direct-binary struct as brightness). */
+  SPOTLIGHT_ENABLE: 1403,
+  /** Spotlight color temperature 0=warm..100=cool. ✅ Verified live T8124 (only tunable-white spotlights respond; T8425 is white-only). */
+  SPOTLIGHT_COLOR_TEMP: 1410,
   /**
-   * Whether the HOMEBASE acts as the doorbell's chime — the app's "HomeBase as chime" switch, as opposed
-   * to the wired chime box {@link DOORBELL_CMD.MECHANICAL_CHIME_SWITCH} drives. The app constant reads
-   * `CHIME_SWITCH`, which is why this was long described as a separate plug-in chime; toggling that one
-   * switch alone on a T8210 behind a HomeBase wrote 1702 and nothing else, and the account has no
-   * plug-in chime at all. Same 136-byte direct-binary shape as
-   * that sibling: `[u32 channel][u32 value][account_id ASCII, zero-padded to 128 bytes]`, outer P2P cmd
-   * 1702 itself, signCode 8, on the device's own channel. Reversed from a live capture (outer-cmd 1702,
-   * signCode 8, on the doorbell's `device_channel` — 2 for that unit, NOT a wire constant, always use
-   * `ctx.channel`): turning OFF sent `value=0`, turning ON sent `value=1` — a plain boolean.
-   * App `APP_CMD_BAT_DOORBELL_CHIME_SWITCH`.
+   * Auto-spotlight = "motion-activated light" — light up when motion fires. ✅ Wire reversed from a live
+   * OUTBOUND P2P capture + replay-verified on T8425 (ch3, 2026-07-13, ON+OFF): the real command
+   * is **cmd 1422**, carried in a `1350` SET_PAYLOAD envelope on the DEVICE channel (mChannel = device
+   * channel, mValue3 0), with a COMPOSITE payload — NOT a bare bool:
+   *   `{brightness:0..100, enable:0|1, latitude:"", longtitude:"" (sic), mode:1, schedule:[], sunset2rise:0, time}`
+   * `enable` is the on/off; `time` = auto-off seconds; `mode`/`schedule`/`sunset2rise` are the scheduling
+   * knobs. See {@link AutoSpotlightOptions}.
+   * NB: the app-JS constant `APP_CMD_SET_LIGHT_CTRL_PIR_SWITCH` (1408) is a RED HERRING for this device —
+   * the T8425 never emits 1408; three 1408 wire attempts all no-op'd. (No `1408` constant is defined — it's
+   * dead; do not add one.)
    */
-  CHIME_SWITCH: 1702,
+  MOTION_ACTIVATE_LIGHT: 1422
+};
+var BRIGHTNESS_MIN = 1;
+var BRIGHTNESS_MAX = 100;
+function autoSpotlightCommand(on, ctx, opts = {}) {
+  return setPayload(LIGHT_CMD.MOTION_ACTIVATE_LIGHT, {
+    brightness: clamp(Number(opts.brightness ?? 50), BRIGHTNESS_MIN, BRIGHTNESS_MAX),
+    enable: on ? 1 : 0,
+    latitude: "",
+    longtitude: "",
+    mode: opts.mode ?? 1,
+    schedule: [],
+    sunset2rise: 0,
+    time: opts.time ?? 30
+  }, ctx, 0, void 0, "auto");
+}
+function lightSwitchWire(ctx) {
+  const t = ctx.deviceType;
+  if (t === void 0)
+    return void 0;
+  if (LIGHT_SWITCH_JSON_TYPES.has(t))
+    return "json";
+  if (LIGHT_SWITCH_INT_STRING_TYPES.has(t))
+    return "int-string";
+  return void 0;
+}
+var LIGHT_SWITCH_JSON_TYPES = /* @__PURE__ */ new Set([
+  DeviceType.FLOODLIGHT_CAMERA_8425,
+  ...WALL_LIGHT_TYPES,
+  DeviceType.INDOOR_PT_CAMERA,
+  DeviceType.INDOOR_PT_CAMERA_1080,
+  DeviceType.CAMERA_4G_S330
+]);
+var LIGHT_SWITCH_INT_STRING_TYPES = /* @__PURE__ */ new Set([
+  DeviceType.FLOODLIGHT_CAMERA_8423,
+  DeviceType.INDOOR_OUTDOOR_CAMERA_1080P_NO_LIGHT,
+  DeviceType.INDOOR_OUTDOOR_CAMERA_2K,
+  DeviceType.INDOOR_OUTDOOR_CAMERA_1080P,
+  DeviceType.OUTDOOR_PT_CAMERA,
+  DeviceType.CAMERA2C,
+  DeviceType.CAMERA2,
+  DeviceType.CAMERA2_PRO,
+  DeviceType.CAMERA2C_PRO,
+  DeviceType.CAMERA3,
+  DeviceType.CAMERA3C,
+  DeviceType.PROFESSIONAL_247
+]);
+function switchCommand(on, ctx) {
+  switch (lightSwitchWire(ctx)) {
+    case "json":
+      return setJson(LIGHT_CMD.FLOODLIGHT_SWITCH, { time: 0, type: 2, value: on ? 1 : 0 }, ctx);
+    case "int-string":
+      return setScalar(LIGHT_CMD.FLOODLIGHT_SWITCH, on ? 1 : 0, ctx, "int-string");
+    default:
+      return void 0;
+  }
+}
+function directBinary(param, value, ctx) {
+  return setScalar(param, value, ctx, "direct-binary");
+}
+function switchFrame(on, ctx) {
+  const cmd = switchCommand(on, ctx);
+  if (!cmd)
+    throw new Error(`light: unknown spotlight switch wire format \u2014 confirm it [${describeDevice(ctx)}]`);
+  return cmd;
+}
+var LIGHT_MEMBERS = {
   /**
-   * Wide Dynamic Range (WDR) image switch — a video/image tone-mapping setting that widens the
-   * exposure range in high-contrast scenes (bright sky behind a visitor, etc). SAME 136-byte
-   * direct-binary shape/polarity/capture session as `MECHANICAL_CHIME_SWITCH` immediately above: outer
-   * P2P cmd 1704, signCode 8, device channel, `value` 1=on/0=off.
-   * App `APP_CMD_BAT_DOORBELL_WDR_SWITCH`.
+   * Whether the lamp is lit RIGHT NOW — the momentary switch, not a setting. Measured on a T8170: 1400
+   * goes to `1` when a client lights the spotlight and back to `0` when that client stops, so the value
+   * tracks whoever is streaming rather than a preference anyone set. The vendor app lights the lamp for a
+   * live view and drops it on quitting.
+   *
+   * So it reads on whenever any client is watching. The setting a user changes and expects to persist
+   * is {@link spotlightEnabled}.
+   *
+   * The switch refuses for a reason a value check cannot give — this model's frame SHAPE is unconfirmed —
+   * so `switchFrame` throws that reason and `bindMembers` turns it into the rejection, rather than
+   * letting the generated "not a valid value" blame a boolean that was never the problem.
    */
-  WDR_SWITCH: 1704,
+  isOn: {
+    param: LIGHT_CMD.FLOODLIGHT_SWITCH,
+    property: "light",
+    type: "bool",
+    kind: "boolean",
+    provenance: "verified",
+    description: "Light on/off (1400) \u2014 lit right now, not a setting: it follows whichever client is streaming. Verified via P2P state readback (3/3); session-scoped behaviour measured live on a T8170.",
+    write: (v, ctx) => switchFrame(asBool(v), ctx),
+    writeAs: "set",
+    aliases: { on: true, off: false }
+  },
   /**
-   * Doorbell chime ("ding-dong") volume — app `APP_CMD_BAT_DOORBELL_SET_DINGDONG_VOLUME`. UNLIKE the 1703/1704 direct-binary switches above, this rides the
-   * `SET_PAYLOAD` (1350) JSON envelope: `{account_id,cmd:1717,mChannel:<deviceCh>,mValue3:0,
-   * payload:{dingdong_volume:N}}`, GCM signCode 8, on the doorbell's `device_channel` (2 for the
-   * captured unit — always use `ctx.channel`, don't hardcode). `mValue3` is an EXPLICIT `0`, not the
-   * `SET_PAYLOAD` default of `mValue3:cmd` (see {@link module:./intent setPayload}'s doc comment) —
-   * both live frames captured showed `mValue3:0`. Reversed from a live capture (values 3 and 25
-   * observed) — a 0-100 loudness level, distinct from the already-shipped `ringtoneVolume` (1708,
-   * direct-binary, `audio.ts`), which is a DIFFERENT control.
+   * Manual level for the spotlight, 1-100 — the floor is 1 rather than 0 because a 0 reads as "off" and
+   * that is `isOn`'s job. The write is pinned to the level-2 direct-binary frame (`directBinary`),
+   * the only shape captured for it, so a standalone camera that never negotiates a level-2 key cannot
+   * set it even though the getter reads fine.
    */
-  DINGDONG_VOLUME: 1717,
+  brightness: {
+    param: LIGHT_CMD.SPOTLIGHT_BRIGHTNESS,
+    type: "number",
+    unit: "%",
+    kind: "percent",
+    provenance: "verified",
+    min: BRIGHTNESS_MIN,
+    max: BRIGHTNESS_MAX,
+    description: "Manual brightness, range 1-100 (1401). Verified live (T8425 + T8124).",
+    write: (v, ctx) => directBinary(LIGHT_CMD.SPOTLIGHT_BRIGHTNESS, Number(v), ctx)
+  },
   /**
-   * Doorbell chime ("ding-dong") RINGTONE SELECTION — app `APP_CMD_BAT_DOORBELL_SET_DINGDONG_RINGTONE`.
-   * SAME `SET_PAYLOAD` (1350) JSON envelope shape as
-   * `DINGDONG_VOLUME` immediately above: `{account_id,cmd:1718,mChannel:<deviceCh>,mValue3:0,
-   * payload:{dingdong_ringtone:N}}`, GCM signCode 8, doorbell `device_channel`, explicit `mValue3:0`.
-   * Reversed from a live capture (values 4 and 0 observed) — `N` is an INTEGER INDEX picking one of
-   * several stored chime tones, NOT a boolean.
+   * Warm-to-cool on a 0-100 scale — a `scalar`, not a percentage or a mired value, since 0 is one end
+   * of a range rather than "none". `writeOnly`, so there is a setter and no getter at all: the device
+   * accepts the setting and never reports it back.
+   * Only tunable-white spotlights respond; a white-only model accepts the frame and does nothing.
    */
-  DINGDONG_RINGTONE: 1718,
+  colorTemp: {
+    param: LIGHT_CMD.SPOTLIGHT_COLOR_TEMP,
+    type: "number",
+    kind: "scalar",
+    provenance: "verified",
+    writeOnly: true,
+    min: 0,
+    max: 100,
+    description: "Colour temperature, 0 (warm) to 100 (cool). Not reported back, so it is write-only.",
+    write: (v, ctx) => directBinary(LIGHT_CMD.SPOTLIGHT_COLOR_TEMP, Number(v), ctx)
+  },
   /**
-   * Live-view quality AND the video encoding format, both in one integer — app
-   * `CMD_BAT_DOORBELL_VIDEO_QUALITY`. The value is `quality + (highCompression ? 5 : 0)`, where quality
-   * is 0 Auto / 1 Low / 2 Medium / 3 High ({@link DoorbellVideoQuality}). The app drives the two from
-   * separate menus and each write carries both, so setting either requires the other's current value —
-   * which is why neither is a derived setter.
+   * The master enable, one level above {@link isOn}: this decides whether the spotlight may light at all,
+   * where `isOn` is the momentary switch. `writeAs` names the setter `setEnabled` rather than the
+   * `setSpotlightEnabled` the key would derive, since the capability is already the spotlight.
    *
-   * The encoding is reversed from writing every option in the app and reading the parameter back: High
-   * on high compression is 8 and on low compression 3, Low on low compression 1, Auto on high
-   * compression 5. Six of the eight combinations were observed that way; `0` (Auto, low compression) and
-   * `2` (Medium, low compression) follow the same arithmetic but were not individually written.
+   * Reported, so it is a read as well as a write. ✅ Verified live on a T8170: the cloud device list
+   * carries 1403, and its value tracks the vendor app's spotlight setting in both directions — `1` to `0`
+   * when the setting is switched off, `0` to `1` when it is switched back on, so the polarity is direct
+   * and 1 means enabled. The poll reports a param only when its PREVIOUS value differed, so the id is in
+   * the record rather than newly appearing. The param dictionary names it `floodlightTotalSwitch`
+   * (`app:FLOODLIGHT_TOTAL_SWITCH`) and lists the T8170 among its models.
    *
-   * Wire captured byte-exact from the app on a T8210 behind a HomeBase: outer P2P cmd 1705 itself — no
-   * wrapper — signCode 8, on the doorbell's own channel, the same 136-byte direct-binary
-   * `[u32 channel][u32 value][account_id ASCII pad 128]` struct as its 1703/1704 siblings. The station
-   * answers with an unencrypted level-1 frame carrying 0.
+   * This is the switch a user changes and expects to STAY changed. {@link isOn} is a different fact:
+   * the lamp being lit right now, driven by whichever
+   * client is streaming — the vendor app lights it for a live view and drops it on quitting.
    *
-   * Replayed from this SDK and confirmed on that device: three writes in one session, each read back off
-   * the parameter — quality alone, then the encoding format with the quality held, then a restore.
+   * The T8423 write takes the session-chosen level; level-1 int+string was verified live on a standalone
+   * unit.
    */
-  VIDEO_QUALITY: 1705,
+  spotlightEnabled: {
+    param: LIGHT_CMD.SPOTLIGHT_ENABLE,
+    type: "bool",
+    kind: "boolean",
+    provenance: "verified",
+    description: "The spotlight master switch, distinct from the on/off above \u2014 whether the spotlight may light at all. Read verified live on a T8170 (param 1403, direct polarity: 1 = enabled).",
+    write: (v, ctx) => setScalar(LIGHT_CMD.SPOTLIGHT_ENABLE, asBool(v) ? 1 : 0, ctx, ctx.deviceType === DeviceType.FLOODLIGHT_CAMERA_8423 ? "auto" : "direct-binary"),
+    writeAs: "setEnabled"
+  }
+};
+var LIGHT = {
+  capability: "light",
+  description: "Floodlight / spotlight manual switch and brightness.",
+  members: LIGHT_MEMBERS,
+  properties: propertiesOf(LIGHT_MEMBERS),
+  // Three T8171 units on firmware 1.2.1.6 report 1400/1401/1403 without a spotlight, so those
+  // param ids are not sufficient evidence for that model. The camera status LED (1045) is not light.
+  // Other models keep the existing param and name evidence.
+  detection: {
+    modelHints: [/floodlight|wall.?light|spot.?light|search.?light/i],
+    detect: (record) => record.model !== "T8171" && [1400, 1401, 1403, 6080, 6082, 1413].some((param) => Object.hasOwn(record.params ?? {}, param))
+  },
   /**
-   * Doorbell quick-response LIST fetch — the sub-command carried inside a `SET_PAYLOAD` (1350)
-   * wrapper (app `APP_CMD_GET_CUSTOMIZE_VICOE_LIST`). The station replies with a `NOTIFY_PAYLOAD`
-   * (1351) frame whose JSON is `{cmd:6237, payload:{voice_list:[{voice_id,voice_name,voice_path}]}}`.
-   * Reversed from the app's `GetQuickResponseListP2pParser` + the capture heap. NOTE: 6238
-   * (`APP_CMD_GET_QUICK_RESPONSE`) is the single-file DOWNLOAD, not the list.
+   * Only what the member table cannot express: `on`/`off` as no-argument verbs over the same wire as the
+   * derived `set`, and the write-only auto-spotlight composite. The verbs stay UNDESCRIBED on purpose —
+   * `set` is the method that takes the value, and describing all three would offer one state as three
+   * controls. `async` is what turns `switchFrame`'s throw into the rejection a `Promise<void>`
+   * caller expects, the same shape the derived setter gets from `bindMembers`.
    */
-  GET_QUICK_RESPONSE_LIST: 6237
+  actions({ ctx, sink }) {
+    const dispatchSwitch = async (on) => sink.dispatch(switchFrame(on, ctx));
+    return {
+      on: () => dispatchSwitch(true),
+      off: () => dispatchSwitch(false),
+      setAutoSpotlight: (on, opts) => sink.dispatch(autoSpotlightCommand(asBool(on), ctx, opts))
+    };
+  }
 };
-var DoorbellRingtone = {
-  Default: 0,
-  Silent: 1,
-  Beacon: 2,
-  Chord: 3,
-  Christmas: 4,
-  Circuit: 5,
-  Clock: 6,
-  Ding: 7,
-  Hillside: 8,
-  Presto: 9
+
+// dist/model/capabilities/smart-light.js
+var LIGHT_MQTT_CMD = 17;
+var LIGHT_MQTT_REPORT_CMD = 16;
+var LIGHT_CMD2 = {
+  /** `getDeviceInfoPayloadData` — request a full status report. */
+  GET_DEVICE_INFO: 512,
+  /** `setDeviceInfoPayloadData` — on/off (tag 0xa3) + brightness (tag 0xa4). */
+  SET_DEVICE_INFO: 513,
+  /** The device→app status report (`event_device_status_notify`), sent unsolicited. */
+  DEVICE_STATUS_REPORT: 516,
+  /** `setLightEffectParamsPayloadData` — apply one plain custom colour to evidenced segments. */
+  SET_LIGHT_EFFECT_PARAMS: 518,
+  /** The device's answer to {@link LIGHT_CMD.GET_DEVICE_INFO}. */
+  GET_DEVICE_INFO_REPLY: 2560,
+  /** `setLightEffectParamsV2PayloadData` — select a gallery effect by catalog id. WIRED (see doc). */
+  SET_LIGHT_EFFECT_PARAMS_V2: 525
 };
-var DoorbellVideoQuality = {
-  /** The doorbell picks a quality from the link. */
-  Auto: 0,
-  Low: 1,
-  Medium: 2,
-  High: 3
+var GET_DEVICE_INFO_ALL = 8191;
+var REQUEST_STATUS_TAG = 163;
+var WRITE_TAG = { IS_ON: 163, LEVEL: 164 };
+var LIGHT_PARAM = {
+  POWER: 161,
+  BRIGHTNESS: 162,
+  LENGTH: 163,
+  EFFECT_ID: 164,
+  COLOR_GRADIENT: 165,
+  CLOUD_EFFECT_ID: 166,
+  EFFECT_MODE: 167
 };
-function composite(raw) {
-  if (typeof raw !== "number" && (typeof raw !== "string" || raw.trim() === ""))
+var COMMON_TAGS = /* @__PURE__ */ new Map([
+  [161, LIGHT_PARAM.POWER],
+  [162, LIGHT_PARAM.BRIGHTNESS],
+  [163, LIGHT_PARAM.LENGTH],
+  [164, LIGHT_PARAM.EFFECT_ID],
+  [165, LIGHT_PARAM.COLOR_GRADIENT],
+  [166, LIGHT_PARAM.CLOUD_EFFECT_ID]
+]);
+var MAX_NUMERIC_LEN = 4;
+var FRAME_LAYOUTS = /* @__PURE__ */ new Map([
+  [LIGHT_CMD2.DEVICE_STATUS_REPORT, { modeTag: 167 }],
+  [LIGHT_CMD2.GET_DEVICE_INFO_REPLY, { modeTag: 168 }]
+]);
+var BOOL_PARAMS = /* @__PURE__ */ new Set([LIGHT_PARAM.POWER, LIGHT_PARAM.COLOR_GRADIENT]);
+function reportFrom(signal) {
+  if (signal.source !== "mqtt" || !signal.frame)
     return void 0;
-  const v = Number(raw);
-  return Number.isInteger(v) && v >= 0 && v <= 8 && v % 5 <= 3 ? v : void 0;
+  const { envelopeCmd, cmd, fields } = signal.frame;
+  if (envelopeCmd !== LIGHT_MQTT_REPORT_CMD)
+    return void 0;
+  const layout = FRAME_LAYOUTS.get(cmd);
+  if (!layout)
+    return void 0;
+  const params = {};
+  for (const { tag: tag2, value } of fields) {
+    const param = tag2 === layout.modeTag ? LIGHT_PARAM.EFFECT_MODE : COMMON_TAGS.get(tag2);
+    if (param === void 0 || value.length === 0 || value.length > MAX_NUMERIC_LEN)
+      continue;
+    const n = value.readUIntLE(0, value.length);
+    params[param] = BOOL_PARAMS.has(param) ? n === 1 ? "1" : "0" : String(n);
+  }
+  return Object.keys(params).length ? params : void 0;
 }
-function parseQuickResponses(voiceList) {
-  return (voiceList ?? []).map((v) => {
-    const path = typeof v.voice_path === "string" ? v.voice_path : "";
-    return {
-      voiceId: Number(v.voice_id),
-      name: typeof v.voice_name === "string" ? v.voice_name : "",
-      path,
-      custom: !path.startsWith("/system/snd/")
-    };
-  });
+var BRIGHTNESS_MIN2 = 0;
+var BRIGHTNESS_MAX2 = 100;
+function deviceInfoCommand(opts) {
+  const fields = [];
+  if (opts.isOn !== void 0)
+    fields.push({ tag: WRITE_TAG.IS_ON, value: Buffer.from([opts.isOn ? 1 : 0]) });
+  if (opts.level !== void 0) {
+    fields.push({
+      tag: WRITE_TAG.LEVEL,
+      value: Buffer.from([clamp(Math.round(opts.level), BRIGHTNESS_MIN2, BRIGHTNESS_MAX2)])
+    });
+  }
+  return { kind: "mqtt-dp", mqttCmdCode: LIGHT_MQTT_CMD, cmdCode: LIGHT_CMD2.SET_DEVICE_INFO, fields };
 }
-var DOORBELL_MEMBERS = {
+function requestStateCommand() {
+  const value = Buffer.alloc(4);
+  value.writeUInt32LE(GET_DEVICE_INFO_ALL, 0);
+  return {
+    kind: "mqtt-dp",
+    mqttCmdCode: LIGHT_MQTT_CMD,
+    cmdCode: LIGHT_CMD2.GET_DEVICE_INFO,
+    fields: [{ tag: REQUEST_STATUS_TAG, value }]
+  };
+}
+function presetCommand(lightId) {
+  return {
+    kind: "mqtt-dp-preset",
+    mqttCmdCode: LIGHT_MQTT_CMD,
+    cmdCode: LIGHT_CMD2.SET_LIGHT_EFFECT_PARAMS_V2,
+    companionCmdCode: LIGHT_CMD2.SET_DEVICE_INFO,
+    presetId: lightId
+  };
+}
+var CONFIRMED_EFFECT_MODELS = /* @__PURE__ */ new Set(["T8L02"]);
+var CONFIRMED_COLOR_MODELS = /* @__PURE__ */ new Set(["T8L02"]);
+var MAX_COLOR_SEGMENTS = 254;
+var modelKey = (model) => (model ?? "").trim().toUpperCase();
+function colorCommand(color, segmentCount) {
+  return {
+    kind: "mqtt-dp-color",
+    mqttCmdCode: LIGHT_MQTT_CMD,
+    cmdCode: LIGHT_CMD2.SET_LIGHT_EFFECT_PARAMS,
+    ...color,
+    segmentCount
+  };
+}
+var SMART_LIGHT_MEMBERS = {
   /**
-   * The HOMEBASE as the doorbell's chime — the hub plays the ring, not the wired chime box
-   * `mechanicalChimeSwitch` drives. `provenance` is "verified" on our own decrypt of the app's frame:
-   * direct-binary `[ch][value][acct]`, 1=on/0=off, the same shape as its 1703 sibling — captured, not
-   * inferred from the shared param range.
+   * On/off for the whole run of lights. `writeAs` names the setter `set` rather than `setPower`, and the
+   * `on`/`off` verbs beside it in `actions()` reach the same frame. `realtime` like every read here:
+   * there is no pollable cloud param, so the getter answers `undefined` until the first MQTT report —
+   * `refreshState` is how a caller populates it on demand. Note the READ tag (0xa1) and the WRITE tag
+   * (0xa3) differ; the two legs' tag maps are unrelated.
    */
-  chimeSwitch: {
-    param: DOORBELL_CMD.CHIME_SWITCH,
+  power: {
+    param: LIGHT_PARAM.POWER,
+    property: "lightPower",
     type: "bool",
     kind: "boolean",
     provenance: "verified",
-    description: `The HomeBase plays the doorbell's chime (1702; the app's "HomeBase as chime" switch \u2014 write wire-confirmed live on T8210).`,
-    write: (v, ctx) => setScalar(DOORBELL_CMD.CHIME_SWITCH, asBool(v) ? 1 : 0, ctx, "direct-binary")
+    realtime: true,
+    description: "Power state, DP tag 0xa1. \u2705 Source-confirmed in the app's own report parser, then live-decoded off a T8L02 status report.",
+    write: (v) => deviceInfoCommand({ isOn: asBool(v) }),
+    writeAs: "set",
+    aliases: { on: true, off: false }
   },
   /**
-   * `provenance` is "verified" on our own P2P decrypt of the write wire: direct-binary
-   * `[ch][value][acct]`, 1=on/0=off, verified live on a T8214 (ON then OFF).
+   * The CONFIGURED level, not the live output: it persists across an off, so reading a non-zero
+   * brightness says nothing about whether the lights are lit — pair it with `power`. 0 is a legal level
+   * here (unlike the camera spotlight's 1-100), and the write clamps into 0-100 rather than refusing.
+   * `realtime`, so `undefined` until the first report.
    */
-  mechanicalChimeSwitch: {
-    param: DOORBELL_CMD.MECHANICAL_CHIME_SWITCH,
-    type: "bool",
-    kind: "boolean",
+  brightness: {
+    param: LIGHT_PARAM.BRIGHTNESS,
+    property: "lightBrightness",
+    type: "number",
+    unit: "%",
+    kind: "percent",
     provenance: "verified",
-    description: `The existing wired chime box rings (1703; the app's "existing doorbell chime" switch \u2014 confirmed on T8214, and that pairing confirmed by toggling it alone on a T8210).`,
-    write: (v, ctx) => setScalar(DOORBELL_CMD.MECHANICAL_CHIME_SWITCH, asBool(v) ? 1 : 0, ctx, "direct-binary")
+    realtime: true,
+    min: BRIGHTNESS_MIN2,
+    max: BRIGHTNESS_MAX2,
+    description: "Brightness 0-100, DP tag 0xa2. Persists across off \u2014 it is the configured level, not the live output. \u2705 Source-confirmed in the app's own report parser, then echoed back the value written, live.",
+    write: (v) => deviceInfoCommand({ level: Number(v) })
   },
-  /** Same reasoning and the same capture session as {@link DOORBELL_MEMBERS.mechanicalChimeSwitch}. */
-  wdrSwitch: {
-    param: DOORBELL_CMD.WDR_SWITCH,
+  /**
+   * How many individually addressable segments the installed run has — a physical fact of the strip,
+   * which is why it is read-only. A bare `scalar` with no unit: the wire says how many, not how long.
+   * `realtime`, so `undefined` until the first report.
+   */
+  lightLength: {
+    param: LIGHT_PARAM.LENGTH,
+    type: "number",
+    kind: "scalar",
+    provenance: "verified",
+    realtime: true,
+    description: "Addressable segment count, DP tag 0xa3."
+  },
+  /**
+   * The gallery effect SELECTED — an `identifier`, not an enum, because it names an entry in a catalog
+   * that only exists at runtime, so there is no option set to publish. Distinct from `cloudEffectId`,
+   * which is the one actually running. Written by `setEffect`, whose gate is the model rather than a
+   * value. `realtime`, so `undefined` until the first report.
+   */
+  effectId: {
+    param: LIGHT_PARAM.EFFECT_ID,
+    property: "lightEffectId",
+    type: "number",
+    kind: "identifier",
+    provenance: "verified",
+    realtime: true,
+    description: "Selected gallery effect id, DP tag 0xa4."
+  },
+  /**
+   * Whether the run blends between an effect's colours rather than stepping between them. Read-only:
+   * the report parser establishes the flag, but no write frame for it has been reversed, so no setter
+   * is offered. One of the two params surfaced as `"1"`/`"0"` so the `bool` narrowing reads it.
+   * `realtime`, so `undefined` until the first report.
+   */
+  colorGradient: {
+    param: LIGHT_PARAM.COLOR_GRADIENT,
+    property: "lightColorGradient",
     type: "bool",
     kind: "boolean",
     provenance: "verified",
-    description: "Wide Dynamic Range (WDR) image switch (1704; write wire-confirmed live on T8214 \u2014 see DOORBELL_CMD.WDR_SWITCH).",
-    write: (v, ctx) => setScalar(DOORBELL_CMD.WDR_SWITCH, asBool(v) ? 1 : 0, ctx, "direct-binary")
+    realtime: true,
+    description: "Colour-gradient switch, DP tag 0xa5."
   },
   /**
-   * The READ half of a control whose write lives on `audio` — hence `writtenElsewhere`, which is what
-   * keeps the published schema's `writable` true even though this member declares no `write`. The split
-   * is deliberate: `audio` owns every volume wire, but 1708 leaks onto non-doorbell cameras, so `audio`
-   * gates its setter on this capability while the read stays here where it is doorbell-only. Distinct
-   * from `dingdongVolume` (1717), which is a different control on a different wire.
+   * The effect actually RUNNING, `0` when none is — so this, not `effectId`, is the read that answers
+   * "is an effect playing". An `identifier` for the same reason as its sibling: the catalog it indexes
+   * is fetched at runtime. Read-only; `setEffect` drives the selection. `realtime`, so `undefined`
+   * until the first report.
    */
-  ringtoneVolume: {
-    param: 1708,
+  cloudEffectId: {
+    param: LIGHT_PARAM.CLOUD_EFFECT_ID,
+    property: "lightCloudEffectId",
     type: "number",
-    unit: "%",
-    kind: "percent",
+    kind: "identifier",
     provenance: "verified",
-    writtenElsewhere: true,
-    description: "Ringtone volume (1708; confirmed on T8214, observed value 80). The WRITE is `audio`'s setRingtoneVolume \u2014 that capability owns every volume wire."
+    realtime: true,
+    description: "Running gallery effect id (0 when off), DP tag 0xa6."
+  },
+  /**
+   * Reported in every status frame, so it belongs in the schema and answers through `getProperty` — but
+   * given no typed getter: the app's own parser reads 0xa7 differently on the notify and on the
+   * get-reply, and no capture settles which value means what.
+   */
+  lightEffectMode: {
+    param: LIGHT_PARAM.EFFECT_MODE,
+    type: "number",
+    kind: "scalar",
+    provenance: "apk",
+    unexposed: true,
+    description: "Effect mode, DP tag 0xa7. Reported, but its value space is not evidenced \u2014 no typed getter, and a bare mode index rather than a named set, since the options it selects among are unknown."
   },
   /**
-   * A `1350` SET_PAYLOAD envelope (NOT direct-binary) with an explicit `mValue3` 0 — both live frames
-   * captured that value. Bounded 0-100 like every sibling volume setter: the write is fire-and-forget,
-   * so an out-of-range value would otherwise be sent as-is and look like it worked. `provenance` is
-   * "verified" on our own capture, not merely an observed param id.
+   * A request, not a state: reports are pushed on change with no periodic heartbeat, so this is how a
+   * caller populates the getters on demand. The reply arrives asynchronously and does not resolve here.
    */
-  dingdongVolume: {
-    param: DOORBELL_CMD.DINGDONG_VOLUME,
-    type: "number",
-    unit: "%",
-    kind: "percent",
-    provenance: "verified",
-    min: 0,
-    max: 100,
-    description: "Doorbell chime volume, 0-100 (1717 APP_CMD_BAT_DOORBELL_SET_DINGDONG_VOLUME; SET_PAYLOAD envelope, distinct from the direct-binary ringtoneVolume/1708 \u2014 see DOORBELL_CMD.DINGDONG_VOLUME). Write wire-confirmed live on T8214, observed values 3 and 25.",
-    write: (v, ctx) => setPayload(DOORBELL_CMD.DINGDONG_VOLUME, { dingdong_volume: Number(v) }, ctx, 0, void 0, "auto")
+  refreshState: {
+    action: () => requestStateCommand(),
+    description: "Ask the device to report its current state; the reply refreshes the reads."
   },
   /**
-   * The same `1350` SET_PAYLOAD shape and capture session as {@link DOORBELL_MEMBERS.dingdongVolume},
-   * but an INDEX rather than a level. Clamping a bad index would land on a real-but-wrong tone (garbage
-   * → 0, too-big → 9) instead of failing, and only 3 of the 10 indices (0, 7, 8) are wire-tested — so
-   * anything outside {@link DoorbellRingtone} is refused.
+   * Gated on the MODEL, not on a value, and carrying no description: it refuses off the confirmed list
+   * for a reason a generated message cannot give, and its id names an entry in a catalog that only
+   * exists at runtime, so a generated control would have no domain to offer. Neither is a property
+   * write, so it keeps its own signature.
    */
-  dingdongRingtone: {
-    param: DOORBELL_CMD.DINGDONG_RINGTONE,
-    type: "number",
-    kind: "enum",
-    enumValues: enumLabels(DoorbellRingtone),
-    provenance: "verified",
-    args: [{ name: "ringtone", kind: "enum", description: "A tone INDEX, not a volume." }],
-    description: "Doorbell chime ringtone SELECTION INDEX, not a bool (1718 APP_CMD_BAT_DOORBELL_SET_DINGDONG_RINGTONE; SET_PAYLOAD envelope \u2014 see DOORBELL_CMD.DINGDONG_RINGTONE). Write wire-confirmed live on T8214, observed values 4 and 0. Named options: see the {@link DoorbellRingtone} enum. A write outside that enum is REJECTED, not clamped into range \u2014 this is a selection, not a volume, so a bad index would otherwise land on a real-but-wrong tone.",
-    write: (v, ctx) => {
-      const tone = coerceEnumValue(DoorbellRingtone, v);
-      return tone === void 0 ? void 0 : setPayload(DOORBELL_CMD.DINGDONG_RINGTONE, { dingdong_ringtone: tone }, ctx, 0, void 0, "auto");
+  setEffect: method(({ ctx, sink }) => (lightId) => CONFIRMED_EFFECT_MODELS.has(modelKey(ctx.model)) ? sink.dispatch(presetCommand(lightId)) : Promise.reject(new Error(`light-effect write is verified only on ${[...CONFIRMED_EFFECT_MODELS].join(", ")}; model ${ctx.model ?? "unknown"} uses a per-family effect-frame encoding that isn't reverse-engineered \u2014 refusing to send the captured SKU's bytes (on/off/brightness still work)`)), "Select a light-effect gallery entry by its catalog id. Colours are an RGBCW approximation, exact on primaries."),
+  /**
+   * Plain custom colour, distinct from the gallery-effect wire. The frame addresses every reported
+   * segment, so a current positive segment count is mandatory and no family-wide length is guessed.
+   * Completion acknowledges transport publication only; the device reports no authoritative RGB.
+   */
+  setColor: method(({ ctx, sink, read }) => (color) => {
+    if (!CONFIRMED_COLOR_MODELS.has(modelKey(ctx.model))) {
+      return Promise.reject(new Error(`custom-colour write is verified only on ${[...CONFIRMED_COLOR_MODELS].join(", ")}; model ${ctx.model ?? "unknown"} has no confirmed 0x0206 frame encoding`));
     }
-  },
+    const segmentCount = read("lightLength")?.value;
+    if (typeof segmentCount !== "number" || !Number.isInteger(segmentCount) || segmentCount < 1 || segmentCount > MAX_COLOR_SEGMENTS) {
+      return Promise.reject(new Error(`custom-colour write requires a reported integer segment count in 1..${MAX_COLOR_SEGMENTS}`));
+    }
+    const channels = color && [color.red, color.green, color.blue];
+    if (!channels || channels.some((channel) => !Number.isInteger(channel) || channel < 0 || channel > 255)) {
+      return Promise.reject(new Error("custom-colour RGB channels must be integers in 0..255"));
+    }
+    return sink.dispatch(colorCommand(color, segmentCount));
+  }, "Set one plain RGB colour across all reported segments on verified T8L02 lights. Preserves configured brightness; completion acknowledges publication, not observed colour.", (ctx) => CONFIRMED_COLOR_MODELS.has(modelKey(ctx.model)))
+};
+var SMART_LIGHT = {
+  capability: "smart_light",
+  line: "life",
+  description: "eufy_life smart-lighting: T8L02 Permanent Outdoor Lights and similar (on/off/brightness/custom colour/effect).",
+  members: SMART_LIGHT_MEMBERS,
+  properties: propertiesOf(SMART_LIGHT_MEMBERS),
+  detection: { codecs: ["light"] },
   /**
-   * The live-view quality half of {@link DOORBELL_CMD.VIDEO_QUALITY}, lifted out of the composite by
-   * `decode`. `writtenElsewhere` because the setter needs the OTHER half's current value to rebuild the
-   * integer, which a member's `write` — given only the new value and the context — cannot read.
+   * Ask for a state snapshot as soon as this device's realtime channel is up, so the typed getters are
+   * populated at connect rather than only after the first write — reports are pushed on change, with
+   * no periodic heartbeat to wait for.
    */
-  videoQuality: {
-    param: DOORBELL_CMD.VIDEO_QUALITY,
-    type: "number",
-    kind: "enum",
-    enumValues: enumLabels(DoorbellVideoQuality),
-    provenance: "verified",
-    writtenElsewhere: true,
-    decode: (raw) => {
-      const v = composite(raw);
-      return v === void 0 ? void 0 : v % 5;
-    },
-    decodedKind: "enum",
-    decodedValues: Object.values(DoorbellVideoQuality),
-    description: "Live-view quality: 0 Auto / 1 Low / 2 Medium / 3 High (1705 CMD_BAT_DOORBELL_VIDEO_QUALITY). The parameter also carries the video encoding format, so this is the remainder mod 5 \u2014 see highCompressionEncoding for the other half. Ranks, not resolutions: the app's picker reads Auto/Low/Medium/High. Written by setVideoQuality, which takes the encoding format too \u2014 hardware-confirmed on a T8210."
+  realtimeInit() {
+    return [requestStateCommand()];
   },
+  decodeState(signal) {
+    const params = reportFrom(signal);
+    return params ? { params } : null;
+  },
+  emits: ["smartLightState"],
   /**
-   * The encoding half of the SAME integer, so it declares no param of its own and reaches into the
-   * owner's value — two members claiming 1705 would leave the second reading a name nothing is stored
-   * under, and a paramless member publishes no schema entry at all, which is what keeps that from
-   * happening structurally. High compression is the app's default on the captured device.
+   * Surface a status report as one `smartLightState` event carrying every field it decoded. Fails
+   * closed (returns `null`, never throws) on any shape mismatch.
    */
-  highCompressionEncoding: {
-    readsFrom: "videoQuality",
-    type: "bool",
-    kind: "boolean",
-    provenance: "verified",
-    decode: (raw) => {
-      const v = composite(raw);
-      return v === void 0 ? void 0 : v >= 5;
-    },
-    description: "Video encoding format: true = high compression, false = low compression (the +5 offset inside 1705, which also carries videoQuality). Set through setVideoQuality, which takes both halves because the wire carries both."
+  decodeEvent(signal) {
+    const params = reportFrom(signal);
+    if (!params)
+      return null;
+    const num2 = (id) => params[id] === void 0 ? void 0 : Number(params[id]);
+    const bool = (id) => params[id] === void 0 ? void 0 : params[id] === "1";
+    return {
+      event: "smartLightState",
+      payload: {
+        power: bool(LIGHT_PARAM.POWER),
+        brightness: num2(LIGHT_PARAM.BRIGHTNESS),
+        lightLength: num2(LIGHT_PARAM.LENGTH),
+        effectId: num2(LIGHT_PARAM.EFFECT_ID),
+        colorGradient: bool(LIGHT_PARAM.COLOR_GRADIENT),
+        cloudEffectId: num2(LIGHT_PARAM.CLOUD_EFFECT_ID)
+      }
+    };
   },
+  /** Only the no-argument power verbs, which carry no value for a member to hold. */
+  actions({ sink }) {
+    return {
+      on: () => sink.dispatch(deviceInfoCommand({ isOn: true })),
+      off: () => sink.dispatch(deviceInfoCommand({ isOn: false }))
+    };
+  }
+};
+
+// dist/model/capabilities/ptz.js
+var PTZ_CMD = {
+  /** Rotate. App `SetPtz…`/`INDOOR_ROTATE`: 1700 wrapper, `{cmd_type,rotate_type,zoom}`. */
+  PTZ_ROTATE: 6030,
+  /** Digital zoom. App `SetPictureZoomParser` (`COMMAND_DUAL_CAMERA_ZOOM`): 1350 SET_PAYLOAD sub-command,
+   * payload `{x,y,w,h,offset,orgZoom,dstZoom}`. Also the inbound `1351` zoom-notify `cmd`. */
+  PTZ_ZOOM: 6203,
+  /** Go to a stored preset — AND the save-preset frame (identical bytes; the camera moves vs creates
+   * by whether the slot is occupied). App `SetPresetPositionsParser` (`COMMAND_INDOOR_SPAN_CRUISE_POINT`):
+   * 1700 wrapper, `{settingstate:0, value:<presetId>}`. */
+  PTZ_PRESET_GOTO: 6032,
+  /** Capture the camera's current frame as a preset's thumbnail. App `COMMAND_APP_SPAN_PTZ_PIC`: 1700
+   * wrapper, `{value:<presetId>}`. The app sends this right before the 6032 save when creating a preset. */
+  PTZ_PRESET_PIC: 6097,
+  /** Delete a stored preset. App `DeletePresetPositionsParser` (`COMMAND_INDOOR_SPAN_CRUISE_DELETE`):
+   * 1700 wrapper, `{value:<presetId>}`. */
+  PTZ_PRESET_DELETE: 6033,
+  /** List stored presets. App `QueryPresetPositionsParser` (`COMMAND_INDOOR_SPAN_CRUISE_QUERY`): 1700
+   * request whose reply is a `1351` notify carrying `{points:[…]}`. */
+  PTZ_PRESET_QUERY: 6034,
+  /** Preview a stored preset — move to it transiently (the app uses this to show a preset before
+   * committing a default). App `COMMAND_INDOOR_SPAN_CRUISE_PREVIEW`: 1700 wrapper, `{value:<presetId>}`. */
+  PTZ_PRESET_PREVIEW: 6035,
+  /** Mark a stored preset as the default/home position. App `DefaultPresetPositionsParser`
+   * (`COMMAND_APP_SET_DEFAULT_POSITION`): 1350 SET_PAYLOAD, payload `{index:<presetId>, settingstate}`.
+   * A compound builder — the app follows it with PREVIEW (6035) + PTZ_PIC (6097) to refresh the
+   * thumbnail; the default-set itself is this frame. */
+  PTZ_SET_DEFAULT_POSITION: 6242,
+  /** How fast a rotate STEP travels. 1700 wrapper, `{value:1|3|5}`. Observed live: the app's
+   * Slow/Mid/Fast control on an indoor pan-tilt writes 1 / 3 / 5 and nothing else moves. The id sits
+   * inside the smart lock's `601x` block, so the shared param dictionary labels it `lockParam` — an id
+   * reused across product lines, and the camera's meaning is the observed one. */
+  PTZ_ROTATE_SPEED: 6015
+};
+var PTZ_FRAME = {
+  /** SoloCam JSON status wrapper — `{cmd, payload}`. */
+  NOTIFY_PAYLOAD: 1351,
+  /** Indoor-PT binary position stream wrapper. */
+  CONTROL_PAYLOAD: 1700
+};
+var PtzDirection = {
+  /** Pan left (one step). */
+  left: "left",
+  /** Pan right (one step). */
+  right: "right",
+  /** Tilt up (one step). */
+  up: "up",
+  /** Tilt down (one step). */
+  down: "down"
+};
+var PTZ_ROTATE = { left: 1, right: 2, up: 3, down: 4 };
+var ZOOM_EVIDENCE_PARAMS = [6204, 6205];
+var ZOOM_MODEL_HINT = /^T8170\b|^T8425\b|S340/i;
+function hasZoomEvidence(ctx) {
+  return ZOOM_EVIDENCE_PARAMS.some((p) => ctx.paramIds.has(p)) || !!ctx.model && ZOOM_MODEL_HINT.test(ctx.model);
+}
+var PRESET_EVIDENCE_PARAMS = [1029, 6090, 6091, 6092, 6210];
+var FIXED_LENS_MODELS = /* @__PURE__ */ new Set(["T8134"]);
+function rotateCommand(direction, ctx, zoom = 1) {
+  return setJson(PTZ_CMD.PTZ_ROTATE, { cmd_type: 1, rotate_type: PTZ_ROTATE[direction], zoom }, ctx);
+}
+function zoomCommand(dstZoom, ctx, region) {
+  const r = region ?? {};
+  const offset = r.offset ?? false;
+  return setPayload(PTZ_CMD.PTZ_ZOOM, {
+    x: offset ? r.x ?? 0 : 0,
+    y: offset ? r.y ?? 0 : 0,
+    w: offset ? r.w ?? 0 : 0,
+    h: offset ? r.h ?? 0 : 0,
+    offset,
+    orgZoom: r.orgZoom ?? 0,
+    dstZoom
+  }, ctx, 0, void 0, "auto");
+}
+function gotoPresetCommand(id, ctx) {
+  return setJson(PTZ_CMD.PTZ_PRESET_GOTO, { settingstate: 0, value: id }, ctx);
+}
+function deletePresetCommand(id, ctx) {
+  return setJson(PTZ_CMD.PTZ_PRESET_DELETE, { value: id }, ctx);
+}
+function previewPresetCommand(id, ctx) {
+  return setJson(PTZ_CMD.PTZ_PRESET_PREVIEW, { value: id }, ctx);
+}
+function presetPicCommand(id, ctx) {
+  return setJson(PTZ_CMD.PTZ_PRESET_PIC, { value: id }, ctx);
+}
+function savePresetCommand(id, ctx) {
+  return [presetPicCommand(id, ctx), setJson(PTZ_CMD.PTZ_PRESET_GOTO, { settingstate: 0, value: id }, ctx)];
+}
+function setDefaultPositionCommand(presetId, ctx) {
+  return setPayload(PTZ_CMD.PTZ_SET_DEFAULT_POSITION, { index: presetId, settingstate: 0 }, ctx);
+}
+function parsePresetPoints(reply) {
+  const points = reply?.points;
+  if (!Array.isArray(points))
+    return [];
+  const out = [];
+  for (const p of points) {
+    if (typeof p !== "object" || p === null)
+      continue;
+    const rec = p;
+    const rawId = rec.index ?? rec.id ?? rec.value;
+    const id = typeof rawId === "number" ? rawId : Number(rawId);
+    if (!Number.isFinite(id))
+      continue;
+    out.push({ id, raw: rec });
+  }
+  return out;
+}
+function parsePresetImage(reply) {
+  const data = reply?.data;
+  if (typeof data !== "string" || data.length === 0)
+    return void 0;
+  const rawIndex = reply?.index;
+  const index = typeof rawIndex === "number" ? rawIndex : Number.isFinite(Number(rawIndex)) ? Number(rawIndex) : -1;
+  return { index, data };
+}
+function isDirection(v) {
+  return v === "left" || v === "right" || v === "up" || v === "down";
+}
+var PTZ_MEMBERS = {
   /**
-   * Set both halves of {@link DOORBELL_CMD.VIDEO_QUALITY} at once, because the wire has no way to set
-   * one alone: every frame carries the whole integer.
+   * How fast a rotate STEP travels, on the app's own three-position control: `1` slow, `3` mid, `5`
+   * fast. A `scalar` rather than an enum — the endpoints and the midpoint are observed, so 2 and 4 are
+   * a prediction of the scale's shape and the wire is not known to reject them.
    *
-   * Taking both is not a convenience choice. An earlier shape took one and preserved the other by
-   * reading it back, and it failed on hardware: the state reader is the snapshot the device was bound
-   * with, so a second write in the same session composed against the value from before the first and
-   * silently reverted it. Requiring both puts that decision where it can be made correctly — a caller
-   * reads {@link DOORBELL_MEMBERS.videoQuality} and {@link DOORBELL_MEMBERS.highCompressionEncoding}
-   * and passes what it wants, instead of the SDK guessing from a stale copy.
-   */
-  setVideoQuality: method(({ ctx, sink }) => async (quality, highCompression) => {
-    const q = coerceEnumValue(DoorbellVideoQuality, quality);
-    if (q === void 0) {
-      throw new Error(`videoQuality: ${String(quality)} is not one of ${enumLabels(DoorbellVideoQuality)}`);
-    }
-    await sink.dispatch(setScalar(DOORBELL_CMD.VIDEO_QUALITY, q + (asBool(highCompression) ? 5 : 0), ctx, "direct-binary"));
-  }, "Set the live-view quality and the video encoding format, which share one wire."),
-  /**
-   * A config blob the device reports WHOLE, so it is typed `string` and handed back unparsed — three
-   * settings live inside it (motion notifications, ring notifications, notification style) and the SDK
-   * lifts none of them out, because no `decode` is evidenced for the shape. Read-only: no write frame
-   * has been captured for it, and a config JSON is exactly where a guessed write does the most damage.
+   * Not the same thing as `rotate`'s `zoom` argument, which scales one step's SIZE rather than its
+   * speed.
+   *
+   * The parameter is **absent until first written**: a camera whose speed has never been set reports
+   * no `6015` at all, so the getter is installed only once the value exists — an absent reading is "not
+   * configured", never "unsupported".
    */
-  notificationMode: {
-    param: 1710,
-    type: "string",
-    kind: "text",
+  rotationSpeed: {
+    param: PTZ_CMD.PTZ_ROTATE_SPEED,
+    type: "number",
+    kind: "scalar",
     provenance: "verified",
-    description: "Notification config JSON {notification_motion_onoff,notification_ring_onoff,notification_style} (1710; confirmed on T8214)."
+    description: "Pan/tilt rotate speed: 1 = slow, 3 = mid, 5 = fast (PTZ_ROTATE_SPEED 6015). \u2705 Write confirmed live on a T8410 (mains, standalone): the app's Slow/Mid/Fast control identified 1/3/5, then 1 and 5 were sent consecutively through this member and read back on the cloud param. 2 and 4 are the scale's shape, not observed values. Absent until first written.",
+    write: (v, ctx) => {
+      const n = Number(v);
+      if (!Number.isInteger(n) || n < 1 || n > 5)
+        return void 0;
+      return setJson(PTZ_CMD.PTZ_ROTATE_SPEED, { value: n }, ctx);
+    }
   },
+  /** Rotate a step in a direction; `zoom` scales the step size (1.0 = the default step). */
+  rotate: method(({ ctx, sink }) => (direction, zoom = 1) => sink.dispatch(rotateCommand(direction, ctx, zoom)), "Rotate a step in a direction."),
+  /** Rotate one step left. */
+  left: method(({ ctx, sink }) => () => sink.dispatch(rotateCommand("left", ctx)), "Rotate left."),
+  /** Rotate one step right. */
+  right: method(({ ctx, sink }) => () => sink.dispatch(rotateCommand("right", ctx)), "Rotate right."),
+  /** Rotate one step up. */
+  up: method(({ ctx, sink }) => () => sink.dispatch(rotateCommand("up", ctx)), "Rotate up."),
+  /** Rotate one step down. */
+  down: method(({ ctx, sink }) => () => sink.dispatch(rotateCommand("down", ctx)), "Rotate down."),
   /**
-   * Play one of the doorbell's quick responses at the visitor. `voiceId` comes from
-   * {@link DOORBELL_MEMBERS.quickResponses}. The doorbell only plays while it has an active media
-   * session, so by default this briefly engages a live stream, sends, then tears it down.
-   * `{ engage: false }` leaves an already-open stream alone.
-   *
-   * If engagement was requested but no stream comes up this THROWS, rather than firing 1706 into the
-   * void and reporting success — the doorbell would play nothing. The wire is `QUICK_RESPONSE` 1706,
-   * the SAME direct-binary command as camera on/off, carrying the voice id as its value.
+   * Zoom rides a SECOND (telephoto) lens, so it is offered only where the device shows zoom evidence —
+   * otherwise `dev.ptz()?.zoom` would be a silent no-op on a single-lens pan-tilt camera.
    */
-  playQuickResponse: method(({ ctx, sink, media }) => async (voiceId, opts = {}) => {
-    const engage = opts.engage ?? true;
-    let stream;
-    if (engage) {
-      if (!media) {
-        throw new Error("playQuickResponse needs a live media session to engage, but the device is not bound to a live client \u2014 open a stream and call with { engage: false }");
-      }
-      try {
-        stream = await media.live();
-      } catch (e) {
-        throw new Error(`playQuickResponse could not engage a live stream (the doorbell only plays while live): ${e instanceof Error ? e.message : String(e)}`);
-      }
-      await sleep(2500);
-    }
-    try {
-      await sink.dispatch(setScalar(DOORBELL_CMD.QUICK_RESPONSE, voiceId, ctx, "direct-binary"));
-      if (stream)
-        await sleep(1500);
-    } finally {
-      try {
-        stream?.stop();
-      } catch {
-      }
-    }
-  }, "Play a quick response at the visitor."),
+  zoom: method(({ ctx, sink }) => (dstZoom, region) => sink.dispatch(zoomCommand(dstZoom, ctx, region)), "Zoom the telephoto lens.", hasZoomEvidence),
   /**
-   * Fetch the doorbell's quick-response list — a P2P request/reply query that returns data, so it
-   * exists only on a device bound to a media provider that offers one.
+   * The preset sub-API. Write verbs dispatch through the sink; the READ verbs (`list`/`image`) are P2P
+   * request/reply and exist only when bound to a media provider — the transport stays
+   * capability-agnostic (it runs a generic control-payload query and resolves the correlated notify)
+   * while this module owns the sub-command id and the reply parsing.
    *
-   * The transport stays doorbell-agnostic: it runs a GENERIC SET_PAYLOAD query (sub-cmd → reply
-   * payload); this capability owns the sub-command id (6237) and the reply parsing.
+   * `answers` because calling it performs nothing: it hands back the namespace the verbs live on. Offering
+   * it as a control would produce one that returns an object and does nothing.
    */
-  quickResponses: provided("media", (m) => m.p2pQuery && (async (opts) => {
-    const payload = await m.p2pQuery(DOORBELL_CMD.GET_QUICK_RESPONSE_LIST, opts);
-    const voiceList = Array.isArray(payload?.voice_list) ? payload.voice_list : [];
-    return parseQuickResponses(voiceList);
-  }), "Fetch the doorbell's quick-response list.")
+  preset: {
+    ...method(({ ctx, sink, media }) => () => {
+      const p = {
+        goto: (id) => sink.dispatch(gotoPresetCommand(id, ctx)),
+        preview: (id) => sink.dispatch(previewPresetCommand(id, ctx)),
+        save: async (id) => {
+          for (const cmd of savePresetCommand(id, ctx))
+            await sink.dispatch(cmd);
+        },
+        setDefault: (id) => sink.dispatch(setDefaultPositionCommand(id, ctx)),
+        delete: (id) => sink.dispatch(deletePresetCommand(id, ctx))
+      };
+      if (media?.p2pControlQuery) {
+        p.list = async (opts) => parsePresetPoints(await media.p2pControlQuery(PTZ_CMD.PTZ_PRESET_QUERY, { value: 0 }, opts));
+        p.image = async (id, opts) => parsePresetImage(await media.p2pControlQuery(PTZ_CMD.PTZ_PRESET_PIC, { value: id }, opts));
+      }
+      return p;
+    }, "The preset sub-API: goto/preview/save/setDefault/delete, plus list/image when bound."),
+    answers: true
+  }
 };
-var DOORBELL = {
-  capability: "doorbell",
-  description: "Doorbell chime / ringtone configuration (ring press is an event, not a param).",
-  members: DOORBELL_MEMBERS,
-  properties: propertiesOf(DOORBELL_MEMBERS),
+var PTZ = {
+  capability: "ptz",
+  description: "Pan/tilt (PTZ) control. Movement is command-driven and rotate speed is stored; position arrives as a live event.",
   /**
-   * Doorbells self-report no param of their own (the 1702-1719 settings also arrive from eufyCams), and
-   * the cloud record names no product, so detection keys off the app's own tables:
-   * {@link DOORBELL_MODELS} and {@link DOORBELL_TYPES}.
+   * The intent route for the movement verbs — kept alongside the member table because these are
+   * ARGUMENT-TAKING verbs, not property writes: `rotate` takes a direction, the preset verbs take an id.
+   * A member's `write` moves one named value, so it cannot name them, and dropping this would silently
+   * remove `setProperty("gotoPreset", 2)` from the low-level path. Each case delegates to the same
+   * builder the fluent method uses, so the two cannot drift. Zoom carries the same dual-lens gate the
+   * fluent `zoom` member does.
    */
+  buildCommand(action, value, ctx) {
+    if (action === "rotate" && isDirection(value))
+      return rotateCommand(value, ctx);
+    if (typeof value === "number") {
+      if (action === "zoom")
+        return hasZoomEvidence(ctx) ? zoomCommand(value, ctx) : void 0;
+      if (action === "gotoPreset")
+        return gotoPresetCommand(value, ctx);
+      if (action === "previewPreset")
+        return previewPresetCommand(value, ctx);
+      if (action === "deletePreset")
+        return deletePresetCommand(value, ctx);
+      if (action === "setDefaultPosition")
+        return setDefaultPositionCommand(value, ctx);
+    }
+    return void 0;
+  },
+  members: PTZ_MEMBERS,
+  properties: propertiesOf(PTZ_MEMBERS),
+  // SoloCam proves PT via reported preset params (6090/6091/6092/6210) and a rotate command surface
+  // (1029), except on a FIXED_LENS_MODELS model; Indoor-PT (deviceType 31/35/111 + C220 range
+  // 10008-10011) reports NO PT param, so the vendor deviceType is the only honest signal; explicit
+  // PT/S340/S350 model names also prove it.
+  // OUTDOOR_PT_CAMERA (48, e.g. SoloCam S340 / T8170) is pan-tilt by definition but a live unit can
+  // report none of the preset params — trust the deviceType. The rotating SoloCam solar variant
+  // T8124R shares deviceType 62 with the FIXED T8124 base, so its model code is the only honest
+  // signal that separates the two. Match ONLY confirmed rotating model codes here — do NOT widen to
+  // a `T81\d\dR` wildcard: the "R = rotating" reading is unverified for other models, and an
+  // over-broad hint would false-positive a future non-PT model, the same class of bug as a mislabel.
   detection: {
-    detect: (rec) => DOORBELL_MODELS.has(rec.model ?? ""),
-    deviceTypes: DOORBELL_TYPES,
-    modelHints: [/doorbell/i]
+    detect: (record) => !FIXED_LENS_MODELS.has(record.model ?? "") && PRESET_EVIDENCE_PARAMS.some((p) => Object.hasOwn(record.params ?? {}, p)),
+    deviceTypes: [
+      DeviceType.OUTDOOR_PT_CAMERA,
+      DeviceType.INDOOR_PT_CAMERA,
+      DeviceType.INDOOR_PT_CAMERA_1080,
+      DeviceType.CAMERA_4G_S330,
+      DeviceType.INDOOR_PT_CAMERA_C220,
+      DeviceType.INDOOR_PT_CAMERA_C210,
+      DeviceType.INDOOR_PT_CAMERA_C220_V2,
+      DeviceType.INDOOR_PT_CAMERA_C220_V3,
+      // T8425 has its own dedicated deviceType (47), distinct from OUTDOOR_PT_CAMERA (48) — easy to
+      // miss since the name doesn't say "PT". Was omitted here despite T8425 being the hardware that
+      // grounded the rotate_type wire mapping (see PTZ_ROTATE's doc comment) — confirmed live it has
+      // no PTZ capability without this, on a real owned unit.
+      DeviceType.FLOODLIGHT_CAMERA_8425
+    ],
+    modelHints: [/pan.?tilt|\bpt\b|S3[45]0|indoor.?pt/i, /\bT8E00\b/i]
   },
+  emits: ["ptzNotify"],
   /**
-   * Inbound FCM doorbell events (`DoorbellPushEvent`): ring press and the package trio.
-   *
-   * Pet (3106) is NOT here. The id is declared identically in the doorbell, indoor and HB3-paired
-   * vocabularies, so it belongs to the camera-wide `motion` module that every camera binds; claiming
-   * it here as well would make it a contested id that a doorbell — which has both capabilities —
-   * matches twice, emitting one push as two events.
+   * Surface PTZ status the camera streams back while it moves. Two wire shapes (both prove pan-tilt):
+   *  - SoloCam: `CMD_NOTIFY_PAYLOAD` (1351) JSON `{cmd, payload}` with cmd 6030 (rotate) / 6203 (zoom).
+   *  - Indoor PT: `CMD_DOORBELL_SET_PAYLOAD` (1700) binary 24-byte records of float `(pan, tilt)`
+   *    (non-zero while moving; a fixed camera sends zeros).
+   * `stationSn` is added by the barrel, so it is NOT included in the returned payload.
    */
-  events: [
-    { source: "push", match: DoorbellPushEvent.PRESS_DOORBELL, emit: "doorbellPress" },
-    { source: "push", match: DoorbellPushEvent.PACKAGE_DELIVERED, emit: "packageDelivered" },
-    { source: "push", match: DoorbellPushEvent.PACKAGE_TAKEN, emit: "packageTaken" },
-    { source: "push", match: DoorbellPushEvent.PACKAGE_STRANDED, emit: "packageStranded" }
-  ]
+  decodeEvent(signal) {
+    if (signal.source !== "p2p-frame")
+      return null;
+    const f = signal;
+    if (f.commandId === PTZ_FRAME.NOTIFY_PAYLOAD && f.json && typeof f.json.cmd === "number" && (f.json.cmd === PTZ_CMD.PTZ_ROTATE || f.json.cmd === PTZ_CMD.PTZ_ZOOM)) {
+      return {
+        event: "ptzNotify",
+        payload: { kind: f.json.cmd === PTZ_CMD.PTZ_ZOOM ? "zoom" : "rotate", payload: f.json.payload }
+      };
+    }
+    if (f.commandId === PTZ_FRAME.CONTROL_PAYLOAD && f.data && f.data.length >= 28) {
+      const coords = [];
+      for (let o = 4; o + 24 <= f.data.length; o += 24) {
+        const pan = f.data.readFloatLE(o + 12);
+        const tilt = f.data.readFloatLE(o + 16);
+        if (Number.isFinite(pan) && Number.isFinite(tilt) && Math.abs(pan) <= 2 && Math.abs(tilt) <= 2) {
+          coords.push([pan, tilt]);
+        }
+      }
+      if (coords.some(([p, t]) => p !== 0 || t !== 0)) {
+        return { event: "ptzNotify", payload: { kind: "position", coords } };
+      }
+    }
+    return null;
+  }
 };
 
 // dist/model/capabilities/leak.js
@@ -16201,6 +16204,9 @@ function traceLiveStart(logger, trace, source) {
   logger.debug(LIVE_TRACE_MESSAGE, source === void 0 ? trace : { ...trace, source });
 }
 
+// dist/transport/p2p/level2-settle.js
+var LEVEL2_SETTLE_MS = 8e3;
+
 // dist/transport/p2p/p2p-session.js
 var LOCAL_LOOKUP_PORT = 32108;
 var HEARTBEAT_MS = 5e3;
@@ -17777,7 +17783,7 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
     });
     const body = Buffer.concat([
       buildCommandHeader(this.seqNumber, CMD_SET_PAYLOAD),
-      buildStringCommandPayload(value, channel, this.level1Key, 1)
+      this.databasePayload(value, channel)
     ]);
     this.seqNumber = this.seqNumber + 1 & 65535;
     this.logger.debug(`[p2p] ${this.cfg.stationSn} requestImage ${filePath}`);
@@ -17815,12 +17821,20 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
     });
     const body = Buffer.concat([
       buildCommandHeader(this.seqNumber, CMD_SET_PAYLOAD),
-      buildStringCommandPayload(value, channel, this.level1Key, 1)
+      this.databasePayload(value, channel)
     ]);
     this.seqNumber = this.seqNumber + 1 & 65535;
     this.logger.debug(`[p2p] ${this.cfg.stationSn} queryDatabase ${table} ch=${channel}`);
     this.send(this.connectAddress, RequestMessageType.DATA, body);
   }
+  /**
+   * The `CMD_SET_PAYLOAD` payload of a database read or stored-image request: the JSON level-1 encrypted, or
+   * in the clear with header bytes from {@link nextClearCommandBytes} on a session that {@link sendsInTheClear}
+   * and holds no level-2 key.
+   */
+  databasePayload(value, channel) {
+    return !this.level2Key && this.sendsInTheClear() ? buildRawCommandPayload(Buffer.from(value, "utf-8"), channel, 0, this.nextClearCommandBytes(), 0) : buildStringCommandPayload(value, channel, this.level1Key, 1);
+  }
   /**
    * Standard "give me the whole table" query params the eufy app uses for a direct
    * `CMD_DATABASE` read (inner `cmd 10000`). `count` bounds the row count.
@@ -17893,10 +17907,15 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
    *
    * One read at a time per session: while one is accumulating, every {@link queryDatabase} on the
    * session throws, so a second reply cannot land in this buffer.
+   *
+   * The query's framing follows the cipher the gateway-info reply names, so on a session still negotiating
+   * its level-2 key the query waits for that to settle, up to {@link LEVEL2_SETTLE_MS} from connect.
    */
   async readDatabase(table, opts = {}) {
     if (opts.signal?.aborted)
       throw new Error("readDatabase: aborted");
+    if (this.level2Pending)
+      await abortable(this.awaitLevel2Key(LEVEL2_SETTLE_MS, "session"), opts.signal);
     this.queryDatabase(table, {
       accountId: opts.accountId,
       innerCmd: opts.innerCmd,
@@ -18199,6 +18218,8 @@ var P2PSession = class _P2PSession extends EventEmitter2 {
         } catch {
         }
       }
+    } else if (header.commandId === CMD_DATABASE && this.sendsInTheClear()) {
+      this.emit("dbChunk", { stationSn: this.cfg.stationSn, text: payload.toString("latin1") });
     }
     const frame = {
       ...header,
@@ -20550,14 +20571,20 @@ var SharedLiveSource = class {
   }
   /**
    * Handle a consumer leaving. When the last one detaches (1→0), release the station-session user via
-   * {@link SharedLiveSourceOptions.onIdle} (its own longer idle timer then arms) and arm the stream's
-   * linger teardown.
+   * {@link SharedLiveSourceOptions.onIdle} (its own longer idle timer then arms) and, while a stream is
+   * still running, arm its linger teardown.
+   *
+   * A source that ended its own stream ends its consumers before tearing down, and a Readable consumer
+   * detaches only once it has reached EOF — after that teardown. The source is then already `stopped`,
+   * with its session claim released, and stays so: lingering would make the owner hand it out again
+   * instead of building a source that holds a session.
    */
   onDetach(consumer) {
     this.consumers.delete(consumer);
     if (this.consumers.size === 0 && !this.disposed) {
       this.opts.onIdle?.();
-      this.arm();
+      if (this.stream)
+        this.arm();
     }
   }
   /** Refcount hit zero — arm the linger teardown. A new attach in the window cancels it. */
@@ -22030,7 +22057,6 @@ function stationChannels(devices) {
 // dist/transport/p2p/command-router.js
 var DIRECT_CMD_SENDS = 5;
 var LEVEL2_GRACE_MS = 25e3;
-var LEVEL2_SETTLE_MS = 8e3;
 var KEEP_LEVEL1_SESSION_MODELS = /* @__PURE__ */ new Set(["T8423"]);
 var P2P_STATION_WAITS = {
   connect: CONNECT_TIMEOUT_MS,
@@ -30089,7 +30115,8 @@ var EufyMega = class extends EventEmitter14 {
   }
   /**
    * The RTC media provider for a station on a media-track route, or a camera attached to a T9000 whose
-   * `device_channel` resolves back to it on the station; `undefined` otherwise, unless an NVR camera has its own dedicated media call.
+   * `device_channel` resolves back to it on the station; `undefined` otherwise. A camera attached to a T8N00 gets the
+   * NVR's dedicated media call when {@link isNvrMediaCamera} admits it.
    */
   rtcMediaFor(sn) {
     const route = this.rtcRouteFor(sn);
@@ -30204,6 +30231,8 @@ var EufyMega = class extends EventEmitter14 {
    * first announces it and the others stay silent. Its timing says only when a caller happened to read; the
    * value is the news. It applies what the device volunteered over realtime on top of the cloud half, which
    * the registry keeps apart, so it can neither revert nor announce a revert of a report already landed.
+   * Nothing awaits that refresh, so its failure is reported like the other background paths' — a dead
+   * token as `sessionExpired`, anything else as `error` — and the read keeps its last-known value.
    *
    * The `Device` returned is held WEAKLY: it is what the inbound paths announce against, so a caller that
    * wants property changes for a serial keeps its own reference. Dropping it stops the announcements, not
@@ -30230,8 +30259,12 @@ var EufyMega = class extends EventEmitter14 {
       dev.setFreshnessPolicy({
         staleAfterMs: this.opts.cacheTtlMs ?? 15e3,
         refresh: async () => {
-          const fresh = await this.registry.record(sn);
-          this.applyAndAnnounce(dev, { ...fresh.params, ...fresh.dpParams });
+          try {
+            const fresh = await this.registry.record(sn);
+            this.applyAndAnnounce(dev, { ...fresh.params, ...fresh.dpParams });
+          } catch (e) {
+            this.reportError(e);
+          }
         }
       });
     }