camstack 1.2.145 → 1.2.147

package/dist/{launcher-LICFWRGL.js → launcher-26BZ4JHD.js}

@@ -23633,9 +23633,9 @@ var require_zod = __commonJS({
   }
 });
 
-// ../system/dist/dist-B84YlKAH.js
-var require_dist_B84YlKAH = __commonJS({
-  "../system/dist/dist-B84YlKAH.js"(exports) {
+// ../system/dist/dist-CEIkHEdy.js
+var require_dist_CEIkHEdy = __commonJS({
+  "../system/dist/dist-CEIkHEdy.js"(exports) {
     "use strict";
     var zod = require_zod();
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
@@ -23776,6 +23776,7 @@ var require_dist_B84YlKAH = __commonJS({
       EventCategory2["LocalNetworkChanged"] = "network.local.changed";
       EventCategory2["MeshNetworkChanged"] = "network.mesh.changed";
       EventCategory2["BackupCompleted"] = "backup.completed";
+      EventCategory2["BackupRunCompleted"] = "backup.run-completed";
       EventCategory2["BackupRestored"] = "backup.restored";
       EventCategory2["NotificationDispatched"] = "notification.dispatched";
       EventCategory2["NotificationFailed"] = "notification.failed";
@@ -25889,7 +25890,23 @@ var require_dist_B84YlKAH = __commonJS({
         "zerolatency",
         "film",
         "animation"
-      ]).optional()
+      ]).optional(),
+      /**
+      * ONE slice per access unit.
+      *
+      * `-tune zerolatency` turns on x264's sliced threads, and a frame then leaves
+      * the encoder as five NAL slices that share one RTP timestamp and carry one
+      * marker bit. A libwebrtc depacketiser sees five frame-starts and one
+      * frame-end per frame: the first pictures render and the video then freezes
+      * for good while the audio, on its own plane, plays on. Measured on this hub
+      * 2026-09-13 against the Echo, and reduced to one slice by this flag alone.
+      *
+      * A NAMED field and not a raw flag, because {@link EgressEncodeSchema} omits
+      * `outputArgs` on purpose: an opaque array is part of the sharing key, so two
+      * consumers meaning the same thing spelled differently would stop sharing one
+      * child. Absent means "whatever the encoder does" — today's behaviour.
+      */
+      singleSlicePerFrame: zod.z.boolean().optional()
     });
     var AudioEncodeSchema = zod.z.union([zod.z.literal("passthrough"), zod.z.object({
       codec: zod.z.enum([
@@ -25937,7 +25954,7 @@ var require_dist_B84YlKAH = __commonJS({
       audio: "passthrough"
     };
     ({ ...BASE_LIVE_EGRESS_PROFILE }, { ...BASE_LIVE_EGRESS_PROFILE.video });
-    ({ ...BASE_LIVE_EGRESS_PROFILE });
+    ({ ...BASE_LIVE_EGRESS_PROFILE }, { ...BASE_LIVE_EGRESS_PROFILE.video });
     var wiringProbeKindSchema = zod.z.enum([
       "singleton",
       "device",
@@ -29430,6 +29447,39 @@ var require_dist_B84YlKAH = __commonJS({
       exposesDeviceSettings: true,
       methods: {}
     };
+    var StreamSignalSchema = zod.z.object({
+      /** Stable id chosen by the provider, e.g. `'motion'`, `'person'`, `'tamper'`. */
+      code: zod.z.string().min(1),
+      /** What an operator reads in the picker. The provider's own wording. */
+      label: zod.z.string().min(1),
+      /**
+      * Whether the provider recommends this signal ON when a camera is first set
+      * up. A provider knows which of its signals are cheap and reliable; an
+      * operator should not have to discover that by trial. Reolink recommends
+      * both of its own.
+      */
+      recommended: zod.z.boolean()
+    });
+    var StreamSignalsStatusSchema = zod.z.object({
+      signals: zod.z.array(StreamSignalSchema),
+      lastFetchedAt: zod.z.number()
+    });
+    var streamSignalsCapability = {
+      name: "stream-signals",
+      scope: "device",
+      deviceNative: true,
+      mode: "singleton",
+      deviceTypes: Object.values(DeviceType),
+      runtimeState: StreamSignalsStatusSchema,
+      methods: {
+        /**
+        * What this device can emit. Empty is a valid and common answer — most
+        * cameras have nothing to offer here, and an empty list is what makes the
+        * broker's picker show nothing rather than a false choice.
+        */
+        listSignals: method(zod.z.void(), zod.z.array(StreamSignalSchema).readonly())
+      }
+    };
     var StreamFormatSchema = zod.z.enum([
       "webrtc",
       "hls",
@@ -29782,6 +29832,46 @@ var require_dist_B84YlKAH = __commonJS({
       mode: "singleton",
       exposesDeviceSettings: true,
       methods: {
+        /**
+        * A device reporting that one of ITS OWN signals just fired.
+        *
+        * The provider calls this; nothing polls. The broker then decides whether
+        * to wake the source, and the decision has two terms that must BOTH hold:
+        *
+        *  - the signal is ENABLED for this camera (the operator's per-camera
+        *    choice — a camera may declare a signal the operator does not want
+        *    waking anything), and
+        *  - a consumer is actually attached and waiting on the prestream. Waking
+        *    a camera nobody is watching is the one thing a battery camera must
+        *    never do, and a signal arriving with no consumer is exactly that.
+        *
+        * Reported, never inferred: a signal that fires while the stream is
+        * already up refreshes the hold instead of starting a second one, which is
+        * what makes continuous motion keep a camera awake without stacking
+        * timers.
+        *
+        * `code` is the provider's own, from `streamSignals.listSignals`. An
+        * unknown code is REFUSED rather than treated as a wildcard wake — a
+        * provider and an operator disagreeing about a name must not become a
+        * camera that wakes for everything.
+        */
+        reportStreamSignal: method(zod.z.object({
+          deviceId: zod.z.number().int().nonnegative(),
+          /** The provider's signal code. */
+          code: zod.z.string().min(1),
+          /** Ms epoch. Absent ⇒ now. */
+          at: zod.z.number().optional()
+        }), zod.z.object({
+          /** Whether the broker acted on it, and if not, why. */
+          accepted: zod.z.boolean(),
+          reason: zod.z.enum([
+            "woke",
+            "hold-extended",
+            "not-enabled",
+            "no-consumer",
+            "unknown-code"
+          ])
+        }), { kind: "mutation" }),
         publishCameraStream: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           camStreamId: zod.z.string().min(1),
@@ -30259,6 +30349,16 @@ var require_dist_B84YlKAH = __commonJS({
       acceptCodecs: zod.z.array(StreamCodecSchema).readonly().optional(),
       /** Minimum vertical resolution. Streams shorter than this are dropped. */
       minHeight: zod.z.number().int().positive().optional(),
+      /**
+      * Maximum vertical resolution. Streams TALLER than this are dropped.
+      *
+      * A consumer can have a ceiling as real as its floor: Alexa documents
+      * 480p to 1080p, and a 4K stream is as unusable to an Echo as a 360p one.
+      * Without this the ceiling had to be re-implemented by every caller — and
+      * one caller implementing it privately is how a second scoring authority
+      * gets born.
+      */
+      maxHeight: zod.z.number().int().positive().optional(),
       /** Minimum horizontal resolution. */
       minWidth: zod.z.number().int().positive().optional(),
       /**
@@ -30275,7 +30375,22 @@ var require_dist_B84YlKAH = __commonJS({
       * transcoded" guard: if the device is already serving the consumer's
       * codec end-to-end, there's nothing to optimise.
       */
-      requireSiblingCodec: zod.z.array(StreamCodecSchema).readonly().optional()
+      requireSiblingCodec: zod.z.array(StreamCodecSchema).readonly().optional(),
+      /**
+      * Whether a stream the consumer CANNOT decode may still be picked, on the
+      * understanding that it will be transcoded.
+      *
+      * Default `false` — today's behaviour, and the right one for a bypass
+      * question ("is there a stream I can forward untouched?"). Set `true` to
+      * ask the larger question: "what is the best stream for me, transcoding if
+      * I must?" A stream that satisfies `acceptCodecs` always outranks one that
+      * does not, so a passthrough is never lost to a transcode; the answer says
+      * which it is in {@link PickedCamStreamSchema.transcodes}.
+      *
+      * This is what lets one picker serve both the bypass and the full source
+      * choice, instead of a consumer scoring privately when the bypass misses.
+      */
+      allowTranscode: zod.z.boolean().optional()
     }).readonly();
     var PickStreamPreferencesSchema = zod.z.object({
       /**
@@ -30289,12 +30404,32 @@ var require_dist_B84YlKAH = __commonJS({
       * picks the tallest stream; `'lowest'` picks the shortest (used by
       * memory-constrained consumers / Apple Home guest sessions).
       */
-      resolutionPreference: zod.z.enum(["highest", "lowest"]).optional()
+      resolutionPreference: zod.z.enum(["highest", "lowest"]).optional(),
+      /**
+      * The height the consumer actually wants to DELIVER.
+      *
+      * Not a constraint — an ordering. With it set, the SMALLEST stream at or
+      * above the target wins, and only if nothing reaches it does the tallest
+      * take over. Pulling 1296 lines to draw 720 on a 1280x800 Echo panel costs
+      * a decode and buys nothing, and `resolutionPreference: 'highest'` cannot
+      * express that: it says "as big as possible", which is a different wish.
+      *
+      * Ignored when absent, so every existing caller keeps its ordering.
+      */
+      targetHeight: zod.z.number().int().positive().optional()
     }).readonly();
     var PickedCamStreamSchema = zod.z.object({
       camStreamId: zod.z.string(),
       codec: zod.z.string().optional(),
       resolution: CamStreamResolutionSchema.optional(),
+      /**
+      * Whether serving this stream requires a decode + re-encode.
+      *
+      * `false` is a stream the consumer can take as it stands. Only ever `true`
+      * when the caller asked for it with `allowTranscode`, so a caller that did
+      * not ask cannot be handed a cost it never agreed to pay.
+      */
+      transcodes: zod.z.boolean(),
       /** One-line explanation of why this stream won — for logs / debug UI. */
       reason: zod.z.string()
     });
@@ -35208,6 +35343,8 @@ var require_dist_B84YlKAH = __commonJS({
       "device-enabled",
       "device-battery-low",
       "device-battery-normal",
+      "device-consumable-low",
+      "device-consumable-normal",
       "stream-online",
       "stream-offline",
       "node-online",
@@ -35226,6 +35363,7 @@ var require_dist_B84YlKAH = __commonJS({
       "addon-updated",
       "server-updated",
       "export-completed",
+      "backup-completed",
       "camera-online",
       "camera-offline",
       "camera-disabled",
@@ -38084,13 +38222,91 @@ var require_dist_B84YlKAH = __commonJS({
       deviceIds: zod.z.array(zod.z.number()).min(1),
       since: zod.z.number().optional(),
       until: zod.z.number().optional(),
-      limit: zod.z.number().int().min(1).max(200).default(50)
+      limit: zod.z.number().int().min(1).max(200).default(50),
+      /** The same member-wise filter {@link listRecentSummaries} takes — one
+      *  meaning of "dog" on every summary surface. */
+      classes: zod.z.array(zod.z.string().min(1).max(60)).max(40).optional()
+    });
+    var SummaryMemberSchema = zod.z.object({
+      trackId: zod.z.string(),
+      /**
+      * The track's class at the time it JOINED, or `null` when it was unresolved
+      * and the track no longer exists to fill it.
+      *
+      * The join, not the latest opinion: class voting can re-decide a track's
+      * class afterwards, and a group's composition is the history of who came
+      * together. A consumer counts these to badge a thumbnail — "two people and a
+      * dog" — rather than being handed a second, denormalised tally that would
+      * drift from the members it claims to describe.
+      */
+      className: zod.z.string().nullable(),
+      /** `primary` is the one member that carries the group's identity. */
+      role: zod.z.enum([
+        "primary",
+        "sibling",
+        "child"
+      ]).nullable(),
+      joinedAt: zod.z.number(),
+      /** Tier 1 — the sub-class (`dog`, `van`), resolved from the member's track
+      *  at read time. Absent when nothing resolved, never an empty string. */
+      label: zod.z.string().optional(),
+      /** Tier 2 — the instance: a person's name, a plate. Absent when the pipeline
+      *  recognised nobody, and absent for a member whose track has been pruned —
+      *  a thumbnail that names the wrong person is worse than one naming nobody. */
+      subLabel: zod.z.string().optional()
     });
-    var SummariesPageSchema = zod.z.object({ summaries: zod.z.array(SummarySchema).readonly() });
     var SummaryDetailSchema = zod.z.object({
       summary: SummarySchema,
-      /** Member track ids, in absorption order. */
-      trackIds: zod.z.array(zod.z.string()).readonly()
+      /** Members in absorption order, oldest join first. */
+      members: zod.z.array(SummaryMemberSchema).readonly()
+    });
+    var SummaryListItemSchema = zod.z.object({
+      summary: SummarySchema,
+      /** Class counts, most numerous first; `className: null` is a member whose
+      *  class never resolved, counted so the counts add up to `memberCount`. */
+      classes: zod.z.array(zod.z.object({
+        className: zod.z.string().nullable(),
+        count: zod.z.number().int().positive()
+      })).readonly()
+    });
+    var SummariesPageSchema = zod.z.object({ summaries: zod.z.array(SummaryListItemSchema).readonly() });
+    var RecentSummariesQueryInput = zod.z.object({
+      /** Devices to merge. An empty array yields an empty page. */
+      deviceIds: zod.z.array(zod.z.number()),
+      /** Window lower bound on `lastActiveAt` (inclusive). */
+      since: zod.z.number().optional(),
+      /** Window upper bound on `lastActiveAt` (inclusive). */
+      until: zod.z.number().optional(),
+      limit: zod.z.number().int().min(1).max(500).default(100),
+      /** Opaque continuation cursor from a previous page's `nextCursor`. */
+      cursor: zod.z.string().optional(),
+      /**
+      * Restrict to these classes — THE SAME FIELD `listRecentTracks` takes, and
+      * deliberately the same name: the events filter tree emits one list of ticked
+      * taxonomy nodes, and a summaries feed that called it something else would
+      * make the operator's one filter component produce two shapes.
+      *
+      * A question about the MEMBERS: a group matches when ANY of them does. "Show
+      * me the arrivals with a dog" has to return the group of four people who had
+      * one with them; a filter on the group's own fields could only ever answer
+      * about its primary.
+      *
+      * Matched against all THREE tiers of a member — the class (`animal`), the
+      * sub-class (`dog`) and the instance (a name, a plate) — because which tier a
+      * ticked node lives on is the taxonomy's business, not the caller's. `dog` is
+      * an event kind in the tree and a tier-1 label on an `animal` track; a filter
+      * that read only the class would answer "animal" and never "dog".
+      *
+      * ABSENT or EMPTY means no filter — absent is not a selection of none.
+      */
+      classes: zod.z.array(zod.z.string().min(1).max(60)).max(40).optional()
+    });
+    var RecentSummariesPageSchema = zod.z.object({
+      /** Ordered by (`lastActiveAt` DESC, id DESC). Same light item as
+      *  {@link listSummaries} — one list shape, so a card renders the same
+      *  whichever feed drew it. */
+      summaries: zod.z.array(SummaryListItemSchema).readonly(),
+      nextCursor: zod.z.string().nullable()
     });
     var RecentTracksPageSchema = zod.z.object({
       /** Merged page, ordered by (`lastSeen` DESC, `trackId` DESC). */
@@ -38442,6 +38658,11 @@ var require_dist_B84YlKAH = __commonJS({
         listRecentTracks: method(RecentTracksQueryInput, RecentTracksPageSchema),
         /** Newest first by `openedAt`, for a camera set, inside an optional window. */
         listSummaries: method(SummariesQueryInput, SummariesPageSchema),
+        /**
+        * The PAGED feed — the reel and the Events gallery. Same cursor contract as
+        * {@link listRecentTracks}, so one screen cannot hold two ideas of newest.
+        */
+        listRecentSummaries: method(RecentSummariesQueryInput, RecentSummariesPageSchema),
         /** One summary with its member track ids; `null` for an id nobody wrote. */
         getSummary: method(zod.z.object({ id: zod.z.string() }), SummaryDetailSchema.nullable()),
         clearTracks: method(zod.z.object({ deviceId: zod.z.number() }), zod.z.void(), {
@@ -42731,10 +42952,28 @@ var require_dist_B84YlKAH = __commonJS({
         getSessionState: method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           sessionId: zod.z.string()
-        }), zod.z.object({ pendingRenegotiation: zod.z.object({
-          target: WebrtcStreamTargetSchema,
-          epoch: zod.z.number()
-        }).nullable() }))
+        }), zod.z.object({
+          pendingRenegotiation: zod.z.object({
+            target: WebrtcStreamTargetSchema,
+            epoch: zod.z.number()
+          }).nullable(),
+          /**
+          * Whether the session still EXISTS.
+          *
+          * A consumer that holds a resource for the life of a session needs to
+          * be able to ask, because a session does not always end the way it
+          * began. Measured on this hub 2026-09-13: an Echo that got stuck never
+          * sent `SessionDisconnected`, so the Alexa exporter's
+          * `releaseEgressTranscode` never ran, and a 2304x1296 HEVC to 720p
+          * H.264 transcode kept running for NOBODY for more than twenty
+          * minutes. The WebRTC session had logged `WebRTC session closed`
+          * minutes earlier — the broker knew; the holder had no way to ask.
+          *
+          * `false` for a session id the provider has never heard of, which is
+          * the same answer as "it ended": either way nothing is holding it up.
+          */
+          alive: zod.z.boolean()
+        }))
       },
       /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
       mount: { kind: "server-provided" }
@@ -50683,7 +50922,29 @@ var require_dist_B84YlKAH = __commonJS({
       * disarmed the channels it did not mention would make the Levels page and
       * the Diagnostics page fight over the same value.
       */
-      channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional()
+      channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional(),
+      /**
+      * How many days the analytics OPS LOG is kept — the audit trail of what
+      * retention actually deleted.
+      *
+      * It lives HERE, on the logging document, and not on the analytics addon's
+      * settings form, on the operator's instruction: every other log-ish window in
+      * this system is configured through this one document, and a retention audit
+      * configured somewhere else is a second place to look when the question is
+      * "what happened to my data".
+      *
+      * That placement has a cost worth stating: this document ships in the
+      * framework closure, so this knob needs a published `@camstack/server` while
+      * the four windows beside it (D485) reach a node on `camstack deploy`.
+      *
+      * `retention-model.ts` argued this one must NOT follow a device window,
+      * because the audit trail is the history of the SWEEP and not of the camera.
+      * That argument stands and is untouched — what changes is that 30 days stops
+      * being a constant nobody can reach. `0` keeps it forever. The floor is 1 day
+      * rather than 0-as-delete: an audit log truncated to nothing is precisely the
+      * state in which the next 9.5 GiB leak cannot be explained.
+      */
+      opsLogRetentionDays: zod.z.number().int().min(0).max(3650).optional()
     });
     var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: zod.z.string() });
     var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: zod.z.string() });
@@ -50722,6 +50983,14 @@ var require_dist_B84YlKAH = __commonJS({
       channels: zod.z.array(LogChannelDescriptorSchema).readonly(),
       /** The channels ARMED right now, each with its deadline. */
       activeChannels: zod.z.array(LogChannelWindowStateSchema).readonly(),
+      /**
+      * The ops-log window in days, as it is in force. `0` = kept forever.
+      *
+      * Reported rather than left to the caller's memory of what it wrote: this is
+      * the value the analytics sweep will actually use, and an operator asking how
+      * long their audit trail lives should not have to infer it from a default.
+      */
+      opsLogRetentionDays: zod.z.number().int().min(0),
       persisted: zod.z.boolean()
     });
     var systemCapability = {
@@ -52377,6 +52646,7 @@ var require_dist_B84YlKAH = __commonJS({
       streamBrokerCapability,
       streamCatalogCapability,
       streamParamsCapability,
+      streamSignalsCapability,
       switchCapability,
       systemCapability,
       tamperCapability,
@@ -55851,6 +56121,12 @@ var require_dist_B84YlKAH = __commonJS({
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.listRecentSummaries": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.listRecentTracks": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -57813,6 +58089,12 @@ var require_dist_B84YlKAH = __commonJS({
         addonId: null,
         access: "create"
       },
+      "streamBroker.reportStreamSignal": {
+        capName: "stream-broker",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "streamBroker.restartProfile": {
         capName: "stream-broker",
         capScope: "system",
@@ -57897,6 +58179,12 @@ var require_dist_B84YlKAH = __commonJS({
         addonId: null,
         access: "create"
       },
+      "streamSignals.listSignals": {
+        capName: "stream-signals",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "switch.setState": {
         capName: "switch",
         capScope: "device",
@@ -59678,6 +59966,11 @@ var require_dist_B84YlKAH = __commonJS({
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.listRecentSummaries": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "pipelineAnalytics.listRecentTracks": [{
         name: "deviceIds",
         form: "array",
@@ -60264,6 +60557,11 @@ var require_dist_B84YlKAH = __commonJS({
         form: "single",
         optional: false
       }],
+      "streamBroker.reportStreamSignal": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "streamBroker.restartProfile": [{
         name: "deviceId",
         form: "single",
@@ -60715,6 +61013,10 @@ var require_dist_B84YlKAH = __commonJS({
         durability: "restored",
         volatileFields: ["lastFetchedAt"]
       },
+      "stream-signals": {
+        durability: "session",
+        volatileFields: []
+      },
       "switch": {
         durability: "restored",
         volatileFields: ["lastChangedAt"]
@@ -61999,7 +62301,7 @@ var require_alerts_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     function selectExpired(alerts, cutoffMs) {
       return alerts.filter((a) => a.createdAt < cutoffMs).sort((a, b) => a.createdAt - b.createdAt).map((a) => a.id);
     }
@@ -62818,7 +63120,7 @@ var require_console_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var require_formatter = require_formatter_DqAKDlvN();
     var LEVEL_RANK = {
       debug: 0,
@@ -62912,7 +63214,7 @@ var require_core_blocks_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     node_fs_promises = require_chunk.__toESM(node_fs_promises);
@@ -63809,11 +64111,11 @@ var require_core_blocks = __commonJS({
   }
 });
 
-// ../system/dist/retired-settings-keys-Cxgwa0bk.js
-var require_retired_settings_keys_Cxgwa0bk = __commonJS({
-  "../system/dist/retired-settings-keys-Cxgwa0bk.js"(exports) {
+// ../system/dist/retired-settings-keys-FLZlwa2U.js
+var require_retired_settings_keys_FLZlwa2U = __commonJS({
+  "../system/dist/retired-settings-keys-FLZlwa2U.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     function settingsStoreIsAuthoritativeHere(env) {
       const raw = (env["CAMSTACK_ROLE"] ?? "").trim().toLowerCase();
       return raw === "" || raw === "hub";
@@ -64093,9 +64395,9 @@ var require_retired_settings_keys_Cxgwa0bk = __commonJS({
   }
 });
 
-// ../types/dist/canonical-hash-DNV8S5ET.js
-var require_canonical_hash_DNV8S5ET = __commonJS({
-  "../types/dist/canonical-hash-DNV8S5ET.js"(exports) {
+// ../types/dist/canonical-hash-9lydiEzx.js
+var require_canonical_hash_9lydiEzx = __commonJS({
+  "../types/dist/canonical-hash-9lydiEzx.js"(exports) {
     "use strict";
     var node_crypto = __require("crypto");
     var AUDIO_ENCODER_BY_CODEC = {
@@ -64182,6 +64484,7 @@ var require_canonical_hash_DNV8S5ET = __commonJS({
       ];
       if (video.preset !== void 0) args.push("-preset", video.preset);
       if (video.tune !== void 0) args.push("-tune", video.tune);
+      if (video.singleSlicePerFrame === true && video.encoder === "libx264") args.push("-x264-params", "sliced-threads=0");
       if (video.profile !== void 0) args.push("-profile:v", video.profile);
       if (video.level !== void 0) args.push("-level", video.level);
       if (video.pixelFormat !== void 0) args.push("-pix_fmt", video.pixelFormat);
@@ -64365,6 +64668,7 @@ var require_canonical_hash_DNV8S5ET = __commonJS({
         scale,
         ...v.preset !== void 0 ? { preset: v.preset } : {},
         ...v.tune !== void 0 ? { tune: v.tune } : {},
+        ...v.singleSlicePerFrame !== void 0 ? { singleSlicePerFrame: v.singleSlicePerFrame } : {},
         ...v.profile !== void 0 ? { profile: v.profile } : {},
         ...v.level !== void 0 ? { level: v.level } : {},
         ...input.pixelFormat !== void 0 ? { pixelFormat: input.pixelFormat } : {},
@@ -64695,7 +64999,7 @@ var require_node = __commonJS({
       value: mod,
       enumerable: true
     }) : target, mod));
-    var require_canonical_hash = require_canonical_hash_DNV8S5ET();
+    var require_canonical_hash = require_canonical_hash_9lydiEzx();
     var require_err_msg = require_err_msg_COpsHMw2();
     var node_crypto = __require("crypto");
     var node_fs = __require("fs");
@@ -66048,8 +66352,8 @@ var require_device_manager_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
-    var require_retired_settings_keys = require_retired_settings_keys_Cxgwa0bk();
+    var require_dist10 = require_dist_CEIkHEdy();
+    var require_retired_settings_keys = require_retired_settings_keys_FLZlwa2U();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
     var JOB_HISTORY = 20;
@@ -71674,7 +71978,7 @@ var require_hub_forwarder = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var require_formatter = require_formatter_DqAKDlvN();
     var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;
     var HubForwarderDestination = class {
@@ -71811,7 +72115,7 @@ var require_liveness_monitor_addon = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var NO_DEVICES = "liveness:no-devices";
     var ALL_OFFLINE = "liveness:all-devices-offline";
     var NO_FOOTAGE_PREFIX = "liveness:no-footage:";
@@ -72007,7 +72311,7 @@ var require_local_auth_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var node_crypto = __require("crypto");
     node_crypto = require_chunk.__toESM(node_crypto);
     var crypto$1 = __require("crypto");
@@ -79820,7 +80124,7 @@ var require_loki_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     function sanitizeLabelName(raw) {
       const replaced = raw.replaceAll(/[^a-zA-Z0-9_]/g, "_");
       return /^[a-zA-Z_]/.test(replaced) ? replaced : `_${replaced}`;
@@ -80407,7 +80711,7 @@ var require_native_metrics_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var node_fs_promises = __require("fs/promises");
     var node_fs = __require("fs");
     node_fs = require_chunk.__toESM(node_fs);
@@ -83160,7 +83464,7 @@ var require_filesystem_storage_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var node_crypto = __require("crypto");
     var node_fs_promises = __require("fs/promises");
     var node_path = __require("path");
@@ -84387,8 +84691,8 @@ var require_sqlite_settings_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
-    var require_retired_settings_keys = require_retired_settings_keys_Cxgwa0bk();
+    var require_dist10 = require_dist_CEIkHEdy();
+    var require_retired_settings_keys = require_retired_settings_keys_FLZlwa2U();
     var require_wal_checkpoint_policy = require_wal_checkpoint_policy_CCJZngds();
     var node_crypto = __require("crypto");
     var node_path = __require("path");
@@ -87175,7 +87479,7 @@ var require_storage_orchestrator_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var require_hub_cap_forward = require_hub_cap_forward_DmHNjbB0();
     var zod = require_zod();
     var node_crypto = __require("crypto");
@@ -88520,6 +88824,57 @@ var require_storage_orchestrator_addon = __commonJS({
       const percent = require_dist10.gbToBytes(minFreeGb) / totalBytes * 100;
       return Math.min(100, percent);
     }
+    function unknown(reason) {
+      return {
+        kind: "unknown",
+        reason
+      };
+    }
+    function freePercentOf(capacity) {
+      if (capacity === null || capacity.totalBytes <= 0) return 100;
+      return capacity.availableBytes / capacity.totalBytes * 100;
+    }
+    function volumeTotalBytesOf(capacity) {
+      return capacity === null ? 0 : capacity.totalBytes;
+    }
+    function probePathFor(location, locality, localNodeId, cwd) {
+      if (locality !== true) {
+        const why = locality === false ? `is served by the remote provider "${location.providerId}" (nodeLocal: false) \u2014 its bytes live on the remote host and no local statfs describes them` : `is served by "${location.providerId}", which this node has not classified yet (no getProviderInfo answer) \u2014 a local statfs would be a guess`;
+        return { reason: `location "${location.id}" ${why}` };
+      }
+      if (location.nodeId !== void 0 && location.nodeId !== localNodeId) return { reason: `location "${location.id}" lives on node "${location.nodeId}" and this is "${localNodeId}" \u2014 only the owning node can statfs its own volumes` };
+      const basePath = location.config["basePath"];
+      if (typeof basePath !== "string" || basePath.length === 0) return { reason: `location "${location.id}" declares no basePath to measure` };
+      if (!node_path.default.isAbsolute(basePath)) return { reason: `location "${location.id}" declares a RELATIVE basePath ("${basePath}") \u2014 that is a path inside its provider's own namespace, not on this node's filesystem, and resolving it against "${cwd}" would measure an unrelated volume` };
+      return { path: node_path.default.resolve(basePath) };
+    }
+    async function readLocalVolumeCapacity(location, locality, localNodeId, deps) {
+      const target = probePathFor(location, locality, localNodeId, deps.cwd);
+      if ("reason" in target) return unknown(target.reason);
+      const root = node_path.default.parse(target.path).root;
+      let probed = target.path;
+      for (; ; ) try {
+        await deps.probe.access(probed);
+        break;
+      } catch {
+        const parent = node_path.default.dirname(probed);
+        if (parent === probed) return unknown(`nothing on the path "${target.path}" exists on this node \u2014 the volume is not mounted, so the root filesystem's size is not an answer about it`);
+        probed = parent;
+      }
+      if (probed === root && target.path !== root) return unknown(`only the filesystem root exists on the path "${target.path}" \u2014 the volume is not mounted, so the root filesystem's size is not an answer about it`);
+      try {
+        const st = await deps.probe.statfs(probed);
+        return {
+          kind: "measured",
+          path: probed,
+          totalBytes: st.blocks * st.bsize,
+          availableBytes: st.bavail * st.bsize
+        };
+      } catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        return unknown(`statfs("${probed}") failed: ${reason}`);
+      }
+    }
     var FRAMEWORK_CONFIG_KEYS = /* @__PURE__ */ new Set([
       "basePath",
       "readOnly",
@@ -90572,31 +90927,53 @@ var require_storage_orchestrator_addon = __commonJS({
         } });
         throw new Error(refusal);
       }
-      /** statfs capacity of a location's basePath, walking up to the nearest
-      *  existing ancestor. Null for remote-node locations or unstattable paths. */
+      /**
+      * The volume figures for one location, or `null` when this node cannot take
+      * a measurement that is genuinely about it.
+      *
+      * The decision lives in `location-volume-capacity.ts` — including why a
+      * remote-provider location (the SMB share that was reporting the hub's own
+      * disk) gets nothing rather than a number. Here we only supply the node id,
+      * the provider's declared locality and the real filesystem, and log the
+      * reason once per distinct fault: `listLocations` is on the admin UI's poll,
+      * so a line per call would be a line per second.
+      */
       async localCapacityOf(loc) {
-        const localNode = this.service?.getLocalNodeId() ?? "hub";
-        if (loc.nodeId !== void 0 && loc.nodeId !== localNode) return null;
-        const bp = loc.config["basePath"];
-        if (typeof bp !== "string" || bp.length === 0) return null;
-        try {
-          let target = node_path.resolve(bp);
-          for (; ; ) try {
-            await node_fs_promises.access(target);
-            break;
-          } catch {
-            const parent = node_path.dirname(target);
-            if (!parent || parent === target) return null;
-            target = parent;
-          }
-          const st = await node_fs_promises.statfs(target);
-          return {
-            totalBytes: st.blocks * st.bsize,
-            availableBytes: st.bavail * st.bsize
-          };
-        } catch {
+        const localNode = this.service?.getLocalNodeId() ?? HUB_NODE_ID;
+        const result = await readLocalVolumeCapacity(loc, this.providerIsNodeLocal(loc), localNode, {
+          probe: {
+            access: (target) => node_fs_promises.access(target),
+            statfs: async (target) => node_fs_promises.statfs(target)
+          },
+          cwd: node_path.resolve(".")
+        });
+        if (result.kind === "unknown") {
+          this.logCapacityUnknownOnce(loc.id, result.reason);
           return null;
         }
+        this.clearCapacityUnknown(loc.id, result.path);
+        return {
+          totalBytes: result.totalBytes,
+          availableBytes: result.availableBytes
+        };
+      }
+      /** locationId → the last unmeasurable reason logged for it. */
+      capacityUnknownLogged = /* @__PURE__ */ new Map();
+      logCapacityUnknownOnce(locationId, reason) {
+        if (this.capacityUnknownLogged.get(locationId) === reason) return;
+        this.capacityUnknownLogged.set(locationId, reason);
+        this.ctx.logger.warn("storage-orchestrator: capacity is UNKNOWN for a location \u2014 reporting nothing rather than another volume\u2019s figures", { meta: {
+          locationId,
+          reason
+        } });
+      }
+      clearCapacityUnknown(locationId, measuredPath) {
+        if (!this.capacityUnknownLogged.has(locationId)) return;
+        this.capacityUnknownLogged.delete(locationId);
+        this.ctx.logger.info("storage-orchestrator: capacity is measurable again", { meta: {
+          locationId,
+          measuredPath
+        } });
       }
       /** Per-location cap on EVICTABLE bytes (`config.maxUsedGb`): the operator's
       *  "recordings may use at most N GB in total" — enforced by the pressure
@@ -90685,28 +91062,30 @@ var require_storage_orchestrator_addon = __commonJS({
         } });
         return occupancy;
       }
-      /** Free capacity (%) on a location's volume via `statfs`; 100 (guard inert) when unstattable. */
+      /**
+      * The pressure guard's two readings come from the SAME probe the UI's
+      * capacity does — one capacity truth per location, not two.
+      *
+      * They used to `statfs` the raw `basePath` themselves, which on this node
+      * answers for whatever local path happens to carry that name: a location
+      * owned by another node, or served by a remote provider, could decide
+      * eviction from the hub's own disk. Both now degrade exactly as they did
+      * when the path was unstattable — `100` (guard inert) and `0` (no byte
+      * target) — but they do so for every reading that is not ABOUT the location,
+      * not only for the ones that threw.
+      */
+      async volumeCapacityOf(locationId) {
+        const loc = this.service?.listLocations().find((l) => l.id === locationId);
+        if (!loc) return null;
+        return this.localCapacityOf(loc);
+      }
+      /** Free capacity (%) on a location's volume; 100 (guard inert) when unmeasurable. */
       async locationFreePercent(locationId) {
-        const bp = this.locationBasePath(locationId);
-        if (!bp) return 100;
-        try {
-          const st = await node_fs_promises.statfs(bp);
-          if (st.blocks <= 0) return 100;
-          return st.bavail / st.blocks * 100;
-        } catch {
-          return 100;
-        }
+        return freePercentOf(await this.volumeCapacityOf(locationId));
       }
-      /** Total bytes on a location's volume via `statfs`; 0 when unstattable. */
+      /** Total bytes on a location's volume; 0 when unmeasurable. */
       async locationVolumeTotalBytes(locationId) {
-        const bp = this.locationBasePath(locationId);
-        if (!bp) return 0;
-        try {
-          const st = await node_fs_promises.statfs(bp);
-          return st.blocks * st.bsize;
-        } catch {
-          return 0;
-        }
+        return volumeTotalBytesOf(await this.volumeCapacityOf(locationId));
       }
       /**
       * Seed default storage locations from the addon-declared
@@ -90827,7 +91206,7 @@ var require_system_config_addon = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var SECTION_TITLES = {
       server: "Server",
       auth: "Authentication"
@@ -108888,7 +109267,7 @@ var require_winston_logging = __commonJS({
       [Symbol.toStringTag]: { value: "Module" }
     });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var require_formatter = require_formatter_DqAKDlvN();
     var node_path = __require("path");
     node_path = require_chunk.__toESM(node_path);
@@ -110757,9 +111136,9 @@ ${(0, node_fs.readFileSync)(ca.caCertPath, "utf-8").trimEnd()}
   }
 });
 
-// ../types/dist/event-category-yW4s1MGD.js
-var require_event_category_yW4s1MGD = __commonJS({
-  "../types/dist/event-category-yW4s1MGD.js"(exports) {
+// ../types/dist/event-category-BVfsrBYA.js
+var require_event_category_BVfsrBYA = __commonJS({
+  "../types/dist/event-category-BVfsrBYA.js"(exports) {
     "use strict";
     var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
       EventCategory2["SystemBoot"] = "system.boot";
@@ -110899,6 +111278,7 @@ var require_event_category_yW4s1MGD = __commonJS({
       EventCategory2["LocalNetworkChanged"] = "network.local.changed";
       EventCategory2["MeshNetworkChanged"] = "network.mesh.changed";
       EventCategory2["BackupCompleted"] = "backup.completed";
+      EventCategory2["BackupRunCompleted"] = "backup.run-completed";
       EventCategory2["BackupRestored"] = "backup.restored";
       EventCategory2["NotificationDispatched"] = "notification.dispatched";
       EventCategory2["NotificationFailed"] = "notification.failed";
@@ -110925,11 +111305,11 @@ var require_event_category_yW4s1MGD = __commonJS({
   }
 });
 
-// ../types/dist/sleep-CfDqEZrs.js
-var require_sleep_CfDqEZrs = __commonJS({
-  "../types/dist/sleep-CfDqEZrs.js"(exports) {
+// ../types/dist/sleep-D7dV-FZB.js
+var require_sleep_D7dV_FZB = __commonJS({
+  "../types/dist/sleep-D7dV-FZB.js"(exports) {
     "use strict";
-    var require_event_category = require_event_category_yW4s1MGD();
+    var require_event_category = require_event_category_BVfsrBYA();
     var zod = require_zod();
     var AUDIO_CHUNK_FORMATS = [
       "f32le",
@@ -113424,6 +113804,7 @@ var require_sleep_CfDqEZrs = __commonJS({
           smoke: createSliceHandle(stateSource, binding.deviceId, "smoke"),
           streamCatalog: createSliceHandle(stateSource, binding.deviceId, "stream-catalog"),
           streamParams: createSliceHandle(stateSource, binding.deviceId, "stream-params"),
+          streamSignals: createSliceHandle(stateSource, binding.deviceId, "stream-signals"),
           switch: createSliceHandle(stateSource, binding.deviceId, "switch"),
           tamper: createSliceHandle(stateSource, binding.deviceId, "tamper"),
           temperatureSensor: createSliceHandle(stateSource, binding.deviceId, "temperature-sensor"),
@@ -113706,6 +114087,7 @@ var require_sleep_CfDqEZrs = __commonJS({
           listTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listTracks", "query", input),
           listRecentTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRecentTracks", "query", input),
           listSummaries: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listSummaries", "query", input),
+          listRecentSummaries: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "listRecentSummaries", "query", input),
           getSummary: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getSummary", "query", input),
           clearTracks: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "clearTracks", "mutation", input),
           getMotionEvents: (input) => dispatch("pipeline-analytics", "pipelineAnalytics", "getMotionEvents", "query", input),
@@ -113837,6 +114219,7 @@ var require_sleep_CfDqEZrs = __commonJS({
           getConfigSchema: (input) => dispatch("stream-params", "streamParams", "getConfigSchema", "query", input),
           getStatus: (input) => dispatch("stream-params", "streamParams", "getStatus", "query", input)
         },
+        streamSignals: { listSignals: (input) => dispatch("stream-signals", "streamSignals", "listSignals", "query", input) },
         switch: {
           setState: (input) => dispatch("switch", "switch", "setState", "mutation", input),
           getStatus: (input) => dispatch("switch", "switch", "getStatus", "query", input)
@@ -114046,6 +114429,7 @@ var require_sleep_CfDqEZrs = __commonJS({
         },
         recordingExport: { listExports: (input) => dispatchSystem("recordingExport", "listExports", "query", input) },
         streamBroker: {
+          reportStreamSignal: (input) => dispatchSystem("streamBroker", "reportStreamSignal", "mutation", input),
           publishCameraStream: (input) => dispatchSystem("streamBroker", "publishCameraStream", "mutation", input),
           retractCameraStream: (input) => dispatchSystem("streamBroker", "retractCameraStream", "mutation", input),
           assignProfile: (input) => dispatchSystem("streamBroker", "assignProfile", "mutation", input),
@@ -114132,6 +114516,7 @@ var require_sleep_CfDqEZrs = __commonJS({
       "snapshot",
       "stream-catalog",
       "stream-params",
+      "stream-signals",
       "switch",
       "tamper",
       "temperature-sensor",
@@ -114759,8 +115144,8 @@ var require_addon = __commonJS({
   "../types/dist/addon.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_CfDqEZrs();
-    var require_event_category = require_event_category_yW4s1MGD();
+    var require_sleep = require_sleep_D7dV_FZB();
+    var require_event_category = require_event_category_BVfsrBYA();
     var require_err_msg = require_err_msg_COpsHMw2();
     var CAP_INPUT_DEFAULTS = Object.freeze({
       "addons": { "getLogs": { "limit": 100 } },
@@ -114880,6 +115265,7 @@ var require_addon = __commonJS({
         "getMotionEvents": { "limit": 1e3 },
         "getObjectEvents": { "limit": 1e3 },
         "getSensorEvents": { "limit": 1e3 },
+        "listRecentSummaries": { "limit": 100 },
         "listRecentTracks": { "limit": 200 },
         "listSummaries": { "limit": 50 },
         "reclaimDebugMedia": { "mode": "report" },
@@ -121624,9 +122010,9 @@ var require_dist2 = __commonJS({
   }
 });
 
-// ../system/dist/manifest-system-deps-8x1jgPz_.js
-var require_manifest_system_deps_8x1jgPz = __commonJS({
-  "../system/dist/manifest-system-deps-8x1jgPz_.js"(exports) {
+// ../system/dist/manifest-system-deps-CrSP0Kkp.js
+var require_manifest_system_deps_CrSP0Kkp = __commonJS({
+  "../system/dist/manifest-system-deps-CrSP0Kkp.js"(exports) {
     "use strict";
     var require_chunk = require_chunk_Cek0wNdY();
     require_hub_cap_forward_DmHNjbB0();
@@ -123070,6 +123456,19 @@ var require_manifest_system_deps_8x1jgPz = __commonJS({
       });
       return cachedInvocation;
     }
+    function buildNpmChildEnv(env, execPath) {
+      const nodeDir = node_path.dirname(execPath);
+      const current = env["PATH"];
+      if (current === void 0 || current.length === 0) return {
+        ...env,
+        PATH: nodeDir
+      };
+      if (current === nodeDir || current.startsWith(`${nodeDir}${node_path.delimiter}`)) return { ...env };
+      return {
+        ...env,
+        PATH: `${nodeDir}${node_path.delimiter}${current}`
+      };
+    }
     async function runNpm(args, options) {
       const invocation = await resolveNpmInvocation({
         cacheDir: options.cacheDir,
@@ -123078,7 +123477,8 @@ var require_manifest_system_deps_8x1jgPz = __commonJS({
       });
       return execFileAsync$2(invocation.command, [...invocation.argsPrefix, ...args], {
         ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
-        timeout: options.timeout ?? 3e5
+        timeout: options.timeout ?? 3e5,
+        env: buildNpmChildEnv(options.env ?? process.env, process.execPath)
       });
     }
     async function resolveUncached(options) {
@@ -130581,6 +130981,12 @@ var require_manifest_system_deps_8x1jgPz = __commonJS({
         return buildNativeCapProxy;
       }
     });
+    Object.defineProperty(exports, "buildNpmChildEnv", {
+      enumerable: true,
+      get: function() {
+        return buildNpmChildEnv;
+      }
+    });
     Object.defineProperty(exports, "buildUdsNativeCapProxy", {
       enumerable: true,
       get: function() {
@@ -131148,11 +131554,11 @@ var require_manifest_system_deps_8x1jgPz = __commonJS({
   }
 });
 
-// ../system/dist/custom-action-registry-DwaSEiji.js
-var require_custom_action_registry_DwaSEiji = __commonJS({
-  "../system/dist/custom-action-registry-DwaSEiji.js"(exports) {
+// ../system/dist/custom-action-registry-YHpAdksL.js
+var require_custom_action_registry_YHpAdksL = __commonJS({
+  "../system/dist/custom-action-registry-YHpAdksL.js"(exports) {
     "use strict";
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var CustomActionRegistry = class {
       byAddon = /* @__PURE__ */ new Map();
       registerAddon(addonId, catalog, handler) {
@@ -134966,7 +135372,7 @@ var require_dist3 = __commonJS({
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
     var require_chunk = require_chunk_Cek0wNdY();
-    var require_dist10 = require_dist_B84YlKAH();
+    var require_dist10 = require_dist_CEIkHEdy();
     var require_builtins_alerts_alerts_addon = require_alerts_addon();
     require_alerts();
     var require_formatter = require_formatter_DqAKDlvN();
@@ -134993,9 +135399,9 @@ var require_dist3 = __commonJS({
     var require_builtins_winston_logging_index = require_winston_logging();
     var require_event_loop_stall_monitor = require_event_loop_stall_monitor_CAsHdMwP();
     var require_tls$1 = require_tls_BFs4PzoW();
-    var require_manifest_system_deps = require_manifest_system_deps_8x1jgPz();
+    var require_manifest_system_deps = require_manifest_system_deps_CrSP0Kkp();
     var require_resource_monitor = require_resource_monitor_LVE1BoLs();
-    var require_custom_action_registry = require_custom_action_registry_DwaSEiji();
+    var require_custom_action_registry = require_custom_action_registry_YHpAdksL();
     var zod = require_zod();
     var node_crypto = __require("crypto");
     var _camstack_types_node = require_node();
@@ -215841,6 +216247,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s)) retur
     exports.buildLinkChain = require_manifest_system_deps.buildLinkChain;
     exports.buildNativeCapProxy = require_manifest_system_deps.buildNativeCapProxy;
     exports.buildNodeManifest = buildNodeManifest;
+    exports.buildNpmChildEnv = require_manifest_system_deps.buildNpmChildEnv;
     exports.buildStorageLocationRegistry = require_builtins_storage_orchestrator_storage_orchestrator_addon.buildStorageLocationRegistry;
     exports.buildUdsNativeCapProxy = require_manifest_system_deps.buildUdsNativeCapProxy;
     exports.builderMountedCapNames = builderMountedCapNames;
@@ -216083,7 +216490,7 @@ var require_enums = __commonJS({
   "../types/dist/enums.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_event_category = require_event_category_yW4s1MGD();
+    var require_event_category = require_event_category_BVfsrBYA();
     var EventSourceType = /* @__PURE__ */ (function(EventSourceType2) {
       EventSourceType2["Addon"] = "addon";
       EventSourceType2["Core"] = "core";
@@ -216103,9 +216510,9 @@ var require_dist4 = __commonJS({
   "../types/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-    var require_sleep = require_sleep_CfDqEZrs();
-    var require_event_category = require_event_category_yW4s1MGD();
-    var require_canonical_hash = require_canonical_hash_DNV8S5ET();
+    var require_sleep = require_sleep_D7dV_FZB();
+    var require_event_category = require_event_category_BVfsrBYA();
+    var require_canonical_hash = require_canonical_hash_9lydiEzx();
     var require_enums2 = require_enums();
     var require_err_msg = require_err_msg_COpsHMw2();
     var zod = require_zod();
@@ -216285,7 +216692,23 @@ var require_dist4 = __commonJS({
         "zerolatency",
         "film",
         "animation"
-      ]).optional()
+      ]).optional(),
+      /**
+      * ONE slice per access unit.
+      *
+      * `-tune zerolatency` turns on x264's sliced threads, and a frame then leaves
+      * the encoder as five NAL slices that share one RTP timestamp and carry one
+      * marker bit. A libwebrtc depacketiser sees five frame-starts and one
+      * frame-end per frame: the first pictures render and the video then freezes
+      * for good while the audio, on its own plane, plays on. Measured on this hub
+      * 2026-09-13 against the Echo, and reduced to one slice by this flag alone.
+      *
+      * A NAMED field and not a raw flag, because {@link EgressEncodeSchema} omits
+      * `outputArgs` on purpose: an opaque array is part of the sharing key, so two
+      * consumers meaning the same thing spelled differently would stop sharing one
+      * child. Absent means "whatever the encoder does" — today's behaviour.
+      */
+      singleSlicePerFrame: zod.z.boolean().optional()
     });
     var AudioEncodeSchema = zod.z.union([zod.z.literal("passthrough"), zod.z.object({
       codec: zod.z.enum([
@@ -216330,6 +216753,50 @@ var require_dist4 = __commonJS({
         audio: "passthrough"
       };
     }
+    function compareToTarget(a, b, target) {
+      const aReaches = a >= target;
+      if (aReaches !== b >= target) return aReaches ? -1 : 1;
+      return aReaches ? a - b : b - a;
+    }
+    function canonicalCodec(value) {
+      const v = value.toLowerCase().replace(/[.\s-]/g, "");
+      if (v === "hevc" || v === "hvc1" || v === "hev1") return "h265";
+      if (v === "avc" || v === "avc1") return "h264";
+      return v;
+    }
+    function codecIsAccepted(codec, accept) {
+      if (accept.length === 0) return true;
+      if (codec === void 0) return false;
+      const c = canonicalCodec(codec);
+      return accept.some((a) => canonicalCodec(a) === c);
+    }
+    function providerRank(camStreamId, preferred) {
+      for (let i = 0; i < preferred.length; i += 1) if (camStreamId.startsWith(preferred[i])) return i;
+      return preferred.length;
+    }
+    function rankStreams(candidates, ranking) {
+      const usable = candidates.filter((c) => ranking.allowTranscode || codecIsAccepted(c.codec, ranking.acceptCodecs));
+      if (usable.length === 0) return null;
+      const target = ranking.targetHeight;
+      const scored = usable.map((candidate) => ({
+        candidate,
+        transcodes: !codecIsAccepted(candidate.codec, ranking.acceptCodecs),
+        provider: providerRank(candidate.camStreamId, ranking.preferredProviders),
+        height: candidate.height ?? 0
+      }));
+      scored.sort((a, b) => {
+        if (a.transcodes !== b.transcodes) return a.transcodes ? 1 : -1;
+        if (a.provider !== b.provider) return a.provider - b.provider;
+        if (target !== void 0) return compareToTarget(a.height, b.height, target);
+        return ranking.resolutionPreference === "highest" ? b.height - a.height : a.height - b.height;
+      });
+      const winner = scored[0];
+      if (winner === void 0) return null;
+      return {
+        candidate: winner.candidate,
+        transcodes: winner.transcodes
+      };
+    }
     var BASE_LIVE_EGRESS_PROFILE = {
       video: {
         codec: "h264",
@@ -216358,7 +216825,11 @@ var require_dist4 = __commonJS({
     };
     var ALEXA_EGRESS_PROFILE = {
       ...BASE_LIVE_EGRESS_PROFILE,
-      audio: { codec: "opus" }
+      audio: { codec: "opus" },
+      video: {
+        ...BASE_LIVE_EGRESS_PROFILE.video,
+        singleSlicePerFrame: true
+      }
     };
     var RATE_CONTROL_TIGHT = {
       kind: "cbr",
@@ -216446,7 +216917,8 @@ var require_dist4 = __commonJS({
         gopFrames: video.gopFrames ?? -1,
         bf: video.bf ?? -1,
         preset: video.preset ?? UNSET,
-        tune: video.tune ?? UNSET
+        tune: video.tune ?? UNSET,
+        singleSlicePerFrame: video.singleSlicePerFrame === void 0 ? UNSET : String(video.singleSlicePerFrame)
       };
     }
     function canonicalAudio(audio) {
@@ -218843,22 +219315,10 @@ var require_dist4 = __commonJS({
     }
     function pickClosestResolution(entries2, target) {
       const targetPixels = target.width * target.height;
-      let bestAbove;
-      let bestBelow;
-      for (const e of entries2) {
-        if (e.resolution === void 0) continue;
-        const pixels = e.resolution.width * e.resolution.height;
-        if (pixels >= targetPixels) {
-          if (!bestAbove || pixels < bestAbove.pixels) bestAbove = {
-            entry: e,
-            pixels
-          };
-        } else if (!bestBelow || pixels > bestBelow.pixels) bestBelow = {
-          entry: e,
-          pixels
-        };
-      }
-      return bestAbove?.entry ?? bestBelow?.entry;
+      return [...entries2.flatMap((entry) => entry.resolution === void 0 ? [] : [{
+        entry,
+        pixels: entry.resolution.width * entry.resolution.height
+      }])].sort((a, b) => compareToTarget(a.pixels, b.pixels, targetPixels))[0]?.entry;
     }
     var FORMAT_KEYS = [
       "onnx",
@@ -221720,6 +222180,39 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       exposesDeviceSettings: true,
       methods: {}
     };
+    var StreamSignalSchema = zod.z.object({
+      /** Stable id chosen by the provider, e.g. `'motion'`, `'person'`, `'tamper'`. */
+      code: zod.z.string().min(1),
+      /** What an operator reads in the picker. The provider's own wording. */
+      label: zod.z.string().min(1),
+      /**
+      * Whether the provider recommends this signal ON when a camera is first set
+      * up. A provider knows which of its signals are cheap and reliable; an
+      * operator should not have to discover that by trial. Reolink recommends
+      * both of its own.
+      */
+      recommended: zod.z.boolean()
+    });
+    var StreamSignalsStatusSchema = zod.z.object({
+      signals: zod.z.array(StreamSignalSchema),
+      lastFetchedAt: zod.z.number()
+    });
+    var streamSignalsCapability = {
+      name: "stream-signals",
+      scope: "device",
+      deviceNative: true,
+      mode: "singleton",
+      deviceTypes: Object.values(require_sleep.DeviceType),
+      runtimeState: StreamSignalsStatusSchema,
+      methods: {
+        /**
+        * What this device can emit. Empty is a valid and common answer — most
+        * cameras have nothing to offer here, and an empty list is what makes the
+        * broker's picker show nothing rather than a false choice.
+        */
+        listSignals: require_sleep.method(zod.z.void(), zod.z.array(StreamSignalSchema).readonly())
+      }
+    };
     var StreamFormatSchema = zod.z.enum([
       "webrtc",
       "hls",
@@ -222072,6 +222565,46 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       mode: "singleton",
       exposesDeviceSettings: true,
       methods: {
+        /**
+        * A device reporting that one of ITS OWN signals just fired.
+        *
+        * The provider calls this; nothing polls. The broker then decides whether
+        * to wake the source, and the decision has two terms that must BOTH hold:
+        *
+        *  - the signal is ENABLED for this camera (the operator's per-camera
+        *    choice — a camera may declare a signal the operator does not want
+        *    waking anything), and
+        *  - a consumer is actually attached and waiting on the prestream. Waking
+        *    a camera nobody is watching is the one thing a battery camera must
+        *    never do, and a signal arriving with no consumer is exactly that.
+        *
+        * Reported, never inferred: a signal that fires while the stream is
+        * already up refreshes the hold instead of starting a second one, which is
+        * what makes continuous motion keep a camera awake without stacking
+        * timers.
+        *
+        * `code` is the provider's own, from `streamSignals.listSignals`. An
+        * unknown code is REFUSED rather than treated as a wildcard wake — a
+        * provider and an operator disagreeing about a name must not become a
+        * camera that wakes for everything.
+        */
+        reportStreamSignal: require_sleep.method(zod.z.object({
+          deviceId: zod.z.number().int().nonnegative(),
+          /** The provider's signal code. */
+          code: zod.z.string().min(1),
+          /** Ms epoch. Absent ⇒ now. */
+          at: zod.z.number().optional()
+        }), zod.z.object({
+          /** Whether the broker acted on it, and if not, why. */
+          accepted: zod.z.boolean(),
+          reason: zod.z.enum([
+            "woke",
+            "hold-extended",
+            "not-enabled",
+            "no-consumer",
+            "unknown-code"
+          ])
+        }), { kind: "mutation" }),
         publishCameraStream: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           camStreamId: zod.z.string().min(1),
@@ -222549,6 +223082,16 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       acceptCodecs: zod.z.array(StreamCodecSchema).readonly().optional(),
       /** Minimum vertical resolution. Streams shorter than this are dropped. */
       minHeight: zod.z.number().int().positive().optional(),
+      /**
+      * Maximum vertical resolution. Streams TALLER than this are dropped.
+      *
+      * A consumer can have a ceiling as real as its floor: Alexa documents
+      * 480p to 1080p, and a 4K stream is as unusable to an Echo as a 360p one.
+      * Without this the ceiling had to be re-implemented by every caller — and
+      * one caller implementing it privately is how a second scoring authority
+      * gets born.
+      */
+      maxHeight: zod.z.number().int().positive().optional(),
       /** Minimum horizontal resolution. */
       minWidth: zod.z.number().int().positive().optional(),
       /**
@@ -222565,7 +223108,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * transcoded" guard: if the device is already serving the consumer's
       * codec end-to-end, there's nothing to optimise.
       */
-      requireSiblingCodec: zod.z.array(StreamCodecSchema).readonly().optional()
+      requireSiblingCodec: zod.z.array(StreamCodecSchema).readonly().optional(),
+      /**
+      * Whether a stream the consumer CANNOT decode may still be picked, on the
+      * understanding that it will be transcoded.
+      *
+      * Default `false` — today's behaviour, and the right one for a bypass
+      * question ("is there a stream I can forward untouched?"). Set `true` to
+      * ask the larger question: "what is the best stream for me, transcoding if
+      * I must?" A stream that satisfies `acceptCodecs` always outranks one that
+      * does not, so a passthrough is never lost to a transcode; the answer says
+      * which it is in {@link PickedCamStreamSchema.transcodes}.
+      *
+      * This is what lets one picker serve both the bypass and the full source
+      * choice, instead of a consumer scoring privately when the bypass misses.
+      */
+      allowTranscode: zod.z.boolean().optional()
     }).readonly();
     var PickStreamPreferencesSchema = zod.z.object({
       /**
@@ -222579,12 +223137,32 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * picks the tallest stream; `'lowest'` picks the shortest (used by
       * memory-constrained consumers / Apple Home guest sessions).
       */
-      resolutionPreference: zod.z.enum(["highest", "lowest"]).optional()
+      resolutionPreference: zod.z.enum(["highest", "lowest"]).optional(),
+      /**
+      * The height the consumer actually wants to DELIVER.
+      *
+      * Not a constraint — an ordering. With it set, the SMALLEST stream at or
+      * above the target wins, and only if nothing reaches it does the tallest
+      * take over. Pulling 1296 lines to draw 720 on a 1280x800 Echo panel costs
+      * a decode and buys nothing, and `resolutionPreference: 'highest'` cannot
+      * express that: it says "as big as possible", which is a different wish.
+      *
+      * Ignored when absent, so every existing caller keeps its ordering.
+      */
+      targetHeight: zod.z.number().int().positive().optional()
     }).readonly();
     var PickedCamStreamSchema = zod.z.object({
       camStreamId: zod.z.string(),
       codec: zod.z.string().optional(),
       resolution: require_sleep.CamStreamResolutionSchema.optional(),
+      /**
+      * Whether serving this stream requires a decode + re-encode.
+      *
+      * `false` is a stream the consumer can take as it stands. Only ever `true`
+      * when the caller asked for it with `allowTranscode`, so a caller that did
+      * not ask cannot be handed a cost it never agreed to pay.
+      */
+      transcodes: zod.z.boolean(),
       /** One-line explanation of why this stream won — for logs / debug UI. */
       reason: zod.z.string()
     });
@@ -227963,6 +228541,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "device-enabled",
       "device-battery-low",
       "device-battery-normal",
+      "device-consumable-low",
+      "device-consumable-normal",
       "stream-online",
       "stream-offline",
       "node-online",
@@ -227981,6 +228561,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "addon-updated",
       "server-updated",
       "export-completed",
+      "backup-completed",
       "camera-online",
       "camera-offline",
       "camera-disabled",
@@ -228842,10 +229423,22 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
             value: "server-updated",
             label: "Server updated"
           },
+          {
+            value: "device-consumable-low",
+            label: "Consumable low"
+          },
+          {
+            value: "device-consumable-normal",
+            label: "Consumable replaced"
+          },
           {
             value: "export-completed",
             label: "Export completed"
           },
+          {
+            value: "backup-completed",
+            label: "Backup completed"
+          },
           {
             value: "alarm-arming",
             label: "Alarm arming (exit delay)"
@@ -231303,13 +231896,91 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       deviceIds: zod.z.array(zod.z.number()).min(1),
       since: zod.z.number().optional(),
       until: zod.z.number().optional(),
-      limit: zod.z.number().int().min(1).max(200).default(50)
+      limit: zod.z.number().int().min(1).max(200).default(50),
+      /** The same member-wise filter {@link listRecentSummaries} takes — one
+      *  meaning of "dog" on every summary surface. */
+      classes: zod.z.array(zod.z.string().min(1).max(60)).max(40).optional()
+    });
+    var SummaryMemberSchema = zod.z.object({
+      trackId: zod.z.string(),
+      /**
+      * The track's class at the time it JOINED, or `null` when it was unresolved
+      * and the track no longer exists to fill it.
+      *
+      * The join, not the latest opinion: class voting can re-decide a track's
+      * class afterwards, and a group's composition is the history of who came
+      * together. A consumer counts these to badge a thumbnail — "two people and a
+      * dog" — rather than being handed a second, denormalised tally that would
+      * drift from the members it claims to describe.
+      */
+      className: zod.z.string().nullable(),
+      /** `primary` is the one member that carries the group's identity. */
+      role: zod.z.enum([
+        "primary",
+        "sibling",
+        "child"
+      ]).nullable(),
+      joinedAt: zod.z.number(),
+      /** Tier 1 — the sub-class (`dog`, `van`), resolved from the member's track
+      *  at read time. Absent when nothing resolved, never an empty string. */
+      label: zod.z.string().optional(),
+      /** Tier 2 — the instance: a person's name, a plate. Absent when the pipeline
+      *  recognised nobody, and absent for a member whose track has been pruned —
+      *  a thumbnail that names the wrong person is worse than one naming nobody. */
+      subLabel: zod.z.string().optional()
     });
-    var SummariesPageSchema = zod.z.object({ summaries: zod.z.array(SummarySchema).readonly() });
     var SummaryDetailSchema = zod.z.object({
       summary: SummarySchema,
-      /** Member track ids, in absorption order. */
-      trackIds: zod.z.array(zod.z.string()).readonly()
+      /** Members in absorption order, oldest join first. */
+      members: zod.z.array(SummaryMemberSchema).readonly()
+    });
+    var SummaryListItemSchema = zod.z.object({
+      summary: SummarySchema,
+      /** Class counts, most numerous first; `className: null` is a member whose
+      *  class never resolved, counted so the counts add up to `memberCount`. */
+      classes: zod.z.array(zod.z.object({
+        className: zod.z.string().nullable(),
+        count: zod.z.number().int().positive()
+      })).readonly()
+    });
+    var SummariesPageSchema = zod.z.object({ summaries: zod.z.array(SummaryListItemSchema).readonly() });
+    var RecentSummariesQueryInput = zod.z.object({
+      /** Devices to merge. An empty array yields an empty page. */
+      deviceIds: zod.z.array(zod.z.number()),
+      /** Window lower bound on `lastActiveAt` (inclusive). */
+      since: zod.z.number().optional(),
+      /** Window upper bound on `lastActiveAt` (inclusive). */
+      until: zod.z.number().optional(),
+      limit: zod.z.number().int().min(1).max(500).default(100),
+      /** Opaque continuation cursor from a previous page's `nextCursor`. */
+      cursor: zod.z.string().optional(),
+      /**
+      * Restrict to these classes — THE SAME FIELD `listRecentTracks` takes, and
+      * deliberately the same name: the events filter tree emits one list of ticked
+      * taxonomy nodes, and a summaries feed that called it something else would
+      * make the operator's one filter component produce two shapes.
+      *
+      * A question about the MEMBERS: a group matches when ANY of them does. "Show
+      * me the arrivals with a dog" has to return the group of four people who had
+      * one with them; a filter on the group's own fields could only ever answer
+      * about its primary.
+      *
+      * Matched against all THREE tiers of a member — the class (`animal`), the
+      * sub-class (`dog`) and the instance (a name, a plate) — because which tier a
+      * ticked node lives on is the taxonomy's business, not the caller's. `dog` is
+      * an event kind in the tree and a tier-1 label on an `animal` track; a filter
+      * that read only the class would answer "animal" and never "dog".
+      *
+      * ABSENT or EMPTY means no filter — absent is not a selection of none.
+      */
+      classes: zod.z.array(zod.z.string().min(1).max(60)).max(40).optional()
+    });
+    var RecentSummariesPageSchema = zod.z.object({
+      /** Ordered by (`lastActiveAt` DESC, id DESC). Same light item as
+      *  {@link listSummaries} — one list shape, so a card renders the same
+      *  whichever feed drew it. */
+      summaries: zod.z.array(SummaryListItemSchema).readonly(),
+      nextCursor: zod.z.string().nullable()
     });
     var RecentTracksPageSchema = zod.z.object({
       /** Merged page, ordered by (`lastSeen` DESC, `trackId` DESC). */
@@ -231662,6 +232333,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         listRecentTracks: require_sleep.method(RecentTracksQueryInput, RecentTracksPageSchema),
         /** Newest first by `openedAt`, for a camera set, inside an optional window. */
         listSummaries: require_sleep.method(SummariesQueryInput, SummariesPageSchema),
+        /**
+        * The PAGED feed — the reel and the Events gallery. Same cursor contract as
+        * {@link listRecentTracks}, so one screen cannot hold two ideas of newest.
+        */
+        listRecentSummaries: require_sleep.method(RecentSummariesQueryInput, RecentSummariesPageSchema),
         /** One summary with its member track ids; `null` for an id nobody wrote. */
         getSummary: require_sleep.method(zod.z.object({ id: zod.z.string() }), SummaryDetailSchema.nullable()),
         clearTracks: require_sleep.method(zod.z.object({ deviceId: zod.z.number() }), zod.z.void(), {
@@ -236147,10 +236823,28 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         getSessionState: require_sleep.method(zod.z.object({
           deviceId: zod.z.number().int().nonnegative(),
           sessionId: zod.z.string()
-        }), zod.z.object({ pendingRenegotiation: zod.z.object({
-          target: WebrtcStreamTargetSchema,
-          epoch: zod.z.number()
-        }).nullable() }))
+        }), zod.z.object({
+          pendingRenegotiation: zod.z.object({
+            target: WebrtcStreamTargetSchema,
+            epoch: zod.z.number()
+          }).nullable(),
+          /**
+          * Whether the session still EXISTS.
+          *
+          * A consumer that holds a resource for the life of a session needs to
+          * be able to ask, because a session does not always end the way it
+          * began. Measured on this hub 2026-09-13: an Echo that got stuck never
+          * sent `SessionDisconnected`, so the Alexa exporter's
+          * `releaseEgressTranscode` never ran, and a 2304x1296 HEVC to 720p
+          * H.264 transcode kept running for NOBODY for more than twenty
+          * minutes. The WebRTC session had logged `WebRTC session closed`
+          * minutes earlier — the broker knew; the holder had no way to ask.
+          *
+          * `false` for a session id the provider has never heard of, which is
+          * the same answer as "it ended": either way nothing is holding it up.
+          */
+          alive: zod.z.boolean()
+        }))
       },
       /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
       mount: { kind: "server-provided" }
@@ -244265,7 +244959,29 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       * disarmed the channels it did not mention would make the Levels page and
       * the Diagnostics page fight over the same value.
       */
-      channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional()
+      channels: zod.z.array(LogChannelWindowPatchSchema).readonly().optional(),
+      /**
+      * How many days the analytics OPS LOG is kept — the audit trail of what
+      * retention actually deleted.
+      *
+      * It lives HERE, on the logging document, and not on the analytics addon's
+      * settings form, on the operator's instruction: every other log-ish window in
+      * this system is configured through this one document, and a retention audit
+      * configured somewhere else is a second place to look when the question is
+      * "what happened to my data".
+      *
+      * That placement has a cost worth stating: this document ships in the
+      * framework closure, so this knob needs a published `@camstack/server` while
+      * the four windows beside it (D485) reach a node on `camstack deploy`.
+      *
+      * `retention-model.ts` argued this one must NOT follow a device window,
+      * because the audit trail is the history of the SWEEP and not of the camera.
+      * That argument stands and is untouched — what changes is that 30 days stops
+      * being a constant nobody can reach. `0` keeps it forever. The floor is 1 day
+      * rather than 0-as-delete: an audit log truncated to nothing is precisely the
+      * state in which the next 9.5 GiB leak cannot be explained.
+      */
+      opsLogRetentionDays: zod.z.number().int().min(0).max(3650).optional()
     });
     var ReportedLoadContributionSchema = LoadContributionSchema.extend({ addonId: zod.z.string() });
     var ReportedFailureContributionSchema = FailureContributionSchema.extend({ addonId: zod.z.string() });
@@ -244304,6 +245020,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       channels: zod.z.array(LogChannelDescriptorSchema).readonly(),
       /** The channels ARMED right now, each with its deadline. */
       activeChannels: zod.z.array(LogChannelWindowStateSchema).readonly(),
+      /**
+      * The ops-log window in days, as it is in force. `0` = kept forever.
+      *
+      * Reported rather than left to the caller's memory of what it wrote: this is
+      * the value the analytics sweep will actually use, and an operator asking how
+      * long their audit trail lives should not have to infer it from a default.
+      */
+      opsLogRetentionDays: zod.z.number().int().min(0),
       persisted: zod.z.boolean()
     });
     var systemCapability = {
@@ -245787,6 +246511,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       smoke: smokeCapability,
       streamCatalog: streamCatalogCapability,
       streamParams: streamParamsCapability,
+      streamSignals: streamSignalsCapability,
       switch: switchCapability,
       tamper: tamperCapability,
       temperatureSensor: temperatureSensorCapability,
@@ -248524,6 +249249,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       streamBroker: "stream-broker",
       streamCatalog: "stream-catalog",
       streamParams: "stream-params",
+      streamSignals: "stream-signals",
       switch: "switch",
       system: "system",
       tamper: "tamper",
@@ -249084,6 +249810,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         key: "streamParams",
         name: "stream-params"
       },
+      {
+        key: "streamSignals",
+        name: "stream-signals"
+      },
       {
         key: "switch",
         name: "switch"
@@ -249308,6 +250038,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       streamBrokerCapability,
       streamCatalogCapability,
       streamParamsCapability,
+      streamSignalsCapability,
       switchCapability,
       systemCapability,
       tamperCapability,
@@ -252782,6 +253513,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "view"
       },
+      "pipelineAnalytics.listRecentSummaries": {
+        capName: "pipeline-analytics",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "pipelineAnalytics.listRecentTracks": {
         capName: "pipeline-analytics",
         capScope: "device",
@@ -254744,6 +255481,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "streamBroker.reportStreamSignal": {
+        capName: "stream-broker",
+        capScope: "system",
+        addonId: null,
+        access: "create"
+      },
       "streamBroker.restartProfile": {
         capName: "stream-broker",
         capScope: "system",
@@ -254828,6 +255571,12 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         addonId: null,
         access: "create"
       },
+      "streamSignals.listSignals": {
+        capName: "stream-signals",
+        capScope: "device",
+        addonId: null,
+        access: "view"
+      },
       "switch.setState": {
         capName: "switch",
         capScope: "device",
@@ -255631,6 +256380,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "stream-broker",
       "stream-catalog",
       "stream-params",
+      "stream-signals",
       "switch",
       "system",
       "terminal-session",
@@ -255697,6 +256447,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "snapshot",
       "stream-catalog",
       "stream-params",
+      "stream-signals",
       "switch",
       "update",
       "vacuum-control",
@@ -256873,6 +257624,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: true
       }],
+      "pipelineAnalytics.listRecentSummaries": [{
+        name: "deviceIds",
+        form: "array",
+        optional: false
+      }],
       "pipelineAnalytics.listRecentTracks": [{
         name: "deviceIds",
         form: "array",
@@ -257459,6 +258215,11 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         form: "single",
         optional: false
       }],
+      "streamBroker.reportStreamSignal": [{
+        name: "deviceId",
+        form: "single",
+        optional: false
+      }],
       "streamBroker.restartProfile": [{
         name: "deviceId",
         form: "single",
@@ -257816,6 +258577,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
       "streamBroker.produceEventMedia",
       "streamBroker.publishCameraStream",
       "streamBroker.renderPreBufferClip",
+      "streamBroker.reportStreamSignal",
       "streamBroker.restartProfile",
       "streamBroker.retractCameraStream",
       "streamBroker.setDeviceAudioMute",
@@ -258065,6 +258827,10 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
         durability: "restored",
         volatileFields: ["lastFetchedAt"]
       },
+      "stream-signals": {
+        durability: "session",
+        volatileFields: []
+      },
       "switch": {
         durability: "restored",
         volatileFields: ["lastChangedAt"]
@@ -262523,6 +263289,8 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.StreamProfileOptionsSchema = StreamProfileOptionsSchema;
     exports.StreamProfilePatchSchema = StreamProfilePatchSchema;
     exports.StreamProfileSchema = StreamProfileSchema;
+    exports.StreamSignalSchema = StreamSignalSchema;
+    exports.StreamSignalsStatusSchema = StreamSignalsStatusSchema;
     exports.StreamSourceEntrySchema = require_sleep.StreamSourceEntrySchema;
     exports.StreamSourceSchema = require_sleep.StreamSourceSchema;
     exports.SubscribeAudioChunksInputSchema = require_sleep.SubscribeAudioChunksInputSchema;
@@ -262708,12 +263476,14 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.clusterModelSettingKey = clusterModelSettingKey;
     exports.clusterStepSettingFieldsFor = clusterStepSettingFieldsFor;
     exports.clusterStepSettingKey = clusterStepSettingKey;
+    exports.codecIsAccepted = codecIsAccepted;
     exports.collectHydratedFieldEntries = require_sleep.collectHydratedFieldEntries;
     exports.collectHydratedFieldValues = require_sleep.collectHydratedFieldValues;
     exports.collectSecretConfigKeys = collectSecretConfigKeys;
     exports.colorCapability = colorCapability;
     exports.colorForKind = colorForKind;
     exports.commitWatchdogRestart = commitWatchdogRestart;
+    exports.compareToTarget = compareToTarget;
     exports.compileExpression = compileExpression;
     exports.compileExpressionSafe = compileExpressionSafe;
     exports.composeSwitchedOff = composeSwitchedOff;
@@ -262972,6 +263742,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.ptzAutotrackCapability = ptzAutotrackCapability;
     exports.ptzCapability = ptzCapability;
     exports.pythonScriptForBackend = pythonScriptForBackend;
+    exports.rankStreams = rankStreams;
     exports.readClusterStepModels = readClusterStepModels;
     exports.readClusterStepSettings = readClusterStepSettings;
     exports.readDetailCropConvention = readDetailCropConvention;
@@ -263056,6 +263827,7 @@ ${recipe.triggers.map((t, i) => emitTrigger(t, i)).join("\n\n")}
     exports.streamParamsCapability = streamParamsCapability;
     exports.streamPixels = streamPixels;
     exports.streamQualityLabel = streamQualityLabel;
+    exports.streamSignalsCapability = streamSignalsCapability;
     exports.stripRetiredBandPreBufferSec = stripRetiredBandPreBufferSec;
     exports.strippedOfLegacyReadOnly = strippedOfLegacyReadOnly;
     exports.subKindsOf = subKindsOf;
@@ -264680,6 +265452,15 @@ var require_server_root = __commonJS({
         __name(buildNpmRegistryArgs, "buildNpmRegistryArgs");
         var NPM_VIEW_TIMEOUT_MS = 2e4;
         var NPM_INSTALL_TIMEOUT_MS = 15 * 6e4;
+        var CLOSURE_ALLOW_SCRIPTS = {
+          "@camstack/server": true,
+          "better-sqlite3": true,
+          "node-av": true,
+          "node-pty": true,
+          ssh2: true,
+          "cpu-features": true,
+          esbuild: true
+        };
         var RESTART_REASON_PREFIX = "server-update";
         var STALE_TRANSIENT_MS = 24 * 60 * 60 * 1e3;
         function readWrapperProbes() {
@@ -264727,6 +265508,7 @@ var require_server_root = __commonJS({
           dataDir;
           execNpm;
           ensureNativePrebuildsFn;
+          applyClosurePatchesFn;
           env;
           readWrapperProbesFn;
           now;
@@ -264755,6 +265537,7 @@ var require_server_root = __commonJS({
               };
             });
             this.ensureNativePrebuildsFn = options.ensureNativePrebuilds ?? (async () => void 0);
+            this.applyClosurePatchesFn = options.applyClosurePatches ?? (async () => void 0);
             this.env = options.env ?? process.env;
             this.readWrapperProbesFn = options.readWrapperProbes ?? readWrapperProbes;
             this.now = options.now ?? Date.now;
@@ -265070,7 +265853,8 @@ var require_server_root = __commonJS({
               } else {
                 fs6.writeFileSync(path6.join(stagingDir, "package.json"), JSON.stringify({
                   name: "camstack-node-root",
-                  private: true
+                  private: true,
+                  allowScripts: CLOSURE_ALLOW_SCRIPTS
                 }, null, 2), "utf-8");
                 await this.execNpm([
                   ...installArgs,
@@ -265103,6 +265887,15 @@ var require_server_root = __commonJS({
               if (missingNatives.length > 0) {
                 throw new Error(`staged closure missing native prebuilds: ${missingNatives.join(", ")} \u2014 refusing to arm a swap that would break the forked runners`);
               }
+              try {
+                await this.applyClosurePatchesFn(stagingDir);
+              } catch (err) {
+                this.logger.warn("closure-patch apply step failed \u2014 validator will decide", {
+                  meta: {
+                    error: err instanceof Error ? err.message : String(err)
+                  }
+                });
+              }
               const unpatched = findUnappliedClosurePatches(stagingDir);
               if (unpatched.length > 0) {
                 throw new Error(`staged closure did not apply its shipped patches: ${unpatched.join(", ")} \u2014 refusing to arm a swap into an unpatched closure`);
@@ -265150,6 +265943,7 @@ var require_server_root = __commonJS({
             return {
               name: "camstack-node-root",
               private: true,
+              allowScripts: CLOSURE_ALLOW_SCRIPTS,
               dependencies: {
                 [this.spec.packageName]: fileRef(rootTgz)
               },
@@ -396107,6 +396901,78 @@ var require_system_ensure_prebuilds = __commonJS({
   }
 });
 
+// ../../server/backend/dist/core/server-update/system-apply-closure-patches.js
+var require_system_apply_closure_patches = __commonJS({
+  "../../server/backend/dist/core/server-update/system-apply-closure-patches.js"(exports) {
+    "use strict";
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    }));
+    var __setModuleDefault = exports && exports.__setModuleDefault || (Object.create ? (function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    }) : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports && exports.__importStar || /* @__PURE__ */ (function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) {
+          for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        }
+        __setModuleDefault(result, mod);
+        return result;
+      };
+    })();
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.buildSystemApplyClosurePatches = buildSystemApplyClosurePatches;
+    var node_child_process_1 = __require("child_process");
+    var fs = __importStar(__require("fs"));
+    var path = __importStar(__require("path"));
+    var node_util_1 = __require("util");
+    var execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
+    var APPLIER_REL = ["node_modules", "@camstack", "server", "scripts", "closure-postinstall.mjs"];
+    var APPLY_TIMEOUT_MS = 6e4;
+    function buildSystemApplyClosurePatches(logger) {
+      return async (closureDir) => {
+        const applier = path.join(closureDir, ...APPLIER_REL);
+        if (!fs.existsSync(applier)) {
+          logger.debug("closure ships no patch applier \u2014 nothing to apply", {
+            meta: { applier }
+          });
+          return;
+        }
+        const { stdout, stderr } = await execFileAsync(process.execPath, [applier], {
+          cwd: path.dirname(path.dirname(applier)),
+          timeout: APPLY_TIMEOUT_MS
+        });
+        const output = `${stdout}${stderr}`.trim();
+        if (output.length > 0) {
+          logger.info("closure patches applied", { meta: { output } });
+        }
+      };
+    }
+  }
+});
+
 // ../../server/backend/dist/core/server-update/system-exec-npm.js
 var require_system_exec_npm = __commonJS({
   "../../server/backend/dist/core/server-update/system-exec-npm.js"(exports) {
@@ -396494,6 +397360,7 @@ var require_agent_update_service = __commonJS({
     var system_1 = require_dist3();
     var types_1 = require_dist4();
     var system_ensure_prebuilds_js_1 = require_system_ensure_prebuilds();
+    var system_apply_closure_patches_js_1 = require_system_apply_closure_patches();
     var system_exec_npm_js_1 = require_system_exec_npm();
     var update_availability_emitter_js_1 = require_update_availability_emitter();
     var update_availability_store_js_1 = require_update_availability_store();
@@ -396582,6 +397449,11 @@ var require_agent_update_service = __commonJS({
           // ships the identical bare Node, so its `applyServerUpdate` staging would
           // hit the same source-only `better-sqlite3` miss without this.
           ensureNativePrebuilds: options.ensureNativePrebuilds ?? (0, system_ensure_prebuilds_js_1.buildSystemEnsureNativePrebuilds)(options.logger),
+          // Apply the closure patches ourselves. npm 12 blocks the root package's
+          // postinstall by default, and a silently-unpatched closure is refused by
+          // the validator — an update that can never apply. Idempotent, so this
+          // costs nothing where npm did run the lifecycle.
+          applyClosurePatches: options.applyClosurePatches ?? (0, system_apply_closure_patches_js_1.buildSystemApplyClosurePatches)(options.logger),
           env: options.env,
           now: options.now
         });
@@ -421021,7 +421893,7 @@ var require_logging_settings = __commonJS({
   "../../server/backend/dist/api/core/logging-settings.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.LoggingSettingsService = exports.MAX_CHANNEL_WINDOW_MS = exports.EMPTY_LOG_CHANNEL_PLANE = exports.HUB_NODE_ID = exports.LOGGING_SETTINGS_KEY = void 0;
+    exports.LoggingSettingsService = exports.MAX_CHANNEL_WINDOW_MS = exports.EMPTY_LOG_CHANNEL_PLANE = exports.OPS_LOG_RETENTION_DEFAULT_DAYS = exports.HUB_NODE_ID = exports.LOGGING_SETTINGS_KEY = void 0;
     exports.buildLogChannelPlane = buildLogChannelPlane;
     exports.toLoggingSettingsRecord = toLoggingSettingsRecord;
     exports.resolveLevel = resolveLevel;
@@ -421037,6 +421909,7 @@ var require_logging_settings = __commonJS({
     var SYSTEM_SETTINGS_COLLECTION = "system-settings";
     exports.HUB_NODE_ID = "hub";
     var LOG_LEVELS = ["debug", "info", "warn", "error"];
+    exports.OPS_LOG_RETENTION_DEFAULT_DAYS = 30;
     exports.EMPTY_LOG_CHANNEL_PLANE = {
       declarations: async () => [],
       apply: async () => {
@@ -421118,6 +421991,9 @@ var require_logging_settings = __commonJS({
         if (levelChanged) {
           next = mergeLevel(next, scope, component, patch.level ?? null, this.now());
         }
+        if (patch.opsLogRetentionDays !== void 0) {
+          next = { ...next, opsLogRetentionDays: patch.opsLogRetentionDays, updatedAt: this.now() };
+        }
         if (channelsChanged) {
           const declared = await this.channels.declarations();
           const rejected = validateChannelPatch(patch.channels ?? [], declared);
@@ -421207,6 +422083,7 @@ var require_logging_settings = __commonJS({
           activeWindows: await this.describeWindows(),
           channels: await this.declaredChannels(),
           activeChannels: describeChannelWindows(record ?? {}, this.now()),
+          opsLogRetentionDays: record?.opsLogRetentionDays ?? exports.OPS_LOG_RETENTION_DEFAULT_DAYS,
           persisted: record !== null
         };
       }
@@ -434655,6 +435532,7 @@ var require_server_update_service = __commonJS({
     var index_js_1 = require_server_root();
     var update_availability_emitter_js_1 = require_update_availability_emitter();
     var system_ensure_prebuilds_js_1 = require_system_ensure_prebuilds();
+    var system_apply_closure_patches_js_1 = require_system_apply_closure_patches();
     var system_exec_npm_js_1 = require_system_exec_npm();
     var ServerUpdateService = class extends index_js_1.RootUpdateService {
       updateAvailability;
@@ -434688,6 +435566,11 @@ var require_server_update_service = __commonJS({
           // native-prebuild validator refuses the swap (toolchain-less packaged
           // desktop). No-op on docker where the install already carried it.
           ensureNativePrebuilds: options.ensureNativePrebuilds ?? (0, system_ensure_prebuilds_js_1.buildSystemEnsureNativePrebuilds)(options.logger),
+          // Apply the closure patches ourselves. npm 12 blocks the root package's
+          // postinstall by default, and a silently-unpatched closure is refused by
+          // the validator — an update that can never apply. Idempotent, so this
+          // costs nothing where npm did run the lifecycle.
+          applyClosurePatches: options.applyClosurePatches ?? (0, system_apply_closure_patches_js_1.buildSystemApplyClosurePatches)(options.logger),
           env: options.env,
           now: options.now
         });