[blessdyb]

Summary

• add an opt-in Devices camera channel using public CoreMediaIO input-device metadata and running-state listeners
• show active, inactive, or unavailable state and record only confirmed start/stop transitions; never open capture, request camera access, read frames, or guess the owning app
• isolate the camera hardware entitlement to the sandboxed Store app, keep both extensions least-privileged, and validate the signed Store product boundary
• make Delete everything remove device history durably and preserve transitions that race the deletion boundary
• publish 0.15.12/59 documentation, release notes, generated site, and complete translations in all ten catalogs

Verification

• 848 XCTest tests passed on the exact committed tree, zero failures
• Developer ID and Mac App Store product graphs both build warning-free
• Xcode project matches project.yml in the working tree and Git index
• localization parity: 1,637/1,637 keys in all ten languages, zero missing/unused
• deterministic site build: 53 pages, zero problems; 0.15.12 release-note extraction passed
• real-machine acceptance with disposable demo data: input cameras were listed, baseline produced no event, and a camera app produced exactly one started and one stopped transition without a TCC prompt
• production app data and process were left untouched
• independent lifecycle re-review found no remaining high-confidence issues

The signed Store product entitlement check runs in CI on this exact head.

🤖 Generated with Claude Code