feat(vision): configurability — SetupWizard ANPR toggle, footer health chip, env docs

Make the vision service genuinely configurable (was env-only).

- SetupWizard: an "ANPR" checkbox on the camera form (writes config.anpr; persisted
  only when on; sq+en) — opt-in is no longer raw JSON.
- DeviceMonitor optionally takes the VisionClient and probes /health each tick, emitting
  a "vision" pseudo-device → a Vision chip (ready/degraded/offline + recognizer) in the
  booth footer when VISION_ENABLED, no chip when off. Widened the DeviceStatus category
  union (server + web) + footer maps + devices.catVision. Verified: ready/fast_alpr when
  up, 0 chips when disabled.
- apps/vision/.env.example (Python service) + a VISION_* block in apps/server/.env.example
  (Node side) + a Configuration section in opencv-anpr-service.md covering all four
  layers and the caveats: the two processes share the VISION_ prefix but need SEPARATE
  .env files; bind /analyze to 127.0.0.1; cache model weights at deploy; an unbound anpr
  camera recognizes but every read is refused.

Build + lint green.

Claude-Session: https://claude.ai/code/session_01Xcm6ikLgGoCxxHrxtjkk5V

apps/web/src/SetupWizard.tsx

@@ -322,6 +322,10 @@ function DeviceForm({
   const canDiscover = !editing && selected != null && discoverableIds.includes(selected.id);
   const pushesToBackend = selected != null && pushCapableIds.includes(selected.id);
   const isController = category === "access";
+  const isCamera = category === "camera";
+  // ANPR opt-in for a camera: when true, the VisionReader polls this camera for plates
+  // (config.anpr). Off by default. See wiki/entities/opencv-anpr-service.md.
+  const [anpr, setAnpr] = useState<boolean>(editCfg?.anpr === true);
 
   // Pre-fill scalar config fields from the existing assignment when editing.
   // (relays/controllerId/relay are model fields handled by their own state below.)
@@ -429,6 +433,8 @@ function DeviceForm({
       out.controllerId = controllerId;
       out.relay = boundRelay;
     }
+    // Camera ANPR opt-in (only persisted when on, to keep configs minimal).
+    if (isCamera && anpr) out.anpr = true;
     return out;
   }
 
@@ -584,6 +590,22 @@ function DeviceForm({
             />
           )}
 
+          {/* CAMERA: opt this camera into ANPR (the VisionReader polls it for plates). */}
+          {isCamera && (
+            <label className="my-2 flex items-start gap-2 rounded-term border border-term-border bg-term-bg p-2 text-[12px]">
+              <input
+                type="checkbox"
+                className="mt-0.5"
+                checked={anpr}
+                onChange={(e) => setAnpr(e.target.checked)}
+              />
+              <span>
+                <span className="font-semibold text-term-text">{t("setup.anpr")}</span>
+                <span className="hint mt-0.5 block">{t("setup.anprHint")}</span>
+              </span>
+            </label>
+          )}
+
           {/* Test (no save/no device change) then Save (configures + persists). */}
           <div className="mt-3 flex items-center gap-2">
             <button type="button" className="btn btn-sm" onClick={test} disabled={testing}>

apps/web/src/api.ts

@@ -647,7 +647,7 @@ export function fetchOccupancy(): Promise<Occupancy> {
 export interface DeviceStatus {
   deviceId: string;
   driverId: string;
-  category: "access" | "reader" | "camera" | "printer";
+  category: "access" | "reader" | "camera" | "printer" | "vision";
   /** Role/direction token for the footer label (NOT the vendor) — the client
    *  localises it next to the category, e.g. "Lexuesi hyrje", "Printer kabina". */
   roleKind: "entry" | "exit" | "both" | "mixed" | "lane" | "booth" | null;

apps/web/src/lib/i18n/en.ts

@@ -63,6 +63,7 @@ export const en: Catalog = {
     catReader: "Reader",
     catCamera: "Camera",
     catPrinter: "Printer",
+    catVision: "Vision",
     // Role/direction suffixes for the chip label (e.g. "Reader entry").
     role: {
       entry: "entry",
@@ -297,6 +298,9 @@ export const en: Catalog = {
     entryCooldownHint:
       "When there's no presence loop: repeat button presses are suppressed for this many seconds after a ticket. A fallback (not a guarantee) — a determined abuser can wait it out.",
     addRelay: "+ Add relay",
+    anpr: "Plate recognition (ANPR)",
+    anprHint:
+      "Enable to scan plates on this camera: the vision service reads the plate from a snapshot and feeds it as a read (advisory only — it never opens a barrier on its own). Requires the vision service running.",
     whichBarrier: "Which barrier does this device serve?",
     controller: "Controller",
     choose: "Choose…",

apps/web/src/lib/i18n/sq.ts

@@ -65,6 +65,7 @@ export const sq = {
     catReader: "Lexuesi",
     catCamera: "Kamera",
     catPrinter: "Printer",
+    catVision: "Vizioni",
     // Role/direction suffixes for the chip label (e.g. "Lexuesi hyrje").
     role: {
       entry: "hyrje",
@@ -306,6 +307,10 @@ export const sq = {
     entryCooldownHint:
       "Kur nuk ka sensor pranie: shtypjet e përsëritura të butonit shtypen për kaq sekonda pas një bilete. Zgjidhje rezervë (jo garanci) — një abuzues mund ta presë afatin.",
     addRelay: "+ Shto rele",
+    // Camera ANPR opt-in.
+    anpr: "Njohja e targave (ANPR)",
+    anprHint:
+      "Aktivizo që ky aparat të skanojë targat: shërbimi i vizionit lexon targën nga pamja dhe e dërgon si lexim (vetëm këshillues — nuk hap vetë barrierën). Kërkon shërbimin e vizionit aktiv.",
     // Binding picker.
     whichBarrier: "Cilën barrierë shërben kjo pajisje?",
     controller: "Kontrolluesi",

apps/web/src/ui/DeviceFooter.tsx

@@ -32,6 +32,7 @@ const CATEGORY_KEY: Record<DeviceStatus["category"], string> = {
   reader: "devices.catReader",
   camera: "devices.catCamera",
   printer: "devices.catPrinter",
+  vision: "devices.catVision",
 };
 
 /** i18n key for the role/direction token (null = no suffix). */
@@ -45,6 +46,7 @@ const ORDER: Record<DeviceStatus["category"], number> = {
   reader: 1,
   camera: 2,
   printer: 3,
+  vision: 4,
 };
 
 /** "Lexuesi hyrje" — category word + localised role/direction (when known). */