@camstack/addon-pipeline 1.2.106 → 1.2.107

package/dist/{addon-utils-BEzVJ0xg.js → addon-utils-Vv2dCqA2.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-BSeR_hVv.js");
+const require_dist = require("./dist-L-1LMGQs.js");
 require("node:crypto");
 let node_path = require("node:path");
 node_path = require_dist.__toESM(node_path, 1);

package/dist/audio-analyzer/index.js

@@ -2,9 +2,9 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-BSeR_hVv.js");
-const require_process_memory = require("../process-memory-C33u3tQz.js");
-const require_addon_utils = require("../addon-utils-BEzVJ0xg.js");
+const require_dist = require("../dist-L-1LMGQs.js");
+const require_process_memory = require("../process-memory-CgrbLo3l.js");
+const require_addon_utils = require("../addon-utils-Vv2dCqA2.js");
 let node_path = require("node:path");
 node_path = require_dist.__toESM(node_path);
 let node_fs = require("node:fs");

package/dist/audio-analyzer/index.mjs

@@ -1,6 +1,6 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { Ct as hydrateSchema, K as mapAudioLabelToMacro, O as audioAnalysisCapability, at as resolvePoolMemoryPolicy, b as PoolMemoryWatchdog, ft as errMsg, g as HF_BASE_URL, k as audioAnalyzerCapability, n as AUDIO_BACKEND_CHOICES, s as DEFAULT_AUDIO_ANALYZER_CONFIG, vt as BaseAddon } from "../dist-lITI1Bn5.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-CEKVKfwg.mjs";
+import { A as audioAnalyzerCapability, Et as hydrateSchema, _ as HF_BASE_URL, ct as resolvePoolMemoryPolicy, ht as errMsg, k as audioAnalysisCapability, n as AUDIO_BACKEND_CHOICES, q as mapAudioLabelToMacro, s as DEFAULT_AUDIO_ANALYZER_CONFIG, x as PoolMemoryWatchdog, xt as BaseAddon } from "../dist-CkXAzTZ2.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-DlSOzuHP.mjs";
 import { i as downloadFile } from "../addon-utils-A2S9D7pu.mjs";
 import * as path$1 from "node:path";
 import * as fs from "node:fs";

package/dist/detection-pipeline/index.js

@@ -2,11 +2,11 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-BSeR_hVv.js");
-const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-BNsp9k8r.js");
-const require_lazy_sharp = require("../lazy-sharp-CBohM8D8.js");
-const require_process_memory = require("../process-memory-C33u3tQz.js");
-const require_addon_utils = require("../addon-utils-BEzVJ0xg.js");
+const require_dist = require("../dist-L-1LMGQs.js");
+const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-DwAho7HD.js");
+const require_lazy_sharp = require("../lazy-sharp-DfbyQxET.js");
+const require_process_memory = require("../process-memory-CgrbLo3l.js");
+const require_addon_utils = require("../addon-utils-Vv2dCqA2.js");
 let sharp = require("sharp");
 sharp = require_dist.__toESM(sharp);
 let node_child_process = require("node:child_process");
@@ -5454,7 +5454,7 @@ function collectUnknownAddonIssues(steps, getStepDef = require_event_loop_stall_
 * `diagnostics.substitutions` instead of happening silently. The caller
 * (the provider) owns logging + dedup for both.
 */
-function resolveInputSteps(steps, format, engine, clusterModels) {
+function resolveInputSteps(steps, format, engine, clusterModels, clusterSettings) {
 	const resolvedSteps = [];
 	const unknownAddonIds = [];
 	const substitutions = [];
@@ -5476,12 +5476,13 @@ function resolveInputSteps(steps, format, engine, clusterModels) {
 					format: verdict.format,
 					formatsShipped: verdict.formatsShipped
 				});
-				const childResult = s.children ? resolveInputSteps(s.children, format, engine, clusterModels) : null;
+				const childResult = s.children ? resolveInputSteps(s.children, format, engine, clusterModels, clusterSettings) : null;
 				if (childResult) {
 					unknownAddonIds.push(...childResult.diagnostics.unknownAddonIds);
 					substitutions.push(...childResult.diagnostics.substitutions);
 					clusterRefusals.push(...childResult.diagnostics.clusterRefusals);
 				}
+				const settings = require_dist.overlayClusterStepSettings(s.addonId, s.settings, clusterSettings ?? {});
 				resolvedSteps.push({
 					addonId: s.addonId,
 					addonName: def.name,
@@ -5491,7 +5492,7 @@ function resolveInputSteps(steps, format, engine, clusterModels) {
 					enabled: s.enabled,
 					modelId: verdict.modelId,
 					children: childResult ? childResult.steps : [],
-					...s.settings ? { settings: { ...s.settings } } : {}
+					...settings ? { settings } : {}
 				});
 				continue;
 			}
@@ -5504,12 +5505,13 @@ function resolveInputSteps(steps, format, engine, clusterModels) {
 			running: runningModelId,
 			format
 		});
-		const childResult = s.children ? resolveInputSteps(s.children, format, engine, clusterModels) : null;
+		const childResult = s.children ? resolveInputSteps(s.children, format, engine, clusterModels, clusterSettings) : null;
 		if (childResult) {
 			unknownAddonIds.push(...childResult.diagnostics.unknownAddonIds);
 			substitutions.push(...childResult.diagnostics.substitutions);
 			clusterRefusals.push(...childResult.diagnostics.clusterRefusals);
 		}
+		const settings = require_dist.overlayClusterStepSettings(s.addonId, s.settings, clusterSettings ?? {});
 		resolvedSteps.push({
 			addonId: s.addonId,
 			addonName: def.name,
@@ -5519,7 +5521,7 @@ function resolveInputSteps(steps, format, engine, clusterModels) {
 			enabled: s.enabled,
 			modelId: runningModelId,
 			children: childResult ? childResult.steps : [],
-			...s.settings ? { settings: { ...s.settings } } : {}
+			...settings ? { settings } : {}
 		});
 	}
 	return {
@@ -5608,6 +5610,7 @@ var CLUSTER_MODEL_OWNER_ADDON_ID = "pipeline-orchestrator";
 /** TTL-cached read of the cluster model row. */
 var ClusterModelSource = class {
 	models = require_dist.DEFAULT_CLUSTER_STEP_MODELS;
+	settings = require_dist.DEFAULT_CLUSTER_STEP_SETTINGS;
 	lastReadAtMs = Number.NEGATIVE_INFINITY;
 	inFlight = null;
 	logger;
@@ -5622,6 +5625,10 @@ var ClusterModelSource = class {
 	current() {
 		return this.models;
 	}
+	/** Cluster-scoped step knobs in force right now (admission floors, …). */
+	currentSettings() {
+		return this.settings;
+	}
 	/**
 	* Re-read if the cached row has expired. Concurrent callers share one
 	* in-flight read; a failure keeps the LAST KNOWN row.
@@ -5637,9 +5644,16 @@ var ClusterModelSource = class {
 	}
 	async read(api) {
 		try {
-			const next = require_dist.pickClusterStepModels(await api.addonSettings.getGlobalSettings.query({ addonId: CLUSTER_MODEL_OWNER_ADDON_ID }));
+			const view = await api.addonSettings.getGlobalSettings.query({ addonId: CLUSTER_MODEL_OWNER_ADDON_ID });
+			const next = require_dist.pickClusterStepModels(view);
+			const nextSettings = require_dist.pickClusterStepSettings(view);
 			this.lastReadAtMs = this.now();
 			const changed = Object.keys(next).filter((stepId) => next[stepId] !== this.models[stepId]);
+			const settingsChanged = Object.keys(nextSettings).some((stepId) => {
+				const from = this.settings[stepId] ?? {};
+				const to = nextSettings[stepId] ?? {};
+				return [...new Set([...Object.keys(from), ...Object.keys(to)])].some((key) => from[key] !== to[key]);
+			});
 			if (changed.length > 0) {
 				this.logger.info("cluster step model changed — vectors already stored by the previous model need a re-embed pass", { meta: { changed: changed.map((stepId) => ({
 					stepId,
@@ -5648,6 +5662,13 @@ var ClusterModelSource = class {
 				})) } });
 				this.models = next;
 			}
+			if (settingsChanged) {
+				this.logger.info("cluster step settings changed", { meta: {
+					from: { ...this.settings },
+					to: { ...nextSettings }
+				} });
+				this.settings = nextSettings;
+			}
 		} catch (err) {
 			this.logger.warn("cluster step model read failed — keeping the last known row", { meta: {
 				owner: CLUSTER_MODEL_OWNER_ADDON_ID,
@@ -7504,7 +7525,7 @@ var DetectionPipelineProvider = class DetectionPipelineProvider {
 		backend: this.currentEngine.backend,
 		device: this.currentEngine.device ?? null
 	}, clusterRefusalsOut) {
-		const { steps: resolvedSteps, diagnostics } = resolveInputSteps(steps, format, engine, this.clusterModels.current());
+		const { steps: resolvedSteps, diagnostics } = resolveInputSteps(steps, format, engine, this.clusterModels.current(), this.clusterModels.currentSettings());
 		if (clusterRefusalsOut) clusterRefusalsOut.push(...diagnostics.clusterRefusals);
 		for (const addonId of diagnostics.unknownAddonIds) this.logLiveDispatchIssueOnce(`unknown:${addonId}`, () => this.log.warn("Live pipeline step references an unknown addon — dropping step", { meta: { addonId } }));
 		for (const sub of diagnostics.substitutions) this.logLiveDispatchIssueOnce(`${sub.addonId}|${sub.chosen}|${sub.running}|${sub.format}`, () => this.log.info("Live pipeline step model substituted for engine format (node-local)", { meta: {

package/dist/detection-pipeline/index.mjs

@@ -1,8 +1,8 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { $ as pipelineExecutorCapability, B as detectionPipelineCapability, Ct as hydrateSchema, Dt as nodePin, E as YAMNET_TO_MACRO, F as defaultDeviceFor$1, Ht as union, Nt as array, Ot as parseJsonUnknown, St as createEvent, U as enumerateInferenceDevices, Ut as EventCategory, Vt as string, W as evaluateZoneRules, X as pickClusterStepModels, at as resolvePoolMemoryPolicy, b as PoolMemoryWatchdog, c as DEFAULT_CLUSTER_STEP_MODELS, f as DEVICE_BACKEND_TO_FORMAT, ft as errMsg, jt as sleep, rt as resolveClusterStepModelId, st as runtimeDevices$1, t as APPLE_SA_TO_MACRO, ut as supportedRuntimes$1, vt as BaseAddon, zt as object } from "../dist-lITI1Bn5.mjs";
-import { a as getDefaultModelForFormat, c as getStepDefinition, i as ALL_STEPS, l as resolveModelForFormat, n as startEventLoopStallMonitor, o as getDefaultModelForFormatFromDef, r as ALL_PIPELINE_STEPS, s as getStep, u as landmarkPrecisionVerdict } from "../event-loop-stall-monitor-0VvjTRDP.mjs";
+import { $ as pickClusterStepSettings, At as nodePin, D as YAMNET_TO_MACRO, Et as hydrateSchema, G as evaluateZoneRules, Gt as union, Ht as object, I as defaultDeviceFor$1, It as array, Kt as EventCategory, Pt as sleep, Q as pickClusterStepModels, Tt as createEvent, V as detectionPipelineCapability, W as enumerateInferenceDevices, Wt as string, X as overlayClusterStepSettings, c as DEFAULT_CLUSTER_STEP_MODELS, ct as resolvePoolMemoryPolicy, ht as errMsg, jt as parseJsonUnknown, l as DEFAULT_CLUSTER_STEP_SETTINGS, nt as pipelineExecutorCapability, ot as resolveClusterStepModelId, p as DEVICE_BACKEND_TO_FORMAT, pt as supportedRuntimes$1, t as APPLE_SA_TO_MACRO, ut as runtimeDevices$1, x as PoolMemoryWatchdog, xt as BaseAddon } from "../dist-CkXAzTZ2.mjs";
+import { a as getDefaultModelForFormat, c as getStepDefinition, i as ALL_STEPS, l as resolveModelForFormat, n as startEventLoopStallMonitor, o as getDefaultModelForFormatFromDef, r as ALL_PIPELINE_STEPS, s as getStep, u as landmarkPrecisionVerdict } from "../event-loop-stall-monitor-fHkfgmlw.mjs";
 import { t as getSharp } from "../lazy-sharp-6oymT_yf.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-CEKVKfwg.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-DlSOzuHP.mjs";
 import { a as ensureModel, o as isModelDownloaded, r as deleteModelFromDisk } from "../addon-utils-A2S9D7pu.mjs";
 import sharp from "sharp";
 import { spawn } from "node:child_process";
@@ -5447,7 +5447,7 @@ function collectUnknownAddonIssues(steps, getStepDef = getStepDefinition) {
 * `diagnostics.substitutions` instead of happening silently. The caller
 * (the provider) owns logging + dedup for both.
 */
-function resolveInputSteps(steps, format, engine, clusterModels) {
+function resolveInputSteps(steps, format, engine, clusterModels, clusterSettings) {
 	const resolvedSteps = [];
 	const unknownAddonIds = [];
 	const substitutions = [];
@@ -5469,12 +5469,13 @@ function resolveInputSteps(steps, format, engine, clusterModels) {
 					format: verdict.format,
 					formatsShipped: verdict.formatsShipped
 				});
-				const childResult = s.children ? resolveInputSteps(s.children, format, engine, clusterModels) : null;
+				const childResult = s.children ? resolveInputSteps(s.children, format, engine, clusterModels, clusterSettings) : null;
 				if (childResult) {
 					unknownAddonIds.push(...childResult.diagnostics.unknownAddonIds);
 					substitutions.push(...childResult.diagnostics.substitutions);
 					clusterRefusals.push(...childResult.diagnostics.clusterRefusals);
 				}
+				const settings = overlayClusterStepSettings(s.addonId, s.settings, clusterSettings ?? {});
 				resolvedSteps.push({
 					addonId: s.addonId,
 					addonName: def.name,
@@ -5484,7 +5485,7 @@ function resolveInputSteps(steps, format, engine, clusterModels) {
 					enabled: s.enabled,
 					modelId: verdict.modelId,
 					children: childResult ? childResult.steps : [],
-					...s.settings ? { settings: { ...s.settings } } : {}
+					...settings ? { settings } : {}
 				});
 				continue;
 			}
@@ -5497,12 +5498,13 @@ function resolveInputSteps(steps, format, engine, clusterModels) {
 			running: runningModelId,
 			format
 		});
-		const childResult = s.children ? resolveInputSteps(s.children, format, engine, clusterModels) : null;
+		const childResult = s.children ? resolveInputSteps(s.children, format, engine, clusterModels, clusterSettings) : null;
 		if (childResult) {
 			unknownAddonIds.push(...childResult.diagnostics.unknownAddonIds);
 			substitutions.push(...childResult.diagnostics.substitutions);
 			clusterRefusals.push(...childResult.diagnostics.clusterRefusals);
 		}
+		const settings = overlayClusterStepSettings(s.addonId, s.settings, clusterSettings ?? {});
 		resolvedSteps.push({
 			addonId: s.addonId,
 			addonName: def.name,
@@ -5512,7 +5514,7 @@ function resolveInputSteps(steps, format, engine, clusterModels) {
 			enabled: s.enabled,
 			modelId: runningModelId,
 			children: childResult ? childResult.steps : [],
-			...s.settings ? { settings: { ...s.settings } } : {}
+			...settings ? { settings } : {}
 		});
 	}
 	return {
@@ -5601,6 +5603,7 @@ var CLUSTER_MODEL_OWNER_ADDON_ID = "pipeline-orchestrator";
 /** TTL-cached read of the cluster model row. */
 var ClusterModelSource = class {
 	models = DEFAULT_CLUSTER_STEP_MODELS;
+	settings = DEFAULT_CLUSTER_STEP_SETTINGS;
 	lastReadAtMs = Number.NEGATIVE_INFINITY;
 	inFlight = null;
 	logger;
@@ -5615,6 +5618,10 @@ var ClusterModelSource = class {
 	current() {
 		return this.models;
 	}
+	/** Cluster-scoped step knobs in force right now (admission floors, …). */
+	currentSettings() {
+		return this.settings;
+	}
 	/**
 	* Re-read if the cached row has expired. Concurrent callers share one
 	* in-flight read; a failure keeps the LAST KNOWN row.
@@ -5630,9 +5637,16 @@ var ClusterModelSource = class {
 	}
 	async read(api) {
 		try {
-			const next = pickClusterStepModels(await api.addonSettings.getGlobalSettings.query({ addonId: CLUSTER_MODEL_OWNER_ADDON_ID }));
+			const view = await api.addonSettings.getGlobalSettings.query({ addonId: CLUSTER_MODEL_OWNER_ADDON_ID });
+			const next = pickClusterStepModels(view);
+			const nextSettings = pickClusterStepSettings(view);
 			this.lastReadAtMs = this.now();
 			const changed = Object.keys(next).filter((stepId) => next[stepId] !== this.models[stepId]);
+			const settingsChanged = Object.keys(nextSettings).some((stepId) => {
+				const from = this.settings[stepId] ?? {};
+				const to = nextSettings[stepId] ?? {};
+				return [...new Set([...Object.keys(from), ...Object.keys(to)])].some((key) => from[key] !== to[key]);
+			});
 			if (changed.length > 0) {
 				this.logger.info("cluster step model changed — vectors already stored by the previous model need a re-embed pass", { meta: { changed: changed.map((stepId) => ({
 					stepId,
@@ -5641,6 +5655,13 @@ var ClusterModelSource = class {
 				})) } });
 				this.models = next;
 			}
+			if (settingsChanged) {
+				this.logger.info("cluster step settings changed", { meta: {
+					from: { ...this.settings },
+					to: { ...nextSettings }
+				} });
+				this.settings = nextSettings;
+			}
 		} catch (err) {
 			this.logger.warn("cluster step model read failed — keeping the last known row", { meta: {
 				owner: CLUSTER_MODEL_OWNER_ADDON_ID,
@@ -7497,7 +7518,7 @@ var DetectionPipelineProvider = class DetectionPipelineProvider {
 		backend: this.currentEngine.backend,
 		device: this.currentEngine.device ?? null
 	}, clusterRefusalsOut) {
-		const { steps: resolvedSteps, diagnostics } = resolveInputSteps(steps, format, engine, this.clusterModels.current());
+		const { steps: resolvedSteps, diagnostics } = resolveInputSteps(steps, format, engine, this.clusterModels.current(), this.clusterModels.currentSettings());
 		if (clusterRefusalsOut) clusterRefusalsOut.push(...diagnostics.clusterRefusals);
 		for (const addonId of diagnostics.unknownAddonIds) this.logLiveDispatchIssueOnce(`unknown:${addonId}`, () => this.log.warn("Live pipeline step references an unknown addon — dropping step", { meta: { addonId } }));
 		for (const sub of diagnostics.substitutions) this.logLiveDispatchIssueOnce(`${sub.addonId}|${sub.chosen}|${sub.running}|${sub.format}`, () => this.log.info("Live pipeline step model substituted for engine format (node-local)", { meta: {

package/dist/{dist-lITI1Bn5.mjs → dist-CkXAzTZ2.mjs}

@@ -21682,7 +21682,12 @@ var TerminalSessionInfoSchema = object({
 var TerminalProfileInfoSchema = object({
 	profileId: string(),
 	label: string(),
-	description: string().optional()
+	description: string().optional(),
+	/** Spawn defaults the instance form copies on create. */
+	executable: string().optional(),
+	args: array(string()).readonly().optional(),
+	cwd: string().optional(),
+	environment: array(string()).readonly().optional()
 });
 /**
 * A durable operator-created Terminal instance. Profiles are templates; only
@@ -21695,7 +21700,11 @@ var TerminalInstanceInfoSchema = object({
 	profileId: string(),
 	profileLabel: string(),
 	name: string(),
-	enabled: boolean()
+	enabled: boolean(),
+	executable: string(),
+	args: array(string()).readonly(),
+	cwd: string(),
+	environment: array(string()).readonly()
 });
 var TerminalLegacyCameraSchema = object({
 	stableId: string(),
@@ -21725,7 +21734,21 @@ var TerminalOutputBatchSchema = object({
 method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }), method(_void(), array(TerminalInstanceInfoSchema).readonly(), { auth: "admin" }), method(object({
 	targetNodeId: string().min(1),
 	profileId: string().min(1),
-	name: string().trim().min(1).max(160).optional()
+	name: string().trim().min(1).max(160).optional(),
+	executable: string().max(1024).optional(),
+	args: array(string().max(2048)).max(64).optional(),
+	cwd: string().max(1024).optional(),
+	environment: array(string().max(4096)).max(64).optional()
+}), TerminalInstanceInfoSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	instanceId: string().min(1),
+	name: string().trim().min(1).max(160).optional(),
+	executable: string().max(1024).optional(),
+	args: array(string().max(2048)).max(64).optional(),
+	cwd: string().max(1024).optional(),
+	environment: array(string().max(4096)).max(64).optional()
 }), TerminalInstanceInfoSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -21747,7 +21770,11 @@ method(_void(), array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }),
 }), method(_void(), array(TerminalSessionInfoSchema).readonly(), { auth: "admin" }), method(object({
 	profileId: string(),
 	cols: number().int().positive(),
-	rows: number().int().positive()
+	rows: number().int().positive(),
+	executable: string().max(1024).optional(),
+	args: array(string().max(2048)).max(64).optional(),
+	cwd: string().max(1024).optional(),
+	environment: array(string().max(4096)).max(64).optional()
 }), TerminalSessionInfoSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -24842,6 +24869,20 @@ var AllowedAddressesSchema = object({
 * Network Addresses admin page and persisted by the addon.
 */
 addresses: array(string()).readonly() });
+var TlsStatusSchema = object({
+	mode: _enum([
+		"generated",
+		"uploaded",
+		"disabled"
+	]),
+	leafFingerprintSha256: string().nullable(),
+	caFingerprintSha256: string().nullable(),
+	validTo: string().nullable(),
+	sans: array(string()),
+	caCertPem: string().nullable(),
+	reissueError: string().nullable(),
+	restartRequired: boolean()
+});
 method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(object({
 	/**
 	* LEGACY HINT — do not send from new code. Kept optional so clients
@@ -24861,7 +24902,20 @@ method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(obje
 	*  to avoid mixed-content blocks in the browser. The public
 	*  tunnel always emits `https://` regardless. */
 	scheme: _enum(["http", "https"]).optional()
-}), GetConnectionEndpointsResultSchema), method(_void(), NotificationEndpointSchema), method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }), method(_void(), AllowedAddressesSchema), method(AllowedAddressesSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), AllowedAddressesSchema, { kind: "mutation" });
+}), GetConnectionEndpointsResultSchema), method(_void(), NotificationEndpointSchema), method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }), method(_void(), AllowedAddressesSchema), method(AllowedAddressesSchema, object({ success: literal(true) }), { kind: "mutation" }), method(_void(), AllowedAddressesSchema, { kind: "mutation" }), method(_void(), TlsStatusSchema), method(object({ reason: string().optional() }), TlsStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({
+	certPem: string().min(1),
+	keyPem: string().min(1),
+	caPem: string().optional()
+}), TlsStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(_void(), object({ pem: string() })), method(_void(), TlsStatusSchema, {
+	kind: "mutation",
+	auth: "admin"
+});
 object({
 	/** Lifecycle state of the lock. `jammed` means the motor reported
 	*  failure to reach the target — operator intervention required. */
@@ -30796,6 +30850,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.downloadCa": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.getAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
@@ -30820,18 +30880,36 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.getTlsStatus": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.list": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.regenerateCertificate": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.resetAllowlistToBestMatch": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
 		access: "delete"
 	},
+	"localNetwork.revertToGeneratedCertificate": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.setAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
@@ -30844,6 +30922,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.uploadCertificate": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"lockControl.lock": {
 		capName: "lock-control",
 		capScope: "device",
@@ -33724,6 +33808,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"terminalSession.updateInstance": {
+		capName: "terminal-session",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"terminalSession.writeInput": {
 		capName: "terminal-session",
 		capScope: "system",
@@ -36375,6 +36465,58 @@ function resolveClusterStepModelId(stepId, models) {
 	const chosen = models[stepId];
 	return chosen !== void 0 && chosen !== "" ? chosen : step.defaultModelId;
 }
+var CLUSTER_STEP_SETTING_FIELDS = [{
+	stepId: "face-embedding",
+	key: "minLandmarkFaceSize",
+	label: "Min face size for recognition (detection px)",
+	description: "Refuse to embed a face smaller than this IN THE DETECTION FRAME. Applies to every node — the enrolled gallery is one index, and two admission floors would fill it from two policies. 0 disables the gate.",
+	type: "slider",
+	min: 0,
+	max: 64,
+	step: 2,
+	default: 24
+}];
+function clusterStepSettingKey(stepId, fieldKey) {
+	return `clusterStepSetting:${stepId}:${fieldKey}`;
+}
+var ClusterSettingNumberSchema = number().finite();
+function readClusterStepSettings(config) {
+	const out = {};
+	for (const field of CLUSTER_STEP_SETTING_FIELDS) {
+		const parsed = ClusterSettingNumberSchema.safeParse(config[clusterStepSettingKey(field.stepId, field.key)]);
+		const value = parsed.success ? parsed.data : field.default;
+		const existing = out[field.stepId] ?? {};
+		out[field.stepId] = {
+			...existing,
+			[field.key]: value
+		};
+	}
+	return out;
+}
+var DEFAULT_CLUSTER_STEP_SETTINGS = readClusterStepSettings({});
+function pickClusterStepSettings(view) {
+	if (view === null) return DEFAULT_CLUSTER_STEP_SETTINGS;
+	const flat = {};
+	const wanted = new Set(CLUSTER_STEP_SETTING_FIELDS.map((field) => clusterStepSettingKey(field.stepId, field.key)));
+	for (const section of view.sections) for (const entry of section.fields) {
+		if (!isHydratedField$2(entry) || typeof entry.key !== "string") continue;
+		if (wanted.has(entry.key)) flat[entry.key] = entry.value;
+	}
+	return readClusterStepSettings(flat);
+}
+/**
+* Cluster knobs win over leftover per-device values. The cluster row is the
+* authority; a device-local copy is a leftover of the old per-node editor.
+*/
+function overlayClusterStepSettings(stepId, deviceSettings, cluster) {
+	const overlay = cluster[stepId];
+	if (overlay === void 0 || Object.keys(overlay).length === 0) return deviceSettings === void 0 ? void 0 : { ...deviceSettings };
+	if (deviceSettings === void 0) return { ...overlay };
+	return {
+		...deviceSettings,
+		...overlay
+	};
+}
 var DETAIL_CROP_PADDING_KEY = "detailCropPaddingRatio";
 var DETAIL_CROP_SQUARE_KEY = "detailCropSquare";
 /**
@@ -37434,4 +37576,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { pipelineExecutorCapability as $, audioKindId as A, selectAssignedProfileSlots as At, detectionPipelineCapability as B, record as Bt, RECORDING_EXPORT_MAX_READ_BYTES as C, hydrateSchema as Ct, addonWidgetsSourceCapability as D, nodePin as Dt, YAMNET_TO_MACRO as E, makeSourceBrokerId as Et, defaultDeviceFor as F, discriminatedUnion as Ft, hfModelUrl as G, egressTransportFromRequest as H, union as Ht, defineCustomActions as I, lazy as It, motionDetectionCapability as J, mapAudioLabelToMacro as K, deriveBatteryPresence as L, literal as Lt, cameraStreamsCapability as M, _enum as Mt, createHwAccelCache as N, array as Nt, audioAnalysisCapability as O, parseJsonUnknown as Ot, customAction as P, boolean as Pt, pickNativeLeaseOverride as Q, deriveDetailCropRect as R, number as Rt, RATE_CONTROL_TIGHT as S, createEvent as St, RingBuffer as T, makeProfileBrokerId as Tt, enumerateInferenceDevices as U, EventCategory as Ut, egressTranscodeSharingKey as V, string as Vt, evaluateZoneRules as W, pickClusterStepModels as X, parseProcStatus as Y, pickDetailCropConvention as Z, NativeLeaseAdmissionSchema as _, isSoftwareDecode as _t, COCO_80_LABELS as a, resolvePoolMemoryPolicy as at, PoolMemoryWatchdog as b, DeviceFeature as bt, DEFAULT_CLUSTER_STEP_MODELS as c, storageEvictableCapability as ct, DEFAULT_NATIVE_LEASE_SETTINGS as d, webrtcSessionCapability as dt, pipelineRunnerCapability as et, DEVICE_BACKEND_TO_FORMAT as f, errMsg as ft, HF_BASE_URL as g, invocationFromEncodeProfile as gt, ExportRecordSchema as h, buildFfmpegArgs as ht, BatteryStatusSchema as i, resolveEgressDecodeHwAccel as it, batteryCapability as j, sleep as jt, audioAnalyzerCapability as k, parseProfileBrokerId as kt, DEFAULT_DETAIL_CROP_CONVENTION as l, streamBrokerCapability as lt, EncodeProfileSchema as m, Fmp4BoxSplitter as mt, AUDIO_BACKEND_CHOICES as n, recordingExportCapability as nt, COCO_TO_MACRO as o, resolveRecordingProfiles as ot, EVENT_PAD_MS as p, AUDIO_PRESETS as pt, maskUrlCredentials as q, AUDIO_MACRO_LABELS as r, resolveClusterStepModelId as rt, DEFAULT_AUDIO_ANALYZER_CONFIG as s, runtimeDevices as st, APPLE_SA_TO_MACRO as t, recordingCapability as tt, DEFAULT_EVENTS_BAND_BUFFER_SEC as u, supportedRuntimes as ut, NativeLeaseSettingsSchema as v, BaseAddon as vt, RecordingConfigSchema as w, isEvent as wt, RATE_CONTROL_RELAXED as x, DeviceType as xt, OpsLogEntrySchema as y, CAM_PROFILE_ORDER as yt, deriveRecordingMode as z, object as zt };
+export { pickClusterStepSettings as $, audioAnalyzerCapability as A, nodePin as At, deriveRecordingMode as B, literal as Bt, RATE_CONTROL_TIGHT as C, DeviceFeature as Ct, YAMNET_TO_MACRO as D, isEvent as Dt, RingBuffer as E, hydrateSchema as Et, customAction as F, _enum as Ft, evaluateZoneRules as G, union as Gt, egressTranscodeSharingKey as H, object as Ht, defaultDeviceFor as I, array as It, maskUrlCredentials as J, hfModelUrl as K, EventCategory as Kt, defineCustomActions as L, boolean as Lt, batteryCapability as M, parseProfileBrokerId as Mt, cameraStreamsCapability as N, selectAssignedProfileSlots as Nt, addonWidgetsSourceCapability as O, makeProfileBrokerId as Ot, createHwAccelCache as P, sleep as Pt, pickClusterStepModels as Q, deriveBatteryPresence as R, discriminatedUnion as Rt, RATE_CONTROL_RELAXED as S, CAM_PROFILE_ORDER as St, RecordingConfigSchema as T, createEvent as Tt, egressTransportFromRequest as U, record as Ut, detectionPipelineCapability as V, number as Vt, enumerateInferenceDevices as W, string as Wt, overlayClusterStepSettings as X, motionDetectionCapability as Y, parseProcStatus as Z, HF_BASE_URL as _, Fmp4BoxSplitter as _t, COCO_80_LABELS as a, recordingExportCapability as at, OpsLogEntrySchema as b, isSoftwareDecode as bt, DEFAULT_CLUSTER_STEP_MODELS as c, resolvePoolMemoryPolicy as ct, DEFAULT_EVENTS_BAND_BUFFER_SEC as d, storageEvictableCapability as dt, pickDetailCropConvention as et, DEFAULT_NATIVE_LEASE_SETTINGS as f, streamBrokerCapability as ft, ExportRecordSchema as g, AUDIO_PRESETS as gt, EncodeProfileSchema as h, errMsg as ht, BatteryStatusSchema as i, recordingCapability as it, audioKindId as j, parseJsonUnknown as jt, audioAnalysisCapability as k, makeSourceBrokerId as kt, DEFAULT_CLUSTER_STEP_SETTINGS as l, resolveRecordingProfiles as lt, EVENT_PAD_MS as m, webrtcSessionCapability as mt, AUDIO_BACKEND_CHOICES as n, pipelineExecutorCapability as nt, COCO_TO_MACRO as o, resolveClusterStepModelId as ot, DEVICE_BACKEND_TO_FORMAT as p, supportedRuntimes as pt, mapAudioLabelToMacro as q, AUDIO_MACRO_LABELS as r, pipelineRunnerCapability as rt, DEFAULT_AUDIO_ANALYZER_CONFIG as s, resolveEgressDecodeHwAccel as st, APPLE_SA_TO_MACRO as t, pickNativeLeaseOverride as tt, DEFAULT_DETAIL_CROP_CONVENTION as u, runtimeDevices as ut, NativeLeaseAdmissionSchema as v, buildFfmpegArgs as vt, RECORDING_EXPORT_MAX_READ_BYTES as w, DeviceType as wt, PoolMemoryWatchdog as x, BaseAddon as xt, NativeLeaseSettingsSchema as y, invocationFromEncodeProfile as yt, deriveDetailCropRect as z, lazy as zt };