@camstack/addon-pipeline 1.2.137 → 1.2.139

package/dist/{dist-g0Or5_pR.mjs → dist-CTmOaCwF.mjs}

@@ -5932,6 +5932,40 @@ var BaseAddon = class {
 	deviceSettingsSchema() {
 		return null;
 	}
+	/**
+	* INTEGRATION-LEVEL SETTINGS — declare which of this addon's global sections
+	* ARE the configuration of its integration.
+	*
+	* Return the `ConfigSection.id`s, from {@link globalSettingsSchema}, that an
+	* operator should find on the addon's integration page (System →
+	* Integrations → <name>) rather than only in the cluster-wide list of every
+	* addon. Empty (the default) means the addon has no integration-level
+	* settings and no such surface is offered — this is opt-in, because whether
+	* an addon's configuration IS its integration's configuration depends on the
+	* nature of the integration.
+	*
+	* WHAT THIS IS NOT. It is not a scope. The selected sections keep living in
+	* the ONE global schema, in the ONE addon store, written by the ONE
+	* `updateGlobalSettings` path. There is deliberately no
+	* `updateIntegrationSettings`: a second write path is how a surface acquires
+	* a second store key, and this repo has shipped that twice (`btmPath@hub`,
+	* D266). Selecting sections cannot introduce a key that selecting cannot.
+	*
+	* WHY IT IS A LIST OF SECTION IDS AND NOT A MARKER ON THE SECTION.
+	* `ConfigFieldBase` used to carry `scope?: 'device' | 'global'` and it was
+	* removed with the reason recorded at
+	* `packages/types/src/interfaces/config-ui.ts:249` — *"a field's scope is
+	* determined by WHICH schema it lives in, not by a field-level marker."* A
+	* marker sprinkled across sections also has to borrow a field that already
+	* means something else; borrowing `section.tab` put the literal word
+	* "integration" into an operator-facing tab bar, because `tab` means "how to
+	* GROUP this visually" and cannot also mean "where this lives" (D269
+	* supersedes D268). One declaration, in one place, next to the schema whose
+	* ids it names.
+	*/
+	integrationSettingSections() {
+		return [];
+	}
 	async getGlobalSettings(overlay, cap, nodeId) {
 		const schema = this.globalSettingsSchema(cap);
 		if (!schema) return { sections: [] };
@@ -5942,6 +5976,55 @@ var BaseAddon = class {
 		} : projected);
 	}
 	/**
+	* The integration-level view of this addon's settings: exactly the sections
+	* named by {@link integrationSettingSections}, hydrated from the SAME store
+	* `getGlobalSettings` reads, and narrowed to cluster-scoped fields.
+	*
+	* Returns `null` when the addon declared nothing — an addon that opts out has
+	* no integration settings surface at all, rather than an empty one that reads
+	* as a failed load.
+	*
+	* Three properties hold BY CONSTRUCTION, which is why they are here in core
+	* and not in whichever UI happens to render this:
+	*
+	*  1. **One key.** The payload is a SUBSET of the global schema, so a field
+	*     shown here is the same field, with the same bare key, that the addon's
+	*     own page shows. There is no integration-specific writer — callers save
+	*     through `updateGlobalSettings` — so a second store key is unreachable,
+	*     not merely discouraged.
+	*  2. **No node scope.** `perNode: true` fields are DROPPED. Their store key
+	*     is `<key>@<nodeId>` and an integration is not a node; whichever node
+	*     such a field silently picked would be a wrong answer for the operator
+	*     who opened the page (D266).
+	*  3. **No silent typo.** A declared id that names no section throws. The
+	*     alternative — skip it — turns a rename into a surface that quietly
+	*     empties, which looks exactly like an addon with nothing to configure.
+	*/
+	async getIntegrationSettings(nodeId) {
+		const declared = this.integrationSettingSections();
+		if (declared.length === 0) return null;
+		const schema = this.globalSettingsSchema();
+		if (!schema) throw new Error(`${this.constructor.name}: integrationSettingSections() names [${declared.join(", ")}] but globalSettingsSchema() returns null.`);
+		const byId = new Map(schema.sections.map((section) => [section.id, section]));
+		const sections = [];
+		for (const id of declared) {
+			const section = byId.get(id);
+			if (!section) throw new Error(`${this.constructor.name}: integrationSettingSections() names unknown section "${id}". Known sections: [${[...byId.keys()].join(", ")}].`);
+			const fields = dropPerNodeFields(section.fields);
+			if (fields.length === 0) continue;
+			sections.push({
+				...section,
+				fields
+			});
+		}
+		if (sections.length === 0) return null;
+		const projected = await this.resolveGlobalStore(nodeId);
+		return hydrateSchema({
+			...schema,
+			sections
+		}, projected);
+	}
+	/**
 	* The raw addon store PROJECTED onto the target node's bare per-node keys:
 	* every `perNode: true` field carries THAT node's scoped value on its bare
 	* key (absent scoped key ⇒ key absent, so the schema `default` wins — no
@@ -6245,6 +6328,41 @@ var BaseAddon = class {
 * `hydrateSchema` does. Valueless structural fields (separator/info/…)
 * don't declare `perNode` and are excluded by the `in` narrowing.
 */
+/**
+* The same fields with every `perNode: true` one removed, recursing into layout
+* containers exactly as {@link collectPerNodeFieldKeys} does. A container left
+* with no child is dropped rather than rendered empty.
+*
+* Used by `getIntegrationSettings`: an integration is not a node, so a field
+* whose store key is `<key>@<nodeId>` has no node to belong to there.
+*/
+function dropPerNodeFields(fields) {
+	const kept = [];
+	for (const field of fields) {
+		if (field.type === "group") {
+			const inner = dropPerNodeFields(field.fields);
+			if (inner.length > 0) kept.push({
+				...field,
+				fields: inner
+			});
+			continue;
+		}
+		if (field.type === "sub-tabs") {
+			const tabs = field.tabs.map((tab) => ({
+				...tab,
+				fields: dropPerNodeFields(tab.fields)
+			})).filter((tab) => tab.fields.length > 0);
+			if (tabs.length > 0) kept.push({
+				...field,
+				tabs
+			});
+			continue;
+		}
+		if ("perNode" in field && field.perNode === true) continue;
+		kept.push(field);
+	}
+	return kept;
+}
 function collectPerNodeFieldKeys(fields) {
 	const collected = [];
 	for (const field of fields) {
@@ -7173,6 +7291,40 @@ method(object({ deviceId: number() }), array(StreamSourceEntrySchema)), method(o
 	input: unknown()
 }), unknown(), { kind: "mutation" }), method(object({ deviceId: number() }), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), unknown().nullable()), method(object({ deviceId: number() }), RawStateResultSchema.nullable(), { auth: "protected" });
 /**
+* The ONE retry schedule for work that can fail simply because the node was
+* still booting.
+*
+* The measured failure (docs/design/boot-to-usable-camera.md, item E): a hub
+* boot that serialised its addon graph starved every driver dial on it. Fifteen
+* Hikvision devices logged `Initial probe did not complete — scheduling retry
+* chain {firstRetryMs=300000}` and then sat unprobed for five minutes, long
+* after the condition that caused the failure had gone. The Tailscale addon's
+* auto-rejoin carried a byte-identical schedule, armed from `initialize()`, for
+* the same reason.
+*
+* The shape that fixes it: **two cheap attempts first, then the long tail.**
+*
+*  - 15 s / 60 s — the boot window. Anything that failed because the node was
+*    busy is recovered here, before an operator can open the UI and see a
+*    camera that is wrong about itself.
+*  - 5 m → 90 m — the genuinely-offline case. A battery cam that is asleep, a
+*    VLAN that is down, a peer that has not come back. Unchanged in intent from
+*    the schedule this replaces (~3 h 30 m of coverage): here ~3 h 21 m, then
+*    the chain ends and manual re-arm (reprobe / restart) is the only path.
+*
+* Bounded on purpose — see D6. A chain that never gives up is a busy loop with
+* extra steps.
+*/
+var BOOT_RECOVERY_BACKOFF_MS = [
+	15e3,
+	6e4,
+	5 * 6e4,
+	15 * 6e4,
+	30 * 6e4,
+	60 * 6e4,
+	90 * 6e4
+];
+/**
 * Type-safe JSON parsing helpers.
 *
 * `JSON.parse` is typed as `any` in lib.es5.d.ts, which triggers
@@ -10708,6 +10860,9 @@ method(object({
 	kind: "mutation",
 	auth: "admin"
 }), method(object({
+	addonId: string(),
+	nodeId: string().optional()
+}), SettingsSchemaWithValuesSchema.nullable()), method(object({
 	addonId: string(),
 	deviceId: number(),
 	nodeId: string().optional()
@@ -11095,8 +11250,7 @@ var AUDIO_BACKEND_CHOICES = [
 ];
 var DEFAULT_AUDIO_ANALYZER_CONFIG = {
 	audioBackend: "auto",
-	probedBestAudioBackend: "",
-	selectedAudioModel: ""
+	probedBestAudioBackend: ""
 };
 var audioAnalyzerCapability = {
 	name: "audio-analyzer",
@@ -30756,6 +30910,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"addonSettings.getIntegrationSettings": {
+		capName: "addon-settings",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"addonSettings.updateDeviceSettings": {
 		capName: "addon-settings",
 		capScope: "system",
@@ -39711,4 +39871,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { loadContributionCapability as $, union as $t, audioAnalysisCapability as A, CAM_PROFILE_ORDER as At, defineCustomActions as B, parseProfileBrokerId as Bt, RATE_CONTROL_RELAXED as C, errMsg as Ct, RingBuffer as D, invocationFromEncodeProfile as Dt, RecordingConfigSchema as E, buildFfmpegArgs as Et, createHwAccelCache as F, isEvent as Ft, egressTranscodeSharingKey as G, boolean as Gt, deriveDetailCropRect as H, sleep as Ht, createLogChannelsProvider as I, makeProfileBrokerId as It, evaluateSensorEdge as J, literal as Jt, egressTransportFromRequest as K, discriminatedUnion as Kt, customAction as L, makeSourceBrokerId as Lt, audioKindId as M, DeviceType as Mt, batteryCapability as N, createEvent as Nt, YAMNET_TO_MACRO as O, isSoftwareDecode as Ot, cameraStreamsCapability as P, hydrateSchema as Pt, isFirstLevelMacroClass as Q, string as Qt, declareLogChannel as R, nodePin as Rt, PoolMemoryWatchdog as S, webrtcSessionCapability as St, RECORDING_EXPORT_MAX_READ_BYTES as T, Fmp4BoxSplitter as Tt, deriveRecordingMode as U, _enum as Ut, deriveBatteryPresence as V, selectAssignedProfileSlots as Vt, detectionPipelineCapability as W, array as Wt, hfModelUrl as X, object as Xt, evaluateZoneRules as Y, number as Yt, inferModelProvider as Z, record as Zt, ExportRecordSchema as _, resolveRecordingProfiles as _t, COCO_80_LABELS as a, parseProcStatus as at, NativeLeaseSettingsSchema as b, streamBrokerCapability as bt, DEFAULT_CLUSTER_STEP_MODELS as c, pickDetailCropConvention as ct, DEFAULT_EVENTS_BAND_BUFFER_SEC as d, pipelineRunnerCapability as dt, EventCategory as en, logChannelsCapability as et, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as f, recordingCapability as ft, EncodeProfileSchema as g, resolvePoolMemoryPolicy as gt, EVENT_PAD_MS as h, resolveEgressDecodeHwAccel as ht, BatteryStatusSchema as i, overlayClusterStepSettings as it, audioAnalyzerCapability as j, DeviceFeature as jt, addonWidgetsSourceCapability as k, BaseAddon as kt, DEFAULT_CLUSTER_STEP_SETTINGS as l, pickNativeLeaseOverride as lt, DEVICE_BACKEND_TO_FORMAT as m, resolveClusterStepModelId as mt, AUDIO_BACKEND_CHOICES as n, maskUrlCredentials as nt, COCO_TO_MACRO as o, pickClusterStepModels as ot, DEFAULT_NATIVE_LEASE_SETTINGS as p, recordingExportCapability as pt, enumerateInferenceDevices as q, lazy as qt, AUDIO_MACRO_LABELS as r, motionDetectionCapability as rt, DEFAULT_AUDIO_ANALYZER_CONFIG as s, pickClusterStepSettings as st, APPLE_SA_TO_MACRO as t, mapAudioLabelToMacro as tt, DEFAULT_DETAIL_CROP_CONVENTION as u, pipelineExecutorCapability as ut, HF_BASE_URL as v, runtimeDevices as vt, RATE_CONTROL_TIGHT as w, AUDIO_PRESETS as wt, OpsLogEntrySchema as x, supportedRuntimes as xt, NativeLeaseAdmissionSchema as y, storageEvictableCapability as yt, defaultDeviceFor as z, parseJsonUnknown as zt };
+export { loadContributionCapability as $, string as $t, audioAnalysisCapability as A, BaseAddon as At, defineCustomActions as B, parseJsonUnknown as Bt, RATE_CONTROL_RELAXED as C, errMsg as Ct, RingBuffer as D, invocationFromEncodeProfile as Dt, RecordingConfigSchema as E, buildFfmpegArgs as Et, createHwAccelCache as F, hydrateSchema as Ft, egressTranscodeSharingKey as G, array as Gt, deriveDetailCropRect as H, selectAssignedProfileSlots as Ht, createLogChannelsProvider as I, isEvent as It, evaluateSensorEdge as J, lazy as Jt, egressTransportFromRequest as K, boolean as Kt, customAction as L, makeProfileBrokerId as Lt, audioKindId as M, DeviceFeature as Mt, batteryCapability as N, DeviceType as Nt, YAMNET_TO_MACRO as O, isSoftwareDecode as Ot, cameraStreamsCapability as P, createEvent as Pt, isFirstLevelMacroClass as Q, record as Qt, declareLogChannel as R, makeSourceBrokerId as Rt, PoolMemoryWatchdog as S, webrtcSessionCapability as St, RECORDING_EXPORT_MAX_READ_BYTES as T, Fmp4BoxSplitter as Tt, deriveRecordingMode as U, sleep as Ut, deriveBatteryPresence as V, parseProfileBrokerId as Vt, detectionPipelineCapability as W, _enum as Wt, hfModelUrl as X, number as Xt, evaluateZoneRules as Y, literal as Yt, inferModelProvider as Z, object as Zt, ExportRecordSchema as _, resolveRecordingProfiles as _t, COCO_80_LABELS as a, parseProcStatus as at, NativeLeaseSettingsSchema as b, streamBrokerCapability as bt, DEFAULT_CLUSTER_STEP_MODELS as c, pickDetailCropConvention as ct, DEFAULT_EVENTS_BAND_BUFFER_SEC as d, pipelineRunnerCapability as dt, union as en, logChannelsCapability as et, DEFAULT_FIRST_SIGHTING_FRESHNESS_MS as f, recordingCapability as ft, EncodeProfileSchema as g, resolvePoolMemoryPolicy as gt, EVENT_PAD_MS as h, resolveEgressDecodeHwAccel as ht, BatteryStatusSchema as i, overlayClusterStepSettings as it, audioAnalyzerCapability as j, CAM_PROFILE_ORDER as jt, addonWidgetsSourceCapability as k, BOOT_RECOVERY_BACKOFF_MS as kt, DEFAULT_CLUSTER_STEP_SETTINGS as l, pickNativeLeaseOverride as lt, DEVICE_BACKEND_TO_FORMAT as m, resolveClusterStepModelId as mt, AUDIO_BACKEND_CHOICES as n, maskUrlCredentials as nt, COCO_TO_MACRO as o, pickClusterStepModels as ot, DEFAULT_NATIVE_LEASE_SETTINGS as p, recordingExportCapability as pt, enumerateInferenceDevices as q, discriminatedUnion as qt, AUDIO_MACRO_LABELS as r, motionDetectionCapability as rt, DEFAULT_AUDIO_ANALYZER_CONFIG as s, pickClusterStepSettings as st, APPLE_SA_TO_MACRO as t, EventCategory as tn, mapAudioLabelToMacro as tt, DEFAULT_DETAIL_CROP_CONVENTION as u, pipelineExecutorCapability as ut, HF_BASE_URL as v, runtimeDevices as vt, RATE_CONTROL_TIGHT as w, AUDIO_PRESETS as wt, OpsLogEntrySchema as x, supportedRuntimes as xt, NativeLeaseAdmissionSchema as y, storageEvictableCapability as yt, defaultDeviceFor as z, nodePin as zt };

package/dist/{dist-4EMKvxCp.js → dist-WUZH-lAM.js}

@@ -5955,6 +5955,40 @@ var BaseAddon = class {
 	deviceSettingsSchema() {
 		return null;
 	}
+	/**
+	* INTEGRATION-LEVEL SETTINGS — declare which of this addon's global sections
+	* ARE the configuration of its integration.
+	*
+	* Return the `ConfigSection.id`s, from {@link globalSettingsSchema}, that an
+	* operator should find on the addon's integration page (System →
+	* Integrations → <name>) rather than only in the cluster-wide list of every
+	* addon. Empty (the default) means the addon has no integration-level
+	* settings and no such surface is offered — this is opt-in, because whether
+	* an addon's configuration IS its integration's configuration depends on the
+	* nature of the integration.
+	*
+	* WHAT THIS IS NOT. It is not a scope. The selected sections keep living in
+	* the ONE global schema, in the ONE addon store, written by the ONE
+	* `updateGlobalSettings` path. There is deliberately no
+	* `updateIntegrationSettings`: a second write path is how a surface acquires
+	* a second store key, and this repo has shipped that twice (`btmPath@hub`,
+	* D266). Selecting sections cannot introduce a key that selecting cannot.
+	*
+	* WHY IT IS A LIST OF SECTION IDS AND NOT A MARKER ON THE SECTION.
+	* `ConfigFieldBase` used to carry `scope?: 'device' | 'global'` and it was
+	* removed with the reason recorded at
+	* `packages/types/src/interfaces/config-ui.ts:249` — *"a field's scope is
+	* determined by WHICH schema it lives in, not by a field-level marker."* A
+	* marker sprinkled across sections also has to borrow a field that already
+	* means something else; borrowing `section.tab` put the literal word
+	* "integration" into an operator-facing tab bar, because `tab` means "how to
+	* GROUP this visually" and cannot also mean "where this lives" (D269
+	* supersedes D268). One declaration, in one place, next to the schema whose
+	* ids it names.
+	*/
+	integrationSettingSections() {
+		return [];
+	}
 	async getGlobalSettings(overlay, cap, nodeId) {
 		const schema = this.globalSettingsSchema(cap);
 		if (!schema) return { sections: [] };
@@ -5965,6 +5999,55 @@ var BaseAddon = class {
 		} : projected);
 	}
 	/**
+	* The integration-level view of this addon's settings: exactly the sections
+	* named by {@link integrationSettingSections}, hydrated from the SAME store
+	* `getGlobalSettings` reads, and narrowed to cluster-scoped fields.
+	*
+	* Returns `null` when the addon declared nothing — an addon that opts out has
+	* no integration settings surface at all, rather than an empty one that reads
+	* as a failed load.
+	*
+	* Three properties hold BY CONSTRUCTION, which is why they are here in core
+	* and not in whichever UI happens to render this:
+	*
+	*  1. **One key.** The payload is a SUBSET of the global schema, so a field
+	*     shown here is the same field, with the same bare key, that the addon's
+	*     own page shows. There is no integration-specific writer — callers save
+	*     through `updateGlobalSettings` — so a second store key is unreachable,
+	*     not merely discouraged.
+	*  2. **No node scope.** `perNode: true` fields are DROPPED. Their store key
+	*     is `<key>@<nodeId>` and an integration is not a node; whichever node
+	*     such a field silently picked would be a wrong answer for the operator
+	*     who opened the page (D266).
+	*  3. **No silent typo.** A declared id that names no section throws. The
+	*     alternative — skip it — turns a rename into a surface that quietly
+	*     empties, which looks exactly like an addon with nothing to configure.
+	*/
+	async getIntegrationSettings(nodeId) {
+		const declared = this.integrationSettingSections();
+		if (declared.length === 0) return null;
+		const schema = this.globalSettingsSchema();
+		if (!schema) throw new Error(`${this.constructor.name}: integrationSettingSections() names [${declared.join(", ")}] but globalSettingsSchema() returns null.`);
+		const byId = new Map(schema.sections.map((section) => [section.id, section]));
+		const sections = [];
+		for (const id of declared) {
+			const section = byId.get(id);
+			if (!section) throw new Error(`${this.constructor.name}: integrationSettingSections() names unknown section "${id}". Known sections: [${[...byId.keys()].join(", ")}].`);
+			const fields = dropPerNodeFields(section.fields);
+			if (fields.length === 0) continue;
+			sections.push({
+				...section,
+				fields
+			});
+		}
+		if (sections.length === 0) return null;
+		const projected = await this.resolveGlobalStore(nodeId);
+		return hydrateSchema({
+			...schema,
+			sections
+		}, projected);
+	}
+	/**
 	* The raw addon store PROJECTED onto the target node's bare per-node keys:
 	* every `perNode: true` field carries THAT node's scoped value on its bare
 	* key (absent scoped key ⇒ key absent, so the schema `default` wins — no
@@ -6268,6 +6351,41 @@ var BaseAddon = class {
 * `hydrateSchema` does. Valueless structural fields (separator/info/…)
 * don't declare `perNode` and are excluded by the `in` narrowing.
 */
+/**
+* The same fields with every `perNode: true` one removed, recursing into layout
+* containers exactly as {@link collectPerNodeFieldKeys} does. A container left
+* with no child is dropped rather than rendered empty.
+*
+* Used by `getIntegrationSettings`: an integration is not a node, so a field
+* whose store key is `<key>@<nodeId>` has no node to belong to there.
+*/
+function dropPerNodeFields(fields) {
+	const kept = [];
+	for (const field of fields) {
+		if (field.type === "group") {
+			const inner = dropPerNodeFields(field.fields);
+			if (inner.length > 0) kept.push({
+				...field,
+				fields: inner
+			});
+			continue;
+		}
+		if (field.type === "sub-tabs") {
+			const tabs = field.tabs.map((tab) => ({
+				...tab,
+				fields: dropPerNodeFields(tab.fields)
+			})).filter((tab) => tab.fields.length > 0);
+			if (tabs.length > 0) kept.push({
+				...field,
+				tabs
+			});
+			continue;
+		}
+		if ("perNode" in field && field.perNode === true) continue;
+		kept.push(field);
+	}
+	return kept;
+}
 function collectPerNodeFieldKeys(fields) {
 	const collected = [];
 	for (const field of fields) {
@@ -7196,6 +7314,40 @@ method(object({ deviceId: number() }), array(StreamSourceEntrySchema)), method(o
 	input: unknown()
 }), unknown(), { kind: "mutation" }), method(object({ deviceId: number() }), _void(), { kind: "mutation" }), method(object({ deviceId: number() }), unknown().nullable()), method(object({ deviceId: number() }), RawStateResultSchema.nullable(), { auth: "protected" });
 /**
+* The ONE retry schedule for work that can fail simply because the node was
+* still booting.
+*
+* The measured failure (docs/design/boot-to-usable-camera.md, item E): a hub
+* boot that serialised its addon graph starved every driver dial on it. Fifteen
+* Hikvision devices logged `Initial probe did not complete — scheduling retry
+* chain {firstRetryMs=300000}` and then sat unprobed for five minutes, long
+* after the condition that caused the failure had gone. The Tailscale addon's
+* auto-rejoin carried a byte-identical schedule, armed from `initialize()`, for
+* the same reason.
+*
+* The shape that fixes it: **two cheap attempts first, then the long tail.**
+*
+*  - 15 s / 60 s — the boot window. Anything that failed because the node was
+*    busy is recovered here, before an operator can open the UI and see a
+*    camera that is wrong about itself.
+*  - 5 m → 90 m — the genuinely-offline case. A battery cam that is asleep, a
+*    VLAN that is down, a peer that has not come back. Unchanged in intent from
+*    the schedule this replaces (~3 h 30 m of coverage): here ~3 h 21 m, then
+*    the chain ends and manual re-arm (reprobe / restart) is the only path.
+*
+* Bounded on purpose — see D6. A chain that never gives up is a busy loop with
+* extra steps.
+*/
+var BOOT_RECOVERY_BACKOFF_MS = [
+	15e3,
+	6e4,
+	5 * 6e4,
+	15 * 6e4,
+	30 * 6e4,
+	60 * 6e4,
+	90 * 6e4
+];
+/**
 * Type-safe JSON parsing helpers.
 *
 * `JSON.parse` is typed as `any` in lib.es5.d.ts, which triggers
@@ -10731,6 +10883,9 @@ method(object({
 	kind: "mutation",
 	auth: "admin"
 }), method(object({
+	addonId: string(),
+	nodeId: string().optional()
+}), SettingsSchemaWithValuesSchema.nullable()), method(object({
 	addonId: string(),
 	deviceId: number(),
 	nodeId: string().optional()
@@ -11118,8 +11273,7 @@ var AUDIO_BACKEND_CHOICES = [
 ];
 var DEFAULT_AUDIO_ANALYZER_CONFIG = {
 	audioBackend: "auto",
-	probedBestAudioBackend: "",
-	selectedAudioModel: ""
+	probedBestAudioBackend: ""
 };
 var audioAnalyzerCapability = {
 	name: "audio-analyzer",
@@ -30779,6 +30933,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"addonSettings.getIntegrationSettings": {
+		capName: "addon-settings",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"addonSettings.updateDeviceSettings": {
 		capName: "addon-settings",
 		capScope: "system",
@@ -39758,6 +39918,12 @@ Object.defineProperty(exports, "AUDIO_PRESETS", {
 		return AUDIO_PRESETS;
 	}
 });
+Object.defineProperty(exports, "BOOT_RECOVERY_BACKOFF_MS", {
+	enumerable: true,
+	get: function() {
+		return BOOT_RECOVERY_BACKOFF_MS;
+	}
+});
 Object.defineProperty(exports, "BaseAddon", {
 	enumerable: true,
 	get: function() {

package/dist/{event-loop-stall-monitor-CskL9Lgu.mjs → event-loop-stall-monitor-BMtR9qZR.mjs}

@@ -1,4 +1,4 @@
-import { M as audioKindId, X as hfModelUrl, a as COCO_80_LABELS, o as COCO_TO_MACRO, r as AUDIO_MACRO_LABELS } from "./dist-g0Or5_pR.mjs";
+import { M as audioKindId, X as hfModelUrl, a as COCO_80_LABELS, o as COCO_TO_MACRO, r as AUDIO_MACRO_LABELS } from "./dist-CTmOaCwF.mjs";
 import { randomUUID } from "node:crypto";
 import { PerformanceObserver } from "node:perf_hooks";
 //#region src/detection-pipeline/registry/model-catalogs.ts

package/dist/{event-loop-stall-monitor-DDm07Ei6.js → event-loop-stall-monitor-CoM21UjL.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-4EMKvxCp.js");
+const require_dist = require("./dist-WUZH-lAM.js");
 let node_crypto = require("node:crypto");
 let node_perf_hooks = require("node:perf_hooks");
 //#region src/detection-pipeline/registry/model-catalogs.ts

package/dist/{lazy-sharp-BlA9PxWk.js → lazy-sharp-1WF7ZnxZ.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-4EMKvxCp.js");
+const require_dist = require("./dist-WUZH-lAM.js");
 let node_path = require("node:path");
 node_path = require_dist.__toESM(node_path);
 let node_url = require("node:url");

package/dist/motion-wasm/index.js

@@ -2,8 +2,8 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-4EMKvxCp.js");
-const require_lazy_sharp = require("../lazy-sharp-BlA9PxWk.js");
+const require_dist = require("../dist-WUZH-lAM.js");
+const require_lazy_sharp = require("../lazy-sharp-1WF7ZnxZ.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");
 //#region src/motion-wasm/wasm-motion-detector.ts

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { Mt as DeviceType, Pt as hydrateSchema, Y as evaluateZoneRules, kt as BaseAddon, rt as motionDetectionCapability } from "../dist-g0Or5_pR.mjs";
+import { At as BaseAddon, Ft as hydrateSchema, Nt as DeviceType, Y as evaluateZoneRules, rt as motionDetectionCapability } from "../dist-CTmOaCwF.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/{node-BOHn8gpk.js → node-BAo2ivVu.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-4EMKvxCp.js");
+const require_dist = require("./dist-WUZH-lAM.js");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 node_fs = require_dist.__toESM(node_fs, 1);

package/dist/{node-Bo1g8hLO.mjs → node-CQcgxO8l.mjs}

@@ -1,4 +1,4 @@
-import { Ct as errMsg, Et as buildFfmpegArgs, Ot as isSoftwareDecode, Tt as Fmp4BoxSplitter } from "./dist-g0Or5_pR.mjs";
+import { Ct as errMsg, Et as buildFfmpegArgs, Ot as isSoftwareDecode, Tt as Fmp4BoxSplitter } from "./dist-CTmOaCwF.mjs";
 import { randomUUID } from "node:crypto";
 import "node:fs";
 import "node:path";

package/dist/pipeline-runner/index.js

@@ -2,12 +2,12 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-4EMKvxCp.js");
-const require_node = require("../node-BOHn8gpk.js");
-const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-DDm07Ei6.js");
-const require_worker_protocol = require("../worker-protocol-BLfaD5uC.js");
+const require_dist = require("../dist-WUZH-lAM.js");
+const require_node = require("../node-BAo2ivVu.js");
+const require_event_loop_stall_monitor = require("../event-loop-stall-monitor-CoM21UjL.js");
+const require_worker_protocol = require("../worker-protocol-C-0LYdSt.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
-const require_lazy_sharp = require("../lazy-sharp-BlA9PxWk.js");
+const require_lazy_sharp = require("../lazy-sharp-1WF7ZnxZ.js");
 const require_restream_intent = require("../restream-intent-Cv9x3jmu.js");
 const require_remote_restream = require("../remote-restream-CO36Sr30.js");
 let node_child_process = require("node:child_process");
@@ -891,10 +891,29 @@ var DEFAULT_FIRST_FRAME_TIMEOUT_MS = 2e4;
 *
 * The first decodable frame is not a fixed cost: it is one IDR interval plus
 * every GOP the decoder has to discard. Measured on device 618 (2560x1440
-* h264, 8.0 s IDR interval, `Invalid NAL unit` / `corrupt decoded frame` in its
-* bitstream), dial → first decoded frame over the broker's own muted restream
-* was 1.8 / 6.5 / 7.0 / 7.2 / 9.2 / 10.0 / 10.8 / 12.9 / 14.9 / 20.0 / 30.3 /
-* >40 s across 12 trials — against a healthy 587's 2.0 s ± 0.02.
+* h264, `Invalid NAL unit` / `corrupt decoded frame` in its bitstream), dial →
+* first decoded frame over the broker's own muted restream was 1.8 / 6.5 / 7.0
+* / 7.2 / 9.2 / 10.0 / 10.8 / 12.9 / 14.9 / 20.0 / 30.3 / >40 s across 12
+* trials — against a healthy 587's 2.0 s ± 0.02.
+*
+* **The "8.0 s IDR interval" this used to attribute 618's spread to was wrong,
+* and is corrected here rather than deleted** (2026-08-28): a stated number
+* nobody re-derived reads as verification, and this one was used to argue that
+* 618 was an encoder outlier. The fleet runs 100-frame GOPs at 25 fps — a
+* **4 000 ms** IDR interval — and two independent readings of 6 h of live logs
+* agree with the operator rather than with this docblock. First, the join-burst
+* span logged on `restream prime (lat-probe)` is the time since the last IDR,
+* uniform in `[0, IDR]` and censored at `PRIME_MAX_SPAN_MS`: its median is
+* ~1 000 ms on eleven cameras, which is what `uniform[0, 4000]` conditioned on
+* `≤2000` predicts. Second, `detectionIntentServed` over detection dials puts
+* the SERVED fraction at 44-61 % on the bulk of the fleet, i.e. the ~50 %
+* `P(span > 2000)` a 4 000 ms interval implies. 618 measures 51 %, which is the
+* fleet norm. The genuine long-GOP outlier is **637** at 30 % served (⇒ ~6.7 s).
+*
+* So the spread is not this camera's encoder. It is D57's fixed 2 000 ms bound
+* withholding the join burst WHOLE on roughly half of every 4 s-GOP camera's
+* dials — see `join-burst-bound.ts`, which states the arithmetic, and
+* `docs/architecture/load-ledger.md` (2026-08-28) for the measurement.
 *
 * Abandoning at 20 s was therefore not a timeout, it was a coin flip, and the
 * recovery made it worse: ending the session RE-DIALS, which throws the
@@ -930,6 +949,7 @@ var SessionDecodeSession = class {
 	firstFrameTimeoutMs;
 	frameTimeoutMs;
 	firstFrameMaxWaitMs;
+	onDialTiming;
 	pendingPull = null;
 	pendingToBuffers = /* @__PURE__ */ new Map();
 	/** Outstanding `nativeCrop` requests, keyed by the monotonic `requestId`. */
@@ -943,13 +963,14 @@ var SessionDecodeSession = class {
 	firstFrameReceived = false;
 	/** `Date.now()` of the FIRST `pull` — the origin of the cold-start ceiling. */
 	firstPullAt = 0;
-	constructor(child, logger, deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs) {
+	constructor(child, logger, deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs, onDialTiming) {
 		this.child = child;
 		this.logger = logger;
 		this.deviceId = deviceId;
 		this.firstFrameTimeoutMs = firstFrameTimeoutMs;
 		this.frameTimeoutMs = frameTimeoutMs;
 		this.firstFrameMaxWaitMs = firstFrameMaxWaitMs;
+		this.onDialTiming = onDialTiming;
 		this.child.on("message", (m) => this.handleMessage(m));
 		this.child.on("exit", (m) => this.handleExit(toWorkerExitInfo(m)));
 	}
@@ -1125,6 +1146,15 @@ var SessionDecodeSession = class {
 			case "log":
 				this.logger[raw.level](raw.message);
 				return;
+			case "dialTiming":
+				this.onDialTiming?.({
+					hwContextMs: raw.hwContextMs,
+					demuxerOpenMs: raw.demuxerOpenMs,
+					decoderCreateMs: raw.decoderCreateMs,
+					firstDecodeMs: raw.firstDecodeMs,
+					streamInfoProbed: raw.streamInfoProbed
+				});
+				return;
 		}
 	}
 	handleExit(info) {
@@ -1349,7 +1379,7 @@ function createSessionDecodeCoordinator(deps) {
 	const frameTimeoutMs = deps.frameTimeoutMs ?? DEFAULT_FRAME_TIMEOUT_MS;
 	const firstFrameMaxWaitMs = Math.max(deps.firstFrameMaxWaitMs ?? DEFAULT_FIRST_FRAME_MAX_WAIT_MS, firstFrameTimeoutMs);
 	return { async *generateVideoFrames(source, opts) {
-		const session = new SessionDecodeSession(deps.fork(source), deps.logger, source.deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs);
+		const session = new SessionDecodeSession(deps.fork(source), deps.logger, source.deviceId, firstFrameTimeoutMs, frameTimeoutMs, firstFrameMaxWaitMs, deps.onDialTiming);
 		session.start(source, opts);
 		try {
 			while (true) {
@@ -1403,9 +1433,13 @@ async function toDecodedFrame(frame, format, viewSpec) {
 */
 function startSessionDecodePump(deps) {
 	const format = deps.opts.format ?? "rgb";
+	let dialTiming = null;
 	const iterator = createSessionDecodeCoordinator({
 		fork: deps.fork,
 		logger: deps.logger,
+		onDialTiming: (timing) => {
+			dialTiming = timing;
+		},
 		...deps.firstFrameTimeoutMs !== void 0 ? { firstFrameTimeoutMs: deps.firstFrameTimeoutMs } : {},
 		...deps.frameTimeoutMs !== void 0 ? { frameTimeoutMs: deps.frameTimeoutMs } : {}
 	}).generateVideoFrames(deps.source, deps.opts);
@@ -1436,9 +1470,11 @@ function startSessionDecodePump(deps) {
 				if (!firstFrameSeen) {
 					firstFrameSeen = true;
 					releaseSpawnSlotOnce();
+					const dial = dialTiming;
 					deps.onFirstFrame?.({
 						spawnWaitMs: spawnGrantedAt - pumpStartedAt,
-						forkToFrameMs: Date.now() - spawnGrantedAt
+						forkToFrameMs: Date.now() - spawnGrantedAt,
+						...dial !== null ? { dial } : {}
 					});
 				}
 				if (stopped) {
@@ -7346,6 +7382,13 @@ var PipelineRunnerAddon = class PipelineRunnerAddon extends require_dist.BaseAdd
 								dialMs,
 								spawnWaitMs: timing.spawnWaitMs,
 								forkToFrameMs: timing.forkToFrameMs,
+								...timing.dial ? {
+									hwContextMs: timing.dial.hwContextMs,
+									demuxerOpenMs: timing.dial.demuxerOpenMs,
+									decoderCreateMs: timing.dial.decoderCreateMs,
+									firstDecodeMs: timing.dial.firstDecodeMs,
+									streamInfoProbed: timing.dial.streamInfoProbed
+								} : {},
 								firstFrameMs: Date.now() - requestedAt,
 								...phaseActiveAt !== void 0 ? { sincePhaseActiveMs: Date.now() - phaseActiveAt } : {}
 							}