@camstack/addon-pipeline 1.2.369 → 1.2.370

package/dist/audio-analyzer/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-D3PtiAhd.js");
-const require_model_catalogs = require("../model-catalogs-kGqNkIuV.js");
-const require_process_memory = require("../process-memory-DELcKfDf.js");
+const require_dist = require("../dist-jkwxbcbK.js");
+const require_model_catalogs = require("../model-catalogs-Ds2hC2Br.js");
+const require_process_memory = require("../process-memory-Cfh1BQYg.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/audio-analyzer/index.mjs

@@ -1,7 +1,7 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { An as BaseAddon, F as PoolMemoryWatchdog, Fn as audioChunkBytesPerSample, Ft as mapAudioLabelToMacro, Kn as nodePin, On as errMsg, Q as audioAnalyzerCapability, Vn as hydrateSchema, Z as audioAnalysisCapability, cr as EventCategory, h as DEFAULT_AUDIO_ANALYZER_CONFIG, on as resolvePoolMemoryPolicy, r as AUDIO_BACKEND_CHOICES, zn as expandAudioChunkToF32le } from "../dist-DKSwif2M.mjs";
-import { n as AUDIO_CLASSIFIER_MODELS } from "../model-catalogs-CVd4TcTQ.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-Dq_Omilr.mjs";
+import { An as BaseAddon, F as PoolMemoryWatchdog, Fn as audioChunkBytesPerSample, Ft as mapAudioLabelToMacro, Kn as nodePin, On as errMsg, Q as audioAnalyzerCapability, Vn as hydrateSchema, Z as audioAnalysisCapability, cr as EventCategory, h as DEFAULT_AUDIO_ANALYZER_CONFIG, on as resolvePoolMemoryPolicy, r as AUDIO_BACKEND_CHOICES, zn as expandAudioChunkToF32le } from "../dist-CbFPOFAD.mjs";
+import { n as AUDIO_CLASSIFIER_MODELS } from "../model-catalogs-DJmwfLfC.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-B3I-NvnX.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { ensureModel } from "@camstack/system/addon-utils";

package/dist/{custom-model-catalog-C3PYjN8c.js → custom-model-catalog-BFosahFu.js}

@@ -1,5 +1,5 @@
-const require_dist = require("./dist-D3PtiAhd.js");
-const require_model_catalogs = require("./model-catalogs-kGqNkIuV.js");
+const require_dist = require("./dist-jkwxbcbK.js");
+const require_model_catalogs = require("./model-catalogs-Ds2hC2Br.js");
 const require_worker_protocol = require("./worker-protocol-C-G8qmye.js");
 let node_crypto = require("node:crypto");
 //#region src/detection-pipeline/registry/effective-confidence.ts

package/dist/{custom-model-catalog-uHzR2xWY.mjs → custom-model-catalog-CVbK0xKc.mjs}

@@ -1,5 +1,5 @@
-import { $ as audioKindId, b as DEVICE_BACKEND_TO_FORMAT, dn as stepModelRunsOnFormat, f as COCO_80_LABELS, i as AUDIO_MACRO_LABELS, k as LABEL_SUPPLY_VOCABULARIES, kt as inferModelProvider, p as COCO_TO_MACRO } from "./dist-DKSwif2M.mjs";
-import { a as FACE_DETECTION_MODELS, c as OBJECT_DETECTION_MODELS, d as PLATE_OCR_MODELS, f as SEGMENTATION_REFINER_MODELS, i as CLIP_EMBEDDING_MODELS, l as PACKAGE_DETECTION_MODELS, n as AUDIO_CLASSIFIER_MODELS, o as FACE_EMBEDDING_MODELS, p as VEHICLE_CLASSIFIER_MODELS, r as BIRD_CLASSIFIER_MODELS, s as INSTANCE_SEGMENTATION_MODELS, t as ANIMAL_CLASSIFIER_MODELS, u as PLATE_DETECTION_MODELS } from "./model-catalogs-CVd4TcTQ.mjs";
+import { $ as audioKindId, b as DEVICE_BACKEND_TO_FORMAT, dn as stepModelRunsOnFormat, f as COCO_80_LABELS, i as AUDIO_MACRO_LABELS, k as LABEL_SUPPLY_VOCABULARIES, kt as inferModelProvider, p as COCO_TO_MACRO } from "./dist-CbFPOFAD.mjs";
+import { a as FACE_DETECTION_MODELS, c as OBJECT_DETECTION_MODELS, d as PLATE_OCR_MODELS, f as SEGMENTATION_REFINER_MODELS, i as CLIP_EMBEDDING_MODELS, l as PACKAGE_DETECTION_MODELS, n as AUDIO_CLASSIFIER_MODELS, o as FACE_EMBEDDING_MODELS, p as VEHICLE_CLASSIFIER_MODELS, r as BIRD_CLASSIFIER_MODELS, s as INSTANCE_SEGMENTATION_MODELS, t as ANIMAL_CLASSIFIER_MODELS, u as PLATE_DETECTION_MODELS } from "./model-catalogs-DJmwfLfC.mjs";
 import { t as isWorkerReply } from "./worker-protocol-D_NzPcnh.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/detection-pipeline/registry/effective-confidence.ts

package/dist/detection-pipeline/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-D3PtiAhd.js");
-const require_node = require("../node--15m1sN3.js");
-const require_custom_model_catalog = require("../custom-model-catalog-C3PYjN8c.js");
+const require_dist = require("../dist-jkwxbcbK.js");
+const require_node = require("../node-C_1U1uzn.js");
+const require_custom_model_catalog = require("../custom-model-catalog-BFosahFu.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
-const require_process_memory = require("../process-memory-DELcKfDf.js");
+const require_process_memory = require("../process-memory-Cfh1BQYg.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/detection-pipeline/index.mjs

@@ -1,9 +1,9 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { An as BaseAddon, Bn as hfModelUrl, F as PoolMemoryWatchdog, Gt as pickClusterStepSettings, In as createEvent, Jt as pipelineExecutorCapability, Kn as nodePin, Nt as loadContributionCapability, O as LABEL_SUPPLY_MACRO, On as errMsg$1, Ut as overlayClusterStepSettings, Vn as hydrateSchema, Vt as modelBindingKey, X as applyModelBoundSettings, Yn as sleep, Zn as array, bt as evaluateZoneRules, cr as EventCategory, d as CLUSTER_MODEL_SCOPED_STEPS, dn as stepModelRunsOnFormat, dt as defaultDeviceFor$1, g as DEFAULT_CLUSTER_STEP_SETTINGS, gn as supportedRuntimes$1, gt as detectionPipelineCapability, jt as linkedLabelStepId, ln as rootSuppliesOf, n as APPLE_SA_TO_MACRO, on as resolvePoolMemoryPolicy, or as string, ot as collectModelBoundKeys, q as YAMNET_TO_MACRO, rr as object, sr as union, st as containingParentIndex, tn as resolveClusterStepModelId, un as runtimeDevices$1, yt as enumerateInferenceDevices } from "../dist-DKSwif2M.mjs";
-import { s as readProcessCost } from "../node-C_Fqti3A.mjs";
-import { C as resolveModelDefaultConfidence, S as landmarkPrecisionVerdict, _ as ALL_STEPS, b as getStepDefinition, f as localFrameRegistry, g as ALL_PIPELINE_STEPS, l as resolveDefaultDetectionModel, n as mergeCustomModels, o as deviceKeyOf, r as buildSubtreeCanRun, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, v as getDefaultModelForFormat, x as resolveModelForFormat, y as getStep } from "../custom-model-catalog-uHzR2xWY.mjs";
+import { An as BaseAddon, Bn as hfModelUrl, F as PoolMemoryWatchdog, Gt as pickClusterStepSettings, In as createEvent, Jt as pipelineExecutorCapability, Kn as nodePin, Nt as loadContributionCapability, O as LABEL_SUPPLY_MACRO, On as errMsg$1, Ut as overlayClusterStepSettings, Vn as hydrateSchema, Vt as modelBindingKey, X as applyModelBoundSettings, Yn as sleep, Zn as array, bt as evaluateZoneRules, cr as EventCategory, d as CLUSTER_MODEL_SCOPED_STEPS, dn as stepModelRunsOnFormat, dt as defaultDeviceFor$1, g as DEFAULT_CLUSTER_STEP_SETTINGS, gn as supportedRuntimes$1, gt as detectionPipelineCapability, jt as linkedLabelStepId, ln as rootSuppliesOf, n as APPLE_SA_TO_MACRO, on as resolvePoolMemoryPolicy, or as string, ot as collectModelBoundKeys, q as YAMNET_TO_MACRO, rr as object, sr as union, st as containingParentIndex, tn as resolveClusterStepModelId, un as runtimeDevices$1, yt as enumerateInferenceDevices } from "../dist-CbFPOFAD.mjs";
+import { s as readProcessCost } from "../node-C-2fB9kH.mjs";
+import { C as resolveModelDefaultConfidence, S as landmarkPrecisionVerdict, _ as ALL_STEPS, b as getStepDefinition, f as localFrameRegistry, g as ALL_PIPELINE_STEPS, l as resolveDefaultDetectionModel, n as mergeCustomModels, o as deviceKeyOf, r as buildSubtreeCanRun, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, v as getDefaultModelForFormat, x as resolveModelForFormat, y as getStep } from "../custom-model-catalog-CVbK0xKc.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-Dq_Omilr.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-B3I-NvnX.mjs";
 import * as os$1 from "node:os";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/{dist-DKSwif2M.mjs → dist-CbFPOFAD.mjs}

@@ -5387,7 +5387,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep--g-h2_c_.mjs
+//#region ../types/dist/sleep-DAX0-2v9.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8421,6 +8421,8 @@ var CREDENTIAL_PARAM_PATTERNS = [
 	/^code$/i,
 	/^state$/i,
 	/^challenge$/i,
+	/^code[_-]?challenge$/i,
+	/^confirm$/i,
 	/^link$/i
 ];
 function isCredentialParam(name) {
@@ -14652,6 +14654,13 @@ var ConvertResultSchema = object({
 		files: array(string()).readonly()
 	})).readonly()
 });
+_enum(["new-session", "step-up"]);
+_enum(["en", "it"]);
+/** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
+var AppLoginPathSchema = discriminatedUnion("kind", [object({ kind: literal("native") }), object({
+	kind: literal("browser"),
+	startPath: string().startsWith("/")
+})]);
 /**
 * Device certificates (D855) — the wire contract shared by the hub, the admin
 * UI and the native viewer.
@@ -14811,7 +14820,9 @@ object({
 	signature: literal(DEVICE_CERT_SIGNATURE),
 	messageVersion: literal(DEVICE_SIGNATURE_MESSAGE_VERSION),
 	/** Which clients can execute it: a native app silently, a browser with a non-extractable WebCrypto key. */
-	clients: array(_enum(["native", "web"]))
+	clients: array(_enum(["native", "web"])),
+	/** The app executes it itself, silently (D858). */
+	app: AppLoginPathSchema.nullable()
 });
 var ExpressionBindingSourceSchema = union([
 	object({
@@ -41994,7 +42005,13 @@ var LoginMethodContributionSchema = discriminatedUnion("kind", [
 		* `beginExternalLink` offer exactly the redirect methods that set this,
 		* whatever their id. Absent / false — a login button only.
 		*/
-		linkable: boolean().optional()
+		linkable: boolean().optional(),
+		/**
+		* How a NATIVE app starts this method (D858): `{ kind: 'browser', startPath }`
+		* when the route understands the app flow query (`app=1&code_challenge=…`),
+		* `null`/absent when there is no app path - the app hides the method.
+		*/
+		app: AppLoginPathSchema.nullable().optional()
 	}),
 	object({
 		kind: literal("widget"),
@@ -42006,7 +42023,9 @@ var LoginMethodContributionSchema = discriminatedUnion("kind", [
 		bundle: string(),
 		/** MF remote descriptor — `{ remoteName, exposedModule, componentKey }`. */
 		remote: WidgetRemoteSchema,
-		stage: LoginStageEnum
+		stage: LoginStageEnum,
+		/** Widgets are web ceremonies: no native app path (D858). Absent reads as `null`. */
+		app: AppLoginPathSchema.nullable().optional()
 	}),
 	object({
 		kind: literal("passkey"),
@@ -42018,7 +42037,9 @@ var LoginMethodContributionSchema = discriminatedUnion("kind", [
 		/** Effective WebAuthn RP ID (`resolveRpID()`) — the shell gates visibility on it. */
 		rpId: string(),
 		/** Effective expected origin (`resolveOrigin()`), null when unconfigured. */
-		origin: string().nullable()
+		origin: string().nullable(),
+		/** Set by the hub for the primary arm; a second-factor passkey has no app path (D858). */
+		app: AppLoginPathSchema.nullable().optional()
 	})
 ]);
 method(_void(), array(LoginMethodContributionSchema).readonly());
@@ -42545,7 +42566,21 @@ var NetworkEndpointSchema = object({
 	url: string(),
 	hostname: string(),
 	port: number(),
-	protocol: _enum(["http", "https"])
+	protocol: _enum(["http", "https"]),
+	/**
+	* Whether this address survives a restart of its provider. `false` = it is
+	* re-issued every time (a Quick tunnel's random `*.trycloudflare.com`); the
+	* hub never selects such an address AUTOMATICALLY for a role (D860), though
+	* it stays visible and an operator may still flag it. Absent = stable: every
+	* provider except a Quick tunnel owns a name that does not change.
+	*/
+	stable: boolean().optional()
+});
+object({
+	url: string(),
+	/** Mirrors {@link NetworkEndpointSchema} `stable`; absent = stable. */
+	stable: boolean().optional(),
+	updated: boolean().optional()
 });
 var NetworkAccessStatusSchema = object({
 	connected: boolean(),
@@ -53349,7 +53384,22 @@ var SsoBridgeClaimsSchema = object({
 	* request to present the matching cookie — a login bridge is useless in
 	* any other browser.
 	*/
-	browserBinding: string().optional()
+	browserBinding: string().optional(),
+	/**
+	* The native app that started this sign-in (D858): its PKCE challenge,
+	* `state`, purpose and allow-listed return URL, copied from the server-side
+	* pending OIDC state. A bridge carrying it is finished ONLY at
+	* `/api/auth/sso/finish-app` (which mints a handoff code, never a web
+	* session); `/api/auth/sso/finish` refuses it.
+	*/
+	app: object({
+		codeChallenge: string(),
+		state: string(),
+		purpose: _enum(["new-session", "step-up"]),
+		redirect: string(),
+		/** The page language the app asked for (D858); the confirm page speaks it. */
+		lang: _enum(["en", "it"]).optional()
+	}).optional()
 });
 method(object({
 	claims: SsoBridgeClaimsSchema,
@@ -55969,7 +56019,12 @@ var SearchResultSchema = object({
 	publishedAt: string(),
 	author: string(),
 	installed: boolean(),
-	installedVersion: string().optional()
+	installedVersion: string().optional(),
+	/**
+	* Capability names the package's addons declare (from its published
+	* manifest). `null` = the registry lookup failed — unknown, never `[]` (D393).
+	*/
+	capabilities: array(string()).readonly().nullable()
 });
 var AutoUpdateSettingsSchema = object({
 	channel: ChannelSchema,
@@ -56131,7 +56186,11 @@ method(object({ nodeId: string().optional() }).optional(), array(AddonListItemSc
 }), method(object({ packageName: string().optional() }), PackageInstallationsSchema, { auth: "admin" }), method(_void(), ReloadPackagesResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ query: string().optional() }), array(SearchResultSchema)), method(object({ nodeId: string().optional() }), array(PackageUpdateSchema).readonly(), { auth: "admin" }), method(object({
+}), method(object({
+	query: string().optional(),
+	/** Only packages whose addons declare this capability (unknown ones excluded). */
+	capability: string().optional()
+}), array(SearchResultSchema)), method(object({ nodeId: string().optional() }), array(PackageUpdateSchema).readonly(), { auth: "admin" }), method(object({
 	name: string().min(1),
 	version: string().optional(),
 	nodeId: string().optional()
@@ -58628,7 +58687,13 @@ var ConnectionEndpointSchema = object({
 	* calls so the client can sort even if the cap returns a new
 	* ordering between polls.
 	*/
-	priority: number()
+	priority: number(),
+	/**
+	* `false` = the address changes on its own (a Quick tunnel, re-issued on
+	* every respawn). Automatic role resolution skips it (D860); an explicit
+	* operator flag still honours it. Absent = stable.
+	*/
+	stable: boolean().optional()
 });
 /**
 * Where the advertised local port came from. Ordered most → least
@@ -63724,6 +63789,21 @@ DeviceType.Switch, DeviceType.Siren, DeviceType.Light, method(object({
 	on: boolean(),
 	lastChangedAt: number()
 });
+/** C0 controls, DEL and the C1 range: none of them belongs in a name. */
+function hasControlCharacter(value) {
+	for (const char of value) {
+		const code = char.codePointAt(0) ?? 0;
+		if (code <= 31 || code >= 127 && code <= 159) return true;
+	}
+	return false;
+}
+string().transform((value) => value.trim()).pipe(string().min(1, "The server name cannot be empty").max(48, `The server name is at most 48 characters`).refine((value) => !hasControlCharacter(value), { message: "The server name cannot contain control characters" }));
+/** What every reader gets: the name to show, and whether the hub chose it itself. */
+var ServerNameInfoSchema = object({
+	name: string(),
+	/** `true` when nobody named the hub: `name` is the machine hostname. */
+	isDefault: boolean()
+});
 /**
 * system — system-scoped singleton capability exposing hub-level
 * health, feature flags, network interface enumeration, and the
@@ -63753,6 +63833,12 @@ var FeatureManifestSchema = object({
 	backup: boolean(),
 	repl: boolean()
 });
+/**
+* `system.info`: the feature flags plus the hub's human name (D861). The name is
+* `{ name, isDefault }` — `isDefault: true` means nobody named the hub and `name`
+* is the machine hostname.
+*/
+var SystemInfoSchema = FeatureManifestSchema.extend({ serverName: ServerNameInfoSchema });
 var HealthStatusSchema = object({
 	status: literal("ok"),
 	uptime: number()
@@ -64225,7 +64311,7 @@ var LoggingSettingsStateSchema = object({
 	opsLogRetentionDays: number().int().min(0),
 	persisted: boolean()
 });
-method(_void(), FeatureManifestSchema), method(_void(), HealthStatusSchema), method(_void(), FeatureManifestSchema), method(_void(), array(NetworkAddressSchema).readonly()), method(_void(), unknown().nullable(), { auth: "admin" }), method(record(string(), unknown()), _null(), {
+method(_void(), SystemInfoSchema), method(_void(), HealthStatusSchema), method(_void(), FeatureManifestSchema), method(_void(), array(NetworkAddressSchema).readonly()), method(_void(), unknown().nullable(), { auth: "admin" }), method(record(string(), unknown()), _null(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(_void(), _void(), {

package/dist/{dist-D3PtiAhd.js → dist-jkwxbcbK.js}

@@ -5387,7 +5387,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep--g-h2_c_.mjs
+//#region ../types/dist/sleep-DAX0-2v9.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -8421,6 +8421,8 @@ var CREDENTIAL_PARAM_PATTERNS = [
 	/^code$/i,
 	/^state$/i,
 	/^challenge$/i,
+	/^code[_-]?challenge$/i,
+	/^confirm$/i,
 	/^link$/i
 ];
 function isCredentialParam(name) {
@@ -14652,6 +14654,13 @@ var ConvertResultSchema = object({
 		files: array(string()).readonly()
 	})).readonly()
 });
+_enum(["new-session", "step-up"]);
+_enum(["en", "it"]);
+/** How a native app starts one login method (D858), as `auth.listLoginMethods` reports it. */
+var AppLoginPathSchema = discriminatedUnion("kind", [object({ kind: literal("native") }), object({
+	kind: literal("browser"),
+	startPath: string().startsWith("/")
+})]);
 /**
 * Device certificates (D855) — the wire contract shared by the hub, the admin
 * UI and the native viewer.
@@ -14811,7 +14820,9 @@ object({
 	signature: literal(DEVICE_CERT_SIGNATURE),
 	messageVersion: literal(DEVICE_SIGNATURE_MESSAGE_VERSION),
 	/** Which clients can execute it: a native app silently, a browser with a non-extractable WebCrypto key. */
-	clients: array(_enum(["native", "web"]))
+	clients: array(_enum(["native", "web"])),
+	/** The app executes it itself, silently (D858). */
+	app: AppLoginPathSchema.nullable()
 });
 var ExpressionBindingSourceSchema = union([
 	object({
@@ -41994,7 +42005,13 @@ var LoginMethodContributionSchema = discriminatedUnion("kind", [
 		* `beginExternalLink` offer exactly the redirect methods that set this,
 		* whatever their id. Absent / false — a login button only.
 		*/
-		linkable: boolean().optional()
+		linkable: boolean().optional(),
+		/**
+		* How a NATIVE app starts this method (D858): `{ kind: 'browser', startPath }`
+		* when the route understands the app flow query (`app=1&code_challenge=…`),
+		* `null`/absent when there is no app path - the app hides the method.
+		*/
+		app: AppLoginPathSchema.nullable().optional()
 	}),
 	object({
 		kind: literal("widget"),
@@ -42006,7 +42023,9 @@ var LoginMethodContributionSchema = discriminatedUnion("kind", [
 		bundle: string(),
 		/** MF remote descriptor — `{ remoteName, exposedModule, componentKey }`. */
 		remote: WidgetRemoteSchema,
-		stage: LoginStageEnum
+		stage: LoginStageEnum,
+		/** Widgets are web ceremonies: no native app path (D858). Absent reads as `null`. */
+		app: AppLoginPathSchema.nullable().optional()
 	}),
 	object({
 		kind: literal("passkey"),
@@ -42018,7 +42037,9 @@ var LoginMethodContributionSchema = discriminatedUnion("kind", [
 		/** Effective WebAuthn RP ID (`resolveRpID()`) — the shell gates visibility on it. */
 		rpId: string(),
 		/** Effective expected origin (`resolveOrigin()`), null when unconfigured. */
-		origin: string().nullable()
+		origin: string().nullable(),
+		/** Set by the hub for the primary arm; a second-factor passkey has no app path (D858). */
+		app: AppLoginPathSchema.nullable().optional()
 	})
 ]);
 method(_void(), array(LoginMethodContributionSchema).readonly());
@@ -42545,7 +42566,21 @@ var NetworkEndpointSchema = object({
 	url: string(),
 	hostname: string(),
 	port: number(),
-	protocol: _enum(["http", "https"])
+	protocol: _enum(["http", "https"]),
+	/**
+	* Whether this address survives a restart of its provider. `false` = it is
+	* re-issued every time (a Quick tunnel's random `*.trycloudflare.com`); the
+	* hub never selects such an address AUTOMATICALLY for a role (D860), though
+	* it stays visible and an operator may still flag it. Absent = stable: every
+	* provider except a Quick tunnel owns a name that does not change.
+	*/
+	stable: boolean().optional()
+});
+object({
+	url: string(),
+	/** Mirrors {@link NetworkEndpointSchema} `stable`; absent = stable. */
+	stable: boolean().optional(),
+	updated: boolean().optional()
 });
 var NetworkAccessStatusSchema = object({
 	connected: boolean(),
@@ -53349,7 +53384,22 @@ var SsoBridgeClaimsSchema = object({
 	* request to present the matching cookie — a login bridge is useless in
 	* any other browser.
 	*/
-	browserBinding: string().optional()
+	browserBinding: string().optional(),
+	/**
+	* The native app that started this sign-in (D858): its PKCE challenge,
+	* `state`, purpose and allow-listed return URL, copied from the server-side
+	* pending OIDC state. A bridge carrying it is finished ONLY at
+	* `/api/auth/sso/finish-app` (which mints a handoff code, never a web
+	* session); `/api/auth/sso/finish` refuses it.
+	*/
+	app: object({
+		codeChallenge: string(),
+		state: string(),
+		purpose: _enum(["new-session", "step-up"]),
+		redirect: string(),
+		/** The page language the app asked for (D858); the confirm page speaks it. */
+		lang: _enum(["en", "it"]).optional()
+	}).optional()
 });
 method(object({
 	claims: SsoBridgeClaimsSchema,
@@ -55969,7 +56019,12 @@ var SearchResultSchema = object({
 	publishedAt: string(),
 	author: string(),
 	installed: boolean(),
-	installedVersion: string().optional()
+	installedVersion: string().optional(),
+	/**
+	* Capability names the package's addons declare (from its published
+	* manifest). `null` = the registry lookup failed — unknown, never `[]` (D393).
+	*/
+	capabilities: array(string()).readonly().nullable()
 });
 var AutoUpdateSettingsSchema = object({
 	channel: ChannelSchema,
@@ -56131,7 +56186,11 @@ method(object({ nodeId: string().optional() }).optional(), array(AddonListItemSc
 }), method(object({ packageName: string().optional() }), PackageInstallationsSchema, { auth: "admin" }), method(_void(), ReloadPackagesResultSchema, {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ query: string().optional() }), array(SearchResultSchema)), method(object({ nodeId: string().optional() }), array(PackageUpdateSchema).readonly(), { auth: "admin" }), method(object({
+}), method(object({
+	query: string().optional(),
+	/** Only packages whose addons declare this capability (unknown ones excluded). */
+	capability: string().optional()
+}), array(SearchResultSchema)), method(object({ nodeId: string().optional() }), array(PackageUpdateSchema).readonly(), { auth: "admin" }), method(object({
 	name: string().min(1),
 	version: string().optional(),
 	nodeId: string().optional()
@@ -58628,7 +58687,13 @@ var ConnectionEndpointSchema = object({
 	* calls so the client can sort even if the cap returns a new
 	* ordering between polls.
 	*/
-	priority: number()
+	priority: number(),
+	/**
+	* `false` = the address changes on its own (a Quick tunnel, re-issued on
+	* every respawn). Automatic role resolution skips it (D860); an explicit
+	* operator flag still honours it. Absent = stable.
+	*/
+	stable: boolean().optional()
 });
 /**
 * Where the advertised local port came from. Ordered most → least
@@ -63724,6 +63789,21 @@ DeviceType.Switch, DeviceType.Siren, DeviceType.Light, method(object({
 	on: boolean(),
 	lastChangedAt: number()
 });
+/** C0 controls, DEL and the C1 range: none of them belongs in a name. */
+function hasControlCharacter(value) {
+	for (const char of value) {
+		const code = char.codePointAt(0) ?? 0;
+		if (code <= 31 || code >= 127 && code <= 159) return true;
+	}
+	return false;
+}
+string().transform((value) => value.trim()).pipe(string().min(1, "The server name cannot be empty").max(48, `The server name is at most 48 characters`).refine((value) => !hasControlCharacter(value), { message: "The server name cannot contain control characters" }));
+/** What every reader gets: the name to show, and whether the hub chose it itself. */
+var ServerNameInfoSchema = object({
+	name: string(),
+	/** `true` when nobody named the hub: `name` is the machine hostname. */
+	isDefault: boolean()
+});
 /**
 * system — system-scoped singleton capability exposing hub-level
 * health, feature flags, network interface enumeration, and the
@@ -63753,6 +63833,12 @@ var FeatureManifestSchema = object({
 	backup: boolean(),
 	repl: boolean()
 });
+/**
+* `system.info`: the feature flags plus the hub's human name (D861). The name is
+* `{ name, isDefault }` — `isDefault: true` means nobody named the hub and `name`
+* is the machine hostname.
+*/
+var SystemInfoSchema = FeatureManifestSchema.extend({ serverName: ServerNameInfoSchema });
 var HealthStatusSchema = object({
 	status: literal("ok"),
 	uptime: number()
@@ -64225,7 +64311,7 @@ var LoggingSettingsStateSchema = object({
 	opsLogRetentionDays: number().int().min(0),
 	persisted: boolean()
 });
-method(_void(), FeatureManifestSchema), method(_void(), HealthStatusSchema), method(_void(), FeatureManifestSchema), method(_void(), array(NetworkAddressSchema).readonly()), method(_void(), unknown().nullable(), { auth: "admin" }), method(record(string(), unknown()), _null(), {
+method(_void(), SystemInfoSchema), method(_void(), HealthStatusSchema), method(_void(), FeatureManifestSchema), method(_void(), array(NetworkAddressSchema).readonly()), method(_void(), unknown().nullable(), { auth: "admin" }), method(record(string(), unknown()), _null(), {
 	kind: "mutation",
 	auth: "admin"
 }), method(_void(), _void(), {

package/dist/{model-catalogs-CVd4TcTQ.mjs → model-catalogs-DJmwfLfC.mjs}

@@ -1,4 +1,4 @@
-import { Bn as hfModelUrl } from "./dist-DKSwif2M.mjs";
+import { Bn as hfModelUrl } from "./dist-CbFPOFAD.mjs";
 //#region src/detection-pipeline/registry/model-licenses.ts
 var COCO_DATA = {
 	name: "COCO 2017",

package/dist/{model-catalogs-kGqNkIuV.js → model-catalogs-Ds2hC2Br.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-D3PtiAhd.js");
+const require_dist = require("./dist-jkwxbcbK.js");
 //#region src/detection-pipeline/registry/model-licenses.ts
 var COCO_DATA = {
 	name: "COCO 2017",

package/dist/motion-wasm/index.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-D3PtiAhd.js");
+const require_dist = require("../dist-jkwxbcbK.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 let node_fs = require("node:fs");
 let node_path = require("node:path");

package/dist/motion-wasm/index.mjs

@@ -1,4 +1,4 @@
-import { An as BaseAddon, Dn as DeviceType, Ht as motionDetectionCapability, Vn as hydrateSchema, bt as evaluateZoneRules } from "../dist-DKSwif2M.mjs";
+import { An as BaseAddon, Dn as DeviceType, Ht as motionDetectionCapability, Vn as hydrateSchema, bt as evaluateZoneRules } from "../dist-CbFPOFAD.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { readFileSync } from "node:fs";
 import { join } from "node:path";

package/dist/{node-C_Fqti3A.mjs → node-C-2fB9kH.mjs}

@@ -1,4 +1,4 @@
-import { On as errMsg, Sn as buildFfmpegArgs, Tn as isSoftwareDecode, xn as Fmp4BoxSplitter } from "./dist-DKSwif2M.mjs";
+import { On as errMsg, Sn as buildFfmpegArgs, Tn as isSoftwareDecode, xn as Fmp4BoxSplitter } from "./dist-CbFPOFAD.mjs";
 import { randomUUID } from "node:crypto";
 import { realpathSync } from "node:fs";
 import path from "node:path";

package/dist/{node--15m1sN3.js → node-C_1U1uzn.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-D3PtiAhd.js");
+const require_dist = require("./dist-jkwxbcbK.js");
 require("node:os");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");

package/dist/pipeline-runner/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-D3PtiAhd.js");
-const require_node = require("../node--15m1sN3.js");
-const require_custom_model_catalog = require("../custom-model-catalog-C3PYjN8c.js");
+const require_dist = require("../dist-jkwxbcbK.js");
+const require_node = require("../node-C_1U1uzn.js");
+const require_custom_model_catalog = require("../custom-model-catalog-BFosahFu.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
 const require_restream_intent = require("../restream-intent-7uDNqMKs.js");

package/dist/pipeline-runner/index.mjs

@@ -1,6 +1,6 @@
-import { A as NativeLeaseAdmissionSchema, An as BaseAddon, E as FailureCounters, In as createEvent, Kn as nodePin, Kt as pickDetailCropConvention, Ln as customAction, M as NodeBenchRunnerInputSchema, Mt as linkedStepOf, Nt as loadContributionCapability, On as errMsg, P as PIPELINE_RAMP, Pn as MODEL_FORMATS, Qn as boolean, Rn as defineCustomActions, V as ROOT_SUPPLIABLE_STEP_IDS, Xn as _enum, Y as allowedSuppliedEffect, Yt as pipelineRunnerCapability, Zn as array, _ as DEFAULT_DETAIL_CROP_CONVENTION, a as BackgroundRunRegistry, an as resolveModelBoundSetting, cn as resolveRootSupply, cr as EventCategory, er as lazy, ht as deriveRootFaceRefineRect, j as NativeLeaseSettingsSchema, ln as rootSuppliesOf, m as CROP_SUPPLY_SOURCES, nr as number, nt as cameraOwnsMotionViaSensor, or as string, pt as deriveDetailCropRect, qt as pickNativeLeaseOverride, rr as object, tr as literal, tt as buildBenchStepTree, wt as failureContributionCapability, x as DEVICE_RAMP, y as DEFAULT_NATIVE_LEASE_SETTINGS } from "../dist-DKSwif2M.mjs";
-import { i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-C_Fqti3A.mjs";
-import { a as stepsForElectedPool, b as getStepDefinition, d as rootObjectGate, f as localFrameRegistry, h as resolveFrameViewGeometry, i as placeDetailStep, l as resolveDefaultDetectionModel, m as createSessionDecodeCoordinator, p as isSessionDecodeReadGone, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, y as getStep } from "../custom-model-catalog-uHzR2xWY.mjs";
+import { A as NativeLeaseAdmissionSchema, An as BaseAddon, E as FailureCounters, In as createEvent, Kn as nodePin, Kt as pickDetailCropConvention, Ln as customAction, M as NodeBenchRunnerInputSchema, Mt as linkedStepOf, Nt as loadContributionCapability, On as errMsg, P as PIPELINE_RAMP, Pn as MODEL_FORMATS, Qn as boolean, Rn as defineCustomActions, V as ROOT_SUPPLIABLE_STEP_IDS, Xn as _enum, Y as allowedSuppliedEffect, Yt as pipelineRunnerCapability, Zn as array, _ as DEFAULT_DETAIL_CROP_CONVENTION, a as BackgroundRunRegistry, an as resolveModelBoundSetting, cn as resolveRootSupply, cr as EventCategory, er as lazy, ht as deriveRootFaceRefineRect, j as NativeLeaseSettingsSchema, ln as rootSuppliesOf, m as CROP_SUPPLY_SOURCES, nr as number, nt as cameraOwnsMotionViaSensor, or as string, pt as deriveDetailCropRect, qt as pickNativeLeaseOverride, rr as object, tr as literal, tt as buildBenchStepTree, wt as failureContributionCapability, x as DEVICE_RAMP, y as DEFAULT_NATIVE_LEASE_SETTINGS } from "../dist-CbFPOFAD.mjs";
+import { i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-C-2fB9kH.mjs";
+import { a as stepsForElectedPool, b as getStepDefinition, d as rootObjectGate, f as localFrameRegistry, h as resolveFrameViewGeometry, i as placeDetailStep, l as resolveDefaultDetectionModel, m as createSessionDecodeCoordinator, p as isSessionDecodeReadGone, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, y as getStep } from "../custom-model-catalog-CVbK0xKc.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
 import { c as withDetectionIntent, o as preRollRequestOf, t as DETECTION_PRE_ROLL_REQUEST_MS } from "../restream-intent-DyGmLAU9.mjs";

package/dist/{process-memory-Dq_Omilr.mjs → process-memory-B3I-NvnX.mjs}

@@ -1,4 +1,4 @@
-import { Wt as parseProcStatus } from "./dist-DKSwif2M.mjs";
+import { Wt as parseProcStatus } from "./dist-CbFPOFAD.mjs";
 import * as fs from "node:fs";
 import { execFile } from "node:child_process";
 //#region src/shared/node-topology-platform.ts

package/dist/{process-memory-DELcKfDf.js → process-memory-Cfh1BQYg.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-D3PtiAhd.js");
+const require_dist = require("./dist-jkwxbcbK.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_child_process = require("node:child_process");

package/dist/recorder/index.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-D3PtiAhd.js");
-const require_node = require("../node--15m1sN3.js");
+const require_dist = require("../dist-jkwxbcbK.js");
+const require_node = require("../node-C_1U1uzn.js");
 const require_hub_hostname = require("../hub-hostname-DAJXlOgV.js");
 const require_restream_intent = require("../restream-intent-7uDNqMKs.js");
 const require_retire_root_keys = require("../retire-root-keys-Csb8z2f3.js");

package/dist/recorder/index.mjs

@@ -1,5 +1,5 @@
-import { $t as recordingExportCapability, An as BaseAddon, At as isFirstLevelMacroClass, B as RECORDING_SOURCE_CAMSTACK_ADDON, Bt as modeMayWrite, C as EVENT_PAD_MS, Cn as evaluateSensorEdge, Ct as exportSubjectOf, Dn as DeviceType, En as DeviceFeature, Et as gbToBytes, G as VIDEOCLIPS_MAX_OFFER_BYTES, H as RecordingConfigSchema, It as mayReadLocation, Jn as selectAssignedProfileSlots, K as VISIT_MERGE_GAP_MS, Kn as nodePin, Ln as customAction, Lt as mayWriteToLocation, N as OpsLogEntrySchema, Nt as loadContributionCapability, On as errMsg$1, Qn as boolean, Qt as recordingCapability, R as RECORDING_EXPORT_MAX_READ_BYTES, Rn as defineCustomActions, Rt as memoizePinnedFfmpeg, S as EVENT_OWNER_TYPES, St as evictionPolicyOfLocation, T as ExportRecordSchema, U as RecordingSignalStatusSchema, Vn as hydrateSchema, Xn as _enum, Yn as sleep$1, Zn as array, Zt as recordingArchiveCapability, _n as videoclipsCapability, ar as record, at as clipExportFailureOf, cr as EventCategory, en as recordingSignalCapability, et as batteryCapability, fn as storageEvictableCapability, ft as deriveBatteryPresence, hn as stripRetiredBandPreBufferSec, in as resolveLocationMode, ir as preprocess, it as clipExportFailure, mt as deriveRecordingMode, nn as resolveCreateExportSubject, nr as number, o as BatteryStatusSchema, or as string, pn as storageOccupancyCapability, rr as object, s as CLIP_BROKER_PACED_RATES, sn as resolveRecordingProfiles, v as DEFAULT_EVENTS_BAND_BUFFER_SEC, xt as evictionPolicyForMode, z as RECORDING_SOURCE_CAMSTACK, zt as migrateLegacyDeviceSignalConfig } from "../dist-DKSwif2M.mjs";
-import { a as physicalRootOf, i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-C_Fqti3A.mjs";
+import { $t as recordingExportCapability, An as BaseAddon, At as isFirstLevelMacroClass, B as RECORDING_SOURCE_CAMSTACK_ADDON, Bt as modeMayWrite, C as EVENT_PAD_MS, Cn as evaluateSensorEdge, Ct as exportSubjectOf, Dn as DeviceType, En as DeviceFeature, Et as gbToBytes, G as VIDEOCLIPS_MAX_OFFER_BYTES, H as RecordingConfigSchema, It as mayReadLocation, Jn as selectAssignedProfileSlots, K as VISIT_MERGE_GAP_MS, Kn as nodePin, Ln as customAction, Lt as mayWriteToLocation, N as OpsLogEntrySchema, Nt as loadContributionCapability, On as errMsg$1, Qn as boolean, Qt as recordingCapability, R as RECORDING_EXPORT_MAX_READ_BYTES, Rn as defineCustomActions, Rt as memoizePinnedFfmpeg, S as EVENT_OWNER_TYPES, St as evictionPolicyOfLocation, T as ExportRecordSchema, U as RecordingSignalStatusSchema, Vn as hydrateSchema, Xn as _enum, Yn as sleep$1, Zn as array, Zt as recordingArchiveCapability, _n as videoclipsCapability, ar as record, at as clipExportFailureOf, cr as EventCategory, en as recordingSignalCapability, et as batteryCapability, fn as storageEvictableCapability, ft as deriveBatteryPresence, hn as stripRetiredBandPreBufferSec, in as resolveLocationMode, ir as preprocess, it as clipExportFailure, mt as deriveRecordingMode, nn as resolveCreateExportSubject, nr as number, o as BatteryStatusSchema, or as string, pn as storageOccupancyCapability, rr as object, s as CLIP_BROKER_PACED_RATES, sn as resolveRecordingProfiles, v as DEFAULT_EVENTS_BAND_BUFFER_SEC, xt as evictionPolicyForMode, z as RECORDING_SOURCE_CAMSTACK, zt as migrateLegacyDeviceSignalConfig } from "../dist-CbFPOFAD.mjs";
+import { a as physicalRootOf, i as NO_COST_CLAIM, t as ChildCostRegistry } from "../node-C-2fB9kH.mjs";
 import { t as resolveHubHostname } from "../hub-hostname-cCknRYKj.mjs";
 import { d as PREBUFFER_MAX_MS, l as withRecordingIntent, r as RECORDING_PRE_ROLL_REQUEST_MS } from "../restream-intent-DyGmLAU9.mjs";
 import { n as RowMapStore, t as retireRootKeys } from "../retire-root-keys-DZvlso2l.mjs";

package/dist/{segment-demux-js-BTUbXt7b.mjs → segment-demux-js-D3JBJeN6.mjs}

@@ -1,5 +1,5 @@
 import { r as __toESM, t as __commonJSMin } from "./chunk-DnnnRqeS.mjs";
-import { On as errMsg } from "./dist-DKSwif2M.mjs";
+import { On as errMsg } from "./dist-CbFPOFAD.mjs";
 import { spawn } from "node:child_process";
 //#region src/stream-broker/recorded/avcc-annexb.ts
 /**

package/dist/{segment-demux-js-DSYbEqvj.js → segment-demux-js-uxBcJy15.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-emK7D4bc.js");
-const require_dist = require("./dist-D3PtiAhd.js");
+const require_dist = require("./dist-jkwxbcbK.js");
 let node_child_process = require("node:child_process");
 //#region src/stream-broker/recorded/avcc-annexb.ts
 /**