@camstack/addon-pipeline 1.2.604 → 1.2.605

package/dist/audio-analyzer/index.js

@@ -3,9 +3,9 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-DGzDqaBO.js");
-const require_model_catalogs = require("../model-catalogs-BZ7wE3tk.js");
-const require_process_memory = require("../process-memory-C8-aiceH.js");
+const require_dist = require("../dist-7LlEAfx1.js");
+const require_model_catalogs = require("../model-catalogs-PZwyhy-6.js");
+const require_process_memory = require("../process-memory-BekNMmIb.js");
 let node_fs = require("node:fs");
 node_fs = require_chunk.__toESM(node_fs);
 let node_path = require("node:path");

package/dist/audio-analyzer/index.mjs

@@ -1,7 +1,7 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { $ as audioAnalyzerCapability, F as PoolMemoryWatchdog, Gn as hydrateSchema, Lt as mapAudioLabelToMacro, Nn as BaseAddon, Q as audioAnalysisCapability, Rn as audioChunkBytesPerSample, Un as expandAudioChunkToF32le, Zn as nodePin, cn as resolvePoolMemoryPolicy, h as DEFAULT_AUDIO_ANALYZER_CONFIG, jn as errMsg, mr as EventCategory, r as AUDIO_BACKEND_CHOICES } from "../dist-BZ34hSbo.mjs";
-import { n as AUDIO_CLASSIFIER_MODELS } from "../model-catalogs-EjFqjUfh.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-BPqkGyDA.mjs";
+import { $ as audioAnalyzerCapability, F as PoolMemoryWatchdog, Gn as hydrateSchema, Lt as mapAudioLabelToMacro, Nn as BaseAddon, Q as audioAnalysisCapability, Rn as audioChunkBytesPerSample, Un as expandAudioChunkToF32le, Zn as nodePin, cn as resolvePoolMemoryPolicy, h as DEFAULT_AUDIO_ANALYZER_CONFIG, jn as errMsg, mr as EventCategory, r as AUDIO_BACKEND_CHOICES } from "../dist-C_81FQSz.mjs";
+import { n as AUDIO_CLASSIFIER_MODELS } from "../model-catalogs-CWnvAqRN.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-BpmFzpGK.mjs";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";
 import { ensureModel } from "@camstack/system/addon-utils";

package/dist/{custom-model-catalog-BmQ6g825.js → custom-model-catalog-CEwbRUr7.js}

@@ -1,5 +1,5 @@
-const require_dist = require("./dist-DGzDqaBO.js");
-const require_model_catalogs = require("./model-catalogs-BZ7wE3tk.js");
+const require_dist = require("./dist-7LlEAfx1.js");
+const require_model_catalogs = require("./model-catalogs-PZwyhy-6.js");
 const require_worker_protocol = require("./worker-protocol-C-G8qmye.js");
 let node_crypto = require("node:crypto");
 //#region src/detection-pipeline/registry/effective-confidence.ts

package/dist/{custom-model-catalog-BWxCwQ1L.mjs → custom-model-catalog-G0HvRpSn.mjs}

@@ -1,5 +1,5 @@
-import { b as DEVICE_BACKEND_TO_FORMAT, et as audioKindId, f as COCO_80_LABELS, i as AUDIO_MACRO_LABELS, jt as inferModelProvider, k as LABEL_SUPPLY_VOCABULARIES, mn as stepModelRunsOnFormat, p as COCO_TO_MACRO } from "./dist-BZ34hSbo.mjs";
-import { a as FACE_DETECTION_MODELS, c as OBJECT_DETECTION_MODELS, d as PLATE_OCR_MODELS, f as SEGMENTATION_REFINER_MODELS, i as CLIP_EMBEDDING_MODELS, l as PACKAGE_DETECTION_MODELS, n as AUDIO_CLASSIFIER_MODELS, o as FACE_EMBEDDING_MODELS, p as VEHICLE_CLASSIFIER_MODELS, r as BIRD_CLASSIFIER_MODELS, s as INSTANCE_SEGMENTATION_MODELS, t as ANIMAL_CLASSIFIER_MODELS, u as PLATE_DETECTION_MODELS } from "./model-catalogs-EjFqjUfh.mjs";
+import { b as DEVICE_BACKEND_TO_FORMAT, et as audioKindId, f as COCO_80_LABELS, i as AUDIO_MACRO_LABELS, jt as inferModelProvider, k as LABEL_SUPPLY_VOCABULARIES, mn as stepModelRunsOnFormat, p as COCO_TO_MACRO } from "./dist-C_81FQSz.mjs";
+import { a as FACE_DETECTION_MODELS, c as OBJECT_DETECTION_MODELS, d as PLATE_OCR_MODELS, f as SEGMENTATION_REFINER_MODELS, i as CLIP_EMBEDDING_MODELS, l as PACKAGE_DETECTION_MODELS, n as AUDIO_CLASSIFIER_MODELS, o as FACE_EMBEDDING_MODELS, p as VEHICLE_CLASSIFIER_MODELS, r as BIRD_CLASSIFIER_MODELS, s as INSTANCE_SEGMENTATION_MODELS, t as ANIMAL_CLASSIFIER_MODELS, u as PLATE_DETECTION_MODELS } from "./model-catalogs-CWnvAqRN.mjs";
 import { t as isWorkerReply } from "./worker-protocol-D_NzPcnh.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/detection-pipeline/registry/effective-confidence.ts

package/dist/detection-pipeline/index.js

@@ -3,11 +3,11 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../chunk-emK7D4bc.js");
-const require_dist = require("../dist-DGzDqaBO.js");
-const require_node = require("../node-CVbPzQN2.js");
-const require_custom_model_catalog = require("../custom-model-catalog-BmQ6g825.js");
+const require_dist = require("../dist-7LlEAfx1.js");
+const require_node = require("../node-B8vaXwjz.js");
+const require_custom_model_catalog = require("../custom-model-catalog-CEwbRUr7.js");
 const require_lazy_sharp = require("../lazy-sharp-BuwKlQLR.js");
-const require_process_memory = require("../process-memory-C8-aiceH.js");
+const require_process_memory = require("../process-memory-BekNMmIb.js");
 let node_os = require("node:os");
 node_os = require_chunk.__toESM(node_os);
 let node_fs = require("node:fs");

package/dist/detection-pipeline/index.mjs

@@ -1,9 +1,9 @@
 import { n as __require } from "../chunk-DnnnRqeS.mjs";
-import { F as PoolMemoryWatchdog, Ft as loadContributionCapability, Gn as hydrateSchema, Gt as overlayClusterStepSettings, Nn as BaseAddon, Nt as linkedLabelStepId, O as LABEL_SUPPLY_MACRO, St as evaluateZoneRules, Ut as modelBindingKey, Wn as hfModelUrl, X as applyModelBoundSettings, Xt as pipelineExecutorCapability, Zn as nodePin, _t as detectionPipelineCapability, cn as resolvePoolMemoryPolicy, ct as containingParentIndex, d as CLUSTER_MODEL_SCOPED_STEPS, dn as rootSuppliesOf, er as sleep, fn as runtimeDevices$1, fr as string, ft as defaultDeviceFor$1, g as DEFAULT_CLUSTER_STEP_SETTINGS, jn as errMsg$1, lr as object, mn as stepModelRunsOnFormat, mr as EventCategory, n as APPLE_SA_TO_MACRO, pr as union, q as YAMNET_TO_MACRO, qt as pickClusterStepSettings, rn as resolveClusterStepModelId, rr as array, st as collectModelBoundKeys, xt as enumerateInferenceDevices, yn as supportedRuntimes$1, zn as createEvent } from "../dist-BZ34hSbo.mjs";
-import { c as readProcessCost } from "../node-CJPdIMAm.mjs";
-import { C as resolveModelDefaultConfidence, S as landmarkPrecisionVerdict, _ as ALL_STEPS, b as getStepDefinition, f as localFrameRegistry, g as ALL_PIPELINE_STEPS, l as resolveDefaultDetectionModel, n as mergeCustomModels, o as deviceKeyOf, r as buildSubtreeCanRun, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, v as getDefaultModelForFormat, x as resolveModelForFormat, y as getStep } from "../custom-model-catalog-BWxCwQ1L.mjs";
+import { F as PoolMemoryWatchdog, Ft as loadContributionCapability, Gn as hydrateSchema, Gt as overlayClusterStepSettings, Nn as BaseAddon, Nt as linkedLabelStepId, O as LABEL_SUPPLY_MACRO, St as evaluateZoneRules, Ut as modelBindingKey, Wn as hfModelUrl, X as applyModelBoundSettings, Xt as pipelineExecutorCapability, Zn as nodePin, _t as detectionPipelineCapability, cn as resolvePoolMemoryPolicy, ct as containingParentIndex, d as CLUSTER_MODEL_SCOPED_STEPS, dn as rootSuppliesOf, er as sleep, fn as runtimeDevices$1, fr as string, ft as defaultDeviceFor$1, g as DEFAULT_CLUSTER_STEP_SETTINGS, jn as errMsg$1, lr as object, mn as stepModelRunsOnFormat, mr as EventCategory, n as APPLE_SA_TO_MACRO, pr as union, q as YAMNET_TO_MACRO, qt as pickClusterStepSettings, rn as resolveClusterStepModelId, rr as array, st as collectModelBoundKeys, xt as enumerateInferenceDevices, yn as supportedRuntimes$1, zn as createEvent } from "../dist-C_81FQSz.mjs";
+import { c as readProcessCost } from "../node-Du8pLNm0.mjs";
+import { C as resolveModelDefaultConfidence, S as landmarkPrecisionVerdict, _ as ALL_STEPS, b as getStepDefinition, f as localFrameRegistry, g as ALL_PIPELINE_STEPS, l as resolveDefaultDetectionModel, n as mergeCustomModels, o as deviceKeyOf, r as buildSubtreeCanRun, s as resolveDeviceEngine, t as CustomModelCatalog, u as macroGateVerdict, v as getDefaultModelForFormat, x as resolveModelForFormat, y as getStep } from "../custom-model-catalog-G0HvRpSn.mjs";
 import { t as getSharp } from "../lazy-sharp-DXsqwpph.mjs";
-import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-BPqkGyDA.mjs";
+import { n as pickNodePlatformArch, t as readProcessMemory } from "../process-memory-BpmFzpGK.mjs";
 import * as os$1 from "node:os";
 import * as fs from "node:fs";
 import * as path$1 from "node:path";

package/dist/{dist-DGzDqaBO.js → dist-7LlEAfx1.js}

@@ -5547,7 +5547,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-BxjU_fJM.mjs
+//#region ../types/dist/sleep-yKL5gfrH.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -7978,9 +7978,9 @@ function normalizeAddonInitResult(result) {
 	return result;
 }
 /**
-* The share-view scope kinds a `csv_*` share token can carry. The hub mints
-* and validates them (`share-token.service.ts` builds its enum from this
-* list); a data plane names the kinds it ACCEPTS in `share`.
+* The share-view scope kinds a share-link token can carry. The hub mints
+* and validates them (`ShareViewGrantSchema` builds its
+* enum from this list); a data plane names the kinds it ACCEPTS in `share`.
 */
 var SHARE_VIEW_KINDS = ["grid-view", "events-view"];
 /** The wire shape of {@link PeerBytesTicket} — see the type for what it is. */
@@ -15306,7 +15306,7 @@ var ConvertResultSchema = object({
 * `super_admin` — collapsed onto the single boolean because every
 * non-admin caller is governed by the same scope-check rules; the
 * distinction was only ever used to route role-specific procedures
-* which we no longer have. CLI / webhook integrations are `cst_*` tokens
+* which we no longer have. CLI / webhook integrations are tokens (`auth.mintToken`)
 * with `isAdmin: false` + an explicit scope list.
 */
 /** Per-method access flavour. Materialised on every cap method via codegen. */
@@ -15495,10 +15495,12 @@ var AddonRoutesScopeSchema = object({
 	type: literal("addon-routes"),
 	access: array(MethodAccessSchema).min(1)
 });
+var PreferencesSelfScopeSchema = object({ type: literal("preferences-self") });
 var CredentialScopeSchema = union([
 	literal("*"),
 	ShareViewScopeSchema,
 	AddonRoutesScopeSchema,
+	PreferencesSelfScopeSchema,
 	TokenScopeSchema
 ]);
 object({
@@ -15507,6 +15509,55 @@ object({
 	jti: string().min(16),
 	scopes: array(CredentialScopeSchema).min(1)
 });
+var PreferenceNamespaceSchema = string().regex(/^[a-z][a-z0-9.-]{0,63}$/);
+/** A namespace's value: a JSON object, opaque to the hub. */
+var PreferenceValueSchema = record(string(), unknown());
+var PreferenceDeviceIdSchema = string().min(1).max(64);
+/** A stored row, as the owner reads it. */
+var PreferenceRowSchema = object({
+	namespace: PreferenceNamespaceSchema,
+	value: PreferenceValueSchema,
+	/** Starts at 1, +1 on every write of this namespace. A delete ends the row and its count. */
+	revision: number().int().positive(),
+	updatedAt: number().int(),
+	/** The client id the last writer sent; `null` when it sent none. */
+	updatedByDevice: PreferenceDeviceIdSchema.nullable()
+});
+object({ 
+/** Absent: every namespace the caller holds. */
+namespaces: array(PreferenceNamespaceSchema).max(32).optional() });
+object({ rows: array(PreferenceRowSchema) });
+object({
+	namespace: PreferenceNamespaceSchema,
+	value: PreferenceValueSchema,
+	/**
+	* The revision the edit was based on. Absent: last write wins. `0`: the
+	* namespace must not exist yet. Any other value that is not the current
+	* revision answers `conflict` and writes nothing.
+	*/
+	baseRevision: number().int().nonnegative().optional(),
+	deviceId: PreferenceDeviceIdSchema.optional()
+});
+discriminatedUnion("status", [object({
+	status: literal("saved"),
+	row: PreferenceRowSchema
+}), object({
+	status: literal("conflict"),
+	current: PreferenceRowSchema.nullable()
+})]);
+object({ namespace: PreferenceNamespaceSchema });
+object({ 
+/** `false` when the namespace did not exist. */
+deleted: boolean() });
+object({ 
+/** The revision the client holds per namespace; a namespace it does not list is new to it. */
+revisionByNamespace: record(PreferenceNamespaceSchema, number().int().nonnegative()).refine((map) => Object.keys(map).length <= 32, { message: `at most 32 namespaces` }) });
+object({
+	/** Every row whose revision differs from the client's, and every row it did not list. */
+	rows: array(PreferenceRowSchema),
+	/** Namespaces the client listed that no longer exist. */
+	deleted: array(PreferenceNamespaceSchema)
+});
 _enum(["new-session", "step-up"]);
 /** The languages the hub's app landing pages are written in (D858). */
 var AppPageLangSchema = _enum(["en", "it"]);
@@ -42924,38 +42975,37 @@ method(LlmRuntimeCompleteInputSchema, LlmGenerateResultSchema, {
 	auth: "admin",
 	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
 });
+var LlmProfileKindSchema = string().regex(/^[a-z0-9][a-z0-9-]{0,63}$/, "a kind id is lower-case letters, digits and dashes");
+/** What a model (or, by default, every model of a kind) can do. */
+var LlmModelFeaturesSchema = object({
+	vision: boolean(),
+	tools: boolean(),
+	streaming: boolean()
+});
+/** One model a provider offers. `features` overrides the kind's defaults, per field. */
+var LlmModelInfoSchema = object({
+	id: string(),
+	label: string().optional(),
+	contextLength: number().int().positive().optional(),
+	features: LlmModelFeaturesSchema.partial().optional()
+});
 /**
-* `llm` — consumer-facing LLM surface (spec §1-§3). Collection-mode: array
-* methods concat-fan across providers; single-row methods route to ONE
-* provider by the `addonId` in the call input (the notification-output
-* posture, notification-output.cap.ts:215-250). Provided by `addon-ai`
-* (hub-placed); the cap stays open for future providers.
-*
-* Profiles are ROWS (data), not addons: one row = one usable model endpoint.
-* `apiKey` is a password field — providers REDACT it on read and merge on
-* write; a stored key NEVER round-trips to a client.
+* The provider-specific part of a profile, validated by the provider that owns
+* the kind (`upsertProfile` refuses what it does not accept). A field its
+* `connectionSchema` declares `type: 'password'` is a secret: it is held in the
+* keychain, never in the row, and reads back as the redaction marker.
 */
-var LlmProfileKindSchema = _enum([
-	"openai-compatible",
-	"openai",
-	"anthropic",
-	"google",
-	"managed-local",
-	"apple-foundation"
-]);
+var LlmProviderConfigSchema = record(string(), unknown());
 var LlmProfileSchema = object({
 	id: string(),
 	name: string(),
+	/** The provider-declared kind (`LlmProfileKindDescriptor.kind`). */
 	kind: LlmProfileKindSchema,
 	/** Stamped by the provider — keeps the fanned catalog routable. */
 	addonId: string(),
 	enabled: boolean(),
 	/** Vendor model id, or the managed runtime's loaded model. */
 	model: string(),
-	/** Required for openai-compatible; override for cloud kinds. */
-	baseUrl: string().optional(),
-	/** ConfigUISchema type:'password' — never round-trips (spec §5). */
-	apiKey: string().optional(),
 	/** Vision on/off. A vision call against a `false` profile is REFUSED, never
 	*  degraded to text — that shipped once and produced a confident answer to a
 	*  question about a picture nobody sent. */
@@ -42963,15 +43013,11 @@ var LlmProfileSchema = object({
 	temperature: number().min(0).max(2).optional(),
 	/** Nucleus sampling. Every wire we speak has it. */
 	topP: number().min(0).max(1).optional(),
-	/** Top-k sampling. Carried only by the wires that have it — NEITHER OpenAI
-	*  wire does, and the client drops it there (measured: the request body gets
-	*  `top_p` and no `top_k`). The profile editor hides the field wherever it
-	*  would change nothing; `KINDS_WITH_TOP_K` is the single owner of that list. */
+	/** Top-k sampling. Carried only by the wires that have it — a kind offers the
+	*  field in its editor only when its descriptor lists it in `profileFields`. */
 	topK: number().int().positive().optional(),
 	maxTokens: number().int().positive().optional(),
-	/** Prompt context window. Advisory for cloud kinds (they enforce their own);
-	*  for `managed-local` it is the llama.cpp `--ctx-size` the runtime starts
-	*  the model with, so it is the one field that changes a PROCESS. */
+	/** Prompt context window. Advisory for cloud kinds (they enforce their own). */
 	contextLength: number().int().positive().optional(),
 	/** Default system prompt. A caller's `system` REPLACES it (never appends —
 	*  two system prompts fighting is worse than either alone). */
@@ -42997,16 +43043,37 @@ var LlmProfileSchema = object({
 	*  library; the REGISTRY of callable tools is ours and is empty in v1, so a
 	*  `true` here buys the wiring, not behaviour, until tools are registered. */
 	toolsEnabled: boolean().default(false),
-	extraHeaders: record(string(), string()).optional(),
-	/** kind === 'managed-local' only (spec §4). */
-	runtime: ManagedRuntimeConfigSchema.optional(),
-	/**
-	* kind === 'apple-foundation' only: WHERE it runs — the only thing there is
-	* to configure (no key, no URL, no download; `model` is `apple-system`).
-	* `supportsVision` on such a row is stamped by the provider from the node's
-	* reported `imageInput`, never taken from the operator (D62).
-	*/
-	appleFoundation: object({ nodeId: string() }).optional()
+	/** Everything the kind's provider owns (endpoint, key, node, runtime…). */
+	providerConfig: LlmProviderConfigSchema.default({})
+});
+/**
+* The common profile fields a kind's editor offers. The editor owns how each
+* one is drawn; the provider says which of them mean something on its wire.
+*/
+var LlmProfileFieldSchema = _enum([
+	"temperature",
+	"topP",
+	"topK",
+	"maxTokens",
+	"contextLength",
+	"systemPrompt",
+	"timeoutMs",
+	"connectTimeoutMs",
+	"firstTokenTimeoutMs",
+	"idleTimeoutMs",
+	"retry",
+	"toolsEnabled"
+]);
+/**
+* A provider-drawn part of the editor, by a generic widget id the admin UI
+* registers (`ai/apple-node`). `placement: 'model'` replaces the generic model
+* picker: that widget owns the model choice.
+*/
+var LlmProviderWidgetSchema = object({
+	id: string(),
+	placement: _enum(["connection", "model"]),
+	/** `providerConfig` keys this widget must fill before the profile can be saved. */
+	requires: array(string()).optional()
 });
 /** ConfigUISchema tree passed through untyped on the wire (the
 *  notification-output `ConfigSchemaPassthrough` precedent at
@@ -43015,11 +43082,56 @@ var ConfigSchemaPassthrough$3 = unknown();
 var LlmProfileKindDescriptorSchema = object({
 	kind: LlmProfileKindSchema,
 	label: string(),
+	/** A generic icon name (`cloud`, `plug`, `cpu`) — never a glyph or a logo. */
 	icon: string(),
 	/** Stamped by each provider so the concat-fanned catalog stays routable. */
 	addonId: string(),
-	configSchema: ConfigSchemaPassthrough$3
+	/** The provider's own fields (`providerConfig`); `password` fields are keychain-held. */
+	connectionSchema: ConfigSchemaPassthrough$3,
+	/** Provider fields that belong under "Advanced" (extra headers, runtime tuning). */
+	advancedSchema: ConfigSchemaPassthrough$3.optional(),
+	/** The kind's defaults; a model from `listModels` may override any of them. */
+	features: LlmModelFeaturesSchema,
+	/** `false` = the provider stamps `supportsVision` itself (from what a node reports). */
+	visionEditable: boolean(),
+	/** Where the model list comes from: `listModels`, `staticModels`, or nowhere. */
+	modelCatalog: _enum([
+		"fetch",
+		"static",
+		"none"
+	]),
+	staticModels: array(LlmModelInfoSchema).optional(),
+	/** The common fields that mean something on this kind's wire. */
+	profileFields: array(LlmProfileFieldSchema),
+	providerWidgets: array(LlmProviderWidgetSchema).optional()
 });
+/**
+* `listModels` input. `connection` is an UNSAVED draft of `providerConfig`
+* (the editor's form); with `profileId` too, a secret the draft leaves
+* untouched (absent or the redaction marker) is resolved server-side from the
+* stored profile — the browser never receives it.
+*/
+var LlmListModelsInputSchema = object({
+	addonId: string(),
+	kind: LlmProfileKindSchema,
+	profileId: string().optional(),
+	connection: LlmProviderConfigSchema.optional()
+});
+var LlmListModelsErrorCodeSchema = _enum([
+	"auth",
+	"network",
+	"unsupported",
+	"invalid"
+]);
+/** A RESULT, never a throw: "wrong key" is an answer the editor renders inline. */
+var LlmListModelsResultSchema = discriminatedUnion("ok", [object({
+	ok: literal(true),
+	models: array(LlmModelInfoSchema)
+}), object({
+	ok: literal(false),
+	code: LlmListModelsErrorCodeSchema,
+	message: string()
+})]);
 var LlmDefaultSelectorSchema = union([object({ consumer: string() }), object({ purpose: _enum(["text", "vision"]) })]);
 var LlmDefaultSchema = object({
 	selector: LlmDefaultSelectorSchema,
@@ -43119,7 +43231,10 @@ method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, {
 	kind: "mutation",
 	auth: "admin",
 	timeoutMs: AI_CAP_TRANSPORT_TIMEOUT_MS
-}), method(ProfileRefInputSchema, array(string())), method(object({}), array(LlmDefaultSchema)), method(object({
+}), method(LlmListModelsInputSchema, LlmListModelsResultSchema, {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({}), array(LlmDefaultSchema)), method(object({
 	selector: LlmDefaultSelectorSchema,
 	profileId: string().nullable()
 }), _void(), {
@@ -65975,26 +66090,6 @@ var ApiKeySummarySchema = object({
 	createdAt: number(),
 	lastUsedAt: number().optional()
 });
-var ScopedTokenSummarySchema = object({
-	id: string(),
-	userId: string(),
-	name: string(),
-	tokenPrefix: string(),
-	scopes: array(TokenScopeSchema),
-	expiresAt: number().nullish(),
-	lastUsedAt: number().nullish(),
-	createdAt: number()
-});
-var CreateScopedTokenInputSchema = object({
-	userId: string(),
-	name: string(),
-	scopes: array(TokenScopeSchema),
-	expiresAt: number().optional()
-});
-var CreateScopedTokenResultSchema = object({
-	token: string(),
-	record: ScopedTokenSummarySchema
-});
 var OauthSessionSummarySchema = object({
 	id: string(),
 	userId: string(),
@@ -66016,11 +66111,11 @@ var TotpStatusSchema = object({
 	confirmedAt: number().nullable()
 });
 /**
-* user-management — singleton capability for user accounts, API keys,
-* and scoped tokens.
+* user-management — singleton capability for user accounts and the
+* legacy API-key rows.
 *
 * v2 model: every method gated by `auth: 'admin'`. Admin-only delegation
-* — the subset check on `setUserScopes` / `createScopedToken` is moot
+* — the subset check on `setUserScopes` is moot
 * because non-admins never reach these. If/when we open non-admin
 * delegation, structural caller-scope subset check goes inside the
 * provider.
@@ -66077,15 +66172,7 @@ method(_void(), array(UserSummarySchema), { auth: "admin" }), method(CreateUserI
 	kind: "mutation",
 	auth: "admin",
 	access: "delete"
-}), method(CreateScopedTokenInputSchema, CreateScopedTokenResultSchema, {
-	kind: "mutation",
-	auth: "admin",
-	access: "create"
-}), method(object({ id: string() }), object({ success: literal(true) }), {
-	kind: "mutation",
-	auth: "admin",
-	access: "delete"
-}), method(object({ token: string() }), ScopedTokenSummarySchema.nullable(), { access: "view" }), method(object({ userId: string() }), array(ScopedTokenSummarySchema), { auth: "admin" }), method(object({ userId: string() }), TotpSetupResultSchema, {
+}), method(object({ userId: string() }), TotpSetupResultSchema, {
 	kind: "mutation",
 	auth: "admin",
 	access: "create"
@@ -70259,7 +70346,7 @@ Object.freeze({
 		capName: "llm",
 		capScope: "system",
 		addonId: null,
-		access: "view"
+		access: "create"
 	},
 	"llm.listNodeModels": {
 		capName: "llm",
@@ -74923,12 +75010,6 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"userManagement.createScopedToken": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"userManagement.createUser": {
 		capName: "user-management",
 		capScope: "system",
@@ -74977,12 +75058,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"userManagement.listScopedTokens": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"userManagement.listUsers": {
 		capName: "user-management",
 		capScope: "system",
@@ -75037,12 +75112,6 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
-	"userManagement.revokeScopedToken": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "delete"
-	},
 	"userManagement.setupTotp": {
 		capName: "user-management",
 		capScope: "system",
@@ -75073,12 +75142,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"userManagement.validateScopedToken": {
-		capName: "user-management",
-		capScope: "system",
-		addonId: null,
-		access: "view"
-	},
 	"userManagement.verifyTotp": {
 		capName: "user-management",
 		capScope: "system",