@camstack/addon-post-analysis 1.2.336 → 1.2.338

package/dist/{clip-model-registry-BxUHFGUg.js → clip-model-registry-BcSLJ8aL.js}

@@ -5482,7 +5482,7 @@ var ZodIssueCode = {
 var ZodFirstPartyTypeKind;
 ZodFirstPartyTypeKind || (ZodFirstPartyTypeKind = {});
 //#endregion
-//#region ../types/dist/sleep-DXKLNFvA.mjs
+//#region ../types/dist/sleep-C16NCZR2.mjs
 /**
 * The audio chunk plane's byte format, and the ONE expansion from a coded
 * window to float samples (D455).
@@ -11560,89 +11560,51 @@ function resolveClipSearchMinScore(meta, request) {
 	const factor = CLIP_STRICTNESS_FACTOR[request.strictness ?? "loose"];
 	return Math.min(1, Math.round(meta.searchMinScore * factor * 1e3) / 1e3);
 }
-/**
-* The class names a per-class COUNT can ever be keyed on — the macro ids, and
-* only those.
-*
-* `preserveOriginal: false` below is the whole reason this set exists: the
-* executor maps each raw COCO label onto its macro and DROPS everything else,
-* so a tracked detection's `className` is always one of {@link MACRO_LABELS}.
-* Any surface that indexes counts by class name — the ZoneAnalytics occupancy
-* snapshot's `byClass`, and therefore every occupancy rule — can match nothing
-* else. Derived from the catalog, never hand-listed, so a new macro joins it by
-* being declared once.
-*
-* Cost of not having it, 2026-08-12: the notification rule editor offered the
-* full taxonomy for an occupancy class (occupancy is the one condition that
-* does not go through the engine's macro-expanding `expandClassSelector`), two
-* live rules were authored on `car`, and both counters read 0 forever.
-*/
-var DETECTION_MACRO_CLASSES = new Set([
-	{
-		id: "person",
-		name: "Person"
-	},
-	{
-		id: "vehicle",
-		name: "Vehicle"
-	},
-	{
-		id: "animal",
-		name: "Animal"
-	},
-	{
-		id: "package",
-		name: "Package"
-	}
-].map((l) => l.id));
-/** True when `className` is a macro the detector can actually emit (and hence a
-*  class a count can be keyed on) — see {@link DETECTION_MACRO_CLASSES}. */
-function isDetectionMacroClass(className) {
-	return DETECTION_MACRO_CLASSES.has(className.trim().toLowerCase());
-}
-var COCO_TO_MACRO = {
-	mapping: {
-		person: "person",
-		bicycle: "vehicle",
-		car: "vehicle",
-		motorcycle: "vehicle",
-		airplane: "vehicle",
-		bus: "vehicle",
-		train: "vehicle",
-		truck: "vehicle",
-		boat: "vehicle",
-		bird: "animal",
-		cat: "animal",
-		dog: "animal",
-		horse: "animal",
-		sheep: "animal",
-		cow: "animal",
-		elephant: "animal",
-		bear: "animal",
-		zebra: "animal",
-		giraffe: "animal",
-		suitcase: "package",
-		backpack: "package",
-		handbag: "package"
-	},
-	preserveOriginal: false
-};
-/** Steps a root detector may declare it fills. */
-var FILLABLE_STEP_IDS = [
+/** Steps whose effect a root label can BE. */
+var LABEL_SUPPLY_STEP_IDS = [
 	"animal-classifier",
 	"vehicle-classifier",
 	"package-detection"
 ];
-/** Narrow a step id to a fillable one — type guard, not a cast. */
-function isFillableStepId(value) {
-	return FILLABLE_STEP_IDS.some((id) => id === value);
+/** Steps whose box a root detection can BE. */
+var CROP_SUPPLY_STEP_IDS = ["plate-detection", "face-detection"];
+/** Every step a root model can supply. */
+var ROOT_SUPPLIABLE_STEP_IDS = [...LABEL_SUPPLY_STEP_IDS, ...CROP_SUPPLY_STEP_IDS];
+/** Narrow a step id to a suppliable one — type guard, not a cast. */
+function isRootSuppliableStepId(value) {
+	return ROOT_SUPPLIABLE_STEP_IDS.some((id) => id === value);
+}
+/** Narrow a step id to a label-kind one. */
+function isLabelSupplyStepId(value) {
+	return LABEL_SUPPLY_STEP_IDS.some((id) => id === value);
 }
+var CROP_SUPPLY_SOURCES = {
+	"plate-detection": {
+		rootLabels: ["license_plate"],
+		parentMacro: "vehicle",
+		childClass: "plate",
+		servedChildSteps: ["plate-ocr"],
+		use: "as-output"
+	},
+	"face-detection": {
+		rootLabels: ["face"],
+		parentMacro: "person",
+		childClass: "face",
+		servedChildSteps: ["face-embedding"],
+		use: "refine",
+		minRootInputPx: 640
+	}
+};
 /** The step a linked label stands in for, or `undefined` for any other attribution. */
 function linkedStepOf(attributionStepId) {
 	if (attributionStepId === void 0) return void 0;
 	if (!attributionStepId.startsWith("detector-link:")) return void 0;
 	const stepId = attributionStepId.slice(14);
-	return isFillableStepId(stepId) ? stepId : void 0;
+	return isLabelSupplyStepId(stepId) ? stepId : void 0;
+}
+/** The child steps of a crop-kind step that still run on the root's box. */
+function rootSupplyServes(stepId) {
+	return CROP_SUPPLY_SOURCES[stepId].servedChildSteps;
 }
 var MODEL_FORMATS = [
 	"onnx",
@@ -11776,12 +11738,35 @@ var ModelLicenseSchema = preprocess((value) => typeof value === "string" ? { wei
 	/** True when the weights or their data forbid commercial use. */
 	nonCommercial: boolean().optional()
 }));
-/** One `fillsClassifierEffects` entry — see `ModelCatalogEntry.fillsClassifierEffects`. */
-var FillsClassifierEffectSchema = object({
-	stepId: _enum(FILLABLE_STEP_IDS),
+/**
+* One step a ROOT detector can supply from its own output (D730) — see
+* `ModelCatalogEntry.suppliesSteps`.
+*
+* - `label`: the root's raw class IS the step's answer. `labelToEffect` maps
+*   the root's label to the step's vocabulary; `uncovered` is the vocabulary
+*   the root cannot produce (shown as unavailable, never a blocker).
+* - `crop`: the root draws the box the step would have found (`license_plate`
+*   for plate-detection, `face` for face-detection). The box becomes a detail
+*   child of the `parentMacro` detection that contains it — never a track.
+*/
+var RootStepSupplySchema = discriminatedUnion("kind", [object({
+	kind: literal("label"),
+	stepId: _enum(LABEL_SUPPLY_STEP_IDS),
 	labelToEffect: record(string(), string()),
 	uncovered: array(string()).readonly()
-});
+}), object({
+	kind: literal("crop"),
+	stepId: _enum(CROP_SUPPLY_STEP_IDS),
+	rootLabels: array(string()).readonly(),
+	parentMacro: _enum(["vehicle", "person"]),
+	childClass: _enum(["plate", "face"]),
+	/**
+	* The root's smaller input side, stamped on read by `rootSuppliesOf` from
+	* the model entry — what a step's `minRootInputPx` gate judges. Never
+	* stored by an import.
+	*/
+	rootInputPx: number().int().positive().optional()
+})]);
 var ModelCatalogEntrySchema = object({
 	id: string(),
 	name: string(),
@@ -11908,15 +11893,15 @@ var ModelCatalogEntrySchema = object({
 	*/
 	classMap: DetectionCatalogClassMapSchema.optional(),
 	/**
-	* The pipeline steps this ROOT detector already does the work of (D715):
-	* its labels name the effect the step exists to produce (`deer` for
-	* `animal-classifier`, `package` for `package-detection`). Derived from the
-	* labelmap by `deriveClassifierFills`, never hand-written; a COCO model
-	* declares none. Whether a declaration is honoured is the step's own
-	* `labelLink` policy (`resolveLabelLink`). `labelToEffect` values are in
-	* `FILLABLE_STEP_VOCABULARIES` (guard `check-label-link-vocabulary`).
+	* The pipeline steps this ROOT detector can supply from its own output
+	* (D730): its labels name a step's effect (`deer` for `animal-classifier`)
+	* or draw a step's box (`license_plate` for `plate-detection`). Computed at
+	* import from THIS model's labelmap by `deriveRootSupplies`, never written
+	* by hand and never assumed per family; a row without it is derived on read
+	* (`rootSuppliesOf`). Whether a camera uses it is the step's own
+	* `useRootModel` flag (`resolveRootSupply`).
 	*/
-	fillsClassifierEffects: array(FillsClassifierEffectSchema).readonly().optional(),
+	suppliesSteps: array(RootStepSupplySchema).readonly().optional(),
 	/**
 	* The model's CLIP feature-space contract (text encoder, dimension, vector
 	* index, token window, search floor) — see `clip-model.ts`. Present ONLY on a
@@ -19500,6 +19485,96 @@ var filesystemBrowseCapability = {
 		})
 	}
 };
+/** The central link domain the viewer app claims (Universal Links / App Links). */
+var CAMSTACK_APP_LINK_ORIGIN = "https://camstack.zentik.app";
+/** Where the hub serves the viewer SPA. */
+var HUB_VIEWER_MOUNT = "/viewer/camstack";
+/** True when `baseUrl` names the CamStack app link rather than a hub address. */
+function isAppLinkBase(baseUrl) {
+	if (baseUrl === null || baseUrl === void 0 || baseUrl === "") return false;
+	try {
+		return new URL(baseUrl).origin === CAMSTACK_APP_LINK_ORIGIN;
+	} catch {
+		return false;
+	}
+}
+/**
+* The base a viewer link is built on, from the flagged notification address:
+* the effective address is the explicit choice, else AUTO's `resolved`. The
+* one reading of that answer — the NC's tap and the Network page's preview
+* both go through it.
+*/
+function viewerLinkBaseOf(endpoint) {
+	const flagged = endpoint.baseUrl ?? endpoint.resolved;
+	return isAppLinkBase(flagged) ? {
+		form: "app",
+		hubBaseUrl: endpoint.appLinkHub ?? null
+	} : {
+		form: "hub",
+		hubBaseUrl: flagged
+	};
+}
+/**
+* Reduce a base URL to the bare origin the central page accepts as `hub=`,
+* or `null` when it cannot be one: not http(s), carries credentials, or does
+* not parse. A path/query/fragment is dropped — the central page mounts the
+* viewer under the origin itself.
+*/
+function toAppLinkHubOrigin(baseUrl) {
+	let parsed;
+	try {
+		parsed = new URL(baseUrl);
+	} catch {
+		return null;
+	}
+	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
+	if (parsed.username !== "" || parsed.password !== "") return null;
+	if (parsed.hostname === "") return null;
+	return parsed.origin;
+}
+/** The viewer route for a destination, or null when it names nothing. */
+function viewerRoute(destination) {
+	switch (destination.kind) {
+		case "camera": {
+			if (!Number.isInteger(destination.deviceId) || destination.deviceId <= 0) return null;
+			const at = destination.atMs;
+			return {
+				path: `/camera/${String(destination.deviceId)}`,
+				query: at !== void 0 && Number.isFinite(at) ? [["at", String(Math.trunc(at))]] : []
+			};
+		}
+		case "events": return {
+			path: "/events",
+			query: []
+		};
+		case "notifications": return {
+			path: "/notifications",
+			query: []
+		};
+	}
+}
+function encodeQuery(query) {
+	if (query.length === 0) return "";
+	return `?${query.map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`).join("&")}`;
+}
+/**
+* The link for a viewer destination, or `null` when none can be minted: an
+* unknown destination, or the `hub` form with no reachable base (a dead link
+* is worse than none).
+*/
+function buildViewerLink(input) {
+	const route = viewerRoute(input.destination);
+	if (route === null) return null;
+	const raw = input.base.hubBaseUrl;
+	const base = raw === null ? "" : raw.replace(/\/+$/, "");
+	if (input.base.form === "app") {
+		const origin = base === "" ? null : toAppLinkHubOrigin(base);
+		const query = origin === null ? route.query : [...route.query, ["hub", origin]];
+		return `${CAMSTACK_APP_LINK_ORIGIN}${route.path}${encodeQuery(query)}`;
+	}
+	if (base === "" || isAppLinkBase(base)) return null;
+	return `${base}${HUB_VIEWER_MOUNT}${route.path}${encodeQuery(route.query)}`;
+}
 /**
 * Transport bounds for AI capability methods.
 *
@@ -21560,6 +21635,73 @@ var notificationOutputCapability = {
 		})
 	}
 };
+/**
+* The class names a per-class COUNT can ever be keyed on — the macro ids, and
+* only those.
+*
+* `preserveOriginal: false` below is the whole reason this set exists: the
+* executor maps each raw COCO label onto its macro and DROPS everything else,
+* so a tracked detection's `className` is always one of {@link MACRO_LABELS}.
+* Any surface that indexes counts by class name — the ZoneAnalytics occupancy
+* snapshot's `byClass`, and therefore every occupancy rule — can match nothing
+* else. Derived from the catalog, never hand-listed, so a new macro joins it by
+* being declared once.
+*
+* Cost of not having it, 2026-08-12: the notification rule editor offered the
+* full taxonomy for an occupancy class (occupancy is the one condition that
+* does not go through the engine's macro-expanding `expandClassSelector`), two
+* live rules were authored on `car`, and both counters read 0 forever.
+*/
+var DETECTION_MACRO_CLASSES = new Set([
+	{
+		id: "person",
+		name: "Person"
+	},
+	{
+		id: "vehicle",
+		name: "Vehicle"
+	},
+	{
+		id: "animal",
+		name: "Animal"
+	},
+	{
+		id: "package",
+		name: "Package"
+	}
+].map((l) => l.id));
+/** True when `className` is a macro the detector can actually emit (and hence a
+*  class a count can be keyed on) — see {@link DETECTION_MACRO_CLASSES}. */
+function isDetectionMacroClass(className) {
+	return DETECTION_MACRO_CLASSES.has(className.trim().toLowerCase());
+}
+var COCO_TO_MACRO = {
+	mapping: {
+		person: "person",
+		bicycle: "vehicle",
+		car: "vehicle",
+		motorcycle: "vehicle",
+		airplane: "vehicle",
+		bus: "vehicle",
+		train: "vehicle",
+		truck: "vehicle",
+		boat: "vehicle",
+		bird: "animal",
+		cat: "animal",
+		dog: "animal",
+		horse: "animal",
+		sheep: "animal",
+		cow: "animal",
+		elephant: "animal",
+		bear: "animal",
+		zebra: "animal",
+		giraffe: "animal",
+		suitcase: "package",
+		backpack: "package",
+		handbag: "package"
+	},
+	preserveOriginal: false
+};
 var AUDIO_MACRO_LABELS = [
 	{
 		id: "speech",
@@ -24109,7 +24251,7 @@ var NC_CONDITION_CATALOG = [
 		operator: "in",
 		appliesTo: ["immediate", "track-end"],
 		phase: "P1",
-		description: "Only recognised people. Selecting NOBODY means every identity in the face gallery; selecting some narrows to those. Matched on the gallery id, so renaming a person does not break the rule. On Immediate delivery the name must already be known when an event is written — choose Immediate, grouped to wait for it (D692)."
+		description: "Only recognised people. Selecting NOBODY means every identity in the face gallery; selecting some narrows to those. Matched on the gallery id, so renaming a person does not break the rule. On Immediate delivery the name must already be known when an event is written — choose Immediate, grouped to wait for it."
 	},
 	{
 		id: "plates",
@@ -28530,6 +28672,34 @@ var pipelineAnalyticsCapability = {
 	}
 };
 /**
+* A root model's boxes standing in for one crop-kind step's own inference
+* (D730) — see `runPipeline.suppliedRoot`.
+*/
+var SuppliedRootOutputSchema = object({
+	stepId: string(),
+	/** The root model that drew the boxes — stamped on the result. */
+	modelId: string(),
+	detections: array(object({
+		/** `[x1, y1, x2, y2]` in the pixels of the call's image. */
+		bbox: tuple([
+			number(),
+			number(),
+			number(),
+			number()
+		]),
+		score: number(),
+		/**
+		* Five facial landmarks in the same pixels — a face the step's own
+		* detector already re-found inside a root face box (D730), so its
+		* embedder child aligns it exactly as it aligns any detected face.
+		*/
+		landmarks: array(object({
+			x: number(),
+			y: number()
+		})).optional()
+	})).min(1)
+});
+/**
 * Reference to the frame's retained NATIVE surface + the parent crop's placement
 * within the frame, so the executor can re-cut a leaf child ROI at native
 * resolution on the detail plane. See the `runPipeline` `nativeCropRef` field.
@@ -28660,7 +28830,7 @@ var PipelineModelOptionSchema = object({
 	legacy: boolean().optional(),
 	provider: ModelProviderIdSchema.optional(),
 	defaultConfidence: number().optional(),
-	fillsClassifierEffects: array(FillsClassifierEffectSchema).readonly().optional()
+	suppliesSteps: array(RootStepSupplySchema).readonly().optional()
 });
 var ConfigFieldBridge = custom();
 var PipelineAddonSchemaSchema = object({
@@ -29064,7 +29234,16 @@ var pipelineExecutorCapability = {
 			* `device-not-servable`), and nothing reaches the camera's live
 			* trace stream. Absent ⇒ unchanged behaviour.
 			*/
-			replay: literal(true).optional()
+			replay: literal(true).optional(),
+			/**
+			* Root-supplied detections for the tree's ROOT step (D730). Set by
+			* `runDetailSubtree` when the camera's root model supplies a crop-kind
+			* step (a Frigate+ `license_plate` for `plate-detection`): the step is
+			* NOT inferred, these boxes are its output, and its children (the plate
+			* reader) run on them through their own crop policy. Boxes are in the
+			* PIXELS of the image this call carries. Absent ⇒ the root step runs.
+			*/
+			suppliedRoot: SuppliedRootOutputSchema.optional()
 		}), PipelineRunResultBridge, { kind: "mutation" }),
 		/**
 		* Batched run — N raw frames packed into one cap call. The provider
@@ -30377,7 +30556,22 @@ var pipelineRunnerCapability = {
 			*/
 			cropJpeg: string().optional(),
 			parent: DetailParentSchema,
-			steps: array(string()).optional()
+			steps: array(string()).optional(),
+			/**
+			* The camera's root model already drew this step's boxes (D730): a
+			* `license_plate` inside the parent vehicle. The named step is NOT
+			* inferred — these FRAME-space boxes are its output — and its
+			* requested children (the plate reader) run on them. Absent ⇒ every
+			* requested step infers as before.
+			*/
+			supplied: object({
+				stepId: string(),
+				modelId: string(),
+				boxes: array(object({
+					bbox: NativeCropBboxSchema,
+					score: number()
+				})).min(1)
+			}).optional()
 		}), object({ details: array(DetailResultSchema) }).nullable(), { kind: "mutation" }),
 		/**
 		* Run ONE enrichment step against caller-supplied pixels, with NO camera
@@ -34458,96 +34652,6 @@ var videoclipsCapability = {
 		})
 	}
 };
-/** The central link domain the viewer app claims (Universal Links / App Links). */
-var CAMSTACK_APP_LINK_ORIGIN = "https://camstack.zentik.app";
-/** Where the hub serves the viewer SPA. */
-var HUB_VIEWER_MOUNT = "/viewer/camstack";
-/** True when `baseUrl` names the CamStack app link rather than a hub address. */
-function isAppLinkBase(baseUrl) {
-	if (baseUrl === null || baseUrl === void 0 || baseUrl === "") return false;
-	try {
-		return new URL(baseUrl).origin === CAMSTACK_APP_LINK_ORIGIN;
-	} catch {
-		return false;
-	}
-}
-/**
-* The base a viewer link is built on, from the flagged notification address:
-* the effective address is the explicit choice, else AUTO's `resolved`. The
-* one reading of that answer — the NC's tap and the Network page's preview
-* both go through it.
-*/
-function viewerLinkBaseOf(endpoint) {
-	const flagged = endpoint.baseUrl ?? endpoint.resolved;
-	return isAppLinkBase(flagged) ? {
-		form: "app",
-		hubBaseUrl: endpoint.appLinkHub ?? null
-	} : {
-		form: "hub",
-		hubBaseUrl: flagged
-	};
-}
-/**
-* Reduce a base URL to the bare origin the central page accepts as `hub=`,
-* or `null` when it cannot be one: not http(s), carries credentials, or does
-* not parse. A path/query/fragment is dropped — the central page mounts the
-* viewer under the origin itself.
-*/
-function toAppLinkHubOrigin(baseUrl) {
-	let parsed;
-	try {
-		parsed = new URL(baseUrl);
-	} catch {
-		return null;
-	}
-	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return null;
-	if (parsed.username !== "" || parsed.password !== "") return null;
-	if (parsed.hostname === "") return null;
-	return parsed.origin;
-}
-/** The viewer route for a destination, or null when it names nothing. */
-function viewerRoute(destination) {
-	switch (destination.kind) {
-		case "camera": {
-			if (!Number.isInteger(destination.deviceId) || destination.deviceId <= 0) return null;
-			const at = destination.atMs;
-			return {
-				path: `/camera/${String(destination.deviceId)}`,
-				query: at !== void 0 && Number.isFinite(at) ? [["at", String(Math.trunc(at))]] : []
-			};
-		}
-		case "events": return {
-			path: "/events",
-			query: []
-		};
-		case "notifications": return {
-			path: "/notifications",
-			query: []
-		};
-	}
-}
-function encodeQuery(query) {
-	if (query.length === 0) return "";
-	return `?${query.map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`).join("&")}`;
-}
-/**
-* The link for a viewer destination, or `null` when none can be minted: an
-* unknown destination, or the `hub` form with no reachable base (a dead link
-* is worse than none).
-*/
-function buildViewerLink(input) {
-	const route = viewerRoute(input.destination);
-	if (route === null) return null;
-	const raw = input.base.hubBaseUrl;
-	const base = raw === null ? "" : raw.replace(/\/+$/, "");
-	if (input.base.form === "app") {
-		const origin = base === "" ? null : toAppLinkHubOrigin(base);
-		const query = origin === null ? route.query : [...route.query, ["hub", origin]];
-		return `${CAMSTACK_APP_LINK_ORIGIN}${route.path}${encodeQuery(query)}`;
-	}
-	if (base === "" || isAppLinkBase(base)) return null;
-	return `${base}${HUB_VIEWER_MOUNT}${route.path}${encodeQuery(route.query)}`;
-}
 /**
 * Optional client-side hints sent at session creation to help the provider
 * pick the best native source. All fields optional — a viewer that knows
@@ -35023,6 +35127,35 @@ var webrtcSessionCapability = {
 			alive: boolean()
 		})),
 		/**
+		* The viewer's downlink probe, for ONE live session (D733).
+		*
+		* The player measures `/adaptive-probe` after the session's first decoded
+		* frame (D635). It used to act on the reading itself, by opening a SECOND
+		* session with `hints.downlinkMbps` — every adaptive live open became two
+		* sessions, two ICE + DTLS handshakes and two server pipelines. It now
+		* hands the measurement to the session it already has; the provider picks
+		* the rung exactly as it would from an offer's hints (same viewport
+		* ceiling) and moves the session there — in place when the negotiated
+		* codec carries the new rendition, by the existing re-offer
+		* (`getSessionState.pendingRenegotiation`) when it cannot.
+		*
+		* A MEASUREMENT, never a tier: the client does not choose. A probe only
+		* raises the rung; lowering it stays the ladder's call on delivery.
+		* `held` answers why nothing moved (`not-adaptive`, `pinned`,
+		* `already-there`, `recorded`, …) — a client that gets ANY answer must not
+		* fall back to a reconnect; only a provider that does not know the method
+		* (an older hub) leaves the client its legacy second session.
+		*/
+		applyDownlinkProbe: method(object({
+			deviceId: number().int().nonnegative(),
+			sessionId: string(),
+			downlinkMbps: number().nonnegative()
+		}), object({
+			outcome: _enum(["switching", "held"]),
+			tier: CamProfileSchema.nullable(),
+			reason: string()
+		}), { kind: "mutation" }),
+		/**
 		* The SERVER's half of the stream-debug overlay, for one live session.
 		*
 		* The client can measure its own transport (`getStats()`); it cannot see
@@ -39273,7 +39406,8 @@ var ConnectionEndpointSchema = object({
 		"lan-ipv6",
 		"public",
 		"loopback",
-		"app-link"
+		"app-link",
+		"custom"
 	]),
 	/**
 	* Originating-interface kind — `lan`/`wifi`/`docker`/`vpn`/`other`/
@@ -39375,6 +39509,76 @@ var ViewerEndpointsSchema = object({
 	/** What the ranking currently resolves to (may be empty if nothing is up). */
 	resolved: array(string()).readonly()
 });
+/**
+* DEPRECATED compatibility shape of `getHubAddresses` (D729 amendment, kept
+* one release for addons built against it): `cluster` is the `agents` role,
+* `browser` the `signIn` role; `override` is the flagged address.
+*/
+var HubAddressSnapshotSchema = object({
+	override: string().nullable(),
+	resolved: string().nullable(),
+	source: _enum([
+		"override",
+		"auto",
+		"none"
+	])
+});
+var HubAddressesSchema = object({
+	cluster: HubAddressSnapshotSchema,
+	browser: HubAddressSnapshotSchema
+});
+/**
+* What an address is used for (`hub-address.ts`). `viewer` is many-valued;
+* `notifications`, `agents` and `signIn` are carried by at most one address.
+*/
+var HubAddressRoleSchema = _enum([
+	"viewer",
+	"notifications",
+	"agents",
+	"signIn"
+]);
+var RoleSourceSchema = _enum([
+	"flagged",
+	"auto",
+	"none"
+]);
+/** One single-valued role: the flagged address, the one in use, and why. */
+var HubAddressRoleResolutionSchema = object({
+	/** The address carrying the flag, or null = automatic. */
+	flagged: string().nullable(),
+	/** The address in use, or null when nothing qualifies (never loopback). */
+	resolved: string().nullable(),
+	source: RoleSourceSchema
+});
+var HubViewerResolutionSchema = object({
+	/** The addresses flagged `viewer`, or empty = automatic. */
+	flagged: array(string()).readonly(),
+	/** What the apps race right now. */
+	resolved: array(string()).readonly(),
+	source: RoleSourceSchema
+});
+var HubAddressBookSchema = object({
+	rows: array(ConnectionEndpointSchema.extend({
+		/** In the hub's detected palette right now. */
+		detected: boolean(),
+		/** Entered by the operator (removable). */
+		custom: boolean(),
+		/** The roles explicitly flagged on this address. */
+		flags: array(HubAddressRoleSchema).readonly(),
+		/** The roles this address serves right now — flagged or automatic. */
+		inUse: array(HubAddressRoleSchema).readonly(),
+		/** The roles this address may be flagged with. */
+		eligible: array(HubAddressRoleSchema).readonly()
+	})).readonly(),
+	roles: object({
+		viewer: HubViewerResolutionSchema,
+		notifications: HubAddressRoleResolutionSchema,
+		agents: HubAddressRoleResolutionSchema,
+		signIn: HubAddressRoleResolutionSchema
+	}),
+	/** The `hub=` an app link carries (D709), or null. */
+	appLinkHub: string().nullable()
+});
 var AllowedAddressesSchema = object({ 
 /**
 * Allowlist of interface addresses operators have explicitly opted
@@ -39487,26 +39691,78 @@ var localNetworkCapability = {
 		*/
 		getNotificationEndpoint: method(_void(), NotificationEndpointSchema),
 		/**
-		* Mark which endpoint notification artifacts use. `baseUrl: null` restores
-		* AUTO. The value is stored verbatim (not an index into the candidate
-		* list): interfaces come and go, and an index would silently re-point at a
-		* different address after a reboot.
+		* @deprecated Use `setAddressRole({ role: 'notifications', … })`. Kept so
+		* an older admin UI keeps working: it writes the same `notifications`
+		* flag, with the same validation. `baseUrl: null` restores automatic; an
+		* address that is not detected becomes a custom address.
 		*/
 		setNotificationEndpoint: method(object({ baseUrl: string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }),
 		/**
-		* The endpoints the SDK / viewer races for API access. Empty `baseUrls`
-		* means AUTO: every LAN IPv4 address plus the public tunnel, never IPv6,
-		* never mesh, never loopback. `resolved` is that set (or the operator's
-		* explicit subset) as it stands right now.
+		* The `viewer` role as shipped apps read it: the flagged addresses
+		* (detected or custom), or empty for AUTO — every LAN IPv4 address plus
+		* the public tunnel, never IPv6, mesh, loopback or a custom address.
+		* `resolved` is the set as it stands right now; the custom ones in it are
+		* also in `getConnectionEndpoints`, which the apps filter by it.
 		*/
 		getViewerEndpoints: method(_void(), ViewerEndpointsSchema),
 		/**
-		* Replace the viewer race set. Empty `baseUrls` restores AUTO. Stored
-		* verbatim (not indices) so a temporarily-down tunnel is not silently
-		* dropped from the operator's choice.
+		* @deprecated Use `setAddressRole({ role: 'viewer', … })`. Kept so an
+		* older admin UI keeps working: it replaces the same `viewer` flags.
+		* Empty `baseUrls` restores automatic.
 		*/
 		setViewerEndpoints: method(object({ baseUrls: array(string()).readonly() }), ViewerEndpointsSchema, { kind: "mutation" }),
 		/**
+		* The Network page's Addresses table and every role's answer — the ONE
+		* reading of "which address is this hub reached at, for what": detected
+		* endpoints and custom addresses with their role flags, and per role the
+		* flagged address, the one in use and whether it is automatic. Agent
+		* deliveries, sign-in and LAN devices read `roles.agents` / `roles.signIn`
+		* here; nothing ranks the palette itself. `scheme` is the one the caller
+		* shows LAN rows in (as `getConnectionEndpoints`); agents and sign-in are
+		* always resolved over the HTTPS palette.
+		*/
+		getAddresses: method(object({ scheme: _enum(["http", "https"]).optional() }).optional(), HubAddressBookSchema),
+		/**
+		* Add a custom address. Validated: an http(s) origin with a host, no
+		* credentials, no path, never loopback — an invalid one is refused with
+		* the reason and nothing is stored. Adding an address that already exists
+		* only updates its label.
+		*/
+		addCustomAddress: method(object({
+			baseUrl: string(),
+			label: string().max(80)
+		}), HubAddressBookSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/** Remove a custom address. Its role flags go with it (those roles turn automatic). */
+		removeCustomAddress: method(object({ baseUrl: string() }), HubAddressBookSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
+		* Flag (`enabled: true`) or unflag an address for a role. For a
+		* single-valued role, flagging moves the flag off every other address.
+		* `baseUrl: null` returns the role to automatic. The address must be a row
+		* of the table (detected, custom, or the app link for notifications);
+		* `signIn` on a plain-http address is refused unless `acceptInsecureHttp`.
+		*/
+		setAddressRole: method(object({
+			role: HubAddressRoleSchema,
+			baseUrl: string().nullable(),
+			enabled: boolean(),
+			acceptInsecureHttp: boolean().optional()
+		}), HubAddressBookSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
+		* @deprecated Read `getAddresses().roles.agents` / `.signIn`. Kept one
+		* release so an addon built against the D729 amendment keeps resolving:
+		* `cluster` = the `agents` role, `browser` = the `signIn` role.
+		*/
+		getHubAddresses: method(_void(), HubAddressesSchema),
+		/**
 		* Read the operator's allowlist. Empty = "auto" (no filter). Used
 		* by the admin UI's address selector to seed its checkbox state.
 		*/
@@ -51519,12 +51775,24 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.addCustomAddress": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.downloadCa": {
 		capName: "local-network",
 		capScope: "system",
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.getAddresses": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.getAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
@@ -51537,6 +51805,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.getHubAddresses": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.getNotificationEndpoint": {
 		capName: "local-network",
 		capScope: "system",
@@ -51573,6 +51847,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.removeCustomAddress": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "delete"
+	},
 	"localNetwork.resetAllowlistToBestMatch": {
 		capName: "local-network",
 		capScope: "system",
@@ -51585,6 +51865,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.setAddressRole": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.setAllowedAddresses": {
 		capName: "local-network",
 		capScope: "system",
@@ -55839,6 +56125,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"webrtcSession.applyDownlinkProbe": {
+		capName: "webrtc-session",
+		capScope: "device",
+		addonId: null,
+		access: "create"
+	},
 	"webrtcSession.closeSession": {
 		capName: "webrtc-session",
 		capScope: "device",
@@ -59937,6 +60229,11 @@ Object.freeze({
 		form: "single",
 		optional: false
 	}],
+	"webrtcSession.applyDownlinkProbe": [{
+		name: "deviceId",
+		form: "single",
+		optional: false
+	}],
 	"webrtcSession.closeSession": [{
 		name: "deviceId",
 		form: "single",
@@ -61321,7 +61618,7 @@ var STATE_SUMMARY_VARS = [
 	{
 		name: "summarySection",
 		label: "Summary: this section",
-		description: "The section a per-section summary row is about (D698); on a summary sent as one message, every section it reports, comma-separated.",
+		description: "The section a per-section summary row is about; on a summary sent as one message, every section it reports, comma-separated.",
 		example: "Batterie scariche",
 		group: "system",
 		families: ["rule"],
@@ -65019,6 +65316,12 @@ Object.defineProperty(exports, "isRetiredClearKey", {
 		return isRetiredClearKey;
 	}
 });
+Object.defineProperty(exports, "isRootSuppliableStepId", {
+	enumerable: true,
+	get: function() {
+		return isRootSuppliableStepId;
+	}
+});
 Object.defineProperty(exports, "isScheduleActive", {
 	enumerable: true,
 	get: function() {
@@ -65217,6 +65520,12 @@ Object.defineProperty(exports, "resolvePoolMemoryPolicy", {
 		return resolvePoolMemoryPolicy;
 	}
 });
+Object.defineProperty(exports, "rootSupplyServes", {
+	enumerable: true,
+	get: function() {
+		return rootSupplyServes;
+	}
+});
 Object.defineProperty(exports, "ruleAutoTriggersAlarm", {
 	enumerable: true,
 	get: function() {