@camstack/addon-tailscale 1.1.28 → 1.2.1

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-CPFhFQVO.js");
+const require_dist = require("../dist-DEDkX8co.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { i as EventCategory, n as networkAccessCapability, r as BaseAddon, t as meshNetworkCapability } from "../dist-C_oio-xb.mjs";
+import { i as EventCategory, n as networkAccessCapability, r as BaseAddon, t as meshNetworkCapability } from "../dist-D1JegZhD.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-C_oio-xb.mjs → dist-D1JegZhD.mjs}

@@ -7067,6 +7067,17 @@ var ModelCatalogEntrySchema = object({
 		"imagenet",
 		"none"
 	]).optional(),
+	/**
+	* The model already applies softmax IN-GRAPH — its raw output is a
+	* probability distribution, not logits. When set, the `softmax`
+	* postprocessor must NOT re-apply softmax: re-softmaxing an already-normalised
+	* probability vector collapses it toward uniform (top-1 score craters far
+	* below its true value, making every confidence gate meaningless). Absent ⇒
+	* the output is raw logits and the postprocessor applies softmax (the normal
+	* case). Set on the Google AIY Birds `bird-classifier` (softmax baked into the
+	* TF graph). Threaded to the Python pool via `PoolModelConfig.outputProbabilities`.
+	*/
+	outputProbabilities: boolean().optional(),
 	preprocessMode: _enum(["letterbox", "resize"]).optional(),
 	/**
 	* Per-MODEL postprocessor override. Absent ⇒ the step's own
@@ -11080,10 +11091,7 @@ var ConfigUISchemaNullableBridge = custom();
 var InferenceCapabilitiesBridge = custom();
 var ModelAvailabilityListBridge = custom();
 var PipelineRunResultBridge = custom();
-method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngineChoiceSchema), method(PipelineEngineChoiceSchema, array(PipelineDefaultStepSchema)), method(_void(), PipelineEngineChoiceSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ nodeId: string() }), EngineProvisioningSchema), method(_void(), record(string(), object({
+method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngineChoiceSchema), method(PipelineEngineChoiceSchema, array(PipelineDefaultStepSchema)), method(object({ nodeId: string() }), EngineProvisioningSchema), method(_void(), record(string(), object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 }))), method(object({ steps: record(string(), object({
@@ -11143,13 +11151,33 @@ method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngi
 	* (inputClasses ≠ null) are skipped and served per-track via
 	* pipelineRunner.runDetailSubtree (two-plane design).
 	*/
-	plane: _enum(["full", "frame"]).optional()
+	plane: _enum(["full", "frame"]).optional(),
+	/**
+	* Inference-device selector (Phase 2 multi-device). Format
+	* `<backend>:<device>` (e.g. `openvino:gpu`, `edgetpu:usb`, `cpu`).
+	* Omitted ⇒ the runner's default device (current single-engine
+	* behaviour). Selects WHICH device pool of the node runs the call.
+	*/
+	deviceKey: string().optional()
 }), PipelineRunResultBridge, { kind: "mutation" }), method(object({
 	engine: PipelineEngineChoiceSchema.optional(),
 	steps: array(PipelineStepInputSchema).min(1),
 	frames: array(FrameInputSchema).min(1).max(255),
 	deviceId: number().optional(),
-	sessionId: string().optional()
+	sessionId: string().optional(),
+	/**
+	* Pure-inference benchmark hint. A NONZERO uint32 pins every frame in
+	* the batch to the Python pool's bench preprocess cache
+	* (`_bench_frame_id`) so a REPEATED benchmark frame is decoded +
+	* preprocessed ONCE and every later inference is a pure-inference cache
+	* hit — the sustained-throughput run measures inference, not
+	* decode+preprocess+infer. Omitted/0 for live frames (all different →
+	* full preprocess every call, correct). Fresh per sustained run;
+	* released via `uncacheFrame`.
+	*/
+	frameId: number().int().nonnegative().optional(),
+	/** Inference-device selector (Phase 2 multi-device); see runPipeline. */
+	deviceKey: string().optional()
 }), object({ results: array(PipelineRunResultBridge).readonly() }), { kind: "mutation" }), method(object({
 	data: _instanceof(Uint8Array),
 	width: number().int().positive(),
@@ -11181,8 +11209,18 @@ method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngi
 	*  - `runtime`       — main camera-serving engine (no idle TTL).
 	*  - `warm-override` — benchmark/test override held in the warm
 	*                      cache; auto-disposed after the idle TTL.
+	*  - `device-pool`   — a concurrent per-device pool (Phase 2
+	*                      multi-device, keyed by `deviceKey`) resolved
+	*                      via `resolveDeviceFactory`. Runs alongside the
+	*                      `runtime` engine on a DIFFERENT accelerator
+	*                      (NPU / iGPU / Coral) — this is how the
+	*                      Engines tab shows all pools running at once.
 	*/
-	kind: _enum(["runtime", "warm-override"]),
+	kind: _enum([
+		"runtime",
+		"warm-override",
+		"device-pool"
+	]),
 	/** Native pid of the underlying Python pool (null when no pool). */
 	poolPid: number().nullable(),
 	/** ms since this factory was last used (null when not warm-tracked). */
@@ -11284,7 +11322,21 @@ var NativeCropResultSchema = object({
 	/** Packed rgb (24-bit) pixels of the crop. */
 	bytes: _instanceof(Uint8Array),
 	width: number().int().positive(),
-	height: number().int().positive()
+	height: number().int().positive(),
+	/**
+	* Which source served this crop, so a quality-sensitive consumer (the native
+	* `keyFrame`) can reject a degraded fallback:
+	* - `native` — cut from the decode worker's retained NATIVE surface (the
+	*   quality path).
+	* - `ram-fullframe` — the native surface MISSED but the request was full-frame,
+	*   so the ≤640 RAM `RetainedFrameStore` served it (honest lower-res; legit for
+	*   the blank-frame guard / 640-snapshot resolve, NOT for the clean keyFrame).
+	*
+	* OPTIONAL: a pre-tier runner (version skew) omits it — an ABSENT `tier` MUST be
+	* treated as `native` (accepted) by every consumer so mixed-version clusters
+	* keep the pre-tier behaviour. An ROI miss returns `null` (no tier at all).
+	*/
+	tier: _enum(["native", "ram-fullframe"]).optional()
 });
 /** Parent detection context passed to `runDetailSubtree` — the crop's
 *  originating detection, in FRAME-space coordinates. Reuses
@@ -11524,7 +11576,14 @@ var RunnerCameraConfigSchema = object({
 	* camera's detect node differs from its source-owner (P2d, gated by the
 	* `remoteSourcingNodes` rollout setting).
 	*/
-	frameSource: RunnerFrameSourceSchema.default({ kind: "local-broker" })
+	frameSource: RunnerFrameSourceSchema.default({ kind: "local-broker" }),
+	/**
+	* Inference-device selector for this camera's sessions (Phase 2 multi-device).
+	* Format `<backend>:<device>` (e.g. `openvino:gpu`, `edgetpu:usb`, `cpu`);
+	* omitted ⇒ the runner's default device. The engine itself stays node-local —
+	* this only selects WHICH device pool of that node runs the session.
+	*/
+	deviceKey: string().optional()
 });
 motionFpsField.min, motionFpsField.max, motionFpsField.step, motionFpsField.default, detectionFpsField.min, detectionFpsField.max, detectionFpsField.step, detectionFpsField.default, motionCooldownMsField.min, motionCooldownMsField.max, motionCooldownMsField.step, motionCooldownMsField.default, occupancyRecheckSecField.min, occupancyRecheckSecField.max, occupancyRecheckSecField.step, occupancyRecheckSecField.default, occupancyRecheckFramesField.min, occupancyRecheckFramesField.max, occupancyRecheckFramesField.step, occupancyRecheckFramesField.default;
 /**
@@ -11545,6 +11604,19 @@ var RunnerLocalLoadSchema = object({
 	avgInferenceTimeMs: number(),
 	/** Total queue depth across motion + detection queues. */
 	queueDepthTotal: number(),
+	/**
+	* Per-inference-device live load (multi-device C4). One entry per deviceKey
+	* this runner currently has attached cameras on, so the orchestrator's second
+	* `balance()` pass (over a node's devices) weights on real per-pool session
+	* counts. Empty on single-device / pre-multi-device runners. `queueDepthTotal`
+	* per device is 0 until the pool backlog gets a public accessor (follow-up).
+	*/
+	devices: array(object({
+		deviceKey: string(),
+		backend: string(),
+		attachedCameras: number(),
+		queueDepthTotal: number()
+	})).default([]),
 	/** Hardware capability flags reported by this node. */
 	hardware: object({
 		hasGpu: boolean(),
@@ -13020,6 +13092,8 @@ method(_void(), _void(), { kind: "mutation" }), method(_void(), _void(), { kind:
 	kind: "mutation",
 	auth: "admin"
 });
+DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
+new Set(Object.values(DeviceType));
 /**
 * `addon-pages` — system-scoped singleton aggregator cap. Public-facing
 * surface that admin-ui consumes through `useAddonPagesListPages()`.
@@ -14593,7 +14667,8 @@ var LinkedDeviceSchema = object({
 	deviceId: number(),
 	name: string(),
 	location: string().nullable(),
-	features: array(string())
+	features: array(string()),
+	producesTrackedEvents: boolean().optional()
 });
 var SavedDeviceRowSchema = object({
 	/** Numeric id reserved at allocateDeviceId time. */
@@ -16240,6 +16315,7 @@ var TrackSchema = object({
 	deviceId: number(),
 	className: string(),
 	label: string().optional(),
+	producingDeviceName: string().optional(),
 	/** Track provenance. Absent ⇒ `pipeline` (legacy rows). */
 	source: TrackSourceSchema.optional(),
 	firstSeen: number(),
@@ -16377,7 +16453,8 @@ var MediaFileKindEnum = _enum([
 	"fullFrameBoxed",
 	"faceCrop",
 	"plateCrop",
-	"keyFrame"
+	"keyFrame",
+	"keyFrameSmall"
 ]);
 var MediaFileSchema = object({
 	key: string(),
@@ -16706,13 +16783,11 @@ var PipelineTemplateSchema = object({
 	createdAt: string(),
 	updatedAt: string()
 });
-var AgentAddonConfigSchema = object({
-	enabled: boolean(),
+var DeviceStepConfigSchema = object({
 	modelId: string().optional(),
-	settings: record(string(), unknown()).readonly()
+	settings: record(string(), unknown()).optional()
 });
 var AgentPipelineSettingsSchema = object({
-	addonDefaults: record(string(), AgentAddonConfigSchema).readonly(),
 	maxCameras: number().int().nonnegative().nullable().default(null),
 	/** Per-node detection weight (relative share for the quota balancer). */
 	detectWeight: number().positive().optional(),
@@ -16736,7 +16811,22 @@ var AgentPipelineSettingsSchema = object({
 	* it already uses to reach the hub). Set this only when the auto-detected
 	* address is wrong (multi-homed host, NAT, custom interface).
 	*/
-	reachableHost: string().optional()
+	reachableHost: string().optional(),
+	/**
+	* Multi-device inference opt-in (Phase 4). Per-node map deviceKey → {enabled,
+	* weight, steps}. Absent / all-disabled ⇒ the node's single default
+	* accelerator (safe default); two+ enabled ⇒ the dispatcher balances
+	* detection sessions across them so they run CONCURRENTLY. `steps` is the
+	* per-(node,device) BASE provisioning (`stepId → {modelId?, settings?}`) —
+	* the default model/settings for every camera landing on that accelerator;
+	* a stepId absent ⇒ the step uses that device's format default.
+	*/
+	inferenceDevices: record(string(), object({
+		enabled: boolean(),
+		weight: number().positive().optional(),
+		maxSessions: number().int().positive().optional(),
+		steps: record(string(), DeviceStepConfigSchema).optional()
+	})).optional()
 });
 var CameraPipelineForAgentSchema = object({
 	steps: array(PipelineStepInputSchema).readonly(),
@@ -16746,14 +16836,13 @@ var CameraPipelineForAgentSchema = object({
 	}).nullable()
 });
 var CameraStepOverridePatchSchema = object({
-	enabled: boolean().optional(),
 	modelId: string().optional(),
 	settings: record(string(), unknown()).readonly().optional()
 });
 var CameraPipelineSettingsSchema = object({
 	pinnedAgentNodeId: string().optional(),
 	stepToggles: record(string(), boolean()).optional(),
-	stepOverridesByAgent: record(string(), record(string(), CameraStepOverridePatchSchema)).optional(),
+	stepOverridesByDevice: record(string(), record(string(), record(string(), CameraStepOverridePatchSchema))).optional(),
 	pipelineByAgent: record(string(), CameraPipelineForAgentSchema).optional()
 });
 /**
@@ -16967,6 +17056,44 @@ var CameraStatusSchema = object({
 	/** Unix timestamp (ms) when this snapshot was composed server-side. */
 	fetchedAt: number()
 });
+var NodeInferenceDeviceSchema = object({
+	/** Stable per-node device key, e.g. `openvino:npu`, `edgetpu:usb`, `cpu`. */
+	key: string(),
+	backend: string(),
+	device: string(),
+	format: _enum(MODEL_FORMATS),
+	/** Whether the node's live probe reports the device as usable right now. */
+	available: boolean(),
+	/**
+	* Whether this device participates in dispatch. AUTO default (spec C2):
+	* accelerators are opt-OUT (a discovered NPU/iGPU/Coral/ANE with no stored
+	* entry is `true`); CPU is opt-IN (`false` by default — the fallback pool,
+	* not a balanced target). An explicit stored value always wins; a stored-only
+	* (unavailable) key keeps its stored value.
+	*/
+	enabled: boolean(),
+	/** Relative balancer weight for the enabled device (default 1). */
+	weight: number(),
+	/** Per-device concurrent-session cap; null = unlimited (multi-device C4). */
+	maxSessions: number().nullable(),
+	/** Object-detection model the executor defaults to for this deviceKey. */
+	defaultModelId: string(),
+	/**
+	* Per-(node,device) BASE provisioning (C7.2/C7.4) — the RAW stored
+	* `stepId → {modelId?, settings?}` map from `inferenceDevices[key].steps`.
+	* Absent/empty ⇒ no base (every step uses its device format default). The
+	* UI cross-references `pipelineExecutor.getSchema` for the models actually
+	* available per format; this is the stored selection that becomes the
+	* default for EVERY camera landing on this accelerator.
+	*/
+	steps: record(string(), DeviceStepConfigSchema).optional()
+});
+var NodeInferenceDevicesSchema = object({
+	nodeId: string(),
+	/** False when the node's platform-probe was unreachable (no live device set). */
+	reachable: boolean(),
+	devices: array(NodeInferenceDeviceSchema).readonly()
+});
 method(object({
 	deviceId: number(),
 	agentNodeId: string()
@@ -16976,7 +17103,13 @@ method(object({
 }), method(object({ deviceId: number() }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(_void(), object({ migrated: number() }), {
+}), method(object({
+	deviceId: number(),
+	deviceKey: string()
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ deviceId: number() }), object({ deviceKey: string().nullable() })), method(_void(), object({ migrated: number() }), {
 	kind: "mutation",
 	auth: "admin"
 }), method(_void(), array(PipelineAssignmentSchema).readonly()), method(object({ deviceId: number() }), PipelineAssignmentSchema.nullable()), method(_void(), array(AgentLoadSummarySchema).readonly()), method(_void(), GlobalMetricsSchema), method(object({ deviceId: number() }), CameraMetricsSchema.nullable()), method(object({ nodeId: string() }), CapabilityBindingsSchema), method(object({
@@ -17010,13 +17143,7 @@ method(object({
 }))), method(object({ agentNodeId: string() }), AgentPipelineSettingsSchema.nullable()), method(_void(), array(object({
 	nodeId: string(),
 	settings: AgentPipelineSettingsSchema
-})).readonly()), method(object({
-	agentNodeId: string(),
-	defaults: record(string(), AgentAddonConfigSchema)
-}), object({ success: literal(true) }), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ agentNodeId: string() }), object({
+})).readonly()), method(object({ agentNodeId: string() }), object({
 	success: boolean(),
 	removed: boolean()
 }), {
@@ -17048,7 +17175,18 @@ method(object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ agentNodeId: string() }), object({
+}), method(object({
+	agentNodeId: string(),
+	inferenceDevices: record(string(), object({
+		enabled: boolean(),
+		weight: number().positive().optional(),
+		maxSessions: number().int().positive().optional(),
+		steps: record(string(), DeviceStepConfigSchema).optional()
+	}))
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ nodeId: string() }), NodeInferenceDevicesSchema), method(object({ agentNodeId: string() }), object({
 	success: literal(true),
 	/** Hardware-aware default detection model now in effect on the node (null when unresolvable). */
 	effectiveModelId: string().nullable(),
@@ -17064,9 +17202,10 @@ method(object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), record(string(), record(string(), CameraStepOverridePatchSchema)).nullable()), method(object({
+}), method(object({ deviceId: number() }), record(string(), record(string(), record(string(), CameraStepOverridePatchSchema))).nullable()), method(object({
 	deviceId: number(),
 	agentNodeId: string(),
+	deviceKey: string(),
 	addonId: string(),
 	patch: CameraStepOverridePatchSchema.nullable()
 }), object({ success: literal(true) }), {
@@ -17103,14 +17242,13 @@ method(object({
 });
 /**
 * server-management — per-NODE singleton capability for a node's ROOT
-* package lifecycle (runtime-updatable node packages, phase 2: hub + docker
-* agents).
+* package lifecycle (runtime-updatable node packages).
 *
-* Each node's root package (`@camstack/server` on the hub, `@camstack/agent`
-* on agents) carries the whole software stack in its npm dep tree, so ONE
-* version describes the node. Updates install into
-* `<dataDir>/server-root/versions/<v>/` and apply on restart via the baked
-* starter (probation boot + auto-rollback to N-1).
+* Every node role runs the SAME root package (`@camstack/server`), which
+* carries the whole software stack in its npm dep tree, so ONE version
+* describes the node. Updates stage into `<dataDir>/server-root/` and apply
+* on restart via the baked starter (single-copy in-place swap — no probation,
+* no auto-rollback).
 *
 * Providers:
 *   - HUB: `ServerUpdateService` behind the `server-provided` mount
@@ -17218,7 +17356,8 @@ method(_void(), ServerPackageStatusSchema, { auth: "admin" }), method(_void(), S
 /** Explicit target version; omitted = latest from the registry. */
 version: string().optional() }), ServerUpdateActionResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: 16 * 6e4
 }), method(_void(), ServerUpdateActionResultSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -18262,22 +18401,6 @@ var AddonAutoUpdateSchema = ChannelWithInheritSchema;
 var RestartAddonResultSchema = unknown();
 var InstallPackageResultSchema = unknown();
 var ReloadPackagesResultSchema = unknown();
-/**
-* Result of `updateFrameworkPackage`. The cap method returns BEFORE the
-* server restarts so the admin UI can react to the `restartingAt`
-* timestamp (shows reconnect overlay). The transition from
-* `fromVersion` to `toVersion` will be confirmed by a subsequent
-* `system.restart-completed` event after the new process boots.
-*
-* Spec: docs/superpowers/specs/2026-05-14-framework-live-update-design.md
-*/
-var UpdateFrameworkPackageResultSchema = object({
-	packageName: string(),
-	fromVersion: string(),
-	toVersion: string(),
-	/** Ms-epoch the server scheduled its self-restart. */
-	restartingAt: number()
-});
 var BulkUpdateItemStatusSchema = _enum([
 	"queued",
 	"updating",
@@ -18405,13 +18528,6 @@ method(_void(), array(AddonListItemSchema).readonly()), method(object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({
-	packageName: string().min(1),
-	version: string().optional(),
-	deferRestart: boolean().optional()
-}), UpdateFrameworkPackageResultSchema, {
-	kind: "mutation",
-	auth: "admin"
 }), method(object({ name: string() }), array(PackageVersionInfoSchema).readonly()), method(object({ addonId: string() }), RestartAddonResultSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -19338,10 +19454,10 @@ var TopologyCategorySchema = object({
 	addons: array(TopologyCategoryAddonSchema).readonly()
 });
 /**
-* The node's runtime-updatable ROOT package (`@camstack/server` on the hub,
-* `@camstack/agent` on agents) as reported by its `registerNode` manifest —
-* version visibility for the Server management surface. Nullable: offline
-* rows and pre-phase-2 nodes report none.
+* The node's runtime-updatable ROOT package (`@camstack/server` — the single
+* root package for every node role) as reported by its `registerNode`
+* manifest — version visibility for the Server management surface. Nullable:
+* offline rows and nodes that never reported one.
 */
 var TopologyRootPackageSchema = object({
 	name: string(),
@@ -19729,17 +19845,28 @@ var PlatformScoreSchema = object({
 	format: _enum([
 		"onnx",
 		"coreml",
-		"openvino"
+		"openvino",
+		"tflite"
 	]),
 	score: number(),
 	reason: string(),
 	available: boolean()
 });
+var InferenceDeviceDescriptorSchema = object({
+	key: string(),
+	backend: string(),
+	device: string(),
+	format: ModelFormatSchema,
+	runtime: literal("python"),
+	score: number(),
+	available: boolean()
+});
 var PlatformCapabilitiesSchema = object({
 	hardware: HardwareInfoSchema,
 	scores: array(PlatformScoreSchema).readonly(),
 	bestScore: PlatformScoreSchema,
-	pythonPath: string().nullable()
+	pythonPath: string().nullable(),
+	devices: array(InferenceDeviceDescriptorSchema).readonly()
 });
 var ModelRequirementSchema = object({
 	modelId: string(),
@@ -20618,12 +20745,6 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
-	"addons.updateFrameworkPackage": {
-		capName: "addons",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"addons.updatePackage": {
 		capName: "addons",
 		capScope: "system",
@@ -23396,12 +23517,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineExecutor.reprobeEngine": {
-		capName: "pipeline-executor",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"pipelineExecutor.runAudioTest": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -23552,6 +23667,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getNodeInferenceDevices": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getPipelineAssignment": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -23564,6 +23685,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getPipelineDevicePin": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.listAgentSettings": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -23606,19 +23733,19 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.setAgentAddonDefaults": {
+	"pipelineOrchestrator.setAgentCapabilities": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.setAgentCapabilities": {
+	"pipelineOrchestrator.setAgentDetectWeight": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.setAgentDetectWeight": {
+	"pipelineOrchestrator.setAgentInferenceDevices": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
 		addonId: null,
@@ -23660,6 +23787,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setPipelineDevicePin": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.unassignAudio": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -25212,31 +25345,5 @@ Object.freeze({
 	"network-access": "ingress",
 	"smtp-provider": "email"
 });
-var frameworkSwapPackageSchema = object({
-	name: string(),
-	stagedPath: string(),
-	backupPath: string(),
-	toVersion: string(),
-	fromVersion: string().nullable()
-});
-object({
-	jobId: string(),
-	taskId: string(),
-	packages: array(frameworkSwapPackageSchema),
-	requestedAtMs: number(),
-	schemaVersion: literal(1)
-});
-object({
-	jobId: string(),
-	taskId: string(),
-	backups: array(object({
-		name: string(),
-		backupPath: string(),
-		livePath: string()
-	})),
-	appliedAtMs: number(),
-	bootAttempts: number(),
-	schemaVersion: literal(1)
-});
 //#endregion
 export { EventCategory as i, networkAccessCapability as n, BaseAddon as r, meshNetworkCapability as t };

package/dist/{dist-CPFhFQVO.js → dist-DEDkX8co.js}

@@ -7067,6 +7067,17 @@ var ModelCatalogEntrySchema = object({
 		"imagenet",
 		"none"
 	]).optional(),
+	/**
+	* The model already applies softmax IN-GRAPH — its raw output is a
+	* probability distribution, not logits. When set, the `softmax`
+	* postprocessor must NOT re-apply softmax: re-softmaxing an already-normalised
+	* probability vector collapses it toward uniform (top-1 score craters far
+	* below its true value, making every confidence gate meaningless). Absent ⇒
+	* the output is raw logits and the postprocessor applies softmax (the normal
+	* case). Set on the Google AIY Birds `bird-classifier` (softmax baked into the
+	* TF graph). Threaded to the Python pool via `PoolModelConfig.outputProbabilities`.
+	*/
+	outputProbabilities: boolean().optional(),
 	preprocessMode: _enum(["letterbox", "resize"]).optional(),
 	/**
 	* Per-MODEL postprocessor override. Absent ⇒ the step's own
@@ -11080,10 +11091,7 @@ var ConfigUISchemaNullableBridge = custom();
 var InferenceCapabilitiesBridge = custom();
 var ModelAvailabilityListBridge = custom();
 var PipelineRunResultBridge = custom();
-method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngineChoiceSchema), method(PipelineEngineChoiceSchema, array(PipelineDefaultStepSchema)), method(_void(), PipelineEngineChoiceSchema, {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ nodeId: string() }), EngineProvisioningSchema), method(_void(), record(string(), object({
+method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngineChoiceSchema), method(PipelineEngineChoiceSchema, array(PipelineDefaultStepSchema)), method(object({ nodeId: string() }), EngineProvisioningSchema), method(_void(), record(string(), object({
 	modelId: string(),
 	settings: record(string(), unknown()).readonly()
 }))), method(object({ steps: record(string(), object({
@@ -11143,13 +11151,33 @@ method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngi
 	* (inputClasses ≠ null) are skipped and served per-track via
 	* pipelineRunner.runDetailSubtree (two-plane design).
 	*/
-	plane: _enum(["full", "frame"]).optional()
+	plane: _enum(["full", "frame"]).optional(),
+	/**
+	* Inference-device selector (Phase 2 multi-device). Format
+	* `<backend>:<device>` (e.g. `openvino:gpu`, `edgetpu:usb`, `cpu`).
+	* Omitted ⇒ the runner's default device (current single-engine
+	* behaviour). Selects WHICH device pool of the node runs the call.
+	*/
+	deviceKey: string().optional()
 }), PipelineRunResultBridge, { kind: "mutation" }), method(object({
 	engine: PipelineEngineChoiceSchema.optional(),
 	steps: array(PipelineStepInputSchema).min(1),
 	frames: array(FrameInputSchema).min(1).max(255),
 	deviceId: number().optional(),
-	sessionId: string().optional()
+	sessionId: string().optional(),
+	/**
+	* Pure-inference benchmark hint. A NONZERO uint32 pins every frame in
+	* the batch to the Python pool's bench preprocess cache
+	* (`_bench_frame_id`) so a REPEATED benchmark frame is decoded +
+	* preprocessed ONCE and every later inference is a pure-inference cache
+	* hit — the sustained-throughput run measures inference, not
+	* decode+preprocess+infer. Omitted/0 for live frames (all different →
+	* full preprocess every call, correct). Fresh per sustained run;
+	* released via `uncacheFrame`.
+	*/
+	frameId: number().int().nonnegative().optional(),
+	/** Inference-device selector (Phase 2 multi-device); see runPipeline. */
+	deviceKey: string().optional()
 }), object({ results: array(PipelineRunResultBridge).readonly() }), { kind: "mutation" }), method(object({
 	data: _instanceof(Uint8Array),
 	width: number().int().positive(),
@@ -11181,8 +11209,18 @@ method(_void(), array(PipelineEngineChoiceSchema)), method(_void(), PipelineEngi
 	*  - `runtime`       — main camera-serving engine (no idle TTL).
 	*  - `warm-override` — benchmark/test override held in the warm
 	*                      cache; auto-disposed after the idle TTL.
+	*  - `device-pool`   — a concurrent per-device pool (Phase 2
+	*                      multi-device, keyed by `deviceKey`) resolved
+	*                      via `resolveDeviceFactory`. Runs alongside the
+	*                      `runtime` engine on a DIFFERENT accelerator
+	*                      (NPU / iGPU / Coral) — this is how the
+	*                      Engines tab shows all pools running at once.
 	*/
-	kind: _enum(["runtime", "warm-override"]),
+	kind: _enum([
+		"runtime",
+		"warm-override",
+		"device-pool"
+	]),
 	/** Native pid of the underlying Python pool (null when no pool). */
 	poolPid: number().nullable(),
 	/** ms since this factory was last used (null when not warm-tracked). */
@@ -11284,7 +11322,21 @@ var NativeCropResultSchema = object({
 	/** Packed rgb (24-bit) pixels of the crop. */
 	bytes: _instanceof(Uint8Array),
 	width: number().int().positive(),
-	height: number().int().positive()
+	height: number().int().positive(),
+	/**
+	* Which source served this crop, so a quality-sensitive consumer (the native
+	* `keyFrame`) can reject a degraded fallback:
+	* - `native` — cut from the decode worker's retained NATIVE surface (the
+	*   quality path).
+	* - `ram-fullframe` — the native surface MISSED but the request was full-frame,
+	*   so the ≤640 RAM `RetainedFrameStore` served it (honest lower-res; legit for
+	*   the blank-frame guard / 640-snapshot resolve, NOT for the clean keyFrame).
+	*
+	* OPTIONAL: a pre-tier runner (version skew) omits it — an ABSENT `tier` MUST be
+	* treated as `native` (accepted) by every consumer so mixed-version clusters
+	* keep the pre-tier behaviour. An ROI miss returns `null` (no tier at all).
+	*/
+	tier: _enum(["native", "ram-fullframe"]).optional()
 });
 /** Parent detection context passed to `runDetailSubtree` — the crop's
 *  originating detection, in FRAME-space coordinates. Reuses
@@ -11524,7 +11576,14 @@ var RunnerCameraConfigSchema = object({
 	* camera's detect node differs from its source-owner (P2d, gated by the
 	* `remoteSourcingNodes` rollout setting).
 	*/
-	frameSource: RunnerFrameSourceSchema.default({ kind: "local-broker" })
+	frameSource: RunnerFrameSourceSchema.default({ kind: "local-broker" }),
+	/**
+	* Inference-device selector for this camera's sessions (Phase 2 multi-device).
+	* Format `<backend>:<device>` (e.g. `openvino:gpu`, `edgetpu:usb`, `cpu`);
+	* omitted ⇒ the runner's default device. The engine itself stays node-local —
+	* this only selects WHICH device pool of that node runs the session.
+	*/
+	deviceKey: string().optional()
 });
 motionFpsField.min, motionFpsField.max, motionFpsField.step, motionFpsField.default, detectionFpsField.min, detectionFpsField.max, detectionFpsField.step, detectionFpsField.default, motionCooldownMsField.min, motionCooldownMsField.max, motionCooldownMsField.step, motionCooldownMsField.default, occupancyRecheckSecField.min, occupancyRecheckSecField.max, occupancyRecheckSecField.step, occupancyRecheckSecField.default, occupancyRecheckFramesField.min, occupancyRecheckFramesField.max, occupancyRecheckFramesField.step, occupancyRecheckFramesField.default;
 /**
@@ -11545,6 +11604,19 @@ var RunnerLocalLoadSchema = object({
 	avgInferenceTimeMs: number(),
 	/** Total queue depth across motion + detection queues. */
 	queueDepthTotal: number(),
+	/**
+	* Per-inference-device live load (multi-device C4). One entry per deviceKey
+	* this runner currently has attached cameras on, so the orchestrator's second
+	* `balance()` pass (over a node's devices) weights on real per-pool session
+	* counts. Empty on single-device / pre-multi-device runners. `queueDepthTotal`
+	* per device is 0 until the pool backlog gets a public accessor (follow-up).
+	*/
+	devices: array(object({
+		deviceKey: string(),
+		backend: string(),
+		attachedCameras: number(),
+		queueDepthTotal: number()
+	})).default([]),
 	/** Hardware capability flags reported by this node. */
 	hardware: object({
 		hasGpu: boolean(),
@@ -13020,6 +13092,8 @@ method(_void(), _void(), { kind: "mutation" }), method(_void(), _void(), { kind:
 	kind: "mutation",
 	auth: "admin"
 });
+DeviceType.Cover, DeviceType.Valve, DeviceType.Humidifier, DeviceType.WaterHeater, DeviceType.Camera, DeviceType.Hub, DeviceType.Switch, DeviceType.Siren, DeviceType.Light, DeviceType.Fan, DeviceType.Sensor, DeviceType.Thermostat, DeviceType.Climate, DeviceType.Button, DeviceType.EventEmitter, DeviceType.Update, DeviceType.Generic, DeviceType.Notifier, DeviceType.Script, DeviceType.Automation, DeviceType.Lock, DeviceType.MediaPlayer, DeviceType.AlarmPanel, DeviceType.Control, DeviceType.Presence, DeviceType.Weather, DeviceType.Vacuum, DeviceType.LawnMower, DeviceType.Container, DeviceType.Image, DeviceType.PetFeeder;
+new Set(Object.values(DeviceType));
 /**
 * `addon-pages` — system-scoped singleton aggregator cap. Public-facing
 * surface that admin-ui consumes through `useAddonPagesListPages()`.
@@ -14593,7 +14667,8 @@ var LinkedDeviceSchema = object({
 	deviceId: number(),
 	name: string(),
 	location: string().nullable(),
-	features: array(string())
+	features: array(string()),
+	producesTrackedEvents: boolean().optional()
 });
 var SavedDeviceRowSchema = object({
 	/** Numeric id reserved at allocateDeviceId time. */
@@ -16240,6 +16315,7 @@ var TrackSchema = object({
 	deviceId: number(),
 	className: string(),
 	label: string().optional(),
+	producingDeviceName: string().optional(),
 	/** Track provenance. Absent ⇒ `pipeline` (legacy rows). */
 	source: TrackSourceSchema.optional(),
 	firstSeen: number(),
@@ -16377,7 +16453,8 @@ var MediaFileKindEnum = _enum([
 	"fullFrameBoxed",
 	"faceCrop",
 	"plateCrop",
-	"keyFrame"
+	"keyFrame",
+	"keyFrameSmall"
 ]);
 var MediaFileSchema = object({
 	key: string(),
@@ -16706,13 +16783,11 @@ var PipelineTemplateSchema = object({
 	createdAt: string(),
 	updatedAt: string()
 });
-var AgentAddonConfigSchema = object({
-	enabled: boolean(),
+var DeviceStepConfigSchema = object({
 	modelId: string().optional(),
-	settings: record(string(), unknown()).readonly()
+	settings: record(string(), unknown()).optional()
 });
 var AgentPipelineSettingsSchema = object({
-	addonDefaults: record(string(), AgentAddonConfigSchema).readonly(),
 	maxCameras: number().int().nonnegative().nullable().default(null),
 	/** Per-node detection weight (relative share for the quota balancer). */
 	detectWeight: number().positive().optional(),
@@ -16736,7 +16811,22 @@ var AgentPipelineSettingsSchema = object({
 	* it already uses to reach the hub). Set this only when the auto-detected
 	* address is wrong (multi-homed host, NAT, custom interface).
 	*/
-	reachableHost: string().optional()
+	reachableHost: string().optional(),
+	/**
+	* Multi-device inference opt-in (Phase 4). Per-node map deviceKey → {enabled,
+	* weight, steps}. Absent / all-disabled ⇒ the node's single default
+	* accelerator (safe default); two+ enabled ⇒ the dispatcher balances
+	* detection sessions across them so they run CONCURRENTLY. `steps` is the
+	* per-(node,device) BASE provisioning (`stepId → {modelId?, settings?}`) —
+	* the default model/settings for every camera landing on that accelerator;
+	* a stepId absent ⇒ the step uses that device's format default.
+	*/
+	inferenceDevices: record(string(), object({
+		enabled: boolean(),
+		weight: number().positive().optional(),
+		maxSessions: number().int().positive().optional(),
+		steps: record(string(), DeviceStepConfigSchema).optional()
+	})).optional()
 });
 var CameraPipelineForAgentSchema = object({
 	steps: array(PipelineStepInputSchema).readonly(),
@@ -16746,14 +16836,13 @@ var CameraPipelineForAgentSchema = object({
 	}).nullable()
 });
 var CameraStepOverridePatchSchema = object({
-	enabled: boolean().optional(),
 	modelId: string().optional(),
 	settings: record(string(), unknown()).readonly().optional()
 });
 var CameraPipelineSettingsSchema = object({
 	pinnedAgentNodeId: string().optional(),
 	stepToggles: record(string(), boolean()).optional(),
-	stepOverridesByAgent: record(string(), record(string(), CameraStepOverridePatchSchema)).optional(),
+	stepOverridesByDevice: record(string(), record(string(), record(string(), CameraStepOverridePatchSchema))).optional(),
 	pipelineByAgent: record(string(), CameraPipelineForAgentSchema).optional()
 });
 /**
@@ -16967,6 +17056,44 @@ var CameraStatusSchema = object({
 	/** Unix timestamp (ms) when this snapshot was composed server-side. */
 	fetchedAt: number()
 });
+var NodeInferenceDeviceSchema = object({
+	/** Stable per-node device key, e.g. `openvino:npu`, `edgetpu:usb`, `cpu`. */
+	key: string(),
+	backend: string(),
+	device: string(),
+	format: _enum(MODEL_FORMATS),
+	/** Whether the node's live probe reports the device as usable right now. */
+	available: boolean(),
+	/**
+	* Whether this device participates in dispatch. AUTO default (spec C2):
+	* accelerators are opt-OUT (a discovered NPU/iGPU/Coral/ANE with no stored
+	* entry is `true`); CPU is opt-IN (`false` by default — the fallback pool,
+	* not a balanced target). An explicit stored value always wins; a stored-only
+	* (unavailable) key keeps its stored value.
+	*/
+	enabled: boolean(),
+	/** Relative balancer weight for the enabled device (default 1). */
+	weight: number(),
+	/** Per-device concurrent-session cap; null = unlimited (multi-device C4). */
+	maxSessions: number().nullable(),
+	/** Object-detection model the executor defaults to for this deviceKey. */
+	defaultModelId: string(),
+	/**
+	* Per-(node,device) BASE provisioning (C7.2/C7.4) — the RAW stored
+	* `stepId → {modelId?, settings?}` map from `inferenceDevices[key].steps`.
+	* Absent/empty ⇒ no base (every step uses its device format default). The
+	* UI cross-references `pipelineExecutor.getSchema` for the models actually
+	* available per format; this is the stored selection that becomes the
+	* default for EVERY camera landing on this accelerator.
+	*/
+	steps: record(string(), DeviceStepConfigSchema).optional()
+});
+var NodeInferenceDevicesSchema = object({
+	nodeId: string(),
+	/** False when the node's platform-probe was unreachable (no live device set). */
+	reachable: boolean(),
+	devices: array(NodeInferenceDeviceSchema).readonly()
+});
 method(object({
 	deviceId: number(),
 	agentNodeId: string()
@@ -16976,7 +17103,13 @@ method(object({
 }), method(object({ deviceId: number() }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(_void(), object({ migrated: number() }), {
+}), method(object({
+	deviceId: number(),
+	deviceKey: string()
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ deviceId: number() }), object({ deviceKey: string().nullable() })), method(_void(), object({ migrated: number() }), {
 	kind: "mutation",
 	auth: "admin"
 }), method(_void(), array(PipelineAssignmentSchema).readonly()), method(object({ deviceId: number() }), PipelineAssignmentSchema.nullable()), method(_void(), array(AgentLoadSummarySchema).readonly()), method(_void(), GlobalMetricsSchema), method(object({ deviceId: number() }), CameraMetricsSchema.nullable()), method(object({ nodeId: string() }), CapabilityBindingsSchema), method(object({
@@ -17010,13 +17143,7 @@ method(object({
 }))), method(object({ agentNodeId: string() }), AgentPipelineSettingsSchema.nullable()), method(_void(), array(object({
 	nodeId: string(),
 	settings: AgentPipelineSettingsSchema
-})).readonly()), method(object({
-	agentNodeId: string(),
-	defaults: record(string(), AgentAddonConfigSchema)
-}), object({ success: literal(true) }), {
-	kind: "mutation",
-	auth: "admin"
-}), method(object({ agentNodeId: string() }), object({
+})).readonly()), method(object({ agentNodeId: string() }), object({
 	success: boolean(),
 	removed: boolean()
 }), {
@@ -17048,7 +17175,18 @@ method(object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ agentNodeId: string() }), object({
+}), method(object({
+	agentNodeId: string(),
+	inferenceDevices: record(string(), object({
+		enabled: boolean(),
+		weight: number().positive().optional(),
+		maxSessions: number().int().positive().optional(),
+		steps: record(string(), DeviceStepConfigSchema).optional()
+	}))
+}), object({ success: literal(true) }), {
+	kind: "mutation",
+	auth: "admin"
+}), method(object({ nodeId: string() }), NodeInferenceDevicesSchema), method(object({ agentNodeId: string() }), object({
 	success: literal(true),
 	/** Hardware-aware default detection model now in effect on the node (null when unresolvable). */
 	effectiveModelId: string().nullable(),
@@ -17064,9 +17202,10 @@ method(object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({ deviceId: number() }), record(string(), record(string(), CameraStepOverridePatchSchema)).nullable()), method(object({
+}), method(object({ deviceId: number() }), record(string(), record(string(), record(string(), CameraStepOverridePatchSchema))).nullable()), method(object({
 	deviceId: number(),
 	agentNodeId: string(),
+	deviceKey: string(),
 	addonId: string(),
 	patch: CameraStepOverridePatchSchema.nullable()
 }), object({ success: literal(true) }), {
@@ -17103,14 +17242,13 @@ method(object({
 });
 /**
 * server-management — per-NODE singleton capability for a node's ROOT
-* package lifecycle (runtime-updatable node packages, phase 2: hub + docker
-* agents).
+* package lifecycle (runtime-updatable node packages).
 *
-* Each node's root package (`@camstack/server` on the hub, `@camstack/agent`
-* on agents) carries the whole software stack in its npm dep tree, so ONE
-* version describes the node. Updates install into
-* `<dataDir>/server-root/versions/<v>/` and apply on restart via the baked
-* starter (probation boot + auto-rollback to N-1).
+* Every node role runs the SAME root package (`@camstack/server`), which
+* carries the whole software stack in its npm dep tree, so ONE version
+* describes the node. Updates stage into `<dataDir>/server-root/` and apply
+* on restart via the baked starter (single-copy in-place swap — no probation,
+* no auto-rollback).
 *
 * Providers:
 *   - HUB: `ServerUpdateService` behind the `server-provided` mount
@@ -17218,7 +17356,8 @@ method(_void(), ServerPackageStatusSchema, { auth: "admin" }), method(_void(), S
 /** Explicit target version; omitted = latest from the registry. */
 version: string().optional() }), ServerUpdateActionResultSchema, {
 	kind: "mutation",
-	auth: "admin"
+	auth: "admin",
+	timeoutMs: 16 * 6e4
 }), method(_void(), ServerUpdateActionResultSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -18262,22 +18401,6 @@ var AddonAutoUpdateSchema = ChannelWithInheritSchema;
 var RestartAddonResultSchema = unknown();
 var InstallPackageResultSchema = unknown();
 var ReloadPackagesResultSchema = unknown();
-/**
-* Result of `updateFrameworkPackage`. The cap method returns BEFORE the
-* server restarts so the admin UI can react to the `restartingAt`
-* timestamp (shows reconnect overlay). The transition from
-* `fromVersion` to `toVersion` will be confirmed by a subsequent
-* `system.restart-completed` event after the new process boots.
-*
-* Spec: docs/superpowers/specs/2026-05-14-framework-live-update-design.md
-*/
-var UpdateFrameworkPackageResultSchema = object({
-	packageName: string(),
-	fromVersion: string(),
-	toVersion: string(),
-	/** Ms-epoch the server scheduled its self-restart. */
-	restartingAt: number()
-});
 var BulkUpdateItemStatusSchema = _enum([
 	"queued",
 	"updating",
@@ -18405,13 +18528,6 @@ method(_void(), array(AddonListItemSchema).readonly()), method(object({
 }), object({ success: literal(true) }), {
 	kind: "mutation",
 	auth: "admin"
-}), method(object({
-	packageName: string().min(1),
-	version: string().optional(),
-	deferRestart: boolean().optional()
-}), UpdateFrameworkPackageResultSchema, {
-	kind: "mutation",
-	auth: "admin"
 }), method(object({ name: string() }), array(PackageVersionInfoSchema).readonly()), method(object({ addonId: string() }), RestartAddonResultSchema, {
 	kind: "mutation",
 	auth: "admin"
@@ -19338,10 +19454,10 @@ var TopologyCategorySchema = object({
 	addons: array(TopologyCategoryAddonSchema).readonly()
 });
 /**
-* The node's runtime-updatable ROOT package (`@camstack/server` on the hub,
-* `@camstack/agent` on agents) as reported by its `registerNode` manifest —
-* version visibility for the Server management surface. Nullable: offline
-* rows and pre-phase-2 nodes report none.
+* The node's runtime-updatable ROOT package (`@camstack/server` — the single
+* root package for every node role) as reported by its `registerNode`
+* manifest — version visibility for the Server management surface. Nullable:
+* offline rows and nodes that never reported one.
 */
 var TopologyRootPackageSchema = object({
 	name: string(),
@@ -19729,17 +19845,28 @@ var PlatformScoreSchema = object({
 	format: _enum([
 		"onnx",
 		"coreml",
-		"openvino"
+		"openvino",
+		"tflite"
 	]),
 	score: number(),
 	reason: string(),
 	available: boolean()
 });
+var InferenceDeviceDescriptorSchema = object({
+	key: string(),
+	backend: string(),
+	device: string(),
+	format: ModelFormatSchema,
+	runtime: literal("python"),
+	score: number(),
+	available: boolean()
+});
 var PlatformCapabilitiesSchema = object({
 	hardware: HardwareInfoSchema,
 	scores: array(PlatformScoreSchema).readonly(),
 	bestScore: PlatformScoreSchema,
-	pythonPath: string().nullable()
+	pythonPath: string().nullable(),
+	devices: array(InferenceDeviceDescriptorSchema).readonly()
 });
 var ModelRequirementSchema = object({
 	modelId: string(),
@@ -20618,12 +20745,6 @@ Object.freeze({
 		addonId: null,
 		access: "delete"
 	},
-	"addons.updateFrameworkPackage": {
-		capName: "addons",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"addons.updatePackage": {
 		capName: "addons",
 		capScope: "system",
@@ -23396,12 +23517,6 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
-	"pipelineExecutor.reprobeEngine": {
-		capName: "pipeline-executor",
-		capScope: "system",
-		addonId: null,
-		access: "create"
-	},
 	"pipelineExecutor.runAudioTest": {
 		capName: "pipeline-executor",
 		capScope: "system",
@@ -23552,6 +23667,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getNodeInferenceDevices": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.getPipelineAssignment": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -23564,6 +23685,12 @@ Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"pipelineOrchestrator.getPipelineDevicePin": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"pipelineOrchestrator.listAgentSettings": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -23606,19 +23733,19 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.setAgentAddonDefaults": {
+	"pipelineOrchestrator.setAgentCapabilities": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.setAgentCapabilities": {
+	"pipelineOrchestrator.setAgentDetectWeight": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
 		addonId: null,
 		access: "create"
 	},
-	"pipelineOrchestrator.setAgentDetectWeight": {
+	"pipelineOrchestrator.setAgentInferenceDevices": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
 		addonId: null,
@@ -23660,6 +23787,12 @@ Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"pipelineOrchestrator.setPipelineDevicePin": {
+		capName: "pipeline-orchestrator",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"pipelineOrchestrator.unassignAudio": {
 		capName: "pipeline-orchestrator",
 		capScope: "system",
@@ -25212,32 +25345,6 @@ Object.freeze({
 	"network-access": "ingress",
 	"smtp-provider": "email"
 });
-var frameworkSwapPackageSchema = object({
-	name: string(),
-	stagedPath: string(),
-	backupPath: string(),
-	toVersion: string(),
-	fromVersion: string().nullable()
-});
-object({
-	jobId: string(),
-	taskId: string(),
-	packages: array(frameworkSwapPackageSchema),
-	requestedAtMs: number(),
-	schemaVersion: literal(1)
-});
-object({
-	jobId: string(),
-	taskId: string(),
-	backups: array(object({
-		name: string(),
-		backupPath: string(),
-		livePath: string()
-	})),
-	appliedAtMs: number(),
-	bootAttempts: number(),
-	schemaVersion: literal(1)
-});
 //#endregion
 Object.defineProperty(exports, "BaseAddon", {
 	enumerable: true,

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-CPFhFQVO.js");
+const require_dist = require("../dist-DEDkX8co.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_crypto = require("node:crypto");

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { i as EventCategory, n as networkAccessCapability, r as BaseAddon } from "../dist-C_oio-xb.mjs";
+import { i as EventCategory, n as networkAccessCapability, r as BaseAddon } from "../dist-D1JegZhD.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { randomUUID } from "node:crypto";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.1.28",
+  "version": "1.2.1",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",