@camstack/addon-tailscale 1.2.23 → 1.2.25

package/dist/client/tailscale.addon.js

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
-const require_dist = require("../dist-CEnhGxlH.js");
+const require_dist = require("../dist-B3cBbqzz.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/client/tailscale.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-DAzZw-t7.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability, r as BOOT_RECOVERY_BACKOFF_MS, t as meshNetworkCapability } from "../dist-cyVteDFT.mjs";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/{dist-CEnhGxlH.js → dist-B3cBbqzz.js}

@@ -7583,7 +7583,7 @@ var RecordingBandSchema = object({
 	postBufferSec: number().min(0).optional()
 });
 ({
-	preBufferSec: 10,
+	preBufferSec: 15,
 	postBufferSec: 30
 }).postBufferSec * 1e3;
 /**
@@ -13539,128 +13539,103 @@ var COCO_TO_MACRO = {
 var AUDIO_MACRO_LABELS = [
 	{
 		id: "speech",
-		name: "Speech",
-		icon: "🗣️"
+		name: "Speech"
 	},
 	{
 		id: "scream",
-		name: "Scream / Shout",
-		icon: "😱"
+		name: "Scream / Shout"
 	},
 	{
 		id: "crying",
-		name: "Crying / Baby",
-		icon: "😢"
+		name: "Crying / Baby"
 	},
 	{
 		id: "laughter",
-		name: "Laughter",
-		icon: "😂"
+		name: "Laughter"
 	},
 	{
 		id: "music",
-		name: "Music",
-		icon: "🎵"
+		name: "Music"
 	},
 	{
 		id: "dog",
-		name: "Dog",
-		icon: "🐕"
+		name: "Dog"
 	},
 	{
 		id: "cat",
-		name: "Cat",
-		icon: "🐈"
+		name: "Cat"
 	},
 	{
 		id: "bird",
-		name: "Bird",
-		icon: "🐦"
+		name: "Bird"
 	},
 	{
 		id: "animal",
-		name: "Animal (other)",
-		icon: "🐾"
+		name: "Animal (other)"
 	},
 	{
 		id: "alarm",
-		name: "Alarm / Siren",
-		icon: "🚨"
+		name: "Alarm / Siren"
 	},
 	{
 		id: "doorbell",
-		name: "Doorbell / Knock",
-		icon: "🔔"
+		name: "Doorbell / Knock"
 	},
 	{
 		id: "glass_breaking",
-		name: "Glass Breaking",
-		icon: "💥"
+		name: "Glass Breaking"
 	},
 	{
 		id: "gunshot",
-		name: "Gunshot / Explosion",
-		icon: "💣"
+		name: "Gunshot / Explosion"
 	},
 	{
 		id: "vehicle",
-		name: "Vehicle",
-		icon: "🚗"
+		name: "Vehicle"
 	},
 	{
 		id: "siren",
-		name: "Emergency Siren",
-		icon: "🚑"
+		name: "Emergency Siren"
 	},
 	{
 		id: "fire",
-		name: "Fire / Smoke",
-		icon: "🔥"
+		name: "Fire / Smoke"
 	},
 	{
 		id: "water",
-		name: "Water",
-		icon: "💧"
+		name: "Water"
 	},
 	{
 		id: "wind",
-		name: "Wind / Weather",
-		icon: "🌬️"
+		name: "Wind / Weather"
 	},
 	{
 		id: "door",
-		name: "Door",
-		icon: "🚪"
+		name: "Door"
 	},
 	{
 		id: "footsteps",
-		name: "Footsteps",
-		icon: "👣"
+		name: "Footsteps"
 	},
 	{
 		id: "crowd",
-		name: "Crowd / Chatter",
-		icon: "👥"
+		name: "Crowd / Chatter"
 	},
 	{
 		id: "telephone",
-		name: "Telephone",
-		icon: "📞"
+		name: "Telephone"
 	},
 	{
 		id: "engine",
-		name: "Engine / Motor",
-		icon: "⚙️"
+		name: "Engine / Motor"
 	},
 	{
 		id: "tools",
-		name: "Tools / Construction",
-		icon: "🔨"
+		name: "Tools / Construction"
 	},
 	{
 		id: "silence",
-		name: "Silence",
-		icon: "🤫"
+		name: "Silence"
 	}
 ];
 var YAMNET_TO_MACRO = {
@@ -16124,7 +16099,7 @@ var TrackEnvelopeSchema = object({
 * `snapshots[]` references — megabytes across a page of tracks. `slim`
 * keeps every scalar the list surfaces actually render (ids, class(es),
 * label / audioLabels / importance enrichment, firstSeen/lastSeen, state,
-* zonesVisited, bestEventId, envelope, hasFace, hasRider) and returns `positions` /
+* zonesVisited, bestEventId, envelope, hasFace, hasEmbeddedFace, hasRider) and returns `positions` /
 * `snapshots` as EMPTY arrays — detail views re-fetch the full row via
 * `getTrack`. Mirrors the event-store `projection` convention
 * (`getObjectEvents` et al.).
@@ -16419,6 +16394,35 @@ var TrackSchema = object({
 	*/
 	hasFace: boolean().optional(),
 	/**
+	* This track has a face row IN THE GALLERY: a crop **and** an embedding — a
+	* face an operator could ASSIGN to an identity.
+	*
+	* The STRICT twin of {@link hasFace}, and the pair only earns its keep
+	* because the two disagree. `hasFace` is stamped at the TOP of the face
+	* branch, before every gate, and means no more than "a face detector produced
+	* a face detail". This one is stamped at the single moment the gallery row
+	* LANDS — after `FaceRecognizer.onTrackEnd` successfully persists it, i.e.
+	* past the embedding-magnitude verdict, the `minFacePx` detection gate, the
+	* candidate gate, the imageless-track drop (no crop was ever captured) and
+	* the crop-store drop. Everything between the detector and that insert can
+	* legitimately refuse the face, so a flag written any earlier promises the
+	* operator something to assign and delivers nothing.
+	*
+	* **Independent of recognition.** A face collected but never auto-matched is
+	* still assignable — it is in fact the face an operator most wants to reach —
+	* so this is NOT gated on `recognizedIdentityId`. Recognition lands in
+	* `subLabel`; this says only that the raw material exists.
+	*
+	* **Set once, never cleared.** A track that produced a gallery row produced
+	* one; deleting the row later is the gallery's business, not this flag's.
+	*
+	* **Absent ≠ false**, the same rule as {@link hasFace}: every row written
+	* before the column omits it, and so does every server that predates the
+	* field. A consumer must test `=== true` and render nothing otherwise —
+	* never infer "no assignable face".
+	*/
+	hasEmbeddedFace: boolean().optional(),
+	/**
 	* This subject CONTAINS a folded rider — a person the rider-pairing step
 	* ([D34](../decisions/adr-0034.md)) removed from the frame BEFORE the tracker,
 	* so the passage is tracked once and as a VEHICLE.
@@ -17768,6 +17772,32 @@ var DetailResultSchema = object({
 	/** FRAME-space bbox (already mapped back from crop space). */
 	bbox: NativeCropBboxSchema.optional(),
 	embedding: string().optional(),
+	/**
+	* L2 magnitude of the RAW pre-normalization embedding. Additive and optional
+	* so an older runner that does not send it degrades to "unmeasurable", which
+	* the consuming gate treats as accept — never as reject.
+	*/
+	embeddingMagnitude: number().optional(),
+	/**
+	* Model that produced `embedding` — the SAME contract `labelModelId` has for
+	* `label`, and for the same reason: the producing node is the only side that
+	* knows which model actually ran, and re-deriving it downstream is exactly
+	* the inference this model exists to forbid.
+	*
+	* Additive and optional, so a runner that predates it degrades to
+	* "unmeasurable" rather than to a wrong answer — the consumer falls back to
+	* its previous assumption instead of refusing.
+	*
+	* Its absence was not cosmetic. `FaceRecognizer` needs the probe's model id
+	* to use `face-matcher`'s same-model gate (`sample.modelId !== probe.modelId`);
+	* with nothing on the wire it took the id from the GALLERY, so the gate
+	* compared the gallery against itself and could never fire. That turned the
+	* one guard protecting the face feature space into a tautology, and it is
+	* why swapping `face-embedding`'s model would NOT have stranded the enrolled
+	* gallery as the catalog comment predicts — it would have scored the new
+	* model's vectors against the old model's samples in one cosine space.
+	*/
+	embeddingModelId: string().optional(),
 	label: string().optional(),
 	/**
 	* The tier `label` occupies, copied VERBATIM from the producing step's
@@ -18643,6 +18673,12 @@ var CameraStatusSchema = object({
 	/** Unix timestamp (ms) when this snapshot was composed server-side. */
 	fetchedAt: number()
 });
+var InferenceDeviceExclusionReasonSchema = _enum([
+	"disabled",
+	"unavailable",
+	"cannot-host-camera-root",
+	"accelerator-preferred"
+]);
 var NodeInferenceDeviceSchema = object({
 	/** Stable per-node device key, e.g. `openvino:npu`, `edgetpu:usb`, `cpu`. */
 	key: string(),
@@ -18673,7 +18709,17 @@ var NodeInferenceDeviceSchema = object({
 	* available per format; this is the stored selection that becomes the
 	* default for EVERY camera landing on this accelerator.
 	*/
-	steps: record(string(), DeviceStepConfigSchema).optional()
+	steps: record(string(), DeviceStepConfigSchema).optional(),
+	/**
+	* `null` when the device IS a camera-root candidate on this node; otherwise
+	* the reason the dispatcher drops it. Computed by the SAME
+	* `resolveInferenceDeviceEligibility` the dispatcher runs, so this view can
+	* never disagree with the election — deriving it in the UI from
+	* `enabled`/`available` would silently miss `cannot-host-camera-root` (needs
+	* the node's model catalog) and `accelerator-preferred` (needs the node-wide
+	* "an accelerator is serving" predicate).
+	*/
+	exclusion: InferenceDeviceExclusionReasonSchema.nullable()
 });
 var NodeInferenceDevicesSchema = object({
 	nodeId: string(),
@@ -19178,6 +19224,7 @@ DeviceType.Camera, method(object({
 		isBattery: boolean(),
 		reason: _enum([
 			"disabled",
+			"offline",
 			"sleeping",
 			"unreachable",
 			"waking"
@@ -19223,9 +19270,17 @@ targets: array(object({
 	sleeping: boolean(),
 	/** Current device state rendered over the cached frame. State images
 	*  remain authoritative even when their photographic background is
-	*  old; null means the link must carry a current camera frame. */
+	*  old; null means the link must carry a current camera frame.
+	*
+	*  **This is the ONLY source a surface may derive an inactive tile
+	*  from.** A client that reads a device's `online`/`disabled` flags and
+	*  draws its own verdict will disagree with the pixels it is painting
+	*  — the frame comes from here, and so must the sentence over it
+	*  (D190). Pair with `ageMs` for the age of the photograph behind the
+	*  state. */
 	stateReason: _enum([
 		"disabled",
+		"offline",
 		"sleeping",
 		"unreachable",
 		"waking"
@@ -22422,7 +22477,12 @@ var ListResultSchema = object({
 	probedAt: number()
 });
 var PreferredSchema = LocalInterfaceSchema.nullable();
-var GetConnectionEndpointsResultSchema = object({ endpoints: array(object({
+/**
+* Candidate base URL for the SDK to race on connect. Order matters —
+* the SDK should attempt these top-to-bottom with a short per-candidate
+* timeout (e.g. 1500ms) and cache the winner for the session.
+*/
+var ConnectionEndpointSchema = object({
 	/** Operator-facing label (e.g. "LAN — en0", "Public tunnel"). */
 	label: string(),
 	/** Fully-formed base URL with scheme + host + port. */
@@ -22465,7 +22525,42 @@ var GetConnectionEndpointsResultSchema = object({ endpoints: array(object({
 	* ordering between polls.
 	*/
 	priority: number()
-})).readonly() });
+});
+/**
+* Where the advertised local port came from. Ordered most → least
+* authoritative, and the whole point of returning it: a client must be able to
+* tell a FACT about the hub's socket from an echo of its own guess.
+*/
+var LocalPortSourceEnum = _enum([
+	"server-config",
+	"server-env",
+	"caller-hint",
+	"default"
+]);
+/** The port every LAN/loopback `baseUrl` in the same result was built with. */
+var AdvertisedLocalPortSchema = object({
+	port: number().int().min(1).max(65535),
+	source: LocalPortSourceEnum
+});
+var GetConnectionEndpointsResultSchema = object({
+	endpoints: array(ConnectionEndpointSchema).readonly(),
+	/**
+	* The port the hub built the LAN/loopback URLs with, and where that number
+	* came from.
+	*
+	* Returned rather than merely applied, because "the URL is right" and "the
+	* client can KNOW the URL is right" are different properties. A client that
+	* only sees a corrected URL cannot distinguish a hub that fixed the port from
+	* a hub that echoed the port the client sent, so it cannot decide whether to
+	* race the candidate or discard it. With `source` it can: anything but
+	* `caller-hint` is the hub's own socket.
+	*
+	* Absent on hubs predating this field — a client that finds it missing is
+	* talking to an echoing hub and must degrade exactly as it does for
+	* `caller-hint`.
+	*/
+	localPort: AdvertisedLocalPortSchema
+});
 /**
 * The chosen outbound endpoint for notification artifacts. `baseUrl: null` =
 * AUTO (resolved from the candidate ranking at send time); `resolved` reports
@@ -22486,8 +22581,13 @@ var AllowedAddressesSchema = object({
 */
 addresses: array(string()).readonly() });
 method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(object({
-	/** Local hub HTTP port to use in base URLs. */
-	port: number().int().min(1).max(65535),
+	/**
+	* LEGACY HINT — do not send from new code. Kept optional so clients
+	* written against the echoing contract keep working; the hub uses it
+	* only when it cannot read its own port, and says so via
+	* `localPort.source === 'caller-hint'`.
+	*/
+	port: number().int().min(1).max(65535).optional(),
 	/** Include `http(s)://127.0.0.1:<port>` as the lowest-priority
 	*  candidate. Default `true`. */
 	includeLoopback: boolean().optional(),
@@ -33472,7 +33572,6 @@ var NC_AUDIO_DEFAULTS = {
 	hitPercent: 60,
 	samplingSeconds: 10
 };
-new Map(AUDIO_MACRO_LABELS.flatMap((macro) => macro.icon === void 0 ? [] : [[macro.id, macro.icon]]));
 new Set(["devices", "classes"]);
 NC_AUDIO_DEFAULTS.hitPercent, NC_AUDIO_DEFAULTS.samplingSeconds;
 /**
@@ -33706,6 +33805,39 @@ TimelapseRuleInputSchema.extend({
 	createdAt: number(),
 	updatedAt: number()
 });
+Object.freeze(Object.fromEntries([{
+	stepId: "face-embedding",
+	label: "Face recognition model",
+	defaultModelId: "arcface-r100",
+	indexName: "the enrolled face gallery",
+	options: [
+		{
+			id: "arcface-r100",
+			label: "ArcFace (ResNet34)"
+		},
+		{
+			id: "auraface-r100",
+			label: "AuraFace R100"
+		},
+		{
+			id: "inception-resnet-v1",
+			label: "Inception ResNet V1"
+		}
+	]
+}, {
+	stepId: "clip-embedding",
+	label: "Semantic search model",
+	defaultModelId: "mobileclip-s1",
+	indexName: "the object semantic-search index",
+	options: [{
+		id: "mobileclip-s1",
+		label: "MobileCLIP S1"
+	}, {
+		id: "mobileclip-s2",
+		label: "MobileCLIP S2"
+	}]
+}].map((s) => [s.stepId, s.defaultModelId])));
+string().min(1);
 object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -33726,10 +33858,21 @@ object({
 	*/
 	square: boolean()
 });
-({
+/**
+* The convention in force when nobody has configured one — byte-for-byte the
+* behaviour of the pre-unification LIVE path (`DETAIL_CROP_PADDING_RATIO`).
+*/
+var DEFAULT_DETAIL_CROP_CONVENTION = {
 	paddingRatio: .15,
 	square: false
-}).paddingRatio;
+};
+Object.freeze({
+	x: 0,
+	y: 0,
+	w: 1,
+	h: 1
+});
+DEFAULT_DETAIL_CROP_CONVENTION.paddingRatio;
 /**
 * WHICH delivered frames the decode worker retains a native copy of.
 *

package/dist/{dist-DAzZw-t7.mjs → dist-cyVteDFT.mjs}

@@ -7583,7 +7583,7 @@ var RecordingBandSchema = object({
 	postBufferSec: number().min(0).optional()
 });
 ({
-	preBufferSec: 10,
+	preBufferSec: 15,
 	postBufferSec: 30
 }).postBufferSec * 1e3;
 /**
@@ -13539,128 +13539,103 @@ var COCO_TO_MACRO = {
 var AUDIO_MACRO_LABELS = [
 	{
 		id: "speech",
-		name: "Speech",
-		icon: "🗣️"
+		name: "Speech"
 	},
 	{
 		id: "scream",
-		name: "Scream / Shout",
-		icon: "😱"
+		name: "Scream / Shout"
 	},
 	{
 		id: "crying",
-		name: "Crying / Baby",
-		icon: "😢"
+		name: "Crying / Baby"
 	},
 	{
 		id: "laughter",
-		name: "Laughter",
-		icon: "😂"
+		name: "Laughter"
 	},
 	{
 		id: "music",
-		name: "Music",
-		icon: "🎵"
+		name: "Music"
 	},
 	{
 		id: "dog",
-		name: "Dog",
-		icon: "🐕"
+		name: "Dog"
 	},
 	{
 		id: "cat",
-		name: "Cat",
-		icon: "🐈"
+		name: "Cat"
 	},
 	{
 		id: "bird",
-		name: "Bird",
-		icon: "🐦"
+		name: "Bird"
 	},
 	{
 		id: "animal",
-		name: "Animal (other)",
-		icon: "🐾"
+		name: "Animal (other)"
 	},
 	{
 		id: "alarm",
-		name: "Alarm / Siren",
-		icon: "🚨"
+		name: "Alarm / Siren"
 	},
 	{
 		id: "doorbell",
-		name: "Doorbell / Knock",
-		icon: "🔔"
+		name: "Doorbell / Knock"
 	},
 	{
 		id: "glass_breaking",
-		name: "Glass Breaking",
-		icon: "💥"
+		name: "Glass Breaking"
 	},
 	{
 		id: "gunshot",
-		name: "Gunshot / Explosion",
-		icon: "💣"
+		name: "Gunshot / Explosion"
 	},
 	{
 		id: "vehicle",
-		name: "Vehicle",
-		icon: "🚗"
+		name: "Vehicle"
 	},
 	{
 		id: "siren",
-		name: "Emergency Siren",
-		icon: "🚑"
+		name: "Emergency Siren"
 	},
 	{
 		id: "fire",
-		name: "Fire / Smoke",
-		icon: "🔥"
+		name: "Fire / Smoke"
 	},
 	{
 		id: "water",
-		name: "Water",
-		icon: "💧"
+		name: "Water"
 	},
 	{
 		id: "wind",
-		name: "Wind / Weather",
-		icon: "🌬️"
+		name: "Wind / Weather"
 	},
 	{
 		id: "door",
-		name: "Door",
-		icon: "🚪"
+		name: "Door"
 	},
 	{
 		id: "footsteps",
-		name: "Footsteps",
-		icon: "👣"
+		name: "Footsteps"
 	},
 	{
 		id: "crowd",
-		name: "Crowd / Chatter",
-		icon: "👥"
+		name: "Crowd / Chatter"
 	},
 	{
 		id: "telephone",
-		name: "Telephone",
-		icon: "📞"
+		name: "Telephone"
 	},
 	{
 		id: "engine",
-		name: "Engine / Motor",
-		icon: "⚙️"
+		name: "Engine / Motor"
 	},
 	{
 		id: "tools",
-		name: "Tools / Construction",
-		icon: "🔨"
+		name: "Tools / Construction"
 	},
 	{
 		id: "silence",
-		name: "Silence",
-		icon: "🤫"
+		name: "Silence"
 	}
 ];
 var YAMNET_TO_MACRO = {
@@ -16124,7 +16099,7 @@ var TrackEnvelopeSchema = object({
 * `snapshots[]` references — megabytes across a page of tracks. `slim`
 * keeps every scalar the list surfaces actually render (ids, class(es),
 * label / audioLabels / importance enrichment, firstSeen/lastSeen, state,
-* zonesVisited, bestEventId, envelope, hasFace, hasRider) and returns `positions` /
+* zonesVisited, bestEventId, envelope, hasFace, hasEmbeddedFace, hasRider) and returns `positions` /
 * `snapshots` as EMPTY arrays — detail views re-fetch the full row via
 * `getTrack`. Mirrors the event-store `projection` convention
 * (`getObjectEvents` et al.).
@@ -16419,6 +16394,35 @@ var TrackSchema = object({
 	*/
 	hasFace: boolean().optional(),
 	/**
+	* This track has a face row IN THE GALLERY: a crop **and** an embedding — a
+	* face an operator could ASSIGN to an identity.
+	*
+	* The STRICT twin of {@link hasFace}, and the pair only earns its keep
+	* because the two disagree. `hasFace` is stamped at the TOP of the face
+	* branch, before every gate, and means no more than "a face detector produced
+	* a face detail". This one is stamped at the single moment the gallery row
+	* LANDS — after `FaceRecognizer.onTrackEnd` successfully persists it, i.e.
+	* past the embedding-magnitude verdict, the `minFacePx` detection gate, the
+	* candidate gate, the imageless-track drop (no crop was ever captured) and
+	* the crop-store drop. Everything between the detector and that insert can
+	* legitimately refuse the face, so a flag written any earlier promises the
+	* operator something to assign and delivers nothing.
+	*
+	* **Independent of recognition.** A face collected but never auto-matched is
+	* still assignable — it is in fact the face an operator most wants to reach —
+	* so this is NOT gated on `recognizedIdentityId`. Recognition lands in
+	* `subLabel`; this says only that the raw material exists.
+	*
+	* **Set once, never cleared.** A track that produced a gallery row produced
+	* one; deleting the row later is the gallery's business, not this flag's.
+	*
+	* **Absent ≠ false**, the same rule as {@link hasFace}: every row written
+	* before the column omits it, and so does every server that predates the
+	* field. A consumer must test `=== true` and render nothing otherwise —
+	* never infer "no assignable face".
+	*/
+	hasEmbeddedFace: boolean().optional(),
+	/**
 	* This subject CONTAINS a folded rider — a person the rider-pairing step
 	* ([D34](../decisions/adr-0034.md)) removed from the frame BEFORE the tracker,
 	* so the passage is tracked once and as a VEHICLE.
@@ -17768,6 +17772,32 @@ var DetailResultSchema = object({
 	/** FRAME-space bbox (already mapped back from crop space). */
 	bbox: NativeCropBboxSchema.optional(),
 	embedding: string().optional(),
+	/**
+	* L2 magnitude of the RAW pre-normalization embedding. Additive and optional
+	* so an older runner that does not send it degrades to "unmeasurable", which
+	* the consuming gate treats as accept — never as reject.
+	*/
+	embeddingMagnitude: number().optional(),
+	/**
+	* Model that produced `embedding` — the SAME contract `labelModelId` has for
+	* `label`, and for the same reason: the producing node is the only side that
+	* knows which model actually ran, and re-deriving it downstream is exactly
+	* the inference this model exists to forbid.
+	*
+	* Additive and optional, so a runner that predates it degrades to
+	* "unmeasurable" rather than to a wrong answer — the consumer falls back to
+	* its previous assumption instead of refusing.
+	*
+	* Its absence was not cosmetic. `FaceRecognizer` needs the probe's model id
+	* to use `face-matcher`'s same-model gate (`sample.modelId !== probe.modelId`);
+	* with nothing on the wire it took the id from the GALLERY, so the gate
+	* compared the gallery against itself and could never fire. That turned the
+	* one guard protecting the face feature space into a tautology, and it is
+	* why swapping `face-embedding`'s model would NOT have stranded the enrolled
+	* gallery as the catalog comment predicts — it would have scored the new
+	* model's vectors against the old model's samples in one cosine space.
+	*/
+	embeddingModelId: string().optional(),
 	label: string().optional(),
 	/**
 	* The tier `label` occupies, copied VERBATIM from the producing step's
@@ -18643,6 +18673,12 @@ var CameraStatusSchema = object({
 	/** Unix timestamp (ms) when this snapshot was composed server-side. */
 	fetchedAt: number()
 });
+var InferenceDeviceExclusionReasonSchema = _enum([
+	"disabled",
+	"unavailable",
+	"cannot-host-camera-root",
+	"accelerator-preferred"
+]);
 var NodeInferenceDeviceSchema = object({
 	/** Stable per-node device key, e.g. `openvino:npu`, `edgetpu:usb`, `cpu`. */
 	key: string(),
@@ -18673,7 +18709,17 @@ var NodeInferenceDeviceSchema = object({
 	* available per format; this is the stored selection that becomes the
 	* default for EVERY camera landing on this accelerator.
 	*/
-	steps: record(string(), DeviceStepConfigSchema).optional()
+	steps: record(string(), DeviceStepConfigSchema).optional(),
+	/**
+	* `null` when the device IS a camera-root candidate on this node; otherwise
+	* the reason the dispatcher drops it. Computed by the SAME
+	* `resolveInferenceDeviceEligibility` the dispatcher runs, so this view can
+	* never disagree with the election — deriving it in the UI from
+	* `enabled`/`available` would silently miss `cannot-host-camera-root` (needs
+	* the node's model catalog) and `accelerator-preferred` (needs the node-wide
+	* "an accelerator is serving" predicate).
+	*/
+	exclusion: InferenceDeviceExclusionReasonSchema.nullable()
 });
 var NodeInferenceDevicesSchema = object({
 	nodeId: string(),
@@ -19178,6 +19224,7 @@ DeviceType.Camera, method(object({
 		isBattery: boolean(),
 		reason: _enum([
 			"disabled",
+			"offline",
 			"sleeping",
 			"unreachable",
 			"waking"
@@ -19223,9 +19270,17 @@ targets: array(object({
 	sleeping: boolean(),
 	/** Current device state rendered over the cached frame. State images
 	*  remain authoritative even when their photographic background is
-	*  old; null means the link must carry a current camera frame. */
+	*  old; null means the link must carry a current camera frame.
+	*
+	*  **This is the ONLY source a surface may derive an inactive tile
+	*  from.** A client that reads a device's `online`/`disabled` flags and
+	*  draws its own verdict will disagree with the pixels it is painting
+	*  — the frame comes from here, and so must the sentence over it
+	*  (D190). Pair with `ageMs` for the age of the photograph behind the
+	*  state. */
 	stateReason: _enum([
 		"disabled",
+		"offline",
 		"sleeping",
 		"unreachable",
 		"waking"
@@ -22422,7 +22477,12 @@ var ListResultSchema = object({
 	probedAt: number()
 });
 var PreferredSchema = LocalInterfaceSchema.nullable();
-var GetConnectionEndpointsResultSchema = object({ endpoints: array(object({
+/**
+* Candidate base URL for the SDK to race on connect. Order matters —
+* the SDK should attempt these top-to-bottom with a short per-candidate
+* timeout (e.g. 1500ms) and cache the winner for the session.
+*/
+var ConnectionEndpointSchema = object({
 	/** Operator-facing label (e.g. "LAN — en0", "Public tunnel"). */
 	label: string(),
 	/** Fully-formed base URL with scheme + host + port. */
@@ -22465,7 +22525,42 @@ var GetConnectionEndpointsResultSchema = object({ endpoints: array(object({
 	* ordering between polls.
 	*/
 	priority: number()
-})).readonly() });
+});
+/**
+* Where the advertised local port came from. Ordered most → least
+* authoritative, and the whole point of returning it: a client must be able to
+* tell a FACT about the hub's socket from an echo of its own guess.
+*/
+var LocalPortSourceEnum = _enum([
+	"server-config",
+	"server-env",
+	"caller-hint",
+	"default"
+]);
+/** The port every LAN/loopback `baseUrl` in the same result was built with. */
+var AdvertisedLocalPortSchema = object({
+	port: number().int().min(1).max(65535),
+	source: LocalPortSourceEnum
+});
+var GetConnectionEndpointsResultSchema = object({
+	endpoints: array(ConnectionEndpointSchema).readonly(),
+	/**
+	* The port the hub built the LAN/loopback URLs with, and where that number
+	* came from.
+	*
+	* Returned rather than merely applied, because "the URL is right" and "the
+	* client can KNOW the URL is right" are different properties. A client that
+	* only sees a corrected URL cannot distinguish a hub that fixed the port from
+	* a hub that echoed the port the client sent, so it cannot decide whether to
+	* race the candidate or discard it. With `source` it can: anything but
+	* `caller-hint` is the hub's own socket.
+	*
+	* Absent on hubs predating this field — a client that finds it missing is
+	* talking to an echoing hub and must degrade exactly as it does for
+	* `caller-hint`.
+	*/
+	localPort: AdvertisedLocalPortSchema
+});
 /**
 * The chosen outbound endpoint for notification artifacts. `baseUrl: null` =
 * AUTO (resolved from the candidate ranking at send time); `resolved` reports
@@ -22486,8 +22581,13 @@ var AllowedAddressesSchema = object({
 */
 addresses: array(string()).readonly() });
 method(_void(), ListResultSchema), method(_void(), PreferredSchema), method(object({
-	/** Local hub HTTP port to use in base URLs. */
-	port: number().int().min(1).max(65535),
+	/**
+	* LEGACY HINT — do not send from new code. Kept optional so clients
+	* written against the echoing contract keep working; the hub uses it
+	* only when it cannot read its own port, and says so via
+	* `localPort.source === 'caller-hint'`.
+	*/
+	port: number().int().min(1).max(65535).optional(),
 	/** Include `http(s)://127.0.0.1:<port>` as the lowest-priority
 	*  candidate. Default `true`. */
 	includeLoopback: boolean().optional(),
@@ -33472,7 +33572,6 @@ var NC_AUDIO_DEFAULTS = {
 	hitPercent: 60,
 	samplingSeconds: 10
 };
-new Map(AUDIO_MACRO_LABELS.flatMap((macro) => macro.icon === void 0 ? [] : [[macro.id, macro.icon]]));
 new Set(["devices", "classes"]);
 NC_AUDIO_DEFAULTS.hitPercent, NC_AUDIO_DEFAULTS.samplingSeconds;
 /**
@@ -33706,6 +33805,39 @@ TimelapseRuleInputSchema.extend({
 	createdAt: number(),
 	updatedAt: number()
 });
+Object.freeze(Object.fromEntries([{
+	stepId: "face-embedding",
+	label: "Face recognition model",
+	defaultModelId: "arcface-r100",
+	indexName: "the enrolled face gallery",
+	options: [
+		{
+			id: "arcface-r100",
+			label: "ArcFace (ResNet34)"
+		},
+		{
+			id: "auraface-r100",
+			label: "AuraFace R100"
+		},
+		{
+			id: "inception-resnet-v1",
+			label: "Inception ResNet V1"
+		}
+	]
+}, {
+	stepId: "clip-embedding",
+	label: "Semantic search model",
+	defaultModelId: "mobileclip-s1",
+	indexName: "the object semantic-search index",
+	options: [{
+		id: "mobileclip-s1",
+		label: "MobileCLIP S1"
+	}, {
+		id: "mobileclip-s2",
+		label: "MobileCLIP S2"
+	}]
+}].map((s) => [s.stepId, s.defaultModelId])));
+string().min(1);
 object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -33726,10 +33858,21 @@ object({
 	*/
 	square: boolean()
 });
-({
+/**
+* The convention in force when nobody has configured one — byte-for-byte the
+* behaviour of the pre-unification LIVE path (`DETAIL_CROP_PADDING_RATIO`).
+*/
+var DEFAULT_DETAIL_CROP_CONVENTION = {
 	paddingRatio: .15,
 	square: false
-}).paddingRatio;
+};
+Object.freeze({
+	x: 0,
+	y: 0,
+	w: 1,
+	h: 1
+});
+DEFAULT_DETAIL_CROP_CONVENTION.paddingRatio;
 /**
 * WHICH delivered frames the decode worker retains a native copy of.
 *

package/dist/ingress/tailscale-ingress.addon.js

@@ -2,7 +2,7 @@ Object.defineProperties(exports, {
 	__esModule: { value: true },
 	[Symbol.toStringTag]: { value: "Module" }
 });
-const require_dist = require("../dist-CEnhGxlH.js");
+const require_dist = require("../dist-B3cBbqzz.js");
 let node_crypto = require("node:crypto");
 let node_child_process = require("node:child_process");
 //#region src/ingress/tailscale-cli.ts

package/dist/ingress/tailscale-ingress.addon.mjs

@@ -1,4 +1,4 @@
-import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-DAzZw-t7.mjs";
+import { a as EventCategory, i as BaseAddon, n as networkAccessCapability } from "../dist-cyVteDFT.mjs";
 import { randomUUID } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/addon-tailscale",
-  "version": "1.2.23",
+  "version": "1.2.25",
   "description": "Tailscale bundle for CamStack — joins the host to a tailnet (client) and exposes the hub via Serve/Funnel (ingress). Multi-entry npm package shipping 2 addons under a single bundle.",
   "keywords": [
     "camstack",