@camstack/system 1.2.112 → 1.2.114

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-IPLFQ_-A.js");
+const require_dist = require("../../dist-C1Aea3c6.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { dt as storageCapability, ft as storageMigrationCapability, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as settingsStoreCapability, yt as BaseAddon, zt as parseJsonObject } from "../../dist-bkg2-2g3.mjs";
+import { dt as storageCapability, ft as storageMigrationCapability, g as StorageMigrationJobSchema, h as StorageLocationTypeSchema, lt as settingsStoreCapability, yt as BaseAddon, zt as parseJsonObject } from "../../dist-CJ8RRSvQ.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-IPLFQ_-A.js");
+const require_dist = require("../../dist-C1Aea3c6.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { It as hydrateSchema, vt as errMsg, yt as BaseAddon } from "../../dist-bkg2-2g3.mjs";
+import { It as hydrateSchema, vt as errMsg, yt as BaseAddon } from "../../dist-CJ8RRSvQ.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-IPLFQ_-A.js");
+const require_dist = require("../../dist-C1Aea3c6.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-bkg2-2g3.mjs";
+import { X as logDestinationCapability, yt as BaseAddon } from "../../dist-CJ8RRSvQ.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-IPLFQ_-A.js → dist-C1Aea3c6.js}

@@ -3669,7 +3669,7 @@ var RecordingBandSchema = zod.z.object({
 	postBufferSec: zod.z.number().min(0).optional()
 });
 ({
-	preBufferSec: 10,
+	preBufferSec: 15,
 	postBufferSec: 30
 }).postBufferSec * 1e3;
 /**
@@ -14363,7 +14363,7 @@ var TrackEnvelopeSchema = zod.z.object({
 * `snapshots[]` references — megabytes across a page of tracks. `slim`
 * keeps every scalar the list surfaces actually render (ids, class(es),
 * label / audioLabels / importance enrichment, firstSeen/lastSeen, state,
-* zonesVisited, bestEventId, envelope, hasFace, hasRider) and returns `positions` /
+* zonesVisited, bestEventId, envelope, hasFace, hasEmbeddedFace, hasRider) and returns `positions` /
 * `snapshots` as EMPTY arrays — detail views re-fetch the full row via
 * `getTrack`. Mirrors the event-store `projection` convention
 * (`getObjectEvents` et al.).
@@ -14658,6 +14658,35 @@ var TrackSchema = zod.z.object({
 	*/
 	hasFace: zod.z.boolean().optional(),
 	/**
+	* This track has a face row IN THE GALLERY: a crop **and** an embedding — a
+	* face an operator could ASSIGN to an identity.
+	*
+	* The STRICT twin of {@link hasFace}, and the pair only earns its keep
+	* because the two disagree. `hasFace` is stamped at the TOP of the face
+	* branch, before every gate, and means no more than "a face detector produced
+	* a face detail". This one is stamped at the single moment the gallery row
+	* LANDS — after `FaceRecognizer.onTrackEnd` successfully persists it, i.e.
+	* past the embedding-magnitude verdict, the `minFacePx` detection gate, the
+	* candidate gate, the imageless-track drop (no crop was ever captured) and
+	* the crop-store drop. Everything between the detector and that insert can
+	* legitimately refuse the face, so a flag written any earlier promises the
+	* operator something to assign and delivers nothing.
+	*
+	* **Independent of recognition.** A face collected but never auto-matched is
+	* still assignable — it is in fact the face an operator most wants to reach —
+	* so this is NOT gated on `recognizedIdentityId`. Recognition lands in
+	* `subLabel`; this says only that the raw material exists.
+	*
+	* **Set once, never cleared.** A track that produced a gallery row produced
+	* one; deleting the row later is the gallery's business, not this flag's.
+	*
+	* **Absent ≠ false**, the same rule as {@link hasFace}: every row written
+	* before the column omits it, and so does every server that predates the
+	* field. A consumer must test `=== true` and render nothing otherwise —
+	* never infer "no assignable face".
+	*/
+	hasEmbeddedFace: zod.z.boolean().optional(),
+	/**
 	* This subject CONTAINS a folded rider — a person the rider-pairing step
 	* ([D34](../decisions/adr-0034.md)) removed from the frame BEFORE the tracker,
 	* so the passage is tracked once and as a VEHICLE.
@@ -16615,6 +16644,26 @@ var DetailResultSchema = zod.z.object({
 	* the consuming gate treats as accept — never as reject.
 	*/
 	embeddingMagnitude: zod.z.number().optional(),
+	/**
+	* Model that produced `embedding` — the SAME contract `labelModelId` has for
+	* `label`, and for the same reason: the producing node is the only side that
+	* knows which model actually ran, and re-deriving it downstream is exactly
+	* the inference this model exists to forbid.
+	*
+	* Additive and optional, so a runner that predates it degrades to
+	* "unmeasurable" rather than to a wrong answer — the consumer falls back to
+	* its previous assumption instead of refusing.
+	*
+	* Its absence was not cosmetic. `FaceRecognizer` needs the probe's model id
+	* to use `face-matcher`'s same-model gate (`sample.modelId !== probe.modelId`);
+	* with nothing on the wire it took the id from the GALLERY, so the gate
+	* compared the gallery against itself and could never fire. That turned the
+	* one guard protecting the face feature space into a tautology, and it is
+	* why swapping `face-embedding`'s model would NOT have stranded the enrolled
+	* gallery as the catalog comment predicts — it would have scored the new
+	* model's vectors against the old model's samples in one cosine space.
+	*/
+	embeddingModelId: zod.z.string().optional(),
 	label: zod.z.string().optional(),
 	/**
 	* The tier `label` occupies, copied VERBATIM from the producing step's
@@ -17660,6 +17709,12 @@ var CameraStatusSchema = zod.z.object({
 	/** Unix timestamp (ms) when this snapshot was composed server-side. */
 	fetchedAt: zod.z.number()
 });
+var InferenceDeviceExclusionReasonSchema = zod.z.enum([
+	"disabled",
+	"unavailable",
+	"cannot-host-camera-root",
+	"accelerator-preferred"
+]);
 var NodeInferenceDeviceSchema = zod.z.object({
 	/** Stable per-node device key, e.g. `openvino:npu`, `edgetpu:usb`, `cpu`. */
 	key: zod.z.string(),
@@ -17690,7 +17745,17 @@ var NodeInferenceDeviceSchema = zod.z.object({
 	* available per format; this is the stored selection that becomes the
 	* default for EVERY camera landing on this accelerator.
 	*/
-	steps: zod.z.record(zod.z.string(), DeviceStepConfigSchema).optional()
+	steps: zod.z.record(zod.z.string(), DeviceStepConfigSchema).optional(),
+	/**
+	* `null` when the device IS a camera-root candidate on this node; otherwise
+	* the reason the dispatcher drops it. Computed by the SAME
+	* `resolveInferenceDeviceEligibility` the dispatcher runs, so this view can
+	* never disagree with the election — deriving it in the UI from
+	* `enabled`/`available` would silently miss `cannot-host-camera-root` (needs
+	* the node's model catalog) and `accelerator-preferred` (needs the node-wide
+	* "an accelerator is serving" predicate).
+	*/
+	exclusion: InferenceDeviceExclusionReasonSchema.nullable()
 });
 var NodeInferenceDevicesSchema = zod.z.object({
 	nodeId: zod.z.string(),
@@ -23791,7 +23856,41 @@ var ConnectionEndpointSchema = zod.z.object({
 	*/
 	priority: zod.z.number()
 });
-var GetConnectionEndpointsResultSchema = zod.z.object({ endpoints: zod.z.array(ConnectionEndpointSchema).readonly() });
+/**
+* Where the advertised local port came from. Ordered most → least
+* authoritative, and the whole point of returning it: a client must be able to
+* tell a FACT about the hub's socket from an echo of its own guess.
+*/
+var LocalPortSourceEnum = zod.z.enum([
+	"server-config",
+	"server-env",
+	"caller-hint",
+	"default"
+]);
+/** The port every LAN/loopback `baseUrl` in the same result was built with. */
+var AdvertisedLocalPortSchema = zod.z.object({
+	port: zod.z.number().int().min(1).max(65535),
+	source: LocalPortSourceEnum
+});
+var GetConnectionEndpointsResultSchema = zod.z.object({
+	endpoints: zod.z.array(ConnectionEndpointSchema).readonly(),
+	/**
+	* The port the hub built the LAN/loopback URLs with, and where that number
+	* came from.
+	*
+	* Returned rather than merely applied, because "the URL is right" and "the
+	* client can KNOW the URL is right" are different properties. A client that
+	* only sees a corrected URL cannot distinguish a hub that fixed the port from
+	* a hub that echoed the port the client sent, so it cannot decide whether to
+	* race the candidate or discard it. With `source` it can: anything but
+	* `caller-hint` is the hub's own socket.
+	*
+	* Absent on hubs predating this field — a client that finds it missing is
+	* talking to an echoing hub and must degrade exactly as it does for
+	* `caller-hint`.
+	*/
+	localPort: AdvertisedLocalPortSchema
+});
 /**
 * The chosen outbound endpoint for notification artifacts. `baseUrl: null` =
 * AUTO (resolved from the candidate ranking at send time); `resolved` reports
@@ -23837,10 +23936,35 @@ var localNetworkCapability = {
 		* Honours `getAllowedAddresses()` when set — addresses outside
 		* the allowlist are dropped (the public tunnel + loopback are
 		* always included as escape hatches).
+		*
+		* **The port is the hub's, not the caller's** (D62 — a function's fact
+		* belongs to whoever already owns it). This method used to take a `port`
+		* and echo it onto every LAN and loopback URL it advertised, which made
+		* every client a second authority on a socket only the hub binds. A viewer
+		* configured with a port-less public URL (`https://camstack.example.top`)
+		* infers 443 from the scheme, asks with 443, and was handed
+		* `https://192.168.1.9:443` for a hub listening on 4443. That candidate
+		* cannot ever answer, and losing its race reads in the log exactly like
+		* "the LAN was tried and it was slower" — so an operator sitting on his own
+		* WiFi stayed on the public tunnel for weeks, with the LAN candidate born
+		* dead on every single connect.
+		*
+		* The hub now resolves its own listen port and reports it as `localPort`,
+		* with the SOURCE of the number, so a client can tell a fact from an echo.
+		*
+		* Out of scope on purpose: a LAN URL that is not the hub's own socket (a
+		* reverse proxy in front of it on another port) is not this method's to
+		* invent either — pin it with `setNotificationEndpoint` / a configured
+		* origin, which is an operator statement rather than a guess.
 		*/
 		getConnectionEndpoints: method(zod.z.object({
-			/** Local hub HTTP port to use in base URLs. */
-			port: zod.z.number().int().min(1).max(65535),
+			/**
+			* LEGACY HINT — do not send from new code. Kept optional so clients
+			* written against the echoing contract keep working; the hub uses it
+			* only when it cannot read its own port, and says so via
+			* `localPort.source === 'caller-hint'`.
+			*/
+			port: zod.z.number().int().min(1).max(65535).optional(),
 			/** Include `http(s)://127.0.0.1:<port>` as the lowest-priority
 			*  candidate. Default `true`. */
 			includeLoopback: zod.z.boolean().optional(),
@@ -38007,6 +38131,39 @@ TimelapseRuleInputSchema.extend({
 	createdAt: zod.z.number(),
 	updatedAt: zod.z.number()
 });
+Object.freeze(Object.fromEntries([{
+	stepId: "face-embedding",
+	label: "Face recognition model",
+	defaultModelId: "arcface-r100",
+	indexName: "the enrolled face gallery",
+	options: [
+		{
+			id: "arcface-r100",
+			label: "ArcFace (ResNet34)"
+		},
+		{
+			id: "auraface-r100",
+			label: "AuraFace R100"
+		},
+		{
+			id: "inception-resnet-v1",
+			label: "Inception ResNet V1"
+		}
+	]
+}, {
+	stepId: "clip-embedding",
+	label: "Semantic search model",
+	defaultModelId: "mobileclip-s1",
+	indexName: "the object semantic-search index",
+	options: [{
+		id: "mobileclip-s1",
+		label: "MobileCLIP S1"
+	}, {
+		id: "mobileclip-s2",
+		label: "MobileCLIP S2"
+	}]
+}].map((s) => [s.stepId, s.defaultModelId])));
+zod.z.string().min(1);
 zod.z.object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -38027,10 +38184,21 @@ zod.z.object({
 	*/
 	square: zod.z.boolean()
 });
-({
+/**
+* The convention in force when nobody has configured one — byte-for-byte the
+* behaviour of the pre-unification LIVE path (`DETAIL_CROP_PADDING_RATIO`).
+*/
+var DEFAULT_DETAIL_CROP_CONVENTION = {
 	paddingRatio: .15,
 	square: false
-}).paddingRatio;
+};
+Object.freeze({
+	x: 0,
+	y: 0,
+	w: 1,
+	h: 1
+});
+DEFAULT_DETAIL_CROP_CONVENTION.paddingRatio;
 /**
 * WHICH delivered frames the decode worker retains a native copy of.
 *

package/dist/{dist-bkg2-2g3.mjs → dist-CJ8RRSvQ.mjs}

@@ -3669,7 +3669,7 @@ var RecordingBandSchema = z.object({
 	postBufferSec: z.number().min(0).optional()
 });
 ({
-	preBufferSec: 10,
+	preBufferSec: 15,
 	postBufferSec: 30
 }).postBufferSec * 1e3;
 /**
@@ -14363,7 +14363,7 @@ var TrackEnvelopeSchema = z.object({
 * `snapshots[]` references — megabytes across a page of tracks. `slim`
 * keeps every scalar the list surfaces actually render (ids, class(es),
 * label / audioLabels / importance enrichment, firstSeen/lastSeen, state,
-* zonesVisited, bestEventId, envelope, hasFace, hasRider) and returns `positions` /
+* zonesVisited, bestEventId, envelope, hasFace, hasEmbeddedFace, hasRider) and returns `positions` /
 * `snapshots` as EMPTY arrays — detail views re-fetch the full row via
 * `getTrack`. Mirrors the event-store `projection` convention
 * (`getObjectEvents` et al.).
@@ -14658,6 +14658,35 @@ var TrackSchema = z.object({
 	*/
 	hasFace: z.boolean().optional(),
 	/**
+	* This track has a face row IN THE GALLERY: a crop **and** an embedding — a
+	* face an operator could ASSIGN to an identity.
+	*
+	* The STRICT twin of {@link hasFace}, and the pair only earns its keep
+	* because the two disagree. `hasFace` is stamped at the TOP of the face
+	* branch, before every gate, and means no more than "a face detector produced
+	* a face detail". This one is stamped at the single moment the gallery row
+	* LANDS — after `FaceRecognizer.onTrackEnd` successfully persists it, i.e.
+	* past the embedding-magnitude verdict, the `minFacePx` detection gate, the
+	* candidate gate, the imageless-track drop (no crop was ever captured) and
+	* the crop-store drop. Everything between the detector and that insert can
+	* legitimately refuse the face, so a flag written any earlier promises the
+	* operator something to assign and delivers nothing.
+	*
+	* **Independent of recognition.** A face collected but never auto-matched is
+	* still assignable — it is in fact the face an operator most wants to reach —
+	* so this is NOT gated on `recognizedIdentityId`. Recognition lands in
+	* `subLabel`; this says only that the raw material exists.
+	*
+	* **Set once, never cleared.** A track that produced a gallery row produced
+	* one; deleting the row later is the gallery's business, not this flag's.
+	*
+	* **Absent ≠ false**, the same rule as {@link hasFace}: every row written
+	* before the column omits it, and so does every server that predates the
+	* field. A consumer must test `=== true` and render nothing otherwise —
+	* never infer "no assignable face".
+	*/
+	hasEmbeddedFace: z.boolean().optional(),
+	/**
 	* This subject CONTAINS a folded rider — a person the rider-pairing step
 	* ([D34](../decisions/adr-0034.md)) removed from the frame BEFORE the tracker,
 	* so the passage is tracked once and as a VEHICLE.
@@ -16615,6 +16644,26 @@ var DetailResultSchema = z.object({
 	* the consuming gate treats as accept — never as reject.
 	*/
 	embeddingMagnitude: z.number().optional(),
+	/**
+	* Model that produced `embedding` — the SAME contract `labelModelId` has for
+	* `label`, and for the same reason: the producing node is the only side that
+	* knows which model actually ran, and re-deriving it downstream is exactly
+	* the inference this model exists to forbid.
+	*
+	* Additive and optional, so a runner that predates it degrades to
+	* "unmeasurable" rather than to a wrong answer — the consumer falls back to
+	* its previous assumption instead of refusing.
+	*
+	* Its absence was not cosmetic. `FaceRecognizer` needs the probe's model id
+	* to use `face-matcher`'s same-model gate (`sample.modelId !== probe.modelId`);
+	* with nothing on the wire it took the id from the GALLERY, so the gate
+	* compared the gallery against itself and could never fire. That turned the
+	* one guard protecting the face feature space into a tautology, and it is
+	* why swapping `face-embedding`'s model would NOT have stranded the enrolled
+	* gallery as the catalog comment predicts — it would have scored the new
+	* model's vectors against the old model's samples in one cosine space.
+	*/
+	embeddingModelId: z.string().optional(),
 	label: z.string().optional(),
 	/**
 	* The tier `label` occupies, copied VERBATIM from the producing step's
@@ -17660,6 +17709,12 @@ var CameraStatusSchema = z.object({
 	/** Unix timestamp (ms) when this snapshot was composed server-side. */
 	fetchedAt: z.number()
 });
+var InferenceDeviceExclusionReasonSchema = z.enum([
+	"disabled",
+	"unavailable",
+	"cannot-host-camera-root",
+	"accelerator-preferred"
+]);
 var NodeInferenceDeviceSchema = z.object({
 	/** Stable per-node device key, e.g. `openvino:npu`, `edgetpu:usb`, `cpu`. */
 	key: z.string(),
@@ -17690,7 +17745,17 @@ var NodeInferenceDeviceSchema = z.object({
 	* available per format; this is the stored selection that becomes the
 	* default for EVERY camera landing on this accelerator.
 	*/
-	steps: z.record(z.string(), DeviceStepConfigSchema).optional()
+	steps: z.record(z.string(), DeviceStepConfigSchema).optional(),
+	/**
+	* `null` when the device IS a camera-root candidate on this node; otherwise
+	* the reason the dispatcher drops it. Computed by the SAME
+	* `resolveInferenceDeviceEligibility` the dispatcher runs, so this view can
+	* never disagree with the election — deriving it in the UI from
+	* `enabled`/`available` would silently miss `cannot-host-camera-root` (needs
+	* the node's model catalog) and `accelerator-preferred` (needs the node-wide
+	* "an accelerator is serving" predicate).
+	*/
+	exclusion: InferenceDeviceExclusionReasonSchema.nullable()
 });
 var NodeInferenceDevicesSchema = z.object({
 	nodeId: z.string(),
@@ -23791,7 +23856,41 @@ var ConnectionEndpointSchema = z.object({
 	*/
 	priority: z.number()
 });
-var GetConnectionEndpointsResultSchema = z.object({ endpoints: z.array(ConnectionEndpointSchema).readonly() });
+/**
+* Where the advertised local port came from. Ordered most → least
+* authoritative, and the whole point of returning it: a client must be able to
+* tell a FACT about the hub's socket from an echo of its own guess.
+*/
+var LocalPortSourceEnum = z.enum([
+	"server-config",
+	"server-env",
+	"caller-hint",
+	"default"
+]);
+/** The port every LAN/loopback `baseUrl` in the same result was built with. */
+var AdvertisedLocalPortSchema = z.object({
+	port: z.number().int().min(1).max(65535),
+	source: LocalPortSourceEnum
+});
+var GetConnectionEndpointsResultSchema = z.object({
+	endpoints: z.array(ConnectionEndpointSchema).readonly(),
+	/**
+	* The port the hub built the LAN/loopback URLs with, and where that number
+	* came from.
+	*
+	* Returned rather than merely applied, because "the URL is right" and "the
+	* client can KNOW the URL is right" are different properties. A client that
+	* only sees a corrected URL cannot distinguish a hub that fixed the port from
+	* a hub that echoed the port the client sent, so it cannot decide whether to
+	* race the candidate or discard it. With `source` it can: anything but
+	* `caller-hint` is the hub's own socket.
+	*
+	* Absent on hubs predating this field — a client that finds it missing is
+	* talking to an echoing hub and must degrade exactly as it does for
+	* `caller-hint`.
+	*/
+	localPort: AdvertisedLocalPortSchema
+});
 /**
 * The chosen outbound endpoint for notification artifacts. `baseUrl: null` =
 * AUTO (resolved from the candidate ranking at send time); `resolved` reports
@@ -23837,10 +23936,35 @@ var localNetworkCapability = {
 		* Honours `getAllowedAddresses()` when set — addresses outside
 		* the allowlist are dropped (the public tunnel + loopback are
 		* always included as escape hatches).
+		*
+		* **The port is the hub's, not the caller's** (D62 — a function's fact
+		* belongs to whoever already owns it). This method used to take a `port`
+		* and echo it onto every LAN and loopback URL it advertised, which made
+		* every client a second authority on a socket only the hub binds. A viewer
+		* configured with a port-less public URL (`https://camstack.example.top`)
+		* infers 443 from the scheme, asks with 443, and was handed
+		* `https://192.168.1.9:443` for a hub listening on 4443. That candidate
+		* cannot ever answer, and losing its race reads in the log exactly like
+		* "the LAN was tried and it was slower" — so an operator sitting on his own
+		* WiFi stayed on the public tunnel for weeks, with the LAN candidate born
+		* dead on every single connect.
+		*
+		* The hub now resolves its own listen port and reports it as `localPort`,
+		* with the SOURCE of the number, so a client can tell a fact from an echo.
+		*
+		* Out of scope on purpose: a LAN URL that is not the hub's own socket (a
+		* reverse proxy in front of it on another port) is not this method's to
+		* invent either — pin it with `setNotificationEndpoint` / a configured
+		* origin, which is an operator statement rather than a guess.
 		*/
 		getConnectionEndpoints: method(z.object({
-			/** Local hub HTTP port to use in base URLs. */
-			port: z.number().int().min(1).max(65535),
+			/**
+			* LEGACY HINT — do not send from new code. Kept optional so clients
+			* written against the echoing contract keep working; the hub uses it
+			* only when it cannot read its own port, and says so via
+			* `localPort.source === 'caller-hint'`.
+			*/
+			port: z.number().int().min(1).max(65535).optional(),
 			/** Include `http(s)://127.0.0.1:<port>` as the lowest-priority
 			*  candidate. Default `true`. */
 			includeLoopback: z.boolean().optional(),
@@ -38007,6 +38131,39 @@ TimelapseRuleInputSchema.extend({
 	createdAt: z.number(),
 	updatedAt: z.number()
 });
+Object.freeze(Object.fromEntries([{
+	stepId: "face-embedding",
+	label: "Face recognition model",
+	defaultModelId: "arcface-r100",
+	indexName: "the enrolled face gallery",
+	options: [
+		{
+			id: "arcface-r100",
+			label: "ArcFace (ResNet34)"
+		},
+		{
+			id: "auraface-r100",
+			label: "AuraFace R100"
+		},
+		{
+			id: "inception-resnet-v1",
+			label: "Inception ResNet V1"
+		}
+	]
+}, {
+	stepId: "clip-embedding",
+	label: "Semantic search model",
+	defaultModelId: "mobileclip-s1",
+	indexName: "the object semantic-search index",
+	options: [{
+		id: "mobileclip-s1",
+		label: "MobileCLIP S1"
+	}, {
+		id: "mobileclip-s2",
+		label: "MobileCLIP S2"
+	}]
+}].map((s) => [s.stepId, s.defaultModelId])));
+z.string().min(1);
 z.object({
 	/**
 	* Fraction of the box's own size added on EACH side before cutting.
@@ -38027,10 +38184,21 @@ z.object({
 	*/
 	square: z.boolean()
 });
-({
+/**
+* The convention in force when nobody has configured one — byte-for-byte the
+* behaviour of the pre-unification LIVE path (`DETAIL_CROP_PADDING_RATIO`).
+*/
+var DEFAULT_DETAIL_CROP_CONVENTION = {
 	paddingRatio: .15,
 	square: false
-}).paddingRatio;
+};
+Object.freeze({
+	x: 0,
+	y: 0,
+	w: 1,
+	h: 1
+});
+DEFAULT_DETAIL_CROP_CONVENTION.paddingRatio;
 /**
 * WHICH delivered frames the decode worker retains a native copy of.
 *

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-IPLFQ_-A.js");
+const require_dist = require("./dist-C1Aea3c6.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { At as asNumber, B as extractNestedAddonId, Bt as parseJsonUnknown$1, Dt as ReadinessTimeoutError, Et as ReadinessRegistry, Ft as expandCapMethods, Gt as EventCategory$1, H as isArrayOutputSchema, Ht as resolveCapMount, J as lifecycleJobSchema, K as isVoidInput, Mt as createEvent, Nt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_STATUS_METHOD, U as isCollectionArrayMethod, Ut as scopeKey, Vt as readinessKey, W as isObjectInput, Z as logLevelAtMost, bt as DATAPLANE_SECRET_HEADER$1, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asString$1, kt as asJsonObject$1, ot as scopesAllowAddon, q as kebabToCamel, st as scopesAllowDeviceCap, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, vt as errMsg$1, xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, y as addonSettingsCapability, zt as parseJsonObject } from "./dist-bkg2-2g3.mjs";
+import { At as asNumber, B as extractNestedAddonId, Bt as parseJsonUnknown$1, Dt as ReadinessTimeoutError, Et as ReadinessRegistry, Ft as expandCapMethods, Gt as EventCategory$1, H as isArrayOutputSchema, Ht as resolveCapMount, J as lifecycleJobSchema, K as isVoidInput, Mt as createEvent, Nt as emitDownForOwnedCaps, Q as looseSchema, St as DEVICE_STATUS_METHOD, U as isCollectionArrayMethod, Ut as scopeKey, Vt as readinessKey, W as isObjectInput, Z as logLevelAtMost, bt as DATAPLANE_SECRET_HEADER$1, d as METHOD_ACCESS_MAP, f as RUNTIME_DEFAULTS, it as procedureAuthKey, jt as asString$1, kt as asJsonObject$1, ot as scopesAllowAddon, q as kebabToCamel, st as scopesAllowDeviceCap, t as ALL_CAPABILITY_DEFINITIONS, tt as objectInputDeclaresAddonId, vt as errMsg$1, xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, y as addonSettingsCapability, zt as parseJsonObject } from "./dist-CJ8RRSvQ.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";

package/dist/{retired-settings-keys-B-I7w1Ta.js → retired-settings-keys-B52KsNz8.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-IPLFQ_-A.js");
+const require_dist = require("./dist-C1Aea3c6.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-C7rRSzbP.mjs → retired-settings-keys-C1efPfyW.mjs}

@@ -1,4 +1,4 @@
-import { kt as asJsonObject } from "./dist-bkg2-2g3.mjs";
+import { kt as asJsonObject } from "./dist-CJ8RRSvQ.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.112",
+  "version": "1.2.114",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",