@camstack/system 1.2.357 → 1.2.358

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-DzAHit0a.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-DmHNjbB0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { B as StorageLocationTypeSchema, Cr as EventCategory, E as LegacyStorageLocationDefaultSchema, Et as evictionPolicyOfLocation, Fn as withLocationMode, It as isLocationEnabled, Jt as mayReadLocation, M as REDACTED_SECRET, Nt as gbToBytes, Qn as BaseAddon, Qt as modeMayWrite, R as StorageCleanupJobSchema, Tn as storageMigrationCapability, V as StorageMigrationJobSchema, Vt as legacyModeOf, Yt as mayWriteToLocation, gr as parseJsonObject, hn as resolveLocationMode, tt as collectSecretConfigKeys, wn as storageCapability, xn as settingsStoreCapability, z as StorageLocationModeSchema } from "../../dist-B7WRgEZY.mjs";
+import { B as StorageLocationTypeSchema, E as LegacyStorageLocationDefaultSchema, En as storageMigrationCapability, Et as evictionPolicyOfLocation, It as isLocationEnabled, Jt as mayReadLocation, Ln as withLocationMode, M as REDACTED_SECRET, Nt as gbToBytes, Qt as modeMayWrite, R as StorageCleanupJobSchema, Sn as settingsStoreCapability, Tn as storageCapability, Tr as EventCategory, V as StorageMigrationJobSchema, Vt as legacyModeOf, Yt as mayWriteToLocation, er as BaseAddon, gn as resolveLocationMode, tt as collectSecretConfigKeys, vr as parseJsonObject, z as StorageLocationModeSchema } from "../../dist-D3bhbMY3.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-BdT320dq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-DzAHit0a.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Qn as BaseAddon, Zn as errMsg, fr as hydrateSchema } from "../../dist-B7WRgEZY.mjs";
+import { $n as errMsg, er as BaseAddon, mr as hydrateSchema } from "../../dist-D3bhbMY3.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CFVOy8VT.js");
+const require_dist = require("../../dist-DzAHit0a.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Gt as logDestinationCapability, Qn as BaseAddon } from "../../dist-B7WRgEZY.mjs";
+import { Gt as logDestinationCapability, er as BaseAddon } from "../../dist-D3bhbMY3.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{child-cap-dispatch-wbIQJctP.js → child-cap-dispatch-BWk99kmA.js}

@@ -1,5 +1,5 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CFVOy8VT.js");
+const require_dist = require("./dist-DzAHit0a.js");
 const require_proc_stat = require("./proc-stat-DL-WUOhl.js");
 require("./hub-cap-forward-DmHNjbB0.js");
 let node_crypto = require("node:crypto");
@@ -4418,7 +4418,7 @@ function createChildrenBatchLoader(opts) {
 var RuntimeStateLoadError = class extends Error {
 	deviceId;
 	constructor(deviceId, reason, options) {
-		super(`runtime state of device ${deviceId} could not be loaded (${reason}) — the device is not built from an empty state (D677)`, options);
+		super(`runtime state of device ${deviceId} could not be loaded (${reason}) — the device is not built from an empty state`, options);
 		this.deviceId = deviceId;
 		this.name = "RuntimeStateLoadError";
 	}

package/dist/{child-cap-dispatch-BcRHQBKW.mjs → child-cap-dispatch-C2dFiu87.mjs}

@@ -1,4 +1,4 @@
-import { Cr as EventCategory$1, cr as createEvent } from "./dist-B7WRgEZY.mjs";
+import { Tr as EventCategory$1, ur as createEvent } from "./dist-D3bhbMY3.mjs";
 import { a as parseProcStat, i as nodeProcReader } from "./proc-stat-CbC55Kqi.mjs";
 import "./hub-cap-forward-BdT320dq.mjs";
 import * as crypto$1 from "node:crypto";
@@ -4415,7 +4415,7 @@ function createChildrenBatchLoader(opts) {
 var RuntimeStateLoadError = class extends Error {
 	deviceId;
 	constructor(deviceId, reason, options) {
-		super(`runtime state of device ${deviceId} could not be loaded (${reason}) — the device is not built from an empty state (D677)`, options);
+		super(`runtime state of device ${deviceId} could not be loaded (${reason}) — the device is not built from an empty state`, options);
 		this.deviceId = deviceId;
 		this.name = "RuntimeStateLoadError";
 	}

package/dist/{composition-sources-CeO0K2cl.js → composition-sources-BaHPH661.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CFVOy8VT.js");
+const require_dist = require("./dist-DzAHit0a.js");
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{composition-sources-BBfqepyT.mjs → composition-sources-D8Hapyav.mjs}

@@ -1,4 +1,4 @@
-import { Wn as compositionSourceKey, Zn as errMsg } from "./dist-B7WRgEZY.mjs";
+import { $n as errMsg, Kn as compositionSourceKey } from "./dist-D3bhbMY3.mjs";
 //#region src/builtins/core-blocks/composition-sources.ts
 /**
 * Describe what a composition reads and writes for SAVE-time validation

package/dist/{dist-B7WRgEZY.mjs → dist-D3bhbMY3.mjs}

@@ -7867,57 +7867,15 @@ var ClipSearchStrictnessSchema = z.enum([
 	"balanced",
 	"strict"
 ]);
-new Set([
-	{
-		id: "person",
-		name: "Person"
-	},
-	{
-		id: "vehicle",
-		name: "Vehicle"
-	},
-	{
-		id: "animal",
-		name: "Animal"
-	},
-	{
-		id: "package",
-		name: "Package"
-	}
-].map((l) => l.id));
-var COCO_TO_MACRO = {
-	mapping: {
-		person: "person",
-		bicycle: "vehicle",
-		car: "vehicle",
-		motorcycle: "vehicle",
-		airplane: "vehicle",
-		bus: "vehicle",
-		train: "vehicle",
-		truck: "vehicle",
-		boat: "vehicle",
-		bird: "animal",
-		cat: "animal",
-		dog: "animal",
-		horse: "animal",
-		sheep: "animal",
-		cow: "animal",
-		elephant: "animal",
-		bear: "animal",
-		zebra: "animal",
-		giraffe: "animal",
-		suitcase: "package",
-		backpack: "package",
-		handbag: "package"
-	},
-	preserveOriginal: false
-};
-/** Steps a root detector may declare it fills. */
-var FILLABLE_STEP_IDS = [
+/** Steps whose effect a root label can BE. */
+var LABEL_SUPPLY_STEP_IDS = [
 	"animal-classifier",
 	"vehicle-classifier",
 	"package-detection"
 ];
+/** Steps whose box a root detection can BE. */
+var CROP_SUPPLY_STEP_IDS = ["plate-detection", "face-detection"];
+[...LABEL_SUPPLY_STEP_IDS, ...CROP_SUPPLY_STEP_IDS];
 var MODEL_FORMATS = [
 	"onnx",
 	"coreml",
@@ -8051,12 +8009,35 @@ var ModelLicenseRecordSchema = z.object({
 * `camstack/docs` → `/docs/detection/models`.
 */
 var ModelLicenseSchema = z.preprocess((value) => typeof value === "string" ? { weights: value } : value, ModelLicenseRecordSchema);
-/** One `fillsClassifierEffects` entry — see `ModelCatalogEntry.fillsClassifierEffects`. */
-var FillsClassifierEffectSchema = z.object({
-	stepId: z.enum(FILLABLE_STEP_IDS),
+/**
+* One step a ROOT detector can supply from its own output (D730) — see
+* `ModelCatalogEntry.suppliesSteps`.
+*
+* - `label`: the root's raw class IS the step's answer. `labelToEffect` maps
+*   the root's label to the step's vocabulary; `uncovered` is the vocabulary
+*   the root cannot produce (shown as unavailable, never a blocker).
+* - `crop`: the root draws the box the step would have found (`license_plate`
+*   for plate-detection, `face` for face-detection). The box becomes a detail
+*   child of the `parentMacro` detection that contains it — never a track.
+*/
+var RootStepSupplySchema = z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("label"),
+	stepId: z.enum(LABEL_SUPPLY_STEP_IDS),
 	labelToEffect: z.record(z.string(), z.string()),
 	uncovered: z.array(z.string()).readonly()
-});
+}), z.object({
+	kind: z.literal("crop"),
+	stepId: z.enum(CROP_SUPPLY_STEP_IDS),
+	rootLabels: z.array(z.string()).readonly(),
+	parentMacro: z.enum(["vehicle", "person"]),
+	childClass: z.enum(["plate", "face"]),
+	/**
+	* The root's smaller input side, stamped on read by `rootSuppliesOf` from
+	* the model entry — what a step's `minRootInputPx` gate judges. Never
+	* stored by an import.
+	*/
+	rootInputPx: z.number().int().positive().optional()
+})]);
 var ModelCatalogEntrySchema = z.object({
 	id: z.string(),
 	name: z.string(),
@@ -8183,15 +8164,15 @@ var ModelCatalogEntrySchema = z.object({
 	*/
 	classMap: DetectionCatalogClassMapSchema.optional(),
 	/**
-	* The pipeline steps this ROOT detector already does the work of (D715):
-	* its labels name the effect the step exists to produce (`deer` for
-	* `animal-classifier`, `package` for `package-detection`). Derived from the
-	* labelmap by `deriveClassifierFills`, never hand-written; a COCO model
-	* declares none. Whether a declaration is honoured is the step's own
-	* `labelLink` policy (`resolveLabelLink`). `labelToEffect` values are in
-	* `FILLABLE_STEP_VOCABULARIES` (guard `check-label-link-vocabulary`).
+	* The pipeline steps this ROOT detector can supply from its own output
+	* (D730): its labels name a step's effect (`deer` for `animal-classifier`)
+	* or draw a step's box (`license_plate` for `plate-detection`). Computed at
+	* import from THIS model's labelmap by `deriveRootSupplies`, never written
+	* by hand and never assumed per family; a row without it is derived on read
+	* (`rootSuppliesOf`). Whether a camera uses it is the step's own
+	* `useRootModel` flag (`resolveRootSupply`).
 	*/
-	fillsClassifierEffects: z.array(FillsClassifierEffectSchema).readonly().optional(),
+	suppliesSteps: z.array(RootStepSupplySchema).readonly().optional(),
 	/**
 	* The model's CLIP feature-space contract (text encoder, dimension, vector
 	* index, token window, search floor) — see `clip-model.ts`. Present ONLY on a
@@ -12298,7 +12279,7 @@ function unavailableFor(tf, role, mode, cap, at) {
 	};
 	return {
 		ok: false,
-		problem: problem("not-replaceable", at, `\`${cap}.${tf.path}\` reads a source but can say neither null nor 'unknown', and an ADDED capability has no native reading to fall back to (D393, D663)`)
+		problem: problem("not-replaceable", at, `\`${cap}.${tf.path}\` reads a source but can say neither null nor 'unknown', and an ADDED capability has no native reading to fall back to`)
 	};
 }
 /** Item fields the composer writes itself, with the value it writes. */
@@ -17197,6 +17178,131 @@ var filesystemBrowseCapability = {
 		})
 	}
 };
+var IPV4_LITERAL = /^\d{1,3}(?:\.\d{1,3}){3}$/;
+function hostnameOf(baseUrl) {
+	try {
+		const host = new URL(baseUrl).hostname;
+		return host.length > 0 ? host : null;
+	} catch {
+		return null;
+	}
+}
+function isMesh(endpoint) {
+	return endpoint.kind === "public" && endpoint.interfaceKind === "vpn";
+}
+function isTunnel(endpoint) {
+	return endpoint.kind === "public" && endpoint.interfaceKind === "public";
+}
+function isPlausibleLan(endpoint) {
+	return (endpoint.kind === "lan-ipv4" || endpoint.kind === "lan-ipv6") && endpoint.plausible;
+}
+function isLanIpv4Literal(endpoint) {
+	if (endpoint.kind !== "lan-ipv4" || !endpoint.plausible) return false;
+	const host = hostnameOf(endpoint.baseUrl);
+	return host !== null && IPV4_LITERAL.test(host);
+}
+/** Lower = better; `null` = never this audience's answer. */
+function rankFor(audience, endpoint) {
+	if (endpoint.kind === "loopback" || endpoint.kind === "app-link") return null;
+	if (hostnameOf(endpoint.baseUrl) === null) return null;
+	if (audience === "cluster") {
+		if (isLanIpv4Literal(endpoint)) return 0;
+		if (isPlausibleLan(endpoint)) return 1;
+		if (isMesh(endpoint)) return 2;
+		return null;
+	}
+	if (isTunnel(endpoint)) return 0;
+	if (isMesh(endpoint)) return 1;
+	if (isLanIpv4Literal(endpoint)) return 2;
+	if (isPlausibleLan(endpoint)) return 3;
+	return null;
+}
+var LOOPBACK_HOSTS = new Set([
+	"localhost",
+	"0.0.0.0",
+	"::1",
+	"[::1]",
+	"::",
+	"[::]"
+]);
+function isLoopbackHost(hostname) {
+	const h = hostname.toLowerCase();
+	if (LOOPBACK_HOSTS.has(h) || h.endsWith(".localhost")) return true;
+	return /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h);
+}
+/**
+* Validate an operator-typed override: an http(s) URL with a host, no
+* credentials, no path, and never loopback (it would name whoever dials it).
+* Answers the normalised origin (`scheme://host[:port]`).
+*/
+function validateHubAddressOverride(raw) {
+	const trimmed = raw.trim();
+	if (trimmed === "") return {
+		ok: false,
+		reason: "Enter an address, e.g. https://192.168.1.50:4443."
+	};
+	let parsed;
+	try {
+		parsed = new URL(trimmed);
+	} catch {
+		return {
+			ok: false,
+			reason: "Not a URL — include http:// or https://."
+		};
+	}
+	if (parsed.protocol !== "https:" && parsed.protocol !== "http:") return {
+		ok: false,
+		reason: "Use an http:// or https:// address."
+	};
+	if (parsed.username !== "" || parsed.password !== "") return {
+		ok: false,
+		reason: "The address must not carry a user name or password."
+	};
+	if (parsed.hostname === "") return {
+		ok: false,
+		reason: "The address has no host."
+	};
+	if (isLoopbackHost(parsed.hostname)) return {
+		ok: false,
+		reason: "A loopback address names whoever dials it, never this hub — use an address other machines reach."
+	};
+	if (parsed.pathname !== "/" || parsed.search !== "" || parsed.hash !== "") return {
+		ok: false,
+		reason: "Enter only the address (scheme, host and port), without a path."
+	};
+	return {
+		ok: true,
+		baseUrl: parsed.origin
+	};
+}
+/** {@link pickHubBaseUrl}, saying where the answer came from. */
+function resolveHubAddress(endpoints, audience, override) {
+	if (override !== null && override !== "") {
+		const check = validateHubAddressOverride(override);
+		if (check.ok) return {
+			override,
+			resolved: check.baseUrl,
+			source: "override"
+		};
+	}
+	const auto = pickFromPalette(endpoints, audience);
+	return {
+		override: override === null || override === "" ? null : override,
+		resolved: auto,
+		source: auto === null ? "none" : "auto"
+	};
+}
+function pickFromPalette(endpoints, audience) {
+	const best = endpoints.flatMap((endpoint) => {
+		const rank = rankFor(audience, endpoint);
+		return rank === null ? [] : [{
+			rank,
+			priority: endpoint.priority,
+			endpoint
+		}];
+	}).toSorted((a, b) => a.rank - b.rank || a.priority - b.priority)[0];
+	return best === void 0 ? null : best.endpoint.baseUrl.replace(/\/+$/, "");
+}
 /**
 * Transport bounds for AI capability methods.
 *
@@ -19280,6 +19386,51 @@ var notificationOutputCapability = {
 		})
 	}
 };
+new Set([
+	{
+		id: "person",
+		name: "Person"
+	},
+	{
+		id: "vehicle",
+		name: "Vehicle"
+	},
+	{
+		id: "animal",
+		name: "Animal"
+	},
+	{
+		id: "package",
+		name: "Package"
+	}
+].map((l) => l.id));
+var COCO_TO_MACRO = {
+	mapping: {
+		person: "person",
+		bicycle: "vehicle",
+		car: "vehicle",
+		motorcycle: "vehicle",
+		airplane: "vehicle",
+		bus: "vehicle",
+		train: "vehicle",
+		truck: "vehicle",
+		boat: "vehicle",
+		bird: "animal",
+		cat: "animal",
+		dog: "animal",
+		horse: "animal",
+		sheep: "animal",
+		cow: "animal",
+		elephant: "animal",
+		bear: "animal",
+		zebra: "animal",
+		giraffe: "animal",
+		suitcase: "package",
+		backpack: "package",
+		handbag: "package"
+	},
+	preserveOriginal: false
+};
 var AUDIO_MACRO_LABELS = [
 	{
 		id: "speech",
@@ -25513,6 +25664,34 @@ var pipelineAnalyticsCapability = {
 	}
 };
 /**
+* A root model's boxes standing in for one crop-kind step's own inference
+* (D730) — see `runPipeline.suppliedRoot`.
+*/
+var SuppliedRootOutputSchema = z.object({
+	stepId: z.string(),
+	/** The root model that drew the boxes — stamped on the result. */
+	modelId: z.string(),
+	detections: z.array(z.object({
+		/** `[x1, y1, x2, y2]` in the pixels of the call's image. */
+		bbox: z.tuple([
+			z.number(),
+			z.number(),
+			z.number(),
+			z.number()
+		]),
+		score: z.number(),
+		/**
+		* Five facial landmarks in the same pixels — a face the step's own
+		* detector already re-found inside a root face box (D730), so its
+		* embedder child aligns it exactly as it aligns any detected face.
+		*/
+		landmarks: z.array(z.object({
+			x: z.number(),
+			y: z.number()
+		})).optional()
+	})).min(1)
+});
+/**
 * Reference to the frame's retained NATIVE surface + the parent crop's placement
 * within the frame, so the executor can re-cut a leaf child ROI at native
 * resolution on the detail plane. See the `runPipeline` `nativeCropRef` field.
@@ -25644,7 +25823,7 @@ var PipelineModelOptionSchema = z.object({
 	legacy: z.boolean().optional(),
 	provider: ModelProviderIdSchema.optional(),
 	defaultConfidence: z.number().optional(),
-	fillsClassifierEffects: z.array(FillsClassifierEffectSchema).readonly().optional()
+	suppliesSteps: z.array(RootStepSupplySchema).readonly().optional()
 });
 var ConfigFieldBridge = z.custom();
 var PipelineAddonSchemaSchema = z.object({
@@ -26048,7 +26227,16 @@ var pipelineExecutorCapability = {
 			* `device-not-servable`), and nothing reaches the camera's live
 			* trace stream. Absent ⇒ unchanged behaviour.
 			*/
-			replay: z.literal(true).optional()
+			replay: z.literal(true).optional(),
+			/**
+			* Root-supplied detections for the tree's ROOT step (D730). Set by
+			* `runDetailSubtree` when the camera's root model supplies a crop-kind
+			* step (a Frigate+ `license_plate` for `plate-detection`): the step is
+			* NOT inferred, these boxes are its output, and its children (the plate
+			* reader) run on them through their own crop policy. Boxes are in the
+			* PIXELS of the image this call carries. Absent ⇒ the root step runs.
+			*/
+			suppliedRoot: SuppliedRootOutputSchema.optional()
 		}), PipelineRunResultBridge, { kind: "mutation" }),
 		/**
 		* Batched run — N raw frames packed into one cap call. The provider
@@ -27361,7 +27549,22 @@ var pipelineRunnerCapability = {
 			*/
 			cropJpeg: z.string().optional(),
 			parent: DetailParentSchema,
-			steps: z.array(z.string()).optional()
+			steps: z.array(z.string()).optional(),
+			/**
+			* The camera's root model already drew this step's boxes (D730): a
+			* `license_plate` inside the parent vehicle. The named step is NOT
+			* inferred — these FRAME-space boxes are its output — and its
+			* requested children (the plate reader) run on them. Absent ⇒ every
+			* requested step infers as before.
+			*/
+			supplied: z.object({
+				stepId: z.string(),
+				modelId: z.string(),
+				boxes: z.array(z.object({
+					bbox: NativeCropBboxSchema,
+					score: z.number()
+				})).min(1)
+			}).optional()
 		}), z.object({ details: z.array(DetailResultSchema) }).nullable(), { kind: "mutation" }),
 		/**
 		* Run ONE enrichment step against caller-supplied pixels, with NO camera
@@ -36416,6 +36619,27 @@ var ViewerEndpointsSchema = z.object({
 	/** What the ranking currently resolves to (may be empty if nothing is up). */
 	resolved: z.array(z.string()).readonly()
 });
+/**
+* One audience's hub address (see `hub-address.ts`): the operator's stored
+* override, the address in use, and where it came from.
+*/
+var HubAddressSnapshotSchema = z.object({
+	/** The operator's override, or null for automatic. */
+	override: z.string().nullable(),
+	/** The address in use, or null when nothing qualifies (never loopback). */
+	resolved: z.string().nullable(),
+	source: z.enum([
+		"override",
+		"auto",
+		"none"
+	])
+});
+var HubAddressesSchema = z.object({
+	/** "Hub address for agents" — agents' bundle/model pulls, LAN devices. */
+	cluster: HubAddressSnapshotSchema,
+	/** "Public address for sign-in links" — e-mail links, OIDC, WebAuthn, OAuth2. */
+	browser: HubAddressSnapshotSchema
+});
 var AllowedAddressesSchema = z.object({ 
 /**
 * Allowlist of interface addresses operators have explicitly opted
@@ -36548,6 +36772,26 @@ var localNetworkCapability = {
 		*/
 		setViewerEndpoints: method(z.object({ baseUrls: z.array(z.string()).readonly() }), ViewerEndpointsSchema, { kind: "mutation" }),
 		/**
+		* The hub's address for each audience — agents (`cluster`) and sign-in
+		* links (`browser`) — as every consumer must read it: the operator's
+		* override when set, else the automatic pick from this cap's palette,
+		* never loopback. The ONE answer to "at which address is this hub
+		* reached?"; there is no environment variable for it.
+		*/
+		getHubAddresses: method(z.void(), HubAddressesSchema),
+		/**
+		* Set or clear (`baseUrl: null`) one audience's override. Validated: an
+		* http(s) origin with a host, no credentials, no path, never loopback —
+		* an invalid value is refused with the reason, nothing is stored.
+		*/
+		setHubAddress: method(z.object({
+			audience: z.enum(["cluster", "browser"]),
+			baseUrl: z.string().nullable()
+		}), HubAddressesSchema, {
+			kind: "mutation",
+			auth: "admin"
+		}),
+		/**
 		* Read the operator's allowlist. Empty = "auto" (no filter). Used
 		* by the admin UI's address selector to seed its checkbox state.
 		*/
@@ -49660,6 +49904,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "view"
 	},
+	"localNetwork.getHubAddresses": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"localNetwork.getNotificationEndpoint": {
 		capName: "local-network",
 		capScope: "system",
@@ -49714,6 +49964,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"localNetwork.setHubAddress": {
+		capName: "local-network",
+		capScope: "system",
+		addonId: null,
+		access: "create"
+	},
 	"localNetwork.setNotificationEndpoint": {
 		capName: "local-network",
 		capScope: "system",
@@ -58972,7 +59228,7 @@ var STATE_SUMMARY_VARS = [
 	{
 		name: "summarySection",
 		label: "Summary: this section",
-		description: "The section a per-section summary row is about (D698); on a summary sent as one message, every section it reports, comma-separated.",
+		description: "The section a per-section summary row is about; on a summary sent as one message, every section it reports, comma-separated.",
 		example: "Batterie scariche",
 		group: "system",
 		families: ["rule"],
@@ -59742,4 +59998,4 @@ function enumerateInferenceDevices(hw) {
 	return out;
 }
 //#endregion
-export { calendarsCapability as $, DATAPLANE_SECRET_HEADER as $n, motionCapability as $t, MOTION_CLOSE_AFTER_MS as A, userManagementCapability as An, filesystemBrowseCapability as At, StorageLocationTypeSchema as B, composedDeviceStableId as Bn, legacyAutoLinkIds as Bt, FieldClaimModeSchema as C, snapshotCapability as Cn, EventCategory as Cr, enumerateItemArrayFields as Ct, LocationIconIdSchema as D, storageProviderCapability as Dn, expandContainer as Dt, LegacyStorageLocationDefaultSchema as E, storageOccupancyCapability as En, evictionPolicyOfLocation as Et, STORAGE_ACCESS_FALLBACK as F, withLocationMode as Fn, isCollectionArrayMethod as Ft, addonWidgetsCapability as G, createStatefulExpressionMemory as Gn, logDestinationCapability as Gt, UserRecordSchema as H, compositionItemFieldPath as Hn, lifecycleJobSchema as Ht, STREAM_PROFILE_META as I, COMPOSER_ADDON_ID as In, isLocationEnabled as It, backupCapability as J, DeviceFeature as Jn, mayReadLocation as Jt, alertsCapability as K, disarmRoseMemory as Kn, logLevelAtMost as Kt, ScopedTokenSchema as L, buildFfmpegArgs as Ln, isObjectInput as Lt, REDACTED_SECRET as M, vectorDimFromBase64 as Mn, formatMinutes as Mt, RUNTIME_DEFAULTS as N, vectorIndexDimConflictError as Nn, gbToBytes as Nt, METHOD_ACCESS_MAP as O, streamCatalogCapability as On, expressionContainsBuiltinCall as Ot, RecordingStatusSchema as P, vectorStoreCapability as Pn, isArrayOutputSchema as Pt, buildStreamParamsConfigSchema as Q, BaseAddon as Qn, modeMayWrite as Qt, StorageCleanupJobSchema as R, cloneStatefulExpressionMemory as Rn, isVoidInput as Rt, FIRST_LEVEL_MACRO_CLASSES as S, siteZoneKey as Sn, toNodeId as Sr, enumerateInferenceDevices as St, LOG_LEVEL_RANK as T, storageMigrationCapability as Tn, evaluateCompositionField as Tt, addonPagesCapability as U, compositionSliceKey as Un, localNetworkCapability as Ut, StorageMigrationJobSchema as V, compositionFeatureEnabled as Vn, legacyModeOf as Vt, addonSettingsCapability as W, compositionSourceKey as Wn, locationIconKey as Wt, batteryCapability as X, DeviceType as Xn, memoizePinnedFfmpeg as Xt, bareAddonId as Y, DeviceRole as Yn, mayWriteToLocation as Yt, buildCapabilityLookup as Z, errMsg as Zn, metricsProviderCapability as Zt, DATABASE_SNAPSHOT_TIMEOUT_MS as _, runtimeStatePolicyFor as _n, parseJsonUnknown as _r, describeComposableCaps as _t, BatteryStatusSchema as a, pickAppLinkHub as an, asJsonObject as ar, coreBlockAddonId as at, DeclaredDevices as b, scoreRuntimes as bn, scopeKey as br, deviceStateCapability as bt, CAP_NAMES_WITH_STATUS as c, procedureAuthKey as cn, createEvent as cr, coreBlockSourceKind as ct, CORE_BLOCKS_ADDON_ID as d, replacedFieldKeys as dn, expandCapMethods as dr, dataStoreProviderCapability as dt, normalizeCoreBlockWrite as en, DEVICE_SETTINGS_CONTRIBUTION_METHODS as er, cameraGridLayoutCapability as et, CORE_BLOCK_ADDON_PREFIX as f, resolveBucketMs as fn, hydrateSchema as fr, databaseSnapshotCapability as ft, DATABASE_SNAPSHOT_SUFFIX as g, resolveMethodAuth as gn, parseJsonObject as gr, deriveBatteryPresence as gt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as h, resolveLocationMode as hn, nodePin as hr, defineExtensionSlotProvider as ht, BaseDevice as i, parseStreamParamsFormPatch as in, WELL_KNOWN_TAB_MAP as ir, compositionSourceRefs as it, RECORDING_SOURCE_CAMSTACK_ADDON as j, validateComposition as jn, foldSnapshotByFunction as jt, MINUTES_PER_DAY as k, streamQualityLabel as kn, extractNestedAddonId as kt, COMPOSED_ITEM_FIXED_FIELDS as l, ptzAutotrackCapability as ln, emitDownForOwnedCaps as lr, coreBlocksCapability as lt, CoreBlockSchema as m, resolveCoreBlockFiles as mn, isEvent as mr, decodeVectorBase64 as mt, AlertSchema as n, objectInputDeclaresAddonId as nn, ReadinessRegistry as nr, composerCapability as nt, CAMERA_SWITCH_ORDER as o, planComposition as on, asNumber as or, coreBlockComposition as ot, CalendarPreferencesSchema as p, resolveCoreBlockEntry as pn, isDeviceConfigCap as pr, declarationOwnerNodeId as pt, authProviderCapability as q, toExpressionValue as qn, looseSchema as qt, ApiKeyRecordSchema as r, objectInputDeclaresRequiredDeviceId as rn, ReadinessTimeoutError as rr, compositionFieldKey as rt, CAMSTACK_APP_LINK_ORIGIN as s, platformProbeCapability as sn, asString$1 as sr, coreBlockIdFromAddonId as st, ALL_CAPABILITY_DEFINITIONS as t, normalizeUnit as tn, DEVICE_STATUS_METHOD as tr, collectSecretConfigKeys as tt, COMPOSER_RUNNER_ID as u, reducePoints as un, emitReadiness as ur, createDeviceExtensionProvider as ut, DAY_NAMES as v, scopesAllowAddon as vn, readinessKey as vr, deviceExtensionCapability as vt, FieldClaimSchema as w, storageCapability as wn, enumerateSchemaFields as wt, DeviceStatusSchema as x, settingsStoreCapability as xn, sleep as xr, deviceStatusCapability as xt, DERIVED_CAMERA_SILENCED_CAP_NAMES as y, scopesAllowDeviceCap as yn, resolveCapMount as yr, deviceManagerCapability as yt, StorageLocationModeSchema as z, composedDeviceRef as zn, kebabToCamel as zt };
+export { calendarsCapability as $, errMsg as $n, motionCapability as $t, MOTION_CLOSE_AFTER_MS as A, streamQualityLabel as An, filesystemBrowseCapability as At, StorageLocationTypeSchema as B, cloneStatefulExpressionMemory as Bn, legacyAutoLinkIds as Bt, FieldClaimModeSchema as C, siteZoneKey as Cn, sleep as Cr, enumerateItemArrayFields as Ct, LocationIconIdSchema as D, storageOccupancyCapability as Dn, expandContainer as Dt, LegacyStorageLocationDefaultSchema as E, storageMigrationCapability as En, evictionPolicyOfLocation as Et, STORAGE_ACCESS_FALLBACK as F, vectorIndexDimConflictError as Fn, isCollectionArrayMethod as Ft, addonWidgetsCapability as G, compositionSliceKey as Gn, logDestinationCapability as Gt, UserRecordSchema as H, composedDeviceStableId as Hn, lifecycleJobSchema as Ht, STREAM_PROFILE_META as I, vectorStoreCapability as In, isLocationEnabled as It, backupCapability as J, disarmRoseMemory as Jn, mayReadLocation as Jt, alertsCapability as K, compositionSourceKey as Kn, logLevelAtMost as Kt, ScopedTokenSchema as L, withLocationMode as Ln, isObjectInput as Lt, REDACTED_SECRET as M, validateComposition as Mn, formatMinutes as Mt, RUNTIME_DEFAULTS as N, validateHubAddressOverride as Nn, gbToBytes as Nt, METHOD_ACCESS_MAP as O, storageProviderCapability as On, expressionContainsBuiltinCall as Ot, RecordingStatusSchema as P, vectorDimFromBase64 as Pn, isArrayOutputSchema as Pt, buildStreamParamsConfigSchema as Q, DeviceType as Qn, modeMayWrite as Qt, StorageCleanupJobSchema as R, COMPOSER_ADDON_ID as Rn, isVoidInput as Rt, FIRST_LEVEL_MACRO_CLASSES as S, settingsStoreCapability as Sn, scopeKey as Sr, enumerateInferenceDevices as St, LOG_LEVEL_RANK as T, storageCapability as Tn, EventCategory as Tr, evaluateCompositionField as Tt, addonPagesCapability as U, compositionFeatureEnabled as Un, localNetworkCapability as Ut, StorageMigrationJobSchema as V, composedDeviceRef as Vn, legacyModeOf as Vt, addonSettingsCapability as W, compositionItemFieldPath as Wn, locationIconKey as Wt, batteryCapability as X, DeviceFeature as Xn, memoizePinnedFfmpeg as Xt, bareAddonId as Y, toExpressionValue as Yn, mayWriteToLocation as Yt, buildCapabilityLookup as Z, DeviceRole as Zn, metricsProviderCapability as Zt, DATABASE_SNAPSHOT_TIMEOUT_MS as _, resolveMethodAuth as _n, nodePin as _r, describeComposableCaps as _t, BatteryStatusSchema as a, pickAppLinkHub as an, ReadinessTimeoutError as ar, coreBlockAddonId as at, DeclaredDevices as b, scopesAllowDeviceCap as bn, readinessKey as br, deviceStateCapability as bt, CAP_NAMES_WITH_STATUS as c, procedureAuthKey as cn, asNumber as cr, coreBlockSourceKind as ct, CORE_BLOCKS_ADDON_ID as d, replacedFieldKeys as dn, emitDownForOwnedCaps as dr, dataStoreProviderCapability as dt, normalizeCoreBlockWrite as en, BaseAddon as er, cameraGridLayoutCapability as et, CORE_BLOCK_ADDON_PREFIX as f, resolveBucketMs as fn, emitReadiness as fr, databaseSnapshotCapability as ft, DATABASE_SNAPSHOT_SUFFIX as g, resolveLocationMode as gn, isEvent as gr, deriveBatteryPresence as gt, DATABASE_SNAPSHOT_PARTIAL_SUFFIX as h, resolveHubAddress as hn, isDeviceConfigCap as hr, defineExtensionSlotProvider as ht, BaseDevice as i, parseStreamParamsFormPatch as in, ReadinessRegistry as ir, compositionSourceRefs as it, RECORDING_SOURCE_CAMSTACK_ADDON as j, userManagementCapability as jn, foldSnapshotByFunction as jt, MINUTES_PER_DAY as k, streamCatalogCapability as kn, extractNestedAddonId as kt, COMPOSED_ITEM_FIXED_FIELDS as l, ptzAutotrackCapability as ln, asString$1 as lr, coreBlocksCapability as lt, CoreBlockSchema as m, resolveCoreBlockFiles as mn, hydrateSchema as mr, decodeVectorBase64 as mt, AlertSchema as n, objectInputDeclaresAddonId as nn, DEVICE_SETTINGS_CONTRIBUTION_METHODS as nr, composerCapability as nt, CAMERA_SWITCH_ORDER as o, planComposition as on, WELL_KNOWN_TAB_MAP as or, coreBlockComposition as ot, CalendarPreferencesSchema as p, resolveCoreBlockEntry as pn, expandCapMethods as pr, declarationOwnerNodeId as pt, authProviderCapability as q, createStatefulExpressionMemory as qn, looseSchema as qt, ApiKeyRecordSchema as r, objectInputDeclaresRequiredDeviceId as rn, DEVICE_STATUS_METHOD as rr, compositionFieldKey as rt, CAMSTACK_APP_LINK_ORIGIN as s, platformProbeCapability as sn, asJsonObject as sr, coreBlockIdFromAddonId as st, ALL_CAPABILITY_DEFINITIONS as t, normalizeUnit as tn, DATAPLANE_SECRET_HEADER as tr, collectSecretConfigKeys as tt, COMPOSER_RUNNER_ID as u, reducePoints as un, createEvent as ur, createDeviceExtensionProvider as ut, DAY_NAMES as v, runtimeStatePolicyFor as vn, parseJsonObject as vr, deviceExtensionCapability as vt, FieldClaimSchema as w, snapshotCapability as wn, toNodeId as wr, enumerateSchemaFields as wt, DeviceStatusSchema as x, scoreRuntimes as xn, resolveCapMount as xr, deviceStatusCapability as xt, DERIVED_CAMERA_SILENCED_CAP_NAMES as y, scopesAllowAddon as yn, parseJsonUnknown as yr, deviceManagerCapability as yt, StorageLocationModeSchema as z, buildFfmpegArgs as zn, kebabToCamel as zt };