camstack 1.1.22 → 1.1.24

package/dist/{chunk-CFJI2NBD.js → chunk-R6QWXRMA.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-CZDdRBua.mjs
+// ../types/dist/sleep-BC9Yqte7.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -15132,16 +15132,34 @@ function method(input, output, options) {
     timeoutMs: options?.timeoutMs
   };
 }
+function systemMethod(input, output, options) {
+  return {
+    ...method(input, output, options),
+    systemOnly: true
+  };
+}
 function event(data) {
   return { data };
 }
-var StaticDirOutputSchema = external_exports.object({ staticDir: external_exports.string() });
-var VersionOutputSchema = external_exports.object({ version: external_exports.string() });
+var StaticDirOutputSchema$1 = external_exports.object({ staticDir: external_exports.string() });
+var VersionOutputSchema$1 = external_exports.object({ version: external_exports.string() });
 var adminUiCapability = {
   name: "admin-ui",
   scope: "system",
   mode: "singleton",
   internal: true,
+  methods: {
+    getStaticDir: method(external_exports.void(), StaticDirOutputSchema$1),
+    getVersion: method(external_exports.void(), VersionOutputSchema$1)
+  }
+};
+var StaticDirOutputSchema = external_exports.object({ staticDir: external_exports.string() });
+var VersionOutputSchema = external_exports.object({ version: external_exports.string() });
+var viewerUiCapability = {
+  name: "viewer-ui",
+  scope: "system",
+  mode: "singleton",
+  internal: true,
   methods: {
     getStaticDir: method(external_exports.void(), StaticDirOutputSchema),
     getVersion: method(external_exports.void(), VersionOutputSchema)
@@ -15322,6 +15340,28 @@ var ModelFormatsSchema = external_exports.object({
   tflite: ModelFormatEntrySchema.optional(),
   pt: ModelFormatEntrySchema.optional()
 });
+var ModelVariantGroupSchema = external_exports.object({
+  /** Top-level family, e.g. `yolo26` (later `d-fine`, `rf-detr`). */
+  family: external_exports.string(),
+  /** Size within the family, e.g. `n` | `s` | `m` | `l`. */
+  tier: external_exports.string(),
+  /** Quantization axis. Omit ⇒ the fp32 base build. */
+  precision: external_exports.enum(["fp32", "int8"]).optional(),
+  /**
+  * Speed-optimization axis. Omit ⇒ the standard build. `fast` marks a
+  * latency-optimized export (e.g. ReLU-activation variant) — the slot the
+  * future performance variants plug into.
+  */
+  optimization: external_exports.enum(["standard", "fast"]).optional(),
+  /**
+  * Input-resolution axis (square input side, px). Omit ⇒ the family's native
+  * resolution (640 for yolo26). Reduced-input builds (320 / 256) are a big,
+  * cheap latency lever — especially on Apple ANE and the Intel N100 — at a
+  * small-object accuracy cost. Mirrors the model's `inputSize` but lifted onto
+  * the group so the selector can offer it as a variant axis.
+  */
+  resolution: external_exports.number().int().positive().optional()
+});
 var ModelCatalogEntrySchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
@@ -15351,7 +15391,43 @@ var ModelCatalogEntrySchema = external_exports.object({
   * Auxiliary files required at runtime (labels JSON, charset dict, etc.).
   * Downloaded into the same modelsDir alongside the model file.
   */
-  extraFiles: external_exports.array(ModelExtraFileSchema).readonly().optional()
+  extraFiles: external_exports.array(ModelExtraFileSchema).readonly().optional(),
+  /**
+  * LEGACY entry — retained in the catalog so a persisted operator selection
+  * still RESOLVES (and can be re-activated), but hidden from the selectable
+  * model list and excluded from the auto format-default pick. Set on the
+  * superseded / consolidated models (older lineages, redundant fp16 IRs) so
+  * the active lineup stays the coherent curated ladder without deleting a
+  * model anyone may still be pinned to. `resolveModelForFormat` keeps honoring
+  * an explicit legacy id that has a build for the node's format.
+  */
+  legacy: external_exports.boolean().optional(),
+  /**
+  * Measured quality/latency metadata — populated from the benchmark addon on
+  * the real node classes. Absent = not yet measured (most entries today; the
+  * catalog historically carried only `sizeMB`, a poor cross-architecture
+  * speed proxy). `p95LatencyMs` is keyed by node class (e.g. `n100`, `mac`).
+  */
+  metrics: external_exports.object({
+    map50: external_exports.number().optional(),
+    p95LatencyMs: external_exports.record(external_exports.string(), external_exports.number()).optional()
+  }).optional(),
+  /**
+  * SPDX-ish license id of the model weights (e.g. `AGPL-3.0` for Ultralytics
+  * YOLO26, `GPL-3.0` for YOLOv9, `Apache-2.0` for D-FINE/RF-DETR). Matters for
+  * the retraining addon and any future commercial distribution.
+  */
+  license: external_exports.string().optional(),
+  /**
+  * Variant-selector grouping. The UI groups models by `family` + `tier` and
+  * offers `precision` / `optimization` as variant axes WITHIN a tier — so all
+  * of a family's sizes and quantizations collapse into one grouped picker
+  * instead of a flat list of `yolo26s`, `yolo26s-int8`, … Absent ⇒ ungrouped
+  * (legacy / custom models) — never shown in the grouped selector. The flat
+  * `id` stays the source of truth for resolution/download/persistence; grouping
+  * is a presentation overlay resolved back to an `id`.
+  */
+  group: ModelVariantGroupSchema.optional()
 });
 var ConvertTargetSchema = external_exports.discriminatedUnion("format", [external_exports.object({
   format: external_exports.literal("openvino"),
@@ -17009,33 +17085,6 @@ var StreamFormatSchema = external_exports.enum([
   "mjpeg",
   "rtsp"
 ]);
-var StreamInfoSchema = external_exports.object({
-  streamId: external_exports.string(),
-  format: StreamFormatSchema,
-  url: external_exports.string().nullable(),
-  active: external_exports.boolean()
-});
-var streamingEngineCapability = {
-  name: "streaming-engine",
-  scope: "system",
-  mode: "singleton",
-  internal: true,
-  methods: {
-    registerStream: method(external_exports.object({
-      streamId: external_exports.string(),
-      sourceUrl: external_exports.string(),
-      codec: external_exports.string().optional()
-    }), external_exports.void(), { kind: "mutation" }),
-    unregisterStream: method(external_exports.object({ streamId: external_exports.string() }), external_exports.void(), { kind: "mutation" }),
-    getStreamUrl: method(external_exports.object({
-      streamId: external_exports.string(),
-      format: StreamFormatSchema
-    }), external_exports.string().nullable()),
-    listStreams: method(external_exports.void(), external_exports.array(StreamInfoSchema))
-  },
-  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "skip" }
-};
 var RtspRestreamEntrySchema = external_exports.object({
   brokerId: external_exports.string(),
   url: external_exports.string(),
@@ -17912,37 +17961,7 @@ var consumablesCapability = {
   scope: "device",
   deviceNative: true,
   mode: "singleton",
-  deviceTypes: [
-    DeviceType.Camera,
-    DeviceType.Hub,
-    DeviceType.Light,
-    DeviceType.Siren,
-    DeviceType.Switch,
-    DeviceType.Sensor,
-    DeviceType.Thermostat,
-    DeviceType.Button,
-    DeviceType.EventEmitter,
-    DeviceType.Update,
-    DeviceType.Generic,
-    DeviceType.Notifier,
-    DeviceType.Script,
-    DeviceType.Automation,
-    DeviceType.Lock,
-    DeviceType.Cover,
-    DeviceType.Valve,
-    DeviceType.Humidifier,
-    DeviceType.WaterHeater,
-    DeviceType.Fan,
-    DeviceType.MediaPlayer,
-    DeviceType.AlarmPanel,
-    DeviceType.Control,
-    DeviceType.Presence,
-    DeviceType.Weather,
-    DeviceType.Vacuum,
-    DeviceType.LawnMower,
-    DeviceType.Container,
-    DeviceType.Image
-  ],
+  deviceTypes: Object.values(DeviceType),
   deviceConfig: { ui: {
     kind: "widget",
     widgetId: "host/consumables-panel",
@@ -19179,7 +19198,6 @@ var PipelineDefaultStepSchema = external_exports.lazy(() => external_exports.obj
   enabled: external_exports.boolean(),
   modelId: external_exports.string(),
   children: external_exports.array(PipelineDefaultStepSchema).readonly(),
-  engine: PipelineEngineChoiceSchema.optional(),
   group: external_exports.string().optional(),
   settings: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 }));
@@ -19204,7 +19222,9 @@ var PipelineModelOptionSchema = external_exports.object({
   formats: external_exports.record(external_exports.string(), external_exports.object({
     downloaded: external_exports.boolean(),
     sizeMB: external_exports.number()
-  }))
+  })),
+  group: ModelVariantGroupSchema.optional(),
+  legacy: external_exports.boolean().optional()
 });
 var ConfigFieldBridge = external_exports.custom();
 var PipelineAddonSchemaSchema = external_exports.object({
@@ -19218,6 +19238,7 @@ var PipelineAddonSchemaSchema = external_exports.object({
   defaultModelId: external_exports.string(),
   defaultModelIdByFormat: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   enabledByDefault: external_exports.boolean().optional(),
+  backfillIntoExistingOverrides: external_exports.boolean().optional(),
   defaultConfidence: external_exports.number(),
   group: external_exports.string().optional(),
   configSchema: external_exports.array(ConfigFieldBridge).readonly().optional()
@@ -19234,11 +19255,6 @@ var PipelineSchemaSchema = external_exports.object({
   selectedEngine: PipelineEngineChoiceSchema,
   slots: external_exports.array(PipelineSlotSchemaSchema).readonly()
 });
-var DetectorOutputSchema = external_exports.object({
-  detections: external_exports.array(SpatialDetectionSchema).readonly(),
-  inferenceMs: external_exports.number(),
-  modelId: external_exports.string()
-});
 var EngineProvisioningSchema = external_exports.object({
   runtimeId: external_exports.enum([
     "onnx",
@@ -19255,15 +19271,42 @@ var EngineProvisioningSchema = external_exports.object({
   ]),
   progress: external_exports.number().optional(),
   error: external_exports.string().optional(),
-  nextRetryAt: external_exports.number().optional()
+  nextRetryAt: external_exports.number().optional(),
+  /**
+  * Gate A (config-correctness gate at engine change): human-readable
+  * config issues surfaced EAGERLY when the node's engine changes — model
+  * substitutions ("chose X, running Y") and zero-build steps ("no model
+  * has a <format> build"). Additive/optional: informational only, never
+  * enforced here — `assertEngineReady` (readiness) still gates inference.
+  * Absent/empty when the node-default tree resolves cleanly.
+  */
+  configIssues: external_exports.array(external_exports.string()).optional()
 });
 var PipelineStepInputSchema = external_exports.lazy(() => external_exports.object({
   addonId: external_exports.string(),
-  modelId: external_exports.string(),
+  modelId: external_exports.string().optional(),
   enabled: external_exports.boolean().default(true),
   children: external_exports.array(PipelineStepInputSchema).optional(),
   settings: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 }));
+var ModelSubstitutionSchema = external_exports.object({
+  addonId: external_exports.string(),
+  chosen: external_exports.string(),
+  running: external_exports.string(),
+  format: external_exports.string()
+});
+var PipelineValidationIssueSchema = external_exports.object({
+  addonId: external_exports.string(),
+  kind: external_exports.enum(["unknown-addon", "no-format-build"]),
+  detail: external_exports.string()
+});
+var PipelineValidationResultSchema = external_exports.object({
+  ok: external_exports.boolean(),
+  issues: external_exports.array(PipelineValidationIssueSchema).readonly(),
+  substitutions: external_exports.array(ModelSubstitutionSchema).readonly(),
+  /** The node's `currentEngine.format` this validation ran against. */
+  format: external_exports.string()
+});
 var ReferenceImageEntrySchema = external_exports.object({
   filename: external_exports.string(),
   stepIds: external_exports.array(external_exports.string()).readonly().optional()
@@ -19354,10 +19397,45 @@ var pipelineExecutorCapability = {
       kind: "mutation",
       auth: "admin"
     }),
+    /**
+    * Clear THIS node's executor-side PER-DEVICE settings stores (the
+    * per-camera step overrides the object-detection root reads via
+    * `applyDeviceOverridesToTree`). `nodeId` is the ROUTING key — the
+    * generated cap-router strips it (default `nodeIdMode: 'routing'`) and
+    * dispatches to that node, so the provider method runs ON the target
+    * node and receives no `nodeId`.
+    *
+    * This is the slimmed executor leg of the orchestrator's
+    * `resetNodePipelineDefaults` flow (which owns the real reset: node
+    * addonDefaults pins + per-camera orchestrator overrides). The legacy
+    * `resetToDefault` — which reset a persisted global step-tree seed
+    * nothing in the live per-camera path read — was removed together with
+    * that seed.
+    */
+    clearDeviceOverrides: method(external_exports.object({ nodeId: external_exports.string() }), external_exports.object({
+      success: external_exports.literal(true),
+      clearedDevices: external_exports.number()
+    }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
     getSchema: method(external_exports.void(), PipelineSchemaSchema),
     getGlobalSteps: method(external_exports.void(), external_exports.array(PipelineDefaultStepSchema).readonly().nullable()),
     getGlobalPipelineConfig: method(external_exports.void(), PipelineConfigBridge),
     getOrchestratorConfigSchema: method(external_exports.void(), ConfigUISchemaBridge),
+    /**
+    * Gate B (pre-init config-correctness gate). PURE COMPUTE against this
+    * node's `currentEngine.format` — resolves `steps` the same way the
+    * runtime dispatch path would, and reports what WOULD happen without
+    * touching any node-global state. Called by the orchestrator at attach
+    * time (`attachOn`), node-pinned to the TARGET node, so config problems
+    * surface BEFORE `pipelineRunner.attachCamera` rather than at the first
+    * per-frame resolve. `ok` is false iff `issues` is non-empty (both
+    * `unknown-addon` and `no-format-build` are HARD issues); `substitutions`
+    * is informational (a degraded-but-loadable model swap) and never
+    * affects `ok`. Never throws.
+    */
+    validatePipeline: method(external_exports.object({ steps: external_exports.array(PipelineStepInputSchema) }), PipelineValidationResultSchema),
     listTemplates: method(external_exports.void(), external_exports.array(PipelineTemplateSchema$1).readonly()),
     saveTemplate: method(external_exports.object({
       name: external_exports.string(),
@@ -19382,11 +19460,6 @@ var pipelineExecutorCapability = {
       modelId: external_exports.string(),
       format: ModelFormatSchema$1
     }), external_exports.object({ success: external_exports.literal(true) }), { kind: "mutation" }),
-    detect: method(external_exports.object({
-      addonId: external_exports.string(),
-      frame: FrameInputSchema,
-      config: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
-    }), DetectorOutputSchema),
     /**
     * Stateless single-frame execution. Callers (runner, benchmark) pass
     * the complete `engine` + `steps` tree; the executor holds no state
@@ -19605,6 +19678,18 @@ var zonesCapability = {
   */
   runtimeState: external_exports.object({ zones: external_exports.array(ZoneSchema).readonly() })
 };
+var NativeCropBboxSchema = external_exports.object({
+  x: external_exports.number(),
+  y: external_exports.number(),
+  w: external_exports.number(),
+  h: external_exports.number()
+});
+var NativeCropResultSchema = external_exports.object({
+  /** Packed rgb (24-bit) pixels of the crop. */
+  bytes: external_exports.instanceof(Uint8Array),
+  width: external_exports.number().int().positive(),
+  height: external_exports.number().int().positive()
+});
 var motionCooldownMsField = {
   min: 0,
   max: 6e4,
@@ -19647,6 +19732,13 @@ var RunnerFrameSourceSchema = external_exports.discriminatedUnion("kind", [exter
   kind: external_exports.literal("remote-restream"),
   /** The camera's source-owner node (slice 1: always the hub). */
   ownerNodeId: external_exports.string(),
+  /**
+  * The owner's LAN-reachable host, resolved by the orchestrator from the
+  * per-node `reachableHost` override (Cluster UI). When present the runner
+  * dials THIS host for the owner's restream, in preference to the
+  * `CAMSTACK_HUB_URL`-derived default. Absent → auto-detect fallback.
+  */
+  ownerReachableHost: external_exports.string().optional(),
   /** Operator override for the owner host the runner dials. */
   hubHostnameOverride: external_exports.string().optional()
 })]).describe("Per-camera frame-source mode for the runner (P2c)");
@@ -19699,14 +19791,11 @@ var RunnerCameraConfigSchema = external_exports.object({
   */
   motionSources: MotionSourcesSchema.default(["analyzer"]),
   pipelineEnabled: external_exports.boolean().default(true),
-  /** Engine choice for video steps (runtime+backend+format). */
-  engine: PipelineEngineChoiceSchema.optional(),
   /** Ordered tree of video steps. Absent → runner skips video detection. */
   steps: external_exports.array(PipelineStepInputSchema).readonly().optional(),
   /** Audio classification branch. `enabled:false` disables, null skips. */
   audio: external_exports.object({
-    engine: PipelineEngineChoiceSchema,
-    modelId: external_exports.string(),
+    modelId: external_exports.string().optional(),
     enabled: external_exports.boolean()
   }).nullable().optional(),
   /**
@@ -19926,7 +20015,22 @@ var pipelineRunnerCapability = {
     /** All per-camera metrics in one round-trip. */
     getAllCameraMetrics: method(external_exports.void(), external_exports.array(CameraMetricsWithDeviceIdSchema).readonly()),
     /** List the deviceIds currently attached to this runner. */
-    getLocalCameras: method(external_exports.void(), external_exports.array(external_exports.number()).readonly())
+    getLocalCameras: method(external_exports.void(), external_exports.array(external_exports.number()).readonly()),
+    /**
+    * Best-effort NATIVE-resolution crop of a retention-ring frame. Given the
+    * `FrameHandle` that rode an inference-result event and a normalized `bbox`,
+    * the runner asks the decode worker still holding that frame's NATIVE
+    * surface to GPU/CPU-crop ONLY the ROI at native res and download just the
+    * crop. Returns `null` on a miss (handle not registered, or the worker's
+    * tiny native-retention ring already evicted the frame) — the caller falls
+    * back to a detection-frame crop. Routed to the frame's owning node by
+    * `handle.nodeId`; NEVER ships a full native frame.
+    */
+    getNativeCrop: method(external_exports.object({
+      handle: FrameHandleSchema,
+      bbox: NativeCropBboxSchema,
+      maxWidth: external_exports.number().int().positive().optional()
+    }), NativeCropResultSchema.nullable())
   }
 };
 var MotionStatusSchema = external_exports.object({
@@ -21849,7 +21953,9 @@ var AddonPageDeclarationSchema$1 = external_exports.object({
   icon: external_exports.string(),
   path: external_exports.string(),
   remoteName: external_exports.string(),
-  bundle: external_exports.string()
+  bundle: external_exports.string(),
+  section: external_exports.string().optional(),
+  sectionLabel: external_exports.string().optional()
 });
 var AddonPageInfoSchema = external_exports.object({
   addonId: external_exports.string(),
@@ -21882,7 +21988,18 @@ var AddonPageDeclarationSchema = external_exports.object({
   * the static-file route can compute an mtime-based cache-buster URL
   * without a separate filesystem stat.
   */
-  bundle: external_exports.string()
+  bundle: external_exports.string(),
+  /**
+  * Sidebar section this page docks into. Well-known ids: `'detection'`,
+  * `'cluster'`, `'administration'` — the page renders inside that group.
+  * Any OTHER string creates (or joins) a custom section rendered after
+  * the built-in groups; its label comes from `sectionLabel` (first
+  * declaration wins), falling back to the id. Absent → the legacy
+  * "Addon Pages" group.
+  */
+  section: external_exports.string().optional(),
+  /** Display label for a CUSTOM `section` id (ignored for well-known ids). */
+  sectionLabel: external_exports.string().optional()
 });
 var addonPagesSourceCapability = {
   name: "addon-pages-source",
@@ -22067,6 +22184,17 @@ var WidgetMetadataSchema = external_exports.object({
     deviceContext: external_exports.boolean().default(false),
     integrationContext: external_exports.boolean().default(false)
   }),
+  /**
+  * Loadable BEFORE authentication. The normal widget registry listing
+  * (`addon-widgets.listWidgets`) is auth-gated, so a pre-auth surface
+  * (the login page) cannot discover a widget through it. A widget that
+  * declares `preAuth: true` marks itself as safe to mount on a pre-auth
+  * screen — it is surfaced through the PUBLIC `auth.listLoginMethods`
+  * login-method contribution channel (see `login-method.cap.ts`) rather
+  * than the authenticated registry, and its bundle is served by the
+  * public `/api/addon-widgets/:addonId/*` static route. Defaults false.
+  */
+  preAuth: external_exports.boolean().optional().default(false),
   /** Dashboard placement HINTS (operator can override per instance). */
   defaultSize: WidgetSizeEnum.default("md"),
   allowedSizes: external_exports.array(WidgetSizeEnum).readonly().default([
@@ -22454,6 +22582,41 @@ var authProviderCapability = {
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
   mount: { kind: "skip" }
 };
+var LoginStageEnum = external_exports.enum(["primary", "second-factor"]);
+var RedirectLoginMethodSchema = external_exports.object({
+  kind: external_exports.literal("redirect"),
+  /** Stable id within the login-method set (e.g. `auth-oidc/google`). */
+  id: external_exports.string(),
+  /** Operator-facing button label. */
+  label: external_exports.string(),
+  /** lucide-react icon name. */
+  icon: external_exports.string().optional(),
+  /** Addon-owned HTTP route the button navigates to (GET). */
+  startUrl: external_exports.string(),
+  stage: LoginStageEnum
+});
+var WidgetLoginMethodSchema = external_exports.object({
+  kind: external_exports.literal("widget"),
+  /** Stable id within the login-method set (e.g. `auth-webauthn/passkey-login`). */
+  id: external_exports.string(),
+  /** Owning addon id — drives the public bundle URL + the MF namespace. */
+  addonId: external_exports.string(),
+  /** Bundle filename inside the addon's dist dir (`remoteEntry.js`). */
+  bundle: external_exports.string(),
+  /** MF remote descriptor — `{ remoteName, exposedModule, componentKey }`. */
+  remote: WidgetRemoteSchema,
+  stage: LoginStageEnum
+});
+var LoginMethodContributionSchema = external_exports.discriminatedUnion("kind", [RedirectLoginMethodSchema, WidgetLoginMethodSchema]);
+var loginMethodCapability = {
+  name: "login-method",
+  scope: "system",
+  mode: "collection",
+  internal: true,
+  methods: { getLoginMethods: method(external_exports.void(), external_exports.array(LoginMethodContributionSchema).readonly()) },
+  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+  mount: { kind: "skip" }
+};
 var BackupDestinationInfoSchema = external_exports.object({
   /**
   * Sub-id within this addon. Convention `default` for single-
@@ -24856,7 +25019,17 @@ var TrackSchema = external_exports.object({
   /** Cumulative normalized distance travelled (0..1 units = full frame width). */
   totalDistance: external_exports.number(),
   state: TrackStateSchema,
-  active: external_exports.boolean()
+  active: external_exports.boolean(),
+  /** Deterministic key-event importance score in [0,1] (server-computed at
+  *  track expiry, recomputed on late label). Absent on legacy rows written
+  *  before scoring shipped — consumers degrade to absence / compute-on-read. */
+  importance: external_exports.number().optional(),
+  /** Id of the track's highest-confidence ObjectEvent (its representative
+  *  "best" frame). Absent when the track produced no object events. */
+  bestEventId: external_exports.string().optional(),
+  /** Tag of the importance sub-signal that dominated the score
+  *  (identity|dwell|proximity|class|confidence|travel|zone). */
+  importanceReason: external_exports.string().optional()
 });
 var BaseEventFields = {
   id: external_exports.string(),
@@ -24913,8 +25086,18 @@ var ObjectEventSchema = external_exports.object({
   frameHeight: external_exports.number().optional(),
   /** MediaStore key for the crop attached to this event (if any). */
   mediaKey: external_exports.string().optional(),
+  /** Design B: MediaStore key of the track's native-resolution key frame (the
+  *  best-detection full frame). Resolve via the event-media data-plane
+  *  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`) for a detail view that
+  *  draws `bbox` over the native frame. Absent on legacy rows / non-decoded
+  *  sources — consumers fall back to `mediaKey` (the tight crop). */
+  keyFrameMediaKey: external_exports.string().optional(),
   /** Populated by B5 (recording playback URL for this event). */
-  mediaUrl: external_exports.string().optional()
+  mediaUrl: external_exports.string().optional(),
+  /** The parent track's key-event importance [0,1], propagated to every object
+  *  event of the track (so an event row can be sorted by importance without a
+  *  track join). Absent on legacy rows / before the track was scored. */
+  importance: external_exports.number().optional()
 });
 var AudioEventSchema = external_exports.object({
   ...BaseEventFields,
@@ -24938,7 +25121,8 @@ var MediaFileKindEnum = external_exports.enum([
   "fullFrame",
   "fullFrameBoxed",
   "faceCrop",
-  "plateCrop"
+  "plateCrop",
+  "keyFrame"
 ]);
 var MediaFileSchema = external_exports.object({
   key: external_exports.string(),
@@ -24959,6 +25143,32 @@ var DeviceEventQueryInput = external_exports.object({
   projection: external_exports.enum(["full", "slim"]).optional()
 });
 var ObjectEventQueryInput = DeviceEventQueryInput.extend({ classFilter: external_exports.string().optional() });
+var KeyEventQueryInput = external_exports.object({
+  deviceId: external_exports.number(),
+  /** Window lower bound (track firstSeen ≥ since). */
+  since: external_exports.number(),
+  /** Window upper bound (track firstSeen ≤ until). */
+  until: external_exports.number(),
+  limit: external_exports.number().int().min(1).max(200).default(50),
+  /** Drop tracks scoring below this importance. */
+  minImportance: external_exports.number().min(0).max(1).optional(),
+  /** Restrict to a single class (e.g. 'person'). */
+  classFilter: external_exports.string().optional()
+});
+var KeyEventSchema = external_exports.object({
+  /** The representative event id (the track's best ObjectEvent, else its trackId). */
+  id: external_exports.string(),
+  trackId: external_exports.string(),
+  /** Track start time (firstSeen). */
+  timestamp: external_exports.number(),
+  className: external_exports.string(),
+  label: external_exports.string().optional(),
+  importance: external_exports.number(),
+  /** Highest-confidence ObjectEvent id for the track (empty when none). */
+  bestEventId: external_exports.string(),
+  /** Track lifetime in ms (lastSeen - firstSeen). */
+  windowMs: external_exports.number().optional()
+});
 var TrackedDetectionSchema = external_exports.object({
   trackId: external_exports.string(),
   className: external_exports.string(),
@@ -25007,6 +25217,15 @@ var pipelineAnalyticsCapability = {
     getMotionEvents: method(DeviceEventQueryInput, external_exports.array(MotionEventSchema).readonly()),
     getObjectEvents: method(ObjectEventQueryInput, external_exports.array(ObjectEventSchema).readonly()),
     getAudioEvents: method(DeviceEventQueryInput, external_exports.array(AudioEventSchema).readonly()),
+    /**
+    * Importance-ranked highlights for a device+window. Queries completed
+    * tracks by (deviceId, firstSeen ∈ [since,until]), scores each (or reuses
+    * the persisted score), filters by minImportance/classFilter, orders by
+    * importance desc, and returns up to `limit` compact key events mapped to
+    * each track's best event. Legacy tracks lacking a persisted score are
+    * scored on-read (no write). Degrades to `[]` on error.
+    */
+    getKeyEvents: method(KeyEventQueryInput, external_exports.array(KeyEventSchema).readonly()),
     /** Server-side bucketed event counts for the 24-hour timeline.
     *  Returns one entry per non-empty bucket; empty buckets are omitted. */
     getEventDensity: method(external_exports.object({
@@ -25091,11 +25310,11 @@ var pipelineAnalyticsCapability = {
   }
 };
 var CameraPipelineConfigSchema = external_exports.object({
-  engine: PipelineEngineChoiceSchema,
+  engine: PipelineEngineChoiceSchema.optional(),
   steps: external_exports.array(PipelineStepInputSchema).readonly(),
   audio: external_exports.object({
-    engine: PipelineEngineChoiceSchema,
-    modelId: external_exports.string(),
+    engine: PipelineEngineChoiceSchema.optional(),
+    modelId: external_exports.string().optional(),
     enabled: external_exports.boolean(),
     settings: external_exports.record(external_exports.string(), external_exports.unknown()).readonly().optional()
   }).nullable().optional()
@@ -25110,7 +25329,7 @@ var PipelineTemplateSchema = external_exports.object({
 });
 var AgentAddonConfigSchema = external_exports.object({
   enabled: external_exports.boolean(),
-  modelId: external_exports.string(),
+  modelId: external_exports.string().optional(),
   settings: external_exports.record(external_exports.string(), external_exports.unknown()).readonly()
 });
 var AgentPipelineSettingsSchema = external_exports.object({
@@ -25120,12 +25339,25 @@ var AgentPipelineSettingsSchema = external_exports.object({
   detectWeight: external_exports.number().positive().optional(),
   /** Node is eligible to run the detection pipeline (decode + inference). */
   detect: external_exports.boolean().optional(),
-  /** Node is eligible to host decoder sessions. */
+  /**
+  * DEPRECATED AND IGNORED. Decode is always co-located with its frame
+  * consumer, so decode eligibility IS detect eligibility. Kept optional in
+  * the schema ONLY so persisted stores written before the removal still
+  * parse — no code reads it and no write path emits it.
+  */
   decode: external_exports.boolean().optional(),
   /** Node is eligible to run audio-analyzer sessions. */
   audio: external_exports.boolean().optional(),
   /** Node is eligible to be the ingest / source-owner (serve the restream). */
-  ingest: external_exports.boolean().optional()
+  ingest: external_exports.boolean().optional(),
+  /**
+  * Operator override for the LAN host a cross-node decoder dials to reach
+  * THIS node's restream (Cluster UI). Absent → auto-detect: a remote runner
+  * falls back to its `CAMSTACK_HUB_URL`-derived host (the Moleculer address
+  * it already uses to reach the hub). Set this only when the auto-detected
+  * address is wrong (multi-homed host, NAT, custom interface).
+  */
+  reachableHost: external_exports.string().optional()
 });
 var CameraPipelineForAgentSchema = external_exports.object({
   steps: external_exports.array(PipelineStepInputSchema).readonly(),
@@ -25162,20 +25394,6 @@ var PipelineAssignmentSchema = external_exports.object({
   /** Unix timestamp (ms) when the assignment was last updated. */
   assignedAt: external_exports.number()
 });
-var DecoderAssignmentSchema = external_exports.object({
-  deviceId: external_exports.number(),
-  /** Moleculer node id of the decoder provider currently responsible for this camera. */
-  decoderNodeId: external_exports.string(),
-  /** True when the assignment was set manually via `assignDecoder`, false when chosen by the balancer. */
-  pinned: external_exports.boolean(),
-  /** Why this assignment was made — useful for debugging the decoder balancer. */
-  reason: external_exports.enum([
-    "manual",
-    "co-located",
-    "capacity",
-    "hardware-affinity"
-  ])
-});
 var AgentLoadSummarySchema = external_exports.object({
   nodeId: external_exports.string(),
   online: external_exports.boolean(),
@@ -25198,6 +25416,11 @@ var GlobalMetricsSchema = external_exports.object({
   queueDepth: external_exports.number()
 });
 var CapabilityBindingsSchema = external_exports.record(external_exports.string(), external_exports.string());
+var IngestOwnerSchema = external_exports.object({
+  ownerNodeId: external_exports.string(),
+  reachableHost: external_exports.string().optional(),
+  configIssue: external_exports.string().optional()
+});
 var CameraSourceStreamSchema = external_exports.object({
   camStreamId: external_exports.string(),
   codec: external_exports.string(),
@@ -25211,6 +25434,14 @@ var CameraAssignmentStatusSchema = external_exports.object({
   detectionNodeId: external_exports.string().nullable(),
   decoderNodeId: external_exports.string().nullable(),
   audioNodeId: external_exports.string().nullable(),
+  /**
+  * The node that OWNS this camera's physical source pull (dials the RTSP and
+  * hosts the broker/restream) — the cluster ingest owner today
+  * (`clusterRoles.ingestNode`), per-camera once source assignment lands. Lets
+  * the UI show WHERE a camera is sourced without SSH/logs, and is the node the
+  * broker block below was read from (pinned). Nullable only pre-wiring.
+  */
+  sourceNodeId: external_exports.string().nullable(),
   pinned: external_exports.object({
     detection: external_exports.boolean(),
     decoder: external_exports.boolean(),
@@ -25384,21 +25615,14 @@ var pipelineOrchestratorCapability = {
       kind: "mutation",
       auth: "admin"
     }),
-    /** Pin a device's decoder to a specific node. */
-    assignDecoder: method(external_exports.object({
-      deviceId: external_exports.number(),
-      nodeId: external_exports.string()
-    }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    /** Clear a device's decoder pin (revert to auto). */
-    unassignDecoder: method(external_exports.object({ deviceId: external_exports.number() }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    /** Get every camera's decoder placement. */
-    getDecoderAssignments: method(external_exports.void(), external_exports.array(DecoderAssignmentSchema).readonly()),
+    /**
+    * The cluster's single camera-source owner — resolved UNCONDITIONALLY
+    * from `clusterRoles.ingestNode` (NOT the detection-decode
+    * `remoteSourcingNodes` knob). Consumers (recorder/snapshot/audio) pin
+    * their broker calls to `ownerNodeId` and dial `reachableHost` when
+    * present. Defaults to `{ ownerNodeId: 'hub' }`.
+    */
+    getIngestOwner: method(external_exports.void(), IngestOwnerSchema),
     /** Pin a device's audio analysis to a specific cluster node. */
     assignAudio: method(external_exports.object({
       deviceId: external_exports.number(),
@@ -25430,23 +25654,6 @@ var pipelineOrchestratorCapability = {
       pinned: external_exports.boolean(),
       assignedAt: external_exports.number()
     }))),
-    /**
-    * Get one camera's decoder placement (computed if not yet pinned).
-    *
-    * ADVISORY today: reports the orchestrator's decoder preference only.
-    * Actual decode placement is broker-owned (local-node pin + frame-plane
-    * co-location guard). Reserved to become the binding source/decoder-owner
-    * control in the stream-LB epic (Phase 2).
-    *
-    * `pipelineNodeId` is the node already chosen to run inference for
-    * this camera. When provided, the balancer prefers co-location with
-    * it; omitted → falls back to the last known assignment in the
-    * `assignments` map and finally to 'hub'.
-    */
-    getDecoderAssignment: method(external_exports.object({
-      deviceId: external_exports.number(),
-      pipelineNodeId: external_exports.string().optional()
-    }), DecoderAssignmentSchema),
     /** Read one agent's settings. Null when not yet seeded. */
     getAgentSettings: method(external_exports.object({ agentNodeId: external_exports.string() }), AgentPipelineSettingsSchema.nullable()),
     /** Enumerate every agent's settings (hub + remote runners). */
@@ -25516,20 +25723,65 @@ var pipelineOrchestratorCapability = {
     * `enabledDecoderNodes`, `enabledAudioNodes`, `remoteSourcingNodes`).
     * Each flag is optional in the patch: omit a flag to leave it unchanged,
     * pass `null` to reset it to the node default (`hub` → capable, every
-    * other node → not). Detection/decode/audio eligibility is derived from
-    * these flags across the cluster; changing them re-derives the enabled
-    * sets and reconciles dispatch immediately.
+    * other node → not). Detection/audio eligibility is derived from these
+    * flags across the cluster; changing them re-derives the enabled sets
+    * and reconciles dispatch immediately. There is NO separate decode flag:
+    * decode is always co-located with its frame consumer, so decode
+    * eligibility IS detect eligibility.
     */
     setAgentCapabilities: method(external_exports.object({
       agentNodeId: external_exports.string(),
       detect: external_exports.boolean().nullable().optional(),
-      decode: external_exports.boolean().nullable().optional(),
       audio: external_exports.boolean().nullable().optional(),
       ingest: external_exports.boolean().nullable().optional()
     }), external_exports.object({ success: external_exports.literal(true) }), {
       kind: "mutation",
       auth: "admin"
     }),
+    /**
+    * Set (or clear) the operator override for the LAN host a cross-node
+    * decoder dials to reach this node's restream. Pass a non-empty string to
+    * override the auto-detected address (the runner's `CAMSTACK_HUB_URL`
+    * default); pass `null` or an empty string to clear it and revert to
+    * auto-detect. Applied on the next dispatch cycle — takes effect for new
+    * cross-node attaches; existing attaches keep their current host until
+    * re-dispatched.
+    */
+    setAgentReachableHost: method(external_exports.object({
+      agentNodeId: external_exports.string(),
+      reachableHost: external_exports.string().nullable()
+    }), external_exports.object({ success: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Reset one node's pipeline to its hardware-aware defaults — the HONEST
+    * reset (replaces the executor's legacy `resetToDefault`, which cleared a
+    * dead persisted step-tree seed nothing in the live path read):
+    *   (a) strips every `modelId` pin from that node's
+    *       `agentSettings.addonDefaults` (cells revert to Auto — the node
+    *       resolves its own hardware-aware format default at runtime);
+    *   (b) clears per-camera step overrides scoped to that node
+    *       (`stepOverridesByAgent[node]` + the wholesale
+    *       `pipelineByAgent[node]` escape hatch);
+    *   (c) clears the executor-side per-device settings stores on that node
+    *       (`pipelineExecutor.clearDeviceOverrides`);
+    *   (d) hot-reloads every camera assigned to the node.
+    *
+    * Returns the EFFECTIVE post-reset object-detection model for the node
+    * (the executor's pure hardware-aware default) so the UI can report what
+    * will actually run — not a value that never reaches the live path.
+    */
+    resetNodePipelineDefaults: method(external_exports.object({ agentNodeId: external_exports.string() }), external_exports.object({
+      success: external_exports.literal(true),
+      /** Hardware-aware default detection model now in effect on the node (null when unresolvable). */
+      effectiveModelId: external_exports.string().nullable(),
+      /** Number of cameras whose node-scoped overrides were cleared. */
+      clearedCameraOverrides: external_exports.number()
+    }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
     /** Read one camera's settings. Null when never touched (inherits agent defaults fully). */
     getCameraSettings: method(external_exports.object({ deviceId: external_exports.number() }), CameraPipelineSettingsSchema.nullable()),
     /** Set or clear the 3-state toggle for one (camera, addonId). Pass `enabled: null` to clear and revert to agent default. */
@@ -25621,33 +25873,107 @@ var pipelineOrchestratorCapability = {
     })
   }
 };
-var RegisteredStreamSchema = external_exports.object({
-  streamId: external_exports.string(),
-  label: external_exports.string().optional(),
-  codec: external_exports.string(),
-  type: external_exports.enum(["video", "audio"]),
-  sourceUrl: external_exports.string()
+var ServerBootModeSchema = external_exports.enum([
+  "workspace",
+  "baked",
+  "data-root"
+]);
+var ServerUpdateStateSchema = external_exports.enum([
+  "idle",
+  "checking",
+  "staging",
+  "pending-restart",
+  "awaiting-confirmation"
+]);
+var ServerRollbackInfoSchema = external_exports.object({
+  /** The version that failed (or was manually rolled back). */
+  fromVersion: external_exports.string(),
+  /** The version rolled back to; null = the baked seed. */
+  toVersion: external_exports.string().nullable(),
+  atMs: external_exports.number(),
+  reason: external_exports.string()
 });
-var ExposedResourceSchema = external_exports.object({
-  streamId: external_exports.string(),
-  format: external_exports.string(),
-  value: external_exports.string()
+var ServerPackageStatusSchema = external_exports.object({
+  /** Root package name (`@camstack/server` on the hub). */
+  packageName: external_exports.string(),
+  /** Version of the code the running process ACTUALLY loaded. */
+  runningVersion: external_exports.string().nullable(),
+  /** Node.js runtime version the node's process runs on (`process.versions.node`). */
+  nodeRuntimeVersion: external_exports.string().nullable(),
+  /** Active data-dir root version; null when booted from seed/workspace. */
+  activeVersion: external_exports.string().nullable(),
+  /** N-1 version kept for rollback; null when no previous version exists. */
+  previousVersion: external_exports.string().nullable(),
+  /** Version of the immutable baked seed closure (image fallback). */
+  seedVersion: external_exports.string().nullable(),
+  /** Latest registry version from the most recent check (null = never checked). */
+  latestVersion: external_exports.string().nullable(),
+  updateAvailable: external_exports.boolean(),
+  bootMode: ServerBootModeSchema,
+  updateState: ServerUpdateStateSchema,
+  /** Version staged + awaiting its probation boot, when one is pending. */
+  pendingVersion: external_exports.string().nullable(),
+  /** Set when the last freshly-activated version failed its boot health-check. */
+  rolledBack: ServerRollbackInfoSchema.nullable(),
+  /**
+  * True when `server-root/state.json` EXISTS but is unreadable/corrupt — the
+  * hub is running from the baked seed (or workspace) while installed data-dir
+  * versions are being IGNORED. Surfaced as a warning in the UI.
+  */
+  stateFileCorrupt: external_exports.boolean(),
+  lastCheckedAtMs: external_exports.number().nullable()
+});
+var ServerUpdateCheckResultSchema = external_exports.object({
+  packageName: external_exports.string(),
+  runningVersion: external_exports.string().nullable(),
+  latestVersion: external_exports.string().nullable(),
+  updateAvailable: external_exports.boolean(),
+  checkedAtMs: external_exports.number(),
+  /** Non-null when the registry lookup failed (offline, bad registry, …). */
+  error: external_exports.string().nullable()
+});
+var ServerUpdateActionResultSchema = external_exports.object({
+  accepted: external_exports.boolean(),
+  targetVersion: external_exports.string().nullable(),
+  /** True when a graceful restart was scheduled to apply the change. */
+  restarting: external_exports.boolean(),
+  message: external_exports.string()
 });
-var restreamerCapability = {
-  name: "restreamer",
+var serverManagementCapability = {
+  name: "server-management",
   scope: "system",
-  mode: "collection",
-  internal: true,
+  mode: "singleton",
   methods: {
-    registerDevice: method(external_exports.object({
-      deviceId: external_exports.number(),
-      streams: external_exports.array(RegisteredStreamSchema).readonly()
-    }), external_exports.void(), { kind: "mutation" }),
-    unregisterDevice: method(external_exports.object({ deviceId: external_exports.number() }), external_exports.void(), { kind: "mutation" }),
-    getExposedResources: method(external_exports.object({ deviceId: external_exports.number() }), external_exports.array(ExposedResourceSchema).readonly())
+    getServerPackageStatus: method(external_exports.void(), ServerPackageStatusSchema, { auth: "admin" }),
+    checkServerUpdate: method(external_exports.void(), ServerUpdateCheckResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    applyServerUpdate: method(external_exports.object({
+      /** Explicit target version; omitted = latest from the registry. */
+      version: external_exports.string().optional()
+    }), ServerUpdateActionResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    rollbackServerUpdate: method(external_exports.void(), ServerUpdateActionResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Plain process restart of the node's root process — no version change.
+    * The supervisor (docker restart policy / launchd / Electron main)
+    * relaunches and the starter loads the SAME active version. Refused while
+    * a stage is in flight or a version is already staged awaiting restart
+    * (use apply/rollback instead, so the pending version is not skipped).
+    */
+    restartServer: method(external_exports.void(), ServerUpdateActionResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    })
   },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "skip" }
+  mount: { kind: "server-provided" }
 };
 var QueryFilterSchema = external_exports.object({
   where: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
@@ -25866,27 +26192,26 @@ var snapshotCapability = {
     invalidateCache: method(external_exports.object({ deviceId: external_exports.number() }), external_exports.void(), {
       kind: "mutation",
       auth: "admin"
-    })
+    }),
+    /**
+    * Cache-only batch overview — answers from the wrapper's in-memory cache in
+    * O(n) and NEVER triggers a capture. Lets a grid skip requesting images for
+    * devices that never produced a frame, and gives it an ETag per device for
+    * conditional (304-able) image fetches. `lastCapturedAt`/`cacheAgeMs`/`etag`
+    * are null for a device with no cached frame.
+    */
+    getSnapshotOverview: systemMethod(external_exports.object({ deviceIds: external_exports.array(external_exports.number()).min(1).max(200) }), external_exports.array(external_exports.object({
+      deviceId: external_exports.number(),
+      lastCapturedAt: external_exports.number().nullable(),
+      cacheAgeMs: external_exports.number().nullable(),
+      etag: external_exports.string().nullable()
+    })))
   },
   status: {
     schema: SnapshotStatusSchema,
     kind: "poll"
   }
 };
-var snapshotProviderCapability = {
-  name: "snapshot-provider",
-  scope: "system",
-  mode: "collection",
-  methods: {
-    supportsDevice: method(external_exports.object({ deviceId: external_exports.number() }), external_exports.boolean()),
-    getSnapshot: method(external_exports.object({
-      deviceId: external_exports.number(),
-      streamId: external_exports.string().optional()
-    }), SnapshotImageSchema.nullable())
-  },
-  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "custom" }
-};
 var SsoBridgeClaimsSchema = external_exports.object({
   userId: external_exports.string(),
   username: external_exports.string(),
@@ -26220,6 +26545,20 @@ var userPasskeysCapability = {
       kind: "mutation",
       access: "view"
     }),
+    beginDiscoverableAuthentication: method(external_exports.object({}), external_exports.object({ optionsJSON: external_exports.record(external_exports.string(), external_exports.unknown()) }), {
+      kind: "mutation",
+      access: "view"
+    }),
+    finishDiscoverableAuthentication: method(external_exports.object({
+      /** AuthenticationResponseJSON from the browser. */
+      response: external_exports.record(external_exports.string(), external_exports.unknown())
+    }), external_exports.object({
+      verified: external_exports.boolean(),
+      userId: external_exports.string().nullable()
+    }), {
+      kind: "mutation",
+      access: "view"
+    }),
     listPasskeys: method(external_exports.object({ userId: external_exports.string() }), external_exports.array(PasskeySummarySchema), { auth: "admin" }),
     removePasskey: method(external_exports.object({
       userId: external_exports.string(),
@@ -26228,6 +26567,15 @@ var userPasskeysCapability = {
       kind: "mutation",
       auth: "admin",
       access: "delete"
+    }),
+    getSecondFactorPreference: method(external_exports.object({ userId: external_exports.string() }), external_exports.object({ enabled: external_exports.boolean() }), { auth: "admin" }),
+    setSecondFactorPreference: method(external_exports.object({
+      userId: external_exports.string(),
+      enabled: external_exports.boolean()
+    }), external_exports.object({ success: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin",
+      access: "create"
     })
   }
 };
@@ -26291,49 +26639,6 @@ var webrtcClientHintsSchema = external_exports.object({
   /** Hard tier override; takes precedence over scoring when registered. */
   prefersTier: external_exports.string().optional()
 }).partial();
-var webrtcCapability = {
-  name: "webrtc",
-  scope: "system",
-  mode: "collection",
-  internal: true,
-  methods: {
-    handleOffer: method(external_exports.object({
-      streamId: external_exports.string(),
-      sdpOffer: external_exports.string()
-    }), external_exports.string(), { kind: "mutation" }),
-    supportsStream: method(external_exports.object({ streamId: external_exports.string() }), external_exports.boolean()),
-    registerStream: method(external_exports.object({
-      streamId: external_exports.string(),
-      codec: external_exports.string()
-    }), external_exports.void(), { kind: "mutation" }),
-    unregisterStream: method(external_exports.object({ streamId: external_exports.string() }), external_exports.void(), { kind: "mutation" }),
-    /**
-    * Two-step server-offer signaling. `hints` is optional — providers
-    * that don't care about adaptive source selection ignore it.
-    */
-    createSession: method(external_exports.object({
-      streamId: external_exports.string(),
-      hints: webrtcClientHintsSchema.optional()
-    }), external_exports.object({
-      sessionId: external_exports.string(),
-      sdpOffer: external_exports.string()
-    }), { kind: "mutation" }),
-    handleAnswer: method(external_exports.object({
-      sessionId: external_exports.string(),
-      sdpAnswer: external_exports.string()
-    }), external_exports.void(), { kind: "mutation" }),
-    closeSession: method(external_exports.object({ sessionId: external_exports.string() }), external_exports.void(), { kind: "mutation" }),
-    /**
-    * Whether this provider supports adaptive bitrate for the given stream.
-    * Currently always false — adaptive selection is one-shot at session
-    * start, not in-session encoder switching. Phase 5 plans to layer
-    * encoder-driven adaptation on top.
-    */
-    hasAdaptiveBitrate: method(external_exports.object({ streamId: external_exports.string() }), external_exports.boolean())
-  },
-  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "skip" }
-};
 var WebrtcStreamTargetSchema = external_exports.discriminatedUnion("kind", [
   external_exports.object({ kind: external_exports.literal("adaptive") }),
   external_exports.object({
@@ -26576,7 +26881,7 @@ var webrtcSessionCapability = {
     }).nullable() }))
   },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "custom" }
+  mount: { kind: "server-provided" }
 };
 var AccessoriesStatusSchema = external_exports.object({
   /** All accessory children of the parent. */
@@ -27176,7 +27481,7 @@ var addonsCapability = {
     }), LogStreamEntrySchema, { kind: "subscription" })
   },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "service-backed" }
+  mount: { kind: "server-provided" }
 };
 var buttonCapability = {
   name: "button",
@@ -27298,7 +27603,17 @@ var FaceInfoSchema = external_exports.object({
   recognizedIdentityId: external_exports.string().optional(),
   identityName: external_exports.string().optional(),
   assigned: external_exports.boolean(),
-  base64: external_exports.string().optional()
+  base64: external_exports.string().optional(),
+  /** Design B: the face bbox (pixel space) on the key frame — lets a detail
+  *  view draw the box over the native `keyFrameMediaKey` frame. Absent on
+  *  legacy rows written before design B. */
+  faceBbox: BoundingBoxSchema.optional(),
+  /** Design B: MediaStore key of the track's native-resolution key frame.
+  *  Fetch the native JPEG via the event-media data-plane
+  *  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`). Absent when the
+  *  track produced no key frame (e.g. native/onboard source) — the UI falls
+  *  back to the inline `base64` face crop. */
+  keyFrameMediaKey: external_exports.string().optional()
 });
 var FaceFilterEnum = external_exports.enum([
   "unassigned",
@@ -27521,7 +27836,7 @@ var integrationsCapability = {
     })
   },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "service-backed" }
+  mount: { kind: "server-provided" }
 };
 var IntercomAbilitySchema = external_exports.object({
   /** Codecs accepted by firmware, in preference order. Driver-authored strings. */
@@ -28061,7 +28376,7 @@ var networkQualityCapability = {
     }), external_exports.void(), { kind: "mutation" })
   },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "service-backed" }
+  mount: { kind: "server-provided" }
 };
 var TopologyServiceSchema = external_exports.object({
   addonId: external_exports.string(),
@@ -28090,6 +28405,10 @@ var TopologyCategorySchema = external_exports.object({
   healthy: external_exports.number(),
   addons: external_exports.array(TopologyCategoryAddonSchema).readonly()
 });
+var TopologyRootPackageSchema = external_exports.object({
+  name: external_exports.string(),
+  version: external_exports.string()
+});
 var TopologyNodeSchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
@@ -28113,7 +28432,8 @@ var TopologyNodeSchema = external_exports.object({
     status: external_exports.string()
   })).readonly(),
   processes: external_exports.array(TopologyProcessSchema).readonly(),
-  categories: external_exports.array(TopologyCategorySchema).readonly()
+  categories: external_exports.array(TopologyCategorySchema).readonly(),
+  rootPackage: TopologyRootPackageSchema.nullable()
 });
 var CapUsageEdgeSchema = external_exports.object({
   callerAddonId: external_exports.string(),
@@ -28226,7 +28546,7 @@ var nodesCapability = {
     })
   },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "service-backed" }
+  mount: { kind: "server-provided" }
 };
 var OsdOverlayKindEnum = external_exports.enum([
   "text",
@@ -28849,7 +29169,7 @@ var systemCapability = {
     })
   },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "service-backed" }
+  mount: { kind: "server-provided" }
 };
 var ToastSchema = external_exports.object({
   title: external_exports.string(),
@@ -28871,7 +29191,7 @@ var toastCapability = {
   mode: "singleton",
   methods: { onToast: method(external_exports.void(), ToastSchema, { kind: "subscription" }) },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "service-backed" }
+  mount: { kind: "server-provided" }
 };
 var UserSummarySchema = external_exports.object({
   id: external_exports.string(),
@@ -31093,6 +31413,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "loginMethod.getLoginMethods": {
+    capName: "login-method",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "mediaPlayer.next": {
     capName: "media-player",
     capScope: "device",
@@ -31675,6 +32001,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.getKeyEvents": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.getMotionEvents": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -31723,23 +32055,23 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "pipelineExecutor.deleteModel": {
+  "pipelineExecutor.clearDeviceOverrides": {
     capName: "pipeline-executor",
     capScope: "system",
     addonId: null,
     access: "delete"
   },
-  "pipelineExecutor.deleteTemplate": {
+  "pipelineExecutor.deleteModel": {
     capName: "pipeline-executor",
     capScope: "system",
     addonId: null,
     access: "delete"
   },
-  "pipelineExecutor.detect": {
+  "pipelineExecutor.deleteTemplate": {
     capName: "pipeline-executor",
     capScope: "system",
     addonId: null,
-    access: "view"
+    access: "delete"
   },
   "pipelineExecutor.downloadModel": {
     capName: "pipeline-executor",
@@ -31933,13 +32265,13 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.assignAudio": {
-    capName: "pipeline-orchestrator",
+  "pipelineExecutor.validatePipeline": {
+    capName: "pipeline-executor",
     capScope: "system",
     addonId: null,
-    access: "create"
+    access: "view"
   },
-  "pipelineOrchestrator.assignDecoder": {
+  "pipelineOrchestrator.assignAudio": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
@@ -32023,19 +32355,13 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "pipelineOrchestrator.getDecoderAssignment": {
-    capName: "pipeline-orchestrator",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "pipelineOrchestrator.getDecoderAssignments": {
+  "pipelineOrchestrator.getGlobalMetrics": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
     access: "view"
   },
-  "pipelineOrchestrator.getGlobalMetrics": {
+  "pipelineOrchestrator.getIngestOwner": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
@@ -32077,6 +32403,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "delete"
   },
+  "pipelineOrchestrator.resetNodePipelineDefaults": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
   "pipelineOrchestrator.resolvePipeline": {
     capName: "pipeline-orchestrator",
     capScope: "system",
@@ -32113,37 +32445,37 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.setCameraPipelineForAgent": {
+  "pipelineOrchestrator.setAgentReachableHost": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.setCameraStepOverride": {
+  "pipelineOrchestrator.setCameraPipelineForAgent": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.setCameraStepToggle": {
+  "pipelineOrchestrator.setCameraStepOverride": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.setCapabilityBinding": {
+  "pipelineOrchestrator.setCameraStepToggle": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.unassignAudio": {
+  "pipelineOrchestrator.setCapabilityBinding": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.unassignDecoder": {
+  "pipelineOrchestrator.unassignAudio": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
@@ -32203,6 +32535,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineRunner.getNativeCrop": {
+    capName: "pipeline-runner",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "pipelineRunner.reportMotion": {
     capName: "pipeline-runner",
     capScope: "system",
@@ -32443,33 +32781,45 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "restreamer.getExposedResources": {
-    capName: "restreamer",
+  "scriptRunner.run": {
+    capName: "script-runner",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
+  "scriptRunner.stop": {
+    capName: "script-runner",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
+  "serverManagement.applyServerUpdate": {
+    capName: "server-management",
     capScope: "system",
     addonId: null,
-    access: "view"
+    access: "create"
   },
-  "restreamer.registerDevice": {
-    capName: "restreamer",
+  "serverManagement.checkServerUpdate": {
+    capName: "server-management",
     capScope: "system",
     addonId: null,
     access: "create"
   },
-  "restreamer.unregisterDevice": {
-    capName: "restreamer",
+  "serverManagement.getServerPackageStatus": {
+    capName: "server-management",
     capScope: "system",
     addonId: null,
-    access: "delete"
+    access: "view"
   },
-  "scriptRunner.run": {
-    capName: "script-runner",
-    capScope: "device",
+  "serverManagement.restartServer": {
+    capName: "server-management",
+    capScope: "system",
     addonId: null,
     access: "create"
   },
-  "scriptRunner.stop": {
-    capName: "script-runner",
-    capScope: "device",
+  "serverManagement.rollbackServerUpdate": {
+    capName: "server-management",
+    capScope: "system",
     addonId: null,
     access: "create"
   },
@@ -32557,23 +32907,17 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "snapshot.invalidateCache": {
+  "snapshot.getSnapshotOverview": {
     capName: "snapshot",
     capScope: "device",
     addonId: null,
-    access: "create"
-  },
-  "snapshotProvider.getSnapshot": {
-    capName: "snapshot-provider",
-    capScope: "system",
-    addonId: null,
     access: "view"
   },
-  "snapshotProvider.supportsDevice": {
-    capName: "snapshot-provider",
-    capScope: "system",
+  "snapshot.invalidateCache": {
+    capName: "snapshot",
+    capScope: "device",
     addonId: null,
-    access: "view"
+    access: "create"
   },
   "ssoBridge.signBridgeToken": {
     capName: "sso-bridge",
@@ -33001,30 +33345,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "streamingEngine.getStreamUrl": {
-    capName: "streaming-engine",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "streamingEngine.listStreams": {
-    capName: "streaming-engine",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "streamingEngine.registerStream": {
-    capName: "streaming-engine",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
-  "streamingEngine.unregisterStream": {
-    capName: "streaming-engine",
-    capScope: "system",
-    addonId: null,
-    access: "delete"
-  },
   "streamParams.getConfigSchema": {
     capName: "stream-params",
     capScope: "device",
@@ -33271,6 +33591,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "userPasskeys.beginDiscoverableAuthentication": {
+    capName: "user-passkeys",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "userPasskeys.beginRegistration": {
     capName: "user-passkeys",
     capScope: "system",
@@ -33283,12 +33609,24 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "userPasskeys.finishDiscoverableAuthentication": {
+    capName: "user-passkeys",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "userPasskeys.finishRegistration": {
     capName: "user-passkeys",
     capScope: "system",
     addonId: null,
     access: "create"
   },
+  "userPasskeys.getSecondFactorPreference": {
+    capName: "user-passkeys",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "userPasskeys.listPasskeys": {
     capName: "user-passkeys",
     capScope: "system",
@@ -33301,6 +33639,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "delete"
   },
+  "userPasskeys.setSecondFactorPreference": {
+    capName: "user-passkeys",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "vacuumControl.locate": {
     capName: "vacuum-control",
     capScope: "device",
@@ -33373,6 +33717,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "viewerUi.getStaticDir": {
+    capName: "viewer-ui",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "viewerUi.getVersion": {
+    capName: "viewer-ui",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "waterHeater.setAway": {
     capName: "water-heater",
     capScope: "device",
@@ -33391,54 +33747,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "webrtc.closeSession": {
-    capName: "webrtc",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
-  "webrtc.createSession": {
-    capName: "webrtc",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
-  "webrtc.handleAnswer": {
-    capName: "webrtc",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
-  "webrtc.handleOffer": {
-    capName: "webrtc",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
-  "webrtc.hasAdaptiveBitrate": {
-    capName: "webrtc",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "webrtc.registerStream": {
-    capName: "webrtc",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
-  "webrtc.supportsStream": {
-    capName: "webrtc",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "webrtc.unregisterStream": {
-    capName: "webrtc",
-    capScope: "system",
-    addonId: null,
-    access: "delete"
-  },
   "webrtcSession.addIceCandidate": {
     capName: "webrtc-session",
     capScope: "device",