camstack 1.2.180 → 1.2.181

package/dist/{chunk-5IZ6XS4J.js → chunk-4MQR56VQ.js}

@@ -8,7 +8,7 @@ import * as dgram from "dgram";
 import * as os from "os";
 import { parseArgs } from "util";
 
-// ../types/dist/event-category-BGmz_oxW.mjs
+// ../types/dist/event-category-DaIZi00R.mjs
 var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
   EventCategory2["SystemBoot"] = "system.boot";
   EventCategory2["SystemAddonsReady"] = "system.addons-ready";
@@ -29,6 +29,7 @@ var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
   EventCategory2["AddonPageReady"] = "addon.page-ready";
   EventCategory2["AddonWidgetReady"] = "addon.widget-ready";
   EventCategory2["AddonLoadFailed"] = "addon.load-failed";
+  EventCategory2["KeychainChanged"] = "keychain.changed";
   EventCategory2["AddonLoadRecovered"] = "addon.load-recovered";
   EventCategory2["AddonRetryScheduled"] = "addon.retry-scheduled";
   EventCategory2["SystemLivenessFailed"] = "system.liveness-failed";
@@ -116,7 +117,6 @@ var EventCategory = /* @__PURE__ */ (function(EventCategory2) {
   EventCategory2["AgentWsDisconnected"] = "agent.ws.disconnected";
   EventCategory2["AgentBackupActivated"] = "agent.backup.activated";
   EventCategory2["OrchestrationSettingsUpdated"] = "orchestration.settings-updated";
-  EventCategory2["PipelineAgentHwaccelChanged"] = "pipeline.agent-hwaccel-changed";
   EventCategory2["MotionAnalysis"] = "detection.motion-analysis";
   EventCategory2["MotionZonesRaw"] = "detection.motion-zones-raw";
   EventCategory2["MotionOnMotionChanged"] = "motion.on-motion-changed";
@@ -14681,7 +14681,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-DXKLNFvA.mjs
+// ../types/dist/sleep-DujUvOcb.mjs
 var AUDIO_CHUNK_FORMATS = [
   "f32le",
   "pcmu",
@@ -14875,6 +14875,7 @@ var WELL_KNOWN_TABS = [
   }
 ];
 var WELL_KNOWN_TAB_MAP = Object.fromEntries(WELL_KNOWN_TABS.map((t) => [t.id, t]));
+var SECRET_RETRY_MAX_MS = 5 * 6e4;
 var PEER_BYTES_CHUNK_BYTES = 256 * 1024;
 var PeerBytesTicketSchema = external_exports.object({
   /** `http://127.0.0.1:<port>/<token>`. One `GET` takes it. */
@@ -14893,6 +14894,7 @@ var PeerBytesTicketSchema = external_exports.object({
   */
   declaredBytes: external_exports.number().int().nonnegative().nullable()
 });
+var REVALIDATE_AFTER_MS = 15 * 6e4;
 var CamProfileSchema = external_exports.enum([
   "high",
   "mid",
@@ -15019,27 +15021,6 @@ var StreamSourceSchema = external_exports.object({
   audioCodec: external_exports.string().optional(),
   metadata: external_exports.record(external_exports.string(), external_exports.unknown()).readonly().optional()
 });
-var EncodedPacketSchema = external_exports.object({
-  type: external_exports.enum(["video", "audio"]),
-  data: external_exports.instanceof(Uint8Array),
-  pts: external_exports.number(),
-  dts: external_exports.number(),
-  keyframe: external_exports.boolean(),
-  codec: external_exports.string()
-});
-var DecodedFrameSchema = external_exports.object({
-  data: external_exports.instanceof(Uint8Array),
-  width: external_exports.number(),
-  height: external_exports.number(),
-  format: external_exports.enum([
-    "jpeg",
-    "rgb",
-    "bgr",
-    "yuv420",
-    "gray"
-  ]),
-  timestamp: external_exports.number()
-});
 var FrameHandleSchema = external_exports.object({
   shmId: external_exports.string(),
   slot: external_exports.number().int().nonnegative(),
@@ -15058,31 +15039,6 @@ var FrameHandleSchema = external_exports.object({
   nodeId: external_exports.string(),
   slotCount: external_exports.number().int().positive()
 });
-var FrameHandleFormatSchema = external_exports.enum([
-  "rgb",
-  "bgr",
-  "yuv420",
-  "gray"
-]);
-var SubscribeFramesInputSchema = external_exports.object({
-  brokerId: external_exports.string(),
-  format: FrameHandleFormatSchema,
-  /**
-  * Optional reader-side cadence hint in frames per second. The broker does
-  * NOT throttle — latest-wins ring reads drop frames implicitly for a slow
-  * consumer. The value is echoed back in `SubscribeFramesResult.maxFps` so
-  * the consumer can pace its own `pullFrameHandles` polling.
-  */
-  maxFps: external_exports.number().positive().optional(),
-  /** Short caller-identity tag (`motion`, `detection`, …) for diagnostics. */
-  tag: external_exports.string().optional()
-});
-var SubscribeFramesResultSchema = external_exports.object({
-  /** Opaque id the consumer passes to `pullFrameHandles` / `unsubscribeFrames`. */
-  subscriptionId: external_exports.string(),
-  /** Reader-side cadence hint (frames/s) — echoes `SubscribeFramesInput.maxFps`. */
-  maxFps: external_exports.number().nonnegative()
-});
 var AudioChunkFormatSchema = external_exports.enum(AUDIO_CHUNK_FORMATS);
 var DecodedAudioChunkSchema = external_exports.object({
   data: external_exports.instanceof(Uint8Array),
@@ -15128,9 +15084,7 @@ var BrokerStatusSchema = external_exports.enum([
 var BrokerStatsSchema = external_exports.object({
   status: BrokerStatusSchema,
   inputFps: external_exports.number(),
-  decodeFps: external_exports.number(),
   encodedSubscribers: external_exports.number(),
-  decodedSubscribers: external_exports.number(),
   uptimeMs: external_exports.number(),
   bitrateKbps: external_exports.number(),
   idrIntervalMs: external_exports.number(),
@@ -15143,14 +15097,6 @@ var BrokerStatsSchema = external_exports.object({
   preBufferMs: external_exports.number(),
   preBufferPackets: external_exports.number(),
   /**
-  * Moleculer node id of the decoder provider currently servicing this
-  * stream's decoded subscribers. `null` until the deferred decoder is
-  * created (no decoded clients yet, or codec not detected). Surfaces the
-  * runtime decoder placement so the UI can show "Decoder: <agent>" without
-  * a separate cap call per broker.
-  */
-  decoderNodeId: external_exports.string().nullable(),
-  /**
   * Detected audio track parameters from the RTSP DESCRIBE / SDP. `null`
   * when the stream has no audio track or the broker is in cold start.
   * `supported = false` means the codec was detected but the local
@@ -17592,70 +17538,6 @@ var StorageLocationDeclarationSchema = external_exports.object({
     "backup"
   ]).optional()
 });
-var DecoderStatsSchema = external_exports.object({
-  inputFps: external_exports.number(),
-  outputFps: external_exports.number(),
-  avgDecodeTimeMs: external_exports.number(),
-  droppedFrames: external_exports.number(),
-  /**
-  * Pull-mode adaptive-fps telemetry (optional — only pull sessions run the
-  * lag-driven controller; push sessions omit these). `lagMs` is the EWMA of
-  * the decoder's real-time drift (rising = falling behind live); `adaptiveFps`
-  * is the current lag-throttled emit rate (≤ `effectiveFps` ceiling).
-  */
-  lagMs: external_exports.number().optional(),
-  effectiveFps: external_exports.number().optional(),
-  adaptiveFps: external_exports.number().optional()
-});
-var DecoderSessionConfigSchema = external_exports.object({
-  codec: external_exports.string(),
-  maxFps: external_exports.number().default(0),
-  outputFormat: external_exports.enum([
-    "jpeg",
-    "rgb",
-    "bgr",
-    "yuv420",
-    "gray"
-  ]).default("jpeg"),
-  scale: external_exports.number().default(1),
-  width: external_exports.number().optional(),
-  height: external_exports.number().optional(),
-  /**
-  * Identifier of the camera this decoder session serves. Optional
-  * because the cap is generic (any caller could request decode), but
-  * stream-broker passes it so decoder logs include `deviceId` for
-  * per-camera filtering when diagnosing failures (e.g. node-av
-  * sendPacket errors on a single hung camera).
-  */
-  deviceId: external_exports.number().int().nonnegative().optional(),
-  /**
-  * Free-form tag for log scoping. Stream-broker uses
-  * `broker:<deviceId>/<profile>`. Decoder session logger surfaces it
-  * on every line so `grep tag=broker:5/high` filters one camera
-  * profile cleanly.
-  */
-  tag: external_exports.string().optional(),
-  /**
-  * Where the session delivers decoded frames (Phase 5 / D9):
-  *
-  * - `'callback'` (default) — the legacy pixel path: decoded frames are
-  *   buffered as `DecodedFrame`s and drained via `pullFrames`.
-  * - `'shm'` — the shared-memory frame plane: decoded frames are written
-  *   into an OS shared-memory ring and drained as zero-pixel
-  *   `FrameHandle`s via `pullHandles`. A session is one mode or the
-  *   other — `pullFrames` returns nothing for an `'shm'` session and
-  *   `pullHandles` returns nothing for a `'callback'` session.
-  */
-  frameSink: external_exports.enum(["callback", "shm"]).default("callback"),
-  /**
-  * Per-camera decoder DEBUG facility. When `true`, a pull-mode session emits
-  * a throttled (~1Hz) structured `decoder debug` line (effective/adaptive fps,
-  * real-time lag, dropped-frame delta, avg decode time, hwaccel). Mirrors the
-  * stream-broker's `streamingDebug` gate — off by default so production logs
-  * stay quiet and the emit path pays zero per-frame cost when disabled.
-  */
-  debug: external_exports.boolean().optional()
-});
 var LogChannelLevelSchema = external_exports.enum([
   "info",
   "warn",
@@ -17735,57 +17617,18 @@ var CLIP_SEARCH_STRICTNESS = [
   "strict"
 ];
 var ClipSearchStrictnessSchema = external_exports.enum(CLIP_SEARCH_STRICTNESS);
-var MACRO_LABELS = [
-  {
-    id: "person",
-    name: "Person"
-  },
-  {
-    id: "vehicle",
-    name: "Vehicle"
-  },
-  {
-    id: "animal",
-    name: "Animal"
-  },
-  {
-    id: "package",
-    name: "Package"
-  }
-];
-var DETECTION_MACRO_CLASSES = new Set(MACRO_LABELS.map((l) => l.id));
-var COCO_TO_MACRO = {
-  mapping: {
-    person: "person",
-    bicycle: "vehicle",
-    car: "vehicle",
-    motorcycle: "vehicle",
-    airplane: "vehicle",
-    bus: "vehicle",
-    train: "vehicle",
-    truck: "vehicle",
-    boat: "vehicle",
-    bird: "animal",
-    cat: "animal",
-    dog: "animal",
-    horse: "animal",
-    sheep: "animal",
-    cow: "animal",
-    elephant: "animal",
-    bear: "animal",
-    zebra: "animal",
-    giraffe: "animal",
-    suitcase: "package",
-    backpack: "package",
-    handbag: "package"
-  },
-  preserveOriginal: false
-};
-var FILLABLE_STEP_IDS = [
+var LABEL_SUPPLY_STEP_IDS = [
   "animal-classifier",
   "vehicle-classifier",
   "package-detection"
 ];
+var CROP_SUPPLY_STEP_IDS = ["plate-detection", "face-detection"];
+var MASK_SUPPLY_STEP_IDS = ["segmentation"];
+var ROOT_SUPPLIABLE_STEP_IDS = [
+  ...LABEL_SUPPLY_STEP_IDS,
+  ...CROP_SUPPLY_STEP_IDS,
+  ...MASK_SUPPLY_STEP_IDS
+];
 var MODEL_FORMATS = [
   "onnx",
   "coreml",
@@ -17802,7 +17645,35 @@ var ModelFormatEntrySchema = external_exports.object({
   /** Multi-file payload (directory members or sibling files). */
   files: external_exports.array(external_exports.string()).readonly().optional(),
   /** Runtime(s) that can use this format. If omitted, inferred from ModelFormat key */
-  runtimes: external_exports.array(external_exports.enum(["python"])).readonly().optional()
+  runtimes: external_exports.array(external_exports.enum(["python"])).readonly().optional(),
+  /**
+  * Content revision of the artefact, for one hosted OFF the CamStack mirror.
+  * A format on the mirror leaves it unset: its revision (the sha256 of its
+  * weight file) comes from the downloader's generated table, kept in step
+  * with the mirror by `scripts/check-hosted-model-revisions.ts` (D744). A
+  * node records the revision it downloaded next to the file
+  * (`<file>.revision`); a copy with no record or a different one is stale
+  * unless its weight file hashes to the revision, and a stale copy is
+  * downloaded again, the old one serving until the new one is complete. No
+  * revision at all ⇒ a file on disk is current, whatever it holds (D743).
+  */
+  revision: external_exports.string().min(1).optional()
+});
+var ModelOnDiskStateSchema = external_exports.enum([
+  "current",
+  "stale",
+  "missing"
+]);
+var ModelFormatPrecisionSchema = external_exports.enum([
+  "fp32",
+  "fp16",
+  "int8"
+]);
+var PipelineModelFormatStatusSchema = external_exports.object({
+  downloaded: external_exports.boolean(),
+  sizeMB: external_exports.number(),
+  onDisk: ModelOnDiskStateSchema.optional(),
+  precision: ModelFormatPrecisionSchema.optional()
 });
 var ModelExtraFileSchema = external_exports.object({
   url: external_exports.string(),
@@ -17879,11 +17750,31 @@ var ModelLicenseRecordSchema = external_exports.object({
   nonCommercial: external_exports.boolean().optional()
 });
 var ModelLicenseSchema = external_exports.preprocess((value) => typeof value === "string" ? { weights: value } : value, ModelLicenseRecordSchema);
-var FillsClassifierEffectSchema = external_exports.object({
-  stepId: external_exports.enum(FILLABLE_STEP_IDS),
-  labelToEffect: external_exports.record(external_exports.string(), external_exports.string()),
-  uncovered: external_exports.array(external_exports.string()).readonly()
-});
+var RootStepSupplySchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("label"),
+    stepId: external_exports.enum(LABEL_SUPPLY_STEP_IDS),
+    labelToEffect: external_exports.record(external_exports.string(), external_exports.string()),
+    uncovered: external_exports.array(external_exports.string()).readonly()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("crop"),
+    stepId: external_exports.enum(CROP_SUPPLY_STEP_IDS),
+    rootLabels: external_exports.array(external_exports.string()).readonly(),
+    parentMacro: external_exports.enum(["vehicle", "person"]),
+    childClass: external_exports.enum(["plate", "face"]),
+    /**
+    * The root's smaller input side, stamped on read by `rootSuppliesOf` from
+    * the model entry — what a step's `minRootInputPx` gate judges. Never
+    * stored by an import.
+    */
+    rootInputPx: external_exports.number().int().positive().optional()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("mask"),
+    stepId: external_exports.enum(MASK_SUPPLY_STEP_IDS)
+  })
+]);
 var ModelCatalogEntrySchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
@@ -17949,6 +17840,35 @@ var ModelCatalogEntrySchema = external_exports.object({
   */
   defaultConfidence: external_exports.number().min(0).max(1).optional(),
   /**
+  * Per-MODEL default of the per-class confidence floors (`minConfidence<Macro>`
+  * on a detector step), keyed by macro class: `{ person: 0.45 }`. A class
+  * absent here runs at the step slider's global default. The same row shape
+  * the floor measurement produces (`model-floors.json`: modelId → floors), so
+  * a measured table is copied in as-is. An operator override is bound to the
+  * model it was made for and does not survive a model change (D738). A custom
+  * / imported model may declare it; without it, the global defaults apply.
+  */
+  defaultClassFloors: external_exports.record(external_exports.string(), external_exports.number().min(0).max(1)).optional(),
+  /**
+  * The inference precision this model's OpenVINO IR needs on an Intel GPU.
+  * Absent ⇒ the device default (f16 on a GPU). Set to `'f32'` for an FP32 IR
+  * that produces invalid output at f16 — measured 2026-10-07 for YOLO26
+  * base IRs (`yolo26s`: 0 true / 146 false positives; `yolo26m*`: NaN
+  * scores) on the Core Ultra iGPU and the N100. Threaded to the pool as
+  * `PoolModelConfig.gpuInferencePrecision`; the pool sets
+  * INFERENCE_PRECISION_HINT on a GPU only. Costs ~60% latency on the GPU.
+  */
+  gpuInferencePrecision: external_exports.enum(["f32", "f16"]).optional(),
+  /**
+  * ROOT detectors only: per supplied step (`animal-classifier`, …), the
+  * minimum DETECTION score from which this root's own fine label (species,
+  * vehicle type — D736 root supply) is taken (D741). Below it the detection
+  * keeps its macro class without the fine label. `1` = never take it from
+  * this root. Absent ⇒ no floor beyond the macro floor. The supplied step's
+  * `minConfidence` slider, bound to the ROOT model, overrides it.
+  */
+  suppliedLabelFloors: external_exports.record(external_exports.string(), external_exports.number().min(0).max(1)).optional(),
+  /**
   * When true, the executor produces a landmark-aligned crop (similarity warp
   * onto the canonical template) before this step runs, instead of a plain
   * axis-aligned bbox crop. Required for face-recognition embedders (ArcFace):
@@ -18010,15 +17930,15 @@ var ModelCatalogEntrySchema = external_exports.object({
   */
   classMap: DetectionCatalogClassMapSchema.optional(),
   /**
-  * The pipeline steps this ROOT detector already does the work of (D715):
-  * its labels name the effect the step exists to produce (`deer` for
-  * `animal-classifier`, `package` for `package-detection`). Derived from the
-  * labelmap by `deriveClassifierFills`, never hand-written; a COCO model
-  * declares none. Whether a declaration is honoured is the step's own
-  * `labelLink` policy (`resolveLabelLink`). `labelToEffect` values are in
-  * `FILLABLE_STEP_VOCABULARIES` (guard `check-label-link-vocabulary`).
+  * The pipeline steps this ROOT detector can supply from its own output
+  * (D730): its labels name a step's effect (`deer` for `animal-classifier`)
+  * or draw a step's box (`license_plate` for `plate-detection`). Computed at
+  * import from THIS model's labelmap by `deriveRootSupplies`, never written
+  * by hand and never assumed per family; a row without it is derived on read
+  * (`rootSuppliesOf`). Whether a camera uses it is the step's own
+  * `useRootModel` flag (`resolveRootSupply`).
   */
-  fillsClassifierEffects: external_exports.array(FillsClassifierEffectSchema).readonly().optional(),
+  suppliesSteps: external_exports.array(RootStepSupplySchema).readonly().optional(),
   /**
   * The model's CLIP feature-space contract (text encoder, dimension, vector
   * index, token window, search floor) — see `clip-model.ts`. Present ONLY on a
@@ -19622,13 +19542,6 @@ var BrokerRtspClientSchema = external_exports.object({
   lastRtpAt: external_exports.number(),
   bytesSent: external_exports.number()
 });
-var BrokerDecodedClientSchema = external_exports.object({
-  tag: external_exports.string(),
-  subscribedAt: external_exports.number(),
-  maxFps: external_exports.number(),
-  framesDelivered: external_exports.number(),
-  framesDropped: external_exports.number()
-});
 var BrokerAudioClientSchema = external_exports.object({
   tag: external_exports.string(),
   subscribedAt: external_exports.number(),
@@ -19721,7 +19634,6 @@ var BrokerEncodedClientSchema = external_exports.object({
 });
 var BrokerClientsSchema = external_exports.object({
   rtsp: external_exports.array(BrokerRtspClientSchema).readonly(),
-  decoded: external_exports.array(BrokerDecodedClientSchema).readonly(),
   audio: external_exports.array(BrokerAudioClientSchema).readonly(),
   encoded: external_exports.array(BrokerEncodedClientSchema).readonly(),
   pipeClients: external_exports.number(),
@@ -20192,11 +20104,7 @@ var streamBrokerCapability = {
     listClients: method(external_exports.object({ brokerId: external_exports.string() }), BrokerClientsSchema),
     killClient: method(external_exports.object({
       brokerId: external_exports.string(),
-      channel: external_exports.enum([
-        "rtsp",
-        "decoded",
-        "audio"
-      ]),
+      channel: external_exports.enum(["rtsp", "audio"]),
       handle: external_exports.string()
     }), external_exports.object({ killed: external_exports.boolean() }), {
       kind: "mutation",
@@ -20295,31 +20203,6 @@ var streamBrokerCapability = {
       maxCount: external_exports.number().int().positive().default(8)
     }), external_exports.array(DecodedAudioChunkSchema).readonly()),
     unsubscribeAudioChunks: method(external_exports.object({ subscriptionId: external_exports.string() }), external_exports.object({ released: external_exports.boolean() }), { kind: "mutation" }),
-    /**
-    * ── Shared-memory frame plane (Phase 5 / D9) ──────────────────────
-    *
-    * The handle-based replacement for the live-object `IStreamBroker.
-    * onDecodedFrame` callback path. A consumer:
-    *
-    *   1. `subscribeFrames({ brokerId, format })` — the broker spins up
-    *      (or reuses) a `frameSink: 'shm'` decoder session producing that
-    *      `format` and returns a `subscriptionId`.
-    *   2. polls `pullFrameHandles({ subscriptionId, maxCount })` — drains
-    *      zero-pixel `FrameHandle[]`; each handle is fed to a
-    *      `FrameRingReader` that opens the named shm segment and reads the
-    *      pixels back zero-copy.
-    *   3. `unsubscribeFrames({ subscriptionId })` on teardown.
-    *
-    * The broker keeps one shm ring per `(brokerId, format)` actually
-    * requested — no broker-side `sharp` conversion. fps throttling is
-    * implicit (latest-wins ring reads drop frames for a slow consumer).
-    */
-    subscribeFrames: method(SubscribeFramesInputSchema, SubscribeFramesResultSchema, { kind: "mutation" }),
-    pullFrameHandles: method(external_exports.object({
-      subscriptionId: external_exports.string(),
-      maxCount: external_exports.number().int().positive().default(4)
-    }), external_exports.array(FrameHandleSchema).readonly()),
-    unsubscribeFrames: method(external_exports.object({ subscriptionId: external_exports.string() }), external_exports.object({ released: external_exports.boolean() }), { kind: "mutation" }),
     setPreBufferDuration: method(external_exports.object({
       brokerId: external_exports.string(),
       seconds: external_exports.number().min(0).max(30)
@@ -21799,67 +21682,255 @@ var dataStoreProviderCapability = {
     })
   }
 };
-var ShmRingStatsSchema = external_exports.object({
-  sessionId: external_exports.string(),
-  slotCount: external_exports.number().int(),
-  slotByteLength: external_exports.number().int(),
-  segmentBytes: external_exports.number().int(),
-  budgetMb: external_exports.number().int(),
-  framesWritten: external_exports.number().int(),
-  getFrameHits: external_exports.number().int(),
-  getFrameMisses: external_exports.number().int()
-});
+var KeychainUnavailableReasonSchema = external_exports.enum([
+  "key-missing",
+  "wrong-key",
+  "key-file-unreadable",
+  "store-unavailable",
+  "not-initialized",
+  "decrypt-failed"
+]);
+var KeychainStateSchema = external_exports.discriminatedUnion("state", [external_exports.object({ state: external_exports.literal("ready") }), external_exports.object({
+  state: external_exports.literal("locked"),
+  reason: KeychainUnavailableReasonSchema
+})]);
+var KeychainResolveEntrySchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("value"),
+    value: external_exports.string(),
+    version: external_exports.number().int()
+  }),
+  external_exports.object({ kind: external_exports.literal("missing") }),
+  external_exports.object({
+    kind: external_exports.literal("unavailable"),
+    reason: KeychainUnavailableReasonSchema
+  }),
+  external_exports.object({ kind: external_exports.literal("forbidden") })
+]);
+var KeychainResolveResultSchema = external_exports.record(external_exports.string(), KeychainResolveEntrySchema);
+var KeychainSecretMetaSchema = external_exports.object({
+  ref: external_exports.string(),
+  owner: external_exports.string(),
+  /** Formatted scope (`global`, `node/<id>`, `device/<id>`, …). */
+  scope: external_exports.string(),
+  fieldPath: external_exports.string(),
+  version: external_exports.number().int(),
+  createdAt: external_exports.number(),
+  updatedAt: external_exports.number(),
+  /** `addon:<id>` | `user:<id>` | `system`. */
+  updatedBy: external_exports.string(),
+  /** Coarse — written at most once an hour per ref. `null` = never read. */
+  lastReadAt: external_exports.number().nullable()
+});
+var RefListSchema = external_exports.array(external_exports.string().min(1)).max(512);
+var keychainCapability = {
+  name: "keychain",
+  scope: "system",
+  mode: "singleton",
+  internal: true,
+  methods: {
+    /** Store (or replace) the caller's value at `ref`. Refused while locked. */
+    put: method(external_exports.object({
+      ref: external_exports.string().min(1),
+      value: external_exports.string().min(1)
+    }), external_exports.object({
+      ref: external_exports.string(),
+      version: external_exports.number().int()
+    }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Resolve the caller's refs in one round-trip. A locked keychain answers
+    * `unavailable` per ref — never `missing`, never an empty value.
+    */
+    resolve: method(external_exports.object({ refs: RefListSchema }), KeychainResolveResultSchema, { auth: "admin" }),
+    /** Remove the caller's refs. Unknown refs are ignored. */
+    delete: method(external_exports.object({ refs: RefListSchema }), external_exports.object({ deleted: external_exports.number().int() }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** The caller's own refs, metadata only. */
+    listMeta: method(external_exports.object({}), external_exports.array(KeychainSecretMetaSchema).readonly(), { auth: "admin" }),
+    /** Whether values can be served — the save path refuses a write while locked. */
+    getState: method(external_exports.object({}), KeychainStateSchema, { auth: "admin" })
+  }
+};
+var KeychainKeySourceKindSchema = external_exports.enum([
+  "config-file",
+  "previous-config-file",
+  "platform",
+  "default-file"
+]);
+var KeychainKeySourceSchema = external_exports.object({
+  kind: KeychainKeySourceKindSchema,
+  /** File sources only — a path is not a secret. */
+  path: external_exports.string().optional(),
+  /**
+  * True when a whole-volume backup of the data directory carries this key
+  * next to the database it protects (the default file). The page warns.
+  */
+  sharesBackupWithDatabase: external_exports.boolean()
+});
+var KeychainStatusSchema = external_exports.object({
+  keychain: KeychainStateSchema,
+  /** The source of the master key in use; `null` while locked. */
+  keySource: KeychainKeySourceSchema.nullable(),
+  /** The source configured to be primary — differs from `keySource` while a rotation is pending. */
+  configuredSource: KeychainKeySourceSchema,
+  /** Short fingerprint of the master key in use (`HMAC(KEK, label)`, 16 hex). */
+  fingerprint: external_exports.string().nullable(),
+  activeKeyId: external_exports.string().nullable(),
+  /**
+  * The keychain unlocked with a NON-primary source: the configured primary
+  * key is not the one that wraps the data key yet. `rotateMasterKey` moves it.
+  */
+  rotationPending: external_exports.boolean(),
+  /** Wrapped copies of the data key under a previous master key, kept until purged. */
+  retiredWraps: external_exports.number().int(),
+  recoveryKeyDownloadedAt: external_exports.number().nullable(),
+  secretCount: external_exports.number().int()
+});
+var KeychainSecretUsageSchema = external_exports.enum([
+  "in-use",
+  "orphan",
+  "unknown"
+]);
+var KeychainAdminSecretSchema = KeychainSecretMetaSchema.extend({ usage: KeychainSecretUsageSchema });
+var KeychainAuditActionSchema = external_exports.enum([
+  "put",
+  "delete",
+  "reveal",
+  "rotate-master-key",
+  "purge-retired-keys",
+  "download-recovery-key",
+  "delete-orphans",
+  "reset",
+  "initialize"
+]);
+var KeychainAuditEntrySchema = external_exports.object({
+  id: external_exports.string(),
+  at: external_exports.number(),
+  action: KeychainAuditActionSchema,
+  /** `addon:<id>` | `user:<id>` | `system`. */
+  actor: external_exports.string(),
+  ref: external_exports.string().nullable(),
+  detail: external_exports.string().nullable()
+});
+var KEYCHAIN_RESET_CONFIRMATION = "RESET KEYCHAIN";
+var SystemHeldSecretNameSchema = external_exports.enum(["jwt-signing-key"]);
+var keychainAdminCapability = {
+  name: "keychain-admin",
+  scope: "system",
+  mode: "singleton",
+  methods: {
+    status: method(external_exports.object({}), KeychainStatusSchema, { auth: "admin" }),
+    listSecrets: method(external_exports.object({}), external_exports.array(KeychainAdminSecretSchema).readonly(), { auth: "admin" }),
+    listAudit: method(external_exports.object({ limit: external_exports.number().int().min(1).max(500).optional() }), external_exports.array(KeychainAuditEntrySchema).readonly(), { auth: "admin" }),
+    /**
+    * Show one value to the operator. Audited. The UI hides it again after a
+    * few seconds; nothing caches it.
+    */
+    reveal: method(external_exports.object({ ref: external_exports.string().min(1) }), external_exports.object({
+      value: external_exports.string(),
+      version: external_exports.number().int()
+    }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    /**
+    * Replace a system-held secret (no form edits it) with an operator-supplied
+    * value — e.g. importing the session signing key a pre-keychain hub kept in
+    * config.yaml, so the tokens it signed stay valid. Audited as the operator.
+    * Replacing the session signing key invalidates every token signed with the
+    * previous one.
+    */
+    setSystemSecret: method(external_exports.object({
+      name: SystemHeldSecretNameSchema,
+      value: external_exports.string().min(16)
+    }), external_exports.object({
+      ref: external_exports.string(),
+      version: external_exports.number().int()
+    }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    /** Delete refs no owner points at any more. Re-checked here; `unknown` is kept. */
+    deleteOrphans: method(external_exports.object({ refs: external_exports.array(external_exports.string().min(1)).max(1e3) }), external_exports.object({
+      deleted: external_exports.array(external_exports.string()).readonly(),
+      kept: external_exports.array(external_exports.object({
+        ref: external_exports.string(),
+        usage: KeychainSecretUsageSchema
+      })).readonly()
+    }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    /**
+    * Wrap the data key under the configured primary master key.
+    *
+    * Pending rotation (the keychain unlocked with a previous source): re-wrap
+    * under the primary. Otherwise, with the default file as primary: generate
+    * a new master key, write it there, re-wrap. A file or OS-keychain primary
+    * that is already in use cannot be replaced from here — put the new key at
+    * the source, keep the old one as `keychain.previousKeyFile`, restart, and
+    * rotate. No value is re-encrypted either way; the previous wrap is kept
+    * (retired) until purged.
+    */
+    rotateMasterKey: method(external_exports.object({}), external_exports.object({
+      fingerprint: external_exports.string(),
+      keySource: KeychainKeySourceSchema
+    }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    purgeRetiredKeys: method(external_exports.object({}), external_exports.object({ purged: external_exports.number().int() }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    /** The master key, base64. Audited; marks the recovery copy as taken. */
+    downloadRecoveryKey: method(external_exports.object({}), external_exports.object({
+      key: external_exports.string(),
+      fingerprint: external_exports.string(),
+      keySource: KeychainKeySourceSchema
+    }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    /**
+    * Lost-key recovery: archive every stored value into a
+    * `keychain:secrets-orphaned-<ts>` table and start over with a new data
+    * key. Every secret field then reads "not set". Requires the typed
+    * confirmation {@link KEYCHAIN_RESET_CONFIRMATION}.
+    */
+    resetKeychain: method(external_exports.object({ confirm: external_exports.literal(KEYCHAIN_RESET_CONFIRMATION) }), external_exports.object({
+      archivedCollection: external_exports.string().nullable(),
+      archived: external_exports.number().int()
+    }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    })
+  }
+};
 var decoderCapability = {
   name: "decoder",
   scope: "system",
   mode: "singleton",
   preferredProvider: "decoder-nodeav",
   methods: {
-    supportsCodec: method(external_exports.object({ codec: external_exports.string() }), external_exports.boolean()),
     getInfo: method(external_exports.void(), external_exports.object({
       id: external_exports.string(),
       name: external_exports.string(),
-      isPullMode: external_exports.boolean().optional(),
-      priority: external_exports.number().optional(),
       hwaccel: external_exports.string().optional(),
       probedBestHwaccel: external_exports.string().optional()
     })),
-    createSession: method(DecoderSessionConfigSchema, external_exports.object({
-      sessionId: external_exports.string(),
-      nodeId: external_exports.string()
-    })),
-    destroySession: method(external_exports.object({ sessionId: external_exports.string() }), external_exports.void()),
-    pushPacket: method(external_exports.object({
-      sessionId: external_exports.string(),
-      packet: EncodedPacketSchema
-    }), external_exports.void()),
-    openStream: method(external_exports.object({
-      sessionId: external_exports.string(),
-      url: external_exports.string()
-    }), external_exports.void()),
-    pullFrames: method(external_exports.object({
-      sessionId: external_exports.string(),
-      maxCount: external_exports.number().default(1),
-      waitMs: external_exports.number().optional()
-    }), external_exports.array(DecodedFrameSchema)),
-    pullHandles: method(external_exports.object({
-      sessionId: external_exports.string(),
-      maxCount: external_exports.number().default(1),
-      waitMs: external_exports.number().optional()
-    }), external_exports.array(FrameHandleSchema)),
-    getFrame: method(external_exports.object({ handle: FrameHandleSchema }), DecodedFrameSchema.nullable()),
-    getShmStats: method(external_exports.object({ sessionId: external_exports.string() }), ShmRingStatsSchema.nullable()),
-    updateConfig: method(external_exports.object({
-      sessionId: external_exports.string(),
-      config: DecoderSessionConfigSchema.partial()
-    }), external_exports.void()),
-    getStats: method(external_exports.object({ sessionId: external_exports.string() }), DecoderStatsSchema),
-    listActiveSessions: method(external_exports.void(), external_exports.array(external_exports.object({
-      sessionId: external_exports.string(),
-      codec: external_exports.string(),
-      outputFormat: external_exports.string(),
-      createdAtMs: external_exports.number()
-    })).readonly()),
     /**
     * Re-run the host platform-probe for the decoder's hwaccel backend
     * and write the detected value into the addon's own global
@@ -22569,6 +22640,10 @@ var DeviceInfoSchema = external_exports.object({
   isCamera: external_exports.boolean(),
   /** Current config values — serializable snapshot */
   config: external_exports.record(external_exports.string(), external_exports.unknown()),
+  /** Paths inside `config` the device's schema declares secret (D783) —
+  *  what the non-admin redaction withholds. Paths, never values. Absent
+  *  when the owning runner has not reported them. */
+  secretConfigPaths: external_exports.array(external_exports.string()).optional(),
   /** Hardware + identity blob (manufacturer / model / firmware / sn /
   *  uid / mac / …). Populated by drivers; editable via setMetadata. */
   metadata: external_exports.record(external_exports.string(), external_exports.unknown()).nullable().optional(),
@@ -22733,12 +22808,22 @@ var DeviceRegisterPayloadSchema = external_exports.object({
   *  call (workers re-register on init), so probe-driven updates
   *  (e.g. PTZ flag flipping after the abilities probe) propagate. */
   features: external_exports.array(external_exports.string()).optional(),
-  config: external_exports.record(external_exports.string(), external_exports.unknown())
+  config: external_exports.record(external_exports.string(), external_exports.unknown()),
+  /** Config paths the device's own schema DECLARES secret
+  *  (`.meta({ secret: true })` — dotted, `[]` for array items, e.g.
+  *  `connection.password`). Re-published on every register; the non-admin
+  *  redaction withholds them at any depth (D783). Optional: an older runner
+  *  omits it and the keyword backstop applies. */
+  secretConfigPaths: external_exports.array(external_exports.string()).optional()
 });
 var DeviceRemovePayloadSchema = external_exports.object({ deviceId: external_exports.number() });
 var DevicePersistConfigPayloadSchema = external_exports.object({
   deviceId: external_exports.number(),
-  data: external_exports.record(external_exports.string(), external_exports.unknown())
+  data: external_exports.record(external_exports.string(), external_exports.unknown()),
+  /** The paths the device's schema declares secret (D783), when the caller
+  *  knows them — those values are kept in the keychain, not the blob (D787).
+  *  Absent: the paths the device last reported at `registerDevice` apply. */
+  secretConfigPaths: external_exports.array(external_exports.string()).optional()
 });
 var MigrateSwitchOutcomeSchema = external_exports.enum([
   "off",
@@ -24219,6 +24304,12 @@ var filesystemBrowseCapability = {
     })
   }
 };
+var HUB_ADDRESS_ROLES = [
+  "appConnections",
+  "notificationTaps",
+  "internal",
+  "publicEndpoint"
+];
 var AI_CAP_TRANSPORT_TIMEOUT_MS = 6e5;
 var AI_MODEL_INSTALL_TIMEOUT_MS = 60 * 6e4;
 var LlmUsageSchema = external_exports.object({
@@ -24970,7 +25061,14 @@ var RedirectLoginMethodSchema = external_exports.object({
   icon: external_exports.string().optional(),
   /** Addon-owned HTTP route the button navigates to (GET). */
   startUrl: external_exports.string(),
-  stage: LoginStageEnum
+  stage: LoginStageEnum,
+  /**
+  * The provider names an external identity a signed-in user can link to
+  * their own account (D782): `auth.listLinkableProviders` /
+  * `beginExternalLink` offer exactly the redirect methods that set this,
+  * whatever their id. Absent / false — a login button only (magic-link).
+  */
+  linkable: external_exports.boolean().optional()
 });
 var WidgetLoginMethodSchema = external_exports.object({
   kind: external_exports.literal("widget"),
@@ -25897,6 +25995,52 @@ var notificationOutputCapability = {
     })
   }
 };
+var MACRO_LABELS = [
+  {
+    id: "person",
+    name: "Person"
+  },
+  {
+    id: "vehicle",
+    name: "Vehicle"
+  },
+  {
+    id: "animal",
+    name: "Animal"
+  },
+  {
+    id: "package",
+    name: "Package"
+  }
+];
+var DETECTION_MACRO_CLASSES = new Set(MACRO_LABELS.map((l) => l.id));
+var COCO_TO_MACRO = {
+  mapping: {
+    person: "person",
+    bicycle: "vehicle",
+    car: "vehicle",
+    motorcycle: "vehicle",
+    airplane: "vehicle",
+    bus: "vehicle",
+    train: "vehicle",
+    truck: "vehicle",
+    boat: "vehicle",
+    bird: "animal",
+    cat: "animal",
+    dog: "animal",
+    horse: "animal",
+    sheep: "animal",
+    cow: "animal",
+    elephant: "animal",
+    bear: "animal",
+    zebra: "animal",
+    giraffe: "animal",
+    suitcase: "package",
+    backpack: "package",
+    handbag: "package"
+  },
+  preserveOriginal: false
+};
 var AUDIO_MACRO_LABELS = [
   {
     id: "speech",
@@ -26555,6 +26699,8 @@ var NcSystemEventKindSchema = external_exports.enum([
   "stream-offline",
   "node-online",
   "node-offline",
+  "node-restarting",
+  "node-updating",
   "node-inference-unavailable",
   "detection-blind",
   "addon-crash-loop",
@@ -27735,7 +27881,13 @@ var NcAlarmModeDelaysSchema = external_exports.object({
   * Absent = false (logged, not sent). Even when true it is not sent when that same sensor
   * is the one that starts the entry delay — the entry-delay notification already names it.
   */
-  notifySensorRewatched: external_exports.boolean().optional()
+  notifySensorRewatched: external_exports.boolean().optional(),
+  /**
+  * D735: notify "ignored" when a sensor this arm bypassed really MOVED while armed (its own
+  * change time is after the arm) and set nothing off. Absent = false (logged, not sent). A
+  * re-sync, a recovery from `unavailable` or a duplicate is never announced, switch or not.
+  */
+  notifySensorIgnored: external_exports.boolean().optional()
 });
 var NcAlarmModeDelaysListSchema = external_exports.array(NcAlarmModeDelaysSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one entry per arm mode" });
 var NcAlarmModeDelaysEditSchema = external_exports.object({
@@ -27749,7 +27901,9 @@ var NcAlarmModeDelaysEditSchema = external_exports.object({
   /** D706: set the switch, or `null` to clear it (back to the default, false). */
   notifyDuringEntryDelay: external_exports.boolean().nullable().optional(),
   /** D706: set the switch, or `null` to clear it (back to the default, false). */
-  notifySensorRewatched: external_exports.boolean().nullable().optional()
+  notifySensorRewatched: external_exports.boolean().nullable().optional(),
+  /** D735: set the switch, or `null` to clear it (back to the default, false). */
+  notifySensorIgnored: external_exports.boolean().nullable().optional()
 });
 var NcAlarmModeDelaysEditListSchema = external_exports.array(NcAlarmModeDelaysEditSchema).max(8).refine(uniqueModes, { message: "modeDelays: at most one edit per arm mode" });
 var NcAlarmNonBlockingEditSchema = external_exports.object({
@@ -28607,8 +28761,8 @@ var DEFAULT_CLUSTER_STEP_MODELS = Object.freeze(Object.fromEntries(CLUSTER_MODEL
 var CLUSTER_STEP_SETTING_FIELDS = [{
   stepId: "face-embedding",
   key: "minLandmarkFaceSize",
-  label: "Min face size for recognition (detection px)",
-  description: "Refuse to embed a face smaller than this IN THE DETECTION FRAME. Applies to every node \u2014 the enrolled gallery is one index, and two admission floors would fill it from two policies. 0 disables the gate.",
+  label: "Min face size to embed (detection-frame px)",
+  description: "Faces smaller than this in the small frame the detector sees are not embedded, so they can never be recognised. Below it the face cannot be aligned reliably and a bad embedding matches everyone. Same value on every node. 0 = no limit.",
   type: "slider",
   min: 0,
   max: 64,
@@ -29298,7 +29452,12 @@ var RetrainMacroClassSchema = external_exports.enum([
   "plate"
 ]);
 var RetrainAnnotationKindSchema = external_exports.enum(["subject", "model_error"]);
-var RetrainAnnotationSourceSchema = external_exports.enum(["operator", "assist"]);
+var RetrainAnnotationSourceSchema = external_exports.enum([
+  "operator",
+  "assist",
+  "pipeline",
+  "llm"
+]);
 var RetrainBboxSchema = external_exports.object({
   x: external_exports.number(),
   y: external_exports.number(),
@@ -29307,7 +29466,8 @@ var RetrainBboxSchema = external_exports.object({
 });
 var RetrainAnnotationSchema = external_exports.object({
   id: external_exports.string(),
-  trackId: external_exports.string(),
+  /** The frame's track. Absent on a recording still, which has none. */
+  trackId: external_exports.string().optional(),
   deviceId: external_exports.number(),
   /** The COPY in retrain storage — never the source track's media key. */
   mediaKey: external_exports.string(),
@@ -29353,17 +29513,50 @@ var RetrainFrameCandidateSchema = external_exports.object({
   *  fail, whatever became of the original. */
   copied: external_exports.boolean()
 });
+var RetrainPipelineBoxSchema = external_exports.object({
+  /** Normalised `[0,1]` against the full frame. */
+  bbox: RetrainBboxSchema,
+  macroClass: RetrainMacroClassSchema,
+  label: external_exports.string().optional(),
+  subLabel: external_exports.string().optional(),
+  /** The detection score of the position used, when it was recorded. */
+  score: external_exports.number().optional(),
+  /** The root model that produced the track, when it was recorded. */
+  modelId: external_exports.string().optional(),
+  trackId: external_exports.string(),
+  /** `subject-box`: recorded on this very frame. `position`: the track's
+  *  position nearest the capture time, `deltaMs` away. */
+  basis: external_exports.enum(["subject-box", "position"]),
+  deltaMs: external_exports.number()
+});
+var RetrainFrameOriginSchema = external_exports.enum(["track", "recording"]);
 var RetrainFrameSchema = external_exports.object({
   frameId: external_exports.string(),
   deviceId: external_exports.number(),
-  trackId: external_exports.string(),
-  /** Provenance only. It may already point at nothing — that is expected. */
-  sourceMediaId: external_exports.number().int(),
+  origin: RetrainFrameOriginSchema,
+  /** The track it was copied from. Absent on a recording still. */
+  trackId: external_exports.string().optional(),
+  /** Provenance only. It may already point at nothing — that is expected.
+  *  Absent on a recording still. */
+  sourceMediaId: external_exports.number().int().optional(),
+  /** A recording still: the playhead instant it was taken at. */
+  epochMs: external_exports.number().optional(),
   sourceKind: MediaFileKindEnum,
   sizeBytes: external_exports.number().int(),
   width: external_exports.number().int(),
   height: external_exports.number().int(),
-  copiedAt: external_exports.number()
+  copiedAt: external_exports.number(),
+  /** When the CAMERA captured the frame. Absent on a copy taken before D785. */
+  capturedAt: external_exports.number().optional(),
+  /** The operator's "every subject in this frame is boxed". Detector
+  *  evaluation keeps only complete frames: an unboxed subject would count as
+  *  a false positive. */
+  complete: external_exports.boolean(),
+  /** The boxes the pipeline drew on this frame. Present on list answers;
+  *  empty when nothing the track store holds can be placed on it. */
+  pipelineBoxes: external_exports.array(RetrainPipelineBoxSchema).readonly().optional(),
+  /** The named collections this frame belongs to. Present on list answers. */
+  collectionIds: external_exports.array(external_exports.string()).readonly().optional()
 });
 var RetrainCopyRefusalSchema = external_exports.enum([
   "source-missing",
@@ -29383,6 +29576,38 @@ var RetrainFrameListSchema = external_exports.object({
   /** What the page pre-selects — the native key frame when one survives. */
   autoPickMediaId: external_exports.number().int().optional()
 });
+var RetrainExportFilterSchema = external_exports.object({
+  deviceIds: external_exports.array(external_exports.number()).optional(),
+  frameIds: external_exports.array(external_exports.string()).max(2e4).optional(),
+  /** Only frames in at least one of these named collections. */
+  collectionIds: external_exports.array(external_exports.string()).max(200).optional(),
+  /** Exactly the frames of this dataset version (and its completeOnly). An
+  *  unknown id selects nothing. */
+  datasetVersionId: external_exports.string().optional(),
+  batchId: external_exports.string().optional(),
+  /** Only frames the operator marked complete (all subjects boxed). */
+  completeOnly: external_exports.boolean().optional()
+});
+var RetrainExportLayoutSchema = external_exports.enum(["frames", "crops"]);
+var RetrainArchiveTargetSchema = external_exports.object({
+  kind: external_exports.literal("http"),
+  method: external_exports.enum(["PUT", "POST"]),
+  url: external_exports.string().url(),
+  headers: external_exports.record(external_exports.string(), external_exports.string()).optional()
+});
+var RetrainArchiveResultSchema = external_exports.object({
+  batchId: external_exports.string(),
+  frames: external_exports.number().int(),
+  crops: external_exports.number().int(),
+  annotations: external_exports.number().int(),
+  /** Frames planned but not shipped (unreadable copy, path too long). */
+  missing: external_exports.number().int(),
+  bytes: external_exports.number().int(),
+  /** sha256 of the exact bytes sent. */
+  sha256: external_exports.string(),
+  /** The target's HTTP status. */
+  status: external_exports.number().int()
+});
 var RetrainAssistSubjectSchema = external_exports.discriminatedUnion("kind", [external_exports.object({
   kind: external_exports.literal("package"),
   zone: RetrainBboxSchema.optional()
@@ -29406,6 +29631,151 @@ var RetrainAssistResultSchema = external_exports.discriminatedUnion("kind", [ext
   reason: external_exports.string(),
   detail: external_exports.string().optional()
 })]);
+var RetrainCollectionSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  createdAt: external_exports.number(),
+  frameCount: external_exports.number().int()
+});
+var RetrainCollectionCreateResultSchema = external_exports.discriminatedUnion("kind", [external_exports.object({
+  kind: external_exports.literal("created"),
+  collection: RetrainCollectionSchema
+}), external_exports.object({
+  kind: external_exports.literal("refused"),
+  reason: external_exports.enum(["empty-name", "duplicate-name"])
+})]);
+var RetrainCollectionRenameResultSchema = external_exports.discriminatedUnion("kind", [external_exports.object({
+  kind: external_exports.literal("renamed"),
+  collection: RetrainCollectionSchema
+}), external_exports.object({
+  kind: external_exports.literal("refused"),
+  reason: external_exports.enum([
+    "empty-name",
+    "duplicate-name",
+    "unknown-collection"
+  ])
+})]);
+var AddRetrainFrameFromRecordingResultSchema = external_exports.discriminatedUnion("kind", [external_exports.object({
+  kind: external_exports.literal("added"),
+  collectionId: external_exports.string(),
+  frame: RetrainFrameSchema,
+  /** The moment was already in the dataset; nothing was decoded. */
+  reused: external_exports.boolean()
+}), external_exports.object({
+  kind: external_exports.literal("refused"),
+  reason: external_exports.enum([
+    "unknown-collection",
+    "still-unavailable",
+    "still-busy",
+    "unreadable-image",
+    "write-failed"
+  ]),
+  detail: external_exports.string().optional()
+})]);
+var RetrainAssistProfileSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  model: external_exports.string(),
+  kind: external_exports.string(),
+  /** `true` when the frame would leave the house (a cloud vendor, or an
+  *  endpoint that is not on the local network). The page confirms each such
+  *  run, and the provider refuses one without `allowCloud`. */
+  leavesHouse: external_exports.boolean()
+});
+var RetrainLlmProposalSchema = RetrainAnnotationDraftSchema.extend({ reason: external_exports.string() });
+var RetrainLlmReviewSchema = external_exports.object({
+  /** The `ref` the page sent the box under. */
+  ref: external_exports.string(),
+  verdict: external_exports.enum([
+    "confirmed",
+    "wrong-class",
+    "not-an-object",
+    "uncertain"
+  ]),
+  suggestedClass: RetrainMacroClassSchema.optional(),
+  reason: external_exports.string()
+});
+var RetrainLlmAssistResultSchema = external_exports.discriminatedUnion("kind", [external_exports.object({
+  kind: external_exports.literal("proposed"),
+  profileId: external_exports.string(),
+  model: external_exports.string(),
+  /** The frame was sent outside the house for this answer. */
+  leftHouse: external_exports.boolean(),
+  proposals: external_exports.array(RetrainLlmProposalSchema).readonly(),
+  reviews: external_exports.array(RetrainLlmReviewSchema).readonly(),
+  rejected: external_exports.number().int()
+}), external_exports.object({
+  kind: external_exports.literal("refused"),
+  reason: external_exports.enum([
+    "unknown-frame",
+    "unreadable-frame",
+    "unknown-profile",
+    "profile-disabled",
+    "no-vision",
+    "cloud-not-confirmed",
+    "llm-error",
+    "malformed-answer"
+  ]),
+  detail: external_exports.string().optional()
+})]);
+var RetrainDatasetSelectionSchema = external_exports.object({
+  deviceIds: external_exports.array(external_exports.number()).readonly().optional(),
+  collectionIds: external_exports.array(external_exports.string()).max(200).readonly().optional(),
+  frameIds: external_exports.array(external_exports.string()).max(2e4).readonly().optional()
+});
+var RetrainDatasetStatsSchema = external_exports.object({
+  frames: external_exports.number().int(),
+  completeFrames: external_exports.number().int(),
+  /** `completeFrames / frames`, 0..1. */
+  completeness: external_exports.number(),
+  /** Boxes to learn (model errors excluded). */
+  subjects: external_exports.number().int(),
+  modelErrors: external_exports.number().int(),
+  /** Complete frames with no subject. */
+  hardNegatives: external_exports.number().int(),
+  /** Subjects per class × camera × day/night. */
+  cells: external_exports.array(external_exports.object({
+    macroClass: external_exports.string(),
+    deviceId: external_exports.number(),
+    lighting: external_exports.enum([
+      "day",
+      "night",
+      "unknown"
+    ]),
+    subjects: external_exports.number().int(),
+    frames: external_exports.number().int()
+  })).readonly(),
+  cameras: external_exports.array(external_exports.object({
+    deviceId: external_exports.number(),
+    frames: external_exports.number().int(),
+    completeFrames: external_exports.number().int()
+  })).readonly()
+});
+var RetrainDatasetVersionSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  createdAt: external_exports.number(),
+  selection: RetrainDatasetSelectionSchema,
+  layout: RetrainExportLayoutSchema,
+  completeOnly: external_exports.boolean(),
+  frameCount: external_exports.number().int(),
+  /** sha256 of what the frames taught when the version was frozen. */
+  annotationHash: external_exports.string(),
+  /** The export manifest schema the version was cut under. */
+  manifestSchema: external_exports.string(),
+  stats: RetrainDatasetStatsSchema
+});
+var CreateRetrainDatasetVersionResultSchema = external_exports.discriminatedUnion("kind", [external_exports.object({
+  kind: external_exports.literal("created"),
+  version: RetrainDatasetVersionSchema
+}), external_exports.object({
+  kind: external_exports.literal("refused"),
+  reason: external_exports.enum([
+    "empty-name",
+    "duplicate-name",
+    "no-frames"
+  ])
+})]);
 var RetrainTransitionResultSchema = external_exports.object({
   trackId: external_exports.string(),
   /** Where the track ended up, whatever happened. */
@@ -30467,7 +30837,7 @@ var pipelineAnalyticsCapability = {
     *  a frame leaves the dataset before export. */
     deselectRetrainFrame: method(external_exports.object({
       deviceId: external_exports.number(),
-      trackId: external_exports.string(),
+      trackId: external_exports.string().optional(),
       frameId: external_exports.string()
     }), external_exports.object({
       removed: external_exports.boolean(),
@@ -30510,7 +30880,8 @@ var pipelineAnalyticsCapability = {
     */
     proposeRetrainAnnotations: method(external_exports.object({
       deviceId: external_exports.number(),
-      trackId: external_exports.string(),
+      /** The frame's track, when it has one — checked against the frame. */
+      trackId: external_exports.string().optional(),
       frameId: external_exports.string(),
       subject: RetrainAssistSubjectSchema,
       /** Which node runs it. Absent ⇒ wherever an unowned call lands. */
@@ -30519,8 +30890,12 @@ var pipelineAnalyticsCapability = {
       kind: "mutation",
       auth: "admin"
     }),
-    /** Every annotation on a track, oldest first. */
-    listRetrainAnnotations: method(external_exports.object({ trackId: external_exports.string() }), external_exports.array(RetrainAnnotationSchema).readonly(), {
+    /** Every annotation on a track, or on named frames (a recording still has
+    *  no track), oldest first. One of the two is required. */
+    listRetrainAnnotations: method(external_exports.object({
+      trackId: external_exports.string().optional(),
+      frameIds: external_exports.array(external_exports.string()).max(2e3).optional()
+    }), external_exports.array(RetrainAnnotationSchema).readonly(), {
       kind: "query",
       auth: "admin"
     }),
@@ -30539,7 +30914,8 @@ var pipelineAnalyticsCapability = {
     */
     saveRetrainAnnotations: method(external_exports.object({
       deviceId: external_exports.number(),
-      trackId: external_exports.string(),
+      /** The frame's track, when it has one — checked against the frame. */
+      trackId: external_exports.string().optional(),
       frameId: external_exports.string(),
       annotations: external_exports.array(RetrainAnnotationDraftSchema)
     }), external_exports.array(RetrainAnnotationSchema).readonly(), {
@@ -30591,7 +30967,193 @@ var pipelineAnalyticsCapability = {
     * out, so two crops of the same subject can never end up in one feature
     * space (D52).
     */
-    getRetrainExportUrl: method(external_exports.object({ deviceIds: external_exports.array(external_exports.number()).optional() }), external_exports.object({ url: external_exports.string() }), {
+    getRetrainExportUrl: method(RetrainExportFilterSchema.extend({ layout: RetrainExportLayoutSchema.optional() }), external_exports.object({ url: external_exports.string() }), {
+      kind: "query",
+      auth: "admin"
+    }),
+    /**
+    * The operator's "every subject in this frame is boxed" — set and cleared
+    * by hand, never derived: a frame with no box may be a complete hard
+    * negative, and a frame with three boxes may still miss a fourth person.
+    */
+    setRetrainFrameComplete: method(external_exports.object({
+      deviceId: external_exports.number(),
+      trackId: external_exports.string().optional(),
+      frameId: external_exports.string(),
+      complete: external_exports.boolean()
+    }), RetrainFrameSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Stream the annotated archive to a TARGET instead of a browser — the
+    * same tar `getRetrainExportUrl` serves (manifest first, one JPEG in
+    * memory at a time, paced), written chunk by chunk into one HTTP request.
+    * The bytes never cross this cap and never land on the hub's disk; the
+    * answer is what was sent, with its sha256.
+    */
+    writeRetrainArchive: method(external_exports.object({
+      filter: RetrainExportFilterSchema,
+      layout: RetrainExportLayoutSchema,
+      target: RetrainArchiveTargetSchema
+    }), RetrainArchiveResultSchema, {
+      kind: "mutation",
+      auth: "admin",
+      timeoutMs: 60 * 6e4
+    }),
+    /** The counts a selection would freeze — class × camera × day/night,
+    *  completeness — without freezing anything. Index reads only. */
+    previewRetrainDataset: method(external_exports.object({
+      selection: RetrainDatasetSelectionSchema,
+      completeOnly: external_exports.boolean().optional()
+    }), RetrainDatasetStatsSchema, {
+      kind: "query",
+      auth: "admin"
+    }),
+    /**
+    * Freeze a dataset version: the frames the selection yields (the same plan
+    * the annotated export builds), the hash of what they teach, the export
+    * parameters and the counts. Immutable — a different selection is a new
+    * version. Export it with `getRetrainExportUrl({ datasetVersionId })`.
+    */
+    createRetrainDatasetVersion: method(external_exports.object({
+      name: external_exports.string().max(120),
+      selection: RetrainDatasetSelectionSchema,
+      layout: RetrainExportLayoutSchema,
+      completeOnly: external_exports.boolean()
+    }), CreateRetrainDatasetVersionResultSchema, {
+      kind: "mutation",
+      auth: "admin",
+      timeoutMs: 12e4
+    }),
+    /** Every dataset version, newest first. */
+    listRetrainDatasetVersions: method(external_exports.object({}), external_exports.array(RetrainDatasetVersionSchema).readonly(), {
+      kind: "query",
+      auth: "admin"
+    }),
+    /** Delete a version. Its frames stay in the dataset. */
+    deleteRetrainDatasetVersion: method(external_exports.object({ id: external_exports.string() }), external_exports.object({ deleted: external_exports.boolean() }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Does the corpus still teach what the version froze? `missingFrames`
+    *  counts frames that left the dataset (or lost every box and tick). */
+    verifyRetrainDatasetVersion: method(external_exports.object({ id: external_exports.string() }), external_exports.object({
+      found: external_exports.boolean(),
+      annotationHash: external_exports.string(),
+      matches: external_exports.boolean(),
+      missingFrames: external_exports.number().int()
+    }), {
+      kind: "query",
+      auth: "admin",
+      timeoutMs: 12e4
+    }),
+    /** The enabled, vision-capable LLM profiles, each saying whether a frame
+    *  sent to it leaves the house. */
+    listRetrainAssistProfiles: method(external_exports.object({}), external_exports.array(RetrainAssistProfileSchema).readonly(), {
+      kind: "query",
+      auth: "admin"
+    }),
+    /**
+    * Ask a vision LLM (the `llm` capability) about ONE copied frame: list the
+    * objects of `classes` with boxes, and review the boxes already on the
+    * canvas (sent by `ref`). Answers drafts (`source: 'llm'`) and reviews —
+    * nothing is stored, nothing is accepted. A profile that sends the frame
+    * outside the house is refused unless `allowCloud` says the operator
+    * confirmed this run.
+    */
+    proposeRetrainAnnotationsWithLlm: method(external_exports.object({
+      deviceId: external_exports.number(),
+      trackId: external_exports.string().optional(),
+      frameId: external_exports.string(),
+      profileId: external_exports.string(),
+      classes: external_exports.array(RetrainMacroClassSchema).min(1),
+      boxes: external_exports.array(external_exports.object({
+        ref: external_exports.string(),
+        bbox: RetrainBboxSchema,
+        macroClass: RetrainMacroClassSchema,
+        label: external_exports.string().optional()
+      })).max(50),
+      allowCloud: external_exports.boolean()
+    }), RetrainLlmAssistResultSchema, {
+      kind: "mutation",
+      auth: "admin",
+      timeoutMs: 18e4
+    }),
+    /**
+    * Create a named collection — a set over the retrain corpus ("packages
+    * porch night"). Names are unique case-insensitively and never empty;
+    * both refusals are named.
+    */
+    createRetrainCollection: method(external_exports.object({ name: external_exports.string().max(120) }), RetrainCollectionCreateResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Every collection, newest first, with its frame count. */
+    listRetrainCollections: method(external_exports.object({}), external_exports.array(RetrainCollectionSchema).readonly(), {
+      kind: "query",
+      auth: "admin"
+    }),
+    renameRetrainCollection: method(external_exports.object({
+      id: external_exports.string(),
+      name: external_exports.string().max(120)
+    }), RetrainCollectionRenameResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Delete a collection. Its recording stills that no other collection
+    * holds are deleted with their annotations (nothing else reaches them);
+    * frames copied from tracks always stay in the dataset.
+    */
+    deleteRetrainCollection: method(external_exports.object({ id: external_exports.string() }), external_exports.object({
+      deleted: external_exports.boolean(),
+      removedFrames: external_exports.number().int()
+    }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Add the frame at a recording instant to a collection — the frame the
+    * model may have seen NOTHING in. The recorder re-decodes the native
+    * frame at `epochMs`; the dataset copies it (trackless, durable). The same
+    * moment twice is one copy. Every refusal is named.
+    */
+    addRetrainFrameFromRecording: method(external_exports.object({
+      collectionId: external_exports.string(),
+      deviceId: external_exports.number(),
+      epochMs: external_exports.number()
+    }), AddRetrainFrameFromRecordingResultSchema, {
+      kind: "mutation",
+      auth: "admin",
+      timeoutMs: 6e4
+    }),
+    /** Add frames already in the dataset to a collection. */
+    addRetrainFramesToCollection: method(external_exports.object({
+      collectionId: external_exports.string(),
+      frameIds: external_exports.array(external_exports.string()).min(1).max(500)
+    }), external_exports.object({
+      added: external_exports.number().int(),
+      alreadyMember: external_exports.number().int(),
+      unknownFrameIds: external_exports.array(external_exports.string()).readonly()
+    }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Remove a frame from a collection. A recording still left in no
+    *  collection is deleted with its annotations (`deletedFrame`). */
+    removeRetrainFrameFromCollection: method(external_exports.object({
+      collectionId: external_exports.string(),
+      frameId: external_exports.string()
+    }), external_exports.object({
+      removed: external_exports.boolean(),
+      deletedFrame: external_exports.boolean()
+    }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** The frames of a collection, with their pipeline boxes. */
+    listRetrainCollectionFrames: method(external_exports.object({ collectionId: external_exports.string() }), external_exports.array(RetrainFrameSchema).readonly(), {
       kind: "query",
       auth: "admin"
     }),
@@ -30758,6 +31320,30 @@ var pipelineAnalyticsCapability = {
     }) }
   }
 };
+var SuppliedRootOutputSchema = external_exports.object({
+  stepId: external_exports.string(),
+  /** The root model that drew the boxes — stamped on the result. */
+  modelId: external_exports.string(),
+  detections: external_exports.array(external_exports.object({
+    /** `[x1, y1, x2, y2]` in the pixels of the call's image. */
+    bbox: external_exports.tuple([
+      external_exports.number(),
+      external_exports.number(),
+      external_exports.number(),
+      external_exports.number()
+    ]),
+    score: external_exports.number(),
+    /**
+    * Five facial landmarks in the same pixels — a face the step's own
+    * detector already re-found inside a root face box (D730), so its
+    * embedder child aligns it exactly as it aligns any detected face.
+    */
+    landmarks: external_exports.array(external_exports.object({
+      x: external_exports.number(),
+      y: external_exports.number()
+    })).optional()
+  })).min(1)
+});
 var NativeCropRefSchema = external_exports.object({
   /** Handle keying the retained native surface (node-pinned to its owner). */
   handle: FrameHandleSchema,
@@ -30796,7 +31382,7 @@ var FrameRefSchema = external_exports.object({
   timestamp: external_exports.number(),
   capturedAt: external_exports.number().optional()
 });
-var ModelFormatSchema$1 = external_exports.enum([
+var ModelFormatSchema$2 = external_exports.enum([
   "onnx",
   "coreml",
   "openvino",
@@ -30814,7 +31400,7 @@ var PipelineSlotSchema = external_exports.enum([
 var PipelineEngineChoiceSchema = external_exports.object({
   runtime: external_exports.literal("python"),
   backend: external_exports.string(),
-  format: ModelFormatSchema$1,
+  format: ModelFormatSchema$2,
   device: external_exports.string().optional()
 });
 var EffectiveTuningSchema = external_exports.object({
@@ -30848,33 +31434,15 @@ var PipelineDefaultStepSchema = external_exports.lazy(() => external_exports.obj
   group: external_exports.string().optional(),
   settings: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 }));
-var PipelineTemplateStepSchema = external_exports.lazy(() => external_exports.object({
-  addonId: external_exports.string(),
-  enabled: external_exports.boolean(),
-  modelId: external_exports.string(),
-  children: external_exports.array(PipelineTemplateStepSchema).readonly(),
-  settings: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
-}));
-var PipelineTemplateSchema$1 = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  createdAt: external_exports.string(),
-  updatedAt: external_exports.string(),
-  engine: PipelineEngineChoiceSchema,
-  steps: external_exports.array(PipelineTemplateStepSchema).readonly()
-});
 var PipelineModelOptionSchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
-  formats: external_exports.record(external_exports.string(), external_exports.object({
-    downloaded: external_exports.boolean(),
-    sizeMB: external_exports.number()
-  })),
+  formats: external_exports.record(external_exports.string(), PipelineModelFormatStatusSchema),
   group: ModelVariantGroupSchema.optional(),
   legacy: external_exports.boolean().optional(),
   provider: ModelProviderIdSchema.optional(),
   defaultConfidence: external_exports.number().optional(),
-  fillsClassifierEffects: external_exports.array(FillsClassifierEffectSchema).readonly().optional()
+  suppliesSteps: external_exports.array(RootStepSupplySchema).readonly().optional()
 });
 var ConfigFieldBridge = external_exports.custom();
 var PipelineAddonSchemaSchema = external_exports.object({
@@ -31062,6 +31630,32 @@ var pipelineExecutorCapability = {
       auth: "admin"
     }),
     /**
+    * Auto tune (D745): the MODEL-BOUND thresholds (`bindsToModel` keys of
+    * the object-detection root, and their binding keys) stored in THIS node's
+    * per-camera detector settings — and, unless `dryRun`, remove them so the
+    * running model's own defaults apply. Every other key of a camera's store
+    * is kept. `nodeId` is the ROUTING key. `deviceIds` absent ⇒ every camera
+    * with a store. A camera whose store could not be read is `refused`, never
+    * reported as clean.
+    */
+    clearModelBoundDeviceOverrides: method(external_exports.object({
+      nodeId: external_exports.string(),
+      deviceIds: external_exports.array(external_exports.number()).readonly().optional(),
+      dryRun: external_exports.boolean()
+    }), external_exports.object({
+      entries: external_exports.array(external_exports.object({
+        deviceId: external_exports.number(),
+        keys: external_exports.array(external_exports.string()).readonly()
+      })).readonly(),
+      refused: external_exports.array(external_exports.object({
+        deviceId: external_exports.number(),
+        reason: external_exports.string()
+      })).readonly()
+    }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
     * Which of THIS node's inference devices the executor currently refuses,
     * and why. `nodeId` is the ROUTING key (stripped by the generated router).
     *
@@ -31139,29 +31733,17 @@ var pipelineExecutorCapability = {
       steps: external_exports.array(PipelineStepInputSchema),
       deviceKey: external_exports.string().optional()
     }), PipelineValidationResultSchema),
-    listTemplates: method(external_exports.void(), external_exports.array(PipelineTemplateSchema$1).readonly()),
-    saveTemplate: method(external_exports.object({
-      name: external_exports.string(),
-      steps: external_exports.array(PipelineTemplateStepSchema).readonly(),
-      engine: PipelineEngineChoiceSchema
-    }), PipelineTemplateSchema$1, { kind: "mutation" }),
-    updateTemplate: method(external_exports.object({
-      id: external_exports.string(),
-      name: external_exports.string().optional(),
-      steps: external_exports.array(PipelineTemplateStepSchema).readonly().optional()
-    }), PipelineTemplateSchema$1, { kind: "mutation" }),
-    deleteTemplate: method(external_exports.object({ id: external_exports.string() }), external_exports.void(), { kind: "mutation" }),
     getCapabilities: method(external_exports.void(), InferenceCapabilitiesBridge),
     getAddonModels: method(external_exports.object({ addonId: external_exports.string() }), ModelAvailabilityListBridge),
     downloadModel: method(external_exports.object({
       addonId: external_exports.string(),
       modelId: external_exports.string(),
-      format: ModelFormatSchema$1
+      format: ModelFormatSchema$2
     }), DownloadModelResultSchema, { kind: "mutation" }),
     deleteModel: method(external_exports.object({
       addonId: external_exports.string(),
       modelId: external_exports.string(),
-      format: ModelFormatSchema$1
+      format: ModelFormatSchema$2
     }), external_exports.object({ success: external_exports.literal(true) }), { kind: "mutation" }),
     /**
     * Stateless single-frame execution. Callers (runner, benchmark) pass
@@ -31256,7 +31838,16 @@ var pipelineExecutorCapability = {
       * `device-not-servable`), and nothing reaches the camera's live
       * trace stream. Absent ⇒ unchanged behaviour.
       */
-      replay: external_exports.literal(true).optional()
+      replay: external_exports.literal(true).optional(),
+      /**
+      * Root-supplied detections for the tree's ROOT step (D730). Set by
+      * `runDetailSubtree` when the camera's root model supplies a crop-kind
+      * step (a Frigate+ `license_plate` for `plate-detection`): the step is
+      * NOT inferred, these boxes are its output, and its children (the plate
+      * reader) run on them through their own crop policy. Boxes are in the
+      * PIXELS of the image this call carries. Absent ⇒ the root step runs.
+      */
+      suppliedRoot: SuppliedRootOutputSchema.optional()
     }), PipelineRunResultBridge, { kind: "mutation" }),
     /**
     * Batched run — N raw frames packed into one cap call. The provider
@@ -31398,6 +31989,677 @@ var pipelineExecutorCapability = {
     getDetectionConfigSchema: method(external_exports.void(), ConfigUISchemaNullableBridge)
   }
 };
+var ModelFormatSchema$1 = external_exports.enum(MODEL_FORMATS);
+var MIN_SESSIONS_PER_DEVICE_RANGE = {
+  min: 1,
+  max: 8
+};
+var HardwareClassIdSchema = external_exports.enum([
+  "intel-core-ultra",
+  "intel-n-series",
+  "apple-m-base",
+  "apple-m-pro",
+  "unknown"
+]);
+var AcceleratorKindSchema = external_exports.enum([
+  "intel-npu",
+  "intel-igpu",
+  "x86-cpu",
+  "arm-cpu",
+  "apple-ane",
+  "coral"
+]);
+var RecommendationReasonSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("capacity"),
+    sessions: external_exports.number(),
+    minSessions: external_exports.number()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("tie-faster"),
+    over: external_exports.string(),
+    recallDelta: external_exports.number()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("stepped-down"),
+    from: external_exports.string(),
+    to: external_exports.string(),
+    limitedBy: external_exports.string()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("no-fit-lightest"),
+    sessions: external_exports.number(),
+    minSessions: external_exports.number()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("derived-latency"),
+    modelId: external_exports.string()
+  }),
+  external_exports.object({ kind: external_exports.literal("cpu-device") }),
+  external_exports.object({ kind: external_exports.literal("coral-untouched") }),
+  external_exports.object({ kind: external_exports.literal("device-disabled") }),
+  external_exports.object({ kind: external_exports.literal("device-unavailable") }),
+  external_exports.object({ kind: external_exports.literal("node-offline") }),
+  external_exports.object({ kind: external_exports.literal("no-hardware-facts") }),
+  external_exports.object({
+    kind: external_exports.literal("no-measured-data"),
+    hardwareClass: HardwareClassIdSchema
+  }),
+  external_exports.object({
+    kind: external_exports.literal("no-family-build"),
+    format: ModelFormatSchema$1
+  }),
+  external_exports.object({
+    kind: external_exports.literal("kept-custom-pin"),
+    modelId: external_exports.string(),
+    deviceKey: external_exports.string()
+  })
+]);
+var KeptReasonSchema = external_exports.enum(["custom-pin"]);
+var LatencySourceSchema = external_exports.discriminatedUnion("kind", [external_exports.object({ kind: external_exports.literal("table") }), external_exports.object({
+  kind: external_exports.literal("node-benchmark"),
+  resultId: external_exports.string(),
+  measuredAtMs: external_exports.number()
+})]);
+var DeviceModelChoiceSchema = external_exports.object({
+  modelId: external_exports.string(),
+  p50Ms: external_exports.number(),
+  fps: external_exports.number(),
+  measured: external_exports.boolean(),
+  /** Absent on a plan from before D791 — read as the table. */
+  source: LatencySourceSchema.optional(),
+  /** Parallel sessions at the camera rate with the headroom kept free: ⌊fps × (1 − headroom) / camera fps⌋. */
+  capacitySessions: external_exports.number(),
+  personRecall: external_exports.number()
+});
+var DeviceRecommendationSchema = external_exports.object({
+  deviceKey: external_exports.string(),
+  accelerator: AcceleratorKindSchema.nullable(),
+  enabled: external_exports.boolean(),
+  available: external_exports.boolean(),
+  chosen: DeviceModelChoiceSchema.nullable(),
+  /** Present when the device is kept as is: Apply writes nothing on it. */
+  kept: KeptReasonSchema.optional(),
+  reasons: external_exports.array(RecommendationReasonSchema).readonly()
+});
+var NodeRecommendationSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  reachable: external_exports.boolean(),
+  hardwareClass: HardwareClassIdSchema.nullable(),
+  cpuModel: external_exports.string().nullable(),
+  skipped: external_exports.boolean(),
+  acceleratorModelId: external_exports.string().nullable(),
+  devices: external_exports.array(DeviceRecommendationSchema).readonly(),
+  reasons: external_exports.array(RecommendationReasonSchema).readonly()
+});
+var ModelPinChangeSchema = external_exports.object({
+  stepId: external_exports.string(),
+  before: external_exports.string().nullable(),
+  after: external_exports.string().nullable()
+});
+var NodeDeviceChangeSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  deviceKey: external_exports.string(),
+  madeExplicit: external_exports.boolean(),
+  modelPins: external_exports.array(ModelPinChangeSchema).readonly(),
+  thresholds: external_exports.array(external_exports.object({
+    stepId: external_exports.string(),
+    keys: external_exports.array(external_exports.string()).readonly()
+  })).readonly()
+});
+var CameraOverrideClearSchema = external_exports.object({
+  deviceId: external_exports.number(),
+  source: external_exports.enum(["step-override", "wholesale"]),
+  nodeId: external_exports.string(),
+  deviceKey: external_exports.string().nullable(),
+  stepId: external_exports.string(),
+  modelIdBefore: external_exports.string().nullable(),
+  keys: external_exports.array(external_exports.string()).readonly()
+});
+var DetectorStoreClearSchema = external_exports.object({
+  deviceId: external_exports.number(),
+  keys: external_exports.array(external_exports.string()).readonly()
+});
+var AutoTuneWarningSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("detector-store-cluster-wide"),
+    skippedNodes: external_exports.array(external_exports.string()).readonly()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("detector-store-unreadable"),
+    error: external_exports.string()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("coral-enabled"),
+    nodeId: external_exports.string(),
+    deviceKey: external_exports.string()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("custom-pin-kept"),
+    nodeId: external_exports.string(),
+    deviceKey: external_exports.string().nullable(),
+    deviceId: external_exports.number().nullable(),
+    modelId: external_exports.string()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("custom-registry-unreadable"),
+    error: external_exports.string()
+  })
+]);
+var AutoTuneOptionsSchema = external_exports.object({
+  /** Share of each accelerator's throughput kept free (0.3–0.5). */
+  headroom: external_exports.number().min(0.3).max(0.5).default(0.4),
+  /**
+  * The least number of parallel sessions every device must sustain at the
+  * camera rate with the headroom kept free (D755). The most accurate model
+  * that reaches it wins.
+  */
+  minSessionsPerDevice: external_exports.number().int().min(MIN_SESSIONS_PER_DEVICE_RANGE.min).max(MIN_SESSIONS_PER_DEVICE_RANGE.max).default(2)
+});
+var AutoTunePlanSchema = external_exports.object({
+  /** Hash of everything the apply will write — the apply refuses a different one. */
+  planHash: external_exports.string(),
+  family: external_exports.literal("yolov9"),
+  headroom: external_exports.number(),
+  minSessionsPerDevice: external_exports.number(),
+  /** The detection rate a session is counted at (the fastest camera running the pipeline root). */
+  cameraFps: external_exports.number(),
+  generatedAt: external_exports.number(),
+  nodes: external_exports.array(NodeRecommendationSchema).readonly(),
+  nodeChanges: external_exports.array(NodeDeviceChangeSchema).readonly(),
+  cameraClears: external_exports.array(CameraOverrideClearSchema).readonly(),
+  detectorStoreClears: external_exports.array(DetectorStoreClearSchema).readonly(),
+  warnings: external_exports.array(AutoTuneWarningSchema).readonly()
+});
+var AutoTuneApplyInputSchema = external_exports.object({
+  planHash: external_exports.string(),
+  headroom: external_exports.number().min(0.3).max(0.5).default(0.4),
+  minSessionsPerDevice: external_exports.number().int().min(MIN_SESSIONS_PER_DEVICE_RANGE.min).max(MIN_SESSIONS_PER_DEVICE_RANGE.max).default(2)
+});
+var AutoTunePhaseResultSchema = external_exports.object({
+  phase: external_exports.enum([
+    "download",
+    "camera-overrides",
+    "detector-thresholds",
+    "node-models",
+    "redispatch"
+  ]),
+  ok: external_exports.boolean(),
+  detail: external_exports.string()
+});
+var AutoTuneApplyResultSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("applied"),
+    planHash: external_exports.string(),
+    phases: external_exports.array(AutoTunePhaseResultSchema).readonly()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("aborted"),
+    phases: external_exports.array(AutoTunePhaseResultSchema).readonly()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("stale"),
+    plan: AutoTunePlanSchema
+  }),
+  external_exports.object({
+    kind: external_exports.literal("refused"),
+    reason: external_exports.enum(["apply-in-progress"])
+  })
+]);
+var SessionPlacementPolicySchema = external_exports.enum(["least-loaded", "share"]);
+var LoadBalancingSharesInputSchema = external_exports.object({
+  /** nodeId → share (> 0). A node left out keeps its weight. */
+  nodes: external_exports.record(external_exports.string(), external_exports.number().positive()).default({}),
+  /** nodeId → deviceKey → share (> 0). A device left out keeps its weight. */
+  devices: external_exports.record(external_exports.string(), external_exports.record(external_exports.string(), external_exports.number().positive())).default({})
+});
+var PlacementStatsInputSchema = external_exports.object({
+  /** Window the observed shares are averaged over (default 1 h, max 24 h). */
+  windowMs: external_exports.number().int().min(6e4).max(1440 * 60 * 1e3).default(3600 * 1e3)
+});
+var PlacementDeviceStatsSchema = external_exports.object({
+  deviceKey: external_exports.string(),
+  /** Sessions running on this device now. */
+  sessionsNow: external_exports.number(),
+  /** Sessions started on this device inside the window. */
+  sessionsStarted: external_exports.number(),
+  /** Time-weighted share of the node's parallel sessions over the window (0–1); null = no session ran. */
+  observedShare: external_exports.number().nullable()
+});
+var PlacementNodeStatsSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  sessionsNow: external_exports.number(),
+  sessionsStarted: external_exports.number(),
+  /** Time-weighted share of the cluster's parallel sessions over the window (0–1); null = none ran. */
+  observedShare: external_exports.number().nullable(),
+  /** Most sessions this node ran at once inside the window. */
+  peakSessions: external_exports.number(),
+  /** Sessions a share election handed elsewhere because this node was full or drowning. */
+  yieldsAway: external_exports.number(),
+  devices: external_exports.array(PlacementDeviceStatsSchema).readonly()
+});
+var StaleDevicePinSchema = external_exports.object({
+  deviceId: external_exports.number(),
+  deviceKey: external_exports.string(),
+  /** `disabled` — the key exists on some node but is not enabled anywhere; `absent` — no node has it. */
+  reason: external_exports.enum(["disabled", "absent"])
+});
+var PlacementStatsSchema = external_exports.object({
+  policy: SessionPlacementPolicySchema,
+  windowMs: external_exports.number(),
+  /** How much of the window was actually observed (the hub keeps it in memory). */
+  observedForMs: external_exports.number(),
+  sessionsNow: external_exports.number(),
+  /** Most parallel sessions across the cluster inside the window. */
+  clusterPeakSessions: external_exports.number(),
+  nodes: external_exports.array(PlacementNodeStatsSchema).readonly(),
+  stalePins: external_exports.array(StaleDevicePinSchema).readonly()
+});
+var CapacitySourceSchema = external_exports.enum(["hardware", "benchmark"]);
+var CapacityFallbackSchema = external_exports.enum(["no-benchmark-results", "partial-benchmark-results"]);
+var SuggestSharesInputSchema = external_exports.object({
+  headroom: external_exports.number().min(0.3).max(0.5).default(0.4),
+  /** Default `hardware`. */
+  source: CapacitySourceSchema.default("hardware")
+});
+var SuggestedDeviceShareSchema = external_exports.object({
+  deviceKey: external_exports.string(),
+  /** Share of the node (0–100, rounded). */
+  share: external_exports.number(),
+  modelId: external_exports.string().nullable(),
+  /** Inferences per second at that model, from the measured table; null when sized by a benchmark. */
+  fps: external_exports.number().nullable(),
+  /** False for a table cell derived from another chip; true for a measured cell or a benchmark. */
+  measured: external_exports.boolean(),
+  /**
+  * Advisory session cap: ⌊fps × (1 − headroom) / camera fps⌋ from the table,
+  * or the benchmark's measured max sessions. Never enforced.
+  */
+  suggestedMaxSessions: external_exports.number().nullable()
+});
+var SuggestedNodeShareSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  /** Share of the cluster (0–100, rounded); null = node skipped (offline, unknown hardware). */
+  share: external_exports.number().nullable(),
+  /** Parallel sessions the node sustains at the suggested models with the headroom kept free. */
+  capacitySessions: external_exports.number(),
+  devices: external_exports.array(SuggestedDeviceShareSchema).readonly(),
+  skippedReason: external_exports.string().nullable(),
+  /** What this node's capacity was read from; null when the node is skipped. */
+  capacitySource: CapacitySourceSchema.nullable(),
+  /** Set when the `benchmark` source was asked for and this node used `hardware`. */
+  capacityFallback: CapacityFallbackSchema.nullable()
+});
+var SuggestSharesResultSchema = external_exports.object({
+  headroom: external_exports.number(),
+  /** The source asked for; each node says what it actually used. */
+  source: CapacitySourceSchema,
+  /** Camera detection rate the capacity is counted in (the fastest camera's fps). */
+  cameraFps: external_exports.number(),
+  /** The Auto tune capacity floor the models were picked at. */
+  minSessionsPerDevice: external_exports.number(),
+  nodes: external_exports.array(SuggestedNodeShareSchema).readonly()
+});
+var ShareSourceSchema = external_exports.enum([
+  "hardware",
+  "benchmark",
+  "manual"
+]);
+var SetShareSourceInputSchema = external_exports.object({ source: ShareSourceSchema });
+var ShareWeightsSchema = external_exports.object({
+  nodes: external_exports.record(external_exports.string(), external_exports.number()),
+  devices: external_exports.record(external_exports.string(), external_exports.record(external_exports.string(), external_exports.number()))
+});
+var EffectiveDeviceShareSchema = external_exports.object({
+  deviceKey: external_exports.string(),
+  /** Can take sessions now (enabled, available, can run the root). */
+  eligible: external_exports.boolean(),
+  /** The share the source assigns, as a percentage of the node's devices. */
+  configuredPct: external_exports.number(),
+  /** The share actually used, after an ineligible device's share went to the others. */
+  effectivePct: external_exports.number()
+});
+var EffectiveNodeShareSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  eligible: external_exports.boolean(),
+  configuredPct: external_exports.number(),
+  effectivePct: external_exports.number(),
+  /** Automatic sources: what this node's share was computed from; null under `manual` or before the first answer. */
+  capacitySource: CapacitySourceSchema.nullable(),
+  /** Automatic `benchmark`: why this node used `hardware` instead. */
+  capacityFallback: CapacityFallbackSchema.nullable(),
+  devices: external_exports.array(EffectiveDeviceShareSchema).readonly()
+});
+var EffectiveSharesSchema = external_exports.object({
+  source: ShareSourceSchema,
+  policy: SessionPlacementPolicySchema,
+  /** An automatic source with no computed answer yet: the stored sliders are used meanwhile. */
+  autoPending: external_exports.boolean(),
+  /** When the automatic shares were last computed (ms epoch); null = never. */
+  computedAt: external_exports.number().nullable(),
+  /** What made the system recompute them last. */
+  trigger: external_exports.string().nullable(),
+  nodes: external_exports.array(EffectiveNodeShareSchema).readonly(),
+  /** The relative weights the election reads (before eligibility). */
+  nodeWeights: external_exports.record(external_exports.string(), external_exports.number()),
+  deviceWeights: external_exports.record(external_exports.string(), external_exports.record(external_exports.string(), external_exports.number()))
+});
+var NODE_BENCHMARK_DEFAULTS = {
+  fpsPerStream: 10,
+  budgetMinutes: 45,
+  minBudgetMinutes: 10,
+  maxBudgetMinutes: 120,
+  /** A result older than this no longer beats the table. */
+  staleAfterDays: 30,
+  /** Warm-in per ramp step (not accounted). */
+  settleSec: 5,
+  /** Accounted window per ramp step. */
+  measureSec: 20,
+  /** Longest the drain may take before the run is refused. */
+  drainTimeoutSec: 120,
+  /** Candidate models per device in one run. */
+  maxModelsPerDevice: 6
+};
+var NodeBenchmarkPhaseSchema = external_exports.enum(["device", "pipeline"]);
+var NodeBenchmarkDevicePlanSchema = external_exports.object({
+  /** `<backend>:<device>` — `openvino:npu`, `coreml:all`, `cpu`. */
+  deviceKey: external_exports.string().min(1),
+  /**
+  * Root detector candidates for the `device` measurement, in the order
+  * measured. The FIRST is the one the `pipeline` measurement runs.
+  */
+  modelIds: external_exports.array(external_exports.string().min(1)).min(1).max(NODE_BENCHMARK_DEFAULTS.maxModelsPerDevice)
+});
+var NodeBenchmarkPlanSchema = external_exports.object({
+  nodeId: external_exports.string().min(1),
+  devices: external_exports.array(NodeBenchmarkDevicePlanSchema).min(1),
+  /** Which measurements run. At least one. */
+  phases: external_exports.array(NodeBenchmarkPhaseSchema).min(1).default(["device", "pipeline"]),
+  /**
+  * Detail steps (catalog step ids under the root: faces, plates,
+  * classifiers, CLIP…) the `pipeline` measurement enables. The root
+  * detector always runs.
+  */
+  steps: external_exports.array(external_exports.string().min(1)).default([]),
+  /** Offered rate of one stream / session. */
+  fpsPerStream: external_exports.number().int().min(1).max(30).default(NODE_BENCHMARK_DEFAULTS.fpsPerStream),
+  /** Hard deadline: the mode ends and the cluster is restored when it passes. */
+  budgetMinutes: external_exports.number().int().min(NODE_BENCHMARK_DEFAULTS.minBudgetMinutes).max(NODE_BENCHMARK_DEFAULTS.maxBudgetMinutes).default(NODE_BENCHMARK_DEFAULTS.budgetMinutes),
+  /** Keep the models the run downloaded (default: delete what was not installed before). */
+  keepDownloadedModels: external_exports.boolean().default(false),
+  /** Start although the other nodes' capacity does not cover the sessions running now. */
+  acceptInsufficientHeadroom: external_exports.boolean().default(false)
+});
+var NodeBenchmarkRefusalKindSchema = external_exports.enum([
+  "benchmark-active",
+  "node-offline",
+  "unknown-device",
+  "no-phase",
+  "insufficient-headroom"
+]);
+var NodeBenchmarkRefusalSchema = external_exports.object({
+  kind: NodeBenchmarkRefusalKindSchema,
+  detail: external_exports.string(),
+  overridable: external_exports.boolean()
+});
+var NodeBenchmarkMovingCameraSchema = external_exports.object({
+  deviceId: external_exports.number(),
+  /** Placed on the node now (a standing attach or a running session). */
+  placedOnNode: external_exports.boolean(),
+  /** A node pin naming this node, ignored for the run. */
+  pinnedToNode: external_exports.boolean()
+});
+var NodeBenchmarkStayingCameraSchema = external_exports.object({
+  deviceId: external_exports.number(),
+  reason: external_exports.literal("only-frame-source")
+});
+var NodeBenchmarkPreflightSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  online: external_exports.boolean(),
+  moving: external_exports.array(NodeBenchmarkMovingCameraSchema).readonly(),
+  /** Keep running on the node during the run; the result is flagged contaminated. */
+  staying: external_exports.array(NodeBenchmarkStayingCameraSchema).readonly(),
+  estimatedDurationMs: external_exports.number(),
+  /** The run ends and the cluster is restored at the latest after this long. */
+  budgetMs: external_exports.number(),
+  phases: external_exports.array(NodeBenchmarkPhaseSchema).readonly(),
+  steps: external_exports.array(external_exports.string()).readonly(),
+  devices: external_exports.array(NodeBenchmarkDevicePlanSchema).readonly(),
+  /** Parallel sessions the cluster runs now, and what the other nodes can carry. */
+  headroom: external_exports.object({
+    sessionsNow: external_exports.number(),
+    otherNodesCapacitySessions: external_exports.number().nullable()
+  }),
+  refusals: external_exports.array(NodeBenchmarkRefusalSchema).readonly(),
+  canStart: external_exports.boolean()
+});
+var NodeBenchProgressSchema = external_exports.object({
+  phase: external_exports.enum([
+    "preparing",
+    "device",
+    "pipeline",
+    "cleanup"
+  ]),
+  deviceKey: external_exports.string().nullable(),
+  modelId: external_exports.string().nullable(),
+  /** Streams (device) or sessions (pipeline) of the step running now. */
+  load: external_exports.number().nullable(),
+  cellsDone: external_exports.number(),
+  cellsTotal: external_exports.number(),
+  message: external_exports.string()
+});
+var NodeBenchLimitSchema = external_exports.enum([
+  "p95",
+  "drops",
+  "errors",
+  "stall",
+  "cpu",
+  "ram",
+  "none"
+]);
+var NodeBenchRampStepSchema = external_exports.object({
+  load: external_exports.number(),
+  pass: external_exports.boolean(),
+  p95Ms: external_exports.number(),
+  dropRatio: external_exports.number(),
+  /** Completed frames per second over the accounted window. */
+  fps: external_exports.number(),
+  cpuPct: external_exports.number().nullable(),
+  ramFreePct: external_exports.number().nullable(),
+  failReasons: external_exports.array(external_exports.string()).readonly()
+});
+var NodeBenchDeviceCellSchema = external_exports.object({
+  phase: external_exports.literal("device"),
+  deviceKey: external_exports.string(),
+  modelId: external_exports.string(),
+  /** Single-stream latency (the K = 1 step). */
+  p50Ms: external_exports.number(),
+  p95Ms: external_exports.number(),
+  p99Ms: external_exports.number(),
+  /** Frames per second sustained at the last passing step. */
+  fps: external_exports.number(),
+  /** Streams at the camera rate the device carried inside the frame interval; 0 = not even one. */
+  kMax: external_exports.number(),
+  limitedBy: NodeBenchLimitSchema,
+  /** First call (model load + warm-up). */
+  warmupMs: external_exports.number(),
+  ramp: external_exports.array(NodeBenchRampStepSchema).readonly()
+});
+var NodeBenchPipelineCellSchema = external_exports.object({
+  phase: external_exports.literal("pipeline"),
+  deviceKey: external_exports.string(),
+  modelId: external_exports.string(),
+  steps: external_exports.array(external_exports.string()).readonly(),
+  /** Parallel sessions at the camera rate the node carried; 0 = not even one. */
+  maxSessions: external_exports.number(),
+  limitedBy: NodeBenchLimitSchema,
+  /** Detail steps that produced at least one result on the clip — a step that never fired measured nothing. */
+  stepsFired: external_exports.array(external_exports.string()).readonly(),
+  warmupMs: external_exports.number(),
+  ramp: external_exports.array(NodeBenchRampStepSchema).readonly()
+});
+var NodeBenchCellSchema = external_exports.discriminatedUnion("phase", [NodeBenchDeviceCellSchema, NodeBenchPipelineCellSchema]);
+var NodeBenchFingerprintSchema = external_exports.object({
+  pipelineVersion: external_exports.string().nullable(),
+  cpuModel: external_exports.string().nullable(),
+  ramGb: external_exports.number().nullable(),
+  os: external_exports.string().nullable(),
+  /** Per device: the pool the cells ran on (runtime + tuning). */
+  pools: external_exports.record(external_exports.string(), external_exports.object({
+    runtime: external_exports.string(),
+    numWorkers: external_exports.number(),
+    concurrency: external_exports.number(),
+    batchMode: external_exports.string()
+  })).default({})
+});
+var NodeBenchClipSchema = external_exports.object({
+  /** `camstack-bench-v1` or `reference-images` (the fallback when the clip is not reachable). */
+  id: external_exports.string(),
+  revision: external_exports.string().nullable(),
+  frames: external_exports.number(),
+  width: external_exports.number(),
+  height: external_exports.number()
+});
+var NodeBenchRunnerInputSchema = external_exports.object({
+  runId: external_exports.string().min(1),
+  devices: external_exports.array(NodeBenchmarkDevicePlanSchema).min(1),
+  phases: external_exports.array(NodeBenchmarkPhaseSchema).min(1),
+  /** The full detail step tree root for the `pipeline` measurement is built on the node from these ids. */
+  steps: external_exports.array(external_exports.string()).default([]),
+  fpsPerStream: external_exports.number().int().min(1).max(30),
+  /** The runner stops on its own past this instant, whatever the hub does. */
+  deadlineAtMs: external_exports.number(),
+  settleSec: external_exports.number().min(0).max(60).default(NODE_BENCHMARK_DEFAULTS.settleSec),
+  measureSec: external_exports.number().min(2).max(300).default(NODE_BENCHMARK_DEFAULTS.measureSec),
+  keepDownloadedModels: external_exports.boolean().default(false)
+});
+var NodeBenchRunnerStateSchema = external_exports.enum([
+  "running",
+  "done",
+  "failed",
+  "aborted"
+]);
+var NodeBenchRunnerStatusSchema = external_exports.object({
+  runId: external_exports.string(),
+  nodeId: external_exports.string(),
+  state: NodeBenchRunnerStateSchema,
+  progress: NodeBenchProgressSchema.nullable(),
+  /** Every finished cell so far — a run stopped half way keeps what it measured. */
+  cells: external_exports.array(NodeBenchCellSchema).readonly(),
+  fingerprint: NodeBenchFingerprintSchema.nullable(),
+  clip: NodeBenchClipSchema.nullable(),
+  /** Cameras seen running on the node during the run (they share its pools). */
+  activeCameraIds: external_exports.array(external_exports.number()).readonly(),
+  /** Models the run downloaded and then deleted (not installed before). */
+  deletedModels: external_exports.array(external_exports.string()).readonly(),
+  error: external_exports.string().nullable(),
+  startedAtMs: external_exports.number(),
+  finishedAtMs: external_exports.number().nullable()
+});
+var NodeBenchmarkStateSchema = external_exports.enum([
+  "draining",
+  "measuring",
+  "restoring",
+  "done",
+  "failed",
+  "aborted"
+]);
+var NodeBenchmarkEndReasonSchema = external_exports.enum([
+  "completed",
+  "operator-abort",
+  "deadline",
+  "node-lost",
+  "runner-lost",
+  "hub-restart",
+  "drain-timeout",
+  "failed"
+]);
+var NodeBenchmarkRunSchema = external_exports.object({
+  runId: external_exports.string(),
+  nodeId: external_exports.string(),
+  state: NodeBenchmarkStateSchema,
+  plan: NodeBenchmarkPlanSchema,
+  startedAtMs: external_exports.number(),
+  deadlineAtMs: external_exports.number(),
+  finishedAtMs: external_exports.number().nullable(),
+  endReason: NodeBenchmarkEndReasonSchema.nullable(),
+  error: external_exports.string().nullable(),
+  /** Cameras moved off the node for the run. */
+  moved: external_exports.array(external_exports.number()).readonly(),
+  /** Cameras that stayed (their only frame source is the node). */
+  staying: external_exports.array(external_exports.number()).readonly(),
+  /** Something else ran on the node's pools during the run. */
+  contaminated: external_exports.boolean(),
+  progress: NodeBenchProgressSchema.nullable(),
+  resultIds: external_exports.array(external_exports.string()).readonly()
+});
+var NodeBenchmarkStatusSchema = external_exports.object({
+  /** The node the cluster is in benchmark mode for; null = none. */
+  modeNodeId: external_exports.string().nullable(),
+  run: NodeBenchmarkRunSchema.nullable()
+});
+var NodeBenchmarkResultSchema = external_exports.object({
+  id: external_exports.string(),
+  runId: external_exports.string(),
+  nodeId: external_exports.string(),
+  cell: NodeBenchCellSchema,
+  fpsPerStream: external_exports.number(),
+  fingerprint: NodeBenchFingerprintSchema.nullable(),
+  clip: NodeBenchClipSchema.nullable(),
+  /** Other work shared the node's pools (a camera that could not move, or the hub's own duties). */
+  contaminated: external_exports.boolean(),
+  stayingCameras: external_exports.array(external_exports.number()).readonly(),
+  /** The run ended early; the cell itself completed. */
+  partialRun: external_exports.boolean(),
+  measuredAtMs: external_exports.number()
+});
+var ListNodeBenchmarkResultsInputSchema = external_exports.object({
+  nodeId: external_exports.string().optional(),
+  deviceKey: external_exports.string().optional()
+});
+var NodeBenchmarkResultViewSchema = NodeBenchmarkResultSchema.extend({
+  /** `fresh` beats the table; `stale` falls back to it; `superseded` = a newer row covers the same cell. */
+  standing: external_exports.enum([
+    "fresh",
+    "stale",
+    "superseded"
+  ]),
+  staleWhy: external_exports.enum([
+    "age",
+    "runtime",
+    "pool-tuning"
+  ]).nullable()
+});
+var NodeBenchmarkManifestSchema = external_exports.object({
+  runId: external_exports.string(),
+  nodeId: external_exports.string(),
+  startedAtMs: external_exports.number(),
+  deadlineAtMs: external_exports.number(),
+  plan: NodeBenchmarkPlanSchema,
+  moved: external_exports.array(external_exports.number()).readonly(),
+  staying: external_exports.array(external_exports.number()).readonly()
+});
+var NodeBenchmarkCandidatesSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  reachable: external_exports.boolean(),
+  devices: external_exports.array(external_exports.object({
+    deviceKey: external_exports.string(),
+    enabled: external_exports.boolean(),
+    available: external_exports.boolean(),
+    /** Ordered: what Auto tune would pick first, then the rest of the family by accuracy. */
+    suggested: external_exports.array(external_exports.string()).readonly(),
+    /** Every root detector the device has a build for. */
+    all: external_exports.array(external_exports.string()).readonly(),
+    /** The model the device runs now, when pinned. */
+    currentModelId: external_exports.string().nullable()
+  })).readonly(),
+  /** Detail steps the node's catalog offers under the root (for the `pipeline` measurement). */
+  steps: external_exports.array(external_exports.object({
+    id: external_exports.string(),
+    name: external_exports.string(),
+    slot: external_exports.string()
+  })).readonly()
+});
 var OrchestratorMetricsSchema = external_exports.object({
   activeCameras: external_exports.number(),
   throttledCameras: external_exports.number(),
@@ -32209,14 +33471,15 @@ var RunnerLocalLoadSchema = external_exports.object({
   * Per-inference-device live load (multi-device C4). One entry per deviceKey
   * this runner currently has attached cameras on, so the orchestrator's second
   * `balance()` pass (over a node's devices) weights on real per-pool session
-  * counts. Empty on single-device / pre-multi-device runners. `queueDepthTotal`
-  * per device is 0 until the pool backlog gets a public accessor (follow-up).
+  * counts. Empty on single-device / pre-multi-device runners. There is no
+  * per-device queue depth: the inference pool's backlog has no accessor, and
+  * a field that always read 0 was removed rather than shown as a measurement
+  * (D762).
   */
   devices: external_exports.array(external_exports.object({
     deviceKey: external_exports.string(),
     backend: external_exports.string(),
-    attachedCameras: external_exports.number(),
-    queueDepthTotal: external_exports.number()
+    attachedCameras: external_exports.number()
   })).default([]),
   /** Hardware capability flags reported by this node. */
   hardware: external_exports.object({
@@ -32438,7 +33701,22 @@ var pipelineRunnerCapability = {
       */
       cropJpeg: external_exports.string().optional(),
       parent: DetailParentSchema,
-      steps: external_exports.array(external_exports.string()).optional()
+      steps: external_exports.array(external_exports.string()).optional(),
+      /**
+      * The camera's root model already drew this step's boxes (D730): a
+      * `license_plate` inside the parent vehicle. The named step is NOT
+      * inferred — these FRAME-space boxes are its output — and its
+      * requested children (the plate reader) run on them. Absent ⇒ every
+      * requested step infers as before.
+      */
+      supplied: external_exports.object({
+        stepId: external_exports.string(),
+        modelId: external_exports.string(),
+        boxes: external_exports.array(external_exports.object({
+          bbox: NativeCropBboxSchema,
+          score: external_exports.number()
+        })).min(1)
+      }).optional()
     }), external_exports.object({ details: external_exports.array(DetailResultSchema) }).nullable(), { kind: "mutation" }),
     /**
     * Run ONE enrichment step against caller-supplied pixels, with NO camera
@@ -32569,7 +33847,30 @@ var pipelineRunnerCapability = {
     releaseParkedTrackFrames: method(external_exports.object({
       deviceId: external_exports.number(),
       trackId: external_exports.string()
-    }), external_exports.object({ released: external_exports.number().int().nonnegative() }), { kind: "mutation" })
+    }), external_exports.object({ released: external_exports.number().int().nonnegative() }), { kind: "mutation" }),
+    /**
+    * Start measuring THIS node for the orchestrator's node benchmark: the
+    * bench clip decoded once into RAM, each device × candidate detector on an
+    * open-loop ramp (`device`), then the chosen pipeline with the requested
+    * detail steps (`pipeline`). Everything runs in-process with the executor
+    * — no frame crosses a node (D9) — and writes nothing: no track, event,
+    * media or notification. Reached by `nodePin(nodeId)`. Answers at once;
+    * one run per node; the run stops itself at `deadlineAtMs`.
+    */
+    startNodeBench: method(NodeBenchRunnerInputSchema, external_exports.object({
+      accepted: external_exports.literal(true),
+      runId: external_exports.string()
+    }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** The run's progress and every finished cell; null when this runner does not know `runId`. */
+    getNodeBenchStatus: method(external_exports.object({ runId: external_exports.string() }), NodeBenchRunnerStatusSchema.nullable(), { auth: "admin" }),
+    /** Stop the run; what it finished is kept. */
+    abortNodeBench: method(external_exports.object({ runId: external_exports.string() }), external_exports.object({ aborted: external_exports.boolean() }), {
+      kind: "mutation",
+      auth: "admin"
+    })
   }
 };
 var CameraPipelineConfigSchema = external_exports.object({
@@ -32582,14 +33883,6 @@ var CameraPipelineConfigSchema = external_exports.object({
     settings: external_exports.record(external_exports.string(), external_exports.unknown()).readonly().optional()
   }).nullable().optional()
 });
-var PipelineTemplateSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  description: external_exports.string().optional(),
-  config: CameraPipelineConfigSchema,
-  createdAt: external_exports.string(),
-  updatedAt: external_exports.string()
-});
 var DeviceStepConfigSchema = external_exports.object({
   modelId: external_exports.string().optional(),
   settings: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
@@ -32663,9 +33956,10 @@ var CameraStepOverridePatchSchema = external_exports.object({
   modelId: external_exports.string().optional(),
   settings: external_exports.record(external_exports.string(), external_exports.unknown()).readonly().optional()
 });
+var CameraStepSettingsSchema = external_exports.record(external_exports.string(), external_exports.record(external_exports.string(), external_exports.unknown()).readonly());
 var CameraPipelineSettingsSchema = external_exports.object({
-  pinnedAgentNodeId: external_exports.string().optional(),
   stepToggles: external_exports.record(external_exports.string(), external_exports.boolean()).optional(),
+  stepSettings: CameraStepSettingsSchema.optional(),
   stepOverridesByDevice: external_exports.record(external_exports.string(), external_exports.record(external_exports.string(), external_exports.record(external_exports.string(), CameraStepOverridePatchSchema))).optional(),
   pipelineByAgent: external_exports.record(external_exports.string(), CameraPipelineForAgentSchema).optional()
 });
@@ -32752,26 +34046,21 @@ var CameraBrokerProfileSchema = external_exports.object({
   width: external_exports.number(),
   height: external_exports.number(),
   subscribers: external_exports.number(),
-  inFps: external_exports.number(),
-  outFps: external_exports.number()
+  /**
+  * Encoded packets/s the broker receives from the camera. null when the
+  * broker's stats read failed — unknown, never 0 (a 0 here reads as a stall).
+  * There is no output rate: decoding runs in the session decode workers, not
+  * in the broker, so the broker's own decoded-frame rate is 0 on every live
+  * camera and is not served (D758).
+  */
+  inFps: external_exports.number().nullable()
 });
 var CameraBrokerStatusSchema = external_exports.object({
   profiles: external_exports.array(CameraBrokerProfileSchema).readonly(),
   webrtcSessions: external_exports.number(),
   rtspRestream: external_exports.boolean()
 });
-var CameraDecoderShmSchema = external_exports.object({
-  framesWritten: external_exports.number(),
-  getFrameHits: external_exports.number(),
-  getFrameMisses: external_exports.number(),
-  budgetMb: external_exports.number()
-});
-var CameraDecoderStatusSchema = external_exports.object({
-  nodeId: external_exports.string(),
-  formats: external_exports.array(external_exports.string()).readonly(),
-  sessionCount: external_exports.number(),
-  shm: CameraDecoderShmSchema
-});
+var CameraDecoderStatusSchema = external_exports.object({ nodeId: external_exports.string() });
 var CameraMotionStatusSchema = external_exports.object({
   enabled: external_exports.boolean(),
   fps: external_exports.number()
@@ -33231,18 +34520,6 @@ var pipelineOrchestratorCapability = {
       auth: "admin"
     }),
     /**
-    * Set a node's detection WEIGHT (relative share for the quota balancer).
-    * `null` clears it (back to the implicit weight 1). Unpinned cameras
-    * distribute proportionally to weight; `maxCameras` still clamps on top.
-    */
-    setAgentDetectWeight: method(external_exports.object({
-      agentNodeId: external_exports.string(),
-      detectWeight: external_exports.number().positive().nullable()
-    }), external_exports.object({ success: external_exports.literal(true) }), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    /**
     * Set one node's placement CAPABILITIES — the per-node record that
     * replaced the four flat orchestrator lists (`enabledNodes`,
     * `enabledDecoderNodes`, `enabledAudioNodes`, `remoteSourcingNodes`).
@@ -33361,6 +34638,121 @@ var pipelineOrchestratorCapability = {
       kind: "mutation",
       auth: "admin"
     }),
+    /**
+    * Auto tune (D745, D755) — DRY RUN. Recommends ONE detector family
+    * (YOLOv9) for the whole cluster from each node's static hardware class
+    * and the measured latency table: per device, the most accurate model
+    * that sustains at least `minSessionsPerDevice` parallel sessions at the
+    * camera rate with the headroom kept free (no load input), and lists every write
+    * the apply would make: the node model pins set, the enrichment pins and
+    * model-bound thresholds removed (node level and per camera), and the
+    * per-camera detector thresholds cleared. Writes nothing. Step
+    * enablement, device enablement, pins, recording, notifications, zones and
+    * rules are never part of it. `planHash` names exactly this diff.
+    */
+    planAutoTune: method(AutoTuneOptionsSchema, AutoTunePlanSchema, { auth: "admin" }),
+    /**
+    * Auto tune (D745) — APPLY the plan the operator confirmed. Recomputes
+    * the plan and refuses (`stale`, with the fresh plan) when its hash is not
+    * `planHash`, so what is written is exactly the confirmed diff. Offline
+    * nodes are skipped; there is no undo.
+    */
+    applyAutoTune: method(AutoTuneApplyInputSchema, AutoTuneApplyResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Load balancing (D748) — write node shares (`detectWeight`) and per-node
+    * device shares (inference-device `weight`) in ONE atomic read-modify-write
+    * of the agent settings — the only writer of node shares (the per-node
+    * `setAgentDetectWeight` it replaced raced its siblings, one RMW each).
+    * A node or device left out keeps its weight. Never changes the
+    * `sessionPlacement` policy.
+    */
+    setLoadBalancingShares: method(LoadBalancingSharesInputSchema, external_exports.object({ success: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Load balancing (D748) — what placement actually did: per node and
+    * device, sessions now, sessions started and the time-weighted share of
+    * PARALLEL sessions over `windowMs`; the cluster's parallel peak; yields
+    * a share election made; and every device pin the session path cannot
+    * honour. In memory on the hub — a restart starts a new window.
+    */
+    getPlacementStats: method(PlacementStatsInputSchema, PlacementStatsSchema, { auth: "admin" }),
+    /**
+    * Load balancing (D748, D755) — shares proportional to each node's
+    * capacity in parallel sessions: from the latency table at the models
+    * Auto tune picks (`hardware`), or from node benchmark results
+    * (`benchmark`, each node without results falling back to `hardware` and
+    * saying so). The automatic shares are exactly this answer. Per device,
+    * an ADVISORY session cap. Writes nothing.
+    */
+    suggestShares: method(SuggestSharesInputSchema, SuggestSharesResultSchema, { auth: "admin" }),
+    /**
+    * Load balancing (D750) — the shares placement reads now: the source
+    * (automatic capacity shares or the operator's sliders), each node's and
+    * device's configured share, and the effective share after a node or
+    * device that cannot take sessions gave its share to the others.
+    */
+    getEffectiveShares: method(external_exports.void(), EffectiveSharesSchema, { auth: "admin" }),
+    /**
+    * Load balancing (D750, D755) — switch the share source: `hardware`
+    * (automatic, from static capacity), `benchmark` (automatic, from node
+    * benchmark results) or `manual`. Going manual seeds the sliders with the
+    * current automatic shares (one atomic write), so nothing jumps; going
+    * to an automatic source recomputes at once.
+    */
+    setShareSource: method(SetShareSourceInputSchema, external_exports.object({ success: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Node benchmark — what a run of this plan would do, without doing it:
+    * the cameras that leave the node, those that cannot (the node is their
+    * only frame source; they stay and flag the run), the estimated duration
+    * and every reason it may not start. The confirmation shows this.
+    */
+    getNodeBenchmarkPreflight: method(NodeBenchmarkPlanSchema, NodeBenchmarkPreflightSchema, { auth: "admin" }),
+    /**
+    * Node benchmark — start ONE run (cluster-wide lock). The orchestrator
+    * persists a restore manifest, enters benchmark mode for the node (out of
+    * placement, its camera pins ignored, nothing rewritten), drains it, drives
+    * the node's own runner, then restores — always, including after an
+    * abort, a lost node or a hub restart. Answers at once; poll
+    * `getNodeBenchmarkStatus`. Refused runs carry the preflight.
+    */
+    startNodeBenchmark: method(NodeBenchmarkPlanSchema, external_exports.discriminatedUnion("kind", [external_exports.object({
+      kind: external_exports.literal("started"),
+      runId: external_exports.string()
+    }), external_exports.object({
+      kind: external_exports.literal("refused"),
+      preflight: NodeBenchmarkPreflightSchema
+    })]), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Node benchmark — the active run (or the last one) and the node in benchmark mode. */
+    getNodeBenchmarkStatus: method(external_exports.void(), NodeBenchmarkStatusSchema, { auth: "admin" }),
+    /** Node benchmark — stop the active run; the cluster is restored as it was. */
+    abortNodeBenchmark: method(external_exports.object({ runId: external_exports.string() }), external_exports.object({ aborted: external_exports.boolean() }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Node benchmark — root detector candidates per device (what Auto tune
+    * would pick first, then the family) and the detail steps the node's
+    * catalog offers, for the plan editor.
+    */
+    getNodeBenchmarkCandidates: method(external_exports.object({ nodeId: external_exports.string() }), NodeBenchmarkCandidatesSchema, { auth: "admin" }),
+    /** Node benchmark — stored results, newest first, each with its standing today. */
+    listNodeBenchmarkResults: method(ListNodeBenchmarkResultsInputSchema, external_exports.array(NodeBenchmarkResultViewSchema).readonly(), { auth: "admin" }),
+    /** Node benchmark — delete one result; Auto tune and the shares stop reading it. */
+    deleteNodeBenchmarkResult: method(external_exports.object({ id: external_exports.string() }), external_exports.object({ deleted: external_exports.boolean() }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
     /** Read one camera's settings. Null when never touched (inherits agent defaults fully). */
     getCameraSettings: method(external_exports.object({ deviceId: external_exports.number() }), CameraPipelineSettingsSchema.nullable()),
     /** Set or clear the 3-state toggle for one (camera, addonId). Pass `enabled: null` to clear and revert to agent default. */
@@ -33390,6 +34782,22 @@ var pipelineOrchestratorCapability = {
       kind: "mutation",
       auth: "admin"
     }),
+    /**
+    * Write or clear one step's CAMERA-WIDE settings (D754) — the fields this
+    * camera overrides on every accelerator it runs on. `settings` is the
+    * whole field-level bag for that step (only the overridden keys; a
+    * model-bound field travels with its binding key); `null` or `{}` clears
+    * it. Merged at dispatch between the node base and the per-(node,device)
+    * override, key by key.
+    */
+    setCameraStepSettings: method(external_exports.object({
+      deviceId: external_exports.number(),
+      addonId: external_exports.string(),
+      settings: external_exports.record(external_exports.string(), external_exports.unknown()).nullable()
+    }), external_exports.object({ success: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
     /** Write or clear the wholesale per-agent pipeline override. Pass `pipeline: null` to drop the override. */
     setCameraPipelineForAgent: method(external_exports.object({
       deviceId: external_exports.number(),
@@ -33505,33 +34913,7 @@ var pipelineOrchestratorCapability = {
       auth: "admin"
     }),
     /** Snapshot of the in-flight or last disk-wins fleet reconcile. */
-    getReconcileFromDiskStatus: method(external_exports.void(), DiskReconcileJobSchema, { auth: "admin" }),
-    /** List every template the operator has saved. */
-    listTemplates: method(external_exports.void(), external_exports.array(PipelineTemplateSchema).readonly()),
-    /** Create a new named preset from a given CameraPipelineConfig. */
-    saveTemplate: method(external_exports.object({
-      name: external_exports.string(),
-      description: external_exports.string().optional(),
-      config: CameraPipelineConfigSchema
-    }), PipelineTemplateSchema, {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    /** Partial update of a template. Any omitted field is preserved. */
-    updateTemplate: method(external_exports.object({
-      id: external_exports.string(),
-      name: external_exports.string().optional(),
-      description: external_exports.string().optional(),
-      config: CameraPipelineConfigSchema.optional()
-    }), PipelineTemplateSchema, {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    /** Remove a template. Camera configs that were seeded from it keep a copy. */
-    deleteTemplate: method(external_exports.object({ id: external_exports.string() }), external_exports.object({ success: external_exports.literal(true) }), {
-      kind: "mutation",
-      auth: "admin"
-    })
+    getReconcileFromDiskStatus: method(external_exports.void(), DiskReconcileJobSchema, { auth: "admin" })
   }
 };
 var LEGACY_ICON = {
@@ -34116,7 +35498,19 @@ var SsoBridgeClaimsSchema = external_exports.object({
   * editing a descriptor must not retroactively extend or shorten a link the
   * operator already consented to.
   */
-  refreshTtl: external_exports.union([external_exports.number().int().positive(), external_exports.literal("never")]).optional()
+  refreshTtl: external_exports.union([external_exports.number().int().positive(), external_exports.literal("never")]).optional(),
+  /**
+  * Opaque handle of a hub-side LINK intent (D782). Set by an OIDC callback
+  * that was started from a signed-in user's "Link" button: the finish then
+  * links this identity to the intent's user instead of signing anyone in.
+  * The handle carries no user id — the hub resolves it, single-use.
+  */
+  linkIntent: external_exports.string().optional(),
+  /**
+  * Verified `iss` of the id_token behind an OIDC login bridge (D782). A
+  * subject is unique only per issuer, so a link is bound to it.
+  */
+  issuer: external_exports.string().optional()
 });
 var ssoBridgeCapability = {
   name: "sso-bridge",
@@ -35841,8 +37235,6 @@ var WebrtcStreamChoiceSchema = external_exports.object({
   ]).nullable(),
   /** Input FPS from the camera (null for adaptive). */
   inputFps: external_exports.number().nullable(),
-  /** Decoded FPS (null for adaptive). */
-  decodeFps: external_exports.number().nullable(),
   /** Bitrate in kbps (null for adaptive). */
   bitrateKbps: external_exports.number().nullable()
 });
@@ -36143,7 +37535,22 @@ var webrtcSessionCapability = {
       * field their hints were silently stripped by the schema and the
       * adaptive ladder started blind on the client's display size.
       */
-      hints: webrtcClientHintsSchema.optional()
+      hints: webrtcClientHintsSchema.optional(),
+      /**
+      * Talk-back (D771): relay the PEER's audio to the device's speaker
+      * through the `intercom` cap's push-talk triple. When `true` and the
+      * offer lets the peer send audio, the answer's audio is `sendrecv`
+      * and every inbound frame goes to `intercom.pushTalkAudio` for this
+      * `deviceId`; absent/false answers `sendonly`, as for every viewer.
+      *
+      * TRUSTED-CALLER ONLY. Set by the Alexa export for an Echo on a camera
+      * with `intercom`, when the linked user may control that camera. The
+      * hub STRIPS it from every request-bound call (a browser), exactly as
+      * it overwrites `relayOnly` — a viewer's talk permission is the
+      * intercom cap's own surface (share tokens gate it there), and this
+      * flag must not become a second door to the camera's speaker.
+      */
+      talkback: external_exports.boolean().optional()
     }), external_exports.object({
       sessionId: external_exports.string(),
       sdpAnswer: external_exports.string()
@@ -36223,6 +37630,35 @@ var webrtcSessionCapability = {
       alive: external_exports.boolean()
     })),
     /**
+    * The viewer's downlink probe, for ONE live session (D733).
+    *
+    * The player measures `/adaptive-probe` after the session's first decoded
+    * frame (D635). It used to act on the reading itself, by opening a SECOND
+    * session with `hints.downlinkMbps` — every adaptive live open became two
+    * sessions, two ICE + DTLS handshakes and two server pipelines. It now
+    * hands the measurement to the session it already has; the provider picks
+    * the rung exactly as it would from an offer's hints (same viewport
+    * ceiling) and moves the session there — in place when the negotiated
+    * codec carries the new rendition, by the existing re-offer
+    * (`getSessionState.pendingRenegotiation`) when it cannot.
+    *
+    * A MEASUREMENT, never a tier: the client does not choose. A probe only
+    * raises the rung; lowering it stays the ladder's call on delivery.
+    * `held` answers why nothing moved (`not-adaptive`, `pinned`,
+    * `already-there`, `recorded`, …) — a client that gets ANY answer must not
+    * fall back to a reconnect; only a provider that does not know the method
+    * (an older hub) leaves the client its legacy second session.
+    */
+    applyDownlinkProbe: method(external_exports.object({
+      deviceId: external_exports.number().int().nonnegative(),
+      sessionId: external_exports.string(),
+      downlinkMbps: external_exports.number().nonnegative()
+    }), external_exports.object({
+      outcome: external_exports.enum(["switching", "held"]),
+      tier: CamProfileSchema.nullable(),
+      reason: external_exports.string()
+    }), { kind: "mutation" }),
+    /**
     * The SERVER's half of the stream-debug overlay, for one live session.
     *
     * The client can measure its own transport (`getStats()`); it cannot see
@@ -36508,6 +37944,46 @@ var AddonAutoUpdateSchema = ChannelWithInheritSchema;
 var RestartAddonResultSchema = external_exports.unknown();
 var InstallPackageResultSchema = external_exports.unknown();
 var ReloadPackagesResultSchema = external_exports.unknown();
+var UninstallNodeOutcomeSchema = external_exports.enum([
+  "uninstalled",
+  "not-installed",
+  "refused",
+  "failed",
+  "pending-reconnect"
+]);
+var UninstallNodeResultSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  outcome: UninstallNodeOutcomeSchema,
+  error: external_exports.string().optional(),
+  addonIds: external_exports.array(external_exports.string()).readonly(),
+  runnersStopped: external_exports.array(external_exports.string()).readonly(),
+  warnings: external_exports.array(external_exports.string()).readonly()
+});
+var UninstallPackageResultSchema = external_exports.object({
+  /** Every targeted node ended `uninstalled`, `not-installed` or `pending-reconnect`. */
+  success: external_exports.boolean(),
+  packageName: external_exports.string(),
+  results: external_exports.array(UninstallNodeResultSchema).readonly()
+});
+var PackageInstallationSchema = external_exports.object({
+  packageName: external_exports.string(),
+  nodeId: external_exports.string(),
+  nodeName: external_exports.string(),
+  isHub: external_exports.boolean(),
+  isOnline: external_exports.boolean(),
+  version: external_exports.string().nullable(),
+  addonIds: external_exports.array(external_exports.string()).readonly(),
+  source: external_exports.enum(["live", "recorded"]),
+  /** The hub installs this package too. `false` on an agent row = an orphan. */
+  onHub: external_exports.boolean()
+});
+var PackageInstallationsSchema = external_exports.object({
+  installations: external_exports.array(PackageInstallationSchema).readonly(),
+  unreachable: external_exports.array(external_exports.object({
+    nodeId: external_exports.string(),
+    error: external_exports.string()
+  })).readonly()
+});
 var BulkUpdateItemStatusSchema = external_exports.enum([
   "queued",
   "updating",
@@ -36598,10 +38074,31 @@ var addonsCapability = {
     }),
     isWorkspaceAvailable: method(external_exports.void(), external_exports.boolean()),
     listWorkspacePackages: method(external_exports.void(), external_exports.array(external_exports.unknown()).readonly()),
-    uninstallPackage: method(external_exports.object({ packageName: external_exports.string() }), external_exports.unknown(), {
+    /**
+    * Uninstall a package. `nodeId` omitted (or `'hub'`) uninstalls on the hub
+    * — the original behaviour, which still THROWS on failure. An agent
+    * `nodeId` removes it from that agent through `$agent.undeploy`
+    * (runners stopped, caps deregistered, code deleted) and prunes the node's
+    * declared roster so the back-fill never returns it. `everywhere: true`
+    * does both for every node that has it (agents first, hub last); offline
+    * nodes answer `pending-reconnect`. Node-level failures in those two modes
+    * are REPORTED per node, never thrown. Protected packages are refused.
+    */
+    uninstallPackage: method(external_exports.object({
+      packageName: external_exports.string().min(1),
+      nodeId: external_exports.string().optional(),
+      everywhere: external_exports.boolean().optional()
+    }), UninstallPackageResultSchema, {
       kind: "mutation",
       auth: "admin"
     }),
+    /**
+    * Which nodes have a package (or, with no `packageName`, every package on
+    * every node). Hub from its installer, online agents from `$agent.status`
+    * (in parallel, bounded), offline agents from their declared roster.
+    * Drives the uninstall confirm and the Addons page's "not on the hub" list.
+    */
+    listInstallations: method(external_exports.object({ packageName: external_exports.string().optional() }), PackageInstallationsSchema, { auth: "admin" }),
     reloadPackages: method(external_exports.void(), ReloadPackagesResultSchema, {
       kind: "mutation",
       auth: "admin"
@@ -39322,6 +40819,9 @@ var CreateIntegrationInputSchema = external_exports.object({
   enabled: external_exports.boolean().optional(),
   info: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
   settings: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  /** Keys of `settings` the form's schema declares secret (by type) — kept in
+  *  the keychain, not the table (D787). */
+  secretKeys: external_exports.array(external_exports.string()).optional(),
   skipRestart: external_exports.boolean().optional()
 });
 var UpdateIntegrationInputSchema = external_exports.object({
@@ -39357,7 +40857,9 @@ var integrationsCapability = {
     getSettings: method(external_exports.object({ id: external_exports.string() }), external_exports.record(external_exports.string(), external_exports.unknown()), { auth: "admin" }),
     setSettings: method(external_exports.object({
       id: external_exports.string(),
-      settings: external_exports.record(external_exports.string(), external_exports.unknown())
+      settings: external_exports.record(external_exports.string(), external_exports.unknown()),
+      /** Keys the form's schema declares secret (by type) — keychain-stored (D787). */
+      secretKeys: external_exports.array(external_exports.string()).optional()
     }), external_exports.object({ success: external_exports.boolean() }), {
       kind: "mutation",
       auth: "admin"
@@ -39689,7 +41191,8 @@ var ConnectionEndpointSchema = external_exports.object({
     "lan-ipv6",
     "public",
     "loopback",
-    "app-link"
+    "app-link",
+    "custom"
   ]),
   /**
   * Originating-interface kind — `lan`/`wifi`/`docker`/`vpn`/`other`/
@@ -39775,6 +41278,62 @@ var ViewerEndpointsSchema = external_exports.object({
   /** What the ranking currently resolves to (may be empty if nothing is up). */
   resolved: external_exports.array(external_exports.string()).readonly()
 });
+var HubAddressSnapshotSchema = external_exports.object({
+  override: external_exports.string().nullable(),
+  resolved: external_exports.string().nullable(),
+  source: external_exports.enum([
+    "override",
+    "auto",
+    "none"
+  ])
+});
+var HubAddressesSchema = external_exports.object({
+  cluster: HubAddressSnapshotSchema,
+  browser: HubAddressSnapshotSchema
+});
+var HubAddressRoleSchema = external_exports.enum(HUB_ADDRESS_ROLES);
+var RoleSourceSchema = external_exports.enum([
+  "flagged",
+  "auto",
+  "none"
+]);
+var HubAddressRoleResolutionSchema = external_exports.object({
+  /** The address carrying the flag, or null = automatic. */
+  flagged: external_exports.string().nullable(),
+  /** The address in use, or null when nothing qualifies (never loopback). */
+  resolved: external_exports.string().nullable(),
+  source: RoleSourceSchema
+});
+var HubAppConnectionsResolutionSchema = external_exports.object({
+  /** The addresses flagged `appConnections`, or empty = automatic. */
+  flagged: external_exports.array(external_exports.string()).readonly(),
+  /** What the apps race right now. */
+  resolved: external_exports.array(external_exports.string()).readonly(),
+  source: RoleSourceSchema
+});
+var HubAddressRowSchema = ConnectionEndpointSchema.extend({
+  /** In the hub's detected palette right now. */
+  detected: external_exports.boolean(),
+  /** Entered by the operator (removable). */
+  custom: external_exports.boolean(),
+  /** The roles explicitly flagged on this address. */
+  flags: external_exports.array(HubAddressRoleSchema).readonly(),
+  /** The roles this address serves right now — flagged or automatic. */
+  inUse: external_exports.array(HubAddressRoleSchema).readonly(),
+  /** The roles this address may be flagged with. */
+  eligible: external_exports.array(HubAddressRoleSchema).readonly()
+});
+var HubAddressBookSchema = external_exports.object({
+  rows: external_exports.array(HubAddressRowSchema).readonly(),
+  roles: external_exports.object({
+    appConnections: HubAppConnectionsResolutionSchema,
+    notificationTaps: HubAddressRoleResolutionSchema,
+    internal: HubAddressRoleResolutionSchema,
+    publicEndpoint: HubAddressRoleResolutionSchema
+  }),
+  /** The `hub=` an app link carries (D709), or null. */
+  appLinkHub: external_exports.string().nullable()
+});
 var AllowedAddressesSchema = external_exports.object({
   /**
   * Allowlist of interface addresses operators have explicitly opted
@@ -39866,19 +41425,18 @@ var localNetworkCapability = {
       *  tunnel always emits `https://` regardless. */
       scheme: external_exports.enum(["http", "https"]).optional(),
       /** Append the CamStack app link entry (`kind: 'app-link'`, D709) —
-      *  an address notification links can be flagged with, not a hub
+      *  an address notification taps can be flagged with, not a hub
       *  route. Default `false`: racers and rankers never see it. */
       includeAppLink: external_exports.boolean().optional()
     }), GetConnectionEndpointsResultSchema),
     /**
-    * The address notification links are flagged with. `baseUrl: null` means
-    * AUTO, which is the CamStack app link (D709): viewer taps go through
-    * `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the app. Any
-    * hub address the palette lists can be flagged instead; then viewer taps,
-    * attachment links and action buttons all use it. Signed media and
-    * buttons never use the app link — with it flagged (or AUTO) they keep
-    * the ranked hub ladder (a configured origin, a connected tunnel, then
-    * the LAN), never loopback.
+    * The `notificationTaps` role (D734): where TAPPING a notification opens.
+    * `baseUrl: null` means AUTO, which is the CamStack app link (D709): taps
+    * go through `https://camstack.zentik.app/…?hub=<appLinkHub>` and open the
+    * app. Any hub address the palette lists can be flagged instead; then a
+    * tap opens that address. Only the tap: action buttons, attachment /
+    * media links and admin links follow the `publicEndpoint` role
+    * (`getAddresses().roles.publicEndpoint`), never this one.
     *
     * Why an explicit marker: the automatic ranking cannot know which of
     * several reachable addresses the RECIPIENT can actually open. A link is
@@ -39888,26 +41446,80 @@ var localNetworkCapability = {
     */
     getNotificationEndpoint: method(external_exports.void(), NotificationEndpointSchema),
     /**
-    * Mark which endpoint notification artifacts use. `baseUrl: null` restores
-    * AUTO. The value is stored verbatim (not an index into the candidate
-    * list): interfaces come and go, and an index would silently re-point at a
-    * different address after a reboot.
+    * @deprecated Use `setAddressRole({ role: 'notificationTaps', … })`. It
+    * writes the same `notificationTaps` flag, with the same validation. `baseUrl: null` restores automatic; an
+    * address that is not detected becomes a custom address.
     */
     setNotificationEndpoint: method(external_exports.object({ baseUrl: external_exports.string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }),
     /**
-    * The endpoints the SDK / viewer races for API access. Empty `baseUrls`
-    * means AUTO: every LAN IPv4 address plus the public tunnel, never IPv6,
-    * never mesh, never loopback. `resolved` is that set (or the operator's
-    * explicit subset) as it stands right now.
+    * The `appConnections` role as shipped apps read it: the flagged addresses
+    * (detected or custom), or empty for AUTO — every LAN IPv4 address plus
+    * the public tunnel, never IPv6, mesh, loopback or a custom address.
+    * `resolved` is the set as it stands right now; the custom ones in it are
+    * also in `getConnectionEndpoints`, which the apps filter by it.
     */
     getViewerEndpoints: method(external_exports.void(), ViewerEndpointsSchema),
     /**
-    * Replace the viewer race set. Empty `baseUrls` restores AUTO. Stored
-    * verbatim (not indices) so a temporarily-down tunnel is not silently
-    * dropped from the operator's choice.
+    * @deprecated Use `setAddressRole({ role: 'appConnections', … })`. It
+    * replaces the same `appConnections` flags.
+    * Empty `baseUrls` restores automatic.
     */
     setViewerEndpoints: method(external_exports.object({ baseUrls: external_exports.array(external_exports.string()).readonly() }), ViewerEndpointsSchema, { kind: "mutation" }),
     /**
+    * The Network page's Addresses table and every role's answer — the ONE
+    * reading of "which address is this hub reached at, for what": detected
+    * endpoints and custom addresses with their role flags, and per role the
+    * flagged address, the one in use and whether it is automatic. Agent
+    * deliveries and LAN devices read `roles.internal`; sign-in, OAuth2 and
+    * the notification centre's buttons / media / admin links read
+    * `roles.publicEndpoint`; nothing ranks the palette itself. `scheme` is
+    * the one the caller shows LAN rows in (as `getConnectionEndpoints`);
+    * `internal` and `publicEndpoint` are always resolved over the HTTPS
+    * palette.
+    */
+    getAddresses: method(external_exports.object({ scheme: external_exports.enum(["http", "https"]).optional() }).optional(), HubAddressBookSchema),
+    /**
+    * Add a custom address. Validated: an http(s) origin with a host, no
+    * credentials, no path, never loopback — an invalid one is refused with
+    * the reason and nothing is stored. Adding an address that already exists
+    * only updates its label.
+    */
+    addCustomAddress: method(external_exports.object({
+      baseUrl: external_exports.string(),
+      label: external_exports.string().max(80)
+    }), HubAddressBookSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Remove a custom address. Its role flags go with it (those roles turn automatic). */
+    removeCustomAddress: method(external_exports.object({ baseUrl: external_exports.string() }), HubAddressBookSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Flag (`enabled: true`) or unflag an address for a role. For a
+    * single-valued role, flagging moves the flag off every other address.
+    * `baseUrl: null` returns the role to automatic. The address must be a row
+    * of the table (detected, custom, or the app link for `notificationTaps`);
+    * `publicEndpoint` on a plain-http address is refused unless
+    * `acceptInsecureHttp`, and never takes the app link.
+    */
+    setAddressRole: method(external_exports.object({
+      role: HubAddressRoleSchema,
+      baseUrl: external_exports.string().nullable(),
+      enabled: external_exports.boolean(),
+      acceptInsecureHttp: external_exports.boolean().optional()
+    }), HubAddressBookSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * @deprecated Read `getAddresses().roles.internal` / `.publicEndpoint`.
+    * Kept so an addon built against the D729 amendment keeps resolving:
+    * `cluster` = the `internal` role, `browser` = the `publicEndpoint` role.
+    */
+    getHubAddresses: method(external_exports.void(), HubAddressesSchema),
+    /**
     * Read the operator's allowlist. Empty = "auto" (no filter). Used
     * by the admin UI's address selector to seed its checkbox state.
     */
@@ -40426,7 +42038,8 @@ var MotionStatusSchema = external_exports.object({
   *   writes this slice (not even a boot seed), and neither does the runner's
   *   phase machine: its phase is "a session is attached" for every on-motion
   *   session, not motion, and it now has its own `DetectionPhaseTransition`.
-  *   A provider's `isDetected` answers from the hub's slice.
+  *   A provider's `isDetected` and `getStatus` answer from the hub's slice
+  *   (`hubMotionNativeProvider`).
   * - **Sensors** (Home Assistant binary sensors, Homematic, Matter, Alexa
   *   imports) — the provider pushes both edges itself, from the upstream
   *   system's own state change. That is the sensor's own fact.
@@ -45494,6 +47107,22 @@ var TotpStatusSchema = external_exports.object({
   /** Null when no row exists OR the row is still pending confirmation. */
   confirmedAt: external_exports.number().nullable()
 });
+var ExternalIdentitySchema = external_exports.object({
+  /** Login-method id of the provider instance, e.g. `auth-oidc/authentik`. */
+  provider: external_exports.string(),
+  /** The IdP's stable subject (`sub`) for this account. */
+  subject: external_exports.string(),
+  /** The verified `iss` of the IdP the identity was linked under — `sub` is unique only per issuer. */
+  issuer: external_exports.string(),
+  userId: external_exports.string(),
+  /** What the IdP called the account at link time (username / email) — display only. */
+  label: external_exports.string().optional(),
+  linkedAt: external_exports.number()
+});
+var ExternalIdentityKeySchema = external_exports.object({
+  provider: external_exports.string().min(1),
+  subject: external_exports.string().min(1)
+});
 var userManagementCapability = {
   name: "user-management",
   scope: "system",
@@ -45636,6 +47265,32 @@ var userManagementCapability = {
       username: external_exports.string(),
       scopes: external_exports.array(TokenScopeSchema)
     }).nullable(), { access: "view" }),
+    listExternalIdentities: method(external_exports.object({ userId: external_exports.string() }), external_exports.array(ExternalIdentitySchema), { auth: "admin" }),
+    /** The user an identity is linked to, or `null`. */
+    findUserByExternalIdentity: method(ExternalIdentityKeySchema, external_exports.object({
+      userId: external_exports.string(),
+      issuer: external_exports.string()
+    }).nullable(), { auth: "admin" }),
+    /**
+    * Link `(provider, subject)` to `userId`. Idempotent for the same user;
+    * REFUSES (throws) an identity already linked to another user, and a
+    * user that does not exist.
+    */
+    linkExternalIdentity: method(ExternalIdentityKeySchema.extend({
+      userId: external_exports.string(),
+      issuer: external_exports.string().min(1),
+      label: external_exports.string().optional()
+    }), external_exports.object({ success: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin",
+      access: "create"
+    }),
+    /** Remove one link of `userId`. `success: false` when it was not linked to that user. */
+    unlinkExternalIdentity: method(ExternalIdentityKeySchema.extend({ userId: external_exports.string() }), external_exports.object({ success: external_exports.boolean() }), {
+      kind: "mutation",
+      auth: "admin",
+      access: "delete"
+    }),
     listOauthSessions: method(external_exports.void(), external_exports.array(OauthSessionSummarySchema), { auth: "admin" }),
     revokeOauthSession: method(external_exports.object({ id: external_exports.string() }), external_exports.object({ success: external_exports.boolean() }), {
       kind: "mutation",
@@ -46401,6 +48056,16 @@ var UNIT_TABLE = {
   }
 };
 var INVERTIBLE_CAPS = SOURCE_CAPS.filter((cap) => cap !== "switch" && cap !== "motion");
+var FRIGATE_STOCK_CLASS_FLOORS = Object.freeze({
+  person: 0.5,
+  vehicle: 0.5,
+  animal: 0.5
+});
+var FRIGATE_PLUS_CLASS_FLOORS = Object.freeze({
+  person: 0.65,
+  vehicle: 0.65,
+  animal: 0.65
+});
 var HF_REPO = "camstack/camstack-models";
 var HF_BASE_URL = `https://huggingface.co/${HF_REPO}/resolve/main`;
 var AccessoryKind = {
@@ -46591,6 +48256,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "addons.listInstallations": {
+    capName: "addons",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "addons.listJobs": {
     capName: "addons",
     capScope: "system",
@@ -47773,90 +49444,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "decoder.createSession": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "decoder.destroySession": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "delete"
-  },
-  "decoder.getFrame": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
   "decoder.getInfo": {
     capName: "decoder",
     capScope: "system",
     addonId: null,
     access: "view"
   },
-  "decoder.getShmStats": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "decoder.getStats": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "decoder.listActiveSessions": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "decoder.openStream": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "decoder.pullFrames": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "decoder.pullHandles": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "decoder.pushPacket": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
   "decoder.reprobeHwaccel": {
     capName: "decoder",
     capScope: "system",
     addonId: null,
     access: "create"
   },
-  "decoder.supportsCodec": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "decoder.updateConfig": {
-    capName: "decoder",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
   "detectionPipeline.applyDeviceSettingsPatch": {
     capName: "detection-pipeline",
     capScope: "device",
@@ -49123,6 +50722,96 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "keychain.delete": {
+    capName: "keychain",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
+  "keychain.getState": {
+    capName: "keychain",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "keychain.listMeta": {
+    capName: "keychain",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "keychain.put": {
+    capName: "keychain",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "keychain.resolve": {
+    capName: "keychain",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "keychainAdmin.deleteOrphans": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
+  "keychainAdmin.downloadRecoveryKey": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "keychainAdmin.listAudit": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "keychainAdmin.listSecrets": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "keychainAdmin.purgeRetiredKeys": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
+  "keychainAdmin.resetKeychain": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
+  "keychainAdmin.reveal": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "keychainAdmin.rotateMasterKey": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "keychainAdmin.setSystemSecret": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "keychainAdmin.status": {
+    capName: "keychain-admin",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "lawnMowerControl.dock": {
     capName: "lawn-mower-control",
     capScope: "device",
@@ -49345,12 +51034,24 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "localNetwork.addCustomAddress": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "localNetwork.downloadCa": {
     capName: "local-network",
     capScope: "system",
     addonId: null,
     access: "view"
   },
+  "localNetwork.getAddresses": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "localNetwork.getAllowedAddresses": {
     capName: "local-network",
     capScope: "system",
@@ -49363,6 +51064,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "localNetwork.getHubAddresses": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "localNetwork.getNotificationEndpoint": {
     capName: "local-network",
     capScope: "system",
@@ -49399,6 +51106,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "localNetwork.removeCustomAddress": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
   "localNetwork.resetAllowlistToBestMatch": {
     capName: "local-network",
     capScope: "system",
@@ -49411,6 +51124,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "localNetwork.setAddressRole": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "localNetwork.setAllowedAddresses": {
     capName: "local-network",
     capScope: "system",
@@ -50467,6 +52186,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineAnalytics.addRetrainFrameFromRecording": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
+  "pipelineAnalytics.addRetrainFramesToCollection": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "pipelineAnalytics.applyDeviceSettingsPatch": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -50515,12 +52246,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.createRetrainCollection": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
+  "pipelineAnalytics.createRetrainDatasetVersion": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "pipelineAnalytics.deleteDeviceEvents": {
     capName: "pipeline-analytics",
     capScope: "device",
     addonId: null,
     access: "delete"
   },
+  "pipelineAnalytics.deleteRetrainCollection": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "delete"
+  },
+  "pipelineAnalytics.deleteRetrainDatasetVersion": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "delete"
+  },
   "pipelineAnalytics.deleteTracks": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -50725,6 +52480,30 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.listRetrainAssistProfiles": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
+  "pipelineAnalytics.listRetrainCollectionFrames": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
+  "pipelineAnalytics.listRetrainCollections": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
+  "pipelineAnalytics.listRetrainDatasetVersions": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.listRetrainFrames": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -50767,12 +52546,24 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineAnalytics.previewRetrainDataset": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.proposeRetrainAnnotations": {
     capName: "pipeline-analytics",
     capScope: "device",
     addonId: null,
     access: "create"
   },
+  "pipelineAnalytics.proposeRetrainAnnotationsWithLlm": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "pipelineAnalytics.pruneEvents": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -50827,6 +52618,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineAnalytics.removeRetrainFrameFromCollection": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "delete"
+  },
+  "pipelineAnalytics.renameRetrainCollection": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "pipelineAnalytics.restageRetrainTrack": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -50857,6 +52660,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineAnalytics.setRetrainFrameComplete": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "pipelineAnalytics.setTrackFlags": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -50881,6 +52690,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineAnalytics.verifyRetrainDatasetVersion": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.wipeAllAnalytics": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -50893,6 +52708,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "delete"
   },
+  "pipelineAnalytics.writeRetrainArchive": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "pipelineExecutor.cacheFrameInPool": {
     capName: "pipeline-executor",
     capScope: "system",
@@ -50905,13 +52726,13 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "delete"
   },
-  "pipelineExecutor.deleteModel": {
+  "pipelineExecutor.clearModelBoundDeviceOverrides": {
     capName: "pipeline-executor",
     capScope: "system",
     addonId: null,
     access: "delete"
   },
-  "pipelineExecutor.deleteTemplate": {
+  "pipelineExecutor.deleteModel": {
     capName: "pipeline-executor",
     capScope: "system",
     addonId: null,
@@ -51055,12 +52876,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "pipelineExecutor.listTemplates": {
-    capName: "pipeline-executor",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
   "pipelineExecutor.rearmInferenceDevice": {
     capName: "pipeline-executor",
     capScope: "system",
@@ -51085,12 +52900,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "pipelineExecutor.saveTemplate": {
-    capName: "pipeline-executor",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
   "pipelineExecutor.setVideoPipelineSteps": {
     capName: "pipeline-executor",
     capScope: "system",
@@ -51109,17 +52918,23 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "pipelineExecutor.updateTemplate": {
+  "pipelineExecutor.validatePipeline": {
     capName: "pipeline-executor",
     capScope: "system",
     addonId: null,
+    access: "view"
+  },
+  "pipelineOrchestrator.abortNodeBenchmark": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
     access: "create"
   },
-  "pipelineExecutor.validatePipeline": {
-    capName: "pipeline-executor",
+  "pipelineOrchestrator.applyAutoTune": {
+    capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
-    access: "view"
+    access: "create"
   },
   "pipelineOrchestrator.applyDeviceSettingsPatch": {
     capName: "pipeline-orchestrator",
@@ -51139,7 +52954,7 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.deleteTemplate": {
+  "pipelineOrchestrator.deleteNodeBenchmarkResult": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
@@ -51235,6 +53050,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineOrchestrator.getEffectiveShares": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "pipelineOrchestrator.getGlobalMetrics": {
     capName: "pipeline-orchestrator",
     capScope: "system",
@@ -51247,6 +53068,24 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineOrchestrator.getNodeBenchmarkCandidates": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "pipelineOrchestrator.getNodeBenchmarkPreflight": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "pipelineOrchestrator.getNodeBenchmarkStatus": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "pipelineOrchestrator.getNodeInferenceDevices": {
     capName: "pipeline-orchestrator",
     capScope: "system",
@@ -51271,6 +53110,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineOrchestrator.getPlacementStats": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "pipelineOrchestrator.getReconcileFromDiskStatus": {
     capName: "pipeline-orchestrator",
     capScope: "system",
@@ -51283,7 +53128,7 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "pipelineOrchestrator.listTemplates": {
+  "pipelineOrchestrator.listNodeBenchmarkResults": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
@@ -51295,6 +53140,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineOrchestrator.planAutoTune": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "pipelineOrchestrator.rebalance": {
     capName: "pipeline-orchestrator",
     capScope: "system",
@@ -51337,12 +53188,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.saveTemplate": {
-    capName: "pipeline-orchestrator",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
   "pipelineOrchestrator.setAgentCapabilities": {
     capName: "pipeline-orchestrator",
     capScope: "system",
@@ -51355,12 +53200,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.setAgentDetectWeight": {
-    capName: "pipeline-orchestrator",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
   "pipelineOrchestrator.setAgentInferenceDevices": {
     capName: "pipeline-orchestrator",
     capScope: "system",
@@ -51397,6 +53236,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineOrchestrator.setCameraStepSettings": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "pipelineOrchestrator.setCameraStepToggle": {
     capName: "pipeline-orchestrator",
     capScope: "system",
@@ -51415,12 +53260,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineOrchestrator.setLoadBalancingShares": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "pipelineOrchestrator.setPipelineDevicePin": {
     capName: "pipeline-orchestrator",
     capScope: "system",
     addonId: null,
     access: "create"
   },
+  "pipelineOrchestrator.setShareSource": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "pipelineOrchestrator.startNodeBenchmark": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "pipelineOrchestrator.suggestShares": {
+    capName: "pipeline-orchestrator",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "pipelineOrchestrator.unassignAudio": {
     capName: "pipeline-orchestrator",
     capScope: "system",
@@ -51433,8 +53302,8 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "pipelineOrchestrator.updateTemplate": {
-    capName: "pipeline-orchestrator",
+  "pipelineRunner.abortNodeBench": {
+    capName: "pipeline-runner",
     capScope: "system",
     addonId: null,
     access: "create"
@@ -51487,6 +53356,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineRunner.getNodeBenchStatus": {
+    capName: "pipeline-runner",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "pipelineRunner.getParkedTrackFrame": {
     capName: "pipeline-runner",
     capScope: "system",
@@ -51529,6 +53404,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "pipelineRunner.startNodeBench": {
+    capName: "pipeline-runner",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "plateGallery.assignPlate": {
     capName: "plate-gallery",
     capScope: "system",
@@ -52873,12 +54754,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "streamBroker.pullFrameHandles": {
-    capName: "stream-broker",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
   "streamBroker.regenerateRtspToken": {
     capName: "stream-broker",
     capScope: "system",
@@ -52945,12 +54820,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "streamBroker.subscribeFrames": {
-    capName: "stream-broker",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
   "streamBroker.unassignProfile": {
     capName: "stream-broker",
     capScope: "system",
@@ -52963,12 +54832,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
-  "streamBroker.unsubscribeFrames": {
-    capName: "stream-broker",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
   "streamCatalog.getCatalog": {
     capName: "stream-catalog",
     capScope: "device",
@@ -53263,18 +55126,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "delete"
   },
+  "userManagement.findUserByExternalIdentity": {
+    capName: "user-management",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "userManagement.getTotpStatus": {
     capName: "user-management",
     capScope: "system",
     addonId: null,
     access: "view"
   },
+  "userManagement.linkExternalIdentity": {
+    capName: "user-management",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "userManagement.listApiKeys": {
     capName: "user-management",
     capScope: "system",
     addonId: null,
     access: "view"
   },
+  "userManagement.listExternalIdentities": {
+    capName: "user-management",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "userManagement.listOauthSessions": {
     capName: "user-management",
     capScope: "system",
@@ -53353,6 +55234,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "userManagement.unlinkExternalIdentity": {
+    capName: "user-management",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
   "userManagement.updateUser": {
     capName: "user-management",
     capScope: "system",
@@ -53665,6 +55552,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "webrtcSession.applyDownlinkProbe": {
+    capName: "webrtc-session",
+    capScope: "device",
+    addonId: null,
+    access: "create"
+  },
   "webrtcSession.closeSession": {
     capName: "webrtc-session",
     capScope: "device",
@@ -55518,11 +57411,6 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
-  "decoder.createSession": [{
-    name: "deviceId",
-    form: "single",
-    optional: true
-  }],
   "detectionPipeline.applyDeviceSettingsPatch": [{
     name: "deviceId",
     form: "single",
@@ -56493,6 +58381,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineAnalytics.addRetrainFrameFromRecording": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
   "pipelineAnalytics.applyDeviceSettingsPatch": [{
     name: "deviceId",
     form: "single",
@@ -56683,6 +58576,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineAnalytics.proposeRetrainAnnotationsWithLlm": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
   "pipelineAnalytics.pruneEventsBefore": [{
     name: "deviceId",
     form: "single",
@@ -56733,6 +58631,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineAnalytics.setRetrainFrameComplete": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
   "pipelineAnalytics.setTrackFlags": [{
     name: "deviceId",
     form: "single",
@@ -56753,6 +58656,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineExecutor.clearModelBoundDeviceOverrides": [{
+    name: "deviceIds",
+    form: "array",
+    optional: true
+  }],
   "pipelineExecutor.runPipeline": [{
     name: "deviceId",
     form: "single",
@@ -56858,6 +58766,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineOrchestrator.setCameraStepSettings": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
   "pipelineOrchestrator.setCameraStepToggle": [{
     name: "deviceId",
     form: "single",
@@ -57629,6 +59542,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "webrtcSession.applyDownlinkProbe": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
   "webrtcSession.closeSession": [{
     name: "deviceId",
     form: "single",
@@ -57779,6 +59697,8 @@ var NC_SYSTEM_EVENT_FAMILY = {
   "detection-blind": "device-events",
   "node-online": "system",
   "node-offline": "system",
+  "node-restarting": "system",
+  "node-updating": "system",
   "node-inference-unavailable": "system",
   "addon-crash-loop": "system",
   "addon-update-available": "system",
@@ -57857,6 +59777,7 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
     kinds: [
       "node-offline",
       "node-online",
+      "node-restarting",
       "node-inference-unavailable"
     ]
   },
@@ -57878,6 +59799,7 @@ var NC_SYSTEM_EVENT_KIND_GROUP_SPECS = [
     label: "Server & container updates",
     kinds: [
       "server-update-available",
+      "node-updating",
       "server-updated",
       "wrapper-update-available"
     ]
@@ -57999,6 +59921,7 @@ var STATE_SUMMARY_SECTION_VARS = [
     kinds: [
       "node-offline",
       "node-online",
+      "node-restarting",
       "node-inference-unavailable"
     ]
   },
@@ -58020,6 +59943,7 @@ var STATE_SUMMARY_SECTION_VARS = [
     example: "server 1.2.377 \u2192 1.2.378",
     kinds: [
       "server-update-available",
+      "node-updating",
       "server-updated",
       "wrapper-update-available"
     ]
@@ -58052,7 +59976,7 @@ var STATE_SUMMARY_VARS = [
   {
     name: "summarySection",
     label: "Summary: this section",
-    description: "The section a per-section summary row is about (D698); on a summary sent as one message, every section it reports, comma-separated.",
+    description: "The section a per-section summary row is about; on a summary sent as one message, every section it reports, comma-separated.",
     example: "Batterie scariche",
     group: "system",
     families: ["rule"],
@@ -58425,6 +60349,8 @@ var NC_TEMPLATE_VARS = [
     systemEventKinds: [
       "node-online",
       "node-offline",
+      "node-restarting",
+      "node-updating",
       "node-inference-unavailable",
       "addon-crash-loop",
       ...UPDATES,
@@ -58443,6 +60369,8 @@ var NC_TEMPLATE_VARS = [
     systemEventKinds: [
       "node-online",
       "node-offline",
+      "node-restarting",
+      "node-updating",
       "node-inference-unavailable",
       "addon-crash-loop",
       ...UPDATES,
@@ -58496,6 +60424,7 @@ var NC_TEMPLATE_VARS = [
     systemEventKinds: [
       ...UPDATES,
       "addon-updated",
+      "node-updating",
       "server-updated"
     ]
   },
@@ -58507,7 +60436,11 @@ var NC_TEMPLATE_VARS = [
     families: ["rule"],
     fields: [...RULE_TEXT],
     kinds: ["system"],
-    systemEventKinds: [...PACKAGE_UPDATES, "server-updated"]
+    systemEventKinds: [
+      ...PACKAGE_UPDATES,
+      "node-updating",
+      "server-updated"
+    ]
   },
   {
     name: "nodes",
@@ -58559,7 +60492,7 @@ var NC_TEMPLATE_VARS = [
     families: ["rule"],
     fields: [...RULE_TEXT],
     kinds: ["system"],
-    systemEventKinds: ["server-updated"]
+    systemEventKinds: ["node-updating", "server-updated"]
   },
   {
     name: "toVersion",
@@ -58569,7 +60502,7 @@ var NC_TEMPLATE_VARS = [
     families: ["rule"],
     fields: [...RULE_TEXT],
     kinds: ["system"],
-    systemEventKinds: ["server-updated"]
+    systemEventKinds: ["node-updating", "server-updated"]
   },
   {
     name: "destinationsOk",
@@ -59036,6 +60969,7 @@ var TimelapseRuleSchema = TimelapseRuleInputSchema.extend({
   updatedAt: external_exports.number()
 });
 var ProviderMotionDataSchema = MotionOnMotionChangedDataSchema.omit({ triggeredBy: true });
+var OVERHEAD_MS = 3 * 6e4;
 var DetailCropConventionSchema = external_exports.object({
   /**
   * Fraction of the box's own size added on EACH side before cutting.