camstack 1.2.38 → 1.2.40

package/dist/{chunk-UYHYTS5M.js → chunk-QYPK2MRI.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-B8EIZt4h.mjs
+// ../types/dist/sleep-Cs9MWLcT.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -15926,6 +15926,16 @@ var LabelDefinitionSchema = external_exports.object({
   description: external_exports.string().optional(),
   icon: external_exports.string().optional()
 });
+var CLASS_MAP_MACRO_TARGETS = [
+  "person",
+  "vehicle",
+  "animal",
+  "package"
+];
+var ClassMapDefinitionSchema = external_exports.object({
+  mapping: external_exports.record(external_exports.string(), external_exports.enum(CLASS_MAP_MACRO_TARGETS)),
+  preserveOriginal: external_exports.boolean()
+});
 var MODEL_FORMATS = [
   "onnx",
   "coreml",
@@ -15979,6 +15989,13 @@ var ModelVariantGroupSchema = external_exports.object({
   */
   resolution: external_exports.number().int().positive().optional()
 });
+var MODEL_PROVIDER_IDS = [
+  "camstack",
+  "frigate",
+  "scrypted",
+  "custom"
+];
+var ModelProviderIdSchema = external_exports.enum(MODEL_PROVIDER_IDS);
 var ModelCatalogEntrySchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
@@ -16074,7 +16091,19 @@ var ModelCatalogEntrySchema = external_exports.object({
   * `id` stays the source of truth for resolution/download/persistence; grouping
   * is a presentation overlay resolved back to an `id`.
   */
-  group: ModelVariantGroupSchema.optional()
+  group: ModelVariantGroupSchema.optional(),
+  /**
+  * Catalog source for the pipeline stepper's provider-first picker. Absent on
+  * built-in CamStack entries (treated as `camstack`) and on registry rows
+  * persisted before this field existed (`inferModelProvider` fills those).
+  */
+  provider: ModelProviderIdSchema.optional(),
+  /**
+  * Per-MODEL class map override. Absent ⇒ the step's `StepDefinition.classMap`
+  * applies (Frigate / COCO public catalog). Set on a custom model whose raw
+  * labels already ARE the CamStack macros (Scrypted identity map).
+  */
+  classMap: ClassMapDefinitionSchema.optional()
 });
 var ConvertTargetSchema = external_exports.discriminatedUnion("format", [external_exports.object({
   format: external_exports.literal("openvino"),
@@ -16103,7 +16132,8 @@ var ModelConvertMetadataSchema = external_exports.object({
     "ocr",
     "segmentation"
   ]),
-  faceAlignment: external_exports.boolean().optional()
+  faceAlignment: external_exports.boolean().optional(),
+  classMap: ClassMapDefinitionSchema.optional()
 });
 var ConvertArtifactSchema = external_exports.object({
   format: external_exports.enum(MODEL_FORMATS),
@@ -22740,14 +22770,22 @@ var NcOccupancyConditionSchema = external_exports.object({
   sustainSeconds: external_exports.number().int().min(0).max(3600).default(15)
 });
 var NcAudioConditionSchema = external_exports.object({
-  /** LABEL MODE: audio macro labels. Present ⇒ fires on the first labelled frame. */
+  /** LABEL MODE: audio macro labels. Present ⇒ count-in-window confirm. */
   labels: external_exports.array(external_exports.string().min(1)).min(1).optional(),
   /** LEVEL MODE: floor in dBFS (negative-going, `0` = full scale). */
   dbThreshold: external_exports.number().min(-96).max(0).optional(),
   /** LEVEL MODE ONLY: percentage of the window's samples that must be hits (1–100). */
   hitPercent: external_exports.number().int().min(1).max(100).default(60),
   /** LEVEL MODE ONLY: length of the sampling window in seconds. */
-  samplingSeconds: external_exports.number().int().min(1).max(300).default(10)
+  samplingSeconds: external_exports.number().int().min(1).max(300).default(10),
+  /**
+  * LABEL MODE: how many labelled frames must land inside
+  * {@link NcAudioConditionSchema.shape.confirmWindowSec} before dispatch.
+  * Absent ⇒ 2 (the matcher default). `1` is first-frame fire.
+  */
+  confirmHits: external_exports.number().int().min(1).max(20).optional(),
+  /** LABEL MODE: the window those frames must share, in seconds. Absent ⇒ 5. */
+  confirmWindowSec: external_exports.number().int().min(1).max(60).optional()
 });
 var NcCrossingSchema = external_exports.enum([
   "enter",
@@ -24565,6 +24603,46 @@ var RecentTracksPageSchema = external_exports.object({
   /** Cursor for the next page, or null when this page is the last. */
   nextCursor: external_exports.string().nullable()
 });
+var LIST_GROUPS_DEFAULT_LIMIT = 40;
+var LIST_GROUPS_MAX_LIMIT = 100;
+var AnalyticsGroupRecordSchema = external_exports.object({
+  id: external_exports.string(),
+  deviceId: external_exports.number().int(),
+  openedAt: external_exports.number().int(),
+  closedAt: external_exports.number().int(),
+  timestamp: external_exports.number().int(),
+  memberCount: external_exports.number().int(),
+  memberTrackIds: external_exports.array(external_exports.string()).readonly(),
+  className: external_exports.string(),
+  classes: external_exports.array(external_exports.string()).readonly(),
+  /** Relative event-media path, or null when the group has no picture yet. */
+  mediaUrl: external_exports.string().nullable(),
+  singleton: external_exports.boolean()
+});
+var AnalyticsGroupMemberSchema = external_exports.object({
+  trackId: external_exports.string(),
+  deviceId: external_exports.number().int(),
+  className: external_exports.string(),
+  firstSeen: external_exports.number().int(),
+  lastSeen: external_exports.number().int(),
+  mediaUrl: external_exports.string().nullable()
+});
+var AnalyticsGroupDetailSchema = AnalyticsGroupRecordSchema.extend({ members: external_exports.array(AnalyticsGroupMemberSchema).readonly() });
+var ListGroupsQueryInput = external_exports.object({
+  /** Devices to merge. An empty array yields `{ groups: [], nextCursor: null }`. */
+  deviceIds: external_exports.array(external_exports.number()),
+  /** Window lower bound on `closedAt` (inclusive). */
+  since: external_exports.number().optional(),
+  /** Window upper bound on `openedAt` (inclusive). */
+  until: external_exports.number().optional(),
+  limit: external_exports.number().int().min(1).max(LIST_GROUPS_MAX_LIMIT).default(LIST_GROUPS_DEFAULT_LIMIT),
+  /** Opaque continuation cursor from a previous page's `nextCursor`. */
+  cursor: external_exports.string().optional()
+});
+var ListGroupsPageSchema = external_exports.object({
+  groups: external_exports.array(AnalyticsGroupRecordSchema).readonly(),
+  nextCursor: external_exports.string().nullable()
+});
 var KeyEventQueryInput = external_exports.object({
   deviceId: external_exports.number(),
   /** Window lower bound (track firstSeen ≥ since). */
@@ -24640,7 +24718,9 @@ var TrackCascadeCountsSchema = external_exports.object({
   /** Unassigned plate reads removed (best-effort; plate leg deferred to plate-intelligence). */
   plates: external_exports.number().int(),
   /** Per-track CLIP search vectors removed (best-effort). */
-  embeddings: external_exports.number().int()
+  embeddings: external_exports.number().int(),
+  /** Group membership + group rows removed with their last member (best-effort). */
+  groups: external_exports.number().int()
 });
 var DiskReconcileCountsSchema = external_exports.object({
   mediaDropped: external_exports.number().int(),
@@ -24782,6 +24862,16 @@ var pipelineAnalyticsCapability = {
     * are not included (same contract as `listTracks`).
     */
     listRecentTracks: method(RecentTracksQueryInput, RecentTracksPageSchema),
+    /**
+    * Batched co-moving group listing — the Groups feed. Same merge/cursor
+    * contract as {@link listRecentTracks}. A group is a sealed partition of
+    * one session; `getGroup` is the detail with members.
+    */
+    listGroups: method(ListGroupsQueryInput, ListGroupsPageSchema),
+    getGroup: method(external_exports.object({
+      deviceId: external_exports.number(),
+      groupId: external_exports.string().min(1)
+    }), AnalyticsGroupDetailSchema.nullable()),
     clearTracks: method(external_exports.object({ deviceId: external_exports.number() }), external_exports.void(), {
       kind: "mutation",
       auth: "admin"
@@ -25370,6 +25460,33 @@ var NativeCropRefSchema = external_exports.object({
     h: external_exports.number()
   })
 });
+external_exports.object({
+  crop: external_exports.object({
+    left: external_exports.number(),
+    top: external_exports.number(),
+    width: external_exports.number().positive(),
+    height: external_exports.number().positive()
+  }).optional(),
+  content: external_exports.object({
+    width: external_exports.number().int().positive(),
+    height: external_exports.number().int().positive()
+  }),
+  fit: external_exports.enum(["stretch", "contain"]),
+  format: external_exports.enum([
+    "rgb",
+    "gray",
+    "jpeg"
+  ])
+});
+var FrameRefSchema = external_exports.object({
+  registryId: external_exports.string().min(1),
+  id: external_exports.string().min(1),
+  width: external_exports.number().int().positive(),
+  height: external_exports.number().int().positive(),
+  format: external_exports.enum(["rgb", "gray"]),
+  timestamp: external_exports.number(),
+  capturedAt: external_exports.number().optional()
+});
 var ModelFormatSchema$1 = external_exports.enum([
   "onnx",
   "coreml",
@@ -25436,7 +25553,8 @@ var PipelineModelOptionSchema = external_exports.object({
     sizeMB: external_exports.number()
   })),
   group: ModelVariantGroupSchema.optional(),
-  legacy: external_exports.boolean().optional()
+  legacy: external_exports.boolean().optional(),
+  provider: ModelProviderIdSchema.optional()
 });
 var ConfigFieldBridge = external_exports.custom();
 var PipelineAddonSchemaSchema = external_exports.object({
@@ -25669,7 +25787,7 @@ var pipelineExecutorCapability = {
     * legacy call shape used by existing benchmark code; once all
     * callers pass it explicitly we make it required.
     *
-    * Exactly one of `frame`, `frameHandle`, `imageBase64`,
+    * Exactly one of `frame`, `frameRef`, `frameHandle`, `imageBase64`,
     * `referenceImage` must be provided:
     *  - `frame`: runtime dispatch path (runner → decoded broker frame).
     *    Carries the raw buffer, dimensions, and format; the executor
@@ -25691,6 +25809,12 @@ var pipelineExecutorCapability = {
       steps: external_exports.array(PipelineStepInputSchema).min(1),
       frame: FrameInputSchema.optional(),
       /**
+      * Process-local lazy frame. Valid only when caller and provider resolve
+      * in the same execution-group process; split/cross-node callers use
+      * `frame`/`image` inline compatibility instead.
+      */
+      frameRef: FrameRefSchema.optional(),
+      /**
       * CB5 shm passthrough — a `FrameHandle` naming the same ring slot
       * the decoded pixels live in. One more member of the one-of
       * frame/frameHandle/image/imageBase64/referenceImage group.
@@ -25993,7 +26117,10 @@ var NativeCropResultSchema = external_exports.object({
   * Which source served this crop, so a quality-sensitive consumer (the native
   * `keyFrame`) can reject a degraded fallback:
   * - `native` — cut from the decode worker's retained NATIVE surface (the
-  *   quality path).
+  *   quality path). A subject-tile serve is also native-resolution and stays
+  *   `native` here: the public enum cannot name `tile` without a breaking cap
+  *   change. Runner telemetry distinguishes lease vs tile via `source` on the
+  *   internal crop result (`nativeHits` vs `tileHits`).
   * - `ram-fullframe` — the native surface MISSED but the request was full-frame,
   *   so the ≤640 RAM `RetainedFrameStore` served it (honest lower-res; legit for
   *   the blank-frame guard / 640-snapshot resolve, NOT for the clean keyFrame).
@@ -26496,12 +26623,41 @@ var RunnerLocalLoadSchema = external_exports.object({
     cpuCores: external_exports.number().optional()
   })
 });
+var FrameLazyCountersSchema = external_exports.object({
+  framesDecoded: external_exports.number(),
+  framesAdmitted: external_exports.number(),
+  framesDroppedPixelFree: external_exports.number(),
+  viewsMaterialized: external_exports.number(),
+  viewsSkipped: external_exports.number(),
+  workerToRunnerBytes: external_exports.number(),
+  runnerToPoolRawBytes: external_exports.number(),
+  runnerToPoolJpegBytes: external_exports.number(),
+  onDemandFullFrameRequests: external_exports.number(),
+  onDemandCropRequests: external_exports.number(),
+  nativeHits: external_exports.number(),
+  nativeMisses: external_exports.number(),
+  tileHits: external_exports.number(),
+  tileMisses: external_exports.number(),
+  fallbackHits: external_exports.number(),
+  fallbackMisses: external_exports.number(),
+  retainedWritesAvoided: external_exports.number(),
+  residentRefs: external_exports.number(),
+  residentBytes: external_exports.number(),
+  releases: external_exports.number(),
+  evictions: external_exports.number(),
+  staleMisses: external_exports.number()
+});
+var FrameLazyMetricsSchema = external_exports.object({
+  node: FrameLazyCountersSchema,
+  cameras: external_exports.array(FrameLazyCountersSchema.extend({ deviceId: external_exports.number() }))
+});
 var RunnerLocalMetricsSchema = external_exports.object({
   nodeId: external_exports.string(),
   activeCameras: external_exports.number(),
   throttledCameras: external_exports.number(),
   avgInferenceTimeMs: external_exports.number(),
-  queueDepth: external_exports.number()
+  queueDepth: external_exports.number(),
+  frameLazy: FrameLazyMetricsSchema.optional()
 });
 var pipelineRunnerCapability = {
   name: "pipeline-runner",
@@ -28288,6 +28444,8 @@ var storageProviderCapability = {
     endDownload: method(EndDownloadInputSchema, external_exports.void(), { kind: "mutation" })
   }
 };
+var ProfileSettingsSchemaBridge = external_exports.unknown().nullable();
+var ProfileSettingsBagSchema = external_exports.record(external_exports.string(), external_exports.unknown());
 var TerminalSessionInfoSchema = external_exports.object({
   /** Opaque session id minted by the provider on `openSession`. */
   sessionId: external_exports.string(),
@@ -28303,7 +28461,14 @@ var TerminalSessionInfoSchema = external_exports.object({
 var TerminalProfileInfoSchema = external_exports.object({
   profileId: external_exports.string(),
   label: external_exports.string(),
-  description: external_exports.string().optional()
+  description: external_exports.string().optional(),
+  /** Spawn defaults the instance form copies on create. */
+  executable: external_exports.string().optional(),
+  args: external_exports.array(external_exports.string()).readonly().optional(),
+  cwd: external_exports.string().optional(),
+  environment: external_exports.array(external_exports.string()).readonly().optional(),
+  /** ConfigUISchema for instance knobs, or null when the profile has none. */
+  settingsSchema: ProfileSettingsSchemaBridge.optional()
 });
 var TerminalInstanceInfoSchema = external_exports.object({
   instanceId: external_exports.string(),
@@ -28312,7 +28477,12 @@ var TerminalInstanceInfoSchema = external_exports.object({
   profileId: external_exports.string(),
   profileLabel: external_exports.string(),
   name: external_exports.string(),
-  enabled: external_exports.boolean()
+  enabled: external_exports.boolean(),
+  executable: external_exports.string(),
+  args: external_exports.array(external_exports.string()).readonly(),
+  cwd: external_exports.string(),
+  environment: external_exports.array(external_exports.string()).readonly(),
+  profileSettings: ProfileSettingsBagSchema
 });
 var TerminalLegacyCameraSchema = external_exports.object({
   stableId: external_exports.string(),
@@ -28351,7 +28521,24 @@ var terminalSessionCapability = {
     createInstance: method(external_exports.object({
       targetNodeId: external_exports.string().min(1),
       profileId: external_exports.string().min(1),
-      name: external_exports.string().trim().min(1).max(160).optional()
+      name: external_exports.string().trim().min(1).max(160).optional(),
+      executable: external_exports.string().max(1024).optional(),
+      args: external_exports.array(external_exports.string().max(2048)).max(64).optional(),
+      cwd: external_exports.string().max(1024).optional(),
+      environment: external_exports.array(external_exports.string().max(4096)).max(64).optional(),
+      profileSettings: ProfileSettingsBagSchema.optional()
+    }), TerminalInstanceInfoSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    updateInstance: method(external_exports.object({
+      instanceId: external_exports.string().min(1),
+      name: external_exports.string().trim().min(1).max(160).optional(),
+      executable: external_exports.string().max(1024).optional(),
+      args: external_exports.array(external_exports.string().max(2048)).max(64).optional(),
+      cwd: external_exports.string().max(1024).optional(),
+      environment: external_exports.array(external_exports.string().max(4096)).max(64).optional(),
+      profileSettings: ProfileSettingsBagSchema.optional()
     }), TerminalInstanceInfoSchema, {
       kind: "mutation",
       auth: "admin"
@@ -28386,7 +28573,11 @@ var terminalSessionCapability = {
     openSession: method(external_exports.object({
       profileId: external_exports.string(),
       cols: external_exports.number().int().positive(),
-      rows: external_exports.number().int().positive()
+      rows: external_exports.number().int().positive(),
+      executable: external_exports.string().max(1024).optional(),
+      args: external_exports.array(external_exports.string().max(2048)).max(64).optional(),
+      cwd: external_exports.string().max(1024).optional(),
+      environment: external_exports.array(external_exports.string().max(4096)).max(64).optional()
     }), TerminalSessionInfoSchema, {
       kind: "mutation",
       auth: "admin"
@@ -32109,6 +32300,12 @@ var NotificationEndpointSchema = external_exports.object({
   /** What the ranking currently resolves to (null when nothing is reachable). */
   resolved: external_exports.string().nullable()
 });
+var ViewerEndpointsSchema = external_exports.object({
+  /** The operator's explicit race set, or empty for AUTO. */
+  baseUrls: external_exports.array(external_exports.string()).readonly(),
+  /** What the ranking currently resolves to (may be empty if nothing is up). */
+  resolved: external_exports.array(external_exports.string()).readonly()
+});
 var AllowedAddressesSchema = external_exports.object({
   /**
   * Allowlist of interface addresses operators have explicitly opted
@@ -32118,6 +32315,20 @@ var AllowedAddressesSchema = external_exports.object({
   */
   addresses: external_exports.array(external_exports.string()).readonly()
 });
+var TlsStatusSchema = external_exports.object({
+  mode: external_exports.enum([
+    "generated",
+    "uploaded",
+    "disabled"
+  ]),
+  leafFingerprintSha256: external_exports.string().nullable(),
+  caFingerprintSha256: external_exports.string().nullable(),
+  validTo: external_exports.string().nullable(),
+  sans: external_exports.array(external_exports.string()),
+  caCertPem: external_exports.string().nullable(),
+  reissueError: external_exports.string().nullable(),
+  restartRequired: external_exports.boolean()
+});
 var localNetworkCapability = {
   name: "local-network",
   scope: "system",
@@ -32137,13 +32348,13 @@ var localNetworkCapability = {
     */
     getPreferred: method(external_exports.void(), PreferredSchema),
     /**
-    * Ordered candidate base URLs the SDK should try on connect.
-    * Includes LAN IPs (one per non-internal interface), the public
-    * tunnel hostname (when active), and loopback as a last-resort
-    * fallback. Filterable by `includeLoopback` / `ipv4Only`.
-    * Honours `getAllowedAddresses()` when set — addresses outside
-    * the allowlist are dropped (the public tunnel + loopback are
-    * always included as escape hatches).
+    * Ordered candidate base URLs (the palette the Network tab shows).
+    * Includes LAN IPv4, stable LAN IPv6, the public tunnel, and mesh when
+    * joined. Loopback is off by default. The SDK races the subset from
+    * `getViewerEndpoints`, not this full list — IPv6 stays here because
+    * WebRTC ICE gathers dual-stack regardless of the HTTP race. Honours
+    * `getAllowedAddresses()` when set — addresses outside the allowlist
+    * are dropped (the public tunnel is still included as an escape hatch).
     *
     * **The port is the hub's, not the caller's** (D62 — a function's fact
     * belongs to whoever already owns it). This method used to take a `port`
@@ -32174,10 +32385,11 @@ var localNetworkCapability = {
       */
       port: external_exports.number().int().min(1).max(65535).optional(),
       /** Include `http(s)://127.0.0.1:<port>` as the lowest-priority
-      *  candidate. Default `true`. */
+      *  candidate. Default `false` — loopback is not a client route. */
       includeLoopback: external_exports.boolean().optional(),
-      /** Skip IPv6 entries. Some legacy clients can't parse them.
-      *  Default `false`. */
+      /** Skip IPv6 entries. Default `false` — the palette includes stable
+      *  LAN IPv6 (ICE/WebRTC uses dual-stack regardless). Pass `true` to
+      *  hide them. The viewer HTTP/WS race is `getViewerEndpoints`. */
       ipv4Only: external_exports.boolean().optional(),
       /** Scheme to emit for LAN/loopback URLs. Default `'http'`.
       *  Pass `'https'` when the caller is itself loaded over HTTPS
@@ -32206,6 +32418,19 @@ var localNetworkCapability = {
     */
     setNotificationEndpoint: method(external_exports.object({ baseUrl: external_exports.string().nullable() }), NotificationEndpointSchema, { kind: "mutation" }),
     /**
+    * The endpoints the SDK / viewer races for API access. Empty `baseUrls`
+    * means AUTO: every LAN IPv4 address plus the public tunnel, never IPv6,
+    * never mesh, never loopback. `resolved` is that set (or the operator's
+    * explicit subset) as it stands right now.
+    */
+    getViewerEndpoints: method(external_exports.void(), ViewerEndpointsSchema),
+    /**
+    * Replace the viewer race set. Empty `baseUrls` restores AUTO. Stored
+    * verbatim (not indices) so a temporarily-down tunnel is not silently
+    * dropped from the operator's choice.
+    */
+    setViewerEndpoints: method(external_exports.object({ baseUrls: external_exports.array(external_exports.string()).readonly() }), ViewerEndpointsSchema, { kind: "mutation" }),
+    /**
     * Read the operator's allowlist. Empty = "auto" (no filter). Used
     * by the admin UI's address selector to seed its checkbox state.
     */
@@ -32223,7 +32448,34 @@ var localNetworkCapability = {
     * when the operator wants to wipe their manual edits and start
     * over from the auto-detected best matches.
     */
-    resetAllowlistToBestMatch: method(external_exports.void(), AllowedAddressesSchema, { kind: "mutation" })
+    resetAllowlistToBestMatch: method(external_exports.void(), AllowedAddressesSchema, { kind: "mutation" }),
+    /**
+    * Live TLS material for the Network → Local access certificate card.
+    * LAN HTTP / hostname are addon settings (`globalSettingsSchema`), not
+    * a second store — this query is status, not configuration.
+    */
+    getTlsStatus: method(external_exports.void(), TlsStatusSchema),
+    /** Issue a new leaf under the existing local CA. Disabled in uploaded mode. */
+    regenerateCertificate: method(external_exports.object({ reason: external_exports.string().optional() }), TlsStatusSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Replace the served material with operator-supplied PEMs. */
+    uploadCertificate: method(external_exports.object({
+      certPem: external_exports.string().min(1),
+      keyPem: external_exports.string().min(1),
+      caPem: external_exports.string().optional()
+    }), TlsStatusSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** The local CA PEM, or empty when there is none to download. */
+    downloadCa: method(external_exports.void(), external_exports.object({ pem: external_exports.string() })),
+    /** Drop uploaded material and return to the generated local CA. */
+    revertToGeneratedCertificate: method(external_exports.void(), TlsStatusSchema, {
+      kind: "mutation",
+      auth: "admin"
+    })
   },
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
   mount: { kind: "hub-only" }
@@ -33756,7 +34008,12 @@ var PlateInfoSchema = external_exports.object({
   plateBbox: BoundingBoxSchema.optional(),
   /** keyFrame parity: MediaStore key of the track's native-resolution key frame. */
   keyFrameMediaKey: external_exports.string().optional(),
-  base64: external_exports.string().optional()
+  base64: external_exports.string().optional(),
+  /**
+  * Same crop as a data-plane URL. `getPlateByTrack` returns this and
+  * never inlines JPEG; `listPlates` still inlines for the admin-ui.
+  */
+  cropUrl: external_exports.string().optional()
 });
 var MediaFileLiteSchema = external_exports.object({
   key: external_exports.string(),
@@ -38897,6 +39154,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "localNetwork.downloadCa": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "localNetwork.getAllowedAddresses": {
     capName: "local-network",
     capScope: "system",
@@ -38921,18 +39184,42 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "localNetwork.getTlsStatus": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "localNetwork.getViewerEndpoints": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
   "localNetwork.list": {
     capName: "local-network",
     capScope: "system",
     addonId: null,
     access: "view"
   },
+  "localNetwork.regenerateCertificate": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "localNetwork.resetAllowlistToBestMatch": {
     capName: "local-network",
     capScope: "system",
     addonId: null,
     access: "delete"
   },
+  "localNetwork.revertToGeneratedCertificate": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "localNetwork.setAllowedAddresses": {
     capName: "local-network",
     capScope: "system",
@@ -38945,6 +39232,18 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "localNetwork.setViewerEndpoints": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "localNetwork.uploadCertificate": {
+    capName: "local-network",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "lockControl.lock": {
     capName: "lock-control",
     capScope: "device",
@@ -39743,6 +40042,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.getGroup": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.getKeyEvents": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -39827,6 +40132,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
+  "pipelineAnalytics.listGroups": {
+    capName: "pipeline-analytics",
+    capScope: "device",
+    addonId: null,
+    access: "view"
+  },
   "pipelineAnalytics.listOpsLog": {
     capName: "pipeline-analytics",
     capScope: "device",
@@ -41825,6 +42136,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "terminalSession.updateInstance": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "terminalSession.writeInput": {
     capName: "terminal-session",
     capScope: "system",
@@ -43240,6 +43557,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "single",
     optional: false
   }],
+  "pipelineAnalytics.getGroup": [{
+    name: "deviceId",
+    form: "single",
+    optional: false
+  }],
   "pipelineAnalytics.getKeyEvents": [{
     name: "deviceId",
     form: "single",
@@ -43295,6 +43617,11 @@ var METHOD_DEVICE_SELECTORS = Object.freeze({
     form: "array",
     optional: false
   }],
+  "pipelineAnalytics.listGroups": [{
+    name: "deviceIds",
+    form: "array",
+    optional: false
+  }],
   "pipelineAnalytics.listOpsLog": [{
     name: "deviceId",
     form: "single",
@@ -44196,6 +44523,35 @@ var CLUSTER_MODEL_SCOPED_STEPS = [{
 }];
 var DEFAULT_CLUSTER_STEP_MODELS = Object.freeze(Object.fromEntries(CLUSTER_MODEL_SCOPED_STEPS.map((s) => [s.stepId, s.defaultModelId])));
 var ChosenModelIdSchema = external_exports.string().min(1);
+var CLUSTER_STEP_SETTING_FIELDS = [{
+  stepId: "face-embedding",
+  key: "minLandmarkFaceSize",
+  label: "Min face size for recognition (detection px)",
+  description: "Refuse to embed a face smaller than this IN THE DETECTION FRAME. Applies to every node \u2014 the enrolled gallery is one index, and two admission floors would fill it from two policies. 0 disables the gate.",
+  type: "slider",
+  min: 0,
+  max: 64,
+  step: 2,
+  default: 24
+}];
+function clusterStepSettingKey(stepId, fieldKey) {
+  return `clusterStepSetting:${stepId}:${fieldKey}`;
+}
+var ClusterSettingNumberSchema = external_exports.number().finite();
+function readClusterStepSettings(config2) {
+  const out = {};
+  for (const field of CLUSTER_STEP_SETTING_FIELDS) {
+    const parsed = ClusterSettingNumberSchema.safeParse(config2[clusterStepSettingKey(field.stepId, field.key)]);
+    const value = parsed.success ? parsed.data : field.default;
+    const existing = out[field.stepId] ?? {};
+    out[field.stepId] = {
+      ...existing,
+      [field.key]: value
+    };
+  }
+  return out;
+}
+var DEFAULT_CLUSTER_STEP_SETTINGS = readClusterStepSettings({});
 var DetailCropConventionSchema = external_exports.object({
   /**
   * Fraction of the box's own size added on EACH side before cutting.