camstack 1.2.4 → 1.2.6

package/dist/{chunk-DS2SQLQ5.js → chunk-BRUAXYPT.js}

@@ -14522,7 +14522,7 @@ function date4(params) {
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../types/dist/sleep-BQ60XlE9.mjs
+// ../types/dist/sleep-C3ceNSsf.mjs
 var WELL_KNOWN_TABS = [
   {
     id: "overview",
@@ -15129,6 +15129,7 @@ function method(input, output, options) {
     kind: options?.kind ?? "query",
     auth: options?.auth ?? "protected",
     ...options?.access !== void 0 ? { access: options.access } : {},
+    ...options?.caller !== void 0 ? { caller: options.caller } : {},
     timeoutMs: options?.timeoutMs
   };
 }
@@ -16344,6 +16345,35 @@ for (const l of AUDIO_MACRO_LABELS) {
   sub(kind, "audio", "audio", TAXONOMY_COLORS.audio, kind, l.name);
 }
 var EVENT_TAXONOMY = Object.freeze(Object.fromEntries(entries));
+var NcTaxonomyEntrySchema = external_exports.object({
+  /** Stable kind id (e.g. 'person', 'car', 'audio-scream', 'doorbell'). */
+  kind: external_exports.string(),
+  /** English fallback label (the UI translates via the event-kind i18n key). */
+  label: external_exports.string(),
+  /** Macro/category parent for grouping ('car' → 'vehicle'); null for a top. */
+  parentKind: external_exports.string().nullable()
+});
+var NcTaxonomySchema = external_exports.object({
+  videoClasses: external_exports.array(NcTaxonomyEntrySchema),
+  audioKinds: external_exports.array(NcTaxonomyEntrySchema),
+  labels: external_exports.array(NcTaxonomyEntrySchema)
+});
+function toEntry(kind, label, parentKind) {
+  return {
+    kind,
+    label,
+    parentKind
+  };
+}
+function buildNcTaxonomy() {
+  const all = Object.values(EVENT_TAXONOMY);
+  return {
+    videoClasses: all.filter((e) => e.category === "detection").map((e) => toEntry(e.kind, e.label, e.parentKind)),
+    audioKinds: all.filter((e) => e.category === "audio" && e.level === "sub").map((e) => toEntry(e.kind, e.label, e.parentKind)),
+    labels: all.filter((e) => e.category === "sensor" || e.category === "control").map((e) => toEntry(e.kind, e.label, e.parentKind))
+  };
+}
+var NC_TAXONOMY = Object.freeze(buildNcTaxonomy());
 var ExpressionParseError = class extends Error {
   position;
   constructor(message, position) {
@@ -16884,6 +16914,507 @@ var BATTERY_DEVICE_PROFILE = {
     "streamBroker.preBufferEnabled": false
   }
 };
+var MaskPointSchema = external_exports.object({
+  x: external_exports.number(),
+  y: external_exports.number()
+});
+var MaskRectShapeSchema = external_exports.object({
+  kind: external_exports.literal("rect"),
+  x: external_exports.number(),
+  y: external_exports.number(),
+  width: external_exports.number(),
+  height: external_exports.number()
+});
+var MaskPolygonShapeSchema = external_exports.object({
+  kind: external_exports.literal("polygon"),
+  points: external_exports.array(MaskPointSchema)
+});
+var MaskGridShapeSchema = external_exports.object({
+  kind: external_exports.literal("grid"),
+  gridWidth: external_exports.number(),
+  gridHeight: external_exports.number(),
+  cells: external_exports.array(external_exports.boolean())
+});
+var MaskLineShapeSchema = external_exports.object({
+  kind: external_exports.literal("line"),
+  points: external_exports.array(MaskPointSchema)
+});
+var MaskShapeSchema = external_exports.discriminatedUnion("kind", [
+  MaskRectShapeSchema,
+  MaskPolygonShapeSchema,
+  MaskGridShapeSchema,
+  MaskLineShapeSchema
+]);
+var MaskShapeKindSchema = external_exports.enum([
+  "rect",
+  "polygon",
+  "grid",
+  "line"
+]);
+var MaskPolygonVerticesSchema = external_exports.object({
+  min: external_exports.number(),
+  max: external_exports.number()
+});
+var MaskGridDimsSchema = external_exports.object({
+  width: external_exports.number(),
+  height: external_exports.number()
+});
+var NcDeliverySchema = external_exports.enum([
+  "immediate",
+  "track-end",
+  "device-event",
+  "package-event"
+]);
+var NcScheduleWindowSchema = external_exports.object({
+  /** Days of week the window STARTS on (0 = Sunday … 6 = Saturday). */
+  days: external_exports.array(external_exports.number().int().min(0).max(6)).min(1),
+  startMinute: external_exports.number().int().min(0).max(1439),
+  endMinute: external_exports.number().int().min(0).max(1439)
+});
+var NcScheduleSchema = external_exports.object({
+  windows: external_exports.array(NcScheduleWindowSchema).min(1),
+  /** IANA timezone; default = hub host timezone. */
+  timezone: external_exports.string().optional(),
+  /** Active OUTSIDE the windows (e.g. "only outside business hours"). */
+  invert: external_exports.boolean().optional()
+});
+var NcPlateMatcherSchema = external_exports.object({
+  values: external_exports.array(external_exports.string().min(1)).min(1),
+  /** Max Levenshtein distance after normalization (uppercase alphanumeric). */
+  maxDistance: external_exports.number().int().min(0).max(3).default(1)
+});
+var NcOccupancyConditionSchema = external_exports.object({
+  /** Admin zone id to scope the count to; absent = whole-frame occupancy. */
+  zoneId: external_exports.string().optional(),
+  /** Object class to count; absent = any class. */
+  className: external_exports.string().optional(),
+  op: external_exports.enum([
+    "became-occupied",
+    "became-free",
+    ">=",
+    "<="
+  ]).default("became-occupied"),
+  count: external_exports.number().int().min(0).default(1),
+  sustainSeconds: external_exports.number().int().min(0).max(3600).default(15)
+});
+var NcZoneConditionSchema = external_exports.object({
+  ids: external_exports.array(external_exports.string().min(1)).min(1),
+  /** Quantifier over `ids` — at least one / every one visited. */
+  match: external_exports.enum(["any", "all"]).default("any")
+});
+var NcConditionsSchema = external_exports.object({
+  /** Device scope — absent = all devices. */
+  devices: external_exports.array(external_exports.number()).optional(),
+  /** Detector class names (any overlap with the record's class set). */
+  classes: external_exports.array(external_exports.string().min(1)).optional(),
+  /** Veto classes — any overlap fails the rule. */
+  classesExclude: external_exports.array(external_exports.string().min(1)).optional(),
+  /** Minimum detection confidence 0–1 (fails when the record has none). */
+  minConfidence: external_exports.number().min(0).max(1).optional(),
+  /** Admin zone membership over event `zones` / track `zonesVisited`. */
+  zones: NcZoneConditionSchema.optional(),
+  /** Veto zones — any hit fails the rule. */
+  zonesExclude: external_exports.array(external_exports.string().min(1)).optional(),
+  /**
+  * Exact (case-insensitive) match on the record's collapsed `label`
+  * (identity name / plate text / subclass).
+  */
+  labelEquals: external_exports.array(external_exports.string().min(1)).optional(),
+  /**
+  * Identity matcher. P1 boundary: matched against the record's collapsed
+  * `label` (the identity display name propagated by the face pipeline) —
+  * identity-ID matching rides in P2 when identity ids reach the record.
+  */
+  identities: external_exports.array(external_exports.string().min(1)).optional(),
+  /** Fuzzy plate matcher against the record's `label` (plate text). */
+  plates: NcPlateMatcherSchema.optional(),
+  /**
+  * Identity EXCLUDE — mirror of {@link identities} with `notIn` semantics.
+  * Same P1 boundary: matched against the record's collapsed `label` (the
+  * identity display name). A record with NO label passes (nothing to
+  * exclude), unlike the include variant which fails on an absent label.
+  */
+  identitiesExclude: external_exports.array(external_exports.string().min(1)).optional(),
+  /**
+  * Minimum server-computed key-event importance in [0,1] (`Track.importance`).
+  * TRACK-END only: importance is scored at track close, so it does not exist
+  * at immediate / object-event evaluation time (see catalog `appliesTo`). At
+  * close the value is threaded via the close-time info (the `Track` clone is
+  * captured before the DB row is updated, so it would otherwise read stale).
+  * Fails when the record carries no importance (never guess quality — the
+  * `minConfidence` precedent). MVP cut: a single scalar threshold.
+  */
+  minImportance: external_exports.number().min(0).max(1).optional(),
+  /**
+  * Minimum track dwell in SECONDS — `(lastSeen − firstSeen) / 1000`.
+  * TRACK-END only: an `immediate` / object-event subject has no closed
+  * lifespan, so a dwell condition never matches immediate delivery
+  * (documented choice — the object-event record carries no `firstSeen`,
+  * so dwell cannot be computed from what the subject actually carries).
+  */
+  minDwellSeconds: external_exports.number().min(0).optional(),
+  /**
+  * Detection provenance filter. `any` (default / absent) matches every
+  * source; otherwise the subject's source must equal it. Legacy records
+  * with no stamped source are treated as `pipeline`. The union spans both
+  * record kinds — object events carry `pipeline` | `onboard`, synthetic
+  * tracks carry `sensor`.
+  */
+  source: external_exports.enum([
+    "pipeline",
+    "onboard",
+    "sensor",
+    "any"
+  ]).optional(),
+  /**
+  * Minimum identity / plate MATCH confidence in [0,1] — DISTINCT from the
+  * detector `minConfidence` (that gates the object-detection score; this
+  * gates the recognition/OCR match score). Fails when the subject carries
+  * no label-match confidence (never guess). TRACK-END only: the confidence
+  * lives on the recognition result and reaches the subject at track close.
+  *
+  * What it measures precisely (plumbed at track close — the closer threads
+  * the value into `NcTrackClosedInfo.labelConfidence`, the same seam as
+  * `importance`): the BEST recognition match confidence observed for the
+  * label the track carries at close — for a face, the peak cosine similarity
+  * of the ASSIGNED identity (`FaceMatch.score`, reset on an identity switch);
+  * for a plate, the peak OCR read score of the best-held plate
+  * (`plateText.confidence`). When BOTH a face and a plate were recognized on
+  * one track the higher of the two is used. A track that ended with no
+  * confident identity/plate match carries no value, so the condition fails
+  * closed for it (an un-recognized subject).
+  */
+  minLabelConfidence: external_exports.number().min(0).max(1).optional(),
+  /**
+  * DEVICE-EVENT only. Raw device event-type tokens (`EventFire.eventType`,
+  * e.g. a doorbell `press` / `press_long`) — matched case-insensitively
+  * against the token carried on the device-event subject (extracted from the
+  * event-emitter runtime slice's `lastEvent.eventType`). Fails when the
+  * subject carries no token. Doorbell-pulse / passive-sensor kinds emit no
+  * eventType, so gate those with {@link sensorKinds} instead.
+  */
+  eventTypeTokens: external_exports.array(external_exports.string().min(1)).optional(),
+  /**
+  * DEVICE-EVENT only. Sensor/control taxonomy kinds (e.g. `doorbell`,
+  * `contact`, `button`, `device-event`) — matched against the persisted
+  * `SensorEvent.kind` (see `sensor-event-kinds.ts`). Membership is OR.
+  */
+  sensorKinds: external_exports.array(external_exports.string().min(1)).optional(),
+  /**
+  * PACKAGE-EVENT only. Which package phase fires the rule — `delivered`
+  * (a parked parcel appeared), `picked-up` (it departed), or `both`. Fails
+  * when the subject's phase does not match (a subject always carries a phase
+  * on the package-event trigger).
+  */
+  packagePhase: external_exports.enum([
+    "delivered",
+    "picked-up",
+    "both"
+  ]).optional(),
+  /**
+  * PERSONAL-RULE custom zones (viewer-drawn). Inline normalized polygons
+  * (MaskShape vocabulary). A record passes when its bbox overlaps ANY
+  * listed polygon (ZoneEngine membership semantics). Evaluated only when
+  * the subject carries a bbox; absent bbox ⇒ the condition FAILS.
+  */
+  customZones: external_exports.array(MaskPolygonShapeSchema).optional(),
+  /**
+  * DEVICE-EVENT only. ZoneAnalytics occupancy edge — fires when a device's
+  * (optionally zone/class-scoped) occupancy count crosses the configured
+  * threshold and holds for `sustainSeconds`. Fail-closed on missing
+  * substrate (no snapshot / missing zone). See {@link NcOccupancyCondition}.
+  */
+  occupancy: NcOccupancyConditionSchema.optional()
+});
+var NcRuleTargetSchema = external_exports.object({
+  /** `notification-output` Target id. */
+  targetId: external_exports.string().min(1),
+  /**
+  * Per-backend passthrough. Recognized keys are mapped onto the canonical
+  * Notification (`priority`, `level`, `sound`, `clickUrl`, `ttl`); the
+  * degrade engine drops what the backend can't render.
+  */
+  params: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+});
+var NcMediaPolicySchema = external_exports.object({ attach: external_exports.enum([
+  "best",
+  "best-matching",
+  "keyFrame",
+  "none"
+]).default("best") });
+var NcThrottleSchema = external_exports.object({
+  cooldownSec: external_exports.number().int().min(0).max(86400).default(60),
+  /** `rule` = one shared cooldown; `rule-device` = per-camera cooldown. */
+  scope: external_exports.enum(["rule", "rule-device"]).default("rule-device")
+});
+var NcRuleInputSchema = external_exports.object({
+  name: external_exports.string().min(1).max(200),
+  enabled: external_exports.boolean().default(true),
+  delivery: NcDeliverySchema,
+  conditions: NcConditionsSchema.default({}),
+  schedule: NcScheduleSchema.optional(),
+  targets: external_exports.array(NcRuleTargetSchema).min(1),
+  media: NcMediaPolicySchema.default({ attach: "best" }),
+  throttle: NcThrottleSchema.default({
+    cooldownSec: 60,
+    scope: "rule-device"
+  }),
+  /** `{{var}}` templating over camera/class/label/zones/confidence/time. */
+  template: external_exports.object({
+    title: external_exports.string().max(500).optional(),
+    body: external_exports.string().max(2e3).optional()
+  }).optional(),
+  /** Canonical notification priority ordinal (1..5); per-target overridable. */
+  priority: external_exports.number().int().min(1).max(5).default(3),
+  /**
+  * Ownership/visibility key. Absent = admin/global rule (unchanged legacy
+  * behaviour, visible to all, read-only in the viewer). Present = personal
+  * rule owned by this userId. Server-stamped; never trusted from a client.
+  */
+  ownerUserId: external_exports.string().optional()
+});
+var NcRulePatchSchema = NcRuleInputSchema.partial().extend({ disabledTargetIds: external_exports.array(external_exports.string()).optional() });
+var NcRuleSchema = NcRuleInputSchema.extend({
+  id: external_exports.string(),
+  /** userId of the admin who created the rule (server-stamped caller). */
+  createdBy: external_exports.string(),
+  createdAt: external_exports.number(),
+  updatedAt: external_exports.number(),
+  /**
+  * Per-target opt-out set. A targetId here is suppressed for THIS rule at
+  * send time. Only a target's OWNER may add/remove its id (server-checked
+  * in `nc.setRuleTargetEnabled`). Defaults to empty.
+  */
+  disabledTargetIds: external_exports.array(external_exports.string()).default([])
+});
+var NcTestResultSchema = external_exports.object({
+  recordId: external_exports.string(),
+  recordKind: external_exports.enum([
+    "object-event",
+    "track",
+    "device-event",
+    "package-event"
+  ]),
+  deviceId: external_exports.number(),
+  timestamp: external_exports.number(),
+  wouldFire: external_exports.boolean(),
+  /** Condition id that failed (first failing group), when `wouldFire` is false. */
+  failedCondition: external_exports.string().optional(),
+  className: external_exports.string().optional(),
+  label: external_exports.string().optional()
+});
+var NcConditionDescriptorSchema = external_exports.object({
+  /** Field id inside `NcConditions` (or `'schedule'` for the rule-level group). */
+  id: external_exports.string(),
+  group: external_exports.enum([
+    "scope",
+    "class",
+    "zones",
+    "quality",
+    "label",
+    "schedule",
+    "device",
+    "package",
+    "occupancy"
+  ]),
+  label: external_exports.string(),
+  /** Editor widget the UI renders — never hardcode per-condition forms. */
+  valueType: external_exports.enum([
+    "deviceIdList",
+    "stringList",
+    "number01",
+    "number",
+    "sourceSelect",
+    "zoneSelection",
+    "zoneIdList",
+    "schedule",
+    "plateMatcher",
+    "packagePhase",
+    "polygonDraw",
+    "occupancy"
+  ]),
+  operator: external_exports.enum([
+    "in",
+    "notIn",
+    "anyOf",
+    "allOf",
+    "gte",
+    "fuzzyIn",
+    "withinSchedule"
+  ]),
+  /** Which delivery kinds the condition applies to. */
+  appliesTo: external_exports.array(NcDeliverySchema),
+  phase: external_exports.string(),
+  description: external_exports.string().optional()
+});
+var NcHistoryStatusSchema = external_exports.enum([
+  "pending",
+  "sent",
+  "dead"
+]);
+var NcHistoryRecordKindSchema = external_exports.enum([
+  "object-event",
+  "track-end",
+  "device-event",
+  "package-event"
+]);
+var NcHistorySubjectSchema = external_exports.object({
+  className: external_exports.string(),
+  label: external_exports.string().optional(),
+  confidence: external_exports.number().optional(),
+  zones: external_exports.array(external_exports.string()),
+  timestamp: external_exports.number()
+});
+var NcHistoryEntrySchema = external_exports.object({
+  /** Outbox row id — the stable dedup id `ruleId:dedupRef:targetId`. */
+  id: external_exports.string(),
+  ruleId: external_exports.string(),
+  /** Rule name frozen at fire time (outlives a later rename / delete). */
+  ruleName: external_exports.string(),
+  /** The rule urgency/trigger that produced this delivery. */
+  delivery: NcDeliverySchema,
+  targetId: external_exports.string(),
+  deviceId: external_exports.number(),
+  recordKind: NcHistoryRecordKindSchema,
+  /** Event / track ref of the evaluated record (§3.2 `eventRef`). */
+  recordId: external_exports.string(),
+  /** Present for track-scoped deliveries (object-event / track-end). */
+  trackId: external_exports.string().optional(),
+  status: NcHistoryStatusSchema,
+  /** Delivery attempts made so far. */
+  attempts: external_exports.number().int(),
+  /** Fire time (outbox enqueue). */
+  createdAt: external_exports.number(),
+  /** Last transition time (terminal for sent / dead). */
+  updatedAt: external_exports.number(),
+  /** Failure detail — present on a `dead` row. */
+  error: external_exports.string().optional(),
+  subject: NcHistorySubjectSchema
+});
+var NcHistoryFilterSchema = external_exports.object({
+  ruleId: external_exports.string().optional(),
+  deviceId: external_exports.number().optional(),
+  status: NcHistoryStatusSchema.optional(),
+  since: external_exports.number().optional(),
+  until: external_exports.number().optional(),
+  limit: external_exports.number().int().min(1).max(500).default(100)
+});
+var notificationRulesCapability = {
+  name: "notification-rules",
+  scope: "system",
+  mode: "singleton",
+  methods: {
+    listRules: method(external_exports.object({}), external_exports.object({ rules: external_exports.array(NcRuleSchema) }), { auth: "admin" }),
+    getRule: method(external_exports.object({ ruleId: external_exports.string() }), external_exports.object({ rule: NcRuleSchema.nullable() }), { auth: "admin" }),
+    createRule: method(external_exports.object({ rule: NcRuleInputSchema }), external_exports.object({ rule: NcRuleSchema }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    updateRule: method(external_exports.object({
+      ruleId: external_exports.string(),
+      patch: NcRulePatchSchema
+    }), external_exports.object({ rule: NcRuleSchema }), {
+      kind: "mutation",
+      auth: "admin",
+      caller: "required"
+    }),
+    deleteRule: method(external_exports.object({ ruleId: external_exports.string() }), external_exports.object({ success: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    setRuleEnabled: method(external_exports.object({
+      ruleId: external_exports.string(),
+      enabled: external_exports.boolean()
+    }), external_exports.object({ success: external_exports.literal(true) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Dry-run a rule against recently persisted records (object events for
+    * `immediate`, closed tracks for `track-end`). Mutation kind only to
+    * carry the full rule object safely; no side effects.
+    */
+    testRule: method(external_exports.object({
+      rule: NcRuleInputSchema,
+      lookbackMinutes: external_exports.number().int().min(1).max(1440).default(60)
+    }), external_exports.object({ results: external_exports.array(NcTestResultSchema) }), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    getConditionCatalog: method(external_exports.object({}), external_exports.object({ catalog: external_exports.array(NcConditionDescriptorSchema) })),
+    /**
+    * Queryable delivery history — a read-only view over the durable outbox
+    * (fired rule, subject summary, target, status, timestamps, error on a
+    * dead row). Newest-first, bounded by `filter.limit`. Retention follows
+    * the outbox's own terminal-row prune horizon (no separate history
+    * horizon — single collection, single source of truth). Admin-only in
+    * P1 (no user dimension); the P2 viewer History screen adds per-caller
+    * scoping on the same method.
+    */
+    getHistory: method(external_exports.object({ filter: NcHistoryFilterSchema.default({ limit: 100 }) }), external_exports.object({ entries: external_exports.array(NcHistoryEntrySchema) }), { auth: "admin" })
+  }
+};
+var TimelapseTemplateSchema = external_exports.object({
+  title: external_exports.string().max(500).optional(),
+  body: external_exports.string().max(2e3).optional()
+});
+var NameField = external_exports.string().min(1).max(200);
+var DeviceIdsField = external_exports.array(external_exports.number()).min(1);
+var CadenceSecField = external_exports.number().int().min(2).max(3600);
+var FramerateField = external_exports.number().int().min(1).max(60);
+var TargetsField = external_exports.array(NcRuleTargetSchema).min(1);
+var PriorityField = external_exports.number().int().min(1).max(5);
+var TimelapseRuleInputSchema = external_exports.object({
+  name: NameField,
+  enabled: external_exports.boolean().default(true),
+  /** Cameras sampled by this rule — one scratch dir + one artifact per device. */
+  deviceIds: DeviceIdsField,
+  /**
+  * Activation window(s). REQUIRED (unlike `NcRule`, where an absent schedule
+  * means "always active"): a timelapse is defined by its window boundaries —
+  * open clears the scratch, close assembles and delivers.
+  */
+  schedule: NcScheduleSchema,
+  /** Force-snapshot cadence inside the window, seconds (predecessor parity). */
+  cadenceSec: CadenceSecField.default(15),
+  /** Output frames per second of the assembled mp4 (predecessor parity). */
+  framerate: FramerateField.default(10),
+  /** `notification-output` targets the finished video/thumbnail is sent to. */
+  targets: TargetsField,
+  template: TimelapseTemplateSchema.optional(),
+  /** Canonical notification priority ordinal (1..5); per-target overridable. */
+  priority: PriorityField.default(3)
+});
+var TimelapseRulePatchSchema = external_exports.object({
+  name: NameField.optional(),
+  enabled: external_exports.boolean().optional(),
+  deviceIds: DeviceIdsField.optional(),
+  schedule: NcScheduleSchema.optional(),
+  cadenceSec: CadenceSecField.optional(),
+  framerate: FramerateField.optional(),
+  targets: TargetsField.optional(),
+  template: TimelapseTemplateSchema.nullable().optional(),
+  priority: PriorityField.optional()
+});
+var TimelapseRuleSchema = TimelapseRuleInputSchema.extend({
+  id: external_exports.string(),
+  /**
+  * Ownership/visibility key. Absent = admin/global rule (visible to all).
+  * Present = personal rule owned by this userId. Server-stamped from the
+  * resolved caller; never trusted from a client payload.
+  */
+  ownerUserId: external_exports.string().optional(),
+  /**
+  * Epoch-ms of the last successful generation — the 1-hour re-generation
+  * guard's durable state (predecessor parity). Absent = never generated.
+  */
+  lastGeneratedAt: external_exports.number().optional(),
+  /** userId of the caller who created the rule (server-stamped). */
+  createdBy: external_exports.string(),
+  createdAt: external_exports.number(),
+  updatedAt: external_exports.number()
+});
 var DeviceStatusSchema = external_exports.object({
   /**
   * Device-level liveness. Drivers flip via `markOnline(boolean)` on
@@ -19498,6 +20029,17 @@ var CameraMetricsSchema = external_exports.object({
   ])
 });
 var CameraMetricsWithDeviceIdSchema = CameraMetricsSchema.extend({ deviceId: external_exports.number() });
+var NativeCropRefSchema = external_exports.object({
+  /** Handle keying the retained native surface (node-pinned to its owner). */
+  handle: FrameHandleSchema,
+  /** The parent crop's padded/clamped rectangle in FRAME-space pixels. */
+  cropFrameSpace: external_exports.object({
+    x: external_exports.number(),
+    y: external_exports.number(),
+    w: external_exports.number(),
+    h: external_exports.number()
+  })
+});
 var ModelFormatSchema$1 = external_exports.enum([
   "onnx",
   "coreml",
@@ -19850,7 +20392,22 @@ var pipelineExecutorCapability = {
       * Omitted ⇒ the runner's default device (current single-engine
       * behaviour). Selects WHICH device pool of the node runs the call.
       */
-      deviceKey: external_exports.string().optional()
+      deviceKey: external_exports.string().optional(),
+      /**
+      * Two-plane NATIVE child-crop reference. Set by `runDetailSubtree` ONLY
+      * when the parent crop was resolved from the frame's retained NATIVE
+      * surface (a frameHandle HIT). Lets the executor re-cut a LEAF crop
+      * child's ROI (plate-ocr, face-embedding, leaf classifiers) at native
+      * resolution from that surface — the SAME quality path faces already
+      * had — instead of the downscaled parent tile. `handle` keys the native
+      * surface (node-pinned to its owner); `cropFrameSpace` is the parent
+      * crop's padded/clamped rectangle in FRAME-space pixels, used to compose
+      * the executor's crop-normalized child ROI back into frame-normalized
+      * coordinates. Auxiliary to the image source (`image`/`frame`/…), NOT one
+      * of the mutually-exclusive image inputs. Absent ⇒ tile-crop children
+      * (today's behaviour on the fallback path).
+      */
+      nativeCropRef: NativeCropRefSchema.optional()
     }), PipelineRunResultBridge, { kind: "mutation" }),
     /**
     * Batched run — N raw frames packed into one cap call. The provider
@@ -20098,7 +20655,11 @@ var DetailResultSchema = external_exports.object({
   bbox: NativeCropBboxSchema.optional(),
   embedding: external_exports.string().optional(),
   label: external_exports.string().optional(),
-  alignedCropJpeg: external_exports.string().optional()
+  alignedCropJpeg: external_exports.string().optional(),
+  /** Face short side (px) measured on the NATIVE crop surface. The `bbox`
+  *  above is detection-frame px (≈6× smaller on a 4K camera) — min-face-size
+  *  consumers MUST prefer this when present (2026-07-22 native-gate fix). */
+  nativeFaceShortSidePx: external_exports.number().optional()
 });
 var motionCooldownMsField = {
   min: 0,
@@ -20106,6 +20667,12 @@ var motionCooldownMsField = {
   default: 3e4,
   step: 500
 };
+var maxSessionHoldMsField = {
+  min: 0,
+  max: 6e5,
+  default: 12e4,
+  step: 5e3
+};
 var motionFpsField = {
   min: 1,
   max: 30,
@@ -20186,6 +20753,19 @@ var RunnerCameraConfigSchema = external_exports.object({
     "on-motion"
   ]).default("always-on"),
   motionCooldownMs: external_exports.number().min(motionCooldownMsField.min).default(motionCooldownMsField.default),
+  /**
+  * Orchestrator-side on-motion session-hold cap (ms). While an on-motion
+  * detection session is active and ≥1 confirmed non-stationary track is
+  * still live, the orchestrator keeps the session open past
+  * `motionCooldownMs` (a slowly-moving subject can stop re-triggering the
+  * camera's VMD yet is still being tracked frame-to-frame) — up to this many
+  * ms since the session opened, after which it closes regardless. `0`
+  * disables the hold (legacy cooldown-only teardown). Not consumed by the
+  * runner itself — carried here so it shares the per-camera device-settings
+  * surface with `motionCooldownMs`; the orchestrator reads it off the
+  * resolved `CameraDetectionConfig`.
+  */
+  maxSessionHoldMs: external_exports.number().min(maxSessionHoldMsField.min).max(maxSessionHoldMsField.max).optional(),
   motionFps: external_exports.number().min(motionFpsField.min).max(motionFpsField.max).default(motionFpsField.default),
   detectionFps: external_exports.number().min(detectionFpsField.min).max(detectionFpsField.max).default(detectionFpsField.default),
   motionStreamId: external_exports.string(),
@@ -20334,6 +20914,21 @@ var RunnerCameraDeviceUIFields = [
     nullable: true,
     nullLabel: "Default"
   },
+  {
+    key: "maxSessionHoldMs",
+    type: "slider",
+    label: "Max session hold",
+    description: "Upper bound on how long detection keeps running past the motion cooldown while a subject is still moving in-frame but no longer triggering motion. Prevents the detection box from stopping on a slow-moving subject. Set to 0 to disable.",
+    min: maxSessionHoldMsField.min,
+    max: maxSessionHoldMsField.max,
+    step: maxSessionHoldMsField.step,
+    default: maxSessionHoldMsField.default,
+    showValue: true,
+    unit: "s",
+    displayScale: 1e3,
+    nullable: true,
+    nullLabel: "Default"
+  },
   {
     key: "onboardMotionDrivesAnalyzer",
     type: "boolean",
@@ -20611,51 +21206,6 @@ var motionTriggerCapability = {
   },
   runtimeState: MotionTriggerRuntimeStateSchema
 };
-var MaskPointSchema = external_exports.object({
-  x: external_exports.number(),
-  y: external_exports.number()
-});
-var MaskRectShapeSchema = external_exports.object({
-  kind: external_exports.literal("rect"),
-  x: external_exports.number(),
-  y: external_exports.number(),
-  width: external_exports.number(),
-  height: external_exports.number()
-});
-var MaskPolygonShapeSchema = external_exports.object({
-  kind: external_exports.literal("polygon"),
-  points: external_exports.array(MaskPointSchema)
-});
-var MaskGridShapeSchema = external_exports.object({
-  kind: external_exports.literal("grid"),
-  gridWidth: external_exports.number(),
-  gridHeight: external_exports.number(),
-  cells: external_exports.array(external_exports.boolean())
-});
-var MaskLineShapeSchema = external_exports.object({
-  kind: external_exports.literal("line"),
-  points: external_exports.array(MaskPointSchema)
-});
-var MaskShapeSchema = external_exports.discriminatedUnion("kind", [
-  MaskRectShapeSchema,
-  MaskPolygonShapeSchema,
-  MaskGridShapeSchema,
-  MaskLineShapeSchema
-]);
-var MaskShapeKindSchema = external_exports.enum([
-  "rect",
-  "polygon",
-  "grid",
-  "line"
-]);
-var MaskPolygonVerticesSchema = external_exports.object({
-  min: external_exports.number(),
-  max: external_exports.number()
-});
-var MaskGridDimsSchema = external_exports.object({
-  width: external_exports.number(),
-  height: external_exports.number()
-});
 var MotionZoneRegionSchema = external_exports.object({
   id: external_exports.number(),
   enabled: external_exports.boolean(),
@@ -22918,106 +23468,6 @@ var addonWidgetsCapability = {
   mode: "singleton",
   methods: { listWidgets: method(external_exports.void(), external_exports.array(EnrichedWidgetMetadataSchema).readonly()) }
 };
-var NotificationRuleConditionsSchema = external_exports.object({
-  deviceIds: external_exports.array(external_exports.number()).readonly().optional(),
-  classNames: external_exports.array(external_exports.string()).readonly().optional(),
-  zoneIds: external_exports.array(external_exports.string()).readonly().optional(),
-  minConfidence: external_exports.number().optional(),
-  source: external_exports.enum([
-    "pipeline",
-    "onboard",
-    "any"
-  ]).optional(),
-  schedule: external_exports.object({
-    days: external_exports.array(external_exports.number()).readonly(),
-    startHour: external_exports.number(),
-    endHour: external_exports.number()
-  }).optional(),
-  cooldownSeconds: external_exports.number().optional(),
-  minDwellSeconds: external_exports.number().optional(),
-  /** Match against `event.data.eventType` token (e.g. `'press_long'`). When non-empty, only events
-  *  carrying a matching `data.eventType` string pass this condition. Rules without this field are
-  *  unaffected (back-compat). Distinct from `rule.eventTypes` which holds EventCategory strings. */
-  eventTypeTokens: external_exports.array(external_exports.string()).readonly().optional(),
-  /** Match detections whose CLIP image embedding is semantically similar to this free-text
-  *  description. Requires the embedding-encoder cap to have pre-warmed the text vector.
-  *  `minSimilarity` is the cosine similarity threshold in [0, 1]. */
-  clipDescription: external_exports.object({
-    text: external_exports.string().min(1),
-    minSimilarity: external_exports.number().min(0).max(1)
-  }).optional(),
-  /** Match events whose recognized-entity label (face identity name or plate
-  *  vehicle name, propagated onto `event.data.label`) is one of these values.
-  *  Empty/absent → unaffected (back-compat). Enables "notify me when <named
-  *  vehicle/person> is seen". */
-  labels: external_exports.array(external_exports.string()).readonly().optional()
-});
-var NotificationRuleTemplateSchema = external_exports.object({
-  title: external_exports.string(),
-  body: external_exports.string(),
-  imageMode: external_exports.enum([
-    "crop",
-    "annotated",
-    "full",
-    "none"
-  ])
-});
-var NotificationRuleSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  enabled: external_exports.boolean(),
-  eventTypes: external_exports.array(external_exports.string()).readonly(),
-  conditions: NotificationRuleConditionsSchema,
-  outputs: external_exports.array(external_exports.string()).readonly(),
-  template: NotificationRuleTemplateSchema.optional(),
-  priority: external_exports.enum([
-    "low",
-    "normal",
-    "high",
-    "critical"
-  ])
-});
-var NotificationTestResultSchema = external_exports.object({
-  ruleId: external_exports.string(),
-  eventId: external_exports.string(),
-  timestamp: external_exports.number(),
-  wouldFire: external_exports.boolean(),
-  reason: external_exports.string().optional()
-});
-var NotificationHistoryEntrySchema = external_exports.object({
-  id: external_exports.string(),
-  ruleId: external_exports.string(),
-  ruleName: external_exports.string(),
-  eventId: external_exports.string(),
-  timestamp: external_exports.number(),
-  outputs: external_exports.array(external_exports.string()).readonly(),
-  success: external_exports.boolean(),
-  error: external_exports.string().optional(),
-  deviceId: external_exports.number().optional()
-});
-var NotificationHistoryFilterSchema = external_exports.object({
-  ruleId: external_exports.string().optional(),
-  deviceId: external_exports.number().optional(),
-  from: external_exports.number().optional(),
-  to: external_exports.number().optional(),
-  limit: external_exports.number().optional()
-});
-var advancedNotifierCapability = {
-  name: "advanced-notifier",
-  scope: "system",
-  mode: "singleton",
-  internal: true,
-  methods: {
-    getRules: method(external_exports.void(), external_exports.object({ rules: external_exports.array(NotificationRuleSchema).readonly() })),
-    upsertRule: method(external_exports.object({ rule: NotificationRuleSchema }), external_exports.object({ success: external_exports.literal(true) }), { kind: "mutation" }),
-    deleteRule: method(external_exports.object({ ruleId: external_exports.string() }), external_exports.object({ success: external_exports.literal(true) }), { kind: "mutation" }),
-    testRule: method(external_exports.object({
-      ruleId: external_exports.string(),
-      lookbackMinutes: external_exports.number()
-    }), external_exports.object({ results: external_exports.array(NotificationTestResultSchema).readonly() }), { kind: "mutation" }),
-    getHistory: method(external_exports.object({ filter: NotificationHistoryFilterSchema.optional() }), external_exports.object({ entries: external_exports.array(NotificationHistoryEntrySchema).readonly() }))
-  }
-};
 var AlertSeveritySchema = external_exports.enum([
   "info",
   "success",
@@ -23283,56 +23733,59 @@ var authProviderCapability = {
   /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
   mount: { kind: "skip" }
 };
-var LoginStageEnum = external_exports.enum(["primary", "second-factor"]);
-var RedirectLoginMethodSchema = external_exports.object({
-  kind: external_exports.literal("redirect"),
-  /** Stable id within the login-method set (e.g. `auth-oidc/google`). */
-  id: external_exports.string(),
-  /** Operator-facing button label. */
+var TerminalSessionInfoSchema = external_exports.object({
+  /** Opaque session id minted by the provider on `openSession`. */
+  sessionId: external_exports.string(),
+  /** The pre-declared profile this session runs (never a free-form command). */
+  profileId: external_exports.string(),
+  /** Human-readable profile label for the UI session list. */
   label: external_exports.string(),
-  /** lucide-react icon name. */
-  icon: external_exports.string().optional(),
-  /** Addon-owned HTTP route the button navigates to (GET). */
-  startUrl: external_exports.string(),
-  stage: LoginStageEnum
-});
-var WidgetLoginMethodSchema = external_exports.object({
-  kind: external_exports.literal("widget"),
-  /** Stable id within the login-method set (e.g. `auth-webauthn/passkey-login`). */
-  id: external_exports.string(),
-  /** Owning addon id — drives the public bundle URL + the MF namespace. */
-  addonId: external_exports.string(),
-  /** Bundle filename inside the addon's dist dir (`remoteEntry.js`). */
-  bundle: external_exports.string(),
-  /** MF remote descriptor — `{ remoteName, exposedModule, componentKey }`. */
-  remote: WidgetRemoteSchema,
-  stage: LoginStageEnum
+  cols: external_exports.number().int().positive(),
+  rows: external_exports.number().int().positive(),
+  /** ms-epoch the session's pty was spawned. */
+  startedAt: external_exports.number()
 });
-var PasskeyLoginMethodSchema = external_exports.object({
-  kind: external_exports.literal("passkey"),
-  /** Stable id within the login-method set (e.g. `auth-webauthn/passkey-direct-login`). */
-  id: external_exports.string(),
-  /** Operator-facing button label. */
+var TerminalProfileInfoSchema = external_exports.object({
+  profileId: external_exports.string(),
   label: external_exports.string(),
-  stage: LoginStageEnum,
-  /** Effective WebAuthn RP ID (`resolveRpID()`) — the shell gates visibility on it. */
-  rpId: external_exports.string(),
-  /** Effective expected origin (`resolveOrigin()`), null when unconfigured. */
-  origin: external_exports.string().nullable()
+  description: external_exports.string().optional()
 });
-var LoginMethodContributionSchema = external_exports.discriminatedUnion("kind", [
-  RedirectLoginMethodSchema,
-  WidgetLoginMethodSchema,
-  PasskeyLoginMethodSchema
-]);
-var loginMethodCapability = {
-  name: "login-method",
+var terminalSessionCapability = {
+  name: "terminal-session",
   scope: "system",
-  mode: "collection",
-  internal: true,
-  methods: { getLoginMethods: method(external_exports.void(), external_exports.array(LoginMethodContributionSchema).readonly()) },
-  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "skip" }
+  mode: "singleton",
+  methods: {
+    /** Pre-declared profiles the operator may open. */
+    listProfiles: method(external_exports.void(), external_exports.array(TerminalProfileInfoSchema).readonly(), { auth: "admin" }),
+    /** Live sessions currently hosted by the provider. */
+    listSessions: method(external_exports.void(), external_exports.array(TerminalSessionInfoSchema).readonly(), { auth: "admin" }),
+    /**
+    * Spawn a pty for an allowlisted profile at the given grid size and return
+    * its session id. Output/input then flow over the data plane by that id.
+    */
+    openSession: method(external_exports.object({
+      profileId: external_exports.string(),
+      cols: external_exports.number().int().positive(),
+      rows: external_exports.number().int().positive()
+    }), TerminalSessionInfoSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Resize a live session's pty (reflows the running program). */
+    resize: method(external_exports.object({
+      sessionId: external_exports.string(),
+      cols: external_exports.number().int().positive(),
+      rows: external_exports.number().int().positive()
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Terminate a live session and release its pty. */
+    close: method(external_exports.object({ sessionId: external_exports.string() }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    })
+  }
 };
 var BackupDestinationInfoSchema = external_exports.object({
   /**
@@ -25038,877 +25491,928 @@ var filesystemBrowseCapability = {
     })
   }
 };
-var LogLevelSchema = external_exports.enum([
-  "debug",
-  "info",
-  "warn",
-  "error"
-]);
-var LogEntrySchema = external_exports.object({
-  timestamp: external_exports.date(),
-  level: LogLevelSchema,
-  scope: external_exports.array(external_exports.string()),
-  message: external_exports.string(),
-  meta: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
-  tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
-});
-var logDestinationCapability = {
-  name: "log-destination",
-  scope: "system",
-  mode: "collection",
-  internal: true,
-  methods: {
-    write: method(LogEntrySchema, external_exports.void(), { kind: "mutation" }),
-    query: method(external_exports.object({
-      scope: external_exports.array(external_exports.string()).optional(),
-      level: LogLevelSchema.optional(),
-      since: external_exports.date().optional(),
-      until: external_exports.date().optional(),
-      limit: external_exports.number().optional(),
-      tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
-    }), external_exports.array(LogEntrySchema).readonly())
-  },
-  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
-  mount: { kind: "skip" }
-};
-var CpuBreakdownSchema = external_exports.object({
-  total: external_exports.number(),
-  user: external_exports.number(),
-  system: external_exports.number(),
-  irq: external_exports.number(),
-  nice: external_exports.number(),
-  loadAvg: external_exports.tuple([
-    external_exports.number(),
-    external_exports.number(),
-    external_exports.number()
-  ]),
-  cores: external_exports.number()
-});
-var MemoryInfoSchema = external_exports.object({
-  percent: external_exports.number(),
-  totalBytes: external_exports.number(),
-  usedBytes: external_exports.number(),
-  availableBytes: external_exports.number(),
-  swapUsedBytes: external_exports.number(),
-  swapTotalBytes: external_exports.number()
-});
-var DiskIoSnapshotSchema = external_exports.object({
-  readBytes: external_exports.number(),
-  writeBytes: external_exports.number(),
-  readOps: external_exports.number(),
-  writeOps: external_exports.number(),
-  timestampMs: external_exports.number()
-});
-var NetworkIoSnapshotSchema = external_exports.object({
-  rxBytes: external_exports.number(),
-  txBytes: external_exports.number(),
-  rxPackets: external_exports.number(),
-  txPackets: external_exports.number(),
-  rxErrors: external_exports.number(),
-  txErrors: external_exports.number(),
-  timestampMs: external_exports.number()
+var LlmUsageSchema = external_exports.object({
+  inputTokens: external_exports.number(),
+  outputTokens: external_exports.number()
 });
-var MetricsGpuInfoSchema = external_exports.object({
-  utilization: external_exports.number(),
+var LlmErrorCodeSchema = external_exports.enum([
+  "timeout",
+  "rate-limited",
+  "auth",
+  "refusal",
+  "bad-request",
+  "unavailable",
+  "no-profile",
+  "budget-exceeded",
+  "adapter-error"
+]);
+var LlmGenerateOkSchema = external_exports.object({
+  ok: external_exports.literal(true),
+  text: external_exports.string(),
   model: external_exports.string(),
-  memoryUsedBytes: external_exports.number(),
-  memoryTotalBytes: external_exports.number(),
-  temperature: external_exports.number().nullable()
+  usage: LlmUsageSchema,
+  truncated: external_exports.boolean(),
+  latencyMs: external_exports.number()
 });
-var ProcessResourceInfoSchema = external_exports.object({
-  openFds: external_exports.number(),
-  threadCount: external_exports.number(),
-  activeHandles: external_exports.number(),
-  activeRequests: external_exports.number()
+var LlmGenerateErrSchema = external_exports.object({
+  ok: external_exports.literal(false),
+  code: LlmErrorCodeSchema,
+  message: external_exports.string(),
+  retryAfterMs: external_exports.number().optional()
 });
-var PressureAvgsSchema = external_exports.object({
-  avg10: external_exports.number(),
-  avg60: external_exports.number(),
-  avg300: external_exports.number()
+var LlmGenerateResultSchema = external_exports.discriminatedUnion("ok", [LlmGenerateOkSchema, LlmGenerateErrSchema]);
+var LlmImageSchema = external_exports.object({
+  bytes: external_exports.instanceof(Uint8Array),
+  mimeType: external_exports.string()
 });
-var PressureInfoSchema = external_exports.object({
-  some: PressureAvgsSchema,
-  full: PressureAvgsSchema.nullable()
+var LlmGenerateBaseInputSchema = external_exports.object({
+  /** Collection routing (the notification-output posture). */
+  addonId: external_exports.string().optional(),
+  /** Explicit profile; else the resolution chain (spec §3). */
+  profileId: external_exports.string().optional(),
+  /** MANDATORY usage tag: 'ai-summary', 'notifier-rules', 'adhoc-ui', … */
+  consumer: external_exports.string(),
+  system: external_exports.string().optional(),
+  /** v1: single-turn. `messages[]` is a v2 additive field. */
+  prompt: external_exports.string(),
+  /** Structured output — adapter-mapped (response_format / forced tool / responseSchema). */
+  jsonSchema: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  /** Per-call override of the profile default. */
+  maxTokens: external_exports.number().int().positive().optional(),
+  temperature: external_exports.number().optional()
 });
-var SystemResourceSnapshotSchema = external_exports.object({
-  cpu: CpuBreakdownSchema,
-  memory: MemoryInfoSchema,
-  gpu: MetricsGpuInfoSchema.nullable(),
-  network: NetworkIoSnapshotSchema,
-  disk: DiskIoSnapshotSchema,
-  pressure: external_exports.object({
-    cpu: PressureInfoSchema.nullable(),
-    memory: PressureInfoSchema.nullable(),
-    io: PressureInfoSchema.nullable()
+var ManagedModelRefSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("catalog"),
+    catalogId: external_exports.string()
   }),
-  process: ProcessResourceInfoSchema,
-  cpuTemperature: external_exports.number().nullable(),
-  timestampMs: external_exports.number()
-});
-var DiskSpaceInfoSchema = external_exports.object({
-  path: external_exports.string(),
-  totalBytes: external_exports.number(),
-  usedBytes: external_exports.number(),
-  availableBytes: external_exports.number(),
-  percent: external_exports.number()
-});
-var PidResourceStatsSchema = external_exports.object({
-  pid: external_exports.number(),
-  cpu: external_exports.number(),
-  memory: external_exports.number(),
-  /**
-  * Private (anonymous) resident bytes — the per-process V8 heap + native
-  * allocations NOT shared with other processes (Linux RssAnon). This is the
-  * "real" per-runner cost; summing it across runners is meaningful, unlike
-  * `memory` (RSS), which double-counts the shared mmap'd framework code.
-  * Undefined where /proc is unavailable (e.g. macOS).
-  */
-  privateBytes: external_exports.number().optional(),
-  /**
-  * Shared file-backed resident bytes (Linux RssFile) — mmap'd framework/lib
-  * code shared copy-on-write across runners. Undefined on macOS.
-  */
-  sharedBytes: external_exports.number().optional()
+  external_exports.object({
+    kind: external_exports.literal("url"),
+    url: external_exports.string(),
+    sha256: external_exports.string().optional()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("path"),
+    path: external_exports.string()
+  })
+]);
+var ManagedRuntimeConfigSchema = external_exports.object({
+  /** WHERE the runtime lives — hub or any agent. */
+  nodeId: external_exports.string(),
+  /** Closed for v1; 'ollama' is a v2 candidate. */
+  engine: external_exports.enum(["llama-cpp"]),
+  model: ManagedModelRefSchema,
+  contextSize: external_exports.number().int().default(4096),
+  /** 0 = CPU-only. */
+  gpuLayers: external_exports.number().int().default(0),
+  /** Default: cpus-2, clamped ≥1 (resolved node-side). */
+  threads: external_exports.number().int().optional(),
+  /** Concurrent slots. */
+  parallel: external_exports.number().int().default(1),
+  /** Else lazy: first generate boots it. */
+  autoStart: external_exports.boolean().default(false),
+  /** 0 = never; frees RAM after quiet periods. */
+  idleStopMinutes: external_exports.number().int().default(30)
 });
-var AddonInstanceSchema = external_exports.object({
-  addonId: external_exports.string(),
+var LlmRuntimeStatusSchema = external_exports.object({
+  /** Status is ALWAYS node-qualified. */
   nodeId: external_exports.string(),
-  role: external_exports.enum(["hub", "worker"]),
-  pid: external_exports.number(),
   state: external_exports.enum([
-    "starting",
-    "running",
-    "stopping",
     "stopped",
-    "crashed"
-  ]),
-  uptimeSec: external_exports.number()
-});
-var NodeProcessSchema = external_exports.object({
-  pid: external_exports.number(),
-  ppid: external_exports.number(),
-  pgid: external_exports.number(),
-  classification: external_exports.enum([
-    "root",
-    "managed",
-    "system",
-    "ghost"
+    "downloading",
+    "starting",
+    "ready",
+    "crashed",
+    "failed"
   ]),
-  /** `$process` addon binding when `managed`, else null. */
-  addonId: external_exports.string().nullable(),
-  /** Kernel-reported nodeId when the process is a known agent/worker. */
-  nodeId: external_exports.string().nullable(),
-  /** Truncated command line. */
-  command: external_exports.string(),
-  cpuPercent: external_exports.number(),
-  memoryRssBytes: external_exports.number(),
-  /** Wall-clock uptime (seconds). Parsed from `ps etime`. */
-  uptimeSec: external_exports.number(),
-  /** True when ancestor walk reaches `ppid=1` (reparented to init/launchd). */
-  orphaned: external_exports.boolean()
-});
-var KillProcessInputSchema = external_exports.object({
-  pid: external_exports.number(),
-  /** Force = SIGKILL. Default is SIGTERM. */
-  force: external_exports.boolean().optional()
-});
-var KillProcessResultSchema = external_exports.object({
-  success: external_exports.boolean(),
-  reason: external_exports.string().optional(),
-  signal: external_exports.enum(["SIGTERM", "SIGKILL"]).optional()
+  pid: external_exports.number().optional(),
+  port: external_exports.number().optional(),
+  modelPath: external_exports.string().optional(),
+  modelId: external_exports.string().optional(),
+  downloadProgress: external_exports.number().min(0).max(1).optional(),
+  lastError: external_exports.string().optional(),
+  crashesInWindow: external_exports.number(),
+  /** Child RSS (sampled best-effort). */
+  memoryBytes: external_exports.number().optional(),
+  vramBytes: external_exports.number().optional()
 });
-var DumpHeapSnapshotInputSchema = external_exports.object({
-  /** The addon whose runner should dump a heap snapshot. */
-  addonId: external_exports.string()
+var LlmNodeModelSchema = external_exports.object({
+  file: external_exports.string(),
+  sizeBytes: external_exports.number(),
+  catalogId: external_exports.string().optional(),
+  installedAt: external_exports.number().optional()
 });
-var DumpHeapSnapshotResultSchema = external_exports.object({
-  success: external_exports.boolean(),
-  /** Path of the written .heapsnapshot inside the runner's container/host. */
-  path: external_exports.string().optional(),
-  /** Process pid that was signalled. */
-  pid: external_exports.number().optional(),
-  reason: external_exports.string().optional()
+var LlmRuntimeDiskUsageSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  modelsBytes: external_exports.number(),
+  freeBytes: external_exports.number().optional()
 });
-var SystemMetricsSchema = external_exports.object({
-  cpuPercent: external_exports.number(),
-  memoryPercent: external_exports.number(),
-  memoryUsedMB: external_exports.number(),
-  memoryTotalMB: external_exports.number(),
-  diskPercent: external_exports.number().optional(),
-  temperature: external_exports.number().optional(),
-  gpuPercent: external_exports.number().optional(),
-  gpuMemoryPercent: external_exports.number().optional()
+var LlmRuntimeCompleteInputSchema = LlmGenerateBaseInputSchema.extend({
+  images: external_exports.array(LlmImageSchema).optional(),
+  runtime: ManagedRuntimeConfigSchema,
+  /** The managed profile's timeout, threaded by the hub provider. */
+  timeoutMs: external_exports.number().int().positive().optional()
 });
-var metricsProviderCapability = {
-  name: "metrics-provider",
+var llmRuntimeCapability = {
+  name: "llm-runtime",
   scope: "system",
   mode: "singleton",
+  internal: true,
   methods: {
-    /** Fresh, full system snapshot (triggers OS-level collection). */
-    collectSnapshot: method(external_exports.void(), SystemResourceSnapshotSchema),
-    /** Most recent cached snapshot from the background sampler, or null pre-first-sample. */
-    getCached: method(external_exports.void(), SystemResourceSnapshotSchema.nullable()),
-    /** Light-weight cached summary for heartbeats and list views. */
-    getCurrent: method(external_exports.void(), SystemMetricsSchema),
-    /** Disk space for the given mount/path. */
-    getDiskSpace: method(external_exports.object({ dirPath: external_exports.string() }), DiskSpaceInfoSchema),
-    /** GPU info (null if unavailable). */
-    getGpuInfo: method(external_exports.void(), MetricsGpuInfoSchema.nullable()),
-    /** CPU temperature in °C (null if unavailable). */
-    getCpuTemperature: method(external_exports.void(), external_exports.number().nullable()),
-    /** Per-PID resource stats. Missing/dead PIDs are omitted from the result. */
-    getProcessStats: method(external_exports.object({ pids: external_exports.array(external_exports.number()) }), external_exports.array(PidResourceStatsSchema)),
-    /**
-    * List addon instances known to this node — one entry per forked worker
-    * plus a synthetic 'hub' entry representing the local hub process.
-    * Used by benchmarks/observability to detect whether a given addon runs
-    * in its own process (measurable independently) or inline with the hub.
-    */
-    listAddonInstances: method(external_exports.void(), external_exports.array(AddonInstanceSchema).readonly()),
-    /**
-    * Resource stats for the process hosting the given addon.
-    * Returns null when the addon runs in-process on the hub (can't measure
-    * independently — caller should detect via listAddonInstances). Returns
-    * hub process stats for addonId '$hub'.
-    */
-    getAddonStats: method(external_exports.object({ addonId: external_exports.string() }), PidResourceStatsSchema.nullable()),
-    /**
-    * Snapshot of every camstack-related process on this node with a
-    * ghost/managed/root classification. Powers the Cluster → Agent →
-    * Processes tab: cross-references `$process.list` against a `ps` scan
-    * so orphaned trees (PPID=1) or unknown children show up as `ghost`
-    * and can be killed from the UI.
-    */
-    listNodeProcesses: method(external_exports.void(), external_exports.array(NodeProcessSchema).readonly()),
-    /**
-    * Send SIGTERM (or SIGKILL when `force`) to a pid inside this node's
-    * process tree. The provider refuses pids that aren't in the live
-    * `listNodeProcesses()` snapshot — callers can't use this endpoint
-    * to kill arbitrary system processes.
-    */
-    killProcess: method(KillProcessInputSchema, KillProcessResultSchema, {
+    complete: method(LlmRuntimeCompleteInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
+    ensureStarted: method(external_exports.object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
       kind: "mutation",
       auth: "admin"
     }),
-    /**
-    * Tell the addon's forked runner to write a V8 heap snapshot to disk (via
-    * SIGUSR2 — the runner's diagnostic handler). Also logs its
-    * `process.memoryUsage()` + heap-space breakdown. Refuses pids not in the
-    * live `listNodeProcesses()` snapshot. Use for deep per-addon memory
-    * attribution; copy the returned path off the node to analyze.
-    */
-    dumpHeapSnapshot: method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
+    stop: method(external_exports.object({}), external_exports.void(), {
       kind: "mutation",
       auth: "admin"
-    })
+    }),
+    status: method(external_exports.object({}), LlmRuntimeStatusSchema),
+    installModel: method(external_exports.object({ model: ManagedModelRefSchema }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    deleteModel: method(external_exports.object({ file: external_exports.string() }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    listLocalModels: method(external_exports.object({}), external_exports.array(LlmNodeModelSchema)),
+    getDiskUsage: method(external_exports.object({}), LlmRuntimeDiskUsageSchema)
   }
 };
-var ModelConvertInputSchema = external_exports.object({
-  sourceUrl: external_exports.string(),
-  metadata: ModelConvertMetadataSchema,
-  targets: external_exports.array(ConvertTargetSchema).min(1).readonly(),
-  calibrationRef: external_exports.string().optional(),
-  sessionId: external_exports.string().optional()
+var LlmProfileKindSchema = external_exports.enum([
+  "openai-compatible",
+  "openai",
+  "anthropic",
+  "google",
+  "managed-local"
+]);
+var LlmProfileSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  kind: LlmProfileKindSchema,
+  /** Stamped by the provider — keeps the fanned catalog routable. */
+  addonId: external_exports.string(),
+  enabled: external_exports.boolean(),
+  /** Vendor model id, or the managed runtime's loaded model. */
+  model: external_exports.string(),
+  /** Required for openai-compatible; override for cloud kinds. */
+  baseUrl: external_exports.string().optional(),
+  /** ConfigUISchema type:'password' — never round-trips (spec §5). */
+  apiKey: external_exports.string().optional(),
+  supportsVision: external_exports.boolean(),
+  temperature: external_exports.number().min(0).max(2).optional(),
+  maxTokens: external_exports.number().int().positive().optional(),
+  timeoutMs: external_exports.number().int().positive().default(6e4),
+  extraHeaders: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  /** kind === 'managed-local' only (spec §4). */
+  runtime: ManagedRuntimeConfigSchema.optional()
 });
-var modelConvertCapability = {
-  name: "model-convert",
-  scope: "system",
-  mode: "singleton",
-  internal: true,
-  methods: { convert: method(ModelConvertInputSchema, ConvertResultSchema, {
-    kind: "mutation",
-    auth: "admin",
-    timeoutMs: 6e5
-  }) }
-};
-var ModelDistributeInputSchema = external_exports.object({
-  nodeId: external_exports.string(),
-  modelId: external_exports.string(),
-  format: external_exports.enum(MODEL_FORMATS),
-  entry: ModelCatalogEntrySchema
+var ConfigSchemaPassthrough$1 = external_exports.unknown();
+var LlmProfileKindDescriptorSchema = external_exports.object({
+  kind: LlmProfileKindSchema,
+  label: external_exports.string(),
+  icon: external_exports.string(),
+  /** Stamped by each provider so the concat-fanned catalog stays routable. */
+  addonId: external_exports.string(),
+  configSchema: ConfigSchemaPassthrough$1
 });
-var ModelDistributeResultSchema = external_exports.object({
-  ok: external_exports.boolean(),
-  /** sha256 of the staged tarball (empty for a hub-local no-op). */
-  sha256: external_exports.string(),
-  bytes: external_exports.number(),
-  /** The target node's modelsDir the artifact landed in. */
-  path: external_exports.string()
+var LlmDefaultSelectorSchema = external_exports.union([external_exports.object({ consumer: external_exports.string() }), external_exports.object({ purpose: external_exports.enum(["text", "vision"]) })]);
+var LlmDefaultSchema = external_exports.object({
+  selector: LlmDefaultSelectorSchema,
+  profileId: external_exports.string()
 });
-var modelDistributorCapability = {
-  name: "model-distributor",
-  scope: "system",
-  mode: "singleton",
-  internal: true,
-  methods: { distributeModel: method(ModelDistributeInputSchema, ModelDistributeResultSchema, {
-    kind: "mutation",
-    auth: "admin"
-  }) }
-};
-var BrokerKindSchema = external_exports.enum(["external", "embedded"]);
-var BrokerStatusSchema$1 = external_exports.enum([
-  "connected",
-  "disconnected",
-  "auth-failed",
-  "unreachable",
-  "tls-error"
-]);
-var BrokerInfoSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  url: external_exports.string(),
-  kind: BrokerKindSchema,
-  status: BrokerStatusSchema$1,
-  latencyMs: external_exports.number().nullable(),
-  error: external_exports.string().optional(),
-  /** Embedded brokers only: number of MQTT clients currently connected. */
-  connectedClients: external_exports.number().int().nonnegative().optional(),
-  /** Epoch ms of the last live probe (external) or aedes snapshot (embedded). */
-  lastCheckedAt: external_exports.number().optional()
+var LlmUsageRollupSchema = external_exports.object({
+  day: external_exports.string(),
+  consumer: external_exports.string(),
+  profileId: external_exports.string(),
+  calls: external_exports.number(),
+  okCalls: external_exports.number(),
+  errorCalls: external_exports.number(),
+  inputTokens: external_exports.number(),
+  outputTokens: external_exports.number(),
+  avgLatencyMs: external_exports.number()
 });
-var BrokerConnectionDetailsSchema = external_exports.object({
+var ManagedModelCatalogEntrySchema = external_exports.object({
+  id: external_exports.string(),
+  label: external_exports.string(),
+  family: external_exports.string(),
+  purpose: external_exports.enum(["text", "vision"]),
   url: external_exports.string(),
-  username: external_exports.string().optional(),
-  password: external_exports.string().optional(),
-  /**
-  * Suggested prefix for `clientId`. Each consumer should suffix this
-  * with its own discriminator (addon id, instance id) so reconnects
-  * don't kick each other off (MQTT spec: clientId must be unique per
-  * broker).
-  */
-  clientIdPrefix: external_exports.string().optional()
-});
-var AddBrokerInputSchema = external_exports.object({
-  name: external_exports.string().min(1),
-  url: external_exports.string().regex(/^(mqtt|mqtts|ws|wss):\/\//, "URL must start with mqtt(s):// or ws(s)://"),
-  username: external_exports.string().optional(),
-  password: external_exports.string().optional(),
-  clientIdPrefix: external_exports.string().optional()
-});
-var AddBrokerResultSchema = external_exports.object({ id: external_exports.string() });
-var IdInputSchema = external_exports.object({ id: external_exports.string() });
-var TestResultSchema$1 = external_exports.discriminatedUnion("ok", [external_exports.object({
-  ok: external_exports.literal(true),
-  latencyMs: external_exports.number()
-}), external_exports.object({
-  ok: external_exports.literal(false),
-  error: external_exports.string()
-})]);
-var StartEmbeddedInputSchema = external_exports.object({
-  port: external_exports.number().int().min(1).max(65535).default(1883),
-  /** Allow anonymous connect (no username/password). Default: false. */
-  allowAnonymous: external_exports.boolean().default(false),
-  /** Optional shared username/password for clients. */
-  username: external_exports.string().optional(),
-  password: external_exports.string().optional()
+  sha256: external_exports.string(),
+  sizeBytes: external_exports.number(),
+  quantization: external_exports.string(),
+  /** Load-time guidance shown in the picker. */
+  minRamBytes: external_exports.number(),
+  contextSizeDefault: external_exports.number().int(),
+  /** Vision models: companion projector file. */
+  mmprojUrl: external_exports.string().optional()
 });
-var StartEmbeddedResultSchema = external_exports.object({
-  id: external_exports.string(),
-  url: external_exports.string()
+var LlmRuntimeNodeSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  reachable: external_exports.boolean(),
+  status: LlmRuntimeStatusSchema.optional(),
+  disk: LlmRuntimeDiskUsageSchema.optional(),
+  error: external_exports.string().optional()
 });
-var StatusSchema = external_exports.object({
-  brokerCount: external_exports.number(),
-  embeddedRunning: external_exports.boolean()
+var GenerateVisionInputSchema = LlmGenerateBaseInputSchema.extend({ images: external_exports.array(LlmImageSchema).min(1) });
+var ProfileRefInputSchema = external_exports.object({
+  addonId: external_exports.string(),
+  profileId: external_exports.string()
 });
-var mqttBrokerCapability = {
-  name: "mqtt-broker",
+var llmCapability = {
+  name: "llm",
   scope: "system",
   mode: "collection",
-  providerKind: "broker",
-  status: {
-    schema: StatusSchema,
-    kind: "poll"
-  },
+  internal: false,
+  providerKind: "ai",
+  /** `nodeId` inputs below are DATA (the hub provider pins itself), never routing. */
+  nodeIdMode: "data",
   methods: {
-    listBrokers: method(external_exports.void(), external_exports.array(BrokerInfoSchema)),
-    getBrokerConfig: method(IdInputSchema, BrokerConnectionDetailsSchema),
-    addBroker: method(AddBrokerInputSchema, AddBrokerResultSchema, { kind: "mutation" }),
-    removeBroker: method(IdInputSchema, external_exports.void(), { kind: "mutation" }),
-    testConnection: method(IdInputSchema, TestResultSchema$1, { kind: "mutation" }),
-    startEmbeddedBroker: method(StartEmbeddedInputSchema, StartEmbeddedResultSchema, { kind: "mutation" }),
-    stopEmbeddedBroker: method(IdInputSchema, external_exports.void(), { kind: "mutation" }),
-    getStatus: method(external_exports.void(), StatusSchema)
+    generate: method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
+    generateVision: method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
+    listProfileKinds: method(external_exports.object({}), external_exports.array(LlmProfileKindDescriptorSchema)),
+    listProfiles: method(external_exports.object({}), external_exports.array(LlmProfileSchema)),
+    upsertProfile: method(external_exports.object({ profile: LlmProfileSchema }), LlmProfileSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    deleteProfile: method(ProfileRefInputSchema, external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    testProfile: method(ProfileRefInputSchema, LlmGenerateResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /** Live vendor enumeration (GET /models etc.). */
+    listModels: method(ProfileRefInputSchema, external_exports.array(external_exports.string())),
+    getDefaults: method(external_exports.object({}), external_exports.array(LlmDefaultSchema)),
+    setDefault: method(external_exports.object({
+      selector: LlmDefaultSelectorSchema,
+      profileId: external_exports.string().nullable()
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    getUsage: method(external_exports.object({
+      since: external_exports.number().optional(),
+      until: external_exports.number().optional(),
+      consumer: external_exports.string().optional(),
+      profileId: external_exports.string().optional()
+    }), external_exports.array(LlmUsageRollupSchema)),
+    listModelCatalog: method(external_exports.object({}), external_exports.array(ManagedModelCatalogEntrySchema)),
+    listRuntimeNodes: method(external_exports.object({}), external_exports.array(LlmRuntimeNodeSchema)),
+    listNodeModels: method(external_exports.object({ nodeId: external_exports.string() }), external_exports.array(LlmNodeModelSchema)),
+    installModel: method(external_exports.object({
+      nodeId: external_exports.string(),
+      model: ManagedModelRefSchema
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    deleteModel: method(external_exports.object({
+      nodeId: external_exports.string(),
+      file: external_exports.string()
+    }), external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    getRuntimeStatus: method(ProfileRefInputSchema, LlmRuntimeStatusSchema),
+    startRuntime: method(ProfileRefInputSchema, LlmRuntimeStatusSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    stopRuntime: method(ProfileRefInputSchema, external_exports.void(), {
+      kind: "mutation",
+      auth: "admin"
+    })
   }
 };
-var NetworkEndpointSchema = external_exports.object({
-  url: external_exports.string(),
-  hostname: external_exports.string(),
-  port: external_exports.number(),
-  protocol: external_exports.enum(["http", "https"])
-});
-var NetworkAccessStatusSchema = external_exports.object({
-  connected: external_exports.boolean(),
-  endpoint: NetworkEndpointSchema.nullable(),
-  error: external_exports.string().optional()
-});
-var NetworkEndpointEntrySchema = NetworkEndpointSchema.extend({
-  /**
-  * Stable id within the provider — typically `<mode>-<sourcePort>` so
-  * the orchestrator can dedupe across `listEndpoints` polls.
-  */
-  id: external_exports.string(),
-  /** Operator-facing label (mirrors `MeshEndpoint.label`). */
-  label: external_exports.string(),
-  /** Optional provider-specific mode tag, used for icon/colour in admin UI. */
-  mode: external_exports.string().optional(),
-  /** Originating local port the ingress fronts (informational). */
-  sourcePort: external_exports.number().optional()
+var LogLevelSchema = external_exports.enum([
+  "debug",
+  "info",
+  "warn",
+  "error"
+]);
+var LogEntrySchema = external_exports.object({
+  timestamp: external_exports.date(),
+  level: LogLevelSchema,
+  scope: external_exports.array(external_exports.string()),
+  message: external_exports.string(),
+  meta: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
 });
-var networkAccessCapability = {
-  name: "network-access",
+var logDestinationCapability = {
+  name: "log-destination",
   scope: "system",
   mode: "collection",
-  providerKind: "ingress",
+  internal: true,
   methods: {
-    start: method(external_exports.void(), NetworkEndpointSchema, { kind: "mutation" }),
-    stop: method(external_exports.void(), external_exports.void(), { kind: "mutation" }),
-    getEndpoint: method(external_exports.void(), NetworkEndpointSchema.nullable()),
-    getStatus: method(external_exports.void(), NetworkAccessStatusSchema),
-    /**
-    * Enumerate every active ingress entry. Providers that expose only a
-    * single endpoint may omit this method; callers fall back to
-    * `getEndpoint()` in that case.
-    */
-    listEndpoints: method(external_exports.void(), external_exports.array(NetworkEndpointEntrySchema).readonly())
-  }
+    write: method(LogEntrySchema, external_exports.void(), { kind: "mutation" }),
+    query: method(external_exports.object({
+      scope: external_exports.array(external_exports.string()).optional(),
+      level: LogLevelSchema.optional(),
+      since: external_exports.date().optional(),
+      until: external_exports.date().optional(),
+      limit: external_exports.number().optional(),
+      tags: external_exports.record(external_exports.string(), external_exports.string()).optional()
+    }), external_exports.array(LogEntrySchema).readonly())
+  },
+  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+  mount: { kind: "skip" }
 };
-var AttachmentMediaTypeSchema = external_exports.enum([
-  "image",
-  "video",
-  "gif",
-  "audio",
-  "icon"
-]);
-var AttachmentSchema = external_exports.object({
-  mediaType: AttachmentMediaTypeSchema,
-  url: external_exports.string().optional(),
-  bytes: external_exports.instanceof(Uint8Array).optional(),
-  mime: external_exports.string().optional(),
-  name: external_exports.string().optional()
-}).refine((a) => a.url !== void 0 || a.bytes !== void 0, { message: "Attachment requires either `url` or `bytes`" });
-var NotificationFormatSchema = external_exports.enum([
-  "text",
-  "markdown",
-  "html"
-]);
-var NotificationActionSchema = external_exports.object({
+var LoginStageEnum = external_exports.enum(["primary", "second-factor"]);
+var RedirectLoginMethodSchema = external_exports.object({
+  kind: external_exports.literal("redirect"),
+  /** Stable id within the login-method set (e.g. `auth-oidc/google`). */
   id: external_exports.string(),
+  /** Operator-facing button label. */
   label: external_exports.string(),
-  url: external_exports.string().optional()
+  /** lucide-react icon name. */
+  icon: external_exports.string().optional(),
+  /** Addon-owned HTTP route the button navigates to (GET). */
+  startUrl: external_exports.string(),
+  stage: LoginStageEnum
 });
-var NotificationSchema = external_exports.object({
-  body: external_exports.string(),
-  title: external_exports.string().optional(),
-  format: NotificationFormatSchema.default("text"),
-  priority: external_exports.number().int().min(1).max(5).default(3),
-  level: external_exports.string().optional(),
-  attachments: external_exports.array(AttachmentSchema).optional(),
-  clickUrl: external_exports.string().optional(),
-  actions: external_exports.array(NotificationActionSchema).optional(),
-  sound: external_exports.string().optional(),
-  ttl: external_exports.number().optional(),
-  tag: external_exports.string().optional(),
-  deviceId: external_exports.number().optional(),
-  eventId: external_exports.string().optional(),
-  metadata: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+var WidgetLoginMethodSchema = external_exports.object({
+  kind: external_exports.literal("widget"),
+  /** Stable id within the login-method set (e.g. `auth-webauthn/passkey-login`). */
+  id: external_exports.string(),
+  /** Owning addon id — drives the public bundle URL + the MF namespace. */
+  addonId: external_exports.string(),
+  /** Bundle filename inside the addon's dist dir (`remoteEntry.js`). */
+  bundle: external_exports.string(),
+  /** MF remote descriptor — `{ remoteName, exposedModule, componentKey }`. */
+  remote: WidgetRemoteSchema,
+  stage: LoginStageEnum
 });
-var TargetKindLevelSchema = external_exports.object({
+var PasskeyLoginMethodSchema = external_exports.object({
+  kind: external_exports.literal("passkey"),
+  /** Stable id within the login-method set (e.g. `auth-webauthn/passkey-direct-login`). */
   id: external_exports.string(),
+  /** Operator-facing button label. */
   label: external_exports.string(),
-  /** Which canonical priority (1..5) this level maps to. `null` = qualitative-only. */
-  ordinal: external_exports.number().int().min(1).max(5).nullable(),
-  flags: external_exports.object({
-    critical: external_exports.boolean().optional(),
-    silent: external_exports.boolean().optional(),
-    noPush: external_exports.boolean().optional()
-  }).optional(),
-  /** e.g. Pushover `emergency` requires `retry` / `expire`. */
-  requires: external_exports.array(external_exports.string()).optional(),
-  description: external_exports.string().optional()
+  stage: LoginStageEnum,
+  /** Effective WebAuthn RP ID (`resolveRpID()`) — the shell gates visibility on it. */
+  rpId: external_exports.string(),
+  /** Effective expected origin (`resolveOrigin()`), null when unconfigured. */
+  origin: external_exports.string().nullable()
 });
-var TargetKindAttachmentsCapsSchema = external_exports.object({
-  mediaTypes: external_exports.array(AttachmentMediaTypeSchema),
-  mode: external_exports.enum([
-    "url",
-    "bytes",
-    "both"
+var LoginMethodContributionSchema = external_exports.discriminatedUnion("kind", [
+  RedirectLoginMethodSchema,
+  WidgetLoginMethodSchema,
+  PasskeyLoginMethodSchema
+]);
+var loginMethodCapability = {
+  name: "login-method",
+  scope: "system",
+  mode: "collection",
+  internal: true,
+  methods: { getLoginMethods: method(external_exports.void(), external_exports.array(LoginMethodContributionSchema).readonly()) },
+  /** BIG PLAN 2: declarative mount hint — read by `@camstack/system` `buildCapRouters`. */
+  mount: { kind: "skip" }
+};
+var CpuBreakdownSchema = external_exports.object({
+  total: external_exports.number(),
+  user: external_exports.number(),
+  system: external_exports.number(),
+  irq: external_exports.number(),
+  nice: external_exports.number(),
+  loadAvg: external_exports.tuple([
+    external_exports.number(),
+    external_exports.number(),
+    external_exports.number()
   ]),
-  max: external_exports.number().int().nonnegative(),
-  maxBytes: external_exports.number().int().positive().optional()
-});
-var TargetKindCapsSchema = external_exports.object({
-  attachments: TargetKindAttachmentsCapsSchema,
-  /** Max action buttons (0 = none). */
-  actions: external_exports.number().int().nonnegative(),
-  levels: external_exports.array(TargetKindLevelSchema),
-  format: external_exports.array(NotificationFormatSchema),
-  clickUrl: external_exports.boolean(),
-  sound: external_exports.boolean(),
-  ttl: external_exports.boolean(),
-  bodyMaxLen: external_exports.number().int().positive()
+  cores: external_exports.number()
 });
-var ConfigSchemaPassthrough$1 = external_exports.unknown();
-var TargetKindSchema = external_exports.object({
-  kind: external_exports.string(),
-  label: external_exports.string(),
-  icon: external_exports.string(),
-  /** Stamped by each provider so the concat-fanned catalog stays routable. */
-  addonId: external_exports.string(),
-  configSchema: ConfigSchemaPassthrough$1,
-  supportsDiscovery: external_exports.boolean(),
-  caps: TargetKindCapsSchema
+var MemoryInfoSchema = external_exports.object({
+  percent: external_exports.number(),
+  totalBytes: external_exports.number(),
+  usedBytes: external_exports.number(),
+  availableBytes: external_exports.number(),
+  swapUsedBytes: external_exports.number(),
+  swapTotalBytes: external_exports.number()
 });
-var TargetSchema = external_exports.object({
-  id: external_exports.string(),
-  name: external_exports.string(),
-  kind: external_exports.string(),
-  addonId: external_exports.string(),
-  enabled: external_exports.boolean(),
-  config: external_exports.record(external_exports.string(), external_exports.unknown())
+var DiskIoSnapshotSchema = external_exports.object({
+  readBytes: external_exports.number(),
+  writeBytes: external_exports.number(),
+  readOps: external_exports.number(),
+  writeOps: external_exports.number(),
+  timestampMs: external_exports.number()
 });
-var DiscoveredTargetSchema = external_exports.object({
-  kind: external_exports.string(),
-  suggestedName: external_exports.string(),
-  config: external_exports.record(external_exports.string(), external_exports.unknown())
+var NetworkIoSnapshotSchema = external_exports.object({
+  rxBytes: external_exports.number(),
+  txBytes: external_exports.number(),
+  rxPackets: external_exports.number(),
+  txPackets: external_exports.number(),
+  rxErrors: external_exports.number(),
+  txErrors: external_exports.number(),
+  timestampMs: external_exports.number()
 });
-var RenderedAsSchema = external_exports.object({
-  level: external_exports.string(),
-  format: NotificationFormatSchema,
-  attachmentsSent: external_exports.number().int().nonnegative(),
-  actionsSent: external_exports.number().int().nonnegative(),
-  truncated: external_exports.boolean(),
-  dropped: external_exports.array(external_exports.string())
+var MetricsGpuInfoSchema = external_exports.object({
+  utilization: external_exports.number(),
+  model: external_exports.string(),
+  memoryUsedBytes: external_exports.number(),
+  memoryTotalBytes: external_exports.number(),
+  temperature: external_exports.number().nullable()
 });
-var SendResultSchema = external_exports.object({
-  success: external_exports.boolean(),
-  error: external_exports.string().optional(),
-  renderedAs: RenderedAsSchema.optional()
+var ProcessResourceInfoSchema = external_exports.object({
+  openFds: external_exports.number(),
+  threadCount: external_exports.number(),
+  activeHandles: external_exports.number(),
+  activeRequests: external_exports.number()
 });
-var TestResultSchema = SendResultSchema;
-var notificationOutputCapability = {
-  name: "notification-output",
-  scope: "system",
-  mode: "collection",
-  methods: {
-    listTargetKinds: method(external_exports.object({}), external_exports.array(TargetKindSchema)),
-    listTargets: method(external_exports.object({}), external_exports.array(TargetSchema)),
-    discoverTargets: method(external_exports.object({
-      kind: external_exports.string(),
-      config: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
-    }), external_exports.array(DiscoveredTargetSchema)),
-    send: method(external_exports.object({
-      targetId: external_exports.string(),
-      notification: NotificationSchema
-    }), SendResultSchema, { kind: "mutation" }),
-    testTarget: method(external_exports.object({
-      targetId: external_exports.string(),
-      sample: NotificationSchema.optional()
-    }), TestResultSchema, { kind: "mutation" }),
-    upsertTarget: method(external_exports.object({ target: TargetSchema }), TargetSchema, { kind: "mutation" }),
-    deleteTarget: method(external_exports.object({ targetId: external_exports.string() }), external_exports.void(), { kind: "mutation" }),
-    setTargetEnabled: method(external_exports.object({
-      targetId: external_exports.string(),
-      enabled: external_exports.boolean()
-    }), external_exports.void(), { kind: "mutation" })
-  }
-};
-var LlmUsageSchema = external_exports.object({
-  inputTokens: external_exports.number(),
-  outputTokens: external_exports.number()
+var PressureAvgsSchema = external_exports.object({
+  avg10: external_exports.number(),
+  avg60: external_exports.number(),
+  avg300: external_exports.number()
 });
-var LlmErrorCodeSchema = external_exports.enum([
-  "timeout",
-  "rate-limited",
-  "auth",
-  "refusal",
-  "bad-request",
-  "unavailable",
-  "no-profile",
-  "budget-exceeded",
-  "adapter-error"
-]);
-var LlmGenerateOkSchema = external_exports.object({
-  ok: external_exports.literal(true),
-  text: external_exports.string(),
-  model: external_exports.string(),
-  usage: LlmUsageSchema,
-  truncated: external_exports.boolean(),
-  latencyMs: external_exports.number()
+var PressureInfoSchema = external_exports.object({
+  some: PressureAvgsSchema,
+  full: PressureAvgsSchema.nullable()
 });
-var LlmGenerateErrSchema = external_exports.object({
-  ok: external_exports.literal(false),
-  code: LlmErrorCodeSchema,
-  message: external_exports.string(),
-  retryAfterMs: external_exports.number().optional()
-});
-var LlmGenerateResultSchema = external_exports.discriminatedUnion("ok", [LlmGenerateOkSchema, LlmGenerateErrSchema]);
-var LlmImageSchema = external_exports.object({
-  bytes: external_exports.instanceof(Uint8Array),
-  mimeType: external_exports.string()
+var SystemResourceSnapshotSchema = external_exports.object({
+  cpu: CpuBreakdownSchema,
+  memory: MemoryInfoSchema,
+  gpu: MetricsGpuInfoSchema.nullable(),
+  network: NetworkIoSnapshotSchema,
+  disk: DiskIoSnapshotSchema,
+  pressure: external_exports.object({
+    cpu: PressureInfoSchema.nullable(),
+    memory: PressureInfoSchema.nullable(),
+    io: PressureInfoSchema.nullable()
+  }),
+  process: ProcessResourceInfoSchema,
+  cpuTemperature: external_exports.number().nullable(),
+  timestampMs: external_exports.number()
 });
-var LlmGenerateBaseInputSchema = external_exports.object({
-  /** Collection routing (the notification-output posture). */
-  addonId: external_exports.string().optional(),
-  /** Explicit profile; else the resolution chain (spec §3). */
-  profileId: external_exports.string().optional(),
-  /** MANDATORY usage tag: 'ai-summary', 'notifier-rules', 'adhoc-ui', … */
-  consumer: external_exports.string(),
-  system: external_exports.string().optional(),
-  /** v1: single-turn. `messages[]` is a v2 additive field. */
-  prompt: external_exports.string(),
-  /** Structured output — adapter-mapped (response_format / forced tool / responseSchema). */
-  jsonSchema: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
-  /** Per-call override of the profile default. */
-  maxTokens: external_exports.number().int().positive().optional(),
-  temperature: external_exports.number().optional()
+var DiskSpaceInfoSchema = external_exports.object({
+  path: external_exports.string(),
+  totalBytes: external_exports.number(),
+  usedBytes: external_exports.number(),
+  availableBytes: external_exports.number(),
+  percent: external_exports.number()
 });
-var ManagedModelRefSchema = external_exports.discriminatedUnion("kind", [
-  external_exports.object({
-    kind: external_exports.literal("catalog"),
-    catalogId: external_exports.string()
-  }),
-  external_exports.object({
-    kind: external_exports.literal("url"),
-    url: external_exports.string(),
-    sha256: external_exports.string().optional()
-  }),
-  external_exports.object({
-    kind: external_exports.literal("path"),
-    path: external_exports.string()
-  })
-]);
-var ManagedRuntimeConfigSchema = external_exports.object({
-  /** WHERE the runtime lives — hub or any agent. */
-  nodeId: external_exports.string(),
-  /** Closed for v1; 'ollama' is a v2 candidate. */
-  engine: external_exports.enum(["llama-cpp"]),
-  model: ManagedModelRefSchema,
-  contextSize: external_exports.number().int().default(4096),
-  /** 0 = CPU-only. */
-  gpuLayers: external_exports.number().int().default(0),
-  /** Default: cpus-2, clamped ≥1 (resolved node-side). */
-  threads: external_exports.number().int().optional(),
-  /** Concurrent slots. */
-  parallel: external_exports.number().int().default(1),
-  /** Else lazy: first generate boots it. */
-  autoStart: external_exports.boolean().default(false),
-  /** 0 = never; frees RAM after quiet periods. */
-  idleStopMinutes: external_exports.number().int().default(30)
+var PidResourceStatsSchema = external_exports.object({
+  pid: external_exports.number(),
+  cpu: external_exports.number(),
+  memory: external_exports.number(),
+  /**
+  * Private (anonymous) resident bytes — the per-process V8 heap + native
+  * allocations NOT shared with other processes (Linux RssAnon). This is the
+  * "real" per-runner cost; summing it across runners is meaningful, unlike
+  * `memory` (RSS), which double-counts the shared mmap'd framework code.
+  * Undefined where /proc is unavailable (e.g. macOS).
+  */
+  privateBytes: external_exports.number().optional(),
+  /**
+  * Shared file-backed resident bytes (Linux RssFile) — mmap'd framework/lib
+  * code shared copy-on-write across runners. Undefined on macOS.
+  */
+  sharedBytes: external_exports.number().optional()
 });
-var LlmRuntimeStatusSchema = external_exports.object({
-  /** Status is ALWAYS node-qualified. */
+var AddonInstanceSchema = external_exports.object({
+  addonId: external_exports.string(),
   nodeId: external_exports.string(),
+  role: external_exports.enum(["hub", "worker"]),
+  pid: external_exports.number(),
   state: external_exports.enum([
-    "stopped",
-    "downloading",
     "starting",
-    "ready",
-    "crashed",
-    "failed"
+    "running",
+    "stopping",
+    "stopped",
+    "crashed"
   ]),
+  uptimeSec: external_exports.number()
+});
+var NodeProcessSchema = external_exports.object({
+  pid: external_exports.number(),
+  ppid: external_exports.number(),
+  pgid: external_exports.number(),
+  classification: external_exports.enum([
+    "root",
+    "managed",
+    "system",
+    "ghost"
+  ]),
+  /** `$process` addon binding when `managed`, else null. */
+  addonId: external_exports.string().nullable(),
+  /** Kernel-reported nodeId when the process is a known agent/worker. */
+  nodeId: external_exports.string().nullable(),
+  /** Truncated command line. */
+  command: external_exports.string(),
+  cpuPercent: external_exports.number(),
+  memoryRssBytes: external_exports.number(),
+  /** Wall-clock uptime (seconds). Parsed from `ps etime`. */
+  uptimeSec: external_exports.number(),
+  /** True when ancestor walk reaches `ppid=1` (reparented to init/launchd). */
+  orphaned: external_exports.boolean()
+});
+var KillProcessInputSchema = external_exports.object({
+  pid: external_exports.number(),
+  /** Force = SIGKILL. Default is SIGTERM. */
+  force: external_exports.boolean().optional()
+});
+var KillProcessResultSchema = external_exports.object({
+  success: external_exports.boolean(),
+  reason: external_exports.string().optional(),
+  signal: external_exports.enum(["SIGTERM", "SIGKILL"]).optional()
+});
+var DumpHeapSnapshotInputSchema = external_exports.object({
+  /** The addon whose runner should dump a heap snapshot. */
+  addonId: external_exports.string()
+});
+var DumpHeapSnapshotResultSchema = external_exports.object({
+  success: external_exports.boolean(),
+  /** Path of the written .heapsnapshot inside the runner's container/host. */
+  path: external_exports.string().optional(),
+  /** Process pid that was signalled. */
   pid: external_exports.number().optional(),
-  port: external_exports.number().optional(),
-  modelPath: external_exports.string().optional(),
-  modelId: external_exports.string().optional(),
-  downloadProgress: external_exports.number().min(0).max(1).optional(),
-  lastError: external_exports.string().optional(),
-  crashesInWindow: external_exports.number(),
-  /** Child RSS (sampled best-effort). */
-  memoryBytes: external_exports.number().optional(),
-  vramBytes: external_exports.number().optional()
+  reason: external_exports.string().optional()
 });
-var LlmNodeModelSchema = external_exports.object({
-  file: external_exports.string(),
-  sizeBytes: external_exports.number(),
-  catalogId: external_exports.string().optional(),
-  installedAt: external_exports.number().optional()
+var SystemMetricsSchema = external_exports.object({
+  cpuPercent: external_exports.number(),
+  memoryPercent: external_exports.number(),
+  memoryUsedMB: external_exports.number(),
+  memoryTotalMB: external_exports.number(),
+  diskPercent: external_exports.number().optional(),
+  temperature: external_exports.number().optional(),
+  gpuPercent: external_exports.number().optional(),
+  gpuMemoryPercent: external_exports.number().optional()
+});
+var metricsProviderCapability = {
+  name: "metrics-provider",
+  scope: "system",
+  mode: "singleton",
+  methods: {
+    /** Fresh, full system snapshot (triggers OS-level collection). */
+    collectSnapshot: method(external_exports.void(), SystemResourceSnapshotSchema),
+    /** Most recent cached snapshot from the background sampler, or null pre-first-sample. */
+    getCached: method(external_exports.void(), SystemResourceSnapshotSchema.nullable()),
+    /** Light-weight cached summary for heartbeats and list views. */
+    getCurrent: method(external_exports.void(), SystemMetricsSchema),
+    /** Disk space for the given mount/path. */
+    getDiskSpace: method(external_exports.object({ dirPath: external_exports.string() }), DiskSpaceInfoSchema),
+    /** GPU info (null if unavailable). */
+    getGpuInfo: method(external_exports.void(), MetricsGpuInfoSchema.nullable()),
+    /** CPU temperature in °C (null if unavailable). */
+    getCpuTemperature: method(external_exports.void(), external_exports.number().nullable()),
+    /** Per-PID resource stats. Missing/dead PIDs are omitted from the result. */
+    getProcessStats: method(external_exports.object({ pids: external_exports.array(external_exports.number()) }), external_exports.array(PidResourceStatsSchema)),
+    /**
+    * List addon instances known to this node — one entry per forked worker
+    * plus a synthetic 'hub' entry representing the local hub process.
+    * Used by benchmarks/observability to detect whether a given addon runs
+    * in its own process (measurable independently) or inline with the hub.
+    */
+    listAddonInstances: method(external_exports.void(), external_exports.array(AddonInstanceSchema).readonly()),
+    /**
+    * Resource stats for the process hosting the given addon.
+    * Returns null when the addon runs in-process on the hub (can't measure
+    * independently — caller should detect via listAddonInstances). Returns
+    * hub process stats for addonId '$hub'.
+    */
+    getAddonStats: method(external_exports.object({ addonId: external_exports.string() }), PidResourceStatsSchema.nullable()),
+    /**
+    * Snapshot of every camstack-related process on this node with a
+    * ghost/managed/root classification. Powers the Cluster → Agent →
+    * Processes tab: cross-references `$process.list` against a `ps` scan
+    * so orphaned trees (PPID=1) or unknown children show up as `ghost`
+    * and can be killed from the UI.
+    */
+    listNodeProcesses: method(external_exports.void(), external_exports.array(NodeProcessSchema).readonly()),
+    /**
+    * Send SIGTERM (or SIGKILL when `force`) to a pid inside this node's
+    * process tree. The provider refuses pids that aren't in the live
+    * `listNodeProcesses()` snapshot — callers can't use this endpoint
+    * to kill arbitrary system processes.
+    */
+    killProcess: method(KillProcessInputSchema, KillProcessResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    }),
+    /**
+    * Tell the addon's forked runner to write a V8 heap snapshot to disk (via
+    * SIGUSR2 — the runner's diagnostic handler). Also logs its
+    * `process.memoryUsage()` + heap-space breakdown. Refuses pids not in the
+    * live `listNodeProcesses()` snapshot. Use for deep per-addon memory
+    * attribution; copy the returned path off the node to analyze.
+    */
+    dumpHeapSnapshot: method(DumpHeapSnapshotInputSchema, DumpHeapSnapshotResultSchema, {
+      kind: "mutation",
+      auth: "admin"
+    })
+  }
+};
+var ModelConvertInputSchema = external_exports.object({
+  sourceUrl: external_exports.string(),
+  metadata: ModelConvertMetadataSchema,
+  targets: external_exports.array(ConvertTargetSchema).min(1).readonly(),
+  calibrationRef: external_exports.string().optional(),
+  sessionId: external_exports.string().optional()
+});
+var modelConvertCapability = {
+  name: "model-convert",
+  scope: "system",
+  mode: "singleton",
+  internal: true,
+  methods: { convert: method(ModelConvertInputSchema, ConvertResultSchema, {
+    kind: "mutation",
+    auth: "admin",
+    timeoutMs: 6e5
+  }) }
+};
+var ModelDistributeInputSchema = external_exports.object({
+  nodeId: external_exports.string(),
+  modelId: external_exports.string(),
+  format: external_exports.enum(MODEL_FORMATS),
+  entry: ModelCatalogEntrySchema
+});
+var ModelDistributeResultSchema = external_exports.object({
+  ok: external_exports.boolean(),
+  /** sha256 of the staged tarball (empty for a hub-local no-op). */
+  sha256: external_exports.string(),
+  bytes: external_exports.number(),
+  /** The target node's modelsDir the artifact landed in. */
+  path: external_exports.string()
+});
+var modelDistributorCapability = {
+  name: "model-distributor",
+  scope: "system",
+  mode: "singleton",
+  internal: true,
+  methods: { distributeModel: method(ModelDistributeInputSchema, ModelDistributeResultSchema, {
+    kind: "mutation",
+    auth: "admin"
+  }) }
+};
+var BrokerKindSchema = external_exports.enum(["external", "embedded"]);
+var BrokerStatusSchema$1 = external_exports.enum([
+  "connected",
+  "disconnected",
+  "auth-failed",
+  "unreachable",
+  "tls-error"
+]);
+var BrokerInfoSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  url: external_exports.string(),
+  kind: BrokerKindSchema,
+  status: BrokerStatusSchema$1,
+  latencyMs: external_exports.number().nullable(),
+  error: external_exports.string().optional(),
+  /** Embedded brokers only: number of MQTT clients currently connected. */
+  connectedClients: external_exports.number().int().nonnegative().optional(),
+  /** Epoch ms of the last live probe (external) or aedes snapshot (embedded). */
+  lastCheckedAt: external_exports.number().optional()
+});
+var BrokerConnectionDetailsSchema = external_exports.object({
+  url: external_exports.string(),
+  username: external_exports.string().optional(),
+  password: external_exports.string().optional(),
+  /**
+  * Suggested prefix for `clientId`. Each consumer should suffix this
+  * with its own discriminator (addon id, instance id) so reconnects
+  * don't kick each other off (MQTT spec: clientId must be unique per
+  * broker).
+  */
+  clientIdPrefix: external_exports.string().optional()
+});
+var AddBrokerInputSchema = external_exports.object({
+  name: external_exports.string().min(1),
+  url: external_exports.string().regex(/^(mqtt|mqtts|ws|wss):\/\//, "URL must start with mqtt(s):// or ws(s)://"),
+  username: external_exports.string().optional(),
+  password: external_exports.string().optional(),
+  clientIdPrefix: external_exports.string().optional()
+});
+var AddBrokerResultSchema = external_exports.object({ id: external_exports.string() });
+var IdInputSchema = external_exports.object({ id: external_exports.string() });
+var TestResultSchema$1 = external_exports.discriminatedUnion("ok", [external_exports.object({
+  ok: external_exports.literal(true),
+  latencyMs: external_exports.number()
+}), external_exports.object({
+  ok: external_exports.literal(false),
+  error: external_exports.string()
+})]);
+var StartEmbeddedInputSchema = external_exports.object({
+  port: external_exports.number().int().min(1).max(65535).default(1883),
+  /** Allow anonymous connect (no username/password). Default: false. */
+  allowAnonymous: external_exports.boolean().default(false),
+  /** Optional shared username/password for clients. */
+  username: external_exports.string().optional(),
+  password: external_exports.string().optional()
+});
+var StartEmbeddedResultSchema = external_exports.object({
+  id: external_exports.string(),
+  url: external_exports.string()
+});
+var StatusSchema = external_exports.object({
+  brokerCount: external_exports.number(),
+  embeddedRunning: external_exports.boolean()
+});
+var mqttBrokerCapability = {
+  name: "mqtt-broker",
+  scope: "system",
+  mode: "collection",
+  providerKind: "broker",
+  status: {
+    schema: StatusSchema,
+    kind: "poll"
+  },
+  methods: {
+    listBrokers: method(external_exports.void(), external_exports.array(BrokerInfoSchema)),
+    getBrokerConfig: method(IdInputSchema, BrokerConnectionDetailsSchema),
+    addBroker: method(AddBrokerInputSchema, AddBrokerResultSchema, { kind: "mutation" }),
+    removeBroker: method(IdInputSchema, external_exports.void(), { kind: "mutation" }),
+    testConnection: method(IdInputSchema, TestResultSchema$1, { kind: "mutation" }),
+    startEmbeddedBroker: method(StartEmbeddedInputSchema, StartEmbeddedResultSchema, { kind: "mutation" }),
+    stopEmbeddedBroker: method(IdInputSchema, external_exports.void(), { kind: "mutation" }),
+    getStatus: method(external_exports.void(), StatusSchema)
+  }
+};
+var NetworkEndpointSchema = external_exports.object({
+  url: external_exports.string(),
+  hostname: external_exports.string(),
+  port: external_exports.number(),
+  protocol: external_exports.enum(["http", "https"])
 });
-var LlmRuntimeDiskUsageSchema = external_exports.object({
-  nodeId: external_exports.string(),
-  modelsBytes: external_exports.number(),
-  freeBytes: external_exports.number().optional()
+var NetworkAccessStatusSchema = external_exports.object({
+  connected: external_exports.boolean(),
+  endpoint: NetworkEndpointSchema.nullable(),
+  error: external_exports.string().optional()
 });
-var LlmRuntimeCompleteInputSchema = LlmGenerateBaseInputSchema.extend({
-  images: external_exports.array(LlmImageSchema).optional(),
-  runtime: ManagedRuntimeConfigSchema,
-  /** The managed profile's timeout, threaded by the hub provider. */
-  timeoutMs: external_exports.number().int().positive().optional()
+var NetworkEndpointEntrySchema = NetworkEndpointSchema.extend({
+  /**
+  * Stable id within the provider — typically `<mode>-<sourcePort>` so
+  * the orchestrator can dedupe across `listEndpoints` polls.
+  */
+  id: external_exports.string(),
+  /** Operator-facing label (mirrors `MeshEndpoint.label`). */
+  label: external_exports.string(),
+  /** Optional provider-specific mode tag, used for icon/colour in admin UI. */
+  mode: external_exports.string().optional(),
+  /** Originating local port the ingress fronts (informational). */
+  sourcePort: external_exports.number().optional()
 });
-var llmRuntimeCapability = {
-  name: "llm-runtime",
+var networkAccessCapability = {
+  name: "network-access",
   scope: "system",
-  mode: "singleton",
-  internal: true,
+  mode: "collection",
+  providerKind: "ingress",
   methods: {
-    complete: method(LlmRuntimeCompleteInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
-    ensureStarted: method(external_exports.object({ runtime: ManagedRuntimeConfigSchema }), LlmRuntimeStatusSchema, {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    stop: method(external_exports.object({}), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    status: method(external_exports.object({}), LlmRuntimeStatusSchema),
-    installModel: method(external_exports.object({ model: ManagedModelRefSchema }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    deleteModel: method(external_exports.object({ file: external_exports.string() }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    listLocalModels: method(external_exports.object({}), external_exports.array(LlmNodeModelSchema)),
-    getDiskUsage: method(external_exports.object({}), LlmRuntimeDiskUsageSchema)
+    start: method(external_exports.void(), NetworkEndpointSchema, { kind: "mutation" }),
+    stop: method(external_exports.void(), external_exports.void(), { kind: "mutation" }),
+    getEndpoint: method(external_exports.void(), NetworkEndpointSchema.nullable()),
+    getStatus: method(external_exports.void(), NetworkAccessStatusSchema),
+    /**
+    * Enumerate every active ingress entry. Providers that expose only a
+    * single endpoint may omit this method; callers fall back to
+    * `getEndpoint()` in that case.
+    */
+    listEndpoints: method(external_exports.void(), external_exports.array(NetworkEndpointEntrySchema).readonly())
   }
 };
-var LlmProfileKindSchema = external_exports.enum([
-  "openai-compatible",
-  "openai",
-  "anthropic",
-  "google",
-  "managed-local"
+var AttachmentMediaTypeSchema = external_exports.enum([
+  "image",
+  "video",
+  "gif",
+  "audio",
+  "icon"
 ]);
-var LlmProfileSchema = external_exports.object({
+var AttachmentSchema = external_exports.object({
+  mediaType: AttachmentMediaTypeSchema,
+  url: external_exports.string().optional(),
+  bytes: external_exports.instanceof(Uint8Array).optional(),
+  mime: external_exports.string().optional(),
+  name: external_exports.string().optional()
+}).refine((a) => a.url !== void 0 || a.bytes !== void 0, { message: "Attachment requires either `url` or `bytes`" });
+var NotificationFormatSchema = external_exports.enum([
+  "text",
+  "markdown",
+  "html"
+]);
+var NotificationActionSchema = external_exports.object({
   id: external_exports.string(),
-  name: external_exports.string(),
-  kind: LlmProfileKindSchema,
-  /** Stamped by the provider — keeps the fanned catalog routable. */
-  addonId: external_exports.string(),
-  enabled: external_exports.boolean(),
-  /** Vendor model id, or the managed runtime's loaded model. */
-  model: external_exports.string(),
-  /** Required for openai-compatible; override for cloud kinds. */
-  baseUrl: external_exports.string().optional(),
-  /** ConfigUISchema type:'password' — never round-trips (spec §5). */
-  apiKey: external_exports.string().optional(),
-  supportsVision: external_exports.boolean(),
-  temperature: external_exports.number().min(0).max(2).optional(),
-  maxTokens: external_exports.number().int().positive().optional(),
-  timeoutMs: external_exports.number().int().positive().default(6e4),
-  extraHeaders: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  /** kind === 'managed-local' only (spec §4). */
-  runtime: ManagedRuntimeConfigSchema.optional()
-});
-var ConfigSchemaPassthrough = external_exports.unknown();
-var LlmProfileKindDescriptorSchema = external_exports.object({
-  kind: LlmProfileKindSchema,
   label: external_exports.string(),
-  icon: external_exports.string(),
-  /** Stamped by each provider so the concat-fanned catalog stays routable. */
-  addonId: external_exports.string(),
-  configSchema: ConfigSchemaPassthrough
-});
-var LlmDefaultSelectorSchema = external_exports.union([external_exports.object({ consumer: external_exports.string() }), external_exports.object({ purpose: external_exports.enum(["text", "vision"]) })]);
-var LlmDefaultSchema = external_exports.object({
-  selector: LlmDefaultSelectorSchema,
-  profileId: external_exports.string()
+  url: external_exports.string().optional()
 });
-var LlmUsageRollupSchema = external_exports.object({
-  day: external_exports.string(),
-  consumer: external_exports.string(),
-  profileId: external_exports.string(),
-  calls: external_exports.number(),
-  okCalls: external_exports.number(),
-  errorCalls: external_exports.number(),
-  inputTokens: external_exports.number(),
-  outputTokens: external_exports.number(),
-  avgLatencyMs: external_exports.number()
+var NotificationSchema = external_exports.object({
+  body: external_exports.string(),
+  title: external_exports.string().optional(),
+  format: NotificationFormatSchema.default("text"),
+  priority: external_exports.number().int().min(1).max(5).default(3),
+  level: external_exports.string().optional(),
+  attachments: external_exports.array(AttachmentSchema).optional(),
+  clickUrl: external_exports.string().optional(),
+  actions: external_exports.array(NotificationActionSchema).optional(),
+  sound: external_exports.string().optional(),
+  ttl: external_exports.number().optional(),
+  tag: external_exports.string().optional(),
+  deviceId: external_exports.number().optional(),
+  eventId: external_exports.string().optional(),
+  metadata: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
 });
-var ManagedModelCatalogEntrySchema = external_exports.object({
+var TargetKindLevelSchema = external_exports.object({
   id: external_exports.string(),
   label: external_exports.string(),
-  family: external_exports.string(),
-  purpose: external_exports.enum(["text", "vision"]),
-  url: external_exports.string(),
-  sha256: external_exports.string(),
-  sizeBytes: external_exports.number(),
-  quantization: external_exports.string(),
-  /** Load-time guidance shown in the picker. */
-  minRamBytes: external_exports.number(),
-  contextSizeDefault: external_exports.number().int(),
-  /** Vision models: companion projector file. */
-  mmprojUrl: external_exports.string().optional()
-});
-var LlmRuntimeNodeSchema = external_exports.object({
-  nodeId: external_exports.string(),
-  reachable: external_exports.boolean(),
-  status: LlmRuntimeStatusSchema.optional(),
-  disk: LlmRuntimeDiskUsageSchema.optional(),
-  error: external_exports.string().optional()
+  /** Which canonical priority (1..5) this level maps to. `null` = qualitative-only. */
+  ordinal: external_exports.number().int().min(1).max(5).nullable(),
+  flags: external_exports.object({
+    critical: external_exports.boolean().optional(),
+    silent: external_exports.boolean().optional(),
+    noPush: external_exports.boolean().optional()
+  }).optional(),
+  /** e.g. Pushover `emergency` requires `retry` / `expire`. */
+  requires: external_exports.array(external_exports.string()).optional(),
+  description: external_exports.string().optional()
 });
-var GenerateVisionInputSchema = LlmGenerateBaseInputSchema.extend({ images: external_exports.array(LlmImageSchema).min(1) });
-var ProfileRefInputSchema = external_exports.object({
-  addonId: external_exports.string(),
-  profileId: external_exports.string()
+var TargetKindAttachmentsCapsSchema = external_exports.object({
+  mediaTypes: external_exports.array(AttachmentMediaTypeSchema),
+  mode: external_exports.enum([
+    "url",
+    "bytes",
+    "both"
+  ]),
+  max: external_exports.number().int().nonnegative(),
+  maxBytes: external_exports.number().int().positive().optional()
 });
-var llmCapability = {
-  name: "llm",
-  scope: "system",
-  mode: "collection",
-  internal: false,
-  providerKind: "ai",
-  /** `nodeId` inputs below are DATA (the hub provider pins itself), never routing. */
-  nodeIdMode: "data",
-  methods: {
-    generate: method(LlmGenerateBaseInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
-    generateVision: method(GenerateVisionInputSchema, LlmGenerateResultSchema, { kind: "mutation" }),
-    listProfileKinds: method(external_exports.object({}), external_exports.array(LlmProfileKindDescriptorSchema)),
-    listProfiles: method(external_exports.object({}), external_exports.array(LlmProfileSchema)),
-    upsertProfile: method(external_exports.object({ profile: LlmProfileSchema }), LlmProfileSchema, {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    deleteProfile: method(ProfileRefInputSchema, external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    testProfile: method(ProfileRefInputSchema, LlmGenerateResultSchema, {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    /** Live vendor enumeration (GET /models etc.). */
-    listModels: method(ProfileRefInputSchema, external_exports.array(external_exports.string())),
-    getDefaults: method(external_exports.object({}), external_exports.array(LlmDefaultSchema)),
-    setDefault: method(external_exports.object({
-      selector: LlmDefaultSelectorSchema,
-      profileId: external_exports.string().nullable()
-    }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    getUsage: method(external_exports.object({
-      since: external_exports.number().optional(),
-      until: external_exports.number().optional(),
-      consumer: external_exports.string().optional(),
-      profileId: external_exports.string().optional()
-    }), external_exports.array(LlmUsageRollupSchema)),
-    listModelCatalog: method(external_exports.object({}), external_exports.array(ManagedModelCatalogEntrySchema)),
-    listRuntimeNodes: method(external_exports.object({}), external_exports.array(LlmRuntimeNodeSchema)),
-    listNodeModels: method(external_exports.object({ nodeId: external_exports.string() }), external_exports.array(LlmNodeModelSchema)),
-    installModel: method(external_exports.object({
-      nodeId: external_exports.string(),
-      model: ManagedModelRefSchema
-    }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    deleteModel: method(external_exports.object({
-      nodeId: external_exports.string(),
-      file: external_exports.string()
-    }), external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    getRuntimeStatus: method(ProfileRefInputSchema, LlmRuntimeStatusSchema),
-    startRuntime: method(ProfileRefInputSchema, LlmRuntimeStatusSchema, {
-      kind: "mutation",
-      auth: "admin"
-    }),
-    stopRuntime: method(ProfileRefInputSchema, external_exports.void(), {
-      kind: "mutation",
-      auth: "admin"
-    })
+var TargetKindCapsSchema = external_exports.object({
+  attachments: TargetKindAttachmentsCapsSchema,
+  /** Max action buttons (0 = none). */
+  actions: external_exports.number().int().nonnegative(),
+  levels: external_exports.array(TargetKindLevelSchema),
+  format: external_exports.array(NotificationFormatSchema),
+  clickUrl: external_exports.boolean(),
+  sound: external_exports.boolean(),
+  ttl: external_exports.boolean(),
+  bodyMaxLen: external_exports.number().int().positive()
+});
+var ConfigSchemaPassthrough = external_exports.unknown();
+var TargetKindSchema = external_exports.object({
+  kind: external_exports.string(),
+  label: external_exports.string(),
+  icon: external_exports.string(),
+  /** Stamped by each provider so the concat-fanned catalog stays routable. */
+  addonId: external_exports.string(),
+  configSchema: ConfigSchemaPassthrough,
+  supportsDiscovery: external_exports.boolean(),
+  caps: TargetKindCapsSchema
+});
+var TargetSchema = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  kind: external_exports.string(),
+  addonId: external_exports.string(),
+  enabled: external_exports.boolean(),
+  config: external_exports.record(external_exports.string(), external_exports.unknown())
+});
+var DiscoveredTargetSchema = external_exports.object({
+  kind: external_exports.string(),
+  suggestedName: external_exports.string(),
+  config: external_exports.record(external_exports.string(), external_exports.unknown())
+});
+var RenderedAsSchema = external_exports.object({
+  level: external_exports.string(),
+  format: NotificationFormatSchema,
+  attachmentsSent: external_exports.number().int().nonnegative(),
+  actionsSent: external_exports.number().int().nonnegative(),
+  truncated: external_exports.boolean(),
+  dropped: external_exports.array(external_exports.string())
+});
+var SendResultSchema = external_exports.object({
+  success: external_exports.boolean(),
+  error: external_exports.string().optional(),
+  renderedAs: RenderedAsSchema.optional()
+});
+var TestResultSchema = SendResultSchema;
+var notificationOutputCapability = {
+  name: "notification-output",
+  scope: "system",
+  mode: "collection",
+  methods: {
+    listTargetKinds: method(external_exports.object({}), external_exports.array(TargetKindSchema)),
+    listTargets: method(external_exports.object({}), external_exports.array(TargetSchema)),
+    discoverTargets: method(external_exports.object({
+      kind: external_exports.string(),
+      config: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+    }), external_exports.array(DiscoveredTargetSchema)),
+    send: method(external_exports.object({
+      targetId: external_exports.string(),
+      notification: NotificationSchema
+    }), SendResultSchema, { kind: "mutation" }),
+    testTarget: method(external_exports.object({
+      targetId: external_exports.string(),
+      sample: NotificationSchema.optional()
+    }), TestResultSchema, { kind: "mutation" }),
+    upsertTarget: method(external_exports.object({ target: TargetSchema }), TargetSchema, { kind: "mutation" }),
+    deleteTarget: method(external_exports.object({ targetId: external_exports.string() }), external_exports.void(), { kind: "mutation" }),
+    setTargetEnabled: method(external_exports.object({
+      targetId: external_exports.string(),
+      enabled: external_exports.boolean()
+    }), external_exports.void(), { kind: "mutation" })
   }
 };
 var MethodAccessSchema = external_exports.enum([
@@ -26597,7 +27101,14 @@ var pipelineAnalyticsCapability = {
       eventId: external_exports.string(),
       kind: MediaFileKindEnum.optional()
     }), external_exports.array(MediaFileSchema).readonly()),
-    getTrackMedia: method(external_exports.object({ trackId: external_exports.string() }), external_exports.array(MediaFileSchema).readonly()),
+    /** All media rows owned by a track. `kinds` narrows to a kind subset so a
+    *  client can fetch the SMALL display variants on open and pull the
+    *  multi-MB native variants only on demand (mirrors `getEventMedia.kind`).
+    *  Absent ⇒ every kind (back-compat). */
+    getTrackMedia: method(external_exports.object({
+      trackId: external_exports.string(),
+      kinds: external_exports.array(MediaFileKindEnum).optional()
+    }), external_exports.array(MediaFileSchema).readonly()),
     /**
     * Search object events by text query using CLIP cosine similarity.
     * Encodes `text` via the `embedding-encoder` cap, queries the
@@ -26646,58 +27157,6 @@ var pipelineAnalyticsCapability = {
     }) }
   }
 };
-var LEGACY_ICON = {
-  motion: "motion",
-  audio: "audio",
-  person: "person",
-  vehicle: "vehicle",
-  animal: "animal",
-  package: "package",
-  door: "door",
-  pir: "pir",
-  smoke: "smoke",
-  water: "water",
-  button: "button",
-  generic: "generic",
-  gas: "smoke",
-  vibration: "generic",
-  tamper: "generic",
-  presence: "person",
-  lock: "generic",
-  siren: "generic",
-  switch: "generic",
-  doorbell: "button"
-};
-function legacyIcon(iconId) {
-  return LEGACY_ICON[iconId] ?? "generic";
-}
-var CAP_TO_KIND = {
-  contact: "contact",
-  motion: "motion-sensor",
-  smoke: "smoke",
-  flood: "flood",
-  gas: "gas",
-  "carbon-monoxide": "carbon-monoxide",
-  vibration: "vibration",
-  tamper: "tamper",
-  presence: "presence",
-  "enum-sensor": "enum-sensor",
-  "event-emitter": "device-event",
-  "lock-control": "lock",
-  switch: "switch",
-  button: "button",
-  doorbell: "doorbell"
-};
-function buildDescriptor(capName, kind) {
-  const t = EVENT_TAXONOMY[kind];
-  if (t === void 0) throw new Error(`EVENT_KIND_BY_CAP: cap '${capName}' maps to unknown taxonomy kind '${kind}'`);
-  return {
-    ...t,
-    icon: legacyIcon(t.iconId)
-  };
-}
-var EVENT_KIND_BY_CAP = Object.freeze(Object.fromEntries(Object.entries(CAP_TO_KIND).map(([capName, kind]) => [capName, buildDescriptor(capName, kind)])));
-var EVENTFUL_CAP_NAMES = Object.keys(CAP_TO_KIND);
 var CameraPipelineConfigSchema = external_exports.object({
   engine: PipelineEngineChoiceSchema.optional(),
   steps: external_exports.array(PipelineStepInputSchema).readonly(),
@@ -27384,6 +27843,58 @@ var pipelineOrchestratorCapability = {
     })
   }
 };
+var LEGACY_ICON = {
+  motion: "motion",
+  audio: "audio",
+  person: "person",
+  vehicle: "vehicle",
+  animal: "animal",
+  package: "package",
+  door: "door",
+  pir: "pir",
+  smoke: "smoke",
+  water: "water",
+  button: "button",
+  generic: "generic",
+  gas: "smoke",
+  vibration: "generic",
+  tamper: "generic",
+  presence: "person",
+  lock: "generic",
+  siren: "generic",
+  switch: "generic",
+  doorbell: "button"
+};
+function legacyIcon(iconId) {
+  return LEGACY_ICON[iconId] ?? "generic";
+}
+var CAP_TO_KIND = {
+  contact: "contact",
+  motion: "motion-sensor",
+  smoke: "smoke",
+  flood: "flood",
+  gas: "gas",
+  "carbon-monoxide": "carbon-monoxide",
+  vibration: "vibration",
+  tamper: "tamper",
+  presence: "presence",
+  "enum-sensor": "enum-sensor",
+  "event-emitter": "device-event",
+  "lock-control": "lock",
+  switch: "switch",
+  button: "button",
+  doorbell: "doorbell"
+};
+function buildDescriptor(capName, kind) {
+  const t = EVENT_TAXONOMY[kind];
+  if (t === void 0) throw new Error(`EVENT_KIND_BY_CAP: cap '${capName}' maps to unknown taxonomy kind '${kind}'`);
+  return {
+    ...t,
+    icon: legacyIcon(t.iconId)
+  };
+}
+var EVENT_KIND_BY_CAP = Object.freeze(Object.fromEntries(Object.entries(CAP_TO_KIND).map(([capName, kind]) => [capName, buildDescriptor(capName, kind)])));
+var EVENTFUL_CAP_NAMES = Object.keys(CAP_TO_KIND);
 var ServerBootModeSchema = external_exports.enum([
   "workspace",
   "baked",
@@ -29104,7 +29615,28 @@ var FaceInfoSchema = external_exports.object({
   *  (`/addon/<addonId>/event-media/<keyFrameMediaKey>`). Absent when the
   *  track produced no key frame (e.g. native/onboard source) — the UI falls
   *  back to the inline `base64` face crop. */
-  keyFrameMediaKey: external_exports.string().optional()
+  keyFrameMediaKey: external_exports.string().optional(),
+  /** Winning identity-match cosine (0..1) for this face's track, when an
+  *  identity was auto-confirmed. Lets the UI surface WHY a face was assigned
+  *  (confidence badge / low-confidence audit). Absent on legacy rows and on
+  *  faces that were never auto-recognized. */
+  bestMatchScore: external_exports.number().optional(),
+  /** Native-scale face short side (px) at recognition time, when the runner
+  *  measured it. Lets the UI flag low-resolution auto-assignments. Absent on
+  *  legacy rows / runners that reported no native measure. */
+  nativeFaceShortSidePx: external_exports.number().optional(),
+  /** SUGGESTED identity for this face — a plausible-but-not-confident match that
+  *  MISSED auto-assignment (cosine in the suggestion band, or above threshold
+  *  but blocked only by the recognition size floor). Mutually exclusive with
+  *  `recognizedIdentityId` (a suggestion is NEVER an assignment): the face stays
+  *  UNASSIGNED and everything else keeps treating it as unrecognized — the UI
+  *  merely offers a one-tap "is this <name>?" confirm. Absent on legacy rows and
+  *  on faces that were auto-assigned or below the suggestion band. (2026-07-24) */
+  suggestedIdentityId: external_exports.string().optional(),
+  /** Peak identity-match cosine (0..1) for `suggestedIdentityId`, captured at the
+  *  same moment as `bestMatchScore` (track peak, at close). Lets the UI rank /
+  *  badge suggestion confidence. Present iff `suggestedIdentityId` is. (2026-07-24) */
+  suggestedMatchScore: external_exports.number().optional()
 });
 var FaceFilterEnum = external_exports.enum([
   "unassigned",
@@ -31427,36 +31959,6 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "view"
   },
-  "advancedNotifier.deleteRule": {
-    capName: "advanced-notifier",
-    capScope: "system",
-    addonId: null,
-    access: "delete"
-  },
-  "advancedNotifier.getHistory": {
-    capName: "advanced-notifier",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "advancedNotifier.getRules": {
-    capName: "advanced-notifier",
-    capScope: "system",
-    addonId: null,
-    access: "view"
-  },
-  "advancedNotifier.testRule": {
-    capName: "advanced-notifier",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
-  "advancedNotifier.upsertRule": {
-    capName: "advanced-notifier",
-    capScope: "system",
-    addonId: null,
-    access: "create"
-  },
   "alarmPanel.arm": {
     capName: "alarm-panel",
     capScope: "device",
@@ -33761,6 +34263,60 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "notificationRules.createRule": {
+    capName: "notification-rules",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "notificationRules.deleteRule": {
+    capName: "notification-rules",
+    capScope: "system",
+    addonId: null,
+    access: "delete"
+  },
+  "notificationRules.getConditionCatalog": {
+    capName: "notification-rules",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "notificationRules.getHistory": {
+    capName: "notification-rules",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "notificationRules.getRule": {
+    capName: "notification-rules",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "notificationRules.listRules": {
+    capName: "notification-rules",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "notificationRules.setRuleEnabled": {
+    capName: "notification-rules",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "notificationRules.testRule": {
+    capName: "notification-rules",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "notificationRules.updateRule": {
+    capName: "notification-rules",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "notifier.cancel": {
     capName: "notifier",
     capScope: "device",
@@ -35513,6 +36069,36 @@ var METHOD_ACCESS_MAP = Object.freeze({
     addonId: null,
     access: "create"
   },
+  "terminalSession.close": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "terminalSession.listProfiles": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "terminalSession.listSessions": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "view"
+  },
+  "terminalSession.openSession": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
+  "terminalSession.resize": {
+    capName: "terminal-session",
+    capScope: "system",
+    addonId: null,
+    access: "create"
+  },
   "toast.onToast": {
     capName: "toast",
     capScope: "system",